sh
ssh-keygen -t rsa -b 4096 -C "your_email@example.com"

sh
# 将公钥添加到 authorized_keys 文件*
 
cat ~/.ssh/id_rsa.pub **>>** ~/.ssh/authorized_keys
 
# 设置正确的权限*
 
chmod 600 ~/.ssh/authorized_keys
 
chmod 700 ~/.ssh

dockerfile
# 构建阶段
FROM node:18-alpine AS builder
 
WORKDIR /app
 
# 全局安装 pnpm
RUN npm install -g pnpm && \
    npm install -g pnpm@latest && \
    pnpm config set registry https://registry.npmmirror.com/
 
# 复制依赖文件
COPY package.json pnpm-lock.yaml .npmrc ./
 
# 安装依赖
RUN pnpm install
 
# 复制源代码
COPY . .
 
# 构建应用
RUN pnpm build
 
# 运行阶段
FROM node:18-alpine AS runner
 
WORKDIR /app
 
# 设置环境变量
ENV NODE_ENV production
ENV PORT 3000
 
# 从构建阶段复制必要文件
# 复制 standalone 目录
COPY --from=builder /app/.next/standalone ./
# 复制静态文件
COPY --from=builder /app/.next/static ./.next/static
# 复制公共文件（如果有）
COPY --from=builder /app/public ./public
 
# 暴露端口
EXPOSE 3000
 
# 启动服务
CMD ["node", "server.js"]

yml
name: Deploy Next.js to Cloud Server
 
on:
  push:
    branches:
      - main # 当推送到主分支时触发
 
jobs:
  deploy:
    runs-on: ubuntu-latest
 
    steps:
      - name: Checkout code
        uses: actions/checkout@v2
 
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2
 
      - name: Log in to Docker Hub
        uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}
 
      - name: Build Docker image
        run: |
          docker build -t lizh606/wanyue-blog:latest .
 
      - name: Push Docker image to Docker Hub
        run: |
          docker push lizh606/wanyue-blog:latest
 
      - name: SSH to remote server and deploy
        uses: appleboy/ssh-action@master
        with:
          host: ${{ secrets.HOST }}
          username: ${{ secrets.USERNAME }}
          key: ${{ secrets.SSHPWD }}
          port: 22
          debug: true
          script: |
            # 登录后，拉取最新的 Docker 镜像并启动容器
            docker pull lizh606/wanyue-blog:latest
            docker stop next-client || true
            docker rm next-client || true
            docker run -d --name next-client -p 3000:3000 lizh606/wanyue-blog:latest
 

dockerfile
# 使用官方 Nginx 镜像作为基础镜像
FROM nginx:latest
 
# 复制自定义的 nginx 配置文件到容器中
COPY nginx.conf /etc/nginx/nginx.conf
 
# 复制构建的应用文件到 Nginx 的默认静态文件目录
COPY dist /usr/share/nginx/html
 
# 暴露容器的 8080 端口
EXPOSE 8080
 
# 启动 Nginx  让Nginx在前台运行，而不是作为守护进程在后台运行。
CMD ["nginx", "-g", "daemon off;"]

nginx
user  nginx;
worker_processes auto;
pid /run/nginx.pid;
 
events {
    worker_connections  1024;
}
 
 
http {
    include       mime.types;
    default_type  application/octet-stream;
    gzip on;
 
    # 服务器配置
    server {
        listen       8080;
        server_name  ip;
 
        # 将 IP 访问重定向到域名
        if ($host = 'ip:端口') {
            return 301 https://wanyue.me$request_uri;
        }
 
        # 根目录设置
        root   /usr/share/nginx/html;
        index index.html index.htm;
 
        # 处理 JavaScript 文件的 MIME 类型
        location ~* \.js$ {
            add_header Content-Type application/javascript;
            try_files $uri =404;
        }
 
        # 处理 /admin 路径
        location /admin {
            alias /usr/share/nginx/html;  # 使用 alias 而不是 root
            try_files $uri $uri/ /admin/index.html;
 
            # 处理静态资源
            location ~ ^/admin/assets/.*\.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
                add_header Content-Type application/javascript;
                try_files $uri =404;
            }
        }
 
        # 默认位置设置
        location / {
            try_files $uri $uri/ /index.html;
        }
 
        # 添加错误页面配置
        error_page 404 /404.html;
        location = /404.html {
            root /usr/share/nginx/html;
        }
    }
}

yml
name: Deploy
 
on:
  push:
    branches:
      - main
 
jobs:
  deploy:
    runs-on: ubuntu-latest
 
    steps:
      # 下载代码仓库
      - uses: actions/checkout@v2
 
      # 设置 Docker Buildx
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2
 
      # 登录 Docker Hub
      - name: Login to Docker Hub
        uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}
 
      # 安装依赖并构建
      - name: Install and Build
        run: |
          npm install -g pnpm && \
          pnpm install --no-frozen-lockfile && \
          pnpm build
 
      # 构建并推送 Docker 镜像
      - name: Build and push Docker image
        run: |
          docker build -t ${{ secrets.DOCKER_USERNAME }}/vue-admin:latest .
          docker push ${{ secrets.DOCKER_USERNAME }}/vue-admin:latest
 
      # SSH 连接并部署
      - name: Deploy to server
        uses: appleboy/ssh-action@master
        with:
          host: ${{ secrets.HOST }}
          username: ${{ secrets.USERNAME }}
          key: ${{ secrets.SSHPWD }}
          port: 22
          script: |
            # 拉取最新镜像
            docker pull ${{ secrets.DOCKER_USERNAME }}/vue-admin:latest
 
            # 确保网络存在
            docker network create app_common-network 2>/dev/null || true
 
            # 停止并删除旧容器
            docker stop vue-admin-app || true
            docker rm vue-admin-app || true
 
            # 运行新容器
            docker run -d --name vue-admin-app \
              -p 8080:8080 \
              --network=app_common-network \
              ${{ secrets.DOCKER_USERNAME }}/vue-admin:latest
 

dockerfile
FROM node:18-alpine
 
WORKDIR /app
 
# 安装 pnpm
RUN npm install -g pnpm
 
COPY package*.json ./
 
# 使用 pnpm 安装依赖
RUN pnpm install
 
COPY . .
 
RUN pnpm run build
 
EXPOSE 13000
 
CMD ["sh", "-c", "ls -la /app && ls -la /app/dist/src && cat /app/dist/src/main.js && echo '\n环境变量:' && printenv && echo '\n正在启动应用...' && pnpm start:prod"]

yml
# Use root/example as user/password credentials
version: '3.1'
 
services:
  api:
    build: .
    image: nest-api
    container_name: nest-api
    ports:
      - '13000:13000'
    networks:
      - app-network
    depends_on:
      - db
 
  db:
    image: mysql:8.0
    container_name: nest-db
    restart: always
    environment:
      MYSQL_ROOT_PASSWORD: x x x
      MYSQL_DATABASE: your-database-name
    ports:
      - '12000:3306'
    networks:
      app-network:
        ipv4_address: 172.22.0.2
 
    volumes:
      - mysql_data_new:/var/lib/mysql
    command:
      - --default-authentication-plugin=mysql_native_password
      - --character-set-server=utf8mb4
      - --collation-server=utf8mb4_unicode_ci
      - --innodb-flush-log-at-trx-commit=0
 
  # navicat
  # adminer:
  #   image: adminer
  #   restart: always
  #   ports:
  #     - 12005:8080
  #   networks:
  #     - app-network
 
# 添加网络配置
networks:
  app-network:
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: 172.22.0.0/16
 
# 在文件末尾添加 volumes 数据卷配置
volumes:
  mysql_data_new:
    driver: local
 

yml
DB_HOST=nest-db
DB_PORT=3306
 
DB_DATABASE=your-database-name
DB_USERNAME="xxx"
DB_PASSWORD="xxx"
DB_SYNC=true //生产环境不开启
 
LOG_ON=true
 
# JWT secret
SECRET="xxx"
 
APP_PORT=13000