nginx配置ssl证书
1.下载ssl的Nginx文件并放到Linux主机的/opt/nginx/ssl/中
cd /opt/nginx/ssl/2.备份配置文件
cp nginx.conf nginx.conf.ssl3.修改配置文件
vim /opt/nginx/conf/nginx.conf.sslerror_log /var/log/nginx/error.log notice;#配置错误日志的存放路径
pid /var/run/nginx.pid;#配置进程PID存放路径 events {worker_connections 1024;#设置允许每一个worker process同时开启的最大连接数
}http {include /etc/nginx/mime.types;#引入配置文件 default_type application/octet-stream;#定义网络资源的媒体类型 log_format main '$remote_addr - $remote_user [$time_local] "$request" ''$status $body_bytes_sent "$http_referer" ''"$http_user_agent" "$http_x_forwarded_for"';#自定义服务日志 access_log /var/log/nginx/access.log main;#配置正常访问的服务日志位置keepalive_timeout 65;#配置连接超时时间sendfile on;#开启文件高效传输模式#tcp_nopush on;#当有数据时，先不着急发送，确保数据包已经装满数据，避免网络拥塞。server{#监听443端口listen 443 ssl;#对应的域名server_name jkw.life;ssl on;ssl_certificate /etc/nginx/ssl/jkw.life.pem;ssl_certificate_key /etc/nginx/ssl/jkw.life.key;ssl_session_timeout 5m;ssl_protocols TLSv1 TLSv1.1 TLSv1.2;ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;ssl_prefer_server_ciphers on;location / {root /usr/share/nginx/html;index index.html;}}server {listen 80;server_name jkw.life;rewrite ^/(.*) https://jkw.life/$1 permanent;}include /etc/nginx/conf.d/*.conf;}
4.创建容器卷
docker volume create nginx8025
cd /var/lib/docker/volumes/nginx8025/_data5.创建nginx容器
docker run --rm -d -p 8025:80 --name nginx8025 -v nginx8025:/usr/share/nginx/html -v /opt/nginx/conf/nginx.conf.ssl:/etc/nginx/nginx.conf nginx6.把Linux中ssl文件放到docker的nginx中
docker cp /opt/nginx/ssl nginx8025:/etc/nginx/ssl7.查看docker的nginx中ssl文件
docker exec -it nginx8025 /bin/bash
cd /etc/nginx/ss