jiapengyu
110 lines
3.3 KiB
JavaScript
110 lines
3.3 KiB
JavaScript
const { Client } = require('ssh2');
|
|
|
|
const config = {
|
|
host: 'hs.yifenbao.cn',
|
|
port: 22,
|
|
username: 'root',
|
|
password: 'Torch1112'
|
|
};
|
|
|
|
const conn = new Client();
|
|
|
|
conn.on('ready', async () => {
|
|
console.log('SSH连接成功');
|
|
|
|
try {
|
|
console.log('\n=== 检查SSL证书目录 ===');
|
|
await executeCommand('ls -la /www/server/panel/vhost/cert/');
|
|
|
|
console.log('\n=== 检查是否有hs.yifenbao.cn证书 ===');
|
|
await executeCommand('ls -la /www/server/panel/vhost/cert/hs.yifenbao.cn/ 2>/dev/null || echo "没有hs.yifenbao.cn证书"');
|
|
|
|
console.log('\n=== 配置HTTP和HTTPS ===');
|
|
const configContent = `server {
|
|
listen 80;
|
|
server_name hs.yifenbao.cn;
|
|
|
|
location /h5/ {
|
|
proxy_pass http://127.0.0.1:4001/h5/;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
}
|
|
|
|
location /api/ {
|
|
proxy_pass http://127.0.0.1:4001/api/;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
}
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl;
|
|
server_name hs.yifenbao.cn;
|
|
|
|
ssl_certificate /www/server/panel/vhost/cert/hs.yifenbao.cn/fullchain.pem;
|
|
ssl_certificate_key /www/server/panel/vhost/cert/hs.yifenbao.cn/privkey.pem;
|
|
|
|
location /h5/ {
|
|
proxy_pass http://127.0.0.1:4001/h5/;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
}
|
|
|
|
location /api/ {
|
|
proxy_pass http://127.0.0.1:4001/api/;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
}
|
|
}
|
|
`;
|
|
|
|
await executeCommand(`cat > /www/server/panel/vhost/nginx/hs.yifenbao.cn.conf << 'EOF'
|
|
${configContent}
|
|
EOF`);
|
|
|
|
console.log('\n=== 创建自签名证书 ===');
|
|
await executeCommand('mkdir -p /www/server/panel/vhost/cert/hs.yifenbao.cn');
|
|
await executeCommand('openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /www/server/panel/vhost/cert/hs.yifenbao.cn/privkey.pem -out /www/server/panel/vhost/cert/hs.yifenbao.cn/fullchain.pem -subj "/CN=hs.yifenbao.cn"');
|
|
|
|
console.log('\n=== 测试配置 ===');
|
|
await executeCommand('/www/server/nginx/sbin/nginx -t');
|
|
|
|
console.log('\n=== 重新加载Nginx ===');
|
|
await executeCommand('/www/server/nginx/sbin/nginx -s reload');
|
|
|
|
console.log('\n=== 测试HTTPS访问 ===');
|
|
await executeCommand('curl -s -k https://hs.yifenbao.cn/h5/ | head -5');
|
|
|
|
} catch (error) {
|
|
console.error('配置失败:', error.message);
|
|
} finally {
|
|
conn.end();
|
|
}
|
|
});
|
|
|
|
function executeCommand(cmd) {
|
|
return new Promise((resolve) => {
|
|
conn.exec(cmd, (err, stream) => {
|
|
if (err) {
|
|
console.error('命令执行错误:', err.message);
|
|
resolve();
|
|
return;
|
|
}
|
|
|
|
stream.stdout.on('data', (data) => process.stdout.write(data));
|
|
stream.stderr.on('data', (data) => process.stdout.write(data));
|
|
|
|
stream.on('close', () => resolve());
|
|
});
|
|
});
|
|
}
|
|
|
|
conn.on('error', (err) => {
|
|
console.error('SSH连接错误:', err.message);
|
|
});
|
|
|
|
conn.connect(config); |