docker 运行 nginx 及配置

寒-夕

已于 2023-09-19 01:41:56 修改

阅读量257

点赞数

文章标签：后端

于 2023-09-13 23:39:22 首次发布

本文链接：https://blog.csdn.net/ysyswanmmd/article/details/132867063

版权

dockers 运行 nginx 及配置

随便启动一个nginx实例，只是为了复制出配置

docker run -p 80:80 --name nginx -d nginx

将容器内的配置文件拷贝到当前文件

mkdir /mydata
cd /mydata
mkdir nginx
docker container cp nginx:/etc/nginx .
mv nginx/ conf/
mkdir nginx
mv conf/ nginx/
mkdir cert
mv cert/ nginx/

终止+删除原容器

docker stop nginx
docker rm nginx

创建新的nginx

docker run -p 80:80 -p 443:443 --name nginx \
-v /mydata/nginx/html:/usr/share/nginx/html \
-v /mydata/nginx/logs:/var/log/nginx \
-v /mydata/nginx/conf:/etc/nginx \
-v /mydata/nginx/cert:/etc/nginx/conf.d/cert \
-d nginx

修改配置

vim /mydata/nginx/conf/nginx.conf

user  nginx;
worker_processes  auto;

error_log  /var/log/nginx/error.log notice;
pid        /var/run/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;
    client_max_body_size 100m;

    include /etc/nginx/conf.d/*.conf;

    map $http_upgrade $connection_upgrade {
        default upgrade;
        '' close;
}

    server {
      # 个人gpt相关
      listen 80;
      listen 443 ssl http2;
      server_name 域名
      ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
      ssl_certificate  /etc/nginx/conf.d/cert/XXX.pem;
      ssl_certificate_key   /etc/nginx/conf.d/cert/XXX.key;
      ssl_prefer_server_ciphers on;
      ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
      ssl_session_tickets off;
      ssl_session_timeout 1d;
      ssl_session_cache shared:SSL:10m;
      #add_header Strict-Transport-Security
        #       "max-age=31536000; includeSubDomains"
        #       always;
      #return 301 https://gpt.hanxi.fun$request_uri;# 强制使用https
      if ($scheme = http) {
            rewrite ^(.*)$ https://$host$request_uri permanent;
        }
      location / {
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header Host $http_host;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_set_header X-Forwarded-Proto https;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection $connection_upgrade;
          proxy_pass http://185.242.232.14:8002;
      }
    }

    server {
      # 个人blog相关
      listen 80;
      listen 443 ssl http2;
      server_name 域名
      ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
      ssl_certificate  /etc/nginx/conf.d/cert/XXX.pem;
      ssl_certificate_key   /etc/nginx/conf.d/cert/XXX.key;
        location / {
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header Host $http_host;
          proxy_pass http://外网IP:端口;
        }
    }

    server {
      # 1panel相关
      listen 80;
      # listen 443 ssl http2;
      server_name 域名
      # ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
      # ssl_certificate  /etc/nginx/conf.d/cert/XXX.pem;
      # ssl_certificate_key   /etc/nginx/conf.d/cert/XXX.key;
        location / {
          proxy_http_version 1.1;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header Host $http_host;
          proxy_pass http://外网IP:端口;
        }
    }
}