OpenList网盘 - aLinChe

Nginx#

1
docker run -d \
2
  --name my-nginx \
3
  -p 80:80 \
4
  -p 443:443 \
5
  -v /home/username/OpenList/my-nginx/nginx.conf:/etc/nginx/nginx.conf:ro \
6
  -v /home/username/OpenList/my-nginx/conf.d:/etc/nginx/conf.d:ro \
7
  -v /home/username/OpenList/my-nginx/html:/usr/share/nginx/html:ro \
8
  -v /home/username/OpenList/my-nginx/logs:/etc/nginx/logs/nginx \
9
  -v /home/username/OpenList/my-nginx/ssl:/etc/nginx/ssl:ro \
10
  --restart=always \
11
  nginx
12

13
docker logs my-nginx | grep -i error
14

15
# docker exec -it my-nginx /bin/bash # 如果需要进入容器交互式操作
16
docker exec my-nginx nginx -t
17
docker exec my-nginx nginx -s reload

nginx.conf#

1
# config
2
vim my-nginx/nginx.conf

1
user nginx;
2
worker_processes auto;
3
error_log logs/error.log error; # notice;
4
pid /run/nginx.pid;
5
master_process on;
6
worker_rlimit_nofile 65535;
7
events {
8
    worker_connections 65535;
9
    use epoll;
10
    multi_accept on;
11
}
12

13
http {
14
    include mime.types;
15
    include sites-enabled/*.conf;
16
    include conf.d/*.conf;
17
    default_type application/octet-stream;
18
    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
19
        '$status $body_bytes_sent "$http_referer" '
20
        '"$http_user_agent" "$http_x_forwarded_for"';
21
    access_log logs/access.log main;
22
    sendfile on; # 开启高效文件传输模式
23
    tcp_nopush on; # 防止网络阻塞
24
    keepalive_timeout 30;
25
    keepalive_requests 1000;
26
    reset_timedout_connection on;
27
    large_client_header_buffers 4 64k;
28
    client_max_body_size 0; # 设置文件上传大小限制,0为不限制
29
    # 开启 gzip 压缩
30
    gzip on;
31
    gzip_http_version 1.1;
32
    gzip_comp_level 3; # 压缩等级:1压缩比最小,处理速度快.9压缩比最大,比较消耗cpu资源
33
    gzip_min_length 1k;
34
    gzip_buffers 4 16k;
35
    gzip_types text/plain text/css text/xml text/javascript application/javascript application/xml+rss application/json;
36
    gzip_vary on;
37
    # 静态文件缓存优化
38
    open_file_cache max=10000 inactive=30s;
39
    open_file_cache_valid 60s;
40
    open_file_cache_min_uses 2;
41
    open_file_cache_errors on;
42
    # SSL 优化
43
    ssl_protocols TLSv1.2 TLSv1.3; # 推荐的安全协议
44
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
45
    ssl_prefer_server_ciphers on;
46
    ssl_session_cache shared:SSL:10m;
47
    ssl_session_timeout 10m;
48

49
    upstream openlist_backend {
50
        server 172.17.0.1:5244; # OpenList 默认端口
51
        keepalive 32;
52
    }
53

54
    server {
55
        listen 80;
56
        listen [::]:80;
57
        server_name openlist.alinche.dpdns.org;
58
        return 301 https://$host$request_uri; # 自动跳转到HTTPS
59
    }
60

61
    server {
62
        listen 443 ssl;
63
        listen [::]:443 ssl;
64
        server_name openlist.alinche.dpdns.org;
65
        charset utf-8;
66

67
        ssl_certificate /etc/nginx/ssl/certs/cloudflare_cert.pem;
68
        ssl_certificate_key /etc/nginx/ssl/private/cloudflare_key.key;
69

70
        location / {
71
            proxy_pass http://openlist_backend/;
72
            proxy_set_header Host $host;
73
            proxy_set_header X-Real-IP $remote_addr;
74
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
75
            proxy_set_header X-Forwarded-Proto $scheme;
76
            proxy_set_header Upgrade $http_upgrade;
77

78
            # 缓冲区和超时（针对大文件传输优化）
79
            proxy_buffering on;
80
            proxy_buffer_size 128k;
81
            proxy_buffers 8 256k;
82
            proxy_connect_timeout 60s;
83
            proxy_send_timeout 60s;
84
            proxy_read_timeout 60s;
85
        }
86

87
        location /nginx_status {
88
            stub_status;
89
            add_header X-Nginx-Status active;
90
            access_log off;
91
            keepalive_timeout 0;
92
            allow 127.0.0.1;
93
            # deny all;
94
        }
95
    }
96

97
    server {
98
        listen 80 default_server;
99
        listen [::]:80 default_server;
100
        server_name _;
101
        root /usr/share/nginx/html;
102
        index index.html;
103
        location / {
104
            try_files $uri $uri/ =404;
105
        }
106
    }
107

108
    # server {
109
    #     listen 443 default_server;
110
    #     listen [::]:443 default_server;
111
    #     server_name _;
112
    #     root /usr/share/nginx/html;
113
    #     index index.html;
114
    #     location / {
115
    #         try_files $uri $uri/ =404;
116
    #     }
117
    # }
118
}

1
<!-- HTML -->
2
<!-- vim my-nginx/html/index.html -->
3
<!DOCTYPE html>
4
<html>
5
<head>
6
    <meta charset="utf-8">
7
    <title>Welcome to nginx!</title>
8
    <style>
9
        html {
10
            color-scheme: light dark;
11
        }
12
        body {
13
            width: 35em;
14
            margin: 0 auto;
15
            font-family: Tahoma, Verdana, Arial, sans-serif;
16
        }
17
    </style>
18
</head>
19
<body>
20
    <h1>你好！nginx</h1>
21
    <p>If you see this page, the nginx web server is successfully installed and working. Further configuration is required.</p>
22
    <p>For online documentation and support please refer to
23
        <a href="https://www.bilibili.com/video/BV1TW1LYkE59/">bilibili.com</a>.<br />
24
    </p>
25
    <p><em>Thank you for using nginx.</em></p>
26
</body>
27
</html>

DDNS-GO#

DDNS-GO GitHub 仓库

1
docker run -d --name ddns-go --restart=always --net=host -v /opt/ddns-go:/root jeessy/ddns-go
2
# 访问 IP:9876 进行管理

OpenList#

OpenList GitHub 仓库 OpenList 官方文档 CN

1
# 使用 docker
2
sudo chown -R 1001:1001 /etc/openlist
3
docker run -d --restart=unless-stopped -v /etc/openlist:/opt/openlist/data -p 5244:5244 -e UMASK=022 --name="openlist" openlistteam/openlist:latest
4

5
# 如考虑使用二进制文件
6
sudo vim /etc/systemd/system/openlist.service # 访问 IP:5244 进行管理
7
[Unit]
8
Description=OpenList Service
9
After=network.target
10
[Service]
11
Type=simple
12
WorkingDirectory=/home/username/OpenList
13
ExecStart=/home/username/OpenList/openlist server
14
Restart=always
15
RestartSec=30
16
User=username
17
[Install]
18
WantedBy=multi-user.target
19

20
sudo systemctl daemon-reload
21
sudo systemctl enable openlist.service
22
sudo systemctl restart openlist.service
23
sudo systemctl status openlist.service
24

25
journalctl -u openlist.service -f

Cloudflare tunnel#

1
# https://one.dash.cloudflare.com/<id>/networks/connectors
2
sudo apt-get install cloudflared # 要用官网的命令添加 apt repo
3
# docker
4
docker run cloudflare/cloudflared:latest tunnel --no-autoupdate run --token [YOUR_TOKEN]
5

6
cloudflared tunnel login
7

8
sudo cloudflared service install
9
sudo systemctl start cloudflared
10
sudo systemctl enable cloudflared
11

12
cloudflared tunnel list
13
journalctl -a -u cloudflared -n 10
14

15
# 强制使用 HTTP2
16
sudo vim /etc/systemd/system/cloudflared.service
17
ExecStart=/usr/bin/cloudflared --no-autoupdate tunnel run --protocol http2 --token ...