730 lines
276 KiB
XML
730 lines
276 KiB
XML
<?xml version="1.0"?>
|
||
<feed xmlns="http://www.w3.org/2005/Atom">
|
||
<id>https://blog.jingxiyuan.cn</id>
|
||
<title>涛声依旧</title>
|
||
<subtitle>天下事有难易乎?为之,则难者亦易矣</subtitle>
|
||
<icon>https://blog.jingxiyuan.cn/images/favicon.ico</icon>
|
||
<link href="https://blog.jingxiyuan.cn" />
|
||
<author>
|
||
<name>Hito Li</name>
|
||
</author>
|
||
<updated>2022-11-13T09:31:00.000Z</updated>
|
||
<category term="hito" />
|
||
<category term="無言" />
|
||
<category term="博客" />
|
||
<category term="公告栏" />
|
||
<category term="笔记" />
|
||
<category term="心得体会" />
|
||
<category term="技术分享" />
|
||
<category term="踩坑" />
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/11/13/%E6%95%B0%E6%8D%AE%E5%BA%93%E7%AE%A1%E7%90%86%E5%B7%A5%E5%85%B7/</id>
|
||
<title>数据库管理工具</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/11/13/%E6%95%B0%E6%8D%AE%E5%BA%93%E7%AE%A1%E7%90%86%E5%B7%A5%E5%85%B7/"/>
|
||
<content type="html"><h4 id="引言"><a class="anchor" href="#引言">#</a> 引言</h4>
|
||
<ul>
|
||
<li>很多朋友安装了 mysql 后不知道可以用工具管理,所以专门找了两个数据库管理工具方便大家使用。</li>
|
||
</ul>
|
||
<h4 id="navicat"><a class="anchor" href="#navicat">#</a> Navicat</h4>
|
||
<ol>
|
||
<li><span class="exturl" data-url="aHR0cHM6Ly9wYW4uamluZ3hpeXVhbi5jbi8lRTglQkQlQUYlRTQlQkIlQjYvTXlTUUwlRTUlQjclQTUlRTUlODUlQjcvTmF2aWNhdC56aXA=">下载</span></li>
|
||
<li>安装一路下一步即可 (<span class="red">注意:</span>安装完成后先不要运行)<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/13/navicat.jpg" alt="" /></li>
|
||
<li>注册<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/13/88f1592aed1ffbf3dbfeadda4fa4773f.jpg" alt="" /></li>
|
||
</ol>
|
||
<div class="note info">
|
||
<p>1、运行注册机<br />
|
||
2、修改 Your Name(可不改)<br />
|
||
3、点击 Patch(<span class="blue">此时会提示:navicat.exe - x64 -&gt; Cracked</span>)<br />
|
||
4、运行 navicat<br />
|
||
5、点击第一个 Generate 获取注册码 (<span class="yellow">Your Name 上一行</span>)<br />
|
||
6、点击 Copy 然后粘贴到 navicat 窗口上(也可能会自动粘贴进去)<br />
|
||
7、点击 navicat 上的激活按钮,等待一会,失败后会弹出手动激活按钮<br />
|
||
8、点击手动激活,窗口上会有一个 request code,把框里的值复制到注册机对应的 request code 框内。<br />
|
||
9、点击第二个 Generate 获取 Activation Code(激活码),把码复制到 navicat 对应的框内。<br />
|
||
10、点击激活完成激活。</p>
|
||
</div>
|
||
<ol start="4">
|
||
<li>查看注册信息<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/13/025adbe8193bc597a06d70eb8691c82c.jpg" alt="" /></li>
|
||
<li>测试连接<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/13/19b7ff68e8bd4471aa398c04fc989299.jpg" alt="" /></li>
|
||
<li>新建库<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/13/38a3f946af40173bdc114208fc3b50bc.jpg" alt="" /></li>
|
||
</ol>
|
||
<h4 id="dbeaver"><a class="anchor" href="#dbeaver">#</a> DBeaver</h4>
|
||
<ol>
|
||
<li><span class="exturl" data-url="aHR0cHM6Ly9wYW4uamluZ3hpeXVhbi5jbi8lRTglQkQlQUYlRTQlQkIlQjYvTXlTUUwlRTUlQjclQTUlRTUlODUlQjcvZGJlYXZlci1lZS0yMS4zLnppcA==">下载</span></li>
|
||
<li><span class="exturl" data-url="aHR0cHM6Ly9wYW4uamluZ3hpeXVhbi5jbi8lRTglQkQlQUYlRTQlQkIlQjYvTXlTUUwlRTUlQjclQTUlRTUlODUlQjcvamRrLTExLjAuMTEuemlw">下载 jdk</span><span class="label danger">✔️有 JAVA 环境的不用下载</span></li>
|
||
<li>修改<span class="red"> dbeaver.ini</span> 配置文件</li>
|
||
</ol>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token punctuation">-</span>vm</pre></td></tr><tr><td data-num="2"></td><td><pre>D<span class="token punctuation">:</span>\jdk<span class="token punctuation">-</span>11.0.11\bin</pre></td></tr><tr><td data-num="3"></td><td><pre><span class="token punctuation">-</span>startup</pre></td></tr><tr><td data-num="4"></td><td><pre>plugins/org.eclipse.equinox.launcher_1.6.300.v20210813<span class="token punctuation">-</span>1054.jar</pre></td></tr><tr><td data-num="5"></td><td><pre><span class="token punctuation">-</span><span class="token punctuation">-</span>launcher.library</pre></td></tr><tr><td data-num="6"></td><td><pre>plugins/org.eclipse.equinox.launcher.win32.win32.x86_64_1.2.300.v20210828<span class="token punctuation">-</span><span class="token number">0802</span></pre></td></tr><tr><td data-num="7"></td><td><pre><span class="token punctuation">-</span>vmargs</pre></td></tr><tr><td data-num="8"></td><td><pre><span class="token punctuation">-</span>XX<span class="token punctuation">:</span>+IgnoreUnrecognizedVMOptions</pre></td></tr><tr><td data-num="9"></td><td><pre><span class="token punctuation">-</span><span class="token punctuation">-</span>add<span class="token punctuation">-</span>modules=ALL<span class="token punctuation">-</span>SYSTEM</pre></td></tr><tr><td data-num="10"></td><td><pre><span class="token punctuation">-</span>Dosgi.requiredJavaVersion=11</pre></td></tr><tr><td data-num="11"></td><td><pre><span class="token punctuation">-</span>Xms128m</pre></td></tr><tr><td data-num="12"></td><td><pre><span class="token punctuation">-</span>Xmx2048m</pre></td></tr><tr><td data-num="13"></td><td><pre><span class="token punctuation">-</span>Djavax.net.ssl.trustStoreType=WINDOWS<span class="token punctuation">-</span>ROOT</pre></td></tr><tr><td data-num="14"></td><td><pre><span class="token punctuation">-</span>Ddbeaver.distribution.type=zip</pre></td></tr><tr><td data-num="15"></td><td><pre><span class="token punctuation">-</span>javaagent<span class="token punctuation">:</span>F<span class="token punctuation">:</span>\green program\dbeaver\dbeaver<span class="token punctuation">-</span>agent\dbeaver<span class="token punctuation">-</span>agent.jar</pre></td></tr></table></figure><div class="note info">
|
||
<p>第一二行指定<span class="red"> jdk</span> 地址<br />
|
||
最后一行指定<span class="red"> dbeaver-agent.jar 注册工具</span>的位置</p>
|
||
</div>
|
||
<ol start="4">
|
||
<li>启动<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/13/f9c6b3b245e93698b1331b9e0bdc26f3.jpg" alt="" /></li>
|
||
<li>注册成功<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/13/e16dea0c920dfbbf9138c22f5b86a050.jpg" alt="" /></li>
|
||
<li>测试连接<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/13/cf0094eb3183006c459c8996c403527e.jpg" alt="" /></li>
|
||
</ol>
|
||
</content>
|
||
<category term="Windows" scheme="https://blog.jingxiyuan.cn/categories/Windows/" />
|
||
<category term="工具" scheme="https://blog.jingxiyuan.cn/categories/Windows/%E5%B7%A5%E5%85%B7/" />
|
||
<category term="mysql" scheme="https://blog.jingxiyuan.cn/tags/mysql/" />
|
||
<category term="数据库工具" scheme="https://blog.jingxiyuan.cn/tags/%E6%95%B0%E6%8D%AE%E5%BA%93%E5%B7%A5%E5%85%B7/" />
|
||
<updated>2022-11-13T09:31:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/11/09/Vue%E6%8C%89%E7%8E%AF%E5%A2%83%E8%AE%BE%E7%BD%AE%E7%BC%96%E8%AF%91%E9%A1%B9%E7%9B%AE/</id>
|
||
<title>Vue按环境设置编译项目</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/11/09/Vue%E6%8C%89%E7%8E%AF%E5%A2%83%E8%AE%BE%E7%BD%AE%E7%BC%96%E8%AF%91%E9%A1%B9%E7%9B%AE/"/>
|
||
<content type="html"><h4 id="引言"><a class="anchor" href="#引言">#</a> 引言</h4>
|
||
<ul>
|
||
<li>今天在部署 vue 项目时发现生产环境的端口只有一个,而且被多个项目公用了,刚好此项目又没有配置服务名而是直接使用的根路径。没办法只有修改项目配置重新编译了!</li>
|
||
</ul>
|
||
<h4 id="配置"><a class="anchor" href="#配置">#</a> 配置</h4>
|
||
<ul>
|
||
<li>在项目根目录添加两个文件。</li>
|
||
</ul>
|
||
<p><span class="blue">.env.alpha</span></p>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>NODE_ENV = 'production'</pre></td></tr><tr><td data-num="2"></td><td><pre>VUE_APP_BASE_URL = '/'</pre></td></tr></table></figure><p><span class="blue">.env.prod</span></p>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>NODE_ENV = 'production'</pre></td></tr><tr><td data-num="2"></td><td><pre>VUE_APP_BASE_URL = '/projectName'</pre></td></tr></table></figure><ul>
|
||
<li>在<span class="label success"> package.json</span> 文件内添加不同环境的打包指令</li>
|
||
</ul>
|
||
<figure class="highlight json"><figcaption data-lang="JSON"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token property">"scripts"</span><span class="token operator">:</span> <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="2"></td><td><pre> <span class="token property">"serve"</span><span class="token operator">:</span> <span class="token string">"vue-cli-service serve"</span><span class="token punctuation">,</span></pre></td></tr><tr><td data-num="3"></td><td><pre> <span class="token property">"build"</span><span class="token operator">:</span> <span class="token string">"vue-cli-service build"</span><span class="token punctuation">,</span></pre></td></tr><tr><td data-num="4"></td><td><pre> <span class="token property">"build-test"</span><span class="token operator">:</span> <span class="token string">"vue-cli-service build --mode alpha"</span><span class="token punctuation">,</span></pre></td></tr><tr><td data-num="5"></td><td><pre> <span class="token property">"build-prod"</span><span class="token operator">:</span> <span class="token string">"vue-cli-service build --mode prod"</span><span class="token punctuation">,</span></pre></td></tr><tr><td data-num="6"></td><td><pre> <span class="token property">"lint"</span><span class="token operator">:</span> <span class="token string">"vue-cli-service lint"</span></pre></td></tr><tr><td data-num="7"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr></table></figure><ul>
|
||
<li>
|
||
<p>项目中<span class="yellow"> base_url</span> 需要使用<span class="red"> process.env.VUE_APP_BASE_URL</span> 替换</p>
|
||
</li>
|
||
<li>
|
||
<p>编译命令</p>
|
||
</li>
|
||
</ul>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">yarn</span> build-test <span class="token comment">#使用.env.alpha 配置文件中的参数</span></pre></td></tr><tr><td data-num="2"></td><td><pre><span class="token function">yarn</span> build-prod <span class="token comment">#使用.env.prod 配置文件中的参数</span></pre></td></tr><tr><td data-num="3"></td><td><pre><span class="token function">yarn</span> build <span class="token parameter variable">--mode</span> alpha <span class="token comment">#使用.env.alpha 配置文件中的参数</span></pre></td></tr><tr><td data-num="4"></td><td><pre><span class="token function">yarn</span> build <span class="token parameter variable">--mode</span> prod <span class="token comment">#使用.env.prod 配置文件中的参数</span></pre></td></tr></table></figure></content>
|
||
<category term="Linux" scheme="https://blog.jingxiyuan.cn/categories/Linux/" />
|
||
<category term="项目部署" scheme="https://blog.jingxiyuan.cn/categories/Linux/%E9%A1%B9%E7%9B%AE%E9%83%A8%E7%BD%B2/" />
|
||
<category term="Vue" scheme="https://blog.jingxiyuan.cn/categories/Linux/%E9%A1%B9%E7%9B%AE%E9%83%A8%E7%BD%B2/Vue/" />
|
||
<category term="Vue" scheme="https://blog.jingxiyuan.cn/tags/Vue/" />
|
||
<category term="项目部署" scheme="https://blog.jingxiyuan.cn/tags/%E9%A1%B9%E7%9B%AE%E9%83%A8%E7%BD%B2/" />
|
||
<updated>2022-11-09T01:47:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/11/08/Nginx%E9%85%8D%E7%BD%AE-%E5%8F%8D%E5%90%91%E4%BB%A3%E7%90%86/</id>
|
||
<title>Nginx配置-反向代理</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/11/08/Nginx%E9%85%8D%E7%BD%AE-%E5%8F%8D%E5%90%91%E4%BB%A3%E7%90%86/"/>
|
||
<content type="html"><h4 id="引言"><a class="anchor" href="#引言">#</a> 引言</h4>
|
||
<ul>
|
||
<li>所有配置方法和介绍均来至于网络搜索汇总,主要用于方便后期巩固学习。</li>
|
||
</ul>
|
||
<h4 id="何为反向代理"><a class="anchor" href="#何为反向代理">#</a> 何为反向代理</h4>
|
||
<ul>
|
||
<li>在介绍反向代理之前,先来了解一下正向代理。</li>
|
||
</ul>
|
||
<p><span class="blue">正向代理:</span>如果把局域网外的 Internet 想象成一个巨大的资源库,则局域网中的客户端要访问 Internet,则需要通过代理服务器来访问,这种代理服务就称为正向代理,下面是正向代理的原理图。<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/08/991a203be1ec82b36e1f326376617d40.png" alt="991a203be1ec82b36e1f326376617d40.png" /><br />
|
||
<span class="blue"> 反向代理:</span>看下面原理图,就一目了然。其实客户端对代理是无感知的,因为客户端不需要任何配置就可以访问,我们只需要将请求发送到反向代理服务器,由反向代理服务器去选择目标服务器获取数据后,在返回给客户端,此时反向代理服务器和目标服务器对外就是一个服务器,暴露的是代理服务器地址,隐藏了真实服务器 IP 地址。<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/08/1c87e386a0ce624a3949bda443cf346d.png" alt="1c87e386a0ce624a3949bda443cf346d.png" /></p>
|
||
<blockquote>
|
||
<p>正向代理和反向代理的区别,一句话就是:如果我们客户端自己用,就是正向代理。如果是在服务器用,用户无感知,就是反向代理。</p>
|
||
</blockquote>
|
||
<h4 id="nginx配置文件"><a class="anchor" href="#nginx配置文件">#</a> Nginx 配置文件</h4>
|
||
<ul>
|
||
<li>
|
||
<p>在学习 Nginx 之前,要熟知它的配置文件,毕竟,下面需要做的所有配置(反向代理、负载均衡、动静分离等),都是基于它的配置文件。</p>
|
||
</li>
|
||
<li>
|
||
<p>Nginx 默认的配置文件是在安装目录下的 conf 目录下,后续对 Nginx 的使用基本上都是对此配置文件进行相应的修改。完整的配置文件,可以看一下文章最后。修改过 nginx.conf 配置文件,记得要<span class="label success">✔️重启 Nginx 服务</span>(☆☆☆☆☆)</p>
|
||
</li>
|
||
<li>
|
||
<p>配置文件中有很多 #号,该符号表示注释内容,去掉所有以 #开头的段落,精简之后的配置文件内容如下(PS:其实注释掉的地方,都是一些功能的使用代码,需要用到的时候,取消注释即可):</p>
|
||
</li>
|
||
</ul>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token comment"># 主进程叫 master,负责管理子进程,子进程叫 worker</span></pre></td></tr><tr><td data-num="2"></td><td><pre><span class="token comment"># worker_processes 配置项表示开启几个业务进程,一般和 cpu 核数有关</span></pre></td></tr><tr><td data-num="3"></td><td><pre>worker_processes 1;</pre></td></tr><tr><td data-num="4"></td><td><pre></pre></td></tr><tr><td data-num="5"></td><td><pre>events <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="6"></td><td><pre> worker_connections 1024;</pre></td></tr><tr><td data-num="7"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="8"></td><td><pre></pre></td></tr><tr><td data-num="9"></td><td><pre>http <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="10"></td><td><pre> <span class="token comment"># include 表示可以引入其他文件,此处表示引入 http mime 类型</span></pre></td></tr><tr><td data-num="11"></td><td><pre> include mime.types;</pre></td></tr><tr><td data-num="12"></td><td><pre> default_type application/octet<span class="token punctuation">-</span>stream;</pre></td></tr><tr><td data-num="13"></td><td><pre> sendfile on;</pre></td></tr><tr><td data-num="14"></td><td><pre> keepalive_timeout 65;</pre></td></tr><tr><td data-num="15"></td><td><pre></pre></td></tr><tr><td data-num="16"></td><td><pre> <span class="token comment"># 虚拟主机,可以配置多个</span></pre></td></tr><tr><td data-num="17"></td><td><pre> server <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="18"></td><td><pre> listen 80;</pre></td></tr><tr><td data-num="19"></td><td><pre> server_name localhost;</pre></td></tr><tr><td data-num="20"></td><td><pre></pre></td></tr><tr><td data-num="21"></td><td><pre> location / <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="22"></td><td><pre> <span class="token comment"># 路径匹配之后,哪个目录下去匹配相应的网页,html 是相对路径</span></pre></td></tr><tr><td data-num="23"></td><td><pre> root html;</pre></td></tr><tr><td data-num="24"></td><td><pre> index index.html index.htm;</pre></td></tr><tr><td data-num="25"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="26"></td><td><pre></pre></td></tr><tr><td data-num="27"></td><td><pre> error_page 500 502 503 504 /50x.html;</pre></td></tr><tr><td data-num="28"></td><td><pre> location = /50x.html <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="29"></td><td><pre> root html;</pre></td></tr><tr><td data-num="30"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="31"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="32"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr></table></figure><blockquote>
|
||
<p>去掉注释信息后,可以将 nginx.conf 配置文件分为三部分:</p>
|
||
</blockquote>
|
||
<ol>
|
||
<li>全局块</li>
|
||
</ol>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>worker_processes 1;</pre></td></tr></table></figure><ul>
|
||
<li>
|
||
<p>从配置文件开始到 events 块之间的内容,主要会设置一些影响 Nginx 服务器整体运行的配置指令,主要包括:配置运行 Nginx 服务器的用户(组)、允许生成的 worker process 数,进程 PID 存放路径、日志存放路径和类型以及配置文件的引入等。</p>
|
||
</li>
|
||
<li>
|
||
<p>上面这行 worker_processes 配置,是 Nginx 服务器并发处理服务的关键配置,该值越大,可以支持的并发处理量也越多,但是会受到硬件、软件等设备的约束。</p>
|
||
</li>
|
||
</ul>
|
||
<ol start="2">
|
||
<li>events 块</li>
|
||
</ol>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>events <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="2"></td><td><pre> worker_connections 1024;</pre></td></tr><tr><td data-num="3"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr></table></figure><ul>
|
||
<li>events 块涉及的指令主要影响 Nginx 服务器与用户的网络连接,常用的设置包括:是否开启对多 work process 下的网络连接进行序列化,是否允许同时接收多个网络连接,选取哪种事件驱动模型来处理连接请求,每个 work process 可以同时支持的最大连接数等</li>
|
||
</ul>
|
||
<blockquote>
|
||
<p>上述例子就表示每个 work process 支持的最大连接数为 1024。这部分的配置对 Nginx 的性能影响较大,在实际中应该灵活配置。</p>
|
||
</blockquote>
|
||
<ol start="3">
|
||
<li>http 块</li>
|
||
</ol>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>http <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="2"></td><td><pre> include mime.types;</pre></td></tr><tr><td data-num="3"></td><td><pre> default_type application/octet<span class="token punctuation">-</span>stream;</pre></td></tr><tr><td data-num="4"></td><td><pre> sendfile on;</pre></td></tr><tr><td data-num="5"></td><td><pre> keepalive_timeout 65;</pre></td></tr><tr><td data-num="6"></td><td><pre></pre></td></tr><tr><td data-num="7"></td><td><pre> server <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="8"></td><td><pre> listen 80;</pre></td></tr><tr><td data-num="9"></td><td><pre> server_name localhost;</pre></td></tr><tr><td data-num="10"></td><td><pre></pre></td></tr><tr><td data-num="11"></td><td><pre> location / <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="12"></td><td><pre> root html;</pre></td></tr><tr><td data-num="13"></td><td><pre> index index.html index.htm;</pre></td></tr><tr><td data-num="14"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="15"></td><td><pre></pre></td></tr><tr><td data-num="16"></td><td><pre> error_page 500 502 503 504 /50x.html;</pre></td></tr><tr><td data-num="17"></td><td><pre> location = /50x.html <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="18"></td><td><pre> root html;</pre></td></tr><tr><td data-num="19"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="20"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr></table></figure><ul>
|
||
<li>这部分是 Nginx 服务器配置中最频繁的部分,代理、缓存和日志定义等绝大多数功能和第三方模块的配置都在这里。需要注意的是:http 块也可以包括 http 全局块、server 块。下面的反向代理、<a href="https://blog.jingxiyuan.cn/2022/09/27/nginx%E8%B4%9F%E8%BD%BD%E5%9D%87%E8%A1%A1%E9%85%8D%E7%BD%AE/">动静分离、负载均衡</a>都是在这部分中配置</li>
|
||
</ul>
|
||
<p><span class="blue">http 全局块:</span>http 全局块配置的指令包括:文件引入、MIME-TYPE 定义、日志自定义、连接超时时间、单链接请求数上限等。</p>
|
||
<p><span class="blue">server 块:</span>这块和虚拟主机有密切关系,从用户角度看,虚拟主机和一台独立的硬件主机是完全一样的,该技术的产生是为了节省互联网服务器硬件成本。</p>
|
||
<p><span class="blue">location 块:</span>这块的主要作用是:基于 Nginx 服务器接收到的请求字符串(例如 server_name/uri-string),对虚拟主机名称(也可以是 IP 别名)之外的字符串(例如 前面的 /uri-string)进行匹配,对特定的请求进行处理。地址定向、数据缓存和应答控制等功能,还有许多第三方模块的配置也在这里进行。</p>
|
||
<div class="note info">
|
||
<p>每个 http 块可以包括多个 server 块,而每个 server 块就相当于一个虚拟主机。而每个 server 块也分为全局 server 块,以及可以同时包含多个 locaton 块。(☆☆☆☆☆)</p>
|
||
</div>
|
||
<h4 id="反向代理配置"><a class="anchor" href="#反向代理配置">#</a> 反向代理配置</h4>
|
||
<ol>
|
||
<li>location 配置规则</li>
|
||
</ol>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>location <span class="token punctuation">[</span> = <span class="token punctuation">|</span> ~ <span class="token punctuation">|</span> ~* <span class="token punctuation">|</span> ^~ <span class="token punctuation">|</span> @ <span class="token punctuation">]</span> /uri <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="2"></td><td><pre></pre></td></tr><tr><td data-num="3"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="4"></td><td><pre></pre></td></tr><tr><td data-num="5"></td><td><pre>= :用于不含正则表达式的 uri 前,要求请求字符串与 uri 严格匹配,如果匹配成功,就停止继续向下搜索并立即处理该请求。</pre></td></tr><tr><td data-num="6"></td><td><pre>~ :用于表示 uri 包含正则表达式,并且区分大小写。</pre></td></tr><tr><td data-num="7"></td><td><pre>~* :用于表示 uri 包含正则表达式,并且不区分大小写。</pre></td></tr><tr><td data-num="8"></td><td><pre>^~ :用于不含正则表达式的 uri 前,要求 Nginx 服务器找到标识 uri 和请求字符串匹配度最高的location后,立即使用此 location 处理请求,而不再使用 location 块中的正则 uri 和请求字符串做匹配。</pre></td></tr><tr><td data-num="9"></td><td><pre>@ <span class="token punctuation">:</span> "@" 定义一个命名的 location,使用在内部定向时,例如 error_page</pre></td></tr><tr><td data-num="10"></td><td><pre>/uri :不带任何修饰符,也表示前缀匹配,但是在正则匹配之后,如果没有正则命中,命中最长的规则</pre></td></tr><tr><td data-num="11"></td><td><pre>/ :通用匹配,任何未匹配到其它location的请求都会匹配到,相当于switch中的default</pre></td></tr></table></figure><p><span class="red">uri 没有 “/” 结尾时</span>,<ins class="wavy">location /abc/def 可以匹配 /abc/defghi 请求,也可以匹配 /abc/def/ghi 等</ins>。<br />
|
||
<span class="red">uri 有 “/” 结尾时</span>,<ins class="dot">location /abc/def/ 不能匹配 /abc/defghi 请求</ins>,<ins class="wavy">只能匹配 /abc/def/anything 这样的请求</ins>☆☆☆☆☆</p>
|
||
<ol start="2">
|
||
<li>proxy_pass 配置规则</li>
|
||
</ol>
|
||
<p><span class="red">url 结尾加上了 /</span>,<ins class="wavy">相当于是绝对路径</ins>,<ins class="dot">则 Nginx 不会把 location 中匹配的路径部分加入代理 url</ins>。<br />
|
||
<span class="red">url 结尾不加 /</span>,<ins class="dot">Nginx 则会把匹配的路径部分加入代理 uri</ins>。</p>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token key atrule">情景1</span><span class="token punctuation">:</span></pre></td></tr><tr><td data-num="2"></td><td><pre>proxy_pass后有/ </pre></td></tr><tr><td data-num="3"></td><td><pre>访问地址:http<span class="token punctuation">:</span>//localhost<span class="token punctuation">:</span>8081/WCP.Service/wcp/modeladapter/download/asc.shtml</pre></td></tr><tr><td data-num="4"></td><td><pre>最终代理:http<span class="token punctuation">:</span>//10.194.171.7<span class="token punctuation">:</span>13082/modeladapter/download/asc.shtml</pre></td></tr><tr><td data-num="5"></td><td><pre>location /WCP.Service/wcp/modeladapter/download/ <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="6"></td><td><pre> proxy_pass http<span class="token punctuation">:</span>//10.194.171.7<span class="token punctuation">:</span>13082/modeladapter/download/;</pre></td></tr><tr><td data-num="7"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="8"></td><td><pre>访问地址:http<span class="token punctuation">:</span>//localhost<span class="token punctuation">:</span>8081/model/asc.shtml</pre></td></tr><tr><td data-num="9"></td><td><pre>最终代理:http<span class="token punctuation">:</span>//127.0.0.1<span class="token punctuation">:</span>8082/model/asc.shtml</pre></td></tr><tr><td data-num="10"></td><td><pre>location /model/ <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="11"></td><td><pre> proxy_pass http<span class="token punctuation">:</span>//127.0.0.1<span class="token punctuation">:</span>8082/model/;</pre></td></tr><tr><td data-num="12"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="13"></td><td><pre></pre></td></tr><tr><td data-num="14"></td><td><pre><span class="token key atrule">情景2</span><span class="token punctuation">:</span></pre></td></tr><tr><td data-num="15"></td><td><pre>proxy_pass后有/</pre></td></tr><tr><td data-num="16"></td><td><pre>访问地址:http<span class="token punctuation">:</span>//localhost<span class="token punctuation">:</span>8081/model/asc.shtml</pre></td></tr><tr><td data-num="17"></td><td><pre>最终代理:http<span class="token punctuation">:</span>//127.0.0.1<span class="token punctuation">:</span>8082/asc.shtml</pre></td></tr><tr><td data-num="18"></td><td><pre>location /model/ <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="19"></td><td><pre> proxy_pass http<span class="token punctuation">:</span>//127.0.0.1<span class="token punctuation">:</span>8082/;</pre></td></tr><tr><td data-num="20"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="21"></td><td><pre></pre></td></tr><tr><td data-num="22"></td><td><pre>情景3:</pre></td></tr><tr><td data-num="23"></td><td><pre>proxy_pass后没有/ </pre></td></tr><tr><td data-num="24"></td><td><pre>访问地址:http<span class="token punctuation">:</span>//localhost<span class="token punctuation">:</span>8081/model/asc.shtml</pre></td></tr><tr><td data-num="25"></td><td><pre>最终代理:http<span class="token punctuation">:</span>//127.0.0.1<span class="token punctuation">:</span>8082/model/asc.shtml</pre></td></tr><tr><td data-num="26"></td><td><pre>location /model/ <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="27"></td><td><pre> proxy_pass http<span class="token punctuation">:</span>//127.0.0.1<span class="token punctuation">:</span>8082;</pre></td></tr><tr><td data-num="28"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="29"></td><td><pre></pre></td></tr><tr><td data-num="30"></td><td><pre>情景4</pre></td></tr><tr><td data-num="31"></td><td><pre>proxy_pass后没有/ </pre></td></tr><tr><td data-num="32"></td><td><pre>访问地址:http<span class="token punctuation">:</span>//localhost<span class="token punctuation">:</span>8081/model/asc.shtml</pre></td></tr><tr><td data-num="33"></td><td><pre>最终代理:http<span class="token punctuation">:</span>//127.0.0.1<span class="token punctuation">:</span>8082/AAAmodel/asc.shtml</pre></td></tr><tr><td data-num="34"></td><td><pre>location /model/ <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="35"></td><td><pre> proxy_pass http<span class="token punctuation">:</span>//127.0.0.1<span class="token punctuation">:</span>8082/AAA;</pre></td></tr><tr><td data-num="36"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="37"></td><td><pre></pre></td></tr><tr><td data-num="38"></td><td><pre>情景5</pre></td></tr><tr><td data-num="39"></td><td><pre>proxy_pass后有/</pre></td></tr><tr><td data-num="40"></td><td><pre>访问地址:http<span class="token punctuation">:</span>//localhost<span class="token punctuation">:</span>8081/model/asc.shtml</pre></td></tr><tr><td data-num="41"></td><td><pre>最终代理:http<span class="token punctuation">:</span>//127.0.0.1<span class="token punctuation">:</span>8082/asc.shtml</pre></td></tr><tr><td data-num="42"></td><td><pre>location /model <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="43"></td><td><pre> proxy_pass http<span class="token punctuation">:</span>//127.0.0.1<span class="token punctuation">:</span>8082/;</pre></td></tr><tr><td data-num="44"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="45"></td><td><pre></pre></td></tr><tr><td data-num="46"></td><td><pre>情景6</pre></td></tr><tr><td data-num="47"></td><td><pre>proxy_pass后有/</pre></td></tr><tr><td data-num="48"></td><td><pre>访问地址:http<span class="token punctuation">:</span>//localhost<span class="token punctuation">:</span>8081/modelBBB/asc.shtml</pre></td></tr><tr><td data-num="49"></td><td><pre>最终代理:http<span class="token punctuation">:</span>//127.0.0.1<span class="token punctuation">:</span>8082/asc.shtml</pre></td></tr><tr><td data-num="50"></td><td><pre>location /model <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="51"></td><td><pre> proxy_pass http<span class="token punctuation">:</span>//127.0.0.1<span class="token punctuation">:</span>8082/;</pre></td></tr><tr><td data-num="52"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr></table></figure><h4 id="nginx完整配置文件"><a class="anchor" href="#nginx完整配置文件">#</a> Nginx 完整配置文件</h4>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token comment">#user nobody;</span></pre></td></tr><tr><td data-num="2"></td><td><pre>worker_processes 1;</pre></td></tr><tr><td data-num="3"></td><td><pre></pre></td></tr><tr><td data-num="4"></td><td><pre><span class="token comment">#error_log logs/error.log;</span></pre></td></tr><tr><td data-num="5"></td><td><pre><span class="token comment">#error_log logs/error.log notice;</span></pre></td></tr><tr><td data-num="6"></td><td><pre><span class="token comment">#error_log logs/error.log info;</span></pre></td></tr><tr><td data-num="7"></td><td><pre></pre></td></tr><tr><td data-num="8"></td><td><pre><span class="token comment">#pid logs/nginx.pid;</span></pre></td></tr><tr><td data-num="9"></td><td><pre></pre></td></tr><tr><td data-num="10"></td><td><pre>events <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="11"></td><td><pre> worker_connections 1024;</pre></td></tr><tr><td data-num="12"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="13"></td><td><pre></pre></td></tr><tr><td data-num="14"></td><td><pre>http <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="15"></td><td><pre> include mime.types;</pre></td></tr><tr><td data-num="16"></td><td><pre> default_type application/octet<span class="token punctuation">-</span>stream;</pre></td></tr><tr><td data-num="17"></td><td><pre></pre></td></tr><tr><td data-num="18"></td><td><pre> <span class="token comment">#log_format main '$remote_addr - $remote_user [$time_local] "$request" '</span></pre></td></tr><tr><td data-num="19"></td><td><pre> <span class="token comment"># '$status $body_bytes_sent "$http_referer" '</span></pre></td></tr><tr><td data-num="20"></td><td><pre> <span class="token comment"># '"$http_user_agent" "$http_x_forwarded_for"';</span></pre></td></tr><tr><td data-num="21"></td><td><pre></pre></td></tr><tr><td data-num="22"></td><td><pre> <span class="token comment">#access_log logs/access.log main;</span></pre></td></tr><tr><td data-num="23"></td><td><pre></pre></td></tr><tr><td data-num="24"></td><td><pre> sendfile on;</pre></td></tr><tr><td data-num="25"></td><td><pre> <span class="token comment">#tcp_nopush on;</span></pre></td></tr><tr><td data-num="26"></td><td><pre></pre></td></tr><tr><td data-num="27"></td><td><pre> <span class="token comment">#keepalive_timeout 0;</span></pre></td></tr><tr><td data-num="28"></td><td><pre> keepalive_timeout 65;</pre></td></tr><tr><td data-num="29"></td><td><pre></pre></td></tr><tr><td data-num="30"></td><td><pre> <span class="token comment">#gzip on;</span></pre></td></tr><tr><td data-num="31"></td><td><pre></pre></td></tr><tr><td data-num="32"></td><td><pre> server <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="33"></td><td><pre> listen 80;</pre></td></tr><tr><td data-num="34"></td><td><pre> server_name localhost;</pre></td></tr><tr><td data-num="35"></td><td><pre></pre></td></tr><tr><td data-num="36"></td><td><pre> <span class="token comment">#charset koi8-r;</span></pre></td></tr><tr><td data-num="37"></td><td><pre></pre></td></tr><tr><td data-num="38"></td><td><pre> <span class="token comment">#access_log logs/host.access.log main;</span></pre></td></tr><tr><td data-num="39"></td><td><pre></pre></td></tr><tr><td data-num="40"></td><td><pre> location / <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="41"></td><td><pre> root html;</pre></td></tr><tr><td data-num="42"></td><td><pre> index index.html index.htm;</pre></td></tr><tr><td data-num="43"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="44"></td><td><pre></pre></td></tr><tr><td data-num="45"></td><td><pre> <span class="token comment">#error_page 404 /404.html;</span></pre></td></tr><tr><td data-num="46"></td><td><pre></pre></td></tr><tr><td data-num="47"></td><td><pre> <span class="token comment"># redirect server error pages to the static page /50x.html</span></pre></td></tr><tr><td data-num="48"></td><td><pre> <span class="token comment">#</span></pre></td></tr><tr><td data-num="49"></td><td><pre> error_page 500 502 503 504 /50x.html;</pre></td></tr><tr><td data-num="50"></td><td><pre> location = /50x.html <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="51"></td><td><pre> root html;</pre></td></tr><tr><td data-num="52"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="53"></td><td><pre></pre></td></tr><tr><td data-num="54"></td><td><pre> <span class="token comment"># proxy the PHP scripts to Apache listening on 127.0.0.1:80</span></pre></td></tr><tr><td data-num="55"></td><td><pre> <span class="token comment">#</span></pre></td></tr><tr><td data-num="56"></td><td><pre> <span class="token comment">#location ~ \.php$ &#123;</span></pre></td></tr><tr><td data-num="57"></td><td><pre> <span class="token comment"># proxy_pass http://127.0.0.1;</span></pre></td></tr><tr><td data-num="58"></td><td><pre> <span class="token comment">#&#125;</span></pre></td></tr><tr><td data-num="59"></td><td><pre></pre></td></tr><tr><td data-num="60"></td><td><pre> <span class="token comment"># pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000</span></pre></td></tr><tr><td data-num="61"></td><td><pre> <span class="token comment">#</span></pre></td></tr><tr><td data-num="62"></td><td><pre> <span class="token comment">#location ~ \.php$ &#123;</span></pre></td></tr><tr><td data-num="63"></td><td><pre> <span class="token comment"># root html;</span></pre></td></tr><tr><td data-num="64"></td><td><pre> <span class="token comment"># fastcgi_pass 127.0.0.1:9000;</span></pre></td></tr><tr><td data-num="65"></td><td><pre> <span class="token comment"># fastcgi_index index.php;</span></pre></td></tr><tr><td data-num="66"></td><td><pre> <span class="token comment"># fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;</span></pre></td></tr><tr><td data-num="67"></td><td><pre> <span class="token comment"># include fastcgi_params;</span></pre></td></tr><tr><td data-num="68"></td><td><pre> <span class="token comment">#&#125;</span></pre></td></tr><tr><td data-num="69"></td><td><pre></pre></td></tr><tr><td data-num="70"></td><td><pre> <span class="token comment"># deny access to .htaccess files, if Apache's document root</span></pre></td></tr><tr><td data-num="71"></td><td><pre> <span class="token comment"># concurs with nginx's one</span></pre></td></tr><tr><td data-num="72"></td><td><pre> <span class="token comment">#</span></pre></td></tr><tr><td data-num="73"></td><td><pre> <span class="token comment">#location ~ /\.ht &#123;</span></pre></td></tr><tr><td data-num="74"></td><td><pre> <span class="token comment"># deny all;</span></pre></td></tr><tr><td data-num="75"></td><td><pre> <span class="token comment">#&#125;</span></pre></td></tr><tr><td data-num="76"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="77"></td><td><pre> <span class="token comment"># another virtual host using mix of IP-, name-, and port-based configuration</span></pre></td></tr><tr><td data-num="78"></td><td><pre> <span class="token comment">#</span></pre></td></tr><tr><td data-num="79"></td><td><pre> <span class="token comment">#server &#123;</span></pre></td></tr><tr><td data-num="80"></td><td><pre> <span class="token comment"># listen 8000;</span></pre></td></tr><tr><td data-num="81"></td><td><pre> <span class="token comment"># listen somename:8080;</span></pre></td></tr><tr><td data-num="82"></td><td><pre> <span class="token comment"># server_name somename alias another.alias;</span></pre></td></tr><tr><td data-num="83"></td><td><pre> <span class="token comment"># location / &#123;</span></pre></td></tr><tr><td data-num="84"></td><td><pre> <span class="token comment"># root html;</span></pre></td></tr><tr><td data-num="85"></td><td><pre> <span class="token comment"># index index.html index.htm;</span></pre></td></tr><tr><td data-num="86"></td><td><pre> <span class="token comment"># &#125;</span></pre></td></tr><tr><td data-num="87"></td><td><pre> <span class="token comment">#&#125;</span></pre></td></tr><tr><td data-num="88"></td><td><pre> <span class="token comment"># HTTPS server</span></pre></td></tr><tr><td data-num="89"></td><td><pre> <span class="token comment">#</span></pre></td></tr><tr><td data-num="90"></td><td><pre> <span class="token comment">#server &#123;</span></pre></td></tr><tr><td data-num="91"></td><td><pre> <span class="token comment"># listen 443 ssl;</span></pre></td></tr><tr><td data-num="92"></td><td><pre> <span class="token comment"># server_name localhost;</span></pre></td></tr><tr><td data-num="93"></td><td><pre> <span class="token comment"># ssl_certificate cert.pem;</span></pre></td></tr><tr><td data-num="94"></td><td><pre> <span class="token comment"># ssl_certificate_key cert.key;</span></pre></td></tr><tr><td data-num="95"></td><td><pre></pre></td></tr><tr><td data-num="96"></td><td><pre> <span class="token comment"># ssl_session_cache shared:SSL:1m;</span></pre></td></tr><tr><td data-num="97"></td><td><pre> <span class="token comment"># ssl_session_timeout 5m;</span></pre></td></tr><tr><td data-num="98"></td><td><pre></pre></td></tr><tr><td data-num="99"></td><td><pre> <span class="token comment"># ssl_ciphers HIGH:!aNULL:!MD5;</span></pre></td></tr><tr><td data-num="100"></td><td><pre> <span class="token comment"># ssl_prefer_server_ciphers on;</span></pre></td></tr><tr><td data-num="101"></td><td><pre></pre></td></tr><tr><td data-num="102"></td><td><pre> <span class="token comment"># location / &#123;</span></pre></td></tr><tr><td data-num="103"></td><td><pre> <span class="token comment"># root html;</span></pre></td></tr><tr><td data-num="104"></td><td><pre> <span class="token comment"># index index.html index.htm;</span></pre></td></tr><tr><td data-num="105"></td><td><pre> <span class="token comment"># &#125;</span></pre></td></tr><tr><td data-num="106"></td><td><pre> <span class="token comment">#&#125;</span></pre></td></tr><tr><td data-num="107"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr></table></figure></content>
|
||
<category term="Linux" scheme="https://blog.jingxiyuan.cn/categories/Linux/" />
|
||
<category term="服务" scheme="https://blog.jingxiyuan.cn/categories/Linux/%E6%9C%8D%E5%8A%A1/" />
|
||
<category term="Nginx" scheme="https://blog.jingxiyuan.cn/categories/Linux/%E6%9C%8D%E5%8A%A1/Nginx/" />
|
||
<category term="Nginx" scheme="https://blog.jingxiyuan.cn/tags/Nginx/" />
|
||
<category term="反向代理" scheme="https://blog.jingxiyuan.cn/tags/%E5%8F%8D%E5%90%91%E4%BB%A3%E7%90%86/" />
|
||
<updated>2022-11-08T02:05:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/11/04/%E8%AE%B0%E4%B8%80%E6%AC%A1Vue%E9%A1%B9%E7%9B%AE%E7%9A%84%E9%83%A8%E7%BD%B2/</id>
|
||
<title>记一次Vue项目的部署</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/11/04/%E8%AE%B0%E4%B8%80%E6%AC%A1Vue%E9%A1%B9%E7%9B%AE%E7%9A%84%E9%83%A8%E7%BD%B2/"/>
|
||
<content type="html"><h4 id="描述"><a class="anchor" href="#描述">#</a> 描述</h4>
|
||
<ul>
|
||
<li>今天需要把一个 web 项目部署到 ubuntu 服务器上,结果直接使用 apt install nodejs 安装的 nodejs 版本过低,导致编译失败。最后通过查看官网文档获取到了 ubuntu 最新 nodejs 的安装命令。</li>
|
||
</ul>
|
||
<h4 id="过程"><a class="anchor" href="#过程">#</a> 过程</h4>
|
||
<ul>
|
||
<li>卸载旧的 nodejs(此命令会卸载掉相关依赖包)</li>
|
||
</ul>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">sudo</span> <span class="token function">apt</span> autoremove <span class="token parameter variable">--purge</span> nodejs</pre></td></tr></table></figure><ul>
|
||
<li>安装 NodeJS</li>
|
||
</ul>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">curl</span> <span class="token parameter variable">-fsSL</span> https://deb.nodesource.com/setup_16.x <span class="token operator">|</span> <span class="token function">sudo</span> <span class="token parameter variable">-E</span> <span class="token function">bash</span> - <span class="token operator">&amp;&amp;</span> <span class="token function">sudo</span> <span class="token function">apt-get</span> <span class="token function">install</span> <span class="token parameter variable">-y</span> nodejs</pre></td></tr></table></figure><ul>
|
||
<li>安装 yarn</li>
|
||
</ul>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">curl</span> <span class="token parameter variable">-sL</span> https://dl.yarnpkg.com/debian/pubkey.gpg <span class="token operator">|</span> gpg <span class="token parameter variable">--dearmor</span> <span class="token operator">|</span> <span class="token function">sudo</span> <span class="token function">tee</span> /usr/share/keyrings/yarnkey.gpg <span class="token operator">></span>/dev/null</pre></td></tr><tr><td data-num="2"></td><td><pre></pre></td></tr><tr><td data-num="3"></td><td><pre><span class="token builtin class-name">echo</span> <span class="token string">"deb [signed-by=/usr/share/keyrings/yarnkey.gpg] https://dl.yarnpkg.com/debian stable main"</span> <span class="token operator">|</span> <span class="token function">sudo</span> <span class="token function">tee</span> /etc/apt/sources.list.d/yarn.list</pre></td></tr><tr><td data-num="4"></td><td><pre></pre></td></tr><tr><td data-num="5"></td><td><pre><span class="token function">sudo</span> <span class="token function">apt-get</span> update <span class="token operator">&amp;&amp;</span> <span class="token function">sudo</span> <span class="token function">apt-get</span> <span class="token function">install</span> <span class="token function">yarn</span></pre></td></tr></table></figure><ul>
|
||
<li>初始化 (到项目根目录执行)</li>
|
||
</ul>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">yarn</span> <span class="token function">install</span></pre></td></tr></table></figure><ul>
|
||
<li>编译(到项目根目录执行,完成后会生成 dist 目录)</li>
|
||
</ul>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">yarn</span> build</pre></td></tr></table></figure><ul>
|
||
<li>安装 nginx</li>
|
||
</ul>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">apt</span> <span class="token function">install</span> nginx</pre></td></tr></table></figure><ul>
|
||
<li>配置 nginx (编译 /etc/nginx/sites-available/default)</li>
|
||
</ul>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>server <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="2"></td><td><pre> listen 80 default_server;</pre></td></tr><tr><td data-num="3"></td><td><pre> listen <span class="token punctuation">[</span><span class="token punctuation">:</span><span class="token punctuation">:</span><span class="token punctuation">]</span><span class="token punctuation">:</span>80 default_server;</pre></td></tr><tr><td data-num="4"></td><td><pre></pre></td></tr><tr><td data-num="5"></td><td><pre> <span class="token comment"># SSL configuration</span></pre></td></tr><tr><td data-num="6"></td><td><pre> <span class="token comment">#</span></pre></td></tr><tr><td data-num="7"></td><td><pre> <span class="token comment"># listen 443 ssl default_server;</span></pre></td></tr><tr><td data-num="8"></td><td><pre> <span class="token comment"># listen [::]:443 ssl default_server;</span></pre></td></tr><tr><td data-num="9"></td><td><pre> <span class="token comment">#</span></pre></td></tr><tr><td data-num="10"></td><td><pre> <span class="token comment"># Note: You should disable gzip for SSL traffic.</span></pre></td></tr><tr><td data-num="11"></td><td><pre> <span class="token comment"># See: https://bugs.debian.org/773332</span></pre></td></tr><tr><td data-num="12"></td><td><pre> <span class="token comment">#</span></pre></td></tr><tr><td data-num="13"></td><td><pre> <span class="token comment"># Read up on ssl_ciphers to ensure a secure configuration.</span></pre></td></tr><tr><td data-num="14"></td><td><pre> <span class="token comment"># See: https://bugs.debian.org/765782</span></pre></td></tr><tr><td data-num="15"></td><td><pre> <span class="token comment">#</span></pre></td></tr><tr><td data-num="16"></td><td><pre> <span class="token comment"># Self signed certs generated by the ssl-cert package</span></pre></td></tr><tr><td data-num="17"></td><td><pre> <span class="token comment"># Don't use them in a production server!</span></pre></td></tr><tr><td data-num="18"></td><td><pre> <span class="token comment">#</span></pre></td></tr><tr><td data-num="19"></td><td><pre> <span class="token comment"># include snippets/snakeoil.conf;</span></pre></td></tr><tr><td data-num="20"></td><td><pre></pre></td></tr><tr><td data-num="21"></td><td><pre> root /var/www/html;</pre></td></tr><tr><td data-num="22"></td><td><pre></pre></td></tr><tr><td data-num="23"></td><td><pre> <span class="token comment"># Add index.php to the list if you are using PHP</span></pre></td></tr><tr><td data-num="24"></td><td><pre> index index.html index.htm index.nginx<span class="token punctuation">-</span>debian.html;</pre></td></tr><tr><td data-num="25"></td><td><pre></pre></td></tr><tr><td data-num="26"></td><td><pre> server_name _;</pre></td></tr><tr><td data-num="27"></td><td><pre></pre></td></tr><tr><td data-num="28"></td><td><pre> location /api <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="29"></td><td><pre> proxy_pass http<span class="token punctuation">:</span>//localhost<span class="token punctuation">:</span>8080;</pre></td></tr><tr><td data-num="30"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="31"></td><td><pre></pre></td></tr><tr><td data-num="32"></td><td><pre> location / <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="33"></td><td><pre> <span class="token comment"># First attempt to serve request as file, then</span></pre></td></tr><tr><td data-num="34"></td><td><pre> <span class="token comment"># as directory, then fall back to displaying a 404.</span></pre></td></tr><tr><td data-num="35"></td><td><pre> <span class="token comment">#try_files $uri $uri/ =404;</span></pre></td></tr><tr><td data-num="36"></td><td><pre> alias /opt/codes/dayu<span class="token punctuation">-</span>tools<span class="token punctuation">-</span>arbitrage<span class="token punctuation">-</span>web/dist/;</pre></td></tr><tr><td data-num="37"></td><td><pre> index index.html index.htm;</pre></td></tr><tr><td data-num="38"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="39"></td><td><pre>}</pre></td></tr></table></figure><h4 id="其它"><a class="anchor" href="#其它">#</a> 其它</h4>
|
||
<ul>
|
||
<li>重新编译前需要先删除 dist 目录</li>
|
||
</ul>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">rm</span> dist <span class="token parameter variable">-fr</span></pre></td></tr><tr><td data-num="2"></td><td><pre></pre></td></tr><tr><td data-num="3"></td><td><pre><span class="token function">yarn</span> build</pre></td></tr></table></figure></content>
|
||
<category term="Linux" scheme="https://blog.jingxiyuan.cn/categories/Linux/" />
|
||
<category term="项目部署" scheme="https://blog.jingxiyuan.cn/categories/Linux/%E9%A1%B9%E7%9B%AE%E9%83%A8%E7%BD%B2/" />
|
||
<category term="Vue" scheme="https://blog.jingxiyuan.cn/categories/Linux/%E9%A1%B9%E7%9B%AE%E9%83%A8%E7%BD%B2/Vue/" />
|
||
<category term="vue" scheme="https://blog.jingxiyuan.cn/tags/vue/" />
|
||
<category term="NodeJS" scheme="https://blog.jingxiyuan.cn/tags/NodeJS/" />
|
||
<category term="yarn" scheme="https://blog.jingxiyuan.cn/tags/yarn/" />
|
||
<updated>2022-11-04T07:21:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/11/03/%E4%B8%8A%E7%8F%AD%E4%BA%86/</id>
|
||
<title>上班了</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/11/03/%E4%B8%8A%E7%8F%AD%E4%BA%86/"/>
|
||
<content type="html"><ul>
|
||
<li>终于又上班了。O (∩_∩) O~</li>
|
||
</ul>
|
||
</content>
|
||
<category term="生活" scheme="https://blog.jingxiyuan.cn/categories/%E7%94%9F%E6%B4%BB/" />
|
||
<category term="心情" scheme="https://blog.jingxiyuan.cn/categories/%E7%94%9F%E6%B4%BB/%E5%BF%83%E6%83%85/" />
|
||
<category term="心情" scheme="https://blog.jingxiyuan.cn/tags/%E5%BF%83%E6%83%85/" />
|
||
<updated>2022-11-03T03:25:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/11/02/2-dev-null%E5%92%8C-dev-null-2-1%E5%92%8C2-1-dev-null%E7%9A%84%E5%8C%BA%E5%88%AB/</id>
|
||
<title>2>/dev/null和>/dev/null 2>&1和2>&1>/dev/null的区别</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/11/02/2-dev-null%E5%92%8C-dev-null-2-1%E5%92%8C2-1-dev-null%E7%9A%84%E5%8C%BA%E5%88%AB/"/>
|
||
<content type="html"><h4 id="区别"><a class="anchor" href="#区别">#</a> 区别:</h4>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token operator"><span class="token file-descriptor important">2</span>></span>/dev/null</pre></td></tr></table></figure><p>意思就是把错误输出到 “黑洞”</p>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token operator">></span>/dev/null <span class="token operator"><span class="token file-descriptor important">2</span>></span><span class="token file-descriptor important">&amp;1</span></pre></td></tr></table></figure><p>默认情况是 1,也就是等同于 1&gt;/dev/null 2&gt;&amp;1。意思就是把标准输出重定向到 “黑洞”,还把错误输出 2 重定向到标准输出 1,也就是标准输出和错误输出都进了 “黑洞”</p>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token operator"><span class="token file-descriptor important">2</span>></span><span class="token file-descriptor important">&amp;1</span> <span class="token operator">></span>/dev/null</pre></td></tr></table></figure><p>意思就是把错误输出 2 重定向到标准出书 1,也就是屏幕,标准输出进了 “黑洞”,也就是标准输出进了黑洞,错误输出打印到屏幕</p>
|
||
<h4 id="解释"><a class="anchor" href="#解释">#</a> 解释:</h4>
|
||
<ol>
|
||
<li>
|
||
<p>文件描述符<br />
|
||
Linux 系统预留三个文件描述符:0、1 和 2,他们的意义如下所示:<br />
|
||
0—— 标准输入(stdin)<br />
|
||
略...<br />
|
||
1—— 标准输出(stdout)<br />
|
||
在当前目录下,有且只有一个文件名称为 a.txt 的文件,这时我们运行这个命令【ls a.txt】, 就会获得一个标准输出 stdout 的输出结果:a.txt<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/01/newscreen629761046.jpg" alt="" /><br />
|
||
2—— 标准错误(stderr)<br />
|
||
在当前目录下,有且只有一个文件名称为 a.txt 的文件,我们运行命令【ls b.txt】,我们就会获得一个标准错误 stderr 的输出结果 “ls:无法访问 b.txt:没有这样的文件或目录”。<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/01/newscreen629793578.jpg" alt="" /></p>
|
||
</li>
|
||
<li>
|
||
<p>重定向<br />
|
||
重定向的符号有两个:&gt; 或 &gt;&gt;,两者的区别是:前者会先清空文件,然后再写入内容,后者会将重定向的内容追加到现有文件的尾部。举例如下:</p>
|
||
</li>
|
||
</ol>
|
||
<ul>
|
||
<li>
|
||
<p>重定向标准输出 stdout<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/01/newscreen630033531.jpg" alt="" /><br />
|
||
如上图所示,对比没有添加重定向的操作,这条命令在使用之后并没有将 a.txt 打印到屏幕。在紧接的 cat 操作后,可以发现本来应该被输出的内容被记录到 stdout.txt 中。</p>
|
||
</li>
|
||
<li>
|
||
<p>重定向标准错误 stderr<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/01/newscreen630256640.jpg" alt="" /><br />
|
||
如上图所示,文件描述符 2,标准错误的重定向也是同样的原理被记录在了文件 stderr.txt 这个文件里面了。</p>
|
||
</li>
|
||
<li>
|
||
<p>可以将 stderr 单独定向到一个文件,stdout 重定向到另一个文件</p>
|
||
</li>
|
||
</ul>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">ls</span> b.txt <span class="token operator"><span class="token file-descriptor important">2</span>></span> stderr.txt <span class="token operator"><span class="token file-descriptor important">1</span>></span>stdout.txt</pre></td></tr></table></figure><ul>
|
||
<li>也可以将 stderr 和 stdout 重定向到同一个文件</li>
|
||
</ul>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">ls</span> b.txt <span class="token operator">></span> output.txt <span class="token operator"><span class="token file-descriptor important">2</span>></span><span class="token file-descriptor important">&amp;1</span></pre></td></tr></table></figure><ul>
|
||
<li>或采用下面的方法,可以少写几个字,能达到同样的效果</li>
|
||
</ul>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">ls</span> b.txt <span class="token operator">&amp;></span> output.txt</pre></td></tr><tr><td data-num="2"></td><td><pre><span class="token function">ls</span> b.txt <span class="token operator">>&amp;</span> output.txt <span class="token comment">#两个表达式效果一样的</span></pre></td></tr></table></figure><ol start="3">
|
||
<li>Linux 特殊文件<br />
|
||
/dev/null 是一个特殊的设备文件,这个文件接收到任何数据都会被丢弃。因此,null 这个设备通常也被称为位桶(bit bucket)或黑洞。<br />
|
||
所以,2&gt;/dev/null 的意思就是将标准错误 stderr 删掉。</li>
|
||
</ol>
|
||
</content>
|
||
<category term="Linux" scheme="https://blog.jingxiyuan.cn/categories/Linux/" />
|
||
<category term="Shell" scheme="https://blog.jingxiyuan.cn/categories/Linux/Shell/" />
|
||
<category term="Shell" scheme="https://blog.jingxiyuan.cn/tags/Shell/" />
|
||
<category term="2>&1" scheme="https://blog.jingxiyuan.cn/tags/2-1/" />
|
||
<updated>2022-11-02T08:29:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/11/01/360%E7%8B%AC%E7%AB%8B%E7%89%88%E5%B0%8F%E5%B7%A5%E5%85%B7/</id>
|
||
<title>360独立版小工具</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/11/01/360%E7%8B%AC%E7%AB%8B%E7%89%88%E5%B0%8F%E5%B7%A5%E5%85%B7/"/>
|
||
<content type="html"><h4 id="360独立版小工具"><a class="anchor" href="#360独立版小工具">#</a> 360 独立版小工具</h4>
|
||
<p><img data-src="https://file.jingxiyuan.cn/images/2022/11/01/newscreen623936500.jpg" alt="" /><br />
|
||
360 全家桶众说纷纭但工具箱还是挺实用的,这波小工具可以单独下载使用,有需要的朋友赶紧下载吧!</p>
|
||
<p><span class="exturl" data-url="aHR0cHM6Ly9wYW4uamluZ3hpeXVhbi5jbi8lRTglQkQlQUYlRTQlQkIlQjYvJUU3JUIzJUJCJUU3JUJCJTlGLzM2MCVFNSVCMCU4RiVFNSVCNyVBNSVFNSU4NSVCNw==">下载地址</span></p>
|
||
<h4 id="部分工具截图"><a class="anchor" href="#部分工具截图">#</a> 部分工具截图</h4>
|
||
<p><img data-src="https://file.jingxiyuan.cn/images/2022/11/01/1a2e50f738d4a8c1.png" alt="" /><br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/01/21d1ee247aa7c69f.png" alt="" /><br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/11/01/newscreen624392843.jpg" alt="" /></p>
|
||
</content>
|
||
<category term="Windows" scheme="https://blog.jingxiyuan.cn/categories/Windows/" />
|
||
<category term="工具" scheme="https://blog.jingxiyuan.cn/categories/Windows/%E5%B7%A5%E5%85%B7/" />
|
||
<category term="360小工具" scheme="https://blog.jingxiyuan.cn/tags/360%E5%B0%8F%E5%B7%A5%E5%85%B7/" />
|
||
<updated>2022-11-01T07:20:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/10/31/%E4%B8%80%E9%94%AE%E5%85%B3%E9%97%ADWindows10-11%E7%B3%BB%E7%BB%9F%E8%87%AA%E5%8A%A8%E6%9B%B4%E6%96%B0/</id>
|
||
<title>一键关闭Windows10/11系统自动更新</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/10/31/%E4%B8%80%E9%94%AE%E5%85%B3%E9%97%ADWindows10-11%E7%B3%BB%E7%BB%9F%E8%87%AA%E5%8A%A8%E6%9B%B4%E6%96%B0/"/>
|
||
<content type="html"><h4 id="介绍"><a class="anchor" href="#介绍">#</a> 介绍</h4>
|
||
<ul>
|
||
<li>当你经常需要在家远程到公司进行办公,或者开启了很多临时文件、文档、软件需要等到第二天继续之前的工作时,结果系统自行更新并重启了。是不是会让你非常郁闷。关闭系统自行更新就可以轻松解决此类问题。<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/31/afc55608b4c1b512.png" alt="" /></li>
|
||
</ul>
|
||
<h4 id="下载"><a class="anchor" href="#下载">#</a> 下载</h4>
|
||
<p><span class="exturl" data-url="aHR0cHM6Ly9tZXRhLmJveC5sZW5vdm8uY29tL2xpbmsvdmlldy8yNjdjOGU3Mzc5MTY0OWJmYmNlMmVkODQ0NGMxNjBjNg==">win10</span> / <span class="exturl" data-url="aHR0cHM6Ly9tZXRhLmJveC5sZW5vdm8uY29tL3YvbGluay92aWV3LzQwZGIwNTQ1ZThmNDQ4ZDc5OTBkZDE2YjU5NDgzNjhh">win11</span> / <span class="exturl" data-url="aHR0cHM6Ly9wYW4uamluZ3hpeXVhbi5jbi8lRTglQkQlQUYlRTQlQkIlQjYvJUU3JUIzJUJCJUU3JUJCJTlGL1dpbmRvd3MlRTglODclQUElRTUlOEElQTglRTYlOUIlQjQlRTYlOTYlQjA=">本地</span></p>
|
||
</content>
|
||
<category term="Windows" scheme="https://blog.jingxiyuan.cn/categories/Windows/" />
|
||
<category term="工具" scheme="https://blog.jingxiyuan.cn/categories/Windows/%E5%B7%A5%E5%85%B7/" />
|
||
<category term="Windows10" scheme="https://blog.jingxiyuan.cn/tags/Windows10/" />
|
||
<category term="Windows11" scheme="https://blog.jingxiyuan.cn/tags/Windows11/" />
|
||
<category term="自动更新" scheme="https://blog.jingxiyuan.cn/tags/%E8%87%AA%E5%8A%A8%E6%9B%B4%E6%96%B0/" />
|
||
<updated>2022-10-31T07:30:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/10/27/%E6%9E%81%E7%A9%BA%E9%97%B4web%E7%AB%AFhttps%E7%9B%B4%E8%BF%9Enginx%E9%85%8D%E7%BD%AE/</id>
|
||
<title>极空间web端https直连nginx配置</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/10/27/%E6%9E%81%E7%A9%BA%E9%97%B4web%E7%AB%AFhttps%E7%9B%B4%E8%BF%9Enginx%E9%85%8D%E7%BD%AE/"/>
|
||
<content type="html"><h4 id="介绍"><a class="anchor" href="#介绍">#</a> 介绍</h4>
|
||
<ul>
|
||
<li>ip 直连一般都映射了 5055, 但是直接访问 5055 极空间只提供了 http 协议,如果希望使用 https 协议则必须使用其它端口进行访问。以下方案采用 nginx 反向代理实现,端口使用 10000 举例。<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/27/2022-10-27-14-39-25.jpg" alt="" /></li>
|
||
</ul>
|
||
<h4 id="配置"><a class="anchor" href="#配置">#</a> 配置</h4>
|
||
<ol>
|
||
<li>需要先把 10000 端口在路由器上做好映射。</li>
|
||
<li>证书生成好并放置到 nginx 上。(证书生成方法不做介绍请自行百度)</li>
|
||
<li>http 跳转 https 配置</li>
|
||
</ol>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>server <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="2"></td><td><pre> if ($scheme = http) <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="3"></td><td><pre> rewrite ^(.<span class="token important">*)$</span> https<span class="token punctuation">:</span>//$host$1 permanent;</pre></td></tr><tr><td data-num="4"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="5"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr></table></figure><ol start="4">
|
||
<li>web 端口监听配置</li>
|
||
</ol>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token comment">#极空间 - web</span></pre></td></tr><tr><td data-num="2"></td><td><pre>server <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="3"></td><td><pre> listen 10000 ssl http2; <span class="token comment">#ipv4</span></pre></td></tr><tr><td data-num="4"></td><td><pre> listen <span class="token punctuation">[</span><span class="token punctuation">:</span><span class="token punctuation">:</span><span class="token punctuation">]</span><span class="token punctuation">:</span>10000 ssl http2; <span class="token comment">#ipv6</span></pre></td></tr><tr><td data-num="5"></td><td><pre> server_name xxx.xxx.com; <span class="token comment">#填写自己的域名,主域名或者子域名</span></pre></td></tr><tr><td data-num="6"></td><td><pre></pre></td></tr><tr><td data-num="7"></td><td><pre> <span class="token comment">#include /etc/nginx/conf.d/ssl/ssl_common.conf;</span></pre></td></tr><tr><td data-num="8"></td><td><pre> ssl_certificate_key /etc/nginx/conf.d/ssl/xxx.key; <span class="token comment">#加密证书</span></pre></td></tr><tr><td data-num="9"></td><td><pre> ssl_certificate /etc/nginx/conf.d/ssl/xxx.pem; <span class="token comment">#加密证书</span></pre></td></tr><tr><td data-num="10"></td><td><pre> ssl_session_timeout 1d;</pre></td></tr><tr><td data-num="11"></td><td><pre> ssl_session_cache shared<span class="token punctuation">:</span>MozSSL<span class="token punctuation">:</span>10m;</pre></td></tr><tr><td data-num="12"></td><td><pre> ssl_session_tickets off;</pre></td></tr><tr><td data-num="13"></td><td><pre> ssl_protocols TLSv1.2 TLSv1.3;</pre></td></tr><tr><td data-num="14"></td><td><pre> ssl_ciphers ECDHE<span class="token punctuation">-</span>ECDSA<span class="token punctuation">-</span>AES128<span class="token punctuation">-</span>GCM<span class="token punctuation">-</span>SHA256<span class="token punctuation">:</span>ECDHE<span class="token punctuation">-</span>RSA<span class="token punctuation">-</span>AES128<span class="token punctuation">-</span>GCM<span class="token punctuation">-</span>SHA256<span class="token punctuation">:</span>ECDHE<span class="token punctuation">-</span>ECDSA<span class="token punctuation">-</span>AES256<span class="token punctuation">-</span>GCM<span class="token punctuation">-</span>SHA384<span class="token punctuation">:</span>ECDHE<span class="token punctuation">-</span>RSA<span class="token punctuation">-</span>AES256<span class="token punctuation">-</span>GCM<span class="token punctuation">-</span>SHA384<span class="token punctuation">:</span>ECDHE<span class="token punctuation">-</span>ECDSA<span class="token punctuation">-</span>CHACHA20<span class="token punctuation">-</span>POLY1305<span class="token punctuation">:</span>ECDHE<span class="token punctuation">-</span>RSA<span class="token punctuation">-</span>CHACHA20<span class="token punctuation">-</span>POLY1305<span class="token punctuation">:</span>DHE<span class="token punctuation">-</span>RSA<span class="token punctuation">-</span>AES128<span class="token punctuation">-</span>GCM<span class="token punctuation">-</span>SHA256<span class="token punctuation">:</span>DHE<span class="token punctuation">-</span>RSA<span class="token punctuation">-</span>AES256<span class="token punctuation">-</span>GCM<span class="token punctuation">-</span>SHA384;</pre></td></tr><tr><td data-num="15"></td><td><pre> ssl_prefer_server_ciphers on;</pre></td></tr><tr><td data-num="16"></td><td><pre></pre></td></tr><tr><td data-num="17"></td><td><pre> <span class="token comment">#开启 OCSP stapling</span></pre></td></tr><tr><td data-num="18"></td><td><pre> ssl_stapling on;</pre></td></tr><tr><td data-num="19"></td><td><pre> ssl_stapling_verify on;</pre></td></tr><tr><td data-num="20"></td><td><pre></pre></td></tr><tr><td data-num="21"></td><td><pre> client_max_body_size 128M;</pre></td></tr><tr><td data-num="22"></td><td><pre></pre></td></tr><tr><td data-num="23"></td><td><pre> add_header Strict<span class="token punctuation">-</span>Transport<span class="token punctuation">-</span>Security "max<span class="token punctuation">-</span>age=31536000; includeSubdomains; preload";</pre></td></tr><tr><td data-num="24"></td><td><pre></pre></td></tr><tr><td data-num="25"></td><td><pre> proxy_send_timeout 180s; <span class="token comment">#设置发送超时时间</span></pre></td></tr><tr><td data-num="26"></td><td><pre> proxy_read_timeout 180s; <span class="token comment">#设置读取超时时间</span></pre></td></tr><tr><td data-num="27"></td><td><pre></pre></td></tr><tr><td data-num="28"></td><td><pre> <span class="token comment"># Prevent Information leaks</span></pre></td></tr><tr><td data-num="29"></td><td><pre> proxy_hide_header X<span class="token punctuation">-</span>Powered<span class="token punctuation">-</span>By;</pre></td></tr><tr><td data-num="30"></td><td><pre> proxy_hide_header Server;</pre></td></tr><tr><td data-num="31"></td><td><pre> proxy_hide_header X<span class="token punctuation">-</span>AspNetMvc<span class="token punctuation">-</span>Version;</pre></td></tr><tr><td data-num="32"></td><td><pre> proxy_hide_header X<span class="token punctuation">-</span>AspNet<span class="token punctuation">-</span>Version;</pre></td></tr><tr><td data-num="33"></td><td><pre></pre></td></tr><tr><td data-num="34"></td><td><pre> <span class="token comment"># http security headers</span></pre></td></tr><tr><td data-num="35"></td><td><pre> add_header X<span class="token punctuation">-</span>Content<span class="token punctuation">-</span>Type<span class="token punctuation">-</span>Options nosniff;</pre></td></tr><tr><td data-num="36"></td><td><pre> add_header Pragma no<span class="token punctuation">-</span>cache;</pre></td></tr><tr><td data-num="37"></td><td><pre> add_header Cache<span class="token punctuation">-</span>Control no<span class="token punctuation">-</span>store;</pre></td></tr><tr><td data-num="38"></td><td><pre> add_header X<span class="token punctuation">-</span>XSS<span class="token punctuation">-</span>Protection "1; mode=block";</pre></td></tr><tr><td data-num="39"></td><td><pre> add_header Referrer<span class="token punctuation">-</span>Policy origin<span class="token punctuation">-</span>when<span class="token punctuation">-</span>cross<span class="token punctuation">-</span>origin;</pre></td></tr><tr><td data-num="40"></td><td><pre> add_header X<span class="token punctuation">-</span>Permitted<span class="token punctuation">-</span>Cross<span class="token punctuation">-</span>Domain<span class="token punctuation">-</span>Policies none;</pre></td></tr><tr><td data-num="41"></td><td><pre> add_header X<span class="token punctuation">-</span>Frame<span class="token punctuation">-</span>Options SAMEORIGIN; <span class="token comment">#允许同域嵌套</span></pre></td></tr><tr><td data-num="42"></td><td><pre></pre></td></tr><tr><td data-num="43"></td><td><pre> <span class="token comment"># Add Security cookie flags</span></pre></td></tr><tr><td data-num="44"></td><td><pre> proxy_cookie_path ~(.<span class="token important">*)</span> "$1; SameSite=strict; secure; httponly";</pre></td></tr><tr><td data-num="45"></td><td><pre></pre></td></tr><tr><td data-num="46"></td><td><pre> <span class="token comment"># Path to the root of your installation</span></pre></td></tr><tr><td data-num="47"></td><td><pre> location / <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="48"></td><td><pre> proxy_intercept_errors on;</pre></td></tr><tr><td data-num="49"></td><td><pre> proxy_max_temp_file_size 0;</pre></td></tr><tr><td data-num="50"></td><td><pre> proxy_set_header Host $host;</pre></td></tr><tr><td data-num="51"></td><td><pre> proxy_set_header X<span class="token punctuation">-</span>Real<span class="token punctuation">-</span>IP $remote_addr;</pre></td></tr><tr><td data-num="52"></td><td><pre> proxy_set_header X<span class="token punctuation">-</span>Forwarded<span class="token punctuation">-</span>For $proxy_add_x_forwarded_for;</pre></td></tr><tr><td data-num="53"></td><td><pre> proxy_set_header X<span class="token punctuation">-</span>Forwarded<span class="token punctuation">-</span>Proto $scheme;</pre></td></tr><tr><td data-num="54"></td><td><pre> </pre></td></tr><tr><td data-num="55"></td><td><pre> proxy_pass http<span class="token punctuation">:</span>//极空间内网ip<span class="token punctuation">:</span>5055; <span class="token comment">#这里设置你自己要跳转的局域网应用;</span></pre></td></tr><tr><td data-num="56"></td><td><pre> proxy_redirect http<span class="token punctuation">:</span>//域名<span class="token punctuation">:</span>5055/home https<span class="token punctuation">:</span>//域名<span class="token punctuation">:</span>10000/home; <span class="token comment">#极空间在登陆后会跳转到 http 协议的 5055 端口,所以要在此替换为 https 协议的 10000 端口</span></pre></td></tr><tr><td data-num="57"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="58"></td><td><pre></pre></td></tr><tr><td data-num="59"></td><td><pre> error_page 500 502 503 504 /500.html;</pre></td></tr><tr><td data-num="60"></td><td><pre> error_page 400 404 /500.html;</pre></td></tr><tr><td data-num="61"></td><td><pre> location = /500.html <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="62"></td><td><pre> root /usr/share/nginx/html/; <span class="token comment">#错误 html</span></pre></td></tr><tr><td data-num="63"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="64"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr></table></figure><h4 id="问题"><a class="anchor" href="#问题">#</a> 问题</h4>
|
||
<ul>
|
||
<li>需要开启允许嵌套否则登陆后所有应用都是拒绝访问</li>
|
||
<li>需要配置 proxy_redirect 替换响应 url,否则会跳转到默认 http 协议的 5055 端口</li>
|
||
<li>如果配置 proxy_redirect 后无效可能需要清除浏览器缓存(F12 - 网络 - 右键点击 url 区域 - 清除浏览器缓存)</li>
|
||
</ul>
|
||
</content>
|
||
<category term="极空间" scheme="https://blog.jingxiyuan.cn/categories/%E6%9E%81%E7%A9%BA%E9%97%B4/" />
|
||
<category term="nginx" scheme="https://blog.jingxiyuan.cn/tags/nginx/" />
|
||
<category term="极空间" scheme="https://blog.jingxiyuan.cn/tags/%E6%9E%81%E7%A9%BA%E9%97%B4/" />
|
||
<category term="https" scheme="https://blog.jingxiyuan.cn/tags/https/" />
|
||
<category term="web" scheme="https://blog.jingxiyuan.cn/tags/web/" />
|
||
<updated>2022-10-27T05:34:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/10/22/%E6%9E%81%E7%A9%BA%E9%97%B4Docker%E7%89%88%E9%9D%92%E9%BE%99%E9%9D%A2%E6%9D%BF%E5%AE%89%E8%A3%85%E4%B8%8E%E9%85%8D%E7%BD%AE/</id>
|
||
<title>极空间Docker版青龙面板安装与配置</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/10/22/%E6%9E%81%E7%A9%BA%E9%97%B4Docker%E7%89%88%E9%9D%92%E9%BE%99%E9%9D%A2%E6%9D%BF%E5%AE%89%E8%A3%85%E4%B8%8E%E9%85%8D%E7%BD%AE/"/>
|
||
<content type="html"><h4 id="介绍"><a class="anchor" href="#介绍">#</a> 介绍</h4>
|
||
<ul>
|
||
<li>青龙面板是一个支持 python3、javascript、shell、typescript 的定时任务管理面板。它支持在线管理脚本、环境变量、配置文件,支持在线查看日志及支持多种方式的消息通知。</li>
|
||
</ul>
|
||
<h4 id="安装"><a class="anchor" href="#安装">#</a> 安装</h4>
|
||
<ul>
|
||
<li>本文使用的是<span class="exturl" data-url="aHR0cHM6Ly9odWIuZG9ja2VyLmNvbS9yL3doeW91ci9xaW5nbG9uZw=="> whyour/qinglong</span> 的镜像。</li>
|
||
<li>路径映射(由于青龙面板有 nodejs 环境,所以我把 hexo 博客的编译也放置在上面,再把 nginx 的 html 映射过来,这样就可以直接编译发布了。)<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/24/2022-10-24-19-29-06.jpg" alt="" /></li>
|
||
</ul>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token comment">#青龙面板装载路径</span></pre></td></tr><tr><td data-num="2"></td><td><pre>/ql/data</pre></td></tr><tr><td data-num="3"></td><td><pre><span class="token comment">#博客装载路径(如果你不部署 hexo 博客可以不用配置)</span></pre></td></tr><tr><td data-num="4"></td><td><pre>/root/.ssh <span class="token comment">#ssh 证书文件(如果你不用把 hexo 推送到 git 上可以不用配置)</span></pre></td></tr><tr><td data-num="5"></td><td><pre>/blog <span class="token comment">#hexo 博客编译目录</span></pre></td></tr><tr><td data-num="6"></td><td><pre>/blog/nginx_blog <span class="token comment">#nginx 上放置博客的目录(例如:/Docker/nginx/html/blog)</span></pre></td></tr></table></figure><ul>
|
||
<li>端口<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/22/2022-10-22-11-02-195ea093b249c53244.jpg" alt="" /><br />
|
||
<code>4000端口是hexo-admin使用的,如果你不用可以不配置</code></li>
|
||
<li>环境<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/22/2022-10-22-11-02-19a0822966d88a012e.jpg" alt="" /></li>
|
||
<li>登录<br />
|
||
地址:<span class="exturl" data-url="aHR0cDovL3huLS1JUC1odThkeTcwZTRtNWE6NTcwMA==">http:// 极空间 IP:5700</span><br />
|
||
默认账号:admin<br />
|
||
默认密码:admin</li>
|
||
</ul>
|
||
<h4 id="配置"><a class="anchor" href="#配置">#</a> 配置</h4>
|
||
<ul>
|
||
<li>我主要用青龙面板跑京东的脚本,所以也只介绍相关的配置方法</li>
|
||
<li>定时任务 (我使用的是 KingRan/KR 的集合库,以下是拉取命令)<br />
|
||
<code>ql repo https://github.com/KingRan/KR.git &quot;jd_|jx_|jdCookie&quot; &quot;activity|backUp|wskey&quot; &quot;^jd[^_]|USER|utils|function|sign|sendNotify|ql|JDJR&quot;</code></li>
|
||
<li>定时规则(我是每 3 小时拉取一次,不要拉取太频繁否则可能被封)<br />
|
||
<code>0 */3 * * *</code></li>
|
||
<li>环境变量</li>
|
||
</ul>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>名称:JD_COOKIE</pre></td></tr><tr><td data-num="2"></td><td><pre>值:web京东登陆后按F12在网络tab页中的请求内查找cookie,然后复制pt_key=到pt_pin=等</pre></td></tr></table></figure><ul>
|
||
<li>配置文件 (主要修改和添加以下配置)</li>
|
||
</ul>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>repo命令拉取脚本时需要拉取的文件后缀,直接写文件后缀名即可</pre></td></tr><tr><td data-num="2"></td><td><pre>RepoFileExtensions="js py ts"</pre></td></tr><tr><td data-num="3"></td><td><pre>钉钉(消息推送)</pre></td></tr><tr><td data-num="4"></td><td><pre>export DD_BOT_TOKEN=</pre></td></tr><tr><td data-num="5"></td><td><pre>export DD_BOT_SECRET=</pre></td></tr><tr><td data-num="6"></td><td><pre><span class="token comment">## 开卡</span></pre></td></tr><tr><td data-num="7"></td><td><pre>export guaopencard_All="true"</pre></td></tr><tr><td data-num="8"></td><td><pre>export guaopencard_addSku_All="true"</pre></td></tr><tr><td data-num="9"></td><td><pre>export guaopencardRun_All="true"</pre></td></tr><tr><td data-num="10"></td><td><pre>export guaopencard_draw="true"</pre></td></tr><tr><td data-num="11"></td><td><pre>export JD_TRY="true"</pre></td></tr><tr><td data-num="12"></td><td><pre>export exjxbeans="true"</pre></td></tr><tr><td data-num="13"></td><td><pre>export DY_OPENALL="true"</pre></td></tr><tr><td data-num="14"></td><td><pre><span class="token comment">#抽奖</span></pre></td></tr><tr><td data-num="15"></td><td><pre>export opencard_draw=3</pre></td></tr><tr><td data-num="16"></td><td><pre><span class="token comment">#开启脚本依赖文件缺失修复</span></pre></td></tr><tr><td data-num="17"></td><td><pre>export ec_fix_dep="true" </pre></td></tr><tr><td data-num="18"></td><td><pre><span class="token comment">#开启脚本依赖文件更新</span></pre></td></tr><tr><td data-num="19"></td><td><pre>export ec_re_dep="true" </pre></td></tr><tr><td data-num="20"></td><td><pre><span class="token comment">#清空购物车</span></pre></td></tr><tr><td data-num="21"></td><td><pre>export JD_CART_REMOVE="true"</pre></td></tr><tr><td data-num="22"></td><td><pre>export JD_CART="true"</pre></td></tr><tr><td data-num="23"></td><td><pre><span class="token comment">#去掉多余的双十一红包脚本</span></pre></td></tr><tr><td data-num="24"></td><td><pre>export FLCODE=''</pre></td></tr><tr><td data-num="25"></td><td><pre><span class="token comment">#加购物车抽奖</span></pre></td></tr><tr><td data-num="26"></td><td><pre>export RUN_CAR=true</pre></td></tr><tr><td data-num="27"></td><td><pre><span class="token comment">#停用小额免密支付</span></pre></td></tr><tr><td data-num="28"></td><td><pre>export JD_PAY_CONTRACT=true</pre></td></tr></table></figure><ul>
|
||
<li>依赖管理</li>
|
||
</ul>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token comment">#nodejs 依赖</span></pre></td></tr><tr><td data-num="2"></td><td><pre>crypto<span class="token punctuation">-</span>js </pre></td></tr><tr><td data-num="3"></td><td><pre>prettytable </pre></td></tr><tr><td data-num="4"></td><td><pre>dotenv </pre></td></tr><tr><td data-num="5"></td><td><pre>jsdom </pre></td></tr><tr><td data-num="6"></td><td><pre>date<span class="token punctuation">-</span>fns </pre></td></tr><tr><td data-num="7"></td><td><pre>tough<span class="token punctuation">-</span>cookie </pre></td></tr><tr><td data-num="8"></td><td><pre>tslib </pre></td></tr><tr><td data-num="9"></td><td><pre>ws@7.4.3 </pre></td></tr><tr><td data-num="10"></td><td><pre>ts<span class="token punctuation">-</span>md5 </pre></td></tr><tr><td data-num="11"></td><td><pre>jsdom <span class="token punctuation">-</span>g </pre></td></tr><tr><td data-num="12"></td><td><pre>jieba </pre></td></tr><tr><td data-num="13"></td><td><pre>fs </pre></td></tr><tr><td data-num="14"></td><td><pre>form<span class="token punctuation">-</span>data </pre></td></tr><tr><td data-num="15"></td><td><pre>json5 </pre></td></tr><tr><td data-num="16"></td><td><pre>global<span class="token punctuation">-</span>agent </pre></td></tr><tr><td data-num="17"></td><td><pre>png<span class="token punctuation">-</span>js </pre></td></tr><tr><td data-num="18"></td><td><pre>@types/node </pre></td></tr><tr><td data-num="19"></td><td><pre>require </pre></td></tr><tr><td data-num="20"></td><td><pre>typescript </pre></td></tr><tr><td data-num="21"></td><td><pre>js<span class="token punctuation">-</span>base64 </pre></td></tr><tr><td data-num="22"></td><td><pre>axios</pre></td></tr><tr><td data-num="23"></td><td><pre><span class="token comment">#pythone 依赖</span></pre></td></tr><tr><td data-num="24"></td><td><pre>requests </pre></td></tr><tr><td data-num="25"></td><td><pre>canvas </pre></td></tr><tr><td data-num="26"></td><td><pre>ping3 </pre></td></tr><tr><td data-num="27"></td><td><pre>jieba </pre></td></tr><tr><td data-num="28"></td><td><pre>aiohttp </pre></td></tr><tr><td data-num="29"></td><td><pre>PyExecJS</pre></td></tr><tr><td data-num="30"></td><td><pre><span class="token comment">#Linux 依赖</span></pre></td></tr><tr><td data-num="31"></td><td><pre>bizCode</pre></td></tr><tr><td data-num="32"></td><td><pre>bizMsg</pre></td></tr><tr><td data-num="33"></td><td><pre>lxml</pre></td></tr></table></figure><h4 id="其它"><a class="anchor" href="#其它">#</a> 其它</h4>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token comment">#配置国内源</span></pre></td></tr><tr><td data-num="2"></td><td><pre>pip config <span class="token parameter variable">--global</span> <span class="token builtin class-name">set</span> global.index-url https://mirrors.aliyun.com/pypi/simple/</pre></td></tr><tr><td data-num="3"></td><td><pre>pip config <span class="token parameter variable">--global</span> <span class="token builtin class-name">set</span> install.trusted-host https://mirrors.aliyun.com</pre></td></tr><tr><td data-num="4"></td><td><pre></pre></td></tr><tr><td data-num="5"></td><td><pre><span class="token comment">#升级 pip</span></pre></td></tr><tr><td data-num="6"></td><td><pre>pip <span class="token function">install</span> <span class="token parameter variable">--upgrade</span> pip</pre></td></tr><tr><td data-num="7"></td><td><pre></pre></td></tr><tr><td data-num="8"></td><td><pre><span class="token comment">#更新青龙</span></pre></td></tr><tr><td data-num="9"></td><td><pre>ql update</pre></td></tr><tr><td data-num="10"></td><td><pre></pre></td></tr><tr><td data-num="11"></td><td><pre><span class="token comment">#已知要安装的依赖(不安装部分脚本任务会失败)</span></pre></td></tr><tr><td data-num="12"></td><td><pre><span class="token function">pnpm</span> <span class="token function">install</span> ds</pre></td></tr><tr><td data-num="13"></td><td><pre></pre></td></tr><tr><td data-num="14"></td><td><pre><span class="token comment">#一键安装所有依赖(基于 Faker 一键脚本安装的青龙</span></pre></td></tr><tr><td data-num="15"></td><td><pre>可通过执行/ql/data/scripts下的QLDependency.sh脚本安装,如脚本已经更新则通过下面命令执行</pre></td></tr><tr><td data-num="16"></td><td><pre><span class="token function">curl</span> <span class="token parameter variable">-fsSL</span> https://git.metauniverse-cn.com/https://raw.githubusercontent.com/shufflewzc/QLDependency/main/Shell/QLOneKeyDependency.sh <span class="token operator">|</span> <span class="token function">sh</span></pre></td></tr><tr><td data-num="17"></td><td><pre></pre></td></tr><tr><td data-num="18"></td><td><pre><span class="token comment">#一般出现这种错误:(缺依赖)</span></pre></td></tr><tr><td data-num="19"></td><td><pre>Error: Cannot <span class="token function">find</span> module <span class="token string">'xx'</span></pre></td></tr><tr><td data-num="20"></td><td><pre>执行pnpm <span class="token function">install</span> xxx</pre></td></tr><tr><td data-num="21"></td><td><pre></pre></td></tr><tr><td data-num="22"></td><td><pre><span class="token comment">#一般出现这种错误:(缺文件)</span></pre></td></tr><tr><td data-num="23"></td><td><pre>Error: Cannot <span class="token function">find</span> module <span class="token string">'./xx'</span></pre></td></tr><tr><td data-num="24"></td><td><pre>那就是拉库命令不完整,请检查或复制完整的拉库命</pre></td></tr><tr><td data-num="25"></td><td><pre></pre></td></tr><tr><td data-num="26"></td><td><pre><span class="token comment">#Python3 依赖安装失败修复(基于 Faker 一键脚本安装的青龙)</span></pre></td></tr><tr><td data-num="27"></td><td><pre><span class="token function">curl</span> <span class="token parameter variable">-sS</span> https://bootstrap.pypa.io/get-pip.py <span class="token operator">|</span> python3</pre></td></tr></table></figure></content>
|
||
<category term="极空间" scheme="https://blog.jingxiyuan.cn/categories/%E6%9E%81%E7%A9%BA%E9%97%B4/" />
|
||
<category term="Docker" scheme="https://blog.jingxiyuan.cn/categories/%E6%9E%81%E7%A9%BA%E9%97%B4/Docker/" />
|
||
<category term="docker" scheme="https://blog.jingxiyuan.cn/tags/docker/" />
|
||
<category term="青龙面板" scheme="https://blog.jingxiyuan.cn/tags/%E9%9D%92%E9%BE%99%E9%9D%A2%E6%9D%BF/" />
|
||
<category term="定时任务" scheme="https://blog.jingxiyuan.cn/tags/%E5%AE%9A%E6%97%B6%E4%BB%BB%E5%8A%A1/" />
|
||
<updated>2022-10-22T02:44:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/10/21/Hexo-Theme-Shoka-Valine%E8%AF%84%E8%AE%BA%E9%85%8D%E7%BD%AE/</id>
|
||
<title>Hexo + Theme.Shoka + Valine评论配置</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/10/21/Hexo-Theme-Shoka-Valine%E8%AF%84%E8%AE%BA%E9%85%8D%E7%BD%AE/"/>
|
||
<content type="html"><ul>
|
||
<li>valine 评论需要 LeanCloud 支持</li>
|
||
</ul>
|
||
<h4 id="leancloud注册"><a class="anchor" href="#leancloud注册">#</a> LeanCloud 注册</h4>
|
||
<ol>
|
||
<li>到<span class="exturl" data-url="aHR0cHM6Ly93d3cubGVhbmNsb3VkLmNu"> LeanCloud</span> 网站完成注册。</li>
|
||
<li>创建应用。<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/21/2022-10-21-11-54-32.jpg" alt="" /></li>
|
||
<li>名称随便取,方案看自己选择。开发版免费但是有限制,商业版收费无限制。<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/21/2022-10-21-11-54-32516c410640de936a.jpg" alt="" /></li>
|
||
<li>点击配置按钮进行配置。<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/21/2022-10-21-11-54-32267554cf6f62d3eb.jpg" alt="" /></li>
|
||
<li>点击设置 - 应用凭证可获取 App ID 和 App Key<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/21/2022-10-21-11-54-328c330a6fdd48d2c3.jpg" alt="" /></li>
|
||
<li>点击设置 - 安全中心根据自己的需求配置<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/21/2022-10-21-11-54-32204f14d87e95b59e.jpg" alt="" /></li>
|
||
</ol>
|
||
<h4 id="修改themeshoka配置"><a class="anchor" href="#修改themeshoka配置">#</a> 修改 Theme.Shoka 配置</h4>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token key atrule">valine</span><span class="token punctuation">:</span></pre></td></tr><tr><td data-num="2"></td><td><pre> appId<span class="token punctuation">:</span> 粘贴5中获取的App ID <span class="token comment">#Your_appId</span></pre></td></tr><tr><td data-num="3"></td><td><pre> <span class="token key atrule">appKey</span><span class="token punctuation">:</span> 粘贴5中获取的App Key <span class="token comment">#Your_appkey</span></pre></td></tr><tr><td data-num="4"></td><td><pre> <span class="token key atrule">placeholder</span><span class="token punctuation">:</span> ヽ(○´∀`)ノ♪欢迎畅所欲言 <span class="token comment"># Comment box placeholder</span></pre></td></tr><tr><td data-num="5"></td><td><pre> <span class="token key atrule">avatar</span><span class="token punctuation">:</span> mp <span class="token comment">#默认头像设置 Gravatar style : mp, identicon, monsterid, wavatar, robohash, retro</span></pre></td></tr><tr><td data-num="6"></td><td><pre> <span class="token key atrule">pageSize</span><span class="token punctuation">:</span> <span class="token number">10</span> <span class="token comment"># Pagination size</span></pre></td></tr><tr><td data-num="7"></td><td><pre> <span class="token key atrule">lang</span><span class="token punctuation">:</span> zh<span class="token punctuation">-</span>CN</pre></td></tr><tr><td data-num="8"></td><td><pre> <span class="token key atrule">visitor</span><span class="token punctuation">:</span> <span class="token boolean important">true</span> <span class="token comment"># Article reading statistic 这个要设置为 false,以免与 leancloud_visitors 突冲 </span></pre></td></tr><tr><td data-num="9"></td><td><pre> <span class="token key atrule">NoRecordIP</span><span class="token punctuation">:</span> <span class="token boolean important">false</span> <span class="token comment"># Whether to record the commenter IP</span></pre></td></tr><tr><td data-num="10"></td><td><pre> <span class="token key atrule">serverURLs</span><span class="token punctuation">:</span> <span class="token comment"># When the custom domain name is enabled, fill it in here (it will be detected automatically by default, no need to fill in)</span></pre></td></tr><tr><td data-num="11"></td><td><pre> <span class="token key atrule">powerMode</span><span class="token punctuation">:</span> <span class="token boolean important">true</span></pre></td></tr><tr><td data-num="12"></td><td><pre> <span class="token key atrule">tagMeta</span><span class="token punctuation">:</span></pre></td></tr><tr><td data-num="13"></td><td><pre> <span class="token key atrule">visitor</span><span class="token punctuation">:</span> 新朋友</pre></td></tr><tr><td data-num="14"></td><td><pre> <span class="token key atrule">master</span><span class="token punctuation">:</span> 博主</pre></td></tr><tr><td data-num="15"></td><td><pre> <span class="token key atrule">friend</span><span class="token punctuation">:</span> 小伙伴</pre></td></tr><tr><td data-num="16"></td><td><pre> <span class="token key atrule">investor</span><span class="token punctuation">:</span> 金主粑粑</pre></td></tr><tr><td data-num="17"></td><td><pre> <span class="token key atrule">tagColor</span><span class="token punctuation">:</span></pre></td></tr><tr><td data-num="18"></td><td><pre> <span class="token key atrule">master</span><span class="token punctuation">:</span> <span class="token string">"var(--color-orange)"</span></pre></td></tr><tr><td data-num="19"></td><td><pre> <span class="token key atrule">friend</span><span class="token punctuation">:</span> <span class="token string">"var(--color-aqua)"</span></pre></td></tr><tr><td data-num="20"></td><td><pre> <span class="token key atrule">investor</span><span class="token punctuation">:</span> <span class="token string">"var(--color-pink)"</span></pre></td></tr><tr><td data-num="21"></td><td><pre> <span class="token key atrule">tagMember</span><span class="token punctuation">:</span></pre></td></tr><tr><td data-num="22"></td><td><pre> <span class="token key atrule">master</span><span class="token punctuation">:</span></pre></td></tr><tr><td data-num="23"></td><td><pre> <span class="token comment"># - hash of master@email.com</span></pre></td></tr><tr><td data-num="24"></td><td><pre> <span class="token comment"># - hash of master2@email.com</span></pre></td></tr><tr><td data-num="25"></td><td><pre> <span class="token key atrule">friend</span><span class="token punctuation">:</span></pre></td></tr><tr><td data-num="26"></td><td><pre> <span class="token comment"># - hash of friend@email.com</span></pre></td></tr><tr><td data-num="27"></td><td><pre> <span class="token comment"># - hash of friend2@email.com</span></pre></td></tr><tr><td data-num="28"></td><td><pre> <span class="token key atrule">investor</span><span class="token punctuation">:</span></pre></td></tr><tr><td data-num="29"></td><td><pre> <span class="token comment"># - hash of investor1@email.com</span></pre></td></tr></table></figure></content>
|
||
<category term="极空间" scheme="https://blog.jingxiyuan.cn/categories/%E6%9E%81%E7%A9%BA%E9%97%B4/" />
|
||
<category term="Docker" scheme="https://blog.jingxiyuan.cn/categories/%E6%9E%81%E7%A9%BA%E9%97%B4/Docker/" />
|
||
<category term="Hexo" scheme="https://blog.jingxiyuan.cn/categories/%E6%9E%81%E7%A9%BA%E9%97%B4/Docker/Hexo/" />
|
||
<category term="博客" scheme="https://blog.jingxiyuan.cn/tags/%E5%8D%9A%E5%AE%A2/" />
|
||
<category term="Hexo" scheme="https://blog.jingxiyuan.cn/tags/Hexo/" />
|
||
<category term="Shoka" scheme="https://blog.jingxiyuan.cn/tags/Shoka/" />
|
||
<category term="Valine" scheme="https://blog.jingxiyuan.cn/tags/Valine/" />
|
||
<category term="评论" scheme="https://blog.jingxiyuan.cn/tags/%E8%AF%84%E8%AE%BA/" />
|
||
<updated>2022-10-21T03:48:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/10/21/%E6%9E%81%E7%A9%BA%E9%97%B4Docker%E7%89%88mariadb%E5%AE%89%E8%A3%85%E4%B8%8E%E9%85%8D%E7%BD%AE/</id>
|
||
<title>极空间Docker版mariadb安装与配置</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/10/21/%E6%9E%81%E7%A9%BA%E9%97%B4Docker%E7%89%88mariadb%E5%AE%89%E8%A3%85%E4%B8%8E%E9%85%8D%E7%BD%AE/"/>
|
||
<content type="html"><h4 id="介绍"><a class="anchor" href="#介绍">#</a> 介绍</h4>
|
||
<ul>
|
||
<li>mariadb 属于 mysql 的一个分支,完全兼容 mysql,使用方式和 mysql 无区别。</li>
|
||
</ul>
|
||
<h4 id="安装"><a class="anchor" href="#安装">#</a> 安装</h4>
|
||
<ul>
|
||
<li>本文介绍安装的镜像为 linuxserver_mariadb 的 10.5.13-r0-ls45,原则上使用最新版即可</li>
|
||
<li>配置文件映射<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/21/2022-10-21-09-20-56.jpg" alt="" /></li>
|
||
<li>端口<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/21/2022-10-21-09-21-49.jpg" alt="" /></li>
|
||
<li>环境(MYSQL_ROOT_PASSWORD 为数据库 root 用户密码)<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/21/2022-10-21-09-22-43.jpg" alt="" /></li>
|
||
<li>到此已经可以在内网使用了,<a href="https://blog.jingxiyuan.cn/2022/11/13/%E6%95%B0%E6%8D%AE%E5%BA%93%E7%AE%A1%E7%90%86%E5%B7%A5%E5%85%B7/">连接方法</a>同 mysql 一样</li>
|
||
</ul>
|
||
<div class="note info">
|
||
<p>按本文设置内网连接信息为:<br />
|
||
ip:极空间内网 ip<br />
|
||
端口:3306<br />
|
||
用户名:root<br />
|
||
密码:<span class="red">MYSQL_ROOT_PASSWORD</span> 对应的值</p>
|
||
</div>
|
||
<h4 id="配置"><a class="anchor" href="#配置">#</a> 配置</h4>
|
||
<ul>
|
||
<li>配置 nginx 反向代理</li>
|
||
</ul>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>stream <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="2"></td><td><pre> </pre></td></tr><tr><td data-num="3"></td><td><pre> <span class="token comment">#极空间 - docker-mariadb</span></pre></td></tr><tr><td data-num="4"></td><td><pre> upstream mariadb <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="5"></td><td><pre> hash $remote_addr consistent;</pre></td></tr><tr><td data-num="6"></td><td><pre> server 192.168.0.254<span class="token punctuation">:</span>3306; <span class="token comment">#192.168.0.254 为极空间内网 ip</span></pre></td></tr><tr><td data-num="7"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="8"></td><td><pre></pre></td></tr><tr><td data-num="9"></td><td><pre> server <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="10"></td><td><pre> listen 8090; <span class="token comment">#8090 为 nginx 监听端口,需要在路由器开放 8090 端口并映射给极空间内网 IP(nginx 部署在极空间上)</span></pre></td></tr><tr><td data-num="11"></td><td><pre></pre></td></tr><tr><td data-num="12"></td><td><pre> proxy_connect_timeout 30s;</pre></td></tr><tr><td data-num="13"></td><td><pre> proxy_timeout 300s;</pre></td></tr><tr><td data-num="14"></td><td><pre> proxy_pass mariadb;</pre></td></tr><tr><td data-num="15"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="16"></td><td><pre> </pre></td></tr><tr><td data-num="17"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr></table></figure></content>
|
||
<category term="极空间" scheme="https://blog.jingxiyuan.cn/categories/%E6%9E%81%E7%A9%BA%E9%97%B4/" />
|
||
<category term="Docker" scheme="https://blog.jingxiyuan.cn/categories/%E6%9E%81%E7%A9%BA%E9%97%B4/Docker/" />
|
||
<category term="极空间" scheme="https://blog.jingxiyuan.cn/tags/%E6%9E%81%E7%A9%BA%E9%97%B4/" />
|
||
<category term="mysql" scheme="https://blog.jingxiyuan.cn/tags/mysql/" />
|
||
<category term="Docker" scheme="https://blog.jingxiyuan.cn/tags/Docker/" />
|
||
<category term="mariadb" scheme="https://blog.jingxiyuan.cn/tags/mariadb/" />
|
||
<updated>2022-10-21T01:06:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/10/20/%E6%9E%81%E7%A9%BA%E9%97%B4Docker%E7%89%88Wordpress%E5%AE%89%E8%A3%85%E4%B8%8E%E9%85%8D%E7%BD%AE/</id>
|
||
<title>极空间Docker版Wordpress安装与配置</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/10/20/%E6%9E%81%E7%A9%BA%E9%97%B4Docker%E7%89%88Wordpress%E5%AE%89%E8%A3%85%E4%B8%8E%E9%85%8D%E7%BD%AE/"/>
|
||
<content type="html"><h4 id="安装"><a class="anchor" href="#安装">#</a> 安装</h4>
|
||
<ul>
|
||
<li>下载最新版 wordpress 镜像,如极空间无法下载,可到<span class="exturl" data-url="aHR0cHM6Ly9wdWxsaW1hZ2UucGFzc2VybWEuY29tLw=="> passerma 网站</span>下载。</li>
|
||
<li>需要先在 mysql 中创建给 wordpress 使用的库。</li>
|
||
<li>文件路径映射(目前极空间不能映射到高速盘,否则无法启动)。<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/20/2022-10-20-08-58-31.png" alt="" /></li>
|
||
<li>端口映射。<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/20/2022-10-20-08-58-56.png" alt="" /></li>
|
||
<li>通过映射的端口访问安装界面(一定要通过最终访问的页面进行安装,否则修改配置比较麻烦。如最终是域名访问,就先把域名解析代理等先配置好,再通过域名访问安装)。</li>
|
||
</ul>
|
||
<h4 id="配置"><a class="anchor" href="#配置">#</a> 配置</h4>
|
||
<ul>
|
||
<li>如需使用 https 访问,需要在 wp-config.php 中加入以下代码,否则资源文件无法访问。</li>
|
||
</ul>
|
||
<figure class="highlight php"><figcaption data-lang="PHP"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token keyword">if</span><span class="token punctuation">(</span><span class="token punctuation">(</span><span class="token operator">!</span><span class="token keyword">empty</span><span class="token punctuation">(</span> <span class="token variable">$_SERVER</span><span class="token punctuation">[</span><span class="token string single-quoted-string">'HTTP_X_FORWARDED_HOST'</span><span class="token punctuation">]</span><span class="token punctuation">)</span><span class="token punctuation">)</span> <span class="token operator">||</span> <span class="token punctuation">(</span><span class="token operator">!</span><span class="token keyword">empty</span><span class="token punctuation">(</span> <span class="token variable">$_SERVER</span><span class="token punctuation">[</span><span class="token string single-quoted-string">'HTTP_X_FORWARDED_FOR'</span><span class="token punctuation">]</span><span class="token punctuation">)</span><span class="token punctuation">)</span> <span class="token punctuation">)</span> <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="2"></td><td><pre> <span class="token variable">$_SERVER</span><span class="token punctuation">[</span><span class="token string single-quoted-string">'HTTP_HOST'</span><span class="token punctuation">]</span> <span class="token operator">=</span> <span class="token variable">$_SERVER</span><span class="token punctuation">[</span><span class="token string single-quoted-string">'HTTP_X_FORWARDED_HOST'</span><span class="token punctuation">]</span><span class="token punctuation">;</span></pre></td></tr><tr><td data-num="3"></td><td><pre> <span class="token variable">$_SERVER</span><span class="token punctuation">[</span><span class="token string single-quoted-string">'HTTPS'</span><span class="token punctuation">]</span> <span class="token operator">=</span> <span class="token string single-quoted-string">'on'</span><span class="token punctuation">;</span></pre></td></tr><tr><td data-num="4"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr></table></figure><ul>
|
||
<li>后台安装插件时如果跳转到 ftp 配置,则需要在 wp-config.php 中加入以下代码,并到 wp-content 目录下创建 tmp 目录,最后还需要给 tmp 目录赋予读写权限。</li>
|
||
</ul>
|
||
<figure class="highlight php"><figcaption data-lang="PHP"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">define</span><span class="token punctuation">(</span><span class="token string single-quoted-string">'WP_TEMP_DIR'</span><span class="token punctuation">,</span> <span class="token constant">ABSPATH</span><span class="token operator">.</span><span class="token string single-quoted-string">'wp-content/tmp'</span><span class="token punctuation">)</span><span class="token punctuation">;</span></pre></td></tr><tr><td data-num="2"></td><td><pre><span class="token function">define</span><span class="token punctuation">(</span><span class="token string single-quoted-string">'FS_METHOD'</span><span class="token punctuation">,</span> <span class="token string single-quoted-string">'direct'</span><span class="token punctuation">)</span><span class="token punctuation">;</span></pre></td></tr><tr><td data-num="3"></td><td><pre><span class="token function">define</span><span class="token punctuation">(</span><span class="token string single-quoted-string">'FS_CHMOD_DIR'</span><span class="token punctuation">,</span> <span class="token number">0777</span><span class="token punctuation">)</span><span class="token punctuation">;</span></pre></td></tr><tr><td data-num="4"></td><td><pre><span class="token function">define</span><span class="token punctuation">(</span><span class="token string single-quoted-string">'FS_CHMOD_FILE'</span><span class="token punctuation">,</span> <span class="token number">0777</span><span class="token punctuation">)</span><span class="token punctuation">;</span></pre></td></tr></table></figure><ul>
|
||
<li>目录和文件所有者、组会自动变为 root,目前我是通过访问页面时通过命令修正。暂时未发现问题,如果不行则只能通过定时任务来定时修正了。需要在 wp-config.php 中加入以下代码。</li>
|
||
</ul>
|
||
<figure class="highlight php"><figcaption data-lang="PHP"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">chown</span><span class="token punctuation">(</span><span class="token string single-quoted-string">'/var/www/html'</span><span class="token punctuation">,</span> <span class="token string single-quoted-string">'www-data'</span><span class="token punctuation">)</span><span class="token punctuation">;</span></pre></td></tr><tr><td data-num="2"></td><td><pre><span class="token function">chgrp</span><span class="token punctuation">(</span><span class="token string single-quoted-string">'/var/www/html'</span><span class="token punctuation">,</span> <span class="token string single-quoted-string">'www-data'</span><span class="token punctuation">)</span><span class="token punctuation">;</span></pre></td></tr><tr><td data-num="3"></td><td><pre><span class="token function">chmod</span><span class="token punctuation">(</span><span class="token string single-quoted-string">'/var/www/html/wp-content/plugins'</span><span class="token punctuation">,</span> <span class="token number">0777</span><span class="token punctuation">)</span><span class="token punctuation">;</span></pre></td></tr><tr><td data-num="4"></td><td><pre><span class="token function">chmod</span><span class="token punctuation">(</span><span class="token string single-quoted-string">'/var/www/html/wp-content/themes'</span><span class="token punctuation">,</span> <span class="token number">0777</span><span class="token punctuation">)</span><span class="token punctuation">;</span></pre></td></tr><tr><td data-num="5"></td><td><pre><span class="token function">chmod</span><span class="token punctuation">(</span><span class="token string single-quoted-string">'/var/www/html/wp-content/tmp'</span><span class="token punctuation">,</span> <span class="token number">0777</span><span class="token punctuation">)</span><span class="token punctuation">;</span></pre></td></tr></table></figure><ul>
|
||
<li>隐藏后台访问需要在 wp-login.php 中加入以下代码,key、value 和 https://www.xxx.com/ 需要修改为自己的。修改后只能通过 https://www.xxx.com/wp-login.php?key=value 访问,其它访问需要登录的页面都会跳转到配置的 https://www.xxx.com/ 地址。</li>
|
||
</ul>
|
||
<figure class="highlight php"><figcaption data-lang="PHP"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token keyword">if</span><span class="token punctuation">(</span><span class="token variable">$_GET</span><span class="token punctuation">[</span><span class="token string single-quoted-string">'key'</span><span class="token punctuation">]</span> <span class="token operator">!=</span> <span class="token string single-quoted-string">'value'</span><span class="token punctuation">)</span> <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="2"></td><td><pre> <span class="token function">header</span><span class="token punctuation">(</span><span class="token string single-quoted-string">'Location: https://www.xxx.com/'</span><span class="token punctuation">)</span><span class="token punctuation">;</span></pre></td></tr><tr><td data-num="3"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr></table></figure></content>
|
||
<category term="极空间" scheme="https://blog.jingxiyuan.cn/categories/%E6%9E%81%E7%A9%BA%E9%97%B4/" />
|
||
<category term="Docker" scheme="https://blog.jingxiyuan.cn/categories/%E6%9E%81%E7%A9%BA%E9%97%B4/Docker/" />
|
||
<category term="博客" scheme="https://blog.jingxiyuan.cn/tags/%E5%8D%9A%E5%AE%A2/" />
|
||
<category term="极空间" scheme="https://blog.jingxiyuan.cn/tags/%E6%9E%81%E7%A9%BA%E9%97%B4/" />
|
||
<category term="Wordpress" scheme="https://blog.jingxiyuan.cn/tags/Wordpress/" />
|
||
<updated>2022-10-20T00:56:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/10/19/%E9%95%BF%E4%BA%86%E4%B8%80%E5%B2%81/</id>
|
||
<title>又长了一岁</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/10/19/%E9%95%BF%E4%BA%86%E4%B8%80%E5%B2%81/"/>
|
||
<content type="html"><p>一年一次的总结时间又到了,这一年前半年平平无奇,后半年惊涛骇浪。中年危机如期而遇,人身的低谷终究还是来了。很沮丧也很无助,但还是要坚强面对。人生起起伏伏,时好时坏,终归还是会好起来的。加油!加油!加油<br />
|
||
!</p>
|
||
</content>
|
||
<category term="生活" scheme="https://blog.jingxiyuan.cn/categories/%E7%94%9F%E6%B4%BB/" />
|
||
<category term="心情" scheme="https://blog.jingxiyuan.cn/categories/%E7%94%9F%E6%B4%BB/%E5%BF%83%E6%83%85/" />
|
||
<category term="心情" scheme="https://blog.jingxiyuan.cn/tags/%E5%BF%83%E6%83%85/" />
|
||
<updated>2022-10-19T00:51:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/10/18/%E6%90%AD%E5%BB%BAnagios%E7%9B%91%E6%8E%A7/</id>
|
||
<title>搭建nagios监控</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/10/18/%E6%90%AD%E5%BB%BAnagios%E7%9B%91%E6%8E%A7/"/>
|
||
<content type="html"><h4 id="监控端服务安装与配置"><a class="anchor" href="#监控端服务安装与配置">#</a> 监控端服务安装与配置</h4>
|
||
<ol>
|
||
<li>nagios 需要安装主程序 core 和 nrpe(nagios 和各被监控主机都必须安装)。如需使用自研前端可通过安装 ndoutils (用于把 nagios 监控信息写入数据库) 和 mysql 实现。具体安装见<span class="exturl" data-url="aHR0cHM6Ly9zdXBwb3J0Lm5hZ2lvcy5jb20va2Iv">官网</span></li>
|
||
<li>nagios 默认监控命令脚本放置在 libexec 中,自定义脚本也放到此处</li>
|
||
<li>etc/objects/commands.cfg 用于保存 nagios 默认监控命令</li>
|
||
<li>etc/nrpe.cfg 文件中需要添加用于被监控执行命令项(各被监控主机中都需要添加)<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/18/image.png" alt="" /></li>
|
||
<li>etc/objects/hosts 目录下配置需要被监控的主机信息<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/18/image2.png" alt="" /></li>
|
||
<li>etc/objects/servers 目录下配置需要在被监控主机上执行的监控命令(第 4 项中的命令)<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/18/image3.png" alt="" /></li>
|
||
</ol>
|
||
<h4 id="被监控端服务安装与配置"><a class="anchor" href="#被监控端服务安装与配置">#</a> 被监控端服务安装与配置</h4>
|
||
<ol>
|
||
<li>被监控端需要安装 nrpe</li>
|
||
<li>被监控端需要把监控端的命令写入到 nrpe 的配置文件中</li>
|
||
<li>被监控端需要把命令执行脚本放入 libexec 目录中</li>
|
||
<li>被监控端自动安装脚本(可借鉴)</li>
|
||
</ol>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token number">1</span>、请先修改脚本中的服务端IP。</pre></td></tr><tr><td data-num="2"></td><td><pre><span class="token number">2</span>、如被监控端不支持let计算命令请执行sudo dpkg-reconfigure dash命令,弹出选择窗口后选择no。</pre></td></tr><tr><td data-num="3"></td><td><pre><span class="token number">3</span>、需要在脚本同目录下创建CentOS、Ubuntu、sh和conf目录,目录下分别放置nrpe的tar安装包、监控脚本和nrpe配置文件。</pre></td></tr><tr><td data-num="4"></td><td><pre></pre></td></tr><tr><td data-num="5"></td><td><pre><span class="token comment">#!/bin/bash</span></pre></td></tr><tr><td data-num="6"></td><td><pre><span class="token comment">#服务端 ip</span></pre></td></tr><tr><td data-num="7"></td><td><pre><span class="token assign-left variable">SERVER_IP</span><span class="token operator">=</span><span class="token number">10.10</span>.10.121</pre></td></tr><tr><td data-num="8"></td><td><pre><span class="token comment">#安装目录</span></pre></td></tr><tr><td data-num="9"></td><td><pre><span class="token assign-left variable">INSTALL_HOME</span><span class="token operator">=</span><span class="token variable"><span class="token variable">`</span><span class="token builtin class-name">pwd</span><span class="token variable">`</span></span></pre></td></tr><tr><td data-num="10"></td><td><pre><span class="token comment">#安装 ubuntu 版本</span></pre></td></tr><tr><td data-num="11"></td><td><pre><span class="token function-name function">INSTALL_UBUNTU</span><span class="token punctuation">(</span><span class="token punctuation">)</span></pre></td></tr><tr><td data-num="12"></td><td><pre><span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="13"></td><td><pre> <span class="token function">sudo</span> <span class="token function">apt-get</span> update</pre></td></tr><tr><td data-num="14"></td><td><pre> <span class="token function">sudo</span> <span class="token function">apt-get</span> <span class="token function">install</span> <span class="token parameter variable">-y</span> autoconf automake gcc libc6 libmcrypt-dev <span class="token function">make</span> libssl-dev <span class="token function">wget</span> openssl</pre></td></tr><tr><td data-num="15"></td><td><pre> </pre></td></tr><tr><td data-num="16"></td><td><pre> <span class="token builtin class-name">cd</span> /tmp</pre></td></tr><tr><td data-num="17"></td><td><pre> <span class="token comment">#wget --no-check-certificate -O nrpe.tar.gz https://github.com/NagiosEnterprises/nrpe/archive/nrpe-4.0.3.tar.gz</span></pre></td></tr><tr><td data-num="18"></td><td><pre> <span class="token function">cp</span> <span class="token variable">$INSTALL_HOME</span>/Ubuntu/nrpe.tar.gz ./</pre></td></tr><tr><td data-num="19"></td><td><pre> <span class="token function">tar</span> xzf nrpe.tar.gz</pre></td></tr><tr><td data-num="20"></td><td><pre></pre></td></tr><tr><td data-num="21"></td><td><pre> <span class="token builtin class-name">cd</span> /tmp/nrpe-nrpe-4.0.3/</pre></td></tr><tr><td data-num="22"></td><td><pre> <span class="token function">sudo</span> ./configure --enable-command-args --with-ssl-lib<span class="token operator">=</span>/usr/lib/x86_64-linux-gnu/</pre></td></tr><tr><td data-num="23"></td><td><pre> <span class="token function">sudo</span> <span class="token function">make</span> all</pre></td></tr><tr><td data-num="24"></td><td><pre></pre></td></tr><tr><td data-num="25"></td><td><pre> <span class="token function">sudo</span> <span class="token function">make</span> install-groups-users</pre></td></tr><tr><td data-num="26"></td><td><pre></pre></td></tr><tr><td data-num="27"></td><td><pre> <span class="token function">sudo</span> <span class="token function">make</span> <span class="token function">install</span></pre></td></tr><tr><td data-num="28"></td><td><pre></pre></td></tr><tr><td data-num="29"></td><td><pre> <span class="token function">sudo</span> <span class="token function">make</span> install-config</pre></td></tr><tr><td data-num="30"></td><td><pre></pre></td></tr><tr><td data-num="31"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo >> /etc/services"</span></pre></td></tr><tr><td data-num="32"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"sudo echo '# Nagios services' >> /etc/services"</span></pre></td></tr><tr><td data-num="33"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"sudo echo 'nrpe 5666/tcp' >> /etc/services"</span></pre></td></tr><tr><td data-num="34"></td><td><pre> </pre></td></tr><tr><td data-num="35"></td><td><pre> <span class="token comment">#判断系统是高版本还是低版本</span></pre></td></tr><tr><td data-num="36"></td><td><pre> <span class="token assign-left variable">VERSION</span><span class="token operator">=</span><span class="token variable"><span class="token variable">`</span>lsb_release <span class="token parameter variable">-r</span> <span class="token parameter variable">--short</span><span class="token variable">`</span></span></pre></td></tr><tr><td data-num="37"></td><td><pre> <span class="token assign-left variable">IS_LOW_VERSION</span><span class="token operator">=</span><span class="token variable"><span class="token variable">`</span><span class="token builtin class-name">echo</span> <span class="token string">"<span class="token variable">$VERSION</span> &lt; 15"</span> <span class="token operator">|</span> <span class="token function">bc</span><span class="token variable">`</span></span></pre></td></tr><tr><td data-num="38"></td><td><pre></pre></td></tr><tr><td data-num="39"></td><td><pre> <span class="token keyword">if</span> <span class="token punctuation">[</span> <span class="token variable">$IS_LOW_VERSION</span> <span class="token operator">=</span> <span class="token number">1</span> <span class="token punctuation">]</span><span class="token punctuation">;</span> <span class="token keyword">then</span></pre></td></tr><tr><td data-num="40"></td><td><pre> <span class="token comment">#低版本</span></pre></td></tr><tr><td data-num="41"></td><td><pre> <span class="token function">sudo</span> <span class="token function">make</span> install-init</pre></td></tr><tr><td data-num="42"></td><td><pre> <span class="token keyword">else</span></pre></td></tr><tr><td data-num="43"></td><td><pre> <span class="token comment">#高版本</span></pre></td></tr><tr><td data-num="44"></td><td><pre> <span class="token function">sudo</span> <span class="token function">make</span> install-init</pre></td></tr><tr><td data-num="45"></td><td><pre> <span class="token function">sudo</span> systemctl <span class="token builtin class-name">enable</span> nrpe.service</pre></td></tr><tr><td data-num="46"></td><td><pre> <span class="token keyword">fi</span></pre></td></tr><tr><td data-num="47"></td><td><pre> </pre></td></tr><tr><td data-num="48"></td><td><pre> <span class="token function">sudo</span> <span class="token function">mkdir</span> <span class="token parameter variable">-p</span> /etc/ufw/applications.d</pre></td></tr><tr><td data-num="49"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo '[NRPE]' > /etc/ufw/applications.d/nagios"</span></pre></td></tr><tr><td data-num="50"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'title=Nagios Remote Plugin Executor' >> /etc/ufw/applications.d/nagios"</span></pre></td></tr><tr><td data-num="51"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'description=Allows remote execution of Nagios plugins' >> /etc/ufw/applications.d/nagios"</span></pre></td></tr><tr><td data-num="52"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'ports=5666/tcp' >> /etc/ufw/applications.d/nagios"</span></pre></td></tr><tr><td data-num="53"></td><td><pre> <span class="token function">sudo</span> ufw allow NRPE</pre></td></tr><tr><td data-num="54"></td><td><pre> <span class="token function">sudo</span> ufw reload</pre></td></tr><tr><td data-num="55"></td><td><pre> </pre></td></tr><tr><td data-num="56"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"sed -i '/^allowed_hosts=/s/$/,<span class="token variable">$SERVER_IP</span>/' /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="57"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"sed -i 's/^dont_blame_nrpe=.*/dont_blame_nrpe=1/g' /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="58"></td><td><pre> </pre></td></tr><tr><td data-num="59"></td><td><pre> <span class="token builtin class-name">cd</span> <span class="token variable">$INSTALL_HOME</span></pre></td></tr><tr><td data-num="60"></td><td><pre> <span class="token function">sudo</span> <span class="token function">cp</span> ./sh/* /usr/local/nagios/libexec/</pre></td></tr><tr><td data-num="61"></td><td><pre> <span class="token function">sudo</span> <span class="token function">chmod</span> +xr /usr/local/nagios/libexec/*</pre></td></tr><tr><td data-num="62"></td><td><pre> </pre></td></tr><tr><td data-num="63"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'command[check_ping]=/usr/local/nagios/libexec/check_ping -H 127.0.0.1 -w 3000.0,80% -c 5000.0,100% -p 5' >> /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="64"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'command[check_cpu]=/usr/local/nagios/libexec/check_cpu.sh' >> /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="65"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'command[check_mem]=/usr/local/nagios/libexec/check_mem.sh' >> /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="66"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'command[check_disk]=/usr/local/nagios/libexec/check_disk.sh' >> /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="67"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'command[check_my_service]=/usr/local/nagios/libexec/check_my_service.sh \<span class="token variable">$ARG1</span>\$' >> /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="68"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'command[check_system_info]=/usr/local/nagios/libexec/check_system_info.sh' >> /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="69"></td><td><pre> <span class="token assign-left variable">NETWORK_INDEX</span><span class="token operator">=</span><span class="token number">1</span></pre></td></tr><tr><td data-num="70"></td><td><pre> <span class="token keyword">for</span> <span class="token for-or-select variable">NETWORK_NAME</span> <span class="token keyword">in</span> <span class="token variable"><span class="token variable">`</span><span class="token function">cat</span> /proc/net/dev <span class="token operator">|</span> <span class="token function">awk</span> <span class="token string">'&#123;i++; if(i>2)&#123;print $1&#125;&#125;'</span> <span class="token operator">|</span> <span class="token function">sed</span> <span class="token string">'s/^[\t]*//g'</span> <span class="token operator">|</span> <span class="token function">sed</span> <span class="token string">'s/[:]*$//g'</span><span class="token variable">`</span></span><span class="token punctuation">;</span><span class="token keyword">do</span></pre></td></tr><tr><td data-num="71"></td><td><pre> <span class="token keyword">if</span> <span class="token punctuation">[</span> <span class="token variable">$NETWORK_NAME</span> <span class="token operator">!=</span> <span class="token string">'lo'</span> <span class="token punctuation">]</span><span class="token punctuation">;</span> <span class="token keyword">then</span></pre></td></tr><tr><td data-num="72"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'command[check_network<span class="token variable">$NETWORK_INDEX</span>]=/usr/local/nagios/libexec/check_network.sh <span class="token variable">$NETWORK_NAME</span>' >> /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="73"></td><td><pre> <span class="token assign-left variable">NETWORK_INDEX</span><span class="token operator">=</span><span class="token variable"><span class="token variable">`</span><span class="token function">expr</span> $NETWORK_INDEX + <span class="token number">1</span> <span class="token variable">`</span></span></pre></td></tr><tr><td data-num="74"></td><td><pre> <span class="token keyword">fi</span></pre></td></tr><tr><td data-num="75"></td><td><pre> <span class="token keyword">done</span></pre></td></tr><tr><td data-num="76"></td><td><pre> </pre></td></tr><tr><td data-num="77"></td><td><pre> <span class="token keyword">if</span> <span class="token punctuation">[</span> <span class="token variable">$IS_LOW_VERSION</span> <span class="token operator">=</span> <span class="token number">1</span> <span class="token punctuation">]</span><span class="token punctuation">;</span> <span class="token keyword">then</span></pre></td></tr><tr><td data-num="78"></td><td><pre> <span class="token comment">#低版本</span></pre></td></tr><tr><td data-num="79"></td><td><pre> <span class="token function">sudo</span> start nrpe</pre></td></tr><tr><td data-num="80"></td><td><pre> <span class="token keyword">else</span></pre></td></tr><tr><td data-num="81"></td><td><pre> <span class="token comment">#高版本</span></pre></td></tr><tr><td data-num="82"></td><td><pre> <span class="token function">sudo</span> systemctl start nrpe.service</pre></td></tr><tr><td data-num="83"></td><td><pre> <span class="token keyword">fi</span></pre></td></tr><tr><td data-num="84"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="85"></td><td><pre></pre></td></tr><tr><td data-num="86"></td><td><pre><span class="token comment">#安装 centos 版本</span></pre></td></tr><tr><td data-num="87"></td><td><pre><span class="token function-name function">INSTALL_CENTOS</span><span class="token punctuation">(</span><span class="token punctuation">)</span></pre></td></tr><tr><td data-num="88"></td><td><pre><span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="89"></td><td><pre> yum <span class="token function">install</span> <span class="token parameter variable">-y</span> gcc glibc glibc-common openssl openssl-devel perl <span class="token function">wget</span></pre></td></tr><tr><td data-num="90"></td><td><pre></pre></td></tr><tr><td data-num="91"></td><td><pre> <span class="token builtin class-name">cd</span> /tmp</pre></td></tr><tr><td data-num="92"></td><td><pre> <span class="token comment">#wget --no-check-certificate -O nrpe.tar.gz https://github.com/NagiosEnterprises/nrpe/archive/nrpe-4.0.3.tar.gz</span></pre></td></tr><tr><td data-num="93"></td><td><pre> <span class="token function">cp</span> <span class="token variable">$INSTALL_HOME</span>/CentOS/nrpe.tar.gz ./</pre></td></tr><tr><td data-num="94"></td><td><pre> <span class="token function">tar</span> xzf nrpe.tar.gz</pre></td></tr><tr><td data-num="95"></td><td><pre></pre></td></tr><tr><td data-num="96"></td><td><pre> <span class="token builtin class-name">cd</span> /tmp/nrpe-nrpe-4.0.3/</pre></td></tr><tr><td data-num="97"></td><td><pre> ./configure --enable-command-args</pre></td></tr><tr><td data-num="98"></td><td><pre> <span class="token function">make</span> all</pre></td></tr><tr><td data-num="99"></td><td><pre></pre></td></tr><tr><td data-num="100"></td><td><pre> <span class="token function">make</span> install-groups-users</pre></td></tr><tr><td data-num="101"></td><td><pre></pre></td></tr><tr><td data-num="102"></td><td><pre> <span class="token function">make</span> <span class="token function">install</span></pre></td></tr><tr><td data-num="103"></td><td><pre></pre></td></tr><tr><td data-num="104"></td><td><pre> <span class="token function">make</span> install-config</pre></td></tr><tr><td data-num="105"></td><td><pre></pre></td></tr><tr><td data-num="106"></td><td><pre> <span class="token builtin class-name">echo</span> <span class="token operator">>></span> /etc/services</pre></td></tr><tr><td data-num="107"></td><td><pre> <span class="token builtin class-name">echo</span> <span class="token string">'# Nagios services'</span> <span class="token operator">>></span> /etc/services</pre></td></tr><tr><td data-num="108"></td><td><pre> <span class="token builtin class-name">echo</span> <span class="token string">'nrpe 5666/tcp'</span> <span class="token operator">>></span> /etc/services</pre></td></tr><tr><td data-num="109"></td><td><pre> </pre></td></tr><tr><td data-num="110"></td><td><pre> <span class="token comment">#判断系统是高版本还是低版本</span></pre></td></tr><tr><td data-num="111"></td><td><pre> <span class="token assign-left variable">VERSION</span><span class="token operator">=</span><span class="token variable"><span class="token variable">`</span><span class="token function">rpm</span> <span class="token parameter variable">-q</span> centos-release<span class="token operator">|</span><span class="token function">cut</span> -d- <span class="token parameter variable">-f3</span><span class="token variable">`</span></span></pre></td></tr><tr><td data-num="112"></td><td><pre> <span class="token comment">#安装 bc 命令</span></pre></td></tr><tr><td data-num="113"></td><td><pre> yum <span class="token parameter variable">-y</span> <span class="token function">install</span> <span class="token function">bc</span></pre></td></tr><tr><td data-num="114"></td><td><pre> <span class="token assign-left variable">IS_LOW_VERSION</span><span class="token operator">=</span><span class="token variable"><span class="token variable">`</span><span class="token builtin class-name">echo</span> <span class="token string">"<span class="token variable">$VERSION</span> &lt; 7"</span> <span class="token operator">|</span> <span class="token function">bc</span><span class="token variable">`</span></span></pre></td></tr><tr><td data-num="115"></td><td><pre></pre></td></tr><tr><td data-num="116"></td><td><pre> <span class="token keyword">if</span> <span class="token punctuation">[</span> <span class="token variable">$IS_LOW_VERSION</span> <span class="token operator">=</span> <span class="token number">1</span> <span class="token punctuation">]</span><span class="token punctuation">;</span> <span class="token keyword">then</span></pre></td></tr><tr><td data-num="117"></td><td><pre> <span class="token comment">#低版本</span></pre></td></tr><tr><td data-num="118"></td><td><pre> <span class="token function">make</span> install-init</pre></td></tr><tr><td data-num="119"></td><td><pre> </pre></td></tr><tr><td data-num="120"></td><td><pre> iptables <span class="token parameter variable">-I</span> INPUT <span class="token parameter variable">-p</span> tcp --destination-port <span class="token number">5666</span> <span class="token parameter variable">-j</span> ACCEPT</pre></td></tr><tr><td data-num="121"></td><td><pre> <span class="token function">service</span> iptables save</pre></td></tr><tr><td data-num="122"></td><td><pre> ip6tables <span class="token parameter variable">-I</span> INPUT <span class="token parameter variable">-p</span> tcp --destination-port <span class="token number">5666</span> <span class="token parameter variable">-j</span> ACCEPT</pre></td></tr><tr><td data-num="123"></td><td><pre> <span class="token function">service</span> ip6tables save</pre></td></tr><tr><td data-num="124"></td><td><pre> <span class="token keyword">else</span></pre></td></tr><tr><td data-num="125"></td><td><pre> <span class="token comment">#高版本</span></pre></td></tr><tr><td data-num="126"></td><td><pre> <span class="token function">make</span> install-init</pre></td></tr><tr><td data-num="127"></td><td><pre> systemctl <span class="token builtin class-name">enable</span> nrpe.service</pre></td></tr><tr><td data-num="128"></td><td><pre> </pre></td></tr><tr><td data-num="129"></td><td><pre> firewall-cmd <span class="token parameter variable">--zone</span><span class="token operator">=</span>public --add-port<span class="token operator">=</span><span class="token number">5666</span>/tcp</pre></td></tr><tr><td data-num="130"></td><td><pre> firewall-cmd <span class="token parameter variable">--zone</span><span class="token operator">=</span>public --add-port<span class="token operator">=</span><span class="token number">5666</span>/tcp <span class="token parameter variable">--permanent</span></pre></td></tr><tr><td data-num="131"></td><td><pre> <span class="token keyword">fi</span></pre></td></tr><tr><td data-num="132"></td><td><pre> </pre></td></tr><tr><td data-num="133"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"sed -i '/^allowed_hosts=/s/$/,<span class="token variable">$SERVER_IP</span>/' /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="134"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"sed -i 's/^dont_blame_nrpe=.*/dont_blame_nrpe=1/g' /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="135"></td><td><pre> </pre></td></tr><tr><td data-num="136"></td><td><pre> <span class="token builtin class-name">cd</span> <span class="token variable">$INSTALL_HOME</span></pre></td></tr><tr><td data-num="137"></td><td><pre> <span class="token function">sudo</span> <span class="token function">cp</span> ./sh/* /usr/local/nagios/libexec/</pre></td></tr><tr><td data-num="138"></td><td><pre> <span class="token function">sudo</span> <span class="token function">chmod</span> +xr /usr/local/nagios/libexec/*</pre></td></tr><tr><td data-num="139"></td><td><pre> </pre></td></tr><tr><td data-num="140"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'command[check_ping]=/usr/local/nagios/libexec/check_ping -H 127.0.0.1 -w 3000.0,80% -c 5000.0,100% -p 5' >> /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="141"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'command[check_cpu]=/usr/local/nagios/libexec/check_cpu.sh' >> /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="142"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'command[check_mem]=/usr/local/nagios/libexec/check_mem.sh' >> /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="143"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'command[check_disk]=/usr/local/nagios/libexec/check_disk.sh' >> /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="144"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'command[check_my_service]=/usr/local/nagios/libexec/check_my_service.sh \<span class="token variable">$ARG1</span>\$' >> /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="145"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'command[check_system_info]=/usr/local/nagios/libexec/check_system_info.sh' >> /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="146"></td><td><pre> <span class="token assign-left variable">NETWORK_INDEX</span><span class="token operator">=</span><span class="token number">1</span></pre></td></tr><tr><td data-num="147"></td><td><pre> <span class="token keyword">for</span> <span class="token for-or-select variable">NETWORK_NAME</span> <span class="token keyword">in</span> <span class="token variable"><span class="token variable">`</span><span class="token function">cat</span> /proc/net/dev <span class="token operator">|</span> <span class="token function">awk</span> <span class="token string">'&#123;i++; if(i>2)&#123;print $1&#125;&#125;'</span> <span class="token operator">|</span> <span class="token function">sed</span> <span class="token string">'s/^[\t]*//g'</span> <span class="token operator">|</span> <span class="token function">sed</span> <span class="token string">'s/[:]*$//g'</span><span class="token variable">`</span></span><span class="token punctuation">;</span><span class="token keyword">do</span></pre></td></tr><tr><td data-num="148"></td><td><pre> <span class="token keyword">if</span> <span class="token punctuation">[</span> <span class="token variable">$NETWORK_NAME</span> <span class="token operator">!=</span> <span class="token string">'lo'</span> <span class="token punctuation">]</span><span class="token punctuation">;</span> <span class="token keyword">then</span></pre></td></tr><tr><td data-num="149"></td><td><pre> <span class="token function">sudo</span> <span class="token function">sh</span> <span class="token parameter variable">-c</span> <span class="token string">"echo 'command[check_network<span class="token variable">$NETWORK_INDEX</span>]=/usr/local/nagios/libexec/check_network.sh <span class="token variable">$NETWORK_NAME</span>' >> /usr/local/nagios/etc/nrpe.cfg"</span></pre></td></tr><tr><td data-num="150"></td><td><pre> <span class="token assign-left variable">NETWORK_INDEX</span><span class="token operator">=</span><span class="token variable"><span class="token variable">`</span><span class="token function">expr</span> $NETWORK_INDEX + <span class="token number">1</span> <span class="token variable">`</span></span></pre></td></tr><tr><td data-num="151"></td><td><pre> <span class="token keyword">fi</span></pre></td></tr><tr><td data-num="152"></td><td><pre> <span class="token keyword">done</span></pre></td></tr><tr><td data-num="153"></td><td><pre> </pre></td></tr><tr><td data-num="154"></td><td><pre> <span class="token keyword">if</span> <span class="token punctuation">[</span> <span class="token variable">$IS_LOW_VERSION</span> <span class="token operator">=</span> <span class="token number">1</span> <span class="token punctuation">]</span><span class="token punctuation">;</span> <span class="token keyword">then</span></pre></td></tr><tr><td data-num="155"></td><td><pre> <span class="token comment">#低版本</span></pre></td></tr><tr><td data-num="156"></td><td><pre> <span class="token keyword">if</span> <span class="token punctuation">[</span> <span class="token variable"><span class="token variable">$(</span><span class="token builtin class-name">echo</span> <span class="token string">"<span class="token variable">$VERSION</span> &lt; 6"</span> <span class="token operator">|</span> <span class="token function">bc</span><span class="token variable">)</span></span> <span class="token parameter variable">-eq</span> <span class="token number">1</span> <span class="token punctuation">]</span><span class="token punctuation">;</span> <span class="token keyword">then</span></pre></td></tr><tr><td data-num="157"></td><td><pre> <span class="token function">service</span> nrpe start</pre></td></tr><tr><td data-num="158"></td><td><pre> <span class="token keyword">else</span></pre></td></tr><tr><td data-num="159"></td><td><pre> start nrpe</pre></td></tr><tr><td data-num="160"></td><td><pre> <span class="token keyword">fi</span></pre></td></tr><tr><td data-num="161"></td><td><pre> <span class="token keyword">else</span></pre></td></tr><tr><td data-num="162"></td><td><pre> <span class="token comment">#高版本</span></pre></td></tr><tr><td data-num="163"></td><td><pre> systemctl start nrpe.service</pre></td></tr><tr><td data-num="164"></td><td><pre> <span class="token keyword">fi</span></pre></td></tr><tr><td data-num="165"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="166"></td><td><pre></pre></td></tr><tr><td data-num="167"></td><td><pre><span class="token comment">#安装其它版本</span></pre></td></tr><tr><td data-num="168"></td><td><pre><span class="token function-name function">INSTALL_OTHER</span><span class="token punctuation">(</span><span class="token punctuation">)</span></pre></td></tr><tr><td data-num="169"></td><td><pre><span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="170"></td><td><pre> <span class="token builtin class-name">echo</span> <span class="token string">"Not supported at the moment."</span></pre></td></tr><tr><td data-num="171"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="172"></td><td><pre></pre></td></tr><tr><td data-num="173"></td><td><pre><span class="token comment">#根据不同系统安装不同版本</span></pre></td></tr><tr><td data-num="174"></td><td><pre><span class="token function-name function">INSTALL</span><span class="token punctuation">(</span><span class="token punctuation">)</span></pre></td></tr><tr><td data-num="175"></td><td><pre><span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="176"></td><td><pre> <span class="token keyword">if</span> <span class="token function">grep</span> <span class="token parameter variable">-Eqii</span> <span class="token string">"CentOS"</span> /etc/issue <span class="token operator">||</span> <span class="token function">grep</span> <span class="token parameter variable">-Eq</span> <span class="token string">"CentOS"</span> /etc/*-release<span class="token punctuation">;</span> <span class="token keyword">then</span></pre></td></tr><tr><td data-num="177"></td><td><pre> <span class="token assign-left variable">DISTRO</span><span class="token operator">=</span><span class="token string">'CentOS'</span></pre></td></tr><tr><td data-num="178"></td><td><pre> <span class="token assign-left variable">PM</span><span class="token operator">=</span><span class="token string">'yum'</span></pre></td></tr><tr><td data-num="179"></td><td><pre> INSTALL_CENTOS</pre></td></tr><tr><td data-num="180"></td><td><pre> <span class="token keyword">elif</span> <span class="token function">grep</span> <span class="token parameter variable">-Eqi</span> <span class="token string">"Red Hat Enterprise Linux Server"</span> /etc/issue <span class="token operator">||</span> <span class="token function">grep</span> <span class="token parameter variable">-Eq</span> <span class="token string">"Red Hat Enterprise Linux Server"</span> /etc/*-release<span class="token punctuation">;</span> <span class="token keyword">then</span></pre></td></tr><tr><td data-num="181"></td><td><pre> <span class="token assign-left variable">DISTRO</span><span class="token operator">=</span><span class="token string">'RHEL'</span></pre></td></tr><tr><td data-num="182"></td><td><pre> <span class="token assign-left variable">PM</span><span class="token operator">=</span><span class="token string">'yum'</span></pre></td></tr><tr><td data-num="183"></td><td><pre> INSTALL_OTHER</pre></td></tr><tr><td data-num="184"></td><td><pre> <span class="token keyword">elif</span> <span class="token function">grep</span> <span class="token parameter variable">-Eqi</span> <span class="token string">"Aliyun"</span> /etc/issue <span class="token operator">||</span> <span class="token function">grep</span> <span class="token parameter variable">-Eq</span> <span class="token string">"Aliyun"</span> /etc/*-release<span class="token punctuation">;</span> <span class="token keyword">then</span></pre></td></tr><tr><td data-num="185"></td><td><pre> <span class="token assign-left variable">DISTRO</span><span class="token operator">=</span><span class="token string">'Aliyun'</span></pre></td></tr><tr><td data-num="186"></td><td><pre> <span class="token assign-left variable">PM</span><span class="token operator">=</span><span class="token string">'yum'</span></pre></td></tr><tr><td data-num="187"></td><td><pre> INSTALL_OTHER</pre></td></tr><tr><td data-num="188"></td><td><pre> <span class="token keyword">elif</span> <span class="token function">grep</span> <span class="token parameter variable">-Eqi</span> <span class="token string">"Fedora"</span> /etc/issue <span class="token operator">||</span> <span class="token function">grep</span> <span class="token parameter variable">-Eq</span> <span class="token string">"Fedora"</span> /etc/*-release<span class="token punctuation">;</span> <span class="token keyword">then</span></pre></td></tr><tr><td data-num="189"></td><td><pre> <span class="token assign-left variable">DISTRO</span><span class="token operator">=</span><span class="token string">'Fedora'</span></pre></td></tr><tr><td data-num="190"></td><td><pre> <span class="token assign-left variable">PM</span><span class="token operator">=</span><span class="token string">'yum'</span></pre></td></tr><tr><td data-num="191"></td><td><pre> INSTALL_OTHER</pre></td></tr><tr><td data-num="192"></td><td><pre> <span class="token keyword">elif</span> <span class="token function">grep</span> <span class="token parameter variable">-Eqi</span> <span class="token string">"Debian"</span> /etc/issue <span class="token operator">||</span> <span class="token function">grep</span> <span class="token parameter variable">-Eq</span> <span class="token string">"Debian"</span> /etc/*-release<span class="token punctuation">;</span> <span class="token keyword">then</span></pre></td></tr><tr><td data-num="193"></td><td><pre> <span class="token assign-left variable">DISTRO</span><span class="token operator">=</span><span class="token string">'Debian'</span></pre></td></tr><tr><td data-num="194"></td><td><pre> <span class="token assign-left variable">PM</span><span class="token operator">=</span><span class="token string">'apt'</span></pre></td></tr><tr><td data-num="195"></td><td><pre> INSTALL_OTHER</pre></td></tr><tr><td data-num="196"></td><td><pre> <span class="token keyword">elif</span> <span class="token function">grep</span> <span class="token parameter variable">-Eqi</span> <span class="token string">"Ubuntu"</span> /etc/issue <span class="token operator">||</span> <span class="token function">grep</span> <span class="token parameter variable">-Eq</span> <span class="token string">"Ubuntu"</span> /etc/*-release<span class="token punctuation">;</span> <span class="token keyword">then</span></pre></td></tr><tr><td data-num="197"></td><td><pre> <span class="token assign-left variable">DISTRO</span><span class="token operator">=</span><span class="token string">'Ubuntu'</span></pre></td></tr><tr><td data-num="198"></td><td><pre> <span class="token assign-left variable">PM</span><span class="token operator">=</span><span class="token string">'apt'</span></pre></td></tr><tr><td data-num="199"></td><td><pre> INSTALL_UBUNTU</pre></td></tr><tr><td data-num="200"></td><td><pre> <span class="token keyword">elif</span> <span class="token function">grep</span> <span class="token parameter variable">-Eqi</span> <span class="token string">"Raspbian"</span> /etc/issue <span class="token operator">||</span> <span class="token function">grep</span> <span class="token parameter variable">-Eq</span> <span class="token string">"Raspbian"</span> /etc/*-release<span class="token punctuation">;</span> <span class="token keyword">then</span></pre></td></tr><tr><td data-num="201"></td><td><pre> <span class="token assign-left variable">DISTRO</span><span class="token operator">=</span><span class="token string">'Raspbian'</span></pre></td></tr><tr><td data-num="202"></td><td><pre> <span class="token assign-left variable">PM</span><span class="token operator">=</span><span class="token string">'apt'</span></pre></td></tr><tr><td data-num="203"></td><td><pre> INSTALL_OTHER</pre></td></tr><tr><td data-num="204"></td><td><pre> <span class="token keyword">else</span></pre></td></tr><tr><td data-num="205"></td><td><pre> <span class="token builtin class-name">echo</span> <span class="token string">"unknow linux."</span></pre></td></tr><tr><td data-num="206"></td><td><pre> <span class="token builtin class-name">exit</span> <span class="token number">1</span></pre></td></tr><tr><td data-num="207"></td><td><pre> <span class="token keyword">fi</span></pre></td></tr><tr><td data-num="208"></td><td><pre> <span class="token builtin class-name">echo</span> <span class="token variable">$DISTRO</span></pre></td></tr><tr><td data-num="209"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="210"></td><td><pre></pre></td></tr><tr><td data-num="211"></td><td><pre>INSTALL</pre></td></tr><tr><td data-num="212"></td><td><pre></pre></td></tr><tr><td data-num="213"></td><td><pre><span class="token builtin class-name">exit</span> <span class="token number">0</span></pre></td></tr></table></figure><h4 id="登录"><a class="anchor" href="#登录">#</a> 登录</h4>
|
||
<p>地址:<span class="exturl" data-url="aHR0cDovL3huLS1JUC1mcjVjODZseDd6L25hZ2lvcw==">http:// 服务器 IP/nagios</span><br />
|
||
用户名:nagiosadmin<br />
|
||
密码:nagiosadmin</p>
|
||
<h4 id="常见问题"><a class="anchor" href="#常见问题">#</a> 常见问题</h4>
|
||
<ol>
|
||
<li>监控日志未写入 mysql(可能是 ndoutils 服务不正常导致)。采用以下脚本命令解决</li>
|
||
</ol>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token shebang important">#!/bin/bash</span></pre></td></tr><tr><td data-num="2"></td><td><pre><span class="token function">sudo</span> <span class="token function">rm</span> <span class="token parameter variable">-f</span> /usr/local/nagios/var/ndo2db.pid</pre></td></tr><tr><td data-num="3"></td><td><pre><span class="token function">sudo</span> <span class="token function">rm</span> <span class="token parameter variable">-f</span> /usr/local/nagios/var/ndo.sock</pre></td></tr><tr><td data-num="4"></td><td><pre><span class="token function">sudo</span> systemctl restart ndo2db.service</pre></td></tr><tr><td data-num="5"></td><td><pre><span class="token function">sudo</span> systemctl status ndo2db.service</pre></td></tr></table></figure></content>
|
||
<category term="Linux" scheme="https://blog.jingxiyuan.cn/categories/Linux/" />
|
||
<category term="服务" scheme="https://blog.jingxiyuan.cn/categories/Linux/%E6%9C%8D%E5%8A%A1/" />
|
||
<category term="nagios" scheme="https://blog.jingxiyuan.cn/tags/nagios/" />
|
||
<category term="服务监控" scheme="https://blog.jingxiyuan.cn/tags/%E6%9C%8D%E5%8A%A1%E7%9B%91%E6%8E%A7/" />
|
||
<updated>2022-10-18T01:39:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/10/17/redis%E4%B8%BB%E4%BB%8E%E5%9F%BA%E7%A1%80%E9%85%8D%E7%BD%AE%E8%AE%B0%E5%BD%95/</id>
|
||
<title>redis主从基础配置</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/10/17/redis%E4%B8%BB%E4%BB%8E%E5%9F%BA%E7%A1%80%E9%85%8D%E7%BD%AE%E8%AE%B0%E5%BD%95/"/>
|
||
<content type="html"><h4 id="主服务"><a class="anchor" href="#主服务">#</a> 主服务</h4>
|
||
<ol>
|
||
<li>基础配置</li>
|
||
</ol>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>port 6379</pre></td></tr><tr><td data-num="2"></td><td><pre>requirepass 123456(密码,建议不设置)</pre></td></tr><tr><td data-num="3"></td><td><pre>vm<span class="token punctuation">-</span>enabled no (虚拟内存,内存够的情况下可以不使用)</pre></td></tr><tr><td data-num="4"></td><td><pre>maxmemory 1GB(告诉Redis当使用了多少物理内存后就开始拒绝后续的写入)</pre></td></tr><tr><td data-num="5"></td><td><pre>bind 127.0.0.1 (注释掉,否则不能外部连接)</pre></td></tr><tr><td data-num="6"></td><td><pre>rdbchecksum no(持久化数据检查)</pre></td></tr><tr><td data-num="7"></td><td><pre>list<span class="token punctuation">-</span>max<span class="token punctuation">-</span>ziplist<span class="token punctuation">-</span>size 1024(ziplist的最大容量,正数为自己指定的大小。负数<span class="token punctuation">-</span>1到<span class="token punctuation">-</span>5为对应的值4到64Kb)</pre></td></tr><tr><td data-num="8"></td><td><pre>list<span class="token punctuation">-</span>compress<span class="token punctuation">-</span>depth 20(quicklist的两端多少个node不压缩,0为全部不压缩)</pre></td></tr></table></figure><figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">sysctl</span> <span class="token assign-left variable">vm.overcommit_memory</span><span class="token operator">=</span><span class="token number">1</span> (立即生效)</pre></td></tr><tr><td data-num="2"></td><td><pre>修改/etc/sysctl.conf添加vm.overcommit_memory<span class="token operator">=</span><span class="token number">1</span>(表示内核允许分配所有的物理内存,而不管当前的内存状态如何。Redis的RDB持久化实现是folk一个子进程,然后让子进程将内存镜像dump到RDB文件中。理论上来说是需要跟父进程一样的内存空间,但是由于linux很早就支持的copy-on-write技术,所以实际上并不需要这么多的物理内存的。)</pre></td></tr></table></figure><ol start="2">
|
||
<li>禁用透明大页(影响性能)</li>
|
||
</ol>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>需要sudo <span class="token function">su</span> 切换到root身份(sudo 没用)</pre></td></tr><tr><td data-num="2"></td><td><pre><span class="token builtin class-name">echo</span> never <span class="token operator">></span> /sys/kernel/mm/transparent_hugepage/enabled</pre></td></tr><tr><td data-num="3"></td><td><pre>修改/etc/init.d/redis-server,加入/bin/echo never <span class="token operator">></span> /sys/kernel/mm/transparent_hugepage/enabled</pre></td></tr></table></figure><ol start="3">
|
||
<li>修复 TCP 警告</li>
|
||
</ol>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">sysctl</span> <span class="token assign-left variable">net.core.somaxconn</span><span class="token operator">=</span><span class="token number">1024</span>(立即生效)</pre></td></tr><tr><td data-num="2"></td><td><pre>修改/etc/sysctl.conf添加net.core.somaxconn<span class="token operator">=</span><span class="token number">1024</span></pre></td></tr></table></figure><ol start="4">
|
||
<li>客户端缓冲区限制</li>
|
||
</ol>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>客户端的输出缓冲区的限制,因为某种原因客户端从服务器读取数据的速度不够快,可用于强制断开连接(一个常见的原因是一个发布 / 订阅客户端消费消息的速度无法赶上生产它们的速度)。</pre></td></tr><tr><td data-num="2"></td><td><pre>可以三种不同客户端的方式进行设置:</pre></td></tr><tr><td data-num="3"></td><td><pre>normal <span class="token punctuation">-</span><span class="token punctuation">></span> 正常客户端</pre></td></tr><tr><td data-num="4"></td><td><pre>slave <span class="token punctuation">-</span><span class="token punctuation">></span> slave 和 MONITOR 客户端</pre></td></tr><tr><td data-num="5"></td><td><pre>pubsub <span class="token punctuation">-</span><span class="token punctuation">></span> 至少订阅了一个 pubsub channel 或 pattern 的客户端</pre></td></tr><tr><td data-num="6"></td><td><pre><span class="token key atrule">语法</span> <span class="token punctuation">:</span></pre></td></tr><tr><td data-num="7"></td><td><pre>client<span class="token punctuation">-</span>output<span class="token punctuation">-</span>buffer<span class="token punctuation">-</span>limit &lt;class<span class="token punctuation">></span>&lt;hard limit<span class="token punctuation">></span> &lt;soft limit<span class="token punctuation">></span> &lt;soft seconds<span class="token punctuation">></span></pre></td></tr><tr><td data-num="8"></td><td><pre>一旦达到硬限制客户端会立即断开,或者达到软限制并保持达成的指定秒数(连续)。</pre></td></tr><tr><td data-num="9"></td><td><pre>例如,如果硬限制为 32 兆字节和软限制为 16 兆字节 /10 秒,客户端将会立即断开。如果输出缓冲区的大小达到 32 兆字节,客户端达到 16 兆字节和连续超过了限制 10 秒,也将断开连接。默认 normal 客户端不做限制,因为他们在一个请求后未要求时(以推的方式)不接收数据,</pre></td></tr><tr><td data-num="10"></td><td><pre>只有异步客户端可能会出现请求数据的速度比它可以读取的速度快的场景。</pre></td></tr><tr><td data-num="11"></td><td><pre>把硬限制和软限制都设置为 0 来禁用该特性</pre></td></tr><tr><td data-num="12"></td><td><pre>client<span class="token punctuation">-</span>output<span class="token punctuation">-</span>buffer<span class="token punctuation">-</span>limit normal 0 0 0</pre></td></tr><tr><td data-num="13"></td><td><pre>client<span class="token punctuation">-</span>output<span class="token punctuation">-</span>buffer<span class="token punctuation">-</span>limit slave 5gb 512mb 60</pre></td></tr><tr><td data-num="14"></td><td><pre>client<span class="token punctuation">-</span>output<span class="token punctuation">-</span>buffer<span class="token punctuation">-</span>limit pubsub 32mb 8mb 60</pre></td></tr></table></figure><ol start="5">
|
||
<li>持久化配置</li>
|
||
</ol>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token punctuation">---</span>关闭RDB持久化<span class="token punctuation">---</span></pre></td></tr><tr><td data-num="2"></td><td><pre>save ""</pre></td></tr><tr><td data-num="3"></td><td><pre>默认配置如下:</pre></td></tr><tr><td data-num="4"></td><td><pre>save 900 1 <span class="token comment">#900 秒内有 1 次更新就持久化</span></pre></td></tr><tr><td data-num="5"></td><td><pre>save 300 10 <span class="token comment">#300 秒内有 10 次更新就持久化</span></pre></td></tr><tr><td data-num="6"></td><td><pre>save 60 10000 <span class="token comment">#60 秒内有 10000 次更新就持久化</span></pre></td></tr><tr><td data-num="7"></td><td><pre><span class="token punctuation">---</span>关闭RDB持久化<span class="token punctuation">---</span></pre></td></tr><tr><td data-num="8"></td><td><pre>主从同步支持两种策略,即disk和socket方式。</pre></td></tr><tr><td data-num="9"></td><td><pre>新的slave端和重连的salve端不允许去继续同步进程,这被称之为“完全同步”。</pre></td></tr><tr><td data-num="10"></td><td><pre>一个RDB文件从master端传到slave端,分为两种情况:</pre></td></tr><tr><td data-num="11"></td><td><pre>1、支持disk:master端将RDB file写到disk,稍后再传送到slave端;</pre></td></tr><tr><td data-num="12"></td><td><pre>2、无磁盘diskless:master端直接将RDB file传到slave socket,不需要与disk进行交互。无磁盘diskless方式适合磁盘读写速度慢但网络带宽非常高的环境。</pre></td></tr><tr><td data-num="13"></td><td><pre>repl<span class="token punctuation">-</span>diskless<span class="token punctuation">-</span>sync no 默认不使用diskless同步方式</pre></td></tr><tr><td data-num="14"></td><td><pre>repl<span class="token punctuation">-</span>diskless<span class="token punctuation">-</span>sync<span class="token punctuation">-</span>delay 30 无磁盘diskless方式在进行数据传递之前会有一个时间的延迟,以便slave端能够进行到待传送的目标队列中,这个时间默认是5秒</pre></td></tr><tr><td data-num="15"></td><td><pre>repl<span class="token punctuation">-</span>ping<span class="token punctuation">-</span>slave<span class="token punctuation">-</span>period 60 slave端向server端发送pings的时间区间设置,默认为10秒</pre></td></tr><tr><td data-num="16"></td><td><pre>repl<span class="token punctuation">-</span>timeout 3600 设置超时时间</pre></td></tr><tr><td data-num="17"></td><td><pre>repl<span class="token punctuation">-</span>disable<span class="token punctuation">-</span>tcp<span class="token punctuation">-</span>nodelay no 是否启用TCP_NODELAY,如果启用则会使用少量的TCP包和带宽去进行数据传输到slave端,当然速度会比较慢;如果不启用则传输速度比较快,但是会占用比较多的带宽。</pre></td></tr><tr><td data-num="18"></td><td><pre>repl<span class="token punctuation">-</span>backlog<span class="token punctuation">-</span>size 1mb 设置backlog的大小,backlog是一个缓冲区,在slave端失连时存放要同步到slave的数据,因此当一个slave要重连时,经常是不需要完全同步的,执行局部同步就足够了。</pre></td></tr><tr><td data-num="19"></td><td><pre>backlog设置的越大,slave可以失连的时间就越长。</pre></td></tr><tr><td data-num="20"></td><td><pre>repl<span class="token punctuation">-</span>backlog<span class="token punctuation">-</span>ttl 3600 如果一段时间后没有slave连接到master,则backlog size的内存将会被释放。如果值为0则表示永远不释放这部份内存。</pre></td></tr><tr><td data-num="21"></td><td><pre>slave<span class="token punctuation">-</span>priority 100 slave端的优先级设置,值是一个整数,数字越小表示优先级越高。当master故障时将会按照优先级来选择slave端进行恢复,如果值设置为0,则表示该slave永远不会被选择。</pre></td></tr><tr><td data-num="22"></td><td><pre>min<span class="token punctuation">-</span>slaves<span class="token punctuation">-</span>to<span class="token punctuation">-</span>write 3</pre></td></tr><tr><td data-num="23"></td><td><pre>min<span class="token punctuation">-</span>slaves<span class="token punctuation">-</span>max<span class="token punctuation">-</span>lag 10 设置当一个master端的可用slave少于N个,延迟时间大于M秒时,不接收写操作。</pre></td></tr></table></figure><h4 id="从服务"><a class="anchor" href="#从服务">#</a> 从服务</h4>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>基本配置同主服务一致</pre></td></tr><tr><td data-num="2"></td><td><pre>slaveof 127.0.0.1 6379(主redis的ip和端口)</pre></td></tr><tr><td data-num="3"></td><td><pre>masterauth 123456 (主redis的密码)</pre></td></tr><tr><td data-num="4"></td><td><pre>可以通过slaveof no one命令将Slaver升级为Maste</pre></td></tr><tr><td data-num="5"></td><td><pre>bgsave (持久化命令,在redis<span class="token punctuation">-</span>cli中执行,默认创建dump.rdb文件,路径为 /var/lib/redis/dump.rdb。可通过find / <span class="token punctuation">-</span>name dump.rd查找)</pre></td></tr></table></figure><h4 id="相关命令"><a class="anchor" href="#相关命令">#</a> 相关命令</h4>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>看状态</pre></td></tr><tr><td data-num="2"></td><td><pre><span class="token function">sudo</span> /etc/init.d/redis-server status</pre></td></tr><tr><td data-num="3"></td><td><pre>看端口</pre></td></tr><tr><td data-num="4"></td><td><pre><span class="token function">netstat</span> -nlt<span class="token operator">|</span><span class="token function">grep</span> <span class="token number">6379</span></pre></td></tr><tr><td data-num="5"></td><td><pre>外部连接</pre></td></tr><tr><td data-num="6"></td><td><pre><span class="token function">sudo</span> <span class="token function">vim</span> /etc/redis/redis.conf把protected-mode改为no,把bind ip注释掉</pre></td></tr><tr><td data-num="7"></td><td><pre>重启</pre></td></tr><tr><td data-num="8"></td><td><pre><span class="token function">sudo</span> server redis-server restart</pre></td></tr><tr><td data-num="9"></td><td><pre>查看内存</pre></td></tr><tr><td data-num="10"></td><td><pre><span class="token function">free</span> <span class="token parameter variable">-m</span></pre></td></tr><tr><td data-num="11"></td><td><pre>批量删除指定key</pre></td></tr><tr><td data-num="12"></td><td><pre>redis-cli <span class="token parameter variable">-n</span> <span class="token number">6</span> scan <span class="token number">0</span> match *2020-06-12 count <span class="token number">10000</span><span class="token operator">|</span> <span class="token function">xargs</span> redis-cli <span class="token parameter variable">-n</span> <span class="token number">6</span> del</pre></td></tr><tr><td data-num="13"></td><td><pre>大量删除key后快速释放被占用的内存</pre></td></tr><tr><td data-num="14"></td><td><pre>memory purge</pre></td></tr></table></figure><h4 id="问题解决"><a class="anchor" href="#问题解决">#</a> 问题解决</h4>
|
||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>写入问题</pre></td></tr><tr><td data-num="2"></td><td><pre>redis-cli config <span class="token builtin class-name">set</span> stop-writes-on-bgsave-error no</pre></td></tr><tr><td data-num="3"></td><td><pre><span class="token function">sudo</span> <span class="token function">vim</span> /etc/redis/redis.conf把stop-writes-on-bgsave-error改为no</pre></td></tr><tr><td data-num="4"></td><td><pre>修改系统 <span class="token function">sudo</span> <span class="token function">vim</span> /etc/sysctl.conf加入vm.overcommit_memory<span class="token operator">=</span><span class="token number">1</span></pre></td></tr><tr><td data-num="5"></td><td><pre><span class="token function">sudo</span> <span class="token function">sysctl</span> <span class="token assign-left variable">vm.overcommit_memory</span><span class="token operator">=</span><span class="token number">1</span></pre></td></tr></table></figure></content>
|
||
<category term="Linux" scheme="https://blog.jingxiyuan.cn/categories/Linux/" />
|
||
<category term="服务" scheme="https://blog.jingxiyuan.cn/categories/Linux/%E6%9C%8D%E5%8A%A1/" />
|
||
<category term="redis" scheme="https://blog.jingxiyuan.cn/tags/redis/" />
|
||
<updated>2022-10-17T06:07:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/10/14/nginx%E5%85%81%E8%AE%B8%E8%B7%A8%E5%9F%9F%E8%8E%B7%E5%8F%96cookies%E6%96%B9%E6%B3%95/</id>
|
||
<title>nginx允许跨域获取cookie的方法</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/10/14/nginx%E5%85%81%E8%AE%B8%E8%B7%A8%E5%9F%9F%E8%8E%B7%E5%8F%96cookies%E6%96%B9%E6%B3%95/"/>
|
||
<content type="html"><h4 id="使用场景"><a class="anchor" href="#使用场景">#</a> 使用场景</h4>
|
||
<p> 在 A 域名的页面向 B 域名提交数据时需要代入 B 域名的 cookie,否则 B 域名会跳转到登陆页面。解决方式需要使用到 nginx 反向代理,配置如下:</p>
|
||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>server <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="2"></td><td><pre> listen port ssl http2;</pre></td></tr><tr><td data-num="3"></td><td><pre> server_name xxx.com;</pre></td></tr><tr><td data-num="4"></td><td><pre> ssl_certificate_key /xxx.key;</pre></td></tr><tr><td data-num="5"></td><td><pre> ssl_certificate /xxx.pem;</pre></td></tr><tr><td data-num="6"></td><td><pre> proxy_cookie_path ~(.<span class="token important">*)</span> "$1; SameSite=None; secure; httponly";</pre></td></tr><tr><td data-num="7"></td><td><pre></pre></td></tr><tr><td data-num="8"></td><td><pre> location / <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="9"></td><td><pre> <span class="token comment">#允许镶套的方式(可以同域镶套、指定域名镶套或者所有域名镶套)</span></pre></td></tr><tr><td data-num="10"></td><td><pre> add_header X<span class="token punctuation">-</span>Frame<span class="token punctuation">-</span>Options ALLOWALL; <span class="token comment">#允许被所有域名镶套</span></pre></td></tr><tr><td data-num="11"></td><td><pre> proxy_pass http<span class="token punctuation">:</span>//xxx;</pre></td></tr><tr><td data-num="12"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="13"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr></table></figure></content>
|
||
<category term="Linux" scheme="https://blog.jingxiyuan.cn/categories/Linux/" />
|
||
<category term="服务" scheme="https://blog.jingxiyuan.cn/categories/Linux/%E6%9C%8D%E5%8A%A1/" />
|
||
<category term="Nginx" scheme="https://blog.jingxiyuan.cn/categories/Linux/%E6%9C%8D%E5%8A%A1/Nginx/" />
|
||
<category term="nginx" scheme="https://blog.jingxiyuan.cn/tags/nginx/" />
|
||
<category term="iframe" scheme="https://blog.jingxiyuan.cn/tags/iframe/" />
|
||
<category term="cookie" scheme="https://blog.jingxiyuan.cn/tags/cookie/" />
|
||
<updated>2022-10-14T09:13:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/10/12/%E4%BD%BF%E7%94%A8picgo%E4%B8%8A%E4%BC%A0%E5%9B%BE%E7%89%87%E5%88%B0chevereto/</id>
|
||
<title>使用PicGo上传图片到chevereto</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/10/12/%E4%BD%BF%E7%94%A8picgo%E4%B8%8A%E4%BC%A0%E5%9B%BE%E7%89%87%E5%88%B0chevereto/"/>
|
||
<content type="html"><h1 id="简介"><a class="anchor" href="#简介">#</a> 简介</h1>
|
||
<p>PicGo 是一款开源的图床管理工具,十分流行。</p>
|
||
<p>PicGo 官方指南:<span class="exturl" data-url="aHR0cHM6Ly9waWNnby5naXRodWIuaW8vUGljR28tRG9jL3poL2d1aWRlLw==">PicGo | PicGo</span></p>
|
||
<h1 id="配置"><a class="anchor" href="#配置">#</a> 配置</h1>
|
||
<ol>
|
||
<li>
|
||
<p>安装插件(需要先安装 NodeJS)<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/12/2022-10-12-13-24-09.png" alt="" /></p>
|
||
</li>
|
||
<li>
|
||
<p>图床配置 <br />
|
||
url 后缀必须用红线圈中的部分,key 在 chevereto 登陆后 api 配置中查找<br />
|
||
<img data-src="https://file.jingxiyuan.cn/images/2022/10/12/2022-10-12-13-24-51.png" alt="" /></p>
|
||
</li>
|
||
</ol>
|
||
</content>
|
||
<category term="Windows" scheme="https://blog.jingxiyuan.cn/categories/Windows/" />
|
||
<category term="工具" scheme="https://blog.jingxiyuan.cn/categories/Windows/%E5%B7%A5%E5%85%B7/" />
|
||
<category term="PicGo" scheme="https://blog.jingxiyuan.cn/tags/PicGo/" />
|
||
<category term="chevereto" scheme="https://blog.jingxiyuan.cn/tags/chevereto/" />
|
||
<updated>2022-10-12T06:40:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/10/11/svn%E5%BA%93%E8%BD%ACgit%E5%BA%93/</id>
|
||
<title>svn库转git库</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/10/11/svn%E5%BA%93%E8%BD%ACgit%E5%BA%93/"/>
|
||
<content type="html"><h4 id="前期准备"><a class="anchor" href="#前期准备">#</a> 前期准备</h4>
|
||
<p> 首先安装好 svn 和 git 工具。</p>
|
||
<h4 id="svn转git"><a class="anchor" href="#svn转git">#</a> svn 转 git</h4>
|
||
<p>1、 到 svn 项目目录右键选中 gitbash 打开窗口,执行获取用户并映射成 git 样式账号命令如下:<br />
|
||
<code>svn log -q | awk -F '|' '/^r/ &#123;sub(&quot;^ &quot;, &quot;&quot;, $2); sub(&quot; $&quot;, &quot;&quot;, $2); print $2&quot; = &quot;$2&quot; &lt;&quot;$2&quot;&gt;&quot;&#125;' | sort -u &gt; users.txt</code></p>
|
||
<p> 然后会在目录下生成文件 users.txt 样式如:zhansan = 张三 <span class="exturl" data-url="bWFpbHRvOnpoYW5zYW5AeHh4LmNvbQ==">zhansan@xxx.com</span>。</p>
|
||
<p>2、新建个文件夹,将生成的 users.txt 放入新建的文件夹,然后在新建的文件夹中右键选中 gitbash 弹出窗口后执行下面命令(https://svn_project_url/ 为 svn 库的 url),拉取 svn 代码到本地新建文件夹中。<br />
|
||
<code>git svn clone https://svn_project_url/ --no-metadata --no-minimize-url --authors-file=users.txt</code></p>
|
||
<ul>
|
||
<li>期间可能会弹出 svn 的账户密码验证窗口,正确输入即可。</li>
|
||
</ul>
|
||
<h4 id="推送项目到git库"><a class="anchor" href="#推送项目到git库">#</a> 推送项目到 git 库</h4>
|
||
<p>1、在 gitbash 窗口 cd 到 git 项目文件夹中执行以下命令把 git 仓库地址加入到 remote 中(https://git_project_url/ 为 git 库的 url)。<br />
|
||
<code>git remote add origin https://git_project_url/</code></p>
|
||
<p>2、push 项目到 git 库中。<br />
|
||
<code>git push origin master</code></p>
|
||
</content>
|
||
<category term="Windows" scheme="https://blog.jingxiyuan.cn/categories/Windows/" />
|
||
<category term="工具" scheme="https://blog.jingxiyuan.cn/categories/Windows/%E5%B7%A5%E5%85%B7/" />
|
||
<category term="svn" scheme="https://blog.jingxiyuan.cn/tags/svn/" />
|
||
<category term="git" scheme="https://blog.jingxiyuan.cn/tags/git/" />
|
||
<updated>2022-10-11T02:40:00.000Z</updated>
|
||
</entry>
|
||
<entry>
|
||
<id>https://blog.jingxiyuan.cn/2022/10/06/Nginx%E9%85%8D%E7%BD%AEiframe%E8%AE%BF%E9%97%AE/</id>
|
||
<title>Nginx配置iframe访问</title>
|
||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/10/06/Nginx%E9%85%8D%E7%BD%AEiframe%E8%AE%BF%E9%97%AE/"/>
|
||
<content type="html"><h4 id="x-frame-options响应头配置详解"><a class="anchor" href="#x-frame-options响应头配置详解">#</a> X-Frame-Options 响应头配置详解</h4>
|
||
<p> X-Frame-Options HTTP 响应头是用来给浏览器指示允许一个页面可否在,或者 中展现的标记。网站可以使用此功能,来确保自己网站的内容没有被嵌套到别人的网站中去,也从而避免了点击劫持 (clickjacking) 的攻击。<br />
|
||
X-Frame-Options 三个参数:</p>
|
||
<p>1、 DENY</p>
|
||
<p> 表示该页面不允许在 frame 中展示,即便是在相同域名的页面中嵌套也不允许。</p>
|
||
<p>2、SAMEORIGIN</p>
|
||
<p> 表示该页面可以在相同域名页面的 frame 中展示。</p>
|
||
<p>3、ALLOW-FROM uri</p>
|
||
<p> 表示该页面可以在指定来源的 frame 中展示。</p>
|
||
<p>4、ALLOWALL</p>
|
||
<p> 表示该页面可以在任何来源的 frame 中展示。</p>
|
||
<p> 换一句话说,如果设置为 DENY,不光在别人的网站 frame 嵌入时会无法加载,在同域名页面中同样会无法加载。另一方面,如果设置为 SAMEORIGIN,那么页面就可以在同域名页面的 frame 中嵌套。正常情况下我们通常使用 SAMEORIGIN 参数。</p>
|
||
<h4 id="apache配置"><a class="anchor" href="#apache配置">#</a> Apache 配置</h4>
|
||
<p> 需要把下面这行添加到'site' 的配置中</p>
|
||
<p> <code>Header always append X-Frame-Options SAMEORIGIN</code></p>
|
||
<h4 id="nginx配置"><a class="anchor" href="#nginx配置">#</a> Nginx 配置</h4>
|
||
<p> 需要添加到 ‘http’, ‘server’ 或者 ‘location’ 的配置项中,个人来讲喜欢配置在‘server’ 中</p>
|
||
<p> 正常情况下都是使用 SAMEORIGIN 参数,允许同域嵌套<br />
|
||
<code>add_header X-Frame-Options SAMEORIGIN;</code></p>
|
||
<p> 允许单个域名 iframe 嵌套<br />
|
||
<code>add_header X-Frame-Options ALLOW-FROM http://xxx.com/;</code></p>
|
||
<p> 允许多个域名 iframe 嵌套,注意这里是用逗号分隔<br />
|
||
<code>add_header X-Frame-Options &quot;ALLOW-FROM http://xxx.com/,https://xxx.com/&quot;;</code></p>
|
||
<p> 允许任何域名 iframe 嵌套<br />
|
||
<code>add_header X-Frame-Options ALLOWALL;</code></p>
|
||
<h4 id="tomcat配置"><a class="anchor" href="#tomcat配置">#</a> Tomcat 配置</h4>
|
||
<p> 在‘conf/web.xml’填加以下配置</p>
|
||
<figure class="highlight xml"><figcaption data-lang="XML"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>filter</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="2"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>filter-name</span><span class="token punctuation">></span></span>httpHeaderSecurity<span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>filter-name</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="3"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>filter-class</span><span class="token punctuation">></span></span>org.apache.catalina.filters.HttpHeaderSecurityFilter<span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>filter-class</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="4"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>init-param</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="5"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>param-name</span><span class="token punctuation">></span></span>antiClickJackingOption<span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>param-name</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="6"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>param-value</span><span class="token punctuation">></span></span>SAMEORIGIN<span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>param-value</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="7"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>init-param</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="8"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>async-supported</span><span class="token punctuation">></span></span>true<span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>async-supported</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="9"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>filter</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="10"></td><td><pre><span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>filter-mapping</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="11"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>filter-name</span><span class="token punctuation">></span></span>httpHeaderSecurity<span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>filter-name</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="12"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>url-pattern</span><span class="token punctuation">></span></span>/*<span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>url-pattern</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="13"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>dispatcher</span><span class="token punctuation">></span></span>REQUEST<span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>dispatcher</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="14"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>dispatcher</span><span class="token punctuation">></span></span>FORWARD<span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>dispatcher</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="15"></td><td><pre><span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>filter-mapping</span><span class="token punctuation">></span></span></pre></td></tr></table></figure><h4 id="iis配置"><a class="anchor" href="#iis配置">#</a> IIS 配置</h4>
|
||
<p> 添加下面的配置到 ‘Web.config’文件中</p>
|
||
<figure class="highlight xml"><figcaption data-lang="XML"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>system.webServer</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="2"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>httpProtocol</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="3"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>customHeaders</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="4"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;</span>add</span> <span class="token attr-name">name</span><span class="token attr-value"><span class="token punctuation attr-equals">=</span><span class="token punctuation">"</span>X-Frame-Options<span class="token punctuation">"</span></span> <span class="token attr-name">value</span><span class="token attr-value"><span class="token punctuation attr-equals">=</span><span class="token punctuation">"</span>SAMEORIGIN<span class="token punctuation">"</span></span> <span class="token punctuation">/></span></span></pre></td></tr><tr><td data-num="5"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>customHeaders</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="6"></td><td><pre> <span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>httpProtocol</span><span class="token punctuation">></span></span></pre></td></tr><tr><td data-num="7"></td><td><pre><span class="token tag"><span class="token tag"><span class="token punctuation">&lt;/</span>system.webServer</span><span class="token punctuation">></span></span></pre></td></tr></table></figure></content>
|
||
<category term="Linux" scheme="https://blog.jingxiyuan.cn/categories/Linux/" />
|
||
<category term="服务" scheme="https://blog.jingxiyuan.cn/categories/Linux/%E6%9C%8D%E5%8A%A1/" />
|
||
<category term="Nginx" scheme="https://blog.jingxiyuan.cn/categories/Linux/%E6%9C%8D%E5%8A%A1/Nginx/" />
|
||
<category term="nginx" scheme="https://blog.jingxiyuan.cn/tags/nginx/" />
|
||
<category term="iframe" scheme="https://blog.jingxiyuan.cn/tags/iframe/" />
|
||
<updated>2022-10-06T15:46:00.000Z</updated>
|
||
</entry>
|
||
</feed>
|