server {
        listen       80;
        server_name  內(nèi)網(wǎng)訪問(wèn)域名;
        location / {
            expires -1;
            proxy_set_header Accept-Encoding '';
            root /data/www;
            proxy_store on;
            proxy_store_access user:rw group:rw all:rw;
            proxy_temp_path /data/tmp;
            if ( !-e $request_filename)  {
                 proxy_pass 云對(duì)象存儲(chǔ)地址;
            }
        }
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
 
        location /ngx_stat {
            stub_status on;
            access_log off;
        }
}

vim nginx.conf
#定義nginx運(yùn)行的用戶和用戶組
user  app;
#啟動(dòng)進(jìn)程，通常設(shè)置成和CPU的數(shù)量相等
worker_processes  auto;
#改指令是當(dāng)義工nginx進(jìn)程打開(kāi)的最多文件描述符數(shù)目，理論值應(yīng)該是最多打開(kāi)文件數(shù)(ulimit -n)
#與nginx進(jìn)程數(shù)相除，但是nginx分配請(qǐng)求并不是那么均勻，所以最好與ulimit -n的值保持一致
worker_rlimit_nofile 65535;
events {
    #單個(gè)后臺(tái)worker process進(jìn)程的最大并發(fā)連接數(shù)(最大連接數(shù)=連接數(shù)*進(jìn)程數(shù))
    worker_connections  16383;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    #訪問(wèn)日志格式,其中X-B3-TraceId參數(shù)是鏈路跟蹤參數(shù)
    log_format json '{"@timestamp":"$time_iso8601",'
                 '"host":"$server_addr",'
                 '"clientip":"$remote_addr",'
                 '"size":$body_bytes_sent,'
                 '"responsetime":$request_time,'
                 '"upstreamtime":"$upstream_response_time",'
                 '"upstreamhost":"$upstream_addr",'
                 '"http_host":"$host",'
                 '"url":"$uri",'
                 '"xff":"$http_x_forwarded_for",'
                 '"referer":"$http_referer",'
                 '"agent":"$http_user_agent",'
                 '"X-B3-TraceId":"$http_X_B3_TraceId",'
                 '"Content-Length":"$http_Content_Length",'
                 '"appkey":"$http_appkey",'
                 '"method":"$http_method",'
                 '"status":"$status",'
                 '"ups_status":$upstream_status}';
    #全局訪問(wèn)日志，采用json日志格式
    access_log  /data/logs/nginx/access.log  json;
    #全局錯(cuò)誤日志
    #錯(cuò)誤日志定義等級(jí),默認(rèn)error級(jí)別,[ debug | info | notice | warn | error | crit ]
    error_log   /data/logs/nginx/error.log;
    #sendfile指令制定nginx是否調(diào)用sendfile函數(shù)(zero copy方式)來(lái)輸出文件
    #對(duì)于普通應(yīng)用必須設(shè)為on
    #如果用來(lái)進(jìn)行下載等應(yīng)用磁盤I/O重負(fù)載應(yīng)用，可設(shè)置為off，以平衡磁盤與網(wǎng)絡(luò)I/O處理速度
    #降低系統(tǒng)的uptime
    sendfile        on;
    #防止網(wǎng)絡(luò)阻塞
    tcp_nopush     on;
    #提高數(shù)據(jù)的實(shí)時(shí)響應(yīng)性
    tcp_nodelay    on;
    #隱藏nginx版本號(hào)
    server_tokens off;
    #keepalive超時(shí)時(shí)間，客戶端到服務(wù)器端的連接持續(xù)有效時(shí)間，當(dāng)出現(xiàn)對(duì)服務(wù)器的后端請(qǐng)求時(shí)，
    #keepalive-timeout功能可避免建立或重新建立連接
    keepalive_timeout  65;
    #定義讀取客戶端請(qǐng)求標(biāo)頭的超時(shí)。如果客戶端在此時(shí)間內(nèi)未傳輸整個(gè)標(biāo)頭，
    #則請(qǐng)求將以408(請(qǐng)求超時(shí))錯(cuò)誤終止
    client_header_timeout 15;
    #定義讀取客戶端請(qǐng)求正文的超時(shí)。如果客戶端在此時(shí)間內(nèi)未傳輸任何內(nèi)容，
    #則請(qǐng)求會(huì)因408(請(qǐng)求超時(shí))錯(cuò)誤終止
    client_body_timeout 15;
    #后端服務(wù)器數(shù)據(jù)回傳時(shí)間(代理發(fā)送超時(shí))
    send_timeout 25;
    client_header_buffer_size 4096K;
    #允許客戶端請(qǐng)求的最大單文件字節(jié)數(shù)
    client_max_body_size 10m;
    proxy_cache_path  /data/nginx/proxy_cache/cache levels=1:2 keys_zone=downloadcache:600m max_size=400g inactive=48h use_temp_path=on;
    proxy_temp_path    /data/nginx/proxy_cache/temp;  
    proxy_cache_key    $host$request_uri;
    #開(kāi)啟gzip壓縮
    #gzip  on;
    #gzip_min_length 1k;
    #gzip_buffers 4 16k;
    #壓縮級(jí)別大小，最大為9，值越小，壓縮后比例越小，CPU處理更快，值越大，消耗CPU比較高
    #gzip_comp_level 2;
    #gzip_types text/plain application/javascript text/css application/xml text/javascript application/json;
    #gzip_vary off;
 
include /usr/local/nginx/conf/vhost/*.conf;
}
 
#虛擬主機(jī)配置文件
vim default.conf
server {
        listen       443 ssl;
        server_name  域名;
        ssl_certificate /usr/local/nginx/conf/ssl/域名.crt;
        ssl_certificate_key /usr/local/nginx/conf/ssl/域名.key;
        location / {
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Real-IP $http_x_forward_for;
            proxy_set_header X-Forwarded-Host $server_name;
            proxy_set_header Host $host;
            proxy_cache          downloadcache;
            proxy_cache_valid      200 600s;
            proxy_cache_valid      304 600s;
            proxy_cache_use_stale    invalid_header http_403 http_404 http_500 http_502;
            proxy_cache_lock      on;
            proxy_cache_lock_timeout  5s;
            proxy_pass https://域名;
        }
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
 
        location /ngx_stat {
            stub_status on;
            access_log off;
        }
}