写在前面
前面介绍了项目的整体情况与初始化服务器环境优化配置方面的内容，由于实际生产需求不一样，优化配置的点也不一样，仅供大家参考！
01配置SSH免密登录
分发服务器使用全网备份服务器
首先创建分发用户
[root@centos ~]# useradd fenfa -u 999
[root@centos ~]# echo "123456"|passwd --stdin fenfa
Changing password for user fenfa.
passwd: all authentication tokens updated successfully.
[root@centos ~]# /bin/cp /etc/sudoers /etc/sudoers.bak
[root@centos ~]# echo "fenfa ALL=(root) NOPASSWD:/usr/bin/rsync" >>/etc/sudoers
[root@centos ~]# tail -1 /etc/sudoers
fenfa ALL=(root) NOPASSWD:/usr/bin/rsync
切换到fenfa用户创建密钥
02配置expect批量分发工具
安装配置expect服务
[root@centos ~]$ yum install expect* -y
编写脚本
执行脚本结果如下
[fenfa@centos ~]$ sh fenfa_key.sh
10.0.0.1 [ OK ]
10.0.0.2 [ OK ]
10.0.0.3 [ OK ]
10.0.0.4 [ OK ]
10.0.0.5 [ OK ]
10.0.0.6 [ OK ]
10.0.0.7 [ OK ]
10.0.0.8 [ OK ]
10.0.0.9 [ OK ]
10.0.0.10 [ OK ]
10.0.0.11 [ OK ]
10.0.0.12 [ OK ]
10.0.0.13 [ OK ]
10.0.0.14 [ OK ]
切换到分发用户下查看是否分发成功
[root@centos ~]# su - fenfa
[fenfa@centos ~]$ ll /home/fenfa/.ssh/
total 4
-rw------- 1 fenfa fenfa 602 Sep 21 12:14 authorized_keys
根据上面的脚本编写分以hosts文件脚本
脚本执行结果如下
sh fenfa_file.sh host.list /etc/
[fenfa@centos ~]$ ll /etc/host.list
-rw-rw-r-- 1 fenfa fenfa 131 Sep 16 12:45 /etc/host.list
只需要将host.list文件替换成你所需要分发的文件就OK了，
03前端反向代理及管理后台服务器的配置
前端nginx反向代理服务器配置
安装所需的依赖包
[root@centos ~]# yum install pcre-devel zlib-devle openssl-devel gcc-c++ –y
编译安装nginx
cd /download/tools/
wget http://nginx.org/download/nginx-1.12.1.tar.gz
tar zxf nginx-1.12.1.tar.gz
cd nginx-1.12.1
./configure --prefix=/app/nginx-1.12.1
make && make install
[root@centos ~]# cd /app/
[root@centos app]# ln -s nginx-1.12.1 nginx
[root@centos ~]# cd /app/nginx/conf/
[root@centos conf]# mkdir extra
[root@centos conf]# cp nginx.conf nginx.conf.bak
在nginx.conf文件后增加下面的配置
include extra/*.conf;
[root@centos ~]# cd /app/nginx/conf/extra/
[root@centos extra]# vim admin.mingongge.conf
#
# HTTPS server configuration
#
server {
listen 80;
server_name admin.mingongge.com;
location / {
proxy_pass http://10.0.0.6:8080;
proxy_connect_timeout 600;
proxy_read_timeout 600;
proxy_send_timeout 600;
}
}
[root@centos extra]# vim shangjia.mingongge.conf
#
# HTTPS server configuration
#
server {
listen 80;
server_name shangjia.mingongge.com;
location / {
proxy_pass http://10.0.0.7:8080;
proxy_connect_timeout 600;
proxy_read_timeout 600;
proxy_send_timeout 600;
}
}
业务平台管理后台admin.mingongge.com
JDK Tomcat环境安装
tar zxf apache-tomcat-8.5.9.tar.gz
mv apache-tomcat-8.5.9 /usr/local/tomcat
tar zxf jdk-8u111-linux-x64.tar.gz -C /usr/local/
cd /usr/local/
ln -s jdk1.8.0_111 jdk
cat >>/etc/profile <<EOF
export JAVA_HOME=/usr/local/jdk1.8.0_111
export CLASSPATH=.:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar
export PATH=$JAVA_HOME/bin:$PATH
export CATALINA_HOME=/usr/local/apache-tomcat-8.5.9
EOF
[root@centos local]# source /etc/profile
[root@centos local]# java -version
java version "1.8.0_111"
Java(TM) SE Runtime Environment (build 1.8.0_111-b14)
Java HotSpot(TM) 64-Bit Server VM (build 25.111-b14, mixed mode)
JDK Tomcat环境配置
<Context path="" docBase="/www/admin" debug="0" reloadable="true" crossContext="true" />
echo "this is the admin.mingongge.com" >/www/admin/index.html
/usr/local/tomcat/bin/startup.sh
商家管理后台 shangjia.mingongge.com
JDK Tomcat环境安装请参考前面的步骤
<Context path="" docBase="/www/shangjia" debug="0" reloadable="true" crossContext="true" />
echo "this is the shangjia.mingongge.com" >/www/shangjia/index.html
/usr/local/tomcat/bin/startup.sh
测试反向代理
[root@centos ~]# curl http://admin.mingongge.com
this is the admin.mingongge.com
[root@centos ~]# curl http://shangjia.mingongge.com
this is the shangjia.mingongge.com
模拟用户访问
