见证海硕每一步成长

关于奥哲

南京客户董助私有化部署实战

2021-02-08 11:20

随着董助智能印章钉钉开放API和南京客户指定定制化功能开发的测试结
 
束测试后。开始写部署文档和配置文件等相关资料了。本次部署主要
 
分预览服务、后端服务、前端服务。
 
附件预览服务主要步骤:
 
1.修改配置application.properties
 
dz.oss.endpoint=dz.oss.accessKeyId=dz.oss.accessKeySecret=
 
dz.oss.bucketName_pre=私有bucket名称
 
2.复制项目中的字体到Linux目录下copyfonts/*
 
/usr/share/fonts/chienes/目录不存在就创建
 
3.执行jodconverter-web/src/main/bin/startup.sh安装openoffice
 
4.安装打包mvncleanpackage-DskipTests
 
5.到fileview/下运行项目
 
java-Dfile.encoding=UTF-8
 
-Dsun.java2d.cmm=sun.java2d.cmm.kcms.KcmsServiceProvider
 
-jar./jodconverter-web/target/kkFileView-2.2.0-SNAPSHOT.jar
 
访问地址测试可以预览成功即完成准备nginx
 
https域名指向服务端地址
 
阿里云OSS
 
mysql5.7数据库
 
redis缓存
 
创建数据库dz_cloud并运行初始化SQLdz_cloud_init.sql
 
修改数据库sql_mode去掉only_full_group_by
 
SELECT sql_mode;
 
SET global.sql_mode=
 
'STRICT_TRANS_TABLES,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_
 
BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION'
 
修改数据库配置文件my.cnf忽略大小写lower_case_table_names=1
 
java-Xms518m-Xmx1024m-Djava.security.egd=file:/dev/./urandom
 
-Dserver.port=7900-Ddz.redis.password=XXXXXX-Ddz.redis.host=XXXXXXX
 
-Ddz.redis.port=XXXXX-Ddz.mysql.host=XXXXXX:3306
 
-Ddz.mysql.password=XXXXXX-Ddz.mysql.username=XXXXXX
 
-Ddz.oss.bucketName_pub=XXXXXX-Ddz.oss.bucketName_pre=XXXXXX
 
-Ddz.oss.endpoint=XXXXXX-Ddz.oss.region=XXXXXX
 
-Ddz.oss.accessKeyId=XXXXXX-Ddz.oss.accessKeySecret=XXXXXX
 
-Ddz.oss.roleArn=XXXXXX-Ddz.oss.roleSessionName=XXXXXX
 
-Ddz.fontdomain=${前端域名}-Ddz.backdomain=${后端域名}
 
-Ddz.fileviewdomain=${附件预览域名}-jarzbb.jar
 
备注:域名不需要前缀https://

 
前端服务:
 
nginx添加代理配置
 
server{
 
listen80;
 
listen443ssl;
 
server_namedongzhu-font.XXXX.com;
 
ssl_certificate/home/https/XXXXX.cer;
 
ssl_certificate_key/home/https/XXXXX.key;
 
ssl_ciphers
 
ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-
 
GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-
 
AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-
 
SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDH
 
E-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SH
 
A256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIG
 
H:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
 
ssl_prefer_server_cipherson;
 
ssl_protocolsTLSv1TLSv1.1TLSv1.2;
 
ssl_session_cacheshared:SSL:5m;
 
ssl_session_timeout5m;
 
if($scheme=http){
 
return301https://$host$request_uri;
 
}
 
access_log/home/haishuotech/log/dongzhu_access.log;
 
error_log/home/haishuotech/log/dongzhu_error.log;
 
client_header_buffer_size128k;
 
large_client_header_buffers4128k;
 
client_max_body_size100m;
 
location/{
 
root/home/haishuotech/dist;
 
indexindex.html;
 
}
 
location/dev-api/{
 
proxy_set_headerHost$http_host;
 
proxy_set_headerX-Real-IP$remote_addr;
 
proxy_set_headerREMOTE-HOST$remote_addr;
 
proxy_set_headerX-Forwarded-For$proxy_add_x_forwarded_for;
 
#后端服务地址
 
proxy_passhttp://127.0.0.1:7900/;
 
}
 
}