Files
StudyDiary-20261009/03-工作笔记/应用部署/云平台部署.md
CrazyJasonwell e97be9ac8c commit all
2026-10-09 22:06:40 +08:00

696 lines
18 KiB
Markdown
Executable File
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# 阿里云
### 服务器信息
位置:华东2(上海)
ID:i-uf6bwcl7qieqfl243zz1+iZuf6bwcl7qieqfl243zz1Z
操作系统:alilinux
IP:106.15.121.26
主私网IP:172.22.16.235
帐号密码 root/M@yi19b8
### frps
admin/admin8466 Token:admin8466
### Portainer
ptAdmin/J6ff19b8!@#ok
原来的帐号
81b7d939-portainer@clouddream.net
1_86x9yUD2T0fv3ow#P<cF5h(p*)r%{q
映射卷:
/clouddream/portainer/data:/data
portainer_data
### Harbor
Harbor重置密码:
admin
P@ssw0rd4Harbor->M@yi19b8
### nginx proxy manage
部署在ECS主机上,家里的服务器因为路由器在前端,部署NPM不能将端口和子域名进行映射
f7e760d6-nginx@clouddream.net
$2b$13$oguinCvNAy2y0KHOJNAgkeKEDbBx2.39vOuYetOgSs1IiLUMfEY8m
修改为:
$2b$13$C9mJYK7Gf7sVgCCYw84HhOvOIpnyhkdGqwIp0PPj/s9.q0bxkoMZe
changeme->M@yi19b8
### 端口设置
7001:adminer
5004:mysql
5002:portainer-ce
5003:nginx proxy manage
5001 Harbor
5005
### 1Panel
[http://106.15.121.26:34184/](http://106.15.121.26:34184/)
安全入口:
daf79ebf13
用户
0309e23ea3->pnAdmin
面版密码:
dedb742018->M@yi19b8
1pctl user-info
面板地址: http://$LOCAL_IP:34184/daf79ebf13
面板用户: pnAdmin
面板密码: ********
提示: 修改密码可执行命令: 1pctl update password
192.168.1.181:10086/entrance
pnAdmin/M@yi19b8
106.15.121.26:10000
pnAdmin/M@yi19b8
1Panel V1 Docker 脚本:
```
docker run -d \
--name 1panel \
--restart always \
--network host \
-v /var/run/docker.sock:/var/run/docker.sock \
-v /volume1/docker/1panel:/var/lib/docker/volumes \
-v /opt:/opt \
-v /root:/root \
-e TZ=Asia/Shanghai \
moelin/1panel:latest
```
默认:1panel/1panel_password->1panel/M@yi19b8->ptAdmin/M@yi19b8
本地端口:10086 外网映射:10000-10086
已更新1Panel V2.0.15,入口等信息照旧
## mihomo
9097+9090
## nezha
- dashboard
serverIP:8008
nzAdmin/M@yi19b8
nezha wiki:
https://nezha.wiki/guide/agent.html
https://github.com/nezhahq/agent/releases
Dashboard Url:
http://106.15.121.26:8008
管理帐号 nzAdmin/M@yi19b8
- agent安装
从dashboard后台点击对应的操作系统获取安装链接
Mac:
curl -L https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh -o agent.sh && chmod +x agent.sh && env NZ_SERVER=joyagain.me:8008 NZ_TLS=false NZ_CLIENT_SECRET=wf7tlLDIknuIpBhv7n4o6pP9b8eDHjeL ./agent.sh
LInux:
curl -L https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh -o agent.sh && chmod +x agent.sh && env NZ_SERVER=joyagain.me:8008 NZ_TLS=false NZ_CLIENT_SECRET=wf7tlLDIknuIpBhv7n4o6pP9b8eDHjeL ./agent.sh
Windows:
$env:NZ_SERVER="joyagain.me:8008";$env:NZ_TLS="false";$env:NZ_CLIENT_SECRET="wf7tlLDIknuIpBhv7n4o6pP9b8eDHjeL"; [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Ssl3 -bor [Net.SecurityProtocolType]::Tls -bor [Net.SecurityProtocolType]::Tls11 -bor [Net.SecurityProtocolType]::Tls12;set-ExecutionPolicy RemoteSigned;Invoke-WebRequest https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.ps1 -OutFile C:install.ps1;powershell.exe C:install.ps1
飞牛(Debian兼容)agent一键安装
curl -L https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh -o agent.sh && chmod +x agent.sh && env NZ_SERVER=joyagain.me:8008 NZ_TLS=false NZ_CLIENT_SECRET=wf7tlLDIknuIpBhv7n4o6pP9b8eDHjeL ./agent.sh
https://blog.ydhang.cn/archives/1710503011776
配置文件位置:/opt/nezha/config.yml
使用命令行调试
./nezha-agent -c /opt/nezha/config.yml
安装Macmini agent失败 原因:Macmini 版本太低 要求>12.0
dyld: Symbol not found: _SecTrustCopyCertificateChain
放弃!
黑群晖DSM920 安装成功!
https://nezha.wiki/guide/agent.html
> [!hint]
> uuidgen 产生UUID程序
## Pan-sou
106.X.X.X:3001
https://pan.joyagain.me
token:
ZxtLlA1oCkn0OUEYQqdtIvIMdvJ6wEStKmM6NHiOsxOPV7/soUDxTQ79BHA2Clua
https://github.com/fish2018/pansou
```
version: '3.8'
services:
pansou:
image: ghcr.io/fish2018/pansou-web:latest
container_name: pansou-app
ports:
- "8080:80"
- "4433:443"
environment:
# 基础配置
- DOMAIN=localhost
- PANSOU_PORT=8888
- PANSOU_HOST=127.0.0.1
# 代理配置(可选)
# - SOCKS5_PROXY=socks5://ip:20170
# - HTTP_PROXY=http://ip:20171
volumes:
# 数据持久化
- ./pansou-data:/app/data
- ./pansou-logs:/app/logs
restart: unless-stopped
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost/api/health"]
interval: 30s
timeout: 10s
retries: 3
start_period: 40s
volumes:
pansou-data:
driver: local
pansou-logs:
driver: local
```
```
version: '3.8'
services:
pansou:
image: ghcr.io/fish2018/pansou-web:latest
container_name: pansou-app
labels:
- "autoheal=true" # 标记允许 autoheal 自动重启
ports:
- "3001:80" # 只暴露 HTTP 端口,供 1Panel 反向代理使用
environment:
# 基础配置(后端监听地址,保持本地回环最安全)
- PANSOU_PORT=8888
- PANSOU_HOST=127.0.0.1
# 数据目录(统一挂载)
- CACHE_PATH=/app/data/cache
- LOG_PATH=/app/data/logs
# 插件列表(推荐全开,覆盖大部分来源)
- ENABLED_PLUGINS=labi,zhizhen,shandian,duoduo,muou,wanou,hunhepan,jikepan,panwiki,pansearch,panta,qupansou,hdr4k,pan666,susu,thepiratebay,xuexizhinan,panyq,ouge,huban,cyg,erxiao,miaoso,fox4k,pianku,clmao,wuji,cldi,xiaozhang,libvio,leijing,xb6v,xys,ddys,hdmoli,yuhuage,u3c3,javdb,clxiong,jutoushe,sdso,xiaoji,xdyh,haisou,bixin,djgou,nyaa,xinjuc,aikanzy,qupanshe,xdpan,discourse,yunsou,ahhhhfs,nsgame,gying
# TG 频道列表(默认推荐频道,覆盖热门分享源)
- CHANNELS=tgsearchers3,Aliyun_4K_Movies,bdbdndn11,yunpanx,bsbdbfjfjff,yp123pan,sbsbsnsqq,yunpanxunlei,tianyifc,BaiduCloudDisk,txtyzy,peccxinpd,gotopan,PanjClub,kkxlzy,baicaoZY,MCPH01,bdwpzhpd,ysxb48,jdjdn1111,yggpan,MCPH086,zaihuayun,Q66Share,ucwpzy,shareAliyun,alyp_1,dianyingshare,Quark_Movies,XiangxiuNBB,ydypzyfx,ucquark,xx123pan,yingshifenxiang123,zyfb123,tyypzhpd,tianyirigeng,cloudtianyi,hdhhd21,Lsp115,oneonefivewpfx,qixingzhenren,taoxgzy,Channel_Shares_115,tyysypzypd,vip115hot,wp123zy,yunpan139,yunpan189,yunpanuc,yydf_hzl,leoziyuan,pikpakpan,Q_dongman,yoyokuakeduanju,TG654TG,WFYSFX02,QukanMovie,yeqingjie_GJG666,movielover8888_film3,Baidu_netdisk,D_wusun,FLMdongtianfudi,KaiPanshare,QQZYDAPP,rjyxfx
# 健康检查(容器内部)
- HEALTH_CHECK_INTERVAL=30
- HEALTH_CHECK_TIMEOUT=10
- HEALTH_CHECK_RETRIES=3
# 认证(启用用户名密码登录)
- AUTH_ENABLED=true
- AUTH_USERS=admin:J6ff19b8 # 用户名:密码,可加多个用逗号分隔
- AUTH_TOKEN_EXPIRY=720 # Token 有效期 720 小时(30 天)
# JWT 密钥(强烈建议自定义,防止重启后 Token 失效)
- AUTH_JWT_SECRET=ZxtLlA1oCkn0OUEYQqdtIvIMdvJ6wEStKmM6NHiOsxOPV7/soUDxTQ79BHA2Clua
volumes:
- pansou-data:/app/data # 持久化缓存、日志等
restart: unless-stopped
healthcheck:
test: ["CMD", "/app/healthcheck.sh"]
interval: 30s
timeout: 10s
retries: 3
start_period: 40s
autoheal:
image: willfarrell/autoheal:latest
container_name: pansou-autoheal
restart: always
environment:
- AUTOHEAL_CONTAINER_LABEL=autoheal
- AUTOHEAL_INTERVAL=30
- AUTOHEAL_START_PERIOD=60
- AUTOHEAL_DEFAULT_STOP_TIMEOUT=10
volumes:
- /var/run/docker.sock:/var/run/docker.sock
volumes:
pansou-data:
driver: local
```
教程:
https://xinhaojin.github.io/2026/02/08/%E4%BD%BF%E7%94%A81Panel+DockerCompose%E4%B8%80%E9%94%AE%E9%83%A8%E7%BD%B2PanSou%E7%BD%91%E7%9B%98%E8%B5%84%E6%BA%90%E6%90%9C%E7%B4%A2%E5%BC%95%E6%93%8E/
## Fail2ban
配置文件:
/etc/fail2ban/jail.local
[[../../10-WebClipper/Linux系统Fail2ban安装配置测试与管理全流程-开发者社区-阿里云]]
源教程:
https://developer.aliyun.com/article/1650963
## mihomo
```
version: '3.8'
services:
mihomo:
container_name: mihomo-core
# image: metacubex/mihomo:latest # 也可使用 :Alpha 或指定版本如 :v1.19.x
# 国内加速源
image: docker.1ms.run/metacubex/mihomo:latest
restart: always
network_mode: host
pid: host
ipc: host
cap_add:
- ALL # 如果日志报权限不足,NET_ADMIN 试试改为 - ALL
security_opt:
- apparmor=unconfined # 群晖系统可能需要
volumes:
- ./data:/root/.config/mihomo # 映射配置目录
- /dev/net/tun:/dev/net/tun # TUN 模式必需
- /etc/localtime:/etc/localtime:ro # 同步主机时间
depends_on:
- metacubexd
metacubexd: # 官方控制面板 (XD)
container_name: mihomo-web
# image: ghcr.io/metacubex/metacubexd:latest
# 国内加速源
image: docker.1ms.run/metacubex/metacubexd:latest
restart: always
network_mode: bridge # 注意:此处不要使用 host模式
ports:
- "9097:80" # 可将 9091 改成你希望访问的端口
volumes:
- ./config:/config/caddy # 面板配置文件(可选)
- /etc/localtime:/etc/localtime:ro
```
2026.4.22重构
文件结构
```
/volume1/docker/mihomo
├── config/
├── data/
│ ├── config.yaml
│ ├── country.mmdb
│ ├── geoip.dat
│ └── geosite.dat
└── docker-compose.yml
```
报没有/dev/net/tun错误
```
mkdir -p /dev/net
mknod /dev/net/tun c 10 200
chmod 600 /dev/net/tun
cat /dev/net/tun
```
自动化脚本
```
# 创建一个启动脚本,例如 /etc/init.d/create_tun.sh:
#!/bin/bash
mkdir -p /dev/net
mknod /dev/net/tun c 10 200
chmod 600 /dev/net/tun
# 修改 crontab:
crontab -e
# 添加以下行以在重启时执行脚本:
@reboot /etc/init.d/create_tun.sh
```
内核支持2个订阅。
只能识别狗狗加速和IPLC少数节点!?
跟DSM8466和DSM9161一样,可能与linux版本有关
飞牛工作很好,能识别大多数节点。
![image.png](https://lsky.himan.cloud/i/2026/04/22/69e897ea1acde.png)
![](https://lsky.himan.cloud/i/2026/04/22/69e894c3797f1.png)
参考教程:
https://linux.do/t/topic/1327214
https://laosu.tech/2026/03/04/%E7%BE%A4%E6%99%96%E4%B8%8A%E7%94%A8Docker%E9%83%A8%E7%BD%B2Mihomo%E5%AE%9E%E5%BD%95/
https://www.onemuggle.com/archives/1406.html
https://wiki.metacubex.one/en/example/conf/#__tabbed_2_1
https://blog.canmoe.com/posts/mihomo-config-guide/
https://yizhimengxin.me/2022/10/27/%E6%89%93%E9%80%A0%E8%87%AA%E5%B7%B1%E7%9A%84Clash%E9%85%8D%E7%BD%AE%E5%B9%B6%E6%8F%90%E4%BE%9B%E8%AE%A2%E9%98%85/
wiki
https://wiki.metacubex.one/
验证外网联通:
curl -I https://www.google.com
测试出口IP
`ip.sb` 或 `ipleak.net`,显示的是纯净的住宅 IP,且 DNS 无泄露。
curl ifconfig.me
### 查看 GEO 相关日志
[](https://github.com/liuxiaomangAI/mihomo-nas-docker-gateway/blob/main/20260330%20%E9%A3%9E%E7%89%9BNAS%E9%83%A8%E7%BD%B2mihomo%E5%AE%9E%E7%8E%B0%E5%85%A8%E5%AE%B6%E6%97%A0%E6%84%9F%E7%BF%BB%E5%A2%99%204%E4%B8%AA%E6%96%87%E4%BB%B6%E8%87%AA%E5%8A%A8%E6%9B%B4%E6%96%B0%20%E6%9C%80%E7%BB%88%E7%89%88.md#4-%E6%9F%A5%E7%9C%8B-geo-%E7%9B%B8%E5%85%B3%E6%97%A5%E5%BF%97)
```shell
docker logs mihomo | grep GEO
```
## 检查ECS
端口
netstat -tuln
# 腾讯云
## 1. 150.158.120.215
位置:上海四区
购买时间:2025.11.27
配置:
IP:150.158.120.215
操作系统
Ubuntu 22.04.4 LTS (GNU/Linux 5.15.0-113-generic x86_64)
2核4G 系统盘70G6M带宽 600G/月流量
命名:TencentCloud2
认证:
1890731866
ubuntu/M@yi19b8
修改配置后允许root登录:
root/c9lhQxOg
域名:himan.vip+himan.top
认证:
18907318466
应用部署:
1Panel:
![](https://cdn.nlark.com/yuque/0/2025/svg/35770673/1764148240338-1191657f-b80f-4cad-86e6-f35da1993519.svg)**1Panel** **2.0.1-lts**面板首页地址
http://150.158.120.215:面板端口/tencentcloud
http://150.158.120.215:8090/tencentcloud
面板端口
默认为8090,您可以在登录面板后修改面板端口
sudo /opt/1panel/get-1panel-info.sh
tybuwzszva/Mayi19b8#
Tip: To change the password, you can execute the command: 1pctl update password
frps server:
admin/Mayi19b8
token:admin8466
ubuntu 防火墙:ufw
- mihomo
```
version: '3.8'
services:
mihomo:
container_name: mihomo-core
# image: metacubex/mihomo:latest # :Alpha :v1.19.x
#
image: docker.1ms.run/metacubex/mihomo:latest
restart: unless-stopped
network_mode: host
pid: host
ipc: host
cap_add:
- NET_ADMIN # NET_ADMIN - ALL
security_opt:
- apparmor=unconfined #
volumes:
- ./data:/root/.config/mihomo #
- /dev/net/tun:/dev/net/tun # TUN
- /etc/localtime:/etc/localtime:ro #
depends_on:
- metacubexd
metacubexd: # (XD)
container_name: mihomo-web
# image: ghcr.io/metacubex/metacubexd:latest
#
image: ghcr.1ms.run/metacubex/metacubexd:latest
restart: unless-stopped
network_mode: bridge # host
ports:
- "9097:80" # 9091
volumes:
- ./config:/config/caddy #
- /etc/localtime:/etc/localtime:ro
```
更换了新版本 config.yaml 单节点配置
## 2. 43.156.15.219
位置:新加坡 | 新加波3区
购买时间:2025.11.27
IP:43.156.15.219
配置:
- CPU - 2核 内存 - 4GB
- 系统盘 - SSD云硬盘 60GB管理快照
- 流量包 - 1536GB/月(峰值带宽 30Mbps)
- 开启IPV6
操作系统:OpenCloudOS 9
兼容centos8
认证:18907318466
root/K&eh12XC
命名:TencentCloud3
### 宝塔
入口:http://43.156.15.219:8888/tencentcloud 已修改为:8686 腾讯控制台 放行了8686
内网面板地址: http://10.3.0.13:8888/tencentcloud
username: 1193abc5
password: c9a1518937f3
SSH:输入bt可以进入命令行菜单!
![image.png](https://joyimg.cpolar.top/i/2025/12/11/693adb167a4ff.png)
输入:14
就可以看到上面<font color="#00b050">面板默认信息</font>。
选择安装:ngnix+openresty+docker
默认宝塔帐号:100????9284
用户:1193abc5
宝塔帐号:18907318466+13808468466
进入宝塔界面:
http://43.156.15.219:8686/
- 安装openlist
mkdir -p /etc/openlist
sudo chown -R 1001:1001 /etc/openlist
docker run -d --restart=unless-stopped -v /etc/openlist:/opt/openlist/data -p 5244:5244 -e UMASK=022 --name="openlist" openlistteam/openlist:latest
在腾讯控制台和宝塔防火墙中放行端口5244
设置要暴露5244端口
alAdmin/J6ff19b8#xjp
Token:
openlist-67decc8e-834b-4c7e-97e4-742d579d579407Kon2VtGynYzbKLN6aJBh8rzdP7CRNpKxmXBDw0hkdtTNR4KdibS8K3YwHzaeft
- 迅雷
ck0.C86kp2r80Pjz4t-aPTFnNtbP_J2TIzWxM6crEpmAZ1mVp-RSmAUDprMa2ITo6Xn9AnNHKZ7uZE1-mEZbB-Ksk9jDDS1ERc1l5FGNQZ7GpvZFRWUbeO54T7R1Yrs_5fdC70XTXhe_3iT_WFEx32gTcF-jw4WmnP3LVYt_e5hi8jxTHqEP-TNCMD75hqfLEy2J3nhiMBtPJR6m6mjoCxKr5A
- pikpak
os.UqiiS2ZqpWmOjqsPveDph011lEvFcNZwlnsAvPtEwa9RpwGTh1bUIrFw
## 3. 124.220.30.149
位置:上海四区
购买时间:2025.11.22
配置:
2核4G60G5M OpenCloudOS 8.8 兼容centos7
2核4G5M+himan.cloud =189元/年
操作系统:OpenCloudOS 8.8
兼容centos7
root/Mayi@19b8
公网IP:124.220.30.149
内网IP:10.0.0.6
命名:TencentCloud1
认证:
绑定微信Himango + cs_jeff@qq.com
电话:15308481117
已实名认证
域名:himan.cloud
访问API:帐号15308481117
SecretId:AKIDh8RvFOL6h6JI3av2ykJemhPvEMMp7E7p SecretKey:Yu30sY0HNIYeXHpDOL6g2XxCG8nNkxzs
AppID:1387650255
- 安装应用
frps server:
dashboard:7500 admin/Mayi19b8
token:admin8466
openresty:
部署了pdf.js
https://prev.himan.cloud
### 1Panel
```
外部地址: http://124.220.30.149:42243/a11cd484df
[1Panel 2025-12-12 20:29:17 install Log]: 内部地址: http://10.0.0.6:42243/a11cd484df
[1Panel 2025-12-12 20:29:17 install Log]: 面板用户: pnAdmin
[1Panel 2025-12-12 20:29:17 install Log]: 面板密码: 7e14eb8c73
[1Panel 2025-12-12 20:29:17 install Log]:
[1Panel 2025-12-12 20:29:17 install Log]: 官方网站: https://1panel.cn
[1Panel 2025-12-12 20:29:17 install Log]: 项目文档: https://1panel.cn/docs
[1Panel 2025-12-12 20:29:17 install Log]: 代码仓库: https://github.com/1Panel-dev/1Panel
[1Panel 2025-12-12 20:29:17 install Log]: 前往 1Panel 官方论坛获取帮助: https://bbs.fit2cloud.com/c/1p/7
[1Panel 2025-12-12 20:29:17 install Log]:
[1Panel 2025-12-12 20:29:17 install Log]: 如果您使用的是云服务器,请在安全组中打开端口 42243
```
firewalld 开启防火墙端口规则
开放80、443、7500、7000、42243
# 天翼云
位置:西南1
购买时间:2025.11.21
配置:
2核4G60G5M Debian 12.8
2核4G5M+himan.cloud =388.8元/年
操作系统:Debian 12.8
root/Mayi19b8@8466
公网IP:113.249.108.204
内网IP:10.0.0.3
### 1Panel
```
外部地址: http://113.249.108.204:20806/b3beba0ab7
内部地址: http://10.0.0.3:20806/b3beba0ab7
面板用户: pnAdmin
面板密码: eb3325af21
官方网站: https://1panel.cn
项目文档: https://1panel.cn/docs
代码仓库: https://github.com/1Panel-dev/1Panel
前往 1Panel 官方论坛获取帮助: https://bbs.fit2cloud.com/c/1p/7
如果您使用的是云服务器,请在安全组中打开端口 20806
```
## frps server:
admin/Mayi19b8
token:admin8466
# 联通云
位置:长沙1区
购置时间:2025.12.05
配置:2核8G50G10M
操作系统:centos 7.9
18907318466/joyago/J6ff19b8#/cs_jeff@qq.com
控制台: [https://console.cucloud.cn/iamLogin?id=741NWY22767785](https://console.cucloud.cn/iamLogin?id=741NWY22767785)
控制台登录账号:Hii1104/18907318466现在添加手机可以登录,支持异地登录,需要测试!
控制台登录密码: Hnuc@123 ->Hnuc@9161
VNC登陆密码: gx9m3hxv
云服务器root密码: Hnuc@1234z ->M@yi19b8
远程ssh端口: 22 公网ip: 116.162.100.119
### 1Panel
外部地址: [http://116.162.100.119:15816/db3ae4e0d2](http://116.162.100.119:15816/db3ae4e0d2)
内部地址: [http://192.168.0.184:15816/db3ae4e0d2](http://192.168.0.184:15816/db3ae4e0d2)
面板用户: 75bbbb926b
面板密码: a3056d8eab
### frp Server
admin/Mayi19b8
token:admin8466
端口:7500+7000
映射:
/opt/1panel/apps/frps/frps/data/frps.toml -> /etc/frp/frps.toml
firewalld:
```bash
firewall-cmd --zone=public --add-port=80/tcp --**permanent**
```
# 移动云
2025.11.25 注册
【移动云】(注册成功通知)尊敬的YDY_1380846_fe1308客户,您好!您于2025-11-25 21:42:06在移动云注册成功,可使用短信登录方式登录。您的用户名为YDY_1380846_fe1308。