hz-website/backend/docs/chapter08/Online.md

梦想家内容管理系统

---

应用打包

1. 启动应用

cd /opt/programs/
# 普通打包，以下命令根据自己实际情况来选择
nohup java -jar dreamer-cms.jar > dreamer-cms.log &
# 将jar包单独打到目录中
# nohup java -Dloader.path=libs/ -jar dreamer-cms.jar > dreamer-cms.log &

2. 配置Nginx

   1. 普通方式（Http）

   server {
        listen       80;
        server_name  www.iteachyou.cc iteachyou.cc;
   
        location / {
            add_header X-Via $upstream_addr;
            proxy_ignore_client_abort on;
            proxy_set_header Host  $http_host;
            proxy_set_header Cookie $http_cookie;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $http_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_pass http://127.0.0.1:8888;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
        }
   }
   

   2. SSL方式（Https）

   server {
        listen       80;
        server_name  www.iteachyou.cc iteachyou.cc;
        proxy_set_header X-Real-IP $remote_addr;
   
        rewrite ^(.*)$ https://$host$1 permanent; # 强制http进入https 
   
        error_page  403 404  /update.html;
            location = /update.html {
            root html;
        }
        # redirect server error pages to the static page /50x.html
        error_page   500 502 503 504  /50x.html;
            location = /50x.html {
            root   html;
        }
   }
   server {
      #SSL 访问端口号为 443
      listen 443 ssl;
      #填写绑定证书的域名
      server_name www.iteachyou.cc iteachyou.cc;
      #证书文件名称（修改为自己的路径）
      ssl_certificate /opt/ssl/iteachyou.cc/1_iteachyou.cc_bundle.crt;
      #私钥文件名称（修改为自己的路径）
      ssl_certificate_key /opt/ssl/iteachyou.cc/2_iteachyou.cc.key;
      ssl_session_timeout 5m;
      #请按照这个协议配置
      ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
      #请按照这个套件配置，配置加密套件，写法遵循 openssl 标准。
      ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
      ssl_prefer_server_ciphers on;
      location / {
         add_header X-Via $upstream_addr;
         proxy_ignore_client_abort on;
         proxy_set_header Host  $http_host;
         proxy_set_header Cookie $http_cookie;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $http_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
         proxy_pass http://127.0.0.1:8888;
         proxy_redirect ~^http://([^:]+)(:\d+)?(.*)$  https://$1$3;
      }
   }
   

   3. 配置Websocket，在nginx.conf中http模块中

   #websocket
   map $http_upgrade $connection_upgrade {
       default upgrade;
       '' close;
   }
   

   4. 配置Gzip压缩，在nginx.conf中http模块中

   # 开启gzip
   gzip on;
   # 启用gzip压缩的最小文件；小于设置值的文件将不会被压缩
   gzip_min_length 1k;
   # gzip 压缩级别 1-10 
   gzip_comp_level 4;
   # 进行压缩的文件类型。
   gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
   # 是否在http header中添加Vary: Accept-Encoding，建议开启
   gzip_vary on;
   

3. 上线后配置 项目通过以上步骤，则可以正常通过域名或IP访问后台，但是后台中还需要配置一些网址。网站配置=>网站地址需要修改为正式的域名或IP地址，如：https://www.iteachyou.cc/ 或 http://192.168.1.10:8888/