VMware搭建docker mastodon
2024-06-12 15:54:58
环境 VMware
CentOS 7.6
[root@warship ~]# docker version
Client:
Version: 18.09.0
API version: 1.39
Go version: go1.10.4
Git commit: 4d60db4
Built: Wed Nov 7 00:48:22 2018
OS/Arch: linux/amd64
Experimental: false
Server: Docker Engine - Community
Engine:
Version: 18.09.0
API version: 1.39 (minimum version 1.12)
Go version: go1.10.4
Git commit: 4d60db4
Built: Wed Nov 7 00:19:08 2018
OS/Arch: linux/amd64
Experimental: false
按照github官方文档
[root@warship live]# git clone https://github.com/tootsuite/mastodon.git live
[root@warship live]# cd ~/live
[root@warship live]# git checkout $(git tag -l | grep -v 'rc[0-9]*$' | sort -V | tail -n 1)
[root@warship live]# vim docker-compose.yml
注释所有build .
[root@warship live]# cat docker-compose.yml
version: '3'
services:db:restart: alwaysimage: postgres:9.6-alpinenetworks:- internal_networkhealthcheck:test: ["CMD", "pg_isready", "-U", "postgres"]volumes:- ./postgres:/var/lib/postgresql/dataredis:restart: alwaysimage: redis:5.0-alpinenetworks:- internal_networkhealthcheck:test: ["CMD", "redis-cli", "ping"]volumes:- ./redis:/data# es:
# restart: always
# image: docker.elastic.co/elasticsearch/elasticsearch-oss:6.1.3
# environment:
# - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
# networks:
# - internal_network
# healthcheck:
# test: ["CMD-SHELL", "curl --silent --fail localhost:9200/_cluster/health || exit 1"]
# volumes:
# - ./elasticsearch:/usr/share/elasticsearch/dataweb:#build: .image: tootsuite/mastodonrestart: alwaysenv_file: .env.productioncommand: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"networks:- external_network- internal_networkhealthcheck:test: ["CMD-SHELL", "wget -q --spider --header 'x-forwarded-proto: https' --proxy=off localhost:3000/api/v1/instance || exit 1"]ports:- "127.0.0.1:3000:3000"depends_on:- db- redis
# - esvolumes:- ./public/system:/mastodon/public/systemstreaming:#build: .image: tootsuite/mastodonrestart: alwaysenv_file: .env.productioncommand: node ./streamingnetworks:- external_network- internal_networkhealthcheck:test: ["CMD-SHELL", "wget -q --spider --header 'x-forwarded-proto: https' --proxy=off localhost:4000/api/v1/streaming/health || exit 1"]ports:- "127.0.0.1:4000:4000"depends_on:- db- redissidekiq:#build: .image: tootsuite/mastodonrestart: alwaysenv_file: .env.productioncommand: bundle exec sidekiqdepends_on:- db- redisnetworks:- external_network- internal_networkvolumes:- ./public/system:/mastodon/public/system
## Uncomment to enable federation with tor instances along with adding the following ENV variables
## http_proxy=http://privoxy:8118
## ALLOW_ACCESS_TO_HIDDEN_SERVICE=true
# tor:
# image: sirboops/tor
# networks:
# - external_network
# - internal_network
#
# privoxy:
# image: sirboops/privoxy
# volumes:
# - ./priv-config:/opt/config
# networks:
# - external_network
# - internal_networknetworks:external_network:internal_network:internal: true
[root@warship live]# cp .env.production.sample .env.production
[root@warship live]# chown -R 991:991 public[root@warship live]# docker-compose run --rm web bundle exec rake mastodon:setup
Starting live_redis_1 ... done
Starting live_db_1 ... doneYour instance is identified by its domain name. Changing it afterward will break things.
Domain name: mymedia.comSingle user mode disables registrations and redirects the landing page to your public profile.
Do you want to enable single user mode? NoAre you using Docker to run Mastodon? YesPostgreSQL host: db
PostgreSQL port: 5432
Name of PostgreSQL database: postgres
Name of PostgreSQL user: 1
Password of PostgreSQL user: Aborting. Bye!
[root@warship live]# docker-compose run --rm web bundle exec rake mastodon:setup
Starting live_redis_1 ... done
Starting live_db_1 ... done
Your instance is identified by its domain name. Changing it afterward will break things.
Domain name: mymedia.comSingle user mode disables registrations and redirects the landing page to your public profile.
Do you want to enable single user mode? NoAre you using Docker to run Mastodon? YesPostgreSQL host: db
PostgreSQL port: 5432
Name of PostgreSQL database: postgres
Name of PostgreSQL user: postgres
Password of PostgreSQL user:
Database configuration works! ?Redis host: redis
Redis port: 6379
Redis password:
Redis configuration works! ?Do you want to store uploaded files on the cloud? NoDo you want to send e-mails from localhost? No
SMTP server: smtp.qq.com
SMTP port: 587
SMTP username:你的qq号@qq.com
SMTP password:由网页邮箱配置页面生成的
SMTP authentication: plain
SMTP OpenSSL verify mode: none 必须选这个
E-mail address to send e-mails "from": 你的qq号@qq.com（必须写这个 默认的不能用）
Send a test e-mail with this configuration right now? Yes
Send test e-mail to: 测试邮件的接收邮箱This configuration will be written to .env.production
Save configuration? Yes
Below is your configuration, save it to an .env.production file outside Docker:
把下面内容写入.env.production 之前以为是自动写的，后来发现需要手动写入文件.env.production
# Generated with mastodon:setup on 2019-09-02 05:36:12 UTCLOCAL_DOMAIN=mymedia.com
SINGLE_USER_MODE=false
SECRET_KEY_BASE=6a74668b033ec0357052ba5046805e80733dbe565b7d570774490ac978b6b8bd87aaa57471608bdeba955ac499b28c1edb4b291da45630f59086a0062667680d
OTP_SECRET=28431a3559ed5ea84b153c9abc7c12fe524b1cd9e37cf72f62934764eae73e6d1175796f6175fbdf456f6f1d08d02f3b12e0c10b40e89a525b2e62e6f1ef868e
VAPID_PRIVATE_KEY=aY9GGtmNGBrdqbXXz7OrMZP8CqIIx86D71YHC5DQ_tU=
VAPID_PUBLIC_KEY=BBJ6l-N7YAaUVN3ulcnABb-SRWzpuJfEBDb6AdU6gI1TuSUNuAeLAYyTULbnL0ilg0RwlcQPmGZf-nSZjsm0DjQ=
DB_HOST=db
DB_PORT=5432
DB_NAME=postgres
DB_USER=postgres
DB_PASS=
REDIS_HOST=redis
REDIS_PORT=6379
REDIS_PASSWORD=
SMTP_SERVER=smtp.qq.com
SMTP_PORT=587
SMTP_LOGIN=你的qq号@qq.com
SMTP_PASSWORD=由网页邮箱配置页面生成的
SMTP_AUTH_METHOD=plain
SMTP_OPENSSL_VERIFY_MODE=none
SMTP_FROM_ADDRESS=你的qq号@qq.com
Now that configuration is saved, the database schema must be loaded.
If the database already exists, this will erase its contents.
#令开一个终端写完.env.production后继续点击下一步
Prepare the database now? Yes
Running `RAILS_ENV=production rails db:setup` ...Database 'postgres' already exists
-- enable_extension("plpgsql")-> 0.0185s
-- create_table("account_conversations", {:force=>:cascade})-> 0.0960s
-- create_table("account_domain_blocks", {:force=>:cascade})-> 0.0086s
-- create_table("account_identity_proofs", {:force=>:cascade})-> 0.0158s
-- create_table("account_moderation_notes", {:force=>:cascade})-> 0.0170s
-- create_table("account_pins", {:force=>:cascade})-> 0.0183s
-- create_table("account_stats", {:force=>:cascade})-> 0.0139s
-- create_table("account_tag_stats", {:force=>:cascade})-> 0.0101s
-- create_table("account_warning_presets", {:force=>:cascade})-> 0.0058s
-- create_table("account_warnings", {:force=>:cascade})-> 0.0173s
-- create_table("accounts", {:force=>:cascade})-> 0.0560s
-- create_table("accounts_tags", {:id=>false, :force=>:cascade})-> 0.0096s
-- create_table("admin_action_logs", {:force=>:cascade})-> 0.0141s
-- create_table("backups", {:force=>:cascade})-> 0.0073s
-- create_table("blocks", {:force=>:cascade})-> 0.0146s
-- create_table("conversation_mutes", {:force=>:cascade})-> 0.0093s
-- create_table("conversations", {:force=>:cascade})-> 0.0111s
-- create_table("custom_emojis", {:force=>:cascade})-> 0.0105s
-- create_table("custom_filters", {:force=>:cascade})-> 0.0120s
-- create_table("domain_blocks", {:force=>:cascade})-> 0.0139s
-- create_table("email_domain_blocks", {:force=>:cascade})-> 0.0101s
-- create_table("favourites", {:force=>:cascade})-> 0.0190s
-- create_table("featured_tags", {:force=>:cascade})-> 0.0125s
-- create_table("follow_requests", {:force=>:cascade})-> 0.0111s
-- create_table("follows", {:force=>:cascade})-> 0.0195s
-- create_table("identities", {:force=>:cascade})-> 0.0128s
-- create_table("imports", {:force=>:cascade})-> 0.0069s
-- create_table("invites", {:force=>:cascade})-> 0.0157s
-- create_table("list_accounts", {:force=>:cascade})-> 0.0184s
-- create_table("lists", {:force=>:cascade})-> 0.0102s
-- create_table("media_attachments", {:force=>:cascade})-> 0.0274s
-- create_table("mentions", {:force=>:cascade})-> 0.0170s
-- create_table("mutes", {:force=>:cascade})-> 0.0184s
-- create_table("notifications", {:force=>:cascade})-> 0.0285s
-- create_table("oauth_access_grants", {:force=>:cascade})-> 0.0131s
-- create_table("oauth_access_tokens", {:force=>:cascade})-> 0.0171s
-- create_table("oauth_applications", {:force=>:cascade})-> 0.0152s
-- create_table("pghero_space_stats", {:force=>:cascade})-> 0.0102s
-- create_table("poll_votes", {:force=>:cascade})-> 0.0170s
-- create_table("polls", {:force=>:cascade})-> 0.0171s
-- create_table("preview_cards", {:force=>:cascade})-> 0.0204s
-- create_table("preview_cards_statuses", {:id=>false, :force=>:cascade})-> 0.0107s
-- create_table("relays", {:force=>:cascade})-> 0.0087s
-- create_table("report_notes", {:force=>:cascade})-> 0.0145s
-- create_table("reports", {:force=>:cascade})-> 0.0150s
-- create_table("scheduled_statuses", {:force=>:cascade})-> 0.0138s
-- create_table("session_activations", {:force=>:cascade})-> 0.0194s
-- create_table("settings", {:force=>:cascade})-> 0.0101s
-- create_table("site_uploads", {:force=>:cascade})-> 0.0133s
-- create_table("status_pins", {:force=>:cascade})-> 0.0378s
-- create_table("status_stats", {:force=>:cascade})-> 0.0209s
-- create_table("statuses", {:id=>:bigint, :default=>#<Proc:0x00007fc1b79f5ad0@/opt/mastodon/db/schema.rb:609 (lambda)>, :force=>:cascade})-> 0.0279s
-- create_table("statuses_tags", {:id=>false, :force=>:cascade})-> 0.0099s
-- create_table("stream_entries", {:force=>:cascade})-> 0.0141s
-- create_table("subscriptions", {:force=>:cascade})-> 0.0112s
-- create_table("tags", {:force=>:cascade})-> 0.0143s
-- create_table("tombstones", {:force=>:cascade})-> 0.0143s
-- create_table("user_invite_requests", {:force=>:cascade})-> 0.0095s
-- create_table("users", {:force=>:cascade})-> 0.0354s
-- create_table("web_push_subscriptions", {:force=>:cascade})-> 0.0144s
-- create_table("web_settings", {:force=>:cascade})-> 0.0095s
-- add_foreign_key("account_conversations", "accounts", {:on_delete=>:cascade})-> 0.0102s
-- add_foreign_key("account_conversations", "conversations", {:on_delete=>:cascade})-> 0.0029s
-- add_foreign_key("account_domain_blocks", "accounts", {:name=>"fk_206c6029bd", :on_delete=>:cascade})-> 0.0030s
-- add_foreign_key("account_identity_proofs", "accounts", {:on_delete=>:cascade})-> 0.0043s
-- add_foreign_key("account_moderation_notes", "accounts")-> 0.0023s
-- add_foreign_key("account_moderation_notes", "accounts", {:column=>"target_account_id"})-> 0.0030s
-- add_foreign_key("account_pins", "accounts", {:column=>"target_account_id", :on_delete=>:cascade})-> 0.0033s
-- add_foreign_key("account_pins", "accounts", {:on_delete=>:cascade})-> 0.0037s
-- add_foreign_key("account_stats", "accounts", {:on_delete=>:cascade})-> 0.0033s
-- add_foreign_key("account_tag_stats", "tags", {:on_delete=>:cascade})-> 0.0038s
-- add_foreign_key("account_warnings", "accounts", {:column=>"target_account_id", :on_delete=>:cascade})-> 0.0050s
-- add_foreign_key("account_warnings", "accounts", {:on_delete=>:nullify})-> 0.0027s
-- add_foreign_key("accounts", "accounts", {:column=>"moved_to_account_id", :on_delete=>:nullify})-> 0.0035s
-- add_foreign_key("admin_action_logs", "accounts", {:on_delete=>:cascade})-> 0.0029s
-- add_foreign_key("backups", "users", {:on_delete=>:nullify})-> 0.0042s
-- add_foreign_key("blocks", "accounts", {:column=>"target_account_id", :name=>"fk_9571bfabc1", :on_delete=>:cascade})-> 0.0035s
-- add_foreign_key("blocks", "accounts", {:name=>"fk_4269e03e65", :on_delete=>:cascade})-> 0.0028s
-- add_foreign_key("conversation_mutes", "accounts", {:name=>"fk_225b4212bb", :on_delete=>:cascade})-> 0.0031s
-- add_foreign_key("conversation_mutes", "conversations", {:on_delete=>:cascade})-> 0.0041s
-- add_foreign_key("custom_filters", "accounts", {:on_delete=>:cascade})-> 0.0045s
-- add_foreign_key("favourites", "accounts", {:name=>"fk_5eb6c2b873", :on_delete=>:cascade})-> 0.0040s
-- add_foreign_key("favourites", "statuses", {:name=>"fk_b0e856845e", :on_delete=>:cascade})-> 0.0041s
-- add_foreign_key("featured_tags", "accounts", {:on_delete=>:cascade})-> 0.0028s
-- add_foreign_key("featured_tags", "tags", {:on_delete=>:cascade})-> 0.0040s
-- add_foreign_key("follow_requests", "accounts", {:column=>"target_account_id", :name=>"fk_9291ec025d", :on_delete=>:cascade})-> 0.0023s
-- add_foreign_key("follow_requests", "accounts", {:name=>"fk_76d644b0e7", :on_delete=>:cascade})-> 0.0028s
-- add_foreign_key("follows", "accounts", {:column=>"target_account_id", :name=>"fk_745ca29eac", :on_delete=>:cascade})-> 0.0046s
-- add_foreign_key("follows", "accounts", {:name=>"fk_32ed1b5560", :on_delete=>:cascade})-> 0.0032s
-- add_foreign_key("identities", "users", {:name=>"fk_bea040f377", :on_delete=>:cascade})-> 0.0038s
-- add_foreign_key("imports", "accounts", {:name=>"fk_6db1b6e408", :on_delete=>:cascade})-> 0.0034s
-- add_foreign_key("invites", "users", {:on_delete=>:cascade})-> 0.0023s
-- add_foreign_key("list_accounts", "accounts", {:on_delete=>:cascade})-> 0.0029s
-- add_foreign_key("list_accounts", "follows", {:on_delete=>:cascade})-> 0.0029s
-- add_foreign_key("list_accounts", "lists", {:on_delete=>:cascade})-> 0.0033s
-- add_foreign_key("lists", "accounts", {:on_delete=>:cascade})-> 0.0032s
-- add_foreign_key("media_attachments", "accounts", {:name=>"fk_96dd81e81b", :on_delete=>:nullify})-> 0.0026s
-- add_foreign_key("media_attachments", "scheduled_statuses", {:on_delete=>:nullify})-> 0.0032s
-- add_foreign_key("media_attachments", "statuses", {:on_delete=>:nullify})-> 0.0037s
-- add_foreign_key("mentions", "accounts", {:name=>"fk_970d43f9d1", :on_delete=>:cascade})-> 0.0024s
-- add_foreign_key("mentions", "statuses", {:on_delete=>:cascade})-> 0.0033s
-- add_foreign_key("mutes", "accounts", {:column=>"target_account_id", :name=>"fk_eecff219ea", :on_delete=>:cascade})-> 0.0032s
-- add_foreign_key("mutes", "accounts", {:name=>"fk_b8d8daf315", :on_delete=>:cascade})-> 0.0032s
-- add_foreign_key("notifications", "accounts", {:column=>"from_account_id", :name=>"fk_fbd6b0bf9e", :on_delete=>:cascade})-> 0.0032s
-- add_foreign_key("notifications", "accounts", {:name=>"fk_c141c8ee55", :on_delete=>:cascade})-> 0.0039s
-- add_foreign_key("oauth_access_grants", "oauth_applications", {:column=>"application_id", :name=>"fk_34d54b0a33", :on_delete=>:cascade})-> 0.0038s
-- add_foreign_key("oauth_access_grants", "users", {:column=>"resource_owner_id", :name=>"fk_63b044929b", :on_delete=>:cascade})-> 0.0021s
-- add_foreign_key("oauth_access_tokens", "oauth_applications", {:column=>"application_id", :name=>"fk_f5fc4c1ee3", :on_delete=>:cascade})-> 0.0032s
-- add_foreign_key("oauth_access_tokens", "users", {:column=>"resource_owner_id", :name=>"fk_e84df68546", :on_delete=>:cascade})-> 0.0035s
-- add_foreign_key("oauth_applications", "users", {:column=>"owner_id", :name=>"fk_b0988c7c0a", :on_delete=>:cascade})-> 0.0020s
-- add_foreign_key("poll_votes", "accounts", {:on_delete=>:cascade})-> 0.0043s
-- add_foreign_key("poll_votes", "polls", {:on_delete=>:cascade})-> 0.0028s
-- add_foreign_key("polls", "accounts", {:on_delete=>:cascade})-> 0.0032s
-- add_foreign_key("polls", "statuses", {:on_delete=>:cascade})-> 0.0027s
-- add_foreign_key("report_notes", "accounts", {:on_delete=>:cascade})-> 0.0029s
-- add_foreign_key("report_notes", "reports", {:on_delete=>:cascade})-> 0.0048s
-- add_foreign_key("reports", "accounts", {:column=>"action_taken_by_account_id", :name=>"fk_bca45b75fd", :on_delete=>:nullify})-> 0.0035s
-- add_foreign_key("reports", "accounts", {:column=>"assigned_account_id", :on_delete=>:nullify})-> 0.0030s
-- add_foreign_key("reports", "accounts", {:column=>"target_account_id", :name=>"fk_eb37af34f0", :on_delete=>:cascade})-> 0.0034s
-- add_foreign_key("reports", "accounts", {:name=>"fk_4b81f7522c", :on_delete=>:cascade})-> 0.0042s
-- add_foreign_key("scheduled_statuses", "accounts", {:on_delete=>:cascade})-> 0.0040s
-- add_foreign_key("session_activations", "oauth_access_tokens", {:column=>"access_token_id", :name=>"fk_957e5bda89", :on_delete=>:cascade})-> 0.0030s
-- add_foreign_key("session_activations", "users", {:name=>"fk_e5fda67334", :on_delete=>:cascade})-> 0.0033s
-- add_foreign_key("status_pins", "accounts", {:name=>"fk_d4cb435b62", :on_delete=>:cascade})-> 0.0036s
-- add_foreign_key("status_pins", "statuses", {:on_delete=>:cascade})-> 0.0031s
-- add_foreign_key("status_stats", "statuses", {:on_delete=>:cascade})-> 0.0032s
-- add_foreign_key("statuses", "accounts", {:column=>"in_reply_to_account_id", :name=>"fk_c7fa917661", :on_delete=>:nullify})-> 0.0023s
-- add_foreign_key("statuses", "accounts", {:name=>"fk_9bda1543f7", :on_delete=>:cascade})-> 0.0029s
-- add_foreign_key("statuses", "statuses", {:column=>"in_reply_to_id", :on_delete=>:nullify})-> 0.0032s
-- add_foreign_key("statuses", "statuses", {:column=>"reblog_of_id", :on_delete=>:cascade})-> 0.0035s
-- add_foreign_key("statuses_tags", "statuses", {:on_delete=>:cascade})-> 0.0030s
-- add_foreign_key("statuses_tags", "tags", {:name=>"fk_3081861e21", :on_delete=>:cascade})-> 0.0025s
-- add_foreign_key("stream_entries", "accounts", {:name=>"fk_5659b17554", :on_delete=>:cascade})-> 0.0037s
-- add_foreign_key("subscriptions", "accounts", {:name=>"fk_9847d1cbb5", :on_delete=>:cascade})-> 0.0039s
-- add_foreign_key("tombstones", "accounts", {:on_delete=>:cascade})-> 0.0046s
-- add_foreign_key("user_invite_requests", "users", {:on_delete=>:cascade})-> 0.0026s
-- add_foreign_key("users", "accounts", {:name=>"fk_50500f500d", :on_delete=>:cascade})-> 0.0033s
-- add_foreign_key("users", "invites", {:on_delete=>:nullify})-> 0.0042s
-- add_foreign_key("users", "oauth_applications", {:column=>"created_by_application_id", :on_delete=>:nullify})-> 0.0025s
-- add_foreign_key("web_push_subscriptions", "oauth_access_tokens", {:column=>"access_token_id", :on_delete=>:cascade})-> 0.0037s
-- add_foreign_key("web_push_subscriptions", "users", {:on_delete=>:cascade})-> 0.0038s
-- add_foreign_key("web_settings", "users", {:name=>"fk_11910667b2", :on_delete=>:cascade})-> 0.0042s
Done!The final step is compiling CSS/JS assets.
This may take a while and consume a lot of RAM.
Compile the assets now? Yes
Running `RAILS_ENV=production rails assets:precompile` ...yarn install v1.17.3
[1/6] Validating package.json...
[2/6] Resolving packages...
success Already up-to-date.
Done in 1.56s.
Done!All done! You can now power on the Mastodon server ?Do you want to create an admin user straight away? Yes
Username: admin
E-mail: 你的qq邮箱账号，用来登陆
You can login with the password: 4e2cdb20b425e8dd1eea48b6886cb586
You can change your password once you login.qq邮箱配置第三方smtp密码
点击生成授权码
上述邮箱和密码“4e2cdb20b425e8dd1eea48b6886cb586”是用来登陆的。
[root@warship live]# docker-compose up -d启动容器
[root@warship live]# docker-compose psName Command State Ports
-------------------------------------------------------------------------------------------
live_db_1 docker-entrypoint.sh postgres Up (healthy)
live_redis_1 docker-entrypoint.sh redis ... Up (healthy)
live_sidekiq_1 /tini -- bundle exec sidekiq Up
live_streaming_1 /tini -- node ./streaming Up (healthy) 127.0.0.1:4000->4000/tcp
live_web_1 /tini -- bash -c rm -f /ma ... Up (healthy) 127.0.0.1:3000->3000/tcp
直接访问报错
[root@warship nginx]# curl 127.0.0.1:4000
{"error":"Error: Missing access token"}
需要配置nginx yum -y install nginx 或者源码，源码安装需要注意
./configure --prefix=/usr/local/nginx --with-http_ssl_module --with-http_realip_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_secure_link_module --with-http_v2_module --with-http_stub_status_module --with-http_sub_module 然后配置https
其它教程上都说用let’s encrypt生成https证书，但虚拟机没有外网ip，无法申请，所以手动自签名
[root@warship ~]# cd /tmp/ssl/
[root@warship ssl]# openssl genrsa -des3 -out ca.key 2048
密码123456
[root@warship ssl]# openssl req -new -x509 -days 7305 -key ca.key -out ca.crt
[root@warship ssl]# openssl genrsa -des3 -out client.key 1024
[root@warship ssl]# openssl req -new -key client.key -out client.csr
[root@warship ssl]# openssl x509 -req -in client.csr -out client.pem -signkey client.key -CA ca.crt -CAkey ca.key -CAcreateserial -days 3650
[root@warship ssl]# ls
ca.crt ca.key ca.srl client.csr client.key client.pem[root@warship ~]# cat /usr/local/nginx/conf/nginx.conf#user nobody;
worker_processes 1;#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;#pid logs/nginx.pid;worker_rlimit_nofile 1024;events {use epoll;worker_connections 1024;
}http {include mime.types;default_type application/octet-stream;#log_format main '$remote_addr - $remote_user [$time_local] "$request" '# '$status $body_bytes_sent "$http_referer" '# '"$http_user_agent" "$http_x_forwarded_for"';#access_log logs/access.log main;sendfile on;tcp_nopush on;tcp_nodelay on;reset_timedout_connection on;#keepalive_timeout 0;keepalive_timeout 65;client_header_timeout 15;client_body_timeout 15;send_timeout 25;gzip on;gzip_min_length 1k; gzip_buffers 4 32k; gzip_http_version 1.1;gzip_comp_level 9;gzip_types text/plain application/x-javascript text/css application/xml;gzip_vary on;include /usr/local/nginx/conf.d/*.conf;server_tokens off;server {listen 80;server_name localhost;#charset koi8-r;#access_log logs/host.access.log main;location / {root html;index index.html index.htm;}#error_page 404 /404.html;# redirect server error pages to the static page /50x.html#error_page 500 502 503 504 /50x.html;location = /50x.html {root html;}# proxy the PHP scripts to Apache listening on 127.0.0.1:80##location ~ \.php$ {# proxy_pass http://127.0.0.1;#}# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000##location ~ \.php$ {# root html;# fastcgi_pass 127.0.0.1:9000;# fastcgi_index index.php;# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;# include fastcgi_params;#}# deny access to .htaccess files, if Apache's document root# concurs with nginx's one##location ~ /\.ht {# deny all;#}}# another virtual host using mix of IP-, name-, and port-based configuration##server {# listen 8000;# listen somename:8080;# server_name somename alias another.alias;# location / {# root html;# index index.html index.htm;# }#}# HTTPS server#
# server {
# listen 443 ssl;
# server_name localhost;
# ssl_certificate /tmp/ssl/client.pem;
# ssl_certificate_key /tmp/ssl/client.key;
# ssl_session_cache shared:SSL:1m;
# ssl_session_timeout 5m;# ssl_ciphers HIGH:!aNULL:!MD5;# ssl_prefer_server_ciphers on;
## location / {# root html;# index index.html index.htm;# }
# }}
[root@warship ~]# cat /usr/local/nginx/conf.d/mymedia.conf
map $http_upgrade $connection_upgrade {default upgrade;'' close;
}server {listen 80;listen [::]:80;server_name mymedia.com;root /root/live/public;# Useful for Let's Encryptlocation /.well-known/acme-challenge/ { allow all; }location / { return 301 https://$host$request_uri; }
}server {listen 443 ssl http2;listen [::]:443 ssl http2;server_name mymedia.com;ssl_protocols TLSv1.2;ssl_ciphers HIGH:!MEDIUM:!LOW:!aNULL:!NULL:!SHA;ssl_prefer_server_ciphers on;ssl_session_cache shared:SSL:10m;ssl_certificate /tmp/ssl/client.pem;ssl_certificate_key /tmp/ssl/client.key;keepalive_timeout 70;sendfile on;client_max_body_size 80m;root /root/live/public;gzip on;gzip_disable "msie6";gzip_vary on;gzip_proxied any;gzip_comp_level 6;gzip_buffers 16 8k;gzip_http_version 1.1;gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;add_header Strict-Transport-Security "max-age=31536000";location / {try_files $uri @proxy;}location ~ ^/(emoji|packs|system/accounts/avatars|system/media_attachments/files) {add_header Cache-Control "public, max-age=31536000, immutable";try_files $uri @proxy;}location /sw.js {add_header Cache-Control "public, max-age=0";try_files $uri @proxy;}location @proxy {proxy_set_header Host $host;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;proxy_set_header X-Forwarded-Proto https;proxy_set_header Proxy "";proxy_pass_header Server;proxy_pass http://127.0.0.1:3000;proxy_buffering off;proxy_redirect off;proxy_http_version 1.1;proxy_set_header Upgrade $http_upgrade;proxy_set_header Connection $connection_upgrade;tcp_nodelay on;}location /api/v1/streaming {proxy_set_header Host $host;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;proxy_set_header X-Forwarded-Proto https;proxy_set_header Proxy "";proxy_pass http://127.0.0.1:4000;proxy_buffering off;proxy_redirect off;proxy_http_version 1.1;proxy_set_header Upgrade $http_upgrade;proxy_set_header Connection $connection_upgrade;tcp_nodelay on;}error_page 500 501 502 503 504 /500.html;
}启动nginx，
[root@warship ~]# /usr/local/nginx/sbin/nginx
Enter PEM pass phrase:输入密码123456
访问https://ip
用户名是qq邮箱，密码是“4e2cdb20b425e8dd1eea48b6886cb586”
部分配置文件
[root@warship ~]# nginx -V
nginx version: nginx/1.17.3
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-36) (GCC)
built with OpenSSL 1.0.2k-fips 26 Jan 2017
TLS SNI support enabled
configure arguments: --prefix=/usr/local/nginx --with-http_ssl_module --with-http_realip_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_secure_link_module --with-http_v2_module --with-http_stub_status_module --with-http_sub_module
[root@warship ~]# cat live/.env.production
LOCAL_DOMAIN=mymedia.com
SINGLE_USER_MODE=false
SECRET_KEY_BASE=6a74668b033ec0357052ba5046805e80733dbe565b7d570774490ac978b6b8bd87aaa57471608bdeba955ac499b28c1edb4b291da45630f59086a0062667680d
OTP_SECRET=28431a3559ed5ea84b153c9abc7c12fe524b1cd9e37cf72f62934764eae73e6d1175796f6175fbdf456f6f1d08d02f3b12e0c10b40e89a525b2e62e6f1ef868e
VAPID_PRIVATE_KEY=aY9GGtmNGBrdqbXXz7OrMZP8CqIIx86D71YHC5DQ_tU=
VAPID_PUBLIC_KEY=BBJ6l-N7YAaUVN3ulcnABb-SRWzpuJfEBDb6AdU6gI1TuSUNuAeLAYyTULbnL0ilg0RwlcQPmGZf-nSZjsm0DjQ=
DB_HOST=db
DB_PORT=5432
DB_NAME=postgres
DB_USER=postgres
DB_PASS=
REDIS_HOST=redis
REDIS_PORT=6379
REDIS_PASSWORD=
SMTP_SERVER=smtp.qq.com
SMTP_PORT=587
SMTP_LOGIN=@qq.com
SMTP_PASSWORD=
SMTP_AUTH_METHOD=plain
SMTP_OPENSSL_VERIFY_MODE=none
SMTP_FROM_ADDRESS=@qq.com参考
https://github.com/tootsuite/documentation/blob/master/Running-Mastodon/Docker-Guide.md
https://www.cnblogs.com/chjbbs/p/5748369.html
https://segmentfault.com/a/1190000011675421
https://www.hi-linux.com/posts/53878.html
https://www.cnblogs.com/xiewenming/p/8023090.html
https://blog.csdn.net/u010391029/article/details/50395680
https://www.cnblogs.com/kevingrace/p/8269955.html
https://blog.csdn.net/lamp_yang_3533/article/details/80383039
https://blog.csdn.net/u011221004/article/details/86724641
https://www.cnblogs.com/taiyonghai/p/5610112.html
https://blog.csdn.net/zhanlanmg/article/details/49684803
https://blog.csdn.net/Veritas_C/article/details/83897001
VMware搭建docker mastodon相关推荐
- 搭建vmware虚拟机,搭建docker环境
搭建vmware虚拟机 操作系统:windows10企业版 ↓ vmware版本:16.0.0 ↓ centos镜像版本:CentOS-7-x86_64-DVD-2009.iso ↓ 使用vmware ...
- docker harbor 域名_超详细的搭建docker私服Harbor教程
概述 "集装箱"是Docker设计哲学之所在,它让一台物理机(或者虚拟机)同时运行多个相互隔离的应用变得更为轻松简朴,固然这一切照样多亏Linux的相关底层手艺,固然,也包罗OS ...
- 【云计算平台】VMware搭建Centos 7虚拟机
Centos 7 环境搭建及配置 正文开始@Assassin 目录: Centos 7 环境搭建及配置 1. VMware虚拟机安装: 2. Centos 7.9 镜像安装: 3. Centos 7. ...
- [云原生专题-16]：容器 - 在Windows主机上搭建Docker环境
作者主页(文火冰糖的硅基工坊):文火冰糖(王文兵)的博客_文火冰糖的硅基工坊_CSDN博客 本文网址:https://blog.csdn.net/HiWangWenBing/article/detai ...
- 利用 VMWare 搭建随机拓扑网络
这篇文章是计算机网络上机实验课的作业. 实验任务:利用 VMWare 搭建一个由 5 个主机组成的随机拓扑的网络.要求该网络中至少有 2 个子网,两个路由器 .实验的网络拓扑图如下: 网络中有两个路由 ...
- kalivm 虚拟机访问win文件夹_利用vmware搭建属于自己的win虚拟环境
利用vmware搭建属于自己的win虚拟环境 前言 vmware是业界非常稳定且安全的桌面虚拟机软件,VMware虚拟机可让你在一台机器上同时运行二个或更多Windows.DOS.LINUX系统.在虚 ...
- 本地搭建docker私服
#######################本地搭建docker私服registry####################### #执行命令 docker run -d -p 5000:5000 ...
- vmware搭建ubuntu虚拟机(包含安装搜狗输入法和apt,dpkg的使用教程)
我曾经搭建过Ubuntu的虚拟机,但是好久不用了,有些生疏,故写此笔记来记录全过程. 一.下载iso镜像文件 从Ubuntu官网下载镜像文件,一般开发用Desktop版,服务器用Server版. 文件 ...
- Dynamips结合VMware搭建站点到站点×××环境
Dynamips是现如今最好的思科模拟器,它能够加载的思科IOS,模拟出真实的路由器,这使得我们在没有思科设备的情况下也能很好的学习,Dynamips的强大之处不仅于此,它还能与我们的VMware虚拟 ...
- ECS上搭建Docker（CentOS7）
ECS上搭建Docker(CentOS7) centos下 yum快速安装maven MAVEN_HOME=/usr/share/apache-maven export MAVEN_HOME expo ...
最新文章
- Java项目:控制台商城系统(java+打印控制台)
- Django静态文件配置
- 主成分分析法_“主成分分析法”——线上讨论会等你加入
- 下载的VS2017工程编译出错的问题
- 通过通用数据访问扩展AWS生态系统
- linux脚本调用job,linux shell - 脚本中调用fg调取后台任务报错
- 过滤Filtering
- 常见报错_mysql常见报错之SELECT list is not in GROUP BY clause
- java延迟加载 dbutils_Mybatis__延迟加载
- 水位传感器的python代码_关于水的作文
- 正确安装vray5 for 3dsMax步骤
- 顶岗实习周记java方向_java程序员的实习周记
- exfat默认配置大小_我的空间哪里去了？注意exfat格式设置的陷阱
- 《勿忘初心，勿忘前行》——2016年度总结
- 大国崛起（三） 大不列颠及北爱尔兰联合王国（英国）
- 【Java启程】语句结构
- 盘点2011年的网络流行语
- 如何合并svn分支到主干上
- linux可视化编程,Kylix带你走进Linux可视化编程世界
- 材料进步使新一代功率电感器_凯利讯半导体