Linux下安装Web服务器的详细指南，如何在Linux上轻松搭建高性能Web服务器？，想在Linux上1小时搞定高性能Web服务器？这份指南让你轻松实现！

# 系统更新（Ubuntu/Debian）
sudo apt update && sudo apt upgrade -y
sudo apt install -y curl wget nano ufw
# 系统更新（CentOS/RHEL）
sudo yum update -y
sudo yum install -y epel-release


# Ubuntu防火墙配置
sudo ufw allow 22/tcp    # SSH端口
sudo ufw allow 80/tcp    # HTTP
sudo ufw allow 443/tcp   # HTTPS
sudo ufw --force enable
# CentOS防火墙配置
sudo firewall-cmd --permanent --add-service={ssh,http,https}
sudo firewall-cmd --reload




# Ubuntu安装
sudo apt install -y apache2 apache2-utils
# 服务管理
sudo systemctl enable --now apache2




curl -I 127.0.0.1
# 应返回HTTP/1.1 200 OK




<VirtualHost *:80>
    ServerAdmin webmaster@example.com
    ServerName example.com
    ServerAlias www.example.com
    DocumentRoot /var/www/example.com/public_html
    ErrorLog ${APACHE_LOG_DIR}/example.com_error.log
    CustomLog ${APACHE_LOG_DIR}/example.com_access.log combined
    <Directory /var/www/example.com/public_html>
        Options -Indexes +FollowSymLinks
        AllowOverride All
        Require all granted
        # 安全增强
        Header set X-Content-Type-Options "nosniff"
        Header set X-Frame-Options "SAMEORIGIN"
    </Directory>
    # 重定向配置
    RewriteEngine On
    RewriteCond %{HTTPS} off
    RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
</VirtualHost>




# 启用事件驱动模式
sudo a2enmod mpm_event
sudo a2dismod mpm_prefork
# 调整工作线程配置
sudo nano /etc/apache2/mods-available/mpm_event.conf




StartServers             2
MinSpareThreads         25
MaxSpareThreads         75 
ThreadLimit             64
ThreadsPerChild         25
MaxRequestWorkers       150
MaxConnectionsPerChild  1000




# Ubuntu安装
sudo apt install -y nginx libnginx-mod-http-headers-more-filter
# 核心配置文件
sudo nano /etc/nginx/nginx.conf




user www-data;
worker_processes auto;
worker_rlimit_nofile 100000;
events {
    worker_connections 4096;
    multi_accept on;
    use epoll;
}
http {
    open_file_cache max=200000 inactive=20s;
    open_file_cache_valid 30s;
    open_file_cache_min_uses 2;
    open_file_cache_errors on;
    ...
}




server {
    listen 80 reuseport;
    server_name example.com www.example.com;
    root /var/www/example.com;
    index index.php index.html;
    # 安全头设置
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
    add_header Content-Security-Policy "default-src 'self' https:";
    # 静态资源缓存
    location ~* \.(jpg|jpeg|png|gif|ico|css|js)$ {
        expires 365d;
        add_header Cache-Control "public, immutable";
    }
    # PHP处理
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass unix:/run/php/php8.1-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_read_timeout 300;
    }
    # 禁止敏感文件访问
    location ~ /\.(ht|git|svn) {
        deny all;
    }
}




sudo apt install -y mariadb-server mariadb-client
sudo mysql_secure_installation
# 创建数据库用户
sudo mysql -e "CREATE DATABASE webapp;"
sudo mysql -e "CREATE USER 'webuser'@'localhost' IDENTIFIED BY 'StrongPassword123!';"
sudo mysql -e "GRANT ALL PRIVILEGES ON webapp.* TO 'webuser'@'localhost';"
sudo mysql -e "FLUSH PRIVILEGES;"




# /etc/mysql/mariadb.conf.d/50-server.cnf
[mysqld]
innodb_buffer_pool_size = 1G
innodb_log_file_size = 256M
innodb_flush_log_at_trx_commit = 2
innodb_flush_method = O_DIRECT
query_cache_type = 1
query_cache_size = 64M
max_connections = 100




# 安装Certbot
sudo apt install -y certbot python3-certbot-nginx
# 获取证书（Nginx）
sudo certbot --nginx -d example.com -d www.example.com \
    --email admin@example.com \
    --agree-tos \
    --no-eff-email \
    --redirect \
    --hsts \
    --uir
# 设置自动续期
(crontab -l 2>/dev/null; echo "0 3 * * * /usr/bin/certbot renew --quiet") | crontab -




# 安装Fail2Ban
sudo apt install -y fail2ban
# 自定义过滤规则
sudo nano /etc/fail2ban/jail.d/nginx-botsearch.conf




[nginx-botsearch]
enabled = true
port = http,https
filter = nginx-botsearch
logpath = /var/log/nginx/access.log
maxretry = 5
findtime = 1h
bantime = 24h




# 安装NetData
bash <(curl -Ss https://my-netdata.io/kickstart.sh)
# 或Prometheus+Grafana
docker run -d -p 9090:9090 --name prometheus prom/prometheus
docker run -d -p 3000:3000 --name grafana grafana/grafana




# 分析访问TOP 10 IP
awk '{print }' /var/log/nginx/access.log | sort | uniq -c | sort -nr | head
# 监控错误日志
tail -f /var/log/nginx/error.log | grep -E 'error|crit|alert|emerg'


