第一台 VPS 折腾小记

1
listen: :8443 # 监听端口，需防火墙放行
2

3
# 使用之前申请的 CA 证书
4
tls:
5
  cert: /home/username/cert/fullchain.cer
6
  key: /home/username/cert/yourdomain.com.key
7

8
auth:
9
  type: userpass
10
  userpass:
11
    # 修改这里：自定义用户名和密码
12
    myuser1: password123
13
    myuser2: password456
14

15
masquerade:
16
  type: proxy
17
  proxy:
18
    url: https://bing.com # 伪装网址
19
    rewriteHost: true
20
  listenHTTP: :80
21
  listenHTTPS: :8443
22

23
trafficStats: # 流量统计接口
24
  listen: :22222
25
  secret: trafficStats_passwd
26

27
bandwidth:
28
  # 修改这里：根据你VPS的实际带宽调整，不要填满，留有余地
29
  up: 100 mbps
30
  down: 200 mbps

1
#!/bin/bash
2
green='\033[0;32m'
3
cyan='\033[0;36m'
4
NC='\033[0m' # No Color
5

6
# 请修改这里：你的域名
7
DOMAIN="sub.yourdomain.com"
8
# 请修改这里：你的 config.yaml 里设置的 secret
9
SECRET="passwd"
10

11
# API 地址 (走 HTTPS)
12
TRAFFIC_URL="https://${DOMAIN}/hy-stats/traffic"
13
ONLINE_URL="https://${DOMAIN}/hy-stats/online"
14
AUTH_HEADER="Authorization: ${SECRET}"
15

16
# 函数：将字节转换为可读格式
17
bytes_to_readable() {
18
    local bytes=$1
19
    if (( bytes < 1024 )); then
20
        printf "%d B" "$bytes"
21
    elif (( bytes < 1024**2 )); then
22
        printf "%.2f KB" "$(echo "scale=2; $bytes / 1024" | bc)"
23
    elif (( bytes < 1024**3 )); then
24
        printf "%.2f MB" "$(echo "scale=2; $bytes / (1024^2)" | bc)"
25
    else
26
        printf "%.2f GB" "$(echo "scale=2; $bytes / (1024^3)" | bc)"
27
    fi
28
}
29

30
echo -e "${green}=== Hysteria2 流量与在线用户统计 ===${NC}"
31
echo
32

33
# 1. 获取在线用户数
34
echo -n "正在获取在线用户..."
35
online_resp=$(curl -s -H "$AUTH_HEADER" "$ONLINE_URL")
36
# 简单的整数判断，如果返回不是数字可能是认证失败
37
if [[ "$online_resp" =~ ^[0-9]+$ ]]; then
38
    echo -e "\r当前在线用户数: ${cyan}${online_resp}${NC}"
39
else
40
    echo -e "\r${cyan}获取在线用户失败 (可能是密钥错误或 Nginx 配置问题)${NC}"
41
    # echo "Debug: $online_resp" # 调试用
42
fi
43

44
echo "-----------------------------------"
45

46
# 2. 获取流量统计
47
response=$(curl -s -w "HTTPSTATUS:%{http_code}" -H "$AUTH_HEADER" "$TRAFFIC_URL")
48
body=$(echo "$response" | sed -e 's/HTTPSTATUS\:.*//g')
49
status_code=$(echo "$response" | tr -d '\n' | sed -e 's/.*HTTPSTATUS://')
50

51
if [ "$status_code" -eq 200 ]; then
52
    # 使用 jq 解析 JSON
53
    # 格式: 用户名 上传 下载
54
    echo "$body" | jq -r 'to_entries[] | "\(.key) \(.value.tx) \(.value.rx)"' | while read -r key tx rx; do
55
        readable_tx=$(bytes_to_readable "$tx")
56
        readable_rx=$(bytes_to_readable "$rx")
57
        echo -e "用户 ${green}$key${NC}: 上传 ${cyan}${readable_tx}${NC} | 下载 ${cyan}${readable_rx}${NC}"
58
    done
59
else
60
    echo "流量请求失败，状态码：$status_code"
61
    echo "请检查密钥或 HTTPS 连接。"
62
fi
63
echo

1
[Unit]
2
Description=Sub-Store
3
After=network-online.target
4
Wants=network-online.target systemd-networkd-wait-online.service
5

6
[Service]
7
LimitNOFILE=32767
8
Type=simple
9

10
# 修改这里：这一串随机字符就是你以后访问 Sub-Store 的路径
11
Environment="SUB_STORE_FRONTEND_BACKEND_PATH=/你的随机密钥"
12

13
Environment="SUB_STORE_BACKEND_SYNC_CRON=0 0 * * *"
14
Environment="SUB_STORE_FRONTEND_PATH=/root/sub-store/frontend"
15
Environment="SUB_STORE_FRONTEND_HOST=0.0.0.0"
16
# 前端运行在 3001 端口
17
Environment="SUB_STORE_FRONTEND_PORT=3001"
18
Environment="SUB_STORE_DATA_BASE_PATH=/root/sub-store"
19
Environment="SUB_STORE_BACKEND_API_HOST=127.0.0.1"
20
Environment="SUB_STORE_BACKEND_API_PORT=3000"
21

22
# 启动命令 (确保路径正确)
23
ExecStart=/root/.local/share/fnm/fnm exec --using v20.18.0 node /root/sub-store/sub-store.bundle.js
24

25
User=root
26
Group=root
27
Restart=on-failure
28
RestartSec=5s
29
ExecStartPre=/bin/sh -c ulimit -n 51200
30
StandardOutput=journal
31
StandardError=journal
32

33
[Install]
34
WantedBy=multi-user.target