梦想家内容管理系统

应用打包

  1. 启动应用

    cd /opt/programs/
# 普通打包，以下命令根据自己实际情况来选择
nohup java -jar dreamer-cms.jar > dreamer-cms.log &
# 将jar包单独打到目录中
# nohup java -Dloader.path=libs/ -jar dreamer-cms.jar > dreamer-cms.log &

  2. 配置Nginx

    1. 普通方式（Http）

      server {
 listen       80;
 server_name  www.iteachyou.cc iteachyou.cc;

 location / {
     add_header X-Via $upstream_addr;
     proxy_ignore_client_abort on;
     proxy_set_header Host  $http_host;
     proxy_set_header Cookie $http_cookie;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $http_x_forwarded_for;
     proxy_set_header X-Forwarded-Proto $scheme;
     proxy_pass http://127.0.0.1:8888;
     proxy_set_header Upgrade $http_upgrade;
     proxy_set_header Connection "upgrade";
 }
}

    2. SSL方式（Https）

      server {
 listen       80;
 server_name  www.iteachyou.cc iteachyou.cc;
 proxy_set_header X-Real-IP $remote_addr;

 rewrite ^(.*)$ https://$host$1 permanent; # 强制http进入https 

 error_page  403 404  /update.html;
     location = /update.html {
     root html;
 }
 # redirect server error pages to the static page /50x.html
 error_page   500 502 503 504  /50x.html;
     location = /50x.html {
     root   html;
 }
}
server {
#SSL 访问端口号为 443
listen 443 ssl;
#填写绑定证书的域名
server_name www.iteachyou.cc iteachyou.cc;
#证书文件名称（修改为自己的路径）
ssl_certificate /opt/ssl/iteachyou.cc/1_iteachyou.cc_bundle.crt;
#私钥文件名称（修改为自己的路径）
ssl_certificate_key /opt/ssl/iteachyou.cc/2_iteachyou.cc.key;
ssl_session_timeout 5m;
#请按照这个协议配置
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
#请按照这个套件配置，配置加密套件，写法遵循 openssl 标准。
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
location / {
  add_header X-Via $upstream_addr;
  proxy_ignore_client_abort on;
  proxy_set_header Host  $http_host;
  proxy_set_header Cookie $http_cookie;
  proxy_set_header X-Real-IP $remote_addr;
  proxy_set_header X-Forwarded-For $http_x_forwarded_for;
  proxy_set_header X-Forwarded-Proto $scheme;
  proxy_pass http://127.0.0.1:8888;
  proxy_redirect ~^http://([^:]+)(:\d+)?(.*)$  https://$1$3;
}
}
    3. 配置Websocket，在nginx.conf中http模块中
      #websocket
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
    4. 配置Gzip压缩，在nginx.conf中http模块中
      # 开启gzip
gzip on;
# 启用gzip压缩的最小文件；小于设置值的文件将不会被压缩
gzip_min_length 1k;
# gzip 压缩级别 1-10 
gzip_comp_level 4;
# 进行压缩的文件类型。
gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
# 是否在http header中添加Vary: Accept-Encoding，建议开启
gzip_vary on;

  3. 上线后配置 项目通过以上步骤，则可以正常通过域名或IP访问后台，但是后台中还需要配置一些网址。网站配置=>网站地址需要修改为正式的域名或IP地址，如：https://www.iteachyou.cc/ 或 http://192.168.1.10:8888/

results matching ""

    No results matching ""