1
version: "3.8"
2
services:
3
  nginx:
4
    image: nginx:stable
5
    container_name: nginx-web
6
    hostname: nginx-web
7
    restart: always
8
    ports:
9
      - 23333:23333  #此处填写想要暴露的端口
10
    volumes:
11
      - ./nginx.conf:/etc/nginx/nginx.conf
12
      - ./cert:/etc/nginx/cert

1
worker_processes 1;
2

3
events {
4
  worker_connections 1024;
5
}
6

7
http {
8
  #http 全局块
9
  include mime.types;
10
  default_type application/octet-stream;
11
  sendfile on;
12

13
  server {
14
    listen 23333;  #要暴露的地址
15
    server_name server.blog.yuzi.dev;
16

17
    #增加 ssl
18
    ssl on;
19
    ssl_certificate cert/cert.crt;
20
    ssl_certificate_key cert/cert.key;
21

22
    ssl_session_cache shared:SSL:1m;
23
    ssl_session_timeout 5m;
24

25
    ssl_protocols SSLv2 SSLv3 TLSv1.2;
26

27
    ssl_ciphers HIGH:!aNULL:!MD5;
28
    ssl_prefer_server_ciphers on;
29
    location / {
30
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
31
      proxy_set_header X-Forwarded-Proto $scheme;
32
      proxy_set_header Host $http_host;
33
      proxy_set_header X-Real-IP $remote_addr;
34
      proxy_set_header Range $http_range;
35
      proxy_set_header If-Range $http_if_range;
36
      proxy_redirect off;
37
      proxy_pass http://172.17.0.1:2333;  #转发到的地址，一般容器内访问主机的地址是 172.17.0.1
38
      # the max size of file to upload
39
      client_max_body_size 20000m;
40
    }
41
  }
42
}