nginx 常用基础配置

worker_processes  1;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    sendfile        on;

    keepalive_timeout  65;

    #gzip  on;

    include /etc/nginx/vhost/*.conf;
}

stream {
    include /etc/nginx/vhost-tcp/*.conf;
}

server {
        listen       80;
        server_name  ${domain};

        location / {
                 proxy_pass http://${ip};
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
                root   html;
        }
}

server {
    listen       443 ssl;
    server_name  ${domain};
    #放上证书和私钥路径
    ssl_certificate      /etc/nginx/ssl/crt.crt;
    ssl_certificate_key  /etc/nginx/ssl/key.key;

    ssl_session_cache    shared:SSL:1m;
    ssl_session_timeout  5m;

    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers  on;

    location / {
        proxy_redirect off;
        proxy_pass http://${ip};
        proxy_set_header   X-Real-IP            $remote_addr;
        proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
        proxy_set_header   X-Forwarded-Proto $scheme;
        proxy_set_header   Host                   $host;
        proxy_set_header   REMOTE-HOST            $remote_addr;
        proxy_set_header   X-NginX-Proxy    true;
        proxy_set_header   Connection "";
        proxy_http_version 1.1;
    }
}

upstream socket_proxy {
    server ip:端口;
}

server {
    listen 端口;
    proxy_connect_timeout 1s;
    proxy_timeout 3s;
    proxy_pass socket_proxy;
}

以上是nginx最基础的配置，支持https和tcp，第一个是nginx.conf，剩下两个放到指定路径即可读取（红色标注）。strean对应tcp，http对应http协议。