Self-host服务部署流程

开源的Self-host服务、独自编写的服务部署流程

开放端口

阿里云或腾讯云

云服务器 - 网络与安全 - 安全组，入方向和出方向都开放8000端口

域名解析

主域名是博客，这里我配置spi二级域名作为服务的入口

启动服务

服务使用前面配置的8000端口

内网穿透

如果type=http，怎remote_port无需配置，默认服务器frps中配置的端口。
如果type=tcp，需要制定remote_port，这里我按前面开发的8000端口。

# ./frpc.exe -c ./frpc.nas.*.top.ini

[common]
server_addr = 47.1.1.93
server_port = 5443
; protocol = tcp
; protocol = kcp

token = *

[web]
type = http
local_ip = 127.0.0.1
local_port = 80
use_encryption = true
use_compression = true
custom_domains = nas.*.top

[appwrite]
type = tcp
local_ip = 127.0.0.1
local_port = 8480
remote_port = 8480
use_encryption = true
use_compression = true

[supabase]
type = tcp
local_ip = 127.0.0.1
local_port = 8000
remote_port = 8000
use_encryption = true
use_compression = true

启动服务后，我们可以看到已经能正常访问了

下面我们将配置到二级域名

HTTPS证书

这里我使用的是certbot，详情见：申请SSL证书 - 日有所思，日有所得

1 2	`nginx -s stop // 先关闭nginx certbot certonly -d spi.x.top // 生成证书`

查看证书有效期及自动续订

1 2	`certbot certificates certbot renew – dry-run`

Nginx代理

找找nginx装在哪里

1	`whereis nginx`

![](img/Pasted%20image%2020240904184746.png)

新增二级域名配置文件

1 2	`cd /etc/nginx/sites-available cp default spi.x.top`

编辑复制的文件

# HTTP server
server {
    listen 80;
    server_name spi.x.top;

    # Redirect all HTTP requests to HTTPS
    location / {
        return 301 https://$host$request_uri;
    }
}

# HTTPS server
server {
    listen 443 ssl;
    server_name spi.x.top;

    ssl_certificate /etc/letsencrypt/live/spi.x.top/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/spi.x.top/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

	location / {
        proxy_pass http://47.1.1.93:8000;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $host;
        # wss
        proxy_http_version 1.1;
        proxy_redirect off;
        proxy_set_header Upgrade $http_upgrade; 
        proxy_set_header Connection "upgrade";

        # 加大缓存，防止页面挂掉
        client_max_body_size 4000M;
        client_body_buffer_size 128k;
        proxy_connect_timeout 3600;
        proxy_read_timeout 3600;
        proxy_send_timeout 3600;
	}
}