Docker部署思源笔记

1
version: "3.9"
2
services:
3
  siyuan:
4
    image: b3log/siyuan
5
    container_name: siyuan
6
    restart: always
7
    ports:
8
      - 6806:6806
9
    volumes:
10
      - ./:/siyuan/workspace
11
    command:
12
      - "--workspace=/siyuan/workspace/"
13
      - "--lang=zh_CN"
14
      - "--accessAuthCode=<password>"

1
upstream siyuan {
2
    server 127.0.0.1:6806;  # 将流量定向到本地的6806端口
3
}
4

5
server {
6
    listen 80;
7
    listen [::]:80;
8
    server_name your_domain.com;  # 设置服务器域名
9

10
    # 将所有 HTTP 请求重定向到 HTTPS
11
    location / {
12
        return 301 https://$host$request_uri;
13
    }
14
}
15

16
server {
17
    listen 443 ssl http2;
18
    listen [::]:443 ssl http2;
19

20
    server_name your_domain.com;  # 设置服务器域名
21

22
    # 配置 SSL 证书路径
23
    ssl_certificate path/fullchain.cer;
24
    ssl_certificate_key path/file.key;
25

26
    client_max_body_size 0;  # 不限制请求体大小
27

28
    location / {
29
        proxy_pass http://siyuan;  # 反向代理到上游 siyuan
30
        proxy_set_header HOST $host;
31
        proxy_set_header X-Forwarded-Proto $scheme;
32
        proxy_set_header X-Real-IP $remote_addr;
33
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
34
    }
35
    location /ws {
36
        proxy_pass http://siyuan;
37
        proxy_read_timeout 60s;  # 设置读取超时时间
38
        proxy_http_version 1.1;  # 使用 HTTP 1.1
39
        proxy_set_header Upgrade $http_upgrade;
40
        proxy_set_header Connection 'Upgrade';  # 支持 WebSocket
41
    }
42
}