# 2. 创建安装U盘
dd if=rhel-9.3-x86_64-dvd.iso of=/dev/sdb bs=4M status=progress

# 3. 安装RHEL 9.3
# 启动服务器，从U盘启动
# 选择语言：中文
# 选择安装位置：自定义分区
# 配置网络：设置静态IP
# 配置用户：创建root用户和普通用户
# 开始安装

# 4. 安装后配置
# 注册系统
subscription-manager register –username=username –password=password

# 启用存储库
subscription-manager repos –enable=rhel-9-for-x86_64-appstream-rpms
subscription-manager repos –enable=rhel-9-for-x86_64-baseos-rpms

# 更新系统
dnf update -y

# 安装必要的包
dnf install -y vim wget curl net-tools

# 2. 配置Keepalived
cat > /etc/keepalived/keepalived.conf << 'EOF' global_defs { router_id LVS_DEVEL } vrrp_instance VI_1 { state MASTER interface eth0 virtual_router_id 51 priority 100 advert_int 1 authentication { auth_type PASS auth_pass 1111 } virtual_ipaddress { 192.168.1.100 } } EOF # 3. 启动Keepalived systemctl start keepalived systemctl enable keepalived # 4. 配置HAProxy cat > /etc/haproxy/haproxy.cfg << 'EOF' global log 127.0.0.1 local2 chroot /var/lib/haproxy pidfile /var/run/haproxy.pid maxconn 4000 user haproxy group haproxy daemon defaults mode http log global option httplog option dontlognull option http-server-close option forwardfor except 127.0.0.1 option redispatch retries 3 timeout http-request 10s timeout queue 1m timeout connect 10s timeout client 1m timeout server 1m timeout http-keep-alive 10s timeout check 10s maxconn 3000 frontend http-in bind *:80 default_backend servers backend servers balance roundrobin server server1 192.168.1.10:80 check server server2 192.168.1.11:80 check EOF # 5. 启动HAProxy systemctl start haproxy systemctl enable haproxy

# 2. 配置防火墙
firewall-cmd –permanent –add-service=http
firewall-cmd –permanent –add-service=https
firewall-cmd –permanent –add-service=ssh
firewall-cmd –reload

# 3. 配置密码策略
cat > /etc/security/pwquality.conf << 'EOF' minlen = 12 minclass = 4 dcredit = -1 ucredit = -1 lcredit = -1 ocredit = -1 EOF # 4. 配置SSH cat > /etc/ssh/sshd_config << 'EOF' PermitRootLogin no PasswordAuthentication no PubkeyAuthentication yes AuthorizedKeysFile .ssh/authorized_keys EOF systemctl restart sshd # 5. 配置定期更新 cat > /etc/cron.daily/update-system << 'EOF' #!/bin/bash dnf update -y systemctl restart necessary-services EOF chmod +x /etc/cron.daily/update-system

# 2. 初始化数据库
postgresql-setup –initdb

# 3. 启动PostgreSQL
systemctl start postgresql
systemctl enable postgresql

# 4. 配置PostgreSQL
cat > /var/lib/pgsql/data/pg_hba.conf << 'EOF' local all postgres peer local all all md5 host all all 127.0.0.1/32 md5 host all all ::1/128 md5 host all all 192.168.1.0/24 md5 EOF # 5. 重启PostgreSQL systemctl restart postgresql # 6. 创建数据库和用户 su - postgres -c "createdb fgedudb" su - postgres -c "createuser -P fgedu" su - postgres -c "psql -c 'GRANT ALL PRIVILEGES ON DATABASE fgedudb TO fgedu;'"

# 2. 启动Tomcat
systemctl start tomcat
systemctl enable tomcat

# 3. 部署HIS系统
# 将HIS系统部署包复制到Tomcat webapps目录
cp his.war /usr/share/tomcat/webapps/

# 4. 配置HIS系统
# 编辑HIS系统配置文件
vim /usr/share/tomcat/webapps/his/WEB-INF/classes/application.properties

# 配置数据库连接
spring.datasource.url=jdbc:postgresql://localhost:5432/fgedudb
spring.datasource.username=fgedu
spring.datasource.password=password

# 5. 重启Tomcat
systemctl restart tomcat

# 6. 验证HIS系统
curl http://localhost:8080/his