JimV-C/docs/install.md

手动安装

手动安装

• 安装必要软件
• 部署 MariaDB
• 部署 Redis
• 创建 Web 用户
• 创建站点发布目录
• 克隆JimV-C项目
• 安装所需库
• 初始化JimV MySQL数据库
• 修改配置文件
• 启动服务
• 部署 Nginx

安装必要软件

yum install screen python2-pip -y
pip install --upgrade pip -i https://mirrors.aliyun.com/pypi/simple/
pip install virtualenv -i https://mirrors.aliyun.com/pypi/simple/

部署 MariaDB

# 安装 MariaDB
yum install mariadb mariadb-server -y

# 配置 MariaDB
mkdir -p /etc/systemd/system/mariadb.service.d
echo '[Service]' > /etc/systemd/system/mariadb.service.d/limits.conf
echo 'LimitNOFILE=65535' >> /etc/systemd/system/mariadb.service.d/limits.conf
systemctl --system daemon-reload

sed -i '/\[mysqld\]/a\bind-address = 127.0.0.1' /etc/my.cnf
sed -i '/\[mysqld\]/a\log-bin' /etc/my.cnf
sed -i '/\[mysqld\]/a\expire_logs_days = 1' /etc/my.cnf
sed -i '/\[mysqld\]/a\innodb_file_per_table' /etc/my.cnf
sed -i '/\[mysqld\]/a\max_connections = 1000' /etc/my.cnf

# 启动并使其随机启动
systemctl enable mariadb.service
systemctl start mariadb.service

# 初始化 MariaDB
mysql_secure_installation << EOF

Y
your_root_db_password
your_root_db_password
Y
Y
Y
Y
EOF

# 测试是否部署成功
mysql -u root -pyour_root_db_password -e 'show databases'

部署 Redis

# 安装 Redis
yum install redis -y

# 配置 Redis
echo 'vm.overcommit_memory = 1' >> /etc/sysctl.conf
sysctl -p
sed -i '@^daemonize no@daemonize yes@g' /etc/redis.conf
sed -i 's@^bind 127.0.0.1@bind 0.0.0.0@g' /etc/redis.conf
sed -i 's@^appendonly no@appendonly yes@g' /etc/redis.conf
echo 'requirepass your_jimv_redis_passwordddddddddddddddddddddddddddddddddddddddddddddddddddddddd' >> /etc/redis.conf

# 启动并使其随机启动
systemctl enable redis.service
systemctl start redis.service

创建 Web 用户

useradd -m www
echo "www:www.pswd.com" | chpasswd
echo "www ALL = (root) ALL" >> /etc/sudoers.d/www; chmod 0440 /etc/sudoers.d/www

创建站点发布目录

su - www
mkdir ~/sites

克隆JimV-C项目

git clone https://github.com/jamesiter/JimV-C.git ~/sites/JimV-C

安装所需库

# 创建 python 虚拟环境
virtualenv --system-site-packages venv

# 导入 python 虚拟环境
source ~/venv/bin/activate

# 使切入 www 用户时自动导入 python 虚拟环境
echo '. ~/venv/bin/activate' >> .bashrc

# 安装JimV-C所需扩展库
pip install -r ~/sites/JimV-C/requirements.txt -i https://mirrors.aliyun.com/pypi/simple/

初始化JimV MySQL数据库

# 建立 JimV 数据库专属用户
mysql -u root -pyour_root_db_password -e 'grant all on jimv.* to jimv@localhost identified by "your_jimv_db_password"; flush privileges'
# 初始化数据库
mysql -u jimv -pyour_jimv_db_password < ~/sites/JimV-C/misc/init.sql
# 确认是否初始化成功
mysql -u jimv -pyour_jimv_db_password -e 'show databases'

修改配置文件

配置文件的默认读取路径：/etc/jimvc.conf

sudo cp ~/sites/JimV-C/jimvc.conf /etc/jimvc.conf

提示：

下表中凸显的配置项，需要用户根据自己的环境手动修改。

配置项	默认值	说明
listen	127.0.0.1	JimV-C 侦听的地址
port	8008	JimV-C 侦听的端口
db_name	jimv	数据库名称
db_host	localhost	数据库地址
db_port	3306	数据库端口
db_user	jimv	连接数控的用户名
db_password	your_jimv_db_password	连接数控的密码
redis_host	localhost	redis数据库地址
redis_port	6379	redis数据库端口
redis_password		redis数据库密码
redis_dbid	0	连接的redis数据库
log_file_path	/var/log/jimv/jimvc.log	日志存储路径
jwt_secret		token安全码
SECRET_KEY		session安全码
smtp_host		SMTP 服务器地址
smtp_port	25	SMTP 服务器端口
smtp_user		SMTP 用户
smtp_password		SMTP 密码
smtp_starttls	true	SMTP 是否开启 TLS

启动服务

sudo mkdir -p /var/log/jimv
sudo chown www.www /var/log/jimv
# 进入JimV-C目录
cd ~/sites/JimV-C
# 启动JimV-C
gunicorn -c gunicorn_config.py main:app

部署 Nginx

# 安装 Nginx
yum install nginx -y

# 配置 Nginx
sed -i 's@^user nginx;@user www;@g' /etc/nginx/nginx.conf
chown -R www.www /var/log/nginx

# 启动并使其随机启动
systemctl enable nginx.service
systemctl start nginx.service

    gzip on;
    gzip_min_length 1100;
    gzip_buffers 4 8k;
    gzip_types text/plain application/javascript text/css;

    autoindex off;
    add_header X-Frame-Options SAMEORIGIN;
    add_header X-Content-Type-Options: nosniff;

    server {
        listen 443;
        server_name jimv.your-domain;

        access_log  /var/log/nginx/jimv.access.log;
        error_log  /var/log/nginx/jimv.error.log;

        ssl on;
        ssl_certificate /opt/pki/tls/certs/jimv.your.crt;
        ssl_certificate_key /opt/pki/tls/certs/jimv.your.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers AESGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL;
        ssl_prefer_server_ciphers on;

        root /home/www/sites/JimV-C;

        # 拒绝访问隐藏文件(如：.git、.svn等目录)
        location ~ /\..* {
            return 403;
        }
        location ~ .(sql|py|pyc|ini|conf|log|svn|git|cfg)$ {
            return 403;
        }
        location ~ /$ {
            rewrite http://$host/index.html break;
        }
        location / {
            try_files $uri @inner;
        }

        location @inner {
            proxy_pass         http://127.0.0.1:8008;
            proxy_redirect     off;
            proxy_set_header   Host             $host;
            proxy_set_header   X-Real-IP        $remote_addr;
            proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
        }
    }