109 lines
3.9 KiB
Markdown
109 lines
3.9 KiB
Markdown
|
<div style="display: flex;">
|
|||
|
|
<img src="http://121.8.219.2:18887/logo.png" height="30" />
|
|||
|
|
<div style="margin-left: 5px; font-size: 30px; line-height: 30px; font-weight: bold;">梦想家内容管理系统</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
----------
|
|||
|
|
### 应用打包
|
|||
|
|
1. 启动应用
|
|||
|
|
```shell
|
|||
|
|
cd /opt/programs/
|
|||
|
|
# 普通打包，以下命令根据自己实际情况来选择
|
|||
|
|
nohup java -jar dreamer-cms.jar > dreamer-cms.log &
|
|||
|
|
# 将jar包单独打到目录中
|
|||
|
|
# nohup java -Dloader.path=libs/ -jar dreamer-cms.jar > dreamer-cms.log &
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
2. 配置Nginx
|
|||
|
|
1. 普通方式（Http）
|
|||
|
|
```shell
|
|||
|
|
server {
|
|||
|
|
listen 80;
|
|||
|
|
server_name www.iteachyou.cc iteachyou.cc;
|
|||
|
|
|
|||
|
|
location / {
|
|||
|
|
add_header X-Via $upstream_addr;
|
|||
|
|
proxy_ignore_client_abort on;
|
|||
|
|
proxy_set_header Host $http_host;
|
|||
|
|
proxy_set_header Cookie $http_cookie;
|
|||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|||
|
|
proxy_set_header X-Forwarded-For $http_x_forwarded_for;
|
|||
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|||
|
|
proxy_pass http://127.0.0.1:8888;
|
|||
|
|
proxy_set_header Upgrade $http_upgrade;
|
|||
|
|
proxy_set_header Connection "upgrade";
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
```
|
|||
|
|
2. SSL方式（Https）
|
|||
|
|
```shell
|
|||
|
|
server {
|
|||
|
|
listen 80;
|
|||
|
|
server_name www.iteachyou.cc iteachyou.cc;
|
|||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|||
|
|
|
|||
|
|
rewrite ^(.*)$ https://$host$1 permanent; # 强制http进入https
|
|||
|
|
|
|||
|
|
error_page 403 404 /update.html;
|
|||
|
|
location = /update.html {
|
|||
|
|
root html;
|
|||
|
|
}
|
|||
|
|
# redirect server error pages to the static page /50x.html
|
|||
|
|
error_page 500 502 503 504 /50x.html;
|
|||
|
|
location = /50x.html {
|
|||
|
|
root html;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
server {
|
|||
|
|
#SSL 访问端口号为 443
|
|||
|
|
listen 443 ssl;
|
|||
|
|
#填写绑定证书的域名
|
|||
|
|
server_name www.iteachyou.cc iteachyou.cc;
|
|||
|
|
#证书文件名称（修改为自己的路径）
|
|||
|
|
ssl_certificate /opt/ssl/iteachyou.cc/1_iteachyou.cc_bundle.crt;
|
|||
|
|
#私钥文件名称（修改为自己的路径）
|
|||
|
|
ssl_certificate_key /opt/ssl/iteachyou.cc/2_iteachyou.cc.key;
|
|||
|
|
ssl_session_timeout 5m;
|
|||
|
|
#请按照这个协议配置
|
|||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
|||
|
|
#请按照这个套件配置，配置加密套件，写法遵循 openssl 标准。
|
|||
|
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
|
|||
|
|
ssl_prefer_server_ciphers on;
|
|||
|
|
location / {
|
|||
|
|
add_header X-Via $upstream_addr;
|
|||
|
|
proxy_ignore_client_abort on;
|
|||
|
|
proxy_set_header Host $http_host;
|
|||
|
|
proxy_set_header Cookie $http_cookie;
|
|||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|||
|
|
proxy_set_header X-Forwarded-For $http_x_forwarded_for;
|
|||
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|||
|
|
proxy_pass http://127.0.0.1:8888;
|
|||
|
|
proxy_redirect ~^http://([^:]+)(:\d+)?(.*)$ https://$1$3;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
```
|
|||
|
|
3. 配置Websocket，在nginx.conf中http模块中
|
|||
|
|
```shell
|
|||
|
|
#websocket
|
|||
|
|
map $http_upgrade $connection_upgrade {
|
|||
|
|
default upgrade;
|
|||
|
|
'' close;
|
|||
|
|
}
|
|||
|
|
```
|
|||
|
|
4. 配置Gzip压缩，在nginx.conf中http模块中
|
|||
|
|
```shell
|
|||
|
|
# 开启gzip
|
|||
|
|
gzip on;
|
|||
|
|
# 启用gzip压缩的最小文件；小于设置值的文件将不会被压缩
|
|||
|
|
gzip_min_length 1k;
|
|||
|
|
# gzip 压缩级别 1-10
|
|||
|
|
gzip_comp_level 4;
|
|||
|
|
# 进行压缩的文件类型。
|
|||
|
|
gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
|
|||
|
|
# 是否在http header中添加Vary: Accept-Encoding，建议开启
|
|||
|
|
gzip_vary on;
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
3. 上线后配置
|
|||
|
|
项目通过以上步骤，则可以正常通过域名或IP访问后台，但是后台中还需要配置一些网址。网站配置=>网站地址需要修改为正式的域名或IP地址，如：https://www.iteachyou.cc/ 或 http://192.168.1.10:8888/
|