Nginx: Difference between revisions

From Chorke Wiki
Jump to navigation Jump to search
← Older editNewer edit →
VisualWikitext
No edit summary
Line 2: Line 2:
|-
|-
|valign='top' style='width:50%'|
|valign='top' style='width:50%'|
sudo apt install nginx
<syntaxhighlight lang='bash'>
sudo apt-get update;echo
sudo apt install -y nginx
</syntaxhighlight>


|valign='top' style='width:50%'|
|valign='top' style='width:50%'|
|-
|valign='top' colspan='2'|
{|class='wikitable mw-collapsible mw-collapsed'
!scope='col' style='text-align:left'|
[https://editor.plantuml.com/uml/dLFBRjim4BppAnRgnKPgHqqkJW0NWOFKJG-1O3je3hsiHKfHR745alBZxxka1CiF80MgYo3kpEpCBlLW7HfNbsk1jIDTbqjbX5qLkaA39ImnNUM6QYqVQKq6d45jkQIqEqBPTvIqBNGE6QwjEgfCQ9UWbBvq4mk1gMEHwDKg0nD3Mtv7W1RyWM26AzAYGkqWUiaBlVkZUpErKSOgI0pjzlq03YKXbhI3Q5Olzp1tx3A2B-eskyca07vEj9AwH9Whiscx-M-Xj0IMQ7MIlNidVL3AlcKZTNUfDArraPBHr_Nl-VIv4GlCCxbVkC5EBCjkLNmfDg-Cdyk4o77G9vwyb4h2WieKNHErWNJYup7Cg7QUvWX2-9vFquVnM8If3hutyu6hAxY7wTC2hWqMQpl0gX9DXI5X8W7nWymMZOHDWV3wylm6SqfNoXjImtpu5PWsj7pK5u5pa1yCc3pZW31JjYBDMp-eDqOyuETYaNI0C_ljp7j-b9y6a1-eSpfBq90lClYEpNRybN6Kqfgp96GSZE8uvXWDyJH8mFztaB3jtj4wFqtpmMZEKdHjMcQ0X7iE2LeRuYmUayx-YEsts5Fxf-x-RV-1BnJ_ydy1 Diagram]
|-
|valign='top'|
<kroki lang='plantuml'>
@startuml
autonumber
skinparam backgroundColor transparent
skinparam shadowing false
skinparam BoxPadding 20
actor "User Browser" as User
participant "Nginx\n(Reverse Proxy)" as Nginx
box "Ruby Stack" #e3f2fd
    participant "Puma Server" as Puma
end box
box "Python Stack" #f1f8e9
    participant "Gunicorn/uWSGI" as Python
end box
box "Java Stack" #fff3e0
    participant "Spring Boot\n(Embedded Tomcat)" as Spring
end box
== Routing to Ruby (Puma) ==
User -> Nginx ++ : GET /rails-app
Nginx -> Puma ++ : Forward via UNIX Socket\n(e.g., app.sock)
Puma -> Nginx -- : Rack Response
Nginx -> User -- : HTTP Response
== Routing to Python (WSGI) ==
User -> Nginx ++ : GET /django-app
Nginx -> Python ++ : Forward via HTTP/uWSGI Protocol\n(Port 8000)
Python -> Nginx -- : WSGI Response
Nginx -> User -- : HTTP Response
== Routing to Java (Spring Boot) ==
User -> Nginx ++ : GET /java-api
Nginx -> Spring ++ : Proxy Pass via TCP\n(Port 8080)
Spring -> Nginx -- : HTTP Response
Nginx -> User -- : HTTP Response
@enduml
</kroki>
|}
|}
|}


Revision as of 10:13, 6 February 2026

sudo apt-get update;echo
sudo apt install -y nginx

Diagram

Virtual Host

Virtual Host 

cat << EOF | tee /etc/nginx/sites-available/academia.chorke.org >/dev/null
server {
    server_name  academia.chorke.org;

    gzip on;
    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 3;
    gzip_buffers 64 8k;
    gzip_disable "msie6";
    gzip_min_length 1100;
    gzip_http_version 1.0;
    gzip_types text/css text/xml application/x-javascript application/atom+xml text/mathml text/plain text/vnd.sun.j2me.app-descriptor text/vnd.wap.wml text/x-component image/bmp image/svg+xml image/x-icon;

    root /var/chorke/academia.chorke.org/www;
    access_log /var/chorke/academia.chorke.org/logs/nginx.access.log;
    error_log /var/chorke/academia.chorke.org/logs/nginx.error.log info;

    error_page 500 502 503 504 /500.html;
    client_max_body_size 25M;
    keepalive_timeout 10;
    expires $expires;

    location ~ ^/.well-known(/.*|$) {
        alias /var/www/html/.well-known$1;
        add_header Cache-Control public;
        gzip_static on;
        expires max;
    }

    location ^~ /assets/ {
        root /var/chorke/academia.chorke.org/www/assets;
        add_header Cache-Control public;
        gzip_static on;
        expires max;
    }

    location /minio/ {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_buffering on;
        proxy_buffer_size 8k;
        proxy_buffers 2048 8k;
        proxy_pass http://127.0.0.1:9801;
    }

    listen 443 ssl;
    ssl_certificate     /etc/letsencrypt/live/academia.chorke.org/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/academia.chorke.org/privkey.pem;
    include             /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam         /etc/letsencrypt/ssl-dhparams.pem;
}

server {
  server_name academia.chorke.org;

  if ($host = academia.chorke.org) {
    return 301 https://$host$request_uri;
  }

  listen 80;
  return 404;
}
EOF

ln -s /etc/nginx/sites-available/academia.chorke.org\
      /etc/nginx/sites-enabled/academia.chorke.org

Reverse Proxy

Reverse Proxy

Reverse Proxy » MinIO 
MINIO_OPTS="--address :9800 --console-address :9801"
MINIO_VOLUMES="/home/minio/.minio/data"
MINIO_ROOT_USER=admin
MINIO_ROOT_PASSWORD=academia
MINIO_CONFIG_ENV_FILE=/etc/default/minio
MINIO_BROWSER_REDIRECT_URL="http://academia.chorke.org/minio/"

location /minio/ {
   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
   proxy_set_header X-Forwarded-Proto $scheme;
   proxy_set_header Host $http_host;
   proxy_buffering on;
   proxy_buffer_size 8k;
   proxy_buffers 2048 8k;
   proxy_redirect off;
   proxy_pass http://127.0.0.1:9801/;
}
Reverse Proxy » ROR 
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $http_host;
proxy_redirect off;

location / {
  proxy_pass http://127.0.0.1:3001;
}

location /api {
  proxy_pass http://127.0.0.1:3002;
}

Knowledge

Knowledge 

ufw status
netstat -a
netstat -lpn
apt install ufw
apt install nmap

sudo ss -tulwn | grep LISTEN
sudo ss -tulpn | grep LISTEN
sudo ss -tulpn | grep LISTEN | grep sshd
sudo ss -tulpn | grep LISTEN | grep minio
sudo ss -tulpn | grep LISTEN | grep resolve

sudo ufw status
sudo ufw app list
sudo ufw allow 'Nginx HTTP'
sudo ss -tulpn     | grep LISTEN
sudo lsof -i -P -n | grep LISTEN

apt install telnet
apt list --installed
netstat -uap|grep nginx

References

References

Retrieved from "https://wiki.chorke.org/index.php?title=Nginx&oldid=16544"