You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
11 KiB
11 KiB
地址
10.76.108.1
df -h
| 文件系统 | 容量 | 已用 | 可用 | 已用% | 挂载点 | 备注 |
|---|---|---|---|---|---|---|
| devtmpfs | 7.1G | 0 | 7.1G | 0% | /dev | |
| tmpfs | 7.3G | 512K | 7.3G | 1% | /dev/shm | |
| tmpfs | 7.3G | 821M | 6.5G | 12% | /run | |
| tmpfs | 7.3G | 0 | 7.3G | 0% | /sys/fs/cgroup | |
| /dev/mapper/klas_host--10--134--21--9-root | 245G | 54G | 191G | 23% | / | |
| tmpfs | 7.3G | 576K | 7.3G | 1% | /tmp | |
| /dev/vda2 | 1014M | 217M | 798M | 22% | /boot | |
| /dev/vda1 | 200M | 5.8M | 195M | 3% | /boot/efi | |
| tmpfs | 1.5G | 0 | 1.5G | 0% | /run/user/993 | |
| /dev/loop0 | 7.6G | 7.6G | 0 | 100% | /mnt/cdrom | |
| 10.76.108.19:/data/upload | 196G | 30G | 156G | 17% | /data/upload |
Nginx
Nginx 是源码编译安装的，安装在 /usr/local/nginx/，可执行文件在 /usr/local/nginx/sbin/nginx
Nginx 信息确认：
| 项目 | 值 |
|---|---|
| 版本 | 1.26.3 |
| 安装路径 | /usr/local/nginx/ |
| 编译参数 | --with-stream（启用了四层代理/TCP 代理模块） |
| 编译器 | GCC 7.3.0 |
| 配置文件 | /usr/local/nginx/conf/nginx.conf |
TDSQL
- 备份数据库
- 备份1期库（排除市监表）
mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events --ignore-table=zfjd.sszt_jbxx110497_new --ignore-table=zfjd.sszt_jbxx110497 zfjd > /efcode20/dbv1/zfjd_2026_06_20_ex_sszt_jbxx_utf8.sql - 单独备份市监表
mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd sszt_jbxx110497 > /efcode20/dbv1/sszt_jbxx110497_20.sql mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd sszt_jbxx110497_new > /efcode20/dbv1/sszt_jbxx110497_new_20.sql - 压缩备份文件 zip -e -P 'xj.sdeqwe.12345' /efcode20/dbv1/zfjdfile1.zip /efcode20/dbv1/zfjd_2026_06_15_ex_sszt_jbxx_utf8.sql
- 导入1期库（排除市监表）
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv1/zfjd_2026_06_15_ex_sszt_jbxx_utf8.sql - 导入1期库（市监表）
- 升级到二期库
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/000.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/001.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/002.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/003.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/005-1.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/005-2.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/006.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/007.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/008.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/009.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/011-1.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/011-2.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/012.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/013.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/014.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/015.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/016.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/017.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/097.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/gh.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/0613.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/098.sql mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/099.sql- 备份2期库
- 备份1期库（排除市监表）
mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events --ignore-table=zfjd_ef20_1.sszt_jbxx110497_new --ignore-table=zfjd_ef20_1.sszt_jbxx110497 zfjd_ef20_1 > /efcode20/dbv2/zfjd_ef20_1_2026_06_20_utf8.sql mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd_ef20_1 > /efcode20/dbv2/zfjd_ef20_1_2026_06_20_utf8.sql - 单独备份市监表
mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd_ef20_1 sszt_jbxx110497_new > /efcode20/dbv2/zfjd_ef20_1_2026_06_20_utf8_sszt_jbxx110497_new.sql - 压缩备份文件 zip -e -P 'xj.sdeweqwew222qwe.12345' /efcode20/dbv2/zfjd_ef20_1.zip /efcode20/dbv2/zfjd_ef20_1_2026_06_20_utf8.sql
- 备份1期库（排除市监表）
- sql客户端
- mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd'
DATAX
10.76.108.2
10.76.108.3
配置文件在：
/usr/local/nginx/conf/nginx.conf 日志在 /usr/local/nginx/logs/。
/usr/local/nginx/sbin/nginx -t && /usr/local/nginx/sbin/nginx -s reload
firewall-cmd --add-port={12001,12002,12003,12004}/tcp --permanent firewall-cmd --reload firewall-cmd --list-all
10.76.108.4
10.76.108.5
10.76.108.6
10.76.108.7 企业端后台服务
-
初次部署
- df -h
- mkdir -p /data/upload
- 挂载文件存储目录
mount -t nfs 10.76.108.19:/data/upload /data/upload配置 fstab（重启不会丢挂载）：
vim /etc/fstab在末尾加一行：
10.76.108.19:/data/upload /data/upload nfs defaults 0 0保存后验证：
mount -a df -h | grep upload - 安装 JDK 17
包已经传上来了，直接解压安装：
cd /efcode20/sdk tar -zxvf bisheng-jdk-17.0.18-b13-linux-aarch64.tar.gz -C /usr/local/ ls /usr/local/ | grep jdk添加环境变量，编辑
/etc/profile：cat >> /etc/profile << 'EOF' export JAVA_HOME=/usr/local/bisheng-jdk-17.0.18 export PATH=$JAVA_HOME/bin:$PATH EOFsource /etc/profile java -version输出 17 就 OK 了。 开放防火墙端口
- firewall-cmd --add-port=18002/tcp --permanent
- firewall-cmd --reload
- firewall-cmd --list-all 启动jar nohup java -jar /efcode20/zdxt-ent-ep.jar --spring.profiles.active=prod,prod-ent-ep > /efcode20/zdxt-ent-ep.log 2>&1 &
-
日常维护
10.76.108.8 执法端后台服务
10.76.108.9 监督端后台服务
10.76.108.10 定时/接口服务
10.76.108.11 服务网关
安装jdk17 开放防火墙端口
10.76.108.12 Redis
- 初次安装
- 安装 Redis
yum info redis yum install redis -y systemctl start redis systemctl enable redis - 编辑配置
/etc/redis.confvim /etc/redis.conf改三个地方：
- 允许远程连接，找到
bind 127.0.0.1，改成：bind 0.0.0.0或者只放行指定 IP：
bind 10.76.108.1 10.76.108.7 10.76.108.12 - 设置密码，找到
# requirepass foobared，去掉注释并改成：requirepass 你的密码
- 允许远程连接，找到
- 重启生效
systemctl restart redis - 查看状态
systemctl status redis
firewall-cmd --state 或查看完整规则： firewall-cmd --list-all 放行 Redis 端口： firewall-cmd --add-port=6379/tcp --permanent firewall-cmd --reload firewall-cmd --list-all
- 安装 Redis
10.76.108.13
10.76.108.14 企业/执法/移动监督前端
# 1. 安装 Nginx 和 stream 模块
yum install nginx nginx-mod-stream -y
# 2. 启动并设置开机自启
systemctl start nginx
systemctl enable nginx
nginx -t && systemctl reload nginx
# 3. 确认 stream 模块已加载
nginx -V 2>&1 | grep stream
# 4. 防火墙放行（如果 firewalld 开着）
firewall-cmd --add-port=80/tcp --permanent
firewall-cmd --add-port=443/tcp --permanent
firewall-cmd --reload
查看ng状态 systemctl status nginx 防火墙设置 firewall-cmd --state firewall-cmd --list-all firewall-cmd --add-port={80,85,445,81,12001,12002,12003,12004,12005}/tcp --permanent firewall-cmd --reload firewall-cmd --list-all
ng配置文件路径 /etc/nginx/nginx.conf 日志在 /var/log/nginx/
10.76.108.15 监督端前端
10.76.108.16 文件存储备份服务器
- 初次部署
- 挂载文件存储目录
- 创建备份目录
mkdir -p /data/backup - 备份脚本
cat > /data/backup/backup_upload.sh << 'EOF' #!/bin/bash DATE=$(date +%Y%m%d_%H%M%S) LOG=/data/backup/backup_${DATE}.log echo "备份开始: $DATE" >> $LOG rsync -av /data/upload/ /data/backup/upload/ >> $LOG 2>&1 echo "备份结束: $(date +%Y%m%d_%H%M%S)" >> $LOG EOF chmod +x /data/backup/backup_upload.sh - 定时备份
crontab -e 0 2 * * * /data/backup/backup_upload.sh
10.76.108.17
10.76.108.18
10.76.108.19 文件存储主服务器
- 配置允许访问的 IP（仅允许业务服务器查询） cat >> /etc/hosts.allow << 'EOF' mountd: 10.76.108.1, 10.76.108.7, 10.76.108.8, 10.76.108.9, 10.76.108.10, 10.76.108.16 EOF
2. 拒绝所有其他主机
cat >> /etc/hosts.deny << 'EOF' mountd: ALL EOF
NFS 挂载设置
/data/upload 10.76.108.1(rw,sync,no_root_squash) 10.76.108.7(rw,sync,no_root_squash) 10.76.108.8(rw,sync,no_root_squash) 10.76.108.9(rw,sync,no_root_squash) 10.76.108.10(rw,sync,no_root_squash) 10.76.108.16(rw,sync,no_root_squash)