博客

sudo add-apt-repository ppa:5-sergey/nginx-quic
sudo apt update
sudo apt-get install postgresql
sudo -i -u postgres psql -c "CREATE USER onlyoffice WITH PASSWORD 'onlyoffice';"
sudo -i -u postgres psql -c "CREATE DATABASE onlyoffice OWNER onlyoffice;"
sudo apt-get install rabbitmq-server
sudo apt-get install nginx-extras
mkdir -p -m 700 ~/.gnupg
curl -fsSL https://download.onlyoffice.com/GPG-KEY-ONLYOFFICE | gpg --no-default-keyring --keyring gnupg-ring:/tmp/onlyoffice.gpg --import
chmod 644 /tmp/onlyoffice.gpg
sudo chown root:root /tmp/onlyoffice.gpg
sudo mv /tmp/onlyoffice.gpg /usr/share/keyrings/onlyoffice.gpg
echo "deb [signed-by=/usr/share/keyrings/onlyoffice.gpg] https://download.onlyoffice.com/repo/debian squeeze main" | sudo tee /etc/apt/sources.list.d/onlyoffice.list
sudo apt-get update
sudo apt-get install ttf-mscorefonts-installer
sudo apt-get install onlyoffice-documentserver

include /etc/nginx/includes/http-common.conf;
server {
  listen 0.0.0.0:80;
  listen [::]:80 default_server;
  server_tokens on;

  set secure_link_secret 123456;
  include /etc/nginx/includes/ds-*.conf;
}
server {
    listen 443 quic reuseport;
    listen       443 ssl;
    listen [::]:443 quic reuseport;
    listen       [::]:443 ssl;
    http2 on;
    http3 on;
    quic_retry on;


    # Use Mozilla's guidelines for SSL/TLS settings
    # https://mozilla.github.io/server-side-tls/ssl-config-generator/
    ssl_certificate     /opt/certs/hetao.me/fullchain.cer;
    ssl_certificate_key /opt/certs/hetao.me/hetao.me.key;
    ssl_protocols TLSv1.3;

    # Prevent nginx HTTP Server Detection
    server_tokens on;

    # HSTS settings
    # WARNING: Only add the preload option once you read about
    # the consequences in https://hstspreload.org/. This option
    # will add the domain to a hardcoded list that is shipped
    # in all major browsers and getting removed from this list
    # could take several months.
    add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always;
    add_header Alt-Svc 'h3=":443"; ma=86400';
    setsecure_link_secret 123456;
    include /etc/nginx/includes/ds-*.conf;
}