[二级域名映射端口][Ngins端口映射]腾讯云二级域名映射端口--续--Let's Encrypt

最新推荐文章于 2024-11-07 11:25:42 发布

fox3012

最新推荐文章于 2024-11-07 11:25:42 发布

阅读量1.1k

点赞数

CC 4.0 BY-SA版权

分类专栏：架构师文章标签： nginx反向代理 docker nginx

本文链接：https://blog.youkuaiyun.com/fox3012/article/details/104470315

架构师专栏收录该内容

15 篇文章

订阅专栏

本文详细讲解如何使用Nginx进行反向代理，将不同端口的服务绑定到特定子域名，并通过Let’s Encrypt获取免费SSL证书，实现https安全连接。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

上一节配置了nginx代理二级域名；这里我们讲讲深层次运用
如下场景：
注册好的域名：kaixin.com
现在有 1.http://130.111.122.12:8081
2.https://130.111.122.12:8443
需要在小程序中使用,这里就用到了nginx的反向代理了
目标: 1. http://130.111.122.12:8081绑定到 hh.kaixin.com
2. https://130.111.122.12:8443绑定到 kk.kaixin.com
步骤：
0.下载Let’s Encrypt docker

docker pull quay.io/letsencrypt/letsencrypt:latest

1.领取CA证书
执行前请停掉nginx

docker run --rm -p 80:80 -p 443:443 \
    -v /app/nginx_latest/letsencrypt:/etc/letsencrypt \
    quay.io/letsencrypt/letsencrypt auth \
    --standalone -m mail@XXX.com --agree-tos \
    -d hh.kaixin.com

docker run --rm -p 80:80 -p 443:443 \
    -v /app/nginx_latest/letsencrypt:/etc/letsencrypt \
    quay.io/letsencrypt/letsencrypt auth \
    --standalone -m mail@XXX.com --agree-tos \
    -d kk.kaixin.com

这里的

/app/nginx_latest/letsencrypt/

是指定在本地存放证书的地方

2.配置nginx

server {
    listen 443 ssl;
    server_name kk.kaixin.com;

    ssl_certificate /etc/letsencrypt/live/kk.kaixin.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/kk.kaixin.com/privkey.pem;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-Proto $scheme;

    underscores_in_headers on;

    location / {
        proxy_pass https://130.111.122.12:8443;
    }
}

server {
    listen 443 ssl;
    server_name hh.kaixin.com;

    ssl_certificate /etc/letsencrypt/live/hh.kaixin.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/hh.kaixin.com/privkey.pem;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-Proto $scheme;

    underscores_in_headers on;

    location / {
        proxy_pass https://130.111.122.12:8081;
    }
}

运行nginx：

docker run -p 80:80 -p 443:443 --restart always --name nginx_run -v /app/nginx_justrun/:/etc/nginx/ -v /app/nginx_latest/letsencrypt/:/etc/letsencrypt/ -d nginx

参考 link