Centos 7 部署Seafile+Nginx

Centos 7 部署Seafile+Nginx

我们之前简单部署了Seafile服务器，如今在Seafile的基础上使用Openssl+Nginx反向代理8000端口部署。

82  cd /usr/src
   84  wget https://www.openssl.org/source/openssl-1.1.0c.tar.gz
   85  wget http://nginx.org/download/nginx-1.10.2.tar.gz
   86  tar xzf nginx-1.10.2.tar.gz && mv nginx-1.10.2.tar.gz ~
   87  tar xzf openssl-1.1.0c.tar.gz && mv openssl-1.1.0c.tar.gz ~

89  cd nginx-1.10.2
   90  ./configure --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-openssl=/usr/src/openssl-1.1.0c --with-http_ssl_module --with-http_realip_module --with-http_addition_module --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_stub_status_module --with-http_auth_request_module --with-threads --with-stream --with-stream_ssl_module --with-http_slice_module --with-mail --with-mail_ssl_module --with-file-aio --with-http_v2_module --with-ipv6

92  make && make install
   94  useradd -s /sbin/nologin -M nginx
   95  mkdir -p /var/cache/nginx/

98  openssl genrsa -out privkey.pem 2048
   99  openssl req -new -x509 -key privkey.pem -out cacert.pem -days 1095    /*按回车后可以随便填写内容*/

101  vi /etc/nginx/nginx.conf    /*按回车后注释以下内容-并添加内容*/

#    server {
#        listen       80;
#        server_name  localhost;

#charset koi8-r;

#access_log  logs/host.access.log  main;

#        location / {
#            root   html;
#            index  index.html index.htm;
#        }

#error_page  404              /404.html;

# redirect server error pages to the static page /50x.html
        #
#        error_page   500 502 503 504  /50x.html;
#        location = /50x.html {
#            root   html;
#        }

# proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #    root           html;
        #    fastcgi_pass   127.0.0.1:9000;
        #    fastcgi_index  index.php;
        #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
        #    include        fastcgi_params;
        #}

# deny access to .htaccess files, if Apache‘s document root
        # concurs with nginx‘s one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
#    }

/*添加内容如下*/

server {
      listen       80;
      server_name  seafile.abc.com;        #自己的域名
      rewrite ^ https://$http_host$request_uri? permanent;    #强制将http重定向到https
    }
    server {
      listen 443;
      ssl on;
      ssl_certificate /etc/ssl/cacert.pem;           #cacert.pem 文件路径
      ssl_certificate_key /etc/ssl/privkey.pem;      #privkey.pem 文件路径
      server_name seafile.abc.com;        #自己的域名                    
      proxy_set_header X-Forwarded-For $remote_addr;
      location / {
          fastcgi_pass    127.0.0.1:8000;    #端口号
          fastcgi_param   SCRIPT_FILENAME     $document_root$fastcgi_script_name;
          fastcgi_param   PATH_INFO           $fastcgi_script_name;

fastcgi_param   SERVER_PROTOCOL    $server_protocol;
          fastcgi_param   QUERY_STRING        $query_string;
          fastcgi_param   REQUEST_METHOD      $request_method;
          fastcgi_param   CONTENT_TYPE        $content_type;
          fastcgi_param   CONTENT_LENGTH      $content_length;
          fastcgi_param   SERVER_ADDR         $server_addr;
          fastcgi_param   SERVER_PORT         $server_port;
          fastcgi_param   SERVER_NAME         $server_name;
          fastcgi_param   HTTPS               on;
          fastcgi_param   HTTP_SCHEME         https;

access_log      /var/log/nginx/seahub.access.log;
          error_log       /var/log/nginx/seahub.error.log;
      }
      location /seafhttp {
          rewrite ^/seafhttp(.*)$ $1 break;
          proxy_pass http://127.0.0.1:8082;
          client_max_body_size 0;
          proxy_connect_timeout  36000s;
          proxy_read_timeout  36000s;
      }
      location /media {
          root /home/cloud/seafile-server-latest/seahub;    #seahub路径
      }
    }

访问WEB：https://192.168.88.10/    /*如果提示404请重启服务器且执行123,124,125步骤*/

admin_User:[email protected]

psk:abc