Linux系统集群架构线上项目配置实战（二）

民工哥

发布于 2020-09-16 16:51:06

6030

发布于 2020-09-16 16:51:06

文章被收录于专栏：民工哥技术之路民工哥技术之路

写在前面

前面介绍了项目的整体情况与初始化服务器环境优化配置方面的内容，由于实际生产需求不一样，优化配置的点也不一样，仅供大家参考！

配置SSH免密登录

分发服务器使用全网备份服务器

首先创建分发用户

[root@centos ~]# useradd fenfa -u 999
[root@centos ~]# echo "123456"|passwd --stdin fenfa
Changing password for user fenfa.
passwd: all authentication tokens updated successfully.
[root@centos ~]# /bin/cp /etc/sudoers /etc/sudoers.bak
[root@centos ~]# echo "fenfa ALL=(root) NOPASSWD:/usr/bin/rsync" >>/etc/sudoers
[root@centos ~]# tail -1 /etc/sudoers
fenfa ALL=(root) NOPASSWD:/usr/bin/rsync

切换到fenfa用户创建密钥

配置expect批量分发工具

安装配置expect服务

[root@centos ~]$ yum install expect* -y

编写脚本

执行脚本结果如下

[fenfa@centos ~]$ sh fenfa_key.sh
10.0.0.1    [  OK  ]
10.0.0.2   [  OK  ]
10.0.0.3   [  OK  ]
10.0.0.4    [  OK  ]
10.0.0.5    [  OK  ]
10.0.0.6   [  OK  ]
10.0.0.7   [  OK  ]
10.0.0.8   [  OK  ]
10.0.0.9   [  OK  ]
10.0.0.10  [  OK  ]
10.0.0.11  [  OK  ]
10.0.0.12  [  OK  ]
10.0.0.13   [  OK  ]
10.0.0.14  [  OK  ]
切换到分发用户下查看是否分发成功
[root@centos ~]# su - fenfa
[fenfa@centos ~]$ ll /home/fenfa/.ssh/
total 4
-rw------- 1 fenfa fenfa 602 Sep 21 12:14 authorized_keys

根据上面的脚本编写分以hosts文件脚本

脚本执行结果如下

sh fenfa_file.sh host.list /etc/
[fenfa@centos ~]$ ll /etc/host.list 
-rw-rw-r-- 1 fenfa fenfa 131 Sep 16 12:45 /etc/host.list

只需要将host.list文件替换成你所需要分发的文件就OK了，

前端反向代理及管理后台服务器的配置

前端nginx反向代理服务器配置

安装所需的依赖包

[root@centos ~]# yum install pcre-devel zlib-devle openssl-devel gcc-c++ –y

编译安装nginx

cd /download/tools/
wget http://nginx.org/download/nginx-1.12.1.tar.gz
tar zxf nginx-1.12.1.tar.gz 
cd nginx-1.12.1
./configure --prefix=/app/nginx-1.12.1
make && make install
[root@centos ~]# cd /app/
[root@centos app]# ln -s nginx-1.12.1 nginx
[root@centos ~]# cd /app/nginx/conf/
[root@centos conf]# mkdir extra
[root@centos conf]# cp nginx.conf nginx.conf.bak
在nginx.conf文件后增加下面的配置
include extra/*.conf;
[root@centos ~]# cd /app/nginx/conf/extra/
[root@centos extra]# vim admin.mingongge.conf
#
# HTTPS server configuration
#
server {
    listen       80;
    server_name admin.mingongge.com;
    location / {
        proxy_pass http://10.0.0.6:8080;
        proxy_connect_timeout 600;
        proxy_read_timeout 600;
        proxy_send_timeout 600;
    }
}
[root@centos extra]# vim shangjia.mingongge.conf
#
# HTTPS server configuration
#
server {
    listen       80;
    server_name shangjia.mingongge.com;
    location / {
        proxy_pass http://10.0.0.7:8080;
        proxy_connect_timeout 600;
        proxy_read_timeout 600;
        proxy_send_timeout 600;
    }
}

业务平台管理后台admin.mingongge.com

JDK Tomcat环境安装

tar zxf apache-tomcat-8.5.9.tar.gz
mv apache-tomcat-8.5.9 /usr/local/tomcat
tar zxf jdk-8u111-linux-x64.tar.gz -C /usr/local/
cd /usr/local/
ln -s jdk1.8.0_111 jdk
cat >>/etc/profile <<EOF
export JAVA_HOME=/usr/local/jdk1.8.0_111
export CLASSPATH=.:JAVA_HOME/lib/dt.jar:JAVA_HOME/lib/tools.jar
export PATH=JAVA_HOME/bin:PATH
export CATALINA_HOME=/usr/local/apache-tomcat-8.5.9
EOF
[root@centos local]# source /etc/profile
[root@centos local]# java -version
java version "1.8.0_111"
Java(TM) SE Runtime Environment (build 1.8.0_111-b14)
Java HotSpot(TM) 64-Bit Server VM (build 25.111-b14, mixed mode)

JDK Tomcat环境配置

<Context path="" docBase="/www/admin" debug="0" reloadable="true" crossContext="true" />
echo "this is the admin.mingongge.com" >/www/admin/index.html
/usr/local/tomcat/bin/startup.sh

商家管理后台 shangjia.mingongge.com

JDK Tomcat环境安装请参考前面的步骤

<Context path="" docBase="/www/shangjia" debug="0" reloadable="true" crossContext="true" />
echo "this is the shangjia.mingongge.com" >/www/shangjia/index.html
/usr/local/tomcat/bin/startup.sh

测试反向代理

[root@centos ~]# curl http://admin.mingongge.com
this is the admin.mingongge.com
[root@centos ~]# curl http://shangjia.mingongge.com
this is the shangjia.mingongge.com