Docker 配置 https

需求

nginx 配置 https ，因为直接在虚拟机上配置可能会污染虚拟机环境，不利于随时调整，所以选用docker配置nginx 及 https

解决

查了很多资料，最终用以下两篇解决

http://t.csdn.cn/natKe

http://t.csdn.cn/tAaVX

配置

个人配置如下

docker-compose.yml

version: '3'
 
services:
  nginx:
    image: nginx:latest
    container_name: nginx-web
    restart: always
    ports:
      - 80:80
      - 443:443
    volumes:
      - /root/nginx/cert:/etc/nginx/cert
      - /root/nginx/conf/nginx.conf:/etc/nginx/nginx.conf 
      - /root/nginx/html:/usr/share/nginx/html
      - /root/nginx/log:/var/log/nginx
      - /etc/localtime:/etc/localtime:ro

nginx.conf

user  nginx;
worker_processes  1;
 
error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;
 
 
events {
    worker_connections  1024;
}
 
 
http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;
 
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
 
    access_log  /var/log/nginx/access.log  main;
 
    sendfile        on;
    #tcp_nopush     on;
 
    keepalive_timeout  65;
    #gzip  on;
    
    include /etc/nginx/conf.d/*.conf;
    client_max_body_size 100m;

        upstream tomcat {
        server  xxx.xxx.xxx.xxx:端口 weight=10 max_fails=2 fail_timeout=30s; 
        }

    server{
        listen 80;
        charset utf-8;
        server_name erdengk.top;

        location /projectName { 
                proxy_pass https://erdengk.top;
        }
         
            location = / {
            return 301 https://erdengk.top;
        }
    }

        server{
        listen 443 ssl;
        charset utf-8;
        server_name erdengk.top;
           
                ssl on;
                                ssl_certificate   /etc/nginx/cert/xxxxxxxxxxx.pem; 
        ssl_certificate_key  /etc/nginx/cert/xxxxxxx.key; 
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
 
        location / {
                proxy_pass http://tomcat;
        }
 }
 
}