Files
StudyDiary/03-工作笔记/应用部署/云平台部署.md
T
2026-07-23 20:36:13 +08:00

18 KiB
Raw Blame History

阿里云

服务器信息

位置:华东2(上海) IDi-uf6bwcl7qieqfl243zz1+iZuf6bwcl7qieqfl243zz1Z 操作系统:alilinux IP106.15.121.26 主私网IP172.22.16.235 帐号密码 root/M@yi19b8

frps

admin/admin8466 Token:admin8466

Portainer

ptAdmin/J6ff19b8!@#ok

原来的帐号

81b7d939-portainer@clouddream.net

1_86x9yUD2T0fv3ow#P<cF5h(p*)r%{q

映射卷:

/clouddream/portainer/data:/data

portainer_data

Harbor

Harbor重置密码:

admin

P@ssw0rd4Harbor->M@yi19b8

nginx proxy manage

部署在ECS主机上,家里的服务器因为路由器在前端,部署NPM不能将端口和子域名进行映射

f7e760d6-nginx@clouddream.net

$2b$13$oguinCvNAy2y0KHOJNAgkeKEDbBx2.39vOuYetOgSs1IiLUMfEY8m

修改为:

$2b$13$C9mJYK7Gf7sVgCCYw84HhOvOIpnyhkdGqwIp0PPj/s9.q0bxkoMZe

changeme->M@yi19b8

端口设置

7001:adminer

5004:mysql

5002:portainer-ce

5003:nginx proxy manage

5001 Harbor

5005

1Panel

http://106.15.121.26:34184/

安全入口:

daf79ebf13

用户

0309e23ea3->pnAdmin

面版密码:

dedb742018->M@yi19b8

1pctl user-info

面板地址: http://$LOCAL_IP:34184/daf79ebf13

面板用户: pnAdmin

面板密码: ********

提示: 修改密码可执行命令: 1pctl update password

192.168.1.181:10086/entrance

pnAdmin/M@yi19b8

106.15.121.26:10000

pnAdmin/M@yi19b8

1Panel V1 Docker 脚本:

docker run -d \

--name 1panel \

--restart always \

--network host \

-v /var/run/docker.sock:/var/run/docker.sock \

-v /volume1/docker/1panel:/var/lib/docker/volumes \

-v /opt:/opt \

-v /root:/root \

-e TZ=Asia/Shanghai \

moelin/1panel:latest

默认:1panel/1panel_password->1panel/M@yi19b8->ptAdmin/M@yi19b8

本地端口:10086 外网映射:10000-10086

已更新1Panel V2.0.15,入口等信息照旧

mihomo

9097+9090

nezha

  • dashboard

serverIP:8008 nzAdmin/M@yi19b8 nezha wiki: https://nezha.wiki/guide/agent.html https://github.com/nezhahq/agent/releases Dashboard Url:

http://106.15.121.26:8008 管理帐号 nzAdmin/M@yi19b8

LInux curl -L https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh -o agent.sh && chmod +x agent.sh && env NZ_SERVER=joyagain.me:8008 NZ_TLS=false NZ_CLIENT_SECRET=wf7tlLDIknuIpBhv7n4o6pP9b8eDHjeL ./agent.sh

Windows $env:NZ_SERVER="joyagain.me:8008";$env:NZ_TLS="false";$env:NZ_CLIENT_SECRET="wf7tlLDIknuIpBhv7n4o6pP9b8eDHjeL"; [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Ssl3 -bor [Net.SecurityProtocolType]::Tls -bor [Net.SecurityProtocolType]::Tls11 -bor [Net.SecurityProtocolType]::Tls12;set-ExecutionPolicy RemoteSigned;Invoke-WebRequest https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.ps1 -OutFile C:install.ps1;powershell.exe C:install.ps1

飞牛(Debian兼容)agent一键安装 curl -L https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh -o agent.sh && chmod +x agent.sh && env NZ_SERVER=joyagain.me:8008 NZ_TLS=false NZ_CLIENT_SECRET=wf7tlLDIknuIpBhv7n4o6pP9b8eDHjeL ./agent.sh https://blog.ydhang.cn/archives/1710503011776

配置文件位置:/opt/nezha/config.yml 使用命令行调试 ./nezha-agent -c /opt/nezha/config.yml

安装Macmini agent失败 原因:Macmini 版本太低 要求>12.0 dyld: Symbol not found: _SecTrustCopyCertificateChain 放弃!

黑群晖DSM920 安装成功! https://nezha.wiki/guide/agent.html

[!hint] uuidgen 产生UUID程序

Pan-sou

106.X.X.X:3001 https://pan.joyagain.me token: ZxtLlA1oCkn0OUEYQqdtIvIMdvJ6wEStKmM6NHiOsxOPV7/soUDxTQ79BHA2Clua

https://github.com/fish2018/pansou

version: '3.8'

services:
  pansou:
    image: ghcr.io/fish2018/pansou-web:latest
    container_name: pansou-app
    ports:
      - "8080:80"
      - "4433:443"
    environment:
      # 基础配置
      - DOMAIN=localhost
      - PANSOU_PORT=8888
      - PANSOU_HOST=127.0.0.1
      # 代理配置(可选)
      # - SOCKS5_PROXY=socks5://ip:20170
      # - HTTP_PROXY=http://ip:20171
    volumes:
      # 数据持久化
      - ./pansou-data:/app/data
      - ./pansou-logs:/app/logs
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost/api/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

volumes:
  pansou-data:
    driver: local
  pansou-logs:
    driver: local
version: '3.8'
services:
  pansou:
    image: ghcr.io/fish2018/pansou-web:latest
    container_name: pansou-app
    labels:
      - "autoheal=true"  # 标记允许 autoheal 自动重启
    ports:
      - "3001:80"        # 只暴露 HTTP 端口,供 1Panel 反向代理使用
    environment:
      # 基础配置(后端监听地址,保持本地回环最安全)
      - PANSOU_PORT=8888
      - PANSOU_HOST=127.0.0.1

      # 数据目录(统一挂载)
      - CACHE_PATH=/app/data/cache
      - LOG_PATH=/app/data/logs

      # 插件列表(推荐全开,覆盖大部分来源)
      - ENABLED_PLUGINS=labi,zhizhen,shandian,duoduo,muou,wanou,hunhepan,jikepan,panwiki,pansearch,panta,qupansou,hdr4k,pan666,susu,thepiratebay,xuexizhinan,panyq,ouge,huban,cyg,erxiao,miaoso,fox4k,pianku,clmao,wuji,cldi,xiaozhang,libvio,leijing,xb6v,xys,ddys,hdmoli,yuhuage,u3c3,javdb,clxiong,jutoushe,sdso,xiaoji,xdyh,haisou,bixin,djgou,nyaa,xinjuc,aikanzy,qupanshe,xdpan,discourse,yunsou,ahhhhfs,nsgame,gying

      # TG 频道列表(默认推荐频道,覆盖热门分享源)
      - CHANNELS=tgsearchers3,Aliyun_4K_Movies,bdbdndn11,yunpanx,bsbdbfjfjff,yp123pan,sbsbsnsqq,yunpanxunlei,tianyifc,BaiduCloudDisk,txtyzy,peccxinpd,gotopan,PanjClub,kkxlzy,baicaoZY,MCPH01,bdwpzhpd,ysxb48,jdjdn1111,yggpan,MCPH086,zaihuayun,Q66Share,ucwpzy,shareAliyun,alyp_1,dianyingshare,Quark_Movies,XiangxiuNBB,ydypzyfx,ucquark,xx123pan,yingshifenxiang123,zyfb123,tyypzhpd,tianyirigeng,cloudtianyi,hdhhd21,Lsp115,oneonefivewpfx,qixingzhenren,taoxgzy,Channel_Shares_115,tyysypzypd,vip115hot,wp123zy,yunpan139,yunpan189,yunpanuc,yydf_hzl,leoziyuan,pikpakpan,Q_dongman,yoyokuakeduanju,TG654TG,WFYSFX02,QukanMovie,yeqingjie_GJG666,movielover8888_film3,Baidu_netdisk,D_wusun,FLMdongtianfudi,KaiPanshare,QQZYDAPP,rjyxfx

      # 健康检查(容器内部)
      - HEALTH_CHECK_INTERVAL=30
      - HEALTH_CHECK_TIMEOUT=10
      - HEALTH_CHECK_RETRIES=3

      # 认证(启用用户名密码登录)
      - AUTH_ENABLED=true
      - AUTH_USERS=admin:J6ff19b8          # 用户名:密码,可加多个用逗号分隔
      - AUTH_TOKEN_EXPIRY=720               # Token 有效期 720 小时(30 天)

      # JWT 密钥(强烈建议自定义,防止重启后 Token 失效)
      - AUTH_JWT_SECRET=ZxtLlA1oCkn0OUEYQqdtIvIMdvJ6wEStKmM6NHiOsxOPV7/soUDxTQ79BHA2Clua

    volumes:
      - pansou-data:/app/data               # 持久化缓存、日志等

    restart: unless-stopped
    healthcheck:
      test: ["CMD", "/app/healthcheck.sh"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  autoheal:
    image: willfarrell/autoheal:latest
    container_name: pansou-autoheal
    restart: always
    environment:
      - AUTOHEAL_CONTAINER_LABEL=autoheal
      - AUTOHEAL_INTERVAL=30
      - AUTOHEAL_START_PERIOD=60
      - AUTOHEAL_DEFAULT_STOP_TIMEOUT=10
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

volumes:
  pansou-data:
    driver: local

教程: https://xinhaojin.github.io/2026/02/08/%E4%BD%BF%E7%94%A81Panel+DockerCompose%E4%B8%80%E9%94%AE%E9%83%A8%E7%BD%B2PanSou%E7%BD%91%E7%9B%98%E8%B5%84%E6%BA%90%E6%90%9C%E7%B4%A2%E5%BC%95%E6%93%8E/

Fail2ban

配置文件: /etc/fail2ban/jail.local

../../10-WebClipper/Linux系统Fail2ban安装配置测试与管理全流程-开发者社区-阿里云 源教程: https://developer.aliyun.com/article/1650963

mihomo

version: '3.8'

services:
  mihomo:
    container_name: mihomo-core
    # image: metacubex/mihomo:latest        # 也可使用 :Alpha 或指定版本如 :v1.19.x
    # 国内加速源 
    image: docker.1ms.run/metacubex/mihomo:latest
    restart: always
    network_mode: host
    pid: host
    ipc: host
    cap_add:
      - ALL                         # 如果日志报权限不足,NET_ADMIN 试试改为 - ALL
    security_opt:
      - apparmor=unconfined               # 群晖系统可能需要
    volumes:
      - ./data:/root/.config/mihomo       # 映射配置目录
      - /dev/net/tun:/dev/net/tun         # TUN 模式必需
      - /etc/localtime:/etc/localtime:ro  # 同步主机时间
    depends_on:
      - metacubexd

  metacubexd:                         # 官方控制面板 (XD)
    container_name: mihomo-web
    # image: ghcr.io/metacubex/metacubexd:latest
    # 国内加速源 
    image: docker.1ms.run/metacubex/metacubexd:latest
    restart: always
    network_mode: bridge              # 注意:此处不要使用 host模式
    ports:
      - "9097:80"                     # 可将 9091 改成你希望访问的端口
    volumes:
      - ./config:/config/caddy        # 面板配置文件(可选)
      - /etc/localtime:/etc/localtime:ro

2026.4.22重构

文件结构

/volume1/docker/mihomo
├── config/
├── data/
│   ├── config.yaml
│   ├── country.mmdb
│   ├── geoip.dat
│   └── geosite.dat
└── docker-compose.yml

报没有/dev/net/tun错误

mkdir -p /dev/net 
mknod /dev/net/tun c 10 200 
chmod 600 /dev/net/tun 
cat /dev/net/tun

自动化脚本

# 创建一个启动脚本,例如 /etc/init.d/create_tun.sh
#!/bin/bash
mkdir -p /dev/net
mknod /dev/net/tun c 10 200
chmod 600 /dev/net/tun
# 修改 crontab
crontab -e
# 添加以下行以在重启时执行脚本:
@reboot /etc/init.d/create_tun.sh

内核支持2个订阅。 只能识别狗狗加速和IPLC少数节点!? 跟DSM8466和DSM9161一样,可能与linux版本有关 飞牛工作很好,能识别大多数节点。 image.png

参考教程: https://linux.do/t/topic/1327214 https://laosu.tech/2026/03/04/%E7%BE%A4%E6%99%96%E4%B8%8A%E7%94%A8Docker%E9%83%A8%E7%BD%B2Mihomo%E5%AE%9E%E5%BD%95/ https://www.onemuggle.com/archives/1406.html https://wiki.metacubex.one/en/example/conf/#__tabbed_2_1

https://blog.canmoe.com/posts/mihomo-config-guide/ https://yizhimengxin.me/2022/10/27/%E6%89%93%E9%80%A0%E8%87%AA%E5%B7%B1%E7%9A%84Clash%E9%85%8D%E7%BD%AE%E5%B9%B6%E6%8F%90%E4%BE%9B%E8%AE%A2%E9%98%85/

wiki https://wiki.metacubex.one/

验证外网联通: curl -I https://www.google.com

测试出口IP ip.sb 或 ipleak.net,显示的是纯净的住宅 IP,且 DNS 无泄露。 curl ifconfig.me

查看 GEO 相关日志

docker logs mihomo | grep GEO

检查ECS

端口

netstat -tuln

腾讯云

1. 150.158.120.215

位置:上海四区 购买时间:2025.11.27 配置: IP150.158.120.215 操作系统 Ubuntu 22.04.4 LTS (GNU/Linux 5.15.0-113-generic x86_64) 2核4G 系统盘70G6M带宽 600G/月流量 命名:TencentCloud2 认证: 1890731866 ubuntu/M@yi19b8 修改配置后允许root登录: root/c9lhQxOg 域名:himan.vip 认证: 18907318466

应用部署: 1Panel: 1Panel 2.0.1-lts面板首页地址 http://150.158.120.215:面板端口/tencentcloud http://150.158.120.215:8090/tencentcloud

面板端口

默认为8090,您可以在登录面板后修改面板端口

sudo /opt/1panel/get-1panel-info.sh

tybuwzszva/Mayi19b8#

Tip: To change the password, you can execute the command: 1pctl update password

frps server: admin/Mayi19b8 token:admin8466 ubuntu 防火墙:ufw

  • mihomo
version: '3.8'

services:
  mihomo:
    container_name: mihomo-core
    # image: metacubex/mihomo:latest        #  :Alpha  :v1.19.x
    #  
    image: docker.1ms.run/metacubex/mihomo:latest
    restart: unless-stopped
    network_mode: host
    pid: host
    ipc: host
    cap_add:
      - NET_ADMIN                        # NET_ADMIN  - ALL
    security_opt:
      - apparmor=unconfined               # 
    volumes:
      - ./data:/root/.config/mihomo       # 
      - /dev/net/tun:/dev/net/tun         # TUN 
      - /etc/localtime:/etc/localtime:ro  # 
    depends_on:
      - metacubexd

  metacubexd:                         #  (XD)
    container_name: mihomo-web
    # image: ghcr.io/metacubex/metacubexd:latest
    #  
    image: ghcr.1ms.run/metacubex/metacubexd:latest
    restart: unless-stopped
    network_mode: bridge              #  host
    ports:
      - "9097:80"                     #  9091 
    volumes:
      - ./config:/config/caddy        # 
      - /etc/localtime:/etc/localtime:ro

更换了新版本 config.yaml 单节点配置

2. 43.156.15.219

位置:新加坡 | 新加波3区 购买时间:2025.11.27 IP43.156.15.219 配置:

  • CPU - 2核 内存 - 4GB
  • 系统盘 - SSD云硬盘 60GB管理快照
  • 流量包 - 1536GB/月(峰值带宽 30Mbps
  • 开启IPV6 操作系统:OpenCloudOS 9 兼容centos8 认证:18907318466

root/K&eh12XC 命名:TencentCloud3

宝塔

入口:http://43.156.15.219:8888/tencentcloud 已修改为:8686 腾讯控制台 放行了8686

内网面板地址: http://10.3.0.13:8888/tencentcloud username: 1193abc5 password: c9a1518937f3 SSH:输入bt可以进入命令行菜单! image.png

输入:14 就可以看到上面面板默认信息。

选择安装:ngnix+openresty+docker

默认宝塔帐号:100????9284 用户:1193abc5

  • 安装openlist

mkdir -p /etc/openlist sudo chown -R 1001:1001 /etc/openlist docker run -d --restart=unless-stopped -v /etc/openlist:/opt/openlist/data -p 5244:5244 -e UMASK=022 --name="openlist" openlistteam/openlist:latest

在腾讯控制台和宝塔防火墙中放行端口5244 设置要暴露5244端口 alAdmin/J6ff19b8#xjp

Token openlist-67decc8e-834b-4c7e-97e4-742d579d579407Kon2VtGynYzbKLN6aJBh8rzdP7CRNpKxmXBDw0hkdtTNR4KdibS8K3YwHzaeft

  • 迅雷 ck0.C86kp2r80Pjz4t-aPTFnNtbP_J2TIzWxM6crEpmAZ1mVp-RSmAUDprMa2ITo6Xn9AnNHKZ7uZE1-mEZbB-Ksk9jDDS1ERc1l5FGNQZ7GpvZFRWUbeO54T7R1Yrs_5fdC70XTXhe_3iT_WFEx32gTcF-jw4WmnP3LVYt_e5hi8jxTHqEP-TNCMD75hqfLEy2J3nhiMBtPJR6m6mjoCxKr5A
  • pikpak os.UqiiS2ZqpWmOjqsPveDph011lEvFcNZwlnsAvPtEwa9RpwGTh1bUIrFw

3. 124.220.30.149

位置:上海四区 购买时间:2025.11.22 配置: 2核4G60G5M OpenCloudOS 8.8 兼容centos7 2核4G5M+himan.cloud =189元/年 操作系统:OpenCloudOS 8.8 兼容centos7 root/Mayi@19b8 公网IP124.220.30.149 内网IP10.0.0.6 命名:TencentCloud1 认证: 绑定微信Himango + cs_jeff@qq.com 电话:15308481117 已实名认证

域名:himan.cloud

访问API:帐号15308481117 SecretId:AKIDh8RvFOL6h6JI3av2ykJemhPvEMMp7E7p SecretKey:Yu30sY0HNIYeXHpDOL6g2XxCG8nNkxzs AppID:1387650255

  • 安装应用 frps server: dashboard:7500 admin/Mayi19b8 token:admin8466

openresty: 部署了pdf.js https://prev.himan.cloud

1Panel

外部地址:  http://124.220.30.149:42243/a11cd484df 
[1Panel 2025-12-12 20:29:17 install Log]: 内部地址:  http://10.0.0.6:42243/a11cd484df 
[1Panel 2025-12-12 20:29:17 install Log]: 面板用户:  pnAdmin 
[1Panel 2025-12-12 20:29:17 install Log]: 面板密码:  7e14eb8c73 
[1Panel 2025-12-12 20:29:17 install Log]:  
[1Panel 2025-12-12 20:29:17 install Log]: 官方网站: https://1panel.cn 
[1Panel 2025-12-12 20:29:17 install Log]: 项目文档: https://1panel.cn/docs 
[1Panel 2025-12-12 20:29:17 install Log]: 代码仓库: https://github.com/1Panel-dev/1Panel 
[1Panel 2025-12-12 20:29:17 install Log]: 前往 1Panel 官方论坛获取帮助: https://bbs.fit2cloud.com/c/1p/7 
[1Panel 2025-12-12 20:29:17 install Log]:  
[1Panel 2025-12-12 20:29:17 install Log]: 如果您使用的是云服务器,请在安全组中打开端口 42243 

firewalld 开启防火墙端口规则 开放80、443、7500、7000、42243

天翼云

位置:西南1 购买时间:2025.11.21 配置: 2核4G60G5M Debian 12.8 2核4G5M+himan.cloud =388.8元/年 操作系统:Debian 12.8 root/Mayi19b8@8466 公网IP113.249.108.204 内网IP10.0.0.3

1Panel

外部地址:  http://113.249.108.204:20806/b3beba0ab7 
内部地址:  http://10.0.0.3:20806/b3beba0ab7 
面板用户:  pnAdmin 
面板密码:  eb3325af21 
官方网站: https://1panel.cn 
项目文档: https://1panel.cn/docs 
代码仓库: https://github.com/1Panel-dev/1Panel 
前往 1Panel 官方论坛获取帮助: https://bbs.fit2cloud.com/c/1p/7 
如果您使用的是云服务器,请在安全组中打开端口 20806 

frps server:

admin/Mayi19b8 token:admin8466

联通云

位置:长沙1区 购置时间:2025.12.05 配置:2核8G50G10M 操作系统:centos 7.9 18907318466/joyago/J6ff19b8#/cs_jeff@qq.com 控制台: https://console.cucloud.cn/iamLogin?id=741NWY22767785 控制台登录账号:Hii1104/18907318466现在添加手机可以登录,支持异地登录,需要测试! 控制台登录密码: Hnuc@123 ->Hnuc@9161 VNC登陆密码: gx9m3hxv 云服务器root密码: Hnuc@1234z ->M@yi19b8 远程ssh端口: 22 公网ip: 116.162.100.119

1Panel

外部地址: http://116.162.100.119:15816/db3ae4e0d2 内部地址: http://192.168.0.184:15816/db3ae4e0d2 面板用户: 75bbbb926b 面板密码: a3056d8eab

frp Server

admin/Mayi19b8 token:admin8466 端口:7500+7000 映射: /opt/1panel/apps/frps/frps/data/frps.toml -> /etc/frp/frps.toml

firewalld:

firewall-cmd --zone=public --add-port=80/tcp --**permanent**

移动云

2025.11.25 注册

【移动云】(注册成功通知)尊敬的YDY_1380846_fe1308客户,您好!您于2025-11-25 21:42:06在移动云注册成功,可使用短信登录方式登录。您的用户名为YDY_1380846_fe1308。