docker安装nginx并配置ssl证书的方法步骤

docker pull nginx

mkdir -p /usr/local/nginx/{<!--{C}%3C!%2D%2D%20%2D%2D%3E-->conf,html,logs,ssl}

#启动一个nginx容器
docker run --name nginx -p 80:80 -d nginx

#复制配置文件
docker cp nginx:/etc/nginx/nginx.conf /usr/local/nginx/conf/
docker cp nginx:/etc/nginx/conf.d /usr/local/nginx

#复制完了，可以把这个容器删了，先停止再删除
docker stop nginx
docker rm nginx

#上传到这个目录下面，ssl是我们刚才创建的目录
/usr/local/nginx/ssl

server {
	listen 80;
	#填写绑定证书的域名
	server_name _;
	#把http的域名请求转成https，相当于用户访问http也可以自动跳转到https，避免出现网页提示不安全
	return 301 https://$host$request_uri; 
}
server {
    listen  443 ssl;
	server_name  _; 
	#证书文件名称
    ssl_certificate_key /etc/nginx/ssl/xx.key;
    #私钥文件名称 .crt和.pem都可以用
    ssl_certificate /etc/nginx/ssl/xx.pem; 
    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
    ssl_prefer_server_ciphers on;
    root         /usr/local/nginx/html;
    # Load configuration files for the default server block.
    include /etc/nginx/default.d/*.conf;
    #首页
    location / {
       index index.php index.html index.htm;
       client_max_body_size  50m;
       #limit_rate 100k; 限制下载速度
       include fastcgi_params; 
       #rewrite ^.*$ /index.php$request_uri break;
       #ThinkPhp访问异常可以用下面的代码
       if (!-e $request_filename) {
           rewrite  ^(.*)$  /index.php?s=/$1  last;
           break;
       }
       fastcgi_pass 127.0.0.1:9000;
       fastcgi_index index.php;
       fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
   }
}

docker run --name nginx -p 80:80 -p 443:443 \
-v /usr/local/nginx/html:/usr/share/nginx/html \
-v /usr/local/nginx/conf/nginx.conf:/etc/nginx/nginx.conf/ \
-v /usr/local/nginx/conf.d:/etc/nginx/conf.d/ \
-v /usr/local/nginx/logs:/var/log/nginx \
-v /usr/local/nginx/ssl:/etc/nginx/ssl \
--privileged=true -d --restart=always nginx

--name nginx //容器名称
-p 80:80 -p 443:443 //将容器的80端口映射到服务器的80端口，将容器的443端口映射到服务器的443端口
-v aa:bb //将主机的aa目录挂载到容器的bb
--privileged=true //使用该参数，container内的root拥有真正的root权限,避免后面操作时提示无权限
--restart=always //能够使我们在重启docker时，自动启动相关容器

#看下nginx日志，有没有报错
docker logs nginx