搭建ZSK服务

# 安装菁苗知识库操作步骤

## 安装mysql5.7
### 安装并配置Mysql密码
[Mysql运维](/project-2/doc-12/)

### 导入数据库
使用数据库连接工具，创建数据库，并执行SQL文件创建表及数据
![创建数据库](/media/202312/2023-12-07_184341_0846430.7182462673489399.png)

![导入SQL文件](/media/202312/2023-12-07_184442_7166600.8920225285190503.png)

或直接登录客户端导入sql文件
```
CREATE DATABASE `xthz` CHARACTER SET 'utf8mb4' COLLATE 'utf8mb4_general_ci';

source /path/xthz.sql;
```

![建好的数据库](/media/202312/2023-12-07_184559_1638300.741153568347066.png)

## 安装Nginx1.24.0
### 安装Nginx
```
rpm -Uvh http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm

yum install -y nginx

systemctl enable nginx
systemctl start nginx
```
### 复制Nginx配置文件
```

user root;
worker_processes auto;

error_log /var/log/nginx/error.log notice;
pid /var/run/nginx.pid;

events {
    worker_connections 1024;
}

http {
    include /etc/nginx/mime.types;
    default_type application/octet-stream;

log_format main '$remote_addr - $remote_user [$time_local] "$request" '
    '$status $body_bytes_sent "$http_referer" '
    '"$http_user_agent" "$http_x_forwarded_for"';

access_log /var/log/nginx/access.log main;

sendfile on;
    #tcp_nopush     on;

keepalive_timeout 65;

#gzip  on;

include /etc/nginx/conf.d/*.conf;

server {
        listen 80;
        server_name localhost;

#charset koi8-r;

access_log  /var/log/nginx/host.access.log  main;
        location / {
            root /zskweb/web/project/public;
            index index.html index.htm index.php;
            if (!-e $request_filename) {
                rewrite ^(.*)$ /index.php?s=$1 last;
            }
        }

#error_page  404              /404.html;

# redirect server error pages to the static page /50x.html
        #
        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
            root html;
        }

# proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        location ~ \.php$ {
            root /zskweb/web/project/public;
            fastcgi_pass 127.0.0.1:9000;
            fastcgi_index index.php;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            include fastcgi_params;
        }

# deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
    }
    server {
        listen 8191;
        server_name localhost;

#charset koi8-r;
        #
        #        #access_log  logs/host.access.log  main;
        #
        location / {
            root /zskweb/web/xthzAdmin/public;
            index index.html index.htm index.php;
            if (!-e $request_filename) {
                rewrite ^(.*)$ /index.php?s=$1 last;
            }
        }
        #error_page  404              /404.html;
        #
        #        # redirect server error pages to the static page /50x.html

error_page 500 502 503 504 /50x.html;
        location = /50x.html {
            root html;
        }
        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #         #
        #                 #location ~ \.php$ {
        #                         #    proxy_pass   http://127.0.0.1;
        #                                 #}
        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #         #
        location ~ \.php$ {
            root /zskweb/web/xthzAdmin/public;
            fastcgi_pass 127.0.0.1:9000;
            fastcgi_index index.php;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            include fastcgi_params;
        }

# deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #  deny  all;
        #}
    }

}

```

### 关闭SElinux
```
#永久关闭-重启生效
sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

#临时关闭
setenforce 0
```

## 安装php、php-frp
### 安装
```
wget https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

rpm -ivh epel-release-latest-7.noarch.rpm

wget https://mirror.webtatic.com/yum/el7/webtatic-release.rpm --no-check-certificate

rpm -ivh webtatic-release.rpm

# 需要将webtatic的所有repo文件里的https修改为http

# 有点慢 
yum install -y php72w php72w-cli  php72w-common  php72w-devel php72w-mysql php72w-fpm

php -v

systemctl enable php-fpm
systemctl start php-fpm
systemctl status php-fpm

```

## 安装neo4j数据库
### 安装jdk
```
yum install -y java-1.8.0-openjdk

java -version
```
### 上传neo4j数据库的包
（直接使用已导入数据的数据库打包文件）

### 修改配置
#### zy
```
## Bolt connector
#dbms.connector.bolt.enabled=true
##dbms.connector.bolt.tls_level=OPTIONAL
dbms.connector.bolt.listen_address=0.0.0.0:7687
#
## HTTP Connector. There can be zero or one HTTP connectors.
#dbms.connector.http.enabled=true
dbms.connector.http.listen_address=0.0.0.0:7474
#
## HTTPS Connector. There can be zero or one HTTPS connectors.
#dbms.connector.https.enabled=true
dbms.connector.https.listen_address=0.0.0.0:7473
```
#### xy
```
## Bolt connector
#dbms.connector.bolt.enabled=true
##dbms.connector.bolt.tls_level=OPTIONAL
dbms.connector.bolt.listen_address=0.0.0.0:7688
#
## HTTP Connector. There can be zero or one HTTP connectors.
#dbms.connector.http.enabled=true
dbms.connector.http.listen_address=0.0.0.0:7476
#
## HTTPS Connector. There can be zero or one HTTPS connectors.
#dbms.connector.https.enabled=true
dbms.connector.https.listen_address=0.0.0.0:7475
```

### 启动neo4j
```
$path/neo4j-community-3.5.26/bin/neo4j start
```

## 上传php代码、配置nginx
### 上传文件

### 修改js接口地址
文件列表：`app.1642123537343.js`、`app.1642123537343.js.map`、`app.1642232425236.js`、`app.1642232425236.js.map`
将其中的接口地址IP修改为当前服务器访问ip。

### 修改数据库配置地址
文件：`project/.env`、`xthzAdmin/.env`文件，修改Mysql服务器ip、账号、密码。

### 修改Neo4j配置
文件：`project/app/controller/CommonController.php`、`project/app/controller/CommonTwoController.php`2个文件，修改其中的neo4j的ip、账号信息。

## 附件
1. [【附件】yum-resource.zip](/media/attachment/2023/12/yum-resource.zip)

```
# 启动 并 设置 neo4j 挂载
docker run -it -d -p 7474:7474 -p 7687:7687 \
  -v /data/zsk/zy/data:/data \
  -v /data/zsk/zy/logs:/logs \
  -v /data/zsk/zy/conf:/var/lib/neo4j/conf \
  -v /data/zsk/zy/import:/var/lib/neo4j/import \
  -v /data/zsk/zy/plugins:/var/lib/neo4j/plugins \
  -e NEO4J_AUTH=neo4j/Temp@citai2021 \
  --name neo4j-zy neo4j:3.5.26

docker run -it -d -p 7476:7476 -p 7688:7688 \
  -v /data/zsk/xy/data:/data \
  -v /data/zsk/xy/logs:/logs \
  -v /data/zsk/xy/conf:/var/lib/neo4j/conf \
  -v /data/zsk/xy/import:/var/lib/neo4j/import \
  -v /data/zsk/xy/plugins:/var/lib/neo4j/plugins \
  -e NEO4J_AUTH=neo4j/Temp@citai2021 \
  --name neo4j-xy neo4j:3.5.26

```

# 使用Docker运行菁苗知识库
## 需要的内容
1. zsk-1.0.0.tar.gz     #解压并导入docker
2. zsk.data.tar.gz      #解压到/home/data下
3. zsk_docker.tar.gz    #制作docker需要的内容

## 部署
1. 创建以下目录（如果是使用`zsk.data.tar.gz`解压得到，可以不建立以下目录）
```
/home/data/conf
/home/data/zsk
/home/data/zsk/mysql_data
/home/data/zsk/web
```

2. 创建mysql57容器及关联mysql_data目录
如果与esb的数据库不能共用，就需要docker启动一个mysql服务，设定其他端口。
后续考虑将mysql服务也融入到zsk容器里。

```
docker run -d \
  --name mysql57 \
  -p 13306:3306 \
  -e MYSQL_ROOT_PASSWORD=u4vO#Qqt3Gxp4J^W \
  -v /home/data/zsk/mysql_data:/var/lib/mysql \
  --restart always \
  mysql:5.7.44
```
添加zwb用户
```
docker exec -it mysql57 mysql -uroot -p -e "GRANT ALL PRIVILEGES ON *.* TO 'zwb'@'%' IDENTIFIED BY 'temp@Citai2021' WITH GRANT OPTION; FLUSH PRIVILEGES;"
```
输入默认密码：`u4vO#Qqt3Gxp4J^W`

3. 替换ip
改成需要替换的IP

```
find /home/data/zsk/web -type f $ -name "*.js" -o -name "*.js.map" $ -print0 | xargs -0 sed -i 's/100.64.0.1/10.21.241.14/g'

find /home/data/zsk/web -type f $ -name "*.js" -o -name "*.js.map" $ -print0 | xargs -0 sed -i 's/192.200.129.19/10.21.241.14/g'
```
如果需要改端口，可以修改一下命令（默认已是`13306`端口）

```
find /home/data/zsk/web -type f $ -name "*.env" $ -print0 | xargs -0 sed -i 's/3306/13306/g'
```

4. 修改conf文件
确认是否修改Nginx配置，或`web/`下的`.env`等配置

5. 启动容器

```
docker run -d \
 -p 80:80 \
 -p 8191:8191\
 --name zsk \
 -v /home/data/zsk/web/:/app/ \
 -v /home/data/conf/nginx-zsk.conf:/opt/docker/etc/nginx/vhost.conf \
 -v /home/soft/:/soft/ \
 --restart always \
 zsk:1.0.0
```

### 其他生成zsk镜像

```
# 1. 基础镜像（确保该镜像已手动 load 到内网 Docker 仓库/机器中）
FROM webdevops/php-nginx:7.2

# 2. 安装 Oracle JDK 1.8
# ADD 会自动解压 tar.gz。如果是内网，这一步完全不依赖网络。
ADD jdk-8u471-linux-x64.tar.gz /usr/local/java/

# 设置 JAVA 环境变量
# 注意：请核实解压后的具体文件夹名，通常是 jdk1.8.0_441
ENV JAVA_HOME=/usr/local/java/jdk1.8.0_471
ENV PATH=$JAVA_HOME/bin:$PATH

# 3. 上传 Neo4j 目录
ADD ./neo4j-xy-3.5.26 /opt/neo4j-xy
ADD ./neo4j-zy-3.5.26 /opt/neo4j-zy

# 4. 赋予执行权限
# 注意：在内网由于无法 apt install procps，请确保基础镜像里已经带了 ps 命令
# 如果没带，Neo4j 的某些脚本可能会报错，但通常 webdevops 镜像是带有的
RUN chmod +x /opt/neo4j-xy/bin/neo4j && \
    chmod +x /opt/neo4j-zy/bin/neo4j

# 5. 修改第二个 Neo4j 实例的端口防止冲突
# 内网环境下，通过 sed 直接在构建时修改配置文件是最稳妥的
# RUN sed -i 's/#dbms.connector.http.listen_address=:7474/dbms.connector.http.listen_address=:7475/g' /opt/neo4j-zy/conf/neo4j.conf && \
#     sed -i 's/#dbms.connector.bolt.listen_address=:7687/dbms.connector.bolt.listen_address=:7688/g' /opt/neo4j-zy/conf/neo4j.conf

# 6. 配置 Supervisor 任务（利用镜像自带的进程管理）
COPY ./neo4j-xy.conf /opt/docker/etc/supervisor.d/neo4j-xy.conf
COPY ./neo4j-zy.conf /opt/docker/etc/supervisor.d/neo4j-zy.conf

# 7. 暴露端口
EXPOSE 80 7474 7687 7475 7688

# 镜像启动时会自动执行原有的 ENTRYPOINT，带起 PHP、Nginx 和 两个 Neo4j
```

### 其他
```
docker run -e TZ="Asia/Shanghai" -d \
 --network host \
 --name esb \
 --restart=always \
 -e MODE=standalone  \
 -p 8081:8081 \
 -v /home/data/esb:/app \
 -v /home/data/upload/esb:/usr/citai/esb/upload \
 -v /home/data/logs/esb:/usr/citai/esb/logs \
 -v /home/data/conf/application-esb.yml:/application-druid.yml \
 -v /home/data/conf/diplomateList.xml:/diplomateList.xml \
 openjdk:8 java -jar /app/app.jar

docker run -d \
--network host \
--name redis \
--privileged=true \
--restart=always \
-v /home/data/conf/redis.conf:/etc/redis/redis.conf \
-v /home/data/redis_data:/data \
redis redis-server /etc/redis/redis.conf --appendonly yes
```

### 账号
```
 13581672707  sjw135816
```