ARM64, ARMV7, AMD64 全平台支持添加
nginx 内置包含的模块
# nginx -V
nginx version: nginx/1.20.2
built by gcc 10.2.1 20210110 (Debian 10.2.1-6)
built with OpenSSL 1.1.1k 25 Mar 2021
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-cc-opt='-g -O2 -ffile-prefix-map=/data/builder/debuild/nginx-1.20.2/debian/debuild-base/nginx-1.20.2=. -fstack-protector-strong -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fPIC' --with-ld-opt='-Wl,-z,relro -Wl,-z,now -Wl,--as-needed -pie' --add-module=/tmp/ngx_cache_purge --add-module=/tmp/ngx_brotli --add-module=/tmp/ngx_waf增加方便且高性能的 Nginx 防火墙模块 ngx_waf
waf on; # 是否启用模块
waf_rule_path /www/server/nginx/src/ngx_waf/assets/rules/; # 模块规则
waf_mode STD !CC; # 启用普通模式并关闭CC防护
waf_cache capacity=50; # 缓存配置
waf_under_attack on uri=/under-attack.html; # 配置5秒盾把测试用的5秒盾html文件复制到你的站点的根目录下
wget https://raw.githubusercontent.com/ADD-SP/ngx_waf/master/assets/under-attack.html -o /www/wwwroot/rn.vsvs.xyz
增加brotli 支持
在nginx配置文件中增加
brotli on;
brotli_comp_level 6;
brotli_static on;
brotli_types
text/css
text/plain
text/javascript
application/javascript
application/json
application/x-javascript
application/xml
application/xml+rss
application/xhtml+xml
application/x-font-ttf
application/x-font-opentype
application/vnd.ms-fontobject
image/svg+xml
image/x-icon
application/rss+xml
application/atom_xml
image/jpeg
image/gif
image/png
image/icon
image/bmp
image/jpg;
在 docker compose 中映射ca文件
volumes:
- ${USERDIR}/nginx/certs/ca.crt:/usr/local/share/ca-certificates/ca.crt
然后执行 docker exec -it [docker name] update-ca-certificates --fresh
例子： docker exec -it [docker name] htpasswd -c /[path to nginx]/conf.d/cron2.htpasswd [user name]
# To add basic authentication to v2 use auth_basic setting.
#这个是提示信息
auth_basic "Please input password";
#存放密码文件的路径
auth_basic_user_file /etc/nginx/conf.d/cron.htpasswd;
nginxweb:
image: bloodstar/nginx-purge
container_name: "nginxweb"
hostname: nginxweb
ports:
- "80:80"
- "443:443"
restart: always
volumes:
# ying she zhu ji wang zhan mu lu
- ${USERDIR}/nginx/conf.d:/etc/nginx/conf.d:ro
- ${USERDIR}/nginxproxy/certs:/etc/nginx/certs:ro
- ${USERDIR}/nginx/nginx.conf:/etc/nginx/nginx.conf:ro
http {
proxy_cache_path /tmp/cache keys_zone=tmpcache:10m;
server {
location / {
proxy_pass http://127.0.0.1:8000;
proxy_cache tmpcache;
proxy_cache_key $uri$is_args$args;
proxy_cache_purge PURGE from 127.0.0.1;
}
}
}
http {
proxy_cache_path /tmp/cache keys_zone=tmpcache:10m;
server {
location / {
proxy_pass http://127.0.0.1:8000;
proxy_cache tmpcache;
proxy_cache_key $uri$is_args$args;
}
location ~ /purge(/.*) {
allow 127.0.0.1;
deny all;
proxy_cache_purge tmpcache $1$is_args$args;
}
}
}
ngx_cache_purge is nginx module which adds ability to purge content from
FastCGI, proxy, SCGI and uWSGI caches.
Work on the original patch was fully funded by yo.se.
This module is production-ready.
- syntax:
fastcgi_cache_purge on|off|<method> [from all|<ip> [.. <ip>]] - default:
none - context:
http,server,location
Allow purging of selected pages from FastCGI's cache.
- syntax:
proxy_cache_purge on|off|<method> [from all|<ip> [.. <ip>]] - default:
none - context:
http,server,location
Allow purging of selected pages from proxy's cache.
- syntax:
scgi_cache_purge on|off|<method> [from all|<ip> [.. <ip>]] - default:
none - context:
http,server,location
Allow purging of selected pages from SCGI's cache.
- syntax:
uwsgi_cache_purge on|off|<method> [from all|<ip> [.. <ip>]] - default:
none - context:
http,server,location
Allow purging of selected pages from uWSGI's cache.
- syntax:
fastcgi_cache_purge zone_name key - default:
none - context:
location
Sets area and key used for purging selected pages from FastCGI's cache.
- syntax:
proxy_cache_purge zone_name key - default:
none - context:
location
Sets area and key used for purging selected pages from proxy's cache.
- syntax:
scgi_cache_purge zone_name key - default:
none - context:
location
Sets area and key used for purging selected pages from SCGI's cache.
- syntax:
uwsgi_cache_purge zone_name key - default:
none - context:
location
Sets area and key used for purging selected pages from uWSGI's cache.
ngx_cache_purge comes with complete test suite based on Test::Nginx.
You can test it by running:
$ prove
This image is based on the official nginx:mainline (see on Dockehub) and recompiled with the same configure options from vanilla nginx sources with addition of --add-module=ngx-cache-purge.
The fork of the original FRiCLE's module is used, which...
- is compatible with modern nginx
- supports purging by partial keys (
*at the end) (see release notes)