APT 配置

更改为 https 源，升级系统并安装常用工具

sed -i 's/http:/https:/g' /etc/apt/sources.list
apt update && apt upgrade -y
apt install -y curl wget git screen htop zsh sudo rsync nano nload

配置 SSH

配置 SSH 密钥登陆

mkdir -p ~/.ssh
nano ~/.ssh/authorized_keys

禁用密码登录，改用 SSH Key

sed -i 's/#PasswordAuthentication yes/PasswordAuthentication no/' /etc/ssh/sshd_config
systemctl restart sshd

安装 oh-my-zsh

sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"
nano ~/.zshrc
source ~/.zshrc

安装 Docker

curl -fsSL https://get.docker.com | sh

配置自动更新

apt-get install -y unattended-upgrades apt-listchanges
dpkg-reconfigure unattended-upgrades

启用 ZRAM

apt install -y zram-tools
echo -e "ALGO=zstd\nPERCENT=60" | tee -a /etc/default/zramswap
service zramswap reload

启用 BBR 网络优化

# check if bbr is enabled
sysctl net.ipv4.tcp_congestion_control

echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf
echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf
sysctl -p

配置时间同步（Chrony）

apt install -y chrony
nano /etc/chrony/sources.d/corps.sources

# 添加以下时间服务器
pool time.apple.com iburst
pool time.google.com iburst
pool time.cloudflare.com iburst nts

chronyc reload sources

配置 DNS 服务（systemd-resolved）

apt install -y systemd-resolved
systemctl enable --now systemd-resolved
nano /etc/systemd/resolved.conf

# TODO: 使用 sed 配置 Cloudflare DNS 和备用 DNS
DNS=1.1.1.1#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1111#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com
FallbackDNS=8.8.8.8#dns.google 8.8.4.4#dns.google 2001:4860:4860::8888#dns.google 2001:4860:4860::8844#dns.google 9.9.9.9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 2620:fe::9#dns.quad9.net
DNSOverTLS=yes
MulticastDNS=no
LLMNR=no

systemctl restart systemd-resolved

以上步骤完成后，服务器即可投入使用。