王某某的笔记

npm install -g hexo-cli

hexo init blog

cd blog
npm install

#或者指定淘宝镜像
npm install --registry=https://registry.npmmirror.com

hexo new "我的第一篇文章"

hexo server

hexo generate

---
title: Hello World
date: 2013/7/13 20:46:25
---

"title": "Hello World",
"date": "2013/7/13 20:46:25"
;;;

categories:
  - Sports
  - Baseball
tags:
  - Injury
  - Fight
  - Shocking

categories:
  - [Java, Spring]

categories:
  - [Java, Spring, Spring MVC]

categories:
  - [Java, SpringBoot]

wget https://github.com/fatedier/frp/releases/download/v0.59.0/frp_0.59.0_linux_amd64.tar.gz

$ sudo vim /etc/systemd/system/frps.service

[Unit]
# 服务名称，可自定义
Description = frp server
After = network.target syslog.target
Wants = network.target

[Service]
Type = simple
# 启动frps的命令，需修改为您的frps的安装路径
ExecStart = /opt/frp/current/frps -c /opt/frp/current/frps.toml

[Install]
WantedBy = multi-user.target

# 启动frp
sudo systemctl start frps
# 停止frp
sudo systemctl stop frps
# 重启frp
sudo systemctl restart frps
# 查看frp状态
sudo systemctl status frps

sudo systemctl enable frps

vim /opt/frp/current/frps.toml 

bindPort = 6800

auth.token = "abc123"


######################
#日志配置
######################
log.to = "/opt/frp/logs/frps.log"
log.level = "info"
log.maxDays = 7
log.disablePrintColor = false


###############################
### 服务端 Dashboard
###############################
# 默认为 127.0.0.1，如果需要公网访问，需要修改为 0.0.0.0。
webServer.addr = "0.0.0.0"
webServer.port = 7500
# dashboard 用户名密码，可选，默认为空
webServer.user = "admin"
webServer.password = "admin"

192.168.1.8
6800
tcp+udp

frp主端口

192.168.1.8
16801
tcp+udp

frp 映射端口1

firewall-cmd --permanent --zone=public --add-port=6800/tcp

firewall-cmd --reload
firewall-cmd --zone=public --list-ports

firewall-cmd --permanent --zone=public --add-port=16801/tcp
firewall-cmd --reload
firewall-cmd --zone=public --list-ports

serverAddr = "[你的域名或公网ip]"
serverPort = 16800

auth.token = "abc123"


[[proxies]]
name = "test-tcp"
type = "tcp"
localIP = "127.0.0.1"
localPort = 80
remotePort = 16801

>frpc -c frpc.toml

yum install certbot

sudo certbot certonly --manual --preferred-challenges dns -d wangwen135.top -d '*.wangwen135.top'

nslookup -type=txt _acme-challenge.wangwen135.top

>nslookup -type=txt _acme-challenge.wangwen135.top
服务器:  dns4.xxx.cn
Address:  10.10.66.12

非权威应答:
_acme-challenge.wangwen135.top  text =

        "GBp_6iDCPE44wOkjTHwxUvlFzDNgwbZV0pRF5MDhpEw"
_acme-challenge.wangwen135.top  text =

        "aVWrn3qBdTBIz5GW6JRwF8C858gE5N3r_8MQljYjfhw"

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press Enter to Continue
Waiting for verification...
Resetting dropped connection: acme-v02.api.letsencrypt.org
Cleaning up challenges
Subscribe to the EFF mailing list (email: wangwen135@gmail.com).
Starting new HTTPS connection (1): supporters.eff.org

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/wangwen135.top/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/wangwen135.top/privkey.pem
   Your certificate will expire on 2024-08-13. To obtain a new or
   tweaked version of this certificate in the future, simply run
   certbot again. To non-interactively renew *all* of your
   certificates, run "certbot renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

server {
    listen 8443 ssl http2;
    server_name wangwen135.top home.wangwen135.top;

    ssl_certificate /etc/letsencrypt/live/wangwen135.top/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/wangwen135.top/privkey.pem;

    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout  10m;
    ssl_ciphers HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers on;
	...
	...

wget https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-amd64.tgz
tar xzvf aliyun-cli-linux-latest-amd64.tgz
sudo cp aliyun /usr/local/bin
rm aliyun

AccessKey ID:  
LTAI5txxxxxxxxxxx

AccessKey Secret:  
A0ooBtxxxxxxxxxxxxxxxxxxxxxxxx

[root@centos7-85 ~]# aliyun configure
Configuring profile 'default' in 'AK' authenticate mode...
Access Key Id [*********************kvh]: 
Access Key Secret [***************************zVy]: 
Default Region Id []: cn-hangzhou
Default Output Format [json]: json (Only support json)
Default Language [zh|en] zh: 
Saving profile[default] ...Done.

Configure Done!!!
..............888888888888888888888 ........=8888888888888888888D=..............
...........88888888888888888888888 ..........D8888888888888888888888I...........
.........,8888888888888ZI: ...........................=Z88D8888888888D..........
.........+88888888 ..........................................88888888D..........
.........+88888888 .......Welcome to use Alibaba Cloud.......O8888888D..........
.........+88888888 ............. ************* ..............O8888888D..........
.........+88888888 .... Command Line Interface(Reloaded) ....O8888888D..........
.........+88888888...........................................88888888D..........
..........D888888888888DO+. ..........................?ND888888888888D..........
...........O8888888888888888888888...........D8888888888888888888888=...........
............ .:D8888888888888888888.........78888888888888888888O ..............

git clone git@github.com:justjavac/certbot-dns-aliyun.git
cd certbot-dns-aliyun/
sudo cp alidns.sh /usr/local/bin
sudo chmod +x /usr/local/bin/alidns.sh
sudo ln -s /usr/local/bin/alidns.sh /usr/local/bin/alidns

certbot certonly -d wangwen135.top -d *.wangwen135.top --manual --preferred-challenges dns --manual-auth-hook "alidns" --manual-cleanup-hook "alidns clean" --dry-run

certbot certonly -d wangwen135.top -d *.wangwen135.top --manual --preferred-challenges dns --manual-auth-hook "alidns" --manual-cleanup-hook "alidns clean" 

certbot renew --manual --preferred-challenges dns --manual-auth-hook "alidns" --manual-cleanup-hook "alidns clean" --dry-run

sudo crontab -e

1 1 */1 * * certbot renew --manual --preferred-challenges dns --manual-auth-hook "alidns" --manual-cleanup-hook "alidns clean" --deploy-hook "nginx -s reload" >> /var/log/letsencrypt/c
rontab/certbot_renew.log 2>&1

mkdir -p /var/log/letsencrypt/crontab/

cat /var/log/cron

tail -33f /var/log/letsencrypt/crontab/certbot_renew.log 

*     *      *        *       *       certbot renew....

server {
    listen 8443 ssl;
    server_name download.yousite.com;
    
    access_log /var/log/nginx/downloads_access.log;
    
    # 证书
    ssl_certificate /etc/letsencrypt/live/yousite.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/yousit.com/privkey.pem;
    
    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout 10m;
    ssl_ciphers HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers on;

    # 根目录设置为 /www/mnt/downloads
    root /www/mnt/downloads;

    # 启用目录列表
    location / {
        autoindex on; # 启用目录列表
        autoindex_exact_size off; # 以更人性化的格式显示文件大小
        autoindex_localtime on; # 以服务器本地时间显示文件时间
        charset utf-8; # 设置字符集为 UTF-8
        try_files $uri $uri/ =404; # 确保请求的文件或目录存在，否则返回 404

        #阻止其他网站直接链接你的文件
        valid_referers none blocked yousite.com *.yousite.com;
        if ($invalid_referer) {
                return 403;
        }
    }

    # 禁止访问上级目录，防止目录遍历攻击
    location ~ /\.\./ {
        deny all;
    }

}

server {
    listen 8443 ssl;
    server_name download.yousite.com;

    access_log /var/log/nginx/downloads_access.log;

    # 证书
    ssl_certificate /etc/letsencrypt/live/yousite.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/yousite.com/privkey.pem;

    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout 10m;
    ssl_ciphers HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers on;

    # 根目录设置为 /www/mnt/downloads
    root /www/mnt/downloads;

    # 启用目录列表
    location / {
        autoindex on; # 启用目录列表
        autoindex_exact_size off; # 以更人性化的格式显示文件大小
        autoindex_localtime on; # 以服务器本地时间显示文件时间
        charset utf-8; # 设置字符集为 UTF-8
        try_files $uri $uri/ =404; # 确保请求的文件或目录存在，否则返回 404

        #内容替换
        sub_filter '</head>' '<link rel="stylesheet" href="/css/download.css"></head>';
        sub_filter '<title>Index of' '<title>目录';
        sub_filter '<h1>Index of' '<h1>目录';
        sub_filter '</body>' '<p>王某某的公开下载服务</p></body>';
        sub_filter '<hr>' '';
        sub_filter_once off;

        #阻止其他网站直接链接你的文件
        valid_referers none blocked yousite.com *.yousite.com;
        if ($invalid_referer) {
                return 403;
        }
    }

    # 禁止访问上级目录，防止目录遍历攻击
    location ~ /\.\./ {
        deny all;
    }

    #配置自定义的CSS
    location /css/download.css {
        alias /www/mnt/service/download/download.css;
    }

    #favicon.ico
    location /favicon.ico {
        alias /www/mnt/service/download/favicon.ico;
    }

}

body {
    margin: 0;
    box-sizing: border-box;
    width: 100%;
    height: 100%;
    display: flex;
    flex-direction: column;
    align-items: center;
}

body pre {
    font-family: Microsoft YaHei;
    font-size: 1rem;
    width: 960px;
    text-align: right;
    padding-right: 20px;
    margin-top: 0px;
}

a {
    text-decoration: none;
    border: 1px solid #ccc;
    border-radius: 5px;
    padding: 5px 10px;

    display: flex;
    position: relative;
    top: 26px;
    left: 10px;
}

a:hover {
    border-color: #000;
}

body p {
    margin-top: auto;
    margin-bottom: 10px;
}

/* 针对移动设备的 */
@media (max-width: 980px) {
    body pre {
        font-size: 1.4rem;
    }

    a {
        top: 35px;
    }
}

LS_COLORS="$LS_COLORS:ow=0;34:" # 将ow=0;34:添加到LS_COLORS
export LS_COLORS

source ~/.bashrc
# 或者
source ~/.zshrc

00000000 : FF FF FF FF FF FF 6C BC 4A B3 F4 BC 6C BC 4A B3 
00000010 : F4 BC 6C BC 4A B3 F4 BC 6C BC 4A B3 F4 BC 6C BC 
00000020 : 4A B3 F4 BC 6C BC 4A B3 F4 BC 6C BC 4A B3 F4 BC 
00000030 : 6C BC 4A B3 F4 BC 6C BC 4A B3 F4 BC 6C BC 4A B3 
00000040 : F4 BC 6C BC 4A B3 F4 BC 6C BC 4A B3 F4 BC 6C BC 
00000050 : 4A B3 F4 BC 6C BC 4A B3 F4 BC 6C BC 4A B3 F4 BC 
00000060 : 6C BC 4A B3 F4 BC 

123.0.99.18（本机）  
地理地址: 中国 XXX XXX XXX  
运营商: 中国电信

arp -s ip地址 ma地址

$ vi /etc/rc.local 

# 增加arp映射
arp -s 192.168.31.111 XX:XX:XX:XX:XX:XX

vi /etc/ethers

192.168.31.aa XX:XX:XX:XX:XX:XX
192.168.31.aa XX:XX:XX:XX:XX:XX

vi /etc/rc.local 

arp -f

[root@wol ~]# yum -y install net-tools
# ether-wake [MAC address of the computer you'd like to turn on]
[root@wol ~]# ether-wake 00:22:68:5E:34:06   # send magick packets

ether-wake -i eth0 11:22:33:44:55

# java -jar wol4j-1.0.0.jar 22-00-DD-11-44-7A 192.168.1.255

http {
    # 定义限制规则，rate 表示每秒允许的请求数
    limit_req_zone $binary_remote_addr zone=one:10m rate=10r/m;

    server {
        listen 80;
        server_name example.com;

        location / {
            # 应用限制
            limit_req zone=one burst=5 nodelay;

            # 其他配置...
            proxy_pass http://backend;
        }
    }
}

# 对所有请求设置访问限制
location / {
    limit_req zone=one burst=5 nodelay;
}

503 Service Temporarily Unavailable

>git pull
ssh: connect to host github.com port 22: Connection timed out
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

>ssh -T -p 443 git@ssh.github.com
The authenticity of host '[ssh.github.com]:443 ([20.205.243.160]:443)' can't be established.
ED25519 key fingerprint is SHA256:+DiY3wvvV6TuJJhbpZisF/zLDA0zPMSvHdkr4UvCOqU.
This key is not known by any other names
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '[ssh.github.com]:443' (ED25519) to the list of known hosts.
Hi wangwen135! You've successfully authenticated, but GitHub does not provide shell access.

$ vim ~/.ssh/config

# Add section below to it
Host github.com
  Hostname ssh.github.com
  Port 443

$ ssh -T git@github.com
Hi xxxxx! You've successfully authenticated, but GitHub does not
provide shell access.

#!/bin/bash

# 配置源目录和备份目录
source_dir="/etc/nginx/conf.d"
backup_dir="/www/mnt/backup/nginx"

# 创建备份目录（如果不存在）
mkdir -p "$backup_dir"

# 获取当前日期（格式：YYYY-MM-DD）
current_date=$(date +%Y-%m-%d)

# 压缩配置文件到临时tar包
tar_filename="/tmp/nginx_config_backup_$current_date.tar.gz"
tar -czf "$tar_filename" -C "$source_dir" .

# 检查上一个备份是否存在且与当前备份不同
last_backup=$(ls -t "$backup_dir" | head -1)
if [ -n "$last_backup" ]; then
    # 解压上一个备份和当前备份
    mkdir -p /tmp/last_backup /tmp/current_backup
    tar -xzf "$backup_dir/$last_backup" -C /tmp/last_backup
    tar -xzf "$tar_filename" -C /tmp/current_backup

    # 使用diff命令比较两个目录中的文件差异
    diff_output=$(diff -r /tmp/last_backup /tmp/current_backup)

    # 清理临时目录
    rm -r /tmp/last_backup /tmp/current_backup

    if [ -z "$diff_output" ]; then
        # 上一个备份与当前备份相同，抛弃当前备份
        echo "No changes in Nginx configuration. Discarding backup."
        rm "$tar_filename"
        exit 0
    fi
fi

# 移动当前备份到备份目录
mv "$tar_filename" "$backup_dir"

# 删除多余的备份（保留最多10个备份）
backup_count=$(ls -1 "$backup_dir" | wc -l)
if [ "$backup_count" -gt 10 ]; then
    oldest_backup=$(ls -t "$backup_dir" | tail -1)
    rm "$backup_dir/$oldest_backup"
fi

echo "Nginx configuration backup completed."

crontab -e

5     3       *       *       *       /opt/shell/nginx/nginx_config_backup.sh