1
version: '3.8'
2

3
services:
4
  nginx:
5
    image: nginx:alpine
6
    container_name: fuwari-nginx
7
    restart: always
8
    ports:
9
      - "80:80"
10
      - "443:443"
11
    volumes:
12
      - ./dist:/usr/share/nginx/html
13
      - ./nginx.conf:/etc/nginx/conf.d/default.conf
14
      - ./certbot/www:/var/www/certbot
15
      - ./certbot/conf:/etc/nginx/ssl
16
    networks:
17
      - fuwari-network
18
    depends_on:
19
      - certbot
20

21
  certbot:
22
    image: certbot/certbot
23
    container_name: fuwari-certbot
24
    restart: unless-stopped
25
    volumes:
26
      - ./certbot/www:/var/www/certbot
27
      - ./certbot/conf:/etc/letsencrypt
28
    entrypoint: "sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'"
29
    networks:
30
      - fuwari-network
31

32
networks:
33
  fuwari-network:
34
    driver: bridge

1
server {
2
    listen 80;
3
    server_name your-domain.com www.your-domain.com;
4

5
    # 重定向HTTP到HTTPS
6
    location / {
7
        return 301 https://$host$request_uri;
8
    }
9

10
    # Certbot验证路径
11
    location /.well-known/acme-challenge/ {
12
        root /var/www/certbot;
13
    }
14
}
15

16
server {
17
    listen 443 ssl;
18
    server_name your-domain.com www.your-domain.com;
19
    root /usr/share/nginx/html;
20
    index index.html;
21

22
    # SSL证书配置
23
    ssl_certificate /etc/nginx/ssl/live/your-domain.com/fullchain.pem;
24
    ssl_certificate_key /etc/nginx/ssl/live/your-domain.com/privkey.pem;
25
    include /etc/nginx/ssl/options-ssl-nginx.conf;
26
    ssl_dhparam /etc/nginx/ssl/ssl-dhparams.pem;
27

28
    location / {
29
        try_files $uri $uri/ /index.html;
30
    }
31

32
    # 静态文件缓存配置
33
    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
34
        expires 30d;
35
        add_header Cache-Control "public, max-age=2592000";
36
    }
37
}