参考文档：

https://www.cnblogs.com/wangguishe/p/15909392.html

https://blog.csdn.net/weixin_44060108/article/details/121245182

安装依赖

1apt -y install gcc make libssl-dev zlib1g-dev libgd-dev libgeoip-dev libpcre2-dev libpcre3-dev

编译和安装

1./configure --prefix=/app/software/nginx-1.20.2 --with-http_ssl_module
2make
3make install

编写开机启动脚本

 1cat /lib/systemd/system/nginx.service 
 2[Unit]
 3Description=nginx
 4After=network.target
 5
 6[Service]
 7Type=forking
 8ExecStart=/app/software/nginx-1.20.2/sbin/nginx -c /app/software/nginx-1.20.2/conf/nginx.conf
 9ExecReload=/app/software/nginx-1.20.2/sbin/nginx -s reload
10ExecStop=/app/software/nginx-1.20.2/sbin/nginx -s quit
11PrivateTmp=true
12
13[Install]
14WantedBy=multi-user.target

设置开机启动

1systemctl enable nginx
2systemctl start nginx

nginx 配置https证书

 1vim /app/software/nginx-1.20.2/conf/nginx.conf
 2
 3    server {
 4        listen         80;
 5        server_name    localhost;
 6        rewrite        ^(.*)$ https://$host:443$1 permanent;
 7
 8
 9    }
10
11    server {
12        listen                     443 ssl;
13        server_name                localhost;
14
15        ssl_certificate            /app/software/ssl_certificate/zcily.top_nginx/zcily.top_bundle.pem;
16        ssl_certificate_key        /app/software/ssl_certificate/zcily.top_nginx/zcily.top.key;
17        ssl_session_timeout        5m;
18        ssl_ciphers                ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
19        ssl_protocols              TLSv1 TLSv1.1 TLSv1.2;
20        ssl_prefer_server_ciphers  on;
21
22        location / {
23            root   html;
24            index  index.html index.htm;
25        }
26    }