$ docker pull nginx:latest

docker run --detach /    --name wx-nginx /    -p 443:443/    -p 80:80 /    -v /home/evan/workspace/wxserver/nginx/data:/usr/share/nginx/html:rw/    -v /home/evan/workspace/wxserver/nginx/config/nginx.conf:/etc/nginx/nginx.conf/:rw/    -v /home/evan/workspace/wxserver/nginx/config/conf.d/default.conf:/etc/nginx/conf.d/default.conf:rw/    -v /home/evan/workspace/wxserver/nginx/logs:/var/log/nginx/:rw/    -v /home/evan/workspace/wxserver/nginx/ssl:/ssl/:rw/    -d nginx

#運行nginx的用戶user nginx;#啟動進程設置成和CPU數量相等worker_processes 1;#全局錯誤日志及PID文件的位置error_log /var/log/nginx/error.log warn;pid    /var/run/nginx.pid;#工作模式及連接數上限events {    #單個后臺work進程最大并發數設置為1024  worker_connections 1024;}http {    #設定mime類型  include    /etc/nginx/mime.types;  default_type application/octet-stream;    #設定日志格式  log_format main '$remote_addr - $remote_user [$time_local] "$request" '           '$status $body_bytes_sent "$http_referer" '           '"$http_user_agent" "$http_x_forwarded_for"';  access_log /var/log/nginx/access.log main;  sendfile    on;  #tcp_nopush   on;    #設置連接超時的事件  keepalive_timeout 65;    #開啟GZIP壓縮  #gzip on;  include /etc/nginx/conf.d/*.conf;}

server {  listen  80;    #偵聽80端口，如果強制所有的訪問都必須是HTTPs的，這行需要注銷掉  server_name www.buagengen.com;       #域名  #charset koi8-r;  #access_log /var/log/nginx/host.access.log main;    # 定義首頁索引目錄和名稱  location / {    root  /usr/share/nginx/html;    index index.html index.htm;  }  #定義錯誤提示頁面  #error_page 404       /404.html;  #重定向錯誤頁面到 /50x.html  error_page  500 502 503 504 /50x.html;  location = /50x.html {    root  /usr/share/nginx/html;  }}

openssl genrsa -des3 -out server.key 1024 

openssl req -new -key server.key -out server.csr

Country Name (2 letter code) [AU]: 國家名稱State or Province Name (full name) [Some-State]: 省Locality Name (eg, city) []: 城市Organization Name (eg, company) [Internet Widgits Pty Ltd]: 公司名Organizational Unit Name (eg, section) []: Common Name (e.g. server FQDN or YOUR name) []: 網站域名Email Address []: 郵箱Please enter the following 'extra' attributesto be sent with your certificate requestA challenge password []: 這里要求輸入密碼An optional company name []:

openssl rsa -in server.key -out server_nopwd.key

openssl x509 -req -days 365 -in server.csr -signkey server_nopwd.key -out server.crt

server {  listen  80;    #偵聽80端口，如果強制所有的訪問都必須是HTTPs的，這行需要注銷掉  listen  443 ssl;  server_name www.buagengen.com;       #域名  # 增加ssl  #ssl on;    #如果強制HTTPs訪問，這行要打開  ssl_certificate /ssl/server.crt;  ssl_certificate_key /ssl/server.key;  ssl_session_cache  shared:SSL:1m;  ssl_session_timeout 5m;   # 指定密碼為openssl支持的格式   ssl_protocols SSLv2 SSLv3 TLSv1.2;   ssl_ciphers HIGH:!aNULL:!MD5; # 密碼加密方式   ssl_prefer_server_ciphers on;  # 依賴SSLv3和TLSv1協議的服務器密碼將優先于客戶端密碼   # 定義首頁索引目錄和名稱   location / {    root  /usr/share/nginx/html;    index index.html index.htm;   }  #重定向錯誤頁面到 /50x.html  error_page  500 502 503 504 /50x.html;  location = /50x.html {    root  /usr/share/nginx/html;  }}