关于几个实例记录Nginx限制目录和URL以及IP访问控制

location ~ ^/images/.*\.(php|php5|sh|pl|py)$
{
deny all;
}

location ~ ^/static/.*\.(php|php5|sh|pl|py)$
{
deny all;
}

location ~* \.(txt|doc)$ {
if (-f $request_filename) {
root /data/www/www;
rewrite ^(.*) https://www.itbulu.com/ break;  #可以重定向到某个URL;
}
}
location ~* \.(txt|doc)$ {
root /data/www/www;
deny all;
}

#禁止访问的文件或目录 
location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md) { 
return 404; 
}

location ~ \.well-known{ 
allow all; 
}

 location ~ ^/(static)/ {
deny all;
}

location ~ ^/static {
deny all;
}

location ~ ^/(static|js) {
deny all;
}

location ~ ^/mysql_loging/ {
allow 192.168.1.4;
deny all;
}

location ~ .*\.(php|php5)?$ {
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
}

说明:该配置只允许192.168.1.4IP访问mysql_loging目录

location / {
deny 192.168.0.4;
allow 192.168.1.0/16;
allow 10.0.0.0/24;
deny all;
}

说明：此限制是对某些IP做整个网站的限制访问。

if ($host !~ ^www/.itbulu/.com$) {
rewrite ^(.*) http://www.baidu.com$1 permanent;
}