记录一下docker启动的nginx如何添加自签证书

openssl genrsa -out ca-private.key 2048
openssl req -new -x509 -key ca-private.key -out ca.crt -days 3650
openssl genrsa -out user-private.key 2048
openssl req -new -key user-private.key -out user.csr
openssl x509 -req -days 3650 -in user.csr -CA ca.crt -CAkey ca-private.key -CA

docker run -d \
  --name nginx \
  -p 80:80 \
  -p 443:443 \
  -v /Users/shenyanghan/Downloads/nginx/nginx.conf:/etc/nginx/nginx.conf \
  -v /Users/shenyanghan/Downloads/nginx/html:/etc/nginx/html \
  -v /Users/shenyanghan/Downloads/nginx/logs:/var/log/nginx \
  -v /Users/shenyanghan/Downloads/nginx/user.crt:/etc/nginx/ssl/user.crt \
  -v /Users/shenyanghan/Downloads/nginx/user-private.key:/etc/nginx/ssl/user-private.key \
  nginx:1.26.1
  
server {
		listen 80;
		server_name tyxc.com;
		rewrite ^(.*) https://$server_name$1 permanent;
	}
	server {
		listen       443 ssl;
		server_name  tyxc.com;

		ssl_certificate  /etc/nginx/ssl/user.crt;
		ssl_certificate_key  /etc/nginx/ssl/user-private.key;

		ssl_session_timeout 5m;
		ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #按照这个协议配置
		ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;#按照这个套件配置
		ssl_prefer_server_ciphers on;
		ssl_session_cache shared:SSL:1m;
		fastcgi_param  HTTPS        on;
		fastcgi_param  HTTP_SCHEME     https;

		
		location / {
		    root   html;
		    index  index.html index.htm;
		}
		
		error_page   500 502 503 504  /50x.html;
		location = /50x.html {
		    root   html;
		}
	}