配置NGINX網站

1. 安裝nginx#

1
sudo apt-get install nginx

2. 配置網站配置檔#

正常來說，nginx的網站配置檔會在「/etc/nginx/sites-available」之下，並建一個**Symbolic link至「/etc/nginx/sites-enabled」**下。

所以會看到「/etc/nginx/nginx.conf」有一句「 include /etc/nginx/sites-enabled/*;」，因此可以為每個網站建立不同的配置檔。

1
user www-data;
2
worker_processes auto;
3
pid /run/nginx.pid;
4
include /etc/nginx/modules-enabled/*.conf;
5

6
events {
7
        worker_connections 768;
8
        # multi_accept on;
9
}
10

11
http {
12
        ...
13
        include /etc/nginx/sites-enabled/*;
14
        ...
15
}

這時候我們可以在「/etc/nginx/sites-available」建立一個用來放網站配置的配置檔

1
sudo vim /etc/nginx/sites-available/your-domain.name

然後建立軟連結至「/etc/nginx/sites-enabled」之下

1
sudo ln -sf /etc/nginx/sites-available/your-domain.name /etc/nginx/sites-enabled/your-domain.name

測試配置是否正常，並重新啟動Nginx伺服器

1
sudo nginx -t
2
sudo systemctl restart nginx

2. 常見配置方式#

配置HTTP (80 port)#

轉發至localhost:3000並啟用index

1
server {
2
    listen 80;
3
    listen [::]:80;
4
    index index.html;
5
    server_name your-domain.name;    # 若沒有domain的話，該行可以拿掉
6

7
    location / {
8
        proxy_pass http://localhost:3000;
9
        proxy_http_version 1.1;
10
        proxy_set_header Upgrade $http_upgrade;
11
        proxy_set_header Connection 'upgrade';
12
        proxy_set_header Host $host;
13
        proxy_cache_bypass $http_upgrade;
14
    }
15
}

轉發至docker啟用的網站，並設定允許上傳大小及根目錄

1
server {
2
    root /var/www/html;
3
    listen 80;
4
    listen [::]:80;
5
    server_name your-domain.name;
6

7
    location / {
8
        proxy_pass http://localhost:5000;
9
        proxy_redirect     off;
10
        proxy_set_header   Upgrade $http_upgrade;
11
        proxy_set_header   Connection 'upgrade';
12
        proxy_set_header   Host $host;
13
        proxy_set_header   X-Real-IP $remote_addr;
14
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
15
        proxy_set_header   X-Forwarded-Host $server_name;
16
        proxy_set_header   X-Forwarded-Proto $scheme;
17
        proxy_cache_bypass $http_upgrade;
18
    }
19

20
    client_max_body_size 256M;
21
}

配置HTTPS (SSL 443 port)#

設定SSL並轉發80至443

1
server {
2
    root /var/www/html;
3
    listen [::]:443 ssl ipv6only=on;
4
    listen 443 ssl;
5
    server_name your-domain.name;
6

7
    ssl_certificate /etc/letsencrypt/live/your-domain.name/fullchain.pem;
8
    ssl_certificate_key /etc/letsencrypt/live/your-domain.name/privkey.pem;
9
    include /etc/letsencrypt/options-ssl-nginx.conf;
10
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
11

12
    location / {
13
        proxy_pass http://localhost:5000;
14
        proxy_redirect     off;
15
        proxy_set_header   Upgrade $http_upgrade;
16
        proxy_set_header   Connection 'upgrade';
17
        proxy_set_header   Host $host;
18
        proxy_set_header   X-Real-IP $remote_addr;
19
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
20
        proxy_set_header   X-Forwarded-Host $server_name;
21
        proxy_set_header   X-Forwarded-Proto $scheme;
22
        proxy_cache_bypass $http_upgrade;
23
    }
24

25
    client_max_body_size 256M;
26
}
27

28
server {
29
    if ($host = your-domain.name) {
30
        return 301 https://$host$request_uri;
31
    } # managed by Certbot
32

33

34
    listen 80;
35
    listen [::]:80;
36
    server_name your-domain.name;
37
    return 404;
38
}

1. 安裝nginx#

2. 配置網站配置檔#

2. 常見配置方式#

配置HTTP (80 port)#

配置HTTPS (SSL 443 port)#

文章分享

目錄