EnforcementCode-2.0/doc/部署说明/部署过程描述.md

地址


## 10.76.108.1

### df -h

| 文件系统 | 容量 | 已用 | 可用 | 已用% | 挂载点 | 备注 |
| --- | --- | --- | --- | --- | --- | --- |
| devtmpfs | 7.1G | 0 | 7.1G | 0% | /dev | |
| tmpfs | 7.3G | 512K | 7.3G | 1% | /dev/shm | |
| tmpfs | 7.3G | 821M | 6.5G | 12% | /run | |
| tmpfs | 7.3G | 0 | 7.3G | 0% | /sys/fs/cgroup | |
| /dev/mapper/klas_host--10--134--21--9-root | 245G | 54G | 191G | 23% | / | |
| tmpfs | 7.3G | 576K | 7.3G | 1% | /tmp | |
| /dev/vda2 | 1014M | 217M | 798M | 22% | /boot | |
| /dev/vda1 | 200M | 5.8M | 195M | 3% | /boot/efi | |
| tmpfs | 1.5G | 0 | 1.5G | 0% | /run/user/993 | |
| /dev/loop0 | 7.6G | 7.6G | 0 | 100% | /mnt/cdrom | |
| 10.76.108.19:/data/upload | 196G | 30G | 156G | 17% | /data/upload | |

### Nginx

Nginx 是源码编译安装的，安装在 `/usr/local/nginx/`，可执行文件在 `/usr/local/nginx/sbin/nginx`

**Nginx 信息确认：**

| 项目 | 值 |
| --- | --- |
| 版本 | 1.26.3 |
| 安装路径 | /usr/local/nginx/ |
| 编译参数 | --with-stream（启用了四层代理/TCP 代理模块） |
| 编译器 | GCC 7.3.0 |
| 配置文件 | /usr/local/nginx/conf/nginx.conf |

### TDSQL

* 备份数据库
  * 备份1期库（排除市监表）
    ```bash
    mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events --ignore-table=zfjd.sszt_jbxx110497_new --ignore-table=zfjd.sszt_jbxx110497 zfjd > /efcode20/dbv1/zfjd_2026_06_15_ex_sszt_jbxx_utf8.sql
    ```
  * 单独备份市监表
    ```bash
    mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd sszt_jbxx110497 > /efcode20/dbv1/sszt_jbxx110497.sql
    mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd sszt_jbxx110497_new > /efcode20/dbv1/sszt_jbxx110497_new.sql
    ```
  * 压缩备份文件
    zip -e -P 'xj.sdeqwe.12345' /efcode20/dbv1/zfjdfile1.zip /efcode20/dbv1/zfjd_2026_06_15_ex_sszt_jbxx_utf8.sql
  * 导入1期库（排除市监表）
    ```
    mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv1/zfjd_2026_06_15_ex_sszt_jbxx_utf8.sql
    ```
  * 导入1期库（市监表）
  * 升级到二期库
  ```
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/000.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/001.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/002.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/003.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/005-1.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/005-2.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/006.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/007.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/008.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/009.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/011-1.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/011-2.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/012.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/013.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/014.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/015.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/016.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/017.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/018.sql
  mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/099.sql
  ```
  * 备份2期库
      * 备份1期库（排除市监表）
    ```bash
    mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events --ignore-table=zfjd_ef20_1.sszt_jbxx110497_new --ignore-table=zfjd_ef20_1.sszt_jbxx110497 zfjd_ef20_1 > /efcode20/dbv2/zfjd_ef20_1_2026_06_16_utf8.sql
    ```
  * 单独备份市监表
    ```bash
    mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd_ef20_1 sszt_jbxx110497_new > /efcode20/dbv2/zfjd_ef20_1_2026_06_16_utf8_sszt_jbxx110497_new.sql
    ```
  * 压缩备份文件
    zip -e -P 'xj.sdeqwe.12345' /efcode20/dbv2/zfjd_ef20_1.zip /efcode20/dbv2/zfjd_ef20_1_2026_06_16_utf8.sql
* sql客户端
  * mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd'
### DATAX

---

## 10.76.108.2

---

## 10.76.108.3

配置文件在：

/usr/local/nginx/conf/nginx.conf
日志在 /usr/local/nginx/logs/。

/usr/local/nginx/sbin/nginx -t && /usr/local/nginx/sbin/nginx -s reload

firewall-cmd --add-port={12001,12002,12003,12004}/tcp --permanent
firewall-cmd --reload
firewall-cmd --list-all
---

## 10.76.108.4

---

## 10.76.108.5

---

## 10.76.108.6

---

## 10.76.108.7 企业端后台服务

* 初次部署
  * df -h 
  * mkdir -p /data/upload
  * 挂载文件存储目录
    ```bash
    mount -t nfs 10.76.108.19:/data/upload /data/upload
    ```
    配置 fstab（重启不会丢挂载）：
    ```bash
    vim /etc/fstab
    ```
    在末尾加一行：
    ```
    10.76.108.19:/data/upload /data/upload nfs defaults 0 0
    ```
    保存后验证：
    ```bash
    mount -a
    df -h | grep upload
    ```
  * 安装 JDK 17
    包已经传上来了，直接解压安装：
    ```bash
    cd /efcode20/sdk
    tar -zxvf bisheng-jdk-17.0.18-b13-linux-aarch64.tar.gz -C /usr/local/
    ls /usr/local/ | grep jdk
    ```
    添加环境变量，编辑 `/etc/profile`：
    ```bash
    cat >> /etc/profile << 'EOF'

    export JAVA_HOME=/usr/local/bisheng-jdk-17.0.18
    export PATH=$JAVA_HOME/bin:$PATH
    EOF
    ```
    ```
    source /etc/profile
    java -version
    ```
    输出 17 就 OK 了。
   开放防火墙端口
  * firewall-cmd --add-port=18002/tcp --permanent
  * firewall-cmd --reload
  * firewall-cmd --list-all
  启动jar
    nohup java -jar /efcode20/zdxt-ent-ep.jar --spring.profiles.active=prod,prod-ent-ep > /efcode20/zdxt-ent-ep.log 2>&1 &

* 日常维护

---

## 10.76.108.8 执法端后台服务

---

## 10.76.108.9 监督端后台服务

---

## 10.76.108.10 定时/接口服务

---

## 10.76.108.11 服务网关
安装jdk17
开放防火墙端口

---

## 10.76.108.12 Redis

* 初次安装
  * 安装 Redis
    ```bash
    yum info redis
    yum install redis -y
    systemctl start redis
    systemctl enable redis
    ```
  * 编辑配置 `/etc/redis.conf`
    ```bash
    vim /etc/redis.conf
    ```
    改三个地方：
    1. 允许远程连接，找到 `bind 127.0.0.1`，改成：
       ```
       bind 0.0.0.0
       ```
       或者只放行指定 IP：
       ```
       bind 10.76.108.1 10.76.108.7 10.76.108.12
       ```
    2. 设置密码，找到 `# requirepass foobared`，去掉注释并改成：
       ```
       requirepass 你的密码
       ```
  * 重启生效
    ```bash
    systemctl restart redis
    ```
  * 查看状态
     ```
    systemctl status redis
    ``` 
  firewall-cmd --state
  或查看完整规则：
  firewall-cmd --list-all
  放行 Redis 端口：
  firewall-cmd --add-port=6379/tcp --permanent
  firewall-cmd --reload
  firewall-cmd --list-all
---

## 10.76.108.13

---

## 10.76.108.14 企业/执法/移动监督前端
```
# 1. 安装 Nginx 和 stream 模块
yum install nginx nginx-mod-stream -y

# 2. 启动并设置开机自启
systemctl start nginx
systemctl enable nginx
nginx -t && systemctl reload nginx
# 3. 确认 stream 模块已加载
nginx -V 2>&1 | grep stream

# 4. 防火墙放行（如果 firewalld 开着）
firewall-cmd --add-port=80/tcp --permanent
firewall-cmd --add-port=443/tcp --permanent
firewall-cmd --reload
```
查看ng状态
systemctl status nginx
防火墙设置
firewall-cmd --state
firewall-cmd --list-all
firewall-cmd --add-port={80,85,445,81,12001,12002,12003,12004,12005}/tcp --permanent
firewall-cmd --reload
firewall-cmd --list-all

ng配置文件路径
/etc/nginx/nginx.conf
日志在 /var/log/nginx/
---

## 10.76.108.15 监督端前端

---

## 10.76.108.16 文件存储备份服务器

* 初次部署
  * 挂载文件存储目录
  * 创建备份目录
    ```bash
    mkdir -p /data/backup
    ```
  * 备份脚本
    ```bash
    cat > /data/backup/backup_upload.sh << 'EOF'
    #!/bin/bash
    DATE=$(date +%Y%m%d_%H%M%S)
    LOG=/data/backup/backup_${DATE}.log

    echo "备份开始: $DATE" >> $LOG
    rsync -av /data/upload/ /data/backup/upload/ >> $LOG 2>&1
    echo "备份结束: $(date +%Y%m%d_%H%M%S)" >> $LOG
    EOF

    chmod +x /data/backup/backup_upload.sh
    ```
  * 定时备份
    ```bash
    crontab -e
    0 2 * * * /data/backup/backup_upload.sh
    ```

---

## 10.76.108.17

---

## 10.76.108.18

---

## 10.76.108.19 文件存储主服务器

### NFS 挂载设置

```
/data/upload 10.76.108.1(rw,sync,no_root_squash) 10.76.108.7(rw,sync,no_root_squash) 10.76.108.8(rw,sync,no_root_squash) 10.76.108.9(rw,sync,no_root_squash) 10.76.108.10(rw,sync,no_root_squash) 10.76.108.16(rw,sync,no_root_squash)
```