{"id":81113,"date":"2026-07-24T23:50:11","date_gmt":"2026-07-24T15:50:11","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/81113.html"},"modified":"2026-07-24T23:50:11","modified_gmt":"2026-07-24T15:50:11","slug":"opencloudos-9-%e5%b0%8f%e5%9e%8b%e6%9c%8d%e5%8a%a1%e5%99%a8-docker-%e9%83%a8%e7%bd%b2%e5%ae%9e%e6%88%98%ef%bc%9apostgresqlpostgis%e3%80%81redis%e3%80%81nginx-%e5%ae%89%e5%85%a8%e5%8a%a0%e5%9b%ba","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/81113.html","title":{"rendered":"OpenCloudOS 9 \u5c0f\u578b\u670d\u52a1\u5668 Docker \u90e8\u7f72\u5b9e\u6218\uff1aPostgreSQL+PostGIS\u3001Redis\u3001Nginx \u5b89\u5168\u52a0\u56fa\u4e0e\u4e00\u952e\u811a\u672c"},"content":{"rendered":"<h3>\u4e00\u3001\u524d\u8a00<\/h3>\n<h4>1. Docker \u7684\u4f18\u52bf<\/h4>\n<p>\u5bf9\u4e8e\u4e2d\u5c0f\u578b\u9879\u76ee\u7684\u670d\u52a1\u7aef\u90e8\u7f72&#xff0c;Docker \u5bb9\u5668\u5316\u6280\u672f\u5df2\u7ecf\u6210\u4e3a\u4e8b\u5b9e\u6807\u51c6\u3002\u4e0e\u4f20\u7edf&#034;\u76f4\u63a5\u5728\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u5b89\u88c5\u8f6f\u4ef6&#034;\u7684\u65b9\u5f0f\u76f8\u6bd4&#xff0c;Docker \u5728\u4ee5\u4e0b\u51e0\u4e2a\u7ef4\u5ea6\u5177\u5907\u663e\u8457\u4f18\u52bf\u3002<br \/>\n\u73af\u5883\u4e00\u81f4\u6027\u3002 \u4f20\u7edf\u5b89\u88c5\u65b9\u5f0f\u4e0b&#xff0c;\u5f00\u53d1\u73af\u5883\u4e0e\u751f\u4ea7\u73af\u5883\u7684\u8f6f\u4ef6\u7248\u672c\u3001\u914d\u7f6e\u6587\u4ef6\u8def\u5f84\u3001\u4f9d\u8d56\u5e93\u7248\u672c\u7ecf\u5e38\u5b58\u5728\u7ec6\u5fae\u5dee\u5f02&#xff0c;\u8fd9\u4e9b\u5dee\u5f02\u5f80\u5f80\u662f&#034;\u5728\u6211\u7535\u8111\u4e0a\u80fd\u8dd1&#034;\u8fd9\u79cd\u95ee\u9898\u7684\u6839\u6e90\u3002Docker \u901a\u8fc7\u955c\u50cf\u673a\u5236\u5c06\u8fd0\u884c\u73af\u5883\u6574\u4f53\u6253\u5305&#xff0c;\u5f00\u53d1\u9636\u6bb5\u6d4b\u8bd5\u901a\u8fc7\u7684\u955c\u50cf&#xff0c;\u90e8\u7f72\u5230\u751f\u4ea7\u73af\u5883\u540e\u884c\u4e3a\u5b8c\u5168\u4e00\u81f4\u3002\u4f60\u4e0d\u9700\u8981\u5173\u5fc3\u76ee\u6807\u670d\u52a1\u5668\u4e0a\u662f\u5426\u5b89\u88c5\u4e86\u7279\u5b9a\u7248\u672c\u7684 libpq \u6216\u8005 glibc&#xff0c;\u56e0\u4e3a\u955c\u50cf\u5185\u90e8\u5df2\u7ecf\u5305\u542b\u4e86\u6240\u6709\u4f9d\u8d56\u3002<br \/>\n<img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260724155009-6a6389b16ed92.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<p>\u90e8\u7f72\u6548\u7387\u3002 \u4ee5 PostgreSQL \u4e3a\u4f8b&#xff0c;\u4f20\u7edf\u5b89\u88c5\u9700\u8981\u914d\u7f6e\u8f6f\u4ef6\u6e90\u3001\u5b89\u88c5\u4e3b\u7a0b\u5e8f\u3001\u521d\u59cb\u5316\u6570\u636e\u5e93\u96c6\u7fa4\u3001\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\u3001\u521b\u5efa\u7528\u6237\u548c\u6570\u636e\u5e93&#xff0c;\u6574\u4e2a\u8fc7\u7a0b\u6d89\u53ca\u5341\u591a\u4e2a\u6b65\u9aa4\u3002\u4f7f\u7528 Docker&#xff0c;\u4e00\u6761 docker run \u547d\u4ee4\u5373\u53ef\u5b8c\u6210\u6240\u6709\u5de5\u4f5c\u3002\u5f53\u4f60\u9700\u8981\u5728\u4e00\u53f0\u65b0\u670d\u52a1\u5668\u4e0a\u91cd\u5efa\u6574\u5957\u73af\u5883\u65f6&#xff0c;Docker Compose \u914d\u7f6e\u6587\u4ef6\u5c31\u662f\u5b8c\u6574\u7684\u90e8\u7f72\u6587\u6863&#xff0c;\u51e0\u5206\u949f\u4e4b\u5185\u5c31\u80fd\u62c9\u8d77\u6240\u6709\u670d\u52a1\u3002<\/p>\n<p>\u9694\u79bb\u6027\u3002 \u5bb9\u5668\u4e4b\u95f4\u901a\u8fc7 namespace \u548c cgroup \u5b9e\u73b0\u8fdb\u7a0b\u3001\u7f51\u7edc\u3001\u6587\u4ef6\u7cfb\u7edf\u7684\u9694\u79bb\u3002PostgreSQL \u7684\u7aef\u53e3\u51b2\u7a81\u3001Redis \u7684\u914d\u7f6e\u6587\u4ef6\u8986\u76d6\u3001Nginx \u7684\u5171\u4eab\u5e93\u6c61\u67d3\u7b49\u95ee\u9898\u5728\u5bb9\u5668\u5316\u67b6\u6784\u4e0b\u81ea\u7136\u6d88\u5931\u3002\u6bcf\u4e2a\u670d\u52a1\u8fd0\u884c\u5728\u72ec\u7acb\u7684\u5bb9\u5668\u4e2d&#xff0c;\u5347\u7ea7\u3001\u56de\u6eda\u3001\u91cd\u542f\u67d0\u4e00\u4e2a\u670d\u52a1\u4e0d\u4f1a\u5f71\u54cd\u5176\u4ed6\u670d\u52a1\u3002<\/p>\n<p>\u7248\u672c\u7ba1\u7406\u3002 \u5f53\u4f60\u9700\u8981\u4ece PostgreSQL 15 \u5347\u7ea7\u5230 16&#xff0c;\u6216\u8005\u4ece Redis 6 \u5207\u6362\u5230 7&#xff0c;\u4f20\u7edf\u65b9\u5f0f\u4e0b\u8fd9\u662f\u4e00\u4e2a\u9700\u8981\u8c28\u614e\u64cd\u4f5c\u7684\u8fc7\u7a0b\u2014\u2014\u5907\u4efd\u3001\u5378\u8f7d\u3001\u5b89\u88c5\u65b0\u7248\u672c\u3001\u8fc1\u79fb\u6570\u636e\u3002\u5728 Docker \u4e2d&#xff0c;\u53ea\u9700\u8981\u4fee\u6539\u955c\u50cf\u6807\u7b7e&#xff0c;\u6570\u636e\u901a\u8fc7 volume \u6302\u8f7d\u4fdd\u6301\u4e0d\u53d8&#xff0c;\u56de\u6eda\u65f6\u4e5f\u53ea\u9700\u5207\u56de\u65e7\u6807\u7b7e\u3002<\/p>\n<p>\u8d44\u6e90\u63a7\u5236\u3002 Docker \u5141\u8bb8\u4e3a\u6bcf\u4e2a\u5bb9\u5668\u8bbe\u7f6e CPU \u548c\u5185\u5b58\u7684\u4e0a\u9650\u3002\u5728\u4e00\u53f0\u8d44\u6e90\u6709\u9650\u7684\u670d\u52a1\u5668\u4e0a&#xff0c;\u4f60\u53ef\u4ee5\u7cbe\u786e\u63a7\u5236\u6bcf\u4e2a\u670d\u52a1\u6700\u591a\u5360\u7528\u591a\u5c11\u5185\u5b58&#xff0c;\u9632\u6b62\u5355\u4e2a\u670d\u52a1&#xff08;\u6bd4\u5982 PostgreSQL \u6267\u884c\u4e86\u590d\u6742\u67e5\u8be2&#xff09;\u8017\u5c3d\u7cfb\u7edf\u8d44\u6e90\u5bfc\u81f4\u5176\u4ed6\u670d\u52a1\u4e0d\u53ef\u7528\u3002\u8fd9\u5728 2\u68384GB \u8fd9\u79cd\u5165\u95e8\u7ea7\u4e91\u4e3b\u673a\u4e0a\u5c24\u4e3a\u91cd\u8981\u3002<\/p>\n<p>\u5f53\u7136&#xff0c;Docker \u5e76\u975e\u94f6\u5f39\u3002\u5bb9\u5668\u5316\u4f1a\u5f15\u5165\u4e00\u5b9a\u7684\u8d44\u6e90\u5f00\u9500&#xff08;Docker \u5b88\u62a4\u8fdb\u7a0b\u901a\u5e38\u5360\u7528 100-300MB \u5185\u5b58&#xff09;&#xff0c;\u5bf9\u4e8e\u5185\u5b58\u6781\u5176\u7d27\u5f20\u7684\u573a\u666f\u9700\u8981\u6743\u8861\u3002JDK \u5e94\u7528\u5bb9\u5668\u5316\u540e&#xff0c;JVM \u5bf9\u5bb9\u5668\u5185\u5b58\u7684\u611f\u77e5\u3001GC \u7b56\u7565\u7684\u914d\u7f6e\u90fd\u6bd4\u539f\u751f\u90e8\u7f72\u66f4\u590d\u6742\u3002\u8fd9\u4e5f\u662f\u4e3a\u4ec0\u4e48\u5728\u5b9e\u9645\u751f\u4ea7\u4e2d&#xff0c;\u6211\u4eec\u91c7\u7528&#034;\u6df7\u5408\u90e8\u7f72&#034;\u7b56\u7565&#xff1a;\u6570\u636e\u5e93\u3001\u7f13\u5b58\u3001\u53cd\u5411\u4ee3\u7406\u7b49\u65e0\u72b6\u6001\u6216\u6570\u636e\u53ef\u5916\u6302\u7684\u670d\u52a1\u7528 Docker \u7ba1\u7406&#xff0c;JDK \u5e94\u7528\u539f\u751f\u8fd0\u884c\u5728\u5bbf\u4e3b\u673a\u4e0a\u3002<\/p>\n<h4>2. \u672c\u535a\u5ba2\u8981\u70b9<\/h4>\n<p>\u672c\u6587\u57fa\u4e8e\u4e00\u53f0 2\u68384GB\u5185\u5b58 \u7684 OpenCloudOS 9 \u4e91\u4e3b\u673a&#xff0c;\u5b8c\u6574\u8bb0\u5f55\u4ece\u96f6\u5f00\u59cb\u90e8\u7f72 PostgreSQL 16 &#043; PostGIS 3.5\u3001Redis 7\u3001Nginx \u7684\u5168\u8fc7\u7a0b&#xff0c;\u5e76\u9644\u5e26\u4e00\u4efd\u53ef\u76f4\u63a5\u4f7f\u7528\u7684\u4e00\u952e\u90e8\u7f72\u811a\u672c\u3002<\/p>\n<p>\u535a\u5ba2\u8986\u76d6\u4ee5\u4e0b\u6838\u5fc3\u5185\u5bb9&#xff1a;<\/p>\n<ul>\n<li>\u5b89\u88c5\u9009\u578b\u51b3\u7b56&#xff1a;\u5728\u8d44\u6e90\u53d7\u9650\u7684\u670d\u52a1\u5668\u4e0a&#xff0c;\u4e3a\u4ec0\u4e48\u9009\u62e9&#034;JDK \u539f\u751f &#043; \u5176\u4f59 Docker \u5316&#034;\u7684\u6df7\u5408\u90e8\u7f72\u65b9\u6848&#xff0c;\u800c\u975e\u5168\u90e8\u539f\u751f\u5b89\u88c5\u6216\u5168\u90e8\u5bb9\u5668\u5316\u3002<\/li>\n<li>Docker \u670d\u52a1\u90e8\u7f72&#xff1a;PostgreSQL &#043; PostGIS\u3001Redis\u3001Nginx \u4e09\u4e2a\u670d\u52a1\u7684\u5bb9\u5668\u5316\u914d\u7f6e\u7ec6\u8282&#xff0c;\u5305\u62ec\u5185\u5b58\u53c2\u6570\u8c03\u4f18\u3001\u6570\u636e\u6301\u4e45\u5316\u3001\u7f51\u7edc\u9694\u79bb\u3002<\/li>\n<li>\u5b89\u5168\u52a0\u56fa\u7b56\u7565&#xff1a;\u975e\u6807\u51c6\u7aef\u53e3\u6620\u5c04\u3001\u5f3a\u5bc6\u7801\u81ea\u52a8\u751f\u6210\u3001fail2ban \u9632\u66b4\u529b\u7834\u89e3\u3001PostgreSQL \u8ba4\u8bc1\u5ef6\u8fdf\u3001Redis \u5371\u9669\u547d\u4ee4\u7981\u7528\u3001Nginx \u8bf7\u6c42\u901f\u7387\u9650\u5236\u3002<\/li>\n<li>\u81ea\u52a8\u5316\u811a\u672c&#xff1a;\u6240\u6709\u914d\u7f6e\u96c6\u6210\u5230\u4e00\u4e2a bash \u811a\u672c\u4e2d&#xff0c;root \u7528\u6237\u76f4\u63a5\u8fd0\u884c\u5373\u53ef\u5b8c\u6210\u5168\u90e8\u90e8\u7f72\u3002<\/li>\n<\/ul>\n<hr \/>\n<p>\u5728\u547d\u4ee4\u884c\u5de5\u5177\u4e2d\u8f93\u5165\u4ee5\u4e0b\u547d\u4ee4\u67e5\u770bCPU\u4fe1\u606f&#xff1a;<\/p>\n<p><span class=\"token function\">cat<\/span> \/proc\/cpuinfo<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260724155009-6a6389b1d2ab1.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><br \/>\n\u518d\u6765\u770b\u4e00\u4e0b\u5185\u5b58\u914d\u7f6e&#xff0c;\u547d\u4ee4\u5982\u4e0b&#xff1a;<\/p>\n<p><span class=\"token function\">cat<\/span> \/proc\/meminfo<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260724155010-6a6389b2626fa.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<h3>\u4e8c\u3001\u9700\u8981\u5b89\u88c5\u7684\u7c7b\u578b<\/h3>\n<h4>1. Docker \u672c\u8eab<\/h4>\n<h5>\u4e3a\u4ec0\u4e48\u9700\u8981 Docker<\/h5>\n<p>\u5728 2\u68384GB \u7684\u670d\u52a1\u5668\u4e0a&#xff0c;Docker \u672c\u8eab\u7684\u8d44\u6e90\u5f00\u9500\u662f\u7b2c\u4e00\u4e2a\u9700\u8981\u8bc4\u4f30\u7684\u95ee\u9898\u3002Docker \u5b88\u62a4\u8fdb\u7a0b&#xff08;dockerd&#xff09;\u52a0\u4e0a containerd \u8fd0\u884c\u65f6&#xff0c;\u901a\u5e38\u5360\u7528 100-300MB \u5185\u5b58\u3002\u5728 4GB \u603b\u91cf\u4e2d&#xff0c;\u8fd9\u4e2a\u5f00\u9500\u5360\u6bd4\u7ea6 5%-8%&#xff0c;\u662f\u53ef\u4ee5\u63a5\u53d7\u7684\u4ee3\u4ef7\u3002<br \/>\nOpenCloudOS 9 \u57fa\u4e8e RHEL 9 \u5185\u6838&#xff0c;\u5bf9 Docker \u7684\u517c\u5bb9\u6027\u826f\u597d\u3002\u5b89\u88c5\u8fc7\u7a0b\u4f7f\u7528 dnf \u5305\u7ba1\u7406\u5668&#xff0c;\u914d\u7f6e\u963f\u91cc\u4e91\u955c\u50cf\u6e90\u52a0\u901f\u56fd\u5185\u4e0b\u8f7d\u3002<\/p>\n<h5>\u5b89\u88c5\u6b65\u9aa4<\/h5>\n<p>\u5b89\u88c5 Docker CE&#xff08;\u793e\u533a\u7248&#xff09;\u548c Docker Compose \u63d2\u4ef6&#xff1a;<\/p>\n<p><span class=\"token comment\"># \u5b89\u88c5 dnf \u63d2\u4ef6\u5e76\u6dfb\u52a0 Docker \u4ed3\u5e93<\/span><br \/>\ndnf <span class=\"token function\">install<\/span> <span class=\"token parameter variable\">-y<\/span> dnf-plugins-core<br \/>\ndnf config-manager &#8211;add-repo https:\/\/mirrors.aliyun.com\/docker-ce\/linux\/centos\/docker-ce.repo<br \/>\n<span class=\"token comment\"># \u5b89\u88c5 Docker \u5f15\u64ce\u548c Compose \u63d2\u4ef6<\/span><br \/>\ndnf <span class=\"token function\">install<\/span> <span class=\"token parameter variable\">-y<\/span> docker-ce docker-ce-cli containerd.io docker-compose-plugin<br \/>\n<span class=\"token comment\"># \u542f\u52a8\u5e76\u8bbe\u7f6e\u5f00\u673a\u81ea\u542f<\/span><br \/>\nsystemctl start <span class=\"token function\">docker<\/span><br \/>\nsystemctl <span class=\"token builtin class-name\">enable<\/span> <span class=\"token function\">docker<\/span><br \/>\n<span class=\"token comment\"># \u9a8c\u8bc1\u5b89\u88c5<\/span><br \/>\n<span class=\"token function\">docker<\/span> <span class=\"token parameter variable\">&#8211;version<\/span><br \/>\n<span class=\"token function\">docker<\/span> compose version<\/p>\n<p>\u5982\u679c\u9700\u8981\u72ec\u7acb\u7684 docker-compose \u547d\u4ee4&#xff08;\u90e8\u5206\u65e7\u7248\u5de5\u5177\u517c\u5bb9&#xff09;&#xff0c;\u8fd8\u53ef\u4ee5\u989d\u5916\u5b89\u88c5\u4e8c\u8fdb\u5236\u6587\u4ef6&#xff1a;<\/p>\n<p><span class=\"token function\">curl<\/span> <span class=\"token parameter variable\">-L<\/span> <span class=\"token string\">&#034;https:\/\/github.com\/docker\/compose\/releases\/latest\/download\/docker-compose-<span class=\"token variable\"><span class=\"token variable\">$(<\/span><span class=\"token function\">uname<\/span> <span class=\"token parameter variable\">-s<\/span><span class=\"token variable\">)<\/span><\/span>&#8211;<span class=\"token variable\"><span class=\"token variable\">$(<\/span><span class=\"token function\">uname<\/span> <span class=\"token parameter variable\">-m<\/span><span class=\"token variable\">)<\/span><\/span>&#034;<\/span> <span class=\"token punctuation\">\\\\<\/span><br \/>\n  <span class=\"token parameter variable\">-o<\/span> \/usr\/local\/bin\/docker-compose<br \/>\n<span class=\"token function\">chmod<\/span> &#043;x \/usr\/local\/bin\/docker-compose<\/p>\n<h5>\u5f00\u673a\u81ea\u542f\u673a\u5236<\/h5>\n<p>Docker \u670d\u52a1\u901a\u8fc7 systemctl enable docker \u6ce8\u518c\u4e3a\u7cfb\u7edf\u670d\u52a1\u3002\u670d\u52a1\u5668\u91cd\u542f\u540e&#xff0c;systemd \u81ea\u52a8\u62c9\u8d77 Docker \u5b88\u62a4\u8fdb\u7a0b&#xff0c;Docker \u5b88\u62a4\u8fdb\u7a0b\u518d\u68c0\u6d4b\u5230\u6240\u6709\u8bbe\u7f6e\u4e86 restart: always \u7b56\u7565\u7684\u5bb9\u5668\u5e76\u9010\u4e00\u542f\u52a8\u3002\u8fd9\u6761\u94fe\u8def\u4fdd\u8bc1\u4e86\u5bb9\u5668\u670d\u52a1\u7684\u81ea\u52a8\u6062\u590d&#xff0c;\u65e0\u9700\u989d\u5916\u914d\u7f6e crontab \u6216\u5176\u4ed6\u76d1\u63a7\u624b\u6bb5\u3002<\/p>\n<h4>2. PostgreSQL &#043; PostGIS<\/h4>\n<h5>\u955c\u50cf\u9009\u62e9<\/h5>\n<p>\u4f7f\u7528\u5b98\u65b9\u7ef4\u62a4\u7684 postgis\/postgis \u955c\u50cf&#xff0c;\u7248\u672c\u9009\u62e9 postgis\/postgis:16-3.5\u3002\u8fd9\u4e2a\u955c\u50cf\u57fa\u4e8e Debian&#xff0c;\u9884\u88c5\u4e86 PostgreSQL 16 \u548c PostGIS 3.5 \u6269\u5c55&#xff0c;\u7a33\u5b9a\u6027\u7ecf\u8fc7\u793e\u533a\u5e7f\u6cdb\u9a8c\u8bc1\u3002\u76f8\u6bd4\u81ea\u884c\u5728\u57fa\u7840 PostgreSQL \u955c\u50cf\u4e0a\u7f16\u8bd1\u5b89\u88c5 PostGIS&#xff0c;\u5b98\u65b9\u955c\u50cf\u7701\u53bb\u4e86\u7f16\u8bd1\u73af\u8282\u7684\u590d\u6742\u5ea6\u548c\u6f5c\u5728\u7684\u4f9d\u8d56\u51b2\u7a81\u3002<\/p>\n<p>\u503c\u5f97\u6ce8\u610f\u7684\u662f&#xff0c;\u4e0d\u5efa\u8bae\u4f7f\u7528 Alpine \u57fa\u7840\u7684 PostgreSQL \u955c\u50cf\u6765\u8fd0\u884c PostGIS\u3002Alpine \u4f7f\u7528 musl libc \u800c\u975e glibc&#xff0c;\u90e8\u5206 PostGIS \u7684\u7b2c\u4e09\u65b9\u6269\u5c55\u53ef\u80fd\u5b58\u5728\u517c\u5bb9\u6027\u95ee\u9898\u3002Debian \u57fa\u7840\u955c\u50cf\u867d\u7136\u4f53\u79ef\u7a0d\u5927&#xff08;\u7ea6 400MB&#xff09;&#xff0c;\u4f46\u5728\u517c\u5bb9\u6027\u4e0a\u66f4\u6709\u4fdd\u969c\u3002<\/p>\n<h5>\u5185\u5b58\u53c2\u6570\u8c03\u4f18<\/h5>\n<p>2\u68384GB \u7684\u914d\u7f6e\u4e0b&#xff0c;PostgreSQL \u7684\u5185\u5b58\u53c2\u6570\u9700\u8981\u8c28\u614e\u8bbe\u7f6e\u3002\u6838\u5fc3\u53c2\u6570\u5982\u4e0b&#xff1a;<\/p>\n<table>\n<tr>\u53c2\u6570\u63a8\u8350\u503c\u8bf4\u660e<\/tr>\n<tbody>\n<tr>\n<td>shared_buffers<\/td>\n<td>1GB<\/td>\n<td>\u7269\u7406\u5185\u5b58\u7684 25%&#xff0c;\u7528\u4e8e\u7f13\u5b58\u6570\u636e\u9875<\/td>\n<\/tr>\n<tr>\n<td>effective_cache_size<\/td>\n<td>2GB<\/td>\n<td>\u544a\u77e5\u4f18\u5316\u5668\u7cfb\u7edf\u53ef\u7528\u7f13\u5b58\u603b\u91cf<\/td>\n<\/tr>\n<tr>\n<td>maintenance_work_mem<\/td>\n<td>256MB<\/td>\n<td>VACUUM\u3001CREATE INDEX \u7b49\u7ef4\u62a4\u64cd\u4f5c\u7684\u5185\u5b58<\/td>\n<\/tr>\n<tr>\n<td>work_mem<\/td>\n<td>4MB<\/td>\n<td>\u6392\u5e8f\u548c\u54c8\u5e0c\u64cd\u4f5c\u7684\u5185\u5b58&#xff0c;\u6ce8\u610f work_mem \u00d7 max_connections \u7684\u603b\u91cf<\/td>\n<\/tr>\n<tr>\n<td>wal_buffers<\/td>\n<td>16MB<\/td>\n<td>WAL \u65e5\u5fd7\u7f13\u51b2\u533a<\/td>\n<\/tr>\n<tr>\n<td>max_connections<\/td>\n<td>200<\/td>\n<td>\u6700\u5927\u8fde\u63a5\u6570<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5176\u4e2d work_mem \u7684\u8bbe\u7f6e\u9700\u8981\u7279\u522b\u8bf4\u660e\u3002\u6bcf\u4e2a\u8fde\u63a5\u5728\u6267\u884c\u6392\u5e8f\u3001\u54c8\u5e0c\u8fde\u63a5\u7b49\u64cd\u4f5c\u65f6\u90fd\u4f1a\u5206\u914d work_mem \u5927\u5c0f\u7684\u5185\u5b58\u3002\u5982\u679c\u8bbe\u7f6e\u4e3a 16MB\u3001200 \u4e2a\u8fde\u63a5\u540c\u65f6\u6267\u884c\u590d\u6742\u67e5\u8be2&#xff0c;\u7406\u8bba\u4e0a\u53ef\u80fd\u5360\u7528 3.2GB&#xff0c;\u8fdc\u8d85\u7269\u7406\u5185\u5b58\u3002\u8bbe\u7f6e\u4e3a 4MB \u540e&#xff0c;\u6781\u7aef\u60c5\u51b5\u7684\u4e0a\u9650\u63a7\u5236\u5728 800MB&#xff0c;\u5728 4GB \u603b\u91cf\u4e0b\u66f4\u5b89\u5168\u3002\u5bf9\u4e8e\u786e\u5b9e\u9700\u8981\u5927\u6392\u5e8f\u7684\u4e2a\u522b\u67e5\u8be2&#xff0c;\u53ef\u4ee5\u5728\u4f1a\u8bdd\u7ea7\u522b\u4e34\u65f6\u8c03\u9ad8\u3002<\/p>\n<h5>\u5171\u4eab\u5185\u5b58\u914d\u7f6e<\/h5>\n<p>\u8fd9\u662f Docker \u4e2d\u8fd0\u884c PostgreSQL \u6700\u5bb9\u6613\u8e29\u7684\u5751\u3002Docker \u5bb9\u5668\u9ed8\u8ba4\u7684 \/dev\/shm&#xff08;\u5171\u4eab\u5185\u5b58&#xff09;\u53ea\u6709 64MB&#xff0c;\u800c PostgreSQL \u7684 shared_buffers \u8bbe\u4e3a 1GB \u540e&#xff0c;\u5171\u4eab\u5185\u5b58\u4e0d\u8db3\u4f1a\u5bfc\u81f4\u542f\u52a8\u5931\u8d25\u6216\u4e25\u91cd\u6027\u80fd\u4e0b\u964d\u3002<\/p>\n<p>\u89e3\u51b3\u65b9\u6848\u662f\u5728 Docker Compose \u4e2d\u663e\u5f0f\u8bbe\u7f6e shm_size&#xff1a;<\/p>\n<p><span class=\"token key atrule\">services<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">postgres<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> postgis\/postgis<span class=\"token punctuation\">:<\/span>16<span class=\"token punctuation\">&#8211;<\/span><span class=\"token number\">3.5<\/span><br \/>\n    <span class=\"token key atrule\">shm_size<\/span><span class=\"token punctuation\">:<\/span> 2g    <span class=\"token comment\"># \u5fc5\u987b\u5927\u4e8e shared_buffers \u7684\u503c<\/span><br \/>\n    <span class=\"token comment\"># &#8230;<\/span><\/p>\n<h5>\u6570\u636e\u6301\u4e45\u5316<\/h5>\n<p>PostgreSQL \u7684\u6570\u636e\u6587\u4ef6\u901a\u8fc7 volume \u6302\u8f7d\u5230\u5bbf\u4e3b\u673a\u72ec\u7acb\u76ee\u5f55 \/data\/pgdata&#xff0c;\u800c\u975e Docker \u7684\u9ed8\u8ba4\u5b58\u50a8\u4f4d\u7f6e\u3002\u8fd9\u6837\u505a\u6709\u4e09\u4e2a\u597d\u5904&#xff1a;<\/p>\n<ul>\n<li>\u6570\u636e\u5b89\u5168&#xff1a;\u5373\u4f7f\u6267\u884c docker compose down -v&#xff08;\u5220\u9664\u5bb9\u5668\u548c volume&#xff09;&#xff0c;\u5bbf\u4e3b\u673a\u4e0a\u7684\u6570\u636e\u76ee\u5f55\u4e0d\u53d7\u5f71\u54cd\u3002<\/li>\n<li>\u5907\u4efd\u65b9\u4fbf&#xff1a;\u53ef\u4ee5\u76f4\u63a5\u5bf9 \/data\/pgdata \u76ee\u5f55\u8fdb\u884c\u6587\u4ef6\u7ea7\u5907\u4efd\u6216 rsync \u540c\u6b65\u3002<\/li>\n<li>\u91cd\u5efa\u900f\u660e&#xff1a;\u5bb9\u5668\u5220\u9664\u540e\u91cd\u65b0\u521b\u5efa&#xff0c;\u6302\u8f7d\u540c\u4e00\u76ee\u5f55\u5373\u53ef\u6062\u590d\u5168\u90e8\u6570\u636e\u3002<\/li>\n<\/ul>\n<p>\u76ee\u5f55\u6743\u9650\u8bbe\u7f6e\u4e3a chmod 700&#xff0c;owner \u8bbe\u4e3a 999:999&#xff08;PostgreSQL \u5b98\u65b9\u955c\u50cf\u7684\u5bb9\u5668\u5185\u7528\u6237 UID&#xff09;\u3002\u8fd9\u4e2a\u6743\u9650\u914d\u7f6e\u786e\u4fdd\u53ea\u6709 PostgreSQL \u8fdb\u7a0b\u80fd\u8bfb\u5199\u6570\u636e\u6587\u4ef6&#xff0c;\u5373\u4f7f\u662f root \u7528\u6237\u4e5f\u4e0d\u80fd\u76f4\u63a5\u8bfb\u53d6\u6570\u636e\u5e93\u6587\u4ef6\u5185\u5bb9\u3002<\/p>\n<h5>\u5b8c\u6574\u7684 Docker Compose \u914d\u7f6e<\/h5>\n<p><span class=\"token key atrule\">postgres<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> postgis\/postgis<span class=\"token punctuation\">:<\/span>16<span class=\"token punctuation\">&#8211;<\/span><span class=\"token number\">3.5<\/span><br \/>\n  <span class=\"token key atrule\">container_name<\/span><span class=\"token punctuation\">:<\/span> postgres<br \/>\n  <span class=\"token key atrule\">restart<\/span><span class=\"token punctuation\">:<\/span> always<br \/>\n  <span class=\"token key atrule\">shm_size<\/span><span class=\"token punctuation\">:<\/span> 2g<br \/>\n  <span class=\"token key atrule\">deploy<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">resources<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">limits<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token key atrule\">memory<\/span><span class=\"token punctuation\">:<\/span> 2g<br \/>\n  <span class=\"token key atrule\">environment<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">POSTGRES_PASSWORD<\/span><span class=\"token punctuation\">:<\/span> $<span class=\"token punctuation\">{<\/span>PG_PASSWORD<span class=\"token punctuation\">}<\/span><br \/>\n    <span class=\"token key atrule\">POSTGRES_DB<\/span><span class=\"token punctuation\">:<\/span> $<span class=\"token punctuation\">{<\/span>PG_DB<span class=\"token punctuation\">}<\/span><br \/>\n    <span class=\"token key atrule\">POSTGRES_USER<\/span><span class=\"token punctuation\">:<\/span> $<span class=\"token punctuation\">{<\/span>PG_USER<span class=\"token punctuation\">}<\/span><br \/>\n    <span class=\"token key atrule\">PGDATA<\/span><span class=\"token punctuation\">:<\/span> \/var\/lib\/postgresql\/data<br \/>\n  <span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> \/data\/pgdata<span class=\"token punctuation\">:<\/span>\/var\/lib\/postgresql\/data<br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> \/data\/docker\/pg_hba.conf<span class=\"token punctuation\">:<\/span>\/var\/lib\/postgresql\/data\/pg_hba.conf<span class=\"token punctuation\">:<\/span>ro<br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> \/data\/docker\/postgresql<span class=\"token punctuation\">&#8211;<\/span>custom.conf<span class=\"token punctuation\">:<\/span>\/etc\/postgresql<span class=\"token punctuation\">&#8211;<\/span>custom.conf<span class=\"token punctuation\">:<\/span>ro<br \/>\n  <span class=\"token key atrule\">ports<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token string\">&#034;15432:5432&#034;<\/span><br \/>\n  <span class=\"token key atrule\">command<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token punctuation\">&gt;<\/span><span class=\"token scalar string\"><br \/>\n    postgres<br \/>\n    -c shared_buffers&#061;1GB<br \/>\n    -c effective_cache_size&#061;2GB<br \/>\n    -c maintenance_work_mem&#061;256MB<br \/>\n    -c wal_buffers&#061;16MB<br \/>\n    -c work_mem&#061;4MB<br \/>\n    -c max_connections&#061;200<br \/>\n    -c config_file&#061;\/etc\/postgresql-custom.conf<\/span><br \/>\n  <span class=\"token key atrule\">healthcheck<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">test<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token punctuation\">[<\/span><span class=\"token string\">&#034;CMD-SHELL&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;pg_isready -U ${PG_USER} -d ${PG_DB}&#034;<\/span><span class=\"token punctuation\">]<\/span><br \/>\n    <span class=\"token key atrule\">interval<\/span><span class=\"token punctuation\">:<\/span> 10s<br \/>\n    <span class=\"token key atrule\">timeout<\/span><span class=\"token punctuation\">:<\/span> 5s<br \/>\n    <span class=\"token key atrule\">retries<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">5<\/span><br \/>\n  <span class=\"token key atrule\">networks<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> backend<\/p>\n<h5>PostGIS \u6269\u5c55\u521d\u59cb\u5316<\/h5>\n<p>PostGIS \u6269\u5c55\u4e0d\u4f1a\u968f\u5bb9\u5668\u542f\u52a8\u81ea\u52a8\u521b\u5efa\u5230\u76ee\u6807\u6570\u636e\u5e93\u4e2d&#xff0c;\u9700\u8981\u624b\u52a8\u6267\u884c\u4e00\u6761 SQL&#xff1a;<\/p>\n<p><span class=\"token function\">docker<\/span> <span class=\"token builtin class-name\">exec<\/span> <span class=\"token parameter variable\">-it<\/span> postgres psql <span class=\"token parameter variable\">-U<\/span> myuser <span class=\"token parameter variable\">-d<\/span> myapp <span class=\"token parameter variable\">-p<\/span> <span class=\"token number\">15432<\/span> <span class=\"token punctuation\">\\\\<\/span><br \/>\n  <span class=\"token parameter variable\">-c<\/span> <span class=\"token string\">&#039;CREATE EXTENSION IF NOT EXISTS postgis;&#039;<\/span><\/p>\n<p>\u8fd9\u6761\u547d\u4ee4\u53ef\u4ee5\u5199\u5165\u90e8\u7f72\u811a\u672c\u4e2d\u81ea\u52a8\u6267\u884c&#xff0c;\u4e5f\u53ef\u4ee5\u5728\u5e94\u7528\u9996\u6b21\u542f\u52a8\u65f6\u7531 ORM \u6846\u67b6\u81ea\u52a8\u521b\u5efa\u3002<\/p>\n<h4>3. Redis<\/h4>\n<h5>\u955c\u50cf\u9009\u62e9<\/h5>\n<p>\u4f7f\u7528 redis:7-alpine \u955c\u50cf\u3002Redis \u662f\u5178\u578b\u7684\u5185\u5b58\u578b\u670d\u52a1&#xff0c;Alpine \u57fa\u7840\u955c\u50cf\u7684\u6781\u5c0f\u4f53\u79ef&#xff08;\u7ea6 40MB&#xff09;\u548c\u4f4e\u5185\u5b58\u5f00\u9500\u975e\u5e38\u9002\u5408\u3002Redis \u4e0d\u5b58\u5728 glibc \u517c\u5bb9\u6027\u95ee\u9898&#xff0c;Alpine \u5728\u8fd9\u91cc\u662f\u6700\u4f73\u9009\u62e9\u3002<\/p>\n<h5>\u5185\u5b58\u63a7\u5236<\/h5>\n<p>Redis \u5728 2\u68384GB \u670d\u52a1\u5668\u4e0a\u5e94\u4e25\u683c\u63a7\u5236\u5185\u5b58\u4f7f\u7528\u3002\u901a\u8fc7\u4e24\u4e2a\u5c42\u9762\u5b9e\u73b0&#xff1a;<\/p>\n<p>\u5bb9\u5668\u5c42\u9762&#xff0c;Docker Compose \u8bbe\u7f6e\u5185\u5b58\u786c\u4e0a\u9650\u4e3a 256MB&#xff1a;<\/p>\n<p><span class=\"token key atrule\">deploy<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">resources<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">limits<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">memory<\/span><span class=\"token punctuation\">:<\/span> 256m<\/p>\n<p>Redis \u5c42\u9762&#xff0c;\u901a\u8fc7 maxmemory \u53c2\u6570\u8bbe\u7f6e\u5b9e\u9645\u4f7f\u7528\u7684\u4e0a\u9650\u4e3a 192MB&#xff08;\u7559\u51fa\u7ea6 25% \u7684\u7f13\u51b2\u7a7a\u95f4\u7ed9\u5bb9\u5668\u81ea\u8eab\u5f00\u9500&#xff09;&#xff1a;<\/p>\n<p>redis-server <span class=\"token parameter variable\">&#8211;maxmemory<\/span> 192mb &#8211;maxmemory-policy allkeys-lru<\/p>\n<p>allkeys-lru \u6dd8\u6c70\u7b56\u7565\u5728\u5185\u5b58\u8fbe\u5230\u4e0a\u9650\u65f6&#xff0c;\u4f18\u5148\u6dd8\u6c70\u6700\u8fd1\u6700\u5c11\u4f7f\u7528\u7684 key&#xff0c;\u9002\u5408\u7f13\u5b58\u573a\u666f\u3002\u5982\u679c\u4f60\u7684 Redis \u540c\u65f6\u5b58\u50a8\u4e86\u6301\u4e45\u5316\u6570\u636e\u548c\u7f13\u5b58\u6570\u636e&#xff0c;\u5e94\u6839\u636e\u4e1a\u52a1\u903b\u8f91\u9009\u62e9 volatile-lru&#xff08;\u53ea\u6dd8\u6c70\u8bbe\u7f6e\u4e86\u8fc7\u671f\u65f6\u95f4\u7684 key&#xff09;\u6216\u5176\u4ed6\u7b56\u7565\u3002<\/p>\n<h5>\u6301\u4e45\u5316\u7b56\u7565<\/h5>\n<p>\u5f00\u542f AOF&#xff08;Append Only File&#xff09;\u6301\u4e45\u5316&#xff1a;<\/p>\n<p>redis-server <span class=\"token parameter variable\">&#8211;appendonly<\/span> <span class=\"token function\">yes<\/span><\/p>\n<p>AOF \u8bb0\u5f55\u6bcf\u4e00\u6b21\u5199\u64cd\u4f5c&#xff0c;Redis \u91cd\u542f\u65f6\u901a\u8fc7\u56de\u653e\u8fd9\u4e9b\u64cd\u4f5c\u6062\u590d\u6570\u636e\u3002\u76f8\u6bd4 RDB \u5feb\u7167\u65b9\u5f0f&#xff0c;AOF \u5728\u6570\u636e\u5b89\u5168\u6027\u4e0a\u66f4\u6709\u4fdd\u969c&#xff0c;\u6700\u591a\u53ea\u4e22\u5931 1 \u79d2\u7684\u6570\u636e\u3002\u6570\u636e\u6587\u4ef6\u901a\u8fc7 volume \u6302\u8f7d\u5230 \/data\/docker\/redis \u76ee\u5f55\u3002<\/p>\n<h5>\u5b8c\u6574\u914d\u7f6e<\/h5>\n<p><span class=\"token key atrule\">redis<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> redis<span class=\"token punctuation\">:<\/span>7<span class=\"token punctuation\">&#8211;<\/span>alpine<br \/>\n  <span class=\"token key atrule\">container_name<\/span><span class=\"token punctuation\">:<\/span> redis<br \/>\n  <span class=\"token key atrule\">restart<\/span><span class=\"token punctuation\">:<\/span> always<br \/>\n  <span class=\"token key atrule\">deploy<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">resources<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">limits<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token key atrule\">memory<\/span><span class=\"token punctuation\">:<\/span> 256m<br \/>\n  <span class=\"token key atrule\">command<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token punctuation\">&gt;<\/span><span class=\"token scalar string\"><br \/>\n    redis-server \/usr\/local\/etc\/redis\/redis-custom.conf<\/span><br \/>\n  <span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> \/data\/docker\/redis<span class=\"token punctuation\">:<\/span>\/data<br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> \/data\/docker\/redis\/redis<span class=\"token punctuation\">&#8211;<\/span>custom.conf<span class=\"token punctuation\">:<\/span>\/usr\/local\/etc\/redis\/redis<span class=\"token punctuation\">&#8211;<\/span>custom.conf<span class=\"token punctuation\">:<\/span>ro<br \/>\n  <span class=\"token key atrule\">ports<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token string\">&#034;16379:6379&#034;<\/span><br \/>\n  <span class=\"token key atrule\">healthcheck<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">test<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token punctuation\">[<\/span><span class=\"token string\">&#034;CMD&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;redis-cli&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;-a&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;${REDIS_PASSWORD}&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;ping&#034;<\/span><span class=\"token punctuation\">]<\/span><br \/>\n    <span class=\"token key atrule\">interval<\/span><span class=\"token punctuation\">:<\/span> 10s<br \/>\n    <span class=\"token key atrule\">timeout<\/span><span class=\"token punctuation\">:<\/span> 3s<br \/>\n    <span class=\"token key atrule\">retries<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">5<\/span><br \/>\n  <span class=\"token key atrule\">networks<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> backend<\/p>\n<p>Redis \u7684\u914d\u7f6e\u901a\u8fc7\u5916\u90e8\u6587\u4ef6 redis-custom.conf \u6302\u8f7d&#xff0c;\u800c\u975e\u76f4\u63a5\u5199\u5728 command \u53c2\u6570\u4e2d\u3002\u8fd9\u6837\u505a\u7684\u4f18\u52bf\u662f&#xff1a;\u4fee\u6539 Redis \u914d\u7f6e\u540e\u53ea\u9700\u91cd\u542f\u5bb9\u5668&#xff0c;\u4e0d\u9700\u8981\u4fee\u6539 Docker Compose \u6587\u4ef6\u672c\u8eab\u3002<\/p>\n<h4>4. Nginx<\/h4>\n<h5>\u955c\u50cf\u9009\u62e9<\/h5>\n<p>\u4f7f\u7528 nginx:alpine \u955c\u50cf&#xff0c;\u5185\u5b58\u5360\u7528\u6781\u4f4e&#xff08;\u7ea6 20-50MB&#xff09;&#xff0c;\u5728 4GB \u670d\u52a1\u5668\u4e0a\u51e0\u4e4e\u53ef\u4ee5\u5ffd\u7565\u4e0d\u8ba1\u3002<\/p>\n<h5>\u6838\u5fc3\u529f\u80fd<\/h5>\n<p>\u5728\u8fd9\u5957\u67b6\u6784\u4e2d&#xff0c;Nginx \u627f\u62c5\u4e24\u4e2a\u89d2\u8272&#xff1a;<\/p>\n<p>\u53cd\u5411\u4ee3\u7406\u3002\u5c06\u5916\u90e8\u8bf7\u6c42\u8f6c\u53d1\u5230\u5bbf\u4e3b\u673a\u4e0a\u539f\u751f\u8fd0\u884c\u7684 Java \u5e94\u7528\u3002\u4f8b\u5982&#xff0c;\u901a\u8fc7 8086 \u7aef\u53e3\u53cd\u5411\u4ee3\u7406\u5230 JDK \u5e94\u7528\u7684 8080 \u7aef\u53e3&#xff1a;<\/p>\n<p>server {<br \/>\n    listen 8086;<br \/>\n    server_name localhost;<\/p>\n<p>    location \/ {<br \/>\n        proxy_pass http:\/\/host.docker.internal:8080;<br \/>\n        proxy_set_header Host $host;<br \/>\n        proxy_set_header X-Real-IP $remote_addr;<br \/>\n        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;<br \/>\n        proxy_set_header X-Forwarded-Proto $scheme;<br \/>\n    }<br \/>\n}<\/p>\n<p>host.docker.internal \u662f Docker \u63d0\u4f9b\u7684\u7279\u6b8a DNS \u540d\u79f0&#xff0c;\u6307\u5411\u5bbf\u4e3b\u673a\u7684\u7f51\u5173\u5730\u5740\u3002\u901a\u8fc7\u5b83&#xff0c;Nginx \u5bb9\u5668\u53ef\u4ee5\u8bbf\u95ee\u5bbf\u4e3b\u673a\u4e0a\u8fd0\u884c\u7684 JDK \u5e94\u7528\u3002<\/p>\n<p>\u9759\u6001\u8d44\u6e90\u670d\u52a1\u3002\u76f4\u63a5\u6258\u7ba1\u524d\u7aef\u9759\u6001\u6587\u4ef6\u3001API \u6587\u6863\u7b49\u3002Nginx \u5904\u7406\u9759\u6001\u6587\u4ef6\u7684\u6027\u80fd\u8fdc\u9ad8\u4e8e Java \u5e94\u7528\u670d\u52a1\u5668&#xff0c;\u5c06\u5176\u5378\u8f7d\u5230 Nginx \u53ef\u4ee5\u663e\u8457\u964d\u4f4e JDK \u5e94\u7528\u7684\u8d1f\u8f7d\u3002<\/p>\n<h5>\u914d\u7f6e\u6587\u4ef6\u7ba1\u7406<\/h5>\n<p>Nginx \u7684\u914d\u7f6e\u6587\u4ef6\u901a\u8fc7 volume \u4ee5\u53ea\u8bfb\u65b9\u5f0f\u6302\u8f7d&#xff1a;<\/p>\n<p><span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> \/data\/docker\/nginx\/conf.d<span class=\"token punctuation\">:<\/span>\/etc\/nginx\/conf.d<span class=\"token punctuation\">:<\/span>ro<br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> \/data\/docker\/nginx\/html<span class=\"token punctuation\">:<\/span>\/usr\/share\/nginx\/html<span class=\"token punctuation\">:<\/span>ro<\/p>\n<p>\u5728 conf.d \u76ee\u5f55\u4e0b&#xff0c;\u6bcf\u4e2a .conf \u6587\u4ef6\u5b9a\u4e49\u4e00\u4e2a server \u5757\u3002Nginx \u4f1a\u81ea\u52a8\u52a0\u8f7d\u8be5\u76ee\u5f55\u4e0b\u7684\u6240\u6709\u914d\u7f6e\u6587\u4ef6&#xff0c;\u8fd9\u610f\u5473\u7740\u4f60\u53ef\u4ee5\u968f\u65f6\u6dfb\u52a0\u65b0\u7684\u7ad9\u70b9\u6216\u53cd\u5411\u4ee3\u7406\u914d\u7f6e&#xff0c;\u800c\u4e0d\u9700\u8981\u4fee\u6539 Docker Compose \u6587\u4ef6\u3002\u552f\u4e00\u9700\u8981\u6ce8\u610f\u7684\u662f&#xff0c;\u65b0\u589e\u76d1\u542c\u7aef\u53e3\u65f6&#xff0c;\u9700\u8981\u5728 Docker Compose \u7684 ports \u6bb5\u4e2d\u58f0\u660e\u7aef\u53e3\u6620\u5c04&#xff0c;\u5426\u5219\u5bb9\u5668\u7684\u7f51\u7edc\u5c42\u4e0d\u4f1a\u653e\u884c\u8be5\u7aef\u53e3\u3002<\/p>\n<h5>\u5b89\u5168\u52a0\u56fa\u914d\u7f6e<\/h5>\n<p>server {<br \/>\n    listen 80;<br \/>\n    server_name localhost;<\/p>\n<p>    # \u9690\u85cf Nginx \u7248\u672c\u53f7&#xff0c;\u9632\u6b62\u653b\u51fb\u8005\u5229\u7528\u5df2\u77e5\u7248\u672c\u6f0f\u6d1e<br \/>\n    server_tokens off;<\/p>\n<p>    # \u6bcf\u4e2a IP \u9650\u5236 30 \u8bf7\u6c42\/\u79d2&#xff0c;\u9632 CC \u653b\u51fb<br \/>\n    limit_req_zone $binary_remote_addr zone&#061;ddos:10m rate&#061;30r\/s;<\/p>\n<p>    location \/ {<br \/>\n        limit_req zone&#061;ddos burst&#061;50 nodelay;<br \/>\n        root \/usr\/share\/nginx\/html;<br \/>\n        index index.html index.htm;<br \/>\n    }<\/p>\n<p>    client_max_body_size 10m;<br \/>\n}<\/p>\n<hr \/>\n<h3>\u4e09\u3001\u5b89\u5168\u7b56\u7565<\/h3>\n<h4>1. \u5173\u95ed\u9ed8\u8ba4\u7aef\u53e3<\/h4>\n<h5>\u4e3a\u4ec0\u4e48\u9700\u8981\u4fee\u6539\u9ed8\u8ba4\u7aef\u53e3<\/h5>\n<p>\u4e92\u8054\u7f51\u4e0a\u5b58\u5728\u5927\u91cf\u7684\u81ea\u52a8\u5316\u626b\u63cf\u5de5\u5177&#xff0c;\u5b83\u4eec 7\u00d724 \u5c0f\u65f6\u4e0d\u95f4\u65ad\u5730\u626b\u63cf\u516c\u7f51 IP \u7684\u5e38\u7528\u7aef\u53e3\u3002\u4ee5\u4e0b\u6570\u636e\u6765\u81ea\u516c\u5f00\u7684\u871c\u7f50\u7edf\u8ba1&#xff1a;<\/p>\n<table>\n<tr>\u7aef\u53e3\u670d\u52a1\u626b\u63cf\u9891\u7387<\/tr>\n<tbody>\n<tr>\n<td>22<\/td>\n<td>SSH<\/td>\n<td>\u6bcf\u5206\u949f\u6570\u767e\u6b21<\/td>\n<\/tr>\n<tr>\n<td>3306<\/td>\n<td>MySQL<\/td>\n<td>\u6bcf\u5c0f\u65f6\u6570\u5341\u6b21<\/td>\n<\/tr>\n<tr>\n<td>5432<\/td>\n<td>PostgreSQL<\/td>\n<td>\u6bcf\u5c0f\u65f6\u6570\u5341\u6b21<\/td>\n<\/tr>\n<tr>\n<td>6379<\/td>\n<td>Redis<\/td>\n<td>\u6bcf\u5c0f\u65f6\u6570\u5341\u6b21<\/td>\n<\/tr>\n<tr>\n<td>80\/443<\/td>\n<td>HTTP\/HTTPS<\/td>\n<td>\u6301\u7eed\u626b\u63cf<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5982\u679c\u4f60\u7684\u670d\u52a1\u4f7f\u7528\u9ed8\u8ba4\u7aef\u53e3\u5e76\u66b4\u9732\u5728\u516c\u7f51\u4e0a&#xff0c;\u5373\u4f7f\u5bc6\u7801\u8db3\u591f\u5f3a&#xff0c;\u5927\u91cf\u7684\u66b4\u529b\u7834\u89e3\u5c1d\u8bd5\u4e5f\u4f1a\u6d88\u8017\u670d\u52a1\u5668\u8d44\u6e90\u3001\u4ea7\u751f\u6d77\u91cf\u65e5\u5fd7&#xff0c;\u751a\u81f3\u5728\u67d0\u4e9b\u6781\u7aef\u60c5\u51b5\u4e0b&#xff08;\u6bd4\u5982\u5bc6\u7801\u6070\u597d\u51fa\u73b0\u5728\u4e86\u67d0\u4e2a\u6cc4\u9732\u7684\u5b57\u5178\u4e2d&#xff09;\u88ab\u653b\u7834\u3002<\/p>\n<p>\u5c06\u5bf9\u5916\u6620\u5c04\u7684\u7aef\u53e3\u6539\u4e3a\u975e\u6807\u51c6\u503c&#xff0c;\u80fd\u81ea\u52a8\u5c4f\u853d 99% \u7684\u81ea\u52a8\u5316\u626b\u63cf\u3002\u626b\u63cf\u5de5\u5177\u901a\u5e38\u53ea\u63a2\u6d4b\u5df2\u77e5\u7684\u9ed8\u8ba4\u7aef\u53e3\u5217\u8868&#xff0c;\u6539\u4e3a 15432 \u548c 16379 \u540e&#xff0c;\u626b\u63cf\u5668\u6839\u672c\u4e0d\u4f1a\u5c1d\u8bd5\u8fde\u63a5\u8fd9\u4e9b\u7aef\u53e3\u3002<\/p>\n<h5>\u7aef\u53e3\u6620\u5c04\u7b56\u7565<\/h5>\n<p>\u5728 Docker Compose \u4e2d&#xff0c;\u7aef\u53e3\u6620\u5c04\u7684\u683c\u5f0f\u4e3a \u5bbf\u4e3b\u673a\u7aef\u53e3:\u5bb9\u5668\u5185\u7aef\u53e3\u3002\u5bb9\u5668\u5185\u7aef\u53e3\u4fdd\u6301\u9ed8\u8ba4\u503c&#xff08;PostgreSQL 5432\u3001Redis 6379&#xff09;&#xff0c;\u53ea\u4fee\u6539\u5bbf\u4e3b\u673a\u4fa7\u7684\u6620\u5c04\u7aef\u53e3&#xff1a;<\/p>\n<table>\n<tr>\u670d\u52a1\u5bb9\u5668\u5185\u7aef\u53e3\u5bbf\u4e3b\u673a\u6620\u5c04\u7aef\u53e3\u4fee\u6539\u5efa\u8bae<\/tr>\n<tbody>\n<tr>\n<td>Nginx<\/td>\n<td>80<\/td>\n<td>80&#xff08;\u4fdd\u7559&#xff09;<\/td>\n<td>HTTP \u6807\u51c6\u7aef\u53e3&#xff0c;\u6d4f\u89c8\u5668\u9ed8\u8ba4\u8bbf\u95ee\u65e0\u9700\u8f93\u5165\u7aef\u53e3\u53f7<\/td>\n<\/tr>\n<tr>\n<td>Nginx<\/td>\n<td>443<\/td>\n<td>443&#xff08;\u4fdd\u7559&#xff09;<\/td>\n<td>HTTPS \u6807\u51c6\u7aef\u53e3&#xff0c;\u540c\u4e0a<\/td>\n<\/tr>\n<tr>\n<td>PostgreSQL<\/td>\n<td>5432<\/td>\n<td>15432<\/td>\n<td>\u6539\u4e3a\u975e\u6807\u51c6\u7aef\u53e3<\/td>\n<\/tr>\n<tr>\n<td>Redis<\/td>\n<td>6379<\/td>\n<td>16379<\/td>\n<td>\u6539\u4e3a\u975e\u6807\u51c6\u7aef\u53e3<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Nginx \u7684 80\/443 \u7aef\u53e3\u4fdd\u7559\u9ed8\u8ba4\u503c&#xff0c;\u662f\u56e0\u4e3a\u5b83\u4eec\u662f HTTP\/HTTPS \u7684\u6807\u51c6\u7aef\u53e3\u3002\u5982\u679c\u6539\u4e3a\u975e\u6807\u51c6\u7aef\u53e3&#xff0c;\u7528\u6237\u6bcf\u6b21\u8bbf\u95ee\u90fd\u9700\u8981\u5728 URL \u4e2d\u624b\u52a8\u8f93\u5165\u7aef\u53e3\u53f7&#xff08;\u5982 http:\/\/example.com:8080&#xff09;&#xff0c;\u4e25\u91cd\u5f71\u54cd\u4f7f\u7528\u4f53\u9a8c\u3002<\/p>\n<p>\u4fee\u6539\u540e\u7684 Docker Compose \u7aef\u53e3\u914d\u7f6e&#xff1a;<\/p>\n<p><span class=\"token comment\"># PostgreSQL<\/span><br \/>\n<span class=\"token key atrule\">ports<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token string\">&#034;15432:5432&#034;<\/span>    <span class=\"token comment\"># \u5916\u90e8\u7528 15432 \u8fde\u63a5&#xff0c;\u5bb9\u5668\u5185\u4ecd\u662f 5432<\/span><\/p>\n<p><span class=\"token comment\"># Redis<\/span><br \/>\n<span class=\"token key atrule\">ports<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token string\">&#034;16379:6379&#034;<\/span>    <span class=\"token comment\"># \u5916\u90e8\u7528 16379 \u8fde\u63a5&#xff0c;\u5bb9\u5668\u5185\u4ecd\u662f 6379<\/span><\/p>\n<p><span class=\"token comment\"># Nginx<\/span><br \/>\n<span class=\"token key atrule\">ports<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token string\">&#034;80:80&#034;<\/span>         <span class=\"token comment\"># \u4fdd\u6301\u6807\u51c6\u7aef\u53e3<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token string\">&#034;443:443&#034;<\/span><\/p>\n<p>\u5bb9\u5668\u4e4b\u95f4\u901a\u8fc7 Docker \u5185\u90e8\u7684 backend \u6865\u63a5\u7f51\u7edc\u901a\u4fe1\u65f6&#xff0c;\u4ecd\u7136\u4f7f\u7528\u9ed8\u8ba4\u7aef\u53e3&#xff08;5432\u30016379&#xff09;&#xff0c;\u4e92\u4e0d\u5f71\u54cd\u3002\u5bbf\u4e3b\u673a\u4e0a\u7684 JDK \u5e94\u7528\u8fde\u63a5\u6570\u636e\u5e93\u65f6&#xff0c;\u4f7f\u7528\u6620\u5c04\u540e\u7684\u7aef\u53e3&#xff08;15432\u300116379&#xff09;\u901a\u8fc7 localhost \u8bbf\u95ee\u3002<\/p>\n<h5>\u8fde\u63a5\u547d\u4ee4\u793a\u4f8b<\/h5>\n<p>\u4fee\u6539\u7aef\u53e3\u540e&#xff0c;\u8fde\u63a5\u547d\u4ee4\u4e5f\u9700\u8981\u76f8\u5e94\u8c03\u6574&#xff1a;<\/p>\n<p><span class=\"token comment\"># \u8fde\u63a5 PostgreSQL<\/span><br \/>\n<span class=\"token function\">docker<\/span> <span class=\"token builtin class-name\">exec<\/span> <span class=\"token parameter variable\">-it<\/span> postgres psql <span class=\"token parameter variable\">-U<\/span> myuser <span class=\"token parameter variable\">-d<\/span> myapp <span class=\"token parameter variable\">-p<\/span> <span class=\"token number\">15432<\/span><\/p>\n<p><span class=\"token comment\"># \u8fde\u63a5 Redis<\/span><br \/>\nredis-cli <span class=\"token parameter variable\">-h<\/span> localhost <span class=\"token parameter variable\">-p<\/span> <span class=\"token number\">16379<\/span> <span class=\"token parameter variable\">-a<\/span> YourPassword<\/p>\n<h5>\u66f4\u5f7b\u5e95\u7684\u5b89\u5168\u65b9\u6848&#xff1a;\u4e0d\u66b4\u9732\u7aef\u53e3<\/h5>\n<p>\u5982\u679c Redis \u4ec5\u7528\u4e8e\u672c\u673a JDK \u5e94\u7528\u7684\u7f13\u5b58&#xff0c;\u6839\u672c\u4e0d\u9700\u8981\u5bf9\u5916\u66b4\u9732\u7aef\u53e3\u3002\u5728 Docker Compose \u4e2d\u5220\u9664 ports \u914d\u7f6e&#xff0c;Redis \u53ea\u80fd\u88ab\u540c backend \u7f51\u7edc\u4e0b\u7684\u5bb9\u5668\u548c\u5bbf\u4e3b\u673a\u8bbf\u95ee&#xff0c;\u516c\u7f51\u5b8c\u5168\u4e0d\u53ef\u8fbe\u3002\u8fd9\u6bd4\u6539\u7aef\u53e3\u66f4\u5b89\u5168&#xff0c;\u56e0\u4e3a\u4e0d\u5b58\u5728\u4efb\u4f55\u5916\u90e8\u5165\u53e3\u3002<\/p>\n<p>\u540c\u6837&#xff0c;\u5982\u679c PostgreSQL \u53ea\u4f9b\u672c\u673a\u5e94\u7528\u4f7f\u7528&#xff0c;\u5b89\u5168\u7ec4\u4e2d\u53ef\u4ee5\u5173\u95ed 15432 \u7684\u516c\u7f51\u5165\u7ad9\u89c4\u5219&#xff0c;\u53ea\u5141\u8bb8\u5185\u7f51 IP \u6216\u672c\u673a\u8bbf\u95ee\u3002<\/p>\n<h4>2. \u5b89\u88c5 fail2ban<\/h4>\n<h5>fail2ban \u662f\u4ec0\u4e48<\/h5>\n<p>fail2ban \u662f\u4e00\u4e2a\u5165\u4fb5\u9632\u5fa1\u5de5\u5177&#xff0c;\u5b83\u76d1\u63a7\u7cfb\u7edf\u65e5\u5fd7\u6587\u4ef6&#xff0c;\u5f53\u68c0\u6d4b\u5230\u67d0\u4e2a IP \u5728\u6307\u5b9a\u65f6\u95f4\u7a97\u53e3\u5185\u7684\u5931\u8d25\u767b\u5f55\u6b21\u6570\u8d85\u8fc7\u9608\u503c\u65f6&#xff0c;\u81ea\u52a8\u901a\u8fc7\u9632\u706b\u5899\u89c4\u5219&#xff08;iptables\/nftables&#xff09;\u5c06\u8be5 IP \u5c01\u7981\u4e00\u6bb5\u65f6\u95f4\u3002<\/p>\n<p>\u7b80\u5355\u6765\u8bf4&#xff0c;fail2ban \u7684\u5de5\u4f5c\u6d41\u7a0b\u662f&#xff1a;<\/p>\n<p>\u653b\u51fb\u8005\u5c1d\u8bd5\u8fde\u63a5 \u2192 \u8fde\u63a5\u5931\u8d25\u88ab\u8bb0\u5f55\u5230\u65e5\u5fd7 \u2192 fail2ban \u5206\u6790\u65e5\u5fd7<br \/>\n\u2192 \u53d1\u73b0\u540c\u4e00 IP \u5931\u8d25\u6b21\u6570\u8d85\u8fc7\u9608\u503c \u2192 \u8c03\u7528\u9632\u706b\u5899\u5c01\u7981\u8be5 IP \u2192 \u5c01\u7981\u5230\u671f\u540e\u81ea\u52a8\u89e3\u5c01<\/p>\n<h5>\u662f\u5426\u5fc5\u987b\u5b89\u88c5<\/h5>\n<p>\u5ba2\u89c2\u8bc4\u4ef7&#xff0c;fail2ban \u4e0d\u662f\u5fc5\u987b\u5b89\u88c5\u7684&#xff0c;\u4f46\u5b83\u662f\u4f4e\u6210\u672c\u9ad8\u6536\u76ca\u7684\u5b89\u5168\u52a0\u56fa\u624b\u6bb5\u3002<\/p>\n<p>\u4e0d\u88c5 fail2ban \u4e5f\u5b89\u5168\u7684\u6761\u4ef6&#xff1a;<\/p>\n<p>\u5982\u679c\u4f60\u5df2\u7ecf\u505a\u597d\u4e86\u4ee5\u4e0b\u5168\u90e8\u63aa\u65bd&#xff0c;\u5b89\u5168\u7ea7\u522b\u5df2\u7ecf\u8db3\u591f&#xff1a;<\/p>\n<ul>\n<li>\u4f7f\u7528 16 \u4f4d\u4ee5\u4e0a\u7684\u968f\u673a\u5f3a\u5bc6\u7801&#xff08;\u5927\u5c0f\u5199\u5b57\u6bcd &#043; \u6570\u5b57 &#043; \u7279\u6b8a\u5b57\u7b26\u6df7\u5408&#xff09;<\/li>\n<li>\u5bf9\u5916\u7aef\u53e3\u5df2\u6539\u4e3a\u975e\u6807\u51c6\u503c&#xff08;15432\/16379&#xff09;<\/li>\n<li>\u4e91\u4e3b\u673a\u5b89\u5168\u7ec4\u53ea\u5141\u8bb8\u7279\u5b9a IP \u8bbf\u95ee\u6570\u636e\u5e93\u7aef\u53e3<\/li>\n<li>\u6570\u636e\u5e93\u4e0d\u5bf9\u5916\u5f00\u653e&#xff0c;\u4ec5\u4f9b\u672c\u673a\u6216\u5185\u7f51\u8bbf\u95ee<\/li>\n<\/ul>\n<p>\u5b89\u88c5 fail2ban \u7684\u589e\u91cf\u4ef7\u503c&#xff1a;<\/p>\n<table>\n<tr>\u7ef4\u5ea6\u4e0d\u88c5\u88c5\u4e86<\/tr>\n<tbody>\n<tr>\n<td>\u66b4\u529b\u7834\u89e3\u4e0a\u9650<\/td>\n<td>\u653b\u51fb\u8005\u53ef\u65e0\u9650\u5c1d\u8bd5<\/td>\n<td>5 \u6b21\u5931\u8d25\u5373\u5c01\u7981 1 \u5c0f\u65f6<\/td>\n<\/tr>\n<tr>\n<td>\u7cfb\u7edf\u8d44\u6e90\u6d88\u8017<\/td>\n<td>\u653b\u51fb\u6d41\u91cf\u6301\u7eed\u6d88\u8017\u8fde\u63a5\u6570\u548c\u65e5\u5fd7\u7a7a\u95f4<\/td>\n<td>\u5c01\u7981\u540e\u653b\u51fb\u6d41\u91cf\u5728\u9632\u706b\u5899\u5c42\u88ab\u4e22\u5f03<\/td>\n<\/tr>\n<tr>\n<td>\u65e5\u5fd7\u566a\u97f3<\/td>\n<td>\u5931\u8d25\u8fde\u63a5\u8bb0\u5f55\u6301\u7eed\u5237\u5c4f<\/td>\n<td>\u5c01\u7981\u540e\u65e5\u5fd7\u91cf\u5927\u5e45\u51cf\u5c11<\/td>\n<\/tr>\n<tr>\n<td>\u7cfb\u7edf\u5f00\u9500<\/td>\n<td>\u96f6<\/td>\n<td>\u7ea6 10-30MB \u5185\u5b58&#xff0c;CPU \u53ef\u5ffd\u7565<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5bf9\u4e8e\u6570\u636e\u5e93\u9700\u8981\u5bf9\u5916\u5f00\u653e\u7684\u573a\u666f&#xff08;\u6bd4\u5982\u8fdc\u7a0b\u5f00\u53d1\u3001\u591a\u670d\u52a1\u5668\u534f\u4f5c&#xff09;&#xff0c;\u5b89\u88c5 fail2ban \u662f\u503c\u5f97\u7684\u300210-30MB \u7684\u5185\u5b58\u4ee3\u4ef7\u6362\u6765\u66b4\u529b\u7834\u89e3\u7684\u4e3b\u52a8\u9632\u5fa1&#xff0c;\u6027\u4ef7\u6bd4\u5f88\u9ad8\u3002\u5982\u679c\u6570\u636e\u5e93\u53ea\u4f9b\u672c\u673a\u4f7f\u7528\u4e14\u5b89\u5168\u7ec4\u5df2\u5173\u95ed\u5bf9\u5e94\u7aef\u53e3\u7684\u516c\u7f51\u8bbf\u95ee&#xff0c;fail2ban \u7684\u4f5c\u7528\u5c31\u4e0d\u5927\u4e86\u3002<\/p>\n<h5>\u5b89\u88c5\u4e0e\u914d\u7f6e<\/h5>\n<p><span class=\"token comment\"># \u5b89\u88c5<\/span><br \/>\ndnf <span class=\"token function\">install<\/span> <span class=\"token parameter variable\">-y<\/span> fail2ban<br \/>\nsystemctl <span class=\"token builtin class-name\">enable<\/span> fail2ban<br \/>\nsystemctl start fail2ban<\/p>\n<p>\u914d\u7f6e\u6587\u4ef6 \/etc\/fail2ban\/jail.local&#xff0c;\u9488\u5bf9\u4e0d\u540c\u670d\u52a1\u8bbe\u7f6e\u4e0d\u540c\u7684\u9632\u62a4\u7b56\u7565&#xff1a;<\/p>\n<p>[DEFAULT]<br \/>\nbantime &#061; 3600<br \/>\nfindtime &#061; 300<br \/>\nmaxretry &#061; 5<br \/>\nignoreip &#061; 127.0.0.1\/8<\/p>\n<p>[sshd]<br \/>\nenabled &#061; true<br \/>\nport &#061; ssh<br \/>\nlogpath &#061; %(sshd_log)s<br \/>\nmaxretry &#061; 3<br \/>\nbantime &#061; 86400<\/p>\n<p>[postgres-docker]<br \/>\nenabled &#061; true<br \/>\nport &#061; 15432<br \/>\nlogpath &#061; \/var\/log\/fail2ban-postgres.log<br \/>\nmaxretry &#061; 5<br \/>\nfindtime &#061; 300<br \/>\nbantime &#061; 3600<\/p>\n<p>[redis-docker]<br \/>\nenabled &#061; true<br \/>\nport &#061; 16379<br \/>\nlogpath &#061; \/var\/log\/fail2ban-redis.log<br \/>\nmaxretry &#061; 5<br \/>\nfindtime &#061; 300<br \/>\nbantime &#061; 3600<\/p>\n<p>\u5404\u9879\u53c2\u6570\u7684\u542b\u4e49&#xff1a;<\/p>\n<ul>\n<li>bantime&#xff1a;\u5c01\u7981\u65f6\u957f&#xff08;\u79d2&#xff09;&#xff0c;3600 \u79d2 &#061; 1 \u5c0f\u65f6<\/li>\n<li>findtime&#xff1a;\u68c0\u6d4b\u65f6\u95f4\u7a97\u53e3&#xff08;\u79d2&#xff09;&#xff0c;300 \u79d2 &#061; 5 \u5206\u949f<\/li>\n<li>maxretry&#xff1a;\u65f6\u95f4\u7a97\u53e3\u5185\u5141\u8bb8\u7684\u6700\u5927\u5931\u8d25\u6b21\u6570<\/li>\n<li>ignoreip&#xff1a;\u767d\u540d\u5355 IP&#xff0c;\u6c38\u8fdc\u4e0d\u88ab\u5c01\u7981<\/li>\n<\/ul>\n<p>SSH \u670d\u52a1\u7684\u9632\u62a4\u66f4\u4e25\u683c&#xff1a;3 \u6b21\u5931\u8d25\u5373\u5c01\u7981 24 \u5c0f\u65f6\u3002\u56e0\u4e3a SSH \u662f\u653b\u51fb\u8005\u6700\u5e38\u626b\u63cf\u548c\u7206\u7834\u7684\u670d\u52a1&#xff0c;\u5fc5\u987b\u8bbe\u7f6e\u66f4\u4f4e\u7684\u9608\u503c\u3002<\/p>\n<h5>\u9a8c\u8bc1 fail2ban \u8fd0\u884c\u72b6\u6001<\/h5>\n<p><span class=\"token comment\"># \u67e5\u770b\u6240\u6709 jail \u7684\u72b6\u6001<\/span><br \/>\nfail2ban-client status<\/p>\n<p><span class=\"token comment\"># \u67e5\u770b SSH jail \u7684\u8be6\u7ec6\u4fe1\u606f<\/span><br \/>\nfail2ban-client status sshd<\/p>\n<p><span class=\"token comment\"># \u624b\u52a8\u89e3\u5c01\u67d0\u4e2a IP<\/span><br \/>\nfail2ban-client <span class=\"token builtin class-name\">set<\/span> sshd unbanip <span class=\"token number\">1.2<\/span>.3.4<\/p>\n<h5>\u4e0e PostgreSQL \u914d\u5408\u4f7f\u7528<\/h5>\n<p>fail2ban \u8981\u68c0\u6d4b PostgreSQL \u7684\u66b4\u529b\u7834\u89e3&#xff0c;\u9700\u8981 PostgreSQL \u5c06\u5931\u8d25\u7684\u8fde\u63a5\u5c1d\u8bd5\u8bb0\u5f55\u5230\u65e5\u5fd7\u4e2d\u3002\u5728 PostgreSQL \u7684\u914d\u7f6e\u4e2d\u5f00\u542f\u4ee5\u4e0b\u53c2\u6570&#xff1a;<\/p>\n<p>log_connections &#061; on<br \/>\nlog_disconnections &#061; on<br \/>\nlog_line_prefix &#061; &#039;%t [%p]: [%d] %u &#039;<\/p>\n<p>\u65e5\u5fd7\u683c\u5f0f\u4e2d\u5305\u542b\u7528\u6237\u540d\u548c\u65f6\u95f4\u6233&#xff0c;fail2ban \u7684 filter \u89c4\u5219\u53ef\u4ee5\u4ece\u65e5\u5fd7\u4e2d\u63d0\u53d6\u5931\u8d25\u8fde\u63a5\u7684 IP \u5730\u5740\u3002<\/p>\n<h5>\u4e0e Redis \u914d\u5408\u4f7f\u7528<\/h5>\n<p>Redis \u672c\u8eab\u7684\u8ba4\u8bc1\u5931\u8d25\u4e0d\u4f1a\u4ea7\u751f\u8be6\u7ec6\u7684\u65e5\u5fd7\u8f93\u51fa&#xff0c;fail2ban \u5bf9 Redis \u7684\u9632\u62a4\u66f4\u591a\u4f9d\u8d56\u7aef\u53e3\u5c42\u9762\u7684\u8fde\u63a5\u5931\u8d25\u68c0\u6d4b\u3002\u5f53\u653b\u51fb\u8005\u4f7f\u7528\u9519\u8bef\u7684\u5bc6\u7801\u6216\u65e0\u5bc6\u7801\u5c1d\u8bd5\u8fde\u63a5 Redis \u65f6&#xff0c;\u8fde\u63a5\u5c42\u9762\u7684\u5f02\u5e38\u884c\u4e3a\u4f1a\u88ab fail2ban \u7684\u7aef\u53e3\u76d1\u63a7\u6355\u83b7\u3002<\/p>\n<h4>3. \u5176\u4ed6\u5b89\u5168\u52a0\u56fa\u63aa\u65bd<\/h4>\n<h5>PostgreSQL \u8ba4\u8bc1\u5ef6\u8fdf<\/h5>\n<p>PostgreSQL 16 \u652f\u6301 auth_delay \u6269\u5c55&#xff0c;\u6bcf\u6b21\u8ba4\u8bc1\u5931\u8d25\u540e\u5f3a\u5236\u5ef6\u8fdf\u6307\u5b9a\u6beb\u79d2\u6570&#xff1a;<\/p>\n<p>auth_delay.milliseconds &#061; 3000<\/p>\n<p>\u8fd9\u4e2a\u8bbe\u7f6e\u7684\u6548\u679c\u662f&#xff1a;\u6bcf\u6b21\u5bc6\u7801\u8f93\u5165\u9519\u8bef\u540e&#xff0c;\u670d\u52a1\u5668\u6545\u610f\u7b49\u5f85 3 \u79d2\u624d\u8fd4\u56de\u9519\u8bef\u4fe1\u606f\u3002\u5bf9\u4e8e\u66b4\u529b\u7834\u89e3\u5de5\u5177\u6765\u8bf4&#xff0c;\u8fd9\u610f\u5473\u7740\u539f\u672c\u6bcf\u79d2\u53ef\u4ee5\u5c1d\u8bd5 100 \u6b21\u7684\u901f\u7387\u88ab\u964d\u4f4e\u5230\u6bcf 3 \u79d2 1 \u6b21&#xff0c;\u7834\u89e3\u6210\u672c\u63d0\u9ad8\u4e86\u6570\u767e\u500d\u3002<\/p>\n<h5>Redis \u5371\u9669\u547d\u4ee4\u7981\u7528<\/h5>\n<p>Redis \u63d0\u4f9b\u4e86\u4e00\u4e9b\u6781\u5176\u5371\u9669\u7684\u547d\u4ee4&#xff08;\u5982 FLUSHALL\u3001CONFIG&#xff09;&#xff0c;\u4e00\u65e6\u88ab\u653b\u51fb\u8005\u5229\u7528&#xff0c;\u53ef\u4ee5\u77ac\u95f4\u6e05\u7a7a\u6240\u6709\u6570\u636e\u6216\u8bfb\u53d6\u670d\u52a1\u5668\u914d\u7f6e\u3002\u901a\u8fc7 rename-command \u5c06\u8fd9\u4e9b\u547d\u4ee4\u7981\u7528\u6216\u91cd\u547d\u540d&#xff1a;<\/p>\n<p># \u5b8c\u5168\u7981\u7528<br \/>\nrename-command FLUSHALL &#034;&#034;<br \/>\nrename-command FLUSHDB &#034;&#034;<br \/>\nrename-command CONFIG &#034;&#034;<br \/>\nrename-command SHUTDOWN &#034;&#034;<\/p>\n<p># \u91cd\u547d\u540d&#xff08;\u53ea\u6709\u77e5\u9053\u65b0\u540d\u5b57\u7684\u4eba\u624d\u80fd\u4f7f\u7528&#xff09;<br \/>\nrename-command KEYS &#034;ADMIN_KEYS&#034;<br \/>\nrename-command EVAL &#034;ADMIN_EVAL&#034;<\/p>\n<p>\u7981\u7528\u540e&#xff0c;\u5373\u4f7f\u653b\u51fb\u8005\u83b7\u5f97\u4e86 Redis \u7684\u8bbf\u95ee\u6743\u9650&#xff0c;\u4e5f\u65e0\u6cd5\u6267\u884c\u8fd9\u4e9b\u9ad8\u5371\u64cd\u4f5c\u3002<\/p>\n<h5>\u5bc6\u7801\u7b56\u7565<\/h5>\n<p>\u5f3a\u5bc6\u7801\u662f\u5b89\u5168\u7684\u57fa\u77f3\u3002\u5728\u90e8\u7f72\u811a\u672c\u4e2d&#xff0c;\u5bc6\u7801\u7559\u7a7a\u65f6\u4f1a\u81ea\u52a8\u751f\u6210 32 \u4f4d\u968f\u673a\u5f3a\u5bc6\u7801&#xff1a;<\/p>\n<p>openssl rand <span class=\"token parameter variable\">-base64<\/span> <span class=\"token number\">32<\/span> <span class=\"token operator\">|<\/span> <span class=\"token function\">tr<\/span> <span class=\"token parameter variable\">-dc<\/span> <span class=\"token string\">&#039;A-Za-z0-9!&#064;#$%^&amp;*()_&#043;-&#061;&#039;<\/span> <span class=\"token operator\">|<\/span> <span class=\"token function\">head<\/span> <span class=\"token parameter variable\">-c<\/span> <span class=\"token number\">32<\/span><\/p>\n<p>\u751f\u6210\u7684\u5bc6\u7801\u5305\u542b\u5927\u5c0f\u5199\u5b57\u6bcd\u3001\u6570\u5b57\u548c\u7279\u6b8a\u5b57\u7b26\u7684\u7ec4\u5408\u3002\u811a\u672c\u8fd8\u4f1a\u8fdb\u884c\u5bc6\u7801\u5f3a\u5ea6\u68c0\u67e5&#xff0c;\u5982\u679c\u624b\u52a8\u6307\u5b9a\u7684\u5bc6\u7801\u957f\u5ea6\u4e0d\u8db3 16 \u4f4d\u6216\u672a\u5305\u542b\u5927\u5c0f\u5199\u5b57\u6bcd\u548c\u6570\u5b57\u7684\u7ec4\u5408&#xff0c;\u4f1a\u53d1\u51fa\u8b66\u544a\u3002<\/p>\n<p>\u5bc6\u7801\u901a\u8fc7 .env \u6587\u4ef6\u4f20\u9012\u7ed9 Docker Compose&#xff0c;\u6587\u4ef6\u6743\u9650\u8bbe\u4e3a chmod 600&#xff0c;\u4ec5 root \u7528\u6237\u53ef\u8bfb\u3002<\/p>\n<hr \/>\n<h3>\u56db\u3001\u603b\u7ed3<\/h3>\n<h4>\u67b6\u6784\u56de\u987e<\/h4>\n<p>\u672c\u6587\u5728 2\u68384GB \u7684 OpenCloudOS 9 \u4e91\u4e3b\u673a\u4e0a&#xff0c;\u91c7\u7528 \u201cJDK \u539f\u751f &#043; \u6570\u636e\u5e93\/\u7f13\u5b58\/\u53cd\u5411\u4ee3\u7406 Docker \u5316\u201d \u7684\u6df7\u5408\u90e8\u7f72\u67b6\u6784&#xff0c;\u90e8\u7f72\u4e86\u4ee5\u4e0b\u670d\u52a1\u6808&#xff1a;<\/p>\n<table>\n<tr>\u670d\u52a1\u90e8\u7f72\u65b9\u5f0f\u5bf9\u5916\u7aef\u53e3\u5185\u5b58\u5206\u914d<\/tr>\n<tbody>\n<tr>\n<td>JDK 21 \u5e94\u7528<\/td>\n<td>\u539f\u751f\u5b89\u88c5<\/td>\n<td>\u81ea\u5b9a\u4e49<\/td>\n<td>500MB-1.5GB<\/td>\n<\/tr>\n<tr>\n<td>PostgreSQL 16 &#043; PostGIS 3.5<\/td>\n<td>Docker<\/td>\n<td>15432<\/td>\n<td>\u5bb9\u5668\u4e0a\u9650 2GB<\/td>\n<\/tr>\n<tr>\n<td>Redis 7<\/td>\n<td>Docker<\/td>\n<td>16379<\/td>\n<td>\u5bb9\u5668\u4e0a\u9650 256MB<\/td>\n<\/tr>\n<tr>\n<td>Nginx<\/td>\n<td>Docker<\/td>\n<td>80\/443<\/td>\n<td>\u5bb9\u5668\u4e0a\u9650 128MB<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5404\u670d\u52a1\u7684\u603b\u5185\u5b58\u5360\u7528\u63a7\u5236\u5728 2.4-2.9GB&#xff0c;\u5728 4GB \u603b\u91cf\u4e0b\u7559\u6709 1.1-1.6GB \u7684\u4f59\u91cf&#xff0c;\u53ef\u4ee5\u5e94\u5bf9\u4e1a\u52a1\u5cf0\u503c\u3002<\/p>\n<h4>\u5b89\u5168\u9632\u7ebf\u603b\u7ed3<\/h4>\n<p>\u5b89\u5168\u4e0d\u662f\u5355\u4e00\u624b\u6bb5\u80fd\u89e3\u51b3\u7684&#xff0c;\u800c\u662f\u591a\u5c42\u9632\u5fa1\u7684\u53e0\u52a0\u6548\u679c&#xff1a;<\/p>\n<table>\n<tr>\u9632\u7ebf\u63aa\u65bd\u9632\u5fa1\u76ee\u6807<\/tr>\n<tbody>\n<tr>\n<td>\u7b2c\u4e00\u5c42<\/td>\n<td>\u975e\u6807\u51c6\u7aef\u53e3&#xff08;15432\/16379&#xff09;<\/td>\n<td>\u5c4f\u853d 99% \u81ea\u52a8\u5316\u626b\u63cf<\/td>\n<\/tr>\n<tr>\n<td>\u7b2c\u4e8c\u5c42<\/td>\n<td>32 \u4f4d\u968f\u673a\u5f3a\u5bc6\u7801<\/td>\n<td>\u9632\u66b4\u529b\u7834\u89e3\u548c\u5b57\u5178\u653b\u51fb<\/td>\n<\/tr>\n<tr>\n<td>\u7b2c\u4e09\u5c42<\/td>\n<td>PostgreSQL \u8ba4\u8bc1\u5ef6\u8fdf 3 \u79d2<\/td>\n<td>\u964d\u4f4e\u66b4\u529b\u7834\u89e3\u901f\u7387<\/td>\n<\/tr>\n<tr>\n<td>\u7b2c\u56db\u5c42<\/td>\n<td>Redis \u5371\u9669\u547d\u4ee4\u7981\u7528<\/td>\n<td>\u9632\u6b62\u6743\u9650\u88ab\u5229\u7528\u540e\u7684\u7834\u574f<\/td>\n<\/tr>\n<tr>\n<td>\u7b2c\u4e94\u5c42<\/td>\n<td>fail2ban \u81ea\u52a8\u5c01\u7981<\/td>\n<td>\u68c0\u6d4b\u5e76\u963b\u65ad\u6301\u7eed\u653b\u51fb<\/td>\n<\/tr>\n<tr>\n<td>\u7b2c\u516d\u5c42<\/td>\n<td>Nginx \u8bf7\u6c42\u901f\u7387\u9650\u5236<\/td>\n<td>\u9632 CC \u653b\u51fb<\/td>\n<\/tr>\n<tr>\n<td>\u7b2c\u4e03\u5c42<\/td>\n<td>.env \u6587\u4ef6\u6743\u9650 600<\/td>\n<td>\u9632\u5bc6\u7801\u6587\u4ef6\u6cc4\u9732<\/td>\n<\/tr>\n<tr>\n<td>\u7b2c\u516b\u5c42<\/td>\n<td>\u4e91\u4e3b\u673a\u5b89\u5168\u7ec4\u767d\u540d\u5355<\/td>\n<td>\u7f51\u7edc\u5c42\u63a7\u5236\u8bbf\u95ee\u6765\u6e90<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u6bcf\u4e00\u5c42\u5355\u72ec\u6765\u770b\u90fd\u53ef\u80fd\u88ab\u7ed5\u8fc7&#xff0c;\u4f46\u516b\u5c42\u53e0\u52a0\u540e&#xff0c;\u653b\u51fb\u8005\u9700\u8981\u540c\u65f6\u7a81\u7834\u6240\u6709\u9632\u7ebf\u624d\u80fd\u9020\u6210\u5b9e\u9645\u635f\u5bb3&#xff0c;\u6210\u672c\u6781\u9ad8\u3002<\/p>\n<h4>\u8fd0\u7ef4\u5e38\u7528\u547d\u4ee4<\/h4>\n<p><span class=\"token comment\"># \u67e5\u770b\u6240\u6709\u5bb9\u5668\u72b6\u6001<\/span><br \/>\n<span class=\"token builtin class-name\">cd<\/span> \/data\/docker <span class=\"token operator\">&amp;&amp;<\/span> <span class=\"token function\">docker<\/span> compose <span class=\"token function\">ps<\/span><\/p>\n<p><span class=\"token comment\"># \u67e5\u770b\u65e5\u5fd7<\/span><br \/>\n<span class=\"token builtin class-name\">cd<\/span> \/data\/docker <span class=\"token operator\">&amp;&amp;<\/span> <span class=\"token function\">docker<\/span> compose logs <span class=\"token parameter variable\">-f<\/span><\/p>\n<p><span class=\"token comment\"># \u53ea\u770b\u67d0\u4e2a\u670d\u52a1\u7684\u65e5\u5fd7<\/span><br \/>\n<span class=\"token builtin class-name\">cd<\/span> \/data\/docker <span class=\"token operator\">&amp;&amp;<\/span> <span class=\"token function\">docker<\/span> compose logs <span class=\"token parameter variable\">-f<\/span> postgres<\/p>\n<p><span class=\"token comment\"># \u91cd\u542f\u67d0\u4e2a\u670d\u52a1&#xff08;\u4fee\u6539\u914d\u7f6e\u540e&#xff09;<\/span><br \/>\n<span class=\"token builtin class-name\">cd<\/span> \/data\/docker <span class=\"token operator\">&amp;&amp;<\/span> <span class=\"token function\">docker<\/span> compose up <span class=\"token parameter variable\">-d<\/span> postgres<\/p>\n<p><span class=\"token comment\"># \u8fdb\u5165 PostgreSQL<\/span><br \/>\n<span class=\"token function\">docker<\/span> <span class=\"token builtin class-name\">exec<\/span> <span class=\"token parameter variable\">-it<\/span> postgres psql <span class=\"token parameter variable\">-U<\/span> myuser <span class=\"token parameter variable\">-d<\/span> myapp <span class=\"token parameter variable\">-p<\/span> <span class=\"token number\">15432<\/span><\/p>\n<p><span class=\"token comment\"># \u521b\u5efa PostGIS \u6269\u5c55<\/span><br \/>\n<span class=\"token function\">docker<\/span> <span class=\"token builtin class-name\">exec<\/span> <span class=\"token parameter variable\">-it<\/span> postgres psql <span class=\"token parameter variable\">-U<\/span> myuser <span class=\"token parameter variable\">-d<\/span> myapp <span class=\"token parameter variable\">-p<\/span> <span class=\"token number\">15432<\/span> <span class=\"token punctuation\">\\\\<\/span><br \/>\n  <span class=\"token parameter variable\">-c<\/span> <span class=\"token string\">&#039;CREATE EXTENSION IF NOT EXISTS postgis;&#039;<\/span><\/p>\n<p><span class=\"token comment\"># \u67e5\u770b fail2ban \u5c01\u7981\u72b6\u6001<\/span><br \/>\nfail2ban-client status<\/p>\n<p><span class=\"token comment\"># \u67e5\u770b\u670d\u52a1\u5668\u8d44\u6e90\u5360\u7528<\/span><br \/>\n<span class=\"token function\">docker<\/span> stats<\/p>\n<h4>JDK \u5e94\u7528\u8fde\u63a5\u914d\u7f6e<\/h4>\n<p>\u5bbf\u4e3b\u673a\u4e0a\u539f\u751f\u8fd0\u884c\u7684 Java \u5e94\u7528&#xff0c;\u901a\u8fc7 localhost \u548c\u6620\u5c04\u540e\u7684\u7aef\u53e3\u8fde\u63a5 Docker \u4e2d\u7684\u670d\u52a1&#xff1a;<\/p>\n<p># PostgreSQL<br \/>\nspring.datasource.url&#061;jdbc:postgresql:\/\/localhost:15432\/myapp<br \/>\nspring.datasource.username&#061;myuser<br \/>\nspring.datasource.password&#061;\u751f\u6210\u7684\u5f3a\u5bc6\u7801<\/p>\n<p># Redis<br \/>\nspring.redis.host&#061;localhost<br \/>\nspring.redis.port&#061;16379<br \/>\nspring.redis.password&#061;\u751f\u6210\u7684\u5f3a\u5bc6\u7801<\/p>\n<p>\u901a\u8fc7 systemd \u7ba1\u7406 Java \u5e94\u7528\u670d\u52a1\u65f6&#xff0c;\u8bbe\u7f6e After&#061;docker.service \u786e\u4fdd Docker \u670d\u52a1\u5148\u542f\u52a8&#xff0c;\u907f\u514d\u5e94\u7528\u542f\u52a8\u65f6\u6570\u636e\u5e93\u5c1a\u672a\u5c31\u7eea\u3002<\/p>\n<h4>\u6269\u5c55\u65b0\u7aef\u53e3\u7684\u64cd\u4f5c\u6d41\u7a0b<\/h4>\n<p>\u5f53\u9700\u8981\u901a\u8fc7 Nginx \u66b4\u9732\u65b0\u7684\u4e1a\u52a1\u7aef\u53e3\u65f6&#xff08;\u5982 8086&#xff09;&#xff0c;\u64cd\u4f5c\u6d41\u7a0b\u5982\u4e0b&#xff1a;<\/p>\n<li>\u5728 Docker Compose \u7684 nginx \u670d\u52a1 ports \u6bb5\u6dfb\u52a0 &#034;8086:8086&#034;<\/li>\n<li>\u5728 \/data\/docker\/nginx\/conf.d\/ \u4e0b\u65b0\u5efa\u914d\u7f6e\u6587\u4ef6&#xff08;\u5982 api.conf&#xff09;<\/li>\n<li>\u6267\u884c cd \/data\/docker &amp;&amp; docker compose up -d nginx \u91cd\u542f Nginx \u5bb9\u5668<\/li>\n<p>\u6574\u4e2a\u8fc7\u7a0b\u4e0d\u9700\u8981\u505c\u6b62\u5176\u4ed6\u670d\u52a1&#xff0c;PostgreSQL \u548c Redis \u4fdd\u6301\u6b63\u5e38\u8fd0\u884c\u4e0d\u53d7\u5f71\u54cd\u3002<\/p>\n<h4>\u4e00\u952e\u90e8\u7f72\u811a\u672c<\/h4>\n<p>\u672c\u6587\u6d89\u53ca\u7684\u6240\u6709\u914d\u7f6e&#xff08;Docker \u5b89\u88c5\u3001\u670d\u52a1\u90e8\u7f72\u3001\u5b89\u5168\u52a0\u56fa\u3001fail2ban \u914d\u7f6e&#xff09;\u5df2\u96c6\u6210\u5230\u4e00\u4e2a bash \u811a\u672c\u4e2d\u3002\u811a\u672c\u7279\u70b9&#xff1a;<\/p>\n<ul>\n<li>\u81ea\u52a8\u68c0\u6d4b\u5e76\u5b89\u88c5 Docker&#xff08;\u5982\u672a\u5b89\u88c5&#xff09;<\/li>\n<li>\u5bc6\u7801\u7559\u7a7a\u65f6\u81ea\u52a8\u751f\u6210 32 \u4f4d\u968f\u673a\u5f3a\u5bc6\u7801<\/li>\n<li>\u5185\u7f6e\u5bc6\u7801\u5f3a\u5ea6\u68c0\u67e5<\/li>\n<li>\u81ea\u52a8\u5b89\u88c5\u914d\u7f6e fail2ban<\/li>\n<li>PostgreSQL\/Redis\/Nginx \u5168\u91cf\u5b89\u5168\u52a0\u56fa<\/li>\n<li>\u81ea\u52a8\u521b\u5efa\u6570\u636e\u76ee\u5f55\u5e76\u8bbe\u7f6e\u6b63\u786e\u6743\u9650<\/li>\n<li>\u751f\u6210 .env \u6587\u4ef6\u5e76\u9650\u5236\u4e3a chmod 600<\/li>\n<li>\u90e8\u7f72\u5b8c\u6210\u540e\u8f93\u51fa\u8fde\u63a5\u4fe1\u606f\u548c\u5e38\u7528\u547d\u4ee4<\/li>\n<\/ul>\n<p>\u4ee5 root \u7528\u6237\u76f4\u63a5\u8fd0\u884c\u5373\u53ef\u5b8c\u6210\u5168\u90e8\u90e8\u7f72&#xff0c;\u9002\u5408\u5728\u751f\u4ea7\u73af\u5883\u4e2d\u5feb\u901f\u642d\u5efa\u6807\u51c6\u5316\u7684\u670d\u52a1\u6808\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4e00\u3001\u524d\u8a00<br \/>\n1. Docker \u7684\u4f18\u52bf<br \/>\n\u5bf9\u4e8e\u4e2d\u5c0f\u578b\u9879\u76ee\u7684\u670d\u52a1\u7aef\u90e8\u7f72&#xff0c;Docker \u5bb9\u5668\u5316\u6280\u672f\u5df2\u7ecf\u6210\u4e3a\u4e8b\u5b9e\u6807\u51c6\u3002\u4e0e\u4f20\u7edf\\&#8221;\u76f4\u63a5\u5728\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u5b89\u88c5\u8f6f\u4ef6\\&#8221;\u7684\u65b9\u5f0f\u76f8\u6bd4&#xff0c;Docker \u5728\u4ee5\u4e0b\u51e0\u4e2a\u7ef4\u5ea6\u5177\u5907\u663e\u8457\u4f18\u52bf\u3002<br \/>\n\u73af\u5883\u4e00\u81f4\u6027\u3002 \u4f20\u7edf\u5b89\u88c5\u65b9\u5f0f\u4e0b&#xff0c;\u5f00\u53d1\u73af\u5883\u4e0e\u751f\u4ea7\u73af\u5883\u7684\u8f6f\u4ef6\u7248\u672c\u3001\u914d\u7f6e\u6587\u4ef6\u8def\u5f84\u3001\u4f9d\u8d56\u5e93\u7248\u672c\u7ecf\u5e38\u5b58\u5728\u7ec6\u5fae\u5dee\u5f02&#xff0c;\u8fd9\u4e9b\u5dee\u5f02\u5f80\u5f80\u662f\\&#8221;\u5728\u6211\u7535\u8111\u4e0a\u80fd\u8dd1\\&#8221;\u8fd9\u79cd\u95ee\u9898\u7684\u6839\u6e90\u3002Docker \u901a\u8fc7\u955c\u50cf\u673a\u5236\u5c06\u8fd0\u884c\u73af\u5883\u6574\u4f53\u6253\u5305&#xff0c;\u5f00\u53d1\u9636\u6bb5\u6d4b\u8bd5\u901a\u8fc7<\/p>\n","protected":false},"author":2,"featured_media":81110,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[9097,27,954,43],"topic":[],"class_list":["post-81113","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-9097","tag-docker","tag-postgresql","tag-43"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>OpenCloudOS 9 \u5c0f\u578b\u670d\u52a1\u5668 Docker \u90e8\u7f72\u5b9e\u6218\uff1aPostgreSQL+PostGIS\u3001Redis\u3001Nginx \u5b89\u5168\u52a0\u56fa\u4e0e\u4e00\u952e\u811a\u672c - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/81113.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OpenCloudOS 9 \u5c0f\u578b\u670d\u52a1\u5668 Docker \u90e8\u7f72\u5b9e\u6218\uff1aPostgreSQL+PostGIS\u3001Redis\u3001Nginx \u5b89\u5168\u52a0\u56fa\u4e0e\u4e00\u952e\u811a\u672c - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u4e00\u3001\u524d\u8a00 1. Docker \u7684\u4f18\u52bf \u5bf9\u4e8e\u4e2d\u5c0f\u578b\u9879\u76ee\u7684\u670d\u52a1\u7aef\u90e8\u7f72&#xff0c;Docker \u5bb9\u5668\u5316\u6280\u672f\u5df2\u7ecf\u6210\u4e3a\u4e8b\u5b9e\u6807\u51c6\u3002\u4e0e\u4f20\u7edf&quot;\u76f4\u63a5\u5728\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u5b89\u88c5\u8f6f\u4ef6&quot;\u7684\u65b9\u5f0f\u76f8\u6bd4&#xff0c;Docker \u5728\u4ee5\u4e0b\u51e0\u4e2a\u7ef4\u5ea6\u5177\u5907\u663e\u8457\u4f18\u52bf\u3002 \u73af\u5883\u4e00\u81f4\u6027\u3002 \u4f20\u7edf\u5b89\u88c5\u65b9\u5f0f\u4e0b&#xff0c;\u5f00\u53d1\u73af\u5883\u4e0e\u751f\u4ea7\u73af\u5883\u7684\u8f6f\u4ef6\u7248\u672c\u3001\u914d\u7f6e\u6587\u4ef6\u8def\u5f84\u3001\u4f9d\u8d56\u5e93\u7248\u672c\u7ecf\u5e38\u5b58\u5728\u7ec6\u5fae\u5dee\u5f02&#xff0c;\u8fd9\u4e9b\u5dee\u5f02\u5f80\u5f80\u662f&quot;\u5728\u6211\u7535\u8111\u4e0a\u80fd\u8dd1&quot;\u8fd9\u79cd\u95ee\u9898\u7684\u6839\u6e90\u3002Docker \u901a\u8fc7\u955c\u50cf\u673a\u5236\u5c06\u8fd0\u884c\u73af\u5883\u6574\u4f53\u6253\u5305&#xff0c;\u5f00\u53d1\u9636\u6bb5\u6d4b\u8bd5\u901a\u8fc7\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/81113.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-24T15:50:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260724155009-6a6389b16ed92.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/81113.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/81113.html\",\"name\":\"OpenCloudOS 9 \u5c0f\u578b\u670d\u52a1\u5668 Docker \u90e8\u7f72\u5b9e\u6218\uff1aPostgreSQL+PostGIS\u3001Redis\u3001Nginx \u5b89\u5168\u52a0\u56fa\u4e0e\u4e00\u952e\u811a\u672c - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-07-24T15:50:11+00:00\",\"dateModified\":\"2026-07-24T15:50:11+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/81113.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/81113.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/81113.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"OpenCloudOS 9 \u5c0f\u578b\u670d\u52a1\u5668 Docker \u90e8\u7f72\u5b9e\u6218\uff1aPostgreSQL+PostGIS\u3001Redis\u3001Nginx \u5b89\u5168\u52a0\u56fa\u4e0e\u4e00\u952e\u811a\u672c\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OpenCloudOS 9 \u5c0f\u578b\u670d\u52a1\u5668 Docker \u90e8\u7f72\u5b9e\u6218\uff1aPostgreSQL+PostGIS\u3001Redis\u3001Nginx \u5b89\u5168\u52a0\u56fa\u4e0e\u4e00\u952e\u811a\u672c - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/81113.html","og_locale":"zh_CN","og_type":"article","og_title":"OpenCloudOS 9 \u5c0f\u578b\u670d\u52a1\u5668 Docker \u90e8\u7f72\u5b9e\u6218\uff1aPostgreSQL+PostGIS\u3001Redis\u3001Nginx \u5b89\u5168\u52a0\u56fa\u4e0e\u4e00\u952e\u811a\u672c - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u4e00\u3001\u524d\u8a00 1. Docker \u7684\u4f18\u52bf \u5bf9\u4e8e\u4e2d\u5c0f\u578b\u9879\u76ee\u7684\u670d\u52a1\u7aef\u90e8\u7f72&#xff0c;Docker \u5bb9\u5668\u5316\u6280\u672f\u5df2\u7ecf\u6210\u4e3a\u4e8b\u5b9e\u6807\u51c6\u3002\u4e0e\u4f20\u7edf\"\u76f4\u63a5\u5728\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u5b89\u88c5\u8f6f\u4ef6\"\u7684\u65b9\u5f0f\u76f8\u6bd4&#xff0c;Docker \u5728\u4ee5\u4e0b\u51e0\u4e2a\u7ef4\u5ea6\u5177\u5907\u663e\u8457\u4f18\u52bf\u3002 \u73af\u5883\u4e00\u81f4\u6027\u3002 \u4f20\u7edf\u5b89\u88c5\u65b9\u5f0f\u4e0b&#xff0c;\u5f00\u53d1\u73af\u5883\u4e0e\u751f\u4ea7\u73af\u5883\u7684\u8f6f\u4ef6\u7248\u672c\u3001\u914d\u7f6e\u6587\u4ef6\u8def\u5f84\u3001\u4f9d\u8d56\u5e93\u7248\u672c\u7ecf\u5e38\u5b58\u5728\u7ec6\u5fae\u5dee\u5f02&#xff0c;\u8fd9\u4e9b\u5dee\u5f02\u5f80\u5f80\u662f\"\u5728\u6211\u7535\u8111\u4e0a\u80fd\u8dd1\"\u8fd9\u79cd\u95ee\u9898\u7684\u6839\u6e90\u3002Docker \u901a\u8fc7\u955c\u50cf\u673a\u5236\u5c06\u8fd0\u884c\u73af\u5883\u6574\u4f53\u6253\u5305&#xff0c;\u5f00\u53d1\u9636\u6bb5\u6d4b\u8bd5\u901a\u8fc7","og_url":"https:\/\/www.wsisp.com\/helps\/81113.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-07-24T15:50:11+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260724155009-6a6389b16ed92.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"8 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/81113.html","url":"https:\/\/www.wsisp.com\/helps\/81113.html","name":"OpenCloudOS 9 \u5c0f\u578b\u670d\u52a1\u5668 Docker \u90e8\u7f72\u5b9e\u6218\uff1aPostgreSQL+PostGIS\u3001Redis\u3001Nginx \u5b89\u5168\u52a0\u56fa\u4e0e\u4e00\u952e\u811a\u672c - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-07-24T15:50:11+00:00","dateModified":"2026-07-24T15:50:11+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/81113.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/81113.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/81113.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"OpenCloudOS 9 \u5c0f\u578b\u670d\u52a1\u5668 Docker \u90e8\u7f72\u5b9e\u6218\uff1aPostgreSQL+PostGIS\u3001Redis\u3001Nginx \u5b89\u5168\u52a0\u56fa\u4e0e\u4e00\u952e\u811a\u672c"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/81113","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=81113"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/81113\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/81110"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=81113"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=81113"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=81113"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=81113"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}