本地化部署开源思维导图工具--draw.io

sudo apt-get install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

sudo usermod -aG docker $USER

curl -SL github.com/docker/compose/releases/download/v2.20.3/docker-compose-linux-x86_64 -o /usr/local/bin/docker-compose

sudo chmod +x /usr/local/bin/docker-compose

sudo ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose

sudo apt install -y nginx

# cat code.ctyun.dev.ext
[req]
default_bits = 1024
distinguished_name = req_distinguished_name
req_extensions = san
extensions = san
[req_distinguished_name]
countryName = CN
stateOrProvinceName = Definesys
localityName = Definesys
organizationName = Definesys
[SAN]
authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
subjectAltName = @SubjectAlternativeName

[SubjectAlternativeName]
DNS.1 = code.ctyun.dev
IP.1 = 192.168.1.9
[root@code ssl]# cat gen.sh
#/bin/bash

# Root CA
#openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -subj "/C=CN/ST=Zhejiang/L=Hangzhou/O=CTYUN" -keyout CA-private.key -out CA-certificate.crt -reqexts v3_req -extensions v3_ca

# Private Key
openssl genrsa -out code.ctyun.dev.key 2048

#Private Cert with Signature
openssl req -new -key code.ctyun.dev.key -subj "/C=CN/ST=Zhejiang/L=Hangzhou/O=CTYUN/CN=code.ctyun.dev" -sha256 -out code.ctyun.dev.csr
openssl x509 -req -days 3650 -in code.ctyun.dev.csr -CA CA-certificate.crt -CAkey CA-private.key -CAcreateserial -sha256 -out code.ctyun.dev.crt -extfile code.ctyun.dev.ext -extensions SAN

map $http_upgrade $connection_upgrade {
    default Upgrade;
    '' close;
}

server {
        listen 443 ssl default_server;
        ssl_certificate /etc/ssl/certs/code.ctyun.dev.pem;
        ssl_certificate_key /etc/ssl/private/code.ctyun.dev.key;
        server_name code.ctyun.dev;

        proxy_read_timeout 3600;
        proxy_connect_timeout 3600;
        proxy_send_timeout 3600;

        root /var/www/html;

        # Add index.php to the list if you are using PHP
        index index.html index.htm index.nginx-debian.html;

        ssl_prefer_server_ciphers   on;

        location / {
                sendfile off;
                proxy_pass 127.0.0.1:8080;
                proxy_redirect default;
                proxy_http_version 1.1;

                proxy_set_header Connection $connection_upgrade;
                proxy_set_header Upgrade $http_upgrade;

                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto $scheme;
                proxy_max_temp_file_size 0;

                client_max_body_size 1024m;
                client_body_buffer_size 128k;

                proxy_buffering off;
                proxy_request_buffering off;
                proxy_set_header Connection "";
        }
}