vanjor · August 29, 2015 14:16 · Mar 2, 2015 · Mar 2, 2015 · Mar 2, 2015 · Mar 2, 2015
diff --git a/nginx.conf b/nginx.conf
@@ -42,7 +42,7 @@
         }
     }  
 
-#snippet 5
+# snippet 5
     # php fastcig config,
     server {
        location ~ \.php$ {
@@ -63,7 +63,7 @@
         }
     }
 
-#snippet 6
+# snippet 6
         # rewrite and proxy_pass forward
         location  /api/ {
             rewrite ^(.*)\.json $1 last;
@@ -79,6 +79,17 @@
         proxy_set_header X-Forwarded-For $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 
-
+# snippet 7
+        # support username/password visit access control by nginx native way
+        # set username:password:htpasswd -c /work/subversion/websvn/config/passwd.d username
+        # reference http://linux.it.net.cn/e/server/nginx/2014/1120/8498.html
+        location ~ \.php$ {
+            root           /work/subversion/websvn/;
+            fastcgi_pass   127.0.0.1:9000;
+            fastcgi_index  index.php;
+            include fastcgi.conf;
+            auth_basic "closed site";
+            auth_basic_user_file /work/subversion/websvn/config/passwd.db;
+        }        
 
 
diff --git a/nginx.conf b/nginx.conf
@@ -63,7 +63,7 @@
         }
     }
 
-#snippet 5
+#snippet 6
         # rewrite and proxy_pass forward
         location  /api/ {
             rewrite ^(.*)\.json $1 last;

diff --git a/nginx.conf b/nginx.conf
@@ -61,6 +61,24 @@
                 # Check if a file or directory index file exists, else route it to index.php.
                 try_files $uri $uri/ /index.php?$args;
         }
-    }    
+    }
+
+#snippet 5
+        # rewrite and proxy_pass forward
+        location  /api/ {
+            rewrite ^(.*)\.json $1 last;
+            proxy_pass http://domain2/data/;
+            # if not set, proxy_pass may defect for lost domain2 request header, request ip directly.
+            proxy_set_header Host domain2;
+        }
+
+        # if proxy_pass did not change the domain, could using following setting, pass_by all original request info
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header REMOTE-HOST $remote_addr;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+
 
 
diff --git a/nginx.conf b/nginx.conf
@@ -40,5 +40,27 @@
                 deny all;
                 return 404;
         }
+    }  
+
+#snippet 5
+    # php fastcig config,
+    server {
+       location ~ \.php$ {
+                root           /work/Dashboard;
+                fastcgi_pass   127.0.0.1:9000;
+                fastcgi_index  index.php;
+                include fastcgi.conf;
+
+                fastcgi_connect_timeout 30s;
+                fastcgi_send_timeout 30s;
+                fastcgi_read_timeout 30s;
+        }
+
+        # url pattern without .php suffix for some framework need to routing all to index.php
+        location / {
+                # Check if a file or directory index file exists, else route it to index.php.
+                try_files $uri $uri/ /index.php?$args;
+        }
     }    
+
 
diff --git a/nginx.conf b/nginx.conf
@@ -1,8 +1,9 @@
+# snippet 1    
     # define a new log_format which support logging requestion_time and transter time
     log_format  combinedio  '$remote_addr - $remote_user [$time_local] '
                                  '"$request" $status $body_bytes_sent '
                                  '"$http_referer" "$http_user_agent" $request_length $request_time $upstream_response_time';
-
+# snippet 2                                     
     http {
         gzip  on;
         gzip_min_length 1k;
@@ -16,4 +17,28 @@
 
         # support move all site conf into sub folders 
         include include/*.conf;
-    }
+    }
+
+# snippet 3
+    # static resource control expires times
+    server{
+        location = /image/ {
+                root           /work/MediaService/image;
+                expires 30d;
+        }
+    }
+
+# snippet 4
+    # security issue controlling, prevent some sensitive documents being exposed
+    server{
+        # deny rule
+        location ~* \.(svn|ht|txt|conf|doc|yaml|py|sh)$ {
+                deny all;
+                return 404;
+        }
+        location ~ /(scripts|system|serverconfig|application) {
+                deny all;
+                return 404;
+        }
+    }    
+
diff --git a/nginx.conf b/nginx.conf
@@ -1,4 +1,4 @@
-    # support logging requestion_time and transter time
+    # define a new log_format which support logging requestion_time and transter time
     log_format  combinedio  '$remote_addr - $remote_user [$time_local] '
                                  '"$request" $status $body_bytes_sent '
                                  '"$http_referer" "$http_user_agent" $request_length $request_time $upstream_response_time';

diff --git a/nginx.conf b/nginx.conf
@@ -9,9 +9,11 @@
         gzip_buffers 4 16k;
         gzip_comp_level 2;
         # support to gzip transfer js,txt,png,etc.some js, need both application/javascript and application/x-javascript to fix some compatibility problems
-        # http://www.webkaka.com/blog/archives/how-to-set-gzip-for-js-in-Nginx.html
+        # detail refer:http://www.webkaka.com/blog/archives/how-to-set-gzip-for-js-in-Nginx.html
         gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
         gzip_disable "MSIE [1-6].";
+
+
         # support move all site conf into sub folders 
         include include/*.conf;
     }
diff --git a/nginx.conf b/nginx.conf
@@ -3,8 +3,15 @@
                                  '"$request" $status $body_bytes_sent '
                                  '"$http_referer" "$http_user_agent" $request_length $request_time $upstream_response_time';
 
-
-    # support move all site conf into sub folders                       
     http {
+        gzip  on;
+        gzip_min_length 1k;
+        gzip_buffers 4 16k;
+        gzip_comp_level 2;
+        # support to gzip transfer js,txt,png,etc.some js, need both application/javascript and application/x-javascript to fix some compatibility problems
+        # http://www.webkaka.com/blog/archives/how-to-set-gzip-for-js-in-Nginx.html
+        gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
+        gzip_disable "MSIE [1-6].";
+        # support move all site conf into sub folders 
         include include/*.conf;
     }
diff --git a/nginx.conf b/nginx.conf
@@ -0,0 +1,10 @@
+    # support logging requestion_time and transter time
+    log_format  combinedio  '$remote_addr - $remote_user [$time_local] '
+                                 '"$request" $status $body_bytes_sent '
+                                 '"$http_referer" "$http_user_agent" $request_length $request_time $upstream_response_time';
+
+
+    # support move all site conf into sub folders                       
+    http {
+        include include/*.conf;
+    }
No results found