shinejh0528/nginx repository overview

docker run -itd -v [data_dir]:[data_dir] -p 80:80 -p 443:443 -e nginx_config=[path_to]/nginx.conf -e nginx_sa=[sa_path] --name [name] shinejh0528/nginx:1.1.0

docker exec -it [name] /bin/bash

/etc/nginx/sites-available/default

server {
    listen 80;
    server_name xxx1.com;

    location / {
        proxy_pass http://172.17.0.1:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

server {
    listen 80;
    server_name xxx2.com;

    location / {
        proxy_pass http://172.17.0.1:8088;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

server {
    listen 443 ssl;
    server_name xxx2.com;

    # SSL
    ssl_certificate [path].pem;
    ssl_certificate_key [path].key;

    # SSL Protocols Configuration
    ssl_protocols TLSv1.2 TLSv1.3;

    # Cipher Suite Configuration
    ssl_prefer_server_ciphers on;
    ssl_ciphers HIGH:!aNULL:!MD5;

    location / {
        proxy_pass https://172.17.0.1:8088;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

/etc/nginx/nginx.conf

access_log /data/nginx/log/access.log;
error_log /data/nginx/log/error.log;

service nginx restart