Nginx 常用的基础配置（web前端相关方面）

基础配置

user                            root;
worker_processes                1;

events {
  worker_connections            10240;
}

http {
  log_format                    '$remote_addr - $remote_user [$time_local] ' '"$request" $status $body_bytes_sent ' '"$http_referer" "$http_user_agent"';
  include                       mime.types;
  default_type                  application/octet-stream;
  sendfile                      on;
  #autoindex                    on;
  #autoindex_exact_size         off;
  autoindex_localtime           on;
  keepalive_timeout             65;
  gzip                          on;
  gzip_disable                  "msie6";
  gzip_min_length               100;
  gzip_buffers                  4 16k;
  gzip_comp_level               1;
  gzip_types                  text/plain application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
  gzip_types                    "*";
  gzip_vary                     off;
  server_tokens                 off;  #隐藏 Nginx 版本信息
  client_max_body_size          200m;
  
  
  server {
    listen                      80 default_server;  # 项目启动端口
    # listen                      80 default;  # 禁止ip直接访问80端口
    server_name                 _;    # 域名（localhost）
    return                      403 /www/403/index.html;
    add_header        X-Frame-Options SAMEORIGIN; # 禁止 iframe 嵌套

    # 访问地址 根路径配置
    location / {
      # 项目目录
      root 	    html;
      # 默认读取文件
      index           index.html;
      # 配置 history 模式的刷新空白
      try_files       $uri $uri/ /index.html;
    }
  
    # 后缀匹配，解决静态资源找不到问题
    location ~* \.(gif|jpg|jpeg|png|css|js|ico)$ { 
      root           html/static/;
    }
  
    # 图片防盗链
    location ~/static/.*\.(jpg|jpeg|png|gif|webp)$ {
      root              html;
      valid_referers    *.deeruby.com;
      if ($invalid_referer) {
        return          403;
      }
    }
  
    # 访问限制
    location /static {
      root               html;
      # allow 允许
      allow              39.xxx.xxx.xxx;
      # deny  拒绝
      deny               all;
    }
  }

  include                       ../serve/*.conf;
}