Linux一些常用命令

/etc/nginx/nginx.conf
/etc/nginx/sites-available/default

nginx -t

nginx -s reload

# 全局 HTTPS 重定向配置
server {
server_name default_server;
location /.well-known/acme-challenge/ {
root /var/www/html;
}

    location / {
        return 301 https://$host$request_uri;
    }

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/teman.xxx.xx/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/teman.xxx.xx/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

# 80端口 -> 301 重定向到 HTTPS
server {
listen 80;
server_name default_server;

    location /.well-known/acme-challenge/ {
        root /var/www/html;  # Certbot 用于 HTTP 续期
    }

    location / {
        return 301 https://$host$request_uri;
    }
}

# 配置官网
server {
listen 443 ssl default_server;
server_name home.xxx.xx;

    # 禁止网站被嵌入
    add_header X-Frame-Options "DENY" always;
    add_header Content-Security-Policy "frame-ancestors 'none';" always;

    ssl_certificate /etc/letsencrypt/live/teman.xxx.xx/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/teman.xxx.xx/privkey.pem; # managed by Certbot

    root /data/apps/web/dist;
    index index.html;

    # 添加错误页面配置
    error_page 404 /404.html;

    location / {
        try_files $uri $uri/ $uri.html =404;
    }

}

# 配置xx客户端前端服务
server {
listen 443 ssl;
server_name www.xxx.xx xxx.xx;
ssl_certificate /etc/letsencrypt/live/teman.xxx.xx/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/teman.xxx.xx/privkey.pem; # managed by Certbot

    root /data/apps/webmail/dist;
    index index.html;

    # 自定义错误页面配置
    error_page 404 /index.html;

    location / {
        try_files $uri $uri/ =404;
    }
    # 处理自定义 404 页面
    location = /404.html {
        root /data/apps/webmail;
        internal;
    }


}

# 配置后台 管理端
server {
listen 443 ssl;
server_name teman.xxx.xx;

    ssl_certificate     /etc/letsencrypt/live/teman.xxx.xx/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/teman.xxx.xx/privkey.pem;

    root /data/apps/webadmin/dist;
    index index.html;

    # 自定义错误页面配置
    error_page 404 /index.html;

    location / {
        try_files $uri $uri/ =404;
    }
    # 处理自定义 404 页面
    location = /404.html {
        root /data/apps/webadmin;
        internal;
    }
}

# 配置客户端后端服务
server {
listen 443 ssl;
server_name backend.xxx.xx;
client_max_body_size 30M;

    add_header X-Frame-Options "DENY" always;
    add_header Content-Security-Policy "frame-ancestors 'none';" always;

    ssl_certificate /etc/letsencrypt/live/teman.xxx.xx/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/teman.xxx.xx/privkey.pem; # managed by Certbot

    # 禁止访问 /aiServer/ 路径（必须放在靠前位置）
    location ^~ /aiServer/ {
        return 403;
    }

    #专门处理 WebSocket 通知的 location 块
    location /api/v1/ws/ {
        # 代理到您的 Spring Boot 应用地址
        proxy_pass http://127.0.0.1:6001;

        # --- 以下是代理 WebSocket 的核心配置 ---
        
        # 1. 允许协议升级
        proxy_http_version 1.1;
        
        # 2. 传递 "Upgrade" 请求头 (关键)
        #    $http_upgrade 是一个 Nginx 内置变量，它会获取客户端请求中的 Upgrade 头
        proxy_set_header Upgrade $http_upgrade;
        
        # 3. 传递 "Connection" 请求头 (关键)
        #    明确告知后端服务器要升级连接类型
        proxy_set_header Connection "upgrade";

        # --- 其他标准的代理头信息，确保后端能获取真实信息 ---
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        # --- 针对长连接的超时设置 ---
        # 避免因默认的60秒超时导致 WebSocket 连接被意外断开
        proxy_read_timeout 3600s; # 1小时
        proxy_send_timeout 3600s; # 1小时
        send_timeout 3600s;
    }

    # 默认的 location 配置，不影响其他请求
    location / {
        proxy_pass http://127.0.0.1:6001;  # 代理到本地服务
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    # 针对 SSE 请求的特殊配置
    location /service/logs/realtime {  
        proxy_pass http://127.0.0.1:6001;  # 代理到本地服务
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        # SSE 关键优化
        proxy_buffering off;  # 禁用缓冲，确保数据流不中断
        proxy_cache off;      # 确保 Nginx 不缓存 SSE 响应
        proxy_set_header Connection '';  # 避免 Nginx 添加 `Connection: close`，保持连接
        chunked_transfer_encoding off;   # 禁用 chunked 传输，SSE 不需要它

        # 只针对 SSE 请求设置的超时
        proxy_read_timeout 3600s;  # 设置为较长时间（例如 3600 秒 = 1 小时）
        proxy_send_timeout 3600s;  # 设置为较长时间
        send_timeout 3600s;        # 设置 Nginx 向客户端发送响应的超时时间
    }

    location /thirdParty/chat/conversationWithType {
        proxy_pass http://127.0.0.1:6001;  # 代理到本地服务
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        # SSE 关键优化
        proxy_buffering off;  # 禁用缓冲，确保数据流不中断
        proxy_cache off;      # 确保 Nginx 不缓存 SSE 响应
        proxy_set_header Connection '';  # 避免 Nginx 添加 `Connection: close`，保持连接
        chunked_transfer_encoding off;   # 禁用 chunked 传输，SSE 不需要它

        # 只针对 SSE 请求设置的超时
        proxy_read_timeout 3600s;  # 设置为较长时间（例如 3600 秒 = 1 小时）
        proxy_send_timeout 3600s;  # 设置为较长时间
        send_timeout 3600s;        # 设置 Nginx 向客户端发送响应的超时时间
    }
}

# 配置前端运营后台
server {
listen 443 ssl;
server_name ope.xxx.xx;
ssl_certificate /etc/letsencrypt/live/teman.xxx.xx/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/teman.xxx.xx/privkey.pem; # managed by Certbot

    root /data/apps/opeAdmin/dist;
    index index.html;

    # 自定义错误页面配置
    error_page 404 /index.html;

    location / {
        try_files $uri $uri/ =404;
    }
    # 处理自定义 404 页面
    location = /404.html {
        root /data/apps/opeAdmin;
        internal;
    }

}

# 运维后台
server {
listen 443 ssl;
server_name ops.xxx.xx;
client_max_body_size 30M;

    ssl_certificate /etc/letsencrypt/live/teman.xxx.xx/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/teman.xxx.xx/privkey.pem; # managed by Certbot

    # 默认的 location 配置，不影响其他请求
    location / {
        proxy_pass http://127.0.0.1:2122;  # 代理到本地服务
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

}

sudo apt update
sudo apt install certbot python3-certbot-nginx

sudo certbot --nginx -d xx.com -d mail.xx.com -d www.xx.com

sudo certbot --nginx -d home.kretest.com -d www.kretest.com -d backend.kretest.com -d kretest.com -d mail.xx.com -d teman.kretest.com

free -h

tail -f xxx.log
tail -100f xxx.log

grep -C 3 "开始BC匹配" info.log

df -h

du -h --max-depth=1 / | sort -hr | head -n 10

du -h --max-depth=1 /data | sort -hr | head -n 10

chmod +x xxx.sh

chmod a+rwx file.txt

chmod u+x file.sh

chmod 755 script.sh

top

htop

sudo apt install cmatrix
cmatrix

brew install cmatrix
cmatrix

cmatrix -b -u 10

curl wttr.in