Rocket.Chat服务器部署

安装部署

部署环境

• OS: CentOS7.6
• CPU: 8core
• MEM: 16G
• Nodejs: v12.14.0
• MongoDB: v3.6.19
• Rocket.Chat 3.7.0

所有文件可在这里下载：

链接：https://pan.baidu.com/s/1VhVnWlkb9efQ4ynJucQXoA 
提取码：ix3b 

安装操作系统时最好最小化安装,并将最大的数据盘挂载分配给/srv目录

关闭系统防火墙和SElinux

service firewalld stop
service iptables stop
chkconfig iptables off 
chkconfig firewalld off
setenforce 0
sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config

内核优化

net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
kernel.threads-max=65535
kernel.msgmni = 16384
kernel.msgmnb = 65535
kernel.msgmax = 65535
kernel.shmmax = 68719476736
kernel.shmall = 4294967296
kernel.shmmni = 4096
kernel.sem = 5010 641280 5010 128
net.ipv4.tcp_max_tw_buckets = 6000000
net.ipv4.tcp_sack = 1
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_rmem = 4096 87380 16777216
net.ipv4.tcp_wmem = 4096 65536 16777216
net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.core.netdev_max_backlog = 200000
net.ipv4.tcp_no_metrics_save = 1
net.core.somaxconn = 65535
net.core.optmem_max = 10000000
net.ipv4.tcp_max_orphans = 32768
net.ipv4.tcp_max_syn_backlog = 655360
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_fin_timeout = 10
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_keepalive_probes=10
net.ipv4.tcp_keepalive_intvl=2
net.ipv4.ip_local_port_range = 10000 65535
net.ipv4.route.gc_timeout = 100
net.ipv4.tcp_congestion_control=cubic
net.ipv4.conf.lo.arp_ignore = 1
net.ipv4.conf.lo.arp_announce = 2
net.ipv4.conf.all.arp_ignore = 1
net.ipv4.conf.all.arp_announce = 2
fs.aio-max-nr = 1024000
fs.file-max = 1024000
kernel.pid_max=327680
vm.swappiness = 0
vm.max_map_count=655360

sysctl -p后建议重启系统

MongoDB安装

这里我用的老版本,官网上我看都直接用4版本了, 反正也没啥大问题，先用这个吧，毕竟我这儿只下载了这个版本的安装包。

• 创建所需要的目录和用户

mkdir -p /srv/{app,data,logs,backup}/mongodb
useradd -r -M -s /sbin/nologin mongod

将百度云里面的mongodb安装包sftp到服务器并解压

tar -zxf mongodb-3.6.19.tar.gz -C /srv/app/mongodb/

创建mongodb服务器的配置：

[root@localhost ~]# cat /srv/app/mongodb/conf/mongod.conf 
systemLog:
  destination: file
  logAppend: true
  path: /srv/logs/mongodb/mongod.log

storage:
  dbPath: /srv/data/mongodb
  journal:
    enabled: true
  engine: mmapv1
  wiredTiger:
    engineConfig:
      cacheSizeGB: 2

processManagement:
  fork: true
  pidFilePath: /run/mongodb/mongod.pid
  timeZoneInfo: /usr/share/zoneinfo

net:
  port: 27017
  bindIp: 127.0.0.1

replication:
  replSetName: rs01

#security:
#  authorization: enabled

添加mongodb的systemd服务启动配置(开机启动)

[root@localhost ~]# cat /etc/systemd/system/mongod.service
[Unit]
Description=MongoDB Database Server
Documentation=https://docs.mongodb.org/manual
After=network.target

[Service]
User=mongod
Group=mongod
Environment="OPTIONS=-f /srv/app/mongodb/conf/mongod.conf"
EnvironmentFile=-/etc/sysconfig/mongod
ExecStart=/srv/app/mongodb/bin/mongod $OPTIONS
ExecStartPre=/usr/bin/mkdir -p /var/run/mongodb
ExecStartPre=/usr/bin/chown mongod:mongod /var/run/mongodb
ExecStartPre=/usr/bin/chmod 0755 /var/run/mongodb
PermissionsStartOnly=true
PIDFile=/var/run/mongodb/mongod.pid
Type=forking
LimitFSIZE=infinity
LimitCPU=infinity
LimitAS=infinity
LimitNOFILE=64000
LimitNPROC=64000
LimitMEMLOCK=infinity
TasksMax=infinity
TasksAccounting=false

[Install]
WantedBy=multi-user.target

进行服务启动

chown -Rf mongod:mongod /srv/{app,data,logs,backup}/mongodb
systemctl enable mongod.servie 
systemctl start mongod.service
sleep 10s; /srv/app/mongodb/bin/mongo --eval "printjson(rs.initiate())"

安装Rocket.Chat

将rocketchat服务安装包和nodejs安装包导入服务器

#第一步,准备文件和nodejs环境
tar -zxf rocket.chat-3.7.0.tgz
mv bundle /srv/app/Rocket.Chat
mkdir -p /opt/nodejs
xz -d node-v12.14.0-linux-x64.tar.xz
tar -zxf node-v12.14.0-linux-x64.tar -C /opt/nodejs/
ln -s /opt/nodejs/node-v12.14.0-linux-x64/node /usr/bin/
ln -s /opt/nodejs/node-v12.14.0-linux-x64/npm /usr/bin/
npm config set registry https://registry.npm.taobao.org
npm install -g inherits n

# 第二步,正式安装rocket.chat
cd /srv/app/Rocket.Chat/programs/server && npm install

#添加用户并修改权限
useradd -r -M -s /sbin/nologin rocketchat
chown -Rf rocketchat:rocketchat /srv/app/Rocket.Chat

添加服务启动配置：

[root@localhost ~]# cat /etc/systemd/system/rocketchat.service 
[Unit]
Description=The Rocket.Chat server
After=network.target mongod.target

[Service]
Type=simple
Environment="MONGO_URL=mongodb://localhost:27017/rocketchat?replicaSet=rs01"
Environment="MONGO_OPLOG_URL=mongodb://localhost:27017/local?replicaSet=rs01"
Environment="ROOT_URL=http://localhost:3000/"
Environment="PORT=3000"
ExecStart=/usr/bin/node /srv/app/Rocket.Chat/main.js
Restart=on-failure

StandardOutput=syslog
StandardError=syslog
SyslogIdentifier=rocketchat
User=rocketchat

[Install]
WantedBy=multi-user.target

启动服务:

systemctl enable rocketchat
systemctl start rocketchat

这样服务就能启动了, 不过也有可能会有一些报错，就需要看/var/log/message日志进行解决了

访问 http://ip:3000就能看到界面了。

nginx代理

这里nginx的安装就不多说了，相信各位道友都有很好的解决办法,实在嫌麻烦的朋友可以用yum安装搞定；不多说，直接上配置:

server {
    listen   80 default_server;
    listen   [::]:80 default_server;
    listen   443 default_server ssl http2;
    listen   [::]:443 default_server ssl http2;
    server_name  _;
    return 444;
    include  /srv/app/tengine/conf/ssl_xxx.top.conf;
}

# Upstreams
upstream backend {
    server 127.0.0.1:3000;
}

server {
    listen       80;
    server_name  chat.xxx.top;
    return 301   https://$host$request_uri;
    access_log   /srv/logs/nginx/rocketchat_access.log  nginxjson;
    error_log    /srv/logs/nginx/rocketchat_error.log;
}

server {
    listen 443 ssl http2;
    server_name  chat.xxx.top;
    client_max_body_size 200M;
    access_log /srv/logs/nginx/rocketchat_access.log;
    error_log  /srv/logs/nginx/rocketchat_error.log;
	
    ssl on;
    ssl_certificate       /srv/app/tengine/cert/xxx.top/nginx.crt;
    ssl_certificate_key   /srv/app/tengine/cert/xxx.top/nginx.key;
    ssl_dhparam           /srv/app/tengine/cert/xxx.top/dhparams.pem;
    ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
    ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256;
    ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;
    
  
    location / {
        proxy_pass http://backend;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $http_host;

        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header X-Nginx-Proxy true;

        proxy_redirect off;
    }
}