杂记 on ARLOOR

vps 配置

Wed, 24 Jun 2026 20:30:12 +0800

rust_http_proxy

需要先参照acme

docker 运行

rm -f /etc/containers/systemd/proxy.container
mkdir -p /usr/share/nginx/html
mkdir -p /repo
cat >/etc/reverse_proxy.yaml <<EOF
default_host:
  - location: /v1/chat/completions
    upstream:
      url_base: https://models.inference.ai.azure.com/chat/completions
chat.arloor.dev:
  - upstream:
      url_base: http://127.0.0.1:4000/
stock.arloor.com:
  - upstream:
      url_base: http://127.0.0.1:3500/
EOF

systemctl disable --now proxy

docker run -d \
    --name proxy \
    --privileged \
    --network host \
    --pid host \
    --restart=unless-stopped \
    -v /tmp:/tmp \
    -v /root/.acme.sh:/root/.acme.sh \
    -v /etc/reverse_proxy.yaml:/etc/reverse_proxy.yaml \
    -v /usr/share/nginx/html:/usr/share/nginx/html \
    -v /repo:/usr/share/nginx/html/blog/repo \
    quay.io/arloor/rust_http_proxy:bpf \
    -p 444 -p 443 -p 9443 \
    -c /root/.acme.sh/arloor.dev/fullchain.cer -k /root/.acme.sh/arloor.dev/arloor.dev.key \
    -u "you:arewelcome" \
    -u "arloor:good" \
    -u "haloshit:asa^78ssdY&7AsA&88&(9&)**" \
    -w /usr/share/nginx/html/blog \
    -r arloor \
    -o \
    --never-ask-for-auth \
    --reverse-proxy-config-file=/etc/reverse_proxy.yaml \
    --enable-github-proxy \
    --append-upstream-url=https://cdnjs.cloudflare.com

echo "创建相关命令：/usr/bin/loo /usr/bin/loss"
echo "tail -fn 100 /tmp/proxy.log" >/usr/bin/loss
chmod +x /usr/bin/loss
echo "tail -fn 100 /tmp/proxy.log" >/usr/bin/loo
chmod +x /usr/bin/loo

podman 运行

rm -f /etc/containers/systemd/proxy.container
mkdir -p /usr/share/nginx/html
cat > /etc/reverse_proxy.yaml <<EOF
default_host:
  - location: /v1/chat/completions
    upstream:
      url_base: https://models.inference.ai.azure.com/chat/completions
chat.arloor.dev:
  - upstream:
      url_base: http://127.0.0.1:4000/
EOF
yum install -y podman
podman run -d \
--pull=newer \
--name proxy \
--network host \
--replace \
--privileged \
--rm \
-v /tmp:/tmp  \
-v /root/.acme.sh:/root/.acme.sh \
-v /etc/reverse_proxy.yaml:/etc/reverse_proxy.yaml \
-v /usr/share/nginx/html:/usr/share/nginx/html \
docker.io/arloor/rust_http_proxy:bpf \
-p xxxxxxxxxxxx

podman generate systemd --new --name proxy --env=HTTP_PROXY --env=HTTPS_PROXY| tee /lib/systemd/system/proxy.service
systemctl daemon-reload
systemctl enable proxy --now

其中 podman run 的 --rm 和 podman generate systemd 的--new 含义都是停止容器时删除容器，下次全新创建。所以 –rm 和 –new 要么同时出现，要么同时缺失。

网络相关杂记

Wed, 24 Jun 2026 20:10:12 +0800

dig 使用

dig @100.80.128.1 v6.arloor.com AAAA +short
dig www.arloor.com +subnet=101.24.11.0/24 +short

路由器 RA

$ tcpdump -i eth0  -nn -vv 'icmp6 and ip6[40] == 134'
dropped privs to tcpdump
tcpdump: listening on enp1s0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
14:05:06.500067 IP6 (class 0xc0, flowlabel 0x2a760, hlim 255, next-header ICMPv6 (58) payload length: 88) fe80::befc:e7ff:fe2a:878 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 88
        hop limit 64, Flags [other stateful], pref medium, router lifetime 600s, reachable time 0ms, retrans timer 0ms
          prefix info option (3), length 32 (4): 240e:b8f:2a5:d400::/64, Flags [onlink, auto], valid time 600s, pref. time 600s
            0x0000:  40c0 0000 0258 0000 0258 0000 0000 240e
            0x0010:  0b8f 02a5 d400 0000 0000 0000 0000
          mtu option (5), length 8 (1):  1492
            0x0000:  0000 0000 05d4
          source link-address option (1), length 8 (1): bc:fc:e7:2a:08:78
            0x0000:  bcfc e72a 0878
          rdnss option (25), length 24 (3):  lifetime 600s, addr: 240e:b8f:2a5:d400::1
            0x0000:  0000 0000 0258 240e 0b8f 02a5 d400 0000
            0x0010:  0000 0000 0001

这是一个 IPv6 路由器通告(Router Advertisement, RA)报文的详细解析:

rust_http_proxy windows 服务安装和管理

Wed, 24 Jun 2026 19:47:12 +0800

编译 windows 服务版二进制文件

Stop-Service -Name "rust_http_proxy"
cargo install --path rust_http_proxy --bin rust_http_proxy_service --features winservice

sc.exe 服务管理

启动服务：

sc.exe create rust_http_proxy binPath= "C:\Users\arloor\.cargo\bin\rust_http_proxy_service.exe -p 443 -p 444 -p 9443 -k C:\Users\arloor\rust_http_proxy\privkey.pem -c C:\Users\arloor\rust_http_proxy\cert.pem -o -u username:password -u arloor:good"
sc.exe start rust_http_proxy
sc.exe config rust_http_proxy start= auto

停止、删除服务：

speckit使用

Wed, 24 Jun 2026 19:47:12 +0800

安装

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git

升级

uv tool install specify-cli --force --from git+https://github.com/github/spec-kit.git

在项目中初始化

specify init <PROJECT_NAME>
# Or initialize in existing project
specify init . --ai codex --ai-skills
# or
specify init --here --ai codex --ai-skills

# Check installed tools
specify check

##  Set CODEX_HOME environment variable before running Codex: export CODEX_HOME=/data00/repo/appo/.codex

顺序

1. `/speckit.constitution ....`

描述围绕code quality, testing standards, user experience consistency, and performance requirements的项目规范，将知道后续的开发

wireguard 配置

Wed, 24 Jun 2026 19:47:12 +0800

windows 的 ddns 配置

sleep_secs = 60
default_dnspod_token = "154396,17694ffdbb7b83ad18304b35161b1e24"
default_cloudflare_token = "cnvSUb_P5fAqqIPNc2h7RihYVWwt5KfGbWZKDXlk"
default_provider = "cloudflare"
default_ip_url = "https://us.arloor.dev/ip"
default_hook_command = '''$body = @{chat_id="878823128"; text="$env:DOMAIN use new IP：$env:NEW_IP"; parse_mode="Markdown"} | ConvertTo-Json -Compress; Invoke-RestMethod -Uri "https://api.telegram.org/bot1142685883:AAE7NyGYe2Uyh2bjgNyoSMYyNWgn-U4T2_k/sendMessage" -Method Post -ContentType "application/json" -Body $body -Proxy "http://localhost:7890" *>> C:\Users\arloor\ddns.log'''

[[domains]]
domain = "windows.arloor.com"
ip_url = "https://ttl6.arloor.com/ip"

station 的 ddns 配置

default_dnspod_token = "154396,17694ffdbb7b83ad18304b35161b1e24"
default_cloudflare_token = "cnvSUb_P5fAqqIPNc2h7RihYVWwt5KfGbWZKDXlk"
default_provider = "cloudflare"
default_ip_url = "https://us.arloor.dev/ip"

[[domains]]
domain = "k3s.arloor.com"
[[domains]]
domain = "argocd.arloor.com"
ip_url = "https://us6.arloor.dev/ip"

[[domains]]
domain = "v6.arloor.com"
ip_url = "https://us6.arloor.dev/ip"
[[domains]]
domain = "dash.arloor.com"
ip_url = "https://us6.arloor.dev/ip"

[[domains]]
domain = "pi.arloor.com"
hook_command ='''/usr/local/bin/kubectl rollout restart deploy prometheus -n monitoring'''

[[domains]]
domain = "pub.arloor.com"
hook_command = '''ssh root@ttl.arloor.com "systemctl restart wg-quick@wg0";curl https://10.0.0.1:444/ip -k;sleep 3;curl https://10.0.0.4:444/ip -k;echo 'restart wg-quick@wg0' '''

station

[Interface]
PrivateKey = mBBVOuqIwHooiIYf+4QtZSZChO0MzwWTdi1NZpVys2U=
# pubkey = vnYUMW0ivuNtRCvJVq7B6NHHOZ6IHg6ee4JtBLnoe30=
Address = 10.0.0.1/24, fd00::1/64
ListenPort = 61820
# 如果需要启用IP转发（可选）
PostUp = echo 1 > /proc/sys/net/ipv4/ip_forward; echo 1 > /proc/sys/net/ipv6/conf/all/forwarding; iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o enp1s0 -j MASQUERADE; ip6tables -A FORWARD -i wg0 -j ACCEPT; ip6tables -t nat -A POSTROUTING -o enp1s0 -j MASQUERADE
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o enp1s0 -j MASQUERADE; ip6tables -D FORWARD -i wg0 -j ACCEPT; ip6tables -t nat -D POSTROUTING -o enp1s0 -j MASQUERADE

[Peer]
# surge
PublicKey = qZImbHwytc9wGqxtE+cafVb/3+OhhtBbnd8ATDaW53E=
# prikey = WDFLdp7jFL+tJGXN3AhGLttIgpYdKvEnfJH6uKu7GUs=
AllowedIPs = 10.0.0.2/32, fd00::2/128

[Peer]
# 安卓
PublicKey = xIGpfM8mzH3oRAtLjex5t3wfanuZ/RtUusucEFbV2lQ=
# prikey = oHfzr9Tys70LVD/ZCVLnOCYVWlsZeOiKSdxG+U9mCWY=
AllowedIPs = 10.0.0.3/32, fd00::3/128

[Peer]
# ttl
PublicKey = sJxj8qI8c8IOrMqWGgtbrZlJhnZoJ7aBgsVDtYVMK0w=
# prikey = 0Iq24oLDrergjfB/ysn+PcdaA+wP50JuvXbwXVf6gkc=
AllowedIPs = 10.0.0.4/32, fd00::4/128
Endpoint = ttl.arloor.com:61820

ttl

[Interface]
PrivateKey = 0Iq24oLDrergjfB/ysn+PcdaA+wP50JuvXbwXVf6gkc=
# pubkey = sJxj8qI8c8IOrMqWGgtbrZlJhnZoJ7aBgsVDtYVMK0w=
Address = 10.0.0.4/24, fd00::4/64
ListenPort = 61820
# DNS = 119.29.29.29, 2400:3200::1
# 如果需要启用IP转发（可选）
PostUp = echo 1 > /proc/sys/net/ipv4/ip_forward; echo 1 > /proc/sys/net/ipv6/conf/all/forwarding; iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE; ip6tables -A FORWARD -i wg0 -j ACCEPT; ip6tables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE; ip6tables -D FORWARD -i wg0 -j ACCEPT; ip6tables -t nat -D POSTROUTING -o eth0 -j MASQUERADE

[Peer]
# surge
PublicKey = qZImbHwytc9wGqxtE+cafVb/3+OhhtBbnd8ATDaW53E=
# prikey = WDFLdp7jFL+tJGXN3AhGLttIgpYdKvEnfJH6uKu7GUs=
AllowedIPs = 10.0.0.2/32, fd00::2/128

[Peer]
# 安卓
PublicKey = xIGpfM8mzH3oRAtLjex5t3wfanuZ/RtUusucEFbV2lQ=
# prikey = oHfzr9Tys70LVD/ZCVLnOCYVWlsZeOiKSdxG+U9mCWY=
AllowedIPs = 10.0.0.3/32, fd00::3/128

[Peer]
# station
PublicKey = vnYUMW0ivuNtRCvJVq7B6NHHOZ6IHg6ee4JtBLnoe30=
# PrivateKey = mBBVOuqIwHooiIYf+4QtZSZChO0MzwWTdi1NZpVys2U=
AllowedIPs = 10.0.0.1/32, fd00::1/128, 192.168.5.0/24
Endpoint = pub.arloor.com:61820

surge

[WireGuard A9E20D93]
private-key = WDFLdp7jFL+tJGXN3AhGLttIgpYdKvEnfJH6uKu7GUs=
self-ip = 10.0.0.2
self-ip-v6 = fd00::2
prefer-ipv6 = true
dns-server = 119.29.29.29
mtu = 1420
peer = (public-key = vnYUMW0ivuNtRCvJVq7B6NHHOZ6IHg6ee4JtBLnoe30=, allowed-ips = "0.0.0.0/0, ::/0", endpoint = pub.arloor.com:61820)

clash（安卓）

https://wiki.metacubex.one/config/proxies/wg/

杂记 on ARLOOR

vps 配置

rust_http_proxy

docker 运行

podman 运行

网络相关杂记

dig 使用

路由器 RA

rust_http_proxy windows 服务安装和管理

编译 windows 服务版二进制文件

sc.exe 服务管理

speckit使用

安装

升级

在项目中初始化

顺序

1. /speckit.constitution ....

wireguard 配置

windows 的 ddns 配置

station 的 ddns 配置

station

ttl

surge

clash（安卓）

1. `/speckit.constitution ....`