mcpField
L
linux-server-expert

linux-server-expert

github.com/duck4nh云与 DevOps15611 次安装37 周前更新
代码仓库

关于 linux-server-expert

面向 Linux 服务器管理者的操作指南，涵盖基础初始化、防火墙、Nginx、SSL 和 systemd 服务配置，并附有常用排查命令。

主要功能

  1. 01服务器用户与 SSH 设置
  2. 02UFW 防火墙配置
  3. 03Nginx 反向代理配置
  4. 04Certbot SSL 配置
  5. 05systemd 服务管理
  6. 06日志与磁盘排查命令

适用场景

  1. 01初始化新部署服务器
  2. 02配置 Web 应用反向代理和 HTTPS
  3. 03管理应用服务并检查日志

安装

复制下面的命令，在终端中运行。

$npx skills add https://github.com/duck4nh/antigravity-kit --skill linux-server-expert

安装后在 Claude Code 中输入/linux-server-expert确认已加载。

详细介绍

Linux 服务器专家

服务器初始设置

# Update system
apt update && apt upgrade -y

# Create user with sudo
adduser deploy
usermod -aG sudo deploy

# SSH key auth
mkdir -p /home/deploy/.ssh
chmod 700 /home/deploy/.ssh
# Add public key to authorized_keys

# Disable root login & password auth
vim /etc/ssh/sshd_config
# PermitRootLogin no
# PasswordAuthentication no
systemctl restart sshd

防火墙（UFW）

ufw default deny incoming
ufw default allow outgoing
ufw allow ssh
ufw allow 80/tcp
ufw allow 443/tcp
ufw enable
ufw status

Nginx 配置

# /etc/nginx/sites-available/myapp
server {
    listen 80;
    server_name example.com www.example.com;
    
    location / {
        proxy_pass http://localhost:3000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_cache_bypass $http_upgrade;
    }
}

# Enable site
ln -s /etc/nginx/sites-available/myapp /etc/nginx/sites-enabled/
nginx -t && systemctl reload nginx

使用 Let's Encrypt 配置 SSL

apt install certbot python3-certbot-nginx -y
certbot --nginx -d example.com -d www.example.com
# Auto-renewal is set up automatically
certbot renew --dry-run

Systemd 服务

# /etc/systemd/system/myapp.service
[Unit]
Description=My App
After=network.target

[Service]
Type=simple
User=deploy
WorkingDirectory=/home/deploy/myapp
ExecStart=/usr/bin/node dist/main.js
Restart=on-failure
Environment=NODE_ENV=production

[Install]
WantedBy=multi-user.target

systemctl daemon-reload
systemctl enable myapp
systemctl start myapp
systemctl status myapp

快速命令

# Logs
journalctl -u myapp -f          # Service logs
tail -f /var/log/nginx/error.log

# Disk
df -h                           # Disk usage
du -sh /var/*                   # Directory sizes

# Process
htop                            # Process monitor
lsof -i :3000                   # What uses port

评论

支持 Markdown