Nginx 설정 및 적용(Mac Os)

로컬에 nginx 설치

• Homebrew 업데이트 및 nginx 설치

brew update
brew install nginx

• nginx 설치 확인

nginx -v

• nginx 실행 및 재실행

brew services start nginx
brew services restart nginx

• 잘 설치되어있는지 확인

http://localhost:80
localhost 만 쳐도 가능

nginx.conf 설정

Linux 버전 리버스 프록시 설정

• homebrew 경로

cd /opt/homebrew/etc/nginx
sudo vi nginx.conf

• 높은 트래픽 관리를 위해 process 개수 설정

worker_processes  auto;

• upstream 을 통해 nginx가 포트를 랜덤으로 사용

upstream front_proxy {
    server 127.0.0.1:8080;
    server 127.0.0.1:8081;
}

• 서버가 받는 로컬 호스트 설정

server {
    listen 80; # 80 요청 신호를 받아 사용
		server_name localhost;
		
    location / {
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Host $http_host;
        proxy_pass http://front_proxy/; # 위의 upstream 에서 가져와 사용
    }
}

• 로그 확인 용 log_format 및 로그 위치 경로 설정 (주석 제거)

log_format main '$remote_addr - $http_x_forwarded_for - $remote_user [$time_local] '
                '"$request" $status $body_bytes_sent '
                '"$http_referer" "$http_user_agent" "$gzip_ratio"';

access_log  /opt/homebrew/var/log/nginx/access.log  main;

error_log /opt/homebrew/var/log/nginx/error.log;

• 다른 폴더에 저장된 도메인별 설정(따로 설정안해도 연결은 됨)

include /opt/homebrew/etc/conf.d/*.conf; //gzip, proxy 활성화 시 필요
include /opt/homebrew/etc/nginx/modules-enabled/*.conf; //SSL 설정 시 필요

• nginx 설정 테스트

nginx -t

• 설정 실행하는 사람의 권한 문제(Nginx 재시작 시 권한 초기화됨)

nginx: the configuration file /opt/homebrew/etc/nginx/nginx.conf syntax is ok
nginx: [emerg] open() "/opt/homebrew/var/run/nginx.pid" failed (13: Permission denied)
nginx: configuration file /opt/homebrew/etc/nginx/nginx.conf test failed

sudo chown -R $(whoami) /opt/homebrew/var/run/
sudo chmod -R 755 /opt/homebrew/var/run/

• nginx 설정 적용

sudo nginx -s reload

• 적용 안될 시 재시작

sudo brew services restart nginx

• 전체 코드

#user nobody;
#user  www-data;
#worker_processes 1;
worker_processes  auto;
#include /opt/homebrew/etc/nginx/modules-enabled/*.conf;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;
#pid /opt/homebrew/var/run/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

   # access_log  logs/access.log  main;
    access_log  /opt/homebrew/var/log/nginx/access.log  main;

    error_log /opt/homebrew/var/log/nginx/error.log;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

   # gzip  on;

    #include /opt/homebrew/etc/conf.d/*.conf;

    upstream front_proxy {
        server 127.0.0.1:8080;
        server 127.0.0.1:8081;
    }

    server {
        listen       80;
        server_name  localhost;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
        proxy_set_header X-Forwarded-For $remote_addr;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_set_header Host $http_host;
            proxy_pass http://front_proxy/; # 위의 upstream 에서 가져와 사용
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #    root           html;
        #    fastcgi_pass   127.0.0.1:9000;
        #    fastcgi_index  index.php;
        #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
        #    include        fastcgi_params;
        #}

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
    }
    
        # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}

    # HTTPS server
    #
    #server {
    #    listen       443 ssl;
    #    server_name  localhost;

    #    ssl_certificate      cert.pem;
    #    ssl_certificate_key  cert.key;

    #    ssl_session_cache    shared:SSL:1m;
    #    ssl_session_timeout  5m;

    #    ssl_ciphers  HIGH:!aNULL:!MD5;
    #    ssl_prefer_server_ciphers  on;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}
    include servers/*;
}

Window 버전 리버스 프록시 설정

user  nginx;
worker_processes  auto;

error_log  /var/log/nginx/error.log notice;
pid        /var/run/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;


    upstream front_proxy {
        server host.docker.internal:8080;
    }

    upstream backend_proxy {
        server host.docker.internal:8090;
    }
    server {
          listen       80;
          server_name  localhost;
  
    location / {
          proxy_set_header X-Forwarded-For $remote_addr;
          proxy_set_header X-Forwarded-Proto $scheme;
          proxy_set_header Host $http_host;
          proxy_pass http://front_proxy/;
          }
  
    location /api/ {
          proxy_set_header X-Forwarded-For $remote_addr;
          proxy_set_header X-Forwarded-Proto $scheme;
          proxy_set_header Host $http_host;
          proxy_pass http://backend_proxy/;
          }
    }
}