yum install epel-release -y

yum install gcc gcc-c++ make automake autoconf libtool iptables-services wget bind-utils unzip -y

cd /usr/local/src

rm -rf *

mv /etc/localtime /etc/localtime.bak

/bin/cp -f /usr/share/zoneinfo/Asia/Shanghai /etc/localtime

echo 'ZONE="CST"' > /etc/sysconfig/clock

setenforce

sed -i "s/=enforcing/=disabled/g" /etc/selinux/config

chkconfig iptables on

service iptables start

iptables -F

service iptables save

cd /usr/local/src/

wget https://github.com/maxmind/libmaxminddb/releases/download/1.3.2/libmaxminddb-1.3.2.tar.gz

tar zxf libmaxminddb-1.3..tar.gz

cd libmaxminddb-1.3.

./configure

make && make install

[[ -z `cat /etc/ld.so.conf |grep "\/usr\/local\/lib"` ]] && echo "/usr/local/lib" >> /etc/ld.so.conf

ldconfig

mkdir -p /usr/local/nginx/temp

mkdir -p /usr/local/nginx/geoip

cd /usr/local/nginx/geoip

wget https://geolite.maxmind.com/download/geoip/database/GeoLite2-City.tar.gz

tar zxf GeoLite2-City.tar.gz

cd GeoLite2-City_*

mv GeoLite2-City.mmdb maxmind-city.mmdb

mv maxmind-city.mmdb /usr/local/nginx/geoip/

cd /usr/local/src/

wget http://nginx.org/download/nginx-1.16.1.tar.gz

tar zxf nginx-1.16..tar.gz

wget -O openssl-master.zip https://github.com/openssl/openssl/archive/master.zip

unzip openssl-master.zip

wget https://ftp.pcre.org/pub/pcre/pcre-8.43.tar.gz

tar xzf pcre-8.43.tar.gz

wget http://zlib.net/zlib-1.2.11.tar.gz

tar -zxf zlib-1.2..tar.gz

wget -O ngx_http_geoip2_module-master.zip https://github.com/leev/ngx_http_geoip2_module/archive/master.zip

unzip ngx_http_geoip2_module-master.zip

useradd -M -s /sbin/nologin www

cd /usr/local/src/nginx-1.16.

./configure \

--user=www \

--group=www \

--prefix=/usr/local/nginx \

--with-http_ssl_module \

--with-http_sub_module \

--with-http_gzip_static_module \

--with-http_gunzip_module \

--with-http_stub_status_module \

--with-http_realip_module \

--with-pcre-jit \

--with-http_v2_module \

--error-log-path=/usr/local/nginx/logs/error.log \

--http-log-path=/usr/local/nginx/logs/access.log \

--http-client-body-temp-path=/usr/local/nginx/temp/client_body_temp \

--http-proxy-temp-path=/usr/local/nginx/temp/proxy_temp \

--http-fastcgi-temp-path=/usr/local/nginx/temp/fastcgi_temp \

--http-scgi-temp-path=/usr/local/nginx/temp/scgi_temp \

--http-uwsgi-temp-path=/usr/local/nginx/temp/uwsgi_temp \

--with-openssl=/usr/local/src/openssl-master \

--with-zlib=/usr/local/src/zlib-1.2. \

--with-pcre=/usr/local/src/pcre-8.43 \--add-module=/usr/local/src/ngx_http_geoip2_module-master

make && make install

echo "export PATH=$PATH:/usr/local/nginx/sbin/" >> /etc/profile

source /etc/profile

mkdir -p /usr/local/nginx/ssl

openssl req -x509 -nodes -days  -newkey rsa: -keyout /usr/local/nginx/ssl/nginx.key -out /usr/local/nginx/ssl/nginx.crt -subj "/C=US/ST=US/L=US/O=ssl/OU=ssl/CN=ssl.com/emailAddress=admin@ssl.com"

echo "ulimit -n 65536" >> /etc/profile

echo "root soft nofile 65536" >> /etc/security/limits.conf

echo "root hard nofile 65536" >> /etc/security/limits.conf

echo "* soft nofile 65536" >> /etc/security/limits.conf

echo "* hard nofile 65536" >> /etc/security/limits.conf

source /etc/profile