LXC 安裝 Squid

 若 LXC 阻擋了 systemd 自動建立目錄的權限，請覆蓋該設定：

修改 systemd 設定覆蓋 RuntimeDirectory

檢視 Squid 的 RuntimeDirectory 配置

systemctl show squid.service -p RuntimeDirectory

sudo systemctl edit squid.service

[Service]

RuntimeDirectory=

ExecStartPre=-/bin/mkdir -p /run/squid

ExecStartPre=-/bin/chown proxy:proxy /run/squid

Apache2 設定編碼方式

編輯  /etc/apache2/conf-available/charset.conf 加入
AddDefaultCharset UTF-8

編輯 .htaccess
AddDefaultCharset UTF-8
AddType 'text/html; charset=UTF-8' .html .htm
AddType 'application/json; charset=UTF-8' .json

Vi 使用滑鼠時完全不觸發 Visual Mode

:set mouse=

配置文件 vim ~/.vimrc

保持 Vim 滑鼠功能，按住 Shift鍵選取

Linux mirror port 設定筆記

清除 eth2 IP 設定混雜模式
sudo ip addr flush dev eth2
sudo ip link set dev eth2 up
sudo ip link set dev eth2 promisc on

設定 tc eth1 進入規則
sudo tc qdisc add dev eth1 handle ffff: ingress
sudo tc filter add dev eth1 parent ffff: protocol all u32 match u32 0 0 action mirred egress mirror dev eth2

設定 tc eth1 流出規則
sudo tc qdisc add dev eth1 root handle 1: prio
sudo tc filter add dev eth1 parent 1: protocol all u32 match u32 0 0 action mirred egress mirror dev eth2

檢查 tc 規則
sudo tc filter show dev eth1 ingress
sudo tc filter show dev eth1 parent 1:

刪除 tc 規則
sudo tc qdisc del dev eth1 handle ffff: ingress
sudo tc qdisc del dev eth1 root

關閉 eth1 的混雜模式
sudo ip link set dev eth2 promisc off


modprobe ifb act_mirred
ip link set dev nic2 promisc on
tc qdisc add dev nic1 handle ffff: ingress
tc filter add dev nic1 parent ffff: protocol all u32 match u32 0 0 action mirred egress mirror dev nic2

tc qdisc add dev nic1 root handle 1: prio
tc filter add dev nic1 parent 1: protocol all u32 match u32 0 0 action mirred egress mirror dev nic2

tc filter show dev nic1 ingress
tc filter show dev nic1 parent 1:

Open WebUI 設定為免帳號、免登入使用 Docker 執行

 docker run -d -p 3000:8080 \
  -e WEBUI_AUTH=False \
  -e OLLAMA_BASE_URL=http://host.docker.internal:11434 \
  --add-host=host.docker.internal:host-gateway \
  -v open-webui-data:/app/backend/data \
  --name open-webui \
  --restart always \
  ghcr.io/open-webui/open-webui:main

Apache2 修改 加密設定

 SSLHonorCipherOrder on

SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384

SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1

nginx 修改 加密設定

ssl_prefer_server_ciphers on;

ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384';

#ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384;

ssl_protocols TLSv1.2 TLSv1.3;