Nginx配置以及域名轉發

12-31

工程中的nginx配置

#user nobody; worker_processes 24; error_log /home/xxx/opt/nginx/logs/error.log; pid /home/xxx/opt/nginx/run/nginx.pid;


events {

    use epoll;

    worker_connections  102400;

}
http {

    include /home/xxx/opt/nginx/conf.d/mime.types;

    default_type  application/octet-stream;

    log_format main  $upstream_response_time $request_time $remote_addr - $remote_user [$time_local] [$http_true_client_ip]

                     $upstream_addr $http_host $request $request_body "$status" $body_bytes_sent "$http_referer"

                     "$http_accept_language" "$http_user_agent" "$http_x_forwarded_for" ;
    log_format json { "@timestamp": "$time_iso8601",

                       "response_time": "$upstream_response_time",

                       "request_time": $request_time,

                       "remote_addr": "$remote_addr",

                       "remote_user": "$remote_user",

                       "upstream_addr": "$upstream_addr",

                       "http_host": "$http_host",

                       "request": "$request",

                       "status": $status,

                       "body_bytes_sent": $body_bytes_sent,

                       "http_referer": "$http_referer",

                       "verb": "$request_method",

                       "url":"$request_uri",

                       "http_accept_language": "$http_accept_language",

                       "x_forwarded_for": "$http_x_forwarded_for",

                       "agent": "$http_user_agent" };
    access_log  /home/xxx/opt/nginx/logs/access.log  main;

    fastcgi_intercept_errors on;

    charset utf-8;

    server_names_hash_bucket_size 128;

    fastcgi_buffers 8 128k;

    server_tokens off;

    client_header_buffer_size 4k;

    large_client_header_buffers 4 32k;

    client_max_body_size 300m;

    sendfile on;

    tcp_nopush on;

    keepalive_timeout 60;

    tcp_nodelay on;

    client_body_buffer_size 512k;

    proxy_connect_timeout 5;

    proxy_read_timeout 60;

    proxy_send_timeout 5;

    proxy_ignore_client_abort on;

    proxy_buffer_size 16k;

    proxy_buffers 4 64k;

    proxy_busy_buffers_size 128k;

    proxy_temp_file_write_size 128k;

    gzip on;

    gzip_min_length 1k;

    gzip_buffers 4 16k;

    gzip_http_version 1.1;

    gzip_comp_level 2;

    gzip_types text/plain application/x-javascript application/javascript text/css application/xml;

    gzip_vary on;

    limit_conn_zone $binary_remote_addr zone=addr:10m;

    limit_req_zone $binary_remote_addr zone=hbhs:10m rate=1r/s;
    #cache begin

    proxy_buffering on;

    proxy_cache_valid 200 304 301 302 10d;

    proxy_cache_path /home/xxx/data/nginx/cache levels=1:2 keys_zone=mycache:8m max_size=1000m inactive=600m;

    proxy_temp_path /home/xxx/data/nginx/temp;

    #cache end

#add_header X-Frame-Options SAMEORIGIN; include /home/xxx/opt/nginx/conf.d/*.conf; max_ranges 1; }

　　nginx配置詳解參考：Nginx配置文件（nginx.conf）配置詳解

　　 include /home/xxx/opt/nginx/conf.d/mime.types;

MIME-type和Content-Type的關係：當web伺服器收到靜態的資源文件請求時，依據請求文件的後綴名在伺服器的MIME配置文件中找到對應的MIME Type，再根據MIME Type設置HTTP Response的Content-Type，然後瀏覽器根據Content-Type的值處理文件。


types {

    Content-Type                          文件名後綴    
    text/html                             html htm shtml;

    text/css                              css;

    text/xml                              xml;

    image/gif                             gif;

    image/jpeg                            jpeg jpg;

    application/javascript                js;

    application/atom+xml                  atom;

    application/rss+xml                   rss;
    text/mathml                           mml;

    text/plain                            txt;

    text/vnd.sun.j2me.app-descriptor      jad;

    text/vnd.wap.wml                      wml;

    text/x-component                      htc;
    image/png                             png;

    image/tiff                            tif tiff;

    image/vnd.wap.wbmp                    wbmp;

    image/x-icon                          ico;

    image/x-jng                           jng;

    image/x-ms-bmp                        bmp;

    image/svg+xml                         svg svgz;

    image/webp                            webp;
    application/font-woff                 woff;

    application/java-archive              jar war ear;

    application/json                      json;

    application/mac-binhex40              hqx;

    application/msword                    doc;

    application/pdf                       pdf;

    application/postscript                ps eps ai;

    application/rtf                       rtf;

    application/vnd.apple.mpegurl         m3u8;

    application/vnd.ms-excel              xls;

    application/vnd.ms-fontobject         eot;

    application/vnd.ms-powerpoint         ppt;

    application/vnd.wap.wmlc              wmlc;

    application/vnd.google-earth.kml+xml  kml;

    application/vnd.google-earth.kmz      kmz;

    application/x-7z-compressed           7z;

    application/x-cocoa                   cco;

    application/x-java-archive-diff       jardiff;

    application/x-java-jnlp-file          jnlp;

    application/x-makeself                run;

    application/x-perl                    pl pm;

    application/x-pilot                   prc pdb;

    application/x-rar-compressed          rar;

    application/x-redhat-package-manager  rpm;

    application/x-sea                     sea;

    application/x-shockwave-flash         swf;

    application/x-stuffit                 sit;

    application/x-tcl                     tcl tk;

    application/x-x509-ca-cert            der pem crt;

    application/x-xpinstall               xpi;

    application/xhtml+xml                 xhtml;

    application/xspf+xml                  xspf;

    application/zip                       zip;
    application/octet-stream              bin exe dll;

    application/octet-stream              deb;

    application/octet-stream              dmg;

    application/octet-stream              iso img;

    application/octet-stream              msi msp msm;
    application/vnd.openxmlformats-officedocument.wordprocessingml.document    docx;

    application/vnd.openxmlformats-officedocument.spreadsheetml.sheet          xlsx;

    application/vnd.openxmlformats-officedocument.presentationml.presentation  pptx;
    audio/midi                            mid midi kar;

    audio/mpeg                            mp3;

    audio/ogg                             ogg;

    audio/x-m4a                           m4a;

    audio/x-realaudio                     ra;

video/3gpp 3gpp 3gp; video/mp2t ts; video/mp4 mp4; video/mpeg mpeg mpg; video/quicktime mov; video/webm webm; video/x-flv flv; video/x-m4v m4v; video/x-mng mng; video/x-ms-asf asx asf; video/x-ms-wmv wmv; video/x-msvideo avi; }

參考：nginx proxy_pass和rewrite的區別 Nginx之proxy_redirect詳解

location基本配置

location /A/B{ proxy_pass http://XXX.com/A/B;#請求轉向定義的伺服器列表 #proxy_redirect off; proxy_set_header Host XXX.com; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 10m; #允許客戶端請求的最大單文件位元組數 client_body_buffer_size 128k; #緩衝區代理緩衝用戶端請求的最大位元組數， proxy_connect_timeout 180; #nginx跟後端伺服器連接超時時間(代理連接超時) proxy_send_timeout 180; #後端伺服器數據回傳時間(代理髮送超時) proxy_read_timeout 180; #連接成功後，後端伺服器響應時間(代理接收超時) proxy_buffer_size 128k; #設置代理伺服器（nginx）保存用戶頭信息的緩衝區大小 proxy_buffers 4 256k; #proxy_buffers緩衝區，網頁平均在32k以下的話，這樣設置 proxy_busy_buffers_size 512k; #高負荷下緩衝大小（proxy_buffers*2） proxy_temp_file_write_size 512k; #設定緩存文件夾大小，大於這個值，將從upstream伺服器傳 }

參考：微信網頁授權流程

nginx配置域名轉發

　　場景：有兩個微信公眾號A、B，微信公眾號管理平台配置的回調url分別是 http://A.com、http://B.com。微信公眾號B如果需要獲取微信公眾號A的用戶信息，對應的授權URL如下。

https://open.weixin.qq.com/connect/oauth2/authorize?appid=wx43a850f87498127d&redirect_uri=http%3A%2F%2FA.com%2F&response_type=code&scope=snsapi_userinfo&state=STATE#wechat_redirect

這樣就會面臨一個問題，微信公眾號B就無法獲取到code信息了。

騰訊返回的授權碼URL: http://A.com/?code=001Rk8ue1Ntnxz0udwue1kbUte1Rk8uU&state=STATE

所以需要微信公眾號A對應的Nginx做一下域名轉發，如下。

微信公眾號A對應的Nginx配置（實現域名轉發，將微信公眾號A對應的域名轉發成微信公眾號B對應的域名）

location /微信公眾號B標識/XXX { rewrite ^/微信公眾號B標識/(.*) http://B.com/$1 permanent; proxy_set_header Host B.com; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 20m; client_body_buffer_size 128k; proxy_connect_timeout 90; proxy_send_timeout 90; proxy_read_timeout 90; proxy_buffer_size 4k; proxy_buffers 4 32k; proxy_busy_buffers_size 64K; proxy_temp_file_write_size 64k; }