docker容器安装nginx，并配置域名ssl证书

// 拉取镜像
docker pull nginx

// 查看镜像
docker images

# 创建挂载目录
mkdir -p /home/nginx/conf
mkdir -p /home/nginx/log
mkdir -p /home/nginx/html
// 证书目录
mkdir -p /home/nginx/ssl

启动容器，先将容器中的相关配置文件复制到宿主机

# 生成容器
docker run --name nginx -p 80:80 -d nginx

docker cp nginx:/usr/share/nginx/html /home/nginx/

docker cp nginx:/etc/nginx/nginx.conf /home/nginx/conf/nginx.conf

docker cp nginx:/etc/nginx/conf.d /home/nginx/conf/conf.d

查看容器

docker ps -a

停止容器

docker stop nginx

删除容器

docker rm nginx

上传证书到/home/nginx/ssl目录

修改nginx.conf文件

server {
        listen 80;
        server_name  www.nuy.top;
        rewrite ^(.*) https://$server_name$1 permanent;
}
server {
    listen 443 ssl;  # 1.1版本后这样写
    server_name  www.nuy.top; #填写绑定证书的域名

    ssl_certificate /etc/nginx/ssl/nuy.top.pem;  # 指定证书的位置，绝对路径
    ssl_certificate_key /etc/nginx/ssl/nuy.top.key;  # 绝对路径，同上

    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #按照这个协议配置
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;#按照这个套件配置
    ssl_prefer_server_ciphers on;

    ssl_session_cache shared:SSL:1m;

    fastcgi_param  HTTPS        on;
    fastcgi_param  HTTP_SCHEME     https;
    location / {
    proxy_set_header   X-Real-IP         $remote_addr;
    proxy_set_header   Host              $http_host;
    proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
    root   /usr/share/nginx/html;
    try_files $uri $uri/ /index.html;
    }
}

启动容器

docker run \
-p 80:80 -p 443:443 \
--name nginx \
-v /home/nginx/conf/nginx.conf:/etc/nginx/nginx.conf \
-v /home/nginx/conf/conf.d:/etc/nginx/conf.d \
-v /home/nginx/log:/var/log/nginx \
-v /home/nginx/html:/usr/share/nginx/html \
-v /home/nginx/ssl:/etc/nginx/ssl/ 
--privileged=true -d --restart=always nginx:latest