Typecho Handsome 迁移使用 Docker docker-compose 部署并配置证书自动更新

博主： Shanks
发布时间：2024 年 09 月 29 日
102次浏览
暂无评论
6810字数
分类：笔记

环境

Typecho 1.1 (17.10.30)
Ubuntu 22.04 LTS
Nginx 1.18
MariaDB 5.5.64
Php 7.2.34
Docker 27.2.1
Docker Compose v2.29.7
Typecho 主题：Handsome

步骤

目录结构

/www/typecho（如果为其他名称，请注意更改后续 typecho 前缀）/
—data（目录，原来的整个 typehco 文件夹）
—php-fpm（目录，构建带有 mysql 驱动的 php 镜像）
——Dockerfile
—ssl（证书目录）
—网站域名.conf（nginx 配置文件）
—fastcgi.conf（nginx 配置文件引用文件）
—数据库备份文件.sql
MariaDB 数据库存放位置：/var/lib/docker/volumes/typecho_typecho-db/_data/

操作

以下操作均使用 root 用户进行

mkdir -p /www/typecho
# 将所有文件按上方目录结构放好
chown -R data-www:data-www /www
chmod -R 545 /www/typecho/data
chmod -R 777 /www/typecho/data/usr/plugins/Handsome/cache # 如果使用 Handsome，请注意修改缓存权限
chmod -R 444 $(find /www/typecho/data/ -type f -not -name '*.php')
cd /www/typecho/ssl
openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
cd /www/typecho
docker compose up -d
cp 数据库备份文件.sql /var/lib/docker/volumes/typecho_typecho-db/_data/backup.sql
docker exec -it typecho-db-1 bash
mysql -uroot -proot
## 以下操作在数据库中执行
create database 数据库名称 DEFAULT CHARSET utf8mb4 COLLATE utf8mb4_unicode_ci; # 注意编码字符集，如果不清楚请查看文章末尾参考
GRANT ALL privileges ON 数据库名称.* TO '数据库帐号'@'%' IDENTIFIED BY '数据库密码' WITH GRANT OPTION;
flush privileges;
exit;
## 结束数据库内执行
cd /var/lib/mysql
mysql -uroot -proot 数据库名称 < backup.sql 
exit
docker compose down
docker compose up -d

设置证书自动更新

wget -O -  https://get.acme.sh | sh
acme.sh --upgrade --auto-upgrade
acme.sh --set-default-ca --server letsencrypt
acme.sh --issue -d www.yudelei.com -d yudelei.com -w /www/typecho/data/ --keylength ec-256 --force
acme.sh --install-cert -d www.yudelei.com --key-file /www/typecho/ssl/www.yudelei.com.key --fullchain-file /www/typecho/ssl/fullchain.cer --reloadcmd "docker exec -it typecho-web-1 service nginx force-reload"

相关文件

docker-compose.yml

version: "3.8"
services:
  db:
    image: mariadb:5.5.64
    restart: always
    volumes:
      - /etc/localtime:/etc/localtime
      - typecho-db:/var/lib/mysql
    environment:
      MYSQL_ROOT_PASSWORD: root
      TZ: Asia/Shanghai

  php-fpm:
    build: ./php-fpm/
    #image: php:7.2.34-fpm
    restart: always
    environment:
            - TZ=Asia/Shanghai
    volumes:
      - ./data:/var/www/html
    depends_on:
      - db

  web:
    image: nginx:1.18
    restart: always
    ports:
      - 80:80
      - 443:443
    environment:
      - TZ=Asia/Shanghai
    volumes:
      - ./网站域名.conf:/etc/nginx/conf.d/网站域名.conf
      - ./fastcgi.conf:/etc/nginx/fastcgi.conf
      - ./ssl:/etc/nginx/ssl
      - ./data:/var/www/html

volumes:
  typecho-db:

网站域名.conf

请注意更改网站域名，证书，私钥等！

server
    {
        listen 80;
        #listen [::]:80;
        server_name www.yudelei.com yudelei.com; # 需更改
        
        #return 301 https://$server_name$request_uri;
        return 301 https://www.yudelei.com$request_uri; # 需更改
    }

server
    {
        listen 443 ssl http2;
        server_name yudelei.com; # 需更改

        ssl_certificate /etc/nginx/ssl/证书.cer; # 需更改
        ssl_certificate_key /etc/nginx/ssl/私钥.key; # 需更改
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;
        ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
        ssl_session_cache builtin:1000 shared:SSL:10m;
        # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
        ssl_dhparam /etc/nginx/ssl/dhparam.pem;

        return 301 https://www.yudelei.com$request_uri;  # 需更改
    }

server
    {
        listen 443 ssl http2;
        #listen [::]:443 ssl http2;
        server_name www.yudelei.com; # 需更改
        index index.html index.htm index.php default.html default.htm default.php;
        root  /var/www/html;

        ssl_certificate /etc/nginx/ssl/证书.cer; # 需更改
        ssl_certificate_key /etc/nginx/ssl/私钥.key; # 需更改
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;
        ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
        ssl_session_cache builtin:1000 shared:SSL:10m;
        #openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
        ssl_dhparam /etc/nginx/ssl/dhparam.pem;

        # 如果后台未启用永久链接，请注释该模块
        if (!-e $request_filename) {
            rewrite ^(.*)$ /index.php$1 last;
        }
        
        location ~ [^/]\.php(/|$)
        {
            fastcgi_pass php-fpm:9000;
            fastcgi_index index.php;
            fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
            include  fastcgi.conf;
        }

        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        location ~ /.well-known {
            allow all;
        }

        location ~ /\.
        {
            deny all;
        }

        access_log  /var/log/nginx/access.log  main;
    }

fastcgi.conf

fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
fastcgi_param  QUERY_STRING       $query_string;
fastcgi_param  REQUEST_METHOD     $request_method;
fastcgi_param  CONTENT_TYPE       $content_type;
fastcgi_param  CONTENT_LENGTH     $content_length;

fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;
fastcgi_param  REQUEST_URI        $request_uri;
fastcgi_param  DOCUMENT_URI       $document_uri;
fastcgi_param  DOCUMENT_ROOT      $document_root;
fastcgi_param  SERVER_PROTOCOL    $server_protocol;
fastcgi_param  REQUEST_SCHEME     $scheme;
fastcgi_param  HTTPS              $https if_not_empty;

fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
fastcgi_param  SERVER_SOFTWARE    nginx/$nginx_version;

fastcgi_param  REMOTE_ADDR        $remote_addr;
fastcgi_param  REMOTE_PORT        $remote_port;
fastcgi_param  SERVER_ADDR        $server_addr;
fastcgi_param  SERVER_PORT        $server_port;
fastcgi_param  SERVER_NAME        $server_name;

# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param  REDIRECT_STATUS    200;
fastcgi_param PHP_ADMIN_VALUE "open_basedir=$document_root/:/tmp/:/proc/";

Dockerfile

FROM php:7.2.34-fpm
RUN docker-php-ext-install pdo_mysql

参考

CentOS7 安装 MariaDB 5.5

安装yum -y install mariadb mariadb-server 服务管理命令systemctl s...

最后修改：2024 年 10 月 31 日 04 : 43 PM

如果觉得文章帮助了您，您可以随意赞赏。

发表评论取消回复

评论 *

私密评论

名称 *

邮箱 *

地址

Typecho Handsome 迁移使用 Docker docker-compose 部署并配置证书自动更新

Shanks • 2024 年 09 月 29 日

环境

Typecho 1.1 (17.10.30)
Ubuntu 22.04 LTS
Nginx 1.18
MariaDB 5.5.64
Php 7.2.34
Docker 27.2.1
Docker Compose v2.29.7
Typecho 主题：Handsome

步骤

目录结构

操作

以下操作均使用 root 用户进行

mkdir -p /www/typecho
# 将所有文件按上方目录结构放好
chown -R data-www:data-www /www
chmod -R 545 /www/typecho/data
chmod -R 777 /www/typecho/data/usr/plugins/Handsome/cache # 如果使用 Handsome，请注意修改缓存权限
chmod -R 444 $(find /www/typecho/data/ -type f -not -name '*.php')
cd /www/typecho/ssl
openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
cd /www/typecho
docker compose up -d
cp 数据库备份文件.sql /var/lib/docker/volumes/typecho_typecho-db/_data/backup.sql
docker exec -it typecho-db-1 bash
mysql -uroot -proot
## 以下操作在数据库中执行
create database 数据库名称 DEFAULT CHARSET utf8mb4 COLLATE utf8mb4_unicode_ci; # 注意编码字符集，如果不清楚请查看文章末尾参考
GRANT ALL privileges ON 数据库名称.* TO '数据库帐号'@'%' IDENTIFIED BY '数据库密码' WITH GRANT OPTION;
flush privileges;
exit;
## 结束数据库内执行
cd /var/lib/mysql
mysql -uroot -proot 数据库名称 < backup.sql 
exit
docker compose down
docker compose up -d

设置证书自动更新

wget -O -  https://get.acme.sh | sh
acme.sh --upgrade --auto-upgrade
acme.sh --set-default-ca --server letsencrypt
acme.sh --issue -d www.yudelei.com -d yudelei.com -w /www/typecho/data/ --keylength ec-256 --force
acme.sh --install-cert -d www.yudelei.com --key-file /www/typecho/ssl/www.yudelei.com.key --fullchain-file /www/typecho/ssl/fullchain.cer --reloadcmd "docker exec -it typecho-web-1 service nginx force-reload"

相关文件

docker-compose.yml

version: "3.8"
services:
  db:
    image: mariadb:5.5.64
    restart: always
    volumes:
      - /etc/localtime:/etc/localtime
      - typecho-db:/var/lib/mysql
    environment:
      MYSQL_ROOT_PASSWORD: root
      TZ: Asia/Shanghai

  php-fpm:
    build: ./php-fpm/
    #image: php:7.2.34-fpm
    restart: always
    environment:
            - TZ=Asia/Shanghai
    volumes:
      - ./data:/var/www/html
    depends_on:
      - db

  web:
    image: nginx:1.18
    restart: always
    ports:
      - 80:80
      - 443:443
    environment:
      - TZ=Asia/Shanghai
    volumes:
      - ./网站域名.conf:/etc/nginx/conf.d/网站域名.conf
      - ./fastcgi.conf:/etc/nginx/fastcgi.conf
      - ./ssl:/etc/nginx/ssl
      - ./data:/var/www/html

volumes:
  typecho-db:

网站域名.conf

请注意更改网站域名，证书，私钥等！

server
    {
        listen 80;
        #listen [::]:80;
        server_name www.yudelei.com yudelei.com; # 需更改
        
        #return 301 https://$server_name$request_uri;
        return 301 https://www.yudelei.com$request_uri; # 需更改
    }

server
    {
        listen 443 ssl http2;
        server_name yudelei.com; # 需更改

        ssl_certificate /etc/nginx/ssl/证书.cer; # 需更改
        ssl_certificate_key /etc/nginx/ssl/私钥.key; # 需更改
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;
        ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
        ssl_session_cache builtin:1000 shared:SSL:10m;
        # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
        ssl_dhparam /etc/nginx/ssl/dhparam.pem;

        return 301 https://www.yudelei.com$request_uri;  # 需更改
    }

server
    {
        listen 443 ssl http2;
        #listen [::]:443 ssl http2;
        server_name www.yudelei.com; # 需更改
        index index.html index.htm index.php default.html default.htm default.php;
        root  /var/www/html;

        ssl_certificate /etc/nginx/ssl/证书.cer; # 需更改
        ssl_certificate_key /etc/nginx/ssl/私钥.key; # 需更改
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;
        ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
        ssl_session_cache builtin:1000 shared:SSL:10m;
        #openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
        ssl_dhparam /etc/nginx/ssl/dhparam.pem;

        # 如果后台未启用永久链接，请注释该模块
        if (!-e $request_filename) {
            rewrite ^(.*)$ /index.php$1 last;
        }
        
        location ~ [^/]\.php(/|$)
        {
            fastcgi_pass php-fpm:9000;
            fastcgi_index index.php;
            fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
            include  fastcgi.conf;
        }

        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        location ~ /.well-known {
            allow all;
        }

        location ~ /\.
        {
            deny all;
        }

        access_log  /var/log/nginx/access.log  main;
    }

fastcgi.conf

fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
fastcgi_param  QUERY_STRING       $query_string;
fastcgi_param  REQUEST_METHOD     $request_method;
fastcgi_param  CONTENT_TYPE       $content_type;
fastcgi_param  CONTENT_LENGTH     $content_length;

fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;
fastcgi_param  REQUEST_URI        $request_uri;
fastcgi_param  DOCUMENT_URI       $document_uri;
fastcgi_param  DOCUMENT_ROOT      $document_root;
fastcgi_param  SERVER_PROTOCOL    $server_protocol;
fastcgi_param  REQUEST_SCHEME     $scheme;
fastcgi_param  HTTPS              $https if_not_empty;

fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
fastcgi_param  SERVER_SOFTWARE    nginx/$nginx_version;

fastcgi_param  REMOTE_ADDR        $remote_addr;
fastcgi_param  REMOTE_PORT        $remote_port;
fastcgi_param  SERVER_ADDR        $server_addr;
fastcgi_param  SERVER_PORT        $server_port;
fastcgi_param  SERVER_NAME        $server_name;

# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param  REDIRECT_STATUS    200;
fastcgi_param PHP_ADMIN_VALUE "open_basedir=$document_root/:/tmp/:/proc/";

Dockerfile

FROM php:7.2.34-fpm
RUN docker-php-ext-install pdo_mysql

参考

CentOS7 安装 MariaDB 5.5

安装yum -y install mariadb mariadb-server 服务管理命令systemctl s...

Typecho Handsome 迁移使用 Docker docker-compose 部署并配置证书自动更新

环境

步骤

目录结构

操作

设置证书自动更新

相关文件

docker-compose.yml

网站域名.conf

fastcgi.conf

Dockerfile

参考

发表评论取消回复

MDT Windows 多硬盘部署系统网络安装系统方案自动格式化所有硬盘自动部署系统到 SSD 硬盘且优先安装到 M2

Wireless-AC 9560 设备无法启动代码 10 cannot start code 10

AD域允许普通用户打开需要管理员权限的软件

利用 mount --bind 硬挂载解决群晖 Moments 照片管理器管理其他文件夹的照片问题

Adobe Premiere Pro 2019 无法打开桌面生产 crash 文件报错 EXCEPTION_ACCESS_VIOLATION ZXPSignLib-minimal.dll

v2ray WebSocket+TLS+Web ERR: failed to read response header > websocket: close 1000

腾讯会议自动化：使用易语言操作腾讯会议自动加入会议并移交主持人

Excel 文件打开后空白，页面为灰色问题

运行 Bat 脚本时，获取脚本文件所在系统中的盘符

BAT 脚本获取台式电脑硬件信息脚本

Typecho Handsome 迁移使用 Docker docker-compose 部署并配置证书自动更新

环境

步骤

目录结构

操作

设置证书自动更新

相关文件

docker-compose.yml

网站域名.conf

fastcgi.conf

Dockerfile

参考

环境

步骤

目录结构

操作

设置证书自动更新

相关文件

docker-compose.yml

网站域名.conf

fastcgi.conf

Dockerfile

参考

发表评论 取消回复

Typecho Handsome 迁移 使用 Docker docker-compose 部署 并 配置证书自动更新

环境

步骤

目录结构

操作

设置证书自动更新

相关文件

docker-compose.yml

网站域名.conf

fastcgi.conf

Dockerfile

参考

发表评论取消回复

Typecho Handsome 迁移使用 Docker docker-compose 部署并配置证书自动更新