各种小软件配置备忘

gost tmux frp zerotier syncthing softether cpulimit wiregard v2ray ssr btpanel-ss

# gost 用旧版2.1 新版处理恶意扫描时容易闪退
wget --no-check-certificate https://github.com/ginuerzh/gost/releases/download/2.1/gost_2.1_linux_amd64.tar.gz;
tar -xzvf gost_2.1_linux_amd64.tar.gz;
mv gost_2.1_linux_amd64/gost gost;
chmod +x gost; 
/root/gost -v=4 -logtostderr -L=ss://chacha20:password@:8080 -L=tcp://:443/192.168.111.12:443

-

# v2ray https://233blog.com/post/16/ v2ray
bash <(curl -s -L https://233blog.com/v2ray.sh)

-

# tmux debian9默认v2.3，够新了，shift + 鼠标选择复制到Win剪贴板
wget --no-check-certificate https://swds.tk/py/sh/tmux.txt -O .tmux.conf;wget --no-check-certificate https://swds.tk/py/sh/tmux.sh -O tmux.sh; 

-

# 利用 cpulimit 实现小内存 VPS 防 suspend https://www.mf8.biz/cpulimit-make-none-suspend/     
apt-get install cpulimit; wget https://swds.tk/py/sh/cpulimit.txt -O cpulimit.sh; chmod +x cpulimit.sh; 

-

# zerotier
curl -s https://install.zerotier.com/ | bash; zerotier-cli join e5cd7a9exxxxyyyy

-

# syncthing
curl -s https://syncthing.net/release-key.txt | apt-key add -; echo "deb https://apt.syncthing.net/ syncthing stable" | tee /etc/apt/sources.list.d/syncthing.list; apt-get install apt-transport-https; apt-get update; apt-get install syncthing; syncthing; nano /root/.config/syncthing/config.xml

-

# softether
wget https://github.com/SoftEtherVPN/SoftEtherVPN_Stable/releases/download/v4.28-9669-beta/softether-vpnserver-v4.28-9669-beta-2018.09.11-linux-x64-64bit.tar.gz; tar -zxvf softether-vpnserver-v4.28-9669-beta-2018.09.11-linux-x64-64bit.tar.gz; cd vpnserver; ./.install.sh; ./vpnserver start; cd ~

-

# frp
wget --no-check-certificate https://github.com/fatedier/frp/releases/download/v0.22.0/frp_0.22.0_linux_amd64.tar.gz; tar -zxvf  frp_0.22.0_linux_amd64.tar.gz; 

-

# wireguard https://www.wireguard.com/install/ 注意 debian9大坑，iptables时网卡名不是eth0
echo "deb http://deb.debian.org/debian/ unstable main" > /etc/apt/sources.list.d/unstable.list
printf 'Package: *\nPin: release a=unstable\nPin-Priority: 90\n' > /etc/apt/preferences.d/limit-unstable
apt update
apt install wireguard
# 生成密钥对
wg genkey | tee privatekey | wg pubkey > publickey
# server配置，注意peer是client的pubkey
nano /etc/wireguard/wg0.conf

[Interface] 
PrivateKey =COtYJjServerPrivateServerPrivateServerPrivate= 
Address = 10.0.0.1/24
ListenPort = 8666 
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o ens33 -j MASQUERADE; ip6tables -A FORWARD -i wg0 -j ACCEPT; ip6tables -t nat -A POSTROUTING -o ens33 -$
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o ens33 -j MASQUERADE; ip6tables -D FORWARD -i wg0 -j ACCEPT; ip6tables -t nat -D POSTROUTING -o ens33$

[Peer] PublicKey = LDBneClientPublicKeyClientPublicKeyClientPublicKey=
AllowedIPs = 10.0.0.11/24
net.ipv4.ip_forward=1
net.ipv6.conf.all.forwarding=1
wg-quick up wg0

SSR 配置

{
    "server":"0.0.0.0",
    "server_ipv6":"::",
    "local_address":"127.0.0.1",
    "local_port":1080,
    "port_password":{
        "443":{"protocol":"auth_aes128_md5", "password":"pwd", "obfs":"tls1.2_ticket_auth", "obfs_param":""},
        "80":{"protocol":"origin", "password":"pwd"}
    },
    "timeout":300,
    "method":"rc4-md5",
    "protocol": "auth_sha1_compatible",
    "protocol_param": "",
    "obfs": "http_simple_compatible",
    "obfs_param": "",
    "redirect": "www.bing.com",
    "dns_ipv6": false,
    "fast_open": false,
    "workers": 1
}

宝塔bt插件btpanel-ss

git clone https://github.com/lizhongnian/btpanel-ss;
cd btpanel-ss; bash install.sh install; cd ~;