op

.env.example

@@ -6,17 +6,10 @@ NET_SUBNET=10.12.25
 ################ Elasticsearch ######################
 ELK_VERSION=7.17.10
 ELASTICSEARCH_HOST_HTTP_PORT=9200
-
+ELK_ELASTIC_PASSWD=qq1458513
-################    KIBANA     ######################
-KIBANA_ELASTICSEARCH_USER=elastic
-KIBANA_ELASTICSEARCH_PASSWORD=qq1458513
 
 #################   WEB目录     ######################
-WWWROOT_PATH="/data"
+WWWROOT_PATH="./www"
-
-#################   MYSQL5.7   #######################
-MYSQL_ROOT_PASSWD_57=qq1458513
-MYSQL_PORT_57=3306
 
 ################# NodeJS ##################
 NODEJS_VERSION="18.17.0"

docker-compose.yaml.example

@@ -39,6 +39,7 @@ services:
       # - discovery.seed_hosts=
       # - cluster.initial_master_nodes=cc-docker-node
       - discovery.type=single-node
+      - ELASTIC_PASSWD=${ELK_ELASTIC_PASSWD:-qq1458513}
     volumes:
       - "./elasticsearch/data/${ELK_VERSION:-7.17.7}:/usr/share/elasticsearch/data:rw"
       - "./elasticsearch/plugins/${ELK_VERSION:-7.17.7}:/usr/share/elasticsearch/plugins"
@@ -90,6 +91,12 @@ services:
       - "./redis/data:/data/db"
       - "./logs/redis:/data/logs"
     command: ["redis-server","/etc/redis/redis.conf"]
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 1s
+      timeout: 3s
+      retries: 30
+      start-period: 30s
     networks:
         aix-docker-cc:
           ipv4_address: ${NET_SUBNET:-10.12.25}.3
@@ -105,6 +112,12 @@ services:
     networks:
         aix-docker-cc:
           ipv4_address: ${NET_SUBNET:-10.12.25}.73
+    healthcheck:
+      test: ["CMD", "curl", "--fail","http://${NET_SUBNET:-10.12.25}.1/ping_73"]
+      interval: 1s
+      timeout: 3s
+      retries: 30
+      start-period: 30s
     depends_on:
       - elasticsearch
       - redis
@@ -122,6 +135,12 @@ services:
     networks:
         aix-docker-cc:
           ipv4_address: ${NET_SUBNET:-10.12.25}.74
+    healthcheck:
+      test: ["CMD", "curl", "--fail","http://${NET_SUBNET:-10.12.25}.1/ping_74"]
+      interval: 1s
+      timeout: 3s
+      retries: 30
+      start-period: 30s
     depends_on:
       - elasticsearch
       - redis
@@ -137,6 +156,12 @@ services:
     networks:
         aix-docker-cc:
           ipv4_address: ${NET_SUBNET:-10.12.25}.81
+    healthcheck:
+      test: ["CMD", "curl", "--fail","http://${NET_SUBNET:-10.12.25}.1/ping_81"]
+      interval: 1s
+      timeout: 3s
+      retries: 30
+      start-period: 30s
     depends_on:
-      - elasticsearch
+      redis:
-      - redis
+        condition: service_healthy

elasticsearch/elasticsearch_health_check.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+
+elastic_pass=$1 
+
+response="$(curl -u "elastic:${elastic_pass}" http://localhost:9200/_cluster/health)"
+
+health="$(echo "${response}" | jq -r '.status')"
+
+if [ "${health}" == "green" ]; then
+  exit 0
+else
+  exit 1
+fi

elasticsearch/plugins/7.17.13/ik/config/IKAnalyzer.cfg.xml

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">
+<properties>
+	<comment>IK Analyzer 扩展配置</comment>
+	<!--用户可以在这里配置自己的扩展字典 -->
+	<entry key="ext_dict"></entry>
+	 <!--用户可以在这里配置自己的扩展停止词字典-->
+	<entry key="ext_stopwords"></entry>
+	<!--用户可以在这里配置远程扩展字典 -->
+	<!-- <entry key="remote_ext_dict">words_location</entry> -->
+	<!--用户可以在这里配置远程扩展停止词字典-->
+	<!-- <entry key="remote_ext_stopwords">words_location</entry> -->
+</properties>

elasticsearch/plugins/7.17.13/ik/config/extra_stopword.dic

@@ -0,0 +1,31 @@
+也
+了
+仍
+从
+以
+使
+则
+却
+又
+及
+对
+就
+并
+很
+或
+把
+是
+的
+着
+给
+而
+被
+让
+在
+还
+比
+等
+当
+与
+于
+但

elasticsearch/plugins/7.17.13/ik/config/preposition.dic

@@ -0,0 +1,25 @@
+不
+也
+了
+仍
+从
+以
+使
+则
+却
+又
+及
+对
+就
+并
+很
+或
+把
+是
+的
+着
+给
+而
+被
+让
+但

elasticsearch/plugins/7.17.13/ik/config/quantifier.dic

@@ -0,0 +1,316 @@
+丈
+下
+世
+世纪
+两
+个
+中
+串
+亩
+人
+介
+付
+代
+件
+任
+份
+伏
+伙
+位
+位数
+例
+倍
+像素
+元
+克
+克拉
+公亩
+公克
+公分
+公升
+公尺
+公担
+公斤
+公里
+公顷
+具
+册
+出
+刀
+分
+分钟
+分米
+划
+列
+则
+刻
+剂
+剑
+副
+加仑
+勺
+包
+匙
+匹
+区
+千克
+千米
+升
+卷
+厅
+厘
+厘米
+双
+发
+口
+句
+只
+台
+叶
+号
+名
+吨
+听
+员
+周
+周年
+品
+回
+团
+圆
+圈
+地
+场
+块
+坪
+堆
+声
+壶
+处
+夜
+大
+天
+头
+套
+女
+孔
+字
+宗
+室
+家
+寸
+对
+封
+尊
+小时
+尺
+尾
+局
+层
+届
+岁
+师
+帧
+幅
+幕
+幢
+平方
+平方公尺
+平方公里
+平方分米
+平方厘米
+平方码
+平方米
+平方英寸
+平方英尺
+平方英里
+平米
+年
+年代
+年级
+度
+座
+式
+引
+张
+成
+战
+截
+户
+房
+所
+扇
+手
+打
+批
+把
+折
+担
+拍
+招
+拨
+拳
+指
+掌
+排
+撮
+支
+文
+斗
+斤
+方
+族
+日
+时
+曲
+月
+月份
+期
+本
+朵
+村
+束
+条
+来
+杯
+枚
+枝
+枪
+架
+柄
+柜
+栋
+栏
+株
+样
+根
+格
+案
+桌
+档
+桩
+桶
+梯
+棵
+楼
+次
+款
+步
+段
+毛
+毫
+毫升
+毫米
+毫克
+池
+洲
+派
+海里
+滴
+炮
+点
+点钟
+片
+版
+环
+班
+瓣
+瓶
+生
+男
+画
+界
+盆
+盎司
+盏
+盒
+盘
+相
+眼
+石
+码
+碗
+碟
+磅
+种
+科
+秒
+秒钟
+窝
+立方公尺
+立方分米
+立方厘米
+立方码
+立方米
+立方英寸
+立方英尺
+站
+章
+笔
+等
+筐
+筒
+箱
+篇
+篓
+篮
+簇
+米
+类
+粒
+级
+组
+维
+缕
+缸
+罐
+网
+群
+股
+脚
+船
+艇
+艘
+色
+节
+英亩
+英寸
+英尺
+英里
+行
+袋
+角
+言
+课
+起
+趟
+路
+车
+转
+轮
+辆
+辈
+连
+通
+遍
+部
+里
+重
+针
+钟
+钱
+锅
+门
+间
+队
+阶段
+隅
+集
+页
+顶
+顷
+项
+顿
+颗
+餐
+首

elasticsearch/plugins/7.17.13/ik/config/stopword.dic

@@ -0,0 +1,33 @@
+a
+an
+and
+are
+as
+at
+be
+but
+by
+for
+if
+in
+into
+is
+it
+no
+not
+of
+on
+or
+such
+that
+the
+their
+then
+there
+these
+they
+this
+to
+was
+will
+with

elasticsearch/plugins/7.17.13/ik/config/suffix.dic

@@ -0,0 +1,37 @@
+乡
+井
+亭
+党
+区
+厅
+县
+园
+塔
+家
+寺
+局
+巷
+市
+弄
+所
+斯基
+楼
+江
+河
+海
+湖
+省
+维奇
+署
+苑
+街
+觀
+观
+诺夫
+路
+部
+镇
+阁
+山
+子
+娃

elasticsearch/plugins/7.17.13/ik/config/surname.dic

@@ -0,0 +1,131 @@
+丁
+万
+万俟
+上官
+东方
+乔
+于
+令狐
+仲孙
+任
+何
+余
+候
+傅
+公冶
+公孙
+公羊
+冯
+刘
+单
+单于
+卢
+史
+叶
+司徒
+司空
+司马
+吕
+吴
+周
+唐
+夏
+夏侯
+太叔
+姚
+姜
+孔
+孙
+孟
+宇文
+宋
+宗政
+尉迟
+尹
+崔
+常
+康
+廖
+张
+彭
+徐
+慕容
+戴
+文
+方
+易
+曹
+曾
+朱
+李
+杜
+杨
+林
+梁
+欧阳
+武
+段
+毛
+江
+汤
+沈
+淳于
+潘
+澹台
+濮阳
+熊
+王
+田
+申屠
+白
+皇甫
+石
+秦
+程
+罗
+肖
+胡
+苏
+范
+董
+蒋
+薛
+袁
+许
+诸葛
+谢
+谭
+贺
+贾
+赖
+赫连
+赵
+轩辕
+邓
+邱
+邵
+邹
+郑
+郝
+郭
+金
+钟
+钟离
+钱
+长孙
+闻人
+闾丘
+阎
+陆
+陈
+雷
+韩
+顾
+马
+高
+魏
+鲜于
+黄
+黎
+龙
+龚

elasticsearch/plugins/7.17.13/ik/plugin-descriptor.properties

@@ -0,0 +1,56 @@
+# Elasticsearch plugin descriptor file
+# This file must exist as 'plugin-descriptor.properties' at
+# the root directory of all plugins.
+#
+# A plugin can be 'site', 'jvm', or both.
+#
+### example site plugin for "foo":
+#
+# foo.zip <-- zip file for the plugin, with this structure:
+#   _site/ <-- the contents that will be served
+#   plugin-descriptor.properties <-- example contents below:
+#
+# site=true
+# description=My cool plugin
+# version=1.0
+#
+### example jvm plugin for "foo"
+#
+# foo.zip <-- zip file for the plugin, with this structure:
+#   <arbitrary name1>.jar <-- classes, resources, dependencies
+#   <arbitrary nameN>.jar <-- any number of jars
+#   plugin-descriptor.properties <-- example contents below:
+#
+# jvm=true
+# classname=foo.bar.BazPlugin
+# description=My cool plugin
+# version=2.0.0-rc1
+# elasticsearch.version=2.0
+# java.version=1.7
+#
+### mandatory elements for all plugins:
+#
+# 'description': simple summary of the plugin
+description=IK Analyzer for Elasticsearch
+#
+# 'version': plugin's version
+version=7.17.13
+#
+# 'name': the plugin name
+name=analysis-ik
+#
+# 'classname': the name of the class to load, fully-qualified.
+classname=org.elasticsearch.plugin.analysis.ik.AnalysisIkPlugin
+#
+# 'java.version' version of java the code is built against
+# use the system property java.specification.version
+# version string must be a sequence of nonnegative decimal integers
+# separated by "."'s and may have leading zeros
+java.version=1.8
+#
+# 'elasticsearch.version' version of elasticsearch compiled against
+# You will have to release a new version of the plugin for each new
+# elasticsearch release. This version is checked when the plugin
+# is loaded so Elasticsearch will refuse to start in the presence of
+# plugins with the incorrect elasticsearch.version.
+elasticsearch.version=7.17.13

elasticsearch/plugins/7.17.13/ik/plugin-security.policy

@@ -0,0 +1,4 @@
+grant {
+  // needed because of the hot reload functionality
+  permission java.net.SocketPermission "*", "connect,resolve";
+};

elasticsearch/plugins/7.17.14/ik/config/IKAnalyzer.cfg.xml

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">
+<properties>
+	<comment>IK Analyzer 扩展配置</comment>
+	<!--用户可以在这里配置自己的扩展字典 -->
+	<entry key="ext_dict"></entry>
+	 <!--用户可以在这里配置自己的扩展停止词字典-->
+	<entry key="ext_stopwords"></entry>
+	<!--用户可以在这里配置远程扩展字典 -->
+	<!-- <entry key="remote_ext_dict">words_location</entry> -->
+	<!--用户可以在这里配置远程扩展停止词字典-->
+	<!-- <entry key="remote_ext_stopwords">words_location</entry> -->
+</properties>

elasticsearch/plugins/7.17.14/ik/config/extra_stopword.dic

@@ -0,0 +1,31 @@
+也
+了
+仍
+从
+以
+使
+则
+却
+又
+及
+对
+就
+并
+很
+或
+把
+是
+的
+着
+给
+而
+被
+让
+在
+还
+比
+等
+当
+与
+于
+但

elasticsearch/plugins/7.17.14/ik/config/preposition.dic

@@ -0,0 +1,25 @@
+不
+也
+了
+仍
+从
+以
+使
+则
+却
+又
+及
+对
+就
+并
+很
+或
+把
+是
+的
+着
+给
+而
+被
+让
+但

elasticsearch/plugins/7.17.14/ik/config/quantifier.dic

@@ -0,0 +1,316 @@
+丈
+下
+世
+世纪
+两
+个
+中
+串
+亩
+人
+介
+付
+代
+件
+任
+份
+伏
+伙
+位
+位数
+例
+倍
+像素
+元
+克
+克拉
+公亩
+公克
+公分
+公升
+公尺
+公担
+公斤
+公里
+公顷
+具
+册
+出
+刀
+分
+分钟
+分米
+划
+列
+则
+刻
+剂
+剑
+副
+加仑
+勺
+包
+匙
+匹
+区
+千克
+千米
+升
+卷
+厅
+厘
+厘米
+双
+发
+口
+句
+只
+台
+叶
+号
+名
+吨
+听
+员
+周
+周年
+品
+回
+团
+圆
+圈
+地
+场
+块
+坪
+堆
+声
+壶
+处
+夜
+大
+天
+头
+套
+女
+孔
+字
+宗
+室
+家
+寸
+对
+封
+尊
+小时
+尺
+尾
+局
+层
+届
+岁
+师
+帧
+幅
+幕
+幢
+平方
+平方公尺
+平方公里
+平方分米
+平方厘米
+平方码
+平方米
+平方英寸
+平方英尺
+平方英里
+平米
+年
+年代
+年级
+度
+座
+式
+引
+张
+成
+战
+截
+户
+房
+所
+扇
+手
+打
+批
+把
+折
+担
+拍
+招
+拨
+拳
+指
+掌
+排
+撮
+支
+文
+斗
+斤
+方
+族
+日
+时
+曲
+月
+月份
+期
+本
+朵
+村
+束
+条
+来
+杯
+枚
+枝
+枪
+架
+柄
+柜
+栋
+栏
+株
+样
+根
+格
+案
+桌
+档
+桩
+桶
+梯
+棵
+楼
+次
+款
+步
+段
+毛
+毫
+毫升
+毫米
+毫克
+池
+洲
+派
+海里
+滴
+炮
+点
+点钟
+片
+版
+环
+班
+瓣
+瓶
+生
+男
+画
+界
+盆
+盎司
+盏
+盒
+盘
+相
+眼
+石
+码
+碗
+碟
+磅
+种
+科
+秒
+秒钟
+窝
+立方公尺
+立方分米
+立方厘米
+立方码
+立方米
+立方英寸
+立方英尺
+站
+章
+笔
+等
+筐
+筒
+箱
+篇
+篓
+篮
+簇
+米
+类
+粒
+级
+组
+维
+缕
+缸
+罐
+网
+群
+股
+脚
+船
+艇
+艘
+色
+节
+英亩
+英寸
+英尺
+英里
+行
+袋
+角
+言
+课
+起
+趟
+路
+车
+转
+轮
+辆
+辈
+连
+通
+遍
+部
+里
+重
+针
+钟
+钱
+锅
+门
+间
+队
+阶段
+隅
+集
+页
+顶
+顷
+项
+顿
+颗
+餐
+首

elasticsearch/plugins/7.17.14/ik/config/stopword.dic

@@ -0,0 +1,33 @@
+a
+an
+and
+are
+as
+at
+be
+but
+by
+for
+if
+in
+into
+is
+it
+no
+not
+of
+on
+or
+such
+that
+the
+their
+then
+there
+these
+they
+this
+to
+was
+will
+with

elasticsearch/plugins/7.17.14/ik/config/suffix.dic

@@ -0,0 +1,37 @@
+乡
+井
+亭
+党
+区
+厅
+县
+园
+塔
+家
+寺
+局
+巷
+市
+弄
+所
+斯基
+楼
+江
+河
+海
+湖
+省
+维奇
+署
+苑
+街
+觀
+观
+诺夫
+路
+部
+镇
+阁
+山
+子
+娃

elasticsearch/plugins/7.17.14/ik/config/surname.dic

@@ -0,0 +1,131 @@
+丁
+万
+万俟
+上官
+东方
+乔
+于
+令狐
+仲孙
+任
+何
+余
+候
+傅
+公冶
+公孙
+公羊
+冯
+刘
+单
+单于
+卢
+史
+叶
+司徒
+司空
+司马
+吕
+吴
+周
+唐
+夏
+夏侯
+太叔
+姚
+姜
+孔
+孙
+孟
+宇文
+宋
+宗政
+尉迟
+尹
+崔
+常
+康
+廖
+张
+彭
+徐
+慕容
+戴
+文
+方
+易
+曹
+曾
+朱
+李
+杜
+杨
+林
+梁
+欧阳
+武
+段
+毛
+江
+汤
+沈
+淳于
+潘
+澹台
+濮阳
+熊
+王
+田
+申屠
+白
+皇甫
+石
+秦
+程
+罗
+肖
+胡
+苏
+范
+董
+蒋
+薛
+袁
+许
+诸葛
+谢
+谭
+贺
+贾
+赖
+赫连
+赵
+轩辕
+邓
+邱
+邵
+邹
+郑
+郝
+郭
+金
+钟
+钟离
+钱
+长孙
+闻人
+闾丘
+阎
+陆
+陈
+雷
+韩
+顾
+马
+高
+魏
+鲜于
+黄
+黎
+龙
+龚

elasticsearch/plugins/7.17.14/ik/plugin-descriptor.properties

@@ -0,0 +1,56 @@
+# Elasticsearch plugin descriptor file
+# This file must exist as 'plugin-descriptor.properties' at
+# the root directory of all plugins.
+#
+# A plugin can be 'site', 'jvm', or both.
+#
+### example site plugin for "foo":
+#
+# foo.zip <-- zip file for the plugin, with this structure:
+#   _site/ <-- the contents that will be served
+#   plugin-descriptor.properties <-- example contents below:
+#
+# site=true
+# description=My cool plugin
+# version=1.0
+#
+### example jvm plugin for "foo"
+#
+# foo.zip <-- zip file for the plugin, with this structure:
+#   <arbitrary name1>.jar <-- classes, resources, dependencies
+#   <arbitrary nameN>.jar <-- any number of jars
+#   plugin-descriptor.properties <-- example contents below:
+#
+# jvm=true
+# classname=foo.bar.BazPlugin
+# description=My cool plugin
+# version=2.0.0-rc1
+# elasticsearch.version=2.0
+# java.version=1.7
+#
+### mandatory elements for all plugins:
+#
+# 'description': simple summary of the plugin
+description=IK Analyzer for Elasticsearch
+#
+# 'version': plugin's version
+version=7.17.14
+#
+# 'name': the plugin name
+name=analysis-ik
+#
+# 'classname': the name of the class to load, fully-qualified.
+classname=org.elasticsearch.plugin.analysis.ik.AnalysisIkPlugin
+#
+# 'java.version' version of java the code is built against
+# use the system property java.specification.version
+# version string must be a sequence of nonnegative decimal integers
+# separated by "."'s and may have leading zeros
+java.version=1.8
+#
+# 'elasticsearch.version' version of elasticsearch compiled against
+# You will have to release a new version of the plugin for each new
+# elasticsearch release. This version is checked when the plugin
+# is loaded so Elasticsearch will refuse to start in the presence of
+# plugins with the incorrect elasticsearch.version.
+elasticsearch.version=7.17.14

elasticsearch/plugins/7.17.14/ik/plugin-security.policy

@@ -0,0 +1,4 @@
+grant {
+  // needed because of the hot reload functionality
+  permission java.net.SocketPermission "*", "connect,resolve";
+};

openresty/config/conf/nginx.conf

@@ -78,6 +78,27 @@ lua_shared_dict my_limit_req_store1 100m;
       stub_status on;
       access_log off;
     }
+    location ~ ^/(status_73|ping_73)$ {
+      access_log off;
+      fastcgi_pass php73:9000;
+      fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+      include fastcgi.conf;
+    }
+    location ~ ^/(status_74|ping_74)$ {
+      access_log off;
+      fastcgi_pass php74:9000;
+      fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+      include fastcgi.conf;
+    }
+    location ~ ^/(status_81|ping_81)$ {
+      access_log off;
+      fastcgi_pass php81:9000;
+      fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+      include fastcgi.conf;
+    }
+    location /aix-agent {
+  	  proxy_pass http://10.12.25.1:10115/;
+    }
     location ~ [^/]\.php(/|$) {
       fastcgi_pass php81:9000;
       #fastcgi_pass unix:/dev/shm/php-cgi.sock;

openresty/config/vhost/default.conf

@@ -1,30 +1,70 @@
 server {
   listen 80;
-  server_name *.cc.dev.jsaix.com;
+  listen [::]:80;
-  set $base_path "/data/wwwroot/";
+
-  set $path "default";
+  # listen 443 ssl http2;
-  set_by_lua $set_root_path '
+  # listen [::]:443 ssl http2;
-    local host = ngx.var.host or ngx.var.uri
+  # ssl_certificate /usr/local/openresty/nginx/conf/vhost/ssl/gateway.jsaix.cn.crt;
-    ngx.var.path = ngx.re.gsub(host,"(.cc.dev.jsaix.com)","")
+  # ssl_certificate_key /usr/local/openresty/nginx/conf/vhost/ssl/gateway.jsaix.cn.key;
-  ';
+  # ssl_protocols TLSv1.2 TLSv1.3;
-  access_log /data/wwwlogs/cc.dev.jsaix.com_nginx.log combined;
+  # ssl_prefer_server_ciphers on;
-  error_log /data/wwwlogs/error.cc.dev.jsaix.com_nginx.log;
+  # ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;
+  # ssl_session_timeout 10m;
+  # ssl_session_cache builtin:1000 shared:SSL:10m;
+  # ssl_session_tickets off;
+  ## curl https://ssl-config.mozilla.org/ffdhe2048.txt > /usr/local/openresty/nginx/conf/vhost/ssl/dhparam.pem
+  # ssl_dhparam /usr/local/openresty/nginx/conf/vhost/ssl/dhparam.pem;
+  # ssl_buffer_size 1400;
+  # add_header Strict-Transport-Security "max-age=63072000" always;
+  # ssl_stapling on;
+  # ssl_stapling_verify on;
+  # ssl_trusted_certificate /usr/local/openresty/nginx/conf/vhost/ssl/full_chain_rsa.crt;
+  # resolver 223.5.5.5;
+  # add_header X-Xss-Protection "1; mode=block";
+  # add_header X-Content-Type-Options nosniff;
+  # if ($ssl_protocol = "") { return 301 https://$host$request_uri; }
+
+  server_name *.abchen.net;
+  access_log /data/wwwlogs/abchen.net_nginx.log combined;
+  error_log /data/wwwlogs/error.abchen.net_nginx.log;
   index index.html index.htm index.php;
 
-
+  root /data/wwwroot/default;
-  root $base_path$path/public;
   include /usr/local/openresty/nginx/conf/rewrite/laravel.conf;
   #error_page 404 /404.html;
   #error_page 502 /502.html;
+  location ~ .*\.(wma|wmv|asf|mp3|mmf|zip|rar|jpg|gif|png|swf|flv|mp4)$ {
+    valid_referers none blocked *.abchen.net;
+    if ($invalid_referer) {
+        return 403;
+    }
+  }
+  # location /wss {
+  #   proxy_http_version 1.1;
+  #   proxy_set_header Upgrade $http_upgrade;
+  #   # proxy_set_header Connection $connection_upgrade;
+  #   # add_header Front-End-Https on;
+	# 	# add_header 'Access-Control-Allow-Methods' 'GET,POST';
+	# 	# add_header 'Access-Control-Allow-Origin' $http_origin;
+	# 	# add_header 'Access-Control-Allow-Credentials' 'true';
+	# 	# add_header 'Access-Control-Allow-Headers' 'Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Mx-ReqToken,X-Requested-With';
+  #   include proxy.conf
+  #   proxy_pass http://php81:22349;
+  # }
   location ~ [^/]\.php(/|$) {
-    fastcgi_pass php73:9000;
+    fastcgi_pass php81:9000;
     #fastcgi_pass unix:/dev/shm/php73-cgi.sock;
     fastcgi_index index.php;
+    fastcgi_param PHP_ADMIN_VALUE "open_basedir=$document_root/:/tmp/:/proc/";
     include fastcgi.conf;
   }
 
-
+  location ~ .*\.(?i)(txt|doc|pdf|rar|gz|zip|docx|exe|xlsx|ppt|pptx)$ {
-
+    add_header Content-Disposition attachment;
+  }
+  location ~* ^/(storage|attachments|upload)/.*\.(php|php5)$ {
+    deny all;
+  }
   location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|mp4|ico)$ {
     expires 30d;
     access_log off;

php/php73/etc/php-fpm.d/www.conf

@@ -235,7 +235,7 @@ pm.max_spare_servers = 25
 ;       anything, but it may not be a good idea to use the .php extension or it
 ;       may conflict with a real PHP file.
 ; Default Value: not set
-;pm.status_path = /status
+pm.status_path = /status_73
 
 ; The ping URI to call the monitoring page of FPM. If this value is not set, no
 ; URI will be recognized as a ping page. This could be used to test from outside
@@ -247,12 +247,12 @@ pm.max_spare_servers = 25
 ;       anything, but it may not be a good idea to use the .php extension or it
 ;       may conflict with a real PHP file.
 ; Default Value: not set
-;ping.path = /ping
+ping.path = /ping_73
 
 ; This directive may be used to customize the response of a ping request. The
 ; response is formatted as text/plain with a 200 response code.
 ; Default Value: pong
-;ping.response = pong
+ping.response = pong
 
 ; The access log file
 ; Default: not set

php/php74/etc/php-fpm.d/www.conf

@@ -235,7 +235,7 @@ pm.max_spare_servers = 3
 ;       anything, but it may not be a good idea to use the .php extension or it
 ;       may conflict with a real PHP file.
 ; Default Value: not set
-;pm.status_path = /status
+pm.status_path = /status_74
 
 ; The ping URI to call the monitoring page of FPM. If this value is not set, no
 ; URI will be recognized as a ping page. This could be used to test from outside
@@ -247,12 +247,12 @@ pm.max_spare_servers = 3
 ;       anything, but it may not be a good idea to use the .php extension or it
 ;       may conflict with a real PHP file.
 ; Default Value: not set
-;ping.path = /ping
+ping.path = /ping_74
 
 ; This directive may be used to customize the response of a ping request. The
 ; response is formatted as text/plain with a 200 response code.
 ; Default Value: pong
-;ping.response = pong
+ping.response = pong
 
 ; The access log file
 ; Default: not set

php/php81/etc/php-fpm.d/www.conf

@@ -244,7 +244,7 @@ pm.max_spare_servers = 25
 ;       anything, but it may not be a good idea to use the .php extension or it
 ;       may conflict with a real PHP file.
 ; Default Value: not set
-;pm.status_path = /status
+pm.status_path = /status_81
 
 ; The address on which to accept FastCGI status request. This creates a new
 ; invisible pool that can handle requests independently. This is useful
@@ -272,12 +272,12 @@ pm.max_spare_servers = 25
 ;       anything, but it may not be a good idea to use the .php extension or it
 ;       may conflict with a real PHP file.
 ; Default Value: not set
-;ping.path = /ping
+ping.path = /ping_81
 
 ; This directive may be used to customize the response of a ping request. The
 ; response is formatted as text/plain with a 200 response code.
 ; Default Value: pong
-;ping.response = pong
+ping.response = pong
 
 ; The access log file
 ; Default: not set

start.sh

@@ -1,7 +1,7 @@
 #/bin/sh
 pushd /data
 if ! command -v docker >/dev/null 2>&1 ; then
-  wget https://download.docker.com/linux/static/stable/x86_64/docker-20.10.9.tgz
+  wget https://mirrors.tuna.tsinghua.edu.cn/docker-ce/linux/static/stable/x86_64/docker-20.10.9.tgz
   tar -zxvf docker-20.10.9.tgz
   mv docker/* /usr/bin/
   groupadd  docker