前言

参考：

https://community.hetzner.com/tutorials/ssh-notification-with-ntfy

功能

1. 登录通知：当用户通过SSH登录时，向Gotify发送通知，包含

   • 登录用户
   • IP
   • 主机名
   • 地理位置
   • 时间

2. 排除项：排除来自局域网和服务器自己公网ip的连接

通知示例：

用户 elvish 从 114.51.14.11 登录到 Ubuntu-24.04-server
时间: 2026-01-01 10:00:00 CST
🌍 位置: Shanghai, Shanghai, CN 🇨🇳

说明

1. 地理位置服务使用ipinfo.io的API通过ip地址反推，有速率限制
2. 脚本会在每次SSH登录时执行，包括非交互式登录（如SCP、SFTP等）

使用说明

1. 创建脚本：

sudo nano /usr/local/bin/ssh-login-notify.sh

粘贴以下内容：

#!/bin/bash

USER_NAME=$PAM_USER
HOST_NAME=$(hostname)
TIME_NOW=$(TZ=Asia/Shanghai date "+%Y-%m-%d %H:%M:%S %Z")
GOTIFY_URL="http://127.0.0.1:8118"  # <- 更改此处的地址和token
GOTIFY_TOKEN="<GOTIFY_TOKEN>"

# 获取IP地址 - 修复SFTP连接显示问题
if [ -n "$SSH_CONNECTION" ]; then
  IP_ADDRESS=$(echo $SSH_CONNECTION | awk '{print $1}')
else
  # 回退到who命令，但过滤掉无效的输出
  IP_ADDRESS=$(who | awk '{print $5}' | grep -Eo '([0-9]{1,3}\.){3}[0-9]{1,3}' | head -n 1)
fi

[ -z "$IP_ADDRESS" ] && IP_ADDRESS="unknown"

# 获取服务器的公网IP地址
get_server_public_ip() {
  # 尝试通过不同方式获取公网IP
  local public_ip=""
  
  # 方法1: 使用dig查询DNS
  public_ip=$(dig +short myip.opendns.com @resolver1.opendns.com 2>/dev/null)
  
  # 方法2: 使用curl查询外部服务
  if [ -z "$public_ip" ]; then
    public_ip=$(curl -s http://ifconfig.me 2>/dev/null)
  fi
  
  # 方法3: 使用hostname命令
  if [ -z "$public_ip" ]; then
    public_ip=$(hostname -I | awk '{print $1}' 2>/dev/null)
  fi
  
  echo "$public_ip"
}

# 检查是否为局域网、回环地址或服务器自身公网IP
is_local_or_self_ip() {
  local ip=$1
  # 回环地址
  if [[ $ip == "127.0.0.1" || $ip == "::1" || $ip == "localhost" ]]; then
    return 0
  fi
  
  # 私有IP地址范围
  if [[ $ip =~ ^10\. ]] || \
     [[ $ip =~ ^172\.(1[6-9]|2[0-9]|3[0-1])\. ]] || \
     [[ $ip =~ ^192\.168\. ]] || \
     [[ $ip =~ ^169\.254\. ]]; then
    return 0
  fi
  
  # 获取服务器公网IP
  local server_public_ip=$(get_server_public_ip)
  
  # 检查是否为服务器自身公网IP
  if [[ "$ip" == "$server_public_ip" ]]; then
    return 0
  fi
  
  # 不是本地IP或自身公网IP
  return 1
}

# 如果是局域网、回环地址或服务器自身公网IP，直接退出
if is_local_or_self_ip "$IP_ADDRESS"; then
  exit 0
fi

# 如果是会话关闭，退出
if [[ $PAM_TYPE == 'close_session' ]]; then
  exit 0
fi

# 获取地理位置信息（可选）
GEO_INFO=""
if [[ "$IP_ADDRESS" != "unknown" && "$IP_ADDRESS" != "127.0.0.1" && "$IP_ADDRESS" != ::1 ]]; then
  GEO_JSON=$(curl -s "https://ipinfo.io/$IP_ADDRESS/json")
  CITY=$(echo "$GEO_JSON" | jq -r '.city')
  REGION=$(echo "$GEO_JSON" | jq -r '.region')
  COUNTRY=$(echo "$GEO_JSON" | jq -r '.country')
  ORG=$(echo "$GEO_JSON" | jq -r '.org')
  
  # 将国家代码转换为国旗表情符号的函数
  flag() {
    local code="${1^^}"
    local first=$(( $(printf "%d" "'${code:0:1}") - 65 + 0x1F1E6 ))
    local second=$(( $(printf "%d" "'${code:1:1}") - 65 + 0x1F1E6 ))
    printf '%b' "$(printf '\\U%08X\\U%08X' "$first" "$second")"
  }
  
  # 使用Unicode编码的表情符号
  EARTH_ICON=$(printf '\U1F30D')
  GEO_INFO="$EARTH_ICON 位置: $CITY, $REGION, $COUNTRY $(flag $COUNTRY)"
fi

# 构建消息内容
TITLE="SSH登录提醒 - $HOST_NAME"
MESSAGE="用户 $USER_NAME 从 $IP_ADDRESS 登录到 $HOST_NAME
时间: $TIME_NOW
$GEO_INFO"

# 发送到Gotify
if [ -n "$SSH_CONNECTION" ] || [ -n "$SFTP_CONNECTION" ]; then
  curl -s -o /dev/null \
    -X POST \
    -F "title=${TITLE}" \
    -F "message=${MESSAGE}" \
    -F "priority=5" \
    "${GOTIFY_URL}/message?token=${GOTIFY_TOKEN}"
fi

2. 设置执行权限：

sudo chmod +x /usr/local/bin/ssh-login-notify.sh

3. 安装依赖（如果尚未安装）：

sudo apt update && sudo apt install jq dnsutils curl -y

4. 配置PAM：

编辑SSH的PAM配置文件：

sudo nano /etc/pam.d/sshd

在文件末尾添加：

session optional pam_exec.so /usr/local/bin/ssh-login-notify.sh

5. 重启SSH服务：

sudo systemctl restart sshd

此渲染由 Yohaku API 生成，或存排版之虞，最佳体验请往：https://elvish.me/posts/experience/porkbun-order-not-completed-after-payment-solution

Subject: Payment Completed but Domain Still in Cart

Dear Porkbun Support Team,

I am writing to report an issue with my recent domain registration attempt. Today, I tried to register the domain example.com and completed the payment via Alipay. The payment was successfully deducted from my account, but the domain remains in my shopping cart and has not been registered.

Here are the details for your reference:

· Domain: example.com
· Porkbun Invoice/Order #: XXXXXXX
· Alipay Transaction ID: XXXXXXXXXXXXXXXX
· Merchant Order ID: src_XXXXXXXXXXXXXXXX
· Issue: The invoice in my Porkbun account shows a payment of $0, but the payment was successfully processed via Alipay.

I confirmed that the payment was deducted from my Alipay account, and I have also seen similar reports from other users on Reddit experiencing the same issue with payments via Alipay. I believe this is a technical error on your platform, and I would appreciate your assistance in resolving it promptly.

Could you please investigate this issue and complete the registration for the domain example.com as soon as possible? If additional verification is required from my end, please let me know.

Thank you for your attention to this matter. I look forward to your prompt response.

Best regards,
Elvish

Dear NAME,

Thank you for your reply. I would like to clarify that the payment for the domain has already been successfully deducted from my Alipay account.

I notice that you use the Stripe platform to process Alipay payments. Could you please check the status of the specific order src_XXXXXXXXXXXXXXXX in your Stripe merchant dashboard?

I have taken a screenshot of the successful transaction from my Alipay account and also downloaded the official electronic transaction receipt. The original document (protected by a digital signature) is in Chinese. I have attached both the original Chinese receipt and an English translation to this email for your review.

If any other documentation is needed from my side to verify this payment, I am happy to provide it.

If there is an ongoing issue with this specific payment method on your end, I would appreciate it if you could initiate a refund for this transaction (src_XXXXXXXXXXXXXXXX) via your Stripe backend. Once the refund is confirmed, I am willing to complete the purchase for the domain using an alternative method, such as PayPal.

I look forward to your assistance in resolving this matter promptly.

Best regards,

## Urgent: Payment Verified but Order Incomplete - Order #【你的订单号】 & Stripe Charge src_【商家订单号】

Dear Porkbun Support Team,

I am writing to report a payment issue. The payment for my domain 【域名】 was successfully deducted from my Alipay account, but the domain remains in my cart and the invoice (#【你的订单号】) shows as unpaid.

I understand you use Stripe. Could you please check the status of the specific Stripe charge src_【商家订单号】 in your merchant dashboard?

For verification, I have attached:
1. A screenshot of the successful Alipay transaction.
2. The official Alipay e-receipt (original in Chinese + English translation).

If this payment cannot be applied to my order, please refund this charge (src_【商家订单号】) via your Stripe backend. I am then willing to repay immediately via PayPal or another method.

I look forward to your prompt resolution. Thank you.

Best regards,
【你的名字】

【在邮件里附上支付宝扣款截图和中英文电子流水回单】

览毕，何不一言？

引入

前几天看见有人把《明日方舟：终末地》的LOGO改成了开机动画

https://www.bilibili.com/video/BV1jPNKzkEvE

正好之前也自己改过一个COD里 ATLAS 的的开机动画，用了快一年了，正好换新换换口味，顺便复习一下制作的步骤

制作步骤

1.剪切视频

原动画作者在 视频 下面给出了网盘的视频源文件

下周后根据需要剪辑，剪掉两头多余的部分和中间同一画面停留过长的地方。

2.视频切分为帧

使用 ffmpeg 将视频切分为每帧一张图片，根据实际情况调整帧率

ffmpeg -i input.mp4 -vf "fps=30" %0d.png

3.整理文件名

对于这个只有一段的动画，将图片放到part0文件夹中

在图片目录打开PowerShell粘贴下方代码块中的内容进行规范命名。

Get-ChildItem -Filter *.png | ForEach-Object {
    if ($_.BaseName -match '^\d+$') {
        $num = [int]$_.BaseName
        $newName = "{0:D3}{1}" -f $num, $_.Extension
        if ($_.Name -ne $newName) {
            Rename-Item -Path $_.FullName -NewName $newName
            Write-Host "已重命名: $($_.Name) -> $newName" -ForegroundColor Green
        }
    }
}

4.新建配置文件

在part0同级目录新建desc.txt

1080 1440 30
c 1 0 part0 000000

::: note 参数解析：

第一行：全局基础属性

1080 1440 30

这行定义了动画的全局基础显示属性，格式为：[WIDTH] [HEIGHT] [FPS]

• 1080 (WIDTH)：动画的宽度，单位是像素。与图片分辨率一致即可。
• 1440 (HEIGHT)：动画的高度，单位是像素。
• 30 (FPS)：动画的帧率，代表每秒播放 30 张图片。

第二行：动画段落播放控制

格式均为：[TYPE] [COUNT] [PAUSE] [PATH] [BACKGROUND_COLOR] [CLOCK]

c 1 0 part0 000000 -1

• c (TYPE)：代表 "complete"（完整播放）。**即使系统在后台已经加载完毕，这一段也必须强制完整播完，不允许打断。另外可选： p：代表 "play"（可打断播放）。只要系统加载完毕准备好进入锁屏/桌面，无论这一段有没有播完，都会立刻被系统强制打断并结束开机画面。
• 1 (COUNT)：播放次数。1 代表这一段动画（part0 文件夹里的图片）只播放 1 次。
• 0 (PAUSE)：播放结束后的暂停时间，单位是帧数。停顿为 0（播完立刻进入下一阶段）
• part0 (PATH)：该段动画读取对应压缩包里的 part0 文件夹。
• #000000 (BACKGROUND)：这一段播放时的屏幕背景颜色，这里是纯黑色。
• -1 (CLOCK)：时钟显示的 Y 坐标（通常用于手表系统）。-1 代表隐藏/不显示时钟。

:::

5.打包为bootanimation.zip

part0和desc.txt打包为一个.zip文件

压缩时选择压缩程度：仅储存

最终结构：

bootanimation.zip
├── part0
│   ├── 001.png
│   ├── 002.png
│   ├── 003.png
│   └── ...
└── desc.txt

这是我制作的版本，可以 下载 参考：

刷入手机

由于我手机刷了第三方类原生的Rising OS系统，可以直接在设置中选择自定义的bootanimation.zip作为开机动画

对于一般已获取root的手机，可以构建一个简单的magisk模块刷入，覆盖系统原有的bootanimation即可

引入

由于家宽公网 IPv4 每隔24~48小时，就会被运营商强制断线重连，导致CDN在回源时可能找不到源站。

尝试通过缩短A记录的TTL来缓解此现象，但是大陆的网络环境，各地运营商DNS层层缓存，这样没有作用

只能退而求其次，尽量控制让IP变动的时候在晚上，减少影响

本来可以通过软路由的定时任务来轻松解决的，但是我用于拨号的华为路由器没有这样的功能

因此，Vibe coding了一个脚本，适用于华为AX3 Pro路由器的自动重新拨号

::: note 这个脚本仅在 AX3 Pro 进行过测试，其他型号的同种控制台应该也能使用。可能需要修改脚本中的div id :::

分析

本希望通过抓包登录和重启路由器的接口，但华为路由器采用了SCRAM (Salted Challenge Response Authentication Mechanism，加盐挑战响应认证机制) 或类似的安全握手协议，而不是直接发送明文密码。

因此每次登录时 firstnonce、csrf_token 和计算出来的 clientproof 都是动态变化的

如果希望通过脚本完成加盐挑战响应，需要解析来自路由器网页的js，比较麻烦

也尝试了通过抓包重启光猫也能达到目的（请求体是简单的明文），但是重启光猫时会导致座机也重启，晚上会发出声响

最后决定使用 Playwright 无头浏览器自动化点击来重新拨号

1.安装依赖

pip install playwright 
playwright install chromium 
playwright install-deps

2.创建脚本

在第 15 行填入登录密码

from playwright.sync_api import sync_playwright
import time

def reboot_router():
    with sync_playwright() as p:
        browser = p.chromium.launch(headless=True)
        page = browser.new_page()

        try:
            print("Opening router dashboard...")
            page.goto("http://192.168.3.1/")

            page.wait_for_load_state('networkidle')

            print("Logging in with password...")
            page.fill('#userpassword_ctrl', '<PASSWORD>') # <--把此处改为你的登录密码
            page.click('#loginbtn')

            time.sleep(3)

            print("Logged in，executing reconnecting action...")
            page.click('#internet')
            page.click('#internet_reconnect')
            print("Success.The network is about to reconnect...")
            time.sleep(2)

        except Exception as e:
            print(f"An error occurred: {e}")
        finally:
            browser.close()

if __name__ == "__main__":
    reboot_router()

3.设置定时任务

通过cronjob设置

crontab -e

# 添加脚本路径，设置每天凌晨3点执行
0 3 * * * /bin/bash -c "cd /path/to/script && source venv/bin/activate && python main.py >> reboot.log 2>&1"

在1panel中设置

导航到 计划任务-创建

• 执行周期: 如每天 3 小时 0 分钟
• 解释器: python3
• 脚本内容: 路径选择，并填入脚本路径