在ubuntu系统部署Nginx

$ ps -ef | grep nginx
root     31450 31429  0 02:04 pts/2    00:00:00 grep --color=auto nginx  

$ dpkg -l | grep zlib

$ apt-get install build-essential
$ apt-get install libtool

$ apt-get update
$ apt-get install libpcre3 libpcre3-dev

$ apt-get install zlib1g-dev

$ apt-get install openssl libssl-dev

$ wget https://nginx.org/download/nginx-1.19.8.tar.gz

$ tar -zxvf nginx-1.19.8.tar.gz

$ mv nginx-1.19.8 nginx

$ mv nginx/ /usr/local/

$ cd /usr/local/nginx

$ ./configure --prefix=/usr/local/nginx --with-http\_gzip\_static\_module --with-http\_v2\_module --with-pcre --with-http\_ssl\_module --conf-path=/usr/local/nginx/conf/nginx.conf

$ make

$ make install

$ ln -s /usr/local/nginx/sbin/nginx /usr/bin/nginx

$ nginx -V
nginx version: nginx/1.19.8
built by gcc 7.5.0 (Ubuntu 7.5.0-3ubuntu1~18.04) 
built with OpenSSL 1.1.1  11 Sep 2018
TLS SNI support enabled
configure arguments: --prefix=/usr/local/nginx --with-http\_gzip\_static\_module --with-http\_v2\_module --with-pcre --with-http\_ssl\_module --conf-path=/usr/local/nginx/conf/nginx.conf

$ nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful

nginx: [alert] could not open error log file: open() "/usr/local/nginx/logs/error.log" failed (2: No such file or directory)
2016/09/13 19:08:56 [emerg] 6996#0: open() "/usr/local/nginx/logs/access.log" failed (2: No such file or directory)

$ mkdir logs
$ chmod 700 logs

$ nginx -t

$ nginx

$ cd /usr/local/nginx/conf

#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;

    # server {
    #     listen       80;
    #     server_name  localhost;

    #     #charset koi8-r;

    #     #access_log  logs/host.access.log  main;

    #     location / {
    #         root   html;
    #         index  index.html index.htm;
    #     }

    #     #error_page  404              /404.html;

    #     # redirect server error pages to the static page /50x.html
    #     #
    #     error_page   500 502 503 504  /50x.html;
    #     location = /50x.html {
    #         root   html;
    #     }
    # }
    include website/*.conf;
}

server {
  listen 80;
  error_page  404 /index.html;
  client_max_body_size 100m;

  location / {
      root /home/wyy/ai_html; # 前端代码文件位置
      index index.html;
      try_files $uri $uri/ /index.html; # 解决vue刷新404的问题
  }
  location /api/ {
    add_header 'Access-Control-Allow-Origin' '*';
    add_header 'Access-Control-Allow-Headers' 'X-Requested-With';
    add_header 'Access-Control-Allow-Methods' 'GET,POST,OPTIONS';
    add_header 'Cache-Control' 'no-cache';

    if ($request_method = 'OPTIONS') {
        return 200;
    }
    proxy_pass http://127.0.0.1:9999/; # 反向代理
    # rewrite ^/b/(.*)$ /$1 break;
  }

  location /knowledgeApi/ {
    add_header 'Access-Control-Allow-Origin' '*';
    add_header 'Access-Control-Allow-Headers' 'X-Requested-With';
    add_header 'Access-Control-Allow-Methods' 'GET,POST,OPTIONS';
    add_header 'Cache-Control' 'no-cache';

    if ($request_method = 'OPTIONS') {
        return 200;
    }
    proxy_pass http://127.0.0.1:8888/; # 反向代理
    # rewrite ^/b/(.*)$ /$1 break;
  }
}

$ nginx -t

$ nginx -s reload

server {
  listen                  443 ssl; # SSL 默认访问端口号为 443
  server_name             127.0.0.1; # 绑定证书的域名
  ssl_certificate         /usr/local/nginx/sslkey/smarthome_server.crt;
  ssl_certificate_key     /usr/local/nginx/sslkey/smarthome_server.key;
  error_page  404 /index.html;
    
  location / {
    # ...
  }
  location /api/ {
    # ...
  }
  location /knowledgeApi/ {
    # ...
  }
}

# HTTP请求自动跳转HTTPS
server {
  listen 80;
  error_page  404 /index.html;
  client_max_body_size 100m;
  return  301 https://$server_name$request_uri; # 把HTTP的域名请求转成HTTPS
}

$ nginx -t
$ nginx -s reload

$ sudo ufw allow 'Nginx HTTP' # 此配置文件仅打开端口80
$ sudo ufw allow 'Nginx HTTPS' # 此配置文件仅打开端口443

# 输入以下命令以启动防火墙
$ sudo ufw enable   # 开启
$ sudo ufw disable    # 关闭

# 输入以下命令以查看防火墙状态
$ sudo ufw status    # 查看
# inactive状态是防火墙关闭状态 active是开启状态

server{
    gzip on; # 开启gzip
    gzip_buffers 32 4K; # 设置用于处理请求压缩的缓冲区数量和大小，使用默认值即可
    gzip_comp_level 6; # 压缩等级【1-9】，等级越高压得越小，越消耗GPU计算资源
    gzip_min_length 1k; # 当文件大于等于1k时，开始压缩
    gzip_types application/javascript text/css text/xml; # 不应压缩图片、MP3、MP4类型：压缩率小，太费GPU资源
    gzip_disable "MSIE [1-6]\."; #配置禁用gzip条件，支持正则。此处表示ie6及以下不启用gzip（因为ie低版本不支持）
    gzip_vary on; # 增加响应头”Vary: Accept-Encoding”
    gzip_proxied any; # Nginx做反向代理时，无条件压缩所有结果数据
}