一键cat命令完成vps所有优化

一键cat命令完成vps所有优化，以修改端口为9999例，包括安装xanmod、bbr+fq、mosh等等所有优化。

注意：脚本里安装 XanMod 内核那一步用的是官方 GPG key 地址，XanMod 的仓库地址此前发生过变化，如果这一步安装失败，请去 XanMod 官方最新文档确认当前有效的仓库地址，替换脚本里对应的这几行再执行。

代码：

cat <<‘EOF’ | bash
set -e

echo “===== 检查系统 =====”

if ! grep -qi debian /etc/os-release; then
echo “❌ 当前不是 Debian，停止执行”
exit 1
fi

echo “===== 更新系统 =====”
apt update -y && apt upgrade -y

echo “===== 修改 SSH 端口 =====”
sed -i ‘s/#Port 22/Port 9999/g’ /etc/ssh/sshd_config
sed -i ‘s/^Port 22/Port 9999/g’ /etc/ssh/sshd_config

echo “===== SSH：密码 + 密钥登录 =====”
sed -i ‘s/#PasswordAuthentication yes/PasswordAuthentication yes/g’ /etc/ssh/sshd_config
sed -i ‘s/PasswordAuthentication no/PasswordAuthentication yes/g’ /etc/ssh/sshd_config
sed -i ‘s/#PubkeyAuthentication yes/PubkeyAuthentication yes/g’ /etc/ssh/sshd_config
sed -i ‘s/#PermitRootLogin prohibit-password/PermitRootLogin yes/g’ /etc/ssh/sshd_config

echo “===== SSH 防掉线优化 =====”
grep -q “ClientAliveInterval” /etc/ssh/sshd_config || cat >> /etc/ssh/sshd_config <<EOL
ClientAliveInterval 60
ClientAliveCountMax 10
TCPKeepAlive yes
UseDNS no
GSSAPIAuthentication no
EOL

systemctl restart ssh

echo “===== 安装基础工具 =====”
apt install -y curl wget sudo vim htop mosh fail2ban gnupg ca-certificates

echo “===== 安装 xanmod 内核 =====”
wget -qO - https://dl.xanmod.org/gpg.key | gpg --dearmor -o /usr/share/keyrings/xanmod.gpg
apt update
apt install -y linux-xanmod-lts || apt install -y linux-xanmod

echo “===== 启用 BBR =====”
grep -q “tcp_congestion_control=bbr” /etc/sysctl.conf || cat >> /etc/sysctl.conf <<EOL
net.core.default_qdisc=fq
net.ipv4.tcp_congestion_control=bbr
EOL
sysctl -p

echo “===== 尝试 BBR3（可能失败）=====”
modprobe tcp_bbr 2>/dev/null || true

echo “===== 网络优化 =====”
grep -q “tcp_fastopen” /etc/sysctl.conf || cat >> /etc/sysctl.conf <<EOL
net.ipv4.tcp_fastopen=3
net.ipv4.tcp_mtu_probing=1
net.ipv4.tcp_syncookies=1
net.core.somaxconn=1024
net.ipv4.ip_forward=1
EOL
sysctl -p

echo “===== 配置 fail2ban =====”
cat > /etc/fail2ban/jail.local <<EOL
[sshd]
enabled = true
port = 9999
logpath = /var/log/auth.log
maxretry = 3
bantime = 3600
EOL

systemctl enable fail2ban
systemctl restart fail2ban

echo “===== 完成 =====”
echo “⚠️ 请执行 reboot 重启以启用 xanmod 内核”
echo “👉 SSH连接: ssh -p 9999 root@IP”
EOF
运行后重启VPS生效。