分类： 学习笔记

nginx的配置文件

    location ^~ /es/ {
#                auth_basic "Please input password";   #这里是验证时的提示信息
#                auth_basic_user_file password/passwd;
                proxy_redirect off;
                rewrite ^/es/(.*)$ /$1 break;
                proxy_http_version 1.1;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header REMOTE-HOST $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_pass http://kibana:5601/;
}

kibana.xml

server.name: kibana  
server.host: "0"  ## 任意主机可访问
elasticsearch.hosts: [ "http://elasticsearch:9200" ]
monitoring.ui.container.elasticsearch.enabled: true
i18n.locale: "zh-CN" ## 中文显示
server.basePath: "/es"  ## 与nginx一致

rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org
yum install https://www.elrepo.org/elrepo-release-7.el7.elrepo.noarch.rpm
yum --disablerepo="*" --enablerepo="elrepo-kernel" list available #查看可升级内核版本
yum --enablerepo=elrepo-kernel install kernel-ml -y #mainline较为激进
#指定版本
yum --disablerepo='*' --enablerepo='kernel-ml-x86_64                                                                                                5.17.1-1.el7.elrepo.*' upgrade
sed -i 's/saved/0/g' /etc/default/grub #自己注意修改
grub2-mkconfig -o /boot/grub2/grub.cfg && reboot

只有一个：数据持久化！数据持久化！数据持久化！！！

必须熟悉软件的所有的配置文件在哪里，数据文件保存在哪里，通过挂载方式（目录或者卷）挂载到宿主机。

./bin/elasticsearch-plugin install https://github.com/medcl/elasticsearch-analysis-ik/releases/download/v6.3.0/elasticsearch-analysis-ik-6.3.0.zip

替换版本号即可

docker-compose.yml

version: '2.2'
services:
        redis:
                image: redis:5
                ports:
                        - 6379:6379
                container_name: redis
                restart: always
                mem_limit: 1024m
                volumes:
                        - $PWD/conf/redis.conf:/usr/local/etc/redis/redis.conf
                        - /etc/localtime:/etc/localtime:ro
                        - redis:/data
                restart: always
                command:
                        - /bin/bash
                        - -c
                        - | 
                                redis-server /usr/local/etc/redis/redis.conf
volumes:
        redis:
                external: true

redis.conf

最核心的配置

bind 0.0.0.0
requirepass xxxx ##给出复杂密码

version: "2"
services:
  nacos:
    image: nacos/nacos-server:2.0.3
    restart: always
    container_name: nacos-standalone-mysql
    env_file:
      - ./nacos-standlone-mysql.env
    volumes:
      - ./standalone-logs/:/home/nacos/logs
      - ./init.d/custom.properties:/home/nacos/init.d/custom.properties
    ports:
      - "8848:8848"
      - "9848:9848"
      - "9555:9555"
    depends_on:
      - mysql
    restart: always
  mysql:
    container_name: mysql
    image: nacos/nacos-mysql:8.0.16
    restart: always
    env_file:
      - ./mysql.env
    volumes:
      - ./mysql:/var/lib/mysql
    ports:
      - "3306:3306"

nacos-standlone-mysql.env

PREFER_HOST_MODE=hostname
MODE=standalone
SPRING_DATASOURCE_PLATFORM=mysql
MYSQL_SERVICE_HOST=mysql
MYSQL_SERVICE_DB_NAME=nacos
MYSQL_SERVICE_PORT=3306
MYSQL_SERVICE_USER=nacos
MYSQL_SERVICE_PASSWORD=nacos
MYSQL_SERVICE_DB_PARAM=characterEncoding=utf8&connectTimeout=1000&socketTimeout=3000&autoReconnect=true&useSSL=false

custom.properties

#spring.security.enabled=false
#management.security=false
#security.basic.enabled=false
#nacos.security.ignore.urls=/**
#management.metrics.export.elastic.host=http://localhost:9200
# metrics for prometheus
management.endpoints.web.exposure.include=*

# metrics for elastic search
#management.metrics.export.elastic.enabled=false
#management.metrics.export.elastic.host=http://localhost:9200

# metrics for influx
#management.metrics.export.influx.enabled=false
#management.metrics.export.influx.db=springboot
#management.metrics.export.influx.uri=http://localhost:8086
#management.metrics.export.influx.auto-create-db=true
#management.metrics.export.influx.consistency=one
#management.metrics.export.influx.compressed=true

mysql.env

MYSQL_ROOT_PASSWORD=root
MYSQL_DATABASE=nacos
MYSQL_USER=nacos
MYSQL_PASSWORD=nacos

version: "2"

services:
  zookeeper:
    image: docker.io/bitnami/zookeeper:3.7
    container_name: zookeeper
    mem_limit: 2048m
    restart: always
    ports:
      - "2181:2181"
    volumes:
      - "zookeeper_data:/bitnami"
    environment:
      - ALLOW_ANONYMOUS_LOGIN=yes
  kafka:
    image: docker.io/bitnami/kafka:3
    container_name: kafka
    mem_limit: 4096m
    restart: always
    ports:
      - "9092:9092"
    volumes:
      - "kafka_data:/bitnami"
    environment:
      - KAFKA_CFG_ZOOKEEPER_CONNECT=zookeeper:2181
      - ALLOW_PLAINTEXT_LISTENER=yes
      - KAFKA_LISTENERS=PLAINTEXT://0.0.0.0:9092
      - KAFKA_ADVERTISED_LISTENERS=PLAINTEXT://127.0.0.1:9092
      - LOG.RETENTION.HOURS=168
    depends_on:
      - zookeeper
volumes:
  zookeeper_data:
    driver: local
  kafka_data:
    driver: local

jenkins的docker-compose.yml

version: '2.2'
services:
        jenkins:
                image: jenkinsci/blueocean
                container_name: jenkins
                mem_limit: 2048m
                extra_hosts:
                        - "git服务器:内网地址"
                restart: always
                networks:
                        gitlab:
                environment:
                        - TZ=Asia/Shanghai
                volumes:
                        - /etc/localtime:/etc/localtime:ro
                        - jenkins:/var/jenkins_home
networks:
        gitlab:
                external: true
volumes:
        jenkins:
                external: true

nginx的default.conf

server {
    listen       80;
    listen  [::]:80;
    server_name xxx;

    location / {
        return 301 https://$host$request_uri;
    }

  
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }

}

server {
    listen 443 ssl http2;
    server_name xxx;
    ssl_certificate certs/xxx.pem;
    ssl_certificate_key certs/xxx.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;  #使用此加密套件。
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;   #使用该协议进行配置。
    ssl_prefer_server_ciphers on;


    location / {
        proxy_pass http://jenkins:8080; ## nginx的docker-compose.yml和jenkins放在一个网络
        aio threads;
        proxy_set_header  Host $host;
        proxy_set_header  X-Real-IP $remote_addr;
        proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_redirect off;
        proxy_connect_timeout  600;
        proxy_read_timeout 600;
        proxy_send_timeout 600;
        proxy_buffers    8 512k;
        proxy_buffer_size 512k;
        client_max_body_size  2048M;
        client_body_buffer_size 256K;
    }
}

—含tomcat的docker镜像运行war包

在容器内安装对应内容

apt update && apt install ttf-dejavu fontconfig