{"id":52,"date":"2025-08-17T11:25:50","date_gmt":"2025-08-17T03:25:50","guid":{"rendered":"https:\/\/www.eastsun.top\/?p=52"},"modified":"2025-08-17T11:25:50","modified_gmt":"2025-08-17T03:25:50","slug":"%e4%bb%8e%e5%a4%87%e4%bb%bd%e5%88%b0%e6%bb%a1%e8%a1%80%e5%a4%8d%e5%8e%9f%ef%bc%9adocker-%e6%9c%8d%e5%8a%a1-%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86-%e5%af%86%e9%92%a5-%e7%9a%84%e5%a4%87%e4%bb%bd","status":"publish","type":"post","link":"https:\/\/www.eastsun.top\/?p=52","title":{"rendered":"\u4ece\u5907\u4efd\u5230\u6ee1\u8840\u590d\u539f\uff1aDocker \u670d\u52a1 + \u53cd\u5411\u4ee3\u7406 + \u5bc6\u94a5 \u7684\u5907\u4efd\u4e0e\u707e\u96be\u6062\u590d SOP"},"content":{"rendered":"

\u76ee\u6807\uff1a\u5f53\u670d\u52a1\u5668\u6545\u969c\/\u8bef\u5220\/\u8fc1\u79fb\u65f6\uff0c\u80fd\u6309\u6b65\u9aa4\u5feb\u901f\u6062\u590d<\/b><\/span>\uff1a\u535a\u5ba2\u3001RSS \u805a\u5408\u3001\u5bc6\u7801\u5e93\u3001\u6587\u4ef6\u540c\u6b65\u3001\u72b6\u6001\u76d1\u63a7\u3001\u5bfc\u822a\u9875\u7b49\u3002<\/p><\/blockquote>\n

\u8303\u56f4\uff1a\u4ee5 <\/span>Docker + Compose<\/b> \u90e8\u7f72\u3001<\/span>Nginx \u53cd\u5411\u4ee3\u7406 + HTTPS<\/b> \u51fa\u7f51\u7684\u901a\u7528\u6808\u4e3a\u4f8b\u3002<\/span><\/p><\/blockquote>\n

\u8131\u654f\u8bf4\u660e\uff1a\u6587\u4e2d\u4f7f\u7528\u5360\u4f4d\u7b26\uff08\u5982 SERVER_IP<\/span>\u3001app.example.com<\/span>\u3001\/srv\/app<\/span>\uff09\uff0c\u4e0d\u5305\u542b\u4f60\u7684\u771f\u5b9e IP\/\u57df\u540d\/\u53e3\u4ee4\u3002<\/p><\/blockquote>\n

\n

\u3010\u5b9e\u64cd\u6559\u5b66\u3011<\/b><\/h1>\n

\u4e00\u3001\u5907\u4efd\u7b56\u7565\u8bbe\u8ba1\uff08\u5148\u5b9a\u201c\u5907\u4ec0\u4e48\u3001\u5728\u54ea\u3001\u591a\u4e45\u4e00\u6b21\u201d\uff09<\/b><\/h2>\n

1\uff09\u5206\u5c42\u5907\u4efd\u6e05\u5355\uff08\u6700\u91cd\u8981\u653e\u6700\u4e0a\uff09<\/b><\/h3>\n
    \n
  • \n

    \u5bc6\u94a5\u4e0e\u8d26\u53f7<\/b><\/b><\/p>\n

      \n
    • \n

      \u672c\u673a SSH \u79c1\u94a5<\/b><\/span>\uff08\u4f8b\u5982 ~\/.ssh\/id_ed25519<\/span>\uff09\u2192 \u7528\u52a0\u5bc6\u538b\u7f29\u5907\u4efd<\/p>\n<\/li>\n

    • \n

      \u670d\u52a1\u5668 admin \u7528\u6237<\/b><\/span> \u4e0e sudoers \u7247\u6bb5<\/b><\/span>\uff08\/etc\/sudoers.d\/90-admin\uff09<\/p>\n<\/li>\n<\/ul>\n<\/li>\n

    • \n

      \u53cd\u5411\u4ee3\u7406\u4e0e\u8bc1\u4e66<\/b><\/b><\/p>\n

        \n
      • \n

        Nginx \u7ad9\u70b9\u914d\u7f6e\uff08\u6216\u9762\u677f\u5bfc\u51fa\u7684\u53cd\u4ee3\u914d\u7f6e\uff09<\/p>\n<\/li>\n

      • \n

        HTTPS \u8bc1\u4e66\uff08Let\u2019s Encrypt \u53ef\u91cd\u7b7e\uff1b\u4e5f\u53ef\u4e00\u5e76\u5907\uff09<\/p>\n<\/li>\n<\/ul>\n<\/li>\n

      • \n

        Compose \u9879\u76ee\u4e0e\u6301\u4e45\u5316\u6570\u636e<\/b><\/b><\/p>\n

          \n
        • \n

          docker-compose.yml\u3001<\/span>.env\u3001\u81ea\u5b9a\u4e49\u811a\u672c<\/span><\/p>\n<\/li>\n

        • \n

          \u6570\u636e\u5377\/\u6302\u8f7d\u76ee\u5f55<\/b><\/span>\uff08\u4e0b\u8868\u7ed9\u51fa\u793a\u4f8b\u8def\u5f84\uff09<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n\n\n\n\n\n\n\n\n
          \n

          \u670d\u52a1<\/b><\/p>\n<\/th>\n

          		\n

          \u5fc5\u5907\u6570\u636e\u76ee\u5f55\uff08\u793a\u4f8b\uff09<\/b><\/p>\n<\/th>\n

          		\n

          \u8bf4\u660e<\/b><\/p>\n<\/th>\n<\/tr>\n<\/thead>\n

          \n

          WordPress<\/p>\n<\/td>\n

          		\n

          \/srv\/wordpress\/html + \u6570\u636e\u5e93\u5907\u4efd<\/span><\/p>\n<\/td>\n

          		\n

          \u7f51\u7ad9\u6587\u4ef6\u4e0e\u6570\u636e\u5e93\u90fd\u8981\u6709<\/p>\n<\/td>\n<\/tr>\n

          \n

          FreshRSS<\/p>\n<\/td>\n

          		\n

          \/srv\/rss_stack\/freshrss_data\/<\/p>\n<\/td>\n

          		\n

          \u8ba2\u9605\u3001\u7528\u6237\u3001\u914d\u7f6e<\/p>\n<\/td>\n<\/tr>\n

          \n

          RSSHub<\/p>\n<\/td>\n

          		\n

          \u53ef\u9009<\/b><\/span>\uff08\u591a\u4e3a\u65e0\u72b6\u6001\uff09<\/p>\n<\/td>\n

          		\n

          \u5982\u6709\u81ea\u5b9a\u4e49\u8def\u7531\/\u914d\u7f6e\u5219\u5907<\/p>\n<\/td>\n<\/tr>\n

          \n

          Vaultwarden<\/p>\n<\/td>\n

          		\n

          \/srv\/vaultwarden\/data\/<\/p>\n<\/td>\n

          		\n

          \u6838\u5fc3\u6570\u636e<\/b>\uff0c\u5fc5\u987b\u5907<\/span><\/p>\n<\/td>\n<\/tr>\n

          \n

          Syncthing<\/p>\n<\/td>\n

          		\n

          \/srv\/syncthing\/config\/ + \u5404\u8d44\u6599\u5e93\u8def\u5f84<\/span><\/p>\n<\/td>\n

          		\n

          \u914d\u7f6e + \u4f60\u8981\u540c\u6b65\u7684\u6587\u4ef6<\/p>\n<\/td>\n<\/tr>\n

          \n

          Uptime Kuma<\/p>\n<\/td>\n

          		\n

          \/srv\/uptime-kuma\/data\/<\/p>\n<\/td>\n

          		\n

          \u76d1\u63a7\u9879\u4e0e\u901a\u77e5\u901a\u9053<\/p>\n<\/td>\n<\/tr>\n

          \n

          Homer<\/p>\n<\/td>\n

          		\n

          \/srv\/homer\/assets\/<\/p>\n<\/td>\n

          		\n

          config.yml + <\/span>custom.css<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

          \u8bf4\u660e\uff1a\u8def\u5f84\u53ea\u4f5c\u793a\u4f8b\u2014\u2014\u4f60\u53ef\u4ee5\u628a\u6240\u6709\u9879\u76ee\u7edf\u4e00\u653e\u5230 <\/span>\/srv\/<project> \u6216 <\/span>\/home\/admin\/<project>\uff0c\u4fbf\u4e8e\u5907\u4efd\u3002<\/span><\/p><\/blockquote>\n

          \n

          2\uff09\u5907\u4efd\u5468\u671f\u4e0e\u4fdd\u7559\uff08\u5efa\u8bae\u8d77\u70b9\uff09<\/b><\/h3>\n
            \n
          • \n

            \u6bcf\u65e5<\/b><\/span>\uff1a\u7559 7<\/b><\/span> \u4efd\uff08\u8fd1\u4e00\u5468\uff09<\/p>\n<\/li>\n

          • \n

            \u6bcf\u5468<\/b><\/span>\uff1a\u7559 4<\/b><\/span> \u4efd\uff08\u8fd1\u4e00\u6708\uff09<\/p>\n<\/li>\n

          • \n

            \u6bcf\u6708<\/b><\/span>\uff1a\u7559 6<\/b><\/span> \u4efd\uff08\u8fd1\u534a\u5e74\uff09<\/p>\n<\/li>\n

          • \n

            \u5173\u952e\u53d8\u66f4<\/b><\/span>\uff1a\u624b\u52a8\u6253\u4e00\u4e2a \u91cc\u7a0b\u7891\u5907\u4efd<\/b><\/span>\uff08\u4f8b\u5982\u201c\u5347\u7ea7\u524d\/\u5927\u6539\u52a8\u524d\u201d\uff09<\/p>\n<\/li>\n<\/ul>\n

            \n

            \u4e8c\u3001\u57fa\u7840\u5de5\u5177\u4e0e\u76ee\u5f55<\/b><\/h2>\n
            # \u5efa\u7acb\u7edf\u4e00\u7684\u672c\u5730\u5907\u4efd\u76ee\u5f55\r\nmkdir -p \/srv\/_backups\/daily          # mkdir\uff1a\u521b\u5efa\u76ee\u5f55\uff1b-p\uff1a\u7236\u76ee\u5f55\u4e0d\u5b58\u5728\u5219\u4e00\u5e76\u521b\u5efa\r\nmkdir -p \/srv\/_backups\/weekly\r\nmkdir -p \/srv\/_backups\/monthly<\/code><\/pre>\n
            \u4e91\u7aef\u5b58\u50a8\uff1a\u5982\u679c\u4f60\u4f7f\u7528\u5bf9\u8c61\u5b58\u50a8\uff08\u5982 S3\/COS \u7b49\uff09\uff0c\u5efa\u8bae\u5728\u670d\u52a1\u5668\u88c5\u5bf9\u5e94 CLI\uff08\u5982 aws s3<\/span> \/ coscli<\/span>\uff09\uff0c\u628a\u672c\u5730\u5907\u4efd\u540c\u6b65<\/b><\/span>\u5230\u4e91\u7aef\u51b7\u5b58\u3002<\/p><\/blockquote>\n
            \n
            \u4e09\u3001\u4e00\u6b21\u6027\u811a\u672c\uff1a\u6253\u201c\u6574\u5305\u201d\u5907\u4efd\uff08\u53ef\u76f4\u63a5\u7528\uff09<\/b><\/h2>\n
            \u628a\u4f60\u5b9e\u9645\u7684\u9879\u76ee\u8def\u5f84\u66ff\u6362\u5230\u811a\u672c\u91cc\uff1b\u6bcf\u6761\u547d\u4ee4\u90fd\u542b\u4e2d\u6587\u6ce8\u91ca\uff0c\u4fbf\u4e8e\u7406\u89e3\u3002<\/p>\n
            nano \/usr\/local\/bin\/stack-backup.sh   # nano\uff1a\u65b0\u5efa\u811a\u672c\u6587\u4ef6<\/code><\/pre>\n
            \u7c98\u8d34\u4ee5\u4e0b\u5185\u5bb9\uff08\u6309\u9700\u8c03\u6574\u9879\u76ee\u5217\u8868\u4e0e\u8def\u5f84\uff09\uff1a<\/p>\n
            #!\/usr\/bin\/env bash\r\nset -euo pipefail\r\n# set -e\uff1a\u9047\u9519\u9000\u51fa\uff1b-u\uff1a\u672a\u5b9a\u4e49\u53d8\u91cf\u5373\u62a5\u9519\uff1b-o pipefail\uff1a\u7ba1\u9053\u4e2d\u4efb\u4e00\u547d\u4ee4\u5931\u8d25\u5373\u5931\u8d25\r\n\r\nNOW=$(date +%F_%H%M%S)                 # date\uff1a\u53d6\u5f53\u524d\u65e5\u671f\u65f6\u95f4\uff0c\u683c\u5f0f 2025-08-17_123456\r\nHOST=$(hostname -s)                    # hostname -s\uff1a\u4e3b\u673a\u77ed\u540d\uff0c\u4fbf\u4e8e\u533a\u5206\u591a\u53f0\u673a\u5668\r\nDEST_BASE=\"\/srv\/_backups\"              # \u672c\u5730\u5907\u4efd\u6839\u76ee\u5f55\r\nTIER=\"${1:-daily}\"                     # \u5907\u4efd\u5c42\u7ea7\uff1adaily\/weekly\/monthly\uff0c\u9ed8\u8ba4 daily\r\nDEST_DIR=\"$DEST_BASE\/$TIER\"            # \u76ee\u6807\u5b50\u76ee\u5f55\r\n\r\n# \u9700\u8981\u5907\u4efd\u7684\u9879\u76ee\uff08\u6309\u4f60\u7684\u5b9e\u9645\u4fee\u6539\uff09\r\nPROJECTS=(\r\n  \"\/srv\/wordpress\"                     # WordPress\uff08\u542b compose \u4e0e html\uff09\r\n  \"\/srv\/rss_stack\"                     # FreshRSS \/ RSSHub\r\n  \"\/srv\/vaultwarden\"                   # Vaultwarden\r\n  \"\/srv\/syncthing\"                     # Syncthing\r\n  \"\/srv\/uptime-kuma\"                   # Uptime Kuma\r\n  \"\/srv\/homer\"                         # Homer\r\n)\r\n\r\nmkdir -p \"$DEST_DIR\"                   # \u786e\u4fdd\u76ee\u6807\u76ee\u5f55\u5b58\u5728\r\n\r\n# 1) \u51b7\u51bb\u6240\u6709 compose \u9879\u76ee\u5230\u201c\u5e72\u51c0\u72b6\u6001\u201d\uff08\u53ef\u9009\uff1a\u51cf\u5c11\u6b63\u5728\u5199\u5165\uff09\r\n#   \u4ec5\u5f53\u4f60\u975e\u5e38\u5728\u610f\u4e00\u81f4\u6027\u65f6\u4f7f\u7528\uff1b\u6b63\u5e38\u5bb6\u5ead\/\u8f7b\u91cf\u670d\u52a1\u53ef\u8df3\u8fc7\u3002\r\n# for dir in \"${PROJECTS[@]}\"; do\r\n#   [ -f \"$dir\/docker-compose.yml\" ] && (cd \"$dir\" && docker compose pause || true)\r\n# done\r\n\r\n# 2) \u6253\u5305\u6bcf\u4e2a\u9879\u76ee\r\nfor dir in \"${PROJECTS[@]}\"; do\r\n  name=$(basename \"$dir\")              # basename\uff1a\u53d6\u76ee\u5f55\u540d\u4f5c\u4e3a\u5305\u540d\u7684\u4e00\u90e8\u5206\r\n  tarball=\"${DEST_DIR}\/${HOST}_${name}_${NOW}.tar.gz\"\r\n  # tar -czf\uff1a\u6253\u5305\u5e76\u538b\u7f29\u4e3a .tar.gz\r\n  # --exclude\uff1a\u53ef\u6309\u9700\u6392\u9664\u7f13\u5b58\/\u4e34\u65f6\u6587\u4ef6\r\n  tar -czf \"$tarball\" \\\r\n    --exclude='*.log' \\\r\n    --exclude='node_modules' \\\r\n    -C \"$dir\" .                         # -C\uff1a\u5148\u5207\u6362\u5230\u76ee\u5f55\uff0c\u518d\u628a\u201c\u5f53\u524d\u76ee\u5f55\u4e0b\u6240\u6709\u5185\u5bb9\u201d\u6253\u8fdb\u5305\r\n  # \u751f\u6210\u6821\u9a8c\u548c\uff08sha256sum\uff1a\u8ba1\u7b97\u6587\u4ef6\u54c8\u5e0c\uff09\r\n  sha256sum \"$tarball\" > \"${tarball}.sha256\"\r\ndone\r\n\r\n# 3) \u6062\u590d\u8fd0\u884c\uff08\u82e5\u4e4b\u524d pause \u4e86\uff09\r\n# for dir in \"${PROJECTS[@]}\"; do\r\n#   [ -f \"$dir\/docker-compose.yml\" ] && (cd \"$dir\" && docker compose unpause || true)\r\n# done\r\n\r\n# 4) \u672c\u5730\u6e05\u7406\u7b56\u7565\uff08\u4fdd\u7559\u4e00\u5b9a\u6570\u91cf\u7684\u5305\uff09\r\n#   \u8fd9\u91cc\u6309\u201c\u6bcf\u5c42\u4fdd\u7559 30 \u5929\u201d\u4e3a\u4f8b\uff1b\u4f60\u4e5f\u53ef\u4ee5\u6309\u6570\u91cf\u6e05\u7406\uff08-mtime \u6539\u4e3a -printf + sort\uff09\r\nfind \"$DEST_DIR\" -type f -name \"*.tar.gz\" -mtime +30 -delete\r\nfind \"$DEST_DIR\" -type f -name \"*.sha256\" -mtime +30 -delete\r\n\r\necho \"[OK] backup done: $DEST_DIR\"<\/code><\/pre>\n
            \u4fdd\u5b58\uff08Ctrl+O<\/span> \u56de\u8f66\uff09\u2192 \u9000\u51fa\uff08Ctrl+X<\/span>\uff09\u2192 \u8d4b\u4e88\u6267\u884c\u6743\u9650\uff1a<\/p>\n
            chmod +x \/usr\/local\/bin\/stack-backup.sh   # chmod +x\uff1a\u7ed9\u811a\u672c\u53ef\u6267\u884c\u6743\u9650<\/code><\/pre>\n
            \n
            \u56db\u3001\u5b9a\u65f6\u4efb\u52a1\uff08crontab\uff09<\/b><\/h2>\n
            crontab -e\r\n# \u5728\u6587\u4ef6\u672b\u5c3e\u8ffd\u52a0\u4e09\u884c\uff08\u6bcf\u65e5\/\u6bcf\u5468\/\u6bcf\u6708\u5404\u4e00\u6b21\uff1b\u65f6\u95f4\u53ef\u81ea\u884c\u8c03\u6574\uff09\r\n\r\n# \u6bcf\u5929 \u51cc\u6668 02:10 \u505a\u4e00\u6b21\u201c\u6bcf\u65e5\u5907\u4efd\u201d\r\n10 2 * * *  \/usr\/local\/bin\/stack-backup.sh daily   >> \/var\/log\/stack-backup.log 2>&1\r\n\r\n# \u6bcf\u5468 \u5468\u65e5 \u51cc\u6668 02:20 \u505a\u4e00\u6b21\u201c\u5468\u5907\u4efd\u201d\r\n20 2 * * 0  \/usr\/local\/bin\/stack-backup.sh weekly  >> \/var\/log\/stack-backup.log 2>&1\r\n\r\n# \u6bcf\u6708 1 \u53f7 \u51cc\u6668 02:30 \u505a\u4e00\u6b21\u201c\u6708\u5907\u4efd\u201d\r\n30 2 1 * *  \/usr\/local\/bin\/stack-backup.sh monthly >> \/var\/log\/stack-backup.log 2>&1<\/code><\/pre>\n
            \u82e5\u8981\u540c\u6b65\u5230\u5bf9\u8c61\u5b58\u50a8<\/b><\/span>\uff0c\u53ef\u5728\u811a\u672c\u672b\u5c3e\u8ffd\u52a0\u4e00\u6bb5\uff08\u4ee5 S3 \u8bed\u6cd5\u4e3a\u4f8b\uff0cCOS\/\u5176\u4ed6\u5382\u5546\u7c7b\u540c\uff09\uff1a<\/p><\/blockquote>\n
            # aws s3\uff1a\u628a\u5907\u4efd\u540c\u6b65\u4e0a\u4e91\uff1b--delete\uff1a\u8ba9\u4e91\u7aef\u4e0e\u672c\u5730\u4e00\u81f4\uff08\u8c28\u614e\u4f7f\u7528\uff09\r\naws s3 sync \"$DEST_DIR\" \"s3:\/\/your-bucket\/stack\/$TIER\/\" --delete<\/code><\/pre>\n
            \n
            \u4e94\u3001\u79c1\u94a5\u7684\u5b89\u5168\u5907\u4efd\uff08\u53ea\u9488\u5bf9<\/b><\/h2>\n
            \u79c1\u94a5\u6587\u4ef6<\/b><\/h2>\n
            \uff09<\/b><\/h2>\n
            # 1) \u538b\u7f29\u5e76\u52a0\u5bc6\uff08zip \u4f1a\u63d0\u793a\u8f93\u5165\u52a0\u5bc6\u53e3\u4ee4\uff09\r\ncd ~\/.ssh\r\nzip --encrypt admin_ssh_key_${HOST}_$(date +%F).zip id_ed25519\r\n# zip --encrypt\uff1a\u52a0\u5bc6\u538b\u7f29\uff1b\u6587\u4ef6\u540d\u4e2d\u5e26\u65e5\u671f\u4e0e\u4e3b\u673a\u540d\u4fbf\u4e8e\u8fa8\u8bc6\r\n\r\n# 2) \u628a\u751f\u6210\u7684 zip \u653e\u5165\u4f60\u7684\u5bc6\u7801\u5e93 \/ \u4e91\u76d8\uff08\u53d7\u4fe1\u3001\u53d7\u63a7\uff09\r\n#   \u5207\u8bb0\uff1a\u7edd\u4e0d\u628a\u201c\u660e\u6587\u79c1\u94a5\u201d\u4e22\u5728\u516c\u5f00\u6216\u5f31\u6743\u9650\u7684\u4f4d\u7f6e<\/code><\/pre>\n
            \n
            \u516d\u3001\u707e\u96be\u6062\u590d\uff08\u6700\u77ed\u8def\u5f84\uff1a\u4ece\u88f8\u673a\u5230\u4e0a\u7ebf\uff09<\/b><\/h2>\n
            \u573a\u666f\uff1a\u539f\u670d\u52a1\u5668\u4e0d\u53ef\u7528\uff0c\u65b0\u673a\u5668\u4e0a\u5feb\u901f\u6062\u590d\u540c\u4e00\u5957\u670d\u52a1<\/b><\/span>\u3002<\/p><\/blockquote>\n
            0\uff09\u65b0\u670d\u52a1\u5668\u6700\u5c0f\u5316\u521d\u59cb\u5316<\/b><\/h3>\n
            # \u65b0\u5efa admin \u7528\u6237\u5e76\u7ed9 bash\r\nuseradd -m -s \/bin\/bash admin      # -m\uff1a\u521b\u5efa\u5bb6\u76ee\u5f55\uff1b-s\uff1a\u767b\u5f55 shell\r\npasswd admin                       # \u8bbe\u7f6e admin \u53e3\u4ee4\uff08\u4ec5\u4f5c\u672c\u5730\u5e94\u6025\uff09\r\n\r\n# \u914d\u7f6e admin \u7684 SSH \u516c\u94a5\uff08\u628a\u4f60\u672c\u673a\u516c\u94a5\u7c98\u8d34\u8fdb\u53bb\uff09\r\nsu - admin\r\nmkdir -p ~\/.ssh && chmod 700 ~\/.ssh\r\nnano ~\/.ssh\/authorized_keys        # \u7c98\u8d34\u4f60\u7684\u516c\u94a5\uff08.pub \u6587\u4ef6\u5185\u5bb9\uff0c\u4e00\u884c\uff09\r\nchmod 600 ~\/.ssh\/authorized_keys\r\n\r\n# \u7ed9 admin \u914d\u7f6e sudo \u7247\u6bb5\uff08\u514d\u5bc6\u6216\u63d0\u793a\u8f93\u5165\u5bc6\u7801\u6309\u9700\u9009\u62e9\uff09\r\nsudo visudo -f \/etc\/sudoers.d\/90-admin\r\n# \u7c98\u8d34\u5176\u4e2d\u4e00\u884c\uff1a\r\n# admin ALL=(ALL) ALL\r\n# \u6216\r\n# admin ALL=(ALL) NOPASSWD:ALL\r\nsudo chmod 440 \/etc\/sudoers.d\/90-admin\r\nsudo visudo -c                     # -c\uff1a\u68c0\u67e5 sudoers \u8bed\u6cd5<\/code><\/pre>\n
            1\uff09\u5b89\u88c5 Docker \u4e0e Compose<\/b><\/h3>\n
            # \u4e0d\u540c\u53d1\u884c\u7248\u547d\u4ee4\u7565\u6709\u5dee\u5f02\uff0c\u8fd9\u91cc\u7ed9\u51fa\u901a\u7528\u53c2\u8003\uff08\u5df2\u7b80\u5316\uff09\r\nsudo dnf install -y docker\r\nsudo systemctl enable --now docker\r\ndocker -v                           # \u9a8c\u8bc1 Docker \u53ef\u7528\r\ndocker compose version              # \u9a8c\u8bc1 Compose \u5b50\u547d\u4ee4\u53ef\u7528<\/code><\/pre>\n
            2\uff09\u6062\u590d\u53cd\u5411\u4ee3\u7406\u4e0e\u8bc1\u4e66<\/b><\/h3>\n
              \n
            • \n
              \u4f7f\u7528\u9762\u677f\u6216\u624b\u5de5\u5b89\u88c5 Nginx\u3002<\/p>\n<\/li>\n
            • \n
              \u4e3a\u6bcf\u4e2a\u5b50\u57df\u540d\u6dfb\u52a0\u7ad9\u70b9\uff0c\u76ee\u6807\u6307\u5411 \u672c\u673a\u56de\u73af\u7aef\u53e3<\/b><\/span>\uff08\u7a0d\u540e\u5bb9\u5668\u8d77\u6765\u5373\u53ef\u8fde\u63a5\uff09\u3002<\/p>\n<\/li>\n
            • \n
              \u7533\u8bf7 Let\u2019s Encrypt \u5e76\u5f3a\u5236 HTTPS\u3002<\/p>\n<\/li>\n
            • \n
              \u7ad9\u70b9\u53cd\u4ee3\u91cc\u52a0\u5165\u516d\u884c\u9ec4\u91d1\u8bf7\u6c42\u5934<\/b><\/span>\uff08\u907f\u514d\u6837\u5f0f\/JS\u4e22\u5931\uff09\uff1a<\/p>\n<\/li>\n<\/ul>\n
              proxy_set_header Host              $host;\r\nproxy_set_header X-Real-IP         $remote_addr;\r\nproxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;\r\nproxy_set_header X-Forwarded-Proto $scheme;\r\nproxy_set_header X-Forwarded-Host  $host;\r\nproxy_set_header X-Forwarded-Port  $server_port;<\/code><\/pre>\n
              3\uff09\u62c9\u56de\u5907\u4efd\u5e76\u89e3\u5305\u5230\u539f\u8def\u5f84<\/b><\/h3>\n
              # \u5047\u8bbe\u4ece\u5bf9\u8c61\u5b58\u50a8\u6216\u53e6\u4e00\u53f0\u673a\u5668\u53d6\u56de\u6700\u8fd1\u7684\u5907\u4efd\u5305\r\nmkdir -p \/srv\/_restore && cd \/srv\/_restore\r\n# \u628a *.tar.gz \u4e0b\u8f7d\u5230\u672c\u76ee\u5f55\uff08\u547d\u4ee4\u7565\uff09\r\n\r\n# \u6821\u9a8c\u5b8c\u6574\u6027\uff1a\u5bf9\u6bcf\u4e2a\u5305\u505a sha256sum \u6821\u9a8c\r\nsha256sum -c *.sha256               # -c\uff1a\u9010\u4e2a\u6821\u9a8c\u54c8\u5e0c\uff0cOK \u8868\u793a\u6587\u4ef6\u672a\u635f\u574f\r\n\r\n# \u9009\u62e9\u4e00\u4e2a\u5305\uff08\u793a\u4f8b\uff1avaultwarden\uff09\uff0c\u89e3\u538b\u56de\u76ee\u6807\u76ee\u5f55\r\nmkdir -p \/srv\/vaultwarden\r\ntar -xzf HOST_vaultwarden_YYYY-MM-DD_HHMMSS.tar.gz -C \/srv\/vaultwarden\r\n# tar -xzf\uff1a\u89e3\u538b .tar.gz\uff1b-C\uff1a\u89e3\u538b\u5230\u6307\u5b9a\u76ee\u5f55<\/code><\/pre>\n
              \u6743\u9650\u590d\u4f4d\uff08\u91cd\u8981\uff09<\/b><\/span>\uff1a\u5982\u679c\u5bb9\u5668\u9700\u8981\u4ee5 admin \u8eab\u4efd\u5199\u6587\u4ef6\uff0c\u786e\u4fdd\u5c5e\u4e3b\u4e00\u81f4\uff1a<\/p><\/blockquote>\n
              sudo chown -R admin:admin \/srv\/vaultwarden\r\n# \u6309\u9879\u76ee\u4f9d\u6b21\u5904\u7406 \/srv\/rss_stack \/srv\/syncthing \/srv\/uptime-kuma \/srv\/homer \u7b49<\/code><\/pre>\n
              4\uff09\u9010\u9879\u542f\u52a8\u5404\u670d\u52a1\uff08\u6309\u4f60\u539f\u6765\u7684\u9879\u76ee\u76ee\u5f55\uff09<\/b><\/h3>\n
              # \u5148\u8d77\u53cd\u4ee3\u4f9d\u8d56\u5c11\u7684\uff08\u4f8b\u5982 Homer\uff09\r\ncd \/srv\/homer && docker compose up -d && docker compose ps\r\n\r\n# \u518d\u8d77 Kuma\uff08\u4fbf\u4e8e\u5728\u6062\u590d\u8fc7\u7a0b\u4e2d\u201c\u81ea\u6211\u76d1\u63a7\u201d\uff09\r\ncd \/srv\/uptime-kuma && docker compose up -d\r\n\r\n# \u518d\u8d77 FreshRSS\/RSSHub\r\ncd \/srv\/rss_stack && docker compose up -d\r\n\r\n# Vaultwarden\uff08\u6838\u5fc3\uff09\r\ncd \/srv\/vaultwarden && docker compose up -d\r\n\r\n# Syncthing\uff08\u6587\u4ef6\u540c\u6b65\uff09\r\ncd \/srv\/syncthing && docker compose up -d\r\n\r\n# WordPress\uff08\u5982\u4f60\u7528 Docker \u65b9\u5f0f\uff09\r\ncd \/srv\/wordpress && docker compose up -d<\/code><\/pre>\n
              \u82e5 WordPress \u7528\u7684\u662f\u9762\u677f\u5b89\u88c5<\/b><\/span>\u800c\u975e Docker\uff1a<\/p><\/blockquote>\n
                \n
              • \n
                \u5148\u5efa\u7a7a\u7ad9\u70b9 \u2192 \u5bfc\u5165\u7f51\u7ad9\u6587\u4ef6<\/b><\/span>\uff08\u5907\u4efd\u5305\u91cc\u7684 html \u76ee\u5f55\uff09<\/p><\/blockquote>\n<\/li>\n
              • \n
                \u5bfc\u5165\u6570\u636e\u5e93<\/b><\/span>\uff08.sql<\/span> \u6216\u9762\u677f\u7684\u6570\u636e\u5e93\u5907\u4efd\uff09\uff1b<\/p><\/blockquote>\n<\/li>\n
              • \n
                \u82e5\u57df\u540d\u53d8\u5316\uff0c\u8bb0\u5f97\u66f4\u65b0 <\/span>wp_options \u91cc\u7684 <\/span>siteurl\/home\uff08\u6216 wp-config.php \u91cc\u5b9a\u4e49 <\/span>WP_HOME\/WP_SITEURL\uff09\u3002<\/span><\/p><\/blockquote>\n<\/li>\n<\/ul>\n
                5\uff09\u9010\u9879\u9a8c\u8bc1\uff08\u4ece\u201c\u7ad9\u70b9\u5165\u53e3\u201d\u5230\u201c\u670d\u52a1\u672c\u4f53\u201d\uff09<\/b><\/h3>\n
                # \u53ea\u5728\u670d\u52a1\u5668\u672c\u673a\u6d4b\u540e\u7aef\u7aef\u53e3\r\ncurl -I http:\/\/127.0.0.1:3002      # Homer \u793a\u4f8b\r\ncurl -I http:\/\/127.0.0.1:3001      # Kuma\r\ncurl -I http:\/\/127.0.0.1:8082      # FreshRSS\r\ncurl -I http:\/\/127.0.0.1:8384      # Syncthing GUI\r\n# -I\uff1a\u53ea\u53d6\u54cd\u5e94\u5934\uff1b200\/302 \u5373\u540e\u7aef\u6b63\u5e38\r\n\r\n# \u5916\u7f51\u6d4f\u89c8\u5668\u8bbf\u95ee\u57df\u540d\uff08\u53cd\u4ee3 + HTTPS\uff09\r\nhttps:\/\/home.example.com\r\nhttps:\/\/status.example.com\r\nhttps:\/\/rss.example.com\r\n# \u2026\u2026<\/code><\/pre>\n
                6\uff09Syncthing \u7279\u6709\u6b65\u9aa4<\/b><\/h3>\n
                  \n
                • \n
                  \u6253\u5f00 <\/span>https:\/\/sync.example.com\uff1a\u68c0\u67e5<\/span>\u8bbe\u5907 ID<\/b><\/span> \u662f\u5426\u4e0e\u672c\u5730\u8bbe\u5907\u4e92\u8ba4\uff1b<\/span><\/p>\n<\/li>\n
                • \n
                  \u5982\u679c\u8d44\u6599\u5e93\u8def\u5f84\u4e0d\u540c\uff0c\u6309 GUI \u63d0\u793a**\u201c\u91cd\u65b0\u914d\u5bf9\u8def\u5f84\u201d**\uff1b<\/p>\n<\/li>\n
                • \n
                  22000\/TCP+UDP \u653e\u884c\u540e\uff0c\u89c2\u5bdf\u8fde\u63a5\u7c7b\u578b\u662f\u5426\u4e3a TCP\/QUIC<\/b><\/span>\uff08\u975e Relay\uff09\u3002<\/p>\n<\/li>\n<\/ul>\n
                  7\uff09Vaultwarden \u7279\u6709\u6b65\u9aa4<\/b><\/h3>\n
                    \n
                  • \n
                    \u6062\u590d\u540e\u82e5\u57df\u540d\u53d8\u5316<\/b><\/span>\uff0c\u5ba2\u6237\u7aef\u53ef\u80fd\u9700\u8981\u91cd\u65b0\u767b\u5f55<\/b><\/span>\uff1b<\/p>\n<\/li>\n
                  • \n
                    \u786e\u8ba4\u73af\u5883\u53d8\u91cf\/\u914d\u7f6e\u91cc\u7684 DOMAIN<\/span>\uff08\u5982\u679c\u6709\uff09\u4e0e\u5f53\u524d\u57df\u540d\u4e00\u81f4\uff1b<\/p>\n<\/li>\n
                  • \n
                    \u5f3a\u5236 HTTPS \u7684\u53cd\u4ee3\u8981\u6b63\u786e\u4f20\u9012\u8bf7\u6c42\u5934\u3002<\/p>\n<\/li>\n<\/ul>\n
                    8\uff09Kuma \u7279\u6709\u6b65\u9aa4<\/b><\/h3>\n
                      \n
                    • \n
                      \u6253\u5f00 <\/span>https:\/\/status.example.com\uff1a\u786e\u8ba4\u76d1\u63a7\u9879\u5728\u7ebf\uff1b<\/span><\/p>\n<\/li>\n
                    • \n
                      \u6d4b\u8bd5\u901a\u77e5<\/b><\/span>\uff1a\u7ed9 QQ SMTP \u901a\u9053\u70b9\u201c\u6d4b\u8bd5\u201d\uff1b<\/p>\n<\/li>\n
                    • \n
                      \u5982\u76d1\u63a7\u7684\u57df\u540d\u6709\u53d8\u5316\uff0c\u6279\u91cf\u4fee\u6539\u76ee\u6807\u5730\u5740\u6216\u91cd\u5efa\u3002<\/p>\n<\/li>\n<\/ul>\n
                      \n
                      \u4e03\u3001\u6f14\u7ec3\u5efa\u8bae\uff08\u522b\u7b49\u51fa\u4e8b\u624d\u7b2c\u4e00\u6b21\u6062\u590d\uff09<\/b><\/h2>\n