yuhvv 发表于 2021-1-23 22:59:39

LNMP安装 ngx_lua_waf waf 出现问题是怎么回事呢?

军哥:麻烦看一下
nginx.conf

userwww www;

worker_processes auto;
worker_cpu_affinity auto;

error_log/home/wwwlogs/nginx_error.logcrit;

pid      /usr/local/nginx/logs/nginx.pid;

#Specifies the value for maximum file descriptors that can be opened by this process.
worker_rlimit_nofile 51200;

events
    {
      use epoll;
      worker_connections 51200;
      multi_accept off;
      accept_mutex off;
    }

http
    {
      include       mime.types;
      default_typeapplication/octet-stream;

      server_names_hash_bucket_size 128;
      client_header_buffer_size 32k;
      large_client_header_buffers 4 32k;
      client_max_body_size 50m;

      sendfile on;
      sendfile_max_chunk 512k;
      tcp_nopush on;

      keepalive_timeout 60;

      tcp_nodelay on;

      fastcgi_connect_timeout 300;
      fastcgi_send_timeout 300;
      fastcgi_read_timeout 300;
      fastcgi_buffer_size 64k;
      fastcgi_buffers 4 64k;
      fastcgi_busy_buffers_size 128k;
      fastcgi_temp_file_write_size 256k;

      gzip on;
      gzip_min_length1k;
      gzip_buffers   4 16k;
      gzip_http_version 1.1;
      gzip_comp_level 2;
      gzip_types   text/plain application/javascript application/x-javascript text/javascript text/css application/xml application/xml+rss;
      gzip_vary on;
      gzip_proxied   expired no-cache no-store private auth;
      gzip_disable   "MSIE \.";

      #limit_conn_zone $binary_remote_addr zone=perip:10m;
      ##If enable limit_conn_zone,add "limit_conn perip 10;" to server section.

      server_tokens off;
        lua_package_path"/usr/local/nginx/conf/waf/?.lua";
lua_shared_dict limit10m;
init_by_lua_file/usr/local/nginx/conf/waf/init.lua;
      access_log off;

/usr/local/nginx/conf/vhost

com.conf
配置文件
server
    {
      listen 443 ssl http2;
      #listen [::]:443 ssl http2;
      server_name xxx.com;
      index index.php index.html;
      root/home/wwwroot/xxx.com/public;
access_by_lua_file /usr/local/nginx/conf/waf/waf.lua;
       ssl_certificate /usr/local/nginx/conf/ssl/a.crt;
      ssl_certificate_key /usr/local/nginx/conf/ssl/a.key;
      ssl_session_timeout 5m;
      ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
      ssl_prefer_server_ciphers on;
      ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
      ssl_session_cache builtin:1000 shared:SSL:10m;
      # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
      ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;
      include rewrite/none.conf;
      include enable-php.conf;
gzip on;
gzip_min_length 1024;
gzip_types text/css application/x-javascript application/javascript application/vnd.api+json;
gzip_disable "MSIE \.";
gzip_comp_level 2;
location ~ /storage/.*\.(php|php5)?$ {
deny all;
}
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
{
valid_referers none blocked *.46659.com;       
if ($invalid_referer) {

return 404;
}
}

          location / {
      try_files $uri $uri/ /index.php?$query_string;
    }

      location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
      {
            expires      30d;
      }

      location ~ .*\.(js|css)?$
      {
            expires      12h;
      }

      location ~ /.well-known {
            allow all;
      }

      location ~ /\.
      {
            deny all;
      }

      access_log off;
    }

出现问题oot@VM-0-8-debian:~/lnmp1.7# /usr/local/nginx/sbin/nginx -t
nginx: unknown directive "lua_package_path" in /usr/local/nginx/conf/nginx.conf:61
nginx: configuration file /usr/local/nginx/conf/nginx.conf test failed
需要怎样处理呢?

licess 发表于 2021-1-24 08:00:33

lua模块没安装或没安装成功吧,发之前安装lua的日志信息看看

yuhvv 发表于 2021-1-24 15:44:18

licess 发表于 2021-1-24 08:00
lua模块没安装或没安装成功吧,发之前安装lua的日志信息看看

谢谢军哥,我找到原因了,lnmp.cnf这个文件修改错位置了
页: [1]
查看完整版本: LNMP安装 ngx_lua_waf waf 出现问题是怎么回事呢?