Pine
a813a139dc
- serverrun/：start-all.sh 一键编排 + start-compute/start-emqx + envcopy/encrypt-certs - 服务编排：core(Dockerfile+compose)、compute-engine(build.sh+compose)、mysql、redis、mqtt(EMQX) - serverdata/：新增 compute-data/compute-logs/mysql-data/redis-data/emqx-data/emqx-log - 全服务仅 loopback 暴露，算力引擎 :3000 经 core 代理
24 lines
647 B
Bash
24 lines
647 B
Bash
#!/bin/bash
|
||
# 证书加密打包（参考 PineSoundServer encrypt-certs.sh）
|
||
# 用途：微信/HTTPS 证书加密归档，不入库。
|
||
set -euo pipefail
|
||
|
||
ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
||
cd "$ROOT"
|
||
|
||
ENC_KEY="${ENC_KEY:-}"
|
||
if [ -z "$ENC_KEY" ]; then
|
||
echo "错误：请设置 ENC_KEY" >&2
|
||
exit 1
|
||
fi
|
||
|
||
CERT_DIR="serverdata/keys/certs"
|
||
if [ ! -d "$CERT_DIR" ]; then
|
||
echo "目录不存在：$CERT_DIR（先放置证书）" >&2
|
||
exit 1
|
||
fi
|
||
|
||
tar -czf - -C "$CERT_DIR" . | openssl enc -aes-256-cbc -pbkdf2 -salt \
|
||
-out serverrun/certs.tar.gz.enc -pass pass:"$ENC_KEY"
|
||
echo "已加密：serverrun/certs.tar.gz.enc"
|