快讯

• L52※VPS搭建rustdesk

  1> 下载rustdesk

  mkdir /usr/local/rustdesk & cd /usr/local/rustdesk
  wget https://mirrors.condor.vip/rustdesk/v1.1.14/rustdesk-server-linux-amd64.zip
  unzip rustdesk-server-linux-amd64.zip

  2> 配置systemctl启动

  ① 配置hbbs服务

  vim /etc/systemd/system/hbbs.service

  [Unit]
  Description=Rust Desk Service
  After=network.target
   
  [Service]
  Type=simple
  User=root
  Restart=on-failure
  RestartSec=5s
  WorkingDirectory=/usr/local/rustdesk/amd64
  #-r用于指定网卡IP（适用多网卡），-k参数用于强制校验客户端公钥，用于避免未授权的使用
  ExecStart=/usr/local/rustdesk/amd64/hbbs -r 服务器ip -p 21116 -k _
  
  [Install]
  WantedBy=multi-user.target

  ② 配置hbbr服务

  vim /etc/systemd/system/hbbr.service

  [Unit]
  Description=Rust Desk Service
  After=network.target
   
  [Service]
  Type=simple
  User=root
  Restart=on-failure
  RestartSec=5s
  WorkingDirectory=/usr/local/rustdesk/amd64
  #-k参数用于强制校验客户端公钥，用于避免未授权的使用
  ExecStart=/usr/local/rustdesk/amd64/hbbr -p 21117 -k _
   
  [Install]
  WantedBy=multi-user.target

  systemctl daemon-reload
  systemctl start hbbs
  systemctl start hbbr

  3> 放开端口

  ufw allow 21115/tcp
  ufw allow 21116/tcp
  ufw allow 21116/udp
  ufw allow 21117/tcp

  4> 端口说明

  ① hbbs端口

  序号	端口	说明
  1	21114（TCP）	用于 Web 控制台，仅在 Pro 版本中可用
  2	21115（TCP）	用于 NAT 类型测试
  3	21116（TCP/UDP）	UDP 用于 ID 注册和心跳服务，TCP 用于 TCP 打孔和连接服务
  4	21118（TCP）	用于支持Web客户端，可选禁用

  ② hbbr 端口

  序号	端口	说明
  1	21117（TCP）	用于 Relay 服务
  2	21119（TCP）	用于支持Web客户端，可选禁用

  3个月前 (02-19)

• N34※国内外公共DNS汇总

  1> 国内公共DNS

  供应商	IPV4	IPV6	DOH	DOT
  阿里云	223.5.5.5 223.6.6.6	2400:3200::1 2400:3200:baba::1	https://dns.alidns.com/dns-query https://223.5.5.5/dns-query https://223.6.6.6/dns-query	dns://dns.alidns.com
  腾讯云	119.29.29.29 119.28.28.28 182.254.116.116	2402:4e00:: 2402:4e00:1::	https://doh.pub/dns-query https://1.12.12.12/dns-query https://120.53.53.53/dns-query https://sm2.doh.pub/dns-query（基于腾讯云政企国密解决方案）	dot.pub
  华为云	122.112.208.1 122.112.208.175 114.115.192.11 116.205.5.1 116.205.5.30 139.9.23.90 139.159.208.206
  360	电信/移动： 101.226.4.6 218.30.118.6 联通： 123.125.81.6 140.207.198.6		https://doh.360.cn/dns-query	dot.360.cn
  百度	180.76.76.76	2400:da00::6666	https://doh.baidu.com/dns-query
  114	114.114.114.114 114.114.115.115		https://dns.114dns.com/dns-query
  CNNIC	1.2.4.8 210.2.4.8	2001:dc7:1000::1
  TWNIC	101.101.101.101 101.102.103.104	2001:de4::101 2001:de4::102	https://dns.twnic.tw/dns-query	dns.twnic.tw

  2> 国外DNS

  供应商	IPV4	IPV6	DOH	DOT
  Google	8.8.8.8 8.8.4.4	2001:4860:4860::8888 2001:4860:4860::8844	https://8.8.8.8/dns-query https://8.8.4.4/dns-query https://dns.google/dns-query https://dns64.dns.google/dns-query	tls://8888.google tls://dns.google tls://dns.google.com
  Cloudflare	1.1.1.1 1.0.0.1	2606:4700:4700::1111 2606:4700:4700::1001	https://cloudflare-dns.com/dns-query	1dot1dot1dot1.cloudflare-dns.com

  4个月前 (01-26)

• L51※好玩儿的docker项目

  0> 私有镜像

  docker login --username=condor369 registry.cn-hangzhou.aliyuncs.com
  docker tag [ImageId] registry.cn-hangzhou.aliyuncs.com/slx-docker/[命名空间]:[镜像版本号]
  docker push registry.cn-hangzhou.aliyuncs.com/slx-docker/[命名空间]:[镜像版本号]
  docker logout registry.cn-hangzhou.aliyuncs.com

  docker login --username=condor369 registry.cn-hangzhou.aliyuncs.com
  docker pull registry.cn-hangzhou.aliyuncs.com/slx-docker/kms:latest
  docker pull registry.cn-hangzhou.aliyuncs.com/slx-docker/ms365:latest
  docker pull registry.cn-hangzhou.aliyuncs.com/slx-docker/vaultwarden:1.32.5
  docker pull registry.cn-hangzhou.aliyuncs.com/slx-docker/syncthing:v1.28.1
  docker pull registry.cn-hangzhou.aliyuncs.com/slx-docker/zerotier-synology:1.14.0
  docker pull registry.cn-hangzhou.aliyuncs.com/slx-docker/ztncui:1.2.17
  docker pull registry.cn-hangzhou.aliyuncs.com/slx-docker/frpc:1.37.1
  docker pull registry.cn-hangzhou.aliyuncs.com/slx-docker/serverstatus:1.1.5
  docker pull registry.cn-hangzhou.aliyuncs.com/slx-docker/drawio:26.0.6

  1> portainer-web

  docker run -d                            \
  --name="portainer"                        \
  --restart=always                           \
  -p 9000:9000                                \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v /data/docker/portainer/data:/data portainer/portainer-ce

  2> mongodb

  docker run -d                        \
  --name mongodb                        \
  --restart always                       \
  -p 27017:27017                          \
  -v /data/docker/mongo/data:/data/db      \
  -v /data/docker/mongo/conf:/data/configdb \
  mongo --auth

  3> mysql

  docker run -d                        \
  --name mysql                          \
  --restart always                       \
  -p 3306:3306                            \
  -v /data/docker/mysql/log:/var/log/mysql \
  -v /data/docker/mysql/data:/var/lib/mysql \
  -v /data/docker/mysql/conf:/etc/mysql      \
  -e MYSQL_ROOT_PASSWORD=123456               \
  mysql:5.7

  4> kms激活服务器

  docker run -d -p 1688:1688 --name kms --restart=always teddysun/kms
  docker run -d -p 1688:1688 --name vlmcsd --restart=always  mikolatero/vlmcsd

  5> gitlab

  docker run -d                                             \
  --hostname gitlab.example.com                              \
  --publish 20443:443 --publish 20080:80 --publish 20022:22   \
  --name gitlab                                                \
  --restart always                                              \
  -v /data/gitlab/config:/etc/gitlab                             \
  -v /data/gitlab/logs:/var/log/gitlab                            \
  -v /data/gitlab/data:/var/opt/gitlab                             \
  gitlab/gitlab-ce:latest

  ① 修改gitlab.rb文件,vim /data/gitlab/config/gitlab.rb

  # 如果使用公有云且配置了域名了，可以直接设置为域名，如下
  external_url 'gitlab.example.com'
  # 如果没有域名，则直接使用宿主机的ip，如下
  external_url 'http://172.0.0.2'  
  
  # 同样如果有域名，这里也可以直接使用域名
  gitlab_rails['gitlab_ssh_host'] =  'gitlab.example.com'
  # 同样如果没有域名，则直接使用宿主机的ip地址
  gitlab_rails['gitlab_ssh_host'] = '172.0.0.2'
  
  # 端口为启动docker时映射的ssh端口
  gitlab_rails['gitlab_shell_ssh_port'] =10022
  
  # 设置时区为东八区，即北京时间
  gitlab_rails['time_zone'] = 'Asia/Shanghai' 

  ② 邮箱发邮件的配置

  ## Email Settings
  gitlab_rails['smtp_enable'] = true # 开启 SMTP 功能
  gitlab_rails['smtp_address'] = "smtp.qq.com"
  gitlab_rails['smtp_port'] = 465 # 端口不可以选择587，测试过会发送邮件失败
  gitlab_rails['smtp_user_name'] = "123456@qq.com" # * 你的邮箱账号，也可以是ge**lin@qq.com等
  gitlab_rails['smtp_password'] = "csdn********csdn" # * 授权码，不是密码
  gitlab_rails['smtp_authentication'] = "login"
  gitlab_rails['smtp_enable_starttls_auto'] = true
  gitlab_rails['smtp_tls'] = true
  gitlab_rails['gitlab_email_from'] = '123456@qq.com' # * 发件人信息，必须跟‘smtp_user_name’保持一致，否则报错
  gitlab_rails['smtp_domain'] = "qq.com" # 修改并不影响 可修改为exmail.qq.com/james.com 经测试完全不影响，删除也不影响，并且发送的邮件都是一样的。

  ③ 查看初始密码

  cat  /data/gitlab/config/initial_root_password

  6> jellyfin

  docker run  -d          \
  --name=jellyfin          \
  --restart always          \
  -p 8096:8096               \
  -v /jellyfin/config:/config \
  -v /media:/media             \
  jellyfin/jellyfin:unstable

  7> lookbusy

  docker run -itd --name=lookbusy --restart=always  \
     -e TZ=Asia/Shanghai                             \
     -e CPU_UTIL=10-20                                \
     -e CPU_CORE=1                                     \
     -e MEM_UTIL=15                                     \
     -e SPEEDTEST_INTERVAL=120                           \
     fogforest/lookbusy

  8> chatgpt-next-web

  docker pull yidadaa/chatgpt-next-web:v2.14.2
  docker run -d --restart=always --name=chatgpt       \
  -e OPENAI_API_KEY="sk-*******"                       \
  -e BASE_URL="https://api.gptsapi.net/"                \
  -e CODE="password"                                     \
  -e HIDE_USER_API_KEY=1                                  \
  -e CUSTOM_MODELS="-all,+gpt-4o-mini@OpenAI,+gpt-3.5-turbo@OpenAI"                      \
  -e DEFAULT_MODEL="+gpt-4o-mini@OpenAI"                            \
  -p 3000:3000                                               \
  yidadaa/chatgpt-next-web:v2.14.2

  9> ipsec-vpn-server

  项目地址：https://github.com/hwdsl2/docker-ipsec-vpn-server

  ① 创建配置文件: /etc/ipsec/ipsec.env

  # 秘钥
  VPN_IPSEC_PSK=your_ipsec_pre_shared_key
  # 用户名
  VPN_USER=your_vpn_username
  # 密码
  VPN_PASSWORD=your_vpn_password
  ## 多用户(空格隔开)
  VPN_ADDL_USERS=xxxx1 xxxxx2
  VPN_ADDL_PASSWORDS=xxxx1 xxxxx2
  ## 默认的是谷歌的DNS根据自己情况决定是否配置 | 这里替换成国内的
  VPN_DNS_SRV1=114.114.114.114
  VPN_DNS_SRV2=223.5.5.5

  ② 创建挂载卷

  mkdir -p /data/docker/ipsec

  ③ 运行docker

  docker run --name ipsec-vpn-server  \
  --env-file /etc/ipsec/ipsec.env      \
  --restart=always -d --privileged      \
  -v /data/docker/ipsec:/etc/ipsec.d     \
  -v /lib/modules:/lib/modules:ro         \
  -p 500:500/udp -p 4500:4500/udp          \
  hwdsl2/ipsec-vpn-server

  ④ 开放端口

  开放500和4500端口

  10> 青龙面板

  docker run -dit       \
  -v /data/ql:/ql/data   \
  -p 5500:5700            \
  -e QlBaseUrl="/"         \
  --name qinglong           \
  --hostname qinglong        \
  --restart unless-stopped    \
  whyour/qinglong:latest

  11> adguardhome

  docker run --name adguardhome                                 \
      --restart always                                           \
      -v /data/docker/adguardhome/workdir:/opt/adguardhome/work   \
      -v /data/docker/adguardhome/confdir:/opt/adguardhome/conf    \
      -p 53:53/tcp -p 53:53/udp                                     \
      -p 3000:3000/tcp                                               \
      -p 2483:2483/tcp -p 853:853/tcp                                 \
      -d adguard/adguardhome:v0.107.55

  12> vaultwarden密码管理

  docker run -itd --name vaultwarden \
  --restart=unless-stopped            \
  -e TZ=Asia/Shanghai            \
  -e WEBSOCKET_ENABLED=true            \
  -e SIGNUPS_ALLOWED=true              \
  -e ADMIN_TOKEN='$argon2id$v=19$m=65540,t=3,p=4$d1JGQ2FLV2QydWwyRk9SOHZ5eS9TMzFyOXRyMEdySmFkSitaSGtieHhVdz0$KFkWJOy8aR6p9Rw0kekS0+I3E322OcrutlgAl0pEI3A'              \
  -e DATABASE_URL='mysql://user:password@192.168.1.100:3306/vaultwarden'             \
  -v /data/docker/bitwarden/:/data/       \
  -p 8080:80                               \
  -p 3012:3012                              \
  vaultwarden/server:latest

  13> 思源笔记

  docker run -itd --restart=unless-stopped     \
    -v /data/docker/siyuan:/siyuan/workspace    \
    -p 6806:6806                                 \
    -u $(id -u):$(id -g)                          \
    b3log/siyuan                                   \
    --workspace=/siyuan/workspace                   \
    --accessAuthCode='123456'                        \
    --lang='zh_CN'  

  14> serverstatus探针

  ① 服务端设置

  mkdir -p /data/docker/serverstatus/config
  wget https://mirrors.condor.vip/shell/serverstatus-config.json
  mkdir -p /data/docker/serverstatus/monthtraffic
  docker run -d --restart=always --name=serverstatus \
  -v /data/docker/serverstatus/config/config.json:/ServerStatus/server/config.json \
  -v /data/docker/serverstatus/monthtraffic:/usr/share/nginx/html/json \
  -p 15080:80 -p 35601:35601 \
  cppla/serverstatus:latest

                  {
                          "username":"s07",
                          "name":"美国-洛杉矶",
                          "type":"zgo",
                          "host":"host7",
                          "location":"us",
                          "password":"%condor#",
                          "monthstart":1
                  }

  ② 客户端设置

  wget https://mirrors.condor.vip/shell/client-linux.py

  15> Syncthing

  docker run --name syncthing -itd --restart=always     \
  -e PUID=1003 -e PGID=1003                              \
  -e TZ=Asia/Shanghai                                     \
  -p 8384:8384                                             \
  -p 22000:22000/tcp                                        \
  -p 22000:22000/udp                                         \
  -v /data/docker/syncthing:/var/syncthing                    \
  -v /data/share:/data1                                        \
  syncthing/syncthing:latest

  16> ztncui

  docker run -d --restart=always --name ztncui \
  -e HTTP_PORT=4000 \
  -e HTTP_ALL_INTERFACES=yes \
  -e MYADDR=192.168.1.100  \
  -e ZTNCUI_PASSWD="password"  \
  -e NODE_ENV="production"   \
  -p 4000:4000   -p 9993:9993 -p 9993:9993/udp  \
  -v /data/docker/ztncui/etc:/opt/key-networks/ztncui/etc  \
  -v /data/docker/ztncui/zerotier:/var/lib/zerotier-one  \
  keynetworks/ztncui:1.2.17
  

  17> drawio

  docker run -itd  --restart="always"  --name="draw" -e COUNTRY_CODE=CN -p 8080:8080  jgraph/drawio:26.0.6

  6个月前 (12-12)

• L50※开启nginx浏览目录及美化

  1> 下载fancyindex模块

  cd /usr/local
  wget https://hub.condor.vip/ngx-fancyindex/ngx-fancyindex-0.5.2.tar.xz
  tar xvf ngx-fancyindex-0.5.2.tar.xz

  2> 重新编译nginx

  添加ngx-fancyindx模块

  ./configure --prefix=/usr/local/nginx --user=www --add-module=/usr/local/nginx-rtmp-module --add-module=/usr/local/ngx-fancyindex-0.5.2 --group=www --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_ssl_module --with-stream --with-stream_ssl_preread_module --with-stream_ssl_module --with-http_gzip_static_module --with-http_realip_module --with-http_flv_module --with-http_mp4_module --with-openssl=../openssl-1.1.1q --with-pcre=../pcre-8.45 --with-pcre-jit --with-ld-opt=-ljemalloc

  make && make install

  3> 下载主题

  cd /usr/local/nginx/html
  git clone https://github.com/lanffy/Nginx-Fancyindex-Theme

  4> 修改nginx配置

  location /{
      include /usr/local/nginx/html/Nginx-Fancyindex-Theme/fancyindex.conf;
      root /data/share/;
      autoindex on;
      autoindex_format html;
      autoindex_exact_size off;
      autoindex_localtime on;
      charset utf-8,gbk;
    }

  6个月前 (12-12)

• L49※重置MariaDB或MySQL密码

  1> 停止数据库服务器

  sudo systemctl stop mysql
  sudo systemctl stop mariadb

  2> 跳过数据库密码验证

  sudo mysqld_safe --skip-grant-tables --skip-networking &

  mysql -uroot
  use mysql;

  3> 更改 root 密码

  ① 对于 MySQL 5.7.6 及更新版本 以及 MariaDB 10.1.20 及更新版本

  grant all privileges on *.* to 'root'@'%' identified by 'password';
  FLUSH PRIVILEGES;
  exit

  ② 对于 MySQL 5.7.5 及更旧版本 以及 MariaDB 10.1.20 及更旧版本

  SET PASSWORD FOR 'root'@'localhost' = PASSWORD('new_password');
  FLUSH PRIVILEGES;
  exit

  ③ 其他

  UPDATE mysql.user SET Password=PASSWORD('123456') WHERE User='root';
  FLUSH PRIVILEGES;
  exit

  4> 关闭当前进程

  ①对于 MySQL

  sudo kill `cat /var/run/mysqld/mysqld.pid`
  

  ②对于 MariaDB

  sudo kill `/var/run/mariadb/mariadb.pid`

  5> 重启服务

  sudo systemctl start mysql
  sudo systemctl start mariadb

  6个月前 (12-11)