Sign inSign up

hotpot/mgx

By hotpot

•Updated 2 days ago

nginx自带HTTPS配置 基于let‘s encrypt 自动续期

Image
0

10K+

hotpot/mgx repository overview

首先保证您的服务器能够请求80,443,各种防火墙都需要放行

docker-compose.yml 内容 , 修改[email protected]⁠为正确的你自己的邮箱地址

name: "mgx"
services:
  mgx:
    container_name: mgx
    image: hotpot/mgx:ssl-ml
    restart: always
    environment:
      - [email protected]
        #    env_file:
        #      - ./conf.env
    ports:
      - "80:80"
      - "443:443"
      - "443:443/udp"
    volumes:
      - mgx-data:/etc/letsencrypt
      - ./data/mgx/conf.d/ssl-conf.d:/ssl-conf.d
volumes:
  mgx-data:

在./data/mgx/conf.d/ssl-conf.d 目录底下创建一个conf结尾的配置文件,如:www.conf,内容如下,注意:domain.com⁠ 改为自己的的域名,总共四处,必须改对了,不然因为错误而请求次数过多会被lse拒绝请求

#upstream __backend {
#	server ip:8080;
#}
server {
	charset utf-8;
        server_name domain.com;
        listen 443 ssl;
        http2 on;

        ssl_certificate     /etc/letsencrypt/live/domain.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/domain.com/privkey.pem;
        ssl_trusted_certificate /etc/letsencrypt/live/domain.com/chain.pem;

        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2; 
        ssl_prefer_server_ciphers on;

        ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;

        error_page 500 502 503 504 404 403 /error.html;

        #error_page 404 /error.html;
        location = /error.html {
                root html;
        }

#        location / {
 #               include proxy.conf;
  #              proxy_pass http://__backend;
   #     }
}
  1. 启动 : docker compose up -d
  2. 查看日志: docker logs -f mgx

Tag summary

Content type

Image

Digest

sha256:b168167b9…

Size

18.1 MB

Last updated

2 days ago

docker pull hotpot/mgx