Nginx Cheat Sheet

sudo systemctl start nginx

sudo systemctl stop nginx

sudo systemctl restart nginx

sudo systemctl reload nginx

sudo systemctl status nginx

sudo nginx -t

sudo nginx -T

proxy_pass http://localhost:3000;

proxy_set_header Host $host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_set_header X-Forwarded-Proto $scheme;

proxy_read_timeout 90s;

sudo certbot --nginx -d example.com

sudo certbot renew --dry-run

ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;

ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;

ssl_protocols TLSv1.2 TLSv1.3;

add_header Strict-Transport-Security "max-age=31536000";

upstream backend { server 127.0.0.1:3001; server 127.0.0.1:3002; }

upstream backend { least_conn; server ...; }

upstream backend { ip_hash; server ...; }

server 127.0.0.1:3001 weight=3;

server 127.0.0.1:3001 max_fails=3 fail_timeout=30s;

sudo tail -f /var/log/nginx/access.log

sudo tail -f /var/log/nginx/error.log

access_log /var/log/nginx/app.access.log;

error_log /var/log/nginx/app.error.log warn;

curl -I http://localhost

client_max_body_size 50m;

gzip on; gzip_types text/plain application/json;

add_header Cache-Control "public, max-age=31536000";

return 301 https://$host$request_uri;

try_files $uri $uri/ /index.html;