1.创建文件和目录

# 创建目录
mkdir -p /data/static/hart
mkdir -p /data/nginx/log
mkdir -p /data/nginx/cert
mkdir -p /data/nginx/conf.d

# 拷贝一些默认配置
nginxcid=$(docker create nginx:1.26-alpine)
docker cp $nginxcid:/etc/nginx/mime.types /data/nginx/mime.types
docker rm $nginxcid


# 创建 nginx.conf
cat <<EOL > /data/nginx/nginx.conf
user root;
worker_processes auto;
pid /var/run/nginx.pid;
events {
    worker_connections 10240;
    multi_accept on;
}

http {
    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
    '$status $body_bytes_sent "$http_referer" '
    '"$http_user_agent" "$http_x_forwarded_for"';

    access_log /data/nginx/access.log main;
    error_log /data/nginx/error.log notice;

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    types_hash_max_size 2048;
    keepalive_timeout 65;
    server_tokens off;

    ssl_certificate /cert/xxx.crt;
    ssl_certificate_key /cert/xxx.key;
    ssl_prefer_server_ciphers on;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;
    ssl_buffer_size 4k;

    gzip on;
    gzip_disable "msie6";
    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

    include /etc/nginx/conf.d/*.conf;
}
EOL

2.编写 nginx.yml 并启动

# 创建文件 /data/docker-compose/nginx.yml
cat <<EOL > /data/docker-compose/nginx.yml
version: '3'
services:
  nginx:
    restart: always
    container_name: nginx
    image: nginx:1.26-alpine
    network_mode: host
    volumes:
      - /data/static/hart:/data/static/hart
      - /data/nginx/log:/data/nginx
      - /data/nginx/cert:/cert
      - /data/nginx/conf.d:/etc/nginx/conf.d
      - /data/nginx/nginx.conf:/etc/nginx/nginx.conf
      - /data/nginx/mime.types:/etc/nginx/mime.types
    environment:
      - TZ=Europe/Moscow
EOL

# 启动
docker compose -f /data/docker-compose/nginx.yml up -d

3.配置 Nginx 日志定时清理

# 创建转储的目录
mkdir -p /data/nginx/old_log
# 创建 logrotate 的 nginx 配置
cat <<EOL > /etc/logrotate.d/nginx
/data/nginx/log/*.log {
    daily
    rotate 10
    olddir /data/nginx/old_log
    missingok
    notifempty
    compress
    delaycompress
    sharedscripts
    postrotate
    docker kill nginx -s USR1
    endscript
}
EOL
# 配置解释
/data/nginx/log/*.log {
    # 转储周期为天
    daily
    # 保留多少个备份
    rotate 10
    # 转储日志存放目录
    olddir /data/nginx/old_log
    # 忽略转储期间的错误
    missingok
    # 空文件不转储
    notifempty
    # 通过gzip压缩转储文件
    compress
    # 延迟压缩
    delaycompress
    # 所有日志文件转储后才执行脚本
    sharedscripts
    # 转储后的脚本
    postrotate
    #  试用于容器启动的nginx
    docker kill nginx -s USR1
    endscript
}
# 强制执行，即使没达到 rotate 条件, 测试下配置是否正确, 这里的 olddir 需要手动创建好, 不然会报错
logrotate -f /etc/logrotate.d/nginx