阿里服务器用docker安装nginx配置ssl

╰+哭是因爲堅強的太久メ 2022-12-21 10:50 125阅读 0赞

操作很简单，参照阿里官网文档来操作即可。需要注意的是**服务器的安全组要开放80和443端口，容器也要映射80和443端口。**

证书文件位置

![20210610090623783.png][]

nginx:
        restart: always
        image: nginx
        container_name: nginx
        ports:
          - 80:80
          - 443:443
        networks:
          default:
            ipv4_address: 172.18.0.4
        volumes:
          - ./nginx/conf/nginx.conf:/etc/nginx/nginx.conf
          - ./nginx/html:/usr/share/nginx/html
          - ./nginx/logs:/var/log/nginx
          - ./nginx/conf/cert:/etc/nginx/cert
          - /etc/localtime:/etc/localtime

user root;
    worker_processes  1;
    events {
        worker_connections  1024;
    }
     
    http {
        include       mime.types;
        default_type  application/octet-stream;
     
        sendfile        on;
        keepalive_timeout  65;
    
        upstream ruoyi {
          server 172.18.0.99:8080;
        }
    
        server {
             listen 443 ssl;
             server_name www.sunni.cc;
             root /usr/share/nginx/html;
             index index.html index.htm;
             ssl_certificate cert/4761731_www.sunni.cc.pem;
             ssl_certificate_key cert/4761731_www.sunni.cc.key;
             ssl_session_timeout 5m;
             ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
             ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
             ssl_prefer_server_ciphers on;
    
             location / {
                root /usr/share/nginx/html;
                try_files $uri $uri/ /index.html;
                index index.html index.htm;
             }
    
            location /jl {
                proxy_pass http://172.18.0.98:9090;
            }
    
    
            location /prod-api/{
                proxy_set_header Host $http_host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header REMOTE-HOST $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_pass http://ruoyi/;
            }
    
            error_page   500 502 503 504  /50x.html;
            location = /50x.html {
                root   html;
            }
          }
     
        server {
            listen       80;
            server_name  localhost;
            return 301 https://$host$request_uri; 
     
        }
     
    }

[20210610090623783.png]: /images/20221120/c05fe501ff1a4bba9bd87d596b2e3909.png