- 搭建web服务器
1.1、配置主机IP以及软件仓库搭建
root@server129 \~\]# vmset.sh 100 //主机IP配置为172.25.254.100 1.2、查看搭建web服务器所需的软件包 \[root@server100 \~\]# dnf search nginx ================ 名称 精准匹配：nginx ================= nginx.x86_64 : A high performance web server and reverse proxy server 1.3、安装nginx.x86_64服务 \[root@server100 \~\]# dnf install nginx.x86_64 1.4、开启nginx服务 \[root@server100 \~\]# systemctl enable --now nginx.service Created symlink /etc/systemd/system/multi-user.target.wants/nginx.service → /usr/lib/systemd/system/nginx.service. 1.5、查看火墙状态 \[root@server100 \~\]# systemctl status firewalld //如果火墙开启将火墙关闭 \[root@server100 \~\]# systemctl stop firewalld 2.1、修改默认访问目录 \[root@server100 \~\]# vim /etc/nginx/nginx.conf //主配置文件路径 server { listen 80; listen \[::\]:80; server_name _; root /var/www/html; ......... 2.2、创建发布路径所需目录 \[root@server100 \~\]# mkdir -p /var/www/html 2.3、创建发布文件内容 \[root@server100 \~\]# echo default page \> /var/www/html/index.html 2.4、修改读取的默认文件 server { listen 80; listen \[::\]:80; server_name _; root /var/www/html; index index.html; //默认文件 3.1、对站点news.timinglee.org的默认发布目录 （首先要先将主配置文件的server上一行的inculde复制一份并注释掉，粘贴到server后面） #include /etc/nginx/conf.d/\*.conf; server { listen 80; listen \[::\]:80; server_name _; root /var/www/html; index index.html; # Load configuration files for the default server block. include /etc/nginx/default.d/\*.conf; error_page 404 /404.html; location = /404.html { } error_page 500 502 503 504 /50x.html; location = /50x.html { } } Include /etc/nginx/conf.d/\*.conf; 3.2、创建子目录配置文件 \[root@server100 \~\]# cd /etc/nginx/conf.d/ //路径 \[root@server100 conf.d\]# vim vhosts.conf //子目录文件 server { //子目录文件配置内容 listen 80; server_name news.timinglee.org; root /var/www/virtual/timinglee.org/news; index index.html; } 3.3、创建默认发布路径目录 \[root@server100 \~\]# mkdir -p /var/www/virtual/timinglee.org/news 3.4、创建发布文件内容 \[root@server100 \~\]# echo news.timinglee.org \> /var/www/virtual/timinglee.org/news/index.html 3.5、测试 1、在测试端做本地的dns解析 \[root@server100 \~\]# vim /etc/hosts //文件路径 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 172.25.254.100 server100.timinglee.org news.timinglee.org //配置内容 2、"curl"测试 （1）测试前检查nginx的配置文件是否正常 \[root@server100 \~\]# nginx -t nginx: the configuration file /etc/nginx/nginx.conf syntax is ok nginx: configuration file /etc/nginx/nginx.conf test is successful （2）测试无误重启服务 \[root@server100 \~\]# systemctl restart nginx.service （3）测试 \[root@server100 \~\]# curl 172.25.254.100 //测试第二问的100的IP default page \[root@server100 \~\]# curl news.timinglee.org //测试站点news.timinglee news.timinglee.org {在真机中测试： 1. 首先要在win11下做本地域名解析， 找到记事本，右键以管理员身份打开， 路径C:\\Windows\\System32\\drivers\\etc\\hosts 在最后面做域名解析： 172.25.254.100 news.timinglee.org 2、在浏览器中测试：网址中输入IP地址或news域名即可访问到 } 4.1、站点login.timinglee.org的默认发布目录 /var/www/virtual/timinglee.org/login 4.3、配置子目录文件 \[root@server100 \~\]# vim /etc/nginx/conf.d/vhosts.conf server { listen 80; server_name login.timinglee.org; root /var/www/virtual/timinglee.org/login; index index.html; } 4.4、创建发布文件路径 \[root@server100 \~\]# mkdir -p /var/www/virtual/timinglee.org/login 4.5、创建默认发布文件内容 \[root@server100 \~\]# echo login.timinglee.org \> /var/www/virtual/timinglee.org/login/index.html 4.6、站点login.timinglee.org在被访问时必须强制走加密协议 \[root@server100 \~\]# mkdir /etc/nginx/certs //创建加密文件目录 \[root@server100 \~\]# openssl req -newkey rsa:2048 -nodes -sha256 -keyout /etc/nginx/certs/timinglee.org.key -x509 -days 365 -out /etc/nginx/certs/timinglee.org.crt //加密密钥及证书认证 ....+..+.......+..+....+......+...+........+......................+............+...........+....+........+...+....+......+.....+...+.........+...............+.+.........+...+........+.+...+..+................+...+.....+....+........+.........+......+.......+......+...........+....+..+....+...+............+......+..+......+.+......+.......................+.+......+..............+...+..........+.....+......+....+...+........+.+......+.........+.....+...+......+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ----- Country Name (2 letter code) \[XX\]:CN //加密认证信息 State or Province Name (full name) \[\]:Shanxi Locality Name (eg, city) \[Default City\]:Xi'an Organization Name (eg, company) \[Default Company Ltd\]:timinglee Organizational Unit Name (eg, section) \[\]:webserver Common Name (eg, your name or your server's hostname) \[\]:www.timinglee.org Email Address \[\]:admin@liu.org \[root@server100 \~\]# vim /etc/nginx/conf.d/vhosts.conf //打开子配置文件 server { //信息加密 listen 443 ssl; server_name login.timinglee.org; ssl_certificate "/etc/nginx/certs/timinglee.org.crt"; ssl_certificate_key "/etc/nginx/certs/timinglee.org.key"; root /var/www/virtual/timinglee.org/login; index index.html; } server { //强制加密配置内容 listen 80; server_name login.timinglee.org; rewrite \^/(.\*)$ https://login.timinglee.org/$1 permanent; } 4.7、检查，重启nginx服务 \[root@server100 \~\]# nginx -t nginx: \[warn\] conflicting server name "login.timinglee.org" on 0.0.0.0:80, ignored nginx: the configuration file /etc/nginx/nginx.conf syntax is ok nginx: configuration file /etc/nginx/nginx.conf test is successful \[root@server100 \~\]# systemctl restart nginx.service 4.8、测试 首先要在win11下做本地域名解析， 找到记事本，右键以管理员身份打开， 路径C:\\Windows\\System32\\drivers\\etc\\hosts 在最后面做域名解析： 172.25.254.100 news.timinglee.org login.timinglee.org