Example configuration of NGINX Open Source

This article provides an example configuration for NGINX Open Source. If necessary, you can change the settings to suit your needs. This configuration was tested with package version 1.18.0-6ubuntu14.6.

To configure NGINX Open Source:

1. On the host where you are installing the balancer, start the command line console and install the nginx-common package:

   sudo apt update && sudo apt install nginx-common -y

2. Go to the /etc/nginx directory and edit the nginx.conf configuration file as shown in the example. The order of sections and parameters in the configuration file is significant and must be the same as in the example.

   Example of settings in the nginx.conf file if a TLS certificate is not used

   user www-data;

   worker_processes auto;

   pid /run/nginx.pid;

   error_log /var/log/nginx/error.log;

   include /etc/nginx/modules-enabled/*.conf;

   events {

   worker_connections 768;

   }

   http {

   sendfile on;

   tcp_nopush on;

   types_hash_max_size 2048;

   server_tokens off;

   server_name_in_redirect off;

   include /etc/nginx/mime.types;

   default_type application/octet-stream;

   access_log /var/log/nginx/access.log;

   gzip on;

   include /etc/nginx/conf.d/*.conf;

   include /etc/nginx/sites-enabled/*;

   }

   stream {

   include /etc/nginx/stream-conf.d/*.conf;

   upstream backend {

   server kuma-inst-02.avp.ru:7220;

   server kuma-inst-03.avp.ru:7220;

   server kuma-inst-04.avp.ru:7220;

   }

   server {

   listen 7220;

   proxy_pass backend;

   }

   }

   Example of settings in the nginx.conf file when using a TLS certificate

   user www-data;

   worker_processes auto;

   pid /run/nginx.pid;

   include /etc/nginx/modules-enabled/*.conf;

   events {

   worker_connections 768;

   }

   http {

   ##

   # Basic Settings

   ##

   sendfile on;

   tcp_nopush on;

   types_hash_max_size 2048;

   server_tokens off;

   server_name_in_redirect off;

   include /etc/nginx/mime.types;

   default_type application/octet-stream;

   ##

   # Logging Settings

   ##

   access_log /var/log/nginx/access.log;

   error_log /var/log/nginx/error.log;

   ##

   # Gzip Settings

   ##

   gzip on; #

   include /etc/nginx/conf.d/*.conf;

   include /etc/nginx/sites-enabled/*;

   server {

   listen 443 ssl;

   server_name kuma-inst-01.avp.ru;

   ssl_certificate kuma-inst-01.avp.ru;

   ssl_certificate_key kuma-inst-01.avp.ru.key;

   ssl_protocols TLSv1.3;

   ssl_ciphers HIGH:!aNULL:!MD5;

   location / { #path that is accessed to pass requests to the group of servers from proxy_pass

               proxy_pass https://Kuma-UI; #proxy_pass - the directive for passing requests to the Kuma-UI server group

   }

   }

   ##

   #max_fails - number of failed application server availability checks within the interval.

   #fail_timeout - the time after which the machine is excluded from balancing.

   ##

   upstream Kuma-UI {

   hash $request_uri consistent;

   server kuma-inst-02.avp.ru:7220 max_fails=1 fail_timeout=30s;

   server kuma-inst-03.avp.ru:7220 max_fails=1 fail_timeout=30s;

   server kuma-inst-04.avp.ru:7220 max_fails=1 fail_timeout=30s;

   }

   }

3. Save the nginx.conf configuration file.
4. Check the correctness of the nginx.cfg configuration file using the following command:

   sudo nginx -f /etc/nginx/nginx.conf -t

   If the check command returns an error, make sure the contents of the nginx.conf configuration file matches the example and make changes if necessary. If the check command does not return any errors, proceed to starting the balancer.

5. Start the balancer:

   sudo systemctl start nginx

   If the nginx service needs to be enabled before starting, run the following sequence of commands:

   sudo systemctl enable nginx

   sudo systemctl start nginx

The balancer is configured.