目前该方法过时，等我后续更新

1.下载与上传证书

我使用的是腾讯云。进入控制台。找到SSL，点击申请免费证书。然后下载下来

下载后，是一个压缩包，解压

选择Nginx文件夹下的两个文件，复制，使用xftp上传到你的服务器。在上传之前，先在服务器上创建一个docker文件夹，在docker下再创建nginx文件夹，在nginx下再创建conf,logs,ssl,wwwroot文件夹。

2.修改配置文件

在conf里面创建一个文件，命名为nginx.conf。里面大部分内容不用改

user  nginx;
worker_processes  1;

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;


events {
    worker_connections  1024;
}


http {

	#博客服务器，多个可以实现负载均衡
    upstream sob-blog{
	   server lolxiaoguo.cn:2020 weight=1;
    }


 
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;

	server {
	
		if ($server_port = 80){
		return 301 https://lolxiaoguo.cn$request_uri;}
		if ($scheme = http){
		return 301 https://lolxiaoguo.cn$request_uri;}
		error_page 497 https://lolxiaoguo.cn$request_uri;
				
	}

	 server{
		listen        443 ssl ;
		server_name  lolxiaoguo.cn;
		 # 增加ssl
    		#ssl on;        #如果强制HTTPs访问，这行要打开
    		ssl_certificate /etc/nginx/ssl/1_www.lolxiaoguo.cn_bundle.crt;
    		ssl_certificate_key /etc/nginx/ssl/2_www.lolxiaoguo.cn.key;
	 	
    		ssl_session_cache    shared:SSL:1m;
    		ssl_session_timeout  5m;

     		# 指定密码为openssl支持的格式
     		ssl_protocols  SSLv2 SSLv3 TLSv1.2;

     		ssl_ciphers  HIGH:!aNULL:!MD5;  # 密码加密方式
     		ssl_prefer_server_ciphers  on;   # 依赖SSLv3和TLSv1协议的服务器密码将优先于客户端密码

		#charset koi8-r;
		#access_log  /var/log/nginx/host.access.log  main;


		#用户相关的请求，转到sob-blog
		location ^~/user/ {
            proxy_pass   http://sob-blog;
			#以下是一些反向代理的配置可删除
			proxy_redirect             off; 
			#后端的Web服务器可以通过X-Forwarded-For获取用户真实IP
			proxy_set_header           Host $host;
			proxy_set_header 		   Cookie $http_cookie;
			proxy_set_header           X-Real-IP $remote_addr; 
			proxy_set_header           X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header           HTTP_X_FORWARDED_FOR $remote_addr;
			proxy_set_header           X-Forwarded-Server $host;
        }
        
		location ^~/admin/ {
           	 proxy_pass   http://sob-blog;
			#以下是一些反向代理的配置可删除
			proxy_redirect             off; 
			#后端的Web服务器可以通过X-Forwarded-For获取用户真实IP
			proxy_set_header           Host $host;
			proxy_set_header 		   Cookie $http_cookie;
			proxy_set_header           X-Real-IP $remote_addr; 
			proxy_set_header           X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header           HTTP_X_FORWARDED_FOR $remote_addr;
			proxy_set_header           X-Forwarded-Server $host;
        }
        
        location ^~/portal/ {
           	 proxy_pass   http://sob-blog;
			#以下是一些反向代理的配置可删除
			proxy_redirect             off; 
			#后端的Web服务器可以通过X-Forwarded-For获取用户真实IP
			proxy_set_header           Host $host;
			proxy_set_header 		   Cookie $http_cookie;
			proxy_set_header           X-Real-IP $remote_addr; 
			proxy_set_header           X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header           HTTP_X_FORWARDED_FOR $remote_addr;
			proxy_set_header           X-Forwarded-Server $host;
        }

		#其他访问访问根目录wwwroot
		location / {
		    root   /usr/share/nginx/html;
			index  index.html index.htm;
		}
	}
	

}

3.创建容器

docker run -d --name=sob-nginx -p 80:80 -p 443:443 \
-v /home/ubuntu/docker/nginx/wwwroot:/usr/share/nginx/html \
-v /home/ubuntu/docker/nginx/conf/nginx.conf:/etc/nginx/nginx.conf \
-v /home/ubuntu/docker/nginx/logs:/var/log/nginx \
-v /home/ubuntu/docker/nginx/ssl:/etc/nginx/ssl nginx
nginx