Docker容器推薦 - 教下我&叫下我

> nginx-mtproxy#

該映像包含了 nginx 和 mtproxy+tls，用於對流量進行偽裝，並使用白名單模式應對防火牆檢測。

secret=$(head -c 16 /dev/urandom | xxd -ps)
tag="12345678901234567890121231231231"
domain="XXXX.com"
docker run --name nginx-mtproxy -d -e tag="$tag" -e secret="$secret" -e domain="$domain" -e ip_white_list="OFF" -p 80:80 -p 443:443 ellermister/nginx-mtproxy:latest

ip_white_list 可選參數為:

IP 允許單個 IP 訪問
IPSEG 允許 IP 段訪問
OFF 允許所有 IP 訪問

詳細配置見 Docker 鏈接

> Koishi 機器人#

docker run --name koishi -d -v /home/docker/koishi:/koishi -e TZ=Asia/Shanghai -p 5140:5140 koishijs/koishi

設置反向代理時，需同時設置 websocket

location /
{
    proxy_pass http://127.0.0.1:5140;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header REMOTE-HOST $remote_addr;
    
    #持久化連接配置
    proxy_connect_timeout 30s;
    proxy_read_timeout 86400s;
    proxy_send_timeout  30s;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";        
    
    add_header X-Cache $upstream_cache_status;
    
    #Set Nginx Cache
    
    	add_header Cache-Control no-cache;
}