${{ secrets.TRAVIS_CI }}

docker volume create portainer_data
docker run -d \
-p 8000:8000 \
-p 9000:9000 \
--name portainer \
--restart=always \
-v /var/run/docker.sock:/var/run/docker.sock \
-v portainer_data:/data \
cr.portainer.io/portainer/portainer-ce

version: '3'
services:
  mybunkerized:
    image: bunkerity/bunkerized-nginx
    ports:
      - 80:8080
      - 443:8443
    volumes:
      # - /bilibifun.cn/www:/www:ro
      - /bilibifun.cn/certs:/etc/letsencrypt
      - /bilibifun.cn/server-confs:/server-confs
      - /bilibifun.cn/modsec-crs-confs:/modsec-crs-confs
    environment:
      - SERVE_FILES=no
      - SERVER_NAME=www.bilibifun.cn
      - AUTO_LETS_ENCRYPT=yes
      - USE_REVERSE_PROXY=yes
      # - PROXY_REAL_IP=yes
      - DISABLE_DEFAULT_SERVER=yes
      - REDIRECT_HTTP_TO_HTTPS=yes
      - REVERSE_PROXY_WS=yes
      - USE_BAD_BEHAVIOR=no
      - USE_LIMIT_REQ=no
      - REVERSE_PROXY_KEEPALIVE=yes
      - BLOCK_USER_AGENT=no
      - ALLOWED_METHODS=GET|POST|HEAD|PROPFIND|DELETE|PUT|MKCOL|MOVE|COPY|PROPPATCH|REPORT
      - USE_MODSECURITY=no

location /portainer/ {
        proxy_pass  http://172.17.0.1:9000;
        rewrite ^/portainer/(.*) /$1 break;
        proxy_set_header Host $proxy_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

version: '3'
services:
    v2raya:
        privileged: false
        network_mode: host
        container_name: v2raya
        environment:
            - 'V2RAYA_ADDRESS=0.0.0.0:9002'
        volumes:
            - '/lib/modules:/lib/modules'
            - '/etc/resolv.conf:/etc/resolv.conf'
            - '/etc/v2raya:/etc/v2raya'
        image: mzz2017/v2raya

location /v2raya/ {
        proxy_pass  http://172.17.0.1:9002/;
        proxy_set_header Host $host;
        proxy_redirect off;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

version: "3"
services:
  service.rss:
    image: wangqiru/ttrss:latest
    container_name: ttrss
    ports:
      - 9001:80
    environment:
      - SELF_URL_PATH=https://www.bilibifun.cn #这里虽然是baseUrl但还是只要填域名就好
      - DB_PASS=AAAAAAAAAA # use the same password defined in `database.postgres`
      - PUID=1000
      - PGID=1000
      - SESSION_COOKIE_LIFETIME=720 # 增加session时长
      - HTTP_PROXY=172.17.0.1:20171 # 这里就是神秘软件的端口了
    volumes:
      - feed-icons:/var/www/feed-icons/
    networks:
      - public_access
      - service_only
      - database_only
    stdin_open: true
    tty: true

  service.mercury: # set Mercury Parser API endpoint to `service.mercury:3000` on TTRSS plugin setting page
    image: wangqiru/mercury-parser-api:latest
    container_name: mercury
    networks:
      - public_access
      - service_only

  service.opencc: # set OpenCC API endpoint to `service.opencc:3000` on TTRSS plugin setting page
    image: wangqiru/opencc-api-server:latest
    container_name: opencc
    environment:
      - NODE_ENV=production
    networks:
      - service_only

  database.postgres:
    image: postgres:13-alpine
    container_name: postgres
    environment:
      - POSTGRES_PASSWORD=AAAAAAAAAA # feel free to change the password
    volumes:
      - ttrss_postgres:/var/lib/postgresql/data # persist postgres data to ~/postgres/data/ on the host
    networks:
      - database_only

volumes:
  feed-icons:
  ttrss_postgres:

networks:
  public_access: # Provide the access for ttrss UI
  service_only: # Provide the communication network between services only
    internal: true
  database_only: # Provide the communication between ttrss and database only
    internal: true

location /ttrss/ {
        rewrite /ttrss/(.*) /$1 break;
        proxy_redirect https://$http_host https://$http_host/ttrss;
        proxy_pass http://172.17.0.1:9001;

        proxy_set_header  Host                $http_host;
        proxy_set_header  X-Real-IP           $remote_addr;
        proxy_set_header  X-Forwarded-Ssl     on;
        proxy_set_header  X-Forwarded-For     $proxy_add_x_forwarded_for;
        proxy_set_header  X-Forwarded-Proto   $scheme;
        proxy_set_header  X-Frame-Options     SAMEORIGIN;

        client_max_body_size        100m;
        client_body_buffer_size     128k;

        proxy_buffer_size           4k;
        proxy_buffers               4 32k;
        proxy_busy_buffers_size     64k;
        proxy_temp_file_write_size  64k;
    }

version: '3'

services:
    rsshub:
        image: diygod/rsshub
        ports:
            - '9003:1200'
        environment:
            NODE_ENV: production
            CACHE_TYPE: redis
            REDIS_URL: 'redis://redis:6379/'
            PUPPETEER_WS_ENDPOINT: 'ws://browserless:3000'
        depends_on:
            - redis
            - browserless

    browserless:
        # See issue 6680
        image: browserless/chrome:1.43-chrome-stable
        ulimits:
          core:
            hard: 0
            soft: 0

    redis:
        image: redis:alpine
        volumes:
            - redis-data:/data

volumes:
    redis-data:

location /rsshub/ {
        proxy_pass  http://172.17.0.1:9003/;
        proxy_set_header Host $host;
        proxy_redirect off;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

version: "3"

services:
    bitwarden:
        image: vaultwarden/server
        container_name: bitwarden-server
        ports:
            - "9004:80"
            - "9005:3012"
        volumes:
            - bitwarden:/data
        environment:
            WEBSOCKET_ENABLE: "true"
            SIGNUPS_ALLOWED: "true"
            WEB_VAULT_ENABLE: "true"
            DOMAIN: "https://bilibifun.cn/bitwarden"
            ADMIN_TOKEN: "AAAAAAAAAAA"
volumes:
    bitwarden:

location /bitwarden/ {
    proxy_pass http://172.17.0.1:9004;
    proxy_set_header Host $proxy_host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}

location /bitwarden/notifications/hub {
        proxy_pass http://172.17.0.1:9005;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
}

location /bitwarden/notifications/hub/negotiate {
        proxy_pass http://172.17.0.1:9004;
}

version: '3.3'
services:
    nps:
        container_name: nps
        ports:
            - '9009:8024'
            - '9010:8080'
            - '10000-10020:10000-10020'
        volumes:
            - '/root/conf:/conf'
        image: ffdfgdfg/nps

location /nps/ {
    proxy_pass  http://172.17.0.1:9010;
    proxy_set_header Host $proxy_host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}

module.exports = {
  lang: 'zh-CN',
  title: '批哩FUN',
  description: '批哩FUN',
  head: [['link', { rel: 'icon', href: 'logo.jpg' }]],

  themeConfig: {
    logo: 'logo.jpg',

    //顶部导航栏
    navbar: [
      {text:'我的博客', link: 'https://misakatang.cn'},
      {text:'TTRSS', link: 'https://www.bilibifun.cn/ttrss'},
      {text:'Portainer', link: 'https://www.bilibifun.cn/portainer'},
      {text:'青龙面板', link: 'http://110.40.154.33:9006'},
      {text:'NPS', link: 'https://www.bilibifun.cn/nps'},
      {text:'Bitwarden', link: 'https://www.bilibifun.cn/bitwarden'},
      {text:'RSS Hub', link: 'https://www.bilibifun.cn/rsshub'},
      {text:'V2rayA', link: 'https://www.bilibifun.cn/v2raya'},
      {text:'WEBDAV', link: 'https://www.bilibifun.cn/webdav'},
    ],
  },
}

FROM node:17-alpine as builder

COPY . /workdir
WORKDIR /workdir
RUN ls
RUN npm install -g cnpm --registry=https://registry.npm.taobao.org
RUN cnpm -v
RUN cnpm i yarn tyarn -g
RUN tyarn -v
RUN tyarn
RUN tyarn docs:build

# 选择更小体积的基础镜像
FROM nginx:alpine
COPY --from=builder /workdir/docs/.vuepress/dist /usr/share/nginx/html

git pull

docker build -t bilibifun-home .

(docker stop bilibifun-home && docker rm bilibifun-home) || true

docker run -p 9013:80 --name bilibifun-home -d bilibifun-home

echo y | docker system prune

location / {
        proxy_pass  http://172.17.0.1:9013/;
        proxy_set_header Host $host;
        #proxy_redirect off;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu-ports/ b#  清华
deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu-ports/ bionic main restricted universe multiverse
deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu-ports/ bionic-security main restricted universe multiverse
deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu-ports/ bionic-updates main restricted universe multiverse
deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu-ports/ bionic-proposed main restricted universe multiverse
deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu-ports/ bionic-backports main restricted universe multiverse
deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu-ports/ bionic main restricted universe multiverse
deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu-ports/ bionic-security main restricted universe multiverse
deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu-ports/ bionic-updates main restricted universe multiverse
deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu-ports/ bionic-proposed main restricted universe multiverse
deb-src http://mirrors.tuna.tsinghua.edu.cn/ubuntu-ports/ bionic-backports main restricted universe multiverse

## 因为服务器上配置了nginx所以取消监听80和443端口
#HTTP(S) proxy port, no startup if empty
http_proxy_ip=0.0.0.0
#http_proxy_port=80
#https_proxy_port=443
#https_just_proxy=true
#default https certificate setting
#https_default_cert_file=conf/server.pem
#https_default_key_file=conf/server.key

## 指定服务端连接时的端口 
##bridge
bridge_type=tcp
bridge_port=444
bridge_ip=0.0.0.0

## 管理面板配置
#web
web_host= 1.1.1.1
web_username=admin
web_password=admin
web_port = 8080

./npc -server=1.1.1.1:444 -vkey=key
./npc install -server=1.1.1.1:444 -vkey=key
sudo npc start

[Unit]
Description=V2Ray Service
After=network.target
Wants=network.target

[Service]
# This service runs as root. You may consider to run it as another user for security concerns.
# By uncommenting the following two lines, this service will run as user v2ray/v2ray.
# More discussion at https://github.com/v2ray/v2ray-core/issues/1011
# User=v2ray
# Group=v2ray
Type=simple
PIDFile=/run/v2ray.pid
ExecStart=/usr/bin/v2ray/v2ray -config /etc/v2ray/config.json
Restart=on-failure
# Don't restart in the case of configuration error
RestartPreventExitStatus=23

[Install]
WantedBy=multi-user.target

curl -fsSL get.docker.com -o get-docker.sh
sudo sh get-docker.sh --mirror Aliyun

sudo pip3 install --proxy http://127.0.0.1:7892 --cache-dir=/home/ubuntu/piptmp --build /home/ubuntu/piptmp ajenti-panel ajenti.plugin.ace ajenti.plugin.augeas ajenti.plugin.auth-users ajenti.plugin.core ajenti.plugin.dashboard ajenti.plugin.datetime ajenti.plugin.filemanager ajenti.plugin.filesystem ajenti.plugin.network ajenti.plugin.notepad ajenti.plugin.packages ajenti.plugin.passwd ajenti.plugin.plugins ajenti.plugin.power ajenti.plugin.services ajenti.plugin.settings ajenti.plugin.terminal

df -h 
du -h -d 1 | grep G