vaadin服務正在執行Last updated
sudo apt update
sudo apt upgrade
// 如果遇到詢問是否要更新，請輸入y(按下y之前也可以先確認有哪些軟體會更新，避免新舊版本的相容性問題)
// 如果系統有提示需要重新啟動，請執行
// sudo rebootjava -versionsudo apt install openjdk-17-jre-headlessjava -version// 更新軟體庫
sudo apt update
// 安裝MariaDB
sudo apt install mariadb-server// 安裝必要軟體，如果你的使用的發行版已經有安裝以下軟體，那系統將自動略過，不會重複安裝
sudo apt-get install apt-transport-https curl
// 建立儲存GPG金鑰的資料夾
sudo mkdir -p /etc/apt/keyrings
// 將MariaDB官網的GPG金鑰下載到我們的Server上
sudo curl -o /etc/apt/keyrings/mariadb-keyring.pgp 'https://mariadb.org/mariadb_release_signing_key.pgp'// 加入MariaDB官方提供的軟體庫到我們的系統
sudo nano /etc/apt/sources.list.d/mariadb.sources# MariaDB 10.11 repository list - created 2023-11-03 08:51 UTC
# https://mariadb.org/download/
X-Repolib-Name: MariaDB
Types: deb
# deb.mariadb.org is a dynamic mirror if your preferred mirror goes offline. See https://mariadb.org/mirrorbits/ for details.
# URIs: https://deb.mariadb.org/10.11/ubuntu
URIs: https://ftp.ubuntu-tw.org/mirror/mariadb/repo/10.11/ubuntu
Suites: jammy
Components: main main/debug
Signed-By: /etc/apt/keyrings/mariadb-keyring.pgp// 更新軟體庫
sudo apt-get update
// 安裝MariaDB
sudo apt-get install mariadb-server
// 確認MariaDB安裝版本
mariadb --version// 確認MariaDB執行狀態
sudo systemctl status mariadb
// 如果MariaDB是沒有啟動的，輸入下面指令啟動
sudo systemctl start mariadb
// 設定開機自動啟動MariaDB
sudo systemctl enable mariadb// 設定MariaDB
sudo mysql_secure_installationsudo mariadb# newdatabase為資料庫名稱
CREATE DATABASE newdatabase CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;
# newdatabaseuser為資料庫使用者，password為資料庫使用者的密碼
CREATE USER 'newdatabaseuser'@'localhost' IDENTIFIED BY 'password';
GRANT ALL PRIVILEGES ON newdatabase.* TO 'newdatabaseuser'@'localhost';
FLUSH PRIVILEGES;
// 離開
quitnano /home/test/.bashrcexport Vaadin_DB_URL=jdbc:mariadb://localhost:3306/newdatabase
export Vaadin_DB_USER=newdatabaseuser
export Vaadin_DB_PASSWORD=passwordecho $Vaadin_DB_URL
echo $Vaadin_DB_USER
echo $Vaadin_DB_PASSWORD// 原本預設在/home/test，切換到/home/test/example
cd example
// 也可以寫成絕對路徑
cd /home/test/examplejava -jar crud-with-vaadin-initial-0.0.1-SNAPSHOT.jar# vaadin可以換成別的名字
sudo nano /etc/nginx/conf.d/vaadin.conf# 適用於Nginx 1.24(含)以前，1.24是目前的最新stable版本
server {
listen 80;
# 沒有IPv6的話可以註解掉
listen [::]:80;
# 需要有域名，可至eu.org申請免費域名，不過會需要等蠻久的(可能需要幾個月)
# GitHub學生包好像有附贈一年的免費域名
server_name example.com;
# Uncomment to redirect HTTP to HTTPS
return 301 https://$host$request_uri;
}
server {
listen 443 ssl http2;
# 沒有IPv6的話可以註解掉
listen [::]:443 ssl http2;
server_name example.com;
# Allow large attachments
client_max_body_size 128M;
# 要申請TLS(SSL)憑證，可使用acme.sh取得
ssl_certificate /path/to/cert.pem;
ssl_certificate_key /path/to/key.pem;
# 跟安全相關的標頭(http header)
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "no-referrer-when-downgrade" always;
location / {
# Sprong Boot所使用的port
proxy_pass http://127.0.0.1:8080;
# 讓Sprong Boot取得真實訪客的IP，而不是反向代理的IP
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
# vaadin可以換成別的名字
sudo nano /etc/nginx/conf.d/vaadin.conf# 適用於Nginx 1.25及以後版本，跟其他版本差在對quic的支援，以及http2的語法有些不同
# 如果要使用Nginx 1.25.x，請新增Nginx提供的軟體庫，並選擇mainline而不是stable
server {
listen 80;
# 沒有IPv6的話可以註解掉
listen [::]:80;
# 需要有域名，可至eu.org申請免費域名，不過會需要等蠻久的(可能需要幾個月)
# GitHub學生包好像有附贈一年的免費域名
server_name example.com;
# Uncomment to redirect HTTP to HTTPS
return 301 https://$host$request_uri;
}
server {
listen 443 quic reuseport;
listen 443 ssl;
# 沒有IPv6的話可以註解掉
listen [::]:443 quic reuseport;
# 沒有IPv6的話可以註解掉
listen [::]:443 ssl;
http2 on;
server_name example.com;
# Allow large attachments
client_max_body_size 128M;
# 要申請TLS(SSL)憑證，可使用acme.sh取得
ssl_certificate /path/to/cert.pem;
ssl_certificate_key /path/to/key.pem;
# 跟安全相關的標頭(http header)
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "no-referrer-when-downgrade" always;
location / {
# advertise that QUIC is available on the configured port
add_header Alt-Svc 'h3=":$server_port"; ma=86400';
# signal whether we are using QUIC+HTTP/3
add_header X-protocol $server_protocol always;
# Sprong Boot所使用的port
proxy_pass http://127.0.0.1:8080;
# 讓Sprong Boot取得真實訪客的IP，而不是反向代理的IP
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
// vaadin可以根據需求替換
sudo nano /etc/systemd/system/vaadin.service[Unit]
Description=Vaadin service
After=syslog.target network.target
[Service]
Type=simple
# 改成你Linux的使用者名稱
User=test
Restart=always
# 設定環境變數，與之前教學相同，請依需求修改
Environment="Vaadin_DB_URL=jdbc:mariadb://localhost:3306/example"
Environment="Vaadin_DB_USER=example"
Environment="Vaadin_DB_PASSWORD=example"
# 程式所在的資料夾
WorkingDirectory=/home/test/example
ExecStart=/usr/bin/java -jar crud-with-vaadin-initial-0.0.1-SNAPSHOT.jar --spring.profiles.active=prod
[Install]
WantedBy=multi-user.target# 啟動服務，這裡的vaadin是從vaadin.service來的
sudo systemctl start vaadin
# 查看服務執行的狀態
sudo systemctl status vaadin
# 停止服務
sudo systemctl stop vaadin
# 開機自動啟動服務
sudo systemctl enable vaadinsudo systemctl daemon-reload