Nginx编译安装Stream模块

|

安装 nginx

1
2
tar xf nginx-1.20.2.tar.gz && cd nginx-1.20.2
./configure --prefix=/opt/nginx --with-http_ssl_module --with-stream --with-stream_ssl_module --without-http_rewrite_module && make && make install

安装 pem

1
2
3
4
5
cd ..
install blog.li-chunli.top_cert_chain.pem /opt/nginx/conf/
install blog.li-chunli.top_key.key        /opt/nginx/conf/
cat nginx.conf > /opt/nginx/conf/nginx.conf
cat nginx.service > /lib/systemd/system/nginx.service

FILE

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
root@localhost:~/ss_debian11_v0.9# cat nginx.service
[Unit]
Description=nginx
After=syslog.target network-online.target remote-fs.target nss-lookup.target
Wants=network-online.target

[Service]
Type=forking
PIDFile=/opt/nginx/logs/nginx.pid
ExecStartPre=/opt/nginx/sbin/nginx -t
ExecStart=/opt/nginx/sbin/nginx
ExecReload=/opt/nginx/sbin/nginx -s reload
ExecStop=/opt/nginx/sbin/nginx -s stop
PrivateTmp=true

[Install]
WantedBy=multi-user.target
root@localhost:~/ss_debian11_v0.9#

FILE

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
root@localhost:~/ss_debian11_v0.9# cat nginx.conf
#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

pid        logs/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;
    gzip  on;
    server {
        listen       80;
        server_name  localhost;
        location / {
            root   html;
            index  index.html index.htm;
        }
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
}

stream {
    server {
        listen                  443 ssl;
        ssl_ciphers             HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;
        ssl_certificate         blog.li-chunli.top_cert_chain.pem;
        ssl_certificate_key     blog.li-chunli.top_key.key;
        proxy_pass              127.0.0.1:9999;
    }
}

root@localhost:~/ss_debian11_v0.9#