ssh -t 用戶名@服務(wù)器IP或者域名 -p 22<!--用戶名一般是root，方便操作，我的登錄代碼如下-->ssh -t root@acheng1314.cn -p 22

<!--切換到安裝目錄下-->cd /usr/src<!--創(chuàng)建Nginx文件夾用來(lái)存放Nginx相關(guān)的資源和依賴-->mkdir Nginx<!--下載資源和依賴-->yum -y install zlib zlib-devel openssl openssl--devel pcre pcre-devel <!--上面的命令一般來(lái)說(shuō)會(huì)是不需要安裝什么，不過(guò)這都不重要，我們接著會(huì)重新安裝指定的版本--><!--下載pcre-->wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.40.tar.gz<!--解壓-->tar -zxvf pcre-8.40.tar.gz<!--切換到pcre目錄-->cd pcre-8.40<!--設(shè)置-->./configure<!--編譯-->make<!--安裝-->make install<!--切換到Nginx主目錄-->cd ..<!--下載及安裝zlib-->wget http://zlib.net/zlib-1.2.11.tar.gz<!--解壓-->tar -zxvf zlib-1.2.11.tar.gz<!--切換到zlib目錄-->cd zlib-1.2.11<!--設(shè)置、編譯、安裝-->./configuremakemake install<!--切換到Nginx主目錄-->cd ..<!--下載及準(zhǔn)備ssl-->wget http://www.openssl.org/source/openssl-fips-2.0.14.tar.gz<!--解壓-->tar -zxvf openssl-fips-2.0.14.tar.gz<!--yum安裝ssl-->yum -y install openssl openssl-devel<!--下載及安裝nginx-->wget http://nginx.org/download/nginx-1.4.2.tar.gztar -zxvf nginx-1.4.2.tar.gzcd nginx-1.4.2<!--設(shè)置Nginx安裝目錄/opt/nginx，且添加ssl支持-->./configure --prefix=/opt/nginx --with-http_stub_status_module --with-http_ssl_module --with-pcremakemake install

<!--切換到nginx設(shè)置目錄-->cd /opt/nginx/conf<!--vim編輯nginx配置文件-->vi nginx.conf

#user nobody;worker_processes 1;#error_log logs/error.log;#error_log logs/error.log notice;#error_log logs/error.log info;#pid    logs/nginx.pid;events {  worker_connections 1024;}http {  include    mime.types;  default_type application/octet-stream;  #log_format main '$remote_addr - $remote_user [$time_local] "$request" '  #         '$status $body_bytes_sent "$http_referer" '  #         '"$http_user_agent" "$http_x_forwarded_for"';  #access_log logs/access.log main;  sendfile    on;  #tcp_nopush   on;  #keepalive_timeout 0;  keepalive_timeout 65;  #gzip on;# 注意這里是設(shè)置本機(jī)的相關(guān)的東西，建議不要更改  server {    listen    80;    server_name localhost;    #charset koi8-r;    #access_log logs/host.access.log main;    location / {    root  html;        index index.html index.htm;    # proxy_pass http://localhost;     # proxy_set_header  Host  $host;    # proxy_set_header  X-Real-IP  $remote_addr;    # proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;    }    #error_page 404       /404.html;    # redirect server error pages to the static page /50x.html    #    error_page  500 502 503 504 /50x.html;    location = /50x.html {      root  html;    }    # proxy the PHP scripts to Apache listening on 127.0.0.1:80    #    #location ~ /.php$ {    #  proxy_pass  http://127.0.0.1;    #}    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000    #    #location ~ /.php$ {    #  root      html;    #  fastcgi_pass  127.0.0.1:9000;    #  fastcgi_index index.php;    #  fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;    #  include    fastcgi_params;    #}    # deny access to .htaccess files, if Apache's document root    # concurs with nginx's one    #    #location ~ //.ht {    #  deny all;    #}  }  # another virtual host using mix of IP-, name-, and port-based configuration  #  #server {  #  listen    8000;  #  listen    somename:8080;  #  server_name somename alias another.alias;  #  location / {  #    root  html;  #    index index.html index.htm;  #  }  #}# 這里是設(shè)置本機(jī)的https訪問(wèn)的，這里必須設(shè)置才能正確時(shí)https  # HTTPS server  #  server {    listen    443;    server_name localhost acheng1314.cn www.acheng1314.cn;    ssl         on;    # 這里是你申請(qǐng)的簽名，扔到conf下面的cert目錄中    ssl_certificate   cert/214217283570796.pem;    ssl_certificate_key cert/214217283570796.key;    ssl_session_timeout 5m;    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;    ssl_prefer_server_ciphers  on;    location / {    #  root  html;    #  index index.html index.htm;  proxy_pass http://localhost;  proxy_set_header  Host  $host;  proxy_set_header  X-Real-IP  $remote_addr;  proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;    }}# 這里是設(shè)置域名跳轉(zhuǎn)的，轉(zhuǎn)發(fā)這些域名到本機(jī)的8080端口，server {   listen    80;   server_name *.acheng1314.cn acheng1314.cn;   location / {     proxy_pass http://localhost:8080/;     proxy_set_header  Host  $host;     proxy_set_header  X-Real-IP  $remote_addr;     proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;   } }   }

<!--檢查我們的設(shè)置是否正確，正確或者錯(cuò)誤都有對(duì)應(yīng)的提示-->/opt/nginx/sbin/nginx -t<!--配置正確，則啟用nginx-->/opt/nginx/sbin/nginx<!--重新載入配置文件-->/opt/nginx/sbin/nginx -t<!--當(dāng)然到了這里的時(shí)候肯定還不能通行，畢竟我們防火墻還把443端口攔截的，所以接著走起來(lái)。--><!--添加443端口到防火墻-->/sbin/iptables -I INPUT -p tcp --dport 443 -j ACCEPT<!--保存防火墻配置-->/etc/rc.d/init.d/iptables save<!--是配置文件生效-->/etc/init.d/iptables status

#!/bin/sh# Name:nginx4comex# nginx - this script starts and stops the nginx daemon## description: Nginx is an HTTP(S) server, HTTP(S) reverse /#        proxy and IMAP/POP3 proxy server# processname: nginx# config:   /opt/nginx/conf/nginx.conf# pidfile:   /comexHome/nginx/nginx.pid## Created By http://comexchan.cnblogs.com/# Source function library.. /etc/rc.d/init.d/functions# Source networking configuration.. /etc/sysconfig/network# Check that networking is up.[ "$NETWORKING" = "no" ] && exit 0NGINX_DAEMON_PATH="/opt/nginx/sbin/nginx"NGINX_CONF_FILE="/opt/nginx/conf/nginx.conf"NGINX_LOCK_FILE="/var/lock/subsys/nginx4comex"prog=$(basename $NGINX_DAEMON_PATH)start() {  [ -x $NGINX_DAEMON_PATH ] || exit 5  [ -f $NGINX_CONF_FILE ] || exit 6  echo -n $"Starting $prog: "  daemon $NGINX_DAEMON_PATH -c $NGINX_CONF_FILE  retval=$?  echo  [ $retval -eq 0 ] && touch $NGINX_LOCK_FILE  return $retval}stop() {  echo -n $"Stopping $prog: "  killproc $prog -QUIT  retval=$?  echo  [ $retval -eq 0 ] && rm -f $NGINX_LOCK_FILE  return $retval}restart() {  configtest || return $?  stop  start}reload() {  configtest || return $?  echo -n $"Reloading $prog: "  killproc $NGINX_DAEMON_PATH -HUP  RETVAL=$?  echo}force_reload() {  restart}configtest() { $NGINX_DAEMON_PATH -t -c $NGINX_CONF_FILE}rh_status() {  status $prog}rh_status_q() {  rh_status >/dev/null 2>&1}case "$1" in  start)    rh_status_q && exit 0    $1    ;;  stop)    rh_status_q || exit 0    $1    ;;  restart|configtest)    $1    ;;  reload)    rh_status_q || exit 7    $1    ;;  force-reload)    force_reload    ;;  status)    rh_status    ;;  condrestart|try-restart)    rh_status_q || exit 0      ;;  *)    echo $"Usage: $0 {start|stop|status|restart|condrestart|try-restart|reload|force-reload|configtest}"    exit 2esac

NGINX_DAEMON_PATH="/opt/nginx/sbin/nginx"NGINX_CONF_FILE="/opt/nginx/conf/nginx.conf"

<!--授權(quán)nginx4comex可執(zhí)行-->chmod u+x nginx4comex<!--拷貝nginx4comex到/etc/init.d目錄-->cp nginx4comex /etc/init.d<!--檢查運(yùn)行狀態(tài)-->service nginx4comex status<!--添加到啟動(dòng)，先vim打開(kāi)啟動(dòng)文件，然后添加啟動(dòng)代碼-->vim /etc/rc.local<!--添加的啟動(dòng)代碼如下-->/etc/init.d/nginx4comex start<!--至此我們的啟動(dòng)也添加完成，現(xiàn)在重啟檢查效果-->reboot