编译安装和命令行命令

uname -a

yum install -y gcc
yum install -y pcre pcre-devel
yum install -y zlib zlib-devel
yum install -y openssl openssl-devel

fs.file-max = 999999
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_keepalive_time = 600
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_max_tw_buckets = 5000
net.ipv4.ip_local_port_range = 1024    61000
net.ipv4.tcp_rmem = 4096 32768 262142
net.ipv4.tcp_wmem = 4096 32768 262142
net.core.netdev_max_backlog = 8096
net.core.rmem_default = 262144
net.core.wmem_default = 262144
net.core.rmem_max = 2097152
net.core.wmem_max = 2097152
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_max_syn_backlog=1024

# 备份原配置文件
sudo cp /etc/sysctl.conf /etc/sysctl.conf.bak.$(date +%Y%m%d_%H%M%S)
 
# 创建新的 sysctl.conf 文件
cat << 'EOF' | sudo tee /etc/sysctl.conf
fs.file-max = 999999
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_keepalive_time = 600
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_max_tw_buckets = 5000
net.ipv4.ip_local_port_range = 1024 61000
net.ipv4.tcp_rmem = 4096 32768 262142
net.ipv4.tcp_wmem = 4096 32768 262142
net.core.netdev_max_backlog = 8096
net.core.rmem_default = 262144
net.core.wmem_default = 262144
net.core.rmem_max = 2097152
net.core.wmem_max = 2097152
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_max_syn_backlog = 1024
EOF
 
# 应用配置
sudo sysctl -p

tar -zxvf nginx-1.28.0.tar.gz
cd nginx-1.28.0
./configure
make
make install

./configure --prefix=/opt/nginx \
           --sbin-path=/usr/bin/nginx \
           --conf-path=/etc/nginx/nginx.conf

# 内置模块（默认启用，可使用 --without 禁用）
--without-http_autoindex_module    # 禁用自动索引
--without-http_charset_module       # 禁用字符集
--without-http_gzip_module         # 禁用 Gzip
--without-http_ssi_module          # 禁用 SSI
--without-http_userid_module       # 禁用用户标识
--without-http_access_module       # 禁用访问控制
--without-http_auth_basic_module   # 禁用基本认证
--without-http_mirror_module       # 禁用镜像
--without-http_autoindex_module    # 禁用自动索引
--without-http_geo_module          # 禁用地理模块
--without-http_map_module          # 禁用 Map
--without-http_split_clients_module # 禁用 A/B 测试
--without-http_referer_module      # 禁用 Referer
--without-http_rewrite_module      # 禁用 URL 重写
--without-http_proxy_module        # 禁用代理
--without-http_fastcgi_module      # 禁用 FastCGI
--without-http_uwsgi_module        # 禁用 uWSGI
--without-http_scgi_module         # 禁用 SCGI
--without-http_memcached_module    # 禁用 Memcached
--without-http_limit_conn_module   # 禁用连接限制
--without-http_limit_req_module    # 禁用请求限制
--without-http_empty_gif_module    # 禁用空GIF
--without-http_browser_module      # 禁用浏览器识别
--without-http_upstream_hash_module # 禁用哈希负载均衡
--without-http_upstream_ip_hash_module # 禁用 IP 哈希
--without-http_upstream_least_conn_module # 禁用最少连接
--without-http_upstream_keepalive_module # 禁用长连接
--without-http_upstream_zone_module # 禁用共享内存

# HTTP 模块
--with-http_ssl_module               # HTTPS 支持
--with-http_v2_module                # HTTP/2 支持
--with-http_v3_module                # HTTP/3 支持（需要 quiche）
--with-http_realip_module            # 真实 IP 提取
--with-http_addition_module          # 响应追加
--with-http_xslt_module              # XSLT 转换
--with-http_image_filter_module      # 图片处理
--with-http_geoip_module             # GeoIP
--with-http_sub_module               # 响应替换
--with-http_dav_module               # WebDAV
--with-http_flv_module               # FLV 流媒体
--with-http_mp4_module               # MP4 流媒体
--with-http_gunzip_module            # Gunzip
--with-http_gzip_static_module       # 预压缩文件
--with-http_auth_request_module      # 认证请求
--with-http_random_index_module      # 随机索引
--with-http_secure_link_module       # 安全链接
--with-http_degradation_module       # 降级
--with-http_slice_module             # 分片
--with-http_stub_status_module       # 状态页面
--with-http_perl_module              # Perl 嵌入
--with-http_xslt_module=dynamic      # 动态加载
 
# 邮件模块
--with-mail                          # 启用邮件代理
--with-mail_ssl_module               # 邮件 SSL
 
# Stream 模块
--with-stream                        # 启用 TCP/UDP 代理
--with-stream_ssl_module             # Stream SSL
--with-stream_realip_module          # Stream 真实 IP
--with-stream_geoip_module           # Stream GeoIP
--with-stream_ssl_preread_module     # Stream SSL 预读

# 如果依赖库不在标准路径
--with-pcre=/path/to/pcre              # PCRE 库路径
--with-pcre-jit                       # 启用 PCRE JIT
--with-zlib=/path/to/zlib             # zlib 路径
--with-openssl=/path/to/openssl       # OpenSSL 路径
--with-openssl-opt=OPTIONS            # OpenSSL 编译选项
--with-libatomic                      # 原子操作库

# 调试选项
--with-debug                          # 启用调试日志
--with-cc-opt=OPTIONS                 # 传递给编译器的选项
--with-ld-opt=OPTIONS                 # 传递给链接器的选项
 
# 示例：优化编译
--with-cc-opt="-O2 -march=native -pipe"
--with-ld-opt="-Wl,-rpath,/usr/local/lib"

# 用户和组
--user=nginx                          # 工作进程用户
--group=nginx                         # 工作进程组
 
# 线程池
--with-threads                        # 启用线程池
--with-file-aio                       # 启用异步 I/O
 
# 动态模块
--add-module=/path/to/module          # 添加第三方模块
--with-compat                         # 启用动态模块兼容性
--modules-path=/path/to/modules       # 动态模块路径

./configure --prefix=/usr/local/nginx \
           --without-http_autoindex_module \
           --without-http_charset_module \
           --without-http_gzip_module \
           --without-http_ssi_module

./configure --prefix=/usr/local/nginx \
           --user=nginx \
           --group=nginx \
           --with-http_ssl_module \
           --with-http_v2_module \
           --with-http_realip_module \
           --with-http_gzip_static_module \
           --with-http_stub_status_module \
           --with-http_sub_module \
           --with-pcre \
           --with-pcre-jit \
           --with-file-aio \
           --with-threads \
           --with-ld-opt="-Wl,-z,relro,--as-needed" \
           --with-cc-opt="-O2 -march=native -pipe -fPIC"

./configure --prefix=/opt/nginx-media \
           --with-http_ssl_module \
           --with-http_v2_module \
           --with-http_flv_module \
           --with-http_mp4_module \
           --with-http_slice_module \
           --with-threads \
           --with-file-aio

./configure --prefix=/usr/local/nginx-proxy \
           --with-http_ssl_module \
           --with-http_realip_module \
           --with-http_stub_status_module \
           --with-stream \
           --with-stream_ssl_module \
           --with-stream_realip_module \
           --with-stream_ssl_preread_module \
           --with-pcre \
           --with-pcre-jit

# 添加 Nginx 官方模块
./configure --add-dynamic-module=../nginx-1.0.15/modules/ngx_http_geoip_module
 
# 添加第三方模块（如 ngx_cache_purge）
git clone https://github.com/nginx-modules/ngx_cache_purge.git
./configure --add-module=../ngx_cache_purge \
           --with-http_ssl_module

# 在 Ubuntu/Debian
sudo apt-get install build-essential libpcre3 libpcre3-dev zlib1g zlib1g-dev libssl-dev
 
# 在 RHEL/CentOS
sudo yum install gcc make pcre-devel zlib-devel openssl-devel

./configure --help

# 在 configure 前创建一个配置文件
cat > build_config.sh << 'EOF'
#!/bin/bash
./configure \
  --prefix=/usr/local/nginx \
  --with-http_ssl_module \
  --with-http_v2_module \
  --with-http_realip_module \
  --with-http_stub_status_module \
  --with-http_gzip_static_module \
  --with-pcre \
  --with-pcre-jit \
  --with-file-aio \
  --with-threads
EOF
 
chmod +x build_config.sh
./build_config.sh

# 编译安装后查看实际配置
/usr/local/nginx/sbin/nginx -V
 
# 输出示例：
nginx version: nginx/1.0.15
built by gcc 9.3.0 (Ubuntu 9.3.0-17ubuntu1~20.04)
built with OpenSSL 1.1.1f  31 Mar 2020
TLS SNI support enabled
configure arguments: --prefix=/usr/local/nginx --with-http_ssl_module ...

/usr/local/nginx/sbin/nginx -s stop

ps -ef | grep nginx
# root     17784     1  0 19:56 ?        00:00:00 nginx: master process /usr/local/nginx/sbin/nginx
# nobody   17785 17784  0 19:56 ?        00:00:00 nginx: worker process
# root     17968  1602  0 20:07 pts/0    00:00:00 grep --color=auto nginx
 
kill -s SIGTERM 17784

mv /usr/local/nginx/logs/access.log /usr/local/nginx/logs/access.log.$(date +%Y%m%d_%H%M%S)
/usr/local/nginx/sbin/nginx -s reopen

/usr/local/nginx/logs/*.log {
    daily
    missingok
    rotate 7
    compress
    delaycompress
    notifempty
    create 640 nobody nobody
    sharedscripts
    postrotate
        /usr/local/nginx/sbin/nginx -s reopen 2>/dev/null || true
    endscript
}

# 确认 Nginx 可执行文件路径
ls -la /usr/local/nginx/sbin/nginx
 
# 确认 PID 文件存在
ls -la /usr/local/nginx/logs/nginx.pid
 
# 确认配置文件路径
/usr/local/nginx/sbin/nginx -t

[Unit]
Description=The nginx HTTP and reverse proxy server
After=network.target remote-fs.target nss-lookup.target
 
[Service]
Type=forking
PIDFile=/usr/local/nginx/logs/nginx.pid
ExecStartPre=/usr/local/nginx/sbin/nginx -t
ExecStart=/usr/local/nginx/sbin/nginx
ExecReload=/bin/kill -s HUP $MAINPID
ExecStop=/bin/kill -s QUIT $MAINPID
PrivateTmp=true
Restart=on-failure
RestartSec=10
 
[Install]
WantedBy=multi-user.target

systemctl daemon-reload

# 启动服务
systemctl start nginx
 
# 停止服务
systemctl stop nginx
 
# 重启服务
systemctl restart nginx
 
# 重新加载配置（不中断服务）
systemctl reload nginx
 
# 查看服务状态
systemctl status nginx
 
# 启用开机自启
systemctl enable nginx
 
# 禁用开机自启
systemctl disable nginx
 
# 查看服务日志
journalctl -u nginx
 
# 测试服务功能
curl -I http://localhost

# 如果 Nginx 正在运行，停止它
sudo /usr/local/nginx/sbin/nginx -s stop
# 或者使用 pkill
sudo pkill -9 nginx

# 查看编译时的安装前缀（如果记得）
# 或者通过运行中的进程查找
ps aux | grep nginx
# 或者查找 nginx 可执行文件
whereis nginx
which nginx

# 删除整个 nginx 安装目录
sudo rm -rf /usr/local/nginx

# 例如，如果编译时指定了 --prefix=/opt/nginx
sudo rm -rf /opt/nginx

# 常见的配置文件位置
sudo rm -rf /etc/nginx
sudo rm -rf /usr/local/etc/nginx

# 默认日志位置
sudo rm -rf /usr/local/nginx/logs
sudo rm -rf /var/log/nginx

sudo rm -rf /var/temp/nginx
sudo rm -rf /var/run/nginx*

# 停止并禁用服务
sudo systemctl stop nginx
sudo systemctl disable nginx
 
# 删除服务文件
sudo rm -f /lib/systemd/system/nginx.service
sudo rm -f /etc/init.d/nginx
sudo rm -f /etc/rc.d/init.d/nginx
 
# 重新加载 systemd
sudo systemctl daemon-reload

# 检查 PATH 中是否有手动添加的链接
# 删除手动创建的符号链接
sudo rm -f /usr/bin/nginx
sudo rm -f /usr/sbin/nginx
sudo rm -f /usr/local/bin/nginx
 
# 检查并删除环境变量配置
sudo rm -f /etc/profile.d/nginx.sh

# 确认 nginx 不再运行
ps aux | grep nginx
 
# 确认 nginx 命令不可用
which nginx
nginx -v 2>&1
 
# 检查主要目录是否已删除
ls -la /usr/local/nginx 2>/dev/null || echo "目录已删除"

#!/bin/bash
echo "=== 开始卸载 Nginx ==="
 
# 停止 Nginx
echo "停止 Nginx 服务..."
sudo pkill -9 nginx 2>/dev/null
sudo systemctl stop nginx 2>/dev/null
sudo systemctl disable nginx 2>/dev/null
 
# 删除主程序
echo "删除 Nginx 文件..."
[ -d "/usr/local/nginx" ] && sudo rm -rf /usr/local/nginx
[ -d "/opt/nginx" ] && sudo rm -rf /opt/nginx
[ -d "/etc/nginx" ] && sudo rm -rf /etc/nginx
[ -d "/var/log/nginx" ] && sudo rm -rf /var/log/nginx
 
# 删除服务文件
echo "删除服务配置..."
[ -f "/lib/systemd/system/nginx.service" ] && sudo rm -f /lib/systemd/system/nginx.service
[ -f "/etc/init.d/nginx" ] && sudo rm -f /etc/init.d/nginx
[ -f "/etc/rc.d/init.d/nginx" ] && sudo rm -f /etc/rc.d/init.d/nginx
sudo systemctl daemon-reload 2>/dev/null
 
# 删除符号链接
echo "删除命令链接..."
[ -f "/usr/bin/nginx" ] && sudo rm -f /usr/bin/nginx
[ -f "/usr/sbin/nginx" ] && sudo rm -f /usr/sbin/nginx
[ -f "/usr/local/bin/nginx" ] && sudo rm -f /usr/local/bin/nginx
 
echo "=== Nginx 卸载完成 ==="

chmod +x uninstall_nginx.sh
sudo ./uninstall_nginx.sh