docker 安装 openresty

• openresty-github：https://github.com/openresty/openresty
• openresty中文邮件帮助：https://groups.google.com/group/openresty
• openresty-docker：https://github.com/openresty/docker-openresty
• openresty-dockerhub：https://hub.docker.com/r/openresty/openresty/dockerfile

了解过web服务器的朋友肯定对nginx不陌生，nginx作为目前占有率第一的web服务器，本身作为静态web服务器、反向代理服务和四层、七层负载均衡器都有着非常优秀的表现。但是对于web服务器而言，nginx的很多功能都偏向于静态web应用，也就是说它的动态处理能力是有一定的缺失的。举个最简单的例子，nginx无法在配置中直接进行一个条件以上的逻辑判断，这对于一些架构设计来说有着较大的不便。OpenResty的诞生就是为了解决这个问题。

1、下载openresty镜像

docker pull openresty/openresty:1.19.3.1-alpine

2、新建openresty挂载目录：

mkdir -p /opt/docker/openresty/{conf.d,html,logs,cert}

3、编写openresty容器启动脚本

# vim /opt/docker/openresty/run.sh 

#!/bin/bash

docker run -itd --restart=unless-stopped \
   --network=host \
   --name openresty \
   -v /opt/docker/openresty/nginx.conf:/usr/local/openresty/nginx/conf/nginx.conf \
   -v /opt/docker/openresty/conf.d:/etc/nginx/conf.d \
   -v /opt/docker/openresty/logs:/usr/local/openresty/nginx/logs \
   -v /opt/docker/openresty/html:/usr/local/openresty/nginx/html \
   -v /opt/docker/openresty/cert:/usr/local/openresty/nginx/cert \
   -v /opt/docker/openresty/run:/var/run/openresty  \
   -v /opt/docker/openresty/nginx/lua:/usr/local/openresty/nginx/lua \
    openresty/openresty:1.19.3.1-alpine
docker logs -f openresty

4、编写建openresty-nginx主配置文件

# vim /opt/docker/openresty/nginx.conf 

worker_processes  4;
#user  nginx;
events {
    worker_connections  409600;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    server_tokens  off;
    autoindex on;
    autoindex_exact_size off;
    autoindex_localtime on;
    keepalive_timeout  65;
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log /usr/local/openresty/nginx/logs/access.log  main;
    error_log  /usr/local/openresty/nginx/logs/error.log  error;
    include /etc/nginx/conf.d/*.conf;
}

5、编写openresty虚拟主机配置文件

• https域名conf文件配置

# vim openresty-443.conf

server {
        listen       80;
        server_name 127.0.0.1;
        rewrite ^ https://$http_host$request_uri? permanent;
        server_tokens off;
    }
server {
        listen 443 ssl;
        server_name  127.0.0.1;
        ssl_certificate   /usr/local/openresty/nginx/cert/xxx.com.pem;
        ssl_certificate_key  /usr/local/openresty/nginx/cert/xxx.com.key;
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        charset utf-8;
        location / {
            root /usr/local/openresty/nginx/html;
            index  index.php index.html index.htm;
        }
         access_log  /usr/local/openresty/nginx/logs/access.log main;
}

• http域名conf文件配置

# vim openresty.template.conf 

server {
        listen 80;
        server_name  127.0.0.1;
        charset utf-8;
        location / {
            root /usr/local/openresty/nginx/html;
            index  index.php index.html index.htm;
        }
         access_log  /usr/local/openresty/nginx/logs/access.log main;
}

• 反向代理配置

server {
	listen 80;
	server_name  127.0.0.1;
	
	location /  {
		proxy_redirect  off;
		proxy_pass http://0.0.0.0/;
	}
      access_log  /usr/local/openresty/nginx/logs/access.log main;
}