Docker 实战系列 - Web与Nginx

素颜马尾好姑娘i 2023-06-10 09:30 8阅读 0赞

## 前言 ##

在日常工作中，往往我们需要nginx进行一些操作  
[Git阅读风格，点击这里][Git]

## 超级简单实用 ##

不适用html，只是hello word

docker run -p 80:80 --name xm-nginx -d nginx:1.15.11-alpine

## 使用 ##

如果你不需要https，直接忽略https配置即可，这里只是简单说明

假如我的域名是 `这里只是说明，这两个域名二级域名并不存在`

https://nginx.7s.app

http://web.7s.app

首先为https域名申请 免费证书

docker run --rm  -it  \
      -v "$(pwd)/out":/acme.sh  \
      --net=host \
      neilpang/acme.sh  --issue -d nginx.7s.app --standalone

演示目录情况

.
    ├── nginx.conf
    ├── app
    │   └── index.html
    ├── conf.d
    │   └── default.conf
    ├── ssl
    │   └── nginx.7s.app
    │       ├── fullchain.cer
    │       └── nginx.7s.app.key
    └── web
        └── index.html
    # app 项目1
    # web 项目2

具体文件内容

vim index.html

<h1>Hello, Docker!</h1>

vim nginx.conf

user  nginx;
    worker_processes auto;
    worker_cpu_affinity auto;
    worker_rlimit_nofile 65535;
    
    events {
            use epoll;
            multi_accept on;
            accept_mutex off;
            worker_connections  65535;
    }
    
    http {
      include       /etc/nginx/mime.types;
      default_type  application/octet-stream;
    
      log_format  main  '$remote_addr - $remote_user [$time_local] $http_host $request_method "$uri" "$query_string" '
                        '$status $body_bytes_sent "$http_referer" $upstream_status $upstream_addr $request_time $upstream_response_time '
                        '"$http_user_agent" "$http_x_forwarded_for"' ;
    
      access_log /var/logs/access.log main;
      error_log /var/logs/error.log;
      
    
      server_names_hash_bucket_size 4096;
      client_header_buffer_size 32k;
      large_client_header_buffers 4 32k;
      client_max_body_size 50m;
      client_body_buffer_size 1m;
      client_body_timeout 15;
      client_header_timeout 15;
    
      keepalive_timeout  60;
      server_tokens   off;
      sendfile        on;
      tcp_nopush on;
      tcp_nodelay on;
    
      gzip on;
      gzip_vary on;
      gzip_min_length  1k;
      gzip_disable "MSIE [1-6]";
      gzip_buffers 16 8k;
      gzip_http_version 1.1;
      gzip_comp_level 6;
      gzip_types       text/plain text/css application/xml;
      fastcgi_connect_timeout 120s;
      fastcgi_send_timeout 6000s;
      fastcgi_read_timeout 6000s;
      fastcgi_buffer_size 128k;
      fastcgi_buffers 256 16k;
      fastcgi_busy_buffers_size 1m;
      fastcgi_temp_file_write_size 1m;
      include /etc/nginx/conf.d/*.conf;
    }

vim conf.d/default.conf

server {
        listen 80;
        server_name web.7s.app;
    
        location / {
            root /usr/share/nginx/web;
            index  index.html index.htm;
        }
    
    }
    
    server {
        listen 80;
        server_name nginx.7s.app;
        add_header Strict-Transport-Security max-age=15768000;
        return 301 https://$server_name$request_uri;
    }
    
    server {
        listen 443 ssl;
        server_name nginx.7s.app;
    
        # ssl on; 1.15后不再需要
        ssl_certificate /etc/nginx/ssl/nginx.7s.app/fullchain.cer;
        ssl_certificate_key /etc/nginx/ssl/nginx.7s.app/nginx.7s.app.key;
    
        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;
    
         # 指定密码为openssl支持的格式
         ssl_protocols  SSLv2 SSLv3 TLSv1.2;
    
         ssl_ciphers  HIGH:!aNULL:!MD5;  # 密码加密方式
         ssl_prefer_server_ciphers  on;   # 依赖SSLv3和TLSv1协议的服务器密码将优先于客户端密码
    
        location / {
            root   /usr/share/nginx/app;
            index  index.html index.htm;
        }
    
        #error_page  404              /404.html;
        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }

运行

`请删除下面注释后，运行`

docker run -p 80:80 -p 443:443 \
      # 容器名
    	--name xm-nginx  \
    	# 配置文件
    	-v $PWD/nginx.conf:/etc/nginx/nginx.conf  \
    	-v $PWD/conf.d:/etc/nginx/conf.d  \
    	# https配置，没有可以回了
    	-v $PWD/ssl:/etc/nginx/ssl  \
    	# html 配置
    	-v $PWD/web:/usr/share/nginx/web  \
    	-v $PWD/app:/usr/share/nginx/app  \
    	# 日志
    	-v $PWD/logs:/var/logs  \
    	# 运行容器版本
    	-d nginx:1.15.11-alpine

docker run -p 80:80 -p 443:443 \
    	--name xm-nginx  \
    	-v $PWD/nginx.conf:/etc/nginx/nginx.conf  \
    	-v $PWD/conf.d:/etc/nginx/conf.d  \
    	-v $PWD/ssl:/etc/nginx/ssl  \
    	-v $PWD/web:/usr/share/nginx/web  \
    	-v $PWD/app:/usr/share/nginx/app  \
    	-v $PWD/logs:/var/logs  \
    	-d nginx:1.15.11-alpine

查看启动是否成功

docker ps

失败检查

docker logs -f xm-nginx

访问网页

## 日常维护 ##

html文件更新后，重新nginx

vim web/index.html
    <h1>Hello, Docker! version:2.0 </h1>

docker exec -it xm-nginx nginx -s reload

[Git]: https://www.7s.app/docker/docker-shi-zhan-xi-lie-web-yu-nginx