admin/common-server-public
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

827

Browse Source
This commit is contained in:
wsl-d4
2025-08-26 16:44:41 +08:00
parent 4c586c6cfc
commit 722e15b458
30 changed files with 3900 additions and 3889 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
.vscode/sftp.json vendored
View File

@@ -1,10 +1,10 @@
{ {
"name": "common-server", "name": "common-server",
"host": "10.0.3.14", "host": "10.0.3.148",
"protocol": "sftp", "protocol": "sftp",
"port": 22, "port": 22,
"username": "root", "username": "awei",
"password": "Awei@sxf01", "password": "123456",
"remotePath": "/root/common-server", "remotePath": "/home/awei/common-server",
"uploadOnSave": true "uploadOnSave": true
} }

2
Navidrome/docker-compose.yml
View File

@@ -3,7 +3,7 @@ version: '3.8'
services: services:
navidrome: navidrome:
container_name: navidrome container_name: navidrome
image: deluan/navidrome:latest image: swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/deluan/navidrome:pr-4181
ports: ports:
- "4533:4533" - "4533:4533"
restart: always restart: always

19
certmgr/getcert.sh
View File

@@ -1,23 +1,28 @@
#!/bin/bash #!/bin/bash
# 定义变量 # 定义变量
DOMAIN="registry.deepseak.icu" # 请替换为你的域名 DOMAIN="registry.deepseak.icu" # 主域名
ADDITIONAL_DOMAINS=("active.deepseak.icu" "bbs.deepseak.icu" "image.deepseak.icu" "gitea.deepseak.icu") # 额外域名
EMAIL="hpuzhagnwei@163.com" # 请替换为你的邮箱地址 EMAIL="hpuzhagnwei@163.com" # 请替换为你的邮箱地址
# 检查 Certbot 是否安装 # 检查 Certbot 是否安装
if ! command -v certbot &> /dev/null if ! command -v certbot &> /dev/null
then then
echo "Certbot 未安装，开始安装..." echo "Certbot 未安装，开始安装..."
sudo dnf install epel-release -y sudo apt update
sudo dnf install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm sudo apt install -y certbot python3-certbot-nginx
sudo dnf config-manager --set-enabled crb
sudo dnf update
sudo dnf install certbot python3-certbot-nginx -y
fi fi
# 申请证书 # 申请证书
echo "开始申请证书..." echo "开始申请证书..."
sudo certbot certonly --nginx -d $DOMAIN --email $EMAIL --agree-tos --no-eff-email
# 构建域名参数
DOMAIN_ARGS="-d $DOMAIN"
for domain in "${ADDITIONAL_DOMAINS[@]}"; do
DOMAIN_ARGS="$DOMAIN_ARGS -d $domain"
done
sudo certbot certonly --nginx $DOMAIN_ARGS --email $EMAIL --agree-tos --no-eff-email
# 检查证书是否申请成功 # 检查证书是否申请成功
if [ $? -eq 0 ]; then if [ $? -eq 0 ]; then

14
nginx/nginx.conf
View File

@@ -32,8 +32,8 @@ http {
listen 443 ssl; listen 443 ssl;
server_name active.deepseak.icu; server_name active.deepseak.icu;
ssl_certificate /etc/letsencrypt/live/active.deepseak.icu/fullchain.pem; ssl_certificate /etc/letsencrypt/live/registry.deepseak.icu/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/active.deepseak.icu/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/registry.deepseak.icu/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3; ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5; ssl_ciphers HIGH:!aNULL:!MD5;
@@ -53,8 +53,8 @@ http {
listen 443 ssl; listen 443 ssl;
server_name bbs.deepseak.icu; server_name bbs.deepseak.icu;
ssl_certificate /etc/letsencrypt/live/bbs.deepseak.icu/fullchain.pem; ssl_certificate /etc/letsencrypt/live/registry.deepseak.icu/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/bbs.deepseak.icu/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/registry.deepseak.icu/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3; ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5; ssl_ciphers HIGH:!aNULL:!MD5;
@@ -75,8 +75,8 @@ http {
listen 443 ssl; listen 443 ssl;
server_name image.deepseak.icu; server_name image.deepseak.icu;
ssl_certificate /etc/letsencrypt/live/image.deepseak.icu/fullchain.pem; ssl_certificate /etc/letsencrypt/live/registry.deepseak.icu/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/image.deepseak.icu/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/registry.deepseak.icu/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3; ssl_protocols TLSv1.2 TLSv1.3;
@@ -101,7 +101,7 @@ http {
server_name gitea.deepseak.icu; server_name gitea.deepseak.icu;
location / { location / {
proxy_pass http://127.0.0.1:3002; proxy_pass http://10.0.3.14:3002;
# 添加代理超时配置 # 添加代理超时配置
proxy_connect_timeout 60s; proxy_connect_timeout 60s;
proxy_read_timeout 600s; proxy_read_timeout 600s;

24
nginx/updateConfig.sh
View File

@@ -1,30 +1,36 @@
#!/bin/bash #!/bin/bash
# 检查并创建nginx用户
if ! id -u nginx >/dev/null 2>&1; then
echo "创建nginx用户..."
sudo useradd -r -s /sbin/nologin nginx
fi
# 创建 conf.d 目录（如果不存在） # 创建 conf.d 目录（如果不存在）
mkdir -p /etc/nginx/conf.d sudo mkdir -p /etc/nginx/conf.d
# 备份并覆盖 nginx.conf 文件 # 备份并覆盖 nginx.conf 文件
cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak sudo cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak
cp nginx.conf /etc/nginx/ sudo cp nginx.conf /etc/nginx/
# 备份并覆盖 conf.d 目录下的所有 .conf 文件 # 备份并覆盖 conf.d 目录下的所有 .conf 文件
for conf in conf.d/*.conf; do for conf in conf.d/*.conf; do
filename=$(basename "$conf") filename=$(basename "$conf")
cp "/etc/nginx/conf.d/$filename" "/etc/nginx/conf.d/${filename}.bak" 2>/dev/null || true sudo cp "/etc/nginx/conf.d/$filename" "/etc/nginx/conf.d/${filename}.bak" 2>/dev/null || true
cp "$conf" /etc/nginx/conf.d/ sudo cp "$conf" /etc/nginx/conf.d/
done done
# 测试并重载配置 # 测试并重载配置
if nginx -t; then if sudo nginx -t; then
systemctl reload nginx sudo systemctl reload nginx
echo "配置已生效，HTTPS已启用" echo "配置已生效，HTTPS已启用"
else else
echo "配置测试失败，已恢复备份" echo "配置测试失败，已恢复备份"
# 恢复 nginx.conf 备份 # 恢复 nginx.conf 备份
cp /etc/nginx/nginx.conf.bak /etc/nginx/nginx.conf sudo cp /etc/nginx/nginx.conf.bak /etc/nginx/nginx.conf
# 恢复 conf.d 目录下的所有 .conf 文件备份 # 恢复 conf.d 目录下的所有 .conf 文件备份
for conf in conf.d/*.conf; do for conf in conf.d/*.conf; do
filename=$(basename "$conf") filename=$(basename "$conf")
mv -f "/etc/nginx/conf.d/${filename}.bak" "/etc/nginx/conf.d/$filename" 2>/dev/null || true sudo mv -f "/etc/nginx/conf.d/${filename}.bak" "/etc/nginx/conf.d/$filename" 2>/dev/null || true
done done
fi fi