阿里雲Ubuntu 部署 ngnix+https

一、安裝nginx

1. 下載nginx壓縮包 鏈接: http://nginx.org/en/download.html.
   
2. 安裝依賴庫

//a.安裝gcc g++的依賴庫
apt-get install build-essential
apt-get install libtool

//b.安裝pcre依賴庫
sudo apt-get update
sudo apt-get install libpcre3 libpcre3-dev

//c.安裝zlib依賴庫
apt-get install zlib1g-dev
//d. 安裝ssl依賴庫
apt-get install openssl
//e 安裝OpenSSL庫
apt-get install openssl libssl-dev 

3. 解壓目錄文件

cd /usr/local (進入壓縮包文件目錄)
tar -zxvf nginx-1.18.0.tar.gz 
cd /usr/local/nginx-1.18.0(進入文件目錄)
./configure --prefix=/usr/local/nginx --with-http_ssl_module(配置參數)
//執行完之後
make
make install 即可完成安裝

二、配置nginx.conf文件

1. 首先創建cert目錄用於存放SSL證書文件

mkdir /usr/local/nginx/conf/cert

2. 配置nginx.conf文件

user  root;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';
    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;

	# HTTPS server
    server {
        listen       8088;
        server_name  47.114.135.132;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;
		
		location ~ .*\.(gif|jpg|jpeg|png)$ { 
		
            expires 24h; 

            root /usr/local/ftp/www/images/;#指定圖片存放路徑 

            proxy_store on; 

            proxy_store_access user:rw group:rw all:rw; 

            proxy_temp_path         /usr/local/ftp/www/images/;#代理臨時路徑

            proxy_redirect          off; 

            proxy_set_header        Host 47.114.135.132; 

            proxy_set_header        X-Real-IP $remote_addr; 

            proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for; 


            client_max_body_size    10m; 

            client_body_buffer_size 1280k; 

            proxy_connect_timeout  900; 

            proxy_send_timeout      900; 

            proxy_read_timeout      900; 

            proxy_buffer_size      40k; 

            proxy_buffers          40 320k; 

            proxy_busy_buffers_size 640k; 

            proxy_temp_file_write_size 640k; 

            if ( !-e $request_filename) 

            { 

                proxy_pass  http://47.114.135.132:8088;#代理訪問地址 

            } 

        }

        location / {
            root   html;
            index  website/index.html website/index.htm;
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
		
    }


 #HTTPS server
    server {
		listen 443 ssl;
		server_name 域名;
		ssl_certificate   cert/zhengshu.pem;
		ssl_certificate_key  cert/zhengshu.key;
		ssl_session_timeout 5m;
		ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
		ssl_protocols SSLv2 SSLv3 TLSv1.2; 
        port_in_redirect on;
		location / {
				#修改爲要跳轉到你服務器的端口
			   proxy_pass   http://47.114.135.132:8080/test/index.html;
			   proxy_set_header Host    $host; 
			   proxy_set_header X-Real-IP  $remote_addr; 
			   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
			   proxy_set_header   X-Forwarded-Proto $scheme;
			   client_max_body_size  100m; 
			   client_body_buffer_size 256k; 
			   proxy_connect_timeout  60; 
			   proxy_send_timeout   30; 
			   proxy_read_timeout   30; 
			   proxy_buffer_size   8k; 
			   proxy_buffers    8 64k; 
			   proxy_busy_buffers_size 64k; 
			   proxy_temp_file_write_size 64k; 
			   
  

		}
		
		location /test{
		
			   proxy_pass   http://47.114.135.132:8080/test;
			   proxy_set_header Host    $host; 
			   proxy_set_header X-Real-IP  $remote_addr; 
			   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
			   proxy_set_header   X-Forwarded-Proto $scheme;
			   client_max_body_size  100m; 
			   client_body_buffer_size 256k; 
			   proxy_connect_timeout  60; 
			   proxy_send_timeout   30; 
			   proxy_read_timeout   30; 
			   proxy_buffer_size   8k; 
			   proxy_buffers    8 64k; 
			   proxy_busy_buffers_size 64k; 
			   proxy_temp_file_write_size 64k; 
			   
		}
		
		location ~.*(js|css|png|gif|jpg|img|woff|ttf|otf|ico)$ {

			root /usr/local/program/tomcat/apache-tomcat-8.5.42/webapps/test;

		}

    }
	
	server {
		listen       8888;
       		 server_name  47.114.135.132;
		location /{
				proxy_pass    http://c08b2c34cefd.ngrok.io/;
		}
	}
			
	


}

3. 進入sbin目錄，啓動nginx就可以了

cd /usr/local/nginx/sbin
./nginx