快捷導(dǎo)航

Docker+Nginx單副本零停機(jī)發(fā)布實(shí)現(xiàn)并解決文件訪問 404

更新時(shí)間：2026年04月28日 09:06:27 作者：韓zj

本文提供了解決Docker容器文件隔離問題的方法,核心是Nginx和業(yè)務(wù)容器掛載相同的宿主機(jī)文件目錄,通過Nginx重寫規(guī)則去掉/api前綴匹配業(yè)務(wù)服務(wù)路徑,同時(shí)發(fā)布時(shí)流量同步切換到臨時(shí)副本,避免404和中斷問題

按照上一篇文章部署以后，網(wǎng)頁和接口訪問正常，但是訪問文件是404，目前是解決了，給出通用的解決方案。
所有敏感信息（IP / 域名 / 密碼）均用占位符標(biāo)識(shí)，你只需替換成自身環(huán)境值即可直接使用，專門解決「IP 訪問文件正常、域名訪問 404」「發(fā)布切換副本文件訪問中斷」問題。

一、核心問題復(fù)現(xiàn)

正常訪問：http://xxx.xxx.xxx.xxx:8080/profile/upload/test.bin
異常訪問：https://your-domain.com/api/profile/upload/test.bin（404）
核心原因：Docker 容器文件隔離 + Nginx 路徑映射不匹配 + 發(fā)布流量切換未同步文件訪問

二、可直接復(fù)制的配置模板（全量）

docker-compose.yml（替換占位符即可用，根據(jù)自己實(shí)際情況修改）

version: "3.9"
services:
    redis:
        image: bitnami/redis:latest
        hostname: redis
        container_name: redis
        restart: always
        privileged: true
        ports:
            - 6379:6379
        environment:
            REDIS_PASSWORD: your-redis-password  # 替換：你的Redis密碼
            TZ: Asia/Shanghai
        volumes:
            - type: volume
              source: redis-data
              target: /bitnami/redis/data
              volume: { }
        networks:
            - app-web-net
    nginx:
        image: nginx:latest
        container_name: nginx
        restart: always
        ports:
            - 80:80
            - 443:443
        privileged: true
        networks:
            - app-web-net
        volumes:
            - /root/nginx/nginx.conf:/etc/nginx/nginx.conf
            - /root/nginx/conf.d/:/etc/nginx/conf.d/
            - /root/nginx/html/:/usr/share/nginx/html/
            - /root/nginx/logs/:/var/log/nginx/
            - /root/nginx/cert/:/etc/nginx/cert/
            # 核心：掛載文件目錄（替換：你的宿主機(jī)文件目錄）
            - /root/your-app/uploadPath/:/root/your-app/uploadPath/
    # 主業(yè)務(wù)服務(wù)（8080端口）
    app-main:
        image: your-app-image:1.0.0  # 替換：你的業(yè)務(wù)鏡像
        restart: always
        privileged: true
        depends_on:
            - redis
        ports:
            - "8080:8080"
        environment:
            MYSQL_USER_NAME: your-db-username  # 替換：數(shù)據(jù)庫用戶名
            MYSQL_PWD: your-db-password        # 替換：數(shù)據(jù)庫密碼
            MYSQL_DB_NAME: your-db-name        # 替換：數(shù)據(jù)庫名
            MYSQL_HOST: xxx.xxx.xxx.xxx        # 替換：數(shù)據(jù)庫IP
            MYSQL_PORT: 3306
            REDIS_HOST: redis
            REDIS_PORT: 6379
            REDIS_PWD: your-redis-password     # 替換：Redis密碼（和上方一致）
            SERVER_PORT: 8080
            UPLOAD_PATH: /home/your-app/uploadPath/  # 容器內(nèi)文件目錄
            TZ: Asia/Shanghai
        volumes:
            # 掛載文件目錄（和Nginx掛載的宿主機(jī)目錄一致）
            - /root/your-app/uploadPath/:/home/your-app/uploadPath/
        networks:
            - app-web-net
        healthcheck:
            test: ["CMD", "curl", "-f", "-s", "-o", "/dev/null", "-w", "%{http_code}", "http://localhost:8080/api/health"]
            interval: 5s
            timeout: 3s
            retries: 10
            start_period: 60s
    # 臨時(shí)副本（發(fā)布兜底，8081端口）
    app-temp:
        image: your-app-image:1.0.0  # 替換：和主服務(wù)鏡像一致
        restart: "no"
        privileged: true
        depends_on:
            - redis
        ports:
            - "8081:8080"
        environment:
            MYSQL_USER_NAME: your-db-username  # 替換：和主服務(wù)一致
            MYSQL_PWD: your-db-password        # 替換：和主服務(wù)一致
            MYSQL_DB_NAME: your-db-name        # 替換：和主服務(wù)一致
            MYSQL_HOST: xxx.xxx.xxx.xxx        # 替換：和主服務(wù)一致
            MYSQL_PORT: 3306
            REDIS_HOST: redis
            REDIS_PORT: 6379
            REDIS_PWD: your-redis-password     # 替換：和主服務(wù)一致
            SERVER_PORT: 8080
            UPLOAD_PATH: /home/your-app/uploadPath/
            TZ: Asia/Shanghai
        volumes:
            - /root/your-app/uploadPath/:/home/your-app/uploadPath/
        networks:
            - app-web-net
        healthcheck:
            test: ["CMD", "curl", "-f", "-s", "-o", "/dev/null", "-w", "%{http_code}", "http://localhost:8080/api/health"]
            interval: 5s
            timeout: 3s
            retries: 10
            start_period: 60s
volumes:
    redis-data:
        name: app-redis-data
        external: true
networks:
  app-web-net:
    driver: bridge

Nginx 配置文件（conf.d/default.conf）

# ===================== 全局核心配置 =====================
resolver 127.0.0.11 valid=30s;

proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
proxy_next_upstream_tries 2;
proxy_next_upstream_timeout 1s;

# 主服務(wù)集群（發(fā)布切換核心）
upstream app-servers {
    least_conn;
    server app-main:8080 max_fails=1 fail_timeout=1s;
    keepalive 32;
}

proxy_connect_timeout 10s;
proxy_send_timeout 10s;
proxy_read_timeout 30s;
proxy_buffering on;

gzip  on;
gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
tcp_nopush      on;
tcp_nodelay     on;

# ===================== 1. HTTP 跳轉(zhuǎn)HTTPS =====================
server {
    listen 80;
    # 替換：你的服務(wù)器IP + 域名
    server_name xxx.xxx.xxx.xxx your-domain.com;
    return 301 https://$host$request_uri;
}

# ===================== 2. HTTPS 核心配置 =====================
server {
    listen 443 ssl;
    # 替換：你的域名
    server_name your-domain.com;

    # 替換：你的SSL證書路徑
    ssl_certificate /etc/nginx/cert/your-domain.com.pem;
    ssl_certificate_key /etc/nginx/cert/your-domain.com.key;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_session_tickets off;
    ssl_session_timeout 1d;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_prefer_server_ciphers on;

    # ===================== 解決文件404核心配置 =====================
    # 固件/上傳文件訪問：/api/profile/upload/xxx → 代理到/app-main/profile/upload/xxx
    location ^~ /api/profile/upload/ {
        rewrite ^/api/profile/upload/(.*)$ /profile/upload/$1 break;
        proxy_pass http://app-servers;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        add_header Access-Control-Allow-Origin *;
        expires 30d;
        add_header Cache-Control "public, max-age=2592000";
    }

    # 頭像文件訪問：/api/profile/avatar/xxx → 代理到/app-main/profile/avatar/xxx
    location ^~ /api/profile/avatar/ {
        rewrite ^/api/profile/avatar/(.*)$ /profile/avatar/$1 break;
        proxy_pass http://app-servers;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        add_header Access-Control-Allow-Origin *;
        expires 30d;
        add_header Cache-Control "public, max-age=2592000";
    }

    # Swagger文檔代理（如有）
    location ~ ^/api/(swagger-ui|v3/api-docs|swagger-resources|webjars) {
        rewrite ^/api/(.*)$ /$1 break;
        proxy_pass http://app-servers;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Accept-Encoding "";

        sub_filter 'https://your-domain.com:443/api' 'https://your-domain.com/api';
        sub_filter 'https://your-domain.com:443' 'https://your-domain.com/api';
        sub_filter '"url":"https://your-domain.com"' '"url":"https://your-domain.com/api"';
        sub_filter '"url": "https://your-domain.com"' '"url": "https://your-domain.com/api"';
        sub_filter 'https://your-domain.com/' 'https://your-domain.com/api/';
        sub_filter 'https://your-domain.com/api/api/' 'https://your-domain.com/api/';

        sub_filter_once off;
        sub_filter_types application/json text/html text/javascript;

        proxy_buffer_size 128k;
        proxy_buffers 4 256k;
        proxy_busy_buffers_size 256k;
    }

    # 前端頁面訪問
    location / {
        root   /usr/share/nginx/html/your-app;  # 替換：你的前端文件目錄
        index  index.html index.htm;
        try_files $uri $uri/ /index.html;
    }

    # 主API接口代理
    location /api/ {
        rewrite ^/api/(.*)$ /$1 break;
        proxy_pass http://app-servers;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Prefix /api;
        proxy_set_header X-Forwarded-Port "";

        proxy_http_version 1.1;
        proxy_set_header Connection "";

        proxy_set_header Accept-Encoding "";
        sub_filter 'http://your-domain.com/profile/upload/' 'https://your-domain.com/api/profile/upload/';
        sub_filter 'https://your-domain.com/profile/upload/' 'https://your-domain.com/api/profile/upload/';
        sub_filter_once off;
        sub_filter_types application/json;
    }

    # 下載路徑代理
    location /download {
        rewrite ^/download/(.*)$ /profile/upload/$1 break;
        proxy_pass http://app-servers;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        add_header Access-Control-Allow-Origin *;
        expires 30d;
        add_header Cache-Control "public, max-age=2592000";
    }

    # 安全頭配置
    add_header X-Content-Type-Options nosniff;
    add_header X-XSS-Protection "1; mode=block";
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
}

零停機(jī)發(fā)布腳本（deploy_app.sh）

#!/bin/bash
set +e

# ===================== 替換以下占位符 =====================
MONITOR_URL="https://your-domain.com/api/app/checkServerStatus"  # 你的健康檢查接口
MAIN_CHECK_URL="http://xxx.xxx.xxx.xxx:8080/api/app/checkServerStatus"  # 主服務(wù)健康檢查
TEMP_CHECK_URL="http://xxx.xxx.xxx.xxx:8081/api/app/checkServerStatus"  # 臨時(shí)服務(wù)健康檢查
NGINX_CONF="/root/nginx/conf.d/default.conf"  # Nginx配置文件路徑
MAX_RETRY=30  # 最大重試次數(shù)
RETRY_INTERVAL=5  # 重試間隔（秒）
# =========================================================

# 后臺(tái)監(jiān)控公網(wǎng)接口狀態(tài)
start_monitor() {
    echo -e "\033[36m=== 開始實(shí)時(shí)監(jiān)控公網(wǎng)接口：${MONITOR_URL} ===\033[0m"
    echo -e "\033[36m=============================================\033[0m"
    
    total=0
    failed=0
    
    while true; do
        current_time=$(date "+%Y-%m-%d %H:%M:%S.%3N")
        HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" --insecure ${MONITOR_URL} 2>/dev/null)
        total=$((total+1))
        
        if [ "$HTTP_CODE" = "200" ]; then
            echo -e "\033[32m[${current_time}] 公網(wǎng)接口訪問成功 | 狀態(tài)碼：${HTTP_CODE}\033[0m"
        else
            failed=$((failed+1))
            echo -e "\033[31m[${current_time}] 公網(wǎng)接口訪問失敗 | 狀態(tài)碼：${HTTP_CODE}\033[0m"
        fi
        sleep 1
    done
}

# 檢查端口接口是否就緒
check_port_ready() {
    local url=$1
    local desc=$2
    echo -e "\033[36m=== 等待${desc}就緒（獨(dú)立端口：${url}）===\033[0m"
    local retry=0
    while [ $retry -lt $MAX_RETRY ]; do
        HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" --insecure ${url} 2>/dev/null)
        if [ "$HTTP_CODE" = "200" ]; then
            echo -e "\033[32m? ${desc}就緒?。顟B(tài)碼：200）\033[0m"
            return 0
        fi
        retry=$((retry+1))
        echo -e "\033[33m??  重試${retry}/${MAX_RETRY}：${desc}端口返回${HTTP_CODE}，等待${RETRY_INTERVAL}秒...\033[0m"
        sleep ${RETRY_INTERVAL}
    done
    echo -e "\033[31m? 錯(cuò)誤：${desc}啟動(dòng)超時(shí)（未返回200）\033[0m"
    kill $MONITOR_PID >/dev/null 2>&1
    exit 1
}

# 切換Nginx代理地址
switch_nginx_proxy() {
    local target=$1
    local desc=$2
    echo -e "\033[36m\n=== 切換Nginx代理到${desc} ===\033[0m"
    if [ "$target" = "temp" ]; then
        sed -i 's|proxy_pass http://app-servers|proxy_pass http://app-temp:8080|g' ${NGINX_CONF}
    else
        sed -i 's|proxy_pass http://app-temp:8080|proxy_pass http://app-servers|g' ${NGINX_CONF}
    fi
    docker exec -it nginx nginx -s reload >/dev/null 2>&1
    if [ $? -eq 0 ]; then
        echo -e "\033[32m? Nginx代理已切換到${desc}！\033[0m"
    else
        echo -e "\033[33m??  Nginx重載警告，手動(dòng)執(zhí)行：docker exec -it nginx nginx -s reload\033[0m"
    fi
}

# ===================== 主流程 =====================
# 1. 啟動(dòng)后臺(tái)監(jiān)控
start_monitor &
MONITOR_PID=$!

# 2. 啟動(dòng)臨時(shí)副本
echo -e "\033[36m\n1. 啟動(dòng)臨時(shí)業(yè)務(wù)副本（8081端口）\033[0m"
docker compose up -d app-temp

# 3. 檢查臨時(shí)副本就緒
if ! check_port_ready "${TEMP_CHECK_URL}" "臨時(shí)副本"; then
    kill $MONITOR_PID >/dev/null 2>&1
    exit 1
fi

# 4. 切換Nginx代理到臨時(shí)副本
switch_nginx_proxy "temp" "臨時(shí)副本"

# 5. 重啟主副本
echo -e "\033[36m\n3. 重啟主業(yè)務(wù)副本（8080端口）\033[0m"
docker compose up -d --no-deps --force-recreate app-main

# 6. 檢查主副本就緒
if ! check_port_ready "${MAIN_CHECK_URL}" "主副本"; then
    echo -e "\033[31m\n??  警告：主副本啟動(dòng)超時(shí)，臨時(shí)副本仍在提供服務(wù)\033[0m"
    echo -e "\033[31m手動(dòng)關(guān)閉命令：docker compose stop app-temp && docker compose rm -f app-temp\033[0m"
    kill $MONITOR_PID >/dev/null 2>&1
    exit 2
fi

# 7. 切換Nginx代理回主副本
switch_nginx_proxy "main" "主副本"

# 8. 關(guān)閉臨時(shí)副本
echo -e "\033[36m\n5. 關(guān)閉臨時(shí)副本\033[0m"
docker compose stop app-temp
docker compose rm -f app-temp

# 9. 停止監(jiān)控并輸出結(jié)果
kill $MONITOR_PID >/dev/null 2>&1
sleep 1

echo -e "\033[32m\n=============================================\033[0m"
echo -e "\033[32m? 發(fā)布完成！零停機(jī)驗(yàn)證結(jié)果：\033[0m"
echo -e "\033[32m   - 公網(wǎng)接口全程無502/中斷\033[0m"
echo -e "\033[32m   - 文件訪問：https://your-domain.com/api/profile/upload/test.bin 正常\033[0m"
echo -e "\033[32m=============================================\033[0m"

exit 0

三、替換說明（必看）

四、404 問題解決核心邏輯（關(guān)鍵）

文件目錄掛載：Nginx 容器和業(yè)務(wù)容器掛載同一個(gè)宿主機(jī)文件目錄，解決 Docker 隔離導(dǎo)致的文件不可見；
路徑重寫：通過rewrite ^/api/profile/upload/(.*)$ /profile/upload/$1break去掉/api前綴，匹配業(yè)務(wù)服務(wù)原生文件路徑；
代理優(yōu)先：放棄 Nginx靜態(tài)訪問文件，統(tǒng)一代理到業(yè)務(wù)服務(wù)，復(fù)用業(yè)務(wù)的文件訪問邏輯；
流量同步切換：發(fā)布腳本切換 Nginx代理地址時(shí)，文件訪問請求會(huì)同步切換到臨時(shí)副本，避免發(fā)布中斷。

五、使用步驟

復(fù)制上述 3 個(gè)文件到服務(wù)器對應(yīng)目錄；
全局替換所有占位符為自身環(huán)境值；
賦予發(fā)布腳本執(zhí)行權(quán)限：chmod +x deploy_app.sh；
啟動(dòng)基礎(chǔ)服務(wù)：docker compose up -d redis nginx app-main；
驗(yàn)證文件訪問：curl https://your-domain.com/api/profile/upload/test.bin；
零停機(jī)發(fā)布：./deploy_app.sh。

六、驗(yàn)證 404 問題是否解決

# 1. 驗(yàn)證域名訪問文件
curl -I https://your-domain.com/api/profile/upload/test.bin

# 2. 驗(yàn)證發(fā)布過程中文件訪問不中斷
./deploy_app.sh  # 執(zhí)行發(fā)布腳本，同時(shí)另起終端持續(xù)curl文件地址

返回狀態(tài)碼200即表示 404 問題解決。

總結(jié)

核心解決 Docker 容器文件隔離問題：Nginx 和業(yè)務(wù)容器掛載相同宿主機(jī)文件目錄；
統(tǒng)一路徑規(guī)則：通過 Nginx重寫去掉/api前綴，匹配業(yè)務(wù)服務(wù)原生文件路徑；
發(fā)布時(shí)流量同步切換：文件訪問請求隨 Nginx 代理地址切換到臨時(shí)副本，避免 404/ 中斷。

到此這篇關(guān)于Docker+Nginx單副本零停機(jī)發(fā)布實(shí)現(xiàn)并解決文件訪問 404的文章就介紹到這了,更多相關(guān)Docker Nginx單副本零停機(jī)發(fā)布內(nèi)容請搜索腳本之家以前的文章或繼續(xù)瀏覽下面的相關(guān)文章希望大家以后多多支持腳本之家！

您可能感興趣的文章: