1
# 安装squid
2
yum install -y squid
3

4
# 启动服务
5
systemctl start squid
6
systemctl enable squid
7

8
# 配置文件
9
vim /etc/squid/squid.conf
10

11
# 允许所有访问
12
## 注释掉所有的http_access
13
http_access allow all
14

15
# 重启服务
16
systemctl restart squid

1
# 配置http、https代理
2
## 仅在当前命令行中有效
3
## 请勿使用sudo命令，sudo yum install 无法通过代理安装软件
4
export http_proxy=http://代理服务器ip:3128
5
export https_proxy=http://代理服务器ip:3128
6

7
# 例如
8
export http_proxy=http://192.168.0.217:3128
9
export https_proxy=http://192.168.0.217:3128
10

11

12
# 查看代理配置
13
echo $http_proxy
14
echo $https_proxy

1
# 下载jdk1.8
2
wget https://cdn.olinl.com/centos/jdk-8u201-linux-x64.tar.gz
3
## 原地址
4
# https://repo.huaweicloud.com/java/jdk/8u201-b09/jdk-8u201-linux-x64.tar.gz
5

6
#确定安装目录为/opt
7
# 解压文件夹并移动到opt
8
tar -zxvf jdk-8u201-linux-x64.tar.gz
9
mv jdk1.8.0_201 /opt/jdk1.8/

1
# 环境配置文件
2
vim /etc/profile
3

4
# 到最下面插入以下内容
5
# Java1.8
6
export JAVA_HOME=/opt/jdk1.8
7
export PATH=$JAVA_HOME/bin:$PATH
8
export CLASSPATH=.:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar
9

10
# 刷新配置
11
source /etc/profile
12

13
# 验证java版本信息，显示版本号即生效
14
java -version

1
# 下载包
2
## 如果提示证书过期，在最后面添加  --no-check-certificate
3
wget https://archive.apache.org/dist/maven/maven-3/3.8.5/binaries/apache-maven-3.8.5-bin.tar.gz
4

5
# 3.8.5备份
6
wget https://cdn.olinl.com/centos/apache-maven-3.8.5-bin.tar.gz
7
# 3.9.9备份
8
wget https://cdn.olinl.com/centos/apache-maven-3.9.9-bin.tar.gz
9

10
# 解压并移动到opt文件夹
11
tar -zxvf apache-maven-3.8.5-bin.tar.gz
12
mv apache-maven-3.8.5 /opt/maven-3.8.5/

1
# 系统环境变量配置
2
vim /etc/profile
3

4
# 在末尾追加
5
# maven-3.8.5
6
export MAVEN_HOME=/opt/maven-3.8.5
7
export PATH=.:$PATH:$MAVEN_HOME/bin
8

9
# 刷新配置
10
source /etc/profile
11

12
# 验证生效，显示版本号即生效
13
mvn -version

1
<?xml version="1.0" encoding="UTF-8"?>
2

3
<!--
4
Licensed to the Apache Software Foundation (ASF) under one
5
or more contributor license agreements.  See the NOTICE file
6
distributed with this work for additional information
7
regarding copyright ownership.  The ASF licenses this file
8
to you under the Apache License, Version 2.0 (the
9
"License"); you may not use this file except in compliance
10
with the License.  You may obtain a copy of the License at
11

12
    http://www.apache.org/licenses/LICENSE-2.0
13

14
Unless required by applicable law or agreed to in writing,
15
software distributed under the License is distributed on an
16
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
17
KIND, either express or implied.  See the License for the
18
specific language governing permissions and limitations
19
under the License.
20
-->
21

22
<!--
23
 | This is the configuration file for Maven. It can be specified at two levels:
24
 |
25
 |  1. User Level. This settings.xml file provides configuration for a single user,
26
 |                 and is normally provided in ${user.home}/.m2/settings.xml.
27
 |
28
 |                 NOTE: This location can be overridden with the CLI option:
29
 |
30
 |                 -s /path/to/user/settings.xml
31
 |
32
 |  2. Global Level. This settings.xml file provides configuration for all Maven
33
 |                 users on a machine (assuming they're all using the same Maven
34
 |                 installation). It's normally provided in
35
 |                 ${maven.conf}/settings.xml.
36
 |
37
 |                 NOTE: This location can be overridden with the CLI option:
38
 |
39
 |                 -gs /path/to/global/settings.xml
40
 |
41
 | The sections in this sample file are intended to give you a running start at
42
 | getting the most out of your Maven installation. Where appropriate, the default
43
 | values (values used when the setting is not specified) are provided.
44
 |
45
 |-->
46
<settings xmlns="http://maven.apache.org/SETTINGS/1.2.0"
47
          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
48
          xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.2.0 https://maven.apache.org/xsd/settings-1.2.0.xsd">
49
  <!-- localRepository
50
   | The path to the local repository maven will use to store artifacts.
51
   |
52
   | Default: ${user.home}/.m2/repository
53
  <localRepository>/path/to/local/repo</localRepository>
54
  -->
55
  <localRepository>\opt\maven\repository</localRepository>
56
  <!-- interactiveMode
57
   | This will determine whether maven prompts you when it needs input. If set to false,
58
   | maven will use a sensible default value, perhaps based on some other setting, for
59
   | the parameter in question.
60
   |
61
   | Default: true
62
  <interactiveMode>true</interactiveMode>
63
  -->
64

65
  <!-- offline
66
   | Determines whether maven should attempt to connect to the network when executing a build.
67
   | This will have an effect on artifact downloads, artifact deployment, and others.
68
   |
69
   | Default: false
70
  <offline>false</offline>
71
  -->
72

73
  <!-- pluginGroups
74
   | This is a list of additional group identifiers that will be searched when resolving plugins by their prefix, i.e.
75
   | when invoking a command line like "mvn prefix:goal". Maven will automatically add the group identifiers
76
   | "org.apache.maven.plugins" and "org.codehaus.mojo" if these are not already contained in the list.
77
   |-->
78
  <pluginGroups>
79
    <!-- pluginGroup
80
     | Specifies a further group identifier to use for plugin lookup.
81
    <pluginGroup>com.your.plugins</pluginGroup>
82
    -->
83
  </pluginGroups>
84

85
  <!-- TODO Since when can proxies be selected as depicted? -->
86
  <!-- proxies
87
   | This is a list of proxies which can be used on this machine to connect to the network.
88
   | Unless otherwise specified (by system property or command-line switch), the first proxy
89
   | specification in this list marked as active will be used.
90
   |-->
91
  <proxies>
92
    <!-- proxy
93
     | Specification for one proxy, to be used in connecting to the network.
94
     |
95
    <proxy>
96
      <id>optional</id>
97
      <active>true</active>
98
      <protocol>http</protocol>
99
      <username>proxyuser</username>
100
      <password>proxypass</password>
101
      <host>proxy.host.net</host>
102
      <port>80</port>
103
      <nonProxyHosts>local.net|some.host.com</nonProxyHosts>
104
    </proxy>
105
    -->
106
  </proxies>
107

108
  <!-- servers
109
   | This is a list of authentication profiles, keyed by the server-id used within the system.
110
   | Authentication profiles can be used whenever maven must make a connection to a remote server.
111
   |-->
112
  <servers>
113
  <server>
114
    <id>bladex</id>
115
    <configuration>
116
      <httpHeaders>
117
        <property>
118
          <name>Authorization</name>
119
          <value>token验证信息</value>
120
        </property>
121
      </httpHeaders>
122
    </configuration>
123
  </server>
124
   <server>
125
      <!--远程仓库的名称-->
126
      <id>nexus-maven</id>
127
      <!--访问 Nexus 的账号-->
128
      <username>admin</username>
129
      <!--访问 Nexus 的密码-->
130
      <password>admin123</password>
131
    </server>
132
    <!-- server
133
     | Specifies the authentication information to use when connecting to a particular server, identified by
134
     | a unique name within the system (referred to by the 'id' attribute below).
135
     |
136
     | NOTE: You should either specify username/password OR privateKey/passphrase, since these pairings are
137
     |       used together.
138
     |
139
    <server>
140
      <id>deploymentRepo</id>
141
      <username>repouser</username>
142
      <password>repopwd</password>
143
    </server>
144
    -->
145

146
    <!-- Another sample, using keys to authenticate.
147
    <server>
148
      <id>siteServer</id>
149
      <privateKey>/path/to/private/key</privateKey>
150
      <passphrase>optional; leave empty if not used.</passphrase>
151
    </server>
152
    -->
153
  </servers>
154

155
  <!-- mirrors
156
   | This is a list of mirrors to be used in downloading artifacts from remote repositories.
157
   |
158
   | It works like this: a POM may declare a repository to use in resolving certain artifacts.
159
   | However, this repository may have problems with heavy traffic at times, so people have mirrored
160
   | it to several places.
161
   |
162
   | That repository definition will have a unique id, so we can create a mirror reference for that
163
   | repository, to be used as an alternate download site. The mirror site will be the preferred
164
   | server for that repository.
165
   |-->
166
  <mirrors>
167
    <!-- mirror
168
     | Specifies a repository mirror site to use instead of a given repository. The repository that
169
     | this mirror serves has an ID that matches the mirrorOf element of this mirror. IDs are used
170
     | for inheritance and direct lookup purposes, and must be unique across the set of mirrors.
171
     |
172
    <mirror>
173
      <id>mirrorId</id>
174
      <mirrorOf>repositoryId</mirrorOf>
175
      <name>Human Readable Name for this Mirror.</name>
176
      <url>http://my.repository.com/repo/path</url>
177
    </mirror>
178
     -->
179
   <mirror>
180
        <!--远程仓库的名称-->
181
        <id>nexus-maven</id>
182
        <!--镜像名称，可以随便取名-->
183
        <name>Nexus私服</name>
184
        <!--远程仓库的地址-->
185
        <url>http://192.168.2.10:3001/repository/nexus-group/</url>
186
        <!--此处配置为星号（*），表示 maven 下载所有 jar 包，都必须从 Nexus 上面配置的远程仓库地址中获取-->
187
        <mirrorOf>*,!bladex</mirrorOf>
188
    </mirror>
189

190
    <mirror>
191
        <id>aliyun-repos</id>
192
        <name>Aliyun Public Repository</name>
193
        <url>https://maven.aliyun.com/repository/public</url>
194
        <mirrorOf>*,!bladex</mirrorOf>
195
    </mirror>
196

197

198

199
</mirrors>
200

201
  <!-- profiles
202
   | This is a list of profiles which can be activated in a variety of ways, and which can modify
203
   | the build process. Profiles provided in the settings.xml are intended to provide local machine-
204
   | specific paths and repository locations which allow the build to work in the local environment.
205
   |
206
   | For example, if you have an integration testing plugin - like cactus - that needs to know where
207
   | your Tomcat instance is installed, you can provide a variable here such that the variable is
208
   | dereferenced during the build process to configure the cactus plugin.
209
   |
210
   | As noted above, profiles can be activated in a variety of ways. One way - the activeProfiles
211
   | section of this document (settings.xml) - will be discussed later. Another way essentially
212
   | relies on the detection of a property, either matching a particular value for the property,
213
   | or merely testing its existence. Profiles can also be activated by JDK version prefix, where a
214
   | value of '1.4' might activate a profile when the build is executed on a JDK version of '1.4.2_07'.
215
   | Finally, the list of active profiles can be specified directly from the command line.
216
   |
217
   | NOTE: For profiles defined in the settings.xml, you are restricted to specifying only artifact
218
   |       repositories, plugin repositories, and free-form properties to be used as configuration
219
   |       variables for plugins in the POM.
220
   |
221
   |-->
222
  <profiles>
223
    <!-- profile
224
     | Specifies a set of introductions to the build process, to be activated using one or more of the
225
     | mechanisms described above. For inheritance purposes, and to activate profiles via <activatedProfiles/>
226
     | or the command line, profiles have to have an ID that is unique.
227
     |
228
     | An encouraged best practice for profile identification is to use a consistent naming convention
229
     | for profiles, such as 'env-dev', 'env-test', 'env-production', 'user-jdcasey', 'user-brett', etc.
230
     | This will make it more intuitive to understand what the set of introduced profiles is attempting
231
     | to accomplish, particularly when you only have a list of profile id's for debug.
232
     |
233
     | This profile example uses the JDK version to trigger activation, and provides a JDK-specific repo.
234
    <profile>
235
      <id>jdk-1.4</id>
236

237
      <activation>
238
        <jdk>1.4</jdk>
239
      </activation>
240

241
      <repositories>
242
        <repository>
243
          <id>jdk14</id>
244
          <name>Repository for JDK 1.4 builds</name>
245
          <url>http://www.myhost.com/maven/jdk14</url>
246
          <layout>default</layout>
247
          <snapshotPolicy>always</snapshotPolicy>
248
        </repository>
249
      </repositories>
250
    </profile>
251
    -->
252

253
    <!--
254
     | Here is another profile, activated by the property 'target-env' with a value of 'dev', which
255
     | provides a specific path to the Tomcat instance. To use this, your plugin configuration might
256
     | hypothetically look like:
257
     |
258
     | ...
259
     | <plugin>
260
     |   <groupId>org.myco.myplugins</groupId>
261
     |   <artifactId>myplugin</artifactId>
262
     |
263
     |   <configuration>
264
     |     <tomcatLocation>${tomcatPath}</tomcatLocation>
265
     |   </configuration>
266
     | </plugin>
267
     | ...
268
     |
269
     | NOTE: If you just wanted to inject this configuration whenever someone set 'target-env' to
270
     |       anything, you could just leave off the <value/> inside the activation-property.
271
     |
272
    <profile>
273
      <id>env-dev</id>
274

275
      <activation>
276
        <property>
277
          <name>target-env</name>
278
          <value>dev</value>
279
        </property>
280
      </activation>
281

282
      <properties>
283
        <tomcatPath>/path/to/tomcat/instance</tomcatPath>
284
      </properties>
285
    </profile>
286
    -->
287
  </profiles>
288

289
  <!-- activeProfiles
290
   | List of profiles that are active for all builds.
291
   |
292
  <activeProfiles>
293
    <activeProfile>alwaysActiveProfile</activeProfile>
294
    <activeProfile>anotherAlwaysActiveProfile</activeProfile>
295
  </activeProfiles>
296
  -->
297
</settings>

1
# 全量包
2
https://cdn.olinl.com/centos/mysql-5.7.43-1.el7.x86_64.rpm-bundle.tar
3

4
# 只包含必须安装的包
5
https://cdn.olinl.com/centos/mysql-5.7.43-1.el7.x86_64.rpm-bundle-lite.tar

1
# 官网mysql 5.7 地址
2
https://downloads.mysql.com/archives/get/p/23/file/mysql-5.7.44-1.el7.x86_64.rpm-bundle.tar

1
# 下载包
2
wget https://cdn.olinl.com/centos/mysql-5.7.44-1.el7.x86_64.rpm-bundle-lite.tar # 精简包
3
# wget https://downloads.mysql.com/archives/get/p/23/file/mysql-5.7.44-1.el7.x86_64.rpm-bundle.tar # 官网
4
# wget https://cdn.olinl.com/centos/mysql-5.7.44-1.el7.x86_64.rpm-bundle.tar # 全量cdn
5

6
# 解压压缩包
7
tar -xvf mysql-8.0.27-1.el7.x86_64.rpm*.tar

1
# 安装必要软件包
2
rpm -ivh mysql-community-common-5.7*.x86_64.rpm --nodeps --force
3
rpm -ivh mysql-community-libs-5.7*.x86_64.rpm --nodeps --force
4
rpm -ivh mysql-community-client-5.7*.x86_64.rpm --nodeps --force
5
rpm -ivh mysql-community-server-5.7*.x86_64.rpm --nodeps --force
6

7
# 查看已安装的mysql
8
rpm -qa | grep mysql

1
# 初始化mysql
2
mysqld --initialize;
3
# 给数据目录权限
4
chown mysql:mysql /var/lib/mysql -R;
5
# 启动服务
6
systemctl start mysqld.service;
7
# 设置自启动
8
systemctl enable mysqld;
9

10
# 查看密码
11
cat /var/log/mysqld.log | grep password
12

13
# 登录并修改密码
14
mysql -uroot -p
15
## 输入上面获取的密码
16
## 修改密码并刷新配置
17
ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'root';
18
flush privileges;

1
# 创建数据目录
2
mkdir -p /opt/mysql/data
3
# 修改my.cnf文件
4

5
# 修改数据目录
6
datadir=/opt/mysql/data
7
# 修改日志目录
8
log-error=/opt/mysql/mysqld.log
9
# 修改socket
10
socket=/opt/mysql/mysql.sock
11

12
# 给数据目录赋权
13
chmod -R 777 /opt/mysql/*
14
chmod -R 777 /opt/mysql/data/*
15
chown mysql:mysql /opt/mysql -R;
16
chown mysql:mysql /opt/mysql/data -R;
17
chown mysql:mysql /var/lib/mysql -R;
18

19

20

21
# 使用mysql用户初始化
22
sudo -u mysql mysqld --initialize --datadir=/opt/mysql/data
23
# 启动服务
24
systemctl start mysqld.service;
25
# 设置自启动
26
systemctl enable mysqld;
27

28
# 查看密码 下面的log需要替换成新的log文件
29
cat /opt/mysql/mysqld.log | grep password
30

31
# 登录并修改密码
32
mysql -uroot -p
33
## 输入上面获取的密码
34
## 修改密码并刷新配置
35
ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'root';
36
flush privileges;

1
# 登录
2
mysql -uroot -p
3

4
# 修改用户表
5
update user set host = '%' where user ='root';
6
# 刷新配置
7
flush privileges;

1
# 登录
2
mysql -uroot -p
3

4
# 修改用户表
5
CREATE USER 'root'@'%' IDENTIFIED BY 'root';
6
GRANT ALL PRIVILEGES ON *.* TO 'root'@'%' WITH GRANT OPTION;
7
# 刷新配置
8
flush privileges;

1
# 下载redis
2
wget https://cdn.olinl.com/redis-6.2.6.tar.gz
3
## 原地址
4
#wget https://download.redis.io/releases/redis-6.2.6.tar.gz
5

6
# 解压并移动到opt下
7
tar xzf redis-6.2.6.tar.gz
8
mv redis-6.2.6 /opt/redis

1
# 安装编译所需工具
2
yum -y install gcc automake autoconf libtool make
3

4
# 进入redis安装目录，进行编译
5
cd /opt/redis
6
make MALLOC=libc
7

8
# 安装redis，并指定安装目录
9
make install PREFIX=/opt/redis
10

11
# 启动测试
12
./bin/redis-server redis.conf

1
# 修改redis.conf配置
2
vim /opt/redis/redis.conf
3

4
:901行
5
requirepass root

1
# 修改redis.conf配置
2
vim /opt/redis/redis.conf
3

4
:75行
5
bind 0.0.0.0 ::1

1
# 修改redis.conf配置
2
vim /opt/redis/redis.conf
3

4
:257行
5
daemonize yes

1
# 创建系统服务文件
2
vim /etc/systemd/system/redis.service
3

4
# 内容如下
5
[Unit]
6
Description=redis-server
7
After=network.target
8

9
[Service]
10
Type=forking
11
ExecStart=/opt/redis/bin/redis-server /opt/redis/redis.conf
12
PrivateTmp=true
13

14
[Install]
15
WantedBy=multi-user.target
16

17
# 重载系统服务
18
systemctl daemon-reload
19

20
# 服务启动操作命令
21
## 启动
22
systemctl start redis
23
## 停止
24
systemctl stop redis
25
## 重启
26
systemctl restart redis
27
## 查看状态
28
systemctl status redis
29
## 开机自启
30
systemctl enable redis
31
## 查看redis是否启动
32
ps -ef | grep redis

1
# 执行如下命令
2
rpm -ivh http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm
3

4
# 执行以下命令开始安装
5

6
yum install -y nginx
7

8
# 启动nginx
9
systemctl start nginx
10
# nginx开机自启动
11
systemctl enable nginx

1
# a站点
2
server {
3
    listen 80;
4
    server_name  a.com;
5
}
6
# b站点
7
server {
8
    listen 80;
9
    server_name  b.com;
10
}
11
# c站点
12
server {
13
    listen 80;
14
    server_name  c.com;
15
}

1
# 处理HTTP请求和响应，适用于Web应用和网站
2
http{
3
  # 其他内容......
4

5
  #这里可以吧默认的include /etc/nginx/conf.d/*.conf;注释掉，方式展示80端口
6

7
  # 引入外部配置文件
8
  include /opt/nginx/http/*.conf;
9

10
  #不限制文件上传大小
11
  client_max_body_size 0;
12
}
13

14
# 支持通用TCP和UDP代理，适用于多种应用
15
stream{
16
  # 引入外部配置
17
  include /aoptp/nginx/server/*.conf;
18
}

1
server {
2
    listen       7000;
3
    server_name  localhost;
4
    index index.html;
5

6
     set $root "/app/h5";
7

8
    location / {
9
        root   $root;  # 网站根目录
10
        index  index.html;   # 默认首页文件
11
        try_files  $uri $uri/ /index.html;
12
        add_header Access-Control-Allow-Origin *;
13
        add_header 'Access-Control-Allow-Credentials' 'true';
14
        add_header 'Access-Control-Allow-Methods' *;
15
        add_header 'Access-Control-Allow-Headers' *;
16
        add_header Cache-Control no-cache;
17
    }
18

19
    location ^~ /api {
20
        if ($request_method = 'OPTIONS') {
21
            add_header 'Access-Control-Allow-Origin' '*';
22
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
23
            add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';
24
            add_header 'Content-Length' 0;
25
            add_header 'Content-Type' 'text/plain; charset=utf-8';
26
            return 204;
27
        }
28

29
        add_header 'Access-Control-Allow-Origin' '*' always;
30
        add_header 'Access-Control-Allow-Methods' 'GET, POST' always;
31
        add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range' always;
32
        add_header 'Access-Control-Expose-Headers' 'Content-Length,Content-Range' always;
33

34
        # 重写：/api/xxx → /xxx
35
        rewrite ^/api/(.*)$ /$1 break;
36

37
        proxy_pass http://192.168.1.20:31100;
38
        proxy_set_header Host $host;
39
        proxy_set_header X-Real-IP $remote_addr;
40
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
41
        proxy_set_header X-Forwarded-Proto $scheme;
42
        proxy_buffering off;
43
    }
44

45

46
}

1
server {
2

3
    listen 80;
4
    server_name  abc.com;
5
    listen 443 ssl;
6

7
    ssl_certificate    /opt/nginx/cert/abc.com.pem;
8
    ssl_certificate_key    /opt/nignx/cert/abc.com.key;
9
    ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
10
    ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
11
    ssl_prefer_server_ciphers on;
12
    ssl_session_cache shared:SSL:10m;
13
    ssl_session_timeout 10m;
14
    add_header Strict-Transport-Security "max-age=31536000";
15
    error_page 497  https://$host$request_uri;
16

17
    # 管理-路由
18
    location / {
19
        root   /opt/web/html;
20
        index  index.html index.htm;
21
        try_files $uri $uri/ /index.html;
22
        index index.html;
23
    }
24
    # 后台地址
25
    location /prod-api/ {
26
      proxy_pass  http://127.0.0.1:7001/ ;
27
    }
28

29
}

1
# 这个要写在stream块里面
2
upstream mysql3306 {
3
        hash $remote_addr consistent;
4
        server 192.168.1.58:3306 weight=5 max_fails=3 fail_timeout=30s;
5
}
6

7
server {
8
        listen 33306;
9
        proxy_connect_timeout 100s;
10
        proxy_timeout 500s;
11
        proxy_pass mysql3306 ;
12
}

1
# minio-api反向代理配置
2
server {
3
  server_name  localhost;
4
  listen 9000; # 外网端口
5
  location / {
6
    proxy_set_header Host $http_host;
7
    proxy_pass  http://192.168.1.10:9001/;# minio地址
8
  }
9
}

1
# 查看当前内核版本
2
uname -r
3

4
# 卸载旧版本
5
yum remove docker  docker-common docker-selinux docker-engine
6

7
# 安装需要的软件包
8
yum install -y yum-utils device-mapper-persistent-data lvm2
9

10
# 设置yum源，下面两个都可用
11
# 中央仓库
12
yum-config-manager --add-repo http://download.docker.com/linux/centos/docker-ce.repo
13

14
# 阿里仓库 推荐
15
yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
16

17
#查看docker可用版本
18
yum list docker-ce --showduplicates | sort -r
19

20
# 安装docker
21
yum -y install docker-ce
22
## 安装指定版本
23
#yum -y install docker-ce-17.12.1.ce

1
# 重启Docker服务
2
systemctl restart docker
3

4
# 开启Docker服务
5
systemctl start docker
6

7
# 停止Docker服务
8
systemctl stop docker
9

10
# Docker服务开机自启
11
systemctl enable docker

1
mkdir /etc/docker
2
vim /etc/docker/daemon.json
3

4
{
5
  "data-root": "/app/docker"
6
}

1
"log-opts": {"max-size":"500m", "max-file":"3"}

1
"insecure-registries": [
2
  "http://harbor:30001"
3
]

1
"registry-mirrors": [
2
    "http://harbor:30001",
3
    "https:/docker.1panel.live"
4
  ]

1
wget https://cdn.olinl.com/centos/nexus-3.87.1-01-linux-x86_64.tar

1
# 解压
2
tar -zxvf nexus-3.87.1-01-linux-x86_64.tar.gz
3
# 进入目录并启动
4
cd nexus-3.87.1-01/bin
5
./nexus start

1
./nexus start  # 启动 Nexus 服务  后台运行
2
./nexus stop  # 停止 Nexus
3
./nexus restart  # 重启服务
4
./nexus status  # 查看运行状态  显示 PID 和是否运行
5
./nexus run  # 前台运行（调试用）

1
WARNING: ****
2
WARNING: Detected execution as "root" user. This is NOT recommended!
3
WARNING: **

1
# 创建系统用户 'nexus'，主目录设为 Nexus 安装目录（按你的实际路径调整）
2
sudo useradd -r -s /sbin/nologin -U -m -d /opt/nexus nexus
3

4
# 假设 Nexus 安装在 /opt/nexus
5
sudo chown -R nexus:nexus /opt/nexus
6

7
# 假设数据目录是 /opt/sonatype-work（默认在安装目录同级）
8
sudo chown -R nexus:nexus /opt/sonatype-work

1
# 以 nexus 用户身份执行（root 可以这样做）
2
sudo -u nexus /opt/nexus/bin/nexus run

1
# 配置 systemd 服务（由 root 启动，但以 nexus 用户运行）
2

3
# 创建服务文件
4
sudo tee /etc/systemd/system/nexus.service <<'EOF'
5
[Unit]
6
Description=Nexus Repository Manager
7
After=network.target
8

9
[Service]
10
Type=forking
11
User=nexus
12
Group=nexus
13
ExecStart=/opt/nexus/bin/nexus start
14
ExecStop=/opt/nexus/bin/nexus stop
15
Restart=on-failure
16
RestartSec=10
17
LimitNOFILE=65536
18
Environment=JAVA_HOME=/usr/lib/jvm/java-11-openjdk  # 按实际 Java 路径调整
19

20
[Install]
21
WantedBy=multi-user.target
22
EOF
23

24

25

26

27

28

29
# 重载 systemd 配置
30
sudo systemctl daemon-reload
31

32
# 开机自启
33
sudo systemctl enable nexus
34

35
# 启动服务（此时 root 触发，但进程是 nexus 用户）
36
sudo systemctl start nexus
37

38
# 验证是否成功
39
ps aux | grep nexus
40
sudo systemctl status nexus