Ubuntu系统安装配置Nginx Web服务器教程

# CentOS/RHEL 系列
yum install -y epel-release
yum install -y nginx

# Ubuntu/Debian 系列
apt update
apt install -y nginx

systemctl start nginx
systemctl enable nginx
systemctl status nginx

# CentOS 使用 firewalld
firewall-cmd --add-service=http --permanent
firewall-cmd --add-service=https --permanent
firewall-cmd --reload

# Ubuntu 使用 ufw
ufw allow 80/tcp
ufw allow 443/tcp

cat > /etc/nginx/conf.d/example.com.conf << 'EOF'
server {
    listen 80;
    server_name example.com www.example.com;
    root /var/www/example.com;
    index index.html index.htm index.php;

    access_log /var/log/nginx/example.com.access.log;
    error_log /var/log/nginx/example.com.error.log;

    location / {
        try_files $uri $uri/ /index.html;
    }
}
EOF

nginx -t  # 测试配置文件
systemctl reload nginx  # 平滑重载

# 安装Certbot
yum install -y certbot python3-certbot-nginx  # CentOS
apt install -y certbot python3-certbot-nginx  # Ubuntu

# 自动申请并配置SSL
certbot --nginx -d example.com -d www.example.com

# Nginx安全头部配置
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header Strict-Transport-Security "max-age=31536000" always;
add_header Content-Security-Policy "default-src 'self'" always;