nginx-1.13.6+replace-filter-nginx-module+modsecurity编译安装手迹

admin

准备文件：
) o, z* p% W; ~  H/ c% gwget https://www.openssl.org/source/openssl-1.1.0f.tar.gz
( [1 y5 {7 }; R+ Btar xvzf openssl-1.1.0f.tar.gz
! Q& Y" K( j1 cwget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.41.tar.gz
tar xvzf pcre-8.41.tar.gz
5 C; X3 c9 A# X" D
- i" Z# B1 P( X3 s! i; cwget http://nginx.org/download/nginx-1.13.6.tar.gz
- P& X' j4 {: J* r' _) Etart xvzf nginx-1.13.6.tar.gz

wget https://github.com/openresty/sregex/archive/master.zip
, `# |  r& i9 dmv master.zip replace-filter-nginx-module-master.zip
unzip replace-filter-nginx-module-master.zip

: y+ Q$ |* R7 [# Y' a1 A# ^7 ^安装sregex
+ W! O! b8 i2 i$ f- ?+ a+ P[replace-filter-nginx-module-master关键词替换模块需要这个东西，如果不喜欢可以用ngx_http_substitutions_filter_module这个关键字替换模块]
& O) ?# I7 Y; t1 |2 a, s* ?( h! Iwget https://github.com/openresty/sregex/archive/master.zip
mv master.zip sregex.zip
. r) f# O! v+ v9 u; v; {4 o7 tunzip sregex.zip
cd sregex
make && make installln -s /usr/lib/libsregex.so.0  /usr/local/lib/libsregex.so.0.0.1 #按实际情况调整
ldconfig

. [$ @$ f& z! _: D安装modsecurity
『依赖的包：pcre httpd-devel libxml2 apr 视情况安装。yum install httpd-devel apr apr-util-devel apr-devel  pcre pcre-devel  libxml2 libxml2-devel）』
git clone https://github.com/SpiderLabs/ModSecurity.git mod_security
cd mod_security
( t7 i6 _0 N3 J5 d# z2 U./autogen.sh  
./configure --enable-standalone-module
make


, a& _& d- v+ b2 s安装nginx
; |( \4 M; y8 h. G( i+ rcd nginx-1.13.6

[Bash shell] 纯文本查看 复制代码

./configure \
--user=www \
--group=www \
--prefix=/www/webserver/nginx-1.13.6 \
--sbin-path=/www/webserver/nginx-1.13.6/sbin/nginx \
--pid-path=/www/webserver/nginx-1.13.6/logs/nginx.pid \
--conf-path=/www/webserver/nginx-1.13.6/conf/nginx.conf \
--error-log-path=/www/webserver/nginx-1.13.6/logs/error.log \
--http-log-path=/www/webserver/nginx-1.13.6/logs/access.log \
--http-client-body-temp-path=/www/webserver/nginx-1.13.6/temp/client \
--http-proxy-temp-path=/www/webserver/nginx-1.13.6/temp/proxy \
--http-fastcgi-temp-path=/www/webserver/nginx-1.13.6/temp/fcgi \
--http-scgi-temp-path=/www/webserver/nginx-1.13.6/temp/scgi \
--http-uwsgi-temp-path=/www/webserver/nginx-1.13.6/temp/uwsgi \
--with-http_flv_module \
--with-http_stub_status_module \
--with-http_realip_module \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_gzip_static_module \
--with-pcre=/root/pcre-8.41 \
--with-http_sub_module \
--add-module=/root/replace-filter-nginx-module-master \
--add-module=/root/mod_security/nginx/modsecurity \
--with-openssl=/root/openssl-1.1.0f

make
. [) o5 Y% M: }8 h+ [, w1 Cmake install
6 O5 r5 Z0 V4 m6 ~# J/ H
. `' S& \1 w' ^) I$ @6 t% {- D注：--with-ipv6 已经被移除默认支持ipv6，   --with-http_spdy 已经被移除合并到--with-http_v2_module
  Q, D! P2 r, \8 W) T( M& S4 C* @



1 R  Q. K0 K8 [6 o/ D

% ?. P  X: B8 N5 Q, N

; `$ C0 e+ Q. h7 T
: `) A* y0 V. E, _& N5 ^