Nginxes on Coding

ubuntu无法开机自启动nginx

Fri, 29 Jun 2018 06:32:56 +0000

阿里云到期了涨价，只好申请了降配续费。阿里自动重启服务器后，发现nginx没有开机自启动。

guoj@iZ2ze8wsk0m120dsi7m0juZ:~$ sudo runlevel
N 5

配好好一切后，重启服务器，奇迹并没有发生，nginx还是没有启动。

guoj@iZ2ze8wsk0m120dsi7m0juZ:~$ sudo cat /etc/init.d/nginx 
#!/bin/sh

### BEGIN INIT INFO
# Provides:       nginx
# Required-Start:    $local_fs $remote_fs $network $syslog $named
# Required-Stop:     $local_fs $remote_fs $network $syslog $named
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: starts the nginx web server
# Description:       starts nginx using start-stop-daemon
### END INIT INFO

PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
DAEMON=/usr/sbin/nginx
NAME=nginx
DESC=nginx

# Include nginx defaults if available
if [ -r /etc/default/nginx ]; then
        . /etc/default/nginx
fi

STOP_SCHEDULE="${STOP_SCHEDULE:-QUIT/5/TERM/5/KILL/5}"

test -x $DAEMON || exit 0

. /lib/init/vars.sh
. /lib/lsb/init-functions

# Try to extract nginx pidfile
PID=$(cat /etc/nginx/nginx.conf | grep -Ev '^\s*#' | awk 'BEGIN { RS="[;{}]" } { if ($1 == "pid") print $2 }' | head -n1)
if [ -z "$PID" ]; then
        PID=/run/nginx.pid
fi

if [ -n "$ULIMIT" ]; then
        # Set ulimit if it is set in /etc/default/nginx
        ulimit $ULIMIT
fi

start_nginx() {
        # Start the daemon/service
        #
        # Returns:
        #   0 if daemon has been started
        #   1 if daemon was already running
        #   2 if daemon could not be started
        start-stop-daemon --start --quiet --pidfile $PID --exec $DAEMON --test &gt; /dev/null \
                || return 1
        start-stop-daemon --start --quiet --pidfile $PID --exec $DAEMON -- \
                $DAEMON_OPTS 2&gt;/dev/null \
                || return 2
}

test_config() {
        # Test the nginx configuration
        $DAEMON -t $DAEMON_OPTS &gt;/dev/null 2&gt;&1
}

stop_nginx() {
        # Stops the daemon/service
        #
        # Return
        #   0 if daemon has been stopped
        #   1 if daemon was already stopped
        #   2 if daemon could not be stopped
        #   other if a failure occurred
        start-stop-daemon --stop --quiet --retry=$STOP_SCHEDULE --pidfile $PID --name $NAME
        RETVAL="$?"
        sleep 1
        return "$RETVAL"
}

reload_nginx() {
        # Function that sends a SIGHUP to the daemon/service
        start-stop-daemon --stop --signal HUP --quiet --pidfile $PID --name $NAME
        return 0
}

rotate_logs() {
        # Rotate log files
        start-stop-daemon --stop --signal USR1 --quiet --pidfile $PID --name $NAME
        return 0
}

upgrade_nginx() {
        # Online upgrade nginx executable
        # http://nginx.org/en/docs/control.html
        #
        # Return
        #   0 if nginx has been successfully upgraded
        #   1 if nginx is not running
        #   2 if the pid files were not created on time
        #   3 if the old master could not be killed
        if start-stop-daemon --stop --signal USR2 --quiet --pidfile $PID --name $NAME; then
                # Wait for both old and new master to write their pid file
                while [ ! -s "${PID}.oldbin" ] || [ ! -s "${PID}" ]; do
                        cnt=`expr $cnt + 1`
                        if [ $cnt -gt 10 ]; then
                                return 2
                        fi
                        sleep 1
                done
                # Everything is ready, gracefully stop the old master
                if start-stop-daemon --stop --signal QUIT --quiet --pidfile "${PID}.oldbin" --name $NAME; then
                        return 0
                else
                        return 3
                fi
        else
                return 1
        fi
}

case "$1" in
        start)
                log_daemon_msg "Starting $DESC" "$NAME"
                start_nginx
                case "$?" in
                        0|1) log_end_msg 0 ;;
                        2)   log_end_msg 1 ;;
                esac
                ;;
        stop)
                log_daemon_msg "Stopping $DESC" "$NAME"
                stop_nginx
                case "$?" in
                        0|1) log_end_msg 0 ;;
                        2)   log_end_msg 1 ;;
                esac
                ;;
        restart)
                log_daemon_msg "Restarting $DESC" "$NAME"

                # Check configuration before stopping nginx
                if ! test_config; then
                        log_end_msg 1 # Configuration error
                        exit $?
                fi

                stop_nginx
                case "$?" in
                        0|1)
                                start_nginx
                                case "$?" in
                                        0) log_end_msg 0 ;;
                                        1) log_end_msg 1 ;; # Old process is still running
                                        *) log_end_msg 1 ;; # Failed to start
                                esac
                                ;;
                        *)
                                # Failed to stop
                                log_end_msg 1
                                ;;
                esac
                ;;
        reload|force-reload)
                log_daemon_msg "Reloading $DESC configuration" "$NAME"

                # Check configuration before stopping nginx
                #
                # This is not entirely correct since the on-disk nginx binary
                # may differ from the in-memory one, but that's not common.
                # We prefer to check the configuration and return an error
                # to the administrator.
                if ! test_config; then
                        log_end_msg 1 # Configuration error
                        exit $?
                fi

                reload_nginx
                log_end_msg $?
                ;;
        configtest|testconfig)
                log_daemon_msg "Testing $DESC configuration"
                test_config
                log_end_msg $?
                ;;
        status)
                status_of_proc -p $PID "$DAEMON" "$NAME" && exit 0 || exit $?
                ;;
        upgrade)
                log_daemon_msg "Upgrading binary" "$NAME"
                upgrade_nginx
                log_end_msg $?
                ;;
        rotate)
                log_daemon_msg "Re-opening $DESC log files" "$NAME"
                rotate_logs
                log_end_msg $?
                ;;
        *)
                echo "Usage: $NAME {start|stop|restart|reload|force-reload|status|configtest|rotate|upgrade}" &gt;&2
                exit 3
                ;;
esac

手动启动/etc/init.d/nginx start也是没起来。systemctl start nginx报错如下：

nginx访问频次限制模块

Thu, 08 Mar 2018 02:47:22 +0000

nginx_http_limit_conn_zone模块

用于限制并发连接数，特别是单个IP地址的连接数量。并非所有连接都被计算在内。只有在服务器处理了请求并且已经读取了整个请求头的情况下才计算连接。官方文档

用法

Syntax:limit_conn zone number;
Default:—
Context:http, server, location

实例

http{
	limit_conn_zone $binary_remote_addr zone=addr:10m;
	limit_conn_zone $binary_remote_addr zone=perip:10m;
	limit_conn_zone $server_name zone=perserver:10m;

	server{
		limit_conn perip 50;
		limit_conn perserver 50;
		limit_conn addr 1;
	}
}

说明

$remote_addr变量的大小可以从7到15个字节不等。存储状态在32位平台上占用32或64字节的内存，在64位平台上总是占用64字节。 $binary_remote_addr对于IPv4地址，变量的大小始终为4个字节，对于IPv6地址则为16个字节。存储状态在32位平台上始终占用32或64个字节，在64位平台上占用64个字节。1M字节的区域可以保持大约32000个32字节的状态或大约16000个64字节的状态。

nginx模块ngx_pagespeed配置

Tue, 16 Jan 2018 03:04:36 +0000

官方文档性能测试

http{
        # 启用ngx_pagespeed
        pagespeed on;

        pagespeed Statistics on;
        pagespeed StatisticsLogging on;
        pagespeed LogDir /var/log/pagespeed;
        pagespeed FileCachePath /tmp/cache/ngx_pagespeed_cache;
        # 隐藏pagespeed版本信息
        pagespeed XHeaderValue "Powered By ngx_pagespeed";
        # google字体直接写入html 目的是减少浏览器请求和DNS查询 
        pagespeed EnableFilters inline_google_font_css;
        pagespeed RewriteLevel PassThrough;
        # 改善资源的可缓存性
        pagespeed EnableFilters extend_cache;
        # 预解析DNS查询 
        pagespeed EnableFilters insert_dns_prefetch;

        pagespeed EnableFilters local_storage_cache;
        # 删除无用的url前缀 
        pagespeed EnableFilters trim_urls;
        # 合并head
        pagespeed EnableFilters combine_heads;
        # 移除多余html标签
        pagespeed EnableFilters elide_attributes;
        # 移除html空白
        pagespeed EnableFilters collapse_whitespace;
        # 移除html注释
        pagespeed EnableFilters remove_comments;
        # 移除html属性中的不必要的引号
        pagespeed EnableFilters remove_quotes;

        # css
        # 合并css 
        pagespeed EnableFilters combine_css;
        # 压缩css 
        pagespeed EnableFilters rewrite_css;
        # 将css内容移动到script之前，优先于script渲染
        pagespeed EnableFilters move_css_above_scripts;
        pagespeed EnableFilters move_css_to_head;
        # 重写CSS，首先加载渲染页面的CSS规则 
        pagespeed EnableFilters prioritize_critical_css;
        pagespeed EnableFilters flatten_css_imports;
        pagespeed CssFlattenMaxBytes 5120;

        # js
        # 合并js
        pagespeed EnableFilters combine_javascript;
        # 压缩js
        pagespeed EnableFilters rewrite_javascript;
        pagespeed EnableFilters defer_javascript;
        # 将小的js文件已内联方式引入，避免http请求
        pagespeed EnableFilters inline_javascript;


        # image
        # 延时加载客户端看不见的图片
        pagespeed EnableFilters lazyload_images;
        # 压缩图片
        pagespeed EnableFilters rewrite_images;
        # 将小图片的http调用转成内联方式调用
        pagespeed EnableFilters inline_images;
        pagespeed EnableFilters inline_preview_images;
        # 自动将多张背景图片合并成一张图片。
        pagespeed EnableFilters sprite_images;
        pagespeed EnableFilters dedup_inlined_images;
        pagespeed EnableFilters responsive_images_zoom;
        # 移动端图片自适应重置
        pagespeed EnableFilters resize_mobile_images;

        include /etc/nginx/conf.d/*.conf;
        include /etc/nginx/sites-enabled/*;
}

nginx与php-fpm权限不一致问题

Thu, 14 Dec 2017 05:42:22 +0000

在使用wordpress时，发现一些目录及文件读写权限的问题。
目录已设置为755权限。
检查后，发现是nginx与php-fpm使用的用户和用户组不一致导致的。

PHP-FPM用户和用户组

vi /etc/php/5.6/fpm/pool.d/www.conf

/etc/init.d/php5.6-fpm restart

Nginx用户和用户组

vi /etc/nginx/nginx.conf

nginx -t
nginx -s reload

nginx模块pagespeed安装

Thu, 14 Dec 2017 02:01:21 +0000

下载PageSpeed模块

下载pagespeed和psol：

https://github.com/pagespeed/ngx_pagespeed/archive/v[PageSpeed版本].zip

https://dl.google.com/dl/page-speed/psol/[PageSpeed版本]-x[系统位数].tar.gz

比如PageSpeed版本1.13.35.1-beta，相应的下载地址则为：
https://codeload.github.com/pagespeed/ngx_pagespeed/zip/v1.13.35.1-beta
https://dl.google.com/dl/page-speed/psol/1.13.35.1-x64.tar.gz

wget https://codeload.github.com/pagespeed/ngx_pagespeed/zip/v1.13.35.1-beta -O ngx_pagespeed-v1.13.35.1-beta.zip
unzip ngx_pagespeed-v1.13.35.1-beta.zip
cd ngx_pagespeed-v1.13.35.1-beta/
wget https://dl.google.com/dl/page-speed/psol/1.13.35.1-x64.tar.gz -O psol-1.13.35.1-x64.tar.gz
tar -xzvf psol-1.13.35.1-x64.tar.gz

下载Nginx

wget http://nginx.org/download/nginx-1.13.7.tar.gz
tar -xvzf nginx-1.13.7.tar.gz
cd nginx-1.13.7/

编译安装

./configure --add-module=/root/ngx_pagespeed-1.13.35.1-beta/ \
--with-cc-opt='-g -O2 -fPIE -fstack-protector-strong \
-Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2' \
--with-ld-opt='-Wl,-Bsymbolic-functions -fPIE -pie -Wl,-z,relro -Wl,-z,now' \
--prefix=/usr/share/nginx --conf-path=/etc/nginx/nginx.conf \
--http-log-path=/var/log/nginx/access.log \
--error-log-path=/var/log/nginx/error.log \
--lock-path=/var/lock/nginx.lock \
--pid-path=/run/nginx.pid \
--http-client-body-temp-path=/var/lib/nginx/body \
--http-fastcgi-temp-path=/var/lib/nginx/fastcgi \
--http-proxy-temp-path=/var/lib/nginx/proxy \
--http-scgi-temp-path=/var/lib/nginx/scgi \
--http-uwsgi-temp-path=/var/lib/nginx/uwsgi \
--with-debug \
--with-pcre-jit \
--with-http_ssl_module \
--with-http_stub_status_module \
--with-http_realip_module \
--with-http_auth_request_module \
--with-http_addition_module \
--with-http_dav_module \
--with-http_geoip_module \
--with-http_gunzip_module \
--with-http_gzip_static_module \
--with-http_image_filter_module \
--with-http_v2_module \
--with-http_sub_module \
--with-http_xslt_module \
--with-stream \
--with-stream_ssl_module \
--with-mail \
--with-mail_ssl_module \
--with-threads

make
make install

测试

通过nginx去掉codeIgniter框架的URL中的/index.php/

Wed, 22 Nov 2017 02:19:16 +0000

.htaccess为空

不需要再做rewrite处理。

CI配置

application/config/config.php

$config['uri_protocol'] = 'REQUEST_URI';

nginx配置

server {
    listen 80;
    server_name 127.0.0.1;
    root /usr/local/******;
    index index.php index.html index.htm;
    rewrite_log on;

    location / {
        root /usr/local/******;
        index index.php index.html index.htm;
        try_files $uri $uri//index.php?$query_string;
    }

    location~\.php($ | /) {
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_split_path_info ^ (.+\.php)(.*) $;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include fastcgi_params;
    }
    
    location~/\.ht {
        deny all;
    }
}