<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="FeedCreator 1.8" -->
<?xml-stylesheet href="https://note.simperator.com/lib/exe/css.php?s=feed" type="text/css"?>
<rdf:RDF
    xmlns="http://purl.org/rss/1.0/"
    xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
    xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
    xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel rdf:about="https://note.simperator.com/feed.php">
        <title>天涯的知库 - it:server</title>
        <description>聚沙成塔</description>
        <link>https://note.simperator.com/</link>
        <image rdf:resource="https://note.simperator.com/lib/exe/fetch.php?media=wiki:dokuwiki.svg" />
       <dc:date>2026-05-06T12:06:35+00:00</dc:date>
        <items>
            <rdf:Seq>
                <rdf:li rdf:resource="https://note.simperator.com/doku.php?id=it:server:autossh&amp;rev=1660132870&amp;do=diff"/>
                <rdf:li rdf:resource="https://note.simperator.com/doku.php?id=it:server:cloudflaretunnel&amp;rev=1773668131&amp;do=diff"/>
                <rdf:li rdf:resource="https://note.simperator.com/doku.php?id=it:server:docker&amp;rev=1721386489&amp;do=diff"/>
                <rdf:li rdf:resource="https://note.simperator.com/doku.php?id=it:server:oracalfree&amp;rev=1767106582&amp;do=diff"/>
                <rdf:li rdf:resource="https://note.simperator.com/doku.php?id=it:server:redis&amp;rev=1660746704&amp;do=diff"/>
                <rdf:li rdf:resource="https://note.simperator.com/doku.php?id=it:server:security&amp;rev=1767106513&amp;do=diff"/>
                <rdf:li rdf:resource="https://note.simperator.com/doku.php?id=it:server:shell_command&amp;rev=1697137551&amp;do=diff"/>
                <rdf:li rdf:resource="https://note.simperator.com/doku.php?id=it:server:squid&amp;rev=1691256320&amp;do=diff"/>
                <rdf:li rdf:resource="https://note.simperator.com/doku.php?id=it:server:start&amp;rev=1627286712&amp;do=diff"/>
                <rdf:li rdf:resource="https://note.simperator.com/doku.php?id=it:server:zerotier&amp;rev=1767126977&amp;do=diff"/>
                <rdf:li rdf:resource="https://note.simperator.com/doku.php?id=it:server:%E4%BF%9D%E6%8A%A4&amp;rev=1661799811&amp;do=diff"/>
            </rdf:Seq>
        </items>
    </channel>
    <image rdf:about="https://note.simperator.com/lib/exe/fetch.php?media=wiki:dokuwiki.svg">
        <title>天涯的知库</title>
        <link>https://note.simperator.com/</link>
        <url>https://note.simperator.com/lib/exe/fetch.php?media=wiki:dokuwiki.svg</url>
    </image>
    <item rdf:about="https://note.simperator.com/doku.php?id=it:server:autossh&amp;rev=1660132870&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2022-08-10T12:01:10+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>Autossh 免密码登录</title>
        <link>https://note.simperator.com/doku.php?id=it:server:autossh&amp;rev=1660132870&amp;do=diff</link>
        <description>Autossh 免密码登录

Install SSH

安装 &lt;span class=&quot;wss-nowiki-section&quot;&gt;sudo apt install openssh-server&lt;/span&gt;

允许根用户登录

mac/linux

参考文献 / 项目地址

安装依赖

安装 autossh，（文件地址 ~/.autosshrc）

配置服务器

:!: 重新布置服务器，密码更改以后需要取消原来的key

Windows

安装 putty ，然后建立一个桌面快捷方式：&lt;span class=&quot;wss-nowiki-section&quot;&gt;cat ~/.ssh/id_rsa.pub&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;ssh 192.168.0.116 -p 1234&lt;/span&gt;…</description>
    </item>
    <item rdf:about="https://note.simperator.com/doku.php?id=it:server:cloudflaretunnel&amp;rev=1773668131&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2026-03-16T13:35:31+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>Cloudflare Tunnel</title>
        <link>https://note.simperator.com/doku.php?id=it:server:cloudflaretunnel&amp;rev=1773668131&amp;do=diff</link>
        <description>Cloudflare Tunnel

Cloudflare Tunnel 实现内网穿透

Cloudflare tunnel in raspberry Pi

安装

中文资料的方案，但amd64可能不适合树莓派

英文资料的方案：

登录

&lt;span class=&quot;wss-nowiki-section&quot;&gt;cloudflared tunnel login&lt;/span&gt; 登录后证书存放于 &lt;span class=&quot;wss-nowiki-section&quot;&gt;/root/.cloudflared/cert.pem&lt;/span&gt;



URL
&lt;https://dash.cloudflare.com/argotunnel?aud=&amp;callback=https%3A%2F%2Flogin.cloudflareaccess.org%2Fw8pQi1dhFdy2Ruf329imEq8QOOmWE-LCUWKwJlaw6zo%3D&gt;

...





创建隧道

将隧道指向域名 （如果域名之前已经指定A记录，需要在Cloudflare上删除原来的记录）…</description>
    </item>
    <item rdf:about="https://note.simperator.com/doku.php?id=it:server:docker&amp;rev=1721386489&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2024-07-19T10:54:49+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>Docker 命令</title>
        <link>https://note.simperator.com/doku.php?id=it:server:docker&amp;rev=1721386489&amp;do=diff</link>
        <description>Docker 命令

安装

树莓派上安装 docker 树莓派4b安装Docker与docker-compose过程及问题解决

安装说明书  谷歌推荐 树莓派上安装 Docker

install docker on ubuntu / &lt;span class=&quot;wss-nowiki-section&quot;&gt;apt-get install docker-compose&lt;/span&gt;

删除

启动/停止服务

如果发现错误，尝试重新加载守护进程
sudo systemctl daemon-reload
sudo systemctl restart docker
或者依赖服务
sudo systemctl status containerd
sudo systemctl start containerd&lt;span class=&quot;wss-nowiki-section&quot;&gt;docker container ls -a&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;docker exec -it nginx bash&lt;/span&gt;&lt;span class=&quot;wss-no…</description>
    </item>
    <item rdf:about="https://note.simperator.com/doku.php?id=it:server:oracalfree&amp;rev=1767106582&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2025-12-30T14:56:22+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>Oracle 永久免费</title>
        <link>https://note.simperator.com/doku.php?id=it:server:oracalfree&amp;rev=1767106582&amp;do=diff</link>
        <description>Oracle 永久免费

Orcale 提供永久免费的 VPS （申请链接/视频演示） 我的控制台

免费套餐介绍 / 计费信息

VPS 创建实例

创建的时候可以选择不同的操作系统，点击启动之前，先下载private key文件，将来登录的时候用。登录命令

也可用已有的公共密钥创建 &lt;span class=&quot;wss-nowiki-section&quot;&gt;sudo systemctl restart ssh&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;ssh-copy-id -i ~/.ssh/id_rsa.pub root@serverplay&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;sudo deluser ubuntu sudo&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;bash &amp;lt;(wget --no-check-certificate -qo-&amp;quot;https://raw.githubusercontent.com/MoeClub/Note/master/ln…</description>
    </item>
    <item rdf:about="https://note.simperator.com/doku.php?id=it:server:redis&amp;rev=1660746704&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2022-08-17T14:31:44+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>Redis 服务</title>
        <link>https://note.simperator.com/doku.php?id=it:server:redis&amp;rev=1660746704&amp;do=diff</link>
        <description>Redis 服务

Redis Docs 按照官方说明ubuntu系统下进行安装就好。

安装与访问

前台启动服务 &lt;span class=&quot;wss-nowiki-section&quot;&gt;redis-server&lt;/span&gt; 按 ctrl + c 即可终止服务。后台启动使用

访问服务器 (mac也就是客户端 本地redis服务也需要启动)

加密访问

&lt;span class=&quot;wss-nowiki-section&quot;&gt;CONFIG set requirepass &amp;quot;&amp;lt;pw&amp;gt;&amp;quot;&lt;/span&gt;</description>
    </item>
    <item rdf:about="https://note.simperator.com/doku.php?id=it:server:security&amp;rev=1767106513&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2025-12-30T14:55:13+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>服务器安全设置</title>
        <link>https://note.simperator.com/doku.php?id=it:server:security&amp;rev=1767106513&amp;do=diff</link>
        <description>服务器安全设置

主要运用 ubuntu 自带的防火墙工具 UFW 进行设定。Ubuntu 18.04上使用UFW设置防火墙
UFW 通用防火墙规则和命令

How To Setup a Firewall with UFW on an Ubuntu and Debian Cloud Server
也可以利用 iptables 白名单的方式进行保护。Ubuntu 16.04 设置防火墙白名单

UFW 使用比较简单，因此首先考虑使用这种方式。

安装     sudo apt install ufw 

检查状态  &lt;span class=&quot;wss-nowiki-section&quot;&gt;sudo ufw limit 22&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;service iptables start&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;apt-get purge netfilter-persistent&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;rm -rf /etc/ip…</description>
    </item>
    <item rdf:about="https://note.simperator.com/doku.php?id=it:server:shell_command&amp;rev=1697137551&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2023-10-12T19:05:51+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>SHELL 命令</title>
        <link>https://note.simperator.com/doku.php?id=it:server:shell_command&amp;rev=1697137551&amp;do=diff</link>
        <description>SHELL 命令

nohup 后台进程

1指标准输出；2指错误输出，所以写成这样：command 1&gt;output 2&gt;error &amp; ，正常的输出在output文件里，错误的输出在error文件里, command &gt;output 2&gt;error &amp;

(1可以省略)

忽略错误输出：command 1&gt;output 2&gt;/dev/null &amp;&lt;span class=&quot;wss-nowiki-section&quot;&gt;du -h –max-depth=1 your_dest_dir&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;du -sh &amp;lt;目录&amp;gt;&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;ls -lht&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;rcp&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;scp&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;id -u &amp;lt;username&amp;gt;&lt;/span&gt;…</description>
    </item>
    <item rdf:about="https://note.simperator.com/doku.php?id=it:server:squid&amp;rev=1691256320&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2023-08-05T17:25:20+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>Squid proxy</title>
        <link>https://note.simperator.com/doku.php?id=it:server:squid&amp;rev=1691256320&amp;do=diff</link>
        <description>Squid proxy

Notion 上的笔记

教学文章

安装启动

安装命令

启动/关闭服务

查询

&lt;span class=&quot;wss-nowiki-section&quot;&gt;squid -k parse&lt;/span&gt; 查看所有的配置情况

查看端口

如果不行的话，

开通/关闭服务

外网 HTTP

端口: 我的服务器开通了3129端口

开通 socks 代理服务

用户认证
&lt;span class=&quot;wss-nowiki-section&quot;&gt;curl -v -x http://217.160.61.19:3129 https://google.com&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;nc -v 217.160.61.19 3129&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;curl -x 217.160.61.19:3129 -U &amp;quot;username:passwd&amp;quot; ipinfo.io&lt;/span&gt;…</description>
    </item>
    <item rdf:about="https://note.simperator.com/doku.php?id=it:server:start&amp;rev=1627286712&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2021-07-26T08:05:12+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title></title>
        <link>https://note.simperator.com/doku.php?id=it:server:start&amp;rev=1627286712&amp;do=diff</link>
        <description>server index</description>
    </item>
    <item rdf:about="https://note.simperator.com/doku.php?id=it:server:zerotier&amp;rev=1767126977&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2025-12-30T20:36:17+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>ZeroTier</title>
        <link>https://note.simperator.com/doku.php?id=it:server:zerotier&amp;rev=1767126977&amp;do=diff</link>
        <description>ZeroTier

install on ubuntu 
curl -s 'https://raw.githubusercontent.com/zerotier/ZeroTierOne/master/doc/contact%40zerotier.com.gpg' | gpg --import &amp;&amp; \
if z=$(curl -s 'https://install.zerotier.com/' | gpg); then echo &quot;$z&quot; | sudo bash; fi

加入一个网络 (363c67c55a0fb8b7 是我的网络)</description>
    </item>
    <item rdf:about="https://note.simperator.com/doku.php?id=it:server:%E4%BF%9D%E6%8A%A4&amp;rev=1661799811&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2022-08-29T19:03:31+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>保护VPS</title>
        <link>https://note.simperator.com/doku.php?id=it:server:%E4%BF%9D%E6%8A%A4&amp;rev=1661799811&amp;do=diff</link>
        <description>保护VPS

查看受到的攻击

VPS 会遭到各种攻击VPS 安全防护

1.查看尝试暴力破解机器密码的人

​
2.查看暴力猜用户名的人

3. 统计以root或者其它用户登录的次数

禁止密码登录

进去后更改一下root用户密码，并切换到root用户，然后修改 /etc/ssh/sshd_config 文件，免除密码登录。重启ssh服务&lt;span class=&quot;wss-nowiki-section&quot;&gt;sudo systemctl restart ssh&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;sudo systemctl restart sshd&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;sudo service ssh restart&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;ps -e |grep ssh&lt;/span&gt;&lt;span class=&quot;wss-nowiki-section&quot;&gt;sudo apt-get install fail2ban&lt;/span&gt;&lt;span c…</description>
    </item>
</rdf:RDF>
