一、架构设计与服务规划

二、项目结构准备

lnmp-docker/
├── docker-compose.yml
├── nginx/
│   ├── conf.d/
│   │   └── app.conf
│   └── nginx.conf
├── php/
│   └── Dockerfile
├── mysql/
│   └── my.cnf
├── html/
│   └── index.php
└── .env

三、核心配置文件

3.1 docker-compose.yml

ersion: '3.8'

services:
  # Web服务
  nginx:
    image: nginx:1.25-alpine
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx/conf.d:/etc/nginx/conf.d
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf
      - ./html:/var/www/html
      - ./ssl:/etc/nginx/ssl
    depends_on:
      php:
        condition: service_healthy
    networks:
      - lnmp-net

  # PHP处理
  php:
    build: ./php
    volumes:
      - ./html:/var/www/html
    environment:
      - TZ=Asia/Shanghai
    healthcheck:
      test: ["CMD", "php-fpm", "-t"]
      interval: 10s
      timeout: 5s
      retries: 3
    networks:
      - lnmp-net

  # 数据库
  mysql:
    image: mysql:8.0-debian
    volumes:
      - mysql_data:/var/lib/mysql
      - ./mysql/my.cnf:/etc/mysql/conf.d/my.cnf
    environment:
      - MYSQL_ROOT_PASSWORD=${DB_ROOT_PASSWORD}
      - MYSQL_DATABASE=${DB_NAME}
      - MYSQL_USER=${DB_USER}
      - MYSQL_PASSWORD=${DB_PASSWORD}
    networks:
      - lnmp-net

  # 数据库管理
  phpmyadmin:
    image: phpmyadmin:5.2
    ports:
      - "8080:80"
    environment:
      - PMA_HOST=mysql
      - PMA_USER=root
      - PMA_PASSWORD=${DB_ROOT_PASSWORD}
    depends_on:
      - mysql
    networks:
      - lnmp-net

volumes:
  mysql_data:

networks:
  lnmp-net:
    driver: bridge

3.2 PHP Dockerfile

FROM php:8.2-fpm-alpine

# 安装扩展
RUN apk add --no-cache \
    freetype-dev \
    libjpeg-turbo-dev \
    libpng-dev \
    libzip-dev \
    && docker-php-ext-configure gd --with-freetype --with-jpeg \
    && docker-php-ext-install -j$(nproc) gd pdo_mysql mysqli zip opcache

# 生产环境优化
RUN { \
    echo 'opcache.enable=1'; \
    echo 'opcache.memory_consumption=128'; \
    echo 'opcache.max_accelerated_files=10000'; \
    echo 'opcache.revalidate_freq=60'; \
} > /usr/local/etc/php/conf.d/opcache.ini

WORKDIR /var/www/html

3.3 Nginx app.conf配置

# nginx/conf.d/app.conf
server {
    listen 80;
    server_name localhost;
    
    root /var/www/html;
    index index.php index.html;

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    location ~ \.php$ {
        fastcgi_pass php:9000;
        fastcgi_index index.php;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
}

3.4 Nginx nginx.conf配置

user  nginx;
worker_processes  auto;
error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;
events {
    worker_connections  1024;
}
http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;
    sendfile        on;
    keepalive_timeout  65;
    include /etc/nginx/conf.d/*.conf;
}

四、环境变量配置(.env)

# 数据库配置
DB_ROOT_PASSWORD=SuperSecretRootPass!
DB_NAME=app_prod
DB_USER=app_user
DB_PASSWORD=UserStrongPass123

# 时区配置
TZ=Asia/Shanghai

五、部署与验证

5.1 启动命令

# 构建并启动服务
docker compose up -d --build

# 查看服务状态
docker compose ps

# 查看实时日志
docker compose logs -f

5.2 环境验证

<?php
// html/index.php
phpinfo();

// 测试数据库连接
try {
    $pdo = new PDO(
        'mysql:host=mysql;dbname='.getenv('DB_NAME'),
        getenv('DB_USER'),
        getenv('DB_PASSWORD')
    );
    echo "Database connection OK!";
} catch (Exception $e) {
    echo "Connection failed: " . $e->getMessage();
}

六、生产环境优化建议

1.SSL加密：在nginx配置中添加443端口SSL证书

2.资源限制：在compose文件中添加资源限制

deploy:
  resources:
    limits:
      cpus: '2'
      memory: 1G

3.日志切割：配置logrotate管理容器日志

4.备份策略：定时备份MySQL数据卷

docker compose exec mysql sh -c 'exec mysqldump --all-databases -uroot -p"$MYSQL_ROOT_PASSWORD"' > backup.sql

摘自：https://blog.csdn.net/u011570324/article/details/147523961