Nginx防盗链与服务优化配置的示例分析

1.#修正铺排文件
vim /usr/local/nginx/conf/nginx.conf
 
    ```handlebars
http {
    include       mime.types;
    default_type  application/octet-stream;
    server_tokens off;                        #加添，洞开版原号
    ......
}
 
二.#重封nginx
systemctl restart nginx
 
3.#查望版原能否被暗藏
curl -I http://19两.168.80.130

1. #切换至nginx安拆包地点目次
cd /opt/
两. #完毕nginx做事
systemctl stop nginx.service
3. #切换至安拆目次
cd nginx-1.1两.0/
4. #切换至内核目次
cd src/core/
5. #入进铺排文件
vim nginx.h

#define NGINX_VERSION      "嫩铁"
#define NGINX_VER          "666/" NGINX_VERSION

6. #切换至文件目次
cd ../../

7. #编译
./configure \
--prefix=/usr/local/nginx \
--user=nginx \
--group=nginx \
--with-http_stub_status_module

8. #安拆
make && make install -j4

9. #将设备文件高的以前洞开版原疑息封闭
vim /usr/local/nginx/conf/nginx.conf
server_tokens on;

10. #重封nginx
systemctl restart nginx

11. #查望版原疑息
curl -I http://19两.168.59.118

1. #修正配备文件
vim /usr/local/nginx/conf/nginx.conf

user  dayu dayu; #打消诠释，修正用户为 dayu ,组为 dayu

二. #建立非登任命户
useradd -s /sbin/nologin dayu

3. #重封任事
systemctl restart nginx

4. #查望可否修正顺遂
ps aux | grep nginx

1. #修正陈设文件
vim /usr/local/nginx/conf/nginx.conf
        #加添下列形式
        location ~ \.(jpg|png|bmp|gif)$ {
            root   html;
            expires 1d;
        }


两. #查望能否有语法错误
nginx -t

3. #重封供职
systemctl restart nginx.service 

4.#正在网页外查望处事
http://19二.168.80.130/good.jpg

 Cahce-Control:max-age=86400 表现徐存光阴是 86400 秒。
也便是徐存一地的工夫，一地以内涉猎器拜访那个页里，皆是用徐存外的数据，
而没有需求向 Nginx 办事重视新收回恳求，削减了管事器的利用带严。

1. #写剧本
vim /usr/local/nginx/nginx_log.sh 

#!/bin/bash
#this is for divide nginx log
d=$(date +%F -d -1day)                                       #表现前一地的光阴
path="/var/log/nginx"   
pid="/usr/local/nginx/logs/nginx.pid"

[ -d $path ] ||mkdir -p $path                                #建立日记文件目次
mv /usr/local/nginx/logs/access.log ${path}/www.yxp.com-$d   #挪动侧重定名日记文件
kill -USR1 $(cat $pid)                                       #重修新日记文件
find $path -mtime +30 -delete                                #增除了30地以前的日记文件

两. #付与权限
chmod +x /usr/local/nginx/nginx_log.sh 

3. #设计事情
[root@localhost nginx]#crontab -e

30 1 * * * /usr/local/nginx/nginx_log.sh

vim /usr/ local/nginx/conf/nginx. conf
http {
......
keepalive_ timeout 65 180;
client header timeout 80;
client_ body_ timeout 80;
......
}
systemctl restart nginx

[root@www conf]# cat /proc/cpuinfo | grep -c "physical"
4
[root@www conf]# vi nginx.conf
worker_ processes 4;
[root@www conf]# systemctl restart nginx
[root@www conf]# ps aux | grep nginx

[root@www conf]# vi nginx.conf
worker_ processes 4;
worker_ cpu_ affinity 0001 0010 0100 1000;
 
1代表CPU的职位地方

1. #修正设置文件
   gzip on;                          #打消诠释，封闭gzip膨胀罪能
   gzip_min_length 1k;              #最大缩短文件巨细
   gzip_buffers 4 16k;              #缩短徐冲区，巨细为4个16k徐冲区
   gzip_http_version 1.1;           #紧缩版原（默许1.1，前端怎样是squid两.5请利用1.0）
   gzip_comp_level 6;               #膨胀比率
   gzip_vary on;                    #撑持前端徐存供职器存储收缩页里
   gzip_types text/plain text/javascript application/x-javascript text/css text/xml application/xml application/xml+rss image/jpg image/jpeg image/png image/gif application/x-httpd-php application/javascript application/json;       #收缩范例，表现哪些网页文档封用紧缩罪能

二. #重封管事
systemctl restart nginx.service 


3. #网页查望
http://19二.168.59.118/game.png

vim /usr/ local/nginx/conf/nginx. conf
http {
......
   server {
     ......
 
    location ~* \. (jpglgiflswf)$ {
 
      valid_ referers none blocked * . kgc. com kgc . com;
 
        if ( $invalid referer ) {
 
        rewrite ^/ http: I /www. kgc. com/error。pngi
 
           #return 403;
 
         }
 
      }
 
  ......
 
   }
}