Note1
周三 2月 25 2026
1084 字 · 7 分钟
未分配分类 未分配标签
Docker常用命令
1.编辑docker-compose.yml
vim docker-compose.yml2.运行docker-compose.yml
docker compose up -dDocker项目
❶Nav
version: '3'
services:
nav-item:
image: eooce/nav-item
container_name: nav-item
ports:
- "3000:3000"
environment:
- PORT=3000
- ADMIN_USERNAME=admin
- ADMIN_PASSWORD=123456
volumes:
- ./database:/app/database
restart: unless-stopped❷StackEdit
version: "3.7"
services:
stackedit:
image: mafgwo/stackedit
container_name: stackedit
environment:
- LISTENING_PORT=8080
- DEBUG_FLAG=false
- DROPBOX_APP_KEY=
- DROPBOX_APP_KEY_FULL=
- GITHUB_CLIENT_ID=
- GITHUB_CLIENT_SECRET=
- GITEE_CLIENT_ID=be63650f13e7223c7091d71bdf51a10588b7b9a75fc4bdb22002c89cae85cb93
- GITEE_CLIENT_SECRET=1e87bcad48c613a32409e578fcab29a90255c4636d182bedf97e81e7667f3b35
- GOOGLE_CLIENT_ID=
- GOOGLE_API_KEY=
- GITEA_CLIENT_ID=
- GITEA_CLIENT_SECRET=
- GITEA_URL=
- GITLAB_CLIENT_ID=
- GITLAB_CLIENT_SECRET=
ports:
- 8080:8080/tcp
network_mode: bridge
restart: always❸Opengist
services:
opengist:
image: thomiceli/opengist:latest
container_name: opengist
ports:
- 6157:6157
- 2222:2222
volumes:
- /vol1/1000/docker/opengist:/opengist
restart: unless-stopped❹Cloudpaste
version: "3.8"
services:
frontend:
# context: .
# dockerfile: docker/frontend/Dockerfile
# args:
# - VITE_BACKEND_URL= #构建时可以为空,因为会由entrypoint.sh覆盖
image: dragon730/cloudpaste-frontend:latest
environment:
- BACKEND_URL=https://xxx.com # 填写后端服务地址,通过nginx反向代理控制即可。#运行时环境变量,将被entrypoint.sh使用
ports:
- "8080:80" #"127.0.0.1:8080:80"
depends_on:
- backend # 依赖backend服务,后端服务启动后,前端服务才能启动
networks:
- cloudpaste-network
restart: unless-stopped
backend:
# build:
# context: .
# dockerfile: docker/backend/Dockerfile
image: dragon730/cloudpaste-backend:latest
environment:
- NODE_ENV=production # 生产环境模式
- PORT=8787 # 应用监听端口
# 重要: 请修改为您自己的安全密钥,用于加密数据
- ENCRYPTION_SECRET=default-encryption-key
# 管理员Token过期天数,默认7天
- ADMIN_TOKEN_EXPIRY_DAYS=7
# 任务并发数 (默认 2)
- TASK_WORKER_POOL_SIZE=2
# 调试驱动缓存 (默认 false)
#- DEBUG_DRIVER_CACHE=false
volumes:
- ./sql_data:/data # 将当前目录下的sql_data映射到容器的/data目录
ports:
- "8787:8787" #"127.0.0.1:8787:8787"
networks:
- cloudpaste-network
restart: unless-stopped # 容器异常退出时自动重启
networks:
cloudpaste-network:
driver: bridge上网插件
3-XUI
1.面板安装
bash <(curl -Ls https://raw.githubusercontent.com/xeefei/3x-ui/master/install.sh)bash <(curl -Ls https://raw.githubusercontent.com/lifevibe/3x-ui/master/install.sh)- 如果要申请安装证书并每3个月【自动续签】证书,请确保80和443端口是放行打开的
2.面板设置
1、已经安装证书的【路径】,位置在:/root/.acme.sh/(域名)_ecc; 2、进入后台【面板设置】—–>【常规】中,去分别填入刚才已经记录的证书公钥、私钥路径; 3、点击左上角的【保存】和【重启面板】,即可用自己域名进行登录管理。 4、再次登录面板:域名:端口/路径
- PS:若你在正确完成了上述步骤之后,你没有安装证书的情况下,去用IP+端口号/路径的方式却不能访问面板,那请检查一下是不是你的浏览器自动默认开启了https模式,需要手动调整一下改成http方式,把“s”去掉,即可访问成功。
3.入站规则
点击左边【入站列表】,然后【添加入站】,传输方式保持【TCP】不变,尽量选择主流的vless+reality+vision协议组合,在创建reality协议过程中,至于其他诸如:PROXY Protocol,HTTP 伪装,TPROXY,External Proxy等等选项,若无特殊要求,保持默认设置即可,不用去动它们,其他:流量限制,到期时间,客户TG的ID等选项根据自己需求填写
- PS:一定要放行端口之后,确保端口能够ping通,再导入软件节点配置及功能方面
Hysteria2
1.系统组件升级至最新:
apt update -y && apt install -y curl && apt install -y socat2.Hysteria 2 一键安装脚本
wget -N --no-check-certificate https://raw.githubusercontent.com/flame1ce/hysteria2-install/main/hysteria2-install-main/hy2/hysteria.sh && bash hysteria.sh3.查看 hysteria 服务 状态
systemctl status hysteria-server.service4.启动 hysteria 服务
systemctl start hysteria-server.service5.设置 hysteria 服务 开机自启
systemctl enable hysteria-server.service6.其他常用命令
1.停止 hysteria 服务
systemctl stop hysteria-server.service2.重启 hysteria 服务
systemctl restart hysteria-server.serviceLinux常用命令
❶一键安装依赖
1.Debian/Ubuntu系统
apt update -y&&apt install -y curl&&apt install -y socat2.CentOS系统
yum update -y&&yum install -y curl&&yum install -y socat ❷UFW防火墙
1.一键放行22端口
apt install ufw && ufw allow 22/tcp && ufw enable2.删除放行80端口
sudo ufw delete allow 80/tcp3.查看和删除编号端口
查看放行端口[不带编号]
sudo ufw status verbose查看放行端口[带编号]
sudo ufw status numbered删除编号1的端口
sudo ufw delete 1❸创建和删除文件
mkdir /mnt/data_vdb1rm /mnt/data_vdb1❹查找文件和文件夹
sudo find / -type d -name "aria2"sudo find / -type f -iname "aria2.conf" 2>/dev/nullFn飞牛
开启iommu
sudo -inano /etc/default/grub #GRUB_CMDLINE_LINUX_DEFAULT="quiet i915.force_probe=7d55 intel_iommu=on iommu=pt"
如果是amd处理器的话,将intel改成amd;修改完成以后,ctrl+s保存,ctrl+x退出即可cd /lib/firmware/rtl_nic/
sudo wget https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tree/rtl_nic/rtl8126a-2.fwcd /lib/firmware/rtl_nic/
sudo wget https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tree/rtl_nic/rtl8126a-3.fwcd /lib/firmware/i915/
sudo wget https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tree/i915/bmg_dmc.bincd /lib/firmware/i915/
sudo wget https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tree/i915/xe2lpd_dmc.binecho -e "vfio\nvfio_iommu_type1\nvfio_pci\nvfio_virqfd" >> /etc/modules
update-grubupdate-initramfs -u -k all查杀飞牛近期木马
curl -L https://static2.fnnas.com/aptfix/trim-sec -o trim-sec && chmod +x trim-sec && ./trim-seciStoreOS
1.修改端口号
cd /etc/config/vim uhttpdps:按:wq!reboot重启生效
2.安装docker compose
opkg updateopkg install docker-compose3.解决opkg不能安装的问题
vim /etc/opkg.conf #注释或删掉 /etc/opkg.conf 中的 option check_signature vim /etc/opkg/compatfeeds.conf #后面加src/gz openwrt_dllkids https://op.dllkids.xyz/packages/x86_64/opkg updateopkg install luci-app-xxx软件库
https://op.dllkids.xyz/packages/x86_64/
https://dl.openwrt.ai/packages-23.05/x86_64/1Panel_V1
1.1Panel-Debian_v1
curl -sSL https://resource.fit2cloud.com/1panel/package/quick_start.sh -o quick_start.sh && bash quick_start.sh2.1Panel-ubuntu_v1
curl -sSL https://resource.fit2cloud.com/1panel/package/quick_start.sh -o quick_start.sh && sudo bash quick_start.sh3.常用命令
1pctl user-info1pctl update passwordgiscus
<script src="https://giscus.app/client.js"
data-repo="lifevibe/giscus"
data-repo-id="R_kgDORKfqhg"
data-category="Announcements"
data-category-id="DIC_kwDORKfqhs4C1_gj"
data-mapping="pathname"
data-strict="0"
data-reactions-enabled="1"
data-emit-metadata="0"
data-input-position="top"
data-theme="catppuccin_frappe"
data-lang="zh-CN"
data-loading="lazy"
crossorigin="anonymous"
async>
</script> Thanks for reading!

Comments