$ cd zone@docker/database-dc-mysql-8
$ cp tpl.zero-mysql-8.env zero-mysql-8.env

MYSQL_ROOT_PASSWORD=
MYSQL_ROOT_HOST=%
MYSQL_USER=zero
MYSQL_PASSWORD=

$ ./zero-mysql-8-@up.sh

$ mysql -u zero -P 3306 -h ox.engine.cn
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 11
Server version: 8.0.27 MySQL Community Server - GPL

Copyright (c) 2000, 2023, Oracle and/or its affiliates.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql>

$ cd zone@terraform/kmini/database-mysql-8
$ cp tpl.initialize.sh initialize.sh

#!/usr/bin/env bash
export TF_VAR_mysql_password=
export TF_VAR_mysql_root_password=
export TF_VAR_mysql_data_path=${PWD}/data

# 编辑完成后执行
$ source ./initialize.sh

# 初始化所有资源
$ terraform init

Initializing the backend...

Initializing provider plugins...
- Finding kreuzwerker/docker versions matching "3.0.1"...
- Installing kreuzwerker/docker v3.0.1...
- Installed kreuzwerker/docker v3.0.1 (self-signed, key ID BD080C4571C6104C)

Partner and community providers are signed by their developers.
If you''d like to know more about provider signing, you can read about it here:
https://www.terraform.io/docs/cli/plugins/signing.html

Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

# 查看执行计划
$ terraform plan

Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:
  + create

Terraform will perform the following actions:

  # docker_container.terraform-mysql-8 will be created
  + resource "docker_container" "terraform-mysql-8" {
      + attach                                      = false
      + bridge                                      = (known after apply)
      + command                                     = (known after apply)
      + container_logs                              = (known after apply)
      + container_read_refresh_timeout_milliseconds = 15000
      + entrypoint                                  = (known after apply)
      + env                                         = [
          + "MYSQL_PASSWORD=xxxxxx123YH",
          + "MYSQL_ROOT_HOST=%",
          + "MYSQL_ROOT_PASSWORD=xxxxxxijn123",
          + "MYSQL_USER=zero",
        ]
      + exit_code                                   = (known after apply)
      + hostname                                    = "ox.engine.cn"
      + id                                          = (known after apply)
      + image                                       = "mysql:8.0.32"
      + init                                        = (known after apply)
      + ipc_mode                                    = (known after apply)
      + log_driver                                  = (known after apply)
      + logs                                        = false
      + must_run                                    = true
      + name                                        = "terraform-mysql-8"
      + network_data                                = (known after apply)
      + read_only                                   = false
      + remove_volumes                              = true
      + restart                                     = "no"
      + rm                                          = false
      + runtime                                     = (known after apply)
      + security_opts                               = (known after apply)
      + shm_size                                    = (known after apply)
      + start                                       = true
      + stdin_open                                  = false
      + stop_signal                                 = (known after apply)
      + stop_timeout                                = (known after apply)
      + tty                                         = false
      + wait                                        = false
      + wait_timeout                                = 60

      + healthcheck {
          + interval     = (known after apply)
          + retries      = (known after apply)
          + start_period = (known after apply)
          + test         = (known after apply)
          + timeout      = (known after apply)
        }

      + labels {
          + label = (known after apply)
          + value = (known after apply)
        }

      + networks_advanced {
          + aliases = []
          + name    = "mysql_network"
        }

      + ports {
          + external = 3306
          + internal = 3306
          + ip       = "0.0.0.0"
          + protocol = "tcp"
        }

      + upload {
          + content    = <<-EOT
                GRANT ALL PRIVILEGES ON *.* TO 'zero'@'%';
                FLUSH PRIVILEGES;
            EOT
          + executable = true
          + file       = "/docker-entrypoint-initdb.d/account.sql"
        }
    }

  # docker_image.mysql will be created
  + resource "docker_image" "mysql" {
      + id           = (known after apply)
      + image_id     = (known after apply)
      + keep_locally = true
      + name         = "mysql:8.0.32"
      + repo_digest  = (known after apply)
    }

  # docker_network.private_network will be created
  + resource "docker_network" "private_network" {
      + driver      = (known after apply)
      + id          = (known after apply)
      + internal    = (known after apply)
      + ipam_driver = "default"
      + name        = "mysql_network"
      + options     = (known after apply)
      + scope       = (known after apply)

      + ipam_config {
          + aux_address = (known after apply)
          + gateway     = (known after apply)
          + ip_range    = (known after apply)
          + subnet      = (known after apply)
        }
    }

Plan: 3 to add, 0 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't guarantee to take exactly these actions if you run "terraform apply" now.

# 部署
$ terraform apply

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

  Enter a value: yes

docker_network.private_network: Creating...
docker_image.mysql: Creating...
docker_image.mysql: Creation complete after 0s [id=sha256:05b458cc32b9686508b97ef40043702c18572840f7b2936b14f06500363868bamysql:8.0.32]
docker_network.private_network: Creation complete after 2s [id=b6285a9e627492f19fcd001830ddd04a6af1e5df4a6c6aeb501ab0965ce6cf45]
docker_container.terraform-mysql-8: Creating...
docker_container.terraform-mysql-8: Creation complete after 1s [id=b651230638dd8bd576b5ac54bd2edca751154ddafcfd12b1201da6be0e1956e6]

Apply complete! Resources: 3 added, 0 changed, 0 destroyed.

$ cd zone@docker/database-dc-pgsql
$ cp tpl.zero-pgsql.env zero-pgsql.env

POSTGRES_PASSWORD=
POSTGRES_USER=postgres
POSTGRES_DB=postgres
TZ=Asia/Shanghai

$ ./zero-pgsql-@up.sh

$ cd zone@terraform/kmini/database-pgsql
$ cp tpl.initialize.sh initialize.sh

#!/usr/bin/env bash
export TF_VAR_pgsql_password=
export TF_VAR_pgsql_data_path=${PWD}/data

# 编辑完成后执行
$ source ./initialize.sh

$ terraform init
$ terraform plan
$ terraform apply

# 「模块配置导入」-----------------------------------------------------------------------
boot:
  component:
    on: io.vertx.up.lightway.OnBoot
  config:
    on: io.vertx.up.lightway.OnBootConfig
  extension:
    - executor: io.vertx.mod.ambient.booter.AmbientOOB
    - executor: io.vertx.mod.rbac.booter.RbacOOB
    - executor: io.vertx.mod.erp.booter.ErpOOB
    - executor: io.vertx.mod.psi.booter.PsiOOB
    - executor: io.vertx.mod.fm.booter.FmOOB
    - executor: io.vertx.mod.ui.booter.UiOOB
    - executor: io.vertx.mod.jet.booter.JetOOB
    - executor: io.vertx.mod.graphic.booter.GraphicOOB
    - executor: io.vertx.mod.atom.booter.AtomOOB
    - executor: io.vertx.mod.lbs.booter.LbsOOB
    - executor: io.vertx.mod.workflow.booter.WfOOB
    - executor: io.vertx.mod.is.booter.IsOOB
    - executor: io.vertx.mod.battery.booter.BatteryOOB
    - executor: io.vertx.mod.tpl.booter.TplOOB    # 新版Tpl

package io.vertx.mod.ambient.booter;

import io.vertx.mod.ke.cv.KeIpc;
import io.vertx.up.plugin.booting.AbstractBoot;

public class AmbientOOB extends AbstractBoot {
    public AmbientOOB() {
        super(KeIpc.Module.AMBIENT);
    }
}

# 有必要追加 sudo
# 直接启动
docker run -i -t -d -p 5600:80 --restart=always -e JWT_SECRET=my_jwt_secret onlyoffice/documentserver:latest

# 您可以先试用如下命令单拉镜像（省掉运行时的镜像拉取时间）
docker pull onlyoffice/documentserver:latest

# 生成自己的 my_jwt_secret，直接使用 ai str -n 1 -l 36
ai str -n 1 -l 36
# 假设：OaBgxq6UYs6IWBSHdUlMswUDmghZIH2cLmK1

docker run -i -t -d -p 31017:80 --restart=always \
    -v $PWD/app@runtime/doc-office/logs:/var/log/onlyoffice \
    -v $PWD/app@runtime/doc-office/data:/var/www/onlyoffice/Data \
    -v $PWD/app@runtime/doc-office/lib:/var/lib/onlyoffice \
    -v $PWD/app@runtime/doc-office/db:/var/lib/postgresql \
    -e JWT_SECRET=OaBgxq6UYs6IWBSHdUlMswUDmghZIH2cLmK1 onlyoffice/documentserver:latest

# 1. libcurl3 已经没有提供安装源了，所以此处使用 libcurl4 替换
# 2. 此处执行时需使用 sudo 提升权限
sudo apt install libcurl4 libxml2 fonts-dejavu fonts-liberation ttf-mscorefonts-installer fonts-crosextra-carlito fonts-takao-gothic fonts-opensymbol

# Zero Framework 中推荐端口号 5600
echo onlyoffice-documentserver onlyoffice/ds-port select <PORT_NUMBER> | sudo debconf-set-selections

{
    "services": {
        "CoAuthoring": {
            "secret": {
                "inbox": {
                    "string": "secret"
                },
                "outbox": {
                    "string": "secret"
                },
            },
            "token": {
                "enable": {
                    "browser": true,
                    "request": {
                        "inbox": true,
                        "outbox": true
                    }
                }
            }
        }
    }
}