甜腻的嘴角|强大,Nginx配置一键生成

推荐阅读:
关于 JVM , 都有哪些面试最常考的点需要重点掌握?
面试却被 Java 基础难住了?不要怕 , 我来带你一起手撕面试官阿里一线架构师分享的技术图谱 , 进阶加薪全靠它
前因【甜腻的嘴角|强大,Nginx配置一键生成】关于Nginx部署、配置的文章网上已经发布过很多 , 包括我自己也私藏了不少还发布过两篇:

  • 后端必备 Nginx 配置
  • 前端必备 Nginx 配置
整理出来为的就是需要的时候 , 复制、粘贴就能使用 。
然而千奇百怪的实际开发中 , 你肯定需要增删Nginx配置 。 你就得上网搜一下 , 复制粘贴出bug了又得调一下...
搞定还得保存下来以备后患 。 多了不好找还得整理...就搞得很麻烦
后果今天我给大家推荐一款"Nginx配置利器" , 配配变量就能一键生成常用配置 。 和繁琐低效配置说再见
甜腻的嘴角|强大,Nginx配置一键生成
  • 网站链接:nginxconfig 在线配置网站
  • nginxconfig github项目
nginxconfig 目前支持:
  • Angular、React、Vue、Node.js
  • PHP、Python
  • wordpress、Magento、Drupal
  • 缓存、Https、日志等各种配置...
使用实现用户访问*.myweb.com域名自动跳转到myweb.com配置 , 并且开启http强制跳转到https的配置 。
甜腻的嘴角|强大,Nginx配置一键生成
甜腻的嘴角|强大,Nginx配置一键生成配置完之后 , 下方还有安装步骤指导你配置生效 。 交互体验相当好
甜腻的嘴角|强大,Nginx配置一键生成生成配置 /etc/nginx/sites-available/myweb.com.conf 如下:
server { listen 443 ssl http2; listen [::]:443 ssl http2; server_name myweb.com; root /var/www/myweb.com/public; # SSL ssl_certificate /etc/letsencrypt/live/myweb.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/myweb.com/privkey.pem; ssl_trusted_certificate /etc/letsencrypt/live/myweb.com/chain.pem; # security include nginxconfig.io/security.conf; # index.html fallback location / {try_files $uri $uri/ /index.html; } # additional config include nginxconfig.io/general.conf;}# subdomains redirectserver { listen 443 ssl http2; listen [::]:443 ssl http2; server_name *.myweb.com; # SSL ssl_certificate /etc/letsencrypt/live/myweb.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/myweb.com/privkey.pem; ssl_trusted_certificate /etc/letsencrypt/live/myweb.com/chain.pem; return 301 $request_uri;}# HTTP redirectserver { listen 80; listen [::]:80; server_name .myweb.com; include nginxconfig.io/letsencrypt.conf; location / {return 301 $request_uri; }}网站下方还罗列了推荐的nginx配置、安全配置...以作参考
/etc/nginx/nginx.conf
# Generated by nginxconfig.io# ;0.php=falsepid /run/nginx.pid;worker_processes auto;worker_rlimit_nofile 65535;events { multi_accept on; worker_connections 65535;}http { charset utf-8; sendfile on; tcp_nopush on; tcp_nodelay on; server_tokens off; log_not_found off; types_hash_max_size 2048; client_max_body_size 16M; # MIME include mime.types; default_type application/octet-stream; # logging access_log /var/log/nginx/access.log; error_log /var/log/nginx/error.log warn; # SSL ssl_session_timeout 1d; ssl_session_cache shared:SSL:10m; ssl_session_tickets off; # Diffie-Hellman parameter for DHE ciphersuites ssl_dhparam /etc/nginx/dhparam.pem; # Mozilla Intermediate configuration ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; # OCSP Stapling ssl_stapling on; ssl_stapling_verify on; resolver 1.1.1.1 1.0.0.1 8.8.8.8 8.8.4.4 208.67.222.222 208.67.220.220 valid=60s; resolver_timeout 2s; # load configs include /etc/nginx/conf.d/*.conf; include /etc/nginx/sites-enabled/*;}


推荐阅读