YANG JIANKUAN
5326c572a2
迁入通用节点部署工具、离线交付页生成器和共用技能，隔离真实配置与交付产物。统一 Codex 与 Claude Code 开发约定，补充节点迁移与运维文档。 完善 FINAL、策略组引用、输入校验、Surge 字段编码与 AI DNS 例外保护，增加隔离测试和订阅验证工具。 验证：全量类型检查、44 项单测、前端构建、脚本语法、技能入口与凭据隔离检查均通过。
21 lines
1.4 KiB
Bash
Executable File
21 lines
1.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Harden aaPanel: set username/password, secret entrance, bind panel domain, enable CDN_PROXY
|
|
# (required so the panel works behind an nginx reverse proxy).
|
|
. "$(dirname "$0")/_lib.sh"
|
|
|
|
[ -n "${AAPANEL_PASS:-}" ] || AAPANEL_PASS="$(gen_pass 20)"
|
|
echo "AAPANEL PASSWORD (save to your password manager): $AAPANEL_PASS"
|
|
|
|
run "cd /www/server/panel
|
|
/www/server/panel/pyenv/bin/python tools.py panel '$AAPANEL_PASS' >/dev/null 2>&1 && echo password-set
|
|
# username: set directly in the panel DB (tools.py username is interactive)
|
|
/www/server/panel/pyenv/bin/python -c \"import sqlite3;c=sqlite3.connect('/www/server/panel/data/default.db');c.execute(\\\"update users set username='$AAPANEL_USER'\\\");c.commit();print('username ->',c.execute('select username from users').fetchall())\"
|
|
echo '$AAPANEL_ENTRANCE' > data/admin_path.pl && echo entrance-set
|
|
echo '$SUB_PANEL.$DOMAIN_ROOT' > data/domain.conf && echo domain-bound
|
|
echo 'CDN_PROXY=True' > config/cdn.conf && echo cdn-proxy-on
|
|
/etc/init.d/bt restart >/dev/null 2>&1; sleep 3
|
|
P=\$(cat /www/server/panel/data/port.pl | tr -d '[:space:]')
|
|
ss -lnt | grep -q \":\$P\" && echo \"panel-listening-\$P\" || echo 'WARN: panel not listening (check with: bt 14)'"
|
|
echo "NOTE: reverse-proxy access at https://$SUB_PANEL.$DOMAIN_ROOT$AAPANEL_ENTRANCE (after 09-aapanel-sites)."
|
|
echo "NOTE: direct IP:port returns 403 by design (domain binding). Restart panel with 'bt 1', never 'systemctl restart btpanel'."
|