想象这样一个场景：

懒人党的福音：顶级全自动化影音系统全方位深入剖析

首先，为什么我们需要影音系统？

想象这样一个场景：

打开一个网页，点开搜索框输入想看的电影/电视剧/音乐/书籍，点一个按钮，过几分钟对应的高清资源已经呈现在你的Emby影视库中，刮削完毕，字幕配好，你什么都不需要干，只需要找个舒服的地方开开心心地享受就行。

观影、追剧、刮削、字幕，下载全部自动化，爽不爽？牛不牛逼？开不开心？想不想学？

那么本文就教你如何在VPS或NAS上实现这一整套流程以及这一切的背后究竟是怎么实现的。

转载请标注出处。

TL;DR

Emby负责影片的播放，刮削
Ombi是一个搜索前端
Sonarr,Radarr,Lidarr,Readarr负责资源的请求和整理
Prowlarr/Jackett负责indexers的管理和维护
Bazarr/Chinesesubfinder负责字幕的获取，整理，升级和维护
qBittorrent和NZBget负责资源的实际下载工作

硬件需求

最低:

CPU: 2 Cores 2 Threads
Ram: 4 GB
Storage: 200 GB

建议：

CPU: 4 Cores 8 Threads
Ram: 8 GB
Storage: 10 TB

巧妇难为无米之炊

那么，首先最重要的问题：巧妇难为无米之炊，我们要怎么获取这些影视资源呢？

摆在我们面前的有三条道路：BT/PT/Usenet，条条道路通罗马。

以下部分资料来源于Lei Shi。

相信大部分人对BT并不陌生，相较于中心化的下载服务器，BT利用P2P（Peer-to-Peer）技术，使每个在P2P网络中的用户都成为了资源的提供方；而资源则以分块的形式，散落在每个人的硬盘中，除非拿到种子文件，否则任何人都不（太）可能从网络中拿到完整的文件。正是这些特性，使得BT自一发布就流行至今。本文中使用的qBittorrent即是一款BT下载器，另外比较常用的还有Transmission/Deluge/uTorrent/aria2等。

比较常用的公网BT影视资源站有：

Pirate Bay，大名鼎鼎的海盗湾
RARBG，主要是影视资源，质量参差不齐
Nyaa，主要是动漫类资源，追番必备
dmhy，动漫花园，同上

优势：

新内容多且下载速度快
无入门门槛，免费

劣势：

旧内容（一般指大于3个月）下载速度相当慢
国内有迅雷吸血的问题（我用qbt加强版解决此问题）
需要公网IP以实现最大下载上传速度

PT（Private Tracker）在技术与BT并无本质不同，唯一的区别是，BT连接的是公开的Tracker，而PT通常需要邀请注册，并且用自己密钥才能连上Tracker。PT相比BT，入门有一定的门槛，高质量的站点要么只通过熟人间口口相传，要么需要捐赠注册，价格从几十到几百不等。拥有帐号后还需要一定的设备和动手能力来保持帐号的活跃。新入门PT建议从PT吧或者Reddit起步，从开放注册的PT站点或者有人大量发放的新手站点玩起，慢慢熟悉规则，再逐步进入更好的站点。

优势：

不论新旧下载速度都相当不错
没有迅雷吸血的问题

劣势

资源数量及质量取决于PT站本身
有入门门槛且需要一定技术知识
需要公网IP以实现最大下载上传速度

Usenet

Usenet是早期的一种互联网形式，它甚至比现在的互联网www更早。在早期的语境中，Usenet一般指新闻组，类似于BBS论坛。在本文中提到的Usenet，指的是利用Usenet网络，存储和分发大容量二进制内容（即各种影视资源）的特性。

相对于BT资源的良莠不齐，PT的高不可攀，Usenet兼具高质量资源和低门槛（有不少人不间断地从topsite/PT下载资源上传到Usenet），你只要有钱就行，并且也不是很多钱（大约$40+/年），同时还不需要像PT一样维护帐号活跃/长时间做种。

事实上，如果仅从影视资源角度，Usenet上的资源比任何一个顶级PT都要多、全，甚至有不少玩PT的人，使用Usenet完全是为了下载上面的资源再上传到PT上去；Usenet另一大优势是极快的下载速度，不像BT/PT，资源的下载速度严重依赖于做种人数的多少，Usenet的资源存在服务器上，几乎任何时刻你都可以跑满你的大部分带宽。

Usenet需要以下3个模块共同协作来下载资源：

Indexer，类似于种子搜索网站，提供下载Usenet资源需要的nzb文件。Indexer有免费的，有收费的，也有类似于PT一样进入门槛很高的，本文不作推荐，新手可以从免费的玩起，熟悉流程后再寻找质量更高的Indexer。

Provider，负责提供连接Usenet的帐号。Usenet的内容存储是分布式的，但是你需要一个Provider才能连上Usenet网络，Provider大部分收费，月付费$3-$5左右，这是使用Usenet最大的花销。

nzb下载软件，一般用nzbget即可。

优势

资源齐全且无论新旧都有极高的下载速度
不需要公网IP

劣势

没有中文
有入门门槛且付费
NZBGet在国内需要配合透明代理使用，有较高的技术门槛

Usenet Indexer 列表 Usenet Index Sites – 来自 Reddit ，本文不做推荐。

Usenet Provider优惠 Usenet Service Provider Deals – 来自 Reddit ，本文不做推荐

化零为整

有了资源还不够，这些资源是零散的，并不利于我们进行搜索。因此我们需要能将这些资源整合起来方便我们查询的软件。于是就有了 Prowlarr Jackett 以及 FlareSolverr。

Prowlarr 是建立在流行的 *arr .net/reactjs 基础堆栈上的索引器管理器/代理，可与您的各种 PVR 应用程序集成。 Prowlarr 支持 Torrent Tracker 和 Usenet Indexer 的管理。它与 Lidarr、Mylar3、Radarr、Readarr 和 Sonarr 无缝集成，提供对您的索引器的完整管理，无需为每个应用程序设置索引器（我们全部完成）。 – 来自 Prowlarr Github Repo

Jackett 充当代理服务器：它将来自应用程序（Sonarr、Radarr、SickRage、CouchPotato、Mylar3、Lidarr、DuckieTV、qBittorrent、Nefarious 等）的查询转换为特定于跟踪器站点的 http 查询，解析 html 或 json 响应，以及然后将结果发送回请求软件。这允许获取最近的上传（如 RSS）和执行搜索。 Jackett 是维护索引器抓取和翻译逻辑的单一存储库 – 消除了其他应用程序的负担。 – 来自 Jackett Github Repo

Prowlarr相当于Jackett的升级版，不仅可以让我们进行手动搜索，也可以全自动化地将配置同步给Sonarr Radarr Lidarr Readarr，省去了使用Jackett时必需手动配置与同步indexers的步骤。

FlareSolverr用于过CF的5秒盾。

化整为零

由于各种资源的分类不同，因此我们需要使用专门的软件去查询专门的分类以实现资源的最大化利用以及效率的最优解。因此这就有了 Sonarr 用于查询并下载电视剧，动画片等有集数的内容；Radarr 电影；Lidarr: 音乐；Readarr：电子书。

Sonarr 是供 Usenet 和 BitTorrent 用户使用的 PVR(其实就是一个电视剧管理器)。它可以监控多个 RSS 源以获取您最喜欢的节目的新剧集，并全自动化地抓取、排序和重命名它们。它还可以配置为在质量更好的格式可用时自动升级已下载文件的质量。 – 来自 Sonarr Github Repo

Radarr 是 Usenet 和 BitTorrent 用户的电影收藏管理器。它可以监控新电影的多个 RSS 提要，并将与客户端和索引器交互以全自动化地抓取、排序和重命名它们。它还可以配置为在质量更好的格式可用时自动升级库中现有文件的质量。 – 来自 Radarr Github Repo

Lidarr 是 Usenet 和 BitTorrent 用户的音乐收藏管理器。它可以监控多个 RSS 提要以获取您最喜欢的艺术家的新曲目，并全自动化地抓取、排序和重命名它们。它还可以配置为在质量更好的格式可用时自动升级已下载文件的质量。 – 来自 Lidarr Github Repo

Readarr 是 Usenet 和 BitTorrent 用户的电子书和有声读物收藏管理器。它可以监控来自您最喜欢的作者的新书的多个 RSS 提要，并全自动化地抓取、排序和重命名它们。请注意，仅支持给定书籍的一种类型。如果您想要给定书籍的有声读物和电子书，则需要多个实例。 – 来自 Readarr Github Repo

化零为整

但是作为用户，我们并不关心软件的具体分类，因此就有了 Ombi 来整合 Sonarr Radarr 以及 Lidarr 的搜索功能 (暂时不支持 Readarr)，让我们可以用一个前端完成所有的搜索工作。

Ombi 是您友好的媒体请求工具，可自动与您的媒体服务器同步！别担心，它对奶奶很友好，更重要的是；有老婆认可证? – 来自 Ombi Github Repo

无中生有

当我们确定了需要的内容后，我们就需要软件来从网络中下载需要的资源到本地。因此我们就有了 qBittorrent(BT/PT) 以及 NZBGet(Usenet)。

qBittorrent 是一个用 C++/Qt 编程的 bittorrent 客户端，它使用 Arvid Norberg 的 libtorrent（有时称为 libtorrent-rasterbar）。它旨在成为所有其他 bittorrent 客户端的良好替代品。 qBittorrent 快速、稳定并提供 unicode 支持以及许多功能。 – 来自 qBittorrent Github Repo

NZBGet 是一个二进制下载器，它根据 nzb-files 中给出的信息从 Usenet 下载文件。NZBGet 是用 C++ 编写的，以其性能和效率而闻名。 – 来自 NZBGet Github Repo

锦上添花

在拿到了需要的资源后，很多时候它们并没有附带我们所需要的字幕，因此我们就需要从网络中下载字幕的软件。于是就有了 Bazarr 以及 Chinesesubfinder。

Bazarr 是 Sonarr 和 Radarr 的配套应用程序。它根据您的要求管理和下载字幕。您可以通过电视节目或电影定义您的偏好，Bazarr 会为您处理一切。 – 来自 Bazarr Github Repo

本项目的初衷仅仅是想自动化搞定限定条件下中文字幕下载。 – 来自 Chinesesubfinder Github Repo

放飞自我

一切都就绪了，是时候开始享受了。拿瓶快乐水，躺在沙发上，打开 Emby 。远离现实的嘈杂，开始欣赏属于另一个世界的故事吧！

流程总结

那么现在让我们换个角度，从我们作为用户的角度出发总结一下发生了什么。

我们在Ombi(或者Sonarr等)中搜索了想要的内容，点击了添加至库存，等了一段时间，哇，Emby里面出现了！是不是很神奇？

千里之行始于足下

工作是为了躺平，现在让我们开始搭建吧。

以下案例中所有的代码均可在这里找到并复制黏贴。

本文使用 Debian Linux 操作系统以及 root 用户作为示范。默认用户名为admin,密码为adminadmin。

文件架构

所有文件都需要放在同一个/data目录下以启用硬链接，更多内容请看这个链接

12345678910111213141516171819

data├── torrents│  ├── Movies│  ├── Series│  ├── Music│  └── Books│  └── Others├── usenet│  ├── Movies│  ├── Series│  ├── Music│  └── Books│  └── Others└── media   ├── Movies   ├── Series   ├── Music   ├── Books   └── Others

新建文件夹

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556

## 一级子目录(sonarr,radarr,lidarr,readarr Docker卷)mkdir /data/## 二级子目录(qbt,emby,bazarr Docker卷)mkdir /data/torrents/mkdir /data/usenet/mkdir /data/media/## BT/PT qBittorrent 下载位置mkdir /data/torrents/Movies/mkdir /data/torrents/Series/mkdir /data/torrents/Music/mkdir /data/torrents/Books/mkdir /data/torrents/XXX/mkdir /data/torrents/Others/## Usenet NZBGet 下载位置mkdir /data/usenet/Movies/mkdir /data/usenet/Series/mkdir /data/usenet/Music/mkdir /data/usenet/Books/mkdir /data/usenet/XXX/mkdir /data/usenet/Others/## Sonarr Radarr Lidarr Readarr Rootfoldermkdir /data/media/Movies/mkdir /data/media/Series/mkdir /data/media/Music/mkdir /data/media/Books/mkdir /data/media/XXX/mkdir /data/media/Others/## 安装后面配置需要的软件apt-get install xml-twig-tools lsb-release unzip sqlite3 jq sudo -y## 新建软件配置文件夹mkdir /usr/share/nginx/nzbgetmkdir /usr/share/nginx/nzbget/configmkdir /usr/share/nginx/sonarrmkdir /usr/share/nginx/sonarr/configmkdir /usr/share/nginx/radarrmkdir /usr/share/nginx/radarr/configmkdir /usr/share/nginx/lidarrmkdir /usr/share/nginx/lidarr/configmkdir /usr/share/nginx/readarrmkdir /usr/share/nginx/readarr/configmkdir /usr/share/nginx/prowlarrmkdir /usr/share/nginx/prowlarr/configmkdir /usr/share/nginx/jackettmkdir /usr/share/nginx/jackett/configmkdir /usr/share/nginx/bazarrmkdir /usr/share/nginx/bazarr/configmkdir /usr/share/nginx/chinesesubfindermkdir /usr/share/nginx/chinesesubfinder/app/mkdir /usr/share/nginx/chinesesubfinder/app/cachemkdir /usr/share/nginx/chinesesubfinder/configmkdir /usr/share/nginx/ombimkdir /usr/share/nginx/ombi/config

Nginx

因为没有人会想去记各个应用的端口号，因此我们需要安装Nginx并配置子目录以及反向代理。

安装Nginx

1234567891011121314151617181920212223242526272829303132

apt-get updateapt-get install ca-certificates lsb-release -yapt-get install gnupg2 -ytouch /etc/apt/sources.list.d/nginx.listcat > '/etc/apt/sources.list.d/nginx.list' << EOFdeb https://nginx.org/packages/mainline/debian/ $(lsb_release -cs) nginxEOF  curl -fsSL https://nginx.org/keys/nginx_signing.key | apt-key add -  apt-get update  apt-get install nginx -ycat > '/lib/systemd/system/nginx.service' << EOF[Unit]Description=The NGINX HTTP and reverse proxy serverBefore=netdata.service trojan.serviceAfter=syslog.target network.target remote-fs.target nss-lookup.target[Service]Type=forkingPIDFile=/run/nginx.pidExecStartPre=/usr/sbin/nginx -tExecStart=/usr/sbin/nginxExecReload=/usr/sbin/nginx -s reloadExecStop=/bin/kill -s QUIT $MAINPIDPrivateTmp=trueLimitNOFILE=65536Restart=alwaysRestartSec=3s[Install]WantedBy=multi-user.targetEOFsystemctl daemon-reload

配置NGINX主配置文件

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748

cat > '/etc/nginx/nginx.conf' << EOFuser nginx;worker_processes auto;error_log /var/log/nginx/error.log warn;pid /run/nginx.pid;include /etc/nginx/modules-enabled/*.conf;events {  worker_connections 65536;  use epoll;  multi_accept on;}http {  autoindex_exact_size off;  http2_push_preload on;  aio threads;  charset UTF-8;  tcp_nodelay on;  tcp_nopush on;  server_tokens off;  proxy_intercept_errors on;  proxy_http_version 1.1;  proxy_ssl_protocols TLSv1.2 TLSv1.3;  proxy_set_header Host $http_host;  proxy_set_header X-Real-IP $remote_addr;  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;  include /etc/nginx/mime.types;  default_type application/octet-stream;  access_log /var/log/nginx/access.log;  log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '    '$status $body_bytes_sent "$http_referer" '    '"$http_user_agent" "$http_x_forwarded_for"';  sendfile on;  gzip on; # 本地Nas可以考虑把这个关掉节省CPU资源  gzip_proxied any;  gzip_types *;  gzip_comp_level 1;  include /etc/nginx/conf.d/default.conf;}EOF

启动Nginx

1	systemctl enable nginx --now

配置子目录以及反向代理

新建NGINX配置

12	rm /etc/nginx/conf.d/*.conf # 删除旧配置touch /etc/nginx/conf.d/default.conf

写入新配置

1	nano /etc/nginx/conf.d/default.conf

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148

server {  listen 80 fastopen=20 reuseport default_server so_keepalive=on;  server_name _;  location / {    root /usr/share/nginx/html/;  }    location /qbt/ {        #access_log off;        proxy_pass              http://127.0.0.1:8080/;        proxy_set_header        X-Forwarded-Host        $http_host;        }    location /emby/ {        #access_log off;        proxy_pass http://127.0.0.1:8096/;        proxy_pass_request_headers on;        proxy_set_header Host $host;        proxy_set_header X-Real-IP $remote_addr;        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;        proxy_set_header X-Forwarded-Host $http_host;        proxy_set_header Upgrade $http_upgrade;        proxy_set_header Connection $http_connection;        proxy_buffering off;        }    location /sonarr/ {        #access_log off;        proxy_pass http://127.0.0.1:8989/sonarr/;        proxy_pass_request_headers on;        proxy_set_header Host $host;        proxy_set_header X-Real-IP $remote_addr;        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;        proxy_set_header X-Forwarded-Host $http_host;        proxy_set_header Upgrade $http_upgrade;        proxy_set_header Connection $http_connection;        #proxy_buffering off;        }    location /radarr/ {        #access_log off;        proxy_pass http://127.0.0.1:7878/radarr/;        proxy_pass_request_headers on;        proxy_set_header Host $host;        proxy_set_header X-Real-IP $remote_addr;        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;        proxy_set_header X-Forwarded-Host $http_host;        proxy_set_header Upgrade $http_upgrade;        proxy_set_header Connection $http_connection;        #proxy_buffering off;        }    location /lidarr/ {        #access_log off;        proxy_pass http://127.0.0.1:8686/lidarr/;        proxy_pass_request_headers on;        proxy_set_header Host $host;        proxy_set_header X-Real-IP $remote_addr;        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;        proxy_set_header X-Forwarded-Host $http_host;        proxy_set_header Upgrade $http_upgrade;        proxy_set_header Connection $http_connection;        #proxy_buffering off;        }    location /readarr/ {        #access_log off;        proxy_pass http://127.0.0.1:8787/readarr/;        proxy_pass_request_headers on;        proxy_set_header Host $host;        proxy_set_header X-Real-IP $remote_addr;        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;        proxy_set_header X-Forwarded-Host $http_host;        proxy_set_header Upgrade $http_upgrade;        proxy_set_header Connection $http_connection;        #proxy_buffering off;        }    location /bazarr/ {        #access_log off;        proxy_pass http://127.0.0.1:6767/bazarr/;        proxy_pass_request_headers on;        proxy_set_header Host $host;        proxy_set_header X-Real-IP $remote_addr;        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;        proxy_set_header X-Forwarded-Host $http_host;        proxy_set_header Upgrade $http_upgrade;        proxy_set_header Connection $http_connection;        #proxy_buffering off;        }    location /chinesesubfinder/ {        #access_log off;        proxy_pass http://127.0.0.1:19035/;        proxy_pass_request_headers on;        proxy_set_header Host $host;        proxy_set_header X-Real-IP $remote_addr;        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;        proxy_set_header X-Forwarded-Host $http_host;        proxy_set_header Upgrade $http_upgrade;        proxy_set_header Connection $http_connection;        #proxy_buffering off;        }    location /prowlarr/ {        #access_log off;        proxy_pass http://127.0.0.1:9696/prowlarr/;        proxy_pass_request_headers on;        proxy_set_header Host $host;        proxy_set_header X-Real-IP $remote_addr;        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;        proxy_set_header X-Forwarded-Host $http_host;        proxy_set_header Upgrade $http_upgrade;        proxy_set_header Connection $http_connection;        #proxy_buffering off;        }    location /jackett/ {        #access_log off;        proxy_pass http://127.0.0.1:9117/jackett/;        proxy_pass_request_headers on;        proxy_set_header Host $host;        proxy_set_header X-Real-IP $remote_addr;        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;        proxy_set_header X-Forwarded-Host $http_host;        proxy_set_header Upgrade $http_upgrade;        proxy_set_header Connection $http_connection;        #proxy_buffering off;        }    location /ombi/ {        #access_log off;        proxy_pass http://127.0.0.1:3579/ombi/;        proxy_pass_request_headers on;        proxy_set_header Host $host;        proxy_set_header X-Real-IP $remote_addr;        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;        proxy_set_header X-Forwarded-Host $http_host;        proxy_set_header Upgrade $http_upgrade;        proxy_set_header Connection $http_connection;        #proxy_buffering off;        }    location /nzbget/ {        #access_log off;        proxy_pass http://127.0.0.1:6789/;        proxy_pass_request_headers on;        proxy_set_header Host $host;        proxy_set_header X-Real-IP $remote_addr;        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;        proxy_set_header X-Forwarded-Host $http_host;        proxy_set_header Upgrade $http_upgrade;        proxy_set_header Connection $http_connection;        #proxy_buffering off;        }    location /rsshub/ {        proxy_redirect off;        proxy_pass http://127.0.0.1:1200/;        }}

修改NGINX默认前端页面以方便进入

1	nano /usr/share/nginx/html/index.html

写入以下配置

123456789101112131415161718192021222324252627282930313233343536373839404142

<!DOCTYPE html><html><head><title>Welcome to nginx!</title><style>html { color-scheme: light dark; }body { width: 35em; margin: 0 auto;font-family: Tahoma, Verdana, Arial, sans-serif; }</style></head><body><h1>Welcome to nginx!</h1><p>If you see this page, the nginx web server is successfully installed andworking. Further configuration is required.</p><h>前端</h2><a href="http://10.0.0.1:80/emby/" target="_blank" rel="noreferrer">emby</a><a href="http://10.0.0.1:80/ombi/" target="_blank" rel="noreferrer">ombi</a><h2>中间层</h2><a href="http://10.0.0.1:80/sonarr/" target="_blank" rel="noreferrer">sonarr</a><a href="http://10.0.0.1:80/radarr/" target="_blank" rel="noreferrer">radarr</a><a href="http://10.0.0.1:80/lidarr/" target="_blank" rel="noreferrer">lidarr</a><a href="http://10.0.0.1:80/readarr/" target="_blank" rel="noreferrer">readarr</a><h2>字幕</h2><a href="http://10.0.0.1:80/bazarr/" target="_blank" rel="noreferrer">bazarr</a><a href="http://10.0.0.1:80/chinesesubfinder/" target="_blank" rel="noreferrer">chinesesubfinder</a><h2>索引器</h2><a href="http://10.0.0.1:80/prowlarr/" target="_blank" rel="noreferrer">prowlarr</a><a href="http://10.0.0.1:80/jackett/" target="_blank" rel="noreferrer">jackett</a><a href="http://10.0.0.1:80/rsshub/" target="_blank" rel="noreferrer">rsshub</a><h2>下载器</h2><a href="http://10.0.0.1:80/qbt/" target="_blank" rel="noreferrer">qbt</a><a href="http://10.0.0.1:80/nzbget/" target="_blank" rel="noreferrer">nzbget</a><p>For online documentation and support please refer to<a href="http://nginx.org/">nginx.org</a>.<br/>Commercial support is available at<a href="http://nginx.com/">nginx.com</a>.</p><p><em>Thank you for using nginx.</em></p></body></html>

10.0.0.1 替换成你自己 Nas/VPS 的IP，效果图如下

使配置生效

1	nginx -t && nginx -s reload

VPS请记得去自行配置SSL证书并修改NGINX配置。

Docker

安装Docker

apt-get install apt-transport-https ca-certificates curl gnupg-agent software-properties-common -ycurl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key add -#apt-key fingerprint 0EBFCD88add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/debian $(lsb_release -cs) stable"apt-get updateapt-get install docker-ce docker-ce-cli containerd.io -y

安装Docker-compose

dockerver=$(curl --retry 5 -s "https://api.github.com/repos/docker/compose/releases/latest" | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/1/') # 获取最新版Docker-composesudo curl --retry 5 -L "https://github.com/docker/compose/releases/download/${dockerver}/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-composesudo chmod +x /usr/local/bin/docker-compose

Emby

安装Emby

apt install -y apt-transport-httpscurl --retry 5 -LO https://github.com/MediaBrowser/Emby.Releases/releases/download/4.6.7.0/emby-server-deb_4.6.7.0_amd64.debdpkg -i emby-server-deb_4.6.7.0_amd64.debrm emby-server-deb_4.6.7.0_amd64.deb

qBittorrent

安装 qBittorrent 加强版

有些 PT 站可能指名不得使用这个版本，如遇此情况，请用原版。

1234567891011121314151617181920212223242526272829303132

mkdir /root/qbtcd /root/qbtqbtver=$(curl --retry 5 -s "https://api.github.com/repos/c0re100/qBittorrent-Enhanced-Edition/releases/latest" | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/1/')curl --retry 5 -LO https://github.com/c0re100/qBittorrent-Enhanced-Edition/releases/download/${qbtver}/qbittorrent-enhanced-nox_x86_64-linux-musl_static.zipunzip -o qb*.ziprm qb*.zipcp -f qb* /usr/bin/chmod +x /usr/bin/qbittorrent-noxcd /rootrm -rf /root/qbtcat > '/etc/systemd/system/qbittorrent.service' << EOF[Unit]Description=qBittorrent Daemon ServiceDocumentation=https://github.com/c0re100/qBittorrent-Enhanced-EditionWants=network-online.targetAfter=network-online.target nss-lookup.target[Service]Type=simpleUser=rootRemainAfterExit=yesExecStart=/usr/bin/qbittorrent-nox --profile=/usr/share/nginx/TimeoutStopSec=infinityLimitNOFILE=65536Restart=alwaysRestartSec=3s[Install]WantedBy=multi-user.targetEOFsystemctl daemon-reloadsystemctl enable qbittorrent.service

下载mmdb这样peer的国旗才会显示

mkdir /usr/share/nginx/qBittorrent/mkdir /usr/share/nginx/qBittorrent/data/mkdir /usr/share/nginx/qBittorrent/data/GeoIP/cd /usr/share/nginx/qBittorrent/data/GeoIP/curl -LO --progress-bar https://raw.githubusercontent.com/johnrosen1/vpstoolbox/master/binary/GeoLite2-Country.mmdbsystemctl restart qbittorrent

修改性能设置

123456789101112131415161718192021222324252627282930313233

cpu_thread_count=$(nproc --all)io_thread=$((${cpu_thread_count}*4))qbtcookie=$(curl -i --header 'Referer: http://127.0.0.1:8080' --data 'username=admin&password=adminadmin' http://127.0.0.1:8080/api/v2/auth/login | grep -i set-cookie | cut -c13-48) # adminadmin 为 webui 默认密码curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22auto_delete_mode%22:1%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22async_io_threads%22:${io_thread}%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22preallocate_all%22:true%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22customize_trackers_list_url%22:%22https:%2f%2ftrackerslist.com%2fall.txt%22%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22auto_update_trackers_enabled%22:true%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22idn_support_enabled%22:true%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22enable_multi_connections_from_same_ip%22:true%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22add_trackers_enabled%22:true%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22announce_to_all_tiers%22:true%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22announce_to_all_trackers%22:true%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22announce_to_all_trackers%22:true%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22limit_utp_rate%22:true%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22limit_tcp_overhead%22:true%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22limit_lan_peers%22:false%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22enable_os_cache%22:false%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22alternative_webui_enabled%22:false%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22web_ui_upnp%22:false%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22alternative_webui_path%22:%22%2fusr%2fshare%2fnginx%2fqBittorrent%2fweb%2f%22%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22max_connec%22:-1%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22max_connec_per_torrent%22:-1%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22web_ui_address%22:%22127.0.0.1%22%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22validate_https_tracker_certificate%22:false%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22peer_tos%22:0%7D  --cookie "${qbtcookie}"## 设置自动管理以及默认下载位置curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22auto_tmm_enabled%22:true%7D  --cookie "${qbtcookie}"curl http://127.0.0.1:8080/api/v2/app/setPreferences?json=%7B%22save_path%22:%22%2fdata%2fmedia%2f%22%7D --cookie "${qbtcookie}"

新增分类及对应的下载位置

curl -X POST -F 'category=Series' -F 'savePath=/data/torrents/Series/' http://127.0.0.1:8080/api/v2/torrents/createCategory --cookie "${qbtcookie}"curl -X POST -F 'category=Movies' -F 'savePath=/data/torrents/Movies/' http://127.0.0.1:8080/api/v2/torrents/createCategory --cookie "${qbtcookie}"curl -X POST -F 'category=Music' -F 'savePath=/data/torrents/Music/' http://127.0.0.1:8080/api/v2/torrents/createCategory --cookie "${qbtcookie}"curl -X POST -F 'category=Bookes' -F 'savePath=/data/torrents/Books/' http://127.0.0.1:8080/api/v2/torrents/createCategory --cookie "${qbtcookie}"curl -X POST -F 'category=XXX' -F 'savePath=/data/torrents/XXX/' http://127.0.0.1:8080/api/v2/torrents/createCategory --cookie "${qbtcookie}"curl -X POST -F 'category=Others' -F 'savePath=/data/torrents/Others/' http://127.0.0.1:8080/api/v2/torrents/createCategory --cookie "${qbtcookie}"

Docker-compose配置文件及命令行配置

Rsshub为可选项，主要用于爬取不提供RSS/API的网站。

写入Docker-compose配置文件

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171

cd /data/ # 放在同一个目录下方便管理cat > "docker-compose.yml" << EOFversion: "3.8"services:  nzbget: # 6789    network_mode: host     image: lscr.io/linuxserver/nzbget    container_name: nzbget    environment:      - PUID=0      - PGID=0      - TZ=Asia/Shanghai    volumes:      - /usr/share/nginx/nzbget/config:/config      - /data/usenet:/data/usenet:rw      - /ssd:/ssd:rw # 写入缓存    restart: unless-stopped  sonarr: # 8989    network_mode: host     image: lscr.io/linuxserver/sonarr    container_name: sonarr    environment:      - PUID=0      - PGID=0      - TZ=Asia/Shanghai    volumes:      - /usr/share/nginx/sonarr/config:/config      - /data:/data    restart: unless-stopped  radarr: # 7878    network_mode: host     image: lscr.io/linuxserver/radarr    container_name: radarr    environment:      - PUID=0      - PGID=0      - TZ=Asia/Shanghai    volumes:      - /usr/share/nginx/radarr/config:/config      - /data:/data    restart: unless-stopped  lidarr: # 8686    network_mode: host     image: lscr.io/linuxserver/lidarr    container_name: lidarr    environment:      - PUID=0      - PGID=0      - TZ=Asia/Shanghai    volumes:      - /usr/share/nginx/lidarr/config:/config      - /data:/data    restart: unless-stopped  readarr: # 8787    network_mode: host     image: lscr.io/linuxserver/readarr:develop    container_name: readarr    environment:      - PUID=0      - PGID=0      - TZ=Asia/Shanghai    volumes:      - /usr/share/nginx/readarr/config:/config      - /data:/data    restart: unless-stopped      prowlarr: # 9696    network_mode: host    image: lscr.io/linuxserver/prowlarr:develop    container_name: prowlarr    environment:      - PUID=0      - PGID=0      - TZ=Asia/Shanghai    volumes:      - /usr/share/nginx/prowlarr/config:/config    restart: unless-stopped  jackett: #9117    network_mode: host    image: lscr.io/linuxserver/jackett    container_name: jackett    environment:      - PUID=0      - PGID=0      - TZ=Asia/Shanghai    volumes:      - /usr/share/nginx/jackett/config:/config    restart: unless-stopped  rsshub: # 1200    image: diygod/rsshub    container_name: rsshub    ports:      - '1200:1200'    environment:      # PROXY_URI: 'http://127.0.0.1:8080'      NODE_ENV: production      CACHE_TYPE: redis      REDIS_URL: 'redis://redis:6379/'      PUPPETEER_WS_ENDPOINT: 'ws://browserless:3000'    depends_on:      - browserless      - redis    restart: unless-stopped  browserless: # 3000    image: browserless/chrome    container_name: browserless    restart: unless-stopped    ports:      - 127.0.0.1:3000:3000  redis: # 6379    image: "redis:latest"    container_name: redis    ports:      - "6379:6379"    volumes:      - "/data/redis:/data"  flaresolverr: # 8191    network_mode: host     image: flaresolverr/flaresolverr    container_name: flaresolverr    environment:      - LOG_LEVEL=${LOG_LEVEL:-info}      - LOG_HTML=${LOG_HTML:-false}      - CAPTCHA_SOLVER=${CAPTCHA_SOLVER:-none}      - TZ=Asia/Shanghai    restart: unless-stopped  bazarr: # 6767    network_mode: host    image: lscr.io/linuxserver/bazarr    container_name: bazarr    environment:      - PUID=0      - PGID=0      - TZ=Asia/Shanghai    volumes:      - /usr/share/nginx/bazarr/config:/config      - /data/media/:/data/media    restart: unless-stopped  chinesesubfinder: # 19035    network_mode: host    image: allanpk716/chinesesubfinder:latest    container_name: chinesesubfinder    environment:      - PUID=0      - PGID=0      - TZ=Asia/Shanghai        volumes:      - /usr/share/nginx/chinesesubfinder/app/cache:/app/cache      - /usr/share/nginx/chinesesubfinder/config:/config      - /data:/data    restart: unless-stopped  ombi: # 3579    network_mode: host    image: lscr.io/linuxserver/ombi    container_name: ombi    environment:      - PUID=0      - PGID=0      - TZ=Asia/Shanghai      - BASE_URL=/ombi    volumes:      - /usr/share/nginx/ombi/config:/config    restart: unless-stopped  watchtower:    image: containrrr/watchtower    container_name: watchtower    environment:         - TZ=Asia/Shanghai    volumes:      - /var/run/docker.sock:/var/run/docker.sock    command: nzbget sonarr radarr lidarr readarr prowlarr jackett rsshub browserless redis flaresolverr bazarr chinesesubfinder ombi watchtower --cleanup --schedule "0 0 3 * * *"    restart: unless-stopped

我不想管烦人的权限问题，所以全部用 root (PUID=0) 运行。

拉取Docker images并等待60秒让程序初始化。

1	docker-compose up -d && sleep 60s

关闭所有程序进行配置

1	docker-compose down

配置 NZBGet

2022.3.20 更新：修改 NZBGet 可用下载队列为最大值；新增程序写入缓存配置。

1234567891011121314151617181920212223242526

# 修改下载位置sed -i "s/MainDir=/downloads/MainDir=/data/usenet//g" /usr/share/nginx/nzbget/config/nzbget.confsed -i "s/DestDir=${MainDir}/completed/DestDir=${MainDir}/g" /usr/share/nginx/nzbget/config/nzbget.confsed -i "s/ControlIP=0.0.0.0/ControlIP=127.0.0.1/g" /usr/share/nginx/nzbget/config/nzbget.confsed -i "s/ControlUsername=nzbget/ControlUsername=admin/g" /usr/share/nginx/nzbget/config/nzbget.confsed -i "s/FormAuth=no/FormAuth=yes/g" /usr/share/nginx/nzbget/config/nzbget.confsed -i "s/AuthorizedIP=127.0.0.1/AuthorizedIP=/g" /usr/share/nginx/nzbget/config/nzbget.confsed -i "s/ControlPassword=tegbzn6789/ControlPassword=${password1}/g" /usr/share/nginx/nzbget/config/nzbget.conf# 修改Usenet Server相关信息sed -i "s/Server1.Port=119/Server1.Port=563/g" /usr/share/nginx/nzbget/config/nzbget.conf sed -i "s/Server1.Cipher=/Server1.Cipher=AES128-SHA/g" /usr/share/nginx/nzbget/config/nzbget.confsed -i "s/Server1.Encryption=no/Server1.Encryption=yes/g" /usr/share/nginx/nzbget/config/nzbget.confsed -i "s/Server1.Connections=4/Server1.Connections=50/g" /usr/share/nginx/nzbget/config/nzbget.conf# 单文件连接数上限，建议为 2。sed -i "s/UrlConnections=4/UrlConnections=2/g" /usr/share/nginx/nzbget/config/nzbget.conf# 新增分类sed -i "s/Category4.Name=Software/Category4.Name=Books/g" /usr/share/nginx/nzbget/config/nzbget.conf sed -i '/^Category4.Name=Books/a Category5.Name=XXX' /usr/share/nginx/nzbget/config/nzbget.confsed -i '/^Category5.Name=XXX/a Category6.Name=Others' /usr/share/nginx/nzbget/config/nzbget.conf# 修改可用下载队列为最大值。sed -i "s/PostStrategy=sequential/PostStrategy=rocket/g" /usr/share/nginx/nzbget/config/nzbget.confsed -i "s/PostStrategy=balanced/PostStrategy=rocket/g" /usr/share/nginx/nzbget/config/nzbget.confsed -i "s/PostStrategy=aggressive/PostStrategy=rocket/g" /usr/share/nginx/nzbget/config/nzbget.conf# 修改写入缓存大小（程序缓存）sed -i "s/ArticleCache=0/ArticleCache=200/g" /usr/share/nginx/nzbget/config/nzbget.confsed -i "s/WriteBuffer=0/WriteBuffer=1024/g" /usr/share/nginx/nzbget/config/nzbget.conf

配置 Sonarr

配置项目及内容大同小异，因此雷同注释仅标注一次。

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170

# 修改baseurlsed -i "s/<UrlBase></UrlBase>/<UrlBase>/sonarr/</UrlBase>/g" /usr/share/nginx/sonarr/config/config.xml sed -i '$d' /usr/share/nginx/sonarr/config/config.xml# 关闭信息收集echo'  <AnalyticsEnabled>False</AnalyticsEnabled>' >> /usr/share/nginx/sonarr/config/config.xml echo'</Config>' >> /usr/share/nginx/sonarr/config/config.xml# 新增根目录sqlite3 /usr/share/nginx/sonarr/config/sonarr.db  "insert into RootFolders values ('1','/data/media/Series/');"# 开启刮削sqlite3 /usr/share/nginx/sonarr/config/sonarr.db  "DELETE FROM Metadata WHERE Id = 1;"sqlite3 /usr/share/nginx/sonarr/config/sonarr.db  "insert into Metadata values ('1','1','Kodi (XBMC) / Emby','XbmcMetadata','{  "seriesMetadata": true,  "seriesMetadataUrl": false,  "episodeMetadata": true,  "seriesImages": true,  "seasonImages": true,  "episodeImages": true,  "isValid": true}','XbmcMetadataSettings');"# 修改语言为简体中文，繁体中文以及英文sqlite3 /usr/share/nginx/sonarr/config/sonarr.db  "DELETE FROM LanguageProfiles WHERE Id = 1;"sqlite3 /usr/share/nginx/sonarr/config/sonarr.db  "insert into LanguageProfiles values ('1','Chinese','[  {    "language": 0,    "allowed": false  },  {    "language": 13,    "allowed": false  },  {    "language": 17,    "allowed": false  },  {    "language": 14,    "allowed": false  },  {    "language": 3,    "allowed": false  },  {    "language": 11,    "allowed": false  },  {    "language": 18,    "allowed": false  },  {    "language": 12,    "allowed": false  },  {    "language": 15,    "allowed": false  },  {    "language": 24,    "allowed": false  },  {    "language": 21,    "allowed": false  },  {    "language": 5,    "allowed": false  },  {    "language": 9,    "allowed": false  },  {    "language": 22,    "allowed": false  },  {    "language": 27,    "allowed": false  },  {    "language": 23,    "allowed": false  },  {    "language": 20,    "allowed": false  },  {    "language": 4,    "allowed": false  },  {    "language": 2,    "allowed": false  },  {    "language": 19,    "allowed": false  },  {    "language": 16,    "allowed": false  },  {    "language": 7,    "allowed": false  },  {    "language": 6,    "allowed": false  },  {    "language": 25,    "allowed": false  },  {    "language": 28,    "allowed": false  },  {    "language": 26,    "allowed": false  },  {    "language": 8,    "allowed": true  },  {    "language": 1,    "allowed": true  },  {    "language": 10,    "allowed": true  }]','10','0');"# 开启重命名sqlite3 /usr/share/nginx/sonarr/config/sonarr.db  "DELETE FROM NamingConfig WHERE Id = 1;"sqlite3 /usr/share/nginx/sonarr/config/sonarr.db  "insert into NamingConfig values ('1','0','1','{Series Title} - S{season:00}E{episode:00} - {Episode Title} {Quality Full}','{Series Title} - {Air-Date} - {Episode Title} {Quality Full}','Season {season}','{Series Title}','{Series Title} - S{season:00}E{episode:00} - {Episode Title} {Quality Full}','1','Specials');"# 新增qBittorrent 下载客户端  sqlite3 /usr/share/nginx/sonarr/config/sonarr.db  "insert into DownloadClients values ('1','1','qBittorrent_Series','QBittorrent','{  "host": "127.0.0.1",  "port": 8080,  "useSsl": false,  "username": "admin",  "password": "adminadmin",  "tvCategory": "Series",  "recentTvPriority": 0,  "olderTvPriority": 0,  "initialState": 0,  "sequentialOrder": false,  "firstAndLast": false}','QBittorrentSettings','1','1','1');"# 新增NZBGet 下载客户端  sqlite3 /usr/share/nginx/sonarr/config/sonarr.db  "insert into DownloadClients values ('2','1','NZBGet_Series','Nzbget','{  "host": "127.0.0.1",  "port": 6789,  "useSsl": false,  "username": "admin",  "password": "adminadmin",  "tvCategory": "Series",  "recentTvPriority": 0,  "olderTvPriority": 0,  "addPaused": false}','NzbgetSettings','1','1','1');"# 获取Sonarr api,后面要用到sonarr_api=$(xml_grep 'ApiKey' /usr/share/nginx/sonarr/config/config.xml --text_only)

配置 Radarr

12345678910111213141516171819202122232425262728293031323334353637383940414243

sed -i "s/<UrlBase></UrlBase>/<UrlBase>/radarr/</UrlBase>/g" /usr/share/nginx/radarr/config/config.xmlsed -i '$d' /usr/share/nginx/radarr/config/config.xmlecho'  <AnalyticsEnabled>False</AnalyticsEnabled>' >> /usr/share/nginx/radarr/config/config.xmlecho'</Config>' >> /usr/share/nginx/radarr/config/config.xmlsqlite3 /usr/share/nginx/radarr/config/radarr.db  "insert into RootFolders values ('1','/data/media/Movies/');"sqlite3 /usr/share/nginx/radarr/config/radarr.db  "insert into Config values ('6','movieinfolanguage','10');"sqlite3 /usr/share/nginx/radarr/config/radarr.db  "insert into Config values ('7','uilanguage','10');"sqlite3 /usr/share/nginx/radarr/config/radarr.db  "UPDATE Metadata SET Enable = 1 WHERE Id = 1;"sqlite3 /usr/share/nginx/radarr/config/radarr.db  "DELETE FROM Metadata WHERE Id = 1;"sqlite3 /usr/share/nginx/radarr/config/radarr.db  "insert into Metadata values ('1','1','Kodi (XBMC) / Emby','XbmcMetadata','{  "movieMetadata": true,  "movieMetadataURL": false,  "movieMetadataLanguage": 10,  "movieImages": true,  "useMovieNfo": false,  "isValid": true}','XbmcMetadataSettings');"sqlite3 /usr/share/nginx/radarr/config/radarr.db  "DELETE FROM NamingConfig WHERE Id = 1;"sqlite3 /usr/share/nginx/radarr/config/radarr.db  "insert into NamingConfig values ('1','0','1','{Movie Title} ({Release Year}) {Quality Full}','{Movie Title} ({Release Year})','0','1');"  sqlite3 /usr/share/nginx/radarr/config/radarr.db  "insert into DownloadClients values ('1','1','qBittorrent','QBittorrent','{  "host": "127.0.0.1",  "port": 8080,  "useSsl": false,  "username": "admin",  "password": "adminadmin",  "movieCategory": "Movies",  "recentTvPriority": 0,  "olderTvPriority": 0,  "initialState": 0}','QBittorrentSettings','1','1','1');"sqlite3 /usr/share/nginx/radarr/config/radarr.db  "insert into DownloadClients values ('2','1','NZBGet','Nzbget','{  "host": "127.0.0.1",  "port": 6789,  "useSsl": false,  "username": "admin",  "password": "adminadmin",  "movieCategory": "Movies",  "recentMoviePriority": 0,  "olderMoviePriority": 0,  "addPaused": false}','NzbgetSettings','1','1','1');"radarr_api=$(xml_grep 'ApiKey' /usr/share/nginx/radarr/config/config.xml --text_only)

配置Lidarr

123456789101112131415161718192021222324252627282930313233343536373839

sed -i "s/<UrlBase></UrlBase>/<UrlBase>/lidarr/</UrlBase>/g" /usr/share/nginx/lidarr/config/config.xmlsed -i '$d' /usr/share/nginx/lidarr/config/config.xmlecho'  <AnalyticsEnabled>False</AnalyticsEnabled>' >> /usr/share/nginx/lidarr/config/config.xmlecho'</Config>' >> /usr/share/nginx/lidarr/config/config.xmlsqlite3 /usr/share/nginx/lidarr/config/lidarr.db  "insert into RootFolders values ('1','/data/media/Music/','music','1','1','0','[]');"sqlite3 /usr/share/nginx/lidarr/config/lidarr.db  "DELETE FROM Metadata WHERE Id = 1;"sqlite3 /usr/share/nginx/lidarr/config/lidarr.db  "insert into Metadata values ('1','1','Kodi (XBMC) / Emby','XbmcMetadata','{  "artistMetadata": true,  "albumMetadata": true,  "artistImages": true,  "albumImages": true,  "isValid": true}','XbmcMetadataSettings');"sqlite3 /usr/share/nginx/lidarr/config/lidarr.db  "DELETE FROM NamingConfig WHERE Id = 1;"sqlite3 /usr/share/nginx/lidarr/config/lidarr.db  "insert into NamingConfig values ('1','1','{Artist Name}','1','{Album Title} ({Release Year})/{Artist Name} - {Album Title} - {track:00} - {Track Title}','{Album Title} ({Release Year})/{Medium Format} {medium:00}/{Artist Name} - {Album Title} - {track:00} - {Track Title}');"  sqlite3 /usr/share/nginx/lidarr/config/lidarr.db  "insert into DownloadClients values ('1','1','qBittorrent','QBittorrent','{  "host": "127.0.0.1",  "port": 8080,  "username": "admin",  "password": "adminadmin",  "musicCategory": "Music",  "recentTvPriority": 0,  "olderTvPriority": 0,  "initialState": 0,  "useSsl": false}','QBittorrentSettings','1');"sqlite3 /usr/share/nginx/lidarr/config/lidarr.db  "insert into DownloadClients values ('2','1','NZBGet','Nzbget','{  "host": "127.0.0.1",  "port": 6789,  "username": "admin",  "password": "adminadmin",  "musicCategory": "Music",  "recentTvPriority": 0,  "olderTvPriority": 0,  "addPaused": false,  "useSsl": false}','NzbgetSettings','1');"lidarr_api=$(xml_grep 'ApiKey' /usr/share/nginx/lidarr/config/config.xml --text_only)

配置 Readarr

1234567891011121314151617181920212223242526272829303132

sed -i "s/<UrlBase></UrlBase>/<UrlBase>/readarr/</UrlBase>/g" /usr/share/nginx/readarr/config/config.xmlsed -i '$d' /usr/share/nginx/readarr/config/config.xmlecho'  <AnalyticsEnabled>False</AnalyticsEnabled>' >> /usr/share/nginx/readarr/config/config.xmlecho'</Config>' >> /usr/share/nginx/readarr/config/config.xml# sqlite3 /usr/share/nginx/readarr/config/readarr.db  "insert into RootFolders values ('1','/data/media/Books/','Books','1','1','0','[]','0','','0');"sqlite3 /usr/share/nginx/readarr/config/readarr.db  "DELETE FROM NamingConfig WHERE Id = 1;"sqlite3 /usr/share/nginx/readarr/config/readarr.db  "insert into NamingConfig values ('1','1','{Author Name}','1','{Book Title}/{Author Name} - {Book Title}{ (PartNumber)}');"sqlite3 /usr/share/nginx/readarr/config/readarr.db  "insert into Config values ('6','uilanguage','10');"  sqlite3 /usr/share/nginx/readarr/config/readarr.db  "insert into DownloadClients values ('1','1','qBittorrent','QBittorrent','{  "host": "127.0.0.1",  "port": 8080,  "useSsl": false,  "username": "admin",  "password": "adminadmin",  "musicCategory": "Books",  "recentTvPriority": 0,  "olderTvPriority": 0,  "initialState": 0}','QBittorrentSettings','1');"sqlite3 /usr/share/nginx/readarr/config/readarr.db  "insert into DownloadClients values ('2','1','NZBGet','Nzbget','{  "host": "127.0.0.1",  "port": 6789,  "useSsl": false,  "username": "admin",  "password": "adminadmin",  "musicCategory": "Books",  "recentTvPriority": 0,  "olderTvPriority": 0,  "addPaused": false}','NzbgetSettings','1');"readarr_api=$(xml_grep 'ApiKey' /usr/share/nginx/readarr/config/config.xml --text_only)

配置 prowlarr

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596

sed -i "s/<UrlBase></UrlBase>/<UrlBase>/prowlarr/</UrlBase>/g" /usr/share/nginx/prowlarr/config/config.xmlsed -i '$d' /usr/share/nginx/prowlarr/config/config.xmlecho'  <AnalyticsEnabled>False</AnalyticsEnabled>' >> /usr/share/nginx/prowlarr/config/config.xmlecho'</Config>' >> /usr/share/nginx/prowlarr/config/config.xml# 将prowlarr与Sonarr等链接以实现indexers同步  sqlite3 /usr/share/nginx/prowlarr/config/prowlarr.db  "insert into Applications values ('1','Sonarr','Sonarr','{  "prowlarrUrl": "http://127.0.0.1:9696",  "baseUrl": "http://127.0.0.1:8989/sonarr",  "apiKey": "adminadmin",  "syncCategories": [    5000,    5010,    5020,    5030,    5040,    5045,    5050  ],  "animeSyncCategories": [    5070  ]}','SonarrSettings','2','[]');"  sqlite3 /usr/share/nginx/prowlarr/config/prowlarr.db  "insert into Applications values ('2','Radarr','Radarr','{  "prowlarrUrl": "http://127.0.0.1:9696",  "baseUrl": "http://127.0.0.1:7878/radarr",  "apiKey": "adminadmin",  "syncCategories": [    2000,    2010,    2020,    2030,    2040,    2045,    2050,    2060,    2070,    2080  ]}','RadarrSettings','2','[]');"  sqlite3 /usr/share/nginx/prowlarr/config/prowlarr.db  "insert into Applications values ('3','Lidarr','Lidarr','{  "prowlarrUrl": "http://127.0.0.1:9696",  "baseUrl": "http://127.0.0.1:8686/lidarr",  "apiKey": "adminadmin",  "syncCategories": [    3000,    3010,    3030,    3040,    3050,    3060  ]}','LidarrSettings','2','[]');"  sqlite3 /usr/share/nginx/prowlarr/config/prowlarr.db  "insert into Applications values ('4','Readarr','Readarr','{  "prowlarrUrl": "http://127.0.0.1:9696",  "baseUrl": "http://127.0.0.1:8787/readarr",  "apiKey": "adminadmin",  "syncCategories": [    3030,    7000,    7010,    7020,    7030,    7040,    7050,    7060  ]}','ReadarrSettings','2','[]');"sqlite3 /usr/share/nginx/prowlarr/config/prowlarr.db  "insert into Tags values ('1','flaresolverr');"sqlite3 /usr/share/nginx/prowlarr/config/prowlarr.db  "insert into IndexerProxies values ('1','FlareSolverr','{  "host": "http://127.0.0.1:8191/",  "requestTimeout": 60}','FlareSolverr','FlareSolverrSettings','[  1]');"sqlite3 /usr/share/nginx/prowlarr/config/prowlarr.db  "insert into Config values ('6','uilanguage','10');"  sqlite3 /usr/share/nginx/prowlarr/config/prowlarr.db  "insert into DownloadClients values ('1','1','qBittorrent','QBittorrent','{  "host": "127.0.0.1",  "port": 8080,  "useSsl": false,  "username": "admin",  "password": "adminadmin",  "category": "Others",  "priority": 0,  "initialState": 0}','QBittorrentSettings','1');"sqlite3 /usr/share/nginx/prowlarr/config/prowlarr.db  "insert into DownloadClients values ('2','1','NZBGet','Nzbget','{  "host": "127.0.0.1",  "port": 6789,  "useSsl": false,  "username": "admin",  "password": "adminadmin",  "category": "Others",  "priority": 0,  "addPaused": false}','NzbgetSettings','1');"

配置 Jackett

12345678910

cat'/usr/share/nginx/jackett/config/Jackett/ServerConfig.json' | jq '.BasePathOverride |= "/jackett/"' >> /usr/share/nginx/jackett/config/Jackett/tmp.jsoncp -f /usr/share/nginx/jackett/config/Jackett/tmp.json /usr/share/nginx/jackett/config/Jackett/ServerConfig.jsonrm /usr/share/nginx/jackett/config/Jackett/tmp.json# 因为我们用反向代理，所以关掉这个选项不会有事情cat'/usr/share/nginx/jackett/config/Jackett/ServerConfig.json' | jq '.AllowExternal |= false' >> /usr/share/nginx/jackett/config/Jackett/tmp.jsoncp -f /usr/share/nginx/jackett/config/Jackett/tmp.json /usr/share/nginx/jackett/config/Jackett/ServerConfig.jsonrm /usr/share/nginx/jackett/config/Jackett/tmp.jsoncat'/usr/share/nginx/jackett/config/Jackett/ServerConfig.json' | jq '.FlareSolverrUrl |= "http://127.0.0.1:8191"' >> /usr/share/nginx/jackett/config/Jackett/tmp.jsoncp -f /usr/share/nginx/jackett/config/Jackett/tmp.json /usr/share/nginx/jackett/config/Jackett/ServerConfig.jsonrm /usr/share/nginx/jackett/config/Jackett/tmp.json

配置 Bazarr

12345678910111213141516171819

sed -i "0,/base_url =/s//base_url = /bazarr/g" /usr/share/nginx/bazarr/config/config/config.inised -i '/^[sonarr]$/,/^[/ s/^base_url = //base_url = /sonarr//' /usr/share/nginx/bazarr/config/config/config.ini# 将Sonarr,Radarr与Bazarr链接sed -i "/^[sonarr]$/,/^[/ s/^apikey =/apikey = ${sonarr_api}/" /usr/share/nginx/bazarr/config/config/config.inised -i '/^[radarr]$/,/^[/ s/^base_url = //base_url = /radarr//' /usr/share/nginx/bazarr/config/config/config.inised -i "/^[radarr]$/,/^[/ s/^apikey =/apikey = ${radarr_api}/" /usr/share/nginx/bazarr/config/config/config.inised -i '/^[analytics]$/,/^[/ s/^enabled = True/enabled = False/' /usr/share/nginx/bazarr/config/config/config.inised -i "s/use_sonarr = False/use_sonarr = True/g" /usr/share/nginx/bazarr/config/config/config.inised -i "s/use_radarr = False/use_radarr = True/g" /usr/share/nginx/bazarr/config/config/config.inised -i "s/serie_default_enabled = False/serie_default_enabled = True/g" /usr/share/nginx/bazarr/config/config/config.inised -i "s/serie_default_profile =/serie_default_profile = 1/g" /usr/share/nginx/bazarr/config/config/config.inised -i "s/movie_default_enabled = False/movie_default_enabled = True/g" /usr/share/nginx/bazarr/config/config/config.inised -i "s/movie_default_profile =/movie_default_profile = 1/g" /usr/share/nginx/bazarr/config/config/config.inised -i '/^[assrt]$/,/^[/ s/^token =/token = oHwtSNdY1aQe1qwRSZVo70SqNW0Pu1AM/' /usr/share/nginx/bazarr/config/config/config.ini # Assrt站API 5次/分钟sed -i '/^[betaseries]$/,/^[/ s/^token =/token = ecd1f45f3036/' /usr/share/nginx/bazarr/config/config/config.ini # Betaseries API# 设置开启的字幕源sed -i "s/enabled_providers = []/enabled_providers = ['zimuku', 'assrt', 'yifysubtitles', 'betaseries', 'opensubtitlescom', 'supersubtitles', 'tvsubtitles', 'subscenter']/g" /usr/share/nginx/bazarr/config/config/config.ini# 设置字幕语言为简体中文，繁体中文以及英文sqlite3 /usr/share/nginx/bazarr/config/db/bazarr.db  "insert into table_languages_profiles values ('1','','[{"id": 1, "language": "zh", "audio_exclude": "False", "hi": "False", "forced": "False"}, {"id": 2, "language": "zt", "audio_exclude": "False", "hi": "False", "forced": "False"}, {"id": 3, "language": "en", "audio_exclude": "False", "hi": "False", "forced": "False"}]','Chinese','[]','[]');"

Ombi

配置 Ombi

123456789101112131415161718192021222324252627282930313233343536

add_sonarr_ombi(){cat > "add.sh" << "EOF"#!/usr/bin/env bash  sqlite3 /usr/share/nginx/ombi/config/OmbiSettings.db  "insert into GlobalSettings values ('2','{"Enabled":true,"ApiKey":"adminadmin","QualityProfile":"1","SeasonFolders":false,"RootPath":"1","QualityProfileAnime":"1","RootPathAnime":"2","AddOnly":false,"V3":true,"LanguageProfile":2,"LanguageProfileAnime":2,"ScanForAvailability":false,"Ssl":false,"SubDir":"/sonarr","Ip":"127.0.0.1","Port":8989,"Id":0}','SonarrSettings');"EOFsed -i "s/adminadmin/${sonarr_api}/g" add.shbash add.shrm add.sh}add_radarr_ombi(){cat > "add.sh" << "EOF"#!/usr/bin/env bash  sqlite3 /usr/share/nginx/ombi/config/OmbiSettings.db  "insert into GlobalSettings values ('3','{"Enabled":true,"ApiKey":"adminadmin","DefaultQualityProfile":"1","DefaultRootPath":"/data/media/movies","AddOnly":false,"MinimumAvailability":"Announced","ScanForAvailability":false,"Ssl":false,"SubDir":"/radarr","Ip":"127.0.0.1","Port":7878,"Id":0}','RadarrSettings');"EOFsed -i "s/adminadmin/${radarr_api}/g" add.shbash add.shrm add.sh}add_lidarr_ombi(){cat > "add.sh" << "EOF"#!/usr/bin/env bash  sqlite3 /usr/share/nginx/ombi/config/OmbiSettings.db  "insert into GlobalSettings values ('4','{"Enabled":true,"ApiKey":"adminadmin","DefaultQualityProfile":"1","DefaultRootPath":"/data/media/Music/","AlbumFolder":true,"MetadataProfileId":1,"AddOnly":false,"Ssl":false,"SubDir":"/lidarr","Ip":"127.0.0.1","Port":8686,"Id":0}','LidarrSettings');"EOFsed -i "s/adminadmin/${lidarr_api}/g" add.shbash add.shrm add.sh}# 将Sonarr Radarr Lidarr与Ombi链接add_sonarr_ombiadd_radarr_ombiadd_lidarr_ombi# 关闭信息收集并设置语言为中文sqlite3 /usr/share/nginx/ombi/config/OmbiSettings.db  "DELETE FROM GlobalSettings WHERE Id = 1;"sqlite3 /usr/share/nginx/ombi/config/OmbiSettings.db  "insert into GlobalSettings values ('1','{"BaseUrl":"/ombi","CollectAnalyticData":false,"Wizard":false,"ApiKey":"dfbcab4789604b4289b3cdc71aa41bf6","DoNotSendNotificationsForAutoApprove":false,"HideRequestsUsers":false,"DisableHealthChecks":false,"DefaultLanguageCode":"zh","AutoDeleteAvailableRequests":false,"AutoDeleteAfterDays":0,"Branch":0,"HasMigratedOldTvDbData":false,"Set":false,"Id":1}','OmbiSettings');"

启动系统

命令行配置已完成，是时候启动系统进行图形界面配置了。

12	cd /datadocker-compose up -d

等待几秒钟，然后使用浏览器，访问 VPS/NAS 的 IP/域名，逐一访问页面中的链接，确定都能打开再继续。

配置 Emby

打开链接，进行初始化，文件夹路径按照图中设置即可。

建议电视节目文件夹将 The Movie DB 设为首选。

启用 NFO

勾选这个选项

新建电视节目文件夹

新建电影文件夹

新建音乐文件夹

新建书籍文件夹

新建 Emby API

配置 Ombi

打开链接，进行初始化，Emby API复制黏贴即可，其余设置如图所示。

检查 Sonarr 配置

逐一检查配置是否正确，以下图片为正确配置。

重命名配置

根目录配置

下载客户端配置

刮削配置

检查 Radarr 配置

逐一检查配置是否正确，以下图片为正确配置。

重命名配置

根目录配置

下载客户端配置

刮削配置

检查 Lidarr 配置

逐一检查配置是否正确，以下图片为正确配置。

重命名以及根目录配置

下载客户端配置

刮削配置

检查 Readarr 配置

逐一检查配置是否正确，以下图片为正确配置。

Readarr根目录有Bug，无法命令行配置，请手动配置。

重命名以及根目录配置

仅需填入名称以及路径，其他不用改。

下载客户端配置

检查 Bazarr 配置

逐一检查配置是否正确，以下图片为正确配置。

字幕语言配置

默认字幕语言配置

下载字幕源

检查 Chinesesubfinder 配置

逐一检查配置是否正确，以下图片为正确配置。

2022.3.19更新：测试证明 Chinesesubfinder 也需要在 Docker-compose 配置文件中将卷目录挂载为 /data 才能正常工作(上文已修正)。

基础配置

电影目录 /data/media/Movies
连续剧目录 /data/media/Series

Emby以及目录映射配置

Prowlarr / Jackett 配置 indexers

Jackett 同理，不再重复写。

点击Add indexer

选择 Base Url ，点击保存。

有 Cloudflare DDOS 的要加一个 flaresolverr Tag

检查 qBittorrent 配置

逐一检查配置是否正确，以下图片为正确配置。

检查分类是否正确显示

检查公开追踪器是否正常获取

检查默认下载位置以及下载模式

配置 NZBGet 服务器

输入 Usenet Provider 域名，端口号，用户名以及密码等信息。

请严格按照你的 Usenet Provider的指示填写，图片仅供参考

检查分类是否正确

2022.3.20 更新：此数值经测试为单个文件的下载连接数，建议不超过 5。

~~这里的 UrlConnections 请填写与第一张图中 Connections 一样的数值。~~

检查下载位置是否正确

检查 Rsshub 配置

如看见下图，则Rsshub已可用。

配置 XRAY 透明代理

一个个应用程序配置 http 代理设置太麻烦了（并且不可靠），所以我选择透明代理。

本文仅代理 80 443 563 端口。

总不能有人看到这里了还不会自己下载github release吧？

1	https://github.com/XTLS/Xray-core/releases/

参考systemd配置

12345678910111213141516

[Unit]Description=Xray ServiceWants=network-online.targetAfter=network-online.target nss-lookup.target[Service]Type=simpleUser=rootExecStart=/etc/xray/xray -c /etc/xray/config.jsonTimeoutStopSec=infinityLimitNOFILE=65536Restart=alwaysRestartSec=3s[Install]WantedBy=multi-user.target

iptables配置

1234567891011121314151617

iptables -t nat -N XRAY# 直连内网 ipiptables -t nat -A XRAY -d 192.168.0.0/16 -j RETURNiptables -t nat -A XRAY -d 10.0.0.0/16 -j RETURN# 直连 vps ipiptables -t nat -A XRAY -d {vps ip} -j RETURNiptables -t nat -A XRAY -p tcp -j RETURN -m mark --mark 0xff# 仅透明代理 80 443 563 端口iptables -t nat -A XRAY -p tcp --dport 80 -j REDIRECT --to-ports 12345iptables -t nat -A XRAY -p tcp --dport 443 -j REDIRECT --to-ports 12345iptables -t nat -A XRAY -p tcp --dport 563 -j REDIRECT --to-ports 12345# 其余TCP流量直连iptables -t nat -A XRAY -p tcp -j RETURN # 对局域网其他设备进行透明代理iptables -t nat -A PREROUTING -p tcp -j XRAY # 对本机进行透明代理iptables -t nat -A OUTPUT -p tcp -j XRAY

查看iptables情况

1	iptables -t nat -L -v -n

安装 iptables-persistent 使 iptables 重启可用

全选 yes

1	apt-get install iptables-persistent -y

Xray配置

12	mkdir /etc/xraysudo nano /etc/xray/config.json

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133

{"log":{"loglevel":"info"},"inbounds":[{"listen":"127.0.0.1","port":6666,"protocol":"http",// http 代理"sniffing":{"enabled":true,"destOverride":["http","tls"],"metadataOnly":false},"allocate":{"strategy":"always","refresh":5,"concurrency":3}},{"listen":"127.0.0.1","port":1080,"protocol":"socks",// socks 代理"udp":true,"sniffing":{"enabled":true,"destOverride":["http","tls"],"metadataOnly":false},"allocate":{"strategy":"always","refresh":5,"concurrency":3}},{"port":12345,"protocol":"dokodemo-door",// 透明代理"settings":{"network":"tcp,udp","followRedirect":true},"sniffing":{"enabled":true,"destOverride":["http","tls"]},"allocate":{"strategy":"always","refresh":5,"concurrency":3}}],"outbounds":[{"protocol":"trojan",//你的服务器协议"settings":{"servers":[{"address":"1.1.1.",//你的服务器ip"port":443,// 你的服务器端口号"password":"adminadmin",//你的服务器密码"level":0}]},"tag":"proxy","streamSettings":{"network":"tcp",// 你的服务器底层协议"security":"tls","tlsSettings":{"serverName":"adminadmin.com",//你的服务器域名"rejectUnknownSni":false,"allowInsecure":false,"alpn":["h2","http/1.1"],"minVersion":"1.2","maxVersion":"1.3","disableSystemRoot":false,"enableSessionResumption":false},"sockopt":{"mark":255}}},{"protocol":"freedom","settings":{},"tag":"direct","streamSettings":{"sockopt":{"mark":255}}},{"tag":"blocked","protocol":"blackhole","settings":{},"streamSettings":{"sockopt":{"mark":255}}}],"routing":{"domainStrategy":"IPIfNonMatch","domainMatcher":"mph","rules":[{"type":"field","domain":["geosite:category-ads"],// 屏蔽广告"outboundTag":"blocked"},{"type":"field","outboundTag":"direct","domain":["geosite:cn"]// 国内直连},{"type":"field","outboundTag":"direct","ip":["geoip:cn","geoip:private"]// 内网直连}]}}

启动 XRAY

1	systemctl enable xray --now

设置 DNS 域名为 1.1.1.1 以及 1.0.0.1

12	echo"nameserver 1.1.1.1" > /etc/resolv.confecho"nameserver 1.0.0.1" >> /etc/resolv.conf

测试透明代理是否成功

见到如下返回则已成功

12345678

root@debian:~# curl google.com<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="http://www.google.com/">here</A>.</BODY></HTML>root@debian:~#

配置 Overture 以实现 DNS 国内分流

因为GFWlist以及cniplist太长，写不下,直接放结果，想看的自己去看src。

1	https://raw.githubusercontent.com/johnrosen1/vpstoolbox/master/install/overture.sh

安装Overture

123	curl -LO https://raw.githubusercontent.com/johnrosen1/vpstoolbox/master/install/overture.shsource overture.shinstall_overture

主配置文件 /etc/overture/config.yml

默认走 Cloudflare DOH，国内IP及域名走 DNSPOD DOH。

1234567891011121314151617181920212223242526272829303132333435363738394041424344

bindAddress::53debugHTTPAddress:127.0.0.1:5555dohEnabled:falseprimaryDNS:-name:Cloudflareaddress:https://1.1.1.1/dns-queryprotocol:httpssocks5Address:127.0.0.1:1080timeout:60ednsClientSubnet:policy:disabledexternalIP:noCookie:truealternativeDNS:-name:Dnspodaddress:https://doh.pub/dns-queryprotocol:httpssocks5Address:timeout:6ednsClientSubnet:policy:disabledexternalIP:noCookie:trueonlyPrimaryDNS:falseipv6UseAlternativeDNS:falsealternativeDNSConcurrent:falsewhenPrimaryDNSAnswerNoneUse:alternativeDNSipNetworkFile:primary:/etc/overture/ip_network_alternative_samplealternative:/etc/overture/china_ip_list.txtdomainFile:primary:/etc/overture/gfw_all_domain.txtalternative:/etc/overture/chnlist.txtmatcher:/etc/overture/suffix-treehostsFile:hostsFile:/etc/overture/hosts_samplefinder:/etc/overture/full-mapminimumTTL:0domainTTLFile:/etc/overture/domain_ttl_samplecacheSize:10000cacheRedisUrl:cacheRedisConnectionPoolSize:rejectQType:-255

启用分流

1	echo"nameserver 127.0.0.1" > /etc/resolv.conf

测试是否成功

出现以下显示则成功

123456789101112131415161718192021

root@debian:~# nslookup baidu.comServer:		127.0.0.1Address:	127.0.0.1#53Non-authoritative answer:Name:	baidu.comAddress: 220.181.38.148Name:	baidu.comAddress: 220.181.38.251root@debian:~# nslookup google.comServer:		127.0.0.1Address:	127.0.0.1#53Non-authoritative answer:Name:	google.comAddress: 172.217.31.174Name:	google.comAddress: 2404:6800:4004:824::200eroot@debian:~#

设置 CPU 策略为最佳性能

12	apt install cpupower -ysudo cpupower frequency-set -g performance

查看当前策略

1	cat /sys/devices/system/cpu/cpu*/cpufreq/scaling_governor

挂载 SSD 并设置写入缓存

建议使用大容量固态硬盘作为 qBittorrent 以及 NZBGet 的写入缓存。

新增挂载点

1	mkdir /ssd

查看硬件信息，记下 /dev/sda

fdisk -l

Disk /dev/sda: 931.51 GiB, 1000204886016 bytes, 1953525168 sectorsDisk model: ************Units: sectors of 1 * 512 = 512 bytesSector size (logical/physical): 512 bytes / 512 bytesI/O size (minimum/optimal): 512 bytes / 512 bytes

新增分区

1	cfdisk /dev/sda

选择 gpt

123	> New -> Primary -> 回车> Write -> yes> Quit

使用 Ext4 文件系统格式化

1	mkfs.ext4 /dev/sda

获取硬件 UUID

blkid

1	/dev/sda: UUID="8168d321-c245-4846-82dd-a5d79a04550a" BLOCK_SIZE="4096" TYPE="ext4"

修改 /etc/fstab，新增以下内容

1	UUID=359d90df-f17a-42f6-ab13-df13bf356de7 /ssd ext4 errors=remount-ro 0 1

挂载 SSD 至挂载点

1	mount /ssd

查看挂载是否成功

1234	root@debian:~# df -hl.../dev/sda 916G 20K 916G 1% /ssd # 出现这行就代表成功...

qBittorrent 配置

NZBGet 配置

最大化可用空间

ext4 默认有 5% 的预留空间，我们的数据盘和缓存盘不需要这种东西，只有系统盘会需要。

取消预留空间

1	tune2fs -m 0 /dev/sda

开启 BBR 提升网络质量

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485

cat > '/etc/sysctl.d/99-sysctl.conf' << EOFnet.ipv4.conf.all.route_localnet=1net.ipv4.ip_forward = 1net.ipv4.conf.all.forwarding = 1net.ipv4.conf.default.forwarding = 1################################net.ipv6.conf.all.forwarding = 1net.ipv6.conf.default.forwarding = 1net.ipv6.conf.lo.forwarding = 1################################net.ipv6.conf.all.disable_ipv6 = 0net.ipv6.conf.default.disable_ipv6 = 0net.ipv6.conf.lo.disable_ipv6 = 0################################net.ipv6.conf.all.accept_ra = 2net.ipv6.conf.default.accept_ra = 2################################net.core.netdev_max_backlog = 100000net.core.netdev_budget = 50000net.core.netdev_budget_usecs = 5000#fs.file-max = 51200net.core.rmem_max = 67108864net.core.wmem_max = 67108864net.core.rmem_default = 67108864net.core.wmem_default = 67108864net.core.optmem_max = 65536net.core.somaxconn = 10000################################net.ipv4.icmp_echo_ignore_all = 0net.ipv4.icmp_echo_ignore_broadcasts = 1net.ipv4.icmp_ignore_bogus_error_responses = 1net.ipv4.conf.all.accept_redirects = 0net.ipv4.conf.default.accept_redirects = 0net.ipv4.conf.all.secure_redirects = 0net.ipv4.conf.default.secure_redirects = 0net.ipv4.conf.all.send_redirects = 0net.ipv4.conf.default.send_redirects = 0net.ipv4.conf.default.rp_filter = 0net.ipv4.conf.all.rp_filter = 0net.ipv4.tcp_keepalive_time = 1200net.ipv4.tcp_keepalive_intvl = 15net.ipv4.tcp_keepalive_probes = 5net.ipv4.tcp_synack_retries = 2net.ipv4.tcp_syncookies = 0net.ipv4.tcp_rfc1337 = 0net.ipv4.tcp_timestamps = 1net.ipv4.tcp_tw_reuse = 1net.ipv4.tcp_fin_timeout = 15net.ipv4.ip_local_port_range = 1024 65535net.ipv4.tcp_max_tw_buckets = 2000000net.ipv4.tcp_fastopen = 3net.ipv4.tcp_rmem = 4096 87380 67108864net.ipv4.tcp_wmem = 4096 65536 67108864net.ipv4.udp_rmem_min = 8192net.ipv4.udp_wmem_min = 8192net.ipv4.tcp_mtu_probing = 0net.ipv4.tcp_autocorking = 0net.ipv4.tcp_slow_start_after_idle = 0net.ipv4.tcp_max_syn_backlog = 30000net.ipv4.tcp_notsent_lowat = 16384net.ipv4.tcp_no_metrics_save = 1net.ipv4.tcp_ecn = 2net.ipv4.tcp_ecn_fallback = 1net.ipv4.tcp_frto = 0net.ipv6.conf.all.accept_redirects = 0net.ipv6.conf.default.accept_redirects = 0net.ipv4.neigh.default.gc_thresh3=8192net.ipv4.neigh.default.gc_thresh2=4096net.ipv4.neigh.default.gc_thresh1=2048net.ipv6.neigh.default.gc_thresh3=8192net.ipv6.neigh.default.gc_thresh2=4096net.ipv6.neigh.default.gc_thresh1=2048net.ipv4.tcp_max_syn_backlog = 262144##############################vm.swappiness = 1vm.overcommit_memory = 1#vm.nr_hugepages=1280kernel.pid_max=64000net.netfilter.nf_conntrack_max = 262144net.nf_conntrack_max = 262144## Enable bbrnet.core.default_qdisc = fqnet.ipv4.tcp_congestion_control = bbrEOFsysctl -p

修改最大开启文件数上限

主要是为了避免 Too much open files 的错误。

12345678910111213141516171819202122232425262728293031

cat > '/etc/systemd/system.conf' << EOF[Manager]#DefaultTimeoutStartSec=90sDefaultTimeoutStopSec=30s#DefaultRestartSec=100msDefaultLimitCORE=infinityDefaultLimitNOFILE=1000000EOFcat > '/etc/security/limits.conf' << EOFroot     soft   nofile    1000000root     hard   nofile    1000000root     soft   nproc     unlimitedroot     hard   nproc     unlimitedroot     soft   core      unlimitedroot     hard   core      unlimitedroot     hard   memlock   unlimitedroot     soft   memlock   unlimited*     soft   nofile    1000000*     hard   nofile    1000000*     soft   nproc     unlimited*     hard   nproc     unlimited*     soft   core      unlimited*     hard   core      unlimited*     hard   memlock   unlimited*     soft   memlock   unlimitedEOFsed -i '/ulimit -SHn/d' /etc/profileecho"ulimit -SHn 1000000" >> /etc/profileecho"session required pam_limits.so" >> /etc/pam.d/common-sessionsystemctl daemon-reload