搭建bark私有服务器，实现自动消息推送

一.安装bark服务器

1.docker容器安装bark-server

docker run -dt --name bark -p 8080:8080 -v `pwd`/bark-data:/data finab/bark-server

2.测试

curl http://0.0.0.0:8080/ping

能够访问通以后，再移动端绑定ip测试

3. 移动端测试

输入ip:8080

4.浏览器发送消息

http://45.131.150.156:8080/9V2oAQJttDmYewerw43G/这里改成你自己的推送内容

如果正常的话，移动端会出现发送的内容

二.绑定域名

1.nginx绑定域名，映射端口，ssl

由于nginx默认会包含这个文件夹下的conf结尾的配置文件，所以创建bark.conf

include /etc/nginx/conf.d/*.conf;

# generated 2020-03-26, Mozilla Guideline v5.4, nginx 1.17.7, OpenSSL 1.1.1d, modern configuration
# https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=modern&openssl=1.1.1d&guideline=5.4
server {
    listen 80;
    listen [::]:80;
    # Replace bark.app.dev with your real domain name.
    server_name bark.app.dev;

    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    # Replace bark.app.dev with your real domain name.
    server_name bark.app.dev;

    ssl_certificate /path/to/signed_cert_plus_intermediates;
    ssl_certificate_key /path/to/private_key;
    ssl_session_timeout 1d;
    ssl_session_cache shared:MozSSL:10m;  # about 40000 sessions
    ssl_session_tickets off;

    # modern configuration
    ssl_protocols TLSv1.3;
    ssl_prefer_server_ciphers off;

    # HSTS (ngx_http_headers_module is required) (63072000 seconds)
    add_header Strict-Transport-Security "max-age=63072000" always;

    # OCSP stapling
    ssl_stapling on;
    ssl_stapling_verify on;

    # verify chain of trust of OCSP response using Root CA and Intermediate certs
    ssl_trusted_certificate /path/to/root_CA_cert_plus_intermediates;

    # replace with the IP address of your resolver
    #resolver 127.0.0.1;

    location / {

        log_not_found on;
        # Replace http://192.168.1.123:8080 with the listening address of the bark server.
        proxy_pass http://192.168.1.123:8080;

        proxy_read_timeout 300;
        proxy_connect_timeout 300;
        proxy_redirect off;

        proxy_set_header Host              $host;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Real-IP         $remote_addr;

    }
}

复制出官方文档，需要改一下域名和ssl文件(key和pem文件路径)

2.重启nginx再重新测试绑定

三.最后

至此，你就搭建起了一套私有的移动端消息推送服务，使用https也能保证基本数据安全