sudo apt update && sudo apt upgrade -y
sudo apt install curl wget vim net-tools -y

lsb_release -a
uname -r

Distributor ID: Ubuntu
Description:    Ubuntu 22.04.3 LTS
Release:        22.04
Codename:       jammy
5.15.0-86-generic

sudo apt install nginx -y

sudo systemctl start nginx
sudo systemctl enable nginx

sudo systemctl status nginx

● nginx.service - A high performance web server and a reverse proxy server
     Loaded: loaded (/lib/systemd/system/nginx.service; enabled; vendor preset: enabled)
     Active: active (running) since Mon 2024-06-03 10:00:00 UTC; 1min ago

cat /etc/nginx/sites-available/default

server {
    listen 80;                  # 監(jiān)聽(tīng)端口
    server_name localhost;      # 主機(jī)名或域名
    location / {                # 匹配根路徑
        root /var/www/html;     # 靜態(tài)文件根目錄
        index index.html;       # 默認(rèn)首頁(yè)
    }
}

sudo nginx -t

sudo systemctl reload nginx

sudo vim /etc/nginx/sites-available/my-java-app

server {
    listen 80;
    server_name your-domain.com;  # 或者寫(xiě) IP，如 192.168.1.100
    location / {
        proxy_pass http://localhost:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

sudo nginx -t
sudo systemctl reload nginx

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 
         http://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
    <groupId>com.example</groupId>
    <artifactId>nginx-demo-app</artifactId>
    <version>1.0.0</version>
    <packaging>jar</packaging>
    <parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>3.1.5</version>
        <relativePath/>
    </parent>
    <dependencies>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
    </dependencies>
    <build>
        <plugins>
            <plugin>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-maven-plugin</artifactId>
            </plugin>
        </plugins>
    </build>
</project>

package com.example.nginxdemo;
import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RestController;
@SpringBootApplication
public class Application {
    public static void main(String[] args) {
        SpringApplication.run(Application.class, args);
    }
    @RestController
    static class HelloController {
        @GetMapping("/")
        public String hello() {
            return "Hello from Java Spring Boot via Nginx Reverse Proxy! ??";
        }
        @GetMapping("/health")
        public String health() {
            return "{\"status\": \"UP\", \"message\": \"Service is healthy\"}";
        }
    }
}

mvn clean package
java -jar target/nginx-demo-app-1.0.0.jar

curl http://localhost:8080/
# 輸出：Hello from Java Spring Boot via Nginx Reverse Proxy! ??

upstream backend_servers {
    server 127.0.0.1:8080 weight=3;   # 權(quán)重3
    server 127.0.0.1:8081;            # 權(quán)重1（默認(rèn)）
    server 127.0.0.1:8082;            # 權(quán)重1
}
server {
    listen 80;
    server_name your-domain.com;
    location / {
        proxy_pass http://backend_servers;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

# 終端1
java -jar target/nginx-demo-app-1.0.0.jar --server.port=8080
# 終端2
java -jar target/nginx-demo-app-1.0.0.jar --server.port=8081
# 終端3
java -jar target/nginx-demo-app-1.0.0.jar --server.port=8082

#!/bin/bash
for port in 8080 8081 8082; do
    java -jar target/nginx-demo-app-1.0.0.jar --server.port=$port > /dev/null 2>&1 &
    echo "Started instance on port $port with PID $!"
done

chmod +x start-all.sh
./start-all.sh

sudo mkdir -p /etc/nginx/ssl
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
    -keyout /etc/nginx/ssl/selfsigned.key \
    -out /etc/nginx/ssl/selfsigned.crt

server {
    listen 80;
    server_name your-domain.com;
    return 301 https://$server_name$request_uri;  # 強(qiáng)制跳轉(zhuǎn) HTTPS
}

server {
    listen 443 ssl;
    server_name your-domain.com;

    ssl_certificate /etc/nginx/ssl/selfsigned.crt;
    ssl_certificate_key /etc/nginx/ssl/selfsigned.key;

    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers HIGH:!aNULL:!MD5;

    location / {
        proxy_pass http://backend_servers;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

sudo nginx -t && sudo systemctl reload nginx

upstream backend_servers {
    server 127.0.0.1:8080 max_fails=3 fail_timeout=30s;
    server 127.0.0.1:8081 max_fails=3 fail_timeout=30s;
    server 127.0.0.1:8082 max_fails=3 fail_timeout=30s;
}

@GetMapping("/health")
public ResponseEntity<Map<String, Object>> healthCheck() {
    Map<String, Object> body = new HashMap<>();
    body.put("status", "UP");
    body.put("timestamp", System.currentTimeMillis());
    body.put("hostname", getHostName());
    return ResponseEntity.ok(body);
}
private String getHostName() {
    try {
        return InetAddress.getLocalHost().getHostName();
    } catch (Exception e) {
        return "unknown";
    }
}

location /admin {
    allow 192.168.1.0/24;
    deny all;
    proxy_pass http://backend_servers;
}

http {
    limit_req_zone $binary_remote_addr zone=api_limit:10m rate=10r/s;
    server {
        location /api/ {
            limit_req zone=api_limit burst=20 nodelay;
            proxy_pass http://backend_servers;
        }
    }
}

log_format detailed '$remote_addr - $remote_user [$time_local] '
                    '"$request" $status $body_bytes_sent '
                    '"$http_referer" "$http_user_agent" '
                    'rt=$request_time uct="$upstream_connect_time" uht="$upstream_header_time" urt="$upstream_response_time"';
access_log /var/log/nginx/detailed.log detailed;

tail -f /var/log/nginx/access.log

location /ws/ {
    proxy_pass http://backend_servers;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;
}

@Configuration
@EnableWebSocketMessageBroker
public class WebSocketConfig implements WebSocketMessageBrokerConfigurer {
    @Override
    public void registerStompEndpoints(StompEndpointRegistry registry) {
        registry.addEndpoint("/ws").setAllowedOrigins("*").withSockJS();
    }
    @Override
    public void configureMessageBroker(MessageBrokerRegistry registry) {
        registry.enableSimpleBroker("/topic");
        registry.setApplicationDestinationPrefixes("/app");
    }
}

const socket = new SockJS('/ws');
const stompClient = Stomp.over(socket);
stompClient.connect({}, function(frame) {
    console.log('Connected: ' + frame);
});

proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=my_cache:10m max_size=1g inactive=60m use_temp_path=off;
server {
    location /api/data {
        proxy_cache my_cache;
        proxy_cache_valid 200 302 10m;
        proxy_cache_valid 404 1m;
        proxy_pass http://backend_servers;
    }
}

@GetMapping("/api/data")
public ResponseEntity<String> getData(HttpServletResponse response) {
    response.setHeader("Cache-Control", "max-age=600, public");
    return ResponseEntity.ok("Cached data from Java backend");
}

worker_processes auto;  # 或具體數(shù)字，如 4

events {
    worker_connections 1024;
    use epoll;           # Linux 高效 I/O 模型
    multi_accept on;
}

gzip on;
gzip_types text/plain text/css application/json application/javascript text/xml application/xml;
gzip_min_length 1024;

nginx soft nofile 65536
nginx hard nofile 65536

#!/bin/bash
# deploy-nginx-java.sh
echo "?? 正在停止舊 Java 進(jìn)程..."
pkill -f nginx-demo-app
echo "?? 正在啟動(dòng)三個(gè) Java 實(shí)例..."
for port in 8080 8081 8082; do
    nohup java -jar target/nginx-demo-app-1.0.0.jar --server.port=$port > /tmp/app-$port.log 2>&1 &
    echo "? 啟動(dòng)端口 $port，PID: $!"
done
echo "???  正在重載 Nginx 配置..."
sudo nginx -t && sudo systemctl reload nginx
echo "?? 部署完成！訪問(wèn) http://localhost 查看效果"

chmod +x deploy-nginx-java.sh
./deploy-nginx-java.sh