Nginx靜態(tài)文件的配置與安全認(rèn)定
作者：佚名
Nginx靜態(tài)文件需要我們不斷的維護(hù)，但是要如何才能進(jìn)行配置和維護(hù)呢？下面的命令會對你有所幫助，希望大家享受Nginx的服務(wù)。
本文主要講述Nginx靜態(tài)文件，怎樣創(chuàng)建Nginx靜態(tài)文件項目。這些內(nèi)容都是一些門戶網(wǎng)站和技術(shù)論壇找到的，中間可能有不少錯誤是我沒有挑出的，歡迎大家 指正。
我們的目標(biāo)是配置一個服務(wù)最快且cpu/io利用最有效的服務(wù)器，更重要的是一個安全的web服務(wù)器，下面的配置文件適用于***版Nginx
- #######################################################
- ### Calomel.org /etc/Nginx.conf BEGIN
- #######################################################
- #
- pid /var/run/Nginx.pid;
- user Nginx Nginx;
- worker_processes 2;
- events {
- worker_connections 1024;
- }
- http {
- ## MIME types
- include mime.types;
- # types {
- # image/gif gif;
- # image/jpeg jpg;
- # image/png png;
- # image/bmp bmp;
- # image/x-icon ico;
- # text/css css;
- # text/html html;
- # text/plain bob;
- # text/plain txt;
- }
- default_type application/octet-stream;
- ## Size Limits
- client_body_buffer_size 8k;
- client_header_buffer_size 1k;
- client_max_body_size 1k;
- large_client_header_buffers 1 1k;
- ## Timeouts
- client_body_timeout 5;
- client_header_timeout 5;
- keepalive_timeout 5 5;
- send_timeout 5;
- ## General Options
- ignore_invalid_headers on;
- limit_zone gulag $binary_remote_addr 1m;
- recursive_error_pages on;
- sendfile on;
- server_name_in_redirect off;
- server_tokens off;
- ## TCP options
- tcp_nodelay on;
- tcp_nopush on;
- ## Compression
- gzip on;
- gzip_static on;
- gzip_buffers 16 8k;
- gzip_comp_level 9;
- gzip_http_version 1.0;
- gzip_min_length 0;
- gzip_types text/plain text/html text/css image/x-icon image/
bmp;- gzip_vary on;
- ## Log Format
- log_format main '$remote_addr $host $remote_user [$time_
local] "$request" '- '$status $body_bytes_sent "$http_referer" "$http_user_
agent" "$gzip_ratio"';- ## Deny access to any host other than (www.)mydomain.com
- server {
- server_name _; #default
- return 444;
- }
- ## Server (www.)mydomain.com
- server {
- access_log /var/log/Nginx/access.log main buffer=32k;
- error_log /var/log/Nginx/error.log info;
- expires 31d;
- limit_conn gulag 5;
- listen 127.0.0.1:8080 rcvbuf=64k backlog=128;
- root /disk01/htdocs;
- server_name mydomain.com www.mydomain;
- ## SSL Options (only enable if you use a SSL certificate)
- # ssl on;
- # ssl_certificate /ssl_keys/mydomain.com_ssl.crt;
- # ssl_certificate_key /ssl_keys/mydomain_ssl.key;
- # ssl_ciphers HIGH:!ADH:!MD5;
- # ssl_prefer_server_ciphers on;
- # ssl_protocols SSLv3;
- # ssl_session_cache shared:SSL:1m;
- # ssl_session_timeout 5m;
- ## Only allow GET and HEAD request methods
- if ($request_method !~ ^(GET|HEAD)$ ) {
- return 444;
- }
- ## Deny illegal Host headers
- if ($host !~* ^(mydomain.com|www.mydomain.com)$ ) {
- return 444;
- }
- ## Deny certain User-Agents (case insensitive)
- ## The ~* makes it case insensitive as opposed to just a ~
- if ($http_user_agent ~* (Baiduspider|Jullo) ) {
- return 444;
- }
- ## Deny certain Referers (case insensitive)
- ## The ~* makes it case insensitive as opposed to just a ~
- if ($http_referer ~* (babes|click|diamond|forsale|girl|jewelry|
love|nudit|organic|poker|porn|poweroversoftware|sex|teen|
video|webcam|zippo) ) {- return 444;
- }
- ## Redirect from www to non-www
- if ($host = 'www.mydomain.com' ) {
- rewrite ^/(.*)$ http://mydomain.com/$1 permanent;
- }
- ## Stop Image and Document Hijacking
- location ~* (\.jpg|\.png|\.css)$ {
- if ($http_referer !~ ^(http://mydomain.com) ) {
- return 444;
- }
- }
- ## Restricted Access directory
- location ^~ /secure/ {
- allow 127.0.0.1/32;
- allow 10.10.10.0/24;
- deny all;
- auth_basic "RESTRICTED ACCESS";
- auth_basic_user_file /var/www/htdocs/secure/access_list;
- }
- ## Only allow these file types to document root
- location / {
- if ($request_uri ~* (^\/|\.html|\.jpg|\.org|\.png|\.css|
favicon\.ico|robots\.txt)$ ) {- break;
- }
- return 444;
- }
- ## Serve an empty 1x1 gif _OR_ an error 204 (No Content)
for favicon.ico- location = /favicon.ico {
- #empty_gif;
- return 204;
- }
- ## System Maintenance (Service Unavailable)
- if (-f $document_root/system_maintenance.html ) {
- error_page 503 /system_maintenance.html;
- return 503;
- }
- ## All other errors get the generic error page
- error_page 400 401 402 403 404 405 406 407 408 409 410 411
412 413 414 415 416 417- 500 501 502 503 504 505 /error_page.html;
- location /error_page.html {
- internal;
- }
- }
- }
- #
- #######################################################
- ### Calomel.org /etc/Nginx.conf END
- #######################################################
以上就是對Nginx靜態(tài)文件命令的詳細(xì)介紹希望大家有所收獲。
【編輯推薦】
責(zé)任編輯：張浩
來源：
博客園
