Агальцов Антон
630 lines
35 KiB
HTML
630 lines
35 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="ru-ru">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>Guides — docs.a2v.space</title>
|
|
|
|
|
|
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet">
|
|
|
|
|
|
<link rel="stylesheet" href="../css/custom.css">
|
|
|
|
|
|
</head>
|
|
<body>
|
|
<header class="site-header">
|
|
<nav class="navbar navbar-expand-lg">
|
|
<div class="container-fluid">
|
|
<a class="navbar-brand" href="../">docs.a2v.space</a>
|
|
|
|
<button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarMain" aria-controls="navbarMain" aria-expanded="false" aria-label="Toggle navigation">
|
|
<span class="navbar-toggler-icon"></span>
|
|
</button>
|
|
|
|
<div class="collapse navbar-collapse" id="navbarMain">
|
|
<ul class="navbar-nav me-auto mb-2 mb-lg-0">
|
|
|
|
<li class="nav-item">
|
|
<a class="nav-link" href="../diary/">Дневник</a>
|
|
</li>
|
|
|
|
<li class="nav-item">
|
|
<a class="nav-link" href="../kb/">База знаний</a>
|
|
</li>
|
|
|
|
<li class="nav-item">
|
|
<a class="nav-link" href="../plans/">Планы</a>
|
|
</li>
|
|
|
|
<li class="nav-item">
|
|
<a class="nav-link" href="../guides/">Инструкции</a>
|
|
</li>
|
|
|
|
<li class="nav-item">
|
|
<a class="nav-link" href="../creds/">Креды</a>
|
|
</li>
|
|
|
|
</ul>
|
|
|
|
<form class="d-flex search-form" role="search">
|
|
<input class="form-control me-2" type="search" placeholder="Поиск..." aria-label="Search" id="search-input">
|
|
<button class="btn btn-outline-light" type="submit">Найти</button>
|
|
</form>
|
|
</div>
|
|
|
|
<button class="btn btn-outline-light d-md-none ms-2" type="button" data-bs-toggle="collapse" data-bs-target="#sidebar" aria-expanded="false" aria-controls="sidebar">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" viewBox="0 0 16 16">
|
|
<path fill-rule="evenodd" d="M2.5 12a.5.5 0 0 1 .5-.5h10a.5.5 0 0 1 0 1H3a.5.5 0 0 1-.5-.5zm0-4a.5.5 0 0 1 .5-.5h10a.5.5 0 0 1 0 1H3a.5.5 0 0 1-.5-.5zm0-4a.5.5 0 0 1 .5-.5h10a.5.5 0 0 1 0 1H3a.5.5 0 0 1-.5-.5z"/>
|
|
</svg>
|
|
</button>
|
|
</div>
|
|
</nav>
|
|
|
|
|
|
<div id="search-results" class="search-results" style="display: none;">
|
|
<div class="search-results-content">
|
|
<button type="button" class="btn-close float-end" id="close-search"></button>
|
|
<h5>Результаты поиска</h5>
|
|
<ul id="results-list"></ul>
|
|
</div>
|
|
</div>
|
|
</header>
|
|
|
|
|
|
<div class="container-fluid">
|
|
<div class="row">
|
|
|
|
<aside class="col-md-3 col-lg-2 d-md-block sidebar collapse" id="sidebar">
|
|
<div class="sidebar-content">
|
|
|
|
|
|
|
|
<h6>Фильтры</h6>
|
|
<ul class="nav flex-column">
|
|
<li class="nav-item"><a class="nav-link" href="../guides/">Все инструкции</a></li>
|
|
</ul>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<h6 class="mt-3">Теги</h6>
|
|
<ul class="nav flex-column">
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/audit/">audit</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/leadera/">leadera</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/security/">security</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/ux/">ux</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/ssh/">ssh</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/tunnel/">tunnel</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/vps/">vps</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/reverse-proxy/">reverse-proxy</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/nginx/">nginx</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/devops/">devops</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/openclaw/">openclaw</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/opencode/">opencode</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/angular/">angular</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/go/">go</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../tags/docker/">docker</a></li>
|
|
|
|
</ul>
|
|
|
|
|
|
|
|
</div>
|
|
|
|
</aside>
|
|
|
|
|
|
<main class="col-md-9 col-lg-10 main-content">
|
|
|
|
<div class="article-content">
|
|
<h1>Инструкции</h1>
|
|
|
|
<div class="row">
|
|
|
|
<div class="col-md-6 mb-4">
|
|
<div class="card h-100">
|
|
<div class="card-body">
|
|
<h3 class="card-title"><a href="../guides/leadera-audit/">Аудит Leadera</a></h3>
|
|
<p class="card-text"><h2 id="обзор-проекта">Обзор проекта</h2>
|
|
<p>Leadera — это SaaS-платформа для управления IT-ландшафтом с поддержкой диаграмм Ганта. Проект состоит из двух основных компонентов:</p>
|
|
<p><strong>Стек технологий:</strong></p>
|
|
<ul>
|
|
<li><strong>Бэкенд:</strong> Go 1.21+, GIN framework, PostgreSQL 16+, pgx v5 + sqlx</li>
|
|
<li><strong>Фронтенд:</strong> Angular (версия не указана), HttpClient</li>
|
|
<li><strong>Инфраструктура:</strong> Docker, PM2, Hugo для документации</li>
|
|
</ul>
|
|
<p><strong>Архитектура:</strong></p>
|
|
<ul>
|
|
<li>Clean Architecture с разделением на слои (handlers, service, repository)</li>
|
|
<li>RESTful API с использованием JWT для аутентификации</li>
|
|
<li>Управление правами доступа через RBAC (Role-Based Access Control)</li>
|
|
<li>Поддержка пространств (spaces) как основной изоляции данных</li>
|
|
<li>PostgreSQL с миграциями через golang-migrate</li>
|
|
</ul>
|
|
<p><strong>Основные сущности:</strong></p></p>
|
|
|
|
<div class="tags">
|
|
|
|
<a href="../tags/audit/" class="tag">audit</a>
|
|
|
|
<a href="../tags/leadera/" class="tag">leadera</a>
|
|
|
|
<a href="../tags/security/" class="tag">security</a>
|
|
|
|
<a href="../tags/ux/" class="tag">ux</a>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="col-md-6 mb-4">
|
|
<div class="card h-100">
|
|
<div class="card-body">
|
|
<h3 class="card-title"><a href="../guides/ssh-tunnels-vps/">SSH туннели для VPS reverse proxy</a></h3>
|
|
<p class="card-text"><h2 id="настройка-ssh-туннелей">Настройка SSH туннелей</h2>
|
|
<h3 id="vps-regru-951632329">VPS reg.ru (95.163.232.9)</h3>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span><span style="color:#75715e"># На Mac Studio: создать туннель для каждого сервиса</span>
|
|
</span></span><span style="display:flex;"><span>ssh -N -R 8080:localhost:8080 root@95.163.232.9 <span style="color:#75715e"># leadera-api</span>
|
|
</span></span><span style="display:flex;"><span>ssh -N -R 8081:localhost:4096 root@95.163.232.9 <span style="color:#75715e"># opencode</span>
|
|
</span></span><span style="display:flex;"><span>ssh -N -R 8082:localhost:4200 root@95.163.232.9 <span style="color:#75715e"># leadera-fe</span>
|
|
</span></span><span style="display:flex;"><span>ssh -N -R 8083:localhost:8080 root@95.163.232.9 <span style="color:#75715e"># docs-a2v</span>
|
|
</span></span></code></pre></div><h3 id="настройка-launchd-plist">Настройка launchd plist</h3>
|
|
<p><strong>Файл</strong>: <code>~/Library/LaunchAgents/com.openclaw.sshtunnel.plist</code></p>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-xml" data-lang="xml"><span style="display:flex;"><span><span style="color:#75715e"><?xml version="1.0" encoding="UTF-8"?></span>
|
|
</span></span><span style="display:flex;"><span><span style="color:#75715e"><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"></span>
|
|
</span></span><span style="display:flex;"><span><span style="color:#f92672"><plist</span> <span style="color:#a6e22e">version=</span><span style="color:#e6db74">"1.0"</span><span style="color:#f92672">></span>
|
|
</span></span><span style="display:flex;"><span><span style="color:#f92672"><dict></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><key></span>Label<span style="color:#f92672"></key></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>com.openclaw.sshtunnel<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><key></span>ProgramArguments<span style="color:#f92672"></key></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><array></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>ssh<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>-N<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>-R<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>8080:localhost:8080<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>root@95.163.232.9<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"></array></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><key></span>RunAtLoad<span style="color:#f92672"></key></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><true/></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><key></span>KeepAlive<span style="color:#f92672"></key></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><true/></span>
|
|
</span></span><span style="display:flex;"><span><span style="color:#f92672"></dict></span>
|
|
</span></span><span style="display:flex;"><span><span style="color:#f92672"></plist></span>
|
|
</span></span></code></pre></div><h3 id="автозапуск">Автозапуск</h3>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span><span style="color:#75715e"># Загрузить plist</span>
|
|
</span></span><span style="display:flex;"><span>launchctl load ~/Library/LaunchAgents/com.openclaw.sshtunnel.plist
|
|
</span></span><span style="display:flex;"><span>
|
|
</span></span><span style="display:flex;"><span><span style="color:#75715e"># Проверить статус</span>
|
|
</span></span><span style="display:flex;"><span>launchctl list | grep sshtunnel
|
|
</span></span><span style="display:flex;"><span>
|
|
</span></span><span style="display:flex;"><span><span style="color:#75715e"># Удалить (при необходимости)</span>
|
|
</span></span><span style="display:flex;"><span>launchctl unload ~/Library/LaunchAgents/com.openclaw.sshtunnel.plist
|
|
</span></span></code></pre></div><h2 id="доступ-к-сервисам">Доступ к сервисам</h2>
|
|
<p>Через reverse proxy на VPS:</p></p>
|
|
|
|
<div class="tags">
|
|
|
|
<a href="../tags/ssh/" class="tag">ssh</a>
|
|
|
|
<a href="../tags/tunnel/" class="tag">tunnel</a>
|
|
|
|
<a href="../tags/vps/" class="tag">vps</a>
|
|
|
|
<a href="../tags/reverse-proxy/" class="tag">reverse-proxy</a>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="col-md-6 mb-4">
|
|
<div class="card h-100">
|
|
<div class="card-body">
|
|
<h3 class="card-title"><a href="../guides/vps-reverse-proxy/">Настройка VPS как реверс-прокси</a></h3>
|
|
<p class="card-text"><h2 id="общая-схема">Общая схема</h2>
|
|
<pre tabindex="0"><code>Mac Studio (локальная сеть)
|
|
→ autossh (SSH-туннели)
|
|
→ VPS 95.163.232.9 (Debian)
|
|
→ nginx (HTTPS reverse proxy)
|
|
→ интернет
|
|
</code></pre><h2 id="что-нужно-на-vps">Что нужно на VPS</h2>
|
|
<h3 id="1-установленные-пакеты">1. Установленные пакеты</h3>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>apt update
|
|
</span></span><span style="display:flex;"><span>apt install nginx certbot python3-certbot-nginx
|
|
</span></span></code></pre></div><h3 id="2-ssh-доступ">2. SSH-доступ</h3>
|
|
<ul>
|
|
<li>Авторизация только по ключам</li>
|
|
<li>Публичный ключ с Mac Studio добавлен в <code>/root/.ssh/authorized_keys</code></li>
|
|
</ul>
|
|
<h3 id="3-nginx">3. nginx</h3>
|
|
<p>Для каждого домена создать server block:</p>
|
|
<ul>
|
|
<li>HTTP → редирект на HTTPS</li>
|
|
<li>HTTPS с SSL-сертификатом Let’s Encrypt</li>
|
|
<li><code>proxy_pass</code> на localhost-порт туннеля</li>
|
|
</ul>
|
|
<p>Пример структуры:</p></p>
|
|
|
|
<div class="tags">
|
|
|
|
<a href="../tags/vps/" class="tag">vps</a>
|
|
|
|
<a href="../tags/nginx/" class="tag">nginx</a>
|
|
|
|
<a href="../tags/ssh/" class="tag">ssh</a>
|
|
|
|
<a href="../tags/reverse-proxy/" class="tag">reverse-proxy</a>
|
|
|
|
<a href="../tags/devops/" class="tag">devops</a>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="col-md-6 mb-4">
|
|
<div class="card h-100">
|
|
<div class="card-body">
|
|
<h3 class="card-title"><a href="../guides/claw-a2v-space/">Подключение claw.a2v.space (OpenClaw)</a></h3>
|
|
<p class="card-text"><h2 id="архитектура">Архитектура</h2>
|
|
<pre tabindex="0"><code>Mac Studio (192.168.0.37:18789)
|
|
→ autossh SSH-туннель
|
|
→ VPS 95.163.232.9:8080
|
|
→ nginx HTTPS
|
|
→ https://claw.a2v.space
|
|
</code></pre><h2 id="шаги-настройки">Шаги настройки</h2>
|
|
<h3 id="1-dns">1. DNS</h3>
|
|
<p>A-запись <code>claw.a2v.space</code> → <code>95.163.232.9</code></p>
|
|
<p>NS-серверы: <code>ns1.hosting.reg.ru</code>, <code>ns2.hosting.reg.ru</code></p>
|
|
<h3 id="2-mac-studio--openclaw">2. Mac Studio — OpenClaw</h3>
|
|
<ul>
|
|
<li>Порт: 18789</li>
|
|
<li>Конфиг: <code>~/.openclaw/openclaw.json</code></li>
|
|
</ul>
|
|
<h3 id="3-ssh-туннель-launchd">3. SSH-туннель (launchd)</h3>
|
|
<p>Plist: <code>~/Library/LaunchAgents/com.openclaw.sshtunnel.plist</code></p>
|
|
<p>Ключевой флаг: <code>-R 8080:localhost:18789</code></p>
|
|
<h3 id="4-vps--nginx-конфиг">4. VPS — nginx конфиг</h3>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-nginx" data-lang="nginx"><span style="display:flex;"><span><span style="color:#66d9ef">server</span> {
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">listen</span> <span style="color:#ae81ff">80</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">server_name</span> <span style="color:#e6db74">claw.a2v.space</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">return</span> <span style="color:#ae81ff">301</span> <span style="color:#e6db74">https://</span>$server_name$request_uri;
|
|
</span></span><span style="display:flex;"><span>}
|
|
</span></span><span style="display:flex;"><span>
|
|
</span></span><span style="display:flex;"><span><span style="color:#66d9ef">server</span> {
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">listen</span> <span style="color:#ae81ff">443</span> <span style="color:#e6db74">ssl</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">server_name</span> <span style="color:#e6db74">claw.a2v.space</span>;
|
|
</span></span><span style="display:flex;"><span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">ssl_certificate</span> <span style="color:#e6db74">/etc/letsencrypt/live/claw.a2v.space/fullchain.pem</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">ssl_certificate_key</span> <span style="color:#e6db74">/etc/letsencrypt/live/claw.a2v.space/privkey.pem</span>;
|
|
</span></span><span style="display:flex;"><span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">location</span> <span style="color:#e6db74">/</span> {
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_pass</span> <span style="color:#e6db74">http://127.0.0.1:8080</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">Host</span> $host;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">X-Real-IP</span> $remote_addr;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">X-Forwarded-For</span> $proxy_add_x_forwarded_for;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">X-Forwarded-Proto</span> $scheme;
|
|
</span></span><span style="display:flex;"><span> }
|
|
</span></span><span style="display:flex;"><span>}
|
|
</span></span></code></pre></div><h3 id="5-ssl-сертификат">5. SSL-сертификат</h3>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>certbot certonly --nginx -d claw.a2v.space
|
|
</span></span></code></pre></div><h3 id="6-openclaw-config">6. OpenClaw config</h3>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-json" data-lang="json"><span style="display:flex;"><span>{
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">"allowedOrigins"</span>: [<span style="color:#e6db74">"https://claw.a2v.space"</span>],
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">"trustedProxies"</span>: [<span style="color:#e6db74">"127.0.0.1"</span>]
|
|
</span></span><span style="display:flex;"><span>}
|
|
</span></span></code></pre></div></p>
|
|
|
|
<div class="tags">
|
|
|
|
<a href="../tags/openclaw/" class="tag">openclaw</a>
|
|
|
|
<a href="../tags/ssh/" class="tag">ssh</a>
|
|
|
|
<a href="../tags/nginx/" class="tag">nginx</a>
|
|
|
|
<a href="../tags/vps/" class="tag">vps</a>
|
|
|
|
<a href="../tags/reverse-proxy/" class="tag">reverse-proxy</a>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="col-md-6 mb-4">
|
|
<div class="card h-100">
|
|
<div class="card-body">
|
|
<h3 class="card-title"><a href="../guides/code-a2v-space/">Подключение code.a2v.space (OpenCode)</a></h3>
|
|
<p class="card-text"><h2 id="архитектура">Архитектура</h2>
|
|
<pre tabindex="0"><code>Mac Studio (localhost:4096)
|
|
→ autossh SSH-туннель (-R 8081:localhost:4096)
|
|
→ VPS 95.163.232.9:8081
|
|
→ nginx HTTPS
|
|
→ https://code.a2v.space
|
|
</code></pre><h2 id="параметры">Параметры</h2>
|
|
<table>
|
|
<thead>
|
|
<tr>
|
|
<th>Параметр</th>
|
|
<th>Значение</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr>
|
|
<td>Локальный порт</td>
|
|
<td>4096</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Туннель порт</td>
|
|
<td>8081</td>
|
|
</tr>
|
|
<tr>
|
|
<td>pm2 процесс</td>
|
|
<td><code>opencode</code></td>
|
|
</tr>
|
|
<tr>
|
|
<td>SSL сертификат</td>
|
|
<td><code>/etc/letsencrypt/live/code.a2v.space/</code></td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
<h2 id="nginx-конфиг">nginx конфиг</h2>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-nginx" data-lang="nginx"><span style="display:flex;"><span><span style="color:#66d9ef">server</span> {
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">listen</span> <span style="color:#ae81ff">80</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">server_name</span> <span style="color:#e6db74">code.a2v.space</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">return</span> <span style="color:#ae81ff">301</span> <span style="color:#e6db74">https://</span>$server_name$request_uri;
|
|
</span></span><span style="display:flex;"><span>}
|
|
</span></span><span style="display:flex;"><span>
|
|
</span></span><span style="display:flex;"><span><span style="color:#66d9ef">server</span> {
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">listen</span> <span style="color:#ae81ff">443</span> <span style="color:#e6db74">ssl</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">server_name</span> <span style="color:#e6db74">code.a2v.space</span>;
|
|
</span></span><span style="display:flex;"><span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">ssl_certificate</span> <span style="color:#e6db74">/etc/letsencrypt/live/code.a2v.space/fullchain.pem</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">ssl_certificate_key</span> <span style="color:#e6db74">/etc/letsencrypt/live/code.a2v.space/privkey.pem</span>;
|
|
</span></span><span style="display:flex;"><span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">location</span> <span style="color:#e6db74">/</span> {
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_pass</span> <span style="color:#e6db74">http://127.0.0.1:8081</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">Host</span> $host;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">X-Real-IP</span> $remote_addr;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">X-Forwarded-For</span> $proxy_add_x_forwarded_for;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">X-Forwarded-Proto</span> $scheme;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_http_version</span> <span style="color:#ae81ff">1</span><span style="color:#e6db74">.1</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">Upgrade</span> $http_upgrade;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">Connection</span> <span style="color:#e6db74">"upgrade"</span>;
|
|
</span></span><span style="display:flex;"><span> }
|
|
</span></span><span style="display:flex;"><span>}
|
|
</span></span></code></pre></div><h2 id="ssl-сертификат">SSL-сертификат</h2>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>certbot certonly --nginx -d code.a2v.space
|
|
</span></span></code></pre></div></p>
|
|
|
|
<div class="tags">
|
|
|
|
<a href="../tags/opencode/" class="tag">opencode</a>
|
|
|
|
<a href="../tags/ssh/" class="tag">ssh</a>
|
|
|
|
<a href="../tags/nginx/" class="tag">nginx</a>
|
|
|
|
<a href="../tags/vps/" class="tag">vps</a>
|
|
|
|
<a href="../tags/reverse-proxy/" class="tag">reverse-proxy</a>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="col-md-6 mb-4">
|
|
<div class="card h-100">
|
|
<div class="card-body">
|
|
<h3 class="card-title"><a href="../guides/sand-a2v-space/">Подключение sand.a2v.space (Leadera Project)</a></h3>
|
|
<p class="card-text"><h2 id="архитектура">Архитектура</h2>
|
|
<pre tabindex="0"><code>Mac Studio
|
|
├─ Frontend (Angular) :4200 (pm2: leadera-fe)
|
|
├─ Backend (Go) :8080 (pm2: leadera-api)
|
|
└─ PostgreSQL 16 в Docker (Colima, container: app-leadera-db)
|
|
→ autossh SSH-туннель (-R 8082:localhost:4200 -R 8083:localhost:8080)
|
|
→ VPS 95.163.232.9
|
|
→ nginx HTTPS
|
|
→ https://sand.a2v.space
|
|
</code></pre><h2 id="параметры">Параметры</h2>
|
|
<table>
|
|
<thead>
|
|
<tr>
|
|
<th>Компонент</th>
|
|
<th>Локальный порт</th>
|
|
<th>Туннель порт</th>
|
|
<th>pm2 имя</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr>
|
|
<td>Frontend (Angular)</td>
|
|
<td>4200</td>
|
|
<td>8082</td>
|
|
<td>leadera-fe</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Backend (Go)</td>
|
|
<td>8080</td>
|
|
<td>8083</td>
|
|
<td>leadera-api</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
<p>SSL сертификат: <code>/etc/letsencrypt/live/sand.a2v.space/</code></p>
|
|
<h2 id="nginx-конфиг">nginx конфиг</h2>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-nginx" data-lang="nginx"><span style="display:flex;"><span><span style="color:#66d9ef">server</span> {
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">listen</span> <span style="color:#ae81ff">80</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">server_name</span> <span style="color:#e6db74">sand.a2v.space</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">return</span> <span style="color:#ae81ff">301</span> <span style="color:#e6db74">https://</span>$server_name$request_uri;
|
|
</span></span><span style="display:flex;"><span>}
|
|
</span></span><span style="display:flex;"><span>
|
|
</span></span><span style="display:flex;"><span><span style="color:#66d9ef">server</span> {
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">listen</span> <span style="color:#ae81ff">443</span> <span style="color:#e6db74">ssl</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">server_name</span> <span style="color:#e6db74">sand.a2v.space</span>;
|
|
</span></span><span style="display:flex;"><span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">ssl_certificate</span> <span style="color:#e6db74">/etc/letsencrypt/live/sand.a2v.space/fullchain.pem</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">ssl_certificate_key</span> <span style="color:#e6db74">/etc/letsencrypt/live/sand.a2v.space/privkey.pem</span>;
|
|
</span></span><span style="display:flex;"><span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">location</span> <span style="color:#e6db74">/api</span> {
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_pass</span> <span style="color:#e6db74">http://127.0.0.1:8083</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">Host</span> $host;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">X-Real-IP</span> $remote_addr;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">X-Forwarded-For</span> $proxy_add_x_forwarded_for;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">X-Forwarded-Proto</span> $scheme;
|
|
</span></span><span style="display:flex;"><span> }
|
|
</span></span><span style="display:flex;"><span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">location</span> <span style="color:#e6db74">/</span> {
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_pass</span> <span style="color:#e6db74">http://127.0.0.1:8082</span>;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">Host</span> $host;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">X-Real-IP</span> $remote_addr;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">X-Forwarded-For</span> $proxy_add_x_forwarded_for;
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672">proxy_set_header</span> <span style="color:#e6db74">X-Forwarded-Proto</span> $scheme;
|
|
</span></span><span style="display:flex;"><span> }
|
|
</span></span><span style="display:flex;"><span>}
|
|
</span></span></code></pre></div><h2 id="база-данных">База данных</h2>
|
|
<p>PostgreSQL 16 в Docker через Colima:</p></p>
|
|
|
|
<div class="tags">
|
|
|
|
<a href="../tags/angular/" class="tag">angular</a>
|
|
|
|
<a href="../tags/go/" class="tag">go</a>
|
|
|
|
<a href="../tags/docker/" class="tag">docker</a>
|
|
|
|
<a href="../tags/nginx/" class="tag">nginx</a>
|
|
|
|
<a href="../tags/vps/" class="tag">vps</a>
|
|
|
|
<a href="../tags/reverse-proxy/" class="tag">reverse-proxy</a>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
</div>
|
|
</div>
|
|
|
|
</main>
|
|
</div>
|
|
</div>
|
|
|
|
<footer class="site-footer">
|
|
<div class="container">
|
|
<p class="text-center mb-0">© 2026 docs.a2v.space</p>
|
|
</div>
|
|
</footer>
|
|
|
|
|
|
|
|
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js"></script>
|
|
|
|
|
|
<script src="https://cdn.jsdelivr.net/npm/fuse.js@7.0.0/dist/fuse.min.js"></script>
|
|
|
|
|
|
<script src="../js/search.js"></script>
|
|
<script src="../js/creds.js"></script>
|
|
|
|
|
|
</body>
|
|
</html>
|