玩客云刷Openwrt/Armbian

玩客云配置 SOC为晶晨S805,ARM 4核1.5GHz,1G(DDR3)+8G(eMMC),两个USB 2.0,HDMI接口,一个千兆网口(RJ45 ),一个SD卡槽。 刷机工具下载 百度网盘 请输入提取码 (baidu.com) 更新 2024.04.15 OPENWRT高内核直刷 玩客云ws1608/赚钱宝三代和赚钱宝2代WS1508-PCDN、玩客云、京东云等各种云设备-恩山无线论坛 (right.com.cn) GitHub - hzyitc/armbian-onecloud: Armbian for onecloud. 玩客云用armbian 刷入Openwrt/Armbian 打开USB_Burning_Tool软件 短接触点上电,进入刷机模式 刷写系统到emmc 参考文档 玩客云刷软路由保姆教程 - 流云1 - 博客园 (cnblogs.com)

June 1, 2024 · 1 min · laning

sing-box TUN模式透明代理

前言 你的软路由到底是用来做旁路由还是主路由?如果是旁路由的话,只用科学上网不妨试试Linux旁路由网关 docker镜像构建 原本是64位的处理器,可惜之前装的32位操作系统,所以只能从Dockerfile自己构建喽 拉源码 git clone https://github.com/SagerNet/sing-box.git 构建镜像 docker build --no-cache -t laningya/sing-box:v1 . docker-compose.yml文件 version: "3.3" services: sing-box: image: laningya/sing-box:v1 container_name: sing-box restart: always network_mode: "host" volumes: - ./conf:/etc/sing-box/ devices: - /dev/net/tun:/dev/net/tun cap_add: - ALL command: -D /var/lib/sing-box -C /etc/sing-box/ run 要开启tun模式,devices和cap_add字段非常重要 一个不错的sing-box配置模板 { "dns": { "servers": [ { "tag": "dns_proxy", "address": "https://1.1.1.1/dns-query", "address_resolver": "dns_resolver", "strategy": "ipv4_only", "detour": "select" }, { "tag": "dns_direct", "address": "h3://dns.alidns.com/dns-query", "address_resolver": "dns_resolver", "strategy": "ipv4_only", "detour": "direct" }, { "tag": "dns_block", "address": "rcode://refused" }, { "tag": "dns_resolver", "address": "223.5.5.5", "strategy": "ipv4_only", "detour": "direct" } ], "rules": [ { "outbound": "any", "server": "dns_resolver" }, { "clash_mode": "direct", "server": "dns_direct" }, { "clash_mode": "global", "server": "dns_proxy" }, { "process_name": [ "TencentMeeting", "NemoDesktop", "ToDesk", "ToDesk_Service", "WeChat", "Tailscale", "wireguard-go", "Tunnelblick", "softwareupdated", "kubectl" ], "server": "dns_direct" }, { "domain_suffix": [ "icloudnative.io", "fuckcloudnative.io", "sealos.io", "cdn.jsdelivr.net" ], "server": "dns_direct" }, { "process_name": [ "DropboxMacUpdate", "Dropbox" ], "server": "dns_proxy" }, { "package_name": [ "com.google.android.youtube", "com.android.vending", "org.telegram.messenger", "org.telegram.plus" ], "server": "dns_proxy" }, { "rule_set": "geosite-geolocation-!cn", "server": "dns_proxy" }, { "rule_set": "Global", "server": "dns_proxy" }, { "rule_set": [ "YouTube", "Telegram", "Netflix", "geoip-google", "geoip-telegram", "geoip-twitter", "geoip-netflix" ], "server": "dns_proxy" } ], "final": "dns_direct" }, "ntp": { "enabled": true, "server": "time.apple.com", "server_port": 123, "interval": "30m0s", "detour": "direct" }, "inbounds": [ { "type": "tun", "inet4_address": "198.18.0.1/16", "auto_route": true, "exclude_package": [ "cmb.pb", "cn.gov.pbc.dcep", "com.MobileTicket", "com.adguard.android", "com.ainemo.dragoon", "com.alibaba.android.rimet", "com.alicloud.databox", "com.amazing.cloudisk.tv", "com.autonavi.minimap", "com.bilibili.app.in", "com.bishua666.luxxx1", "com.cainiao.wireless", "com.chebada", "com.chinamworld.main", "com.cmbchina.ccd.pluto.cmbActivity", "com.coolapk.market", "com.ctrip.ct", "com.dianping.v1", "com.douban.frodo", "com.eg.android.AlipayGphone", "com.farplace.qingzhuo", "com.hanweb.android.zhejiang.activity", "com.leoao.fitness", "com.lucinhu.bili_you", "com.mikrotik.android.tikapp", "com.moji.mjweather", "com.motorola.cn.calendar", "com.motorola.cn.lrhealth", "com.netease.cloudmusic", "com.sankuai.meituan", "com.sina.weibo", "com.smartisan.notes", "com.sohu.inputmethod.sogou.moto", "com.sonelli.juicessh", "com.ss.android.article.news", "com.ss.android.lark", "com.ss.android.ugc.aweme", "com.tailscale.ipn", "com.taobao.idlefish", "com.taobao.taobao", "com.tencent.mm", "com.tencent.mp", "com.tencent.soter.soterserver", "com.tencent.wemeet.app", "com.tencent.weread", "com.tencent.wework", "com.ttxapps.wifiadb", "com.unionpay", "com.unnoo.quan", "com.wireguard.android", "com.xingin.xhs", "com.xunmeng.pinduoduo", "com.zui.zhealthy", "ctrip.android.view", "io.kubenav.kubenav", "org.geekbang.geekTime", "tv.danmaku.bili" ], "stack": "mixed", "sniff": true }, { "type": "socks", "tag": "socks-in", "listen": "::", "listen_port": 5353 } ], "outbounds": [ { "type": "selector", "tag": "select", "outbounds": [ "trojan-out" ], "default": "trojan-out" }, { "type": "selector", "tag": "openai", "outbounds": [ "trojan-out" ], "default": "trojan-out" }, { "type": "selector", "tag": "tiktok", "outbounds": [ "trojan-out" ], "default": "trojan-out" }, { "type": "trojan", "tag": "trojan-out", "server": "199.180.115.155", "server_port": 9443, "password": "5iFHKMrn9Ez//VKh6zChTA==", "tls": { "enabled": true, "server_name": "ss.icloudnative.io", "insecure": true, "utls": { "fingerprint": "chrome" } }, "multiplex": { "protocol": "h2mux", "max_connections": 4, "min_streams": 4 }, "transport": { "type": "grpc", "service_name": "TunService" } }, { "type": "direct", "tag": "direct" }, { "type": "block", "tag": "block" }, { "type": "dns", "tag": "dns-out" } ], "route": { "rules": [ { "protocol": "dns", "outbound": "dns-out" }, { "clash_mode": "direct", "outbound": "direct" }, { "clash_mode": "global", "outbound": "select" }, { "domain_suffix": [ "icloudnative.io", "fuckcloudnative.io", "sealos.io", "cdn.jsdelivr.net" ], "outbound": "direct" }, { "process_name": [ "TencentMeeting", "NemoDesktop", "ToDesk", "ToDesk_Service", "WeChat", "OpenLens", "Tailscale", "wireguard-go", "Tunnelblick", "softwareupdated", "kubectl" ], "outbound": "direct" }, { "protocol": "quic", "outbound": "block" }, { "inbound": "socks-in", "outbound": "select" }, { "rule_set": [ "WeChat", "Bilibili" ], "outbound": "direct" }, { "rule_set": "OpenAI", "outbound": "openai" }, { "domain_suffix": [ "openai.com", "oaistatic.com", "oaiusercontent.com" ], "outbound": "openai" }, { "package_name": "com.openai.chatgpt", "outbound": "openai" }, { "rule_set": "TikTok", "outbound": "tiktok" }, { "package_name": "com.zhiliaoapp.musically", "outbound": "tiktok" }, { "domain_suffix": [ "depay.one", "orbstack.dev" ], "outbound": "select" }, { "process_name": [ "DropboxMacUpdate", "Dropbox" ], "outbound": "select" }, { "package_name": [ "com.google.android.youtube", "com.android.vending", "org.telegram.messenger", "org.telegram.plus", "com.google.android.googlequicksearchbox", "app.rvx.android.youtube", "com.mudvod.video", "com.fox2code.mmm", "com.twitter.android" ], "outbound": "select" }, { "domain": "accounts.google.com", "domain_suffix": [ "sourceforge.net", "fhjasokiwq.com" ], "outbound": "select" }, { "domain_suffix": "cloud.sealos.io", "outbound": "direct" }, { "type": "logical", "mode": "and", "rules": [ { "rule_set": "geosite-geolocation-!cn" }, { "rule_set": "geoip-cn", "invert": true } ], "outbound": "select" }, { "rule_set": "Global", "outbound": "select" }, { "rule_set": "geoip-cn", "outbound": "direct" }, { "ip_is_private": true, "outbound": "direct" }, { "rule_set": [ "YouTube", "Telegram", "Netflix", "geoip-google", "geoip-telegram", "geoip-twitter", "geoip-netflix" ], "outbound": "select" } ], "rule_set": [ { "type": "remote", "tag": "geosite-geolocation-!cn", "format": "binary", "url": "https://mirror.ghproxy.com/https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-geolocation-!cn.srs", "download_detour": "direct" }, { "type": "remote", "tag": "geoip-cn", "format": "binary", "url": "https://mirror.ghproxy.com/https://raw.githubusercontent.com/CHIZI-0618/v2ray-rules-dat/release/singbox_ip_rule_set/geoip-cn.srs", "download_detour": "direct" }, { "type": "remote", "tag": "geoip-google", "format": "binary", "url": "https://mirror.ghproxy.com/https://raw.githubusercontent.com/CHIZI-0618/v2ray-rules-dat/release/singbox_ip_rule_set/geoip-google.srs", "download_detour": "direct" }, { "type": "remote", "tag": "geoip-telegram", "format": "binary", "url": "https://mirror.ghproxy.com/https://raw.githubusercontent.com/CHIZI-0618/v2ray-rules-dat/release/singbox_ip_rule_set/geoip-telegram.srs", "download_detour": "direct" }, { "type": "remote", "tag": "geoip-twitter", "format": "binary", "url": "https://mirror.ghproxy.com/https://raw.githubusercontent.com/CHIZI-0618/v2ray-rules-dat/release/singbox_ip_rule_set/geoip-twitter.srs", "download_detour": "direct" }, { "type": "remote", "tag": "geoip-netflix", "format": "binary", "url": "https://mirror.ghproxy.com/https://raw.githubusercontent.com/CHIZI-0618/v2ray-rules-dat/release/singbox_ip_rule_set/geoip-netflix.srs", "download_detour": "direct" }, { "type": "remote", "tag": "Global", "format": "source", "url": "https://mirror.ghproxy.com/https://raw.githubusercontent.com/yangchuansheng/sing-box-geosite/main/rule/Global.json", "download_detour": "direct" }, { "type": "remote", "tag": "YouTube", "format": "source", "url": "https://mirror.ghproxy.com/https://raw.githubusercontent.com/yangchuansheng/sing-box-geosite/main/rule/YouTube.json", "download_detour": "direct" }, { "type": "remote", "tag": "OpenAI", "format": "source", "url": "https://mirror.ghproxy.com/https://raw.githubusercontent.com/yangchuansheng/sing-box-geosite/main/rule/OpenAI.json", "download_detour": "direct" }, { "type": "remote", "tag": "TikTok", "format": "source", "url": "https://mirror.ghproxy.com/https://raw.githubusercontent.com/yangchuansheng/sing-box-geosite/main/rule/TikTok.json", "download_detour": "direct" }, { "type": "remote", "tag": "Telegram", "format": "source", "url": "https://mirror.ghproxy.com/https://raw.githubusercontent.com/yangchuansheng/sing-box-geosite/main/rule/Telegram.json", "download_detour": "direct" }, { "type": "remote", "tag": "Netflix", "format": "source", "url": "https://mirror.ghproxy.com/https://raw.githubusercontent.com/yangchuansheng/sing-box-geosite/main/rule/Netflix.json", "download_detour": "direct" }, { "type": "remote", "tag": "WeChat", "format": "source", "url": "https://mirror.ghproxy.com/https://raw.githubusercontent.com/yangchuansheng/sing-box-geosite/main/rule/WeChat.json", "download_detour": "direct" }, { "type": "remote", "tag": "Bilibili", "format": "source", "url": "https://mirror.ghproxy.com/https://raw.githubusercontent.com/yangchuansheng/sing-box-geosite/main/rule/Bilibili.json", "download_detour": "direct" } ], "final": "direct", "find_process": true, "auto_detect_interface": true }, "experimental": { "cache_file": { "enabled": true }, "clash_api": { "external_controller": "0.0.0.0:9090", "external_ui": "metacubexd", "external_ui_download_url": "https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip", "external_ui_download_detour": "select", "default_mode": "rule" } } } 开启内核转发并关闭防火墙 echo 1 > /proc/sys/net/ipv4/ip_forward ufw disable 参考地址 icloudnative.io ...

April 27, 2024 · 4 min · laning

甲骨文防火墙设置

前言 甲骨文啊,你真狗!甲骨文除了与其他云厂商一样有防火墙面板,额外在系统镜像上也默认配置了防火墙,这直接导致开机更换ssh端口从而机器失联。。。 面板防火墙设置 不多说,与其他云厂商没有多大区别 系统镜像关闭防火墙 开放所有端口(Ubuntu、Debian) iptables -P INPUT ACCEPT iptables -P FORWARD ACCEPT iptables -P OUTPUT ACCEPT iptables -F 关闭防火墙 apt-get purge netfilter-persistent && reboot 参考文章 Oracle开放全部端口并关闭防火墙 - 清~幽殇 (isedu.top)

April 26, 2024 · 1 min · laning

哪吒监控部署

演示站点 laning’s dashboard 项目起因 手上的vps逐渐多了起来,还是可以玩一下监控面板 主要特性 cloudflare CDN + caddy反代 部署过程 官方参考文档 文档地址 哪吒监控 | 哪吒监控 (nezha.wiki) 主要步骤 参考文档拉取源码并docker部署,接入github作为管理账号,配置cf的cdn代理 docker部署caddy反代 docker-compose.yml version: '3.3' services: caddy: image: caddy container_name: caddy hostname: caddy restart: always volumes: - ./caddy/Caddyfile:/etc/caddy/Caddyfile - ./caddy/data:/data - ./caddy/config:/config network_mode: host Caddyfile cdn.example.com encode gzip reverse_proxy 127.0.0.1:8008 ICMP/TCP 公用IP探针 文档地址 【存】全国 34 省份 TCPING v4 IP (nodeseek.com) NTrace-V1/fast_trace/basic.go at main · nxtrace/NTrace-V1 (github.com) 故障通知机器人配置 文档地址 哪吒监控 | 哪吒监控 (nezha.wiki)

April 22, 2024 · 1 min · laning

VPS测试脚本

三网回程测试脚本 脚本地址 zhanghanyun/backtrace: 三网回程路由测试 (github.com) 命令行 curl https://raw.githubusercontent.com/zhanghanyun/backtrace/main/install.sh -sSf | sh 流媒体/GPT解锁测试脚本 脚本地址 lmc999/RegionRestrictionCheck: A bash script to check the status of your IP on various geo-restricted services. (github.com) 命令行 bash <(curl -L -s check.unlock.media) BBR加速 脚本地址 Chikage0o0/Linux-NetSpeed: 将Linux现常用的网络加速集成在一起 (github.com) 命令行 wget -N --no-check-certificate "https://raw.githubusercontent.com/chiakge/Linux-NetSpeed/master/tcp.sh" && chmod +x tcp.sh && ./tcp.sh 缝合怪 脚本地址 ecs/README.md at main · spiritLHLS/ecs (github.com) 命令行 curl -L https://gitlab.com/spiritysdx/za/-/raw/main/ecs.sh -o ecs.sh && chmod +x ecs.sh && bash ecs.sh XrayCLI安装脚本 脚本地址 Xray一键安装脚本 · 233boy/Xray Wiki (github.com) ...

April 14, 2024 · 2 min · laning

cloudflare 科学环境

2024/11/24更新:项目已失效 warp+ 流量获取 tg机器人 windows客户端 设置代理端口+Proxy SwitchyOmega分流 订阅转clash等订阅链接 docker pull vvbbnn00/warp-clash-api vvbbnn00/WARP-Clash-API: 该项目可以让你通过订阅的方式使用Cloudflare WARP+,自动获取流量。This project enables you to use Cloudflare WARP+ through subscription, automatically acquiring traffic. (github.com) 展示地址 click here cloudflare 反向代理 开源项目 3Kmfi6HP/EDtunnel: Use Cloudflare pages and worker serverless to implement VLESS protocol (github.com) 参考文章 免费翻墙,批量vless节点,反代伪装网页,轻松跑满本地宽带 (jdssl.top) 展示地址 click here

April 4, 2024 · 1 min · laning

Jellyfin on NanoPC-T4

前言 受限于jellyfin对rk3399等ARM处理器视频硬件解码的支持,搭建的Jellyfin服务都采用客户端解码。 docker部署Jellifin docker-compose.yml文件 version: '3.3' services: jellyfin: image: jellyfin/jellyfin container_name: jellyfin network_mode: 'host' volumes: - ./config:/config - ./cache:/cache - ./media:/media # - /path/to/media2:/media2:ro restart: 'unless-stopped' # Optional - alternative address used for autodiscovery environment: - JELLYFIN_PublishedServerUrl=http://example.com #- http_proxy=http://127.0.0.1:7890 #- https_proxy=http://127.0.0.1:7890 # Optional - may be necessary for docker healthcheck to pass if running in host network mode # extra_hosts: # - 'host.docker.internal:host-gateway' 一些说明: 采用了host模式,无需进行端口映射 https端口8920,http端口8096 可通过环境变量配置http和https代理 部署https证书 阿里云申请免费证书,有效期3个月,服务器类型选IIS 上传证书到./config文件夹中 在Jellyfin页面中配置证书文件地址和密码 ...

March 19, 2024 · 1 min · laning

gitea服务安装配置

前言 关于gitea是什么,以及基本的配置可以参考官方文档 特性 此为内网使用,因而没有配置caddy或nginx等代理 配置 1.启动docker服务 docker-compose up -d 2.IP:port通过浏览器配置

May 27, 2023 · 1 min · laning

vscode-web服务与配置

前言 如果需要在多台设备之间来进行开发工作,频繁的配置开发环境无疑是很消耗精力的事情。而vscode-web提供了通过浏览器来编写代码的环境,因而理论上,你可以在任何一台机器上继续你的工作。 配置过程 1.启动docker服务 docker-compose up -d 2.进入容器查看密钥 #进入容器 docker exec -it code-server bash #查看密钥 cat ~/.config/code-server/config.yaml 3.更换容器的apt源 参考文档:清华开源软件镜像站Debian Help #换源完成后执行 apt update 4.安装C/C++环境 apt install build-essential 5.解决python命令找不到 ln -s /usr/bin/python3 /usr/bin/python 6.安装Rust开发环境 curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh 7.进入web界面,自行安装喜欢的插件

May 27, 2023 · 1 min · laning

bingAI本地部署

前言 自从chatGPT3.0问世以后,新一轮的人工智能浪潮深刻改变了我们的生活。相比于深蓝击败人类象棋冠军以及阿尔法狗击败人类围棋冠军,chatGPT更能称为划时代的人工智能产品,因为它太接近我们的生活了(通用人工智能)。关于它能干什么以及它与newbing的关系这里不多介绍,感兴趣的可以自己寻找这方面的科普视频。本文主要分享如何通过docker部署newbing,从而达到无需魔法访问newbing的目的。 开源项目地址 go-proxy-bingai 特性 使用caddy来进行反向代理,自动配置域名证书 实践过程 拉取本目录下的文件 替换caddy文件下的Caddyfile文件中的yourdomain.com字段为自己的域名 命令行执行docker-compose up -d畅享服务吧。

May 27, 2023 · 1 min · laning