先去cloudflare上申请IP https://dash.cloudflare.com/profile/api-tokens在Edit zone DNS的模版下授权可以修改DNS的域名写入API配置echo " dns_cloudflare_api_token = XXXXXXXXXXXXXXXXXXXXXx" >/root/cloudflare.ini安装和签发ssldnf install -y epel-release dnf install -y certbot certbot-dns-cloudflare python*-certbot-dns-cloudflare certbot certonly --dns-cloudflare --dns-cloudflare-credentials /root/cloudflare.ini -d kvm.la ...继续阅读 (6)

{php} $postData = array('gid' => '1',); $results = localAPI('GetProducts', $postData, 'admin'); //print_r( $results); foreach ($results['products']['product'] as $product) { $description =$product['description']; $description = str_replace(array('', ''), '', $description); $description = str_replace('', '', $description); $description = str_replace('', '', $description); $getProducts[] = array( 'name' => $product['name'], 'url' => $product['product_url'], 'desc' => $description, 'prefix' => $product['pricing']['USD']['prefix'], 'price' => $produ ...继续阅读 (18)

-----解锁SSH-----http://10.168.1.1/cgi-bin/oraybox?_api=ssh_set&enabled;=15.5.0以上版本密码为oray@12#$%^785.5.0以下是admin wget https://github.com/kuoruan/openwrt-frp/releases/download/v0.37.1-1/frpc_0.37.1-1_mipsel_24kc.ipk --no-check-certificate opkg install frpc_*.ipk这里备注一下需要mipsel_24kc版本,折腾了大半天走了不少弯路,执行opkg update才发现这个版本能安装. 启动文件cat>/etc/init.d/frpc继续阅读 (22)

#获取网卡模式状态 ipmitool raw 0x30 0x70 0x0c 0. #设置独立网卡模式 ipmitool raw 0x30 0x70 0x0c 1 0. #设置公网IP共享模式 ipmitool raw 0x30 0x70 0x0c 1 1. #设置成failover模式 ipmitool raw 0x30 0x70 0x0c 1 2.windows版本ipmitool https://kvm.la/ipmitool-for-windows.html ...继续阅读 (20)

官方使用的docker部署, 这里折腾了下改为系统直接安装了安装好后丢caddy或者nginx反向代理一下就好了, 我这直接用cloudflare的隧道进行代理了.安装cd /tmp git clone "https://github.com/ConvoyPanel/coterm.git" cd coterm npm install npm run build cd ./src-rust cargo run cargo build --release mkdir /home/coterm/public -p install target/release/coterm /home/coterm/ 环境变量配置cat>/home/coterm/.env继续阅读 (12)

这里没有采用官方的docker安装方式, 直接源码进行安装yum install redis git epel-* SETPATH=/home/pve/ #设置安装目录 mkdir -p $SETPATH cd $SETPATH # 将php artisan horizon:work加入系统服务运行 cat>/etc/systemd/system/pve.service< ...继续阅读 (27)

安装Squidyum -y install squid mkdir -p /home/squid/logs /home/squid/coredump_dir /home/squid/cache_dir chown squid.squid -R /home/squid/ systemctl enable squidsquid.conf配置内容cat /etc/squid/squid.conf # # Recommended minimum configuration: # acl manager proto cache_object acl localhost src 127.0.0.1/32 ::1 acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1 # Example rule allowing access from your local networks. # Adapt to list your (internal) IP networks from where browsing # should be allowed 允许访问IP(只允许这个ip做代理请求) acl allowip src 14.29.10.100 acl SSL_ports port 443 acl Safe_ports port 80 ...继续阅读 (21)

display ip routing-table vpn-instance vrf1 #查看vrf路由表 display ip routing-table #查看默认路由表 disply bgp peer #查看bgp peer display bgp routing-table 1.0.0.0 #查看1.0.0.0 的路由信息 display bgp routing-table community #查看路由表的community display bgp routing-table regular-expression 174 #正则匹配as的路由表 display bgp routing-table regular-expression ^174_ #正则匹配as174开头的路由表 display bgp routing-table regular-expression _174$ #正则匹配as174结尾的路由表 display bgp routing-table regular-expression _(4808|4837|9929|10099) #正则匹配联通as的路由表 display bgp routing-table regular-expression _(4134|4809_4134) #正则匹配电 ...继续阅读 (24)

有时候跑一个长期运行的命令, 或者突然掉线重新连接后进程还在需要把进程调出来继续执行,或者是将现有的进程丢进screen里面继续后台运行. 这时候reptyr就派上用场了yum install reptyr -y reptyr 进程PID ...继续阅读 (14)

现在用snap商店安装软件越来越频繁了, 而且众多linux发行版都支持了.sudo yum install snapd sudo systemctl enable --now snapd.socket sudo systemctl start snapd.socket sudo ln -s /var/lib/snapd/snap /snap export PATH="$PATH:/snap/bin" echo 'export PATH="$PATH:/snap/bin"' >> $HOME/.bashrc安装一个 flutter压压惊sudo yum install epel-release -y sudo yum install clang cmake ninja-build pkgconfig gtk3-devel xz-devel gtk3-devel -y snap install flutter --classic ...继续阅读 (19)

yum install epel-release -y yum install doxygen -y git clone https://github.com/BYVoid/OpenCC.git cd OpenCC make sudo make install git clone https://github.com/nauxliu/opencc4php cd opencc4php phpize ./configure make && sudo make install echo extension=opencc.so >> /opt/php7/etc/php.d/1-opencc.ini composer载入php-opencccomposer require overtrue/php-opencc -vvv ...继续阅读 (25)

swapoff /dev/vda2; mkswap /dev/vda2; swapon /dev/vda2; resize2fs /dev/vda1; yum -y update;systemctl disable guestfs-firstboot; rebootp ...继续阅读 (26)

1. kvm运行Centos9/almalinux-9 出现kernel panic , 改qemu的cpu模式为 host-model 解决 (前两年其实就踩过了没记录给忘记了)2.系统模版封装下载转换qcow2为rawqemu-img convert centos9-stream.qcow2 centos9-stream.raw #挂载修改文件 kpartx -av centos9-stream.raw mount /dev/mapper/loop0p2 /mnt umount /mnt #### 咔咔咔一顿更改设置 #这里直接先安装一个现有的操作系统, 然后dd写入分区文件,(主要是懒不想去自己封装系统,拿现成的) kpartx /dev/mapper/vg0-kvmXXXX_img dd_rescue /dev/mapper/loop0p2 /dev/mapper/vg0-kvmXXXX_img1 mount --bind /dev /mnt/dev mount --bind /proc /mnt/proc mount --bind /sys /mnt/sys chroot /mnt grub2-install /dev/sdXXXXX #重写引导信息 exit rm -r /mnt/root/.bash_history #删除操作记录 um ...继续阅读 (44)

由于给files.gallery开了全部权限, 防止文件泄露针对location /进行了限制访问.server { server_name gallery.XX.net; index index.php; root /home/gallery/web; location =/ {} location / { deny all;} location /.well-known/acme-challenge/ { return 200; } location ~ \.php(?:$|/) { try_files $uri = 404; fastcgi_pass unix:/dev/shm/php8-fpm.sock; } }设定ssl证书dnf install epel-release -y dnf install certbot python3-certbot-nginx -y certbot --nginx -d XXX.net --agree-tos -m admin@XXX.net echo "0 3 * * 6 /usr/bin/certbot renew --quiet"> / ...继续阅读 (52)

主要两个地方注意一下, cloudflare会传送一个CF-Connecting-IP的header参数为访客的真实ip,所以 read_ip读取它.然后设定REMOTE_ADDR读取IP, 可以从FORWARDED也可以用CF-Connecting-IP参数set_real_ip_from 103.21.244.0/22; set_real_ip_from 103.22.200.0/22; set_real_ip_from 103.31.4.0/22; set_real_ip_from 104.16.0.0/12; set_real_ip_from 108.162.192.0/18; set_real_ip_from 131.0.72.0/22; set_real_ip_from 141.101.64.0/18; set_real_ip_from 162.158.0.0/15; set_real_ip_from 172.64.0.0/13; set_real_ip_from 173.245.48.0/20; set_real_ip_from 188.114.96.0/20; set_real_ip_from 190.93.240.0/20; set_real_ip_from 197.234.240.0/22; set_real_ip_from 198.41.128.0/17; ...继续阅读 (36)

yum install snmp -y cat>/etc/snmp/snmpd.conf继续阅读 (51)

Import Color Scheme into iTerm2:Open iTerm2.Go toiTerm2->Preferences->Profiles.In theColorstab, you will see aColor Presetsdropdown. Open it.At the bottom of the dropdown, you'll findImport...https://raw.githubusercontent.com/mbadolato/iTerm2-Color-Schemes/master/schemes/Solarized%20Dark%20Higher%20Contrast.itermcolors ...继续阅读 (38)

Import Color Scheme into iTerm2:Open iTerm2.Go toiTerm2->Preferences->Profiles.In theColorstab, you will see aColor Presetsdropdown. Open it.At the bottom of the dropdown, you'll findImport...https://raw.githubusercontent.com/mbadolato/iTerm2-Color-Schemes/master/schemes/Solarized%20Dark%20Higher%20Contrast.itermcolors ...继续阅读 (56)

wget $(curl -s https://api.github.com/repos/ehang-io/nps/releases/latest | grep -oP '"browser_download_url": "\Khttps://[^"]+')把ehang-io/nps换成你要的github ID和项目地址. ...继续阅读 (36)

wget $(curl -s https://api.github.com/repos/ehang-io/nps/releases/latest | grep -oP '"browser_download_url": "\Khttps://[^"]+')把ehang-io/nps换成你要的github ID和项目地址. ...继续阅读 (40)

git clone https://github.com/swoole/swoole-src.git && cd swoole-src /usr/bin/phpize8.1 ./configure --enable-sockets --enable-mysqlnd --enable-openssl --enable-swoole-dev --with-php-config=/usr/bin/php-config8.1 make && make install echo extension=swoole.so >/etc/php/8.1/cli/conf.d/20-swoole.ini ...继续阅读 (42)

git clone https://github.com/swoole/swoole-src.git && cd swoole-src /usr/bin/phpize8.1 ./configure --enable-sockets --enable-mysqlnd --enable-openssl --enable-swoole-dev --with-php-config=/usr/bin/php-config8.1 make && make install echo extension=swoole.so >/etc/php/8.1/cli/conf.d/20-swoole.ini ...继续阅读 (40)

api.exchangerate.host 的API不能白嫖了, 找了个新的汇率接口api.vatcomply.com原有代码function exchange($from, $to) { try { $result = file_get_contents('https://api.exchangerate.host/latest?symbols=' . $to . '&base;=' . $from); $result = json_decode($result, true); return $result['rates'][$to]; } catch (Exception $e){ echo "Exchange error: ".$e; return "Exchange error: ".$e; } }更新后function exchange($from, $to) { try { $result = file_get_contents('https://api.vatcomply.com/rates?base='. $from); $result = json_decode($result, true); retur ...继续阅读 (69)

api.exchangerate.host 的API不能白嫖了, 找了个新的汇率接口api.vatcomply.com原有代码function exchange($from, $to) { try { $result = file_get_contents('https://api.exchangerate.host/latest?symbols=' . $to . '&base;=' . $from); $result = json_decode($result, true); return $result['rates'][$to]; } catch (Exception $e){ echo "Exchange error: ".$e; return "Exchange error: ".$e; } }更新后function exchange($from, $to) { try { $result = file_get_contents('https://api.vatcomply.com/rates?base='. $from); $result = json_decode($result, true); retur ...继续阅读 (39)

Segmentation fault E: Sub-process /usr/bin/apt-listchanges --apt || test $? -lt 10 returned an error code (1) E: Failure running script /usr/bin/apt-listchanges --apt || test $? -lt 10 修改/etc/apt/apt.conf.d/20listchanges文件,注释掉第一行.#DPkg::Pre-Install-Pkgs { "/usr/bin/apt-listchanges --apt || test $? -lt 10"; }; ...继续阅读 (32)

Segmentation fault E: Sub-process /usr/bin/apt-listchanges --apt || test $? -lt 10 returned an error code (1) E: Failure running script /usr/bin/apt-listchanges --apt || test $? -lt 10 修改/etc/apt/apt.conf.d/20listchanges文件,注释掉第一行.#DPkg::Pre-Install-Pkgs { "/usr/bin/apt-listchanges --apt || test $? -lt 10"; }; ...继续阅读 (44)

先准备一个U盘格式化为FAT32格式将bin pkg license等文件复制到设备上enable cd usb0: dir copy usb0:/XXXXX.SPA.bin bootflash: copy usb0:/XXXXX.SPA.pkg bootflash: copy usb0:/license.txt flash: license smart reservation install file flash:license.txt >conf t #upgrade rom-monitor filename bootflash:XXXXX.SPA.pkg all #no boot system flash bootflash:OLD_XXXXX.SPA.bin #boot system flash bootflash:XXXXX.SPA.bin #platform hardware throughput level 3500000 #do wr #do show bootvar #reload智能许可： 16.9到最新的17.X所有版本传统许可： 16.9和更低的版本新版本用的是license smart , 以前的授权文件无法再使用, 所以要写入新签发的授权数据. ...继续阅读 (38)

先准备一个U盘格式化为FAT32格式将bin pkg license等文件复制到设备上enable cd usb0: dir copy usb0:/XXXXX.SPA.bin bootflash: copy usb0:/XXXXX.SPA.pkg bootflash: copy usb0:/license.txt flash: license smart reservation install file flash:license.txt >conf t #upgrade rom-monitor filename bootflash:XXXXX.SPA.pkg all #no boot system flash bootflash:OLD_XXXXX.SPA.bin #boot system flash bootflash:XXXXX.SPA.bin #platform hardware throughput level 3500000 #do wr #do show bootvar #reload智能许可： 16.9到最新的17.X所有版本传统许可： 16.9和更低的版本新版本用的是license smart , 以前的授权文件无法再使用, 所以要写入新签发的授权数据. ...继续阅读 (41)

弃用10进制显示原文的community参数, 这玩意太容易忘记了.ip bgp-community new-format配置ssh免密码登录转换密钥格式fold -b -w 72 ~/.ssh/id_rsa.pub准备提取复制ssh-rsa到最后comment的中间一段密钥开始配置设备hostname Router-R1 crypto key generate rsa modulus 2048 ip ssh version 2 ! line vty 0 4 transport input ssh login local ! no ip ssh server authenticate user password no ip ssh server authenticate user keyboard !导入密钥步骤Router-R1(config)#ip ssh pubkey-chain Router-R1(conf-ssh-pubkey)#username 用户名 Router-R1(conf-ssh-pubkey-user)#key-string Router-R1(conf-ssh-pubkey-data)#粘贴密钥 Router-R1(conf-ssh-pubkey-data)#exit Router-R1(conf-ssh-pubkey-user)#exit Router ...继续阅读 (37)

弃用10进制显示原文的community参数, 这玩意太容易忘记了.ip bgp-community new-format配置ssh免密码登录转换密钥格式fold -b -w 72 ~/.ssh/id_rsa.pub准备提取复制ssh-rsa到最后comment的中间一段密钥开始配置设备hostname Router-R1 crypto key generate rsa modulus 2048 ip ssh version 2 ! line vty 0 4 transport input ssh login local ! no ip ssh server authenticate user password no ip ssh server authenticate user keyboard !导入密钥步骤Router-R1(config)#ip ssh pubkey-chain Router-R1(conf-ssh-pubkey)#username 用户名 Router-R1(conf-ssh-pubkey-user)#key-string Router-R1(conf-ssh-pubkey-data)#粘贴密钥 Router-R1(conf-ssh-pubkey-data)#exit Router-R1(conf-ssh-pubkey-user)#exit Router ...继续阅读 (41)