服务器搭建 – Pancake's Personal Website

关于树莓派重新配置所有命令

作为 backup 使用，为 ubuntu server 22.04，首先 sd 卡配置好 config.txt 以及 network-config。树莓派主要用途为 jupyter code-server gitea frp 映射到公网作为计算服务器以及git仓库。

config.txt 备份文件

[all]
kernel=vmlinuz
cmdline=cmdline.txt
initramfs initrd.img followkernel

[pi4]
max_framebuffers=2
arm_boost=1

[all]
# Enable the audio output, I2C and SPI interfaces on the GPIO header. As these
# parameters related to the base device-tree they must appear *before* any
# other dtoverlay= specification
dtparam=audio=on
dtparam=i2c_arm=on
dtparam=spi=on
gpu_mem=256
arm_freq=2100
over_voltage=6
arm_freq_min=1500
# Comment out the following line if the edges of the desktop appear outside
# the edges of your display
disable_overscan=1

# If you have issues with audio, you may try uncommenting the following line
# which forces the HDMI output into HDMI mode instead of DVI (which doesn't
# support audio output)
#hdmi_drive=2

# Enable the serial pins
enable_uart=1

# Autoload overlays for any recognized cameras or displays that are attached
# to the CSI/DSI ports. Please note this is for libcamera support, *not* for
# the legacy camera stack
camera_auto_detect=1
display_auto_detect=1

# Config settings specific to arm64
arm_64bit=1
dtoverlay=dwc2

[cm4]
# Enable the USB2 outputs on the IO board (assuming your CM4 is plugged into
# such a board)
dtoverlay=dwc2,dr_mode=host

[all]
start_x=1

[all]

kernel=vmlinuz

cmdline=cmdline.txt

initramfs initrd.img followkernel

[pi4]

max_framebuffers=2

arm_boost=1

[all]

# Enable the audio output, I2C and SPI interfaces on the GPIO header. As these

# parameters related to the base device-tree they must appear *before* any

# other dtoverlay= specification

dtparam=audio=on

dtparam=i2c_arm=on

dtparam=spi=on

gpu_mem=256

arm_freq=2100

over_voltage=6

arm_freq_min=1500

# Comment out the following line if the edges of the desktop appear outside

# the edges of your display

disable_overscan=1

# If you have issues with audio, you may try uncommenting the following line

# which forces the HDMI output into HDMI mode instead of DVI (which doesn't

# support audio output)

#hdmi_drive=2

# Enable the serial pins

enable_uart=1

# Autoload overlays for any recognized cameras or displays that are attached

# to the CSI/DSI ports. Please note this is for libcamera support, *not* for

# the legacy camera stack

camera_auto_detect=1

display_auto_detect=1

# Config settings specific to arm64

arm_64bit=1

dtoverlay=dwc2

[cm4]

# Enable the USB2 outputs on the IO board (assuming your CM4 is plugged into

# such a board)

dtoverlay=dwc2,dr_mode=host

[all]

start_x=1

基本操作设置

sudo passwd root
su -
apt update
apt upgrade
adduser code
adduser code-jupyter
adduser --disabled-login --gecos 'pancake' git
apt install python3-pip net-tools git mysql-server
pip3 config set global.index-url https://pypi.douban.com/simple
pip3 install numpy pandas torch torchvision jupyter bs4 requests openpyxl matplotlib scrapy
apt install python3-opencv

sudo passwd root

su -

apt update

apt upgrade

adduser code

adduser code-jupyter

adduser --disabled-login --gecos 'pancake' git

apt install python3-pip net-tools git mysql-server

pip3 config set global.index-url https://pypi.douban.com/simple

pip3 install numpy pandas torch torchvision jupyter bs4 requests openpyxl matplotlib scrapy

apt install python3-opencv

Python 及 jupyter 的配置

su code-jupyter
mkdir code
python3
    from notebook.auth import passwd
    passwd()
    exit()
jupyter notebook --generate-config
vim .jupyter/jupyter_notebook_config.py
    c.NotebookApp.ip = '0.0.0.0'
    c.NotebookApp.password = ******
    c.NotebookApp.notebook_dir = '/home/code-jupyter/code'
    c.NotebookApp.open_browser = False
    c.NotebookApp.allow_remote_access = True
    c.NotebookApp.terminals_enabled = False
su -
vim /etc/systemd/system/jupyter.service
systemctl start jupyter
systemctl status jupyter
systemctl enable jupyter
pip3 config set global.index-url https://pypi.douban.com/simple
pip3 install jupyter_contrib_nbextensions
pip3 install jupyter_nbextensions_configurator
jupyter contrib nbextension install --user
systemctl restart jupyter.service

su code-jupyter

mkdir code

python3

from notebook.auth import passwd

passwd()

exit()

jupyter notebook --generate-config

vim .jupyter/jupyter_notebook_config.py

c.NotebookApp.ip = '0.0.0.0'

c.NotebookApp.password = ******

c.NotebookApp.notebook_dir = '/home/code-jupyter/code'

c.NotebookApp.open_browser = False

c.NotebookApp.allow_remote_access = True

c.NotebookApp.terminals_enabled = False

su -

vim /etc/systemd/system/jupyter.service

systemctl start jupyter

systemctl status jupyter

systemctl enable jupyter

pip3 config set global.index-url https://pypi.douban.com/simple

pip3 install jupyter_contrib_nbextensions

pip3 install jupyter_nbextensions_configurator

jupyter contrib nbextension install --user

systemctl restart jupyter.service

code-server 的配置

cd /home/code
wget https://ghproxy.com/https://github.com/coder/code-server/releases/download/v4.5.1/code-server_4.5.1_arm64.deb
dpkg -i code-server_4.5.1_arm64.deb
rm -f code-server_4.5.1_arm64.deb
su code
code-server
vim .config/code-server/config.yaml
su -
vim /etc/systemd/system/code.service
systemctl start code
systemctl status code
systemctl enable code

cd /home/code

wget https://ghproxy.com/https://github.com/coder/code-server/releases/download/v4.5.1/code-server_4.5.1_arm64.deb

dpkg -i code-server_4.5.1_arm64.deb

rm -f code-server_4.5.1_arm64.deb

su code

code-server

vim .config/code-server/config.yaml

su -

vim /etc/systemd/system/code.service

systemctl start code

systemctl status code

systemctl enable code

frp 的配置

su ubuntu
cd /home/ubuntu
wget https://ghproxy.com/https://github.com/fatedier/frp/releases/download/v0.44.0/frp_0.44.0_linux_arm64.tar.gz
tar -xvzf frp_0.44.0_linux_arm64.tar.gz
rm -f frp_0.44.0_linux_arm64.tar.gz
mv frp_0.44.0_linux_arm64/ frp/
cd frp/
vim frpc.ini
sudo vim /etc/systemd/system/code.service
systemctl start code
systemctl status code
systemctl enable code

su ubuntu

cd /home/ubuntu

wget https://ghproxy.com/https://github.com/fatedier/frp/releases/download/v0.44.0/frp_0.44.0_linux_arm64.tar.gz

tar -xvzf frp_0.44.0_linux_arm64.tar.gz

rm -f frp_0.44.0_linux_arm64.tar.gz

mv frp_0.44.0_linux_arm64/ frp/

cd frp/

vim frpc.ini

sudo vim /etc/systemd/system/code.service

systemctl start code

systemctl status code

systemctl enable code

frp code-server jupyter 自启脚本

[Unit]
Description=jupyter
After=network.target

[Service]
User=code-jupyter
ExecStart=/usr/local/bin/jupyter-notebook

[Install]
WantedBy=multi-user.target

[Unit]

Description=jupyter

After=network.target

[Service]

User=code-jupyter

ExecStart=/usr/local/bin/jupyter-notebook

[Install]

WantedBy=multi-user.target

[Unit]
Description=code-server
After=network.target

[Service]
User=code
ExecStart=/bin/code-server

[Install]
WantedBy=multi-user.target

[Unit]

Description=code-server

After=network.target

[Service]

User=code

ExecStart=/bin/code-server

[Install]

WantedBy=multi-user.target

[Unit]
Description=frp
After=network.target

[Service]
User=ubuntu
ExecStart=/home/ubuntu/frp/frpc -c /home/ubuntu/frp/frpc.ini

[Install]
WantedBy=multi-user.target

[Unit]

Description=frp

After=network.target

[Service]

User=ubuntu

ExecStart=/home/ubuntu/frp/frpc -c /home/ubuntu/frp/frpc.ini

[Install]

WantedBy=multi-user.target

[Unit]
Description=gitea
After=network.target

[Service]
User=git
ExecStart=/home/git/gitea web
HOME=/home/git

[Install]
WantedBy=multi-user.target

[Unit]

Description=gitea

After=network.target

[Service]

User=git

ExecStart=/home/git/gitea web

HOME=/home/git

[Install]

WantedBy=multi-user.target

gitea 的配置

su -
mysql
  ALTER USER 'root'@'localhost' IDENTIFIED BY '新密码';
  exit;
mysql_secure_installation
  不修改密码
  y # 删除匿名用户
  y # Disallow root remotely
  y # 删除测试数据库
  exit;
mysql -u root -p
  CREATE DATABASE pancake;
  ALTER USER 'pancake'@'localhost' IDENTIFIED BY '新密码';
  GRANT ALL PRIVILEGES ON pancake.* TO 'pancake'@'localhost';
  FLUSH PRIVILEGES;
  exit;
su git
cd ~/
wget https://dl.gitea.io/gitea/1.17.2/gitea-1.17.2-linux-arm-6 -O gitea
chmod +x gieta
su -
vim /etc/systemd/system/gitea.service
systemctl start gitea.service
systemctl status gitea.service
systemctl enable gitea.service

su -

mysql

ALTER USER 'root'@'localhost' IDENTIFIED BY '新密码';

exit;

mysql_secure_installation

不修改密码

y # 删除匿名用户

y # Disallow root remotely

y # 删除测试数据库

exit;

mysql -u root -p

CREATE DATABASE pancake;

ALTER USER 'pancake'@'localhost' IDENTIFIED BY '新密码';

GRANT ALL PRIVILEGES ON pancake.* TO 'pancake'@'localhost';

FLUSH PRIVILEGES;

exit;

su git

cd ~/

wget https://dl.gitea.io/gitea/1.17.2/gitea-1.17.2-linux-arm-6 -O gitea

chmod +x gieta

su -

vim /etc/systemd/system/gitea.service

systemctl start gitea.service

systemctl status gitea.service

systemctl enable gitea.service

frpc 具体配置

[common]
server_addr = xxxxx
server_port = 7000
token = xxxxx

[git]
type = tcp
local_ip = localhost
local_port = 3000
remote_port = 4545

[ssh]
type = tcp
local_ip = 127.0.0.1
local_port = 22
remote_port = 4546

[jupyter]
type = http
local_ip = 127.0.0.1
local_port = 8888
custom_domains = xxxxx

[code]
type = http
local_ip = 127.0.0.1
local_port = 8080
custom_domains = xxxxx

[common]

server_addr = xxxxx

server_port = 7000

token = xxxxx

[git]

type = tcp

local_ip = localhost

local_port = 3000

remote_port = 4545

[ssh]

type = tcp

local_ip = 127.0.0.1

local_port = 22

remote_port = 4546

[jupyter]

type = http

local_ip = 127.0.0.1

local_port = 8888

custom_domains = xxxxx

[code]

type = http

local_ip = 127.0.0.1

local_port = 8080

custom_domains = xxxxx

阿里云CDN/DCDN

最近突发奇想用CDN加速个人博客，因为该服务器访问速度太慢，加载图片/文件等速度让我忍不了，但是直接升级带宽又太贵，就想试试阿里云的CDN，当然你用别的云平台服务也是可以的。

首先你需要购入阿里云CDN/DCDN资源包（下行流量）：中国内地通用流量包等，100GB 20元这样一个定价。但是此时如果你想加速443即使用https还需要购入静态HTTPS请求包1000w次40元这样一个定价，当然你如果只想加速80端口即http就不需要购入静态HTTPS请求包。到这还没完，你还需要购入动态请求包，即抵扣动态https和http动态请求，100w次14元这样一个定价。不得不说阿里赚钱有一手，诶，买一个还不够，要买好多个。

很多人买了CDN流量包但是加速不了网站，显示https不安全就是没有购买和配置https的原因。

CDN和DCDN配置规则相似，以下为我配置DSDN的方法流程：

点击添加域名
加速域名输入：*.pancake2021.work
业务类型：DCDN即为全站加速，个人博客也可用小文件照片选项，区别请见下文
加速区域：仅中国内地
点击新增源站信息:
类型：ip
IP：即为你服务器IP地址（我自己IP就不写了哈哈）
端口：443（我博客没有配置80所以也就懒得搞了）
配置CNAME：
打开域名解析系统（因为全站加速我暂时只需要www与@的主机记录值，我并没有把*作为主机记录，取而代之的是把*直接访问服务器地址绕开CDN个人觉得反而更快）
因为原来可能配置了www和@的A记录类型，可以把其改成CNAME记录类型否则会冲突，把全站加速给你的CNAME记录值填进去。不用担心改了www和@之后访问不到网站，CDN会自动返回请求给你服务器地址。
验证CNAME：
DNS解析响应不会那么快，可能得等5-10min取决于你的TTL时长，不要着急验证不通过。
我上述步骤设置的*.pancake2021.work 域名阿里云CNAME检验会不通过，这就需要自己ping一下你的域名比如:ping www.pancake2021.work 是否会返回你填进去该域名下的CNAME记录值域名，若相同则配置完成。
配置https：
域名管理-选择你的域名进入-HTTPS配置-修改配置-开启
你可以自己申请也可以用原来自己申请的阿里云的免费证书，我是直接自定义上传的。
从你的阿里云免费ssl证书中下载根证书，把证书复制进去。
至此完成所有步骤，以下为可选步骤。
缓存配置可以不需要你服务器来配置url重写，能直接在这里写帮助你重定向。
动态加速规则，因为wordpress也就那么点文件夹在动态路径中我加入了：
/wp-content/*
/wp-admin/*

注意：因为配置了*.pancake2021.work为二级泛域名，不能加速一级域名，所以wordpress所需要加载图片要用到的pancake2021.work一级域名需要再行进行配置，即在上述第二部中输入pancake2021.work即可。

CDN和DCDN的区别：DCDN可以说是CDN的升级版，具体速度差别我这种小用户也感觉不出来，但是说实话我更推荐CDN因为CDN比DCDN多了一个带宽限制的功能，对防止攻击更加有效，DCDN只有购买昂贵的防DDOS 攻击才行，很多DCDN防护要么是贵，要没是功能未上线，这一点上我觉得阿里云可以改进一下。

嘎嘣脆的树莓派系统

就是说再也不敢不shutdown就拔电源了，这张树莓派sd卡彻底废了，无法恢复的那种 🙁

连带着 code-server 和 jupyter 消失在了历史的长河中。里面的 leetcode 代码和以前做的一些 python 学习资料连带着g了，我真的会谢

树莓派4b jupyter frp端口映射

树莓派 frpc 设置：
从 github 中找到 arm 版本 wget 下载
frpc.ini 参考配置

[common]
server_addr = you server ip
server_port = 7000
token = your password

[jupyter]
type = http
local_ip = 127.0.0.1
local_port = 8888
custom_domains = your domain

[common]

server_addr = you server ip

server_port = 7000

token = your password

[jupyter]

type = http

local_ip = 127.0.0.1

local_port = 8888

custom_domains = your domain

jupyter 设置跟之前文章相同，即 ip, allow_remote_access等设置

服务器端 frps 配置: 云端开启7000~7003端口

[common]
bind_port = 7000
vhost_http_port = 7002
token = your password
dashboard_port = 7001
dashboard_user = Your dashboard usr name
dashboard_pwd = Your dashboard password
vhost_http_port = 7003

[common]

bind_port = 7000

vhost_http_port = 7002

token = your password

dashboard_port = 7001

dashboard_user = Your dashboard usr name

dashboard_pwd = Your dashboard password

vhost_http_port = 7003

云端 nginx 参考配置：

server{
    listen 80;
    listen [::]:80;
    server_name yourdomain; 
    location / {
        proxy_pass http://127.0.0.1:7003;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $host; 
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_read_timeout 120s;
        proxy_next_upstream error;
    }
}

server{

listen 80;

listen [::]:80;

server_name yourdomain;

location / {

proxy_pass http://127.0.0.1:7003;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header Host $host;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_http_version 1.1;

proxy_set_header Upgrade $http_upgrade;

proxy_set_header Connection "upgrade";

proxy_read_timeout 120s;

proxy_next_upstream error;

}

最终效果即通过域名 python.pancake2021.work 访问树莓派 jupyter

wordpress 近期文章去除置顶文章

原作者链接（大量参考）

vim /usr/share/nginx/html/wordpress/wp-includes/widgets/class-wp-widget-recent-posts.php

找到如下代码删除并修改

<ul>
<?php
    $recentPosts =  new WP_Query(array('post__not_in' => get_option('sticky_posts'),'posts_per_page' => $number));
?>
<?php while ($recentPosts->have_posts()) : $recentPosts->the_post(); ?>
    <li> <a href="<?php the_permalink() ?>" rel="bookmark" class="title"><?php echo  get_the_title(); ?></a>
         <?php if ( $show_date ) : ?> 
             <?php  the_time('y/m/d'); ?>
         <?php endif; ?>  
    </li> 
<?php endwhile; wp_reset_query();?>
</ul>

<ul>

<?php

$recentPosts = new WP_Query(array('post__not_in' => get_option('sticky_posts'),'posts_per_page' => $number));

<?php while ($recentPosts->have_posts()) : $recentPosts->the_post(); ?>

<li> <a href="<?php the_permalink() ?>" rel="bookmark" class="title"><?php echo get_the_title(); ?></a>

<?php if ( $show_date ) : ?>

<?php the_time('y/m/d'); ?>

<?php endif; ?>

</li>

<?php endwhile; wp_reset_query();?>

</ul>