修改打印,修改acme安装缺少组件,新增web和nginx
This commit is contained in:
parent
1dc291725b
commit
71444c16ec
@ -1,5 +1,6 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
declare lang
|
declare lang
|
||||||
|
echo "========$(basename $0 .sh)========"
|
||||||
echo "1.中文"
|
echo "1.中文"
|
||||||
echo "2.英文"
|
echo "2.英文"
|
||||||
read -p "请输入:" lang
|
read -p "请输入:" lang
|
||||||
|
@ -1,6 +1,7 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
declare pick
|
declare pick
|
||||||
declare server
|
declare server
|
||||||
|
echo "========$(basename $0 .sh)========"
|
||||||
echo "请选择下载服务器"
|
echo "请选择下载服务器"
|
||||||
echo "1.国内服务器"
|
echo "1.国内服务器"
|
||||||
echo "2.国外服务器(默认)"
|
echo "2.国外服务器(默认)"
|
||||||
|
@ -1,10 +1,9 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
echo "========key========"
|
echo "========$(basename $0 .sh)========"
|
||||||
echo "1.生成密钥"
|
echo "1.生成密钥"
|
||||||
echo "2.安装密钥"
|
echo "2.安装密钥"
|
||||||
echo "输入其他返回主页"
|
echo "输入其他返回主页"
|
||||||
declare pick
|
declare pick
|
||||||
echo "========key========"
|
|
||||||
read -p "请输入要选择的命令:" pick
|
read -p "请输入要选择的命令:" pick
|
||||||
|
|
||||||
function open_key() {
|
function open_key() {
|
||||||
|
@ -1,10 +1,9 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
declare pick
|
declare pick
|
||||||
echo "========ssh========"
|
echo "========$(basename $0 .sh)========"
|
||||||
echo "1.更换ssh端口"
|
echo "1.更换ssh端口"
|
||||||
echo "2.修改ssh登录方式"
|
echo "2.修改ssh登录方式"
|
||||||
echo "任意输入返回主菜单"
|
echo "任意输入返回主菜单"
|
||||||
echo "========ssh========"
|
|
||||||
read -p "请输入要使用的功能:" pick
|
read -p "请输入要使用的功能:" pick
|
||||||
|
|
||||||
case $pick in
|
case $pick in
|
||||||
|
@ -1,13 +1,12 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
|
||||||
declare pick
|
declare pick
|
||||||
echo "========user========"
|
echo "========$(basename $0 .sh)========"
|
||||||
echo "1.新建用户"
|
echo "1.新建用户"
|
||||||
echo "2.查看所有用户"
|
echo "2.查看所有用户"
|
||||||
echo "3.删除用户"
|
echo "3.删除用户"
|
||||||
echo "4.修改用户密码"
|
echo "4.修改用户密码"
|
||||||
echo "任意输入返回主菜单"
|
echo "任意输入返回主菜单"
|
||||||
echo "========user========"
|
|
||||||
read -p "请输入要使用的功能:" pick
|
read -p "请输入要使用的功能:" pick
|
||||||
|
|
||||||
case $pick in
|
case $pick in
|
||||||
@ -86,18 +85,18 @@ case $pick in
|
|||||||
'4')
|
'4')
|
||||||
declare password
|
declare password
|
||||||
declare user_name
|
declare user_name
|
||||||
read -p "请输入需要修改密码的用户" user_name
|
read -p "请输入需要修改密码的用户:" user_name
|
||||||
if ! id $user_name;then
|
if ! id $user_name &> /dev/null;then
|
||||||
echo "系统内没有该用户"
|
echo "系统内没有该用户"
|
||||||
exit
|
exit
|
||||||
fi
|
fi
|
||||||
read -p "请输入${user_name}密码:" password
|
read -p "请输入${user_name}需要修改的密码:" password
|
||||||
echo "${user_name}:${password}" |chpasswd
|
echo "${user_name}:${password}" |chpasswd
|
||||||
if [[ ${user_name} == "root" ]]; then
|
if [[ ${user_name} == "root" ]]; then
|
||||||
sed -i 's/^#\?PermitRootLogin.*/PermitRootLogin yes/g' /etc/ssh/sshd_config
|
sed -i 's/^#\?PermitRootLogin.*/PermitRootLogin yes/g' /etc/ssh/sshd_config
|
||||||
fi
|
fi
|
||||||
sed -i 's/^#\?PasswordAuthentication.*/PasswordAuthentication yes/g' /etc/ssh/sshd_config
|
sed -i 's/^#\?PasswordAuthentication.*/PasswordAuthentication yes/g' /etc/ssh/sshd_config
|
||||||
systemctl restart sshd.service
|
systemctl restart sshd.service
|
||||||
echo "修改成功,用户${user_name}密码为:${password}"
|
echo "修改成功,用户${user_name}的密码为:${password}"
|
||||||
;;
|
;;
|
||||||
esac
|
esac
|
@ -1,5 +1,21 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
|
||||||
|
if ! command -v socat &> /dev/null; then
|
||||||
|
if [[ -f "/usr/bin/apt-get" ]];then
|
||||||
|
apt-get update -y
|
||||||
|
apt-get install socat -y
|
||||||
|
elif [[ -f "/usr/bin/apt" ]];then
|
||||||
|
apt update -y
|
||||||
|
apt install socat -y
|
||||||
|
elif [[ -f "/usr/bin/pacman" ]];then
|
||||||
|
pacman -Syu --noconfirm
|
||||||
|
pacman -Sy --noconfirm socat
|
||||||
|
else
|
||||||
|
echo "socat未安装"
|
||||||
|
exit
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
if [[ ! -f "${HOME}/.acme.sh/acme.sh" ]];then
|
if [[ ! -f "${HOME}/.acme.sh/acme.sh" ]];then
|
||||||
rm -rf ${HOME}/.acme.sh
|
rm -rf ${HOME}/.acme.sh
|
||||||
declare mail
|
declare mail
|
||||||
@ -38,13 +54,20 @@ read -p "请选择验证模式:" pick_mode
|
|||||||
|
|
||||||
case $pick_mode in
|
case $pick_mode in
|
||||||
'1')
|
'1')
|
||||||
declare pick_start
|
declare mode
|
||||||
|
if ! command -v nginx &> /dev/null; then
|
||||||
|
mode="nginx"
|
||||||
|
elif ! command -v apache &> /dev/null; then
|
||||||
|
mode="apache"
|
||||||
|
else
|
||||||
|
mode="standalone"
|
||||||
|
fi
|
||||||
echo "请到服务器将80和443端口开启,将域名解析到本机"
|
echo "请到服务器将80和443端口开启,将域名解析到本机"
|
||||||
read -p "解析完成请输入 y:" pick_start
|
read -p "解析完成请输入 y:" pick_start
|
||||||
if [[ ! $pick_start =~ [Yy] ]];then
|
if [[ ! $pick_start =~ [Yy] ]];then
|
||||||
exit
|
exit
|
||||||
fi
|
fi
|
||||||
eval "${HOME}/.acme.sh/acme.sh --issue $domain_str --standalone"
|
eval "${HOME}/.acme.sh/acme.sh --issue ${domain_str} --${mode}"
|
||||||
;;
|
;;
|
||||||
'2')
|
'2')
|
||||||
declare pick=0
|
declare pick=0
|
200
Config/Web/nginx.sh
Normal file
200
Config/Web/nginx.sh
Normal file
@ -0,0 +1,200 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
if ! command -v nginx &> /dev/null; then
|
||||||
|
if [[ -f "/usr/bin/apt-get" ]];then
|
||||||
|
apt-get update -y
|
||||||
|
apt-get install nginx -y
|
||||||
|
elif [[ -f "/usr/bin/apt" ]];then
|
||||||
|
apt update -y
|
||||||
|
apt install nginx -y
|
||||||
|
elif [[ -f "/usr/bin/pacman" ]];then
|
||||||
|
pacman -Syu --noconfirm
|
||||||
|
pacman -Sy --noconfirm nginx
|
||||||
|
else
|
||||||
|
echo "nginx未安装"
|
||||||
|
exit
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
declare pick
|
||||||
|
echo "========$(basename $0 .sh)========"
|
||||||
|
echo "1.新增站点配置文件"
|
||||||
|
echo "2.查看已有站点配置文件"
|
||||||
|
echo "3.删除站点配置文件"
|
||||||
|
read -p "请选择:" pick
|
||||||
|
case $pcik in
|
||||||
|
'1')
|
||||||
|
declare domain
|
||||||
|
read -p "请输入要绑定的域名多个用 空格 隔开:" domain
|
||||||
|
|
||||||
|
declare ssl_certificate
|
||||||
|
declare ssl_certificate_key
|
||||||
|
declare ssl_domain=${echo "${domain}" | awk '{print $1}'}
|
||||||
|
|
||||||
|
declare ssl_pick=""
|
||||||
|
echo "ssl证书地址"
|
||||||
|
echo "1.立即申请(默认)"
|
||||||
|
echo "2.手动输入"
|
||||||
|
read -p "请选择" pick
|
||||||
|
if [[ $pick == 2 ]]; then
|
||||||
|
echo "证书,默认 ${HOME}/.acme.sh/${ssl_domain}_ecc/fullchain.cer"
|
||||||
|
read -p "请输入证书地址:" ssl_certificate
|
||||||
|
if [[ -z $ssl_certificate ]];then
|
||||||
|
ssl_certificate="${HOME}/.acme.sh/${ssl_domain}_ecc/fullchain.cer"
|
||||||
|
fi
|
||||||
|
echo "密钥,默认 ${HOME}/.acme.sh/${ssl_domain}_ecc/${ssl_domain}.key"
|
||||||
|
|
||||||
|
read -p "请输入密钥地址:" ssl_certificate_key
|
||||||
|
if [[ -z $ssl_certificate_key ]];then
|
||||||
|
ssl_certificate_key="${HOME}/.acme.sh/${ssl_domain}_ecc/${ssl_domain}.key"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
declare
|
||||||
|
echo "1.acme(默认)"
|
||||||
|
read -p "请输入:" ssl_pick
|
||||||
|
if [[ -z $ssl_pick || $ssl_pick == 1 ]];then
|
||||||
|
ssl_pick=1
|
||||||
|
ssl_certificate="${HOME}/.acme.sh/${ssl_domain}_ecc/fullchain.cer"
|
||||||
|
ssl_certificate_key="${HOME}/.acme.sh/${ssl_domain}_ecc/${ssl_domain}.key"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
declare name
|
||||||
|
read -p "请输入配置文件名,默认为网址:" name
|
||||||
|
if [[ -z $name ]]; then
|
||||||
|
name=$ssl_domain
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "工作方式"
|
||||||
|
echo "1.反向代理(默认)"
|
||||||
|
echo "2.静态文件"
|
||||||
|
read -p "请选择:" pick
|
||||||
|
declare path
|
||||||
|
declare mode_pick
|
||||||
|
if [[ $pick == 2 ]]; then
|
||||||
|
read -p "请输入要代理的站点路径,如果只输入数字代表端口:" path
|
||||||
|
if [[ $path =~ [0-9]+ ]]; then
|
||||||
|
path="http://127.0.0.1:${path}"
|
||||||
|
fi
|
||||||
|
cat >> "/etc/nginx/sites-available/${name}.conf" << EOF
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2; # 监听 443 端口,并启用 HTTP/2
|
||||||
|
server_name ${domain}; # 替换为你的域名
|
||||||
|
|
||||||
|
# SSL 证书配置
|
||||||
|
ssl_certificate ${ssl_certificate}; # 证书文件路径
|
||||||
|
ssl_certificate_key ${ssl_certificate_key}; # 证书密钥文件路径
|
||||||
|
ssl_protocols TLSv1.2 TLSv1.3; # 使用安全的 TLS 协议版本
|
||||||
|
ssl_ciphers HIGH:!aNULL:!MD5; # 安全密码套件
|
||||||
|
ssl_prefer_server_ciphers on;
|
||||||
|
|
||||||
|
# 启用 SSL session 缓存和超时设置
|
||||||
|
ssl_session_cache shared:SSL:10m;
|
||||||
|
ssl_session_timeout 10m;
|
||||||
|
|
||||||
|
# 强制使用 HTTPS (HSTS)
|
||||||
|
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
||||||
|
|
||||||
|
# 日志设置
|
||||||
|
access_log /var/log/nginx/example.com_access.log;
|
||||||
|
error_log /var/log/nginx/example.com_error.log;
|
||||||
|
|
||||||
|
# 反向代理到后台应用
|
||||||
|
location / {
|
||||||
|
proxy_pass ${path}; # 反向代理到后端应用服务器
|
||||||
|
proxy_set_header Host \$host; # 保持原始主机头
|
||||||
|
proxy_set_header X-Real-IP \$remote_addr; # 传递客户端的真实 IP
|
||||||
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; # 传递代理链中的 IP
|
||||||
|
proxy_set_header X-Forwarded-Proto \$scheme; # 传递协议(HTTP 或 HTTPS)
|
||||||
|
|
||||||
|
# 防止后端服务器返回不安全的内容
|
||||||
|
proxy_redirect off;
|
||||||
|
|
||||||
|
# 超时时间配置
|
||||||
|
proxy_connect_timeout 60s;
|
||||||
|
proxy_send_timeout 60s;
|
||||||
|
proxy_read_timeout 60s;
|
||||||
|
send_timeout 60s;
|
||||||
|
}
|
||||||
|
|
||||||
|
# 错误页面配置
|
||||||
|
error_page 502 /502.html;
|
||||||
|
location = /502.html {
|
||||||
|
root /usr/share/nginx/html; # 错误页面路径
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
# HTTP 到 HTTPS 重定向
|
||||||
|
server {
|
||||||
|
listen 80; # 监听 HTTP 80 端口
|
||||||
|
server_name ${domain}; # 替换为你的域名
|
||||||
|
|
||||||
|
# 将所有 HTTP 请求重定向到 HTTPS
|
||||||
|
return 301 https://\$host\$request_uri;
|
||||||
|
}
|
||||||
|
EOF
|
||||||
|
else
|
||||||
|
read -p "请输入后端服务器的地址" path
|
||||||
|
cat >> "/etc/nginx/sites-available/${name}.conf" << EOF
|
||||||
|
server {
|
||||||
|
listen 443 ssl; # 监听 443 端口并启用 SSL
|
||||||
|
server_name ${domain}; # 替换为你的域名
|
||||||
|
|
||||||
|
# SSL 证书配置
|
||||||
|
ssl_certificate ${ssl_certificate}; # 证书文件路径
|
||||||
|
ssl_certificate_key ${ssl_certificate_key}; # 证书密钥文件路径
|
||||||
|
ssl_protocols TLSv1.2 TLSv1.3; # 仅使用安全的 TLS 协议版本
|
||||||
|
ssl_ciphers HIGH:!aNULL:!MD5; # 安全的密码套件
|
||||||
|
ssl_prefer_server_ciphers on; # 优先使用服务器的密码套件
|
||||||
|
ssl_session_cache shared:SSL:10m;
|
||||||
|
ssl_session_timeout 10m;
|
||||||
|
|
||||||
|
# HTTP/2 支持(可选)
|
||||||
|
listen 443 ssl http2;
|
||||||
|
|
||||||
|
# HSTS(HTTP 严格传输安全)强制浏览器使用 HTTPS
|
||||||
|
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
||||||
|
|
||||||
|
# 静态文件目录
|
||||||
|
root ${path};
|
||||||
|
index index.html index.htm;
|
||||||
|
|
||||||
|
# 日志
|
||||||
|
access_log /var/log/nginx/example.com_access.log;
|
||||||
|
error_log /var/log/nginx/example.com_error.log;
|
||||||
|
|
||||||
|
# 默认处理
|
||||||
|
location / {
|
||||||
|
try_files \$uri \$uri/ =404;
|
||||||
|
}
|
||||||
|
|
||||||
|
# 防止访问隐藏文件(如 .git)
|
||||||
|
location ~ /\. {
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
|
||||||
|
# 错误页面配置
|
||||||
|
error_page 404 /404.html;
|
||||||
|
location = /404.html {
|
||||||
|
root /var/www/example.com/html;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
# HTTP 到 HTTPS 重定向
|
||||||
|
server {
|
||||||
|
listen 80; # 监听 80 端口
|
||||||
|
server_name ${domain};
|
||||||
|
|
||||||
|
# 将所有 HTTP 请求重定向到 HTTPS
|
||||||
|
return 301 https://\$host\$request_uri;
|
||||||
|
}
|
||||||
|
EOF
|
||||||
|
fi
|
||||||
|
case $ssl_pick in
|
||||||
|
1)
|
||||||
|
./acme
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
nginx -s reload
|
||||||
|
echo "配置成功"
|
||||||
|
;;
|
||||||
|
esac
|
@ -11,7 +11,7 @@ declare pick_array
|
|||||||
declare pick_number=6
|
declare pick_number=6
|
||||||
declare pick
|
declare pick
|
||||||
|
|
||||||
echo "========Docker========"
|
echo "========$(basename $0 .sh)========"
|
||||||
echo "1.换源"
|
echo "1.换源"
|
||||||
echo "2.清除所有未使用镜像"
|
echo "2.清除所有未使用镜像"
|
||||||
echo "-----一键搭建软件-----"
|
echo "-----一键搭建软件-----"
|
||||||
@ -22,7 +22,6 @@ for i in "${path_script}/Config/${file_name}"/*;do
|
|||||||
done
|
done
|
||||||
echo "-----一键搭建软件-----"
|
echo "-----一键搭建软件-----"
|
||||||
echo "任意输入返回主菜单"
|
echo "任意输入返回主菜单"
|
||||||
echo "========Docker========"
|
|
||||||
read -p "请输入要使用的功能:" pick
|
read -p "请输入要使用的功能:" pick
|
||||||
|
|
||||||
clear
|
clear
|
||||||
@ -42,9 +41,9 @@ if [[ $pick == '1' ]];then
|
|||||||
read -p "请输入要选择的镜像,也可直接输入镜像网站:" img_pick
|
read -p "请输入要选择的镜像,也可直接输入镜像网站:" img_pick
|
||||||
if [[ -z $img_pick ]];then
|
if [[ -z $img_pick ]];then
|
||||||
declare url='https://docker.m.daocloud.io'
|
declare url='https://docker.m.daocloud.io'
|
||||||
elif [[ $img_pick =~ ^[http] ]];then
|
elif [[ $img_pick =~ [\w\.]+ ]];then
|
||||||
declare url=$img_pick
|
declare url=$img_pick
|
||||||
elif [[ ${img_pick} -le 0 || ${img_pick} -ge ${!img_dick[*]} ]];then
|
elif [[ ${img_pick} =~ [1-${!img_dick[*]}] ]];then
|
||||||
img_pick=${img_number[$img_pick]}
|
img_pick=${img_number[$img_pick]}
|
||||||
declare url=${img_dick[$img_pick]}
|
declare url=${img_dick[$img_pick]}
|
||||||
else
|
else
|
||||||
@ -52,13 +51,13 @@ if [[ $pick == '1' ]];then
|
|||||||
exit
|
exit
|
||||||
fi
|
fi
|
||||||
echo "{\"registry-mirrors\": [\"${url}\"]}" > "/etc/docker/daemon.json"
|
echo "{\"registry-mirrors\": [\"${url}\"]}" > "/etc/docker/daemon.json"
|
||||||
systemctl restart docker 2>> /dev/null|| echo "docker 重启失败"
|
systemctl restart docker 2>> /dev/null|| echo "docker 重启失败"&&exit
|
||||||
echo "换源成功"
|
echo "换源成功"
|
||||||
|
|
||||||
elif [[ $pick == '2' ]];then
|
elif [[ $pick == '2' ]];then
|
||||||
docker system prune -af
|
docker system prune -af
|
||||||
echo "清理完成"
|
echo "清理完成"
|
||||||
elif [[ "${pick}" -gt "$((${pick_number}-${#pick_array[*]}))" && "${pick}" -le "${pick_number}" ]];then
|
elif [[ "${pick}" =~ [${pick_number}-${#pick_array[*]}] ]];then
|
||||||
declare file_path
|
declare file_path
|
||||||
read -p "请输入软件储存位置,默认 /var/www/${pick_array[${pick}]} :" file_path
|
read -p "请输入软件储存位置,默认 /var/www/${pick_array[${pick}]} :" file_path
|
||||||
if [[ -z ${file_path} ]];then
|
if [[ -z ${file_path} ]];then
|
||||||
|
21
Menus/Web.sh
Normal file
21
Menus/Web.sh
Normal file
@ -0,0 +1,21 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
declare path_script=$1
|
||||||
|
declare file_name=$(basename $0 .sh)
|
||||||
|
|
||||||
|
declare print_array
|
||||||
|
declare print_number=0
|
||||||
|
declare pick
|
||||||
|
|
||||||
|
echo "========Web========"
|
||||||
|
for i in "${path_script}/Config/${file_name}"/*;do
|
||||||
|
print_number=$((print_number + 1))
|
||||||
|
print_array[$print_number]=$(awk -F '.' '{print $1}' <<< "$(basename $i)")
|
||||||
|
echo "${print_number}.${print_array[$print_number]}"
|
||||||
|
done
|
||||||
|
echo "========Web========"
|
||||||
|
read -p "请输入要使用的功能:" pick
|
||||||
|
|
||||||
|
if [[ "${pick}" =~ [1-${#print_array[*]}] ]];then
|
||||||
|
bash "${path_script}/Config/${file_name}/${print_array[${pick}]}.sh"
|
||||||
|
fi
|
Loading…
Reference in New Issue
Block a user