centos从入门到建站

网站一般分为普通线路、CN2 GT、CN2 GIA等，优劣按前后顺序排列。59.43..的节点是为判断依据，GIA为全程59.43，GT为出国59.43，普通线路为出国202.97

安装开发工具

sudo yum group install "Development Tools"
yum groupinstall "Development Tools"

安装本地npm与node

curl -sL https://rpm.nodesource.com/setup_10.x | sudo bash -
curl -sL https://rpm.nodesource.com/setup_14.x | sudo bash -

yum install nodejs

mkdir ~/.npm-global
npm config set prefix '~/.npm-global'

in '~/.profile'
export PATH=~/.npm-global/bin:$PATH
source ~/.profile
npm install -g jshint
npm install npm@latest -g
npm install -g n

mkdir ~/.usr/
mkdir ~/.usr/local/

in '~/.profile'
export N_PREFIX=$HOME/usr/local
export PATH="${N_PREFIX}/bin:${PATH}"
source ~/.profile
n stable

yum remove nodejs

node -V
sudo rm /etc/pki/rpm-gpg/NODESOURCE-GPG-SIGNING-KEY-EL
sudo rm /etc/yum.repos.d/nodesource-el7.repo
sudo yum repolist
sudo yum makecache

配置ssl

.acme.sh/acme.sh  --register-account  -m example@examplemail.com --server zerossl
#.acme.sh/acme.sh --issue -d example.com -k ec-256 --standalone
#.acme.sh/acme.sh --install-cert -d ssrget.com --key-file /usr/local/etc/t0m1tu.key --fullchain-file /usr/local/etc/t0m1tu.crt --ecc
.acme.sh/acme.sh --list
.acme.sh/acme.sh --revoke --domain t0m1tu.ml --ecc
.acme.sh/acme.sh --remove --domain t0m1tu.ml --ecc

如果没有80端口开放，可以使用dns验证

.acme.sh/acme.sh --issue --dns dns_cf -d t0m1tu.ml -d *.t0m1tu.ml -k ec-256

生成密钥需要ssl设置为Flexible

firewall-cmd --add-rich-rule="rule family="ipv4" source address="192.168.2.1" port protocol="tcp" port="22" accept"

校准时间

sudo yum -y install ntp
ntpdate pool.ntp.org
systemctl start ntpd

安装php7.4

sudo yum install epel-release yum-utils
sudo yum install http://rpms.remirepo.net/enterprise/remi-release-7.rpm
sudo yum-config-manager --enable remi-php74
sudo yum install php-fpm php-cli php-mysqlnd php-curl php-gd php-mbstring php-xml php-xmlrpc php-opcache php-zip php php-json php-bz2 php-bcmath

安装mysql8

sudo rpm -Uvh https://repo.mysql.com/mysql80-community-release-el7-3.noarch.rpm
sudo sed -i 's/enabled=1/enabled=0/' /etc/yum.repos.d/mysql-community.repo
sudo yum --enablerepo=mysql80-community install mysql-community-server
sudo systemctl start mysqld
sudo grep "A temporary password" /var/log/mysqld.log
sudo mysql_secure_installation

mysql -u root -p
mysql> show variables like '%sock%'
mysql>CREATE DATABASE sspanel;
mysql>use sspanel;
mysql>source /var/www/sspanel/sql/glzjin_all.sql;

centos证书信任过程

cp ca.crt /etc/pki/ca-trust/source/anchors/
update-ca-trust