地址 ## 10.76.108.1 ### df -h | 文件系统 | 容量 | 已用 | 可用 | 已用% | 挂载点 | 备注 | | --- | --- | --- | --- | --- | --- | --- | | devtmpfs | 7.1G | 0 | 7.1G | 0% | /dev | | | tmpfs | 7.3G | 512K | 7.3G | 1% | /dev/shm | | | tmpfs | 7.3G | 821M | 6.5G | 12% | /run | | | tmpfs | 7.3G | 0 | 7.3G | 0% | /sys/fs/cgroup | | | /dev/mapper/klas_host--10--134--21--9-root | 245G | 54G | 191G | 23% | / | | | tmpfs | 7.3G | 576K | 7.3G | 1% | /tmp | | | /dev/vda2 | 1014M | 217M | 798M | 22% | /boot | | | /dev/vda1 | 200M | 5.8M | 195M | 3% | /boot/efi | | | tmpfs | 1.5G | 0 | 1.5G | 0% | /run/user/993 | | | /dev/loop0 | 7.6G | 7.6G | 0 | 100% | /mnt/cdrom | | | 10.76.108.19:/data/upload | 196G | 30G | 156G | 17% | /data/upload | | ### Nginx Nginx 是源码编译安装的，安装在 `/usr/local/nginx/`，可执行文件在 `/usr/local/nginx/sbin/nginx` **Nginx 信息确认：** | 项目 | 值 | | --- | --- | | 版本 | 1.26.3 | | 安装路径 | /usr/local/nginx/ | | 编译参数 | --with-stream（启用了四层代理/TCP 代理模块） | | 编译器 | GCC 7.3.0 | | 配置文件 | /usr/local/nginx/conf/nginx.conf | ### TDSQL * 备份数据库 * 备份1期库（排除市监表） ```bash mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events --ignore-table=zfjd.sszt_jbxx110497_new --ignore-table=zfjd.sszt_jbxx110497 zfjd > /efcode20/dbv1/zfjd_2026_07_08_ex_sszt_jbxx_utf8.sql ``` * 单独备份市监表 ```bash mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd sszt_jbxx110497 > /efcode20/dbv1/sszt_jbxx110497_20.sql mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd sszt_jbxx110497_new > /efcode20/dbv1/sszt_jbxx110497_new_20.sql ``` * 压缩备份文件 zip -e -P 'xj.sdeweqwew222qwe.12345' /efcode20/dbv1/zfjdfile1.zip /efcode20/dbv1/zfjd_2026_07_08_ex_sszt_jbxx_utf8.sql * 导入1期库（排除市监表） ``` mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv1/zfjd_2026_06_15_ex_sszt_jbxx_utf8.sql ``` * 导入1期库（市监表） ``` mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 -e "update enterprise_pub_qrcode set create_by=0 where create_time>'2026-04-26';" ``` * 升级到二期库 ``` mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/000.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/001.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/002.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/003.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/005-1.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/005-2.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/006.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/007.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/008.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/009.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/011-1.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/011-2.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/012.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/013.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/014.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/015.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/016.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/017.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/097.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/gh.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/0613.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/098.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/099.sql ``` * 备份2期库 * 备份1期库（排除市监表） ```bash mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events --ignore-table=zfjd_ef20_1.sszt_jbxx110497_new --ignore-table=zfjd_ef20_1.sszt_jbxx110497 zfjd_ef20_1 > /efcode20/dbv2/zfjd_ef20_1_2026_06_20_utf8.sql mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd_ef20_1 > /efcode20/dbv2/zfjd_ef20_1_2026_07_08_utf8.sql ``` * 单独备份市监表 ```bash mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd_ef20_1 sszt_jbxx110497_new > /efcode20/dbv2/zfjd_ef20_1_2026_06_20_utf8_sszt_jbxx110497_new.sql ``` * 压缩备份文件 zip -e -P 'xj.sdeweqwew222qwe.12345' /efcode20/dbv2/zfjd_ef20_07_08.zip /efcode20/dbv2/zfjd_ef20_1_2026_07_08_utf8.sql * sql客户端 * mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' ### DATAX --- ## 10.76.108.2 --- ## 10.76.108.3 配置文件在： /usr/local/nginx/conf/nginx.conf 日志在 /usr/local/nginx/logs/。 /usr/local/nginx/sbin/nginx -t && /usr/local/nginx/sbin/nginx -s reload firewall-cmd --add-port={12001,12002,12003,12004}/tcp --permanent firewall-cmd --reload firewall-cmd --list-all 新版(1.26.0) /usr/local/nginx_new/conf/nginx.conf /usr/local/nginx_new/sbin/nginx /usr/local/nginx_new/sbin/nginx -t && /usr/local/nginx_new/sbin/nginx -s reload --- ## 10.76.108.4 --- ## 10.76.108.5 --- ## 10.76.108.6 --- ## 10.76.108.7 企业端后台服务 * 初次部署 * df -h * mkdir -p /data/upload * 挂载文件存储目录 ```bash mount -t nfs 10.76.108.19:/data/upload /data/upload ``` 配置 fstab（重启不会丢挂载）： ```bash vim /etc/fstab ``` 在末尾加一行： ``` 10.76.108.19:/data/upload /data/upload nfs defaults 0 0 ``` 保存后验证： ```bash mount -a df -h | grep upload ``` * 安装 JDK 17 包已经传上来了，直接解压安装： ```bash cd /efcode20/sdk tar -zxvf bisheng-jdk-17.0.18-b13-linux-aarch64.tar.gz -C /usr/local/ ls /usr/local/ | grep jdk ``` 添加环境变量，编辑 `/etc/profile`： ```bash cat >> /etc/profile << 'EOF' export JAVA_HOME=/usr/local/bisheng-jdk-17.0.18 export PATH=$JAVA_HOME/bin:$PATH EOF ``` ``` source /etc/profile java -version ``` 输出 17 就 OK 了。 开放防火墙端口 * firewall-cmd --add-port=18002/tcp --permanent * firewall-cmd --reload * firewall-cmd --list-all 启动jar nohup java -jar /efcode20/zdxt-ent-ep.jar --spring.profiles.active=prod,prod-ent-ep > /efcode20/zdxt-ent-ep.log 2>&1 & * 日常维护 --- ## 10.76.108.8 执法端后台服务 --- ## 10.76.108.9 监督端后台服务 --- ## 10.76.108.10 定时/接口服务 --- ## 10.76.108.11 服务网关 安装jdk17 开放防火墙端口 --- ## 10.76.108.12 Redis * 初次安装 * 安装 Redis ```bash yum info redis yum install redis -y systemctl start redis systemctl enable redis ``` * 编辑配置 `/etc/redis.conf` ```bash vim /etc/redis.conf ``` 改三个地方： 1. 允许远程连接，找到 `bind 127.0.0.1`，改成： ``` bind 0.0.0.0 ``` 或者只放行指定 IP： ``` bind 10.76.108.1 10.76.108.7 10.76.108.12 ``` 2. 设置密码，找到 `# requirepass foobared`，去掉注释并改成： ``` requirepass 你的密码 ``` * 重启生效 ```bash systemctl restart redis ``` * 查看状态 ``` systemctl status redis ``` firewall-cmd --state 或查看完整规则： firewall-cmd --list-all 放行 Redis 端口： firewall-cmd --add-port=6379/tcp --permanent firewall-cmd --reload firewall-cmd --list-all --- ## 10.76.108.13 --- ## 10.76.108.14 企业/执法/移动监督前端 ``` # 1. 安装 Nginx 和 stream 模块 yum install nginx nginx-mod-stream -y # 2. 启动并设置开机自启 systemctl start nginx systemctl enable nginx nginx -t && systemctl reload nginx # 3. 确认 stream 模块已加载 nginx -V 2>&1 | grep stream # 4. 防火墙放行（如果 firewalld 开着） firewall-cmd --add-port=80/tcp --permanent firewall-cmd --add-port=443/tcp --permanent firewall-cmd --reload ``` 查看ng状态 systemctl status nginx 防火墙设置 firewall-cmd --state firewall-cmd --list-all firewall-cmd --add-port={80,85,445,81,12001,12002,12003,12004,12005}/tcp --permanent firewall-cmd --reload firewall-cmd --list-all ng配置文件路径 /etc/nginx/nginx.conf 日志在 /var/log/nginx/ --- ## 10.76.108.15 监督端前端 --- ## 10.76.108.16 文件存储备份服务器 * 初次部署 * 挂载文件存储目录 * 创建备份目录 ```bash mkdir -p /data/backup ``` * 备份脚本 ```bash cat > /data/backup/backup_upload.sh << 'EOF' #!/bin/bash DATE=$(date +%Y%m%d_%H%M%S) LOG=/data/backup/backup_${DATE}.log echo "备份开始: $DATE" >> $LOG rsync -av /data/upload/ /data/backup/upload/ >> $LOG 2>&1 echo "备份结束: $(date +%Y%m%d_%H%M%S)" >> $LOG EOF chmod +x /data/backup/backup_upload.sh ``` * 定时备份 ```bash crontab -e 0 2 * * * /data/backup/backup_upload.sh ``` --- ## 10.76.108.17 --- ## 10.76.108.18 --- ## 10.76.108.19 文件存储主服务器 1. 配置允许访问的 IP（仅允许业务服务器查询） cat >> /etc/hosts.allow << 'EOF' mountd: 10.76.108.1, 10.76.108.7, 10.76.108.8, 10.76.108.9, 10.76.108.10, 10.76.108.16 EOF # 2. 拒绝所有其他主机 cat >> /etc/hosts.deny << 'EOF' mountd: ALL EOF ### NFS 挂载设置 ``` /data/upload 10.76.108.1(rw,sync,no_root_squash) 10.76.108.7(rw,sync,no_root_squash) 10.76.108.8(rw,sync,no_root_squash) 10.76.108.9(rw,sync,no_root_squash) 10.76.108.10(rw,sync,no_root_squash) 10.76.108.16(rw,sync,no_root_squash) ```