nginx-1.13.6+replace-filter-nginx-module+modsecurity编译安装手迹

admin

准备文件：
# ^2 Q6 P$ {( r  O5 N/ a3 _* Kwget https://www.openssl.org/source/openssl-1.1.0f.tar.gz
. J3 i$ _' @3 Q2 a, e( [tar xvzf openssl-1.1.0f.tar.gz
4 _, }. K: d, r, Q6 O% Swget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.41.tar.gz
! L# h8 |5 ]  `; @' |tar xvzf pcre-8.41.tar.gz
! D  u& |3 R9 o6 E( l4 Z
# Q- t' Q0 P' P% T, p3 c: e5 ]wget http://nginx.org/download/nginx-1.13.6.tar.gz
tart xvzf nginx-1.13.6.tar.gz

, U6 l; t" _" \2 ^6 Dwget https://github.com/openresty/sregex/archive/master.zip
mv master.zip replace-filter-nginx-module-master.zip
unzip replace-filter-nginx-module-master.zip

% b# T- M5 {7 J* P1 y* ]安装sregex
[replace-filter-nginx-module-master关键词替换模块需要这个东西，如果不喜欢可以用ngx_http_substitutions_filter_module这个关键字替换模块]
wget https://github.com/openresty/sregex/archive/master.zip
mv master.zip sregex.zip
unzip sregex.zip
# w/ p% L6 G: }, y$ Acd sregex
5 c8 k+ a) g" C, ~7 l1 j2 f0 }make && make installln -s /usr/lib/libsregex.so.0  /usr/local/lib/libsregex.so.0.0.1 #按实际情况调整
) Z/ ?5 q$ l4 G9 ]/ d1 wldconfig

% C( z! l/ B' O安装modsecurity
) D" g; }7 q  [『依赖的包：pcre httpd-devel libxml2 apr 视情况安装。yum install httpd-devel apr apr-util-devel apr-devel  pcre pcre-devel  libxml2 libxml2-devel）』
git clone https://github.com/SpiderLabs/ModSecurity.git mod_security
cd mod_security
* d+ l0 x" d5 ?3 x( O' @./autogen.sh  
, v- J7 U% f! N! d, t  d; w' H* B! e./configure --enable-standalone-module
make

+ }. w7 s0 W; ?* ~. Z7 R6 N8 G. u& ?
安装nginx
: z2 Y& Y! I, V3 e. S9 ccd nginx-1.13.6

6 U1 a: D9 E/ g! f2 I9 {5 [' \

[Bash shell] 纯文本查看 复制代码

./configure \
--user=www \
--group=www \
--prefix=/www/webserver/nginx-1.13.6 \
--sbin-path=/www/webserver/nginx-1.13.6/sbin/nginx \
--pid-path=/www/webserver/nginx-1.13.6/logs/nginx.pid \
--conf-path=/www/webserver/nginx-1.13.6/conf/nginx.conf \
--error-log-path=/www/webserver/nginx-1.13.6/logs/error.log \
--http-log-path=/www/webserver/nginx-1.13.6/logs/access.log \
--http-client-body-temp-path=/www/webserver/nginx-1.13.6/temp/client \
--http-proxy-temp-path=/www/webserver/nginx-1.13.6/temp/proxy \
--http-fastcgi-temp-path=/www/webserver/nginx-1.13.6/temp/fcgi \
--http-scgi-temp-path=/www/webserver/nginx-1.13.6/temp/scgi \
--http-uwsgi-temp-path=/www/webserver/nginx-1.13.6/temp/uwsgi \
--with-http_flv_module \
--with-http_stub_status_module \
--with-http_realip_module \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_gzip_static_module \
--with-pcre=/root/pcre-8.41 \
--with-http_sub_module \
--add-module=/root/replace-filter-nginx-module-master \
--add-module=/root/mod_security/nginx/modsecurity \
--with-openssl=/root/openssl-1.1.0f

make
1 o0 N- q5 U; F: u5 lmake install

注：--with-ipv6 已经被移除默认支持ipv6，   --with-http_spdy 已经被移除合并到--with-http_v2_module

: t0 a7 |; X0 L' J+ \# d



0 U/ N( ~3 z) y& g
' f0 K2 R/ B7 g3 P