阿里服务器用docker安装nginx配置ssl

操作很简单，参照阿里官网文档来操作即可。需要注意的是服务器的安全组要开放80和443端口，容器也要映射80和443端口。

证书文件位置

  nginx:
    restart: always
    image: nginx
    container_name: nginx
    ports:
      - 80:80
      - 443:443
    networks:
      default:
        ipv4_address: 172.18.0.4
    volumes:
      - ./nginx/conf/nginx.conf:/etc/nginx/nginx.conf
      - ./nginx/html:/usr/share/nginx/html
      - ./nginx/logs:/var/log/nginx
      - ./nginx/conf/cert:/etc/nginx/cert
      - /etc/localtime:/etc/localtime

user root;
worker_processes  1;
events {
    worker_connections  1024;
}
 
http {
    include       mime.types;
    default_type  application/octet-stream;
 
    sendfile        on;
    keepalive_timeout  65;

    upstream ruoyi {
      server 172.18.0.99:8080;
    }

    server {
         listen 443 ssl;
         server_name www.sunni.cc;
         root /usr/share/nginx/html;
         index index.html index.htm;
         ssl_certificate cert/4761731_www.sunni.cc.pem;
         ssl_certificate_key cert/4761731_www.sunni.cc.key;
         ssl_session_timeout 5m;
         ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
         ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
         ssl_prefer_server_ciphers on;

         location / {
            root /usr/share/nginx/html;
            try_files $uri $uri/ /index.html;
            index index.html index.htm;
         }

        location /jl {
            proxy_pass http://172.18.0.98:9090;
        }


        location /prod-api/{
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass http://ruoyi/;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
      }
 
    server {
        listen       80;
        server_name  localhost;
        return 301 https://$host$request_uri; 
 
    }
 
}