docker配置nginx

下载nginx的镜像就不说了，直接配置容器吧！

创建容器

docker run -d -p 80:80 -p 443:443 --name nginx-yixiecha -v /mydata/nginx/www:/usr/share/nginx/html -v /mydata/nginx/conf/nginx.conf:/etc/nginx/nginx.conf -v /mydata/nginx/logs:/var/log/nginx -v /mydata/nginx/cert:/etc/nginx/cert -v /home/upload:/etc/nginx/upload nginx

挂载文件夹：

1. /mydata/nginx/www:/usr/share/nginx/html 前端文件
2. /mydata/nginx/conf/nginx.conf:/etc/nginx/nginx.conf nginx的配置文件
3. /mydata/nginx/logs:/var/log/nginx 日志文件
4. /mydata/nginx/cert:/etc/nginx/cert ssl的相关文件
5. /home/upload:/etc/nginx/upload 静态文件

配置文件

server {
     listen       80;
     server_name  ×××.×××××.×××;
     location / {
        root /usr/share/nginx/html;
        try_files $uri $uri/ /index.html last;
        index  index.html index.htm;
     }
     location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
         expires      30d;
     }
     location ~ .*\.(js|css)?$ {
         expires      12h;
     }
}
server {
    listen       80;
     server_name  database.zhixie.info;
     location / {
        root /usr/share/nginx/html/zhixie-qd;
        try_files $uri $uri/ /index.html last;
        index  index.html index.htm;
     }
     #接口转发
     location /api {
        proxy_pass http://×××.×××××.×××:8008;
        proxy_connect_timeout 600;
        proxy_read_timeout 600;
        # 转发时能够获取请求的IP地址，不配置，获取到的是服务器的IP
        proxy_set_header   X-Real-IP        $remote_addr;
        proxy_set_header   X-Forwarded-For  $remote_addr; 
     }
}
server{
     listen 443 ssl;
     server_name ×××.×××××.×××;
     #listen [::]:81 default_server ipv6only=on;
     #ssl on;
     ssl_certificate cert/×××.×××××.×××.pem;
     ssl_certificate_key cert/×××.×××××.×××.key;
     ssl_session_timeout 5m;
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
     ssl_prefer_server_ciphers on;

		# 静态文件
     location /file/ {
         alias /etc/nginx/upload/;
     }
     location / {
            proxy_pass http://××.×××.×××.××:8008;
     }
     access_log  /var/log/api.log;
}
# http重定向到https
server {
    listen 80;
    server_name ×××.×××××.×××;
    return 301 https://$host$request_uri; 
}

静态文件配置的注意事项

alias

server{
    listen 7001;
    server_name 127.0.0.1;
    location /file/ {
        alias /home/china/areas/;
    }
}

此时，通过浏览器访问http://127.0.0.1:7001/file/t.txt，则访问服务器的文件是/home/china/areas/t.txt

root

server{
    listen 7002;
    server_name 127.0.0.1;
    location /test/ {
        root /home/china/areas/;
    }
}

此时，通过浏览器访问http://127.0.0.1:7001/test/t.txt，则访问服务器的文件是/home/china/areas/test/t.txt

上述两种方法均可达到目的，区别是它们对路径的解析方式不同，alas会把指定路径当作文件路径，而root会把指定路径拼接到文件路径后，再进行访问。