-
-
FRP服务端 bindAddr = "0.0.0.0" bindPort = 7000 # 认证令牌（必须与客户端一致） auth.method = "token" auth.token = "密钥" # 仪表盘（可选，建议改密码） webServer.addr = "0.0.0.0" # 如果想外网访问仪表盘，改为 0.0.0.0 webServer.port = 7500 webServer.user = "用户名" webServer.password = "密码" transport.tls.force = true transport.tls.certFile = "/root/frp/server.crt" transport.tls.keyFile = "/root/frp/server.key" transport.tls.trustedCaFile = "/root/frp/ca.crt" # 如果需要双向认证则取消注释 transport.maxPoolCount = 50 # 从5改成20（必须 ≥ 客户端的值） log.to = "./frps.log" log.level = "info" log.maxDays = 3 # 日志保留天数（可选） 创建服务端systemd 服务文件 /etc/systemd/system/frps.service： Description=frp server After=network.target Type=simple User=root Group=root WorkingDirectory=/root/frp ExecStart=/root/frp/frps -c /root/frp/frps.toml Restart=on-failure RestartSec=5s LimitNOFILE=65536 WantedBy=multi-user.target 启动并设置服务端开机自启 sudo systemctl daemon-reload sudo systemctl enable frps --now 这样就能开机自启，崩溃后 5 秒自动重启（进程保护）。
-
Caddy 1 安装 Caddy（二进制安装，无需 git/apt） wget "https://github.com/caddyserver/caddy/releases/download/v2.11.2/caddy_2.11.2_linux_amd64.tar.gz" tar -xzf caddy_2.11.2_linux_amd64.tar.gz sudo mv caddy /usr/bin/ rm caddy_2.11.2_linux_amd64.tar.gz caddy version 2 创建必要目录 sudo mkdir -p /etc/caddy 3 写入 Caddyfile 配置 sudo nano /etc/caddy/Caddyfile 写入以下内容（替换邮箱和端口）： caddy { email 你的邮箱@qq.com } 你的域名 { reverse_proxy localhost:你的端口 } 保存退出。 4 创建 systemd 服务文件 sudo tee /etc/systemd/system/caddy.service
-
-
FRP客户端 serverAddr = "服务器IP" serverPort = 7000 auth.method = "token" auth.token = "设置密钥" webServer.addr = "0.0.0.0" # 监听地址，0.0.0.0 表示允许外部访问 webServer.port = 7400 # 管理界面端口，可自定义 webServer.user = "登录用户名" # 登录用户名 webServer.password = "登录密码" # 登录密码 transport.tls.enable = true transport.tls.certFile = "/root/frp/client.crt" transport.tls.keyFile = "/root/frp/client.key" transport.tls.trustedCaFile = "/root/frp/ca.crt" # 如需双向认证，提供 CA 证书 transport.poolCount = 20 # 从5改成10（或其他值） log.to = "./frpc.log" # 日志文件路径，可自定义 log.level = "info" # 日志级别：trace, debug, info, warn, error log.maxDays = 3 # 日志保留天数（可选） ] name = "dify" type = "tcp" localIP = "127.0.0.1" localPort = 8080 remotePort = 8080 ] name = "宝塔" type = "tcp" localIP = "127.0.0.1" localPort = 30854 remotePort = 30854 ] name = "云盘" type = "tcp" localIP = "127.0.0.1" localPort = 12345 remotePort = 12345 ] name = "记事本" type = "tcp" localIP = "127.0.0.1" localPort = 80 remotePort = 16888 ] name = "探针" type = "tcp" localIP = "127.0.0.1" localPort = 25774 remotePort = 25774 创建客户端 systemd 服务文件/etc/systemd/system/frpc.service： Description=frp client After=network.target Type=simple User=root Group=root WorkingDirectory=/root/frp ExecStart=/root/frp/frpc -c /root/frp/frpc.toml Restart=on-failure RestartSec=5s LimitNOFILE=65536 WantedBy=multi-user.target 启动并设置客户端开机自启 sudo systemctl daemon-reload sudo systemctl enable frpc --now 这样就能开机自启，崩溃后 5 秒自动重启（进程保护）。
-
修改软件源（安装源） 修改/etc/apt/sources.list.save文件 # See http://help.ubuntu.com/community/UpgradeNotes for how to upgrade to # newer versions of the distribution. deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy main restricted # deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy main restricted ## Major bug fix updates produced after the final release of the ## distribution. deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy-updates main restricted # deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy-updates main restricted ## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu ## team. Also, please note that software in universe WILL NOT receive any ## review or updates from the Ubuntu security team. deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy universe # deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy universe deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy-updates universe # deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy-updates universe ## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu ## team, and may not be under a free licence. Please satisfy yourself as to ## your rights to use the software. Also, please note that software in ## multiverse WILL NOT receive any review or updates from the Ubuntu ## security team. deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy multiverse # deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy multiverse deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy-updates multiverse # deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy-updates multiverse ## N.B. software from this repository may not have been tested as ## extensively as that contained in the main release, although it includes ## newer versions of some applications which may provide useful features. ## Also, please note that software in backports WILL NOT receive any review ## or updates from the Ubuntu security team. deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy-backports main restricted universe multiverse # deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy-backports main restricted universe multiverse deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy-security main restricted # deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy-security main restricted deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy-security universe # deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy-security universe deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy-security multiverse # deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ jammy-security multiverse
-
-
关闭IPV6 临时关闭IPV6 sudo sysctl -w net.ipv6.conf.enp1s0.disable_ipv6=1 永久关闭方法 创建文件/etc/netplan/99-disable-ipv6.yaml network: version: 2 ethernets: enp1s0: dhcp6: false accept-ra: false link-local: 然后修复文件权限 chmod 600 /etc/netplan/99-disable-ipv6.yaml 重新应用 netplan sudo netplan apply 检查 netplan 生成的 systemd-networkd 配置是否包含了我们的设置 cat /run/systemd/network/10-netplan-enp1s0.network | grep -i ipv6 你看到IPv6AcceptRA=no说明配置已生效。
-
命令行 开启SSH sudo apt update sudo apt install openssh-server 更新软件 sudo apt upgrade sudo apt install net-tools curl wget vim build-essential 扩展硬盘 把卷组所有剩余空间都给逻辑卷 sudo lvextend -l +100%FREE /dev/ubuntu-vg/ubuntu-lv 扩展文件系统（假设是 ext4，Ubuntu 默认就是这个） sudo resize2fs /dev/ubuntu-vg/ubuntu-lv 设置临时全局代理(重启失效) export http_proxy=http://192.168.31.172:7897 export https_proxy=http://192.168.31.172:7897 重启 reboot 关机 shutdown -h now 改密码 passwd