使用Docker快速搭建Nginx用于反代

admin

使用Docker快速搭建Nginx用于反代

1. mkdir -p /opt/docker/nginx/logs
   
2. mkdir -p /opt/docker/nginx/conf
   
3. mkdir -p /opt/docker/nginx/vhosts
   
4. mkdir -p /opt/docker/nginx/wwwroot
   
5. mkdir -p /opt/docker/acme.sh
   
6. docker run --name nginx-default-conf -p 6680:80 -d nginx
   
7. 
   
8. 
   
9. docker cp  nginx-default-conf:/etc/nginx/conf.d/default.conf /opt/docker/nginx/conf/default.conf
   
10. docker cp  nginx-default-conf:/usr/share/nginx/html/index.html /opt/docker/nginx/wwwroot/index.html
    
11. docker cp  nginx-default-conf:/usr/share/nginx/html/50x.html /opt/docker/nginx/wwwroot/50x.html
    
12. docker cp  nginx-default-conf:/etc/nginx/nginx.conf /opt/docker/nginx/nginx.conf
    
13. docker stop nginx-default-conf
    
14. docker rm nginx-default-conf
    
15. docker run --name nginx -p 80:80 -p 443:443 --restart=unless-stopped -v /opt/docker/nginx/logs:/var/log/nginx -v /opt/docker/nginx/wwwroot:/usr/share/nginx/html -v /opt/docker/nginx/vhosts:/etc/nginx/conf.d -v /opt/docker/acme.sh:/acme.sh -d nginx
    
16. cd /opt/docker/acme.sh
    
17. openssl dhparam -out dhparams.pem 4096

复制代码

在/opt/docker/nginx/vhosts中添加*.conf的文件创建虚拟主机




V2

1. mkdir -p /opt/docker/nginx/wwwroot
   
2. mkdir -p /opt/docker/nginx/vhosts
   
3. mkdir -p /opt/docker/nginx/logs
   
4. mkdir -p /opt/docker/acme.sh
   
5. mkdir -p /opt/ssl/cf
   
6. docker cp  nginx-default-conf:/etc/nginx /opt/docker
   
7. docker cp  nginx-default-conf:/usr/share/nginx/html/index.html /opt/docker/nginx/wwwroot/index.html
   
8. docker cp  nginx-default-conf:/usr/share/nginx/html/50x.html /opt/docker/nginx/wwwroot/50x.html
   
9. docker stop nginx-default-conf
   
10. docker rm nginx-default-conf
    
11. 
    
12. docker run --name nginx -p 80:80 -p 443:443 --restart=unless-stopped -v /opt/docker/nginx/logs:/var/log/nginx -v /opt/docker/nginx/wwwroot:/usr/share/nginx/html -v /opt/docker/nginx:/etc/nginx -v /opt/docker/nginx/vhosts:/etc/nginx/conf.d/vhosts -v /opt/ssl/cf:/ssl -v /opt/docker/acme.sh:/acme.sh -d nginx
    

复制代码

vhosts反代demo

1. server {
   
2.     listen 80;
   
3.     server_name sub.demo.la;
   
4. 
   
5.     # if ($scheme = http ) {
   
6.     #     return 301 https://$host$request_uri;
   
7.     # }
   
8.     #access_log  /home/wwwlogs/demo.la.log;
   
9. 
   
10.     location / {
    
11.         if ($host != 'sub.demo.la') {
    
12.             return 301 https://demo.la;
    
13.         }
    
14.         proxy_pass http://your backend ip:7788/;
    
15.         proxy_set_header Host sub.vps.la;
    
16.         proxy_ssl_server_name on;
    
17.         proxy_ssl_name sub.vps.la;
    
18.         gzip_proxied any;
    
19.         #sed -i "s/cdn.jsdelivr.net/us.demo.at/g" `grep -rl "cdn.jsdelivr.net" ./`
    
20.         #proxy_set_header Host $host;
    
21.         #proxy_set_header Host fastly.jsdelivr.net;
    
22.         proxy_set_header Referer $http_referer;
    
23.         proxy_set_header User-Agent $http_user_agent;
    
24.         proxy_redirect off;
    
25.         proxy_set_header X-Real-IP $remote_addr;
    
26.         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    
27.         proxy_set_header REMOTE-HOST $remote_addr;
    
28.         add_header X-Cache $upstream_cache_status;
    
29.         proxy_ignore_headers Set-Cookie Cache-Control expires;
    
30.         #proxy_cache jsdelivr;
    
31.         #proxy_cache_key $host$uri$is_args$args;
    
32.         #proxy_cache_valid 200 365d;
    
33.         #expires 365d;
    
34.     }
    
35. }
    
36. 
    
37. server {
    
38.     listen 443 ssl;
    
39.     server_name sub.vps.la;
    
40. 
    
41.     #ssl on;
    
42.     ssl_certificate   /ssl/demo.la.pem;
    
43.     ssl_certificate_key  /ssl/demo.la.key;
    
44.     ssl_session_timeout 5m;
    
45.     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    
46.     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    
47.     ssl_prefer_server_ciphers on;
    
48. 
    
49. 
    
50.     location / {
    
51.         if ($host != 'sub.demo.la') {
    
52.             return 301 https://demo.la;
    
53.         }
    
54.         proxy_pass http://your backend ip:7788/;
    
55.         proxy_set_header Host sub.vps.la;
    
56.         proxy_ssl_server_name on;
    
57.         proxy_ssl_name sub.vps.la;
    
58.         gzip_proxied any;
    
59.         #sed -i "s/cdn.jsdelivr.net/us.demo.at/g" `grep -rl "cdn.jsdelivr.net" ./`
    
60.         #proxy_set_header Host $host;
    
61.         #proxy_set_header Host fastly.jsdelivr.net;
    
62.         proxy_set_header Referer $http_referer;
    
63.         proxy_set_header User-Agent $http_user_agent;
    
64.         proxy_redirect off;
    
65.         proxy_set_header X-Real-IP $remote_addr;
    
66.         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    
67.         proxy_set_header REMOTE-HOST $remote_addr;
    
68.         add_header X-Cache $upstream_cache_status;
    
69.         proxy_ignore_headers Set-Cookie Cache-Control expires;
    
70.         #proxy_cache jsdelivr;
    
71.         #proxy_cache_key $host$uri$is_args$args;
    
72.         #proxy_cache_valid 200 365d;
    
73.         #expires 365d;
    
74.     }
    
75. 
    
76. }
    

复制代码