Nginx Basics

Web Servers

Ng­inx CLI

sudo nginx -h

nginx version: nginx/1.18.0 (Ubuntu)
Usage: nginx [-?hvVtTq] [-s signal] [-c filename] [-p prefix] [-g directives]

Options:
  -?,-h         : this help
  -v            : show version and exit
  -V            : show version and configure options then exit
  -t            : test configuration and exit
  -T            : test configuration, dump it and exit
  -q            : suppress non-error messages during configuration testing
  -s signal     : send signal to a master process: stop, quit, reopen, reload
  -p prefix     : set prefix path (default: /usr/share/nginx/)
  -c filename   : set configuration file (default: /etc/nginx/nginx.conf)
  -g directives : set global directives out of configuration file

Con­trol via sys­tem­ctl.

sudo systemctl start nginx.service

sudo systemctl stop nginx.service

sudo systemctl reload nginx.service

sudo systemctl restart nginx.service

En­able or Dis­able a Vir­tu­al Host Con­fig­u­ra­tion

There is not avail­able a na­tive com­mand equiv­a­lent of a2ensite or a2dissite. So we need to cre­ate or re­move the VH rel­e­vant sym­bol­ic links man­u­al­ly.

sudo ln -s /etc/nginx/sites-{available,enabled}/vhost-name.conf

sudo rm /etc/nginx/sites-enabled/vhost-name.conf

Af­ter that test the con­fig­u­ra­tion and re­load (or restart) the ser­vice.

sudo nginx -tq && sudo nginx -s reload

Ex­am­ple Con­fig­u­ra­tion

Here are few ex­am­ple con­fig­u­ra­tions:

• Lar­avel com­pat­i­ble set­up – where Lar­avel is served on the base URL. This ex­am­ple is based on Lar­avel 10.x Docs.
• Laravel+React com­pat­i­ble set­up – where Re­act is served on the base URL and Lar­avel is served on the sub path (lo­ca­tion) /​​​laravel. Note: in a re­al world Laravel+React ap­pli­ca­tion we do not need such com­pli­cat­ed set­up, but the sce­nario of the con­crete ex­er­cise re­quires it. This ex­am­ple us­es a so­lu­tion pro­vid­ed with­in the an­swers of this Stack Over­flow top­ic: Con­fig ng­inx for Lar­avel In a sub­fold­er.
• Find more ex­am­ples with­in the ref­er­ences be­low.

PHP En­able

Ng­inx us­es PHP-FPM, so as ref­er­ence how to set­up PHP-FPM see the ar­ti­cle: Set­up PHP on Ubun­tu.

Let's En­crypt

Cur­rent­ly I'm us­ing Let's En­crypt *wild­card cer­tifi­cate, which is not com­pat­i­ble with the Ng­inx or Apache2 plu­g­ins, how­ev­er to gen­er­ate the helpers con­fig­u­ra­tion file /etc/letsencrypt/options-ssl-nginx.conf you can use the com­mand pro­vid­ed be­low, but first you must test your con­fig­u­ra­tion for er­rors, be­cause it there is some the conf-file will not be cre­at­ed.

sudo nginx -t

sudo certbot --nginx -n  # run non-interactively: -n

Ref­er­ences

• NG­INX Docs: Prod­uct Doc­u­men­ta­tion
• NG­INX Docs: NG­INX Mod­Se­cu­ri­ty WAF Doc­u­men­ta­tion

• Lin­ode Docs: Se­cur­ing Ng­inx With Mod­Se­cu­ri­ty
• NG­INX Part of F5: F5 NG­INX Mod­Se­cu­ri­ty WAF Is Tran­si­tion­ing to End-of-Life
• Trust­Wave Soft­ware Up­dates: End of Sale and Trust­wave Sup­port for Mod­Se­cu­ri­ty Web Ap­pli­ca­tion Fire­wall
• OWASP Docs: OWASP Core Rule­set Project an­nounces Coraza Se­cLang en­gine
• Prox­mox VE Wi­ki: Web In­ter­face Via Ng­inx Proxy
• Serv­er Fault: How to set up Ng­inx as a caching re­verse proxy?
• Serv­er Fault: Ng­inx en­able site com­mand

Reg­is­ter: Web Servers

Идентифициране

Разработване

Авторизиране

Утвърждаване

Spas

Spas

17.09.2022

18.02.2023

31604

32257