83 lines
2.3 KiB
Bash
83 lines
2.3 KiB
Bash
#!/bin/bash
|
||
|
||
# 基本信息
|
||
RABBITMQ_USER="admin"
|
||
RABBITMQ_PASS="a7c73c9a"
|
||
SSL_DIR="/apps/ssl/mq.zyihs.com"
|
||
CERT_FILE="$SSL_DIR/mq.zyihs.com.pem"
|
||
KEY_FILE="$SSL_DIR/mq.zyihs.com.key"
|
||
HOSTNAME="mq.zyihs.com"
|
||
|
||
echo "开始 RabbitMQ 安装与配置..."
|
||
|
||
# 安装依赖
|
||
yum update -y
|
||
yum install -y epel-release
|
||
yum install -y socat logrotate tar curl gcc gcc-c++ make
|
||
|
||
# 安装 Erlang
|
||
if ! command -v erl &> /dev/null; then
|
||
echo "安装 Erlang..."
|
||
yum install -y https://packages.erlang-solutions.com/erlang-solutions-2.0-1.noarch.rpm
|
||
yum install -y erlang
|
||
fi
|
||
|
||
# 安装 RabbitMQ
|
||
cd /usr/local/src
|
||
RABBITMQ_RPM="rabbitmq-server-3.12.0-1.el8.noarch.rpm"
|
||
if [ ! -f "$RABBITMQ_RPM" ]; then
|
||
curl -O https://github.com/rabbitmq/rabbitmq-server/releases/download/v3.12.0/$RABBITMQ_RPM
|
||
fi
|
||
yum install -y $RABBITMQ_RPM
|
||
|
||
# 启动 RabbitMQ 并设置开机自启
|
||
systemctl enable rabbitmq-server
|
||
systemctl start rabbitmq-server
|
||
sleep 5
|
||
|
||
# 开启管理插件
|
||
rabbitmq-plugins enable rabbitmq_management
|
||
|
||
# 创建管理员账号
|
||
rabbitmqctl add_user $RABBITMQ_USER $RABBITMQ_PASS
|
||
rabbitmqctl set_user_tags $RABBITMQ_USER administrator
|
||
rabbitmqctl set_permissions -p / $RABBITMQ_USER ".*" ".*" ".*"
|
||
|
||
# 配置 SSL
|
||
mkdir -p /etc/rabbitmq
|
||
cat > /etc/rabbitmq/rabbitmq.conf <<EOF
|
||
listeners.ssl.default = 5671
|
||
ssl_options.cacertfile = $CERT_FILE
|
||
ssl_options.certfile = $CERT_FILE
|
||
ssl_options.keyfile = $KEY_FILE
|
||
ssl_options.verify = verify_none
|
||
ssl_options.fail_if_no_peer_cert = false
|
||
|
||
management.listener.port = 15672
|
||
management.listener.ssl = false
|
||
EOF
|
||
|
||
# 检查证书文件
|
||
if [ ! -f "$CERT_FILE" ] || [ ! -f "$KEY_FILE" ]; then
|
||
echo "警告：SSL 证书文件不存在，请检查 $SSL_DIR 路径下的 .pem 和 .key 文件！"
|
||
else
|
||
echo "已检测到 SSL 证书文件，配置将生效。"
|
||
fi
|
||
|
||
# 防火墙配置（可选，需确认 firewalld 是否启用）
|
||
if systemctl is-active --quiet firewalld; then
|
||
firewall-cmd --add-port=5671/tcp --permanent
|
||
firewall-cmd --add-port=15672/tcp --permanent
|
||
firewall-cmd --reload
|
||
echo "防火墙已开放端口 5671 (SSL AMQP) 和 15672 (管理后台)"
|
||
fi
|
||
|
||
# 重启 RabbitMQ
|
||
systemctl restart rabbitmq-server
|
||
sleep 5
|
||
|
||
echo "RabbitMQ 安装与配置完成。"
|
||
echo "管理后台：http://$HOSTNAME:15672"
|
||
echo "AMQP SSL 端口：5671"
|
||
echo "登录账号：$RABBITMQ_USER"
|
||
echo "登录密码：$RABBITMQ_PASS" |