nginx 1.20.2 加固docker打包

1. 获取代码


git clone https://github.com/rancher/ingress-nginx.git
cd ingress-nginx

git checkout nginx-0.35.0-rancher2

2. 修改images/nginx/rootfs/build.sh 文件
将export NGINX_VERSION=1.19.2
改为export NGINX_VERSION=1.20.2

之后执行如下命令,即可完成打包,并导出成文件:

cd images/nginx/
docker build -t nginx:1.20.2 -f rootfs/Dockerfile  rootfs
docker打包成功后,执行:
docker save nginx:1.20.2 |gzip > nginx-1.20.2.tgz

3. 编写nginx.conf,保存到/home/nginx/nginx.conf,如下所示:

#user  nginx;
worker_processes  auto;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;

events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;
    include /etc/nginx/conf.d/*.conf;

	#upstream java_server {
	#	server 192.168.1.200:8001;
	#	keepalive 2000;
	#}

	server {
		listen       8081;
		server_name  192.168.1.100;   
		client_max_body_size 1024M;

		#location /api/ {
		#	proxy_pass http://my_server/;
		#	proxy_set_header X-Real-IP $remote_addr;
		#	proxy_set_header REMOTE-HOST $remote_addr;
		#	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		#	proxy_set_header Host $host:$server_port;
		#}

		location / {
			root /usr/share/html;
			index  index.html;
			try_files $uri $uri /index.html;
		}
	}
}

将前端页面保存到:/home/nginx/html,并创建/home/nginx/logs目录用来存储日志文件,

4. 在命令行执行如下命令:

docker run -id -p 8080:8080 -v /home/nginx/nginx.conf:/etc/nginx/nginx.conf -v /home/nginx/logs:/var/log/nginx -v /home/nginx/html:/usr/share/html   nginx:1.20.2

之后,访问8080端口,即可打开页面

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值