签入版本
This commit is contained in:
gitadmin
@@ -0,0 +1,45 @@
|
||||
# 使用官方Nginx Alpine基础镜像（更轻量）
|
||||
FROM nginx:1.24-alpine
|
||||
|
||||
# 维护者信息
|
||||
LABEL maintainer="xiaomayicloud@163.com"
|
||||
LABEL description="Nginx 1.24 for Node.js frontend deployment"
|
||||
LABEL version="1.24"
|
||||
|
||||
# 安装必要的工具
|
||||
RUN apk update && \
|
||||
apk add --no-cache \
|
||||
curl \
|
||||
bash \
|
||||
tzdata \
|
||||
&& rm -rf /var/cache/apk/*
|
||||
|
||||
# 设置时区（可选，根据需要修改）
|
||||
ENV TZ=Asia/Shanghai
|
||||
RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
|
||||
|
||||
# 创建应用目录
|
||||
RUN mkdir -p /app/dist && \
|
||||
mkdir -p /app/logs && \
|
||||
mkdir -p /app/conf
|
||||
|
||||
# 移除默认的Nginx配置
|
||||
RUN rm -rf /etc/nginx/conf.d/default.conf
|
||||
|
||||
# 复制自定义Nginx配置
|
||||
COPY nginx.conf /etc/nginx/nginx.conf
|
||||
COPY conf.d/ /etc/nginx/conf.d/
|
||||
|
||||
# 复制健康检查脚本
|
||||
COPY healthcheck.sh /usr/local/bin/healthcheck.sh
|
||||
RUN chmod +x /usr/local/bin/healthcheck.sh
|
||||
|
||||
# 暴露端口
|
||||
EXPOSE 80 443
|
||||
|
||||
# 健康检查
|
||||
HEALTHCHECK --interval=30s --timeout=10s --retries=3 \
|
||||
CMD /usr/local/bin/healthcheck.sh
|
||||
|
||||
# 启动Nginx
|
||||
CMD ["nginx", "-g", "daemon off;"]
|
||||
@@ -0,0 +1,44 @@
|
||||
server {
|
||||
listen 80;
|
||||
server_name localhost;
|
||||
root /app/dist;
|
||||
index index.html index.htm;
|
||||
|
||||
# 访问日志
|
||||
access_log /app/logs/access.log main;
|
||||
error_log /app/logs/error.log warn;
|
||||
|
||||
# 静态文件缓存
|
||||
location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
|
||||
expires 1y;
|
||||
add_header Cache-Control "public, immutable";
|
||||
add_header Access-Control-Allow-Origin "*";
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
|
||||
# HTML文件不缓存
|
||||
location ~* \.(html|htm)$ {
|
||||
expires -1;
|
||||
add_header Cache-Control "no-store, no-cache, must-revalidate";
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
|
||||
# SPA应用路由处理
|
||||
location / {
|
||||
try_files $uri $uri/ /index.html;
|
||||
}
|
||||
|
||||
# 健康检查端点
|
||||
location /health {
|
||||
access_log off;
|
||||
return 200 "healthy\n";
|
||||
add_header Content-Type text/plain;
|
||||
}
|
||||
|
||||
# 禁止访问隐藏文件
|
||||
location ~ /\. {
|
||||
deny all;
|
||||
access_log off;
|
||||
log_not_found off;
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,175 @@
|
||||
#!/bin/bash
|
||||
|
||||
# 颜色定义
|
||||
RED='\033[0;31m'
|
||||
GREEN='\033[0;32m'
|
||||
YELLOW='\033[1;33m'
|
||||
BLUE='\033[0;34m'
|
||||
NC='\033[0m' # No Color
|
||||
|
||||
# 配置变量
|
||||
IMAGE_NAME="nginx"
|
||||
IMAGE_TAG="1.24-alpine"
|
||||
HARBOR_URL="192.168.10.102:8001" # 替换为你的Harbor地址
|
||||
HARBOR_PROJECT="xiaomayi-base" # 替换为你的项目名
|
||||
HARBOR_USERNAME="deploy" # 从环境变量获取
|
||||
HARBOR_PASSWORD="Harbor20240330" # 从环境变量获取
|
||||
|
||||
# 日志函数
|
||||
log_info() { echo -e "${BLUE}[INFO]${NC} $1"; }
|
||||
log_success() { echo -e "${GREEN}[SUCCESS]${NC} $1"; }
|
||||
log_warning() { echo -e "${YELLOW}[WARNING]${NC} $1"; }
|
||||
log_error() { echo -e "${RED}[ERROR]${NC} $1"; }
|
||||
|
||||
# 检查依赖
|
||||
check_dependencies() {
|
||||
local deps=("docker" "curl")
|
||||
for dep in "${deps[@]}"; do
|
||||
if ! command -v "$dep" &> /dev/null; then
|
||||
log_error "缺少依赖: $dep"
|
||||
exit 1
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
# 检查Docker服务
|
||||
check_docker() {
|
||||
if ! docker info > /dev/null 2>&1; then
|
||||
log_error "Docker服务未运行"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# 构建镜像
|
||||
build_image() {
|
||||
log_info "开始构建Nginx镜像..."
|
||||
|
||||
if docker build -t "${IMAGE_NAME}:${IMAGE_TAG}" . ; then
|
||||
log_success "镜像构建成功: ${IMAGE_NAME}:${IMAGE_TAG}"
|
||||
else
|
||||
log_error "镜像构建失败"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# 添加额外标签（可选）
|
||||
add_additional_tags() {
|
||||
local tags=("latest" "prod" "dev")
|
||||
|
||||
for extra_tag in "${tags[@]}"; do
|
||||
log_info "添加额外标签: ${extra_tag}"
|
||||
docker tag "${IMAGE_NAME}:${IMAGE_TAG}" "${IMAGE_NAME}:${extra_tag}"
|
||||
done
|
||||
}
|
||||
|
||||
# 登录Harbor
|
||||
login_to_harbor() {
|
||||
if [ -z "$HARBOR_USERNAME" ] || [ -z "$HARBOR_PASSWORD" ]; then
|
||||
log_error "Harbor用户名或密码未设置"
|
||||
log_warning "请设置环境变量: HARBOR_USERNAME 和 HARBOR_PASSWORD"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
log_info "登录到Harbor仓库..."
|
||||
if echo "$HARBOR_PASSWORD" | docker login -u "$HARBOR_USERNAME" --password-stdin "$HARBOR_URL"; then
|
||||
log_success "Harbor登录成功"
|
||||
else
|
||||
log_error "Harbor登录失败"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# 打标签
|
||||
tag_image() {
|
||||
local target_tag="${1:-$IMAGE_TAG}"
|
||||
local full_image_name="${HARBOR_URL}/${HARBOR_PROJECT}/${IMAGE_NAME}:${target_tag}"
|
||||
|
||||
log_info "打标签: ${full_image_name}"
|
||||
if docker tag "${IMAGE_NAME}:${target_tag}" "$full_image_name"; then
|
||||
log_success "标签打成功"
|
||||
else
|
||||
log_error "标签打失败"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# 推送镜像
|
||||
push_image() {
|
||||
local target_tag="${1:-$IMAGE_TAG}"
|
||||
local full_image_name="${HARBOR_URL}/${HARBOR_PROJECT}/${IMAGE_NAME}:${target_tag}"
|
||||
|
||||
log_info "推送镜像: ${full_image_name}"
|
||||
if docker push "$full_image_name"; then
|
||||
log_success "镜像推送成功"
|
||||
else
|
||||
log_error "镜像推送失败"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# 清理本地镜像
|
||||
cleanup() {
|
||||
log_info "清理本地镜像..."
|
||||
|
||||
# 清理主标签
|
||||
docker rmi "${IMAGE_NAME}:${IMAGE_TAG}" 2>/dev/null || true
|
||||
|
||||
# 清理额外标签
|
||||
local tags=("latest" "prod" "dev")
|
||||
for tag in "${tags[@]}"; do
|
||||
docker rmi "${IMAGE_NAME}:${tag}" 2>/dev/null || true
|
||||
done
|
||||
|
||||
# 清理Harbor标签
|
||||
local harbor_tags=("$IMAGE_TAG" "latest" "prod" "dev")
|
||||
for tag in "${harbor_tags[@]}"; do
|
||||
docker rmi "${HARBOR_URL}/${HARBOR_PROJECT}/${IMAGE_NAME}:${tag}" 2>/dev/null || true
|
||||
done
|
||||
|
||||
log_success "清理完成"
|
||||
}
|
||||
|
||||
# 显示镜像信息
|
||||
show_image_info() {
|
||||
log_info "镜像信息:"
|
||||
echo "名称: ${IMAGE_NAME}"
|
||||
echo "版本: ${IMAGE_TAG}"
|
||||
echo "Harbor地址: ${HARBOR_URL}"
|
||||
echo "项目: ${HARBOR_PROJECT}"
|
||||
echo "完整镜像名: ${HARBOR_URL}/${HARBOR_PROJECT}/${IMAGE_NAME}:${IMAGE_TAG}"
|
||||
}
|
||||
|
||||
# 主函数
|
||||
main() {
|
||||
log_info "====== Nginx镜像构建推送脚本 ======"
|
||||
|
||||
check_dependencies
|
||||
check_docker
|
||||
show_image_info
|
||||
|
||||
# 构建镜像
|
||||
build_image
|
||||
|
||||
# 添加额外标签
|
||||
#add_additional_tags
|
||||
|
||||
# 登录Harbor
|
||||
login_to_harbor
|
||||
|
||||
# 推送所有标签
|
||||
#local tags=("$IMAGE_TAG" "latest" "prod" "dev")
|
||||
local tags=("$IMAGE_TAG")
|
||||
for tag in "${tags[@]}"; do
|
||||
tag_image "$tag"
|
||||
push_image "$tag"
|
||||
done
|
||||
|
||||
# 清理
|
||||
cleanup
|
||||
|
||||
log_success "====== 所有操作完成! ======"
|
||||
log_info "镜像地址: ${HARBOR_URL}/${HARBOR_PROJECT}/${IMAGE_NAME}:${IMAGE_TAG}"
|
||||
}
|
||||
|
||||
# 执行主函数
|
||||
main "$@"
|
||||
@@ -0,0 +1,8 @@
|
||||
#!/bin/sh
|
||||
|
||||
# Nginx健康检查脚本
|
||||
if curl -f http://localhost/health > /dev/null 2>&1; then
|
||||
exit 0
|
||||
else
|
||||
exit 1
|
||||
fi
|
||||
@@ -0,0 +1,40 @@
|
||||
user nginx;
|
||||
worker_processes auto;
|
||||
error_log /var/log/nginx/error.log warn;
|
||||
pid /var/run/nginx.pid;
|
||||
|
||||
events {
|
||||
worker_connections 1024;
|
||||
use epoll;
|
||||
multi_accept on;
|
||||
}
|
||||
|
||||
http {
|
||||
include /etc/nginx/mime.types;
|
||||
default_type application/octet-stream;
|
||||
|
||||
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
||||
'$status $body_bytes_sent "$http_referer" '
|
||||
'"$http_user_agent" "$http_x_forwarded_for"';
|
||||
|
||||
access_log /var/log/nginx/access.log main;
|
||||
|
||||
sendfile on;
|
||||
tcp_nopush on;
|
||||
tcp_nodelay on;
|
||||
keepalive_timeout 65;
|
||||
types_hash_max_size 2048;
|
||||
|
||||
# Gzip压缩配置
|
||||
gzip on;
|
||||
gzip_vary on;
|
||||
gzip_min_length 1024;
|
||||
gzip_types text/plain text/css text/xml text/javascript
|
||||
application/javascript application/xml+rss
|
||||
application/json;
|
||||
|
||||
# 文件上传大小限制
|
||||
client_max_body_size 100M;
|
||||
|
||||
include /etc/nginx/conf.d/*.conf;
|
||||
}
|
||||
Reference in New Issue
Block a user