CF

admin

1、更新源

1. yum update -y
   
2. yum -y install openssl openssl-devel;
   
3. yum -y install pcre-devel;
   
4. yum -y install libxml2 libxml2-dev;
   
5. yum -y install libxslt-devel;
   
6. yum -y install gd gd-devel;

复制代码

2、升级内核

1. #查看当前内核版本
   
2. uname -r
   
3. #导入ELRepo仓库的公共密钥：
   
4. rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org
   
5. #安装ELRepo仓库的yum源：
   
6. yum -y install https://www.elrepo.org/elrepo-release-8.el8.elrepo.noarch.rpm
   
7. #安装最新版内核
   
8. yum --disablerepo="*" --enablerepo="elrepo-kernel" list available
   
9. yum -y --enablerepo=elrepo-kernel install kernel-ml
   
10. #设置以新的内核启动
    
11. grubby --default-kernel
    
12. grub2-set-default 0
    

复制代码

3、关闭IPV6

1. sudo vim /etc/default/grub

复制代码

在文件末尾，附加以下行：

1. GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX ipv6.disable=1"
   

复制代码

保存文件并退出。

1. ls -lh /etc/grub*.cfg
   
2. grub2-mkconfig -o /boot/grub2/grub.cfg
   
3. grub2-mkconfig -o /boot/efi/EFI/centos/grub2.cfg
   
4. reboot

复制代码

1. yum install -y tar
   
2. curl  https://get.acme.sh | sh
   
3. export CF_Email="jimmy3389@gmail.com"
   
4. export CF_Key="1e30c469b687e13d50d6e46ed98e84fb93d60"
   
5. /root/.acme.sh/acme.sh  --set-default-ca --server zerossl
   
6. /root/.acme.sh/acme.sh  --register-account  -m jimmy3389@gmail.com --server zerossl --eab-kid mNChaCTVmbydDb_3Hi8I9Q --eab-hmac-key zBx0EQR9i0hGgMPVPqDTurnYvlDd5ExfF4OlTcnnyaRWO8s737qnDS-fZ3_mLCeV2Xxo65ohfPRHElUhb76FuA
   
7. /root/.acme.sh/acme.sh --issue --dns dns_cf -d onecloud.best  -d *.onecloud.best  

复制代码

4、安装X-UI

1. bash <(curl -Ls https://raw.githubusercontent.com/sprov065/x-ui/master/install.sh)

复制代码

5、证书申请

1. yum install -y tar
   
2. curl  https://get.acme.sh | sh
   
3. export CF_Email="jimmy3389@gmail.com"
   
4. export CF_Key="1e30c469b687e13d50d6e46ed98e84fb93d60"
   
5. /root/.acme.sh/acme.sh  --set-default-ca --server zerossl
   
6. /root/.acme.sh/acme.sh  --register-account  -m jimmy3389@gmail.com --server zerossl --eab-kid mNChaCTVmbydDb_3Hi8I9Q --eab-hmac-key zBx0EQR9i0hGgMPVPqDTurnYvlDd5ExfF4OlTcnnyaRWO8s737qnDS-fZ3_mLCeV2Xxo65ohfPRHElUhb76FuA
   
7. /root/.acme.sh/acme.sh --issue --dns dns_cf -d onecloud.best  -d *.onecloud.best  

复制代码

6、Nginx安装

1. rpm -Uvh https://nginx.org/packages/centos/8/x86_64/RPMS/nginx-1.22.1-1.el8.ngx.x86_64.rpm
   
2. yum -y install nginx.x86_64    nginx-all-modules
   
3. systemctl enable nginx
   
4. systemctl start nginx
   
5. mkdir -p /etc/nginx/conf.d/sslconf/onecloud.best
   
6. /root/.acme.sh/acme.sh --installcert -d onecloud.best -d *.onecloud.best --key-file /etc/nginx/conf.d/sslconf/onecloud.best/private.key --fullchain-file /etc/nginx/conf.d/sslconf/onecloud.best/cert.crt --reloadcmd "nginx -s reload"
   

复制代码

7、开启防火墙

1. systemctl start firewalld.service
   
2. systemctl enable  firewalld.service
   
3. firewall-cmd --zone=public --add-port=22/tcp
   
4. firewall-cmd --zone=public --add-port=80/tcp
   
5. firewall-cmd --zone=public --add-port=443/tcp
   
6. firewall-cmd --zone=public --add-port=18080/tcp

复制代码