linux下nginx的配置，禁止ip访问

记录下问题，程序解压到指定目录，访问403，说明权限不够，运行命令

chmod +x R www/

禁止ip访问，http和https都需要配置

注意 default_server 和 _

    server {
        listen       80 default_server;
        listen       [::]:80 default_server;
        server_name  _;
        return 444;
    }

    server {
        listen       80;
        listen       [::]:80;
        server_name  www.xxx.cn;
		rewrite ^(.*) https://$host$1 permanent;
    }

    server {
        listen       443 ssl http2 default_server;
        listen       [::]:443 ssl http2 default_server;
        server_name  _;
        return 444;
    }

    server {
        listen       443 ssl http2;
        listen       [::]:443 ssl http2;
        server_name  www.xxx.cn;
        root         /usr/share/nginx/html/blog;

	ssl on;
        ssl_certificate "/etc/pki/nginx/1_www.xxxx.cn_bundle.crt";
        ssl_certificate_key "/etc/pki/nginx/private/2_www.xxx.cn.key";
        ssl_session_cache shared:SSL:1m;
        ssl_session_timeout  5m;
		ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;

        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;

        location / {
        }

        error_page 404 /404.html;
            location = /40x.html {
        }

        error_page 500 502 503 504 /50x.html;
            location = /50x.html {
        }
    }

配置好后，运行命令测试配置文件是否通过

nginx -t

如果通过，直接启动或者reload

// 启动
nginx

// 重新载入配置
nginx -s reload