Kenny Yang
5067616bf0
将证书存储路径从 `/home/web/certs/` 更改为 `/home/app/certs/`，并将 `dev_network` 网络名称统一更新为 `docker_network1`。这些更改是为了与新的项目结构和命名约定保持一致。
83 lines
4.0 KiB
Bash
83 lines
4.0 KiB
Bash
#!/bin/bash
|
|
|
|
# 更新国内镜像源
|
|
sudo cp /etc/apt/sources.list /etc/apt/sources.list.backup # 备份原有的 sources.list 文件
|
|
sudo cat > /etc/apt/sources.list <<EOF
|
|
deb https://mirrors.aliyun.com/debian/ bookworm main non-free non-free-firmware contrib
|
|
deb-src https://mirrors.aliyun.com/debian/ bookworm main non-free non-free-firmware contrib
|
|
deb https://mirrors.aliyun.com/debian-security/ bookworm-security main
|
|
deb-src https://mirrors.aliyun.com/debian-security/ bookworm-security main
|
|
deb https://mirrors.aliyun.com/debian/ bookworm-updates main non-free non-free-firmware contrib
|
|
deb-src https://mirrors.aliyun.com/debian/ bookworm-updates main non-free non-free-firmware contrib
|
|
deb https://mirrors.aliyun.com/debian/ bookworm-backports main non-free non-free-firmware contrib
|
|
deb-src https://mirrors.aliyun.com/debian/ bookworm-backports main non-free non-free-firmware contrib
|
|
EOF
|
|
|
|
# 更新系统并安装必要的第三方软件
|
|
apt update -y && apt upgrade -y && apt install -y curl wget sudo socat unzip tree
|
|
|
|
# 安装Docker和Docker Compose
|
|
curl -fsSL https://get.docker.com | sh
|
|
curl -L "https://github.com/docker/compose/releases/latest/download/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
|
|
chmod +x /usr/local/bin/docker-compose
|
|
|
|
# 创建软件所需的目录结构
|
|
mkdir -p /home/app/html /home/app/certs /home/app/conf.d
|
|
mkdir -p /home/app/mysql/conf.d /home/app/mysql/data /home/app/mysql/log
|
|
mkdir -p /home/app/redis/conf /home/app/redis/data /home/app/redis/logs
|
|
mkdir -p /home/app/postgresql
|
|
|
|
# 创建默认证书文件
|
|
openssl req -x509 -nodes -newkey rsa:2048 -keyout /home/app/certs/default_server.key -out /home/app/certs/default_server.crt -days 5475 -subj "/C=US/ST=State/L=City/O=Organization/OU=Organizational Unit/CN=Common Name"
|
|
|
|
# 创建自动续签证书任务
|
|
# 切换到一个一致的目录（例如，家目录）
|
|
cd ~ || exit
|
|
|
|
# 下载并使脚本可执行
|
|
wget -O ~/.auto_cert_renewal.sh https://raw.githubusercontent.com/shakenny/containerized-stack/refs/heads/main/auto_cert_renewal.sh
|
|
chmod +x ~/.auto_cert_renewal.sh
|
|
|
|
# 下载docker_password.txt
|
|
wget -O ~/docker_password https://raw.githubusercontent.com/shakenny/containerized-stack/main/local/docker_password.txt
|
|
|
|
# 读取 Docker Hub 登录密码
|
|
DOCKER_PASSWORD=$(cat docker_password.txt)
|
|
|
|
# 登录 Docker Hub
|
|
echo "$DOCKER_PASSWORD" | docker login --username shakennyyang --password-stdin
|
|
|
|
# 设置定时任务字符串
|
|
cron_job="0 0 * * * ~/.auto_cert_renewal.sh"
|
|
|
|
# 检查是否存在相同的定时任务
|
|
existing_cron=$(crontab -l 2>/dev/null | grep -F "$cron_job")
|
|
|
|
# 如果不存在，则添加定时任务
|
|
if [ -z "$existing_cron" ]; then
|
|
(crontab -l 2>/dev/null; echo "$cron_job") | crontab -
|
|
echo "续签任务已添加"
|
|
else
|
|
echo "续签任务已存在，无需添加"
|
|
fi
|
|
|
|
# 下载配置文件
|
|
wget -O /home/app/nginx.conf https://raw.githubusercontent.com/shakenny/containerized-stack/refs/heads/main/nginx.conf
|
|
wget -O /home/app/conf.d/default.conf https://raw.githubusercontent.com/shakenny/containerized-stack/refs/heads/main/default.conf
|
|
|
|
wget -O /home/app/mysql/conf.d/my.cnf https://raw.githubusercontent.com/shakenny/containerized-stack/refs/heads/main/my.cnf
|
|
wget -O /home/app/mysql/conf.d/init.sql https://raw.githubusercontent.com/shakenny/containerized-stack/main/local/init.sql
|
|
|
|
wget -O /home/app/redis/conf/redis.conf https://raw.githubusercontent.com/redis/redis/7.2/redis.conf
|
|
|
|
# 修改Redis配置文件
|
|
sed -i "s/bind 127.0.0.1 -::1/bind 0.0.0.0/g" /home/app/redis/conf/redis.conf
|
|
sed -i "s/# requirepass foobared/requirepass \!Ybw324\!/g" /home/app/redis/conf/redis.conf
|
|
sed -i "s/appendonly no/appendonly yes/g" /home/app/redis/conf/redis.conf
|
|
|
|
# 下载Docker Compose文件和Dockerfile
|
|
wget -O /home/app/docker-compose.yml https://raw.githubusercontent.com/shakenny/containerized-stack/main/local/docker-compose.yml
|
|
wget -O /home/app/Dockerfile https://raw.githubusercontent.com/shakenny/containerized-stack/main/local/Dockerfile
|
|
|
|
echo "Initialization script completed successfully."
|