Sign inSign up

coolrc/nginx

By coolrc

Updated over 7 years ago

nginx with tls1.3 and http2 support

Image
0

327

coolrc/nginx repository overview

nginx-proxy-docker

使用

申请证书

/var新建domains.txt,里面写入域名,例如:

coolrc.me www.coolrc.me

运行容器获得证书

docker run -it --rm \
  --name thttpd \
  -p '80:80' \
  -v $PWD/www/dehydrated:/www/.well-known/acme-challenge \
  cbolt/thttpd


docker run -it --rm \
  --name dehydrated \
  -v $PWD/certs:/data/certs \
  -v $PWD/accounts:/data/accounts \
  -v $PWD/domains.txt:/dehydrated/domains.txt \
  -v $PWD/www/dehydrated:/var/www/dehydrated \
  coolrc/dehydrated

手动配置其他必要的文件

cd /var/certs/
wget -O - https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem > intermediate.pem
wget -O - https://letsencrypt.org/certs/isrgrootx1.pem > root.pem
cat intermediate.pem root.pem > full_chained.pem
cd coolrc.me
openssl dhparam -out dhparams.pem 2048
openssl rand 48 > session_ticket.key
启动nginx
docker run -itd --restart=always \
  --name nginx \
  -p 80:80 \
  -p 443:443 \
  -v $PWD:/srv\
  -v $PWD/nginx.conf:/usr/local/nginx/conf/nginx.conf \
  coolrc/nginx

或者使用docker-compose php+nginx

version: '3'
services:

  php:
    image: php:5.6.38-fpm-alpine3.8
    volumes:
      - ./web:/www
    networks:
      - php

  nginx:
    image: coolrc/nginx
    volumes:
      - ./nginx.conf:/usr/local/nginx/conf/nginx.conf
      - ./:/srv
      - ./dehydrated:/www/.well-known/acme-challenge
      - ./web:/www
    ports:
      - 443:443
      - 80:80
    networks:
      - php

networks:
  php:
证书更新
docker run -it --rm \
  --name dehydrated \
  -v $PWD/certs:/data/certs \
  -v $PWD/accounts:/data/accounts \
  -v $PWD/domains.txt:/dehydrated/domains.txt \
  -v $PWD/www/dehydrated:/var/www/dehydrated \
  coolrc/dehydrated

然后restart即可

注意

nginx的配置文件可以参考这里nginx.conf

Tag summary

Content type

Image

Digest

Size

6.8 MB

Last updated

over 7 years ago

docker pull coolrc/nginx