AI协助本网站“灾”后重建

背景

本博客目前在廉价服务商CloudCone的机房已经好几年，一直正常，直到今年（2026）1月27日这服务商突然发生了严重的运营故障，官方给的解决办法是重新安装VPS系统，然后自行恢复备份，~~也没有任何赔偿或补偿~~只有少得可怜的一点几美金补偿……

看在本就是廉价VPS的份上，就不再纠结，比较麻烦的是由于这几年一直都没出这种故障，就没有定期备份，最新的一次能用的备份还是2023年底的，这意味着从2024年起至今两年多的博客都没法直接恢复了。

前两年就有朋友提到可以自动定期备份网站内容到NAS，然而没有引起重视，现在看来，重要的事情一定要尽快落实，真就是应了那句：

本来可以从从容容、游刃有余，现在是匆匆忙忙连滚带爬

AI就是生产力

好在借助谷歌Gemini的AI帮忙，顺利解决了一系列的技术问题，这些问题在程序员看来可能完全是小儿科，但是对我这样的外行来说，可实在是帮了大忙，不需要再在传统的网络搜索引擎寻找、拼凑和一知半解的猜测和摸索，AI直接几秒钟就给到我非常有针对性的回答，并且它还会根据我的实际情况做出上下文的学习调整。

顺便也把一键部署的脚本给搞好了，也算是因祸得福，下次需要重装或迁移时就快多了：以往自己手搓，从开搞到进入博客后台要两个小时而且还需要时不时复制代码和输入数据，现在只需要开头时一次性录入几个基础数据，十分钟左右就进博客后台了，可以说是大幅提高效率和改善体验了。

AI真的是普通人获取基础知识的绝佳工具啊。

附：一键脚本内容

可以把以下代码完整保存在一个新建的记事本文档(.txt)里，然后把文件扩展名改为.sh，例如命名为wordpress-install.sh，然后放到VPS的网站目录里，需要时在SSH终端界面进入脚本所在目录，然后执行bash wordpress-install.sh即可开始部署：

#!/bin/bash

# ============================================================
#    WordPress 终极全自动建站工具 (V6.6.2 究极增强版)
#    集成：PHP 8.3 + Redis + SSL自动重载 + 异地备份建议
# ============================================================

# --- 0. 环境预检 ---
if [ ! -f /etc/debian_version ]; then
    echo "错误：此脚本仅支持 Ubuntu/Debian 系统。"
    exit 1
fi

clear
echo "################################################"
echo "#    远程脚本已就绪：请确保域名解析已生效！      #"
echo "################################################"
echo ""
read -p "确认解析已生效请按 [回车]，取消请按 [Ctrl+C]: " CONFIRM_DNS

# --- 1. 交互询问 ---
read -p "网站目录名 (例如 myblog): " WEB_DIR
read -p "网站域名 (例如 mydomain.com): " DOMAIN

echo "--- 数据库配置 ---"
read -p "请输入数据库名 [默认: wordpress]: " DB_NAME
DB_NAME=${DB_NAME:-"wordpress"}
read -p "请输入数据库用户 [默认: wordpress]: " DB_USER
DB_USER=${DB_USER:-"wordpress"}
read -p "请输入数据库密码 [直接回车则随机生成]: " DB_PASS
[ -z "$DB_PASS" ] && DB_PASS=$(openssl rand -base64 12 | tr -dc 'a-zA-Z0-9' | head -c 12)

echo "--- WordPress 站点设置 ---"
read -p "WordPress 站点标题: " WP_TITLE
read -p "WordPress 管理员账号: " WP_ADMIN_USER
read -p "WordPress 管理员密码: " WP_ADMIN_PASS
read -p "WordPress 管理员邮箱: " WP_ADMIN_EMAIL

read -p "是否申请 SSL 证书 (HTTPS)? (y/n): " NEED_SSL
if [[ "$NEED_SSL" =~ ^[Yy]$ ]]; then
    read -p "SSL 证书管理邮箱 [回车则使用管理员邮箱]: " SSL_EMAIL
    SSL_EMAIL=${SSL_EMAIL:-$WP_ADMIN_EMAIL}
    SSL_STATUS="已配置 (Certbot + 自动重载钩子)"
else
    SSL_STATUS="未配置"
    SSL_EMAIL="N/A"
fi

# --- 2. 安装核心环境 ---
sudo apt update && sudo apt install -y software-properties-common curl
sudo add-apt-repository -y ppa:ondrej/php
sudo apt update
sudo apt install -y nginx mariadb-server redis-server certbot python3-certbot-nginx php8.3-{common,cli,fpm,mysql,mysqli,redis,imagick,curl,bz2,mbstring,intl,gd,xml,xmlrpc,soap,zip,bcmath,exif}

# 安装 WP-CLI
curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
chmod +x wp-cli.phar
sudo mv wp-cli.phar /usr/local/bin/wp

# --- 3. 基础服务启动 ---
sudo systemctl enable mariadb redis-server
sudo systemctl start mariadb redis-server

# --- 4. 数据库与安全加固 ---
sudo mysql -e "CREATE DATABASE IF NOT EXISTS `${DB_NAME}` DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"
sudo mysql -e "CREATE USER IF NOT EXISTS '${DB_USER}'@'localhost' IDENTIFIED BY '${DB_PASS}';"
sudo mysql -e "GRANT ALL PRIVILEGES ON `${DB_NAME}`.* TO '${DB_USER}'@'localhost';"
sudo mysql -e "DELETE FROM mysql.user WHERE User='';"
sudo mysql -e "DROP DATABASE IF EXISTS test;"
sudo mysql -e "FLUSH PRIVILEGES;"

# --- 5. 配置优化 ---
for param in post_max_size=128M memory_limit=256M upload_max_filesize=512M max_execution_time=300 date.timezone=Asia/Shanghai
do
    key=${param%=*}
    value=${param#*=}
    sudo sed -i "s|^;*\($key\)\s*=.*|\1 = $value|" /etc/php/8.3/fpm/php.ini
done
sudo sed -i '/http {/a \    client_max_body_size 512M;' /etc/nginx/nginx.conf 2>/dev/null

cat <<EOF | sudo tee /etc/nginx/sites-available/$DOMAIN
server {
    listen 80;
    server_name $DOMAIN www.$DOMAIN;
    root /home/www/$WEB_DIR;
    index index.php index.html index.htm;
    client_max_body_size 512M;
    # 核心：支持 WordPress 伪静态
    location / { try_files \$uri \$uri/ /index.php?\$args; }
    location ~ \.php$ { include snippets/fastcgi-php.conf; fastcgi_pass unix:/run/php/php8.3-fpm.sock; }
    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|otf)\$ { expires max; log_not_found off; }
    location ~ /\. { deny all; }
}
EOF
sudo ln -sf /etc/nginx/sites-available/$DOMAIN /etc/nginx/sites-enabled/
sudo rm -f /etc/nginx/sites-enabled/default

# --- 6. WordPress 自动安装与 SEO 优化 ---
sudo mkdir -p /home/www/$WEB_DIR
cd /home/www/$WEB_DIR
sudo wp core download --locale=zh_CN --allow-root
sudo wp config create --dbname=$DB_NAME --dbuser=$DB_USER --dbpass=$DB_PASS --allow-root
sudo wp core install --url=$DOMAIN --title="$WP_TITLE" --admin_user=$WP_ADMIN_USER --admin_password=$WP_ADMIN_PASS --admin_email=$WP_ADMIN_EMAIL --allow-root

# SEO 优化：自动设置固定链接为 /%postname%/
sudo wp rewrite structure '/%postname%/' --allow-root

# 媒体优化：禁用默认尺寸生成
sudo wp option update thumbnail_size_w 0 --allow-root
sudo wp option update thumbnail_size_h 0 --allow-root
sudo wp option update medium_size_w 0 --allow-root
sudo wp option update medium_size_h 0 --allow-root
sudo wp option update large_size_w 0 --allow-root
sudo wp option update large_size_h 0 --allow-root

sudo chmod 640 wp-config.php
sudo chown -R www-data:www-data /home/www/$WEB_DIR

# --- 7. SSL 证书与自动重载钩子 ---
if [[ "$NEED_SSL" =~ ^[Yy]$ ]]; then
    sudo certbot --nginx -d $DOMAIN -d www.$DOMAIN --non-interactive --agree-tos --email $SSL_EMAIL --redirect
    
    # 核心：创建续期后的 Nginx 自动重载钩子
    sudo mkdir -p /etc/letsencrypt/renewal-hooks/deploy/
    echo -e '#!/bin/bash\nsystemctl reload nginx' | sudo tee /etc/letsencrypt/renewal-hooks/deploy/reload-nginx.sh
    sudo chmod +x /etc/letsencrypt/renewal-hooks/deploy/reload-nginx.sh
fi

sudo nginx -t && sudo systemctl restart nginx php8.3-fpm

# --- 8. 安装汇总报告 ---
clear
echo "===================================================="
echo "          WordPress 自动建站安装汇总报告"
echo "===================================================="
echo "【站点基础信息】"
echo "  - 网站域名:      $DOMAIN"
echo "  - 网站目录:      /home/www/$WEB_DIR"
echo "  - SSL 状态:      $SSL_STATUS"
echo ""
echo "【数据库配置】"
echo "  - 数据库名:      $DB_NAME"
echo "  - 数据库用户:    $DB_USER"
echo "  - 数据库密码:    $DB_PASS"
echo ""
echo "【WordPress 管理信息】"
echo "  - 站点标题:      $WP_TITLE"
echo "  - 管理员账号:    $WP_ADMIN_USER"
echo "  - 管理员密码:    $WP_ADMIN_PASS"
echo ""
echo "===================================================="
echo "            💡 后续建议：异地备份方案 (NAS)"
echo "----------------------------------------------------"
echo "1. VPS端定时打包：建议使用脚本每周一 03:00 运行"
echo "2. NAS端拉取备份：建议在 NAS 任务计划配置以下命令 (05:00)"
echo "   rsync -avz -e \"ssh -p VPS端口\" root@$DOMAIN:/home/wp_backups/ /群晖路径/"
echo "3. 安全加固：NAS 免密登录 VPS 后，建议关闭路由器的 SSH 转发端口"
echo "===================================================="
echo "请及时记录以上信息。祝您的网站运行愉快！"

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

#!/bin/bash

# ============================================================

# WordPress 终极全自动建站工具 (V6.6.2 究极增强版)

# 集成：PHP 8.3 + Redis + SSL自动重载 + 异地备份建议

# ============================================================

# --- 0. 环境预检 ---

if [ ! -f /etc/debian_version ]; then

echo "错误：此脚本仅支持 Ubuntu/Debian 系统。"

exit 1

clear

echo "################################################"

echo "# 远程脚本已就绪：请确保域名解析已生效！ #"

echo "################################################"

echo ""

read -p "确认解析已生效请按 [回车]，取消请按 [Ctrl+C]: " CONFIRM_DNS

# --- 1. 交互询问 ---

read -p "网站目录名 (例如 myblog): " WEB_DIR

read -p "网站域名 (例如 mydomain.com): " DOMAIN

echo "--- 数据库配置 ---"

read -p "请输入数据库名 [默认: wordpress]: " DB_NAME

DB_NAME=${DB_NAME:-"wordpress"}

read -p "请输入数据库用户 [默认: wordpress]: " DB_USER

DB_USER=${DB_USER:-"wordpress"}

read -p "请输入数据库密码 [直接回车则随机生成]: " DB_PASS

[ -z "$DB_PASS" ] && DB_PASS=$(openssl rand -base64 12 | tr -dc 'a-zA-Z0-9' | head -c 12)

echo "--- WordPress 站点设置 ---"

read -p "WordPress 站点标题: " WP_TITLE

read -p "WordPress 管理员账号: " WP_ADMIN_USER

read -p "WordPress 管理员密码: " WP_ADMIN_PASS

read -p "WordPress 管理员邮箱: " WP_ADMIN_EMAIL

read -p "是否申请 SSL 证书 (HTTPS)? (y/n): " NEED_SSL

if [[ "$NEED_SSL" =~ ^[Yy]$ ]]; then

read -p "SSL 证书管理邮箱 [回车则使用管理员邮箱]: " SSL_EMAIL

SSL_EMAIL=${SSL_EMAIL:-$WP_ADMIN_EMAIL}

SSL_STATUS="已配置 (Certbot + 自动重载钩子)"

else

SSL_STATUS="未配置"

SSL_EMAIL="N/A"

# --- 2. 安装核心环境 ---

sudo apt update && sudo apt install -y software-properties-common curl

sudo add-apt-repository -y ppa:ondrej/php

sudo apt update

sudo apt install -y nginx mariadb-server redis-server certbot python3-certbot-nginx php8.3-{common,cli,fpm,mysql,mysqli,redis,imagick,curl,bz2,mbstring,intl,gd,xml,xmlrpc,soap,zip,bcmath,exif}

# 安装 WP-CLI

curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar

chmod +x wp-cli.phar

sudo mv wp-cli.phar /usr/local/bin/wp

# --- 3. 基础服务启动 ---

sudo systemctl enable mariadb redis-server

sudo systemctl start mariadb redis-server

# --- 4. 数据库与安全加固 ---

sudo mysql -e "CREATE DATABASE IF NOT EXISTS `${DB_NAME}` DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"

sudo mysql -e "CREATE USER IF NOT EXISTS '${DB_USER}'@'localhost' IDENTIFIED BY '${DB_PASS}';"

sudo mysql -e "GRANT ALL PRIVILEGES ON `${DB_NAME}`.* TO '${DB_USER}'@'localhost';"

sudo mysql -e "DELETE FROM mysql.user WHERE User='';"

sudo mysql -e "DROP DATABASE IF EXISTS test;"

sudo mysql -e "FLUSH PRIVILEGES;"

# --- 5. 配置优化 ---

for param in post_max_size=128M memory_limit=256M upload_max_filesize=512M max_execution_time=300 date.timezone=Asia/Shanghai

key=${param%=*}

value=${param#*=}

sudo sed -i "s|^;*$$key$\s*=.*|\1 = $value|" /etc/php/8.3/fpm/php.ini

done

sudo sed -i '/http {/a \ client_max_body_size 512M;' /etc/nginx/nginx.conf 2>/dev/null

cat <<EOF | sudo tee /etc/nginx/sites-available/$DOMAIN

server {

listen 80;

server_name $DOMAIN www.$DOMAIN;

root /home/www/$WEB_DIR;

index index.php index.html index.htm;

client_max_body_size 512M;

# 核心：支持 WordPress 伪静态

location / { try_files \$uri \$uri/ /index.php?\$args; }

location ~ \.php$ { include snippets/fastcgi-php.conf; fastcgi_pass unix:/run/php/php8.3-fpm.sock; }

location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|otf)\$ { expires max; log_not_found off; }

location ~ /\. { deny all; }

}

EOF

sudo ln -sf /etc/nginx/sites-available/$DOMAIN /etc/nginx/sites-enabled/

sudo rm -f /etc/nginx/sites-enabled/default

# --- 6. WordPress 自动安装与 SEO 优化 ---

sudo mkdir -p /home/www/$WEB_DIR

cd /home/www/$WEB_DIR

sudo wp core download --locale=zh_CN --allow-root

sudo wp config create --dbname=$DB_NAME --dbuser=$DB_USER --dbpass=$DB_PASS --allow-root

sudo wp core install --url=$DOMAIN --title="$WP_TITLE" --admin_user=$WP_ADMIN_USER --admin_password=$WP_ADMIN_PASS --admin_email=$WP_ADMIN_EMAIL --allow-root

# SEO 优化：自动设置固定链接为 /%postname%/

sudo wp rewrite structure '/%postname%/' --allow-root

# 媒体优化：禁用默认尺寸生成

sudo wp option update thumbnail_size_w 0 --allow-root

sudo wp option update thumbnail_size_h 0 --allow-root

sudo wp option update medium_size_w 0 --allow-root

sudo wp option update medium_size_h 0 --allow-root

sudo wp option update large_size_w 0 --allow-root

sudo wp option update large_size_h 0 --allow-root

sudo chmod 640 wp-config.php

sudo chown -R www-data:www-data /home/www/$WEB_DIR

# --- 7. SSL 证书与自动重载钩子 ---

if [[ "$NEED_SSL" =~ ^[Yy]$ ]]; then

sudo certbot --nginx -d $DOMAIN -d www.$DOMAIN --non-interactive --agree-tos --email $SSL_EMAIL --redirect

# 核心：创建续期后的 Nginx 自动重载钩子

sudo mkdir -p /etc/letsencrypt/renewal-hooks/deploy/

echo -e '#!/bin/bash\nsystemctl reload nginx' | sudo tee /etc/letsencrypt/renewal-hooks/deploy/reload-nginx.sh

sudo chmod +x /etc/letsencrypt/renewal-hooks/deploy/reload-nginx.sh

sudo nginx -t && sudo systemctl restart nginx php8.3-fpm

# --- 8. 安装汇总报告 ---

clear

echo "===================================================="

echo " WordPress 自动建站安装汇总报告"

echo "===================================================="

echo "【站点基础信息】"

echo " - 网站域名: $DOMAIN"

echo " - 网站目录: /home/www/$WEB_DIR"

echo " - SSL 状态: $SSL_STATUS"

echo ""

echo "【数据库配置】"

echo " - 数据库名: $DB_NAME"

echo " - 数据库用户: $DB_USER"

echo " - 数据库密码: $DB_PASS"

echo ""

echo "【WordPress 管理信息】"

echo " - 站点标题: $WP_TITLE"

echo " - 管理员账号: $WP_ADMIN_USER"

echo " - 管理员密码: $WP_ADMIN_PASS"

echo ""

echo "===================================================="

echo " 💡 后续建议：异地备份方案 (NAS)"

echo "----------------------------------------------------"

echo "1. VPS端定时打包：建议使用脚本每周一 03:00 运行"

echo "2. NAS端拉取备份：建议在 NAS 任务计划配置以下命令 (05:00)"

echo " rsync -avz -e \"ssh -p VPS端口\" root@$DOMAIN:/home/wp_backups/ /群晖路径/"

echo "3. 安全加固：NAS 免密登录 VPS 后，建议关闭路由器的 SSH 转发端口"

echo "===================================================="

echo "请及时记录以上信息。祝您的网站运行愉快！"

以上是实测可用的版本，但当时还没增加BBR等网络优化加速功能，于是让AI做了加强版，如下：

#!/bin/bash

# ============================================================
#    WordPress 终极全自动建站工具 (V7.1 究极性能版)
#    集成：BBR + TFO + PHP 8.3 + WP-CLI + Redis + 汇总报告
# ============================================================

# --- 0. 环境预检 ---
if [ ! -f /etc/debian_version ]; then
    echo "错误：此脚本仅支持 Ubuntu/Debian 系统。"
    exit 1
fi

clear
echo "################################################"
echo "#    CloudCone VPS 专属优化：BBR + TFO + WP    #"
echo "################################################"
echo ""
read -p "确认域名解析已生效请按 [回车]，取消请按 [Ctrl+C]: " CONFIRM_DNS

# --- 1. 交互询问 ---
read -p "网站目录名 (例如 myblog): " WEB_DIR
read -p "网站域名 (例如 mydomain.com): " DOMAIN

echo "--- 数据库配置 ---"
read -p "请输入数据库名 [默认: wordpress]: " DB_NAME
DB_NAME=${DB_NAME:-"wordpress"}
read -p "请输入数据库用户 [默认: wordpress]: " DB_USER
DB_USER=${DB_USER:-"wordpress"}
read -p "请输入数据库密码 [直接回车则随机生成]: " DB_PASS
[ -z "$DB_PASS" ] && DB_PASS=$(openssl rand -base64 12 | tr -dc 'a-zA-Z0-9' | head -c 12)

echo "--- WordPress 站点设置 ---"
read -p "WordPress 站点标题: " WP_TITLE
read -p "WordPress 管理员账号: " WP_ADMIN_USER
read -p "WordPress 管理员密码: " WP_ADMIN_PASS
read -p "WordPress 管理员邮箱: " WP_ADMIN_EMAIL

read -p "是否申请 SSL 证书 (HTTPS)? (y/n): " NEED_SSL
if [[ "$NEED_SSL" =~ ^[Yy]$ ]]; then
    SSL_EMAIL=${WP_ADMIN_EMAIL}
    SSL_STATUS="已配置 (Certbot + 自动重载钩子)"
else
    SSL_STATUS="未配置"
fi

# --- 2. 网络内核深度优化 (BBR + TFO) ---
echo "正在注入内核优化参数 (BBR & TCP Fast Open)..."
sudo sed -i '/net.core.default_qdisc/d' /etc/sysctl.conf
sudo sed -i '/net.ipv4.tcp_congestion_control/d' /etc/sysctl.conf
sudo sed -i '/net.ipv4.tcp_fastopen/d' /etc/sysctl.conf

cat <<EOF | sudo tee -a /etc/sysctl.conf
net.core.default_qdisc=fq
net.ipv4.tcp_congestion_control=bbr
net.ipv4.tcp_fastopen = 3
EOF
sudo sysctl -p

# --- 3. 安装核心环境 ---
sudo apt update && sudo apt install -y software-properties-common curl
sudo add-apt-repository -y ppa:ondrej/php
sudo apt update
sudo apt install -y nginx mariadb-server redis-server certbot python3-certbot-nginx \
php8.3-{common,cli,fpm,mysql,mysqli,redis,imagick,curl,bz2,mbstring,intl,gd,xml,xmlrpc,soap,zip,bcmath,exif,opcache}

# 安装 WP-CLI
if [ ! -f /usr/local/bin/wp ]; then
    curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
    chmod +x wp-cli.phar
    sudo mv wp-cli.phar /usr/local/bin/wp
fi

# --- 4. 基础服务启动与数据库加固 ---
sudo systemctl enable mariadb redis-server
sudo systemctl start mariadb redis-server
sudo mysql -e "CREATE DATABASE IF NOT EXISTS `${DB_NAME}` DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"
sudo mysql -e "CREATE USER IF NOT EXISTS '${DB_USER}'@'localhost' IDENTIFIED BY '${DB_PASS}';"
sudo mysql -e "GRANT ALL PRIVILEGES ON `${DB_NAME}`.* TO '${DB_USER}'@'localhost';"
sudo mysql -e "DELETE FROM mysql.user WHERE User='';"
sudo mysql -e "DROP DATABASE IF EXISTS test;"
sudo mysql -e "FLUSH PRIVILEGES;"

# --- 5. 配置优化 (PHP & Nginx) ---
# PHP 性能调优
for param in post_max_size=128M memory_limit=512M upload_max_filesize=512M max_execution_time=300 opcache.enable=1
do
    key=${param%=*}
    value=${param#*=}
    sudo sed -i "s|^;*\($key\)\s*=.*|\1 = $value|" /etc/php/8.3/fpm/php.ini
done
sudo sed -i '/http {/a \    client_max_body_size 512M;' /etc/nginx/nginx.conf 2>/dev/null

# 生成优化版 Nginx 配置 (支持 TFO)
cat <<EOF | sudo tee /etc/nginx/sites-available/$DOMAIN
server {
    listen 80;
    server_name $DOMAIN www.$DOMAIN;
    root /home/www/$WEB_DIR;
    index index.php index.html;
    return 301 https://\$host\$request_uri;
}

server {
    # 核心优化：针对 HTTPS 开启 reuseport 和 fastopen
    listen 443 ssl reuseport fastopen=256;
    server_name $DOMAIN www.$DOMAIN;
    root /home/www/$WEB_DIR;
    index index.php index.html;

    client_max_body_size 512M;

    # SSL 占位符 (Certbot 随后会更新)
    ssl_certificate /etc/letsencrypt/live/$DOMAIN/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/$DOMAIN/privkey.pem;

    location / { try_files \$uri \$uri/ /index.php?\$args; }
    
    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/run/php/php8.3-fpm.sock;
        fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
    }

    # 静态资源长期缓存
    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|otf|webp)\$ {
        expires max;
        log_not_found off;
        access_log off;
    }

    location ~ /\. { deny all; }
}
EOF

sudo ln -sf /etc/nginx/sites-available/$DOMAIN /etc/nginx/sites-enabled/
sudo rm -f /etc/nginx/sites-enabled/default

# --- 6. WordPress 自动安装与优化 ---
sudo mkdir -p /home/www/$WEB_DIR
cd /home/www/$WEB_DIR
sudo wp core download --locale=zh_CN --allow-root
sudo wp config create --dbname=$DB_NAME --dbuser=$DB_USER --dbpass=$DB_PASS --allow-root
sudo wp core install --url=$DOMAIN --title="$WP_TITLE" --admin_user=$WP_ADMIN_USER --admin_password=$WP_ADMIN_PASS --admin_email=$WP_ADMIN_EMAIL --allow-root

# 伪静态与媒体优化
sudo wp rewrite structure '/%postname%/' --allow-root
sudo wp option update thumbnail_size_w 0 --allow-root
sudo wp option update thumbnail_size_h 0 --allow-root
sudo wp option update medium_size_w 0 --allow-root
sudo wp option update medium_size_h 0 --allow-root
sudo wp option update large_size_w 0 --allow-root
sudo wp option update large_size_h 0 --allow-root

sudo chown -R www-data:www-data /home/www/$WEB_DIR

# --- 7. SSL 证书与自动重载钩子 ---
if [[ "$NEED_SSL" =~ ^[Yy]$ ]]; then
    sudo certbot --nginx -d $DOMAIN -d www.$DOMAIN --non-interactive --agree-tos --email $SSL_EMAIL --redirect
    
    sudo mkdir -p /etc/letsencrypt/renewal-hooks/deploy/
    echo -e '#!/bin/bash\nsystemctl reload nginx' | sudo tee /etc/letsencrypt/renewal-hooks/deploy/reload-nginx.sh
    sudo chmod +x /etc/letsencrypt/renewal-hooks/deploy/reload-nginx.sh
fi

sudo nginx -t && sudo systemctl restart nginx php8.3-fpm

# --- 8. 安装汇总报告 (恢复核心部分) ---
clear
echo "===================================================="
echo "          WordPress 自动建站安装汇总报告 (V7.1)"
echo "===================================================="
echo "【站点性能状态】"
echo "  - BBR 加速:       $(sysctl net.ipv4.tcp_congestion_control | awk '{print $3}')"
echo "  - TCP Fast Open:  $(cat /proc/sys/net/ipv4/tcp_fastopen) (状态3为开启)"
echo "  - PHP 版本:       8.3 (Opcache Enabled)"
echo "  - Redis 缓存:     已安装 (请在 WP 后台开启插件)"
echo ""
echo "【站点基础信息】"
echo "  - 网站域名:       $DOMAIN"
echo "  - 网站目录:       /home/www/$WEB_DIR"
echo "  - SSL 状态:       $SSL_STATUS"
echo ""
echo "【数据库配置】"
echo "  - 数据库名:       $DB_NAME"
echo "  - 数据库用户:     $DB_USER"
echo "  - 数据库密码:     $DB_PASS"
echo ""
echo "【WordPress 管理信息】"
echo "  - 管理员账号:     $WP_ADMIN_USER"
echo "  - 管理员密码:     $WP_ADMIN_PASS"
echo ""
echo "===================================================="
echo "            💡 后续建议：异地备份方案 (NAS)"
echo "----------------------------------------------------"
echo "1. VPS端定时打包：建议使用脚本每周一 03:00 运行"
echo "2. NAS端拉取备份：建议在 NAS 任务计划配置以下命令 (05:00)"
echo "    rsync -avz -e \"ssh -p VPS端口\" root@$DOMAIN:/home/www/$WEB_DIR /群晖路径/"
echo "===================================================="
echo "请及时记录以上信息。祝您的网站运行愉快！"

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

#!/bin/bash

# ============================================================

# WordPress 终极全自动建站工具 (V7.1 究极性能版)

# 集成：BBR + TFO + PHP 8.3 + WP-CLI + Redis + 汇总报告

# ============================================================

# --- 0. 环境预检 ---

if [ ! -f /etc/debian_version ]; then

echo "错误：此脚本仅支持 Ubuntu/Debian 系统。"

exit 1

clear

echo "################################################"

echo "# CloudCone VPS 专属优化：BBR + TFO + WP #"

echo "################################################"

echo ""

read -p "确认域名解析已生效请按 [回车]，取消请按 [Ctrl+C]: " CONFIRM_DNS

# --- 1. 交互询问 ---

read -p "网站目录名 (例如 myblog): " WEB_DIR

read -p "网站域名 (例如 mydomain.com): " DOMAIN

echo "--- 数据库配置 ---"

read -p "请输入数据库名 [默认: wordpress]: " DB_NAME

DB_NAME=${DB_NAME:-"wordpress"}

read -p "请输入数据库用户 [默认: wordpress]: " DB_USER

DB_USER=${DB_USER:-"wordpress"}

read -p "请输入数据库密码 [直接回车则随机生成]: " DB_PASS

[ -z "$DB_PASS" ] && DB_PASS=$(openssl rand -base64 12 | tr -dc 'a-zA-Z0-9' | head -c 12)

echo "--- WordPress 站点设置 ---"

read -p "WordPress 站点标题: " WP_TITLE

read -p "WordPress 管理员账号: " WP_ADMIN_USER

read -p "WordPress 管理员密码: " WP_ADMIN_PASS

read -p "WordPress 管理员邮箱: " WP_ADMIN_EMAIL

read -p "是否申请 SSL 证书 (HTTPS)? (y/n): " NEED_SSL

if [[ "$NEED_SSL" =~ ^[Yy]$ ]]; then

SSL_EMAIL=${WP_ADMIN_EMAIL}

SSL_STATUS="已配置 (Certbot + 自动重载钩子)"

else

SSL_STATUS="未配置"

# --- 2. 网络内核深度优化 (BBR + TFO) ---

echo "正在注入内核优化参数 (BBR & TCP Fast Open)..."

sudo sed -i '/net.core.default_qdisc/d' /etc/sysctl.conf

sudo sed -i '/net.ipv4.tcp_congestion_control/d' /etc/sysctl.conf

sudo sed -i '/net.ipv4.tcp_fastopen/d' /etc/sysctl.conf

cat <<EOF | sudo tee -a /etc/sysctl.conf

net.core.default_qdisc=fq

net.ipv4.tcp_congestion_control=bbr

net.ipv4.tcp_fastopen = 3

EOF

sudo sysctl -p

# --- 3. 安装核心环境 ---

sudo apt update && sudo apt install -y software-properties-common curl

sudo add-apt-repository -y ppa:ondrej/php

sudo apt update

sudo apt install -y nginx mariadb-server redis-server certbot python3-certbot-nginx \

php8.3-{common,cli,fpm,mysql,mysqli,redis,imagick,curl,bz2,mbstring,intl,gd,xml,xmlrpc,soap,zip,bcmath,exif,opcache}

# 安装 WP-CLI

if [ ! -f /usr/local/bin/wp ]; then

curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar

chmod +x wp-cli.phar

sudo mv wp-cli.phar /usr/local/bin/wp

# --- 4. 基础服务启动与数据库加固 ---

sudo systemctl enable mariadb redis-server

sudo systemctl start mariadb redis-server

sudo mysql -e "CREATE DATABASE IF NOT EXISTS `${DB_NAME}` DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"

sudo mysql -e "CREATE USER IF NOT EXISTS '${DB_USER}'@'localhost' IDENTIFIED BY '${DB_PASS}';"

sudo mysql -e "GRANT ALL PRIVILEGES ON `${DB_NAME}`.* TO '${DB_USER}'@'localhost';"

sudo mysql -e "DELETE FROM mysql.user WHERE User='';"

sudo mysql -e "DROP DATABASE IF EXISTS test;"

sudo mysql -e "FLUSH PRIVILEGES;"

# --- 5. 配置优化 (PHP & Nginx) ---

# PHP 性能调优

for param in post_max_size=128M memory_limit=512M upload_max_filesize=512M max_execution_time=300 opcache.enable=1

key=${param%=*}

value=${param#*=}

sudo sed -i "s|^;*$$key$\s*=.*|\1 = $value|" /etc/php/8.3/fpm/php.ini

done

sudo sed -i '/http {/a \ client_max_body_size 512M;' /etc/nginx/nginx.conf 2>/dev/null

# 生成优化版 Nginx 配置 (支持 TFO)

cat <<EOF | sudo tee /etc/nginx/sites-available/$DOMAIN

server {

listen 80;

server_name $DOMAIN www.$DOMAIN;

root /home/www/$WEB_DIR;

index index.php index.html;

return 301 https://\$host\$request_uri;

}

server {

# 核心优化：针对 HTTPS 开启 reuseport 和 fastopen

listen 443 ssl reuseport fastopen=256;

server_name $DOMAIN www.$DOMAIN;

root /home/www/$WEB_DIR;

index index.php index.html;

client_max_body_size 512M;

# SSL 占位符 (Certbot 随后会更新)

ssl_certificate /etc/letsencrypt/live/$DOMAIN/fullchain.pem;

ssl_certificate_key /etc/letsencrypt/live/$DOMAIN/privkey.pem;

location / { try_files \$uri \$uri/ /index.php?\$args; }

location ~ \.php$ {

include snippets/fastcgi-php.conf;

fastcgi_pass unix:/run/php/php8.3-fpm.sock;

fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;

}

# 静态资源长期缓存

location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|otf|webp)\$ {

expires max;

log_not_found off;

access_log off;

}

location ~ /\. { deny all; }

}

EOF

sudo ln -sf /etc/nginx/sites-available/$DOMAIN /etc/nginx/sites-enabled/

sudo rm -f /etc/nginx/sites-enabled/default

# --- 6. WordPress 自动安装与优化 ---

sudo mkdir -p /home/www/$WEB_DIR

cd /home/www/$WEB_DIR

sudo wp core download --locale=zh_CN --allow-root

sudo wp config create --dbname=$DB_NAME --dbuser=$DB_USER --dbpass=$DB_PASS --allow-root

sudo wp core install --url=$DOMAIN --title="$WP_TITLE" --admin_user=$WP_ADMIN_USER --admin_password=$WP_ADMIN_PASS --admin_email=$WP_ADMIN_EMAIL --allow-root

# 伪静态与媒体优化

sudo wp rewrite structure '/%postname%/' --allow-root

sudo wp option update thumbnail_size_w 0 --allow-root

sudo wp option update thumbnail_size_h 0 --allow-root

sudo wp option update medium_size_w 0 --allow-root

sudo wp option update medium_size_h 0 --allow-root

sudo wp option update large_size_w 0 --allow-root

sudo wp option update large_size_h 0 --allow-root

sudo chown -R www-data:www-data /home/www/$WEB_DIR

# --- 7. SSL 证书与自动重载钩子 ---

if [[ "$NEED_SSL" =~ ^[Yy]$ ]]; then

sudo certbot --nginx -d $DOMAIN -d www.$DOMAIN --non-interactive --agree-tos --email $SSL_EMAIL --redirect

sudo mkdir -p /etc/letsencrypt/renewal-hooks/deploy/

echo -e '#!/bin/bash\nsystemctl reload nginx' | sudo tee /etc/letsencrypt/renewal-hooks/deploy/reload-nginx.sh

sudo chmod +x /etc/letsencrypt/renewal-hooks/deploy/reload-nginx.sh

sudo nginx -t && sudo systemctl restart nginx php8.3-fpm

# --- 8. 安装汇总报告 (恢复核心部分) ---

clear

echo "===================================================="

echo " WordPress 自动建站安装汇总报告 (V7.1)"

echo "===================================================="

echo "【站点性能状态】"

echo " - BBR 加速: $(sysctl net.ipv4.tcp_congestion_control | awk '{print $3}')"

echo " - TCP Fast Open: $(cat /proc/sys/net/ipv4/tcp_fastopen) (状态3为开启)"

echo " - PHP 版本: 8.3 (Opcache Enabled)"

echo " - Redis 缓存: 已安装 (请在 WP 后台开启插件)"

echo ""

echo "【站点基础信息】"

echo " - 网站域名: $DOMAIN"

echo " - 网站目录: /home/www/$WEB_DIR"

echo " - SSL 状态: $SSL_STATUS"

echo ""

echo "【数据库配置】"

echo " - 数据库名: $DB_NAME"

echo " - 数据库用户: $DB_USER"

echo " - 数据库密码: $DB_PASS"

echo ""

echo "【WordPress 管理信息】"

echo " - 管理员账号: $WP_ADMIN_USER"

echo " - 管理员密码: $WP_ADMIN_PASS"

echo ""

echo "===================================================="

echo " 💡 后续建议：异地备份方案 (NAS)"

echo "----------------------------------------------------"

echo "1. VPS端定时打包：建议使用脚本每周一 03:00 运行"

echo "2. NAS端拉取备份：建议在 NAS 任务计划配置以下命令 (05:00)"

echo " rsync -avz -e \"ssh -p VPS端口\" root@$DOMAIN:/home/www/$WEB_DIR /群晖路径/"

echo "===================================================="

echo "请及时记录以上信息。祝您的网站运行愉快！"

背景

AI就是生产力

附：一键脚本内容

相关

发表回复取消回复