md5.pw - 用户贡献 [zh]

部署https中转服务教程

2025-12-23T09:44:55Z

Lusky0：创建页面，内容为“== 为什么要做https转发 == 因为公司业务在美国，服务器已经使用很久，迁移非常麻烦，现在正好有瓦工稳定机器故想到这个解决方案，可能不是最优，但是目前满足我的业务稳定分享给大家，如有不足欢迎大佬们指点。 == 部署Nginx == ==== 宿主机先创建这些文件 ==== <pre> /home/docker/nginx/nginx.conf /home/docker/nginx/conf.d /home/docker/nginx/log /home/docker/nginx/html /home/…”

== 为什么要做https转发 ==
因为公司业务在美国，服务器已经使用很久，迁移非常麻烦，现在正好有瓦工稳定机器故想到这个解决方案，可能不是最优，但是目前满足我的业务稳定分享给大家，如有不足欢迎大佬们指点。

== 部署Nginx ==
==== 宿主机先创建这些文件 ====
<pre>
/home/docker/nginx/nginx.conf
/home/docker/nginx/conf.d
/home/docker/nginx/log
/home/docker/nginx/html
/home/docker/nginx/ssl
/home/docker/letsencrypt
</pre>

==== 安装docker ====
<pre>
curl -fsSL https://get.docker.com -o install-docker.sh
sudo sh install-docker.sh
</pre>

===== 启动脚本startNginx.sh =====
<pre>
sudo docker run \
-p 80:80 \
-p 443:443 \
-p 8081:8081 \
--name nginx \
-v /home/docker/nginx/nginx.conf:/etc/nginx/nginx.conf \
-v /home/docker/nginx/conf.d:/etc/nginx/conf.d \
-v /home/docker/nginx/log:/var/log/nginx \
-v /home/docker/nginx/html:/usr/share/nginx/html \
-v /home/docker/nginx/ssl:/etc/nginx/ssl \
-v /home/docker/letsencrypt:/var/www/letsencrypt \
-d nginx
</pre>

==== 证书自动续期ssl_auto.sh ====
<pre>
#!/bin/bash

# ==============================
# 智能 SSL 自动管理脚本
# - 每日检查证书剩余天数
# - ≤30 天自动续期
# - webroot 模式（不中断服务）
# ========== 运行模式 ==========
DRY_RUN=false # true = 测试模式（不真正续期）
# ==============================

NGINX_CONTAINER="nginx"
WEBROOT="/home/docker/letsencrypt"
SSL_DIR="/home/docker/nginx/ssl"
RENEW_BEFORE_DAYS=30

DOMAINS=(
"xxxxx"
)

echo "============================"
echo " 🔐 SSL 自动检查启动 $(date)"
echo "============================"

mkdir -p "$WEBROOT/.well-known/acme-challenge/"

need_restart_nginx=false

for DOMAIN in "${DOMAINS[@]}"; do
CERT_PATH="/etc/letsencrypt/live/$DOMAIN/fullchain.pem"

echo ""
echo "👉 检查域名：$DOMAIN"

# 如果证书不存在，直接申请
if [ ! -f "$CERT_PATH" ]; then
echo "⚠ 未发现证书，立即申请"
renew=true
else
# 获取过期时间
expire_date=$(openssl x509 -enddate -noout -in "$CERT_PATH" | cut -d= -f2)
expire_ts=$(date -d "$expire_date" +%s)
now_ts=$(date +%s)

days_left=$(( (expire_ts - now_ts) / 86400 ))

echo "📅 剩余有效期：$days_left 天"

if [ "$days_left" -le "$RENEW_BEFORE_DAYS" ]; then
echo "⏰ 低于 $RENEW_BEFORE_DAYS 天，需要续期"
renew=true
else
echo "✅ 证书仍然有效，跳过"
renew=false
fi
fi

# if [ "$renew" = true ]; then
# echo "🔄 正在申请/续期：$DOMAIN"

# certbot certonly \
# --webroot -w "$WEBROOT" \
# -d "$DOMAIN" \
# --non-interactive \
# --agree-tos \
# -m admin@$DOMAIN

# if [ $? -ne 0 ]; then
# echo "❌ 续期失败：$DOMAIN"
# continue
# fi

if [ "$renew" = true ]; then
echo "🔄 正在申请/续期：$DOMAIN"

CERTBOT_ARGS=(
certonly
--webroot -w "$WEBROOT"
-d "$DOMAIN"
--non-interactive
--agree-tos
-m admin@$DOMAIN
)

if [ "$DRY_RUN" = true ]; then
CERTBOT_ARGS+=(--dry-run)
echo "🧪 DRY-RUN 模式：仅测试，不会真正更新证书"
fi

certbot "${CERTBOT_ARGS[@]}"

if [ $? -ne 0 ]; then
echo "❌ 续期失败：$DOMAIN"
# 这里之后你可以接邮件/钉钉告警
continue
fi

echo "✅ certbot 执行成功：$DOMAIN"

# dry-run 模式不做后续动作
if [ "$DRY_RUN" = true ]; then
echo "🧪 DRY-RUN 模式：跳过证书复制与 Nginx 重启"
continue
fi

echo "✅ 续期成功：$DOMAIN"

# 复制到 nginx ssl 目录
cp -f /etc/letsencrypt/live/$DOMAIN/fullchain.pem \
$SSL_DIR/$DOMAIN.pem
cp -f /etc/letsencrypt/live/$DOMAIN/privkey.pem \
$SSL_DIR/$DOMAIN.key

chmod 644 $SSL_DIR/$DOMAIN.pem
chmod 600 $SSL_DIR/$DOMAIN.key

need_restart_nginx=true
echo "📦 证书已更新到 Nginx 目录"
fi
done

# 如有证书更新才重启 nginx
if [ "$need_restart_nginx" = true ]; then
echo ""
echo "🔄 重启 Nginx 容器"
docker restart $NGINX_CONTAINER
echo "✅ Nginx 重启完成"
else
echo ""
echo "ℹ️ 无证书变更，无需重启 Nginx"
fi

echo ""
echo "🎉 SSL 检查完成"
</pre>

==== Nginx.conf配置文件 ====
<pre>
server {
listen 80;
server_name xxx;

location /.well-known/acme-challenge/ {
alias /var/www/letsencrypt/.well-known/acme-challenge/;
try_files $uri =404;
}

location / {
return 301 https://$host$request_uri;
}
}

upstream put_api_backend {
server xxxxx:443;
keepalive 100;
}

server {
listen 443 ssl;
server_name xxx;

ssl_certificate /etc/nginx/ssl/xxx.pem;
ssl_certificate_key /etc/nginx/ssl/xxx.key;

ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;

access_log /var/log/nginx/xxx.access.log;
error_log /var/log/nginx/xxx.error.log warn;

# ACME challenge（HTTPS 续期仍然需要）
location /.well-known/acme-challenge/ {
alias /var/www/letsencrypt/.well-known/acme-challenge/;
try_files $uri =404;
}

# API 中转
location /api {
proxy_pass https://put_api_backend;
proxy_ssl_server_name on;

proxy_http_version 1.1;
proxy_set_header Connection "";

proxy_set_header Host xxx;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;

proxy_connect_timeout 5s;
proxy_read_timeout 30s;
proxy_send_timeout 30s;
}

# 其他路径拒绝
location / {
return 404;
}
}
</pre>

==== 重启Nginx ====
<pre>
docker exec -it nginx nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
root@ubuntu:/home/docker/nginx# docker exec -it nginx nginx -s reload
</pre>

测评

2025-12-21T02:45:23Z

Lusky0：创建页面，内容为“ == MageBox-Pro使用测评 == {| class="wikitable" |+ 机器配置 |- ! VPS !! SKU !! CPU !! RAM !! SSD !! Traffic !! IP !! 价格 |- | BandwagonHOST || NODESEEK-MEGABOX-PRO || 2C || 2G || 40G || 2T / 2.5Gbps || IPv4 / IPv6 || **$45.68/Annually** |} == 系统参数硬件性能 == thumb == Tdog — IPv4 质量测试 == {| class="wikitable" |+ tcp |- ! CM !! CU !! CT |- | thumb || File:2-1.webp|thum…”

== MageBox-Pro使用测评 ==

{| class="wikitable"
|+ 机器配置
|-
! VPS !! SKU !! CPU !! RAM !! SSD !! Traffic !! IP !! 价格
|-
| BandwagonHOST || NODESEEK-MEGABOX-PRO || 2C || 2G || 40G || 2T / 2.5Gbps || IPv4 / IPv6 || **$45.68/Annually**
|}

== 系统参数硬件性能 ==
[[File:Magebox配置信息.png|thumb]]

== Tdog — IPv4 质量测试 ==
{| class="wikitable"
|+ tcp
|-
! CM !! CU !! CT
|-
|
[[File:1-1.webp|thumb]]
||
[[File:2-1.webp|thumb]]
||
[[File:31.webp|thumb]]
|}

== Connectivity ==
[[File:41.webp|thumb]]

== 去程路由 ==
{| class="wikitable"
|+ 去程路由
|-
! 区域 !! CM !! CU !! CT
|-
| 北京 ||
[[File:51.webp|thumb]]
||
[[File:61.webp|thumb]]
||
[[File:71.webp|thumb]]
|-
| 上海 ||
[[File:81.webp|thumb]]
||
[[File:91.webp|thumb]]
||
[[File:101.webp|thumb]]
|-
| 广东 ||
[[File:111.webp|thumb]]
||
[[File:121.webp|thumb]]
||
[[File:131.webp|thumb]]
|}

== 回程路由 ==
{| class="wikitable"
|+ 回程路由
|-
! 区域 !! 北京 !! 上海 !! 广东
|-
| IPv4 ||
[[File:141.webp|thumb]]
||
[[File:151.webp|thumb]]
||
[[File:16.webp|thumb]]
|}

== 国内三网延迟 ==
{| class="wikitable"
|+ 国内三网延迟
|-
|
[[File:17.webp|thumb]]
|}

== IP 质量 ==
{| class="wikitable"
|+ IP 质量
|-
|
[[File:18.webp|thumb]]
|}

== 流媒体解锁 ==
{| class="wikitable"
|+ 流媒体解锁
|-
|
[[File:19.webp|thumb]]
|}

== 全网请求时间 ==
{| class="wikitable"
|-
|
[[File:20.webp|thumb]]
||
[[File:21.webp|thumb]]
||
[[File:22.webp|thumb]]
|-
|
[[File:23.webp|thumb]]
||
[[File:24.webp|thumb]]
||
[[File:25.webp|thumb]]
|}

== 心跳线 ==
[[File:26.webp|thumb|center]]

== Speedtest ==
{| class="wikitable"
|-
| [[File:27.webp|thumb]] ||
[[File:28.webp|thumb]]
|}

== Speedtest（本地电信 100M · Reality） ==
{| class="wikitable"
|-
! 多线程 !! 标题文本
|-
|
[[File:29.webp|thumb]]
||
[[File:30.webp|thumb]]
|}

== Cloudflare（本地电信 100M · Reality） ==
{| class="wikitable"
|-
|
[[File:32.webp|thumb]]
|}

== Fast（本地电信 100M · Reality） ==
{| class="wikitable"
|-
|
[[File:33.webp|thumb]]
|}

== Fiber （本地电信 100M · Reality） ==
{| class="wikitable"
|-
|
[[File:34.webp|thumb]]
|}

== YouTube（本地电信 100M · Reality） ==
{| class="wikitable"
|-
| [[File:35.webp|thumb]] || [[File:36.webp|thumb]]
|}

User talk:Lusky0

2025-12-20T07:06:13Z

Lusky0：/* MageBox-Pro使用测评 */ 新章节

'''欢迎来到''md5.pw''！'''
我们希望您会作出更多更好的贡献。
您可能想先阅读一下[https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents 帮助页面]。
再次欢迎您，祝您愉快！ [[User:Liam|Liam]]（[[User talk:Liam|留言]]） 2025年12月3日 (三) 19:30 (PST)

== MageBox-Pro使用测评 ==

{| class="wikitable"
|+ 机器配置
|-
! VPS !! SKU !! CPU !! RAM !! SSD !! Traffic !! IP !! 价格
|-
| BandwagonHOST || NODESEEK-MEGABOX-PRO || 2C || 2G || 40G || 2T / 2.5Gbps || IPv4 / IPv6 || **$45.68/Annually**
|}

== 系统参数硬件性能 ==
[[File:Magebox配置信息.png|thumb]]

== Tdog — IPv4 质量测试 ==
{| class="wikitable"
|+ tcp
|-
! CM !! CU !! CT
|-
|
[[File:1-1.webp|thumb]]
||
[[File:2-1.webp|thumb]]
||
[[File:31.webp|thumb]]
|}

== Connectivity ==
[[File:41.webp|thumb]]

== 去程路由 ==
{| class="wikitable"
|+ 去程路由
|-
! 区域 !! CM !! CU !! CT
|-
| 北京 ||
[[File:51.webp|thumb]]
||
[[File:61.webp|thumb]]
||
[[File:71.webp|thumb]]
|-
| 上海 ||
[[File:81.webp|thumb]]
||
[[File:91.webp|thumb]]
||
[[File:101.webp|thumb]]
|-
| 广东 ||
[[File:111.webp|thumb]]
||
[[File:121.webp|thumb]]
||
[[File:131.webp|thumb]]
|}

== 回程路由 ==
{| class="wikitable"
|+ 回程路由
|-
! 区域 !! 北京 !! 上海 !! 广东
|-
| IPv4 ||
[[File:141.webp|thumb]]
||
[[File:151.webp|thumb]]
||
[[File:16.webp|thumb]]
|}

== 国内三网延迟 ==
{| class="wikitable"
|+ 国内三网延迟
|-
|
[[File:17.webp|thumb]]
|}

== IP 质量 ==
{| class="wikitable"
|+ IP 质量
|-
|
[[File:18.webp|thumb]]
|}

== 流媒体解锁 ==
{| class="wikitable"
|+ 流媒体解锁
|-
|
[[File:19.webp|thumb]]
|}

== 全网请求时间 ==
{| class="wikitable"
|-
|
[[File:20.webp|thumb]]
||
[[File:21.webp|thumb]]
||
[[File:22.webp|thumb]]
|-
|
[[File:23.webp|thumb]]
||
[[File:24.webp|thumb]]
||
[[File:25.webp|thumb]]
|}

== 心跳线 ==
[[File:26.webp|thumb|center]]

== Speedtest ==
{| class="wikitable"
|-
| [[File:27.webp|thumb]] ||
[[File:28.webp|thumb]]
|}

== Speedtest（本地电信 100M · Reality） ==
{| class="wikitable"
|-
! 多线程 !! 标题文本
|-
|
[[File:29.webp|thumb]]
||
[[File:30.webp|thumb]]
|}

== Cloudflare（本地电信 100M · Reality） ==
{| class="wikitable"
|-
|
[[File:32.webp|thumb]]
|}

== Fast（本地电信 100M · Reality） ==
{| class="wikitable"
|-
|
[[File:33.webp|thumb]]
|}

== Fiber （本地电信 100M · Reality） ==
{| class="wikitable"
|-
|
[[File:34.webp|thumb]]
|}

== YouTube（本地电信 100M · Reality） ==
{| class="wikitable"
|-
| [[File:35.webp|thumb]] || [[File:36.webp|thumb]]
|}

File:36.webp

2025-12-20T06:58:04Z

Lusky0：

File:35.webp

2025-12-20T06:57:40Z

Lusky0：

File:34.webp

2025-12-20T06:55:42Z

Lusky0：

File:33.webp

2025-12-20T06:54:41Z

Lusky0：

File:32.webp

2025-12-20T06:53:53Z

Lusky0：

File:30.webp

2025-12-20T06:52:25Z

Lusky0：

File:29.webp

2025-12-20T06:51:55Z

Lusky0：

File:28.webp

2025-12-20T06:49:40Z

Lusky0：

File:27.webp

2025-12-20T06:48:02Z

Lusky0：

File:26.webp

2025-12-20T06:45:22Z

Lusky0：

File:25.webp

2025-12-20T06:43:56Z

Lusky0：

File:24.webp

2025-12-20T06:43:31Z

Lusky0：

File:23.webp

2025-12-20T06:43:00Z

Lusky0：

File:22.webp

2025-12-20T06:42:31Z

Lusky0：

File:21.webp

2025-12-20T06:42:01Z

Lusky0：

File:20.webp

2025-12-20T06:41:31Z

Lusky0：

File:19.webp

2025-12-20T06:37:27Z

Lusky0：

File:18.webp

2025-12-20T06:36:27Z

Lusky0：

File:17.webp

2025-12-20T06:34:49Z

Lusky0：

File:16.webp

2025-12-20T06:32:50Z

Lusky0：

File:151.webp

2025-12-20T06:31:43Z

Lusky0：

151

File:141.webp

2025-12-20T06:23:54Z

Lusky0：

141

File:131.webp

2025-12-20T06:21:34Z

Lusky0：

131

File:121.webp

2025-12-20T06:21:00Z

Lusky0：

121

File:111.webp

2025-12-20T06:20:31Z

Lusky0：

111

File:101.webp

2025-12-20T06:19:58Z

Lusky0：

101

File:91.webp

2025-12-20T06:19:26Z

Lusky0：

File:81.webp

2025-12-20T06:18:55Z

Lusky0：

File:71.webp

2025-12-20T06:18:18Z

Lusky0：

File:61.webp

2025-12-20T06:17:48Z

Lusky0：

File:51.webp

2025-12-20T06:16:32Z

Lusky0：

File:41.webp

2025-12-20T06:13:21Z

Lusky0：

File:31.webp

2025-12-20T06:11:33Z

Lusky0：

File:2-1.webp

2025-12-20T06:10:57Z

Lusky0：

File:1-1.webp

2025-12-20T06:09:55Z

Lusky0：

File:Magebox配置信息.png

2025-12-20T06:05:15Z

Lusky0：

magebox配置信息

File:瓦工特价配置.jpg

2025-12-05T14:54:57Z

Lusky0：

mageboxpro清单