nginx 容器的 docker-compose up 失败

Question

I am getting the following error when I run docker-compose up:

backend_1_a5b5a2caf6fc | 2019/04/28 21:40:49 [emerg] 1#1: no "ssl_certificate" is defined for the "listen ... ssl" directive in /etc/nginx/conf.d/default.conf:4
backend_1_a5b5a2caf6fc | nginx: [emerg] no "ssl_certificate" is defined for the "listen ... ssl" directive in /etc/nginx/conf.d/default.conf:4
...
...
production_backend_1_a5b5a2caf6fc exited with code 1

Here is my Dockerfile for nginx:

FROM nginx

COPY nginx.conf /etc/nginx/conf.d/default.conf

default.conf:

fastcgi_cache_path /dev/shm levels=1:2 keys_zone=laravel:100m;
fastcgi_cache_key "$scheme$request_method$host$request_uri$query_string";

server {
   listen 80 default_server;

   root   /var/www/public;
   index  index.php index.html;

   client_max_body_size 5M;

 ...
 ...

docker-compose.yml:

version: '3'

services:

  backend:
    build: ./nginx
    depends_on:
    - db
    - redis
    working_dir: /var/www
    volumes:
      - ../../src:/var/www
    ports:
      - 80:80
...
...

Answer 1

This means that you have not setup ssl correctly (you're missing a server certificate). Since you have mapped port 80 and not 443 in your docker-compose i assume you're not going to use SSL.

Simply remove the following line in your nginx.conf to disable ssl:

listen 443 ssl http2;

be sure to rebuild and restart your nginx container.

Answer 2

您是否有任何其他服务器侦听端口 443。尝试从 /etc/nginx/sites-enabled 中删除所有符号链接，除了您要工作的这台服务器

Answer 3

But, if someone need to use SSL, this error means that your server section is missing ssl_certificate and ssl_certificate_key declarations. You need to have a .crt and a .key file to run with ssl.

It should looks like

server {

  listen 80;
  listen 443 default_server ssl;

  ssl_certificate /etc/nginx/certs/default.crt;
  ssl_certificate_key /etc/nginx/certs/default.key;

  ... other declarations

}