# 配置服务器
$ cat > server_config.sh << 'EOF' #!/bin/bash # 配置服务器网络 ip addr add 192.168.1.100/24 dev eth0 ip route add default via 192.168.1.1 # 配置存储 mkfs.xfs /dev/sdb mkdir /data mount /dev/sdb /data echo "/dev/sdb /data xfs defaults 0 0" >> /etc/fstab

# 配置防火墙
iptables -A INPUT -p tcp –dport 22 -j ACCEPT
iptables -A INPUT -p tcp –dport 80 -j ACCEPT
iptables -A INPUT -p tcp –dport 443 -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state –state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -j DROP

iptables-save > /etc/iptables/rules.v4
EOF

# 执行服务器配置
$ bash server_config.sh

# 检查服务器状态
$ server-status
服务器状态: 正常
CPU使用率: 10%
内存使用率: 20%
磁盘使用率: 30%
网络流量: 100Mbps

# 配置虚拟机
$ cat > vm_config.xml << 'EOF'
web-server
4
2

hvm











EOF

# 启动虚拟机
$ virsh define vm_config.xml
$ virsh start web-server

# 配置应用架构
$ cat > app_architecture.yml << 'EOF' version: '3' services: frontend: image: frontend:latest ports: - "80:80" depends_on: - backend backend: image: backend:latest ports: - "8080:8080" depends_on: - database - redis database: image: mysql:8.0 environment: MYSQL_ROOT_PASSWORD: password MYSQL_DATABASE: app_db volumes: - db-data:/var/lib/mysql redis: image: redis:6.0 ports: - "6379:6379" rabbitmq: image: rabbitmq:3.8 ports: - "5672:5672" volumes: db-data: EOF # 部署应用 $ docker-compose -f app_architecture.yml up -d # 检查应用状态 $ docker-compose -f app_architecture.yml ps Name Command State Ports ---------------------------------------------------------------------------------------- app_frontend_1 nginx -g daemon off; Up 0.0.0.0:80->80/tcp
app_backend_1 java -jar app.jar Up 0.0.0.0:8080->8080/tcp
app_database_1 docker-entrypoint.sh mysqld Up 3306/tcp, 33060/tcp
app_redis_1 docker-entrypoint.sh redis … Up 0.0.0.0:6379->6379/tcp
app_rabbitmq_1 docker-entrypoint.sh rabbi … Up 4369/tcp, 5671/tcp, 5672/tcp, 25672/tcp

# 测试应用
$ curl http://fgedudb

Welcome to the App

Status: OK

# 配置数据库架构
$ cat > db_architecture.sql << 'EOF' -- 创建数据库 CREATE DATABASE app_db; -- 创建用户表 CREATE TABLE users ( id INT PRIMARY KEY AUTO_INCREMENT, name VARCHAR(100) NOT NULL, email VARCHAR(100) UNIQUE NOT NULL, password VARCHAR(255) NOT NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); -- 创建产品表 CREATE TABLE products ( id INT PRIMARY KEY AUTO_INCREMENT, name VARCHAR(100) NOT NULL, price DECIMAL(10, 2) NOT NULL, description TEXT, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); -- 创建订单表 CREATE TABLE orders ( id INT PRIMARY KEY AUTO_INCREMENT, user_id INT NOT NULL, total DECIMAL(10, 2) NOT NULL, status VARCHAR(20) DEFAULT 'pending', created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, FOREIGN KEY (user_id) REFERENCES users(id) ); -- 创建订单详情表 CREATE TABLE order_items ( id INT PRIMARY KEY AUTO_INCREMENT, order_id INT NOT NULL, product_id INT NOT NULL, quantity INT NOT NULL, price DECIMAL(10, 2) NOT NULL, FOREIGN KEY (order_id) REFERENCES orders(id), FOREIGN KEY (product_id) REFERENCES products(id) ); -- 创建索引 CREATE INDEX idx_users_email ON users(email); CREATE INDEX idx_orders_user_id ON orders(user_id); CREATE INDEX idx_order_items_order_id ON order_items(order_id); CREATE INDEX idx_order_items_product_id ON order_items(product_id); EOF # 执行数据库脚本 $ mysql -u root -ppassword < db_architecture.sql # 检查数据库状态 $ mysql -u root -ppassword -e "SHOW DATABASES;" +--------------------+ | Database | +--------------------+ | information_schema | | app_db | | mysql | | performance_schema | | sys | +--------------------+ # 检查表结构 $ mysql -u root -ppassword -e "USE app_db; SHOW TABLES;" +-------------------+ | Tables_in_fgapp_db | +-------------------+ | order_items | | orders | | products | | users | +-------------------+

# 配置安全架构
$ cat > security_architecture.sh << 'EOF' #!/bin/bash # 配置防火墙 ufw enable ufw default deny incoming ufw default allow outgoing ufw allow ssh ufw allow http ufw allow https # 配置SSH sed -i 's/#Port 22/Port 2222/' /etc/ssh/sshd_config sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin no/' /etc/ssh/sshd_config sed -i 's/#PasswordAuthentication yes/PasswordAuthentication no/' /etc/ssh/sshd_config systemctl restart sshd # 配置fail2ban apt install -y fail2ban cat > /etc/fail2ban/jail.local << 'EOF2' [sshd] enabled = true port = 2222 filter = sshd logpath = /var/log/auth.log maxretry = 5 bantime = 3600 EOF2 systemctl restart fail2ban # 配置SSL证书 openssl req -x509 -newkey rsa:4096 -keyout /etc/ssl/private/server.key -out /etc/ssl/certs/server.crt -days 365 -nodes -subj "/CN=fgedu.net.cn" # 配置应用安全 cat > /etc/app/security.conf << 'EOF2' auth.method = oauth2 encryption.enabled = true audit.log.enabled = true EOF2 EOF # 执行安全配置 $ bash security_architecture.sh # 检查安全状态 $ security-status 安全状态: 正常 防火墙状态: 启用 SSH状态: 安全配置 Fail2ban状态: 启用 SSL证书: 有效 应用安全: 配置完成 # 执行安全扫描 $ nmap -sV fgedudb Starting Nmap 7.80 ( https://nmap.org ) at 2026-04-03 10:00:00 CST Nmap scan report for fgedudb (127.0.0.1) Host is up (0.0000070s latency). PORT STATE SERVICE VERSION 2222/tcp open ssh OpenSSH 8.0 (protocol 2.0) 80/tcp open http nginx 1.18.0 443/tcp open ssl/https nginx 1.18.0 6379/tcp open redis Redis key-value store 6.0.9 3306/tcp open mysql MySQL 8.0.23 Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 0.10 seconds

# 部署IT系统
$ ansible-playbook -i inventory.yml deploy.yml

# inventory.yml示例
$ cat inventory.yml
all:
hosts:
server1:
ansible_host: 192.168.1.100
server2:
ansible_host: 192.168.1.101
server3:
ansible_host: 192.168.1.102

# deploy.yml示例
$ cat deploy.yml
—
– hosts: all
become: yes
tasks:
– name: Update system
apt:
update_cache: yes
upgrade: yes

– name: Install required packages
apt:
name:
– nginx
– mysql-server
– redis-server
– docker.io
– docker-compose
state: present

– name: Start services
service:
name: “{{ item }}”
state: started
enabled: yes
with_items:
– nginx
– mysql
– redis
– docker

– name: Deploy application
copy:
src: app/
dest: /opt/app/

– name: Start application
shell:
cmd: docker-compose up -d
chdir: /opt/app/

# 检查系统状态
$ ansible-playbook -i inventory.yml check.yml

# check.yml示例
$ cat check.yml
—
– hosts: all
tasks:
– name: Check server status
ping:

– name: Check service status
service:
name: “{{ item }}”
state: started
with_items:
– nginx
– mysql
– redis
– docker

– name: Check application status
uri:
url: http://fgedudb
status_code: 200

# 测试系统性能
$ stress-ng –cpu 4 –io 2 –vm 1 –vm-bytes 128M –timeout 60s
stress-ng: info: [1234] dispatching hogs: 4 cpu, 2 io, 1 vm
stress-ng: info: [1234] successful run completed in 60.01s