Docker7530
141 lines
2.7 KiB
Markdown
141 lines
2.7 KiB
Markdown
82.158.226.4
|
||
|
||
先删除 ssh 密钥和会话，防止第一次链接失败。
|
||
|
||
```
|
||
curl -fsSL https://cloud.vipcloud.cc/vipcloud_disk.sh | sudo bash
|
||
```
|
||
|
||
# 1Panel【域名】
|
||
|
||
## （1）安装面板
|
||
|
||
[1Panel 服务器运维管理面板](https://1panel.cn/)
|
||
|
||
```
|
||
域名访问: https://1panel.excalicode.org
|
||
外部地址: http://82.158.226.4:31693
|
||
面板用户: excalicode
|
||
面板密码: 6cd500f202
|
||
```
|
||
|
||
## （2）申请面板证书
|
||
|
||
DNS 账户 Cloudflare
|
||
|
||
```
|
||
MPLkv5dlbyKh_q0DdvH5ECxaUHVr5BVg0Ogf5AOH
|
||
```
|
||
|
||
为 1panel.excalicode.org 申请证书
|
||
|
||
## （3）面板设置
|
||
|
||
1. 面板设置 - 安全 里关掉安全入口，对绑定域名后用域名访问面板友好
|
||
2. 面板设置 - 安全 里 开启面板 SSL
|
||
3. 在系统 - SSH 管理修改链接端口、关闭密码认证、开启密钥认证、授权密钥
|
||
4. 配置终端，方便后续操作
|
||
|
||
```
|
||
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBfW4LWZ/HxIHdQcT+bnUUa5Tqbbag5otkv+y6OkDa9I
|
||
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP87fXzm4HSwkS3XaJHGTsEeiu4o9lLlu+ZEwHGuSbzS github-actions
|
||
```
|
||
|
||
## （4）CF 设置
|
||
|
||
1. cloudflare DNS 添加记录
|
||
2. 在 Cloudflare 中先设定好 Origin Rules 以准备将面板域名请求自动重写到 1Panel 端口，目标端口： 选择 重写到 面板端口号
|
||
|
||
CF 小技巧：
|
||
|
||
1. 在 Cloudflare 的侧栏点击 SSL/TLS，选择**完全（严格）**
|
||
2. 在侧栏点击**边缘证书**，开启下列选项：
|
||
- 始终使用 HTTPS
|
||
- 随机加密
|
||
- TLS 1.3
|
||
- 自动 HTTPS 重写
|
||
- 证书透明度监视
|
||
|
||
## （5）安装 Openresty
|
||
|
||
# Sub-Store【域名】
|
||
|
||
docker-compose.yml
|
||
|
||
```yaml
|
||
services:
|
||
sub-store:
|
||
image: xream/sub-store:http-meta
|
||
container_name: sub-store
|
||
restart: always
|
||
network_mode: host
|
||
environment:
|
||
SUB_STORE_BACKEND_API_HOST: 127.0.0.1
|
||
SUB_STORE_BACKEND_API_PORT: 3001
|
||
SUB_STORE_BACKEND_MERGE: true
|
||
SUB_STORE_FRONTEND_BACKEND_PATH: /AZmFbXAp9Tyhws
|
||
PORT: 9876
|
||
HOST: 127.0.0.1
|
||
volumes:
|
||
- sub-store-data:/opt/app/data
|
||
|
||
volumes:
|
||
sub-store-data:
|
||
```
|
||
|
||
申请证书并在 Openresty 中反向代理 3001
|
||
|
||
访问地址
|
||
|
||
```
|
||
https://sub-store.excalicode.org?api=https://sub-store.excalicode.org/AZmFbXAp9Tyhws
|
||
```
|
||
|
||
# OpenClaw【域名】
|
||
|
||
# MySQL
|
||
|
||
```
|
||
root
|
||
ykz2WKZ@vke6rmk*req
|
||
|
||
13306
|
||
```
|
||
|
||
# Redis
|
||
|
||
```
|
||
jgw5wpe!HVB@vem2wmp
|
||
|
||
16379
|
||
```
|
||
|
||
# Gitea
|
||
|
||
注意如果套了 cloudflare 会有文件大小限制，可暂时通过修改 hosts 来处理。同时注意调整 Openresty 中 `client_max_body_size` 的设置。
|
||
|
||
```
|
||
数据库 gitea
|
||
数据库用户 gitea
|
||
数据库密码 ykz2WKZ@vke6rmk*req
|
||
|
||
HTTP 端口 3000
|
||
SSH 端口 222
|
||
```
|
||
|
||
# excalicode
|
||
|
||
服务用户
|
||
|
||
```
|
||
http://82.158.226.4/
|
||
ibs
|
||
8GE6Ccs7kWwiSzWA
|
||
```
|
||
|
||
前端站点
|
||
|
||
```
|
||
/opt/1panel/www/sites/82.158.226.4/
|
||
```
|