user www-data;

worker_processes auto;   #auto默认为服务器的核心数

pid /run/nginx.pid;

#全局错误日志定义类型，[ debug | info | notice | warn | error | crit ]
error_log /usr/local/nginx/logs/error.log info

http{
   include       mime.types;
   default_type  application/octet-stream;
    
   server_tokens off;
    
   log_format main '$http_x_real_ip - $remote_addr - $remote_user [$time_local] "$request" '
                           '$status $body_bytes_sent "$http_referer" '
                           '"$http_user_agent" $http_x_forwarded_for'
                           ' "$request_time"';

    server_names_hash_bucket_size 128;
    client_header_buffer_size 128k;
    large_client_header_buffers 4 128k;
    client_max_body_size 100m;

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;

    keepalive_timeout 600s;

    fastcgi_connect_timeout 600s;
    fastcgi_send_timeout 600s;
    fastcgi_read_timeout 600s;
    fastcgi_buffer_size 128k;
    fastcgi_buffers 8 128k;
    fastcgi_busy_buffers_size 256k;
    fastcgi_temp_file_write_size 256k;

    gzip on;
    gzip_min_length  1k;
    gzip_buffers     4 16k;
    gzip_http_version 1.0;
    gzip_comp_level 2;
    gzip_types       text/plain application/x-javascript text/css application/xml application/json;
    gzip_vary on;

    # 加载sites-enabled下所有的站点配置
    include /usr/local/nginx/sites-enabled/*.conf;

}

server{
    listen 8089;
    access_log /data/logs/nginx/access.entry.innotechx.cn.log;
    error_log /data/logs/nginx/error.entry.innotechx.cn.log;
    root /opt/case/entry_api/app/public;

	  #  location / {
	  #     set $a  0;
	 #      if ($server_protocol = HTTP/1.0) {
	 #         set $a "${a}1";
	 #      }
	 #      if ($request_method = HEAD) {
	 #         set $a "${a}2";
	 #      }
	 #      if ($a = "012") {
	 #        access_log off;
	 #        return 200;
	  #     }
	  #  }

    location ^~ /upload/ {
          alias /opt/case/entry_manage/entry_api/app/public/upload/;
    }
    if (!-f $request_filename) {
             rewrite ^/(.+)$ /index.php?/$1 last;
    }

    location ~ \.php$ {
       fastcgi_pass 127.0.0.1:9000;
       fastcgi_index   index.php;
       fastcgi_param   SCRIPT_FILENAME $document_root$fastcgi_script_name;
       include fastcgi_params;
	   }

}

等号类型（=）的优先级最高。一旦匹配成功，则不再查找其他匹配项。
^~类型表达式。一旦匹配成功，则不再查找其他匹配项。
正则表达式类型（~ ~*）的优先级次之。如果有多个location的正则能匹配的话，则使用正则表达式最长的那个。
常规字符串匹配类型。按前缀匹配。

user www www;
worker_processes 8;

//10000000表示启用第一个CPU内核，01000000表示启用第二个CPU内核
worker_cpu_affinity 10000000 01000000 00100000 00010000 00001000 00000100 00000010 00000001;


error_log /data/wwwlogs/error_nginx.log crit;
pid /var/run/nginx.pid;
worker_rlimit_nofile 51200;

events {
    use epoll;
    worker_connections 51200;
    }

http {
    include mime.types;
    default_type application/octet-stream;
    server_names_hash_bucket_size 128;
    client_header_buffer_size 32k;
    large_client_header_buffers 4 32k;
    client_max_body_size 50m;
    sendfile on;
    tcp_nopush on;
    keepalive_timeout 120;
    server_tokens off;
    tcp_nodelay on;

fastcgi_connect_timeout 30;
fastcgi_send_timeout 30;
fastcgi_read_timeout 30;
fastcgi_buffer_size 64k;
fastcgi_buffers 4 64k;
fastcgi_busy_buffers_size 128k;
fastcgi_temp_file_write_size 128k;

#Gzip Compression
gzip on;
gzip_buffers 16 8k;
gzip_comp_level 6;
gzip_http_version 1.1;
gzip_min_length 256;
gzip_proxied any;
gzip_vary on;
gzip_types
    text/xml application/xml application/atom+xml application/rss+xml application/xhtml+xml image/svg+xml
    text/javascript application/javascript application/x-javascript
    text/x-json application/json application/x-web-app-manifest+json
    text/css text/plain text/x-component
    font/opentype application/x-font-ttf application/vnd.ms-fontobject
    image/x-icon;
gzip_disable  "msie6";

#If you have a lot of static files to serve through Nginx then caching of the files' metadata (not the actual files' contents) can save some latency.
open_file_cache max=1000 inactive=20s;
open_file_cache_valid 30s;
open_file_cache_min_uses 2;
open_file_cache_errors on;


server {
listen 80;
server_name _;
access_log /data/wwwlogs/access_nginx.log combined;
root /data/wwwroot/default;
index index.html index.php;
location ~ .*\.(php|php5)?$ {
    #fastcgi_pass remote_php_ip:9000;
    fastcgi_pass unix:/dev/shm/php-cgi.sock;
    fastcgi_index index.php;
    include fastcgi.conf;
    }
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|ico)$ {
    expires 30d;
    access_log off;
    }
location ~ .*\.(js|css)?$ {
    expires 7d;
    access_log off;
    }
}

server {
        listen      8080;
        listen  443;
        server_name cos.gameabc2.com;
       # server_name 47.107.239.157;
        ssl     on;
        root    /data/release/mini-program/web;
        index   index.php;
        ssl_certificate /data/app/nginx/cert/gameabc2.com_combine.cer;
        ssl_certificate_key     /data/app/nginx/cert/gameabc2.com.key;
        ssl_session_timeout  5m;
        ssl_session_cache shared:SSL:50m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2  SSLv2 SSLv3;
        ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
        ssl_prefer_server_ciphers   on;

    location / {
        try_files $uri $uri/ /index.php$is_args$query_string;
    }
    location /nginx_status {
        default_type application/json;
        stub_status on;
        access_log off;
    }
    location = /status {
       # fastcgi_pass 127.0.0.1:9000;
        allow 127.0.0.1;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include fastcgi_params;
       # fastcgi_pass 127.0.0.1:9000;
        fastcgi_pass unix:/dev/shm/php-cgi.sock;
    }

    location ~ \.php$ {
        try_files $uri =404;
       # fastcgi_pass 127.0.0.1:9000;
        fastcgi_pass unix:/dev/shm/php-cgi.sock;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param  YII_ENV 'prod';
        fastcgi_param  YII_DEBUG true;
        include fastcgi_params;
        include proxy.conf;
    }
}


include vhost/*.conf;
}


负载均衡配置
upstream cos{
      server 10.117.1.208:443 weight=100;
      server 10.117.1.207:443 weight=100;
      server 10.117.1.204:443 weight=1;
}

server {
        listen      8080;
        listen  443;
        server_name cos.gameabc2.com;
        ssl     on;
        root    /data/release/mini-program/web;
        index   index.php;
        ssl_certificate /data/app/nginx/cert/gameabc2.com_combine.cer;
        ssl_certificate_key     /data/app/nginx/cert/gameabc2.com.key;
        ssl_session_timeout  5m;
        ssl_session_cache shared:SSL:50m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2  SSLv2 SSLv3;
        ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
        ssl_prefer_server_ciphers   on;

    location /cosplay/proof/test/ {
            proxy_pass https://cos;
    }

    location / {
        add_header Access-Control-Allow-Origin *;
        add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
        add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
        proxy_request_buffering  off;
        proxy_pass https://cos/;

    }

    location /nginx_status {
        default_type application/json;
        stub_status on;
        access_log off;
    }

    location = /status {
       # fastcgi_pass 127.0.0.1:9000;
        allow 127.0.0.1;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include fastcgi_params;
       # fastcgi_pass 127.0.0.1:9000;
        fastcgi_pass unix:/dev/shm/php-cgi.sock;
    }




}