分类: 未分类

  • macos命令行配置网卡

    • 后面的3个IP地址分别是网卡IP地址,子网掩码,网关IP地址
      networksetup -setmanual "USB 10/100/1000 LAN" 192.168.1.100 255.255.255.0 192.168.1.1
    • 配置网卡DNS服务器
      networksetup -setdnsservers "USB 10/100/1000 LAN" 192.168.1.1
    • 清除网卡DNS服务器
      networksetup -setdnsservers "USB 10/100/1000 LAN" empty

    Views: 16

  • 安装Collabora Online并与nextcloud集成

    1. 安装Collabora Online
    cd /usr/share/keyrings
    sudo wget https://collaboraoffice.com/downloads/gpg/collaboraonline-release-keyring.gpg
    cd /usr/share/keyrings
    sudo wget https://collaboraoffice.com/downloads/gpg/collaboraonline-release-keyring.gpg
    

    编辑/etc/apt/sources.list.d/collaboraonline.sources,添加如下内容:

    Types: deb
    URIs: https://www.collaboraoffice.com/repos/CollaboraOnline/CODE-deb
    Suites: ./
    Signed-By: /usr/share/keyrings/collaboraonline-release-keyring.gpg

    sudo apt update && sudo apt install coolwsd code-brand
    sudo systemctl restart coolwsd
    2. 申请证书
    
    我是使用acme.sh申请证书的,过程略
    
    3. 配置collwsd
    
    在/etc/coolwsd/coolwsd.xml中添加
    >        <remote_font_config>
                    <url>https://pan.hetao.me/apps/richdocuments/settings/fonts.json</url>
            </remote_font_config>
    
    ```shell
    ln -s /opt/certs/hetao.me/hetao.me.key key.pem
    ln -s /opt/certs/hetao.me/hetao.me.cer cert.pem
    ln -s /opt/certs/hetao.me/fullchain.cer ca-chain.cert.pem
    coolconfig set ssl.enable true
    coolconfig set ssl.termination false
    sudo systemctl restart coolwsd
    
    1. 配置nextcloud

    首先安装Nextcloud Office扩展
    然后

    1. 使用效果

    Views: 97

  • 安装ONLYOFFICE Docs Community Edition并与next cloud集成

    ONLYOFFICE Docs是onlyoffice的server端,可以通过onlyoffice api和WOPI两种方式与客户端连接。
    下面是onlyoffice docs的安装:

    1. 安装onlyoffice docs
    sudo add-apt-repository ppa:5-sergey/nginx-quic
    sudo apt update
    sudo apt-get install postgresql
    sudo -i -u postgres psql -c "CREATE USER onlyoffice WITH PASSWORD 'onlyoffice';"
    sudo -i -u postgres psql -c "CREATE DATABASE onlyoffice OWNER onlyoffice;"
    sudo apt-get install rabbitmq-server
    sudo apt-get install nginx-extras
    mkdir -p -m 700 ~/.gnupg
    curl -fsSL https://download.onlyoffice.com/GPG-KEY-ONLYOFFICE | gpg --no-default-keyring --keyring gnupg-ring:/tmp/onlyoffice.gpg --import
    chmod 644 /tmp/onlyoffice.gpg
    sudo chown root:root /tmp/onlyoffice.gpg
    sudo mv /tmp/onlyoffice.gpg /usr/share/keyrings/onlyoffice.gpg
    echo "deb [signed-by=/usr/share/keyrings/onlyoffice.gpg] https://download.onlyoffice.com/repo/debian squeeze main" | sudo tee /etc/apt/sources.list.d/onlyoffice.list
    sudo apt-get update
    sudo apt-get install ttf-mscorefonts-installer
    sudo apt-get install onlyoffice-documentserver
    

    参考:
    https://helpcenter.onlyoffice.com/installation/docs-community-install-ubuntu.aspx?_ga=2.121380878.782359554.1594636128-1157782750.1587541027
    https://github.com/ONLYOFFICE/onlyoffice-nextcloud

    1. 申请证书

    我这里是用acme.sh申请的,过程略

    1. 配置nginx

    编辑/etc/nginx/conf.d/ds.conf

    include /etc/nginx/includes/http-common.conf;
    server {
      listen 0.0.0.0:80;
      listen [::]:80 default_server;
      server_tokens on;
    
      set secure_link_secret 123456;
      include /etc/nginx/includes/ds-*.conf;
    }
    server {
        listen 443 quic reuseport;
        listen       443 ssl;
        listen [::]:443 quic reuseport;
        listen       [::]:443 ssl;
        http2 on;
        http3 on;
        quic_retry on;
    
    
        # Use Mozilla's guidelines for SSL/TLS settings
        # https://mozilla.github.io/server-side-tls/ssl-config-generator/
        ssl_certificate     /opt/certs/hetao.me/fullchain.cer;
        ssl_certificate_key /opt/certs/hetao.me/hetao.me.key;
        ssl_protocols TLSv1.3;
    
        # Prevent nginx HTTP Server Detection
        server_tokens on;
    
        # HSTS settings
        # WARNING: Only add the preload option once you read about
        # the consequences in https://hstspreload.org/. This option
        # will add the domain to a hardcoded list that is shipped
        # in all major browsers and getting removed from this list
        # could take several months.
        add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always;
        add_header Alt-Svc 'h3=":443"; ma=86400';
        setsecure_link_secret 123456;
        include /etc/nginx/includes/ds-*.conf;
    }
    
    1. 配置域名

    配置onlyoffice.hetao.me指向onlyoffice docs服务器
    过程略
    5. nextcloud中安装onlyoffice扩展

    新版本nextcloud似乎不能在线安装onlyoffice扩展了,所以用下面的方法离线安装。
    在 https://apps.nextcloud.com/apps/onlyoffice 这个页面上下载扩展的tar包,解压到/var/www/nextcloud/apps文件夹中,然后在nextcloud的app管理页面启用onlyoffice扩展。

    1. 配置nextcloud


    其中秘钥就是JWT私钥,可以在/etc/onlyoffice/documentserver/local.json文件中配置。
    inbox,outbox,session三个私钥设置一样并且与nextcloud中的配置一致。

    1. 使用效果

    参考:
    https://www.collaboraoffice.com/code/linux-packages/

    Views: 68

  • dnsdist记录查询和应答日志

    dnsdist中做如下配置

    addAction(AllRule(), LogAction(“/var/log/dnsdist.log”, false, true, false, true, true))
    addResponseAction(AllRule(), LogResponseAction(“/var/log/dnsdist.log”, true, false))

    Views: 95

  • dnsdist远程控制台

    • dnsdist中做如下配置

    controlSocket(‘0.0.0.0:5199’)
    setKey(‘mykey’)
    setConsoleACL({‘0.0.0.0/0’, ‘::1/128’})

    • 然后运行console客户端
      dnsdist -c dns.hetao.me -k mykey

    Views: 90

  • linux物理终端(framebuffer)设置字体颜色

    setterm –foreground green –store
    此命令需要在物理终端上执行,ssh不支持

    Views: 293

  • immortalwrt修改源

    编辑/etc/opkg/distfeeds.conf,替换内容如下

    src/gz immortalwrt_core https://mirrors.hetao.me/immortalwrt/releases/23.05.1/targets/armsr/armv8/packages
    src/gz immortalwrt_base https://mirrors.hetao.me/immortalwrt/releases/23.05.1/packages/aarch64_generic/base
    src/gz immortalwrt_luci https://mirrors.hetao.me/immortalwrt/releases/23.05.1/packages/aarch64_generic/luci
    src/gz immortalwrt_packages https://mirrors.hetao.me/immortalwrt/releases/23.05.1/packages/aarch64_generic/packages
    src/gz immortalwrt_routing https://mirrors.hetao.me/immortalwrt/releases/23.05.1/packages/aarch64_generic/routing
    src/gz immortalwrt_telephony https://mirrors.hetao.me/immortalwrt/releases/23.05.1/packages/aarch64_generic/telephony
    

    Views: 156

  • 修改pve ct templates镜像

    打开/usr/share/perl5/PVE/APLInfo.pm
    找到get_apl_sources部分,把对应的url替换掉
    如果是arm版本的替换为
    https://mirrors.hetao.me/proxmox-port
    如果是x86-64版本的替换为
    https://mirrors.hetao.me/proxmox
    systemctl restart pvedaemon
    如果不生效可以考虑重启电脑
    我发现单独替换url是可以的,如果替换host就会失败。

    Views: 244

  • 倍控8505解决死机问题

    apt install intel-microcode
    /etc/default/grub设置
    GRUB_CMDLINE_LINUX_DEFAULT=”quiet pcie_aspm=off intel_idle.max_cstate=2″
    update-grub

    Views: 155

  • ubuntu22.04安装denyhosts

    git clone https://github.com/denyhosts/denyhosts.git
    cd denyhosts
    python setup.py install
    cp denyhosts.conf /etc
    cp daemon-control-dist /usr/share/denyhosts/daemon-control
    cp denyhosts.py /usr/sbin/denyhosts.py
    cd /etc/init.d
    ln -s /usr/share/denyhosts/daemon-control denyhosts
    编辑denyhosts
    从第2行开始添加以下内容

    ### BEGIN INIT INFO
    # Default-Start:     2 3 4 5
    # Default-Stop:      0 1 6
    ### END INIT INFO
    

    systemctl enable denyhosts
    systemctl start denyhosts

    Views: 181