新客户端IP一键过白功能开发与配置

# Appadmin
server {
    listen     80;
    server_name  0.0.0.0;
    root  /www/web/maccms_v10/;
    server_tokens off;

    #include none.conf;

    index index.php index.html index.htm;
    access_log /www/web_logs/wp_access.log wwwlogs;
    error_log  /www/web_logs/wp_error.log  notice;


    #auth_basic "请输入用户和密码"; # 验证时的提示信息
    #auth_basic_user_file /etc/nginx/password; # 认证文件

    location /{
        include whitelist.conf;
        #默认位置路径为/etc/nginx/ 下，
        #如直接写include whitelist.conf，则只需要在/etc/nginx目录下创建whitelist.conf
        deny all;
    }

    location ~ \.php$ {
        fastcgi_pass   php:9000;
        fastcgi_index  index.php;
        include fcgi.conf;
    }

    #需要注意伪静态的配置
    if (!-e $request_filename) {
        rewrite ^/index.php(.*)$ /index.php?s=$1 last;
        rewrite ^/api.php(.*)$ /api.php?s=$1 last;
        rewrite ^/adm0.php(.*)$ /adm0.php?s=$1 last;
        rewrite ^(.*)$ /index.php?s=$1 last;
        break;
        }

    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
        expires      30d;
    }
    location ~ .*\.(js|css)?$ {
        expires      12h;
    }
}

allow 101.31.158.153;

from flask import Flask, request, render_template, jsonify
import os

app = Flask(__name__)

# 定义首页路由，渲染包含按钮的HTML页面
@app.route('/')
def index():
    return render_template('index.html')

# 定义处理客户端IP上传的路由
@app.route('/upload_ip', methods=['POST'])
def upload_ip():
    # 获取客户端的IP地址
    #client_ip = request.remote_addr
    client_ip = request.headers.get('X-Forwarded-For')
    # 这里可以添加处理逻辑，比如将IP地址保存到数据库或文件
    print(f"Client IP: {client_ip}")
    try:
        command = f"echo 'allow {client_ip};' > /srv/lnmp/services/nginx/conf/whitelist.conf && docker exec   lnmp-web-1  /bin/bash -c 'nginx -s reload'"
        status = os.system(command)
        if status == 0:
            response = {'status': 'success', 'ip': client_ip}
        else:
            response = {'status': 'error', 'message': 'update ip fail'}
    except Exception as e:
        response = {'status': 'error', 'message': str(e)}

    # 返回响应
    return jsonify(response)

if __name__ == '__main__':
    # 将应用监听在0.0.0.0的3000端口
    app.run(host='0.0.0.0', port=801, debug=True)

    IP 过白
     
    
    
        body {
            font-family: Arial, sans-serif;
            display: flex;
            justify-content: center;
            align-items: center;
            height: 100vh;
            background-color: #f0f0f0;
            margin: 0;
        }
        .container {
            text-align: center;
            background-color: #fff;
            padding: 20px;
            border-radius: 8px;
            box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);
        }
        h1 {
            color: #333;
        }
        #uploadBtn {
            background-color: #007bff;
            color: #fff;
            border: none;
            padding: 10px 20px;
            border-radius: 5px;
            cursor: pointer;
            font-size: 16px;
            transition: background-color 0.3s ease;
        }
        #uploadBtn:hover {
            background-color: #0056b3;
        }
        #uploadBtn:focus {
            outline: none;
        }
    


    
        更新此客户端IP
        确认
    

    
        $(document).ready(function() {
            $('#uploadBtn').click(function() {
                $.ajax({
                    type: 'POST',
                    url: '/upload_ip',
                    success: function(response) {
                        if (response.status === 'success') {
                            alert('IP 更新成功: ' + response.ip);
                       ('Error: ' + response.message);
                        }
                    },
                    error: function() {
                        alert('发生错误.');
                    }
                });
            });
        });

[Unit]
Description=IpAllow App

[Service]
User=root
WorkingDirectory=/opt/ipallow
ExecStart=/usr/local/bin/gunicorn -w 2 -b 0.0.0.0:801 app:app
Restart=always

[Install]
WantedBy=multi-user.target

b.test.xyz:443 {
    tls service@test.xyz
    encode gzip
    log {
        output file /logs/access.log
    }

    header / {
        Strict-Transport-Security "max-age=31536000;includeSubdomains;preload"
    }

    #访问认证
    basicauth / {
        cms $2a$14$bNLxxxxxxxxxxxxxxxxxxxxxxGAbzyOUyoBn1rjfpN/O
    }

    ## HTTP 代理配置
    reverse_proxy http://192.168.0.203:801 {
        header_up X-Real-IP {http.request.remote.host}
            header_up X-Forwarded-For {http.request.remote.host}
            header_up X-Forwarded-Port {http.request.port}
            header_up X-Forwarded-Proto {http.request.scheme}
    }
}

caddy hash-password --plaintext 'cmsxxxx'