nginx源码编译安装+致远OAhttps部署

tar -zxvf nginx-1.xx.x.tar.gz # x代表版本信息，已下载的各自版本为准；
tar -zxvf pcre-x.xx.tar.gz
tar -zxvf zlib-x.xx.xx.tar.gz
tar -zxvf openssl-x.x.x.tar.gz
unzip nginx-goodies-nginx-sticky-module-ng-08a395c66e42.zip
# 修改解压好的文件名，便于后续安装
mv nginx-1.xx.x nginx
mv pcre-x.xx pcre
mv zlib-x.xx.xx zlib
mv openssl-x.x.x openssl
mv nginx-goodies-nginx-sticky-module-ng-08a395c66e42 nginx-sticky-module

worker_processes auto; 
worker_rlimit_nofile 20960; 
error_log logs/error.log crit;
	events {
	worker_connections 4096;
	multi_accept on; 
	accept_mutex on;
	accept_mutex_delay 500ms; 
}
	http {
		server_tokens off;
		sendfile on;
		tcp_nopush on; 
		tcp_nodelay on;
		access_log off;
		include mime.types;
		default_type application/octet-stream;
		keepalive_timeout 300;
		client_max_body_size 10240M;
		gzip on;
		gzip_min_length 1k;
		gzip_buffers 4 16k;
		gzip_comp_level 3;
		gzip_types text/xml text/plain text/css text/javascript application/x-javascript 
		application/javascript application/xml;
		gzip_disable "MSIE [1-6]\.";
			upstream seeyon_v5_cluster{
				sticky;
				server 192.168.31.110:8080 max_fails=300 fail_timeout=30s; # 192.168.31.110为OA地址 8080为OA使用的端口
				#server 192.168.0.2:80 max_fails=300 fail_timeout=30s;
			}
			server {
				listen 80;
				server_name localhost;
				charset utf-8;
				location / {
				proxy_pass http://seeyon_v5_cluster;
				proxy_set_header Host $host:$server_port;
				proxy_set_header X-Real-IP $remote_addr;
				proxy_set_header REMOTE-HOST $remote_addr;
				proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
				# proxy_set_header X-Forwarded-Proto $scheme;
				proxy_redirect off; 
				proxy_connect_timeout 300;
				proxy_read_timeout 300;
				proxy_send_timeout 300;
			}
				error_page 500 502 503 504 /50x.html;
				location = /50x.html {
				root html;
			}
		}
}

# 修改配置文件后在nginx的启动目录下检查nginx.conf是否合理   seeyon/nginx/sbin  ./nginx -t

server {
				listen 443 ssl;
				ssl_certificate ssl/server.crt; 
				ssl_certificate_key ssl/server.key; 
				ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
				ssl_prefer_server_ciphers on; #协议加密握手参数，建议必加，不然可能无法进行登录！！
				
				location / {
				proxy_pass http://seeyon_v5_cluster;
				proxy_set_header Host $host:$server_port;
				proxy_set_header X-Real-IP $remote_addr;
				proxy_set_header REMOTE-HOST $remote_addr;
				proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
				# proxy_set_header X-Forwarded-Proto $scheme;
				proxy_set_header X-Forwarded-Proto https;
				proxy_redirect off; 
				proxy_connect_timeout 300;
				proxy_read_timeout 300;
				proxy_send_timeout 300;
				}
			}
# 修改配置文件后在nginx的启动目录下检查nginx.conf是否合理   seeyon/nginx/sbin  ./nginx -t

server {
				listen 443 ssl;
				server_name localhost; #域名或IP  
				ssl_certificate ssl/server.crt; 
				ssl_certificate_key ssl/server.key; 
				ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
				ssl_prefer_server_ciphers on; ssl协议握手参数，高版本OA必加
				
				location / {
				proxy_pass http://seeyon_v5_cluster;
				proxy_set_header Host $host:$server_port;
				proxy_set_header X-Real-IP $remote_addr;
				proxy_set_header REMOTE-HOST $remote_addr;
				proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
				proxy_set_header X-Forwarded-Proto $scheme;
      		proxy_set_header Upgrade $http_upgrade;
      		proxy_set_header Connection $connection_upgrade;
				proxy_redirect off; 
				proxy_connect_timeout 300;
				proxy_read_timeout 300;
				proxy_send_timeout 300;
				}
			
			}
			server {
				listen 80;
				server_name localhost; #域名或IP
				charset utf-8;
			
				location / {
            rewrite ^(.*)$ https://$host$1 permanent;
        } #访问IP或域名按实际设置
			}
# 修改配置文件后在nginx的启动目录下检查nginx.conf是否合理   seeyon/nginx/sbin  ./nginx -t

<!--由于高版本OA使用tomcat有变化，需在该位置在增加https内容-->
原内容：
<Host name="localhost"  appBase="webapps"
            unpackWARs="false" autoDeploy="false" errorReportValveClass="com.seeyon.tomcat.CustomErrorValue">
	
修改后内容：
	<Host name="localhost"  appBase="webapps"
            unpackWARs="false" autoDeploy="false" errorReportValveClass="com.seeyon.tomcat.CustomErrorValue">
增加下方对于
     <Valve className="org.apache.catalina.valves.RemoteIpValve" remoteIpHeader="X-Forwarded-For"  
     protocolHeader="X-Forwarded-Proto"  protocolHeaderHttpsValue="https"  httpsServerPort="4443"/> <!--端口基于上方https的配置端口，要进行一致-->。

vi /usr/lib/systemd/system/nginx.service
# 服务脚本内容
[Unit]
Description=nginx - web server
After=network.target remote-fs.target nss-lookup.target

[Service]
Type=forking
PIDFile=/seeyon/nginx/logs/nginx.pid
ExecStartPre=/seeyon/nginx/sbin/nginx -t -c /seeyon/nginx/conf/nginx.conf
ExecStart=/seeyon/nginx/sbin/nginx -c /seeyon/nginx/conf/nginx.conf
ExecReload=/seeyon/nginx/sbin/nginx -s reload
ExecStop=/seeyon/nginx/sbin/nginx -s stop
ExecQuit=/seeyon/nginx/sbin/nginx -s quit
PrivateTmp=true

[Install]
WantedBy=multi-user.target