【玩转腾讯云】网站-全套服务-从0到1

#!/usr/bin/env bash
# 若包含*,则必须加上转义符,防止通配符匹配
NGINX_CONF="/deploy/nginx/\\*.conf"

add_nginx_conf() {
    [[ "$1x" = "x" ]] && echo "please input confpath" && return
    cat /etc/nginx/nginx.conf | grep -q "${1}"

    if [[ $? -ne 0 ]]; then
        # include /deploy/nginx/*.conf;
        sed -i "/\\sinclude \\/etc\\/nginx\\/conf.d\\/\\*.conf\\;/a\\    include ${1};" /etc/nginx/nginx.conf
        [[ $? -eq 0 ]] && echo "add nginx conf path success... [$1]"
    else
        echo "nginx conf path already existed! [$1]"
    fi
}

install_nginx() {
    echo "install nginx ..."
    yum instal nginx -y && \\
    echo "enable nginx set-up ..." && \\
    systemctl enable nginx && \\
    echo "start nginx set-up ..." && \\
    systemctl start nginx && \\
}

#################################
install_nginx
add_nginx_conf ${NGINX_CONF}
# 加载配置
nginx -s reload

server {
    listen       80;
    listen       [::]:80;
    #server_name  _;
    server_name  mall.XXXXX.com www.XXXXX.com XXXXX.com;
    #root         /usr/share/nginx/html;
    return 301 https://$host$request_uri;

    # Load configuration files for the default server block.
    include /etc/nginx/default.d/*.conf;
}
####################### www.XXXXX.com && XXXXX.com
####################### 16601
server {
    listen       443 ssl http2 default_server;
    listen       [::]:443 ssl http2 default_server;
    server_name  www.XXXXX.com XXXXX.com;
    #root         /usr/share/nginx/html;

    ssl_certificate "/deploy/web_ssl/www.XXXXX.com/Nginx/1_www.XXXXX.com_bundle.crt";
    ssl_certificate_key "/deploy/web_ssl/www.XXXXX.com/Nginx/2_www.XXXXX.com.key";
    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout  10m;
    ssl_ciphers HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers on;

    # Load configuration files for the default server block.
    include /etc/nginx/default.d/*.conf;

    location / {
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://localhost:16601;
        proxy_read_timeout 90;
        proxy_redirect http://localhost:16601 https://www.XXXXX.com;
    }
    # error_page 404 /404.html;
    #     location = /40x.html {
    # }

    # error_page 500 502 503 504 /50x.html;
    #     location = /50x.html {
    # }
}

#!/usr/bin/env bash
# set password (default root password: onephone)
ROOT_MYSQL_PASSWORD=""

#############################
echop() {
    echo "[$(date)@codeshold.me] $@"
}

init_mysql() {
    PASSWORD=${ROOT_MYSQL_PASSWORD:-onephone}

    echop "init mysql/mariadb ..."
    yum install expect -y && \\
    expect <<EOF
          set timeout 10
          spawn mysql_secure_installation
          expect "Enter current password for root" { send "\\n" }
          expect {
            "Enter current password for root" { send "$PASSWORD\\n"; exp_continue }
            "Change the root password" { send "n\\n" }
            "Set root password" { send "Y\\n"; exp_continue }
            "New password" { send "$PASSWORD\\n"; exp_continue }
            "Re-enter new password" { send "$PASSWORD\\n" }
          }
          expect "Remove anonymous users" { send "Y\\n" }
          expect "Disallow root login remotely" { send "Y\\n"}
          expect "Remove test database and access to it" { send "Y\\n" }
          expect "Reload privilege table" { send "Y\\n" }
EOF
}

install_mysql() {
    # yum remove mariadb-server mariadb -y
    ps aux | grep -q mysqld
    [[ $? -ne 0 ]] && systemctl start mariadb

    if [[ $? -ne 0 ]]; then
        echop "install mysql/mariadb ..."
        yum install mariadb-server mariadb -y && \\
        echop "enable startup ..." && \\
        systemctl enable mariadb && \\
        echop "start mysql/mariadb ..."
        systemctl start mariadb && \\
        init_mysql && \\
        echop 'mysql/mariadb install success!'
    else
        echop 'mysql/mariadb already had been installed!'
    fi
}

############################ run #########################
install_mysql
init_mysql

#!/usr/bin/env bash

# 参考: https://docs.docker.com/engine/install/centos/
# 支持系:统: Cento OS 7
# 腾讯云源: https://mirrors.cloud.tencent.com/
DOCKER_RE_REPO="mirrors.cloud.tencent.com/docker-ce"
DOCKER_MIRRORS="https://mirror.ccs.tencentyun.com"

##########################################
echop() {
    echo "[$(date)@codeshold.me] $@"
}

remove_old_package() {
    echop "remove old docker..."
    yum remove docker \\
        docker-client \\
        docker-client-latest \\
        docker-common \\
        docker-latest \\
        docker-latest-logrotate \\
        docker-logrotate \\
        docker-selinux \\
        docker-engine-selinux \\
        docker-engine \\
        -y
}

install_docker_ce() {
    #### 1.安装依赖包
    echop "install yum-utils ..."
    yum install -y yum-utils \\
       device-mapper-persistent-data \\
       lvm2 \\
       -y

    #### 2.添加国内 yum 源
    echop "add docker-ce.repo ..."
    yum-config-manager \\
        --add-repo \\
        https://download.docker.com/linux/centos/docker-ce.repo
    [[ ! "${DOCKER_RE_REPO}x" = "x" ]] && \\
    sed -i "s+download.docker.com+${DOCKER_RE_REPO}+" /etc/yum.repos.d/docker-ce.repo

    #### 3.安装docker ce
    echop "install docker ce ..."
    yum makecache fast && \\
    yum install docker-ce -y

    #### 4.设置开机启动
    echop "set start-up..."
    systemctl enable docker.service
}

#### 配置腾讯云提供的国内镜像源, 加速访问 Docker Hub
add_dokcer_mirror() {
    echop "add docker mirrors..."
    cat > /etc/docker/daemon.json <<EOF
{
  "registry-mirrors": [
    "${DOCKER_MIRRORS}"
  ]
}
EOF
    echop "docker ademon-reload..."
    systemctl daemon-reload

    echop "docker restart..."
    systemctl restart docker
}

############################ run #########################
remove_old_package
install_docker_ce && add_dokcer_mirror

DB_PUBLIC_IP="19.8.1.1"

## root
DB_USER='root'
DB_PASSWD='XXXXX_host'
DB_HOST="localhost"
DB_PORT=3306

## wordpress
WP_DB_USER="wp_XXXXX"
WP_DB_NAME="wp_XXXXX"
WP_DB_PASSWORD="wp_XXXXX"
WP_DB_HOST="${DB_PUBLIC_IP}"
WP_DB_PORT="${DB_PORT}"

WP_PATH="/deploy/web/XXXXX.com/"
WP_DOCKER_NAME="wp_XXXXX"
WP_MAP_PORT=16601

init_wp_db() {
    ROOT_MYSQL_CMD="mysql -u${DB_USER} -p${DB_PASSWD} -h${DB_HOST} -P ${DB_PORT} "

    sql="
    CREATE DATABASE IF NOT EXISTS ${WP_DB_NAME};
    CREATE USER \\"${WP_DB_USER}\\"@\\"localhost\\" IDENTIFIED BY \\"${WP_DB_PASSWORD}\\";
    GRANT ALL PRIVILEGES ON ${WP_DB_NAME}.* TO \\"${WP_DB_USER}\\"@\\"localhost\\";
    CREATE USER \\"${WP_DB_USER}\\"@\\"%\\" IDENTIFIED BY \\"${WP_DB_PASSWORD}\\";
    GRANT ALL PRIVILEGES ON ${WP_DB_NAME}.* TO \\"${WP_DB_USER}\\"@\\"%\\";
    FLUSH PRIVILEGES;
    "
    echo "[sql] $sql"
    $ROOT_MYSQL_CMD -e "$sql"
}
init_wp_db

run_wp_docker() {
    docker images | grep wordpress | grep -q latest
    if [[  $? -eq 0 ]];then
        :;
    else
        docker pull wordpress
    fi

    uname -a | grep -iq "Darwin"
    if [[ $? -eq 0 ]]; then
        local_html="$(pwd)/demo"
    else
        local_html="${WP_PATH}"
    fi
    docker run -d --name ${WP_DOCKER_NAME} -p${WP_MAP_PORT}:80 \\
    -e WORDPRESS_DB_HOST=${DB_PUBLIC_IP} \\
    -e WORDPRESS_DB_USER=${WP_DB_USER} \\
    -e WORDPRESS_DB_NAME=${WP_DB_NAME} \\
    -e WORDPRESS_DB_PASSWORD=${WP_DB_PASSWORD} \\
    -e TZ='Asia/Shanghai' \\
    -v ${local_html}:/var/www/html \\
    wordpress
}
run_wp_docker