{"id":331,"date":"2026-10-11T19:42:56","date_gmt":"2026-10-11T11:42:56","guid":{"rendered":"https:\/\/chukai.cc\/?p=331"},"modified":"2026-10-11T19:42:56","modified_gmt":"2026-10-11T11:42:56","slug":"%e8%87%aa%e5%bb%ba-piik-%e5%b1%8f%e5%b9%95%e5%85%b1%e4%ba%ab%e8%8a%82%e7%82%b9%ef%bc%9a%e4%bb%8e-docker-%e5%88%b0-https-%e7%9a%84%e5%ae%8c%e6%95%b4%e8%b8%a9%e5%9d%91%e8%ae%b0%e5%bd%95","status":"publish","type":"post","link":"https:\/\/chukai.cc\/index.php\/2026\/10\/11\/%e8%87%aa%e5%bb%ba-piik-%e5%b1%8f%e5%b9%95%e5%85%b1%e4%ba%ab%e8%8a%82%e7%82%b9%ef%bc%9a%e4%bb%8e-docker-%e5%88%b0-https-%e7%9a%84%e5%ae%8c%e6%95%b4%e8%b8%a9%e5%9d%91%e8%ae%b0%e5%bd%95\/","title":{"rendered":"\u81ea\u5efa Piik \u5c4f\u5e55\u5171\u4eab\u8282\u70b9\uff1a\u4ece Docker \u5230 HTTPS \u7684\u5b8c\u6574\u8e29\u5751\u8bb0\u5f55"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">\u4e00\u3001\u76ee\u6807<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Piik \u662f\u4e00\u4e2a\u53ef\u81ea\u6258\u7ba1\u7684\u7f51\u9875\u5c4f\u5e55\u5171\u4eab \/ \u623f\u95f4\u5de5\u5177\uff1a\u7f51\u9875\u4e0e\u4fe1\u4ee4\u7531\u670d\u52a1\u5668\u63d0\u4f9b\uff0c\u753b\u9762\u8d70 WebRTC\uff08\u9ed8\u8ba4 P2P\uff0c\u53ef\u9009 SFU \u515c\u5e95\uff09\u3002\u5b98\u65b9 demo \u548c App \u7684\u516c\u7f51\u9080\u8bf7\u6a21\u5f0f\u53ea\u6709 P2P\uff0c\u9047\u5230\u4e25\u683c NAT \u5bb9\u6613\u51fa\u73b0\u300c\u7f51\u9875\u80fd\u5f00\u3001\u753b\u9762\u8fde\u4e0d\u4e0a\u300d\u3002\u6240\u4ee5\u6211\u51b3\u5b9a\u5728\u81ea\u5df1\u7684 VPS \u4e0a\u642d\u4e00\u4e2a\u4e13\u5c5e\u8282\u70b9\uff0c\u5e76\u9884\u7559 SFU \u515c\u5e95\u7aef\u53e3\u3002<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>\u670d\u52a1\u5668<\/strong><\/td><td>\u96e8\u4e91 Ubuntu x64\uff08\u516c\u7f51 IP 38.246.253.12\uff09<\/td><\/tr><tr><td><strong>\u9762\u677f<\/strong><\/td><td>\u5b9d\u5854\uff08Nginx \u53cd\u5411\u4ee3\u7406\uff09<\/td><\/tr><tr><td><strong>DNS<\/strong><\/td><td>Cloudflare\uff08\u5fc6\u6c34.xyz\uff0cpunycode\uff1axn--45tq0z.xyz\uff09<\/td><\/tr><tr><td><strong>\u90e8\u7f72\u65b9\u5f0f<\/strong><\/td><td>Docker Compose\uff0c\u955c\u50cf ghcr.io\/tntcrafthim\/piik:latest<\/td><\/tr><tr><td><strong>\u8bc1\u4e66<\/strong><\/td><td>Let&#8217;s Encrypt\uff08acme.sh + Cloudflare DNS \u9a8c\u8bc1\uff09<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e8c\u3001\u90e8\u7f72\u672c\u8eab\u5f88\u7b80\u5355<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>cd \/root\n# compose.yaml \u4e0e .env \u653e\u5728\u540c\u4e00\u76ee\u5f55\ndocker compose run --rm piik --check-config   # config=ok\ndocker compose up -d\ndocker compose logs --tail=20<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u770b\u5230\u4e0b\u9762\u8fd9\u884c\u5c31\u8bf4\u660e\u670d\u52a1\u8d77\u6765\u4e86\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>msg=\"Piik server is listening\" version=v1.9.2 host=0.0.0.0 port=8787\npublicUrl=https:\/\/xn--45tq0z.xyz sqlite=true sfu=false<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u5173\u952e\u7aef\u53e3\uff08Compose \u4f1a\u81ea\u52a8\u6620\u5c04\uff09\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>127.0.0.1:8787  \u7f51\u9875 \/ \u4fe1\u4ee4\uff08\u53ea\u5bf9\u672c\u673a\u5f00\u653e\uff0c\u7531 Nginx \u53cd\u4ee3\u51fa\u53bb\uff09\n3478-3480\/udp   STUN\uff08P2P \u6253\u6d1e\u5fc5\u9700\uff09\n7882\/udp        SFU \u5a92\u4f53\u515c\u5e95\uff08\u53ef\u9009\uff09<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e09\u3001Nginx \u53cd\u5411\u4ee3\u7406<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b9d\u5854\u91cc\u7528\u300c\u53cd\u5411\u4ee3\u7406\u9879\u76ee\u300d\u6ca1\u6709\u6210\u529f\uff0c\u6700\u540e\u624b\u5de5\u5199 vhost\uff08<code>\/www\/server\/panel\/vhost\/nginx\/xn--45tq0z.xyz.conf<\/code>\uff09\u53cd\u800c\u6700\u7a33\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>server {\n    listen 80;\n    server_name xn--45tq0z.xyz www.xn--45tq0z.xyz;\n\n    location \/ {\n        proxy_pass http:\/\/127.0.0.1:8787;\n        proxy_http_version 1.1;\n        proxy_set_header Upgrade $http_upgrade;      # WebSocket \u5fc5\u9700\n        proxy_set_header Connection \"upgrade\";\n        proxy_set_header Host $host;\n        proxy_set_header X-Real-IP $remote_addr;\n        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n        proxy_set_header X-Forwarded-Proto $scheme;\n        proxy_read_timeout 3600s;\n        proxy_send_timeout 3600s;\n    }\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u91cd\u8981\uff1a<\/strong>\u4e2d\u6587\u57df\u540d\u5728\u6d4f\u89c8\u5668\u91cc\u53d1\u51fa\u53bb\u7684\u662f punycode \u5f62\u5f0f\u7684 Host\uff0c\u6240\u4ee5 <code>server_name<\/code> \u5fc5\u987b\u5199 <code>xn--45tq0z.xyz<\/code>\uff0c\u5199\u4e2d\u6587\u5339\u914d\u4e0d\u4e0a\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u56db\u3001\u8e29\u8fc7\u7684\u5751\uff08\u91cd\u70b9\uff09<\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>\u73b0\u8c61<\/th><th>\u771f\u6b63\u539f\u56e0<\/th><th>\u89e3\u51b3<\/th><\/tr><\/thead><tbody><tr><td>curl \u8fd4\u56de <code>status=000<\/code>\uff08\u8fde\u54cd\u5e94\u90fd\u6ca1\u6709\uff09<\/td><td>Nginx \u6839\u672c\u6ca1\u8d77\u6765\uff1a\u65e7 vhost \u91cc\u6709\u4e2a <code>listen 8787<\/code>\uff0c\u800c 8787 \u5df2\u88ab Piik \u5360\u7528 \u2192 <code>[emerg] bind() to 0.0.0.0:8787 failed<\/code><\/td><td>\u5220\u6389\u6216\u6539\u6389\u90a3\u4e2a vhost\uff0c\u7136\u540e <code>service nginx restart<\/code><\/td><\/tr><tr><td>\u53cd\u4ee3\u914d\u4e86\u8fd8\u662f Nginx 404<\/td><td>\u5b9d\u5854\u300c\u53cd\u5411\u4ee3\u7406\u9879\u76ee\u300d\u751f\u6210\u7684 conf \u6ca1\u7ed1\u5b9a\u6210\u7ad9\u70b9\uff0c<code>nginx -T<\/code> \u91cc\u67e5\u4e0d\u5230\u5bf9\u5e94 <code>server_name<\/code><\/td><td>\u624b\u5de5\u5199 vhost\uff0c\u6216\u5148\u5728\u5b9d\u5854\u300c\u6dfb\u52a0\u7ad9\u70b9\u300d\uff0c\u518d\u8fdb\u7ad9\u70b9\u5185\u52a0\u53cd\u4ee3<\/td><\/tr><tr><td>\u57df\u540d\u6253\u4e0d\u5f00\uff0c<code>getaddrinfo ENOTFOUND<\/code><\/td><td>Cloudflare \u91cc\u53ea\u6709 <code>www<\/code> \u548c <code>*<\/code> \u8bb0\u5f55\uff0c\u901a\u914d\u7b26\u4e0d\u8986\u76d6\u6839\u57df\u540d<\/td><td>\u8865\u4e00\u6761 <code>@<\/code> \u7684 A \u8bb0\u5f55<\/td><\/tr><tr><td>\u7f51\u9875\u80fd\u5f00\uff0c\u5efa\u623f\u62a5 <strong>403 Origin not allowed<\/strong><\/td><td><code>PUBLIC_BASE_URL<\/code> \u5199\u7684\u662f <code>https:\/\/\u2026<\/code>\uff0c\u5b9e\u9645\u5374\u7528 <code>http:\/\/\u2026<\/code> \u8bbf\u95ee\uff0c\u6765\u6e90\u4e0d\u5339\u914d<\/td><td>\u8ba9 <code>PUBLIC_BASE_URL<\/code> \u7b49\u4e8e\u6d4f\u89c8\u5668\u5b9e\u9645\u8bbf\u95ee\u7684\u5730\u5740\uff08\u542b\u534f\u8bae\uff09\uff1b\u591a\u5730\u5740\u7528\u82f1\u6587\u9017\u53f7\u5199\u8fdb <code>ALLOWED_ORIGINS<\/code><\/td><\/tr><tr><td>Cloudflare \u6a59\u4e91 + Full \u6a21\u5f0f\u56de\u6e90 404<\/td><td>CF \u7528 443 \u56de\u6e90\uff0c\u800c\u6e90\u7ad9 443 \u4e0a\u6ca1\u6709\u8be5\u57df\u540d\u7684 server \u5757<\/td><td>\u8981\u4e48\u5207 Flexible\uff0880 \u56de\u6e90\uff09\uff0c\u8981\u4e48\u7ed9\u6e90\u7ad9\u914d\u597d\u8bc1\u4e66\u540e\u7528 Full<\/td><\/tr><tr><td>acme.sh \u5361\u5728 <code>Could not get nonce<\/code><\/td><td>\u5b83\u9ed8\u8ba4\u7528 ZeroSSL\uff0c\u56fd\u5185\u670d\u52a1\u5668\u8fde\u4e0d\u4e0a<\/td><td>\u52a0 <code>--server letsencrypt<\/code> \u91cd\u7b7e\uff0c\u7acb\u523b\u6210\u529f<\/td><\/tr><tr><td>\u89c2\u4f17\u770b\u4e0d\u5230\u753b\u9762<\/td><td>Cloudflare \u4ee3\u7406\u4e0d\u8f6c\u53d1 UDP\uff0cSTUN \u6253\u6d1e\u5931\u8d25<\/td><td><code>stun<\/code> \u5b50\u57df\u5fc5\u987b\u8bbe\u6210 DNS only\uff08\u7070\u4e91\uff09\uff0c\u5e76\u653e\u884c UDP 3478-3480<\/td><\/tr><tr><td>\u6d4f\u89c8\u5668\u9009\u4e0d\u4e86\u5c4f\u5e55<\/td><td>\u6d4f\u89c8\u5668\u5c4f\u5e55\u91c7\u96c6\u8981\u6c42 HTTPS \u6216 localhost<\/td><td>\u7ed9\u6e90\u7ad9\u7b7e\u771f\u8bc1\u4e66\uff0c\u6539\u7528 HTTPS \u8bbf\u95ee<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e94\u3001HTTPS\uff1aacme.sh + Cloudflare DNS \u9a8c\u8bc1<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u7528 DNS \u9a8c\u8bc1\u7b7e\u8bc1\u4e66\uff0c\u4e0d\u9700\u8981\u5360\u7528 80 \u7aef\u53e3\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>curl https:\/\/get.acme.sh | sh -s email=\u4f60\u7684\u90ae\u7bb1@gmail.com\nexport CF_Token=\"CF\u7684API\u4ee4\u724c\"       # \u6743\u9650\uff1aZone \u2192 DNS \u2192 Edit\n~\/.acme.sh\/acme.sh --issue --dns dns_cf --server letsencrypt \\\n  -d xn--45tq0z.xyz -d www.xn--45tq0z.xyz\n\n# \u88c5\u5230 Nginx \u4f7f\u7528\u7684\u8def\u5f84\u5e76\u81ea\u52a8\u91cd\u8f7d\n~\/.acme.sh\/acme.sh --install-cert -d xn--45tq0z.xyz \\\n  --key-file       \/www\/server\/panel\/vhost\/cert\/xn--45tq0z.xyz\/privkey.pem \\\n  --fullchain-file \/www\/server\/panel\/vhost\/cert\/xn--45tq0z.xyz\/fullchain.pem \\\n  --reloadcmd      \"service nginx restart\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u518d\u8865\u4e00\u4e2a 443 \u7684 server \u5757\uff08<code>listen 443 ssl;<\/code> + <code>http2 on;<\/code> + \u4e0a\u9762\u4e24\u4e2a\u8bc1\u4e66\u8def\u5f84 + \u540c\u4e00\u4efd proxy \u914d\u7f6e\uff09\uff0c\u7136\u540e\u628a\u7ad9\u70b9\u5730\u5740\u7edf\u4e00\u6210 https\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cd \/root\nsed -i 's|^PUBLIC_BASE_URL=.*|PUBLIC_BASE_URL=https:\/\/xn--45tq0z.xyz|' .env\ndocker compose up -d<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u81ea\u52a8\u7eed\u671f<\/strong>\uff08acme.sh \u88c5 cron \u5931\u8d25\u65f6\uff0c\u7528\u5b9d\u5854\u300c\u8ba1\u5212\u4efb\u52a1\u300d\u52a0\u4e00\u6761 Shell \u811a\u672c\uff09\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\"\/root\/.acme.sh\"\/acme.sh --cron --home \"\/root\/.acme.sh\" &gt; \/dev\/null<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">\u516d\u3001\u9a8c\u6536\u6e05\u5355<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>curl -s http:\/\/127.0.0.1:8787\/healthz      # {\"status\":\"ok\"}\ncurl -s https:\/\/xn--45tq0z.xyz\/healthz     # {\"status\":\"ok\"}\nss -lntp | grep -E ':80|:443|8787'         # nginx \u542c 80\/443\uff0cPiik \u542c 8787\ndocker compose ps                          # \u5bb9\u5668 Up\nsystemctl is-enabled docker                # enabled\uff08\u5f00\u673a\u81ea\u542f\uff09\ndocker inspect piik-piik-1 --format '{{.HostConfig.RestartPolicy.Name}}'   # unless-stopped<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u6d4f\u89c8\u5668\u6253\u5f00 <code>https:\/\/xn--45tq0z.xyz<\/code>\uff1a\u65e0\u8bc1\u4e66\u8b66\u544a\u3001\u80fd\u5efa\u623f\uff1b\u628a\u94fe\u63a5\u53d1\u7ed9\u670b\u53cb\uff0c\u624b\u673a\u7528\u6d41\u91cf\u52a0\u5165\uff0c\u753b\u9762\u548c\u58f0\u97f3\u90fd\u6b63\u5e38\uff0c\u6536\u5de5\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e03\u3001\u51e0\u6761\u7ecf\u9a8c<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong><code>status=000<\/code> \u4e0d\u662f 404\u3002<\/strong> \u524d\u8005\u662f\u300c\u8fde\u63a5\u88ab\u76f4\u63a5\u5173\u6389\u300d\uff08\u670d\u52a1\u6ca1\u5728\u76d1\u542c\uff09\u3002\u6392\u67e5\u987a\u5e8f\u6c38\u8fdc\u662f\uff1a\u8fdb\u7a0b \u2192 \u76d1\u542c\u7aef\u53e3 \u2192 vhost \u5339\u914d \u2192 \u4e0a\u6e38\u670d\u52a1\u3002<\/li>\n\n\n\n<li><strong>\u6392\u67e5\u8981\u5206\u5c42\u3002<\/strong> \u672c\u673a <code>127.0.0.1:8787<\/code> \u2192 \u672c\u673a\u5e26 Host \u5934 \u2192 \u516c\u7f51 IP \u5e26 Host \u5934 \u2192 \u57df\u540d\u3002\u6bcf\u5c42\u90fd\u62ff\u5230\u7ed3\u8bba\uff0c\u4e0d\u8981\u8df3\u6b65\u3002<\/li>\n\n\n\n<li><strong>\u4e2d\u6587\u57df\u540d\u8bb0\u5f97\u7528 punycode<\/strong>\uff08\u5fc6\u6c34.xyz = xn--45tq0z.xyz\uff09\u3002Nginx \u7684 <code>server_name<\/code>\u3001\u5ba2\u6237\u7aef\u586b\u7684\u8282\u70b9\u5730\u5740\u90fd\u5efa\u8bae\u7528 punycode\u3002<\/li>\n\n\n\n<li><strong>Cloudflare \u514d\u8d39\u7248\u4e0d\u8f6c\u53d1 UDP\u3002<\/strong> \u51e1\u662f STUN\u3001\u6e38\u620f\u52a0\u901f\u8fd9\u7c7b\u670d\u52a1\uff0c\u76f8\u5173\u5b50\u57df\u4e00\u5b9a\u8981\u8bbe\u6210 DNS only\uff08\u7070\u4e91\uff09\u3002<\/li>\n\n\n\n<li><strong>\u8bc1\u4e66\u5fc5\u987b\u548c\u5b9e\u9645\u8bbf\u95ee\u7684\u534f\u8bae\u4e00\u81f4<\/strong>\uff0c\u5426\u5219\u5c31\u662f\u5404\u79cd 403 \/ 526\uff1b\u6539\u5b8c <code>.env<\/code> \u8bb0\u5f97 <code>docker compose up -d<\/code> \u91cd\u5efa\u5bb9\u5668\u624d\u751f\u6548\u3002<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>\u4e00\u3001\u76ee\u6807 Piik \u662f\u4e00\u4e2a\u53ef\u81ea\u6258\u7ba1\u7684\u7f51\u9875\u5c4f\u5e55\u5171\u4eab \/ \u623f\u95f4\u5de5\u5177\uff1a\u7f51\u9875\u4e0e\u4fe1\u4ee4\u7531\u670d\u52a1\u5668\u63d0\u4f9b\uff0c\u753b\u9762\u8d70 WebRTC\uff08 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":332,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-331","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-passage"],"_links":{"self":[{"href":"https:\/\/chukai.cc\/index.php\/wp-json\/wp\/v2\/posts\/331","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chukai.cc\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/chukai.cc\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/chukai.cc\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/chukai.cc\/index.php\/wp-json\/wp\/v2\/comments?post=331"}],"version-history":[{"count":1,"href":"https:\/\/chukai.cc\/index.php\/wp-json\/wp\/v2\/posts\/331\/revisions"}],"predecessor-version":[{"id":333,"href":"https:\/\/chukai.cc\/index.php\/wp-json\/wp\/v2\/posts\/331\/revisions\/333"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/chukai.cc\/index.php\/wp-json\/wp\/v2\/media\/332"}],"wp:attachment":[{"href":"https:\/\/chukai.cc\/index.php\/wp-json\/wp\/v2\/media?parent=331"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/chukai.cc\/index.php\/wp-json\/wp\/v2\/categories?post=331"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/chukai.cc\/index.php\/wp-json\/wp\/v2\/tags?post=331"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}