mangreen / Some-Note

Development Memo
1 stars 0 forks source link

Ubuntu Relatived #7

Open mangreen opened 9 years ago

mangreen commented 9 years ago

1. 重開機自動啟動server

$ mkdir /bin
$ vim /bin/start

編寫bash檔

#!/bin/bash

logfile="/home/ubuntu/log/start.log"

function log() {
    echo $1 >>$logfile
}

function pm2jobs() {
    task=$1
    log "starting $task"
    cd "/home/ubuntu/$task/"
    /usr/local/bin/pm2 start "develop.js" --name "$task"
    log "complete $task"
}

log ""
log "===running start.sh==="
log "$(date)"

pm2jobs engine
pm2jobs analytics
pm2jobs dashboard

update-advideo

設為執行檔

$ chmod +x /bin/start

編寫crontab

$ crontab -e

打入

@reboot /home/ubuntu/bin/start

重啟cron服務

$ service cron restart

2. 改變hostname

內容改為自己要的名字

$ vim /etc/hostname

這邊最好也要改,免得有些 service 會出錯

$ vim /etc/hosts

127.0.0.1 localhost AdPlay-beta

重新啟動

$ sudo hostname -F /etc/hostname

驗證是否已經修改完畢。

$ hostname

3. 建立ip table

$ sudo vi /etc/iptables.conf
$ sudo iptables-restore /etc/iptables.conf
$ sudo iptables -L
Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ACCEPT     all  --  10.0.0.0/8           anywhere
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:https
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:5000
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:15000

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

4. SSH reverse tunnel

建立local的port對指定主機的port連線

$ ssh -L 27019:localhost:27017 -Nf ubuntu@www.example.com

如果要開放其他台連local需指定ip或0.0.0.0開放全部

$ ssh -L 0.0.0.0:27019:localhost:27017 -Nf ubuntu@www.example.com