src=http___blog.orx.me_wpcontent_uploads_2013_12_wordpresslogo.jpgrefer=http___blog.orx.jpg

后续更新地址：https://www.aiprose.com/blog/147

本文使用docker-compose运行wordpress，使用已有的mysql数据库，外部的nginx开启https反向代理到wordpress。如果你的域名还没有备案请先去备案。

编写启动文件

编写wordpress.yml，然后执行 docker-compose -f wordpress.yml up -d 启动容器

172.18.0.1:3308是我自己的mysql地址


<span class="token key atrule">version</span><span class="token punctuation">:</span> <span class="token string">"3"</span> <span class="token key atrule">services</span><span class="token punctuation">:</span> <span class="token key atrule">wordpress</span><span class="token punctuation">:</span> <span class="token key atrule">image</span><span class="token punctuation">:</span> wordpress<span class="token punctuation">:</span>latest <span class="token key atrule">ports</span><span class="token punctuation">:</span> <span class="token punctuation">-</span> <span class="token string">"8000:80"</span> <span class="token key atrule">restart</span><span class="token punctuation">:</span> always <span class="token key atrule">volumes</span><span class="token punctuation">:</span> <span class="token punctuation">-</span> /opt/wordpress<span class="token punctuation">:</span>/var/www/html <span class="token key atrule">environment</span><span class="token punctuation">:</span> <span class="token punctuation">-</span> WORDPRESS_DB_HOST=172.18.0.1<span class="token punctuation">:</span><span class="token number">3308</span> <span class="token punctuation">-</span> WORDPRESS_DB_USER=wordpress <span class="token punctuation">-</span> WORDPRESS_DB_PASSWORD=wordpress 
<span class="token key atrule">version</span><span class="token punctuation">:</span> <span class="token string">"3"</span> <span class="token key atrule">services</span><span class="token punctuation">:</span> <span class="token key atrule">wordpress</span><span class="token punctuation">:</span> <span class="token key atrule">image</span><span class="token punctuation">:</span> wordpress<span class="token punctuation">:</span>latest <span class="token key atrule">ports</span><span class="token punctuation">:</span> <span class="token punctuation">-</span> <span class="token string">"8000:80"</span> <span class="token key atrule">restart</span><span class="token punctuation">:</span> always <span class="token key atrule">volumes</span><span class="token punctuation">:</span> <span class="token punctuation">-</span> /opt/wordpress<span class="token punctuation">:</span>/var/www/html <span class="token key atrule">environment</span><span class="token punctuation">:</span> <span class="token punctuation">-</span> WORDPRESS_DB_HOST=172.18.0.1<span class="token punctuation">:</span><span class="token number">3308</span> <span class="token punctuation">-</span> WORDPRESS_DB_USER=wordpress <span class="token punctuation">-</span> WORDPRESS_DB_PASSWORD=wordpress 
version: "3" services: wordpress: image: wordpress:latest ports: - "8000:80" restart: always volumes: - /opt/wordpress:/var/www/html environment: - WORDPRESS_DB_HOST=172.18.0.1:3308 - WORDPRESS_DB_USER=wordpress - WORDPRESS_DB_PASSWORD=wordpress

如果你之前没有现成的mysql数据库，可以按照官网的教程编写配置文件


<span class="token key atrule">version</span><span class="token punctuation">:</span> <span class="token string">'3.1'</span> <span class="token key atrule">services</span><span class="token punctuation">:</span> <span class="token key atrule">wordpress</span><span class="token punctuation">:</span> <span class="token key atrule">image</span><span class="token punctuation">:</span> wordpress <span class="token key atrule">restart</span><span class="token punctuation">:</span> always <span class="token key atrule">ports</span><span class="token punctuation">:</span> <span class="token punctuation">-</span> 8080<span class="token punctuation">:</span><span class="token number">80</span> <span class="token key atrule">environment</span><span class="token punctuation">:</span> <span class="token key atrule">WORDPRESS_DB_HOST</span><span class="token punctuation">:</span> db <span class="token key atrule">WORDPRESS_DB_USER</span><span class="token punctuation">:</span> wordpress <span class="token key atrule">WORDPRESS_DB_PASSWORD</span><span class="token punctuation">:</span> wordpress <span class="token key atrule">WORDPRESS_DB_NAME</span><span class="token punctuation">:</span> wordpress <span class="token key atrule">volumes</span><span class="token punctuation">:</span> <span class="token punctuation">-</span> /opt/wordpress<span class="token punctuation">:</span>/var/www/html <span class="token key atrule">db</span><span class="token punctuation">:</span> <span class="token key atrule">image</span><span class="token punctuation">:</span> mysql<span class="token punctuation">:</span><span class="token number">5.7</span> <span class="token key atrule">restart</span><span class="token punctuation">:</span> always <span class="token key atrule">environment</span><span class="token punctuation">:</span> <span class="token key atrule">MYSQL_DATABASE</span><span class="token punctuation">:</span> wordpress <span class="token key atrule">MYSQL_USER</span><span class="token punctuation">:</span> wordpress <span class="token key atrule">MYSQL_PASSWORD</span><span class="token punctuation">:</span> wordpress <span class="token key atrule">MYSQL_RANDOM_ROOT_PASSWORD</span><span class="token punctuation">:</span> <span class="token string">'1'</span> <span class="token key atrule">volumes</span><span class="token punctuation">:</span> <span class="token punctuation">-</span> /opt/mysql<span class="token punctuation">:</span>/var/lib/mysql 
<span class="token key atrule">version</span><span class="token punctuation">:</span> <span class="token string">'3.1'</span> <span class="token key atrule">services</span><span class="token punctuation">:</span> <span class="token key atrule">wordpress</span><span class="token punctuation">:</span> <span class="token key atrule">image</span><span class="token punctuation">:</span> wordpress <span class="token key atrule">restart</span><span class="token punctuation">:</span> always <span class="token key atrule">ports</span><span class="token punctuation">:</span> <span class="token punctuation">-</span> 8080<span class="token punctuation">:</span><span class="token number">80</span> <span class="token key atrule">environment</span><span class="token punctuation">:</span> <span class="token key atrule">WORDPRESS_DB_HOST</span><span class="token punctuation">:</span> db <span class="token key atrule">WORDPRESS_DB_USER</span><span class="token punctuation">:</span> wordpress <span class="token key atrule">WORDPRESS_DB_PASSWORD</span><span class="token punctuation">:</span> wordpress <span class="token key atrule">WORDPRESS_DB_NAME</span><span class="token punctuation">:</span> wordpress <span class="token key atrule">volumes</span><span class="token punctuation">:</span> <span class="token punctuation">-</span> /opt/wordpress<span class="token punctuation">:</span>/var/www/html <span class="token key atrule">db</span><span class="token punctuation">:</span> <span class="token key atrule">image</span><span class="token punctuation">:</span> mysql<span class="token punctuation">:</span><span class="token number">5.7</span> <span class="token key atrule">restart</span><span class="token punctuation">:</span> always <span class="token key atrule">environment</span><span class="token punctuation">:</span> <span class="token key atrule">MYSQL_DATABASE</span><span class="token punctuation">:</span> wordpress <span class="token key atrule">MYSQL_USER</span><span class="token punctuation">:</span> wordpress <span class="token key atrule">MYSQL_PASSWORD</span><span class="token punctuation">:</span> wordpress <span class="token key atrule">MYSQL_RANDOM_ROOT_PASSWORD</span><span class="token punctuation">:</span> <span class="token string">'1'</span> <span class="token key atrule">volumes</span><span class="token punctuation">:</span> <span class="token punctuation">-</span> /opt/mysql<span class="token punctuation">:</span>/var/lib/mysql 
version: '3.1' services: wordpress: image: wordpress restart: always ports: - 8080:80 environment: WORDPRESS_DB_HOST: db WORDPRESS_DB_USER: wordpress WORDPRESS_DB_PASSWORD: wordpress WORDPRESS_DB_NAME: wordpress volumes: - /opt/wordpress:/var/www/html db: image: mysql:5.7 restart: always environment: MYSQL_DATABASE: wordpress MYSQL_USER: wordpress MYSQL_PASSWORD: wordpress MYSQL_RANDOM_ROOT_PASSWORD: '1' volumes: - /opt/mysql:/var/lib/mysql

这里需要去wordpress后台配置地址，修改为我们最后带域名的地址。
访问 ip:8000/wp-admin

配置Nginx

这里使用nginx开启https并反向代理到worpress,如果没有安装nginx，请先安装nginx。HTTPS证书可以去阿里云申请免费的SSL证书，这里的坑比较多，请注意仔细看配置文件。
我们的案例域名是aispider.cc,我们把域名全部重定向到 https://www.aispider.cc
vi /etc/nginx/nginx.conf


 server <span class="token punctuation">{<!-- --></span> listen 80; server_name aispider.cc; location / <span class="token punctuation">{<!-- --></span> if ($host <span class="token tag">!~*</span> ^www) <span class="token punctuation">{<!-- --></span> set $name_www www.$host; rewrite ^(.<span class="token important">*)</span> https<span class="token punctuation">:</span>//$name_www$1 permanent; <span class="token punctuation">}</span> rewrite ^(.<span class="token important">*)</span> https<span class="token punctuation">:</span>//$host$1 permanent; <span class="token punctuation">}</span> <span class="token punctuation">}</span> server <span class="token punctuation">{<!-- --></span> listen 80; server_name www.aispider.cc; rewrite ^(.<span class="token important">*)</span> https<span class="token punctuation">:</span>//$host$1 permanent; <span class="token punctuation">}</span> server <span class="token punctuation">{<!-- --></span> listen 443 ssl http2 default_server; server_name www.aispider.cc; ssl_certificate "/opt/cer/aispider.cc.pem"; ssl_certificate_key "/opt/cer/aispider.cc.key"; ssl_session_cache shared<span class="token punctuation">:</span>SSL<span class="token punctuation">:</span>1m; ssl_session_timeout 10m; ssl_ciphers PROFILE=SYSTEM; ssl_prefer_server_ciphers on; location / <span class="token punctuation">{<!-- --></span> if ($host <span class="token tag">!~*</span> ^www) <span class="token punctuation">{<!-- --></span> set $name_www www.$host; rewrite ^(.<span class="token important">*)</span> https<span class="token punctuation">:</span>//$name_www$1 permanent; <span class="token punctuation">}</span> proxy_pass http<span class="token punctuation">:</span>//localhost<span class="token punctuation">:</span>8000; proxy_redirect off; proxy_set_header Host $host; proxy_set_header X<span class="token punctuation">-</span>Real<span class="token punctuation">-</span>IP $remote_addr; proxy_set_header X<span class="token punctuation">-</span>Forwarded<span class="token punctuation">-</span>For $proxy_add_x_forwarded_for; proxy_set_header X<span class="token punctuation">-</span>Forwarded<span class="token punctuation">-</span>Host $server_name; proxy_set_header X<span class="token punctuation">-</span>Forwarded<span class="token punctuation">-</span>Proto https; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_read_timeout 86400; <span class="token punctuation">}</span> <span class="token punctuation">}</span> 
 server <span class="token punctuation">{<!-- --></span> listen 80; server_name aispider.cc; location / <span class="token punctuation">{<!-- --></span> if ($host <span class="token tag">!~*</span> ^www) <span class="token punctuation">{<!-- --></span> set $name_www www.$host; rewrite ^(.<span class="token important">*)</span> https<span class="token punctuation">:</span>//$name_www$1 permanent; <span class="token punctuation">}</span> rewrite ^(.<span class="token important">*)</span> https<span class="token punctuation">:</span>//$host$1 permanent; <span class="token punctuation">}</span> <span class="token punctuation">}</span> server <span class="token punctuation">{<!-- --></span> listen 80; server_name www.aispider.cc; rewrite ^(.<span class="token important">*)</span> https<span class="token punctuation">:</span>//$host$1 permanent; <span class="token punctuation">}</span> server <span class="token punctuation">{<!-- --></span> listen 443 ssl http2 default_server; server_name www.aispider.cc; ssl_certificate "/opt/cer/aispider.cc.pem"; ssl_certificate_key "/opt/cer/aispider.cc.key"; ssl_session_cache shared<span class="token punctuation">:</span>SSL<span class="token punctuation">:</span>1m; ssl_session_timeout 10m; ssl_ciphers PROFILE=SYSTEM; ssl_prefer_server_ciphers on; location / <span class="token punctuation">{<!-- --></span> if ($host <span class="token tag">!~*</span> ^www) <span class="token punctuation">{<!-- --></span> set $name_www www.$host; rewrite ^(.<span class="token important">*)</span> https<span class="token punctuation">:</span>//$name_www$1 permanent; <span class="token punctuation">}</span> proxy_pass http<span class="token punctuation">:</span>//localhost<span class="token punctuation">:</span>8000; proxy_redirect off; proxy_set_header Host $host; proxy_set_header X<span class="token punctuation">-</span>Real<span class="token punctuation">-</span>IP $remote_addr; proxy_set_header X<span class="token punctuation">-</span>Forwarded<span class="token punctuation">-</span>For $proxy_add_x_forwarded_for; proxy_set_header X<span class="token punctuation">-</span>Forwarded<span class="token punctuation">-</span>Host $server_name; proxy_set_header X<span class="token punctuation">-</span>Forwarded<span class="token punctuation">-</span>Proto https; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_read_timeout 86400; <span class="token punctuation">}</span> <span class="token punctuation">}</span> 
 server { listen 80; server_name aispider.cc; location / { if ($host !~* ^www) { set $name_www www.$host; rewrite ^(.*) https://$name_www$1 permanent; } rewrite ^(.*) https://$host$1 permanent; } } server { listen 80; server_name www.aispider.cc; rewrite ^(.*) https://$host$1 permanent; } server { listen 443 ssl http2 default_server; server_name www.aispider.cc; ssl_certificate "/opt/cer/aispider.cc.pem"; ssl_certificate_key "/opt/cer/aispider.cc.key"; ssl_session_cache shared:SSL:1m; ssl_session_timeout 10m; ssl_ciphers PROFILE=SYSTEM; ssl_prefer_server_ciphers on; location / { if ($host !~* ^www) { set $name_www www.$host; rewrite ^(.*) https://$name_www$1 permanent; } proxy_pass http://localhost:8000; proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Host $server_name; proxy_set_header X-Forwarded-Proto https; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_read_timeout 86400; } }

修改wordpress配置文件

如果直接代理过去，会有很多问题，比如循环重定向转发，js、css等资源走的是http请求，地址重定向为localhost，我也是踩了很多坑才配置好。

修改/opt/wordpress/wp-config.php，这个是docker容器挂载的卷，增加如下内容
vi /opt/wordpress/wp-config.php


define('FORCE_SSL_ADMIN'<span class="token punctuation">,</span> true); if (strpos($_SERVER<span class="token punctuation">[</span><span class="token string">'HTTP_X_FORWARDED_PROTO'</span><span class="token punctuation">]</span><span class="token punctuation">,</span> 'https') <span class="token tag">!==</span> false)<span class="token punctuation">{<!-- --></span> $_SERVER<span class="token punctuation">[</span><span class="token string">'HTTPS'</span><span class="token punctuation">]</span> = 'on'; $_SERVER<span class="token punctuation">[</span><span class="token string">'SERVER_PORT'</span><span class="token punctuation">]</span> = 443; <span class="token punctuation">}</span> if (isset($_SERVER<span class="token punctuation">[</span><span class="token string">'HTTP_X_FORWARDED_HOST'</span><span class="token punctuation">]</span>)) <span class="token punctuation">{<!-- --></span> $_SERVER<span class="token punctuation">[</span><span class="token string">'HTTP_HOST'</span><span class="token punctuation">]</span> = $_SERVER<span class="token punctuation">[</span><span class="token string">'HTTP_X_FORWARDED_HOST'</span><span class="token punctuation">]</span>; <span class="token punctuation">}</span> define('WP_HOME'<span class="token punctuation">,</span>'https<span class="token punctuation">:</span>//www.aispider.cc/'); define('WP_SITEURL'<span class="token punctuation">,</span>'https<span class="token punctuation">:</span>//www.aispider.cc/'); 
define('FORCE_SSL_ADMIN'<span class="token punctuation">,</span> true); if (strpos($_SERVER<span class="token punctuation">[</span><span class="token string">'HTTP_X_FORWARDED_PROTO'</span><span class="token punctuation">]</span><span class="token punctuation">,</span> 'https') <span class="token tag">!==</span> false)<span class="token punctuation">{<!-- --></span> $_SERVER<span class="token punctuation">[</span><span class="token string">'HTTPS'</span><span class="token punctuation">]</span> = 'on'; $_SERVER<span class="token punctuation">[</span><span class="token string">'SERVER_PORT'</span><span class="token punctuation">]</span> = 443; <span class="token punctuation">}</span> if (isset($_SERVER<span class="token punctuation">[</span><span class="token string">'HTTP_X_FORWARDED_HOST'</span><span class="token punctuation">]</span>)) <span class="token punctuation">{<!-- --></span> $_SERVER<span class="token punctuation">[</span><span class="token string">'HTTP_HOST'</span><span class="token punctuation">]</span> = $_SERVER<span class="token punctuation">[</span><span class="token string">'HTTP_X_FORWARDED_HOST'</span><span class="token punctuation">]</span>; <span class="token punctuation">}</span> define('WP_HOME'<span class="token punctuation">,</span>'https<span class="token punctuation">:</span>//www.aispider.cc/'); define('WP_SITEURL'<span class="token punctuation">,</span>'https<span class="token punctuation">:</span>//www.aispider.cc/'); 
define('FORCE_SSL_ADMIN', true); if (strpos($_SERVER['HTTP_X_FORWARDED_PROTO'], 'https') !== false){ $_SERVER['HTTPS'] = 'on'; $_SERVER['SERVER_PORT'] = 443; } if (isset($_SERVER['HTTP_X_FORWARDED_HOST'])) { $_SERVER['HTTP_HOST'] = $_SERVER['HTTP_X_FORWARDED_HOST']; } define('WP_HOME','https://www.aispider.cc/'); define('WP_SITEURL','https://www.aispider.cc/');