零刻EQ12迷你主机All In One完整配置指南

1
bash <(curl -sSL https://pve.u3u.icu/PVE-Tools.sh)

1
echo 'deb https://mirrors.ustc.edu.cn/proxmox/debian/pve trixie pve-no-subscription
2
' | sudo tee /etc/apt/sources.list.d/pve-no-subscription.list

1
echo 'Types: deb
2
URIs: https://mirrors.ustc.edu.cn/proxmox/debian/pve
3
Suites: trixie
4
Components: pve-no-subscription
5
Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
6
' | sudo tee /etc/apt/sources.list.d/pve-no-subscription.sources

1
wget -q -O- 'https://download.ceph.com/keys/release.asc' | sudo gpg -o /etc/apt/keyrings/ceph.gpg --dearmor
2
sudo apt-add-repository 'deb [signed-by=/etc/apt/keyrings/ceph.gpg] https://mirrors.ustc.edu.cn/ceph/debian-octopus/ trixie main'
3
sudo apt update

1
cp /usr/share/perl5/PVE/APLInfo.pm /usr/share/perl5/PVE/APLInfo.pm_back
2
sed -i 's|http://download.proxmox.com|https://mirrors.ustc.edu.cn/proxmox|g' /usr/share/perl5/PVE/APLInfo.pm

1
sed -i.bak 's/^/#/g' /etc/apt/sources.list.d/pve-enterprise.list

1
apt update && apt dist-upgrade

1
cp /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js.bak
2

3
line_num=$(grep -n "res.data.status.toLowerCase() !== 'active'" /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js | head -1 | cut -d: -f1)
4
sed -i "${line_num}s/!==/===/" /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js
5

6
systemctl restart pveproxy

1
reboot

1
lvremove pve/data

1
lvextend -rl +100%FREE pve/root
2
resize2fs /dev/mapper/pve-root

1
nano /etc/default/grub

1
GRUB_CMDLINE_LINUX_DEFAULT="quiet intel_iommu=on"

1
nano /etc/modprobe.d/pve-blacklist.conf

1
update-grub
2
update-initramfs -u -k all
3
reboot

1
nano /etc/sysctl.conf

1
sysctl -p

1
apt-get install iptables iptables-persistent net-tools

1
reboot

1
ifconfig | grep inet6

1
iptables -t nat -A PREROUTING -p tcp -i vmbr0 --dport 30900 -j REDIRECT --to-port 8006
2
iptables -t nat -A POSTROUTING -p tcp --dport 8006 -j MASQUERADE
3
iptables -t nat -A PREROUTING -p tcp -i vmbr0 --dport 30901 -j REDIRECT --to-port 22
4
iptables -t nat -A POSTROUTING -p tcp --dport 22 -j MASQUERADE

1
ip6tables -t nat -A PREROUTING -p tcp -i vmbr0 --dport 30900 -j REDIRECT --to-port 8006
2
ip6tables -t nat -A POSTROUTING -p tcp --dport 8006 -j MASQUERADE
3
ip6tables -t nat -A PREROUTING -p tcp -i vmbr0 --dport 30901 -j REDIRECT --to-port 22
4
ip6tables -t nat -A POSTROUTING -p tcp --dport 22 -j MASQUERADE

1
iptables -A INPUT -p tcp --dport 30900 -j ACCEPT
2
iptables -A INPUT -p tcp --dport 30901 -j ACCEPT
3
ip6tables -A INPUT -p tcp --dport 30900 -j ACCEPT
4
ip6tables -A INPUT -p tcp --dport 30901 -j ACCEPT

1
iptables-save > /etc/iptables/rules.v4
2
ip6tables-save > /etc/iptables/rules.v6

1
set wan1 eth1

1
192.168.50.1

1
iptables -t nat -I POSTROUTING -o eth0 -j MASQUERADE

1
nano /etc/config/uhttpd

1
/etc/init.d/uhttpd restart

1
ssh root@192.168.50.2 -p 30201
2
ifconfig | grep inet6

1
ssh root@[OP的公网IPv6地址] -p 30201

1
sudo -i

1
mv /usr/bin/ffmpeg /usr/bin/ffmpeg.bak
2
ln -s /var/packages/ffmpeg/target/bin/ffmpeg /usr/bin/ffmpeg

1
synopkgctl stop SynologyPhotos
2
cd /var/packages/SynologyPhotos/target/usr/lib
3
mv libsynophoto-plugin-platform.so libsynophoto-plugin-platform.so.bak
4
cp -f /volume1/share/libsynophoto-plugin-platform.so ./
5
chmod 777 libsynophoto-plugin-platform.so
6
chown SynologyPhotos:SynologyPhotos libsynophoto-plugin-platform.so
7
synopkgctl start SynologyPhotos

1
docker pull dockerproxy.net/xhofe/alist:latest

1
docker pull jellyfin/jellyfin:latest

1
docker pull linuxserver/jackett:latest

1
docker pull linuxserver/qbittorrent:latest

1
docker pull allanpk716/chinesesubfinder:latest-lite

1
docker pull diluka/nas-tools:2.9.1

1
docker run -d \
2
  --name jellyfin \
3
  --user 0:0 \
4
  -p 8096:8096 \
5
  -p 8920:8920 \
6
  -v /volume1/docker/jellyfin/config:/config \
7
  -v /volume1/docker/jellyfin/cache:/cache \
8
  --mount type=bind,source=/volume1/media/媒体库,target=/media \
9
  --restart=unless-stopped \
10
  -e TZ=Asia/Shanghai \
11
  jellyfin/jellyfin:latest

1
docker run -d \
2
  --name=jackett \
3
  -e PUID=1026 \
4
  -e PGID=100 \
5
  -e TZ=Asia/Shanghai \
6
  -e AUTO_UPDATE=true \
7
  -p 9117:9117 \
8
  -v /volume1/docker/jackett/config:/config \
9
  -v /volume1/media/下载:/downloads \
10
  --restart unless-stopped \
11
  linuxserver/jackett:latest

1
docker run -d \
2
  --name=qbittorrent \
3
  -e PUID=1026 \
4
  -e PGID=100 \
5
  -e TZ=Asia/Shanghai \
6
  -e WEBUI_PORT=8080 \
7
  -e TORRENTING_PORT=30381 \
8
  -p 8080:8080 \
9
  -p 30381:30381 \
10
  -p 30381:30381/udp \
11
  -v /volume1/docker/qbittorrent/config:/config \
12
  -v /volume1/media/下载:/downloads \
13
  --restart unless-stopped \
14
  linuxserver/qbittorrent:latest

1
docker run -d \
2
  --name nas-tools \
3
  --hostname nas-tools \
4
  -p 3000:3000  \
5
  -v /volume1/docker/nas-tools/config:/config \
6
  -v /volume1/media/媒体库:/media \
7
  -v /volume1/media/下载:/downloads \
8
  -e PUID=1026 \
9
  -e PGID=100 \
10
  -e UMASK=000 \
11
  -e NASTOOL_AUTO_UPDATE=false \
12
  -e NASTOOL_CN_UPDATE=false \
13
  diluka/nas-tools:2.9.1

1
sudo -i

1
git clone https://gitee.com/neilpang/acme.sh.git
2
cd acme.sh
3
./acme.sh --install -m 替换为邮箱地址 --force

1
curl -s -X POST "https://api.zerossl.com/acme/eab-credentials?access_key=替换为ZeroSSL_API_Key" | jq

1
./acme.sh --register-account  --server zerossl --eab-kid 替换为eab_kid --eab-hmac-key 替换为eab_hmac_key

1
export Ali_Key="替换为阿里云AccessKey_ID"
2
export Ali_Secret="替换为阿里云AccessKey_Secret"

1
./acme.sh --issue --dns dns_ali -d 替换为自己的域名 -d *.替换为自己的域名 --server zerossl

1
export SYNO_Username='替换为群晖的用户名'
2
export SYNO_Password='替换为群晖的密码'

1
/root/.acme.sh/acme.sh --deploy --home /root/.acme.sh --deploy-hook synology_dsm  -d 替换为自己的域名

1
/root/.acme.sh/acme.sh --cron --home /root/.acme.sh --force
2
/root/.acme.sh/acme.sh --deploy --home /root/.acme.sh --deploy-hook synology_dsm  -d 替换为自己的域名

1
mkdir /volume1/share/win11p12
2
openssl pkcs12 -export -out /volume1/share/win11p12/替换为你的域名.p12 -inkey /root/.acme.sh/替换为你的域名/替换为你的域名.key -in /root/.acme.sh/替换为你的域名/替换为你的域名.cer

1
wmic /namespace:\\root\cimv2\TerminalServices PATH Win32_TSGeneralSetting Set SSLCertificateSHA1Hash="替换为证书指纹"

1
mkdir -p /volume1/docker/nginx/www /volume1/docker/nginx/logs /volume1/docker/nginx/conf

1
docker pull dockerproxy.net/library/nginx:latest

1
docker run -d \
2
    --name nginx \
3
    --hostname nginx \
4
    -p 38880:80 \
5
    -p 38443:443 \
6
    -p 30201:30201 \
7
    -p 30901:30901 \
8
    -p 30400:30400 \
9
    -v /volume1/docker/nginx/conf/nginx.conf:/etc/nginx/nginx.conf \
10
    -v /volume1/docker/nginx/www:/usr/share/nginx/html \
11
    -v /volume1/docker/nginx/logs:/var/log/nginx \
12
    -e TZ=Asia/Shanghai \
13
    dockerproxy.net/library/nginx:latest