Docker 部署 Nginx SSl 方式

1. 部署前准备
   1. Docker环境
   2. 证书
2. 拉取Nginx镜像

   docker pull nginx

3. 配置相关文件

   ：mkdir -p  /home/nginx/conf
   ：mkdir -p  /home/nginx/cert
      （cert 目录中放置证书文件（2个））

   vim /home/nginx/conf/nginx.conf
   
   
   
   user  nginx;
   worker_processes  1;
   
   
   error_log  /var/log/nginx/error.log warn;
   pid        /var/run/nginx.pid;
   
   
   
   
   events {
       worker_connections  1024;
   }
   
   
   
   
   http {
       include       /etc/nginx/mime.types;
       default_type  application/octet-stream;
   
   
       log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                         '$status $body_bytes_sent "$http_referer" '
                         '"$http_user_agent" "$http_x_forwarded_for"';
   
   
       access_log  /var/log/nginx/access.log  main;
   
   
       sendfile        on;
       #tcp_nopush     on;
   
   
       keepalive_timeout  65;
   
   
       #gzip  on;
   
   
       #include /etc/nginx/mine/conf.d/*.conf;
       server {
          listen 80;
          server_name www.xxxxxx.tech;
          rewrite ^(.*)$ https://$host$1 permanent;
       }
       server {
           listen       443 ssl;
           server_name  localhost;
           server_name  www.xxxxxx.tech;
           ssl_certificate  ./cert/2026015_xxxxxx.tech.pem;
           ssl_certificate_key  ./cert/2026015_xxxxxx.tech.key;
           ssl_session_timeout 5m;
           ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
           ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
           ssl_prefer_server_ciphers on;
           location / {
              root   /usr/share/nginx/html;
              index  index.html index.htm;
           }
           error_page   500 502 503 504  /50x.html;
           location = /50x.html {
               root   /usr/share/nginx/html;
           }
       }
   }

4. 启动容器

   docker run -p 80:80 -p 443:443 --name mynginx  -v /home/nginx/config/nginx.conf:/etc/nginx/nginx.conf  -v /home/nginx/cert:/etc/nginx/cert:rw -d nginx

5. FQ

   1.(iptables failed: iptables --wait -t nat -A DOCKER -p tcp -d 0/0 --dport 443 -j DNAT --to-destination 172.17.0.3:443 ! -i docker0: iptables: No chain/target/match by that name.
    (exit status 1))
     解决方案：
       systemctl restart docker