nginx-1.13.6+replace-filter-nginx-module+modsecurity编译安装手迹

admin

准备文件：
" s* q( i5 `7 Uwget https://www.openssl.org/source/openssl-1.1.0f.tar.gz
$ P! Y9 c8 O* }0 O: x; r: m/ n$ itar xvzf openssl-1.1.0f.tar.gz
4 l6 L" I) b% l. U: m, owget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.41.tar.gz
/ N% l" N7 I! V9 j+ htar xvzf pcre-8.41.tar.gz

wget http://nginx.org/download/nginx-1.13.6.tar.gz
tart xvzf nginx-1.13.6.tar.gz
1 F' h+ l/ i+ D, [/ V) V
wget https://github.com/openresty/sregex/archive/master.zip
* Y: m# Z6 J3 L. z  l  Z/ l( B3 ymv master.zip replace-filter-nginx-module-master.zip
8 M* ]& ?( Z; l+ v% \( bunzip replace-filter-nginx-module-master.zip
2 K0 T; Z! Z' g  c) h, j, Y# U' e
安装sregex
( p& K2 r% g6 p1 K- a4 V, q[replace-filter-nginx-module-master关键词替换模块需要这个东西，如果不喜欢可以用ngx_http_substitutions_filter_module这个关键字替换模块]
wget https://github.com/openresty/sregex/archive/master.zip
" F3 W. X2 c% |: C' {$ W* fmv master.zip sregex.zip
5 W) ]1 M9 o  o& M4 l" gunzip sregex.zip
- O+ p1 g6 i; C0 Z, \" ~+ |cd sregex
make && make installln -s /usr/lib/libsregex.so.0  /usr/local/lib/libsregex.so.0.0.1 #按实际情况调整
4 H" V  o; l2 C" Sldconfig
6 _7 S8 K  j+ M( X2 K
" }6 k5 @0 t2 T) ^, m9 F; |安装modsecurity
4 j- X8 n2 Z, p1 S' x. r: W『依赖的包：pcre httpd-devel libxml2 apr 视情况安装。yum install httpd-devel apr apr-util-devel apr-devel  pcre pcre-devel  libxml2 libxml2-devel）』
git clone https://github.com/SpiderLabs/ModSecurity.git mod_security
cd mod_security
./autogen.sh  
./configure --enable-standalone-module
make
+ y2 s! k1 k$ A$ L% D

安装nginx
0 Y& L) f# Q  D  Ccd nginx-1.13.6

[Bash shell] 纯文本查看 复制代码

./configure \
--user=www \
--group=www \
--prefix=/www/webserver/nginx-1.13.6 \
--sbin-path=/www/webserver/nginx-1.13.6/sbin/nginx \
--pid-path=/www/webserver/nginx-1.13.6/logs/nginx.pid \
--conf-path=/www/webserver/nginx-1.13.6/conf/nginx.conf \
--error-log-path=/www/webserver/nginx-1.13.6/logs/error.log \
--http-log-path=/www/webserver/nginx-1.13.6/logs/access.log \
--http-client-body-temp-path=/www/webserver/nginx-1.13.6/temp/client \
--http-proxy-temp-path=/www/webserver/nginx-1.13.6/temp/proxy \
--http-fastcgi-temp-path=/www/webserver/nginx-1.13.6/temp/fcgi \
--http-scgi-temp-path=/www/webserver/nginx-1.13.6/temp/scgi \
--http-uwsgi-temp-path=/www/webserver/nginx-1.13.6/temp/uwsgi \
--with-http_flv_module \
--with-http_stub_status_module \
--with-http_realip_module \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_gzip_static_module \
--with-pcre=/root/pcre-8.41 \
--with-http_sub_module \
--add-module=/root/replace-filter-nginx-module-master \
--add-module=/root/mod_security/nginx/modsecurity \
--with-openssl=/root/openssl-1.1.0f

make
make install
/ v, E- L$ J9 x2 ]: T" x
; W# o' H7 ]5 S+ U/ _$ Z注：--with-ipv6 已经被移除默认支持ipv6，   --with-http_spdy 已经被移除合并到--with-http_v2_module

9 T1 Q: D2 `; c5 _" i. J) [6 f5 ?/ f


, z5 k; K! b3 g4 `* a0 P8 {
6 m. o; y) M& m, Y* r