Nginx set指令

## Rewrite和常用指令
rewrite 常用正则表达式说明 小括号()之间匹配的内容，可以在后面通过$1来引用，$2表示的是前面第二个()里的内容。正则里 面容易让人困惑的是\转义特殊字符。
## 一、rewrite实例
### rewrite语法
- last 本条规则匹配完成后，继续向下匹配新的location URI规则
- break 本条规则匹配完成后终止，不再匹配后面的任何规则
- redirect 302临时重定向
- permanent 301永久重定向
### 一、目录重定向
```
# www.rewrite.com/old/old.html定向到www.rewrite.com/new/new.html
[root@web-nginx conf.d]# cat rewrite.conf
server {
listen 80;
server_name www.rewrite.com;
location /old {
root /html/rewrite;
index old.html index.htm;
rewrite .* /new/new.html permanent;
}
location /new {
root /html/rewrite;
index new.html index.htm;
}
}
[root@web-nginx conf.d]# tree /html
/html
└── rewrite
├── index.html
├── new
│   └── new.html
└── old
└── old.html
3 directories, 3 files
```
### 二、目录重定向
- /html/rewrite/
- old/old.html
- new/new.html
```
http://www.rewrite.com/old/old.html重定向到http://www.rewrite.com/new/old.html
server {
listen 80;
server_name www.rewrite.com;
location /old {
root /html/rewrite;
index old.html index.htm;
rewrite ^/old/(.*)$
}
location /new {
root /html/rewrite;
index old.html index.htm;
}
}
[root@web-nginx conf.d]# tree /html
/html
└── rewrite
├── index.html
├── new
│   └── old.html
└── old
└── old.html
```
### 三、目录重定向
```
server {
listen 80;
server_name www.rewrite.com;
location /old {
root /html/rewrite;
rewrite ^/old/(.*).html$ http://$host/new/login.html?user=$1;
}
location /new {
root /html/rewrite;
index new.html index.htm;
}
}
```
### 四、指定目录跳到新目录
```
server {
listen 80;
server_name www.rewrite.com;
location /old {
root /html/rewrite;
rewrite ^/old/([a-z]+)(.*)$ /new/$1 permanent;
}
location /new {
root /html/rewrite;
index new.html index.htm;
}
}
```
### 五、80跳转到443
```
server {
listen 80;
listen 443 ssl;
server_name www.test.com;
ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
ssl_certificate /html/test.com.crt;
ssl_certificate_key /html/test.com.key;
ssl_prefer_server_ciphers on;
#自动跳转到HTTPS (可选)
if ($server_port = 80) {
}
location / {
root /html/rewrite;
index index.html index.htm index.php;
}
}
```
## 二、if指令
1.域名重定向
```
# # http://www.rewrite.com重定向到http😕/www.baidu.com
# /etc/nginx/conf.d/xxx.conf
server {
listen 8088;
server_name www.rewrite.com;
#域名跳转
location / {
root /html/rewrite;
index index.html;
if ($host ~* www.rewrite.com){
rewrite .* http://jd.com permanent;
}
}
# 子目录跳转
location /old {
root /html/rewrite;
if ($host ~* www.rewrite.com){
rewrite .* http://jd.com permanent;
}
}
}
```
2.
```
server {
listen 80;
server_name www.rewrite.com;
# # 带参数域名跳转www.rewrite.com/my/index跳转到www.baidu.com/my/index
# # 传送/my/index
# location / {
# root /html/rewrite;
# index index.html;
#
# if ($host ~* www.rewrite.com){
# rewrite .* http://www.baidu.com$request_uri permanent;
# }
# }
# # 匹配网站指定目录www.rewrite.com/old/old.html跳转到www.baidu.com
# location /old {
# root /html/rewrite;
# if ($host ~* www.rewrite.com){
# rewrite .* http://www.baidu.com permanent;
# }
# }
location /old {
root /html/rewrite;
if ($host ~* www.rewrite.com){
rewrite .* http://www.baidu.com$request_uri permanent;
}
}
}
# # www.rewrite.com/old/old.html转到www.baidu.com/old/old.html
```
3.
```
# http://www.rewrite.com/old/index.html
# $1:/old/
# $2:index.html
# http://$host$1$2
location /old {
root /html/rewrite;
index index.html index.hml;
if (-d $request_filename){
}
}
```
## 三、set指令
set 指令是用于定义一个变量，并且赋值
应用：server,
old.rewrite.com重定向www.rewrite.com/old
new.rewrite.com重定向www.rewrite.com/new
在客户端上
```
[root@proxy-nginx conf.d]# tail -5 /etc/hosts
192.168.133.160 www.rewrite.com rewrite.com
192.168.133.160 old.rewrite.com
192.168.133.160 new.rewrite.com
```
服务端
```
[root@web-nginx conf.d]# vim /etc/nginx/conf.d/rewrite.conf
server {
listen 80;
server_name www.rewrite.com;
location / {
root /html/rewrite;
index index.html index.htm index.php;
if ($host ~* "^rewrite.com$
break;
}
if ($host ~* "^(.*).rewrite.com$" ){
set $user $1;
rewrite .* http://rewrite.com/$user permanent;
}
}
location /old {
root /html/rewrite;
index index.html index.htm index.php;
}
location /new {
root /html/rewrite;
index index.html index.htm index.php;
}
}
[root@web-nginx conf.d]# tree /html/
/html/
└── rewrite
├── index.html
├── new
│   ├── index.html
│   └── old.html
└── old
└── index.html
```
## 四、return指令
return返回状态码给客户端
应用：server,
禁止访问.sh后缀文件，返回403
```
server {
listen 80;
server_name www.return.com;
location / {
root /html/rewrite;
index index.html index.htm index.php;
}
location ~* .sh$ {
return 403;
}
}
```
80跳转到443
购买ssl证书
```
# 生成tsa密钥，输入密码
[root@web-nginx html]# openssl genrsa -des3 -out server.key 1024
# 删除密码
[root@web-nginx html]# openssl rsa -in server.key -out server.key
# 生成CSR（证书签名请求），common name要与域名一致
[root@web-nginx html]# openssl req -new -key server.key -out server.csr
#生成自签名证书
[root@web-nginx html]# openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt
[root@web-nginx conf.d]# vim return.conf
server {
listen 80;
server_name www.return.com;
access_log /var/log/nginx/http_access.log main;
return 301 https://www.return.com$request_uri;
}
server {
listen 443 ssl;
server_name www.return.com;
access_log /var/log/nginx/https_access.log main;
ssl on;
ssl_certificate /html/server.crt;
ssl_certificate_key /html/server.key;
location / {
root /html/rewrite;
index index.html index.htm index.php;
}
}
```
## 五、break指令
应用场景：
- break，隐藏真实文件服务器
- last ，接口地址改写
break：重写规则后，不在匹配后面的location，包括当前规则break指令后面命令也不再执行。
last：重写规则后，使用重写后的规则继续匹配下面的location，
```
[root@web-nginx conf.d]# cat return.conf
server {
listen 80;
server_name www.return.com;
access_log /var/log/nginx/http_access.log main;
location / {
root /html/rewrite;
index index.html index.htm index.php;
}
location /break {
root /html/rewrite;
rewrite .* /last/index.html break;
}
location /last {
root /html/rewrite;
rewrite .* /test/index.html last;
}
location /test {
root /html/rewrite;
rewrite .* /break/index.html break;
}
}
```
## 六、location指令
```
= 表示精确匹配，优先级也是最高的
^~ 表示 url 以某个常规字符串开头,理解为匹配url路径即可
~ 表示区分大小写的正则匹配
~* 表示不区分大小写的正则匹配
!~ 表示区分大小写不匹配的正则
!~* 表示不区分大小写不匹配的正则
/ 通用匹配，任何请求都会匹配到
@ 内部服务跳转
```
优先级：
```
= ^~ ~
```
posted @ 2021-08-18 23:26  破碎的屋檐  阅读(2812)  评论(0)    收藏  举报