sudo systemctl start nginx

which nginx
# 輸出示例：/usr/sbin/nginx

nginx -v
# 輸出示例：nginx version: nginx/1.24.0

# Ubuntu/Debian
sudo apt update && sudo apt install nginx

# CentOS/RHEL
sudo yum install epel-release -y
sudo yum install nginx -y

# 或使用 dnf（較新版本）
sudo dnf install nginx -y

sudo systemctl status nginx

systemctl show nginx --property=UnitFileState
# 輸出：UnitFileState=enabled

systemctl cat nginx

/lib/systemd/system/nginx.service

[Unit]
Description=A high performance web server and a reverse proxy server
After=network.target
[Service]
Type=forking
PIDFile=/run/nginx.pid
ExecStartPre=/usr/sbin/nginx -t -q -g 'daemon on; master_process on;'
ExecStart=/usr/sbin/nginx -g 'daemon on; master_process on;'
ExecReload=/usr/sbin/nginx -g 'daemon on; master_process on;' -s reload
ExecStop=/usr/sbin/nginx -s stop
PrivateTmp=true
[Install]
WantedBy=multi-user.target

ls -l /lib/systemd/system/nginx.service
# 或
ls -l /etc/systemd/system/nginx.service

sudo nano /etc/systemd/system/nginx.service

[Unit]
Description=The NGINX HTTP and reverse proxy server
After=network.target network-online.target
Wants=network-online.target

[Service]
Type=forking
PIDFile=/run/nginx.pid
ExecStartPre=/usr/sbin/nginx -t -q -g 'daemon on; master_process on;'
ExecStart=/usr/sbin/nginx -g 'daemon on; master_process on;'
ExecReload=/usr/sbin/nginx -g 'daemon on; master_process on;' -s reload
ExecStop=/usr/sbin/nginx -s stop
Restart=on-failure
RestartSec=5s
LimitNOFILE=100000

[Install]
WantedBy=multi-user.target

ExecStart=/opt/nginx/sbin/nginx -g 'daemon on; master_process on;'

sudo systemctl daemon-reload

sudo systemctl enable nginx

systemctl is-enabled nginx
# 輸出：enabled

sudo systemctl start nginx

sudo mkdir -p /var/log/journal
sudo systemctl restart systemd-journald

journalctl -u nginx --since today

sudo nano /etc/systemd/system/myapp.service

[Unit]
Description=My Java Spring Boot Application
After=network.target nginx.service
Wants=nginx.service
[Service]
User=appuser
Group=appgroup
WorkingDirectory=/opt/myapp
ExecStart=/usr/bin/java -jar -Dspring.profiles.active=prod -Xms512m -Xmx1024m -XX:+UseG1GC myapp.jar
Restart=always
RestartSec=10s
StandardOutput=journal
StandardError=journal
Environment=JAVA_OPTS=-Djava.security.egd=file:/dev/./urandom
Environment=SERVER_PORT=8080
[Install]
WantedBy=multi-user.target

sudo groupadd appgroup
sudo useradd -g appgroup -s /bin/false appuser
sudo chown -R appuser:appgroup /opt/myapp

sudo systemctl daemon-reload
sudo systemctl enable myapp
sudo systemctl start myapp

sudo systemctl status myapp
journalctl -u myapp -f  # 實時查看日志

sudo nano /etc/nginx/conf.d/myapp.conf

server {
    listen 80;
    server_name example.com www.example.com;

    access_log /var/log/nginx/myapp-access.log;
    error_log /var/log/nginx/myapp-error.log;

    location / {
        proxy_pass http://127.0.0.1:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_read_timeout 90s;
        proxy_connect_timeout 90s;
    }

    location /static/ {
        alias /opt/myapp/static;
        expires 30d;
        add_header Cache-Control "public, immutable";
    }

    location /actuator/ {
        proxy_pass http://127.0.0.1:8080/actuator/;
        allow 192.168.1.0/24;
        deny all;
    }
}

sudo nginx -t
sudo systemctl reload nginx

curl -I http://localhost
# 應(yīng)該返回 200 OK

curl http://localhost/actuator/health
# 應(yīng)該返回 {"status":"UP"}

[Unit]
Description=My Java Spring Boot Application
After=network.target mysql.service redis.service
Wants=mysql.service redis.service
[Service]
...

[Service]
...
ExecStartPre=/bin/bash -c 'until curl -s http://127.0.0.1:80/health; do echo "Waiting for Nginx to be ready..."; sleep 5; done'
ExecStart=/usr/bin/java -jar myapp.jar

sudo systemctl status nginx

bind() to 0.0.0.0:80 failed (98: Address already in use)

sudo ss -tlnp | grep :80
# 查看哪個進(jìn)程占用了 80 端口
sudo kill -9 <PID>
# 或修改 nginx 監(jiān)聽端口為 8080 測試

nginx: [emerg] unknown directive "xxx" in /etc/nginx/nginx.conf:xx

sudo nginx -t
# 會精確指出錯誤行

nginx: [emerg] open() "/etc/nginx/conf.d/myapp.conf" failed (13: Permission denied)

sudo chmod 644 /etc/nginx/conf.d/myapp.conf
sudo chown root:root /etc/nginx/conf.d/myapp.conf

Error: Could not create the Java Virtual Machine.
Error: A fatal exception has occurred. Program will exit.

# 查看最近 100 行 Nginx 日志
journalctl -u nginx -n 100

# 實時跟蹤日志
journalctl -u nginx -f

# 查看啟動時所有事件（包括失?。?
journalctl -b -u nginx

# 查看特定時間范圍
journalctl -u nginx --since "2024-03-18 08:00:00" --until "2024-03-18 09:00:00"

systemctl status myapp
# 如果是 inactive，說明 Java 應(yīng)用沒起來

journalctl -u myapp --since "1 hour ago"
# 查看 Java 應(yīng)用啟動日志

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-actuator</artifactId>
</dependency>

server:
  port: 8080
management:
  endpoints:
    web:
      exposure:
        include: health,info,metrics
  endpoint:
    health:
      show-details: always

package com.example.myapp.health;
import org.springframework.boot.actuate.health.Health;
import org.springframework.boot.actuate.health.HealthIndicator;
import org.springframework.stereotype.Component;
import java.util.concurrent.TimeUnit;
@Component
public class DatabaseHealthIndicator implements HealthIndicator {
    @Override
    public Health health() {
        try {
            // 模擬數(shù)據(jù)庫連接測試
            Thread.sleep(100); // 避免過快響應(yīng)
            return Health.up().withDetail("database", "connected").build();
        } catch (InterruptedException e) {
            Thread.currentThread().interrupt();
            return Health.down().withDetail("error", "interrupted").build();
        }
    }
}

spring:
  lifecycle:
    timeout-per-shutdown-phase: 30s

#!/bin/bash
# deploy-nginx-java.sh

set -e  # 遇錯即停

echo "?? 開始部署 Nginx + Java 應(yīng)用..."

# 1. 安裝 Nginx
if ! command -v nginx &> /dev/null; then
    echo "?? 安裝 Nginx..."
    sudo apt update
    sudo apt install -y nginx
fi

# 2. 創(chuàng)建 Java 應(yīng)用用戶
if ! id "appuser" &>/dev/null; then
    echo "?? 創(chuàng)建運行用戶..."
    sudo groupadd appgroup
    sudo useradd -g appgroup -s /bin/false appuser
fi

# 3. 創(chuàng)建應(yīng)用目錄
APP_DIR="/opt/myapp"
mkdir -p $APP_DIR
echo "?? 創(chuàng)建應(yīng)用目錄: $APP_DIR"

# 4. 復(fù)制 JAR 文件（請?zhí)鎿Q為你的實際路徑）
cp ./myapp.jar $APP_DIR/
chown appuser:appgroup $APP_DIR/myapp.jar

# 5. 創(chuàng)建 Java 服務(wù)文件
cat > /etc/systemd/system/myapp.service <<EOF
[Unit]
Description=My Java Spring Boot Application
After=network.target
Wants=network.target

[Service]
User=appuser
Group=appgroup
WorkingDirectory=$APP_DIR
ExecStart=/usr/bin/java -jar -Dspring.profiles.active=prod -Xms512m -Xmx1024m -XX:+UseG1GC myapp.jar
Restart=always
RestartSec=10s
StandardOutput=journal
StandardError=journal
Environment=JAVA_OPTS=-Djava.security.egd=file:/dev/./urandom

[Install]
WantedBy=multi-user.target
EOF

# 6. 創(chuàng)建 Nginx 配置
cat > /etc/nginx/conf.d/myapp.conf <<EOF
server {
    listen 80;
    server_name localhost;

    access_log /var/log/nginx/myapp-access.log;
    error_log /var/log/nginx/myapp-error.log;

    location / {
        proxy_pass http://127.0.0.1:8080;
        proxy_set_header Host \$host;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto \$scheme;
    }

    location /actuator/ {
        proxy_pass http://127.0.0.1:8080/actuator/;
        allow 127.0.0.1;
        deny all;
    }
}
EOF

# 7. 重載 systemd 和 Nginx
echo "?? 重載 systemd 配置..."
sudo systemctl daemon-reload

echo "? 啟用服務(wù)..."
sudo systemctl enable nginx
sudo systemctl enable myapp

echo "?? 啟動服務(wù)..."
sudo systemctl start nginx
sudo systemctl start myapp

# 8. 檢查狀態(tài)
echo "?? 檢查服務(wù)狀態(tài)..."
systemctl status nginx --no-pager
systemctl status myapp --no-pager

echo "? 部署完成！訪問 http://$(curl -s ifconfig.me) 查看應(yīng)用"

# 在 nginx.conf 的 http 塊中添加
limit_req_zone $binary_remote_addr zone=api:10m rate=10r/s;
limit_req zone=api burst=20 nodelay;

nginx -V 2>&1 | grep -i modules

sudo apt update && sudo apt upgrade nginx

journalctl -u nginx --since "1 minute ago"
journalctl -u myapp --since "1 minute ago"