阿里云服务器5年150元之alpine安装nginx和certimate

1、配置alpine软件源

配置方法
a. 编辑 /etc/apk/repositories
b. 将里面 dl-cdn.alpinelinux.org 的 改成 mirrors.aliyun.com ; 保存退出即可

vi /etc/apk/repositories
localhost:~# cat /etc/apk/repositories
https://mirrors.aliyun.com/alpine/v3.21/main
https://mirrors.aliyun.com/alpine/v3.21/community
#https://dl-cdn.alpinelinux.org/alpine/v3.21/main
#https://dl-cdn.alpinelinux.org/alpine/v3.21/community
#https://dl-cdn.alpinelinux.org/alpine/v3.21/testing
localhost:~# 

2、安装nginx

apk update
apk add nginx
#检查是否安装成功
nginx -v
#出现版本号，代表安装成功
nginx version: nginx/1.26.3

3、编辑nginx配置文件

我这里主要使用作方向代理

mv /etc/nginx/http.d/default.conf /etc/nginx/http.d/default.confback
#编辑配置文件
 vi /etc/nginx/http.d/app.conf 
#内容如下
[root@blog nginx]# cat /etc/nginx/http.d/app.conf 
# 1. HTTP强制跳转（80端口）
server {
    listen 80;
    server_name rongtech.top *.rongtech.top;
    return 301 https://$host$request_uri;  # 
}


# 2. 二级域名HTTPS服务（443端口）
server {
    listen 443 ssl;
    server_name wrt.rongtech.top;
    ssl_certificate /etc/ssl/nginx/cert.rongtech.top.pem;    # 证书需包含泛域名
    ssl_certificate_key /etc/ssl/nginx/key.rongtech.top.pem;
    location / {
        proxy_pass http://127.0.0.1:8090;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
    }
}

将相关证书放入指定路径

mkdir -p /etc/ssl/nginx/ 
ssl_certificate /etc/ssl/nginx/cert.pem;    # 证书需包含一级域名
 ssl_certificate_key /etc/ssl/nginx/key.pem;  

ssl_certificate /etc/ssl/nginx/cert.rongtech.top.pem;    # 证书需包含泛域名
ssl_certificate_key /etc/ssl/nginx/key.rongtech.top.pem;

检查nginx配置是否有误

nginx -t

4、启动Nginx

启动 Nginx​
rc-service nginx start
​停止 Nginx​
rc-service nginx stop
​重启 Nginx​
rc-service nginx restart
​重新加载配置​
rc-service nginx reload
​查看 Nginx 状态​
rc-service nginx status
​设置开机自启动​
rc-update add nginx
​移除开机自启动​
rc-update del nginx
​查看所有服务状态​
rc-status

服务器控制台放开80、443端口

5、简单安装certimate

为了演示nginx反向代理是否成功，以及后期使用该工具来自动申请SSL证书

mkdir -p /opt/certimate 
cd /opt/certimate 
apk add wget 
wget https://gitee.com/certimate-go/certimate/releases/download/v0.3.26/certimate_v0.3.26_linux_amd64.zip
unzip certimate_v0.3.26_linux_amd64.zip

mv certimate_v0.3.26_linux_amd64/certimate ./
#启动certimate
./certimate serve

浏览器访问 wrt.rongtech.top验证反向代理是否成功

默认账号admin@certimate.fun 密码1234567890