一、默认配置

  2. #user  nobody;
  3. worker_processes  1;
  5. #error_log  logs/error.log;
  6. #error_log  logs/error.log  notice;
  7. #error_log  logs/error.log  info;
  9. #pid        logs/nginx.pid;
  12. events {
  13.     worker_connections  1024;
  14. }
  17. http {
  18.     include       mime.types;
  19.     default_type  application/octet-stream;
  21.     #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
  22.     #                  '$status $body_bytes_sent "$http_referer" '
  23.     #                  '"$http_user_agent" "$http_x_forwarded_for"';
  25.     #access_log  logs/access.log  main;
  27.     sendfile        on;
  28.     #tcp_nopush     on;
  30.     #keepalive_timeout  0;
  31.     keepalive_timeout  65;
  33.     #gzip  on;
  35.     server {
  36.         listen       8888;
  37.         server_name  localhost;
  39.         #charset koi8-r;
  41.         #access_log  logs/host.access.log  main;
  43.         location / {
  44.             root   html;
  45.             index  index.html index.htm;
  46.         }
  48.         #error_page  404              /404.html;
  50.         # redirect server error pages to the static page /50x.html
  51.         #
  52.         error_page   500 502 503 504  /50x.html;
  53.         location = /50x.html {
  54.             root   html;
  55.         }
  57.         # proxy the PHP scripts to Apache listening on 127.0.0.1:80
  58.         #
  59.         #location ~ \.php$ {
  60.         #    proxy_pass   http://127.0.0.1;
  61.         #}
  63.         # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
  64.         #
  65.         #location ~ \.php$ {
  66.         #    root           html;
  67.         #    fastcgi_pass   127.0.0.1:9000;
  68.         #    fastcgi_index  index.php;
  69.         #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
  70.         #    include        fastcgi_params;
  71.         #}
  73.         # deny access to .htaccess files, if Apache's document root
  74.         # concurs with nginx's one
  75.         #
  76.         #location ~ /\.ht {
  77.         #    deny  all;
  78.         #}
  79.     }
  82.     # another virtual host using mix of IP-, name-, and port-based configuration
  83.     #
  84.     #server {
  85.     #    listen       8000;
  86.     #    listen       somename:8080;
  87.     #    server_name  somename  alias  another.alias;
  89.     #    location / {
  90.     #        root   html;
  91.     #        index  index.html index.htm;
  92.     #    }
  93.     #}
  96.     # HTTPS server
  97.     #
  98.     #server {
  99.     #    listen       443 ssl;
  100.     #    server_name  localhost;
  102.     #    ssl_certificate      cert.pem;
  103.     #    ssl_certificate_key  cert.key;
  105.     #    ssl_session_cache    shared:SSL:1m;
  106.     #    ssl_session_timeout  5m;
  108.     #    ssl_ciphers  HIGH:!aNULL:!MD5;
  109.     #    ssl_prefer_server_ciphers  on;
  111.     #    location / {
  112.     #        root   html;
  113.     #        index  index.html index.htm;
  114.     #    }
  115.     #}
  117. }

二、默认网站

server {
    listen       80;

    server_name  localhost;

    location / {

        root   html;

        index  index.html index.htm;

        #支持目录浏览
         autoindex  on;

    }

    error_page   500 502 503 504  /50x.html;

    location = /50x.html {

        root   html;

    }

}

三、访问控制

location /a {

            autoindex on;
            allow 192.168.8.8;
            deny all;
            #基于客户端IP做过滤，符合条件的允许访问，不符合的返回404；
            if ( $remote_addr !~ "192.168.12" ) {
                #return 404;
                return http://book.ayitula.com;
            }
        }

四、登录验证

location /c {
    auth_basic "登陆验证";
    auth_basic_user_file /etc/nginx/htpasswd;
}

五、日志管理

Nginx访问日志主要有两个参数控制
log_format #用来定义记录日志的格式（可以定义多种日志格式，取不同名字即可）
access_log #用来指定日至文件的路径及使用的何种日志格式记录日志
access_log logs/access.log main;

log_format格式变量： $remote_addr #记录访问网站的客户端地址 $remote_user #远程客户端用户名 $time_local #记录访问时间与时区 $request #用户的http请求起始行信息 $status #http状态码，记录请求返回的状态码，例如：200、301、404等 $body_bytes_sent #服务器发送给客户端的响应body字节数 $http_referer #记录此次请求是从哪个连接访问过来的，可以根据该参数进行防盗链设置。 $http_user_agent #记录客户端访问信息，例如：浏览器、手机客户端等 $http_x_forwarded_for #当前端有代理服务器时，设置web节点记录客户端地址的配置，此参数生效的前提是代理服务器也要进行相关的x_forwarded_for设置

自定义一个json格式的访问日志
log_format main_json ‘{“@timestamp”:”$time_local”,’ ‘“client_ip”: “$remote_addr”,’ ‘“request”: “$request”,’ ‘“status”: “$status”,’ ‘“bytes”: “$body_bytes_sent”,’ ‘“x_forwarded”: “$http_x_forwarded_for”,’ ‘“referer”: “$http_referer”‘ ‘}’; access_log logs/access_json.log main_json;

引用：
[1] : 组团学-nginx