NGINX

Installation

Ubuntu: apt-get install nginx
CentOS: yum install nginx
Docker: docker pull nginx

Building NGINX in Docker

Configuration

Two server block, serving static files

http {
  index index.html;

  server {
    server_name www.domain1.com;
    access_log logs/domain1.access.log main;

    root /var/www/domain1.com/htdocs;
  }

  server {
    server_name www.domain2.com;
    access_log  logs/domain2.access.log main;

    root /var/www/domain2.com/htdocs;
  }
}

Default Catch All Server Block

http {
  index index.html;

  server {
    listen 80 default_server;
    server_name _; # This is just an invalid value which will never trigger on a real hostname.
    access_log logs/default.access.log main;

    server_name_in_redirect off;

    root  /var/www/default/htdocs;
  }
}

Wildcard subdomain

server_name star.yourdomain.com *.yourdomain.com; # Alternately: _

Reverse Proxy with Caching

http {
    proxy_cache_path  /data/nginx/cache  levels=1:2    keys_zone=STATIC:10m
    inactive=24h  max_size=1g;
    server {
        location / {
            proxy_pass             http://1.2.3.4;
            proxy_set_header       Host $host;
            proxy_buffering        on;
            proxy_cache            STATIC;
            proxy_cache_valid      200  1d;
            proxy_cache_use_stale  error timeout invalid_header updating
                                   http_500 http_502 http_503 http_504;
        }
    }
}

SSL Certificate

http {
    ssl_password_file /etc/keys/global.pass;
    server {
    	listen 80;
	listen 443  ssl;
	server_name	server.domain.com;
	ssl_certificate /etc/nginx/conf.d/domain.cer;	
        ssl_certificate_key /etc/nginx/conf.d/domain.key;
	location / {
        	......
        	}
		access_log /etc/nginx/conf.d/backupaccess.log main;
	}
}

Prevent accessing default page using ip

server {
   	listen	80 default_server;
    	server_name "";
    	return      444;
	}

Return inline html

server {
   	listen	80 default_server;
    	server_name "";
    	location / {
		add_header Content-Type text/html;
		return 200 '<html><body>$remote_addr</body></html>';
}

Block to root, but allow to specific file

server {
        listen 80;
        server_name 10.10.10.10;
        root /storage/block;
        location / { return 444; }
        #location = / { }
        location = /block.png {}
}

Some Errors

Docker: Cannot load certificate when specifiying certificate in same folder: ssl_certificate cert.crt

In fact host volume is /etc/nginx mapping to /etc/nginx/conf.d

error_log /etc/nginx/conf.d/error.log debug;
management    | /docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh
management    | /docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh
management    | /docker-entrypoint.sh: Configuration complete; ready for start up
management    | 2021/07/12 15:48:40 [emerg] 1#1: cannot load certificate "/etc/nginx/cert.crt": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/nginx/cewa.crt','r') error:2006D080:BIO routines:BIO_new_file:no such file)
management    | nginx: [emerg] cannot load certificate "/etc/nginx/cert.crt": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/nginx/cewa.crt','r') error:2006D080:BIO routines:BIO_new_file:no such file)

Solution: use ssl_certificate /etc/nginx/conf.d/cert.crt

“http” directive is not allowed here in

Reason: there are http in parent configuration and this configuration is included in that one
Solution: remove http {} section from mentioned configuration file

Reference

https://www.freecodecamp.org/news/the-nginx-handbook/
https://www.nginx.com/resources/wiki/start/
NGINX with LDAP Authentication: https://www.nginx.com/blog/nginx-plus-authenticate-users/
HTTP Load Balancer: https://docs.nginx.com/nginx/admin-guide/load-balancer/http-load-balancer/
https://my.godaddy.com/help/nginx-on-centos-7-install-a-certificate-27192
https://www.nginx.com/blog/secure-distribution-ssl-private-keys-nginx/
NGINX Tutorial: https://www.javatpoint.com/nginx-tutorial

PreviousLog Rotate NextSystemd

Last updated 1 year ago

hashtagInstallation

hashtagBuilding NGINX in Docker

hashtagConfiguration

hashtagTwo server block, serving static files

hashtagDefault Catch All Server Block

hashtagWildcard subdomain

hashtagReverse Proxy with Caching

hashtagSSL Certificate

hashtagPrevent accessing default page using ip

hashtagReturn inline html

hashtagBlock to root, but allow to specific file

hashtagSome Errors

hashtagDocker: Cannot load certificate when specifiying certificate in same folder: ssl_certificate cert.crt

hashtag“http” directive is not allowed here in

hashtagReference

Installation

Building NGINX in Docker

Configuration

Two server block, serving static files

Default Catch All Server Block

Wildcard subdomain

Reverse Proxy with Caching

SSL Certificate

Prevent accessing default page using ip

Return inline html

Block to root, but allow to specific file

Some Errors

Docker: Cannot load certificate when specifiying certificate in same folder: ssl_certificate cert.crt

“http” directive is not allowed here in

Reference