工程中的nginx配置
#user nobody; worker_processes 24; error_log /home/xxx/opt/nginx/logs/error.log; pid /home/xxx/opt/nginx/run/nginx.pid;events {use epoll;worker_connections 102400; }http {include /home/xxx/opt/nginx/conf.d/mime.types;default_type application/octet-stream;log_format main '$upstream_response_time $request_time $remote_addr - $remote_user [$time_local] [$http_true_client_ip] ''$upstream_addr $http_host $request $request_body "$status" $body_bytes_sent "$http_referer" ''"$http_accept_language" "$http_user_agent" "$http_x_forwarded_for" ';log_format json '{ "@timestamp": "$time_iso8601", ''"response_time": "$upstream_response_time", ''"request_time": $request_time, ''"remote_addr": "$remote_addr", ''"remote_user": "$remote_user", ''"upstream_addr": "$upstream_addr", ''"http_host": "$http_host", ''"request": "$request", ''"status": $status, ''"body_bytes_sent": $body_bytes_sent, ''"http_referer": "$http_referer", ''"verb": "$request_method", ''"url":"$request_uri", ''"http_accept_language": "$http_accept_language", ''"x_forwarded_for": "$http_x_forwarded_for", ''"agent": "$http_user_agent" }';access_log /home/xxx/opt/nginx/logs/access.log main;fastcgi_intercept_errors on;charset utf-8;server_names_hash_bucket_size 128;fastcgi_buffers 8 128k;server_tokens off;client_header_buffer_size 4k;large_client_header_buffers 4 32k;client_max_body_size 300m;sendfile on;tcp_nopush on;keepalive_timeout 60;tcp_nodelay on;client_body_buffer_size 512k;proxy_connect_timeout 5;proxy_read_timeout 60;proxy_send_timeout 5;proxy_ignore_client_abort on;proxy_buffer_size 16k;proxy_buffers 4 64k;proxy_busy_buffers_size 128k;proxy_temp_file_write_size 128k;gzip on;gzip_min_length 1k;gzip_buffers 4 16k;gzip_http_version 1.1;gzip_comp_level 2;gzip_types text/plain application/x-javascript application/javascript text/css application/xml;gzip_vary on;limit_conn_zone $binary_remote_addr zone=addr:10m;limit_req_zone $binary_remote_addr zone=hbhs:10m rate=1r/s;#cache beginproxy_buffering on;proxy_cache_valid 200 304 301 302 10d;proxy_cache_path /home/xxx/data/nginx/cache levels=1:2 keys_zone=mycache:8m max_size=1000m inactive=600m;proxy_temp_path /home/xxx/data/nginx/temp;#cache end#add_header X-Frame-Options SAMEORIGIN;include /home/xxx/opt/nginx/conf.d/*.conf;max_ranges 1; }
nginx配置詳解參考：Nginx配置文件（nginx.conf）配置詳解
?include /home/xxx/opt/nginx/conf.d/mime.types;
MIME-type和Content-Type的關系： 當web服務器收到靜態的資源文件請求時，依據請求文件的后綴名在服務器的MIME配置文件中找到對應的MIME Type，再根據MIME Type設置HTTP Response的Content-Type，然后瀏覽器根據Content-Type的值處理文件。types {Content-Type 文件名后綴 text/html html htm shtml;text/css css;text/xml xml;image/gif gif;image/jpeg jpeg jpg;application/javascript js;application/atom+xml atom;application/rss+xml rss;text/mathml mml;text/plain txt;text/vnd.sun.j2me.app-descriptor jad;text/vnd.wap.wml wml;text/x-component htc;image/png png;image/tiff tif tiff;image/vnd.wap.wbmp wbmp;image/x-icon ico;image/x-jng jng;image/x-ms-bmp bmp;image/svg+xml svg svgz;image/webp webp;application/font-woff woff;application/java-archive jar war ear;application/json json;application/mac-binhex40 hqx;application/msword doc;application/pdf pdf;application/postscript ps eps ai;application/rtf rtf;application/vnd.apple.mpegurl m3u8;application/vnd.ms-excel xls;application/vnd.ms-fontobject eot;application/vnd.ms-powerpoint ppt;application/vnd.wap.wmlc wmlc;application/vnd.google-earth.kml+xml kml;application/vnd.google-earth.kmz kmz;application/x-7z-compressed 7z;application/x-cocoa cco;application/x-java-archive-diff jardiff;application/x-java-jnlp-file jnlp;application/x-makeself run;application/x-perl pl pm;application/x-pilot prc pdb;application/x-rar-compressed rar;application/x-redhat-package-manager rpm;application/x-sea sea;application/x-shockwave-flash swf;application/x-stuffit sit;application/x-tcl tcl tk;application/x-x509-ca-cert der pem crt;application/x-xpinstall xpi;application/xhtml+xml xhtml;application/xspf+xml xspf;application/zip zip;application/octet-stream bin exe dll;application/octet-stream deb;application/octet-stream dmg;application/octet-stream iso img;application/octet-stream msi msp msm;application/vnd.openxmlformats-officedocument.wordprocessingml.document docx;application/vnd.openxmlformats-officedocument.spreadsheetml.sheet xlsx;application/vnd.openxmlformats-officedocument.presentationml.presentation pptx;audio/midi mid midi kar;audio/mpeg mp3;audio/ogg ogg;audio/x-m4a m4a;audio/x-realaudio ra;video/3gpp 3gpp 3gp;video/mp2t ts;video/mp4 mp4;video/mpeg mpeg mpg;video/quicktime mov;video/webm webm;video/x-flv flv;video/x-m4v m4v;video/x-mng mng;video/x-ms-asf asx asf;video/x-ms-wmv wmv;video/x-msvideo avi; }
參考：nginx proxy_pass和rewrite的區別? ? ??Nginx之proxy_redirect詳解
location基本配置
location /A/B{proxy_pass http://XXX.com/A/B;#請求轉向定義的服務器列表 #proxy_redirect off;proxy_set_header Host XXX.com;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;client_max_body_size 10m; #允許客戶端請求的最大單文件字節數client_body_buffer_size 128k; #緩沖區代理緩沖用戶端請求的最大字節數，proxy_connect_timeout 180; #nginx跟后端服務器連接超時時間(代理連接超時)proxy_send_timeout 180; #后端服務器數據回傳時間(代理發送超時)proxy_read_timeout 180; #連接成功后，后端服務器響應時間(代理接收超時)proxy_buffer_size 128k; #設置代理服務器（nginx）保存用戶頭信息的緩沖區大小proxy_buffers 4 256k; #proxy_buffers緩沖區，網頁平均在32k以下的話，這樣設置proxy_busy_buffers_size 512k; #高負荷下緩沖大小（proxy_buffers*2）proxy_temp_file_write_size 512k; #設定緩存文件夾大小，大于這個值，將從upstream服務器傳}
參考：微信網頁授權流程?
nginx配置域名轉發
場景：有兩個微信公眾號A、B，微信公眾號管理平臺配置的回調url分別是 http://A.com、http://B.com。微信公眾號B如果需要獲取微信公眾號A的用戶信息，對應的授權URL如下。
https://open.weixin.qq.com/connect/oauth2/authorize?appid=wx43a850f87498127d&redirect_uri=http%3A%2F%2FA.com%2F&response_type=code&scope=snsapi_userinfo&state=STATE#wechat_redirect
這樣就會面臨一個問題，微信公眾號B就無法獲取到code信息了。
騰訊返回的授權碼URL: http://A.com/?code=001Rk8ue1Ntnxz0udwue1kbUte1Rk8uU&state=STATE
所以需要微信公眾號A對應的Nginx做一下域名轉發，如下。
微信公眾號A對應的Nginx配置（實現域名轉發，將微信公眾號A對應的域名轉發成微信公眾號B對應的域名）location /微信公眾號B標識/XXX {rewrite ^/微信公眾號B標識/(.*) http://B.com/$1 permanent; proxy_set_header Host B.com;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;client_max_body_size 20m;client_body_buffer_size 128k;proxy_connect_timeout 90;proxy_send_timeout 90;proxy_read_timeout 90;proxy_buffer_size 4k;proxy_buffers 4 32k;proxy_busy_buffers_size 64K;proxy_temp_file_write_size 64k;}
上面的方案是基于永久重定向，瀏覽器的URL會發生變化。
另一種方案是基于nginx代理的，但是需要公眾號A、B使用同一個域名。這種方案也支持自定義鏈接分享【如果兩個公眾號使用不同的域名，自定義鏈接分享必然出現無效的簽名這種問題】。
location /微信公眾號B標識/XXX {proxy_pass http://B.com/微信公眾號B標識/XXX/YYY; proxy_redirect off;proxy_set_header Host B.com;proxy_ignore_client_abort on;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;client_max_body_size 10m;client_body_buffer_size 128k;proxy_connect_timeout 8;proxy_send_timeout 1800;proxy_read_timeout 1800;proxy_buffer_size 128k;proxy_buffers 4 256k;proxy_busy_buffers_size 512k;proxy_temp_file_write_size 512k; }
?
實現方案續)
