品书人

certbot --nginx -d $domain -d $subdomain -d $subdomain

certbot certonly -d $domain --agree-tos --register-unsafely-without-email --webroot -w /var/www/html

cd /etc/letsencrypt && chmod o+rx live archive && chmod o+r archive/$domain/privkey*.pem

#替换你的域名、Trojan/WordPress服务的密码
domain='pinshu.ren'
password='yourpasswd'

sed -i -e 's/grep /grep -ai /' -e '/ll=/d' .bashrc && echo 'sudo su' >> .profile && sudo su
cd /etc/update-motd.d && rm 10-help-text 50-motd-news 90-updates-available && sed -i -e '/  System information as of /d' -e 's/\/bin\/date/uptime/' 50-landscape-sysinfo && cd /etc/apt/apt.conf.d && sed -i -e 's/\/\/\(.*updates"\)/\1/' -e 's/\/\/\(.*-Unused-\)/\1/' -e 's/\(.*-Unused-.*\)false/\1true/' -e 's/\/\/\(.*Reboot "\)false/\1true/' -e 's/\/\/\(.*Time "0\)2/\15/' 50unattended-upgrades && sed -i -e 's/grep /grep -ai /' -e '/ll=/d' ~/.bashrc && cd /etc && ln -fs /usr/share/zoneinfo/Asia/Shanghai localtime && echo "
alias ll='ls -lh'
alias lct='ls -ct'      #sort by ctime
alias llct='ll -ct'
alias llctr='ll -ctr'
alias lctr='ls -ctr'
alias lmt='ls -t'       #sort by mtime
alias llmt='ll -t'
alias llmtr='ll -tr'
alias lmtr='ls -tr'
alias lat='ls -ut'      #sort by atime
alias llat='ll -ut'
alias llatr='ll -utr'
alias latr='ls -utr'
alias lx='ls -X'        #sort by extension
alias llx='ll -X'
alias lls='ll -S'       #sort by size
alias llsr='ll -Sr'
alias li='ls -I'        #--ignore=PATTERN
alias lr='ls -R'        #--recursive
alias llhd='ls -lhd'
alias llk='ll --block-size=K'
alias llm='ll --block-size=M'
  
alias dfh='df -ht ext4'
alias dfg='df -t ext4 -PBG'
alias dfm='df -t ext4 -PBM'
alias duh='du -hd0'
alias dug='du -d0 -BG'
alias dum='du -d0 -BM'
  
alias pscpu='ps -eo pid,pcpu,rss,stime,time,cmd --sort=-pcpu | head -n6'
alias psmem='ps -eo pid,pcpu,rss,stime,time,cmd --sort=-rss | head -n6'
alias mcm='free -m && echo --sort=-pcpu && pscpu && echo --sort=-rss && psmem'
  
alias te='/usr/bin/time -f %E'
  
alias ping='ping -c 10'
alias wget='wget -c -t0'" >> bash.bashrc
#谷歌云GCP内核需开启BBR，其它VPS默认已开启(内核>4.9)，多余命令可以删掉
echo 'net.core.default_qdisc=fq
net.ipv4.tcp_congestion_control=bbr' >> sysctl.conf && sysctl -p # --system
#Minimal不包含add-apt-repository
add-apt-repository -y ppa:greaterfire/trojan && apt-get update && apt-get install -y fail2ban supervisor nginx mariadb-server php-fpm php-mysql certbot trojan unzip && apt-get upgrade -y && apt-get autoremove -y && apt-get clean && sed -i 's/^bantime.*10m/bantime=10y/' /etc/fail2ban/jail.conf && cd /etc/nginx/ && cp sites-available/default ~ && sed -i -e "s/\/html/\/php/" -e 's/index.html /index.php /' -e "s/server_name _/server_name $domain/" -e 's/#location ~ \\/location ~ \\/' -e 's/#\(.*\)fastcgi-php/\1fastcgi-php/' -e 's/#\(.*\)fpm.sock;/\1fpm.sock;}/' sites-available/default && wget wordpress.org/latest.zip && unzip latest.zip && rm latest.zip && chown -R www-data:www-data wordpress/ && mv wordpress /var/www/php && cd /var/www/php && mv wp-config-sample.php wp-config.php && sed -i -e 's/database_name_here/wordpress/' -e 's/username_here/wordpress/' -e "s/password_here/$password/" wp-config.php && certbot certonly -d $domain --agree-tos --register-unsafely-without-email --webroot -w /var/www/html && service nginx reload && echo '0 3 1 */2 * certbot renew' | crontab - && sed -i -e "s/password1/$password/" -e "s/\/path\/to\/certificate.crt/\/etc\/letsencrypt\/live\/$domain\/fullchain.pem/" -e "s/\/path\/to\/private.key/\/etc\/letsencrypt\/live\/$domain\/privkey.pem/" /etc/trojan/config.json && cd /etc/letsencrypt && chmod o+rx live archive && chmod o+r archive/$domain/privkey1.pem && systemctl enable trojan && service trojan start && mysql_secure_installation && mysql -p #root,INDEX.PHP,server_name,fastcgi-php,fpm.sock
#mysql_secure_installation:passwd,n,4y
create database wordpress;
create user wordpress@localhost identified by 'yourpasswd';
grant all privileges on wordpress.* to wordpress@localhost;
flush privileges;
exit
#certbot --nginx -d $domain -d $subdomain #需要多装一个软件包python3-certbot-nginx

echo '0 3 1 */2 * certbot renew' | crontab -