原创文章，欢迎转载。转载请注明：转载自IT人故事会，谢谢！
原文链接地址：『中级篇』docker之运行nginx跳转到本地的jar并配置https（番外篇）（80）
真实的环境，一个1核2g内存，安装了mysql容器，java容器，nginx容器。具体安装docker我就不说了，没啥讲的重复很多遍的。mysql 也之前讲过。
nginx的安装
- 新建立nginx的目录
nginx
- 防止出现下面的错误
docker: Error response from daemon: oci runtime error: container_linux.go:262: starting container process caused "process_linux.go:339: container init caused "rootfs_linux.go:57: mounting \"/root/conf/nginx/nginx.conf\" to rootfs
\"/var/lib/docker/aufs/mnt/edd3b9a8923f13404d42aa73f509b625c7370791c8
25424427eacae6432fecc8\" at \"/var/lib/docker/aufs/mnt/edd3b9a8923f13404d42aa73f509b625c7370791c8
25424427eacae6432fecc8/etc/nginx/nginx.conf\" caused \"not a directo
ry\"""
: Are you trying to mount a directory onto a file (or vice-versa)? Check if the specified host path exists and is the expected type.
- 命令建立
确定文件夹存在
touch conf/nginx.conf
echo 1 > conf/nginx.conf
创建容器
docker run -d -p 80:80 \
--name five-nginx \
-p 443:443 \
-v /home/user/nginx/cert:/etc/nginx/cert \
-v /home/user/nginx/config/nginx.conf:/etc/nginx/nginx.conf \
-v /home/user/nginx/html:/usr/share/nginx/html \
-v /home/user/nginx/log:/var/log/nginx \
hub.c.163.com/library/nginx
- 配置nginx文件
#user nginx;
worker_processes 1;
error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid;
events {
worker_connections 1024;
}
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
#tcp_nopush on;
keepalive_timeout 65;
server {
listen 80;
server_name www.abc.xyz;
rewrite ^ https://$http_host$request_uri? permanent;
}
server {
listen 443;
server_name www.abc.xyz;
ssl on;
ssl_certificate /etc/nginx/cert/www.idig8.xyz.crt;
ssl_certificate_key /etc/nginx/cert/www.idig8.xyz.key;
ssl_session_timeout 5m;
location / {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header X-NginX-Proxy true;
proxy_pass http://172.17.0.3:8888/;
proxy_redirect off;
}
}
}
- java项目启动使用的是8888端口
nginx的配置 proxy_pass 不能使用127.0.0.1:8888
必须使用java容器内部的ip地址http://172.17.0.3:8888/; 可以通过docker inspect 来进行查看。
- https的配置
把cert阿里云中下载的crt，key放入指定的目录cert中。
PS：基本的nginx容器配置秘钥和key，跳转返回的时候，访问java容器的IP。
