- 搭建web服务器
1.1、配置主机IP以及软件仓库搭建
[root@server129 ~]# vmset.sh 100
1.2、查看搭建web服务器所需的软件包
[root@server100 ~]# dnf search nginx
================ 名称 精准匹配：nginx =================
nginx.x86_64 : A high performance web server and reverse proxy server
1.3、安装nginx.x86_64服务
[root@server100 ~]# dnf install nginx.x86_64
1.4、开启nginx服务
[root@server100 ~]# systemctl enable --now nginx.service
Created symlink /etc/systemd/system/multi-user.target.wants/nginx.service → /usr/lib/systemd/system/nginx.service.
1.5、查看火墙状态
[root@server100 ~]# systemctl status firewalld
//如果火墙开启将火墙关闭
[root@server100 ~]# systemctl stop firewalld
2.1、修改默认访问目录
[root@server100 ~]# vim /etc/nginx/nginx.conf
//主配置文件路径
server {
listen 80;
listen [::]:80;
server_name _;
root /var/www/html;
.........
2.2、创建发布路径所需目录
[root@server100 ~]# mkdir -p /var/www/html
2.3、创建发布文件内容
[root@server100 ~]# echo default page > /var/www/html/index.html
2.4、修改读取的默认文件
server {
listen 80;
listen [::]:80;
server_name _;
root /var/www/html;
index index.html; //默认文件
3.1、对站点news.timinglee.org的默认发布目录
（首先要先将主配置文件的server上一行的inculde复制一份并注释掉，粘贴到server后面）
#include /etc/nginx/conf.d/*.conf;
server {
listen 80;
listen [::]:80;
server_name _;
root /var/www/html;
index index.html;
Load configuration files for the default server block.
include /etc/nginx/default.d/*.conf;
error_page 404 /404.html;
location = /404.html {
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
}
Include /etc/nginx/conf.d/*.conf;
3.2、创建子目录配置文件
[root@server100 ~]# cd /etc/nginx/conf.d/ //路径
[root@server100 conf.d]# vim vhosts.conf //子目录文件
server { //子目录文件配置内容
listen 80;
server_name news.timinglee.org;
root /var/www/virtual/timinglee.org/news;
index index.html;
}
3.3、创建默认发布路径目录
[root@server100 ~]# mkdir -p /var/www/virtual/timinglee.org/news
3.4、创建发布文件内容
[root@server100 ~]# echo news.timinglee.org > /var/www/virtual/timinglee.org/news/index.html
3.5、测试
1、在测试端做本地的dns解析
[root@server100 ~]# vim /etc/hosts //文件路径
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
172.25.254.100 server100.timinglee.org news.timinglee.org //配置内容
2、"curl"测试
（1）测试前检查nginx的配置文件是否正常
[root@server100 ~]# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
（2）测试无误重启服务
[root@server100 ~]# systemctl restart nginx.service
（3）测试
[root@server100 ~]# curl 172.25.254.100 //测试第二问的100的IP
default page
[root@server100 ~]# curl news.timinglee.org //测试站点news.timinglee
{在真机中测试：
- 首先要在win11下做本地域名解析，
找到记事本，右键以管理员身份打开，
路径C:\Windows\System32\drivers\etc\hosts
在最后面做域名解析：
172.25.254.100 news.timinglee.org
2、在浏览器中测试：网址中输入IP地址或news域名即可访问到
}
4.1、站点login.timinglee.org的默认发布目录
/var/www/virtual/timinglee.org/login
4.3、配置子目录文件
[root@server100 ~]# vim /etc/nginx/conf.d/vhosts.conf
server {
listen 80;
server_name login.timinglee.org;
root /var/www/virtual/timinglee.org/login;
index index.html;
}
4.4、创建发布文件路径
[root@server100 ~]# mkdir -p /var/www/virtual/timinglee.org/login
4.5、创建默认发布文件内容
[root@server100 ~]# echo login.timinglee.org > /var/www/virtual/timinglee.org/login/index.html
4.6、站点login.timinglee.org在被访问时必须强制走加密协议
[root@server100 ~]# mkdir /etc/nginx/certs //创建加密文件目录
[root@server100 ~]# openssl req -newkey rsa:2048 -nodes -sha256 -keyout /etc/nginx/certs/timinglee.org.key -x509 -days 365 -out /etc/nginx/certs/timinglee.org.crt //加密密钥及证书认证
....+..+.......+..+....+......+...+........+......................+............+...........+....+........+...+....+......+.....+...+.........+...............+.+.........+...+........+.+...+..+................+...+.....+....+........+.........+......+.......+......+...........+....+..+....+...+............+......+..+......+.+......+.......................+.+......+..............+...+..........+.....+......+....+...+........+.+......+.........+.....+...+......+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Country Name (2 letter code) [XX]:CN //加密认证信息
State or Province Name (full name) []:Shanxi
Locality Name (eg, city) [Default City]:Xi'an
Organization Name (eg, company) [Default Company Ltd]:timinglee
Organizational Unit Name (eg, section) []:webserver
Common Name (eg, your name or your server's hostname) []:www.timinglee.org
Email Address []:admin@liu.org
[root@server100 ~]# vim /etc/nginx/conf.d/vhosts.conf //打开子配置文件
server { //信息加密
listen 443 ssl;
server_name login.timinglee.org;
ssl_certificate "/etc/nginx/certs/timinglee.org.crt";
ssl_certificate_key "/etc/nginx/certs/timinglee.org.key";
root /var/www/virtual/timinglee.org/login;
index index.html;
}
server { //强制加密配置内容
listen 80;
server_name login.timinglee.org;
rewrite ^/(.*)$ https://login.timinglee.org/$1 permanent;
}
4.7、检查，重启nginx服务
[root@server100 ~]# nginx -t
nginx: [warn] conflicting server name "login.timinglee.org" on 0.0.0.0:80, ignored
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@server100 ~]# systemctl restart nginx.service
4.8、测试
首先要在win11下做本地域名解析，
找到记事本，右键以管理员身份打开，
路径C:\Windows\System32\drivers\etc\hosts
在最后面做域名解析：
172.25.254.100 news.timinglee.org login.timinglee.org