提取部署Nginx证书

```bash
# 提取证书
openssl pkcs12 -in your.pfx -clcerts -nokeys -out cert.crt
# 提取私钥
openssl pkcs12 -in your.pfx -nocerts -nodes -out priv.key
```

```ini
#创建openwebui.conf
server {
    listen 443 ssl;
    server_name open-webui.cn.kostal.int;
    ssl_certificate /etc/nginx/certs/cert.crt;
    ssl_certificate_key /etc/nginx/certs/priv.key;

location / {
        proxy_pass http://open-webui:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

# WebSocket support
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}

server {
    listen 80;
    server_name open-webui.cn.kostal.int;
    return 301 https://$host$request_uri;
}

```
 
```bash
#创建DOCKER容器
docker run -d \
  --name nginx-openwebui \
  --network my_network \
  -p 443:443 \
  -v /home/kochiae/dockers/CNSFAIL001.cn.kostal.int/:/etc/nginx/certs:ro \
  -v /home/kochiae/dockers/CNSFAIL001.cn.kostal.int/:/etc/nginx/conf.d:ro \
  nginx:latest

#验证
docker exec nginx-openwebui nginx -t
```

## PS:
需要重启Nginx容器。
需要将其它docker都加入到`my_network`. 使用如下命令
```bash
docker network connect my_network docker-api-1
docker network connect my_network docker-nginx-1
```