xx

environment.sh

@@ -8,6 +8,7 @@ export REGISTRY=registry.t-aaron.com
 export SKY_DOMAIN=sky-${DOMAIN}.t-aaron.com
 export CONSUL_DOMAIN=consul-${DOMAIN}.t-aaron.com
 export XXLJOB_DOMAIN=xxljob-${DOMAIN}.t-aaron.com
+export OIDC_SERVER_DOMAIN=oidc-${DOMAIN}.t-aaron.com
 
 
 export REGISTRY_HOST=${REGISTRY}/tuoheng/
@@ -119,6 +120,16 @@ export OIDC_ADMIN_JAR=tuoheng_oidc_admin.jar
 export OIDC_ADMIN_REMOTE_JAR=/home/th/workspace/test/swarm/dockerfile/oidcadmin/${OIDC_ADMIN_JAR}
 export OIDC_ADMIN_MEMORY=512m
 
+
+export GATEWAY_NAME=GATEWAY_${DOMAIN}
+export GATEWAY_IMAGE=${REGISTRY_HOST}gateway:${DOMAIN}
+export GATEWAY_JAR=tuoheng_gateway.jar
+export GATEWAY_REMOTE_JAR=/home/th/workspace/test/swarm/dockerfile/gateway/${GATEWAY_JAR}
+export GATEWAY_MEMORY=512m
+
+
+
+
 #主机INGRESS_PORT 映射到容器80 INGRESS_SSL_PORT 映射到容器 443
 export INGRESS_PORT=80
 #export INGRESS_SSL_PORT=443

nginx/vhosts/oidcservice.conf

@@ -0,0 +1,23 @@
+ server {
+     listen 80;
+     listen 443 ssl;
+
+     server_name oidc-bazhong.t-aaron.com;
+
+     # SSL证书配置
+     ssl_certificate /etc/nginx/t-aaron.com.pem;
+     ssl_certificate_key /etc/nginx/t-aaron.com.key;
+     ssl_session_timeout 5m;
+     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
+     ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
+     ssl_prefer_server_ciphers on;
+
+
+     location / {
+        proxy_pass http://OIDC_SERVER_bazhong:8090;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+ }

serviceImageBuilder/gateway.sh

@@ -0,0 +1,4 @@
+source ../environment.sh
+rm $GATEWAY_JAR
+cp $GATEWAY_REMOTE_JAR $GATEWAY_JAR
+./builder.sh $GATEWAY_NAME $GATEWAY_IMAGE $GATEWAY_JAR