腾讯云国际代理商：如何用云服务器快速部署WorkBuddy AI助手？

# SSH登录腾讯云国际CVM
ssh root@服务器公网IP
# 更新系统安全补丁
sudo apt update && sudo apt upgrade -y
# 海外业务设置香港时区，避免AI任务时间错乱
timedatectl set-timezone Asia/Hong_Kong
# 创建普通运维账号，禁用root日常操作
adduser deploy
usermod -aG sudo deploy
su deploy

sudo apt install git curl vim ca-certificates -y
# 安装Docker官方源
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
sudo apt update
sudo apt install docker-ce docker-ce-cli containerd.io docker-compose-plugin -y
# 普通用户免sudo操作docker
sudo usermod -aG docker deploy
newgrp docker
# 设置Docker开机自启
systemctl enable --now docker

sudo vim /etc/docker/daemon.json
# 写入加速配置
{
  "registry-mirrors": ["https://mirror.tencentcloudhk.com"]
}
sudo systemctl restart docker

# 创建项目目录
mkdir -p /home/deploy/workbuddy-ai
cd /home/deploy/workbuddy-ai
# 拉取官方部署脚本仓库
git clone https://github.com/TencentCodeBuddy/WorkBuddy-Docker.git .
# 复制环境配置模板，自定义参数
cp .env.example .env
vim .env

# 后台持久化启动容器组
docker compose up -d
# 查看运行状态
docker compose ps
# 实时查看运行日志，排查启动异常
docker compose logs -f workbuddy

sudo apt install nginx -y
systemctl enable --now nginx
# 创建站点配置文件
sudo vim /etc/nginx/conf.d/workbuddy-ai.conf

server {
    listen 80;
    server_name ai.yourdomain.com;
    return 301 https://$host$request_uri;
}
server {
    listen 443 ssl;
    server_name ai.yourdomain.com;
    ssl_certificate /etc/letsencrypt/live/ai.yourdomain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/ai.yourdomain.com/privkey.pem;

    client_max_body_size 100M;
    proxy_buffer_size 128k;

    location / {
        proxy_pass http://127.0.0.1:3000;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
    # 静态资源长期缓存，降低海外访问延迟
    location ~* \.(js|css|png|jpg|ico)$ {
        proxy_pass http://127.0.0.1:3000;
        expires 15d;
        add_header Cache-Control public;
    }
}

sudo nginx -t
sudo systemctl reload nginx

sudo apt install certbot python3-certbot-nginx -y
sudo certbot --nginx -d ai.yourdomain.com --non-interactive --agree-tos -m admin@yourcompany.com
# 验证自动续期定时器
certbot renew --dry-run