docker nginx 挂载nginx配置文件，日志文件，ssl证书，静态网站。
1.第一步
1 2 3 sudo mkdir -p /www/nginx/conf \ && mkdir -p /www/nginx/html \ && mkdir -p /www/nginx/log
2.第二步
1 2 3 4 5 6 # 生成容器 sudo docker run --name nginx -p 9001:80 -d nginx # 将容器nginx.conf文件复制到宿主机 sudo docker cp nginx:/etc/nginx /www/nginx/conf # 将容器中的html文件夹复制到宿主机 sudo docker cp nginx:/usr/share/nginx/html /www/nginx/html
3.第三步
1 2 3 4 5 6 7 8 sudo docker run \ -p 80:80 \ -p 443:443 \ --name nginx \ -v /www/nginx/conf:/etc/nginx \ -v /www/nginx/log:/var/log/nginx \ -v /www/nginx/html:/usr/share/nginx/html \ -d nginx:latest
4.第四步
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 前端 server { listen 80; server_name blog.pangxuejun.cn; root /user/share/nginx/html/blog.pangxuejun.cn; location / { try_files $uri $uri/ /index.html; } rewrite ^(.*)$ https://blog.pangxuejun.cn$1 permanent; } server { listen 443 ssl; server_name blog.pangxuejun.cn; root /usr/share/nginx/html/blog.pangxuejun.cn; # gzip config gzip on; gzip_min_length 1k; gzip_comp_level 9; gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png; gzip_vary on; gzip_disable "MSIE [1-6]\."; ssl_certificate /etc/nginx/cert/blog.pangxuejun.cn.pem; ssl_certificate_key /etc/nginx/cert/blog.pangxuejun.cn.key; location / { try_files $uri $uri/ /index.html; } } 后端php配置 server { listen 80; server_name blog-api.qzyyds.com; rewrite ^(.*)$ https://blog-api.pangxuejun.cn$1 permanent; } server { listen 443 ssl; server_name blog-api.pangxuejun.cn; root /var/www/blog-api.pangxuejun.cn/public; ssl_certificate /etc/nginx/cert/blog-api.pangxuejun.cn.pem; ssl_certificate_key /etc/nginx/cert/blog-api.pangxuejun.cn.key; ssl_session_timeout 5m; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block"; add_header X-Content-Type-Options "nosniff"; index index.html index.htm index.php; charset utf-8; access_log /var/log/nginx/blog-api.pangxuejun.cn.access.log; error_log /var/log/nginx/blog-api.pangxuejun.cn.error.log; location / { try_files $uri $uri/ /index.php?$query_string; if (!-e $request_filename) { rewrite ^(.*)$ /index.php?s=$1 last; break; } } location = /favicon.ico { access_log off; log_not_found off; } location = /robots.txt { access_log off; log_not_found off; } error_page 404 /index.php; location ~ \.php$ { include snippets/fastcgi-php.conf; fastcgi_pass unix:/var/run/php/php7.4-fpm.sock; } location ~ /\.(?!well-known).* { deny all; } } 方向代理 server{ listen 80; charset utf-8; server_name blog-api.pangxuejun.cn; location / { proxy_pass http://127.0.0.1:8000; proxy_redirect default; } } server{ listen 80; charset utf-8; server_name blog.pangxuejun.cn; location / { proxy_pass http://127.0.0.1:8080; proxy_redirect default; } }
4.第五步
参考：https://blog.csdn.net/BThinker/article/details/123507820
作者：庞学军