Nginx 源码安装

March 3, 2023

源码安装 nginx

下载

wget http://nginx.org/download/nginx-1.23.3.tar.gz

tar -zxvf nginx-1.23.3.tar.gz

cd nginx-1.23.3

修改源码版本(可选)

增加安全性，可以修改 nginx 默认的版本名称,如 nginx/1.23.3, 可任意修改为: sgfoot/100.0.0

vim src/core/nginx.h # 大约在14行左右

#define nginx_version      1023003
#define NGINX_VERSION      "1.23.3" # 版本号修改
#define NGINX_VER          "nginx/" NGINX_VERSION # 软件名称修改

安装

使用自定义用户和用户组,更加安全

开启模块:

with-http_ssl_module SSL模块
with-http_stub_status_module 统计功能模块,分析 nginx 性能
with-http_realip_module 获取真实IP模块
with-threads 线程池模块,提高nginx性能
with-http_gzip_static_module 开启压缩功能
--with-http_v2_module 用于启用 Nginx 中的 HTTP/2 功能模块，以提供更快速和高效的 Web 服务

yum -y install gcc pcre pcre-devel zlib zlib-devel openssl openssl-devel

# 添加用户和组， -s /sbin/nologin 不允许登陆的帐号，-M 没有/home的帐号，-g 添加到 nginx 组中
sudo groupadd nginx
sudo useradd -s /sbin/nologin -M -g nginx nginx


# 配置
./configure \
    --user=nginx \
    --group=nginx \
    --prefix=/usr/local/nginx \
    --with-http_ssl_module \
    --with-http_stub_status_module \
    --with-http_realip_module \
    --with-threads \
    --with-http_gzip_static_module \
    --with-http_v2_module

# 编译
make

# 安装
make install

验证

-> # /usr/local/nginx/sbin/nginx -V        
nginx version: fox/10.230.30
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-44) (GCC) 
built with OpenSSL 1.0.2k-fips  26 Jan 2017
TLS SNI support enabled
configure arguments: --user=www --group=www --prefix=/usr/local/nginx --with-http_ssl_module --with-http_stub_status_module --with-http_realip_module --with-threads

加入 systemd

创建 systemd 文件


cat > /usr/lib/systemd/system/nginx.service <<EOF
[Unit]
Description=The NGINX HTTP and reverse proxy server
After=syslog.target network.target remote-fs.target nss-lookup.target

[Service]
User=root
Group=root
Type=forking
PIDFile=/var/run/nginx.pid
ExecStartPre=/usr/local/nginx/sbin/nginx -t
ExecStart=/usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf
ExecReload=/usr/local/nginx/sbin/nginx -s reload
ExecStop=/bin/kill -s QUIT \$MAINPID
PrivateTmp=true
ReRestart=always
RestartSec=3s

[Install]
WantedBy=multi-user.target
EOF

命令使用

# 刷新 systemd
systemctl daemon-reload

# 启动 nginx
systemctl start nginx

# 停止 
systemctl stop nginx

# 重启
systemctl restart nginx

推荐配置

worker_processes 设置CPU核数, lscpu Core(s) 可以查看,最多设置8个进程数.

user  nginx nginx;
worker_processes 8;
worker_cpu_affinity 10000000 01000000 00100000 00010000 00001000 00000100 00000010 00000001
worker_rlimit_nofile 51200;

error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

pid        logs/nginx.pid;


events {
    use epoll;
    worker_connections  1024; # 是每个worker进程允许的最多连接数，
    multi_accept on;
}


http {
    include       mime.types;
    default_type  application/octet-stream;
    charset utf-8; 

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  logs/access.log  main;

    sendfile       on;     # 加速文件传输效率
    tcp_nopush     on; # 减小了额外开销，提高网络效率
    tcp_nodelay    on; # 数据包无论大小都立即发送,提高实时性和响应速度。
    server_tokens off; # 隐藏版本号

    #keepalive_timeout  0;
    keepalive_timeout  65;                  # 设置服务器保持该连接的最长时间
    client_max_body_size 100m;         # 主要是这个参数，限制了上传文件大大小

    # 开启压缩
    gzip  on;
    gzip_min_length  1k;
    gzip_buffers     4 16k;
    gzip_http_version 1.1;
    gzip_comp_level 9;
    gzip_types       text/plain application/x-javascript text/css application/xml text/javascript application/x-httpd-php;
    gzip_vary on;

    include conf.d/*.conf;
}

conf.d 文件夹配置实例:

server {
   listen       8000 http2;
   server_name  test.cc;
   server_tokens off; # 隐藏版本号

   location / {
        return 200;
   }
}

浏览目录列表
支持播放视频

server {
    listen       8100;
    listen  [::]:8100;
    server_name  localhost sgfoot.io;

    #charset koi8-r;
    # charset utf-8;
    charset utf-8,gbk;

    access_log  /var/log/nginx/sgfoot.io.log  main;

    location / {
        root /usr/share/nginx/html;
        index  index.html index.htm;
        autoindex on;
        # 使用 urlencode 模块对目录名称进行编码
        autoindex_format html;
        autoindex_localtime on;
        autoindex_exact_size off;  
    }
            
    location ~ \.(mp4|avi|flv|mov|wmv|mkv)$ {
        root /usr/share/nginx/html;
        mp4;
        mp4_buffer_size 1024m;
        mp4_max_buffer_size 5012m;
    }
    # location = /a {
    #     return 200 "a1";
    #     add_header Content-Type text/plain;
    # }
    location ~ ^/a/?$ {
        return 404;
        add_header Content-Type text/plain;
    }
    #error_page  404              /404.html;

    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   html;
    }
}

浏览目录列表
支持播放视频

server {
    listen       8100;
    listen  [::]:8100;
    server_name  localhost;

    #charset koi8-r;
    # charset utf-8;
    charset utf-8,gbk;

    access_log  logs/nginx-8100-access.log  main;

    location / {
        add_header Content-Type text/plain;
        return 200 "ok";
    }

    error_page  404              /404.html;

    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   html;
    }
}

server {
    listen 443 ssl http2;
    server_name example.com;

    ssl_certificate /path/to/ssl_certificate.crt;;
    ssl_certificate_key /path/to/ssl_certificate.key;
    ssl_protocols TLSv1.2 TLSv1.3;        
    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout  10m;
    ssl_ciphers HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers on;

    location / {
        return 200 "ok";
   }
    # 其他配置项...

}

参考

关于作者

我的博客：https://yezihack.github.io

一日不学则面目可憎也，吾学也。