Nginx 配置之图片防盗链

配置

location ~* ^/uploads/img/.*?\.(jpe?g|png|gif|svg)$ {
    valid_referers none blocked server_names ~($host);
    if ($invalid_referer) {
        return 403;
    }
    expires max;
    root z_blog_openresty/resources/;
}

含义

第一行: jpe?g|png|gif|svg

表示对jpg、jpeg、png、gif后缀的文件进行防盗链判断

第二行: valid_referers

表示对Nginx中$host（网站域名）进行判断

第三行: if{}

如果不是指定Referer就返回403错误。

扩展

只限制 referer 不为空

location ~* ^/uploads/img/.*?\.(jpe?g|png|gif|svg)$ {
    if ($http_referer ~ /^$/) {
        return 403;
    }
    expires max;
    root z_blog_openresty/resources/;
}

或者

location /data {
    valid_referers ~.*;
    if ($invalid_referer) {
        return 403;
    }
    root /usr/share/nginx/html/;
}
location ~* ^/uploads/img/.*?\.(jpe?g|png|gif|svg)$ {
        valid_referers ~.*;
        if ($invalid_referer) {
            return 403;
        }
    expires max;
    root z_blog_openresty/resources/;
}

参考

http://nginx.org/en/docs/http/ngx_http_referer_module.html