通过Acme.sh申请Google SSL（含ECC）证书 登陆Google申请API1.登录google账号后， 点击链接 2.点击启用，启用成功后，点击右上角的控制台，激活控制台。在控制台中输入如下命令：gcloud beta publicca external-account-keys create3.稍后会返回如下信息，请做好保存Created an external account key [b64MacKey: _lDYpN_L1ZOPeZEXX3E8RgvmFyXO80WwNaKyPJbRGhmGV-_-***xcKopyg keyId: 6f4da6f94***fc4947d]安装acme1.在控制台输入如下命令：curl https://get.acme.sh | sh -s email=你的邮箱2.更改默认证书./acme.sh --set-default-ca --server google3.获取Google证书的申请资格./acme.sh --register-account -m 刚刚的邮箱 --server google \ --eab-kid 6f4da6f94b3***7d \ --eab-hmac-key _lDYpN_L1ZOPeZEXX3E8Rgv***fzg9MMbxcKopyg申请证书1.输入以下命令，弹出两条解析记录，对照的添加。./acme.sh --issue --dns -d 域名 -d 域名 \ --yes-I-know-dns-manual-mode-enough-go-ahead-please2.激活订单./acme.sh --server google --renew -d 域名 -d 域名 \ --yes-I-know-dns-manual-mode-enough-go-ahead-please申请ECC证书1.同理，输入如下命令。./acme.sh -k ec-256 --issue --dns -d 域名 -d 域名 \ --yes-I-know-dns-manual-mode-enough-go-ahead-please按提示进行验证。2.激活./acme.sh -k ec-256 --server google --renew -d 域名 -d 域名 \ --yes-I-know-dns-manual-mode-enough-go-ahead-please一键申请脚本echo $# if [ $# -gt 1 ] then echo "[Download google cert]..." ./.acme.sh/acme.sh -k ec-256 --server google --renew -d $1 -d *.$1 --yes-I-know-dns-manual-mode-enough-go-ahead-please else echo "[Request google keys]..." gcloud beta publicca external-account-keys create 2>&1 | tee key.txt echo "[Download acme.sh]..." curl https://get.acme.sh | sh -s [email protected] cd ./.acme.sh echo "[Get TXT]..." ./acme.sh --set-default-ca --server google ./acme.sh --register-account -m [email protected] --server google --eab-kid $(grep -oP 'keyId:\s*\K\S+[^\]]' ../key.txt) --eab-hmac-key $(grep -oP 'b64MacKey:\s*\K\S+' ../key.txt) ./acme.sh -k ec-256 --issue --dns -d $1 -d *.$1 --yes-I-know-dns-manual-mode-enough-go-ahead-please fi

Windows上搭建Rsync服务 一、Windows搭建Rsync服务1.Windows上安装cwRsyncServer_4.1.0_Installer（最后一个免费版本）目录下修改C:\Program Files (x86)\ICW\rsyncd.confuse chroot = false strict modes = false hosts allow = * log file = rsyncd.log uid = 0 gid = 0 # Module definitions # Remember cygwin naming conventions : c:\work becomes /cygwin/c/work # [config] path = /cygdrive/d/huixin/DataBaseBak read only = true transfer logging = yes auth users = rsyncuser secrets file = /cygdrive/c/rsync.password2.新建密码文件，内容如下：rsyncuser:1234563.打开 CMD ，进入目录 C:\Program Files (x86)\ICW\bin 查询当前用户，然后输入如下信息，修改权限为仅当前用户C:\Program Files (x86)\ICW\bin>whoami dt4d\marx C:\Program Files (x86)\ICW\bin>chmod.exe -c 600 /cygdrive/i/rsyncd1.password mode of `/cygdrive/i/rsyncd1.password' changed to 0600 (rw-------) C:\Program Files (x86)\ICW\bin>chown.exe marx /cygdrive/i/rsyncd1.password4.重新启动Rsync服务5.防火墙添加入站规则，默认端口为873二、客户端同步文件Linux直接使用rsync命令rsync -av --password-file=/path/to/rsync.password rsync://[email protected]:873/config ./bak #增加--delete参数可保证目录完全一致，否则只增加不删除Windows安装客户端cwRsync Client下载链接 类似操作新建密码文件，并修改权限密码文件例如（注意：与服务端不同格式）：123456CMD 进入 C:\Program Files (x86)\cwRsync\bin，参考命令#远程同步到本地 ./rsync.exe --port=873 -vzrtopg --progress --password-file=/cygdrive/i/rsyncd.password [email protected]::config /cygdrive/i/Temp #本地同步到远程 ./rsync.exe --port=873 -vzrtopg --progress --password-file=/cygdrive/i/rsyncd.password /cygdrive/i/Temp [email protected]::config上面/cygdrive/i/Temp 为同步到客户端的目录使用参数 -azh 可仅查看错误：./rsync.exe --port=873 -azh --password-file=/cygdrive/i/rsyncd.password /cygdrive/i/Temp [email protected]::config

VPS测试脚本合集 流媒体解锁测试脚本bash <(curl -L -s https://raw.githubusercontent.com/lmc999/RegionRestrictionCheck/main/check.sh)三网回程延迟测试脚本wget -qO- git.io/besttrace | bash三网回程测试脚本curl https://raw.githubusercontent.com/zhucaidan/mtr_trace/main/mtr_trace.sh|bash三网测速脚本bash <(curl -Lso- https://git.io/superspeed_uxh)测速命令wget -qO- --no-check-certificate https://raw.githubusercontent.com/oooldking/script/master/superbench.sh | bash

CentOs/Ubuntu搭建上网x-ui 另一个#先更新源 yum update apt update #启用 BBR TCP 拥塞控制算法 echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf sysctl -p #安装x-ui： bash <(curl -Ls https://raw.githubusercontent.com/vaxilu/x-ui/master/install.sh) #安装nginx apt install nginx yum install nginx #安装acme： curl https://get.acme.sh | sh #添加软链接： ln -s /root/.acme.sh/acme.sh /usr/local/bin/acme.sh #切换CA机构： acme.sh --set-default-ca --server letsencrypt #申请证书： acme.sh --issue -d 要替换的域名 -k ec-256 --webroot /var/www/html #安装证书： acme.sh --install-cert -d 要替换的域名 --ecc \ --key-file /etc/x-ui/server.key \ --fullchain-file /etc/x-ui/server.crt \ --reloadcmd "systemctl force-reload nginx"寻找适合的伪装站http站点优先，个人网盘符合单节点大流量特征示例关键字： intext:登录 Cloudreve 配置nginx配置文件路径：/etc/nginx/nginx.conf# user www-data; #ubuntu下好像用这个 user nginx; worker_processes auto; pid /run/nginx.pid; include /etc/nginx/modules-enabled/*.conf; events { worker_connections 1024; } http { sendfile on; tcp_nopush on; tcp_nodelay on; keepalive_timeout 65; types_hash_max_size 2048; include /etc/nginx/mime.types; default_type application/octet-stream; gzip on; server { listen 443 ssl; server_name ui.你的域名.shop; #你的域名 ssl_certificate /etc/x-ui/server.crt; #证书位置 ssl_certificate_key /etc/x-ui/server.key; #私钥位置 ssl_session_timeout 1d; ssl_session_cache shared:MozSSL:10m; ssl_session_tickets off; ssl_protocols TLSv1.2 TLSv1.3; ssl_prefer_server_ciphers off; location / { proxy_pass http://cloudreve.lee2333.com/; #伪装网址 proxy_redirect off; proxy_ssl_server_name on; sub_filter_once off; sub_filter "cloudreve.lee2333.com" $server_name; proxy_set_header Host "cloudreve.lee2333.com"; proxy_set_header Referer $http_referer; proxy_set_header X-Real-IP $remote_addr; proxy_set_header User-Agent $http_user_agent; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto https; proxy_set_header Accept-Encoding ""; proxy_set_header Accept-Language "zh-CN"; } location /4a872606-be19-path-replace { #分流路径 proxy_redirect off; proxy_pass http://127.0.0.1:47403; #Xray端口 proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } location /4a872606-be19-path-replace-xui { #xui路径 proxy_redirect off; proxy_pass http://127.0.0.1:65432; #xui监听端口 proxy_http_version 1.1; proxy_set_header Host $host; } } server { listen 80; location /.well-known/ { #root /var/www/html;#Ubuntu root /usr/share/nginx/html;#centos } location / { rewrite ^(.*)$ https://$host$1 permanent; } } }x-ui创建节点时选择监听127.0.0.1重新加载nginx nginx -s reload 更新证书acme.sh --issue -d xxx.xxx.com -k ec-256 --webroot /usr/share/nginx/html --force acme.sh --install-cert -d xxx.xxx.com --ecc --key-file /etc/x-ui/server.key --fullchain-file /etc/x-ui/server.crt --reloadcmd "nginx -s reload" #xxx.xxx.com替换为域名宝塔面板nginx设置方法1.新建域名站点，申请SSL证书2.启用WordPress伪静态3.配置nginx # 入站配置 location /07f7f { proxy_redirect off; proxy_pass http://127.0.0.1:12354; #Xray端口 proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } # x-ui面板 location ^~ /07f7f-xui { proxy_redirect off; proxy_pass http://127.0.0.1:65432/07f7f-xui; #xui监听端口 proxy_http_version 1.1; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; }4.修改x-ui面板监听地址为127.0.0.1（防止端口直接被访问）修改面板路径/07f7f-xui/5.重启面板生效

卸载宝塔面板后yum无法安装nginx 找到这个文件：/etc/yum.conf ，将 exclude 这一行注释掉就行了。[main] gpgcheck=1 installonly_limit=3 clean_requirements_on_remove=True best=True exclude=httpd nginx php mysql mairadb python-psutil python2-psutil