admin/common-server-public
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

0907

Browse Source
This commit is contained in:
12600k-rog-d4
2026-09-07 10:29:54 +08:00
parent 1e5c48ffdd
commit 774cae3c02
15 changed files with 63 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
certmgr/getcert.sh
View File

@@ -1,8 +1,8 @@
#!/bin/bash #!/bin/bash
# 定义变量 # 定义变量
DOMAIN="registry.deepseak.icu" # 主域名 DOMAIN="stonelan.cn" # 主域名
ADDITIONAL_DOMAINS=("active.deepseak.icu" "bbs.deepseak.icu" "image.deepseak.icu" "gitea.deepseak.icu") # 额外域名 ADDITIONAL_DOMAINS=("gitea.stonelan.cn" "oneapi.stonelan.cn" "navidrome.stonelan.cn" "v.stonelan.cn" "sy.stonelan.cn" "registry.stonelan.cn" "image.stonelan.cn" "fastgpt.stonelan.cn" "membank.stonelan.cn") # 额外域名（与 nginx/conf.d 中的 server_name 对应）
EMAIL="hpuzhagnwei@163.com" # 请替换为你的邮箱地址 EMAIL="hpuzhagnwei@163.com" # 请替换为你的邮箱地址
# 检查 Certbot 是否安装 # 检查 Certbot 是否安装

2
frpc-client/docker-compose.yml
View File

@@ -1,6 +1,6 @@
services: services:
frpc: frpc:
image: frpc-client:latest image: frpc-client:09051708
container_name: frpc-client container_name: frpc-client
restart: unless-stopped restart: unless-stopped
networks: networks:

4
frpc-client/frpc.toml
View File

@@ -1,5 +1,5 @@
# frpc 基础配置 # frpc 基础配置
serverAddr = "47.239.121.24" serverAddr = "47.113.230.48"
serverPort = 7000 serverPort = 7000
auth.method = "token" auth.method = "token"
auth.token = "8f3c9b7d5e2a4f6h1i0j" auth.token = "8f3c9b7d5e2a4f6h1i0j"
@@ -14,7 +14,7 @@ remotePort = 80
[[proxies]] [[proxies]]
name = "https" name = "https"
type = "tcp" type = "tcp"
localIP = "10.0.3.148" localIP = "10.0.3.173"
localPort = 4430 localPort = 4430
remotePort = 443 remotePort = 443

2
nginx/Dockerfile
View File

@@ -22,6 +22,6 @@ RUN mkdir -p /var/log/nginx && \
EXPOSE 80 443 EXPOSE 80 443
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \ HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
CMD wget --no-verbose --tries=1 --spider http://localhost/health || exit 1 CMD wget --no-verbose --tries=1 --spider http://localhost/ || exit 1
CMD ["nginx", "-g", "daemon off;"] CMD ["nginx", "-g", "daemon off;"]

4
nginx/conf.d/fastgpt.conf
View File

@@ -1,9 +1,9 @@
server { server {
listen 80; listen 80;
server_name fastgpt.membank.xyz; server_name fastgpt.stonelan.cn;
location / { location / {
proxy_pass http://10.0.3.14:3000; proxy_pass http://10.0.3.173:3000;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

4
nginx/conf.d/image.conf
View File

@@ -1,9 +1,9 @@
server { server {
listen 80; listen 80;
server_name image.membank.xyz; server_name image.stonelan.cn;
location / { location / {
proxy_pass http://10.0.3.14:3004; proxy_pass http://10.0.3.173:3004;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

2
nginx/conf.d/membank-xyz.conf
View File

@@ -1,6 +1,6 @@
server { server {
listen 80; listen 80;
server_name membank.xyz; server_name stonelan.cn;
root /usr/share/nginx/html/membank; root /usr/share/nginx/html/membank;
index index.html; index index.html;

6
nginx/conf.d/membank.conf
View File

@@ -1,9 +1,9 @@
server { server {
listen 80; listen 80;
server_name membank.membank.xyz; server_name membank.stonelan.cn;
location / { location / {
proxy_pass http://10.0.3.148:3000; proxy_pass http://10.0.3.173:3000;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -15,7 +15,7 @@ server {
proxy_send_timeout 600s; proxy_send_timeout 600s;
} }
location /bbs-go { location /bbs-go {
proxy_pass http://10.0.3.148:9000; proxy_pass http://10.0.3.173:9000;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

2
nginx/conf.d/navidrome.conf
View File

@@ -1,6 +1,6 @@
server { server {
listen 80; listen 80;
server_name navidrome.membank.xyz; server_name navidrome.stonelan.cn;
location / { location / {
proxy_pass http://127.0.0.1:4533; proxy_pass http://127.0.0.1:4533;

2
nginx/conf.d/oneapi.conf
View File

@@ -1,6 +1,6 @@
server { server {
listen 80; listen 80;
server_name oneapi.membank.xyz; server_name oneapi.stonelan.cn;
location / { location / {
proxy_pass http://oneapi:3000; proxy_pass http://oneapi:3000;

2
nginx/conf.d/registry.conf
View File

@@ -1,6 +1,6 @@
server { server {
listen 80; listen 80;
server_name registry.membank.xyz; server_name registry.stonelan.cn;
client_max_body_size 500m; client_max_body_size 500m;
location / { location / {

4
nginx/conf.d/sy.conf
View File

@@ -1,9 +1,9 @@
server { server {
listen 80; listen 80;
server_name sy.membank.xyz; server_name sy.stonelan.cn;
location / { location / {
proxy_pass http://10.0.3.148:6806; proxy_pass http://10.0.3.173:6806;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

2
nginx/conf.d/v.conf
View File

@@ -1,6 +1,6 @@
server { server {
listen 80; listen 80;
server_name v.membank.xyz; server_name v.stonelan.cn;
location / { location / {
root /usr/share/nginx/html/v; root /usr/share/nginx/html/v;

10
nginx/docker-compose.yml
View File

@@ -1,14 +1,16 @@
services: services:
nginx: nginx:
image: nginx:alpine image: nginx:09051708
container_name: nginx-proxy container_name: nginx-proxy
ports: ports:
- "8081:80" - "8081:80"
- "4430:443" - "4430:443"
volumes: # 配置已内嵌于镜像（构建时 COPY 进 /etc/nginx），故不挂载 conf.d
- ./conf.d:/etc/nginx/conf.d:ro
- ./nginx.conf:/etc/nginx/nginx.conf:ro
restart: unless-stopped restart: unless-stopped
networks: networks:
- trim-default - trim-default
networks:
trim-default:
external: true

37
迁移任务.md Normal file
View File

@@ -0,0 +1,37 @@
1. common-server-public 是局域网机器，需要部署服务的源码仓库
2. 之前这些服务是运行在10.0.3.148 这个局域网机器上
3. 现在我想把这些服务迁移到10.0.3.173 这个机器上 （用户名admin,密码admin123）
4. 公网服务器 47.113.230.48 用户名root ,
密钥文件：-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
5. 10.0.3.5 awei 123456 是一个ubuntu 环境 ，可以左右开发机使用 ，需要linux 环境时，比如docker build 等
6. frpc 服务器地址，改成47.113.230.48
7. 在47.113.230.48 这个机器上，给我部署frpcserver ,本地仓有frpc server 的代码
8. 本地这个nginx部署到10.0.3.173 这个机器上，配置中的域名，更换为stonelan.cn,这是个飞牛系统，最好能让我在飞牛的docker 面板中 能看到这些容器
9. 给我部署个gitea， gitean.stonelan.cn 映射好，考察本地仓库，你能明白应该如何修改