# 1. 配置内核参数
# vi /etc/sysctl.conf
kern.maxfiles=6815744
kern.maxfilesperproc=3276800
kern.ipc.shmmax=17179869184
kern.ipc.shmall=4194304
kern.ipc.semmni=1024
kern.ipc.semmns=65536

# 使配置生效
# sysctl -f /etc/sysctl.conf

# 2. 配置用户资源限制
# vi /etc/login.conf
postgres:\
:datasize-max=16G:\
:datasize-cur=8G:\
:openfiles-cur=65535:\
:openfiles-max=65535:\
:maxproc-max=512:\
:maxproc-cur=256:\
:tc=default:

# 重建登录类数据库
# cap_mkdb /etc/login.conf

# 3. 安装PostgreSQL
# pkgin install postgresql16-server

# 输出示例：
Calculating dependencies…
The following packages will be installed:
postgresql16-server-16.2

Proceed? [Y/n] y
Downloading postgresql16-server-16.2…
Installing postgresql16-server-16.2…

# 4. 初始化数据库
# su – postgres
$ initdb -D /var/pgdata

# 输出示例：
The files belonging to this database system will be owned by user “postgres”.
This user must also own the server process.

The database cluster will be initialized with locale “C”.
The default text search configuration will be set to “english”.

Data page checksums are disabled.

creating directory /var/pgdata … ok
creating subdirectories … ok
selecting dynamic shared memory implementation … posix
selecting default max_connections … 100
selecting default shared_buffers … 128MB
selecting default time zone … Asia/Shanghai
creating configuration files … ok
running bootstrap script … ok
performing post-bootstrap initialization … ok
syncing data to disk … ok

# 5. 启动PostgreSQL服务
# cp /usr/pkg/share/examples/rc.d/postgresql /etc/rc.d/
# echo “postgresql=YES” >> /etc/rc.conf
# /etc/rc.d/postgresql start

# 输出示例：
postgresql starting.
2024-03-28 10:00:00.000 CST [12345] LOG: starting PostgreSQL 16.2 on x86_64–netbsd
2024-03-28 10:00:00.000 CST [12345] LOG: listening on IPv4 address “127.0.0.1”, port 5432
2024-03-28 10:00:00.000 CST [12345] LOG: database system is ready to accept connections

# 6. 配置NPF防火墙
# vi /etc/npf.conf
pass in final on $ext_if proto tcp from 192.168.1.0/24 to any port 5432

# 重载NPF规则
# npfctl reload

# 1. 安装Nginx
# pkgin install nginx

# 输出示例：
Calculating dependencies…
The following packages will be installed:
nginx-1.24.0

Proceed? [Y/n] y
Downloading nginx-1.24.0…
Installing nginx-1.24.0…

# 2. 配置Nginx
# vi /usr/pkg/etc/nginx/nginx.conf

# 添加以下配置
worker_processes auto;
worker_rlimit_nofile 65535;

events {
worker_connections 65535;
}

http {
include mime.types;
default_type application/octet-stream;
sendfile on;
keepalive_timeout 65;

server {
listen 80;
server_name localhost;

location / {
root /usr/pkg/share/nginx/html;
index index.html index.htm;
}
}
}

# 3. 启动Nginx服务
# cp /usr/pkg/share/examples/rc.d/nginx /etc/rc.d/
# echo “nginx=YES” >> /etc/rc.conf
# /etc/rc.d/nginx start

# 输出示例：
nginx starting.

# 4. 配置NPF防火墙
# vi /etc/npf.conf
pass in final on $ext_if proto tcp from any to any port { 80, 443 }

# 重载NPF规则
# npfctl reload

# 输出示例：
Calculating dependencies…
The following packages will be installed:
node_exporter-1.7.0

Proceed? [Y/n] y
Downloading node_exporter-1.7.0…
Installing node_exporter-1.7.0…

# 配置node_exporter
# cp /usr/pkg/share/examples/rc.d/node_exporter /etc/rc.d/
# echo “node_exporter=YES” >> /etc/rc.conf
# /etc/rc.d/node_exporter start

# 输出示例：
node_exporter starting.

# 查看系统性能
# top -n | head -15
Memory: 30G Act, 2G Inact, 28G Free, 500M Wired, 32G Swap

PID USERNAME PRI NICE SIZE RES STATE TIME CPU COMMAND
1 root 10 0 656K 832K sleep/1 0:00 0.00% init
1234 root 10 0 1024K 1536K sleep/0 0:00 0.00% sshd
5678 nginx 2 0 1280K 1792K sleep/0 0:00 0.00% nginx

# 查看系统日志
# tail -f /var/log/messages
Mar 28 10:00:00 fgedudb01 sshd[1234]: Accepted publickey for admin from 192.168.1.100 port 54321 ssh2
Mar 28 10:05:00 fgedudb01 postfix/smtp[5678]: connect to mail.example.com[192.168.1.200]:25: Connection refused