Files
StudyDiary/03-工作笔记/应用部署/云平台部署.md
T

696 lines
18 KiB
Markdown
Raw Normal View History

2026-07-23 20:36:13 +08:00
# 阿里云
### 服务器信息
位置:华东2(上海)
ID:i-uf6bwcl7qieqfl243zz1+iZuf6bwcl7qieqfl243zz1Z
操作系统:alilinux
IP:106.15.121.26
主私网IP:172.22.16.235
帐号密码 root/M@yi19b8
### frps
admin/admin8466 Token:admin8466
### Portainer
ptAdmin/J6ff19b8!@#ok
原来的帐号
81b7d939-portainer@clouddream.net
1_86x9yUD2T0fv3ow#P<cF5h(p*)r%{q
映射卷:
/clouddream/portainer/data:/data
portainer_data
### Harbor
Harbor重置密码:
admin
P@ssw0rd4Harbor->M@yi19b8
### nginx proxy manage
部署在ECS主机上,家里的服务器因为路由器在前端,部署NPM不能将端口和子域名进行映射
f7e760d6-nginx@clouddream.net
$2b$13$oguinCvNAy2y0KHOJNAgkeKEDbBx2.39vOuYetOgSs1IiLUMfEY8m
修改为:
$2b$13$C9mJYK7Gf7sVgCCYw84HhOvOIpnyhkdGqwIp0PPj/s9.q0bxkoMZe
changeme->M@yi19b8
### 端口设置
7001:adminer
5004:mysql
5002:portainer-ce
5003:nginx proxy manage
5001 Harbor
5005
### 1Panel
[http://106.15.121.26:34184/](http://106.15.121.26:34184/)
安全入口:
daf79ebf13
用户
0309e23ea3->pnAdmin
面版密码:
dedb742018->M@yi19b8
1pctl user-info
面板地址: http://$LOCAL_IP:34184/daf79ebf13
面板用户: pnAdmin
面板密码: ********
提示: 修改密码可执行命令: 1pctl update password
192.168.1.181:10086/entrance
pnAdmin/M@yi19b8
106.15.121.26:10000
pnAdmin/M@yi19b8
1Panel V1 Docker 脚本:
```
docker run -d \
--name 1panel \
--restart always \
--network host \
-v /var/run/docker.sock:/var/run/docker.sock \
-v /volume1/docker/1panel:/var/lib/docker/volumes \
-v /opt:/opt \
-v /root:/root \
-e TZ=Asia/Shanghai \
moelin/1panel:latest
```
默认:1panel/1panel_password->1panel/M@yi19b8->ptAdmin/M@yi19b8
本地端口:10086 外网映射:10000-10086
已更新1Panel V2.0.15,入口等信息照旧
## mihomo
9097+9090
## nezha
- dashboard
serverIP:8008
nzAdmin/M@yi19b8
nezha wiki:
https://nezha.wiki/guide/agent.html
https://github.com/nezhahq/agent/releases
Dashboard Url:
http://106.15.121.26:8008
管理帐号 nzAdmin/M@yi19b8
- agent安装
从dashboard后台点击对应的操作系统获取安装链接
Mac:
curl -L https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh -o agent.sh && chmod +x agent.sh && env NZ_SERVER=joyagain.me:8008 NZ_TLS=false NZ_CLIENT_SECRET=wf7tlLDIknuIpBhv7n4o6pP9b8eDHjeL ./agent.sh
LInux:
curl -L https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh -o agent.sh && chmod +x agent.sh && env NZ_SERVER=joyagain.me:8008 NZ_TLS=false NZ_CLIENT_SECRET=wf7tlLDIknuIpBhv7n4o6pP9b8eDHjeL ./agent.sh
Windows:
$env:NZ_SERVER="joyagain.me:8008";$env:NZ_TLS="false";$env:NZ_CLIENT_SECRET="wf7tlLDIknuIpBhv7n4o6pP9b8eDHjeL"; [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Ssl3 -bor [Net.SecurityProtocolType]::Tls -bor [Net.SecurityProtocolType]::Tls11 -bor [Net.SecurityProtocolType]::Tls12;set-ExecutionPolicy RemoteSigned;Invoke-WebRequest https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.ps1 -OutFile C:install.ps1;powershell.exe C:install.ps1
飞牛(Debian兼容)agent一键安装
curl -L https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh -o agent.sh && chmod +x agent.sh && env NZ_SERVER=joyagain.me:8008 NZ_TLS=false NZ_CLIENT_SECRET=wf7tlLDIknuIpBhv7n4o6pP9b8eDHjeL ./agent.sh
https://blog.ydhang.cn/archives/1710503011776
配置文件位置:/opt/nezha/config.yml
使用命令行调试
./nezha-agent -c /opt/nezha/config.yml
安装Macmini agent失败 原因:Macmini 版本太低 要求>12.0
dyld: Symbol not found: _SecTrustCopyCertificateChain
放弃!
黑群晖DSM920 安装成功!
https://nezha.wiki/guide/agent.html
> [!hint]
> uuidgen 产生UUID程序
## Pan-sou
106.X.X.X:3001
https://pan.joyagain.me
token:
ZxtLlA1oCkn0OUEYQqdtIvIMdvJ6wEStKmM6NHiOsxOPV7/soUDxTQ79BHA2Clua
https://github.com/fish2018/pansou
```
version: '3.8'
services:
pansou:
image: ghcr.io/fish2018/pansou-web:latest
container_name: pansou-app
ports:
- "8080:80"
- "4433:443"
environment:
# 基础配置
- DOMAIN=localhost
- PANSOU_PORT=8888
- PANSOU_HOST=127.0.0.1
# 代理配置(可选)
# - SOCKS5_PROXY=socks5://ip:20170
# - HTTP_PROXY=http://ip:20171
volumes:
# 数据持久化
- ./pansou-data:/app/data
- ./pansou-logs:/app/logs
restart: unless-stopped
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost/api/health"]
interval: 30s
timeout: 10s
retries: 3
start_period: 40s
volumes:
pansou-data:
driver: local
pansou-logs:
driver: local
```
```
version: '3.8'
services:
pansou:
image: ghcr.io/fish2018/pansou-web:latest
container_name: pansou-app
labels:
- "autoheal=true" # 标记允许 autoheal 自动重启
ports:
- "3001:80" # 只暴露 HTTP 端口,供 1Panel 反向代理使用
environment:
# 基础配置(后端监听地址,保持本地回环最安全)
- PANSOU_PORT=8888
- PANSOU_HOST=127.0.0.1
# 数据目录(统一挂载)
- CACHE_PATH=/app/data/cache
- LOG_PATH=/app/data/logs
# 插件列表(推荐全开,覆盖大部分来源)
- ENABLED_PLUGINS=labi,zhizhen,shandian,duoduo,muou,wanou,hunhepan,jikepan,panwiki,pansearch,panta,qupansou,hdr4k,pan666,susu,thepiratebay,xuexizhinan,panyq,ouge,huban,cyg,erxiao,miaoso,fox4k,pianku,clmao,wuji,cldi,xiaozhang,libvio,leijing,xb6v,xys,ddys,hdmoli,yuhuage,u3c3,javdb,clxiong,jutoushe,sdso,xiaoji,xdyh,haisou,bixin,djgou,nyaa,xinjuc,aikanzy,qupanshe,xdpan,discourse,yunsou,ahhhhfs,nsgame,gying
# TG 频道列表(默认推荐频道,覆盖热门分享源)
- CHANNELS=tgsearchers3,Aliyun_4K_Movies,bdbdndn11,yunpanx,bsbdbfjfjff,yp123pan,sbsbsnsqq,yunpanxunlei,tianyifc,BaiduCloudDisk,txtyzy,peccxinpd,gotopan,PanjClub,kkxlzy,baicaoZY,MCPH01,bdwpzhpd,ysxb48,jdjdn1111,yggpan,MCPH086,zaihuayun,Q66Share,ucwpzy,shareAliyun,alyp_1,dianyingshare,Quark_Movies,XiangxiuNBB,ydypzyfx,ucquark,xx123pan,yingshifenxiang123,zyfb123,tyypzhpd,tianyirigeng,cloudtianyi,hdhhd21,Lsp115,oneonefivewpfx,qixingzhenren,taoxgzy,Channel_Shares_115,tyysypzypd,vip115hot,wp123zy,yunpan139,yunpan189,yunpanuc,yydf_hzl,leoziyuan,pikpakpan,Q_dongman,yoyokuakeduanju,TG654TG,WFYSFX02,QukanMovie,yeqingjie_GJG666,movielover8888_film3,Baidu_netdisk,D_wusun,FLMdongtianfudi,KaiPanshare,QQZYDAPP,rjyxfx
# 健康检查(容器内部)
- HEALTH_CHECK_INTERVAL=30
- HEALTH_CHECK_TIMEOUT=10
- HEALTH_CHECK_RETRIES=3
# 认证(启用用户名密码登录)
- AUTH_ENABLED=true
- AUTH_USERS=admin:J6ff19b8 # 用户名:密码,可加多个用逗号分隔
- AUTH_TOKEN_EXPIRY=720 # Token 有效期 720 小时(30 天)
# JWT 密钥(强烈建议自定义,防止重启后 Token 失效)
- AUTH_JWT_SECRET=ZxtLlA1oCkn0OUEYQqdtIvIMdvJ6wEStKmM6NHiOsxOPV7/soUDxTQ79BHA2Clua
volumes:
- pansou-data:/app/data # 持久化缓存、日志等
restart: unless-stopped
healthcheck:
test: ["CMD", "/app/healthcheck.sh"]
interval: 30s
timeout: 10s
retries: 3
start_period: 40s
autoheal:
image: willfarrell/autoheal:latest
container_name: pansou-autoheal
restart: always
environment:
- AUTOHEAL_CONTAINER_LABEL=autoheal
- AUTOHEAL_INTERVAL=30
- AUTOHEAL_START_PERIOD=60
- AUTOHEAL_DEFAULT_STOP_TIMEOUT=10
volumes:
- /var/run/docker.sock:/var/run/docker.sock
volumes:
pansou-data:
driver: local
```
教程:
https://xinhaojin.github.io/2026/02/08/%E4%BD%BF%E7%94%A81Panel+DockerCompose%E4%B8%80%E9%94%AE%E9%83%A8%E7%BD%B2PanSou%E7%BD%91%E7%9B%98%E8%B5%84%E6%BA%90%E6%90%9C%E7%B4%A2%E5%BC%95%E6%93%8E/
## Fail2ban
配置文件:
/etc/fail2ban/jail.local
[[../../10-WebClipper/Linux系统Fail2ban安装配置测试与管理全流程-开发者社区-阿里云]]
源教程:
https://developer.aliyun.com/article/1650963
## mihomo
```
version: '3.8'
services:
mihomo:
container_name: mihomo-core
# image: metacubex/mihomo:latest # 也可使用 :Alpha 或指定版本如 :v1.19.x
# 国内加速源
image: docker.1ms.run/metacubex/mihomo:latest
restart: always
network_mode: host
pid: host
ipc: host
cap_add:
- ALL # 如果日志报权限不足,NET_ADMIN 试试改为 - ALL
security_opt:
- apparmor=unconfined # 群晖系统可能需要
volumes:
- ./data:/root/.config/mihomo # 映射配置目录
- /dev/net/tun:/dev/net/tun # TUN 模式必需
- /etc/localtime:/etc/localtime:ro # 同步主机时间
depends_on:
- metacubexd
metacubexd: # 官方控制面板 (XD)
container_name: mihomo-web
# image: ghcr.io/metacubex/metacubexd:latest
# 国内加速源
image: docker.1ms.run/metacubex/metacubexd:latest
restart: always
network_mode: bridge # 注意:此处不要使用 host模式
ports:
- "9097:80" # 可将 9091 改成你希望访问的端口
volumes:
- ./config:/config/caddy # 面板配置文件(可选)
- /etc/localtime:/etc/localtime:ro
```
2026.4.22重构
文件结构
```
/volume1/docker/mihomo
├── config/
├── data/
│ ├── config.yaml
│ ├── country.mmdb
│ ├── geoip.dat
│ └── geosite.dat
└── docker-compose.yml
```
报没有/dev/net/tun错误
```
mkdir -p /dev/net
mknod /dev/net/tun c 10 200
chmod 600 /dev/net/tun
cat /dev/net/tun
```
自动化脚本
```
# 创建一个启动脚本,例如 /etc/init.d/create_tun.sh:
#!/bin/bash
mkdir -p /dev/net
mknod /dev/net/tun c 10 200
chmod 600 /dev/net/tun
# 修改 crontab:
crontab -e
# 添加以下行以在重启时执行脚本:
@reboot /etc/init.d/create_tun.sh
```
内核支持2个订阅。
只能识别狗狗加速和IPLC少数节点!?
跟DSM8466和DSM9161一样,可能与linux版本有关
飞牛工作很好,能识别大多数节点。
![image.png](https://lsky.himan.cloud/i/2026/04/22/69e897ea1acde.png)
![](https://lsky.himan.cloud/i/2026/04/22/69e894c3797f1.png)
参考教程:
https://linux.do/t/topic/1327214
https://laosu.tech/2026/03/04/%E7%BE%A4%E6%99%96%E4%B8%8A%E7%94%A8Docker%E9%83%A8%E7%BD%B2Mihomo%E5%AE%9E%E5%BD%95/
https://www.onemuggle.com/archives/1406.html
https://wiki.metacubex.one/en/example/conf/#__tabbed_2_1
https://blog.canmoe.com/posts/mihomo-config-guide/
https://yizhimengxin.me/2022/10/27/%E6%89%93%E9%80%A0%E8%87%AA%E5%B7%B1%E7%9A%84Clash%E9%85%8D%E7%BD%AE%E5%B9%B6%E6%8F%90%E4%BE%9B%E8%AE%A2%E9%98%85/
wiki
https://wiki.metacubex.one/
验证外网联通:
curl -I https://www.google.com
测试出口IP
`ip.sb` 或 `ipleak.net`,显示的是纯净的住宅 IP,且 DNS 无泄露。
curl ifconfig.me
### 查看 GEO 相关日志
[](https://github.com/liuxiaomangAI/mihomo-nas-docker-gateway/blob/main/20260330%20%E9%A3%9E%E7%89%9BNAS%E9%83%A8%E7%BD%B2mihomo%E5%AE%9E%E7%8E%B0%E5%85%A8%E5%AE%B6%E6%97%A0%E6%84%9F%E7%BF%BB%E5%A2%99%204%E4%B8%AA%E6%96%87%E4%BB%B6%E8%87%AA%E5%8A%A8%E6%9B%B4%E6%96%B0%20%E6%9C%80%E7%BB%88%E7%89%88.md#4-%E6%9F%A5%E7%9C%8B-geo-%E7%9B%B8%E5%85%B3%E6%97%A5%E5%BF%97)
```shell
docker logs mihomo | grep GEO
```
## 检查ECS
端口
netstat -tuln
# 腾讯云
## 1. 150.158.120.215
位置:上海四区
购买时间:2025.11.27
配置:
IP:150.158.120.215
操作系统
Ubuntu 22.04.4 LTS (GNU/Linux 5.15.0-113-generic x86_64)
2核4G 系统盘70G6M带宽 600G/月流量
命名:TencentCloud2
认证:
1890731866
ubuntu/M@yi19b8
修改配置后允许root登录:
root/c9lhQxOg
2026-09-28 07:57:09 +08:00
域名:himan.vip+himan.top
2026-07-23 20:36:13 +08:00
认证:
18907318466
应用部署:
1Panel:
![](https://cdn.nlark.com/yuque/0/2025/svg/35770673/1764148240338-1191657f-b80f-4cad-86e6-f35da1993519.svg)**1Panel** **2.0.1-lts**面板首页地址
http://150.158.120.215:面板端口/tencentcloud
http://150.158.120.215:8090/tencentcloud
面板端口
默认为8090,您可以在登录面板后修改面板端口
sudo /opt/1panel/get-1panel-info.sh
tybuwzszva/Mayi19b8#
Tip: To change the password, you can execute the command: 1pctl update password
frps server:
admin/Mayi19b8
token:admin8466
ubuntu 防火墙:ufw
- mihomo
```
version: '3.8'
services:
mihomo:
container_name: mihomo-core
# image: metacubex/mihomo:latest # :Alpha :v1.19.x
#
image: docker.1ms.run/metacubex/mihomo:latest
restart: unless-stopped
network_mode: host
pid: host
ipc: host
cap_add:
- NET_ADMIN # NET_ADMIN - ALL
security_opt:
- apparmor=unconfined #
volumes:
- ./data:/root/.config/mihomo #
- /dev/net/tun:/dev/net/tun # TUN
- /etc/localtime:/etc/localtime:ro #
depends_on:
- metacubexd
metacubexd: # (XD)
container_name: mihomo-web
# image: ghcr.io/metacubex/metacubexd:latest
#
image: ghcr.1ms.run/metacubex/metacubexd:latest
restart: unless-stopped
network_mode: bridge # host
ports:
- "9097:80" # 9091
volumes:
- ./config:/config/caddy #
- /etc/localtime:/etc/localtime:ro
```
更换了新版本 config.yaml 单节点配置
## 2. 43.156.15.219
位置:新加坡 | 新加波3区
购买时间:2025.11.27
IP:43.156.15.219
配置:
- CPU - 2核 内存 - 4GB
- 系统盘 - SSD云硬盘 60GB管理快照
- 流量包 - 1536GB/月(峰值带宽 30Mbps)
- 开启IPV6
操作系统:OpenCloudOS 9
兼容centos8
认证:18907318466
root/K&eh12XC
命名:TencentCloud3
### 宝塔
入口:http://43.156.15.219:8888/tencentcloud 已修改为:8686 腾讯控制台 放行了8686
内网面板地址: http://10.3.0.13:8888/tencentcloud
username: 1193abc5
password: c9a1518937f3
SSH:输入bt可以进入命令行菜单!
![image.png](https://joyimg.cpolar.top/i/2025/12/11/693adb167a4ff.png)
输入:14
就可以看到上面<font color="#00b050">面板默认信息</font>。
选择安装:ngnix+openresty+docker
默认宝塔帐号:100????9284
用户:1193abc5
2026-08-24 09:42:59 +08:00
宝塔帐号:18907318466+13808468466
进入宝塔界面:
2026-07-23 20:36:13 +08:00
2026-08-24 09:42:59 +08:00
http://43.156.15.219:8686/
2026-07-23 20:36:13 +08:00
- 安装openlist
mkdir -p /etc/openlist
sudo chown -R 1001:1001 /etc/openlist
docker run -d --restart=unless-stopped -v /etc/openlist:/opt/openlist/data -p 5244:5244 -e UMASK=022 --name="openlist" openlistteam/openlist:latest
在腾讯控制台和宝塔防火墙中放行端口5244
设置要暴露5244端口
alAdmin/J6ff19b8#xjp
Token:
openlist-67decc8e-834b-4c7e-97e4-742d579d579407Kon2VtGynYzbKLN6aJBh8rzdP7CRNpKxmXBDw0hkdtTNR4KdibS8K3YwHzaeft
- 迅雷
ck0.C86kp2r80Pjz4t-aPTFnNtbP_J2TIzWxM6crEpmAZ1mVp-RSmAUDprMa2ITo6Xn9AnNHKZ7uZE1-mEZbB-Ksk9jDDS1ERc1l5FGNQZ7GpvZFRWUbeO54T7R1Yrs_5fdC70XTXhe_3iT_WFEx32gTcF-jw4WmnP3LVYt_e5hi8jxTHqEP-TNCMD75hqfLEy2J3nhiMBtPJR6m6mjoCxKr5A
- pikpak
os.UqiiS2ZqpWmOjqsPveDph011lEvFcNZwlnsAvPtEwa9RpwGTh1bUIrFw
## 3. 124.220.30.149
位置:上海四区
购买时间:2025.11.22
配置:
2核4G60G5M OpenCloudOS 8.8 兼容centos7
2核4G5M+himan.cloud =189元/年
操作系统:OpenCloudOS 8.8
兼容centos7
root/Mayi@19b8
公网IP:124.220.30.149
内网IP:10.0.0.6
命名:TencentCloud1
认证:
绑定微信Himango + cs_jeff@qq.com
电话:15308481117
已实名认证
域名:himan.cloud
访问API:帐号15308481117
SecretId:AKIDh8RvFOL6h6JI3av2ykJemhPvEMMp7E7p SecretKey:Yu30sY0HNIYeXHpDOL6g2XxCG8nNkxzs
AppID:1387650255
2026-08-24 09:42:59 +08:00
2026-07-23 20:36:13 +08:00
- 安装应用
frps server:
dashboard:7500 admin/Mayi19b8
token:admin8466
openresty:
部署了pdf.js
https://prev.himan.cloud
### 1Panel
```
外部地址: http://124.220.30.149:42243/a11cd484df
[1Panel 2025-12-12 20:29:17 install Log]: 内部地址: http://10.0.0.6:42243/a11cd484df
[1Panel 2025-12-12 20:29:17 install Log]: 面板用户: pnAdmin
[1Panel 2025-12-12 20:29:17 install Log]: 面板密码: 7e14eb8c73
[1Panel 2025-12-12 20:29:17 install Log]:
[1Panel 2025-12-12 20:29:17 install Log]: 官方网站: https://1panel.cn
[1Panel 2025-12-12 20:29:17 install Log]: 项目文档: https://1panel.cn/docs
[1Panel 2025-12-12 20:29:17 install Log]: 代码仓库: https://github.com/1Panel-dev/1Panel
[1Panel 2025-12-12 20:29:17 install Log]: 前往 1Panel 官方论坛获取帮助: https://bbs.fit2cloud.com/c/1p/7
[1Panel 2025-12-12 20:29:17 install Log]:
[1Panel 2025-12-12 20:29:17 install Log]: 如果您使用的是云服务器,请在安全组中打开端口 42243
```
firewalld 开启防火墙端口规则
开放80、443、7500、7000、42243
# 天翼云
位置:西南1
购买时间:2025.11.21
配置:
2核4G60G5M Debian 12.8
2核4G5M+himan.cloud =388.8元/年
操作系统:Debian 12.8
root/Mayi19b8@8466
公网IP:113.249.108.204
内网IP:10.0.0.3
### 1Panel
```
外部地址: http://113.249.108.204:20806/b3beba0ab7
内部地址: http://10.0.0.3:20806/b3beba0ab7
面板用户: pnAdmin
面板密码: eb3325af21
官方网站: https://1panel.cn
项目文档: https://1panel.cn/docs
代码仓库: https://github.com/1Panel-dev/1Panel
前往 1Panel 官方论坛获取帮助: https://bbs.fit2cloud.com/c/1p/7
如果您使用的是云服务器,请在安全组中打开端口 20806
```
## frps server:
admin/Mayi19b8
token:admin8466
# 联通云
位置:长沙1区
购置时间:2025.12.05
配置:2核8G50G10M
操作系统:centos 7.9
18907318466/joyago/J6ff19b8#/cs_jeff@qq.com
控制台: [https://console.cucloud.cn/iamLogin?id=741NWY22767785](https://console.cucloud.cn/iamLogin?id=741NWY22767785)
控制台登录账号:Hii1104/18907318466现在添加手机可以登录,支持异地登录,需要测试!
控制台登录密码: Hnuc@123 ->Hnuc@9161
VNC登陆密码: gx9m3hxv
云服务器root密码: Hnuc@1234z ->M@yi19b8
远程ssh端口: 22 公网ip: 116.162.100.119
### 1Panel
外部地址: [http://116.162.100.119:15816/db3ae4e0d2](http://116.162.100.119:15816/db3ae4e0d2)
内部地址: [http://192.168.0.184:15816/db3ae4e0d2](http://192.168.0.184:15816/db3ae4e0d2)
面板用户: 75bbbb926b
面板密码: a3056d8eab
### frp Server
admin/Mayi19b8
token:admin8466
端口:7500+7000
映射:
/opt/1panel/apps/frps/frps/data/frps.toml -> /etc/frp/frps.toml
firewalld:
```bash
firewall-cmd --zone=public --add-port=80/tcp --**permanent**
```
# 移动云
2025.11.25 注册
【移动云】(注册成功通知)尊敬的YDY_1380846_fe1308客户,您好!您于2025-11-25 21:42:06在移动云注册成功,可使用短信登录方式登录。您的用户名为YDY_1380846_fe1308。