nginx-ssl

https://www.cnblogs.com/shi2310/p/16424447.html

docker run --name nginx -p 443:443 -p 80:80 -v /usr/etc/docker/nginx/www:/usr/share/nginx/html -v /usr/etc/docker/nginx/conf.d:/etc/nginx/conf.d -v /usr/etc/docker/nginx/logs:/var/log/nginx/ -v /usr/etc/docker/nginx/ssl:/etc/nginx/ssl/ --privileged=true -d --link php nginx

openssl genrsa -out my.key -des3 2048
openssl req -days 3650 -x509 -sha256 -nodes -newkey rsa:2048 -keyout my.key -out my.crt

阿里云ssl
https://cloud.tencent.com/developer/article/1444888?from=15425&areaSource=102001.1&traceId=hr6wuqWG00xJ9twXuLoOA

server {
listen 80;
listen 443;
server_name 192.168.133.131;

access_log /var/log/nginx/access.log;
error_log /var/log/nginx/err.log debug;

#ssl on;
ssl_certificate  /etc/nginx/ssl/my.crt;
ssl_certificate_key /etc/nginx/ssl/my.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;

location / {
       proxy_set_header   X-Real-IP         $remote_addr;
       proxy_set_header   Host              $http_host;
       proxy_set_header   X-Forwarded-For       $proxy_add_x_forwarded_for;
       root   /usr/share/nginx/html;
       try_files $uri $uri/ /index.html;
}

location ~ \.php$ {
    fastcgi_pass   php:9000;
    fastcgi_index  index.php;
    fastcgi_param  SCRIPT_FILENAME  /www/$fastcgi_script_name;
    include        fastcgi_params;
}

}