玩转NAS | VS Code网页版IDE，每个程序猿必备一套!

# 创建持久化目录
[manager@QNAP-NAS code-server]$ mkdir -vp /share/Container/code-server/{.local,.config,project}
[manager@QNAP-NAS code-server]$ chown -R manager:everyone /share/Container/code-server
[manager@QNAP-NAS code-server]$ ls -alh
  # total 20K
  # drwxr-xr-x  5 manager everyone       4.0K 2024-06-21 12:56 ./
  # drwxrwx--- 13 admin   administrators 4.0K 2024-06-25 11:29 ../
  # drwxr-xr-x  2 manager everyone       4.0K 2024-06-21 12:56 .config/
  # drwxr-xr-x  2 manager everyone       4.0K 2024-06-21 12:56 .local/
  # drwxr-xr-x  2 manager everyone       4.0K 2024-06-21 12:56 project/

# 或者一条命令创建容器
docker run -d -it --name code-server -p 3002:8080 -v "/share/Container/code-server/.local:/home/coder/.local" -v "/share/Container/code-server/.config:/home/coder/.config"   -v "/share/Container/code-server/project:/home/coder/project" -u "$(id -u):$(id -g)" -e "DOCKER_USER=$USER" codercom/code-server:latest

# 创建网络（此处作者由于在部署 openresty 时已经创建此桥接网络，若你没有创建则需要创建一个）
docker network create --driver bridge --subnet 172.25.0.0/24 --gateway 172.25.0.1 appnet
  # 7be4b7f26e819c17eb8ba8c19aeb3423d741d5003697f322907530cf898c7f82

# 命令方式
tee /share/Container/code-server/docker-compose.yaml <<EOF
version: '3.9'
services:
  vscode-server:
    container_name: code-server
    image: registry.cn-hangzhou.aliyuncs.com/weiyigeek/code-server:latest
    user: "1000:1000"
    ports:
      - 3002:8080
    environment:
      - TZ=Asia/Shanghai
      - DOCKER_USER=manager
    volumes:
      - /share/Container/code-server/.local:/home/coder/.local
      - /share/Container/code-server/.config:/home/coder/.config
      - /share/Container/code-server/project:/home/coder/project
    networks:
      - appnet

networks:
  appnet:
    external: true
EOF

# 创建并启动容器
docker-compose up -d

cat /home/coder/.config/code-server/config.yaml 
bind-addr: 127.0.0.1:8080
auth: password
password: 387775100f6975930dc2424b
cert: false

tee /share/Container/gateway-web/conf.d/code.conf <<'EOF'
server {
  listen       80;
  listen       443 ssl;
  http2 on;
  server_name  code.weiyigeek.top;

  charset utf-8;
  
  # SSL
  ssl_certificate      /etc/nginx/cert/weiyigeek.top.cer;
  ssl_certificate_key  /etc/nginx/cert/weiyigeek.top.key;
  ssl_session_cache    shared:MozSSL:10m;
  ssl_session_timeout  1d;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
  ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE:ECDH:AES:HIGH:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:!NULL:!aNULL:!eNULL:!EXPORT:!PSK:!ADH:!DH:!DES:!MD5:!RC4;
  ssl_prefer_server_ciphers  on;
  
  # HSTS ( http 转 https )
  add_header Strict-Transport-Security "max-age=15768000;includeSubDomains;preload" always;
  
  # CORS
  add_header Access-Control-Allow-Origin 'https://blog.weiyigeek.top';
  add_header Access-Control-Allow-Methods 'GET,POST,OPTIONS';
  add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
  
  # XXS-Protection
  add_header X-XSS-Protection "1; mode=block";

  location / {
    proxy_pass http://10.10.107.250:3002;
    proxy_set_header  Host $http_host;
    proxy_set_header  Upgrade $http_upgrade;
    proxy_set_header  Connection upgrade;
    proxy_set_header  X-Forwarded-Proto $scheme;
    proxy_set_header  X-Real-IP          $remote_addr;
    proxy_set_header  X-Forwarded-For    $proxy_add_x_forwarded_for;
    proxy_set_header  Accept-Encoding gzip;

    proxy_buffering off;
    proxy_cache off;
    
    send_timeout 300;
    proxy_connect_timeout 300;
    proxy_send_timeout 300;
    proxy_read_timeout 300;
  }
}
EOF