deploy(M00-E): 补充EMQX检查模板

2026-06-15 16:48:30 +08:00
parent 4cb3ab6529
commit 86f7da2168
21 changed files with 210 additions and 35 deletions
@@ -0,0 +1,49 @@
+# EMQX Ubuntu 24.04 amd64 Install Notes
+
+This project uses native Ubuntu packages only. Docker is forbidden.
+
+Official references checked on 2026-06-15:
+
+- EMQX Ubuntu installation: https://docs.emqx.com/en/emqx/latest/deploy/install-ubuntu.html
+- EMQX file authorization and ACL format: https://docs.emqx.com/en/emqx/latest/access-control/authz/file.html
+
+## Preconditions
+
+- Ubuntu Server 24.04 x86-64/amd64.
+- Production host: `101.42.38.246`.
+- Ports are restricted by firewall:
+  - `1883`: MQTT device access, not open wider than required.
+  - `18083`: EMQX dashboard, never open to arbitrary public networks.
+- MQTTX is not installed on the server.
+
+## Install
+
+EMQX official Ubuntu documentation lists apt installation for Ubuntu 24.04. The administrator must confirm the selected EMQX major version before installing.
+
+```bash
+curl -s https://packagecloud.io/install/repositories/emqx/emqx-enterprise5/script.deb.sh | sudo bash
+sudo apt-get install emqx
+sudo systemctl enable --now emqx
+```
+
+## Apply ACL Baseline
+
+```bash
+sudo install -m 0640 /opt/apps/qipai-repo/deploy/emqx/acl.conf.template /etc/emqx/acl.conf
+sudo install -m 0640 /opt/apps/qipai-repo/deploy/emqx/authorization.hocon.template /etc/emqx/conf.d/qipai-authorization.hocon
+sudo emqx ctl conf reload
+sudo systemctl restart emqx
+```
+
+## Check
+
+```bash
+emqx version
+systemctl status emqx --no-pager
+ss -ltnp | grep -E ':(1883|18083)\b'
+```
+
+## Notes
+
+- Device usernames, passwords and client IDs are not stored in Git.
+- M06 will replace the placeholder topic namespace with the final device protocol mapping.