#检查配置文件是否有错误
./nginx -t 
#指定配置文件
./nginx -c conf_file
#优雅停止
./nginx -s stop

# 配置alleyz用户  admin组下有启停权限
user alleyz [admin];

#所有用户具有启停权限
user nobody nobody;

# 如果设置为数字，启动以后就具有多少个worker process
# 设置为auto则自动检测
worker_processes number | auto;

#必须包含文件名称
pid logs/nginx_alleyz.pid;

log_format name string;
access_log path [format [buffer=size]];
log_format main '$remote_addr - $remote_user [$time_local] "$request" ' 
                '$status $body_bytes_sent "$http_referer" '
                '"$http_user_agent" "$http_x_forwarded_for"';
access_log  logs/access.log  main;

#如果取消日志记录
access_log off;

sendfile on | off;
sendfile_max_chunk size; #设置为0为限制

# 临时生效
ifconfig em1:0 10.8.177.21 netmask 255.255.0.0 up
ifconfig em1:1 10.8.177.22 netmask 255.255.0.0 up
# 永久生效
echo "ifconfig em1:0 10.8.177.21 netmask 255.255.0.0 up" >> /etc/rs.local

# vi nginx.conf
...
server {
  listen       3022;
  server_name  10.8.177.32;
  ...
}
server {
  listen       3022;
  server_name  10.8.177.21;
  ...
}
kill -HUP `cat ../logs/nginx_alleyz.pid`

location [ = | ~ | ~* | ^~] uri {...}

root path;

alias path;

location ~ ^/data/(.+\.(htm|html))${
    alias html/data/other/$1;
}

index index.html index.htm;

error_page code ... [=[response]] uri;
error_page 404 /404.html; 
error_page 404 http://someone.com/404.html;

error_page 404 /404.html
location /404.html{
    root /home/alleyz/html;
}

allow address | CIDR | all;
deny address | CIDR | all;

location / {
    root html;
    index index.html;
    deny 10.8.177.26;
}

# 生成密文，-c创建密码文件 -d采用crypt加密 -b 命令行指定密码
htpasswd -cdb  passwd root 123456

# string 开启认证功能，并设置提示信息
auth_basic string | off;

#file 包含用户名信息的文件路径
auth_basic_user_file file;

user root;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;


    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #资源压缩
     gzip on; #开启gzip 
     gzip_min_length 1k; #低于1kb的资源不压缩
     gzip_comp_level 6; #压缩级别【1-9】，越大压缩率越高，同时消耗cpu资源也越多，建议设置在4左右。 
     gzip_types text/plain application/javascript application/x-javascript text/javascript text/xml text/css image/jpeg image/gif image/png; #需要压缩哪些响应类型的资源，多个空格隔开 
     gzip_disable "MSIE [1-6]\."; #配置禁用gzip条件，支持正则。此处表示ie6及以下不启用gzip（因为ie低版本不支持） 
     gzip_vary on; #是否添加“Vary: Accept-Encoding”响应头


    ##cache##
    proxy_connect_timeout 500;
    #跟后端服务器连接的超时时间_发起握手等候响应超时时间
    proxy_read_timeout 600;
    #连接成功后_等候后端服务器响应的时间_其实已经进入后端的排队之中等候处理
    proxy_send_timeout 500;
    #后端服务器数据回传时间_就是在规定时间内后端服务器必须传完所有数据
    proxy_buffer_size 128k;
    #代理请求缓存区_这个缓存区间会保存用户的头信息以供Nginx进行规则处理_一般只要能保存下头信息即可  
    proxy_buffers 4 128k;
    #同上 告诉Nginx保存单个用的几个Buffer最大用多大空间
    proxy_busy_buffers_size 256k;
    #如果系统很忙的时候可以申请更大的proxy_buffers 官方推荐*2
    proxy_temp_file_write_size 128k;
    #proxy缓存临时文件的大小
    proxy_temp_path /usr/local/nginx/temp;
    #用于指定本地目录来缓冲较大的代理请求
    proxy_cache_path /usr/local/nginx/cache levels=1:2 keys_zone=cache_one:200m inactive=1d max_size=2g;
    #设置web缓存区名为cache_one,内存缓存空间大小为12000M，自动清除超过15天没有被访问过的缓存数据，硬盘缓存空间大小200g

    server {
        listen       80;
        server_name  www.cdxc512.cn;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
           proxy_set_header Host $http_host;  #解决浏览器访问网站时跳转内网127.0.0.1的问题
           proxy_pass http://127.0.0.1:8080;
          #  root   html;
          #  index  index.html index.htm;
        }


        #要缓存文件的后缀，可以在以下设置。
        location ~ .*\.(jpeg|gif|jpg|png|ico|css|js)(.*) {
                proxy_pass http://127.0.0.1:8080;
                proxy_redirect off;
                #proxy_set_header Host $http_host;
                proxy_cache cache_one;
                proxy_cache_valid 200 302 24h;
                proxy_cache_valid 301 30d;
                proxy_cache_valid any 5m;
                expires 30d;
                add_header wall  "get data from cache success";
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #    root           html;
        #    fastcgi_pass   127.0.0.1:9000;
        #    fastcgi_index  index.php;
        #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
        #    include        fastcgi_params;
        #}

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
    }


    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}


    # HTTPS server
    #
    #server {
    #    listen       443 ssl;
    #    server_name  localhost;

    #    ssl_certificate      cert.pem;
    #    ssl_certificate_key  cert.key;

    #    ssl_session_cache    shared:SSL:1m;
    #    ssl_session_timeout  5m;

    #    ssl_ciphers  HIGH:!aNULL:!MD5;
    #    ssl_prefer_server_ciphers  on;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}

}