{"id":32786,"date":"2022-12-18T12:14:50","date_gmt":"2023-08-27T05:55:54","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83\/"},"modified":"2024-04-29T05:49:57","modified_gmt":"2024-04-28T21:49:57","slug":"%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83\/","title":{"rendered":"\u6211\u7684\u670d\u52a1\u5668\u642d\u5efa\u65e5\u5fd7\uff1a\u5728docker\u4e0a\u4f7f\u7528nginx\u7684\u53cd\u5411\u4ee3\u7406\u73af\u5883\u4e2d\u4f7f\u7528Let&#8217;s Encrypt"},"content":{"rendered":"<h1>\u629a\u6170\u6587\u5b57\u5f62103112<\/h1>\n<p>\u6211\u4e2a\u4eba\u7684\u670d\u52a1\u5668\u5efa\u8bbe\u65e5\u5fd7\uff1a\u7ee7\u4e0a\u6b21\u91cd\u65b0\u5f00\u59cb\u540e\uff0c\u5173\u4e8e\u5efa\u8bbe\u5bb6\u5ead\u670d\u52a1\u5668\u7684\u7ee7\u7eed\u8bb0\u5f55\u3002<\/p>\n<p>\u6211\u4eec\u5c06\u6309\u7167\u6807\u9898\u6240\u793a\u7684\u8981\u6c42\u6765\u5b8c\u6210\u4efb\u52a1\u3002\u4e0a\u6b21\u6211\u4eec\u5c1d\u8bd5\u5728 Docker \u4e0a\u642d\u5efa\u4e86\u4e00\u4e2a Nginx \u53cd\u5411\u4ee3\u7406\uff0c\u73b0\u5728\u6211\u4eec\u5c06\u63a2\u7d22\u5982\u4f55\u5728\u8fd9\u4e2a\u73af\u5883\u4e2d\u83b7\u53d6\u548c\u7ef4\u62a4 Let&#8217;s Encrypt \u7684\u8bc1\u4e66\u3002<\/p>\n<p>\u6211\u5c1d\u8bd5\u4e86\u4e00\u4e0b\u8fdb\u884c\u8c03\u67e5\uff0c\u4f46\u662f\u5173\u4e8e\u7c7b\u4f3c\u7684\u5185\u5bb9\u7684\u6587\u7ae0\u5e76\u4e0d\u591a\u3002\u7279\u522b\u662f\u6709\u5173\u7ef4\u62a4\u7684\u6b65\u9aa4\u3002\u6211\u4e5f\u8003\u8651\u4e86\u4e00\u4e0b\u6b65\u9aa4\uff0c\u4f46\u53ea\u80fd\u60f3\u5230\u4e00\u4e9b\u4e0eDocker\u4e0d\u592a\u76f8\u5173\u7684\u65b9\u6cd5\u3002\u6700\u7ec8\u5728\u4e0d\u65ad\u5c1d\u8bd5\u4e2d\uff0c\u6211\u9009\u62e9\u4e86\u4e0e\u4e3b\u673a\u673a\u5668\u7684cron\u7ed3\u5408\u8d77\u6765\u7684\u65b9\u5f0f\u3002<\/p>\n<h1>\u8981\u6c42\u7ed9\u51fa\u4e2d\u6587\u53e5\u5b50\u7684\u591a\u4e2a\u7248\u672c\uff0c\u8fd9\u662f\u4e00\u4e2a\u6307\u5b9a\u6807\u9898\u7684\u5199\u4f5c\u4efb\u52a1\u3002\u8bf7\u63d0\u4f9b\u76ee\u6807\u53e5\u5b50\u7684\u591a\u4e2a\u7248\u672c\u3002<\/h1>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Docker\u30b3\u30f3\u30c6\u30ca\u3067\u7acb\u3066\u305fnginx\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3092\u524d\u63d0\u3068\u3059\u308b<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u306b\u8a3c\u660e\u66f8\u3092\u6301\u305f\u305b\u3066\u3001\u4e0a\u6d41(upstream)\u306b\u306fHTTP\u3067\u63a5\u7d9a\u3002<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u8a3c\u660e\u66f8\u3092 Let&#8217;s Encrypt \u3067\u53d6\u5f97\uff08certbot\u3092\u5229\u7528\uff09<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\u8a3c\u660e\u66f8\u3092\u5b9a\u671f\u7684\u306b\u81ea\u52d5\u66f4\u65b0\u3059\u308b\u3002<\/ul>\n<h1>\u5927\u7eb2<\/h1>\n<p>\u4e3a\u4e86\u83b7\u53d6\u548c\u7ef4\u6301\u8bc1\u4e66\uff0c\u53ea\u9700\u8981\u5728\u53cd\u5411\u4ee3\u7406\u7684Docker\u5bb9\u5668\u4e2d\u5b89\u88c5certbot\u3002\u4e4b\u540e\u6309\u7167\u6807\u51c6\u6b65\u9aa4\u8fdb\u884c\u64cd\u4f5c\u3002<\/p>\n<p>\u5c3d\u7ba1\u77e5\u9053\u8fd9\u4e0d\u662f\u88ab\u8d5e\u8d4f\u7684\u65b9\u6cd5\uff0c\u6211\u5e0c\u671b\u5c06cron\u653e\u5165Docker\u5bb9\u5668\u4e2d\u3002\u4f46\u5b9e\u9645\u5c1d\u8bd5\u540e\uff0c\u53cd\u5411\u4ee3\u7406\u65e0\u6cd5\u6b63\u5e38\u5de5\u4f5c\u3002\u8fd9\u771f\u662f\u4ee4\u4eba\u56f0\u6270\u3002<\/p>\n<p>\u56e0\u6b64\uff0c\u6211\u4eec\u51b3\u5b9a\u901a\u8fc7\u4e3b\u673a\u7684cron\u8bbe\u7f6e\u6765\u5b9e\u73b0\u5b9a\u671f\u542f\u52a8\u547d\u4ee4\u3002<\/p>\n<p>\u6211\u672c\u6765\u662f\u60f3\u907f\u514d\u505a\u8fd9\u79cd\u4e8b\u60c5\u540e\u4f1a\u5fd8\u8bb0\uff0c\u4e0d\u8fc7\u53ea\u4f7f\u7528\u53cd\u5411\u4ee3\u7406\u5c06LXD\u5bb9\u5668\u5316\u4f3c\u4e4e\u6709\u4e9b\u5938\u5f20\u4e86\u3002\u771f\u9057\u61be\u3002<\/p>\n<h1>\u6587\u732e\u5f15\u7528<\/h1>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">nginx\u306b\u3088\u308b\u30d0\u30fc\u30c1\u30e3\u30eb\u30db\u30b9\u30c8\/\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u306b\u3088\u308b Let&#8217;s Encrypt \u8a3c\u660e\u66f8\u306e\u53d6\u5f97\u65b9\u6cd5\u306a\u3069 &#8211; Qiita<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">SSL\u8a3c\u660e\u66f8\u306e\u81ea\u52d5\u66f4\u65b0\u3002 &#8211; \u7121\u6599\u306eSSL\u8a3c\u660e\u66f8Let\u2019s Encrypt\u3092\u8a2d\u5b9a\u30fb\u66f4\u65b0\u30fb\u81ea\u52d5\u66f4\u65b0\u3059\u308b\u65b9\u6cd5(CentOS7, Apache2.4\u5bfe\u5fdc\uff09 &#8211; \u30d7\u30ed\u30b0\u30e9\u30df\u30f3\u30b0\u5165\u9580\u30ca\u30d3 by Proglus\uff08\u30d7\u30ed\u30b0\u30e9\u30b9\uff09<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u79c1\u7684\u30b5\u30fc\u30d0\u30fc\u69cb\u7bc9\u65e5\u8a8c\uff1anginx on docker \u3067\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7 &#8211; Qiita<\/ul>\n<\/li>\n<\/ul>\n<p>\u79c1\u7684\u30b5\u30fc\u30d0\u30fc\u69cb\u7bc9\u65e5\u8a8c\uff1aLAN\u5185DNS\u30b5\u30fc\u30d0\u30fc Unbound &#8211; Qiita \u2026 \u6211\u304c\u5bb6\u306e\u5bb6\u5ead\u5185DNS\u3067\u3059\u3002\u30d0\u30fc\u30c1\u30e3\u30eb\u30db\u30b9\u30c8\u3092\u52d5\u304b\u3059\u70ba\u306b\u3001\u5c11\u3057\u8ffd\u8a18\u304c\u5fc5\u8981\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<p>\u3010cron\u3011\u6539\u3081\u3066cron\u306e\u8a2d\u5b9a\u65b9\u6cd5\u306b\u3064\u3044\u3066\u52c9\u5f37\u3057\u76f4\u3057\u3066\u307f\u305f &#8211; \u3068\u30fc\u307e\u3059\u30e1\u30e2 \u2026 \/etc\/cron.d\/\u306b\u7f6e\u304f\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306f\u3001\u62e1\u5f35\u5b50\u3092\u4ed8\u3051\u3066\u306f\u3044\u3051\u306a\u3044\u3088\u3046\u3067\u3059\u3002<br \/>\nDocker Compose\u3067\u30ed\u30b0\u306e\u8a2d\u5b9a\u3092\u3059\u308b &#8211; Qiita<\/p>\n<p>\u8fd9\u6b21\u6211\u4eec\u51b3\u5b9a\u4e0d\u5728Docker\u5bb9\u5668\u4e2d\u4f7f\u7528cron\u3002\u4e0d\u8fc7\uff0c\u6211\u8fd8\u662f\u7ed9\u51fa\u4e86\u53c2\u8003\u6587\u732e\u3002<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Docker \u30b3\u30f3\u30c6\u30ca\u3067 cron \u3092\u4f7f\u3046 &#8211; Docker \u30b3\u30f3\u30c6\u30ca\u5185\u3067\u30bf\u30b9\u30af\u3092 cron \u8d77\u52d5\u3059\u308b &#8211; Qiita<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Docker\u30b3\u30f3\u30c6\u30ca\u5185\u3067cron\u3092\u5b9f\u884c\u3057\u5b9f\u884c\u30ed\u30b0\u3092\u51fa\u529b\u3059\u308b\u65b9\u6cd5 &#8211; \u30b2\u30f3\u30be\u30a6\u7528\u30dd\u30b9\u30c8\u30a4\u30c3\u30c8<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">Docker\u30b3\u30f3\u30c6\u30ca\u306e\u4e2d\u8eab\u306e\u30bf\u30a4\u30e0\u30be\u30fc\u30f3\u3092\u65e5\u672c\u6642\u523b\u306b\u3059\u308b\u65b9\u6cd5 &#8211; My CMS<\/ul>\n<h1>\u5efa\u7acb\u5b9e\u9a8c\u73af\u5883<\/h1>\n<p>\u6211\u5011\u5c07\u642d\u5efa\u8207\u4e0a\u6b21\u76f8\u540c\u7684\u5be6\u9a57\u74b0\u5883\u3002\u7531\u65bc\u53cd\u5411\u4ee3\u7406\u6709\u4e00\u4e9b\u6b65\u9a5f\u8b8a\u66f4\uff0c\u56e0\u6b64\u91cd\u65b0\u5217\u51fa\u6240\u6709\u6b65\u9a5f\u3002<\/p>\n<h2>\u7f51\u7edc\u8bbe\u7f6e<\/h2>\n<p>\u6211\u4f1a\u914d\u7f6e\u6211\u4eec\u5bb6\u7684\u670d\u52a1\u5668\uff0c\u4ee5\u4fbf\u53ef\u4ee5\u4ece\u5916\u90e8\u4e92\u8054\u7f51\u8bbf\u95ee\u3002\u9996\u5148\u8bbe\u7f6eDNS\uff0c\u7136\u540e\u8fdb\u884c\u5bb6\u7528\u8def\u7531\u5668\u7684\u7aef\u53e3\u8f6c\u53d1\u3002\u7aef\u53e380\u548c\u7aef\u53e3443\u3002\u7531\u4e8e\u73af\u5883\u4e0d\u540c\uff0c\u8bbe\u7f6e\u6b65\u9aa4\u4e5f\u4f1a\u4e0d\u540c\uff0c\u8bf7\u6309\u7167\u5404\u81ea\u7684\u6b65\u9aa4\u8fdb\u884c\u914d\u7f6e\u3002<\/p>\n<p>\u7136\u540e\u5c06\u8bbe\u5b9a\u5185\u5bb9\u8bbe\u7f6e\u4e3a\u53d8\u91cf\u3002<\/p>\n<p>\u57df\u540d\u5728\u8fd9\u91cc\u5047\u8bbe\u4e3aexample.com\uff0c\u4f60\u9700\u8981\u8d2d\u4e70\u5e76\u8bbe\u7f6e\u5c5e\u4e8e\u81ea\u5df1\u7684\u57df\u540d\uff0c\u5343\u4e07\u4e0d\u8981\u76f4\u63a5\u4f7f\u7528\u8fd9\u4e2a\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">MY_DOMAIN=example.com\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"gp\">TEST_DOMAIN=test.$<\/span>MY_DOMAIN\r\n<\/code><\/pre>\n<p>\u6211\u5bb6\u670d\u52a1\u5668\u5728\u5bb6\u5ead\u5c40\u57df\u7f51\u4e2d\u7684IP\u5730\u5740\u662f172.16.1.2\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">HOST_IPADDR=172.16.1.2\r\n<\/span><\/code><\/pre>\n<h2>\u5bb6\u5ead\u5185\u90e8\u57df\u540d\u7cfb\u7edf<\/h2>\n<p>\u9996\u5148\uff0c\u6211\u4eec\u4f1a\u914d\u7f6e\u5bb6\u5ead\u5185\u90e8\u7684DNS\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">cd \/etc\/unbound\/unbound.conf.d\/\r\n<\/span><span class=\"gp\">cat | sudo tee -a machines.list &gt;<\/span>\/dev\/null <span class=\"o\">&lt;&lt;<\/span><span class=\"no\">___<\/span>\r\n<span class=\"gp\">local-data: \"$<\/span><span class=\"sh\">TEST_DOMAIN. 3600000 IN A <\/span><span class=\"nv\">$HOST_IPADDR<\/span><span class=\"sh\">\"\r\n<\/span><span class=\"go\">___\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"go\">unbound-checkconf\r\nsudo systemctl restart unbound\r\n<\/span><\/code><\/pre>\n<h2>\u7f51\u7edc\u670d\u52a1\u5668<\/h2>\n<p>\u6211\u5c06\u8bbe\u7f6e\u4e00\u4e2aWeb\u670d\u52a1\u5668\u3002\u7531\u4e8e\u53ea\u6d89\u53ca\u57fa\u672c\u914d\u7f6e\uff0c\u6240\u4ee5\u6211\u5c06\u76f4\u63a5\u8fdb\u884c\uff0c\u4e0d\u505a\u89e3\u91ca\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">TEST_PORT=20080\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"go\">cd\r\nmkdir docker-nginx1\r\ncd docker-nginx1\r\nmkdir -p config\/nginx\r\nmkdir -p data\/nginx\r\nmkdir html\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"gp\">cat &lt;&lt;___ &gt;<\/span>docker-compose.yml\r\n<span class=\"go\">version: \"3.9\"\r\nservices:\r\n  nginx1:\r\n    image: nginx:latest\r\n    container_name: nginx1\r\n    restart: unless-stopped\r\n    ports:\r\n<\/span><span class=\"gp\">      - $<\/span>TEST_PORT:80\r\n<span class=\"go\">    volumes:\r\n      - .\/config\/nginx:\/etc\/nginx\/conf.d\r\n      - .\/data\/nginx:\/var\/log\/nginx\r\n      - .\/html:\/usr\/share\/nginx\/html\r\n___\r\n<\/span><span class=\"gp\">cat &lt;&lt;___ &gt;<\/span>config\/nginx\/test.conf\r\n<span class=\"go\">server {\r\n<\/span><span class=\"gp\">    listen        80;<\/span>\r\n<span class=\"gp\">    server_name   _;<\/span>\r\n<span class=\"gp\">    server_tokens off;<\/span>\r\n<span class=\"go\">\r\n    location \/ {\r\n<\/span><span class=\"gp\">        root   \/usr\/share\/nginx\/html;<\/span>\r\n<span class=\"gp\">        index  index.html;<\/span>\r\n<span class=\"go\">    }\r\n}\r\n___\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"gp\">cat &lt;&lt;___ &gt;<\/span>html\/index.html\r\n<span class=\"gp\">&lt;!DOCTYPE html&gt;<\/span>\r\n<span class=\"gp\">&lt;html lang=\"ja\"&gt;<\/span>\r\n<span class=\"gp\"> &lt;head&gt;<\/span>\r\n<span class=\"gp\"> &lt;meta charset=\"UTF-8\" \/&gt;<\/span>\r\n<span class=\"gp\"> &lt;title&gt;<\/span>nginx <span class=\"nb\">test<\/span>&lt;\/title&gt;\r\n<span class=\"gp\">&lt;\/head&gt;<\/span>\r\n<span class=\"gp\">&lt;body&gt;<\/span>\r\n<span class=\"gp\"> &lt;h1&gt;<\/span><span class=\"nb\">test<\/span>&lt;\/h1&gt;\r\n<span class=\"gp\"> &lt;p&gt;<\/span>hello,world&lt;\/p&gt;\r\n<span class=\"gp\">&lt;\/body&gt;<\/span>\r\n<span class=\"gp\">&lt;\/html&gt;<\/span>\r\n<span class=\"go\">___\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"go\">docker compose up -d\r\n<\/span><\/code><\/pre>\n<p>\u786e\u8ba4\u52a8\u4f5c\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"gp\">curl http:\/\/$<\/span>HOST_IPADDR:<span class=\"nv\">$TEST_PORT<\/span>\/\r\n<\/code><\/pre>\n<h2>\u53cd\u5411\u4ee3\u7406<\/h2>\n<p>\u53cd\u5411\u4ee3\u7406\u662f\u6307\uff0c\u6839\u636e\u6982\u8ff0\u7684\u5185\u5bb9\uff0c\u5b89\u88c5certbot\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">cd\r\nmkdir docker-proxy\r\ncd docker-proxy\r\nmkdir -p config\/nginx\r\nmkdir -p data\/nginx\r\nmkdir -p html\/ssl-proof\r\nmkdir letsencrypt\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"gp\">cat &lt;&lt;___ &gt;<\/span>docker-compose.yml\r\n<span class=\"go\">version: \"3.9\"\r\nservices:\r\n  proxy:\r\n    build: .\r\n    container_name: proxy\r\n    restart: unless-stopped\r\n    ports:\r\n      - 80:80\r\n      - 443:443\r\n    volumes:\r\n      - .\/config\/nginx:\/etc\/nginx\/conf.d\r\n      - .\/data\/nginx:\/var\/log\/nginx\r\n      - .\/html:\/usr\/share\/nginx\/html\r\n      - .\/letsencrypt:\/etc\/letsencrypt\r\n    logging:\r\n      driver: json-file\r\n      options:\r\n        max-size: 10m\r\n        max-file: '3'\r\n___\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"gp\">cat &lt;&lt;___ &gt;<\/span>Dockerfile\r\n<span class=\"go\">FROM nginx:latest\r\nRUN apt update \\\r\n &amp;&amp; apt install -y certbot \\\r\n &amp;&amp; apt -y clean\r\n___\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"gp\">cat &lt;&lt;___ &gt;<\/span>config\/nginx\/default.conf\r\n<span class=\"go\">server {\r\n<\/span><span class=\"gp\">    listen        80 default_server;<\/span>\r\n<span class=\"gp\">    server_name   _;<\/span>\r\n<span class=\"gp\">    server_tokens off;<\/span>\r\n<span class=\"go\">\r\n    location \/ {\r\n<\/span><span class=\"gp\">        root   \/usr\/share\/nginx\/html;<\/span>\r\n<span class=\"gp\">        index  index.html;<\/span>\r\n<span class=\"go\">    }\r\n}\r\n___\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"gp\">cat &lt;&lt;___ &gt;<\/span>config\/nginx\/test.conf\r\n<span class=\"go\">server {\r\n<\/span><span class=\"gp\">    listen        80;<\/span>\r\n<span class=\"gp\">    server_name   $<\/span>TEST_DOMAIN<span class=\"p\">;<\/span>\r\n<span class=\"gp\">    server_tokens off;<\/span>\r\n<span class=\"go\">\r\n    location ^~ \/.well-known\/acme-challenge\/ {\r\n<\/span><span class=\"gp\">        root   \/usr\/share\/nginx\/html\/ssl-proof;<\/span>\r\n<span class=\"go\">    }\r\n\r\n    location \/ {\r\n<\/span><span class=\"gp\">        proxy_pass http:\/\/$<\/span>HOST_IPADDR:<span class=\"nv\">$TEST_PORT<\/span><span class=\"p\">;<\/span>\r\n<span class=\"go\">    }\r\n}\r\n___\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"go\">docker compose up -d\r\n<\/span><\/code><\/pre>\n<p>\u786e\u8ba4\u52a8\u4f5c\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"gp\">curl http:\/\/$<\/span>TEST_DOMAIN\/\r\n<\/code><\/pre>\n<h1>\u4f7f\u7528Certbot\u83b7\u53d6\u8bc1\u4e66\u3002<\/h1>\n<p>\u4ece\u8fd9\u91cc\u5f00\u59cb\u624d\u662f\u771f\u6b63\u7684\u5b9e\u6218\u5427\u3002\u9996\u5148\u662f\u83b7\u53d6\u8bc1\u4e66\u7684\u6b65\u9aa4\u3002\u6267\u884ccertbot\u547d\u4ee4\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"gp\">docker compose exec proxy certbot certonly --register-unsafely-without-email --agree-tos --webroot -w \/usr\/share\/nginx\/html\/ssl-proof -d $<\/span>TEST_DOMAIN\r\n<\/code><\/pre>\n<p>\u8bc1\u660e\u6587\u4ef6\u7b49\u5b58\u50a8\u5728\u4ee5\u4e0b\u4f4d\u7f6e\u3002\u4f46\u6743\u9650\u5df2\u8bbe\u7f6e\u4e3aroot\u3002<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u516c\u958b\u9375\uff1a ~\/docker-proxy\/letsencrypt\/live\/$TEST_DOMAIN\/fullchain.pem<\/ul>\n<\/li>\n<\/ul>\n<p>\u79d8\u5bc6\u9375\uff1a ~\/docker-proxy\/letsencrypt\/live\/$TEST_DOMAIN\/privkey.pem<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">cd\r\ncd docker-proxy\r\n<\/span><span class=\"gp\">sudo ls -l letsencrypt\/live\/$<\/span>TEST_DOMAIN\r\n<\/code><\/pre>\n<p>\u5927\u81f4\u5982\u6b64\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"gp\">$<\/span> <span class=\"nb\">sudo ls<\/span> <span class=\"nt\">-l<\/span> letsencrypt\/live\/<span class=\"nv\">$TEST_DOMAIN<\/span>\r\n<span class=\"go\">total 9\r\n-rw-r--r-- 1 root root 692 Nov 28 13:50 README\r\n<\/span><span class=\"gp\">lrwxrwxrwx 1 root root  42 Nov 28 13:50 cert.pem -&gt;<\/span> ..\/..\/archive\/test.moon-night.jp\/cert1.pem\r\n<span class=\"gp\">lrwxrwxrwx 1 root root  43 Nov 28 13:50 chain.pem -&gt;<\/span> ..\/..\/archive\/test.moon-night.jp\/chain1.pem\r\n<span class=\"gp\">lrwxrwxrwx 1 root root  47 Nov 28 13:50 fullchain.pem -&gt;<\/span> ..\/..\/archive\/test.moon-night.jp\/fullchain1.pem\r\n<span class=\"gp\">lrwxrwxrwx 1 root root  45 Nov 28 13:50 privkey.pem -&gt;<\/span> ..\/..\/archive\/test.moon-night.jp\/privkey1.pem\r\n<\/code><\/pre>\n<p>\u8ba9\u6211\u4eec\u68c0\u67e5\u4e00\u4e0b\u8bc1\u4e66\u7684\u5185\u5bb9\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"gp\">sudo openssl x509 -text -in letsencrypt\/live\/$<\/span>TEST_DOMAIN\/fullchain.pem | <span class=\"nb\">grep<\/span> <span class=\"nt\">-E<\/span> <span class=\"s2\">\"Issuer:|Subject:\"<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"gp\">sudo openssl x509 -dates -noout -in letsencrypt\/live\/$<\/span>TEST_DOMAIN\/fullchain.pem\r\n<\/code><\/pre>\n<h1>\u5728\u53cd\u5411\u4ee3\u7406\u670d\u52a1\u5668\u4e0a\u8bbe\u7f6e\u8bc1\u4e66\u3002<\/h1>\n<p>\u5728\u8f6c\u53d1\u90e8\u5206\u8bbe\u7f6e\u8bc1\u4e66\uff0c\u5e76\u4fdd\u755980\u53f7\u7aef\u53e3\u7528\u4e8e\u8bc1\u4e66\u7ef4\u62a4\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"gp\">cat &lt;&lt;___ &gt;<\/span>config\/nginx\/test.conf\r\n<span class=\"go\">server {\r\n<\/span><span class=\"gp\">    listen        80;<\/span>\r\n<span class=\"gp\">    server_name   $<\/span>TEST_DOMAIN<span class=\"p\">;<\/span>\r\n<span class=\"gp\">    server_tokens off;<\/span>\r\n<span class=\"go\">\r\n    location ^~ \/.well-known\/acme-challenge\/ {\r\n<\/span><span class=\"gp\">        root \/usr\/share\/nginx\/html\/ssl-proof;<\/span>\r\n<span class=\"go\">    }\r\n\r\n    location \/ {\r\n<\/span><span class=\"gp\">        return 301 http:\/\/$<\/span>TEST_DOMAIN<span class=\"p\">;<\/span>\r\n<span class=\"go\">    }\r\n}\r\nserver {\r\n<\/span><span class=\"gp\">    listen        443 ssl;<\/span>\r\n<span class=\"gp\">    server_name   $<\/span>TEST_DOMAIN<span class=\"p\">;<\/span>\r\n<span class=\"gp\">    server_tokens off;<\/span>\r\n\r\n<span class=\"gp\">    ssl_certificate     \/etc\/letsencrypt\/live\/$<\/span>TEST_DOMAIN\/fullchain.pem<span class=\"p\">;<\/span>\r\n<span class=\"gp\">    ssl_certificate_key \/etc\/letsencrypt\/live\/$<\/span>TEST_DOMAIN\/privkey.pem<span class=\"p\">;<\/span>\r\n<span class=\"go\">\r\n    location \/ {\r\n<\/span><span class=\"gp\">        proxy_pass http:\/\/$<\/span>HOST_IPADDR:<span class=\"nv\">$TEST_PORT<\/span><span class=\"p\">;<\/span>\r\n<span class=\"go\">    }\r\n}\r\n___\r\n<\/span><\/code><\/pre>\n<p>\u6211\u5c06\u91cd\u65b0\u542f\u52a8 Nginx\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">docker compose exec proxy nginx -s reload\r\n<\/span><\/code><\/pre>\n<p>\u786e\u8ba4\u52a8\u4f5c\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"gp\">curl https:\/\/$<\/span>TEST_DOMAIN\/\r\n<\/code><\/pre>\n<h1>\u81ea\u52a8\u66f4\u65b0<\/h1>\n<p>\u8fd9\u662f\u5173\u4e8e\u8bc1\u4e66\u66f4\u65b0\u7684\u8bbe\u5b9a\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">cd\r\ncd docker-proxy\r\n<\/span><span class=\"gp\">cat &lt;&lt;___ &gt;<\/span>certbot-renew.sh\r\n<span class=\"gp\">#<\/span><span class=\"o\">!<\/span>\/bin\/bash\r\n<span class=\"go\">cd\r\ncd docker-proxy\r\n\/usr\/bin\/date -Iseconds\r\n\/usr\/bin\/docker compose exec proxy certbot renew\r\n\/usr\/bin\/docker compose exec proxy nginx -s reload\r\necho \"=====\"\r\n___\r\nchmod +x certbot-renew.sh\r\n<\/span><span class=\"gp\">sudo ln -s $<\/span>PWD\/certbot-renew.sh \/usr\/local\/bin\/certbot-renew.sh\r\n<\/code><\/pre>\n<p>\u5173\u4e8e\u65e5\u5fd7\uff0c\u6211\u4eec\u505c\u6b62\u4f7f\u7528logger\u547d\u4ee4\uff0c\u5e76\u6539\u7528\u5c06\u6807\u51c6\u8f93\u51fa\u548c\u6807\u51c6\u9519\u8bef\u8f93\u51fa\u91cd\u5b9a\u5411\u5230\u672c\u5730\u3002\u7136\u540e\u901a\u8fc7logrotate\u8fdb\u884c\u8f6e\u8f6c\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">sudo mkdir \/var\/log\/letsencrypt\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"gp\">sudo chown $<\/span>USER \/var\/log\/letsencrypt\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"gp\">cat &lt;&lt;___ | sudo tee \/etc\/logrotate.d\/certbot-renew &gt;<\/span>\/dev\/null\r\n<span class=\"go\">\/var\/log\/letsencrypt\/certbot-renew.log {\r\n    missingok\r\n    rotate 3\r\n    compress\r\n    monthly\r\n    minsize 1M\r\n}\r\n___\r\n<\/span><\/code><\/pre>\n<p>\u7531\u4e8eLet&#8217;s Encrypt\u8bc1\u4e66\u7684\u6709\u6548\u671f\u4e3a90\u5929\uff0c\u56e0\u6b64\u6211\u4eec\u9700\u8981\u6bcf\u6708\u4e24\u6b21\u5728\u6bcf\u67081\u65e5\u548c15\u65e5\u51cc\u66683\u70b9\u8fd0\u884c\u66f4\u65b0\u68c0\u67e5\u3002\u5b83\u4f1a\u81ea\u52a8\u5224\u65ad\u662f\u5426\u5e94\u8be5\u8fdb\u884c\u66f4\u65b0\uff0c\u9700\u53c2\u8003\u5269\u4f59\u5929\u6570\u662f\u5426\u8d85\u8fc730\u5929\u3002<\/p>\n<p>\u53e6\u5916\uff0c\u636e\u8bf4\u5728\/etc\/cron.d\u8bbe\u7f6e\u6587\u4ef6\u65f6\uff0c\u6587\u4ef6\u7684\u6269\u5c55\u540d\u5fc5\u987b\u4e3a\u7a7a\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"gp\">cat &lt;&lt;___ | sudo tee \/etc\/cron.d\/certbot-renew &gt;<\/span>\/dev\/null\r\n<span class=\"gp\">0 3 1,15 * * $<\/span>USER \/usr\/local\/bin\/certbot-renew.sh <span class=\"o\">&gt;&gt;<\/span>\/var\/log\/letsencrypt\/certbot-renew.log 2&gt;&amp;1\r\n<span class=\"go\">___\r\n<\/span><\/code><\/pre>\n<p>\u63a5\u4e0b\u6765\u53ea\u9700\u8981\u786e\u8ba4\u5b9e\u9645\u64cd\u4f5c\u4e86\u3002\u8fd9\u4f1a\u662f\u4e00\u4e2a\u6709\u70b9\u5197\u957f\u7684\u8bdd\u9898\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">cd\r\ncd docker-proxy\r\n<\/span><span class=\"gp\">sudo ls -l letsencrypt\/live\/$<\/span>TEST_DOMAIN\/\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"go\">cat \/var\/log\/letsencrypt\/certbot-renew.log\r\n<\/span><\/code><\/pre>\n<h1>\u6536\u573a<\/h1>\n<p>\u8fd9\u6b21\u7684\u76ee\u7684\u8fd8\u662f\u68c0\u67e5\u6b65\u9aa4\u3002\u7b49\u786e\u8ba4\u52a8\u4f5c\u5b8c\u6bd5\u540e\uff0c\u8bb0\u5f97\u5168\u90e8\u6e05\u9664\u5e72\u51c0\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">sudo rm \/etc\/cron.d\/certbot-renew\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"go\">sudo rm \/etc\/logrotate.d\/certbot-renew\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"go\">sudo rm \/usr\/local\/bin\/certbot-renew.sh\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"go\">sudo rm -r \/var\/log\/letsencrypt\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"go\">cd\r\ncd docker-proxy\r\ndocker compose down --rmi all --volumes\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"go\">cd\r\ncd docker-nginx1\r\ndocker compose down --rmi all --volumes\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"go\">cd\r\nsudo rm -r docker-proxy docker-nginx1\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"gp\">sudo sed -i -e\"\/$<\/span>TEST_DOMAIN.\/d<span class=\"s2\">\" \/etc\/unbound\/unbound.conf.d\/machines.list\r\n<\/span><\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"go\">unbound-checkconf\r\nsudo systemctl restart unbound\r\n<\/span><\/code><\/pre>\n<p>\u8fd9\u6b21\u6211\u4eec\u786e\u8ba4\u4e86\u4f7f\u7528Let&#8217;s Encrypt\u83b7\u53d6\u8bc1\u4e66\u5e76\u4fdd\u6301\u8bc1\u4e66\u6709\u6548\u7684\u6b65\u9aa4\uff0c\u5728\u53cd\u5411\u4ee3\u7406\u73af\u5883\u4e2d\u8fdb\u884c\u8bbe\u7f6e\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u629a\u6170\u6587\u5b57\u5f62103112 \u6211\u4e2a\u4eba\u7684\u670d\u52a1\u5668\u5efa\u8bbe\u65e5\u5fd7\uff1a\u7ee7\u4e0a\u6b21\u91cd\u65b0\u5f00\u59cb\u540e\uff0c\u5173\u4e8e\u5efa\u8bbe\u5bb6\u5ead\u670d\u52a1\u5668\u7684\u7ee7\u7eed\u8bb0\u5f55\u3002 \u6211\u4eec\u5c06\u6309\u7167\u6807 [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-32786","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u6211\u7684\u670d\u52a1\u5668\u642d\u5efa\u65e5\u5fd7\uff1a\u5728docker\u4e0a\u4f7f\u7528nginx\u7684\u53cd\u5411\u4ee3\u7406\u73af\u5883\u4e2d\u4f7f\u7528Let&#039;s Encrypt - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u6211\u7684\u670d\u52a1\u5668\u642d\u5efa\u65e5\u5fd7\uff1a\u5728docker\u4e0a\u4f7f\u7528nginx\u7684\u53cd\u5411\u4ee3\u7406\u73af\u5883\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u6211\u7684\u670d\u52a1\u5668\u642d\u5efa\u65e5\u5fd7\uff1a\u5728docker\u4e0a\u4f7f\u7528nginx\u7684\u53cd\u5411\u4ee3\u7406\u73af\u5883\u4e2d\u4f7f\u7528Let&#039;s Encrypt\" \/>\n<meta property=\"og:description\" content=\"\u629a\u6170\u6587\u5b57\u5f62103112 \u6211\u4e2a\u4eba\u7684\u670d\u52a1\u5668\u5efa\u8bbe\u65e5\u5fd7\uff1a\u7ee7\u4e0a\u6b21\u91cd\u65b0\u5f00\u59cb\u540e\uff0c\u5173\u4e8e\u5efa\u8bbe\u5bb6\u5ead\u670d\u52a1\u5668\u7684\u7ee7\u7eed\u8bb0\u5f55\u3002 \u6211\u4eec\u5c06\u6309\u7167\u6807 [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u6211\u7684\u670d\u52a1\u5668\u642d\u5efa\u65e5\u5fd7\uff1a\u5728docker\u4e0a\u4f7f\u7528nginx\u7684\u53cd\u5411\u4ee3\u7406\u73af\u5883\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-27T05:55:54+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-28T21:49:57+00:00\" \/>\n<meta name=\"author\" content=\"\u5b87, \u534e\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u5b87, \u534e\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83\/\",\"name\":\"\u6211\u7684\u670d\u52a1\u5668\u642d\u5efa\u65e5\u5fd7\uff1a\u5728docker\u4e0a\u4f7f\u7528nginx\u7684\u53cd\u5411\u4ee3\u7406\u73af\u5883\u4e2d\u4f7f\u7528Let's Encrypt - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-08-27T05:55:54+00:00\",\"dateModified\":\"2024-04-28T21:49:57+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/513018e4e121d3add1b7c5de8be21458\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u6211\u7684\u670d\u52a1\u5668\u642d\u5efa\u65e5\u5fd7\uff1a\u5728docker\u4e0a\u4f7f\u7528nginx\u7684\u53cd\u5411\u4ee3\u7406\u73af\u5883\u4e2d\u4f7f\u7528Let&#8217;s Encrypt\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/513018e4e121d3add1b7c5de8be21458\",\"name\":\"\u5b87, \u534e\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63cd45cbc05a35fc4ff7637a163c83c4962ef58d27472726c3a3e0c9c5194f0f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63cd45cbc05a35fc4ff7637a163c83c4962ef58d27472726c3a3e0c9c5194f0f?s=96&d=mm&r=g\",\"caption\":\"\u5b87, \u534e\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/yuhua\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u6211\u7684\u670d\u52a1\u5668\u642d\u5efa\u65e5\u5fd7\uff1a\u5728docker\u4e0a\u4f7f\u7528nginx\u7684\u53cd\u5411\u4ee3\u7406\u73af\u5883\u4e2d\u4f7f\u7528Let's Encrypt - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u6211\u7684\u670d\u52a1\u5668\u642d\u5efa\u65e5\u5fd7\uff1a\u5728docker\u4e0a\u4f7f\u7528nginx\u7684\u53cd\u5411\u4ee3\u7406\u73af\u5883\/","og_locale":"zh_CN","og_type":"article","og_title":"\u6211\u7684\u670d\u52a1\u5668\u642d\u5efa\u65e5\u5fd7\uff1a\u5728docker\u4e0a\u4f7f\u7528nginx\u7684\u53cd\u5411\u4ee3\u7406\u73af\u5883\u4e2d\u4f7f\u7528Let's Encrypt","og_description":"\u629a\u6170\u6587\u5b57\u5f62103112 \u6211\u4e2a\u4eba\u7684\u670d\u52a1\u5668\u5efa\u8bbe\u65e5\u5fd7\uff1a\u7ee7\u4e0a\u6b21\u91cd\u65b0\u5f00\u59cb\u540e\uff0c\u5173\u4e8e\u5efa\u8bbe\u5bb6\u5ead\u670d\u52a1\u5668\u7684\u7ee7\u7eed\u8bb0\u5f55\u3002 \u6211\u4eec\u5c06\u6309\u7167\u6807 [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u6211\u7684\u670d\u52a1\u5668\u642d\u5efa\u65e5\u5fd7\uff1a\u5728docker\u4e0a\u4f7f\u7528nginx\u7684\u53cd\u5411\u4ee3\u7406\u73af\u5883\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-08-27T05:55:54+00:00","article_modified_time":"2024-04-28T21:49:57+00:00","author":"\u5b87, \u534e","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u5b87, \u534e","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"4 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83\/","name":"\u6211\u7684\u670d\u52a1\u5668\u642d\u5efa\u65e5\u5fd7\uff1a\u5728docker\u4e0a\u4f7f\u7528nginx\u7684\u53cd\u5411\u4ee3\u7406\u73af\u5883\u4e2d\u4f7f\u7528Let's Encrypt - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-08-27T05:55:54+00:00","dateModified":"2024-04-28T21:49:57+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/513018e4e121d3add1b7c5de8be21458"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u6211\u7684\u670d\u52a1\u5668\u642d\u5efa\u65e5\u5fd7\uff1a\u5728docker\u4e0a\u4f7f\u7528nginx\u7684\u53cd\u5411\u4ee3\u7406\u73af\u5883\u4e2d\u4f7f\u7528Let&#8217;s Encrypt"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/513018e4e121d3add1b7c5de8be21458","name":"\u5b87, \u534e","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63cd45cbc05a35fc4ff7637a163c83c4962ef58d27472726c3a3e0c9c5194f0f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63cd45cbc05a35fc4ff7637a163c83c4962ef58d27472726c3a3e0c9c5194f0f?s=96&d=mm&r=g","caption":"\u5b87, \u534e"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/yuhua\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e6%88%91%e7%9a%84%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%90%ad%e5%bb%ba%e6%97%a5%e5%bf%97%ef%bc%9a%e5%9c%a8docker%e4%b8%8a%e4%bd%bf%e7%94%a8nginx%e7%9a%84%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e7%8e%af%e5%a2%83\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/32786","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=32786"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/32786\/revisions"}],"predecessor-version":[{"id":83426,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/32786\/revisions\/83426"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=32786"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=32786"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=32786"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}