bt

 
docker run  -d \
  --name opentracker \
  --publish 6969:6969/tcp \
  --publish 6969:6969/udp \
  --entrypoint sh alpine/socat \
  -c 'socat TCP4-LISTEN:6969,fork,reuseaddr TCP4:192.168.1.3:6969 & socat UDP4-LISTEN:6969,reuseaddr,fork UDP4:192.168.1.3:6969 & wait -n'

 
docker run  -d \
  --name tranmission \
  --publish 51413:51413/tcp \
  --publish 51413:51413/udp \
  --entrypoint sh alpine/socat \
  -c 'socat TCP4-LISTEN:51413,fork,reuseaddr TCP4:192.168.1.3:51413 & socat UDP4-LISTEN:51413,reuseaddr,fork UDP4:192.168.1.3:51413 & wait -n'

transmission-create -o output_20251119_221246_209.bin.completed.torrent -t http://8.134.193.218:6969/announce /NAS/output_20251119_221246_209.bin.completed
transmission-remote -a output_20251119_221246_209.bin.completed.torrent -w /NAS
transmission-remote -t 1 --find /downloads
transmission-remote -t 1 -v
transmission-remote -t 1 -s

certbot_dnspod_token_id = 542319
certbot_dnspod_token = 109e1416705c81bdb6fafcbfcfa8cd83

export DP_Id=542319
export DP_Key=109e1416705c81bdb6fafcbfcfa8cd83


acme.sh --issue --server letsencrypt --dns dns_dp \
-d *.dalaomai.cn -d dalaomai.cn \
--key-file /root/acme.sh/dalaomai.cn.key \
--fullchain-file /root/acme.sh/dalaomai.cn.crt
acme.sh --renew -d *.example.com --force

user root root;
worker_processes  auto;
error_log  logs/error.log info;

events {
    worker_connections  1024;
}

http {
        access_log logs/access.log;
        gzip on;
        gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
        gzip_comp_level 9;
        client_max_body_size 0;

        server {
                listen 80;
                server_name immich.dalaomai.cn;
                return 301 https://$server_name$request_uri;
        }

        server {
                listen 443 ssl;
                server_name immich.dalaomai.cn;
                ssl_certificate /root/dalaomai/fullchain.pem;
                ssl_certificate_key /root/dalaomai/privkey.pem;
                ssl_session_timeout 1d;
                #请按照以下协议配置
                #ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
                #请按照以下套件配置，配置加密套件，写法遵循 openssl 标准。
                #ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
                ssl_prefer_server_ciphers on;

                # allow large file uploads
                client_max_body_size 50000M;

                # Set headers
                proxy_set_header Host              $http_host;
                proxy_set_header X-Real-IP         $remote_addr;
                proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto $scheme;

                # enable websockets: http://nginx.org/en/docs/http/websocket.html
                proxy_http_version 1.1;
                proxy_set_header   Upgrade    $http_upgrade;
                proxy_set_header   Connection "upgrade";
                proxy_redirect     off;

                # set timeout
                proxy_read_timeout 600s;
                proxy_send_timeout 600s;
                send_timeout       600s;

                location / {
                        proxy_pass http://192.168.1.3:2283;
                }
        }
}