谷咕云计算

# 系统版本验证
lsb_release -a
# 输出：Ubuntu 20.04 LTS

# 内核版本检查
uname -r
# 要求：5.4+（支持TLS 1.3）

# 更新系统并安装基础工具
apt update && apt upgrade -y
apt install -y curl wget git vim net-tools

# 修改SSH配置（安全加固）
sed -i 's/#Port 22/Port 35222/' /etc/ssh/sshd_config
echo "PermitRootLogin no" >> /etc/ssh/sshd_config
systemctl restart sshd

# 配置防火墙
ufw allow 35222/tcp
ufw allow 80,443/tcp
ufw enable

# 启用BBR加速
echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf
echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf
sysctl -p

# 配置DNS解析（防污染）
echo -e "nameserver 8.8.8.8\nnameserver 1.1.1.1" > /etc/resolv.conf
chattr +i /etc/resolv.conf

# 安装xray-core
wget https://github.com/XTLS/Xray-core/releases/download/v1.8.3/Xray-linux-64.zip
unzip Xray-linux-64.zip -d /usr/local/xray/

# 生成UUID密钥
cat /proc/sys/kernel/random/uuid > /usr/local/xray/uuid

# 配置文件（/usr/local/xray/config.json）
{
  "inbounds": [{
    "port": 10808,
    "protocol": "socks",
    "settings": {"auth": "password"}
  }],
  "outbounds": [{
    "protocol": "freedom",
    "tag": "direct"
  }]
}

# 测试脚本 test_proxy.py
import requests
proxies = {
    'http': 'socks5://user:pass@127.0.0.1:10808',
    'https': 'socks5://user:pass@127.0.0.1:10808'
}
try:
    r = requests.get('https://www.tiktok.com', proxies=proxies, timeout=10)
    print('Proxy Status:', r.status_code)
except Exception as e:
    print('Error:', str(e))

# Dockerfile示例
FROM python:3.9-slim
RUN pip install requests beautifulsoup4
ENV HTTP_PROXY="socks5://host.docker.internal:10808"
ENV HTTPS_PROXY="socks5://host.docker.internal:10808"
WORKDIR /app
COPY tiktok_crawler.py .
CMD ["python", "tiktok_crawler.py"]

# 创建自定义网络
docker network create tiktok-net

# 运行容器（共享主机代理）
docker run -d --name tiktok-bot \
  --network host \
  -e HTTP_PROXY="socks5://127.0.0.1:10808" \
  your_image:latest

#!/bin/bash
# check_proxy.sh
LOG_FILE="/var/log/proxy_health.log"
TIMESTAMP=$(date +"%Y-%m-%d %H:%M:%S")

if curl -x socks5://127.0.0.1:10808 -s https://www.tiktok.com | grep -q "TikTok"; then
    echo "$TIMESTAMP Proxy is healthy" >> $LOG_FILE
else
    echo "$TIMESTAMP Proxy failed, restarting..." >> $LOG_FILE
    systemctl restart xray
fi

# 配置logrotate（/etc/logrotate.d/tiktok）
/var/log/proxy_health.log {
    daily
    rotate 7
    compress
    missingok
    notifempty
}

# 安装Prometheus node_exporter
wget https://github.com/prometheus/node_exporter/releases/download/v1.5.0/node_exporter-1.5.0.linux-amd64.tar.gz
tar -xzf node_exporter-*.tar.gz
cp node_exporter-*/node_exporter /usr/local/bin/

# 创建系统服务
cat > /etc/systemd/system/node_exporter.service << EOF
[Unit]
Description=Node Exporter
[Service]
ExecStart=/usr/local/bin/node_exporter
[Install]
WantedBy=multi-user.target
EOF

systemctl daemon-reload
systemctl enable node_exporter
systemctl start node_exporter

# 检查代理连接
netstat -tlnp | grep 10808

# 测试网络连通性
mtr -rw www.tiktok.com

# 查看系统日志
journalctl -u xray -f