docker配置nginx的https 最简单教程, 编译成镜像

nginx的镜像中 几个重要的配置文件夹

etc/nginx/conf.d/*.conf;

/usr/share/nginx

/etc/nginx/conf.d/default.conf;

  

   

    

     

    
    

     

      server {
     
    
   

    

     

    
    

     

          listen       80;
     
    
   

    

     

    
    

     

          listen  [::]:80;
     
    
   

    

     

    
    

     

          server_name  localhost;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
    #charset koi8-r;
     
    
   

    

     

    
    

     
    #access_log /var/log/nginx/host.access.log main;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

          location / {
     
    
   

    

     

    
    

     

              root   /usr/share/nginx/html;
     
    
   

    

     

    
    

     

              index  index.html index.htm;
     
    
   

    

     

    
    

     

          }
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
    #error_page 404 /404.html;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
    # redirect server error pages to the static page /50x.html
     
    
   

    

     

    
    

     
    #
     
    
   

    

     

    
    

     

          error_page   500 502 503 504  /50x.html;
     
    
   

    

     

    
    

     

          location = /50x.html {
     
    
   

    

     

    
    

     

              root   /usr/share/nginx/html;
     
    
   

    

     

    
    

     

          }
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
    # proxy the PHP scripts to Apache listening on 127.0.0.1:80
     
    
   

    

     

    
    

     
    #
     
    
   

    

     

    
    

     
    #location ~ \.php$ {
     
    
   

    

     

    
    

     
    # proxy_pass http://127.0.0.1;
     
    
   

    

     

    
    

     
    #}
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
     
    
   

    

     

    
    

     
    #
     
    
   

    

     

    
    

     
    #location ~ \.php$ {
     
    
   

    

     

    
    

     
    # root html;
     
    
   

    

     

    
    

     
    # fastcgi_pass 127.0.0.1:9000;
     
    
   

    

     

    
    

     
    # fastcgi_index index.php;
     
    
   

    

     

    
    

     
    # fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
     
    
   

    

     

    
    

     
    # include fastcgi_params;
     
    
   

    

     

    
    

     
    #}
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
    # deny access to .htaccess files, if Apache's document root
     
    
   

    

     

    
    

     
    # concurs with nginx's one
     
    
   

    

     

    
    

     
    #
     
    
   

    

     

    
    

     
    #location ~ /\.ht {
     
    
   

    

     

    
    

     
    # deny all;
     
    
   

    

     

    
    

     
    #}
     
    
   

    

     

    
    

     

      }
     
    
  
 

  
 
 

/etc/nginx/nginx.conf

  

   

    

     

    
    

     

      user  nginx;
     
    
   

    

     

    
    

     

      worker_processes  1;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

      error_log  /var/log/nginx/error.log warn;
     
    
   

    

     

    
    

     

      pid        /var/run/nginx.pid;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

      events {
     
    
   

    

     

    
    

     

          worker_connections  1024;
     
    
   

    

     

    
    

     

      }
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

      http {
     
    
   

    

     

    
    

     
    include       /etc/nginx/mime.types;
     
    
   

    

     

    
    

     

          default_type  application/octet-stream;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

          log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
     
    
   

    

     

    
    

     
                      '$status $body_bytes_sent "$http_referer" '
     
    
   

    

     

    
    

     
                      '"$http_user_agent" "$http_x_forwarded_for"';
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

          access_log  /var/log/nginx/access.log  main;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

          sendfile        on;
     
    
   

    

     

    
    

     
    #tcp_nopush on;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

          keepalive_timeout  65;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
    #gzip on;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
    include /etc/nginx/conf.d/*.conf;
     
    
   

    

     

    
    

     

      }
     
    
  
 

  
 
 

分析nginx.conf 得知 在配置文件里 引入了/etc/nginx/conf.d 下的所有以.conf为结尾的配置文件

我们可以新建一个mynginx.conf 文件 编写https的配置

需要将https的证书存放在 /mywebapp/ssl目录下

  

   

    

     

    
    

     

      server {
     
    
   

    

     

    
    

     

          listen       443 ssl;
     
    
   

    

     

    
    

     

          server_name  localhost;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

          ssl_certificate      /mywebapp/ssl/server.crt;
     
    
   

    

     

    
    

     

          ssl_certificate_key  /mywebapp/ssl/server.key;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

          ssl_session_cache    shared:SSL:1m;
     
    
   

    

     

    
    

     

          ssl_session_timeout  5m;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

          ssl_ciphers  HIGH:!aNULL:!MD5;
     
    
   

    

     

    
    

     

          ssl_prefer_server_ciphers  on;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

          location / {
     
    
   

    

     

    
    

     

              root   /mywebapp/www;
     
    
   

    

     

    
    

     

              index  index.html index.htm;
     
    
   

    

     

    
    

     

          }
     
    
   

    

     

    
    

     

      }
     
    
  
 

  
 
 

使用命令  即可启动镜像, 访问https://IP 即可

docker run -d -p 443:443 doc1 
 

文章来源: fizzz.blog.csdn.net，作者：拿我格子衫来，版权归原作者所有，如需转载，请联系作者。

原文链接：fizzz.blog.csdn.net/article/details/106759548