1
# 更新系统
2
apt update && apt upgrade -y
3

4
# 安装基础工具
5
apt install -y curl wget git unzip software-properties-common \
6
  apt-transport-https ca-certificates gnupg lsb-release
7

8
# 设置时区
9
timedatectl set-timezone Asia/Shanghai
10

11
# 禁用防火墙（如果启用）
12
ufw disable

1
# 添加 Nginx 官方仓库
2
curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor \
3
  | tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null
4

5
echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
6
  http://nginx.org/packages/mainline/debian bookworm nginx" \
7
  | tee /etc/apt/sources.list.d/nginx.list
8

9
# 设置仓库优先级
10
echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n" \
11
  | tee /etc/apt/preferences.d/99nginx
12

13
# 安装 Nginx
14
apt update && apt install -y nginx
15

16
# 修改用户为 www-data
17
sed -i 's/^user.*/user www-data;/' /etc/nginx/nginx.conf
18

19
# 启动服务
20
systemctl start nginx && systemctl enable nginx

1
# 添加 Redis 仓库
2
curl -fsSL https://packages.redis.io/gpg | gpg --dearmor -o /usr/share/keyrings/redis-archive-keyring.gpg
3
echo "deb [signed-by=/usr/share/keyrings/redis-archive-keyring.gpg] \
4
  https://packages.redis.io/deb bookworm main" | tee /etc/apt/sources.list.d/redis.list
5

6
# 安装 Redis
7
apt update && apt install -y redis
8

9
# 配置 Redis
10
sed -i 's/^# bind 127.0.0.1 ::1/bind 127.0.0.1 ::1/' /etc/redis/redis.conf
11
sed -i 's/^# maxmemory <bytes>/maxmemory 256mb/' /etc/redis/redis.conf
12
sed -i 's/^# maxmemory-policy noeviction/maxmemory-policy allkeys-lru/' /etc/redis/redis.conf
13

14
# 启动服务
15
systemctl restart redis-server && systemctl enable redis-server

1
# 添加 MariaDB 仓库
2
mkdir -p /etc/apt/keyrings
3
curl -o /etc/apt/keyrings/mariadb-keyring.pgp \
4
  'https://mariadb.org/mariadb_release_signing_key.pgp'
5

6
cat > /etc/apt/sources.list.d/mariadb.sources <<EOF
7
X-RepoLib-Name: MariaDB
8
Types: deb
9
URIs: https://deb.mariadb.org/11.8/debian
10
Suites: bookworm
11
Components: main
12
Signed-By: /etc/apt/keyrings/mariadb-keyring.pgp
13
EOF
14

15
# 安装 MariaDB
16
apt update && apt install -y mariadb-server mariadb-client
17

18
# 启动服务
19
systemctl start mariadb && systemctl enable mariadb
20

21
# 安全初始化
22
mariadb-secure-installation <<EOF
23
\n
24
n
25
n
26
y
27
y
28
y
29
y
30
EOF

1
# 生成安全密码
2
DB_PASSWORD=$(openssl rand -base64 16)
3
echo "请牢记数据库密码！！！ 数据库密码：$DB_PASSWORD"
4

5
# 创建数据库和用户（使用 mariadb 命令，避免弃用警告）
6
mariadb -u root -p <<EOF
7
CREATE DATABASE unishop_db CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
8
ALTER USER 'root'@'localhost' IDENTIFIED BY '$DB_PASSWORD';
9
FLUSH PRIVILEGES;
10
EOF

1
# 添加 PHP 仓库
2
curl -sSLo /tmp/php.gpg https://packages.sury.org/php/apt.gpg
3
gpg --dearmor < /tmp/php.gpg > /usr/share/keyrings/php-archive-keyring.gpg
4
echo "deb [signed-by=/usr/share/keyrings/php-archive-keyring.gpg] \
5
  https://packages.sury.org/php/ bookworm main" > /etc/apt/sources.list.d/php.list
6

7
# 安装 PHP 7.4 及必需扩展
8
apt update && apt install -y php7.4-{bcmath,bz2,cli,common,curl,fpm,gd,gmp,igbinary,intl,mbstring,mysql,opcache,readline,redis,soap,xml,yaml,zip}
9

10

11

12
# 配置 PHP
13
sed -i 's/^max_execution_time.*/max_execution_time = 300/' /etc/php/7.4/fpm/php.ini
14
sed -i 's/^memory_limit.*/memory_limit = 256M/' /etc/php/7.4/fpm/php.ini
15
sed -i 's/^post_max_size.*/post_max_size = 50M/' /etc/php/7.4/fpm/php.ini
16
sed -i 's/^upload_max_filesize.*/upload_max_filesize = 50M/' /etc/php/7.4/fpm/php.ini
17
sed -i 's/^;date.timezone.*/date.timezone = Asia\/Shanghai/' /etc/php/7.4/fpm/php.ini
18

19
# 配置 PHP-FPM
20
sed -i 's/^;listen.owner.*/listen.owner = www-data/' /etc/php/7.4/fpm/pool.d/www.conf
21
sed -i 's/^;listen.group.*/listen.group = www-data/' /etc/php/7.4/fpm/pool.d/www.conf
22
sed -i 's/^;listen.mode.*/listen.mode = 0660/' /etc/php/7.4/fpm/pool.d/www.conf
23

24
# 启动服务
25
systemctl restart php7.4-fpm && systemctl enable php7.4-fpm

1
# 下载并安装 Composer
2
curl -sS https://getcomposer.org/installer -o /tmp/composer-setup.php
3
HASH=$(curl -sS https://composer.github.io/installer.sig)
4
php -r "if (hash_file('SHA384', '/tmp/composer-setup.php') === '$HASH') { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('/tmp/composer-setup.php'); } echo PHP_EOL;"
5
php /tmp/composer-setup.php --install-dir=/usr/local/bin --filename=composer
6
rm /tmp/composer-setup.php
7

8
# 验证安装
9
composer --version

1
# 创建配置目录
2
mkdir -p /etc/nginx/conf.d
3

4
# 创建站点配置
5
cat > /etc/nginx/conf.d/unishop.conf <<'EOF'
6
server {
7
    listen 80;
8
    listen [::]:80;
9
    server_name your-domain.com;  # 修改为你的域名
10

11
    root /var/www/unishop/public;
12
    index index.php index.html;
13

14
    location / {
15
        try_files $uri /index.php$is_args$args;
16
    }
17

18
    location ~ \.php$ {
19
        fastcgi_pass unix:/run/php/php7.4-fpm.sock;
20
        fastcgi_index index.php;
21
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
22
        include fastcgi_params;
23
    }
24

25
    location ~ /\.(?!well-known).* {
26
        deny all;
27
    }
28
}
29
EOF
30

31
# 测试配置
32
nginx -t
33

34
# 重载 Nginx
35
systemctl reload nginx

1
# 安装 Certbot
2
apt install -y certbot python3-certbot-nginx
3

4
# 获取证书
5
certbot --nginx -d your-domain.com

1
# 创建网站目录
2
mkdir -p /var/www/unishop
3
cd /var/www
4

5
# 克隆项目
6
git clone https://github.com/Surge-Lab/UniShop.git unishop
7

8
cd unishop
9

10
# 配置 Git 安全目录（必需）
11
# 因为后续会将目录权限改为 www-data，需要预先配置避免 Git 报错
12
git config --global --add safe.directory /var/www/unishop
13

14

15
# 安装依赖
16
echo "开始安装 Composer 依赖..."
17
composer install
18

19
# 验证安装是否成功
20
if [ ! -f vendor/autoload.php ]; then
21
    echo "错误：Composer 依赖安装失败"
22
    echo "请检查错误信息并重新运行 composer install"
23
    exit 1
24
fi
25

26
# 环境配置
27
cp .env.example .env
28
php artisan key:generate