- \n
- \/etc\/nginx\/nginx.conf\u00a0<\/em><\/strong> where all the main configuration lives. You need not edit this.<\/li>\n
- Directory \/etc\/nginx\/sites-enabled\/<\/strong> with a default file already there for reference<\/li>\n<\/ul>\n
Any custom configuration you wish to add can be added in the directory \/etc\/nginx\/sites-available<\/em><\/strong> and you can then create a symlink of that file to the directory \/etc\/nginx\/sites-enabled<\/em><\/strong>:<\/p>\n
$ sudo ln -s \/etc\/nginx\/sites-available\/my-configuration.conf \/etc\/nginx\/sites-enabled\n$ sudo systemctl reload nginx\n<\/pre>\n
That's the Debian way of doing things. You can also add configurations to \/etc\/nginx\/conf.d\/<\/strong><\/p>\n
B.\u00a0On CentOS, Fedora<\/strong> and RedHat<\/strong> systems:<\/p>\n
- \n
- All the default configuration is crammed inside \/etc\/nginx\/nginx.conf<\/em><\/strong><\/li>\n
- For most use cases, the custom configuration will go to\u00a0\/etc\/nginx\/conf.d<\/em><\/strong> with file names ending in\u00a0.conf\u00a0<\/em><\/strong><\/li>\n<\/ul>\n
Setup<\/h2>\n
To get started you will need the following:<\/p>\n
- \n
- Root access to a VPS with a Public IPv4 address. If you don't already have one, you can get one from SSDNodes<\/a>.<\/li>\n
- Ubuntu 20.04 LTS is used as the base operating system. Although, we will discuss the difference between Nginx on different distributions too.<\/li>\n<\/ol>\n
The Default Nginx Setup<\/h2>\n
Let's install, enable and start Nginx:<\/p>\n
$ sudo apt install nginx -y;\n$ sudo systemctl enable --now nginx;<\/pre>\n
By default Nginx will start a simple HTTP server, and serve this default web page:<\/p>\n
![\"Nginx](\"https:\/\/www.ssdnodes.com\/wp-content\/uploads\/2021\/02\/Nginx-1024x436.png\")
<\/p>\nYou can view the webpage, by simply typing in the Public IP address of your VPS\u00a0 in a web browser. The actual webpage might be different for RedHat like distros and Ubuntu, but ultimately it will be a simple html file that Nginx is configured to serve. Which brings us to the next part -- Configuration.<\/p>\n
Configuration Files<\/h2>\n
All the configuration for Nginx lives in the directory\u00a0\/etc\/nginx<\/em><\/strong> with the\u00a0\/etc\/nginx\/nginx.conf\u00a0<\/strong>file at the heart. This is where things get interesting. For the purposes of this blog post, we will ignore various miscellaneous file like in \/etc\/nginx<\/em><\/strong>\u00a0koi-win, koi-utf, mime.types proxy_params\u00a0<\/em>and the rest. For this post, the basics, the files that matter us are:<\/p>\n
- \n
- nginx.conf:\u00a0<\/em><\/strong>The main configuration file of Nginx server<\/li>\n
- conf.d<\/em><\/strong>: The directory where user specific configurations are stored.<\/li>\n
- site-available<\/em><\/strong> and sites-enabled<\/em><\/strong>: The directory where user specific configurations are stored for Ubuntu and Debian like systems.<\/li>\n<\/ol>\n
Default nginx.conf<\/h2>\n
Removing all the comments, for Ubuntu 20.04 the default configuration comes with the following:<\/p>\n
nginx.conf<\/strong><\/p>\n
user www-data;\nworker_processes auto;\npid \/run\/nginx.pid;\ninclude \/etc\/nginx\/modules-enabled\/*.conf;\n\nevents {\n worker_connections 768;\n}\n\nhttp {\n\n sendfile on;\n tcp_nopush on;\n tcp_nodelay on;\n keepalive_timeout 65;\n types_hash_max_size 2048;\n\n include \/etc\/nginx\/mime.types;\n default_type application\/octet-stream;\n\n ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;\n ssl_prefer_server_ciphers on;\n\n access_log \/var\/log\/nginx\/access.log;\n error_log \/var\/log\/nginx\/error.log;\n gzip on;\n\n include \/etc\/nginx\/conf.d\/*.conf;\n include \/etc\/nginx\/sites-enabled\/*;\n}\n<\/pre>\nsites-enabled\/default<\/strong><\/p>\n
server {\n listen 80 default_server;\n listen [::]:80 default_server;\n\n root \/var\/www\/html;\n index index.html index.htm index.nginx-debian.html;\n server_name _;\n\n location \/ {\n try_files $uri $uri\/ =404;\n }\n}\n<\/pre>\nThis is all there is to the man configuration. Each single line ending with a semi-colon is called a directive, in a bit more formal terms:<\/p>\n
- \n
- A Simple Directive <\/strong>consists of the name of that directive name followed by a list of parameters, seperated by spaces, and ends with a semicolon (;).
\nFor example, the line:<\/p>\nuser www-data;<\/pre>\n
Signifies that the Nginx worker process will start as the Unix user\u00a0www-data<\/em> and you can modify it to run as any other user that you want it to work as.
\nSimilarly, other directives like ssl_protocols is followed by a list of TLS protocols that Nginx supports. If you want to remove older versions like TLSv1, simply remove them from the list of parameters and reload nginx by running the command\u00a0systemctl reload nginx<\/em> and TLSv1 will no longer be supported. However, I don't recommend fiddling with any of the defaults, unless you really know what you are doing. If you wish to go beyond the basics, the official documentation<\/a> is always a great place to go.<\/li>\n- A Block Directive
\n<\/strong>A block directive is made up of the directive name, followed by a pair of curly braces ({}<\/em>) within which there are multiple single directives. The\u00a0http <\/em>block is a really important example for this one, and it is something you will be dealing with a lot. When you are within a block, that block is also called\u00a0context.\u00a0<\/em>So, for example, the lines:<\/p>\ninclude \/etc\/nginx\/sites-enabled\/*;\ninclude \/etc\/nginx\/conf.d\/*.conf;\n<\/pre>\n
Are the directives within the http<\/em> context. All the user specific configuration that lives in \/etc\/sites-enabled\u00a0<\/em>and \/etc\/conf.d\u00a0<\/em>are brought into the http context, because of the above two lines in nginx.conf<\/em>.<\/li>\n<\/ol>\n
Difference between RedHat-like systems and Debian like systems:<\/h2>\n
Debian and Ubuntu<\/h3>\n
Nginx configuration files are quite modular to begin with. You won't find yourself in need of changing the main configuration file unless you are really fine-tuning something. On Debian and Ubuntu, like systems, this modularity is taken a bit further. All your configuration files live like simple text files in the folder \/etc\/nginx\/sites-available\/\u00a0<\/em><\/strong>and if you want to "enable" <\/em><\/strong>a certain configuration you will do so by creating a symlink (a shortcut) of that file to the folder \/etc\/nginx\/sites-enabled:<\/em><\/strong><\/p>\n
$ sudo ln -s \/etc\/nginx\/sites-available\/my-config \/etc\/nginx\/sites-enabled\/my-config<\/pre>\n
This lets users experiment freely with different configurations. If you need to remove a particular configuration, just remove the symlink from the sites-enabled <\/em>directory and reload nginx. In fact, even the default file that was shown in the previous section is a symlink and the actual file lives in the sites-available.
\n<\/em>
\nThere is also conf.d\u00a0<\/em>file that allows you to add configurations in a way that works across all distributions. The only difference is that you have to name your files with a .conf\u00a0<\/em>extension as specified in the nginx.conf<\/em><\/p>\nCentOS, RedHat and Fedora systems<\/h3>\n
In case of CentOS, RHEL and other similar systems, Nginx gets its user specific configuration mostly from the conf.d\u00a0<\/em>subdirectory as decribed by this line in the file nginx.conf<\/em> in the http <\/em>context:<\/p>\n
include \/etc\/nginx\/conf.d\/*.conf;<\/pre>\n
Configuring a simple static site server<\/h2>\n
To finish off our tour of Nginx configuration, let's write a configuration that will serve a static website from the directory \/var\/www\/my-web.<\/em><\/p>\n
Let's create a simple website page:<\/p>\n
$ sudo mkdir -p \/var\/www\/my-web\n$ cd \/var\/www\/my-web\n$ vim index.html<\/pre>\n
Put the follow contents in the index.html:<\/p>\n
<!DOCTYPE html>\n<html>\n<head>\n <title>Page Title<\/title>\n<\/head>\n<body>\n <h1>This is a Heading<\/h1>\n <p>This is a paragraph.<\/p>\n<\/body>\n<\/html>\n<\/pre>\n
This isn't much, but it will serve well as an example. You can, of course create a complete static site using software like Hugo<\/a>.<\/p>\n
Next we can add a configuration, instead of going through site-available folders and then creating symlinks, I will just write the server definition in conf.d <\/em>folder. It will work on all platforms and it is simpler to manage:<\/p>\n
$ vim \/etc\/nginx\/conf.d\/my-web.conf\nserver {\n listen 80 default_server;\n listen [::]:80 default_server;\n\n root \/var\/www\/my-web;\n index index.html index.htm index.nginx-debian.html;\n server_name _;\n\n location \/ {\n try_files $uri $uri\/ =404;\n }\n}\n<\/pre>\nOnce the configuration is in place, let's remove the old configuration and reload:<\/p>\n
$ sudo rm \/etc\/sites-enabled\/default\n$ sudo systemctl reload nginx<\/pre>\n
If you wish to bring back the original configuration, simply remove my-web.conf<\/em> file and recreate the symlink for the default config.<\/p>\n
Conclusion<\/h2>\n
If you wish to learn more about Nginx, check out this post<\/a> detailing how to use it as a reverse proxy endpoint to serve multiple websites. More information about various Nginx directives can be found here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"
Nginx is one the most useful pieces of software when it comes to the web. It has quickly grown from a simple web server to a fully-featured load balancer, reverse proxy server, and a key component in technologies like Kubernetes as an ingress point. Developers, DevOps and sysadmins all come across its installations in some …<\/p>\n","protected":false},"author":20,"featured_media":5736,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[18,30],"tags":[211],"class_list":["post-5721","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-devops","category-tutorials","tag-nginx"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.ssdnodes.com\/wp-json\/wp\/v2\/posts\/5721","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ssdnodes.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ssdnodes.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ssdnodes.com\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ssdnodes.com\/wp-json\/wp\/v2\/comments?post=5721"}],"version-history":[{"count":3,"href":"https:\/\/www.ssdnodes.com\/wp-json\/wp\/v2\/posts\/5721\/revisions"}],"predecessor-version":[{"id":13049,"href":"https:\/\/www.ssdnodes.com\/wp-json\/wp\/v2\/posts\/5721\/revisions\/13049"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ssdnodes.com\/wp-json\/wp\/v2\/media\/5736"}],"wp:attachment":[{"href":"https:\/\/www.ssdnodes.com\/wp-json\/wp\/v2\/media?parent=5721"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ssdnodes.com\/wp-json\/wp\/v2\/categories?post=5721"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ssdnodes.com\/wp-json\/wp\/v2\/tags?post=5721"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- A Block Directive
- conf.d<\/em><\/strong>: The directory where user specific configurations are stored.<\/li>\n
- Ubuntu 20.04 LTS is used as the base operating system. Although, we will discuss the difference between Nginx on different distributions too.<\/li>\n<\/ol>\n
- For most use cases, the custom configuration will go to\u00a0\/etc\/nginx\/conf.d<\/em><\/strong> with file names ending in\u00a0.conf\u00a0<\/em><\/strong><\/li>\n<\/ul>\n
- Directory \/etc\/nginx\/sites-enabled\/<\/strong> with a default file already there for reference<\/li>\n<\/ul>\n