iamt 1.1.27__py3-none-any.whl

iamt/composes/6255Monitor/grafana/docker-compose.yml

@@ -0,0 +1,22 @@
+networks:
+    lppx-network:
+        external: true
+services:
+    grafana:
+        container_name: ${CONTAINER_NAME}
+        deploy:
+            resources:
+                limits:
+                    cpus: ${CPUS}
+                    memory: ${MEMORY_LIMIT}
+        image: grafana/grafana:11.5.2
+        labels:
+            createdBy: Apps
+        networks:
+            - lppx-network
+        ports:
+            - ${HOST_IP}:${PANEL_APP_PORT_HTTP}:3000
+        restart: always
+        user: "0"
+        volumes:
+            - ./data:/var/lib/grafana

iamt/composes/6255Monitor/node_exporter/.env

@@ -0,0 +1 @@
+# 这个文件最好用模板生成 

iamt/composes/6255Monitor/node_exporter/docker-compose.yml

@@ -0,0 +1,19 @@
+networks:
+    lppx-network:
+        external: true
+services:
+    node-exporter:
+        container_name: node-exporter
+        ports:
+            - 9100:9100
+        restart: always
+        hostname: MasterServer
+        volumes:
+            - /proc:/host/proc:ro
+            - /sys:/host/sys:ro
+            - /:/rootfs:ro
+        image: prom/node-exporter
+        networks:
+            - lppx-network
+        
+        

iamt/composes/6255Monitor/prometheus/.env

@@ -0,0 +1,6 @@
+CONTAINER_NAME="prometheus-435h"
+CPUS=0
+HOST_IP=""
+MEMORY_LIMIT=0
+PANEL_APP_PORT_HTTP=9090
+

iamt/composes/6255Monitor/prometheus/.rdm.md

@@ -0,0 +1,8 @@
+
+# 有个个非常重要的事情 
+# 必须在 当前目录下面 有一个  Prometheus文件夹  这个文件夹映射到容器当中的  文件夹
+# 而且这个文件夹的 权限必须是  0777  才能正常拉起容器 
+
+
+https://hub.docker.com/r/prom/prometheus/tags
+

iamt/composes/6255Monitor/prometheus/conf/prometheus.yml

@@ -0,0 +1,39 @@
+global:
+  scrape_interval: 15s # Set the scrape interval to every 15 seconds. Default is every 1 minute.
+  evaluation_interval: 15s # Evaluate rules every 15 seconds. The default is every 1 minute.
+  # scrape_timeout is set to the global default (10s).
+
+# Alertmanager configuration
+alerting:
+  alertmanagers:
+    - static_configs:
+        - targets:
+          # - alertmanager:9093
+
+# Load rules once and periodically evaluate them according to the global 'evaluation_interval'.
+rule_files:
+# - "first_rules.yml"
+# - "second_rules.yml"
+
+# A scrape configuration containing exactly one endpoint to scrape:
+# Here it's Prometheus itself.
+scrape_configs:
+  # The job name is added as a label `job=<job_name>` to any timeseries scraped from this config.
+  - job_name: 'prometheus'
+    static_configs:
+      - targets: [ 'localhost:9090' ]
+
+  - job_name: "node-exproter"
+    static_configs:
+      - targets:
+          - "node-exporter:9100"
+        labels:
+          instance: test服务器
+
+  - job_name: "dcgm-exproter"
+    static_configs:
+      - targets:
+          - "dcgm-exporter:9400"
+        labels:
+          instance: test服务器
+

iamt/composes/6255Monitor/prometheus/docker-compose.yml

@@ -0,0 +1,28 @@
+networks:
+    lppx-network:
+        external: true
+services:
+    prometheus:
+        command:
+            - --config.file=/etc/prometheus/prometheus.yml
+            - --storage.tsdb.path=/prometheus
+            - --web.console.libraries=/etc/prometheus/console_libraries
+            - --web.console.templates=/etc/prometheus/consoles
+            - --storage.tsdb.retention=200h
+        container_name: ${CONTAINER_NAME}
+        deploy:
+            resources:
+                limits:
+                    cpus: ${CPUS}
+                    memory: ${MEMORY_LIMIT}
+        image: prom/prometheus:v2.53.4
+        labels:
+            createdBy: Apps
+        networks:
+            - lppx-network
+        ports:
+            - ${HOST_IP}:${PANEL_APP_PORT_HTTP}:9090
+        restart: always
+        volumes:
+            - ./conf:/etc/prometheus/
+            - ./prometheus:/prometheus

iamt/composes/6355SSL/certbot/.rdm.md

@@ -0,0 +1,4 @@
+https://github.com/certbot/certbot
+
+# dify 居然用到了 certbot 来自动申请证书 
+ 

iamt/composes/6355SSL/certd/.rdm.md

@@ -0,0 +1,4 @@
+https://github.com/certd/certd
+
+# 这个项目的作者就是 dev-sidecar的作者 还是很强的 
+

iamt/composes/6355SSL/certimate/.rdm.md

@@ -0,0 +1,23 @@
+
+
+https://github.com/usual2970/certimate
+
+
+https://docs.certimate.me/
+
+https://hub.docker.com/r/usual2970/certimate/tags
+
+
+用户名：admin@certimate.fun
+密码：1234567890
+
+
+这玩意用 docker 部署会有些麻烦 首先他只能执行容器里面的命令
+    也就是说 部署完证书之后 没法直接 重启 nginx  
+
+其次 他不能操作 宿主机的  /etc/nginx/ssl 目录 除非做映射 
+但是如果做了目录映射 可能会有个小问题 就是 ssl 这个目录算是被容器霸占了  也不算特别大的问题吧 
+
+还有个问题 就是多个证书的情况 默认的证书名字是 nginx 一般情况下一定要手动更改证书名字  
+
+一定要 能够重启 nginx 才行 要不然 不能应用证书 就不能实现完全自动化了

iamt/composes/6355SSL/certimate/docker-compose.yml

@@ -0,0 +1,17 @@
+version: '3.0'
+services:
+    certimate:
+      # image: registry.cn-shanghai.aliyuncs.com/usual2970/certimate:latest
+      image: usual2970/certimate:v0.2.21
+      container_name: certimate_server
+      ports:
+      - 8090:8090
+      volumes:
+      - ./data:/app/pb_data
+      - /etc/nginx/ssl:/etc/nginx/ssl 
+      restart: unless-stopped
+
+
+
+
+

iamt/composes/6455Storage/fileBrowser/.env

@@ -0,0 +1,5 @@
+PUID=0
+PGID=0
+
+
+

iamt/composes/6455Storage/fileBrowser/.rdm.md

@@ -0,0 +1,17 @@
+https://github.com/filebrowser/filebrowser
+https://hub.docker.com/r/filebrowser/filebrowser/tags
+# 镜像标签是一个谜 根本不知道s6 是啥  
+
+
+# DEMO
+https://demo.filebrowser.org/  demo/demo 
+
+https://filebrowser.org/installation
+
+
+
+
+# 部署经验
+1，必须事先准备好 filebrowser.db(手动创建空文件) 和  setting.json(官方仓库有) 文件
+2，PUID 和 PGID 其实完全可以用代码自动获取 以后优化一下  
+x, docker 部署成功后的默认用户名密码 admin/admin 

iamt/composes/6455Storage/fileBrowser/docker-compose.yml

@@ -0,0 +1,14 @@
+
+services:
+    filebrowser:
+        volumes:
+            - ./root:/srv
+            - ./filebrowser.db:/database/filebrowser.db
+            - ./settings.json:/config/settings.json
+        environment:
+            - PUID=${PUID}
+            - PGID=${PGID}
+        ports:
+            - 8080:80
+        image: filebrowser/filebrowser:s6
+        restart: always

iamt/composes/6455Storage/fileBrowser/settings.json

@@ -0,0 +1,8 @@
+{
+  "port": 80,
+  "baseURL": "",
+  "address": "",
+  "log": "stdout",
+  "database": "/database/filebrowser.db",
+  "root": "/srv"
+}

iamt/composes/6455Storage/kskypro/.env

@@ -0,0 +1,3 @@
+IMAGE={{KSKEY_IMAGE}}
+
+INSTALL={{KSKEY_INSTALL}}

iamt/composes/6455Storage/kskypro/.rdm.md

@@ -0,0 +1,30 @@
+git clone https://github.com/HalcyonAzure/lsky-pro-docker
+https://hub.docker.com/_/php
+
+
+# 镜像编译好了 第一次部署却失败的 
+# 通过检查 storage 目录下的日志发现 其实还是 Unsupported cipher or incorrect key length
+# .evn.example 文件当中的 APP_KEY 应该留空 然后让他自己去生成 要不然就会出现这个问题 
+
+# mysql 容器 /etc/mysql 目录不能做映射 要不然就需要自己去准备配置文件 
+
+
+# docker exec -it lskypro php artisan key:generate  
+# docker exec -it mysql-lsky mysql -uroot -pKS123456! -e "UPDATE ks_sky.groups SET is_default = 0 WHERE id = 1;"
+# docker exec -it mysql-lsky mysql -uroot -pKS123456! -e "UPDATE ks_sky.groups SET is_guest = 0 WHERE id = 1;"
+# 初次部署好之后需要修改这两个字段的值 才能用 
+
+
+# docker exec -it mysql-lsky mysql -uroot -pKS123456! -e "UPDATE ks_sky.configs SET value = '102400000000' WHERE name ='user_initial_capacity';"
+
+
+# docker build -t test:v5  --no-cache . 
+# docker build 的构建速度太慢了 需要十几分钟 还是需要优化一下的  更换一下 apt 的软件源还是有必要的 
+# 目前使用的php8.1的母容器是debian12系统 但是 软件源设置是在 /etc/apt/source.list.d/debian.sources 而且是 deb822格式 
+# 优化之后仍然需要 1500S
+# 然后测试了国外编译镜像 尝试了几个国家 都是从gitee拉取代码太慢了 几乎无法完成镜像的编译 
+# 最后 从github拉代码 然后韩国编译镜像还是很快的 
+
+
+# env.conf 的内容本来应该是自动生成的 但是现在变成本地设置好直接弄到远程主机上去的 
+# 所以我需要手动维护好才行的 

iamt/composes/6455Storage/kskypro/buildimg/000-default.conf.template

@@ -0,0 +1,45 @@
+<VirtualHost *:${WEB_PORT}>
+
+	LimitRequestBody 0 
+	# 如果不做设置 上传大文件有可能导致 413错误 
+	# The ServerName directive sets the request scheme, hostname and port that
+	# the server uses to identify itself. This is used when creating
+	# redirection URLs. In the context of virtual hosts, the ServerName
+	# specifies what hostname must appear in the request's Host: header to
+	# match this virtual host. For the default virtual host (this file) this
+	# value is not decisive as it is used as a last resort host regardless.
+	# However, you must set it for any further virtual host explicitly.
+
+	ServerAdmin webmaster@localhost
+	DocumentRoot /var/www/html/public
+
+	# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
+	# error, crit, alert, emerg.
+	# It is also possible to configure the loglevel for particular
+	# modules, e.g.
+	#LogLevel info ssl:warn
+
+	ErrorLog ${APACHE_LOG_DIR}/error.log
+	CustomLog ${APACHE_LOG_DIR}/access.log combined
+
+	# For most configuration files from conf-available/, which are
+	# enabled or disabled at a global level, it is possible to
+	# include a line for only one particular virtual host. For example the
+	# following line enables the CGI configuration for this host only
+	# after it has been globally disabled with "a2disconf".
+	#Include conf-available/serve-cgi-bin.conf
+</VirtualHost>
+
+<VirtualHost *:${HTTPS_PORT}>
+    ServerAdmin webmaster@localhost
+    DocumentRoot /var/www/html/public
+
+    SSLEngine on
+    SSLCertificateFile "/etc/ssl/certs/ssl-cert-snakeoil.pem"
+    SSLCertificateKeyFile "/etc/ssl/private/ssl-cert-snakeoil.key"
+
+    ErrorLog ${APACHE_LOG_DIR}/error.log
+    CustomLog ${APACHE_LOG_DIR}/access.log combined
+</VirtualHost>
+
+# vim: syntax=apache ts=4 sw=4 sts=4 sr noet

iamt/composes/6455Storage/kskypro/buildimg/Dockerfile

@@ -0,0 +1,97 @@
+FROM php:8.1 AS build
+WORKDIR /build
+
+# 安装必要的依赖
+# RUN sed -i 's|http://deb.debian.org/debian|https://mirrors.tuna.tsinghua.edu.cn/debian|g' /etc/apt/sources.list.d/debian.sources
+RUN apt-get update && \
+    apt-get install -y curl unzip git && \
+    curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer && \
+    apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
+
+# RUN curl -OL https://github.com/lsky-org/lsky-pro/archive/refs/heads/master.zip \
+#     && unzip *.zip \
+#     && mv ./lsky-pro-master/* ./ \
+#     && mv ./lsky-pro-master/.env.example ./ \
+#     && rm -rf master.zip lsky-pro-master
+
+
+RUN git clone https://KingSung509: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@github.com/KingSung509/lsky_pro_master.git \ 
+    && mv ./lsky_pro_master/* ./ \
+    && mv ./lsky_pro_master/.env.example ./ \
+    && rm -rf master.zip lsky_pro_master
+
+# COPY ./src /build/
+
+    
+RUN php -r "file_exists('.env') || copy('.env.example', '.env');" && composer install   
+
+# 更换了阿里云的 composer 源结果会出现超时的情况 
+
+FROM php:8.1-apache
+
+# 如果构建速度慢可以换源
+# RUN sed -i 's|http://deb.debian.org/debian|https://mirrors.tuna.tsinghua.edu.cn/debian|g' /etc/apt/sources.list.d/debian.sources
+# 安装相关拓展
+ADD https://github.com/mlocati/docker-php-extension-installer/releases/latest/download/install-php-extensions /usr/local/bin/
+
+# 开启SSL
+RUN a2enmod ssl && a2ensite default-ssl
+
+RUN touch /etc/apt/sources.list.d/debian-testing.sources && \ 
+    echo 'Types: deb' > /etc/apt/sources.list.d/debian-testing.sources && \
+    echo 'URIs: http://deb.debian.org/debian' >> /etc/apt/sources.list.d/debian-testing.sources && \
+    echo 'Suites: testing' >> /etc/apt/sources.list.d/debian-testing.sources && \
+    echo 'Components: main contrib non-free non-free-firmware' >> /etc/apt/sources.list.d/debian-testing.sources && \
+    echo 'Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg' >> /etc/apt/sources.list.d/debian-testing.sources \
+    && apt update \
+    && apt install -y -t testing imagemagick libmagickwand-dev \
+    && echo "/usr/" | pecl install imagick \
+    && echo "extension=imagick.so" > /usr/local/etc/php/conf.d/imagick.ini \
+    && apt clean && rm -rf /var/cache/apt/* && rm -rf /var/lib/apt/lists/* && rm -rf /tmp/* 
+
+RUN apt-get update && \
+    apt-get install -y gettext && \
+    apt-get clean && rm -rf /var/cache/apt/* && rm -rf /var/lib/apt/lists/* && rm -rf /tmp/*  && \
+    a2enmod rewrite && chmod +x /usr/local/bin/install-php-extensions && \
+    install-php-extensions bcmath pdo_mysql pdo_pgsql redis && \
+    \
+    { \
+    echo 'post_max_size = 12G;';\
+    echo 'upload_max_filesize = 10G;';\
+    echo 'max_execution_time = 1800S;';\
+    } > /usr/local/etc/php/conf.d/docker-php-upload.ini; \
+    \
+    { \
+    echo 'opcache.enable=1'; \
+    echo 'opcache.interned_strings_buffer=8'; \
+    echo 'opcache.max_accelerated_files=10000'; \
+    echo 'opcache.memory_consumption=128'; \
+    echo 'opcache.save_comments=1'; \
+    echo 'opcache.revalidate_freq=1'; \
+    } > /usr/local/etc/php/conf.d/opcache-recommended.ini; \
+    \
+    echo 'apc.enable_cli=1' >> /usr/local/etc/php/conf.d/docker-php-ext-apcu.ini; \
+    \
+    echo 'memory_limit=4G' > /usr/local/etc/php/conf.d/memory-limit.ini; \
+    \
+    mkdir /var/www/data; \
+    chown -R www-data:root /var/www; \
+    chmod -R g=u /var/www
+
+# 内存限制 需要大于 单个文件的大小 要不然无法上传大的文件  
+
+COPY ./ssl /etc/ssl
+
+COPY --from=build /build /var/www/lsky/
+COPY ./000-default.conf.template /etc/apache2/sites-enabled/
+COPY ./ports.conf.template /etc/apache2/
+COPY entrypoint.sh /
+WORKDIR /var/www/html/
+# VOLUME /var/www/html
+ENV WEB_PORT=8089
+ENV HTTPS_PORT=8088
+EXPOSE ${WEB_PORT}
+EXPOSE ${HTTPS_PORT}
+RUN chmod a+x /entrypoint.sh
+ENTRYPOINT ["/entrypoint.sh"]
+CMD ["apachectl","-D","FOREGROUND"]