nginx openresty

openResty 설치

centos 에 yum 창 고 를 추가 하여 설치

    yum -y install readline-devel pcre-devel openssl-devel
    
    #yum  
    #sudo yum install -y yum-utils
    #sudo yum-config-manager --add-repo https://openresty.org/package/centos/openresty.repo
    #sudo yum install -y openresty
    
    #    
    cd /data
    curl -O http://mirrors.d.com/software/openresty/1.13.6/openresty-1.13.6.1.tar.gz
    tar -zxvf openresty-1.13.6.1.tar.gz
    cd openresty-1.13.6.1
    ./configure 
    make 
    sudo  make install 

    #     /usr/local/openresty   

    # conf     log    /data/openresty 
    mkdir -p /data/openresty
    cp -R /usr/local/openresty/nginx/conf  /data/openresty
    rm -rf /usr/local/openresty/nginx/conf
    ln -s /data/openresty/conf /usr/local/openresty/nginx/conf

    mkdir -p /data/openresty/logs
    rm -rf /usr/local/openresty/nginx/logs
    ln -s /data/openresty/logs /usr/local/openresty/nginx/logs

    #  
    /usr/local/openresty/nginx/sbin/nginx
    #        
    # /usr/local/openrestry/nginx/sbin/nginx  -t
    #        
    # /usr/local/openrestry/nginx/sbin/nginx  -s reload

openresty 설정
서버 에서 클 라 이언 트 의 실제 ip 획득

location /{  
                proxy_pass http://192.168.1.111:8080;  
                proxy_set_header Host $host;  
                proxy_set_header X-Real-IP $remote_addr;  
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }  

## node 
var real_ip = req.get("X-Real-IP") || req.get("X-Forwarded-For") || req.ip;  

openresty 서버 이름과 버 전 숨 기기, http 서버 헤더 복사

http{
    server_tokens off;  #  server  
}

location / {
        #  http server
        header_filter_by_lua 'ngx.header.server = "apache/2.4"';
    }

이미지 서비스, 정적 파일

    server {
        listen       80;
        server_name  10.0.12.75;

        #charset koi8-r;
        #access_log  logs/host.access.log  main;
        ###  path  /data/image/test.jpg 

        location /image {

            add_header 'Access-Control-Allow-Origin' '*';
            add_header Cache-Control no-store;

            root   /data/;
            autoindex on;   #  
            #index  index.html index.htm;
        }
    }

https
openssl 설치

#  openssl
curl -O https://www.openssl.org/source/openssl-1.0.2n.tar.gz

#  
#      
./config --prefix=/usr/local/openssl
./config -t
make
make install

# /usr/local/openssl/bin       
# vim  /etc/profile
export OPENSSL_HOME=/usr/local/openssl
export PATH=$PATH:$OPENSSL_HOME/bin
# source /etc/profile

# openssl version

openssl 개인 CA 구현
레 퍼 런 스https://www.cnblogs.com/AloneSword/p/4656492.html
배치 하 다.

 #     https
server{

    listen 8080;
    server_name dmp.d.com;

    return 301 https://$server_name/$request_uri;

}

server{
    #listen 8080;
    listen 443 ssl;
    server_name dmp.d.com;
    ssl on;
    ssl_certificate cert/dmp.d.com.crt;
    ssl_certificate_key cert/dmp.d.com.key;


    location / {

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        root  /data/volume/DMP/frontend/dist;
        error_page  404 400           /404.html;
    }

    location = /404.html {
            root html;
    }

}