服务器怎么部署项目

# 创建专用用户与标准目录结构
sudo useradd -r -m -s /bin/bash appuser
sudo mkdir -p /data/app/releases /data/logs/app /data/backup
sudo chown -R appuser:appuser /data/app /data/logs

# 查看当前用户 uid 确认创建成功
id appuser

# 1) 依赖版本核对：本地与服务器输出必须一致
node -v && npm -v && java -version 2>&1 | head -1
ssh appuser@203.0.113.10 'node -v; npm -v; java -version 2>&1 | head -1'

# 2) 配置文件差异比对（与线上上一版本 release 目录对比）
diff -u /data/app/releases/v1.2.3/application.yml ./src/main/resources/application-prod.yml

# 3) 数据库变更：先备份，再执行迁移脚本
mysqldump -h 127.0.0.1 -u root -p --single-transaction --routines appdb \
  > /data/backup/appdb_$(date +%F).sql
mysql -h 127.0.0.1 -u root -p appdb < ./db/migration/V1.2.3__add_index.sql

# 4) 构建产物自检：确认时间戳是本次构建的
ls -lh dist/ && find dist -name '*.js' -newer package.json | head -5

# 5) 敏感信息扫描：确认私钥、AK 没有被打进产物
grep -rlE 'BEGIN (RSA|OPENSSH|PRIVATE) KEY|AKIA[0-9A-Z]{16}' dist/ || echo "no secret found"

# 本地构建前端项目示例（Vite / Vue / React）
npm ci
npm run build
# 构建产物位于 ./dist/

# 上传 dist 到服务器 Nginx 根目录（--delete 保持与目标一致）
rsync -avz --delete -e "ssh -p 22" ./dist/ appuser@203.0.113.10:/data/app/current/

# 上传后端 jar 包
scp -P 22 ./target/app.jar appuser@203.0.113.10:/data/app/releases/app-v1.2.3.jar

[Unit]
Description=App Backend Service
After=network-online.target mysql.service
Wants=network-online.target

[Service]
Type=simple
User=appuser
Group=appuser
WorkingDirectory=/data/app
Environment="JAVA_OPTS=-Xms512m -Xmx1024m -XX:+UseG1GC"
Environment="SPRING_PROFILES_ACTIVE=prod"
Environment="TZ=Asia/Shanghai"
ExecStart=/usr/bin/java $JAVA_OPTS -jar /data/app/current/app.jar
ExecReload=/bin/kill -HUP $MAINPID
Restart=always
RestartSec=10
KillSignal=SIGTERM
TimeoutStopSec=30
StandardOutput=append:/data/logs/app/stdout.log
StandardError=append:/data/logs/app/stderr.log

[Install]
WantedBy=multi-user.target

sudo tee /etc/systemd/system/myapp.service > /dev/null < myapp.service
sudo systemctl daemon-reload
sudo systemctl enable --now myapp
sudo systemctl status myapp --no-pager

# 后续发布的原子化操作
# 1. 停旧 -> 换软链 -> 启新
sudo systemctl stop myapp
sudo rm -f /data/app/current && sudo ln -s /data/app/releases/v1.2.4 /data/app/current
sudo systemctl start myapp

# 回滚：只需把软链指回上一个版本再重启
sudo rm -f /data/app/current && sudo ln -s /data/app/releases/v1.2.3 /data/app/current
sudo systemctl restart myapp

# 安装 PM2 并启动应用
npm install -g pm2
cd /data/app/current
pm2 start ecosystem.config.js --env production

# ecosystem.config.js 示例
module.exports = {
  apps: [{
    name: 'api-server',
    script: './server.js',
    instances: 2,                 # 启动 2 个进程，充分利用多核
    exec_mode: 'cluster',
    max_memory_restart: '512M',   # 内存超 512MB 自动重启，防内存泄漏
    env_production: {
      NODE_ENV: 'production',
      PORT: 8080
    }
  }]
};

# 保存进程列表并设置开机自启
pm2 save
pm2 startup systemd

# 常用运维命令
pm2 list
pm2 logs api-server --lines 100
pm2 reload api-server      # 零停机重载
pm2 monit

# 服务器上生成部署专用密钥，公钥添加到 Git 仓库的 Deploy Keys
sudo -u appuser ssh-keygen -t ed25519 -C "deploy@web01"

# 首次克隆代码
sudo -u appuser git clone -b main git@github.com:yourorg/yourapp.git /data/app/repo

# 编写部署脚本
cat > /data/app/deploy.sh <<'EOF'
#!/usr/bin/env bash
set -euo pipefail

APP_DIR=/data/app/repo
RELEASE_DIR=/data/app/releases/$(date +%Y%m%d%H%M%S)

cd "$APP_DIR"
git fetch --all --tags
git checkout "${1:-main}"
git pull --ff-only

# 安装依赖并构建
npm ci --omit=dev
npm run build

# 生成新版本目录并复制产物
mkdir -p "$RELEASE_DIR"
cp -r dist/* "$RELEASE_DIR"/

# 原子切换软链
ln -sfn "$RELEASE_DIR" /data/app/current

# 保留最近 5 个版本，其余清理
ls -1dt /data/app/releases/* | tail -n +6 | xargs -r rm -rf

echo "Deploy finished: $RELEASE_DIR"
EOF

chmod +x /data/app/deploy.sh
sudo chown appuser:appuser /data/app/deploy.sh

# 执行部署（可加参数指定分支或 tag）
sudo -u appuser /data/app/deploy.sh v1.2.3

# 安装 Docker（Ubuntu 24.04）
sudo apt install -y docker.io docker-compose-plugin
sudo systemctl enable --now docker
sudo usermod -aG docker appuser      # 免 sudo 执行 docker，需重新登录生效

# 验证
docker version
docker compose version

services:
  app:
    image: registry.example.com/myapp:1.2.3
    container_name: myapp
    restart: always
    depends_on:
      redis:
        condition: service_healthy
    environment:
      TZ: Asia/Shanghai
      SPRING_PROFILES_ACTIVE: prod
      REDIS_HOST: redis
    volumes:
      - /data/logs/app:/app/logs
      - ./application-prod.yml:/app/config/application.yml:ro
    ports:
      - "127.0.0.1:8080:8080"        # 只允许本机访问，外网一律走 Nginx
    healthcheck:
      test: ["CMD-SHELL", "curl -fs http://localhost:8080/actuator/health || exit 1"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 40s
    deploy:
      resources:
        limits:
          memory: 1G
          cpus: "1.0"

  redis:
    image: redis:7.4-alpine
    container_name: myapp-redis
    restart: always
    command: redis-server --requirepass Str0ngRedisPass --maxmemory 256mb
    volumes:
      - redis-data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "-a", "Str0ngRedisPass", "ping"]
      interval: 30s
      timeout: 3s
      retries: 3

volumes:
  redis-data:

# 启动全部服务（-d 后台运行）
docker compose up -d

# 查看服务状态与健康检查
docker compose ps
docker compose logs -f app --tail 100

# 更新发布：拉取新镜像后重建容器
docker compose pull app
docker compose up -d app

# 回滚：把 image tag 改回上一版本再 up -d
docker compose up -d app

name: deploy
on:
  push:
    tags: ['v*']

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Set up JDK 21
        uses: actions/setup-java@v4
        with:
          java-version: '21'
          distribution: 'temurin'

      - name: Build
        run: mvn -B clean package -DskipTests

      - name: Copy artifact to server
        env:
          SSH_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
        run: |
          mkdir -p ~/.ssh
          echo "$SSH_KEY" > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519
          ssh-keyscan -H ${{ secrets.SERVER_IP }} >> ~/.ssh/known_hosts
          rsync -avz target/*.jar appuser@${{ secrets.SERVER_IP }}:/data/app/releases/

      - name: Restart service
        run: |
          ssh appuser@${{ secrets.SERVER_IP }} 'sudo systemctl restart myapp'