# 一、安装jenkins
为了方便使用docker的方式安装

编写docker-compose.yml

```js
version: "3.1"
services:
  jenkins:
    image: jenkins/jenkins
    container_name: jenkins
    ports:
      - 8080:8080
      - 50000:50000
    volumes:
      - ./data/:/var/jenkins_home/
```


启动
```js
docker-compose up -d
```
查看日志启动不成功，直接关闭服务给映射宿主机的文件目录授权

![image.png](/static/img/2745fb75dfc32cbb06f91dbeafb6e4c7.image.webp)
```js
docker-compose down -v
```
再次启动，查看docker日志发现没有问题了
```js
docker-compose up -d
```

![image.png](/static/img/2034bf3b919096a17ca048201a71e866.image.webp)

![image.png](/static/img/6dceb04f4f05897148f8d38cdc83d32c.image.webp)

![image.png](/static/img/9a1ac2262917f7d860b367a95a24b552.image.webp)

![image.png](/static/img/0d610f1a9885813034e48f0a1713c7ca.image.webp)

# 二、如果下载插件失败，直接用另一种方法

![image.png](/static/img/a9900d9149c65f240ee5eb01164b8ae7.image.webp)

直接修改数据卷映射的hudson.model.UpdateCenter.xml文件，然后重启jenkins

```yml
# 修改数据卷中的hudson.model.UpdateCenter.xml文件
<?xml version='1.1' encoding='UTF-8'?>
<sites>
  <site>
    <id>default</id>
    <url>https://updates.jenkins.io/update-center.json</url>
  </site>
</sites>
# 将下载地址替换为http://mirror.esuni.jp/jenkins/updates/update-center.json
<?xml version='1.1' encoding='UTF-8'?>
<sites>
  <site>
    <id>default</id>
    <url>http://mirror.esuni.jp/jenkins/updates/update-center.json</url>
  </site>
</sites>
# 清华大学的插件源也可以https://mirrors.tuna.tsinghua.edu.cn/jenkins/updates/update-center.json
```

# 三、配置管理员的用户密码

![image.png](/static/img/b49d645025125817c708d084480c7b1b.image.webp)

# 四、安装需要的两个插件

![image.png](/static/img/462308bbc97dab055940a3a3b15e9066.image.webp)
![image.png](/static/img/31dc401b17e0bf52937c7633818f5ff9.image.webp)


![image.png](/static/img/c3dfbd2b9d6b362085dd2559e469a178.image.webp)


![image.png](/static/img/d975c6c9d11243f1a23551345664a653.image.webp)



# 五、给Jenkins配置jdk和maven

![image.png](/static/img/462308bbc97dab055940a3a3b15e9066.image.webp)


![image.png](/static/img/dfb86b6ec602c1bf4fd7c677f93a5726.image.webp)

### 1.配置Jenkins配置jdk和maven
把解压的jdk目录和maven目录转移到数据卷目录中

```js
cp -r  jdk/ /jenkins/data/
cp -r  maven/ /jenkins/data/
```
![image.png](/static/img/7bd49bae3c17d6159761edd4f48b470a.image.webp)

![image.png](/static/img/4cd46ac4d407ad8473726a4a9c597b5a.image.webp)

![image.png](/static/img/10391d3d1e75adc1ebd3538dc65640c9.image.webp)

设置完成后保存

# 六、配置一台测试服务器
我直接用本机作为测试服务器，需要新建一个路径作为配置

```js
mkdir /songxuan
```

![image.png](/static/img/ab6f1f8b0e85ad8a1a56141554a8c278.image.webp)

滑下去找到这个

![image.png](/static/img/b88c854204ee22c3ff50977f82af2d2c.image.webp)
然后填写好配置

![image.png](/static/img/d19693394512819cd0a07058fd79c7e1.image.webp)

测试连接没有问题

![image.png](/static/img/f4096fa59bc4d1d3c8e68ae91ef5c912.image.webp)

3.jenkins配置

# 一、下载Mavne包
https://maven.apache.org/download.cgi


![image.png](/static/img/75040e9f34643dd55a173e10c77d2bc4.image.webp)


```js
tar -zxvf  apache-maven-3.8.9-bin.tar.gz  -C /usr/local/
```

```js
cd /usr/local/
```
```js
mv apache-maven-3.8.9/ maven
```

修改配置

```js
vi /usr/local/maven/conf/settings.xml
```
清空全部然后插入以下内容：
```yml
<?xml version="1.0" encoding="UTF-8"?>
<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
          xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 http://maven.apache.org/xsd/settings-1.0.0.xsd">
    
    
    <mirrors>
        <mirror>
            <id>alimaven</id>
            <name>aliyun maven</name>
            <url>https://maven.aliyun.com/nexus/content/groups/public/</url>
            <mirrorOf>central</mirrorOf>
        </mirror>
    </mirrors>

    
    <profiles>
        <profile>
            <id>jdk-1.8</id>
            <activation>
                <activeByDefault>true</activeByDefault>
                <jdk>1.8</jdk>
            </activation>
            <properties>
                <maven.compiler.source>1.8</maven.compiler.source>
                <maven.compiler.target>1.8</maven.compiler.target>
                <maven.compiler.compilerVersion>1.8</maven.compiler.compilerVersion>
            </properties>
        </profile>
    </profiles>
    
    
    <activeProfiles>
        <activeProfile>jdk-1.8</activeProfile>
    </activeProfiles>
</settings>
```

# 二、下载java JKD安装

```js
tar -zxvf jdk1.8.gz
```

```js
mv jdk1.8  /usr/local/
```

2.Maven安装

# 一、安装gitlab
找一台新的服务器，安装好docker和docker-compose
```yml
version: '3.1'
services:
  gitlab:
    image: 'gitlab/gitlab-ce:latest'
    container_name: gitlab
    restart: always
    environment:
      GITLAB_OMNIBUS_CONFIG: |
        external_url 'http://192.168.201.105:8929'
        gitlab_rails['gitlab_shell_ssh_port'] = 2224
    ports:
      - '8929:8929'
      - '2224:2224'
    volumes:
      - './config:/etc/gitlab'
      - './logs:/var/log/gitlab'
      - './data:/var/opt/gitlab'

```
启动
```js
docker-compose up -d
```

需要等待十来分钟初始化

# 二、安装好后根据ip和端口去访问页面
http://192.168.201.105:8929/

默认密码在docker 容器里面

```js
docker exec -it gitlab /bin/sh
```
进入容器后查看密码
```js
cat /etc/gitlab/initial_root_password
```

![image.png](/static/img/f63752bc670a4654d8ce45ce03c4f59d.image.webp)

然后去网页登录，修改密码

![image.png](/static/img/49a9fd56ea6be6f9bcb9ff44eb167997.image.webp)

![image.png](/static/img/7269f07abc0f0a3bf9c0e943eb8cae95.image.webp)

1.gitlab安装部署

# 一、去阿里云找个免费的SSL证书下载

![image.png](/static/img/60aa90d1ed1896f726ce32d54ef75ad6.image.webp)


![image.png](/static/img/20c212a72d4bf2e81096d85e2fa8acf2.image.webp)

购买免费三个月的证书
![image.png](/static/img/1af82c0a8176ce23730ecc482245e7a1.image.webp)

购买后，点创建证书填好信息
![image.png](/static/img/4ddf4fd4e3fd5cb0566fc04f2e276d4e.image.webp)

然后验证

![image.png](/static/img/a27b398a18214606508a150d06bf1f41.image.webp)

验证完成后，点击更多去下载证书

![image.png](/static/img/54d1a99894eb1dd2dfc6f4097940ab96.image.webp)
下载后得到这个文件

![image.png](/static/img/af1a38a27bd46ebd7a98750e6fc2195d.image.webp)

# 二、配置Nginx的HTTPS证书
## 在NGINX的conf目录下创建一个cert文件目录，然后把证书文件上传到该目录下解压


```js
mkdir /usr/local/nginx/conf/cert
```
```js
unzip 20282216_songxuan.vip_nginx.zip
```

然后修改外置的配置文件

```text
# songxuan.conf 完整配置

upstream songxuan {
    server 117.72.79.70:81;
}

# HTTP 服务 - 自动跳转到 HTTPS
server {
    listen       80;
    server_name  songxuan.vip;  # 修改为您的域名
    
    # 所有HTTP请求重定向到HTTPS
    return 301 https://$host$request_uri;
}

# HTTPS 服务
server {
    listen       443 ssl;
    server_name  songxuan.vip;  # 修改为您的域名
    
    # SSL证书配置 - 使用您现有的证书文件
    ssl_certificate      /usr/local/nginx/conf/cert/songxuan.vip.pem;   # 根据您的实际路径
    ssl_certificate_key /usr/local/nginx/conf/cert/songxuan.vip.key;   # 根据您的实际路径
    
    # SSL协议优化
    ssl_protocols        TLSv1.2 TLSv1.3;
    ssl_ciphers          ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_session_cache    shared:SSL:10m;
    ssl_session_timeout  10m;
    ssl_prefer_server_ciphers on;

    # 保留原有location配置
    location / {
        root   /usr/local/nginx/html;
        index  guoqin.html;
         proxy_pass http://songxuan;  # 按需启用
    }

    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   html;
    }

    error_page   404  /guoqin.html;
    location = /guoqin.html {
        root   /usr/local/nginx/html;
    }
}

```

4.Nginx的HTTPS配置

# 一、安全设置

![image.png](/static/img/8c1d701b6d7a1679028940352a33f491.image.webp)

修改redis文件目录redis.conf
```js
vi /songxuan/redis-6.2.14/redis.conf
```

然后vi:/查找这个
```js
requirepass foobared
```
然后把#好注释掉，后面的foobared改成你的密码

![image.png](/static/img/e4b6d2eb14745688cb6b03900ffad6a1.image.webp)

最后启动redis 连接数据库

```js
redis-cli -h 192.168.201.104 -p 6379
127.0.0.1:6379> AUTH 12345678
```

![image.png](/static/img/fca0f920f39d624aa88ca874aad0a18a.image.webp)