cloudflare使用

  • R2对象存储

# 使用 rclone 命令来同步数据到存储桶

## 配置[管理 R2 API 令牌]
cat $(pwd)/rclone/rclone.conf

[mys2]
type = s3
provider = Cloudflare
access_key_id = 911d7fe7bxxx9319xxxx8a213c5
secret_access_key = 6f4555fa5a25a56cxxxx559e83c53cf44cbxxxx23750e55d95
endpoint = https://a36fd3c20xxxxxxf7c8390c328f.r2.cloudflarestorage.com
acl = private

# 查看配置
sudo docker run -e RCLONE_CONFIG=/rclone/rclone.conf --rm -v $(pwd)/rclone:/rclone -v $(pwd):$(pwd) -w $(pwd) --name rclone docker.2011101.xyz/bitnami/rclone:latest config show
# 查看[jclengr2]桶数据
sudo docker run -e RCLONE_CONFIG=/rclone/rclone.conf --rm -v $(pwd)/rclone:/rclone -v $(pwd):$(pwd) -w $(pwd) --name rclone docker.2011101.xyz/bitnami/rclone:latest tree mys2:/jclengr2
# 同步本地 ./data 目录到 / ,以本地为准, 会删除线上的多余数据
# sudo docker run -e RCLONE_CONFIG=/rclone/rclone.conf --rm -v $(pwd)/rclone:/rclone -v $(pwd):$(pwd) -w $(pwd) --name rclone docker.2011101.xyz/bitnami/rclone:latest sync ./data mys2:/jclengr2
# 复制, 增量同步
sudo docker run -e RCLONE_CONFIG=/rclone/rclone.conf --rm -v $(pwd)/rclone:/rclone -v $(pwd):$(pwd) -w $(pwd) --name rclone docker.2011101.xyz/bitnami/rclone:latest copy ./data mys2:/jclengr2


# 实例: 把 bin 文件夹的内容复制到线上 /openwrt/mt7621-xiaomi_redmi-router-ac2100/文件夹
docker run -it -e RCLONE_CONFIG=/rclone/rclone.conf --rm -v $(pwd)/rclone:/rclone -v $(pwd):$(pwd) -w $(pwd) --name rclone registry.cn-hangzhou.aliyuncs.com/jcleng/bitnami-rclone:latest copy ./mt7621-xiaomi_redmi-router-ac2100/bin mys2:/jclengr2/openwrt/mt7621-xiaomi_redmi-router-ac2100/

  • 挂载s3到硬盘

# 创建/home/jcleng/.config/rclone/rclone.conf配置文件之后
apt-get install -y fuse
mkdir -p /home/jcleng/Downloads/aria2/s3
# 挂载
rclone mount s3disk:/jclengr2 /home/jcleng/Downloads/aria2/s3 --daemon
rclone mount s3disk:/mys2 /home/jcleng/Downloads/aria2/mys2 --daemon
# 卸载
fusermount -u /home/jcleng/Downloads/aria2/s3

# docker里面不止直接进行挂载, 使用插件使用ssh挂载到新目录,然后把新目录映射给docker; aria2c下载不支持s3文件系统
sshfs [email protected]:/home/jcleng/Downloads/aria2/s3 /home/jcleng/Downloads/aria2/s32 -p2222
docker run -it --rm --privileged \
    -v /home/jcleng/Downloads/aria2/s32:/s3 \
    registry.cn-hangzhou.aliyuncs.com/jcleng/library-busybox \
    ls /s3

  • 使用work实现镜像站(先解析A类型到任意ip且已代理, 再给worker增加路由通配符: my.site.xyz/*), 速度一般, 带宽很小

// 代理github,这种方式只能浏览, 其他下载和api不是主域名,无法代理的
// 你要镜像的网站.
const upstream = 'github.com'

// 镜像网站的目录，比如你想镜像某个网站的二级目录则填写二级目录的目录名，镜像 google 用不到，默认即可.
const upstream_path = '/'

// 镜像站是否有手机访问专用网址，没有则填一样的.
const upstream_mobile = 'github.com'

// 屏蔽国家和地区.
const blocked_region = ['KP', 'SY', 'PK', 'CU']

// 屏蔽 IP 地址.
const blocked_ip_address = ['0.0.0.0', '127.0.0.1']

// 镜像站是否开启 HTTPS.
const https = true

// 文本替换.
const replace_dict = { '$upstream': '$custom_domain', '//github.com': '' }

// 以下保持默认，不要动
addEventListener('fetch', event => {
    event.respondWith(fetchAndApply(event.request))
})

async function fetchAndApply(request) {
    const region = request.headers.get('cf-ipcountry').toUpperCase()
    const ip_address = request.headers.get('cf-connecting-ip')
    const user_agent = request.headers.get('user-agent')

    let response = null
    let url = new URL(request.url)
    let url_hostname = url.hostname

    if (https == true) {
        url.protocol = 'https:'
    } else {
        url.protocol = 'http:'
    }

    if (await device_status(user_agent)) {
        var upstream_domain = upstream
    } else {
        var upstream_domain = upstream_mobile
    }

    url.host = upstream_domain
    if (url.pathname == '/') {
        url.pathname = upstream_path
    } else {
        url.pathname = upstream_path + url.pathname
    }

    if (blocked_region.includes(region)) {
        response = new Response('Access denied: WorkersProxy is not available in your region yet.', {
            status: 403
        })
    } else if (blocked_ip_address.includes(ip_address)) {
        response = new Response('Access denied: Your IP address is blocked by WorkersProxy.', {
            status: 403
        })
    } else {
        let method = request.method
        let request_headers = request.headers
        let new_request_headers = new Headers(request_headers)

        new_request_headers.set('Host', url.hostname)
        new_request_headers.set('Referer', url.hostname)

        let original_response = await fetch(url.href, {
            method: method,
            headers: new_request_headers
        })

        let original_response_clone = original_response.clone()
        let original_text = null
        let response_headers = original_response.headers
        let new_response_headers = new Headers(response_headers)
        let status = original_response.status

        new_response_headers.set('access-control-allow-origin', '*')
        new_response_headers.set('access-control-allow-credentials', true)
        new_response_headers.delete('content-security-policy')
        new_response_headers.delete('content-security-policy-report-only')
        new_response_headers.delete('clear-site-data')

        const content_type = new_response_headers.get('content-type')
        if (content_type.includes('text/html') && content_type.includes('UTF-8')) {
            original_text = await replace_response_text(original_response_clone, upstream_domain, url_hostname)
        } else {
            original_text = original_response_clone.body
        }

        response = new Response(original_text, {
            status,
            headers: new_response_headers
        })
    }
    return response
}

async function replace_response_text(response, upstream_domain, host_name) {
    let text = await response.text()

    var i, j
    for (i in replace_dict) {
        j = replace_dict[i]

        if (i == '$upstream') {
            i = upstream_domain
        } else if (i == '$custom_domain') {
            i = host_name
        }

        if (j == '$upstream') {
            j = upstream_domain
        } else if (j == '$custom_domain') {
            j = host_name
        }

        let re = new RegExp(i, 'g')
        text = text.replace(re, j)
    }
    return text
}

async function device_status(user_agent_info) {
    var agents = ["Android", "iPhone", "SymbianOS", "Windows Phone", "iPad", "iPod"]
    var flag = true
    for (var v = 0; v < agents.length; v++) {
        if (user_agent_info.indexOf(agents[v]) > 0) {
            flag = false
            break
        }
    }
    return flag
}

  • Worker 直接转发dl.flathub.org

// 先添加 flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
// 后,更改flathub的url才会生效
// sudo flatpak remotes --columns=name,url
// sudo flatpak remote-modify flathub --url=https://cfflathub.2011101.xyz/repo
// curl https://cfflathub.2011101.xyz/repo/config
// 还原 sudo flatpak remote-modify flathub --url=https://flathub.2011101.xyz/repo

addEventListener('fetch', event => {
    event.respondWith(handleRequest(event.request))
})

async function handleRequest(request) {
    let url = new URL(request.url);
    let newUrl = new URL('https://dl.flathub.org' + url.pathname + url.search);
    // 构建新请求
    let newRequest = new Request(newUrl, {
        method: request.method,
        headers: request.headers,
        body: request.body,
        redirect: request.redirect
    });

    // 发起代理请求并返回响应
    return fetch(newRequest);
}

或者使用dl.flathub.org.js