Flask + html + Shell 實現nginx配置管理web平臺

時間 2021-01-19

標籤 html 前端 python nginx shell json flask 後端 bash app 欄目 Python 简体版

原文原文鏈接

一.原由:html

1.最近公司頻繁添加nginx 虛擬主機，操做太過頻繁，人工太坑，真對此需求新開發經過界面添加nginx 虛擬主機;前端

二.前端頁面代碼;python

<form action="/nginx_configuer" method="get">    
<div class="row">    
<div class="col-md-6" style="margin-top: 10px">    
<div class="form-group">    
<label for="exampleFormControlSelect1">nginx應用名稱</label>    
<select class="form-control"    
id="exampleFormControlSelect1">    
<option>ops_nginx01</option>    
<option>ops_nginx02</option>    
</select>    
<br>    
<div class="col-xs-12">    
<label for="exampleFormControlSelect1">訪問域名</label>    
<input type="text" id="text" name="domain_name"    
required="required"    
placeholder=""    
class="form-control col-md-7 col-xs-12">    
<br>    
<label for="exampleFormControlSelect1">後端ip地址</label>    
<input type="text" id="text02" name="backend_ip"    
required="required"    
placeholder=""    
class="form-control col-md-7 col-xs-12">    
<br>    
<label for="exampleFormControlSelect1">後端服務端口</label>    
<input type="text" id="text03" name="backend_port"    
required="required"    
placeholder=""    
class="form-control col-md-7 col-xs-12">    
</div>    
</div>    
</div>    
<div class="col-md-6" style="margin-top: 10px">    
<label for="exampleFormControlSelect1">Nginx IP列表</label>    
<select multiple class="form-control" id="nuber01">    
</select>    
<label for="exampleFormControlSelect1">Upstream 名稱</label>    
<input type="text" id="text04" name="upstream_name"    
required="required"    
placeholder=""    
class="form-control col-md-7 col-xs-12">    
</div>    
</div>    
</div>    
<div role="tabpanel" class="tab-pane fade" id="Test">    
TEST    
</div>    
<div role="tabpanel" class="tab-pane fade" id="Ontest">    
ONTEST    
</div>    
<div role="tabpanel" class="tab-pane fade" id="Cloudtest">    
CLOUD    
</div>    
<div role="tabpanel" class="tab-pane fade" id="Prod">    
PROD    
</div>    
</div>    
</div>    
<div class="modal-footer">    
<button type="button" class="btn btn-secondary" data-dismiss="modal">取消</button>    
<button type="submit" class="btn btn-primary">肯定</button>    
</div>    
</form>

頁面效果以下;nginx

三.flask 路由代碼以下;shell

"""
   經過頁面新增nginx 虛擬主機,固定參數,域名,後端ip地址和端口以及upstream 名稱;
"""

@app.route('/nginx_configuer', methods=['GET'])
def nginx_configuer():
    domain_name = request.args.get('domain_name')
    backend_ip = request.args.get('backend_ip')
    backend_port =  request.args.get('backend_port')
    upstream_name = request.args.get('upstream_name')
    nginx_config_instance = Nginx_configure()
    result = nginx_config_instance.nginx_config_edit(domain_name,backend_ip,backend_port,upstream_name)
    return Response(json.dumps(result), mimetype='application/json')

四.後臺處理邏輯代碼以下;json

# -*- coding: utf-8 -*-
import os
class Nginx_configure(object):
    def nginx_config_edit(self,domain_name,backend_ip, backend_port,upstream_name):
        self.name = domain_name
        self.ip   = backend_ip
        self.port = backend_port
        self.upstream_name = upstream_name
        p  = os.popen("/bin/bash ./shell/nginx_set_config.sh  {0} {1} {2} {3}".format(self.name,self.ip,self.port,self.upstream_name))
        reult = p.read()
        return reult

4.實現shell 腳本以下;flask

#!/bin/bash

function Edit_nginx_config(){
if [ $# == 0 ]
then
    echo "no parameters nuber"
else
    if [ $# == 4 ]
    then

cat >/etc/nginx/conf.d/$1.conf<<EOF
upstream $4 {
            server $2:$3;
          }

server {
        listen   80;
        server_name $1;
        access_log /chj/data/log/$1.log;
        location / {
           proxy_set_header Host \$host;
          proxy_set_header X-Real-IP \$remote_addr;
          proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
           add_header Access-Control-Allow-Origin *;
           add_header Access-Control-Allow-Headers X-Requested-With;
           add_header Access-Control-Allow-Methods GET,POST,OPTIONS,HEAD;
           proxy_pass http://$4;
        }

}
EOF
    echo "domain_nming add sucess"

    else
        echo  "Insufficient parameters $#"

    fi 
fi 
}
Edit_nginx_config $1 $2 $3 $4

(5).自動生成配置文件腳本；後端

#!/bin/bash

module_prod() {
domain=$1
if echo $domain|grep opstest.com >/dev/null;then
upstream_name=`echo $domain | sed 's#\.opstest\.com##' | sed 's#\.#-#g'`
fi
if echo $domain|grep devops.com >/dev/null;then
upstream_name=`echo $domain | sed 's#\.devops\.com##' | sed 's#\.#-#g'`
fi
cat >/home/ops/monitor/shell/logs/module_${domain}.conf<<EOF
upstream  {UPSTREAM_NAME}{
{UPSTREAM_ADDR}
}
server {
       listen  80;
       server_name {DOMAIN};
       client_max_body_size 100000M;
       charset utf-8;
       rewrite ^(.*)$  https://\$host\$1 permanent;
}
server{
        listen     443 ssl http2;
        server_name {DOMAIN};
        client_max_body_size 100000M;
        ssl_certificate      /app/nginx/conf/cert/opstest.com.crt;
        ssl_certificate_key  /app/nginx/conf/cert/opstest.com.key.pem; 
        proxy_set_header Host \$host;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
        access_log /data/log/nginx/{DOMAIN}.log;
        location / {
                proxy_pass http://{UPSTREAM_NAME};
        }
}
EOF
}
module_noprod() {
domain=$1
upstream_name=`echo $domain | sed 's#\.opstest\.com##' | sed 's#\.#-#g'`
cat >/home/ops/monitor/shell/logs/module_${domain}.conf<<EOF
upstream  {UPSTREAM_NAME}{
{UPSTREAM_ADDR}
}
server {
       listen  80;
       server_name {DOMAIN}; 
       charset utf-8;
       access_log /data/log/nginx/{UPSTREAM_NAME}.log;
       location / {
            proxy_pass http://{UPSTREAM_NAME};
       }
}
server{
        listen     443 ssl http2;
        server_name {DOMAIN};
        ssl_certificate      /etc/pki/CA/private/opstest.com.crt;
        ssl_certificate_key  /etc/pki/CA/private/opstest.com.key.pem;
        ssl_protocols TLSv1.2;
        ssl_prefer_server_ciphers on;
        access_log /data/log/nginx/{UPSTREAM_NAME}.log;
        location / {
             proxy_pass http://{UPSTREAM_NAME};
        }
}
EOF
}

module_ontest() {
domain=$1
upstream_name=`echo $domain | sed 's#\.opstest\.com##' | sed 's#\.#-#g'`
cat >/home/ops/monitor/shell/logs/module_${domain}.conf<<EOF
upstream  {UPSTREAM_NAME}{
{UPSTREAM_ADDR}
}
server {
       listen  80;
       server_name {DOMAIN}; 
       charset utf-8;
       access_log /data/log/nginx/{UPSTREAM_NAME}.log;
       location / {
            proxy_pass http://{UPSTREAM_NAME};
       }
}
server{
        listen     443 ssl http2;
        server_name {DOMAIN};
        ssl_certificate      /etc/pki/CA/private/opstest.com.crt;
        ssl_certificate_key  /etc/pki/CA/private/opstest.com.key.pem;
        ssl_protocols TLSv1.2;
        ssl_prefer_server_ciphers on;
        access_log /data/log/nginx/{UPSTREAM_NAME}.log;
        location / {
             proxy_pass http://{UPSTREAM_NAME};
        }
}
EOF
}
setIp() {
    >/home/ops/monitor/shell/logs/tphost
    run_env=$1
    if [ "$run_env" == "test" ];then
        echo -n -e "[domain-ip]\n192.168.42.111" >/home/ops/monitor/shell/logs/tphost
    fi
    if [ "$run_env" == "dev" ];then
        echo -n -e "[domain-ip]\n192.168.43.111" >/home/ops/monitor/shell/logs/tphost
    fi
    if [ "$run_env" == "testone" ];then
        echo -n -e "[domain-ip]\n192.168.34.111" >/home/ops/monitor/shell/logs/tphost
    fi
    if [ "$run_env" == "ontest" ];then
        echo -n -e "[domain-ip]\n192.168.45.112" >/home/ops/monitor/shell/logs/tphost
    fi
    if [ "$run_env" == "prod" ];then
        echo -n -e "[domain-ip]\n192.168.42.11\n192.168.42.112" >/home/ops/monitor/shell/logs/tphost
    fi
}

judgeDomain() {
    domain=$1
    if dig @192.168.54.231 $domain +short |grep '[0-9]' >/dev/null;then
        echo "$domain 已經存在"
        exit
    fi
}
run_env=`echo $1 |tr [A-Z] [a-z]`
domain="$2"
proxy_ip="$3"
upstream_name=`echo $domain|sed 's#\.#-#g'`

judgeDomain $domain
if [ "$run_env" == "prod" ];then
   module_prod $domain
elif [ "$run_env" == "ontest" ];then
   module_ontest $domain
else
   module_noprod $domain
fi
setIp ${run_env}
for ip in `echo ${proxy_ip} |sed 's#\,#\n#g'`
do
    upstream="$upstream        server $ip  max_fails=3 fail_timeout=10s;\n"
done

sed -i "s#{DOMAIN}#${domain}#" /home/ops/monitor/shell/logs/module_${domain}.conf 
sed -i "s#{UPSTREAM_ADDR}#${upstream}#" /home/ops/monitor/shell/logs/module_${domain}.conf
sed -i "s#{UPSTREAM_NAME}#${upstream_name}#g" /home/ops/monitor/shell/logs/module_${domain}.conf 
ansible -i /home/ops/monitor/shell/logs/tphost domain-ip -m copy -a "src=/home/ops/monitor/shell/logs/module_${domain}.conf dest=/app/nginx/conf/conf.d/${domain}.conf" --sudo
ansible -i /home/ops/monitor/shell/logs/tphost domain-ip -m shell -a "/app/nginx/sbin/nginx -t && /app/nginx/sbin/nginx -s reload" --sudo