# Upstreams
upstream backend {
    server 127.0.0.1:3000;
    keepalive 5;
}
# HTTP Server
server {
  server_name your_hostname.com;
  error_log /var/log/nginx/rocketchat.access.log;
  location / {
      proxy_pass http://backend;
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";
      proxy_set_header Host $http_host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forward-Proto http;
      proxy_set_header X-Nginx-Proxy true;
      proxy_redirect off;
  }
}

server {
  server_name domain.tld;

  access_log /log/domain.tld.access.log;
  error_log /log/domain.tld.error.log;
  root /var/www/domain.tld/htdocs;

  # 將請求傳遞給 Apache 后端
  location / {
      proxy_pass http://backend;
  }
  # 使用后備處理靜態(tài)文件
  location ~* \.(ogg|ogv|svg|svgz|eot|otf|woff|woff2|ttf|m4a|mp4|ttf|rss|atom|jpe?g|gif|cur|heic|png|tiff|ico|zip|webm|mp3|aac|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf|swf|webp)$ {
      add_header "Access-Control-Allow-Origin" "*";
      access_log off;
      log_not_found off;
      expires max;
      try_files $uri @fallback;
  }
  # 如果找不到文件，則回退以將請求傳遞給 Apache
  location @fallback {
      proxy_pass http://backend;
  }
}

server {
  server_name old-site.com;
  return 301 $scheme://new-site.com$request_uri;
}

server {
  location = /oldpage.html {
    return 301 http://example.org/newpage.html;
  }
}

location /old-site {
  rewrite ^/old-site/(.*) http://example.org/new-site/$1 permanent;
}

upstream example {
  ip_hash;
  # upstream的負(fù)載均衡，weight是權(quán)重，可以根據(jù)機(jī)器配置定義權(quán)重。
  # weigth參數(shù)表示權(quán)值，權(quán)值越高被分配到的幾率越大。
  server 192.168.122.11:8081 ;
  server 127.0.0.1:82 weight=3;
  server 127.0.0.1:83 weight=3 down;
  server 127.0.0.1:84 weight=3; max_fails=3  fail_timeout=20s;
  server 127.0.0.1:85 weight=4;;
  keepalive 32;
}
server {
  #偵聽的80端口
  listen       80;
  server_name  git.example.cn;
  location / {
    # 在這里設(shè)置一個代理，和 upstream 的名字一樣
    proxy_pass   http://example;
  }
}

允許瀏覽器基本上永久地緩存靜態(tài)內(nèi)容。 Nginx 將為您設(shè)置 Expires 和 Cache-Control 頭信息

location /static {
    root /data;
    expires max;
}

如果要求瀏覽器永遠(yuǎn)不會緩存響應(yīng)（例如用于跟蹤請求），請使用 -1

location = /empty.gif {
    empty_gif;
    expires -1;
}

server {
  listen 80;
  server_name api.xxx.com;
    
  add_header 'Access-Control-Allow-Origin' '*';
  add_header 'Access-Control-Allow-Credentials' 'true';
  add_header 'Access-Control-Allow-Methods' 'GET,POST,HEAD';

  location / {
    proxy_pass http://127.0.0.1:3000;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host  $http_host;    
  } 
}

server {
  listen 80;
  # 配置正常的帶www的域名
  server_name www.wangchujiang.com;
  root /home/www/wabg/download;
  location / {
      try_files $uri $uri/ /index.html =404;
  }
}

server {
  # 將不帶 www 的 wangchujiang.com 
  # 永久性重定向到 https://www.wangchujiang.com
  server_name wangchujiang.com;
  rewrite ^(.*) https://www.wangchujiang.com$1 permanent;
}

可以放到 http, server, location, limit_except 語句塊

include blockip.conf;

在 blockip.conf 里面輸入內(nèi)容，如：

deny 165.91.122.67;

deny IP;            # 屏蔽單個 ip 訪問
allow IP;           # 允許單個 ip 訪問
deny all;           # 屏蔽所有 ip 訪問
allow all;          # 允許所有 ip 訪問
deny 123.0.0.0/8;   # 屏蔽整個段即從 123.0.0.1 到 123.255.255.254 訪問的命令
deny 124.45.0.0/16; # 屏蔽IP段即從 123.45.0.1 到 123.45.255.254 訪問的命令
deny 123.45.6.0/24; # 屏蔽IP段即從 123.45.6.1 到 123.45.6.254 訪問的命令

# 如果你想實現(xiàn)這樣的應(yīng)用，除了幾個IP外，其他全部拒絕
allow 1.1.1.1; 
allow 1.1.1.2;
deny all; 

server {
  listen       80;
  server_name  example.com;
  rewrite ^ https://$http_host$request_uri? permanent; # 強(qiáng)制將 http 重定向到 https
  # 在錯誤頁面和“服務(wù)器”響應(yīng)頭字段中啟用或禁用發(fā)射nginx版本。 防止黑客利用版本漏洞攻擊
  server_tokens off;
}

location ^~/api/upload {
  rewrite ^/(.*)$ /wfs/v1/upload break;
  proxy_pass http://wfs-api;
}

將地址 /api/upload 替換為 /wfs/v1/upload

location / {
  if ($http_user_agent ~* "python|curl|java|wget|httpclient|okhttp") {
      return 503;
  }
  # 正常處理
  # ...
}

location ~* \.(gif|jpg|png|swf|flv)$ {
  root html;

  valid_referers none blocked *.nginx.com;

  if ($invalid_referer) {
    rewrite ^/ www.nginx.cn;
    # return 404;
  }
}

location /img/ {
  alias /var/www/image/;
}
# 訪問 /img/ 目錄里面的文件時，
# 會自動去 /var/www/image/ 目錄找文件
location /img/ {
  root /var/www/image;
}
# 訪問 /img/ 目錄下的文件時，
# 會去 /var/www/image/img/ 目錄下找文件

location ~ \/public\/(css|js|img)\/.*\.(js|css|gif|jpg|jpeg|png|bmp|swf) {
  valid_referers none blocked *.jslite.io;
  if ($invalid_referer) {
      rewrite ^/  http://wangchujiang.com/piratesp.png;
  }
}

add_header X-Robots-Tag "noindex";

location = /robots.txt {
  return 200 "User-agent: *\nDisallow: /\n";
}