Jenkins改造—nginx配置鉴权

先kill掉8082的端口进程

复制代码
netstat -natp | grep 8082
kill 10256

1、下载nginx

nginx安装

  1. EPEL 仓库中有 Nginx 的安装包。如果你还没有安装过 EPEL,可以通过运行下面的命令来完成安装

    sudo yum install epel-release

  2. 输入以下命令来安装 Nginx

    sudo yum install nginx

  3. 等到安装完成以后,可以通过以下命令来设置开机启动和运行 Nginx 服务

设置 Nginx 开机启动:

复制代码
sudo systemctl enable nginx

启动 Nginx:

复制代码
sudo systemctl start nginx

通过运行以下命令,来检查 Nginx 的运行状态:

复制代码
sudo systemctl status nginx

浏览器中打开 http://IP

若出现报错:

复制代码
Jul 13 15:42:05 bastion systemd[1]: nginx.service: Failed to parse PID from file /run/nginx.pid: Invalid argument

执行:

复制代码
# 创建目录,并在目录中新增systemd启动配置
mkdir -p /etc/systemd/system/nginx.service.d && printf "[Service]\nExecStartPost=/bin/sleep 0.1\n" >/etc/systemd/system/nginx.service.d/override.conf
# 重启服务
systemctl daemon-reload
systemctl restart nginx.service

2、生成密码用于鉴权配置

nginx用户认证配置( Basic HTTP authentication)

用户名是test,密码是后面的token:xxxxxxxxx

复制代码
simulation
printf "jiuzhou:$(openssl passwd -crypt xxxxxxxxxxxxxxxxxxxx)\n" >>/etc/nginx/htpasswd

alertmanager
printf "admin:$(openssl passwd -crypt xxxxxxxxx)\n" >>/etc/nginx/htpasswd

3、修改nginx配置文件

复制代码
vim /etc/nginx/nginx.conf

# For more information on configuration, see:
#   * Official English Documentation: http://nginx.org/en/docs/
#   * Official Russian Documentation: http://nginx.org/ru/docs/

user root;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;

# Load dynamic modules. See /usr/share/doc/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;

events {
    worker_connections 1024;
}


http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 4096;

    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;

    # Load modular configuration files from the /etc/nginx/conf.d directory.
    # See http://nginx.org/en/docs/ngx_core_module.html#include
    # for more information.
    include /etc/nginx/conf.d/*.conf;

    server {
        listen       8082;
        listen       [::]:8082;
        server_name  http://jenkins.xx.xx.com/;
        root         /usr/share/nginx/html;

        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;

        error_page 404 /404.html;
        location = /404.html {
        }

        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
        }
location /output/ {
    root /var/lib/jenkins/;
    auth_basic "nginx basic http authentication";
    auth_basic_user_file /etc/nginx/htpasswd;
    autoindex on;
}
location / {
        return 404;
    }
    }

# Settings for a TLS enabled server.
#
#    server {
#        listen       443 ssl http2;
#        listen       [::]:443 ssl http2;
#        server_name  _;
#        root         /usr/share/nginx/html;
#
#        ssl_certificate "/etc/pki/nginx/server.crt";
#        ssl_certificate_key "/etc/pki/nginx/private/server.key";
#        ssl_session_cache shared:SSL:1m;
#        ssl_session_timeout  10m;
#        ssl_ciphers HIGH:!aNULL:!MD5;
#        ssl_prefer_server_ciphers on;
#
#        # Load configuration files for the default server block.
#        include /etc/nginx/default.d/*.conf;
#
#        error_page 404 /404.html;
#            location = /40x.html {
#        }
#
#        error_page 500 502 503 504 /50x.html;
#            location = /50x.html {
#        }
#    }

}
复制代码
sudo systemctl reload nginx
sudo systemctl restart nginx
netstat -natp | grep 8082
sudo systemctl status nginx
相关推荐
无敌的牛36 分钟前
Linux基础开发工具
linux·运维·服务器
Edingbrugh.南空37 分钟前
实战指南:用pmap+gdb排查Linux进程内存问题
linux·运维·服务器
孙克旭_2 小时前
day051-ansible循环、判断与jinja2模板
linux·运维·服务器·网络·ansible
总有刁民想爱朕ha2 小时前
零基础搭建监控系统:Grafana+InfluxDB 保姆级教程,5分钟可视化服务器性能!
运维·服务器·grafana
Shartin3 小时前
Can201-Introduction to Networking: Application Layer应用层
服务器·开发语言·php
apihz4 小时前
VM虚拟机全版本网盘+免费本地网络穿透端口映射实时同步动态家庭IP教程
android·服务器·开发语言·网络·数据库·网络协议·tcp/ip
乌云暮年4 小时前
Linux常用命令
linux·服务器·ssh·php
潘晓可4 小时前
Docker部署Nginx代理多个服务:公网域名与内网IP场景全解
nginx·docker·nginx proxy
wanhengidc5 小时前
企业选择大带宽服务器租用的原因有哪些?
运维·服务器
egoist20236 小时前
【Linux仓库】虚拟地址空间【进程·陆】
linux·运维·服务器·操作系统·进程·虚拟地址空间·fork