Appearance
1.本地镜像安装
1.1 安装
本地使用 nginx 推荐使用 openresty
如果不会再找我
yum install -y gcc-c++ cmake make freetype-devel libpng-devel libjpeg-devel curl-devel libxml2-devel libmcrypt-devel ncurses-devel mhash-devel pcre-devel openssl-devel openldap-devel openldap-devel libtool-ltdl-devel neon-devel wget vim*
./configure --prefix=/usr/local/openresty
gmake && gmake install
yum install -y gcc-c++ cmake make freetype-devel libpng-devel libjpeg-devel curl-devel libxml2-devel libmcrypt-devel ncurses-devel mhash-devel pcre-devel openssl-devel openldap-devel openldap-devel libtool-ltdl-devel neon-devel wget vim*
./configure --prefix=/usr/local/openresty
gmake && gmake install测试
#测试配置文件
/usr/local/openresty/nginx/sbin/nginx -t
#启动
/usr/local/openresty/nginx/sbin/nginx
#重启
/usr/local/openresty/nginx/sbin/nginx -s reload#测试配置文件
/usr/local/openresty/nginx/sbin/nginx -t
#启动
/usr/local/openresty/nginx/sbin/nginx
#重启
/usr/local/openresty/nginx/sbin/nginx -s reload安装完后 配置文件
1.2 conf/nginx.conf
user www www;
worker_processes 8;
#error_log /data/logs/nginx/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;
#pid logs/nginx.pid;
events {
use epoll;
worker_connections 51200;
}
http {
include mime.types;
default_type application/octet-stream;
sendfile on;
tcp_nopush on;
server_names_hash_bucket_size 128;
client_header_buffer_size 128k;
large_client_header_buffers 4 128k;
access_log off;
# access_log logs/access_log.log;
keepalive_timeout 60;
tcp_nodelay on;
gzip on;
include vhosts/*;
fastcgi_connect_timeout 3000;
fastcgi_send_timeout 3000;
fastcgi_read_timeout 3000;
}user www www;
worker_processes 8;
#error_log /data/logs/nginx/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;
#pid logs/nginx.pid;
events {
use epoll;
worker_connections 51200;
}
http {
include mime.types;
default_type application/octet-stream;
sendfile on;
tcp_nopush on;
server_names_hash_bucket_size 128;
client_header_buffer_size 128k;
large_client_header_buffers 4 128k;
access_log off;
# access_log logs/access_log.log;
keepalive_timeout 60;
tcp_nodelay on;
gzip on;
include vhosts/*;
fastcgi_connect_timeout 3000;
fastcgi_send_timeout 3000;
fastcgi_read_timeout 3000;
}1.3 在 conf/vhosts/ 下面建立 default
server
{
listen 80;
server_name pigai.org;
index index.html index.php index.shtml index.htm ;
root /data/app/default;
location / {
proxy_pass http://www.pigai.org;
header_filter_by_lua_block {
ngx.header["X-Powered-By"] = nil
}
proxy_set_header Host www.pigai.org; #逃过检测
proxy_set_header P-Host $host; #逃过检测 标记
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwardd-For $proxy_add_x_forwarded_for;
proxy_connect_timeout 120 s;
proxy_read_timeout 120s;
proxy_send_timeout 120s;
proxy_buffer_size 64k;
proxy_buffers 4 64k;
break;
}
## xss 安全
if ( $args ~* "set([^&=]+)var" ) {
return 403;
}
if ( $args ~* "set(.+)echo" ) {
return 403;
}
if ( $args ~* "this\.src" ) {
return 403;
}
if ( $args ~* "(iframe%3E|%2fiframe)" ) {
return 403;
}
if ( $args ~* "(script%3E|%2fscript)" ) {
return 403;
}
## 系统
if ( $args ~* "(etc\/passwd)" ) {
return 403;
}
#下面的范文比较大 请谨慎使用
if ( $args ~* "%3C" ) {
return 403;
}
if ( $args ~* "%3E" ) {
return 403;
}
if ( $args ~* "\(*+\)" ) {
return 403;
}
}server
{
listen 80;
server_name pigai.org;
index index.html index.php index.shtml index.htm ;
root /data/app/default;
location / {
proxy_pass http://www.pigai.org;
header_filter_by_lua_block {
ngx.header["X-Powered-By"] = nil
}
proxy_set_header Host www.pigai.org; #逃过检测
proxy_set_header P-Host $host; #逃过检测 标记
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwardd-For $proxy_add_x_forwarded_for;
proxy_connect_timeout 120 s;
proxy_read_timeout 120s;
proxy_send_timeout 120s;
proxy_buffer_size 64k;
proxy_buffers 4 64k;
break;
}
## xss 安全
if ( $args ~* "set([^&=]+)var" ) {
return 403;
}
if ( $args ~* "set(.+)echo" ) {
return 403;
}
if ( $args ~* "this\.src" ) {
return 403;
}
if ( $args ~* "(iframe%3E|%2fiframe)" ) {
return 403;
}
if ( $args ~* "(script%3E|%2fscript)" ) {
return 403;
}
## 系统
if ( $args ~* "(etc\/passwd)" ) {
return 403;
}
#下面的范文比较大 请谨慎使用
if ( $args ~* "%3C" ) {
return 403;
}
if ( $args ~* "%3E" ) {
return 403;
}
if ( $args ~* "\(*+\)" ) {
return 403;
}
}1.4 测试调通
http://ip 这个是首页 需要服务端做相应的配置 才能显示
2.服务端配置
2.1 修改 conf/nserver.php
key 用ip 或者 域名 就是访问地址
,'202.202.200.131'=>array('name'=>'四川外国语大学' ,'tpl'=>'sisu.edu.cn')
2.2修改 template/2011/login.html
sisu.edn.cn 就是 2.1中的 tpl
2.3增加模板文件 login_xxx.html
放在 template\2011\ login_xxx.html
这边以 login_sisu.html 为例子,模板文件的内容 泪痣上下 copy 一个数量就好
然后批量替换 里面的图片 文字
图片可以叫设计帮忙做 轮播图 跟logo
基本2张轮播图 +1张logo
把图 相应的放到 res\images 下面
3.本地数据备份
3.1 mysql安装(DEL)
直接参考3.5一键安装
plain
# 下载
shell> wget https://dev.mysql.com/get/mysql57-community-release-el7-11.noarch.rpm
# 安装 mysql 源
shell> yum localinstall mysql57-community-release-el7-11.noarch.rpm
#检查是否成功
shell> yum repolist enabled | grep "mysql.*-community.*"
#yum 安装
shell> yum install -y mysql-community-server# 下载
shell> wget https://dev.mysql.com/get/mysql57-community-release-el7-11.noarch.rpm
# 安装 mysql 源
shell> yum localinstall mysql57-community-release-el7-11.noarch.rpm
#检查是否成功
shell> yum repolist enabled | grep "mysql.*-community.*"
#yum 安装
shell> yum install -y mysql-community-server参考 https://www.jianshu.com/p/1dab9a4d0d5f
报错的话
The GPG keys listed for the "MySQL 5.7 Community Server" repository are already installed but they are not correct for this package. https://www.cnblogs.com/volun/p/15824751.html
3.2 PHP安装(DEL)
直接参考3.5 一键安装
3.2.1 centos8下安装php5.6(默认安装目录:/opt/remi/php56 )
plain
//1. 安装 REMI 源:
yum install http://rpms.remirepo.net/enterprise/remi-release-8.rpm
yum install dnf-utils -y
yum config-manager --set-enabled remi
//2. 定义php版本
phpversion=php56
//3. 安装组件
yum install -y $phpversion-php-fpm $phpversion-php-cli $phpversion-php-bcmath $phpversion-php-gd $phpversion-php-json $phpversion-php-mbstring $phpversion-php-mcrypt $phpversion-php-mysqlnd $phpversion-php-opcache $phpversion-php-pdo $phpversion-php-pecl-crypto $phpversion-php-pecl-mcrypt $phpversion-php-pecl-geoip $phpversion-php-recode $phpversion-php-snmp $phpversion-php-soap $phpversion-php-xml
//4. 配置项
sed -i 's/;cgi.fix_pathinfo=1/cgi.fix_pathinfo=0/' /etc/opt/remi/php56/php.ini
//5. 重启php
systemctl restart php56-php-fpm
//6. 设置开机启动:
systemctl enable php56-php-fpm//1. 安装 REMI 源:
yum install http://rpms.remirepo.net/enterprise/remi-release-8.rpm
yum install dnf-utils -y
yum config-manager --set-enabled remi
//2. 定义php版本
phpversion=php56
//3. 安装组件
yum install -y $phpversion-php-fpm $phpversion-php-cli $phpversion-php-bcmath $phpversion-php-gd $phpversion-php-json $phpversion-php-mbstring $phpversion-php-mcrypt $phpversion-php-mysqlnd $phpversion-php-opcache $phpversion-php-pdo $phpversion-php-pecl-crypto $phpversion-php-pecl-mcrypt $phpversion-php-pecl-geoip $phpversion-php-recode $phpversion-php-snmp $phpversion-php-soap $phpversion-php-xml
//4. 配置项
sed -i 's/;cgi.fix_pathinfo=1/cgi.fix_pathinfo=0/' /etc/opt/remi/php56/php.ini
//5. 重启php
systemctl restart php56-php-fpm
//6. 设置开机启动:
systemctl enable php56-php-fpm3.3 本地程序部署
a.初始化
plain
方案一:
#本地建立目录
mkdir -p /data/app/fxphp/apps/
cd /data/app/fxphp/apps/
#代码更新 svn 账号密码给我要下
svn co http://svn.server.com/svn/local.pigai.org
#复制框架 并解压fxphp202009.zip
cp ~/fxphp202009.zip /data/app/fxphp/apps/
unzip fxphp202009.zip
方案二:
使用本地源码fxphp.zip方案一:
#本地建立目录
mkdir -p /data/app/fxphp/apps/
cd /data/app/fxphp/apps/
#代码更新 svn 账号密码给我要下
svn co http://svn.server.com/svn/local.pigai.org
#复制框架 并解压fxphp202009.zip
cp ~/fxphp202009.zip /data/app/fxphp/apps/
unzip fxphp202009.zip
方案二:
使用本地源码fxphp.zipb.数据导入
再安装之前 初始化的数据先在99上做好
c.本地local安装
plain
1.将update_version/conf_db.php 复制到 conf/下 并修改用户跟密码
一般是 conf/conf_db_bak.php 复制conf/conf_db.php
修改数据库名配置 把'dbname'=> 'pigai_nju',//数据库名
2.将update_version/pigai_local.sql 数据导入数据库当中
一般都是在local.pigai.org上先弄好
3.将server_name_bak.php 复制 server_name.php
修改配置
define('_school','南通大学');
define('_school_title','南通大学英语作文本地备份');
4.修改权限
chmod 777 -R cache
chmod 777 -R template/lc_2012_c/1.将update_version/conf_db.php 复制到 conf/下 并修改用户跟密码
一般是 conf/conf_db_bak.php 复制conf/conf_db.php
修改数据库名配置 把'dbname'=> 'pigai_nju',//数据库名
2.将update_version/pigai_local.sql 数据导入数据库当中
一般都是在local.pigai.org上先弄好
3.将server_name_bak.php 复制 server_name.php
修改配置
define('_school','南通大学');
define('_school_title','南通大学英语作文本地备份');
4.修改权限
chmod 777 -R cache
chmod 777 -R template/lc_2012_c/d. crontab 在备份机器上 每日定点备份
plain
1. php -f crontab/uplog.php 取得下载任务
2. php -f crontab/save.php 执行下载任务
3. php -f crontab/upteacher.php 更新老师数
crontab:
10 2 * * * /usr/local/php/bin/php -f /data/app/fxphp/apps/local.pigai.org/crontab/uplog.php
40 3 * * * /usr/local/php/bin/php -f /data/app/fxphp/apps/local.pigai.org/crontab/save.php >/dev/null 2>&1
40 6 * * * /usr/local/php/bin/php -f /data/app/fxphp/apps/local.pigai.org/crontab/upteacher.php1. php -f crontab/uplog.php 取得下载任务
2. php -f crontab/save.php 执行下载任务
3. php -f crontab/upteacher.php 更新老师数
crontab:
10 2 * * * /usr/local/php/bin/php -f /data/app/fxphp/apps/local.pigai.org/crontab/uplog.php
40 3 * * * /usr/local/php/bin/php -f /data/app/fxphp/apps/local.pigai.org/crontab/save.php >/dev/null 2>&1
40 6 * * * /usr/local/php/bin/php -f /data/app/fxphp/apps/local.pigai.org/crontab/upteacher.php
3.4 nginx vhosts 配置
开81端口
plain
vim /usr/local/openresty/nginx/conf/vhosts/defautl_81vim /usr/local/openresty/nginx/conf/vhosts/defautl_81defautl_81配置
plain
server
{
listen 81;
server_name local.pigai.org;
index index.html index.php index.shtml index.htm ;
root /data/app/fxphp/apps/local.pigai.org/;
location ~ ^(.*)\/\.svn\/{
return 404;
}
location ~ .*\.php?$
{
include fastcgi_judian;
}
location ~* .(jpg|gif|png|js)$ {
if (-f $request_filename) {
expires max;
break;
}
}
}server
{
listen 81;
server_name local.pigai.org;
index index.html index.php index.shtml index.htm ;
root /data/app/fxphp/apps/local.pigai.org/;
location ~ ^(.*)\/\.svn\/{
return 404;
}
location ~ .*\.php?$
{
include fastcgi_judian;
}
location ~* .(jpg|gif|png|js)$ {
if (-f $request_filename) {
expires max;
break;
}
}
}3.5 LNMP一键安装 NGINX PHP mysql
plain
#下载
wget http://soft.vpser.net/lnmp/lnmp1.7.tar.gz -cO lnmp1.7.tar.gz
tar zxf lnmp1.7.tar.gz
cd lnmp1.7
lnmp
#选择mysql 5.6,php 5.6#下载
wget http://soft.vpser.net/lnmp/lnmp1.7.tar.gz -cO lnmp1.7.tar.gz
tar zxf lnmp1.7.tar.gz
cd lnmp1.7
lnmp
#选择mysql 5.6,php 5.64.网络、自启动等基础配置
4.1 nmcli 网络配置
centOS7之后的网路配置 使用nmcli
plain
#查看网络设备
nmcli d
#查看链接 如果有设置没有链接 需要添加
nmcli c
#添加链接
nmcli c add type ethernet con-name ens33 ifname ens33 ipv4.addr 218.194.248.211/26 ipv4.gateway 218.194.248.193 ipv4.method manual
#网络重启
nmcli c reload
#停止网卡
nmcli c down ens33
#启动网卡
nmcli c up ens33#查看网络设备
nmcli d
#查看链接 如果有设置没有链接 需要添加
nmcli c
#添加链接
nmcli c add type ethernet con-name ens33 ifname ens33 ipv4.addr 218.194.248.211/26 ipv4.gateway 218.194.248.193 ipv4.method manual
#网络重启
nmcli c reload
#停止网卡
nmcli c down ens33
#启动网卡
nmcli c up ens33nmcli 请参考 https://www.jianshu.com/p/fe644bbaf8a8
4.2 防火墙 firewalld
plain
开22端口
firewall-cmd --zone=public --add-port=22/tcp --permanent
开启80端口
[root@centos7 ~]# firewall-cmd --zone=public --add-port=80/tcp --permanent
重启防火墙:
[root@centos7 ~]# firewall-cmd --reload
查询有哪些端口是开启的:
[root@centos7 ~]# firewall-cmd --list-port
#防火墙 自启动
systemctl enable firewalld开22端口
firewall-cmd --zone=public --add-port=22/tcp --permanent
开启80端口
[root@centos7 ~]# firewall-cmd --zone=public --add-port=80/tcp --permanent
重启防火墙:
[root@centos7 ~]# firewall-cmd --reload
查询有哪些端口是开启的:
[root@centos7 ~]# firewall-cmd --list-port
#防火墙 自启动
systemctl enable firewalld4.3 NGINX自启动
plain
cd /lib/systemd/system/
vim nginx.servicecd /lib/systemd/system/
vim nginx.service在 nginx.service 添加
plain
[Unit]
Description=nginx service
After=network.target
[Service]
Type=forking
ExecStart=/usr/local/openresty/nginx/sbin/nginx
ExecReload=/usr/local/openresty/nginx/sbin/nginx -s reload
ExecStop=/usr/local/openresty/nginx/sbin/nginx -s quit
PrivateTmp=true
[Install]
WantedBy=multi-user.target[Unit]
Description=nginx service
After=network.target
[Service]
Type=forking
ExecStart=/usr/local/openresty/nginx/sbin/nginx
ExecReload=/usr/local/openresty/nginx/sbin/nginx -s reload
ExecStop=/usr/local/openresty/nginx/sbin/nginx -s quit
PrivateTmp=true
[Install]
WantedBy=multi-user.targetplain
#添加NGINX 自启动
systemctl enable nginx
#nginx 启动
systemctl start nginx.service#添加NGINX 自启动
systemctl enable nginx
#nginx 启动
systemctl start nginx.service5.工具
1 . SecureCRT
SecureCRT 绿色版破解版 v8.5.4中文版
http://www.kkx.net/soft/473.html
https://cloud.189.cn/t/fee6Vv3EvMBf(访问码:3toc)
2. vmware
https://cloud.189.cn/t/r67f6vqq2ENj(访问码:bcb2)
HIGO