{"topic":{"id":4861,"title":"当前网站的技术细节","slug":"topic","categoryId":2,"createdAt":"2023-08-13 13:51:30.082669","bumpedAt":"2023-08-13 13:51:30.534545","views":990,"postsCount":1,"highestPostNumber":1,"likeCount":16,"closed":false,"pinned":false,"pinnedGlobally":false,"pinnedAt":null,"pinnedUntil":null,"isBanner":false,"excerpt":"我相信透明带来的安全，所以在这里把技术架构通通告诉大家，方便新功能的开发、发现现有的问题，如果你也想建一个这样的网站也可以作为参考。可以通过 https://xjtu.app/t/topic/127 页面看到，我们在 Discourse 的基础上添加了许多功能。下面将事无巨细地交代：单一源站：Discourse 在一台安全稳定的服务器上: pacman -S docker git systemctl enable --now doc…","deletedAt":null,"isAnonymous":false,"category":{"id":2,"name":"网站","slug":"website","color":"986a44"},"author":{"id":1047,"username":"anonymous_coward_old","name":"Anonymous Coward Old","avatarUrl":"/uploads/image/43/32/4332638c11248b8ff07033c11de0759a55205facfbec85e14458245a91991faf.avif"},"tags":["devops","user-guide"]},"posts":[{"id":9159,"postNumber":1,"raw":"我相信**透明带来的安全**，所以在这里把技术架构*通通*告诉大家，方便新功能的开发、发现现有的问题，如果你也想建一个这样的网站也可以作为参考。\n\n可以通过 https://xjtu.app/t/topic/127 页面看到，我们在 Discourse 的基础上添加了许多功能。下面将**事无巨细**地*交代*：\n\n## 单一源站：Discourse\n\n在一台安全稳定的服务器上:\n```\npacman -S docker git\nsystemctl enable --now docker\ncd /var/\ngit clone https://github.com/discourse/discourse_docker.git discourse\ncd discourse\n./launcher rebuild app\n```\n\n## 多个反向代理服务器\n\n源站位于高可靠性机器上，但是网络对于中国不是最优的，所以配置反向代理，采用多台优质回国线路、但是配置普通的机器加速：\n\nhttps://xjtu.app/t/topic/4330/6\n\n[details=\"配置文件\"]\n`/etc/systemd/system/caddy.service`\n\n```\n[Unit]\nDescription=Caddy\nDocumentation=https://caddyserver.com/docs/\nAfter=network.target network-online.target\nRequires=network-online.target\n\n[Service]\nUser=caddy\nGroup=caddy\nEnvironment=\"ASSUME_NO_MOVING_GC_UNSAFE_RISK_IT_WITH=go1.20\"\nExecStart=/usr/bin/caddy run --environ --config /etc/caddy/Caddyfile\nExecReload=/usr/bin/caddy reload --config /etc/caddy/Caddyfile\nTimeoutStopSec=5s\nLimitNOFILE=1048576\nLimitNPROC=512\nPrivateTmp=true\nProtectSystem=full\nAmbientCapabilities=CAP_NET_BIND_SERVICE\n\n[Install]\nWantedBy=multi-user.target\n```\n\n`/etc/caddy/Caddyfile.normal`\n```\n{\n #auto_https off\n}\nxjtu.app:443, xjtu.app:443, xjtu.love:443 {\n import /etc/caddy/hsts-xjtu\n\n @default {\n not path /xjtumen-custom-api/* /xjtumen-g/* /xjtumen-res/* /ip\n }\n reverse_proxy @default unix//var/discourse/shared/standalone/nginx.http.sock\n\n reverse_proxy /xjtumen-custom-api/* 127.0.0.1:7010\n # reverse_proxy /xjtumen-res/* https://res.xjtu.app\n # handle /xjtumen-res/* {\n # uri strip_prefix /xjtumen-res\n # reverse_proxy /* https://res.xjtu.app\n # } \n\n import pass-ip-to-backend\n route /ip {\n rate_limit {remote.ip} 10r/m\n }\n \n redir /xjtumen-g /xjtumen-g/ 308\n route /xjtumen-g/ {\n rate_limit {remote.ip} 60r/m\n }\n handle /xjtumen-g/* {\n uri strip_prefix /xjtumen-g\n root /xjtumen-g/* /var/g/\n file_server {\n browse \n hide .git\n }\n }\n\n log {\n output file /var/log/caddy/xjtu\n }\n}\n\nimport /etc/caddy/common\n\n```\n\n`/etc/caddy/Caddyfile.rebuild`\n```\nxjtu.app:443, xjtu.app:443, xjtu.love:443 {\n import /etc/caddy/hsts-xjtu\n respond \"交大門正在更新，预计 10min 内完成。Thanks for your patience!\"\n #root * /usr/share/nginx/xjtu-men-maintainence/\n #root * /var/www/xjtu.app\n #file_server\n #rewrite / index.html\n log {\n output file /var/log/caddy/xjtu-rebuild\n }\n}\nimport /etc/caddy/common\n```\n\n`/etc/caddy/common`\n```\nwww.xjtu.app:443, www.xjtu.app:443, www.xjtu.love:443 {\n import /etc/caddy/hsts-xjtu\n redir https://xjtu.app{uri} 301\n}\n```\n\n`/etc/caddy/hsts-xjtu`\n```\ntls /etc/caddy/ssl/xjtu.app.cer /etc/caddy/ssl/xjtu.app.key\n\nheader {\n Strict-Transport-Security \"max-age=31536000; includeSubDomains; preload\"\n X-Xss-Protection \"1; mode=block\"\n X-Content-Type-Options \"nosniff\"\n Content-Security-Policy \"upgrade-insecure-requests\"\n Referrer-Policy \"strict-origin-when-cross-origin\"\n Cache-Control \"public, max-age=15, must-revalidate\"\n Permissions-Policy interest-cohort=()\n Feature-Policy \"accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'self'; camera 'none'; encrypted-media 'none'; fullscreen 'self'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture *; speaker 'none'; sync-xhr 'none'; usb 'none'; vr 'none'\"\n}\n```\n\n`/etc/caddy/pass-ip-to-backend`\n```\n# https://caddyserver.com/docs/modules/http\nreverse_proxy /ip 127.0.0.1:7001 {\nheader_up X-Real-IP {http.request.header.CF-Connecting-IP}\nheader_up X-Forwarded-For {http.request.header.CF-Connecting-IP}\nheader_up REMOTE_HOST {http.request.remote.host}\nheader_up REQ_HOST {http.request.host}\nheader_up REQ_HOSTPORT {http.request.hostport}\nheader_up REMOTE_PORT {http.request.remote.port}\nheader_up DURATION_MS {http.request.duration_ms}\nheader_up UUID {http.request.uuid}\nheader_up SCEME {http.request.scheme}\nheader_up TLS_VER {http.request.tls.version}\nheader_up TLS_CIPHER {http.request.tls.cipher_suite}\nheader_up TLS_PROTO {http.request.tls.proto}\nheader_up PROTO {http.request.proto}\nheader_up TLS_RESUMED {http.request.tls.resumed}\nheader_up TLS_SERVER_NAME {http.request.tls.server_name}\nheader_up REQ_URI {http.request.uri}\nheader_up REQ_METHOD {http.request.method}\nheader_up REQ_ORIG_METHOD {http.request.orig_method}\nheader_up RES_CACHE_CONTROL {http.response.header.cache-control}\nheader_up RES_CONTENT_LEN {http.response.header.content-length}\nheader_up RES_CONTENT_TYPE {http.response.header.content-type}\nheader_up RES_DATE http.response.header.date}\nheader_up RES_CSP {http.response.header.content-security-policy}\n}\n```\n[/details]\n\n```\ngo install github.com/caddyserver/xcaddy/cmd/xcaddy@latest\n~/go/bin/xcaddy build --with github.com/xjtu-men/caddy-ratelimit@latest --with github.com/mholt/caddy-l4 --with github.com/quic-go/quic-go@v0.37.4\nsystemctl enable --now caddy\n```\n\n## 插件\n一些插件在私有 GitHub 仓库里，例如 `discourse-multiple-hostnames` 插件：\n```\ngit clone https://github_pat_@github.com/xjtu-men/discourse-multiple-hostnames.git\n```\n\nyaml 中插件部分\n```\nhooks:\n after_code:\n - exec:\n cd: $home/plugins\n cmd:\n - git clone https://github.com/discourse/docker_manager\n - git clone https://github.com/discourse/discourse-follow\n - git clone https://github.com/discourse/discourse-apple-add-to-homescreen\n - git clone https://github.com/discourse/header-category-dropdown\n - git clone https://github.com/discourse/discourse-post-voting\n - git clone https://github.com/discourse/discourse-solved\n - git clone https://github.com/discourse/discourse-data-explorer\n - git clone https://github.com/discourse/discourse-whos-online\n - git clone https://github.com/discourse/discourse-calendar\n - git clone https://github.com/discourse/discourse-math\n - git clone https://github.com/discourse/discourse-reactions\n - git clone https://github.com/ShuiyuanSJTU/retort\n - git clone https://github.com/discourse/discourse-ai\n - git clone https://github.com/discourse/discourse-perspective-api\n - git clone https://github.com/discourse/discourse-github\n - git clone https://github.com/discourse/discourse-user-notes\n - git clone https://github.com/discourse/discourse-templates\n - git clone https://github.com/discourse/discourse-assign\n - git clone https://github.com/discourse/discourse-cakeday\n - git clone https://github.com/discourse/discourse-yearly-review\n - git clone https://github.com/discourse/discourse-graphviz\n - git clone https://github.com/discourse/discourse-bbcode\n - git clone https://github.com/discourse/discourse-saved-searches\n - git clone https://github.com/discourse/discourse-chart\n - git clone https://github.com/communiteq/discourse-multiple-hostnames\n - git clone https://github.com/mondiscourse/discourse-formatting-toolbar\n - git clone https://github.com/paviliondev/discourse-topic-previews-sidecar\n - git clone https://github.com/merefield/discourse-chatbot\n - git clone https://github.com/discourse/discourse-gamification\n - git clone https://github.com/discourse/discourse-policy\n - git clone https://github.com/discourse/discourse-animated-avatars\n - git clone https://github.com/discourse/discourse-signatures\n - git clone https://github.com/paviliondev/discourse-locations\n - git clone https://github.com/xjtumen/discourse-shadowban\n - git clone https://github.com/xjtumen/discourse-ip-location\n - git clone https://github.com/discourse/discourse-steam-login\n - git clone https://github.com/discourse/discourse-geoblocking\n - git clone https://github.com/communiteq/discourse-geo-blocking\n - git clone https://github.com/discourse/discourse-bcc\n - git clone https://github.com/discourse/discourse-shared-edits\n - git clone https://github.com/paviliondev/discourse-custom-wizard\n - git clone https://github.com/paviliondev/discourse-journal\n - git clone https://github.com/discourse/discourse-oauth2-basic\n - git clone https://github.com/discourse/discourse-openid-connect\n - git clone https://github.com/discourse/discourse-microsoft-auth\n - git clone https://github.com/discourse/discourse-hCaptcha\n - git clone https://github.com/discourse/discourse-user-card-badges\n - git clone https://github.com/communiteq/discourse-private-topics\n - git clone https://github.com/paviliondev/discourse-ratings\n - git clone https://github.com/discourse/discourse-surveys\n - git clone https://github.com/discourse/discourse-adplugin\n - git clone https://github.com/discourse/discourse-subscriptions\n - git clone https://github.com/discourse/discourse-akismet\n - git clone https://github.com/discourse/discourse-custom-topic-lists\n - git clone https://github.com/xjtumen/discourse-group-membership-ip-block\n - git clone https://github.com/discourse/discourse-chat-integration\n - git clone https://github.com/davidtaylorhq/discourse-telegram-notifications\n - git clone https://github.com/fokx/discourse-cjk-formatter\n - git clone https://github.com/Lemon-planting-light/user-autonomy-plugin\n - git clone https://github.com/Lhcfl/discourse-post-folding\n - git clone https://github.com/discourse/discourse-preset-topic-composer\n - git clone https://github.com/xjtumen/discourse-staff-alias\n - exec:\n cd: $home/plugins/discourse-animated-avatars\n raise_on_fail: false\n cmd:\n - $home/plugins/discourse-animated-avatars/scripts/install.sh\n\n```\n\n以下是插件列表：\n* `docker_manager`\n允许在**网页端**进行管理，包括调用 docker 更新命令，*注意*：可能会失败，而且失败后有一定概率损坏浏览器缓存，并需要命令行 rebuild app。建议不使用热更新。\n\n* `discourse-follow`\nFollow 其他用户\n\n* `discourse-apple-add-to-homescreen`\n针对苹果用户的浏览器显示“添加到主屏幕”提示。Android 的提示（PWA）集成在 Core 里。\n\n* `discourse-activity-pub`\n理论上允许和 Mastodon 互联，但没有成功过。\n\n* `header-category-dropdown`\n允许在最上栏显示下拉菜单，暂时没用到。\n\n* `discourse-post-voting`\n在话题内，对后续的回复进行 Up/Down Voting\n\n* `discourse-topic-voting`\n发表投票/调查话题，允许多选/单选。\n\n* `discourse-teambuild`\n类似于让門友做任务，暂时没用到\n\n* `discourse-solved`\n将回答中的某个回答设为“已解决”，适合于提问帖\n\n* `discourse-data-explorer`\n在网页端调用数据库查询，仅限管理员使用\n\n* `discourse-whos-online`\n查看当前在线情况，仅限管理员使用\n\n* `discourse-calendar`\n日历支持\n\n* `discourse-math`\n支持 Latex 数学公式，单行/多行。可选后端：MathJAX / KaTex\n\n* `discourse-reactions`\n用更多 emoji 对话题作出回应，默认只有 :heart: \n\n* `discourse-ai`\n众多 AI 功能\n\n* `discourse-perspective-api`\n调用 Google Perspective API 分析帖文是否违反社区规范\n\n* `discourse-github`\n和 GitHub 联动，例如 issues 和 pull request\n\n* `discourse-user-notes`\n用于 mod 对用户进行备注\n\n* `discourse-encrypt`\n端到端聊天加密\n\n* `discourse-automation`\n执行自动化任务，当前尚未使用，后续准备用来更新 https://xjtu.app/t/topic/1584 的 https://xjtu.app/tag/empty 标签\n\n* `discourse-templates`\n允许设置话题的模板\n\n* `discourse-assign`\n允许将话题*分配*给某些人，适合于问答场景。\n\n* `discourse-ai-topic-summary`\n使用 AI 对长话题进行总结\n\n* `discourse-user-network-vis`\n可视化社交关系\n\n* `discourse-nationalflags`\n国旗扩展\n\n* `discourse-telegram-notifications`\n同步到 Telegram 消息\n\n* `discourse-word-cloud`\n字数统计\n\n* `discourse-chatbot`\n主页上悬浮的 AIBot 和可以私聊/私信的 AIBot\n\n* `discourse-layouts`\n自定义页面布局\n\n* `discourse-locations`\n支持定位功能，目前想不到应用场景，暂未启用\n\n* `discourse-topic-list-previews`\n启用 Discourse 默认的一行行帖子的用户界面，实现类似于小红书之类软件的*瀑布流*效果（列数随浏览器宽度自动调整，移动端只有一列）。但由于全屏幕帖子数量少，~~以及未知原因造成的偶尔出现*从主题返回主页*慢~~的问题，因而只在 redditish 和 Material Design 这两个主题启用（FKBPro 自带主题内容预览功能，也可一试），可以在*用户偏好*里设置。\n![Screenshot_20230813_214532|690x362, 75%](/uploads/image/7e/e5/7ee5396f03354a675e134591c5088a492809077df8a5adb55abf43704fc76dab.avif)\n\n\n* `discourse-multiple-hostnames`\n允许 Discourse 用多域名*访问*（注意 `app.yml` 里只能配置**一个**域名，它将作为 canonical name 用户）搜索引擎检索，因而可以看成是反向代理域名白名单列表\n\n[quote=\"えしりなか，post:6, topic:4330\"]\n* [xjtu.app ](https://xjtu.app)\nSan Jose, CA\n优质中国电信 CN2 GIA，电信、联通、移动、教育网都是当前国际联网最优的线路。仅 IPv4。\n\n* [xjtu.love ](https://xjtu.app/) 域名：\nSan Francisco, CA\n普通线路 [AS4134 China Telecom Backbone](https://bgp.he.net/AS4134)\nArelion / Telia / twelve99 动态 BGP 路由\n平常也可使用，或者当.men, .live 全都挂掉的时候备用。IPv4/IPv6 双线。\n\n可参考下图：\n[/quote]\n\n\n\n* `discourse-anonymous-post`\n允许匿名回复/发贴，无需登录即可使用，只需点击**右上**的回复按钮。\n\n* `discourse-autobot`\n从其他消息源自动拉取更新并发帖。\n\n* `discourse-shadowban`\n*残忍*的 Shadowban，仅发帖人可见自己的帖子，其他人/未登录者看不到，仅用于短时间应对极端刷屏用户。\n\n* `retort`\n自选 eomji 回应回复，来自上交维护的 [ShuiyuanSJTU/retort](https://github.com/ShuiyuanSJTU/retort)，fork 自早已 EOF 的 [gdpelican/retort](https://github.com/gdpelican/retort)。\n\n## 服务器状态\n```\nroot@archlinuxDO ~ # df -h\nFilesystem Size Used Avail Use% Mounted on\ndev 978M 0 978M 0% /dev\nrun 987M 676K 986M 1% /run\n/dev/vda1 59G 44G 13G 78% /\ntmpfs 987M 1.1M 985M 1% /dev/shm\ntmpfs 987M 4.8M 982M 1% /tmp\noverlay 59G 44G 13G 78% /var/lib/docker/overlay2/cfceca63649b674ce9a0706ebb64ecbd6b58389a73f3981226ff9387c04be342/merged\n\nroot@archlinuxDO ~ # free -h\n total used free shared buff/cache available\nMem: 1.9Gi 1.7Gi 127Mi 35Mi 303Mi 220Mi\nSwap: 4.0Gi 2.4Gi 1.6Gi\n\n\nroot@archlinuxDO ~ # uptime\n 21:57:44 up 3 days, 7:32, 2 users, load average: 0.34, 0.45, 0.39\n\n```\n## Theme (Component)\n\n### Theme \n不同的主题不仅颜色、界面不同，而且启用的 Theme Component 不同，如果你不喜欢某种功能，可以尝试不同的主题。在不同的设备上**也**可以选择不同的主题。\n\n* DiscourseDefault\n默认和推荐主题，主题的话题列表是单列。\n\n**无**话题内容预览。\n\n**有**显示额外信息的侧边栏，如话题类别，热门 tag，常用链接等。另外 Material Design 也有该侧边栏。如果不喜欢可以换用其他主题。移动设备上没有侧边栏。\n\n* FKB Pro Theme\n采用类似 Win11 的圆角设计，**有**话题图文预览。**无**侧边栏。\n\n* graceful\n也有柔和的边角设计，但不建议移动端使用，因为边缘间隙比较大。**无**侧边栏。\n\n* Material Design Theme\nMaterial Design 风格，移动端倒是感觉不到，**有**话题图文预览，采用砖块/窗口式帖子列表，可自动根据页面缩放自动调节列数，**有**侧边栏。\n\n\n* redditish\nReddit 风格，**有**话题图文预览。侧边栏**仅**显示最近的话题。\n\n### Theme Component\n\n### 被移除的 TC\n```\nhttps://github.com/discourse/discourse-category-badge-styles.git\nhttps://github.com/VaperinaDEV/custom-embedded-replies.git\nhttps://github.com/discourse/discourse-colorful-categories.git\nhttps://github.com/xjtu-men/discourse-gray-filter\nhttps://github.com/xjtu-men/discourse-hide-ip-info.git\nhttps://github.com/Lhcfl/discourse-larger-long-image.git\nhttps://github.com/fokx/discourse-marquee.git\nhttps://github.com/xjtumen/discourse-matomo-analytics\nhttps://github.com/literatecomputing/discourse-qrcode-wrap-theme-component.git\nhttps://github.com/discourse/discourse-thin-header-theme-component.git\nhttps://github.com/discourse/Discourse-Tiles-image-gallery.git\nhttps://github.com/Arkshine/discourse-chat-sidebar.git\nhttps://github.com/VaperinaDEV/discourse-stickers.git\n```\n\n### 被禁用的 TC\n```\nhttps://github.com/discourse/discourse-category-icons.git\nhttps://github.com/xjtumen/discourse-custom-header-links.git\nhttps://github.com/awesomerobot/discourse-button-styles.git\nhttps://github.com/Arkshine/discourse-fireworks/tree/mobile-support-and-settings\nhttps://github.com/discourse/discourse-gated-topics-in-category.git\nhttps://github.com/discourse/discourse-icon-header-links.git\n\n```\n\n### 所有 TC\n* Anonymous Post\n和插件配合实现不登录发帖/回复。\n\n* Colorful categories\n根据不同的类别改变界面的颜色，不改变顶栏颜色，因为屏幕对比度太高、有长条色块容易晃眼睛。\n\n* Custom Header Links\n在顶栏插入链接，如 `评课社区 ` 和` 学习资料`。\n \n* Icon Header Links\n顶栏添加图标超链接\n\n* Dark-Light Toggle\n允许*手动*切换亮暗色主题，一般是不需要的，可以自动识别浏览器的亮暗状态。\n\n* DiscoTOC\n自动添加目录，无需任何人工操作\n\n* discourse-buttons\n定制按钮颜色和形状如圆角\n\n* Discourse Clickable Topic\n话题的整个区域都可点击，不仅仅是标题文字\n\n* discourse-gifs\n编辑器 GIPHY / Tenor 表情包 GIF\n\n* discourse-right-sidebar-blocks\n侧边栏\n\n* PDF previews\n页面内嵌入 pdf，无需下载，无需新标签页打开\n\n* Play G Widget\ngame widget\n\n* QR Code Inserter\n编辑器插入 QR Code（quick-response code，二维码），可以是到任意 URL，或者是本当前页面（url 参数为空时）\n\n* Showcased Categories\n侧边栏展示两个类别\n\n* Table Builder\n编辑器插入表格\n\n* Tag Cloud\n可视化所有的 tag\n\n* Text Highlighter and Coloring Composer Button (BBCODE)\n编辑器支持 BBCode，以及快速高亮文本\n\n* Tiles - Gallery Component\n最优地放置多图片\n\n\n* Topic Excerpts\n显示文本预览\n \n* Topic Thumbnails\n显示图片预览\n\n* Topic List Previews\n图文预览\n\n* Topic List Item Click Animation\n话题点击动画\n\n* xjtu.app custom theme-component\n用于自定义一些 css 和 js，例如允许复制代码块内容，代码块支持 Intel One Mono 字体，调整顶栏项目的顺序\n\n\n* Brand Header Theme Component\n在当前的顶栏上面在加一行，类似菜单\n\n* Category Headers theme component\n在每个类别的主页添加自定义内容\n\n* Discourse Docs Card Filter\n允许将某些类别设置成文档的效果\n\n* discourse-homepage-feature-component\n主页显示 featured topic\n\n* discourse-category-icons\ncategory icon\n\n* discourse-tc-character-count\ncharacter count in editor\n\n* Category Badge Styles\ncategory badge set to none to show icon only\n\n* discourse-header-submenus\nshow submenu above normal header\n\n* discourse-gated-topics-in-category\n提示未登录用户只有登录才能查看内容\n\n* [discourse-reply-template-component](https://github.com/discourse/discourse-reply-template-component)\n使用模板新建话题/回复/私信\n\n\n默认主题：\n\n加载了的组件：\n![Screenshot_20240108_173957|571x500](/uploads/image/5a/3c/5a3c5ffac9d28298a175d372a72e69dc2d6f6d377a95245569cde19767ade828.avif)\n\n### 配色\n用户有很多配色方案可以选择，默认是 `OpenAI-Partial`。参考了 [OpenAI Developer Forum](https://community.openai.com/)。OpenAI 的配色十分好看，我们想要模仿，即是可以用 console 调出 `:root` 的 `color_definitions.css`，可惜没法完全一样。\n\n[details=\"OpenAI-Partial-Dark Palette\"]\n```json\n\"OpenAI-Partial-Dark\": {\n \"primary\": \"ffffff\",\n \"secondary\": \"262727\",\n \"tertiary\": \"2ec27e\",\n \"quaternary\": \"b9b4ec\",\n \"header_background\": \"111111\",\n \"header_primary\": \"dddddd\",\n \"highlight\": \"b496ff\",\n \"danger\": \"f17173\",\n \"success\": \"09cf09\",\n \"love\": \"fa6c8d\",\n \"selected\": \"183d31\",\n \"hover\": \"2d2e31\"\n}\n```\n[/details]\n\n[details=\"OpenAI-Partial Palette\"]\n```json\n\"OpenAI-Partial\": {\n \"primary\": \"202123\",\n \"secondary\": \"ffffff\",\n \"tertiary\": \"10a37f\",\n \"quaternary\": \"715fde\",\n \"header_background\": \"ffffff\",\n \"header_primary\": \"333333\",\n \"highlight\": \"482da8\",\n \"danger\": \"ef4146\",\n \"success\": \"009900\",\n \"love\": \"fa6c8d\",\n \"selected\": \"e6f3f3\",\n \"hover\": \"f7f7f8\"\n}\n```\n\n[/details]\n\n\n## 在线配置\n网页端可以改不少配置选项，比较重要的有：\n* base font 以及针对 code blocks 使用 Intel One Mono\n* 固定左边栏类别的顺序，调整移动设备上顶栏按钮的顺序和桌面/移动端可见性\n* 调整“提醒注册”的 banner 对已登录用户不可见\n* 中文帖名和内容的长度，用户名长度限制，保留的用户名及 regex\n* 不同 Trust Level 实现的条件、允许的功能和 rate limit (incl. API key)\n* max image size kb, max attachment size kb, 需要./launcher enter app 改 nginx 的配置\n* AI 模型选择和服务网址\n\n## 存在的问题\n* Discourse docker 容器里面使用 `nginx` 做服务器，监听到 unix socket，再用宿主机 `caddy` 反代，存在~~性能损失~~（unix socket 很高效，可以忽略）和不必要的内存占用\n* nftables 和 docker 冲突，~~没有配置防火墙~~ 已采用云服务商防火墙","cooked":"

我相信透明带来的安全，所以在这里把技术架构通通告诉大家，方便新功能的开发、发现现有的问题，如果你也想建一个这样的网站也可以作为参考。

可以通过功能更新 CHANGE LOG 页面看到，我们在 Discourse 的基础上添加了许多功能。下面将事无巨细地交代：

单一源站：Discourse

在一台安全稳定的服务器上:

pacman -S docker git\nsystemctl enable --now docker\ncd /var/\ngit clone https://github.com/discourse/discourse_docker.git discourse\ncd discourse\n./launcher rebuild app\n

多个反向代理服务器

源站位于高可靠性机器上，但是网络对于中国不是最优的，所以配置反向代理，采用多台优质回国线路、但是配置普通的机器加速：

/t/topic/4330/6

配置文件

/etc/systemd/system/caddy.service

[Unit]\nDescription=Caddy\nDocumentation=https://caddyserver.com/docs/\nAfter=network.target network-online.target\nRequires=network-online.target\n\n[Service]\nUser=caddy\nGroup=caddy\nEnvironment=\"ASSUME_NO_MOVING_GC_UNSAFE_RISK_IT_WITH=go1.20\"\nExecStart=/usr/bin/caddy run --environ --config /etc/caddy/Caddyfile\nExecReload=/usr/bin/caddy reload --config /etc/caddy/Caddyfile\nTimeoutStopSec=5s\nLimitNOFILE=1048576\nLimitNPROC=512\nPrivateTmp=true\nProtectSystem=full\nAmbientCapabilities=CAP_NET_BIND_SERVICE\n\n[Install]\nWantedBy=multi-user.target\n

/etc/caddy/Caddyfile.normal

{\n           #auto_https off\n}\nxjtu.app:443, xjtu.app:443, xjtu.love:443 {\n        import /etc/caddy/hsts-xjtu\n\n        @default {\n              not path /xjtumen-custom-api/* /xjtumen-g/* /xjtumen-res/* /ip\n        }\n        reverse_proxy @default unix//var/discourse/shared/standalone/nginx.http.sock\n\n        reverse_proxy /xjtumen-custom-api/* 127.0.0.1:7010\n       #        reverse_proxy /xjtumen-res/* https://res.xjtu.app\n       #        handle /xjtumen-res/* {\n       #           uri strip_prefix /xjtumen-res\n       #          reverse_proxy /* https://res.xjtu.app\n       # } \n\n        import pass-ip-to-backend\n        route /ip {\n                rate_limit {remote.ip} 10r/m\n        }\n        \n        redir /xjtumen-g /xjtumen-g/ 308\n        route /xjtumen-g/ {\n                rate_limit {remote.ip} 60r/m\n        }\n        handle /xjtumen-g/* {\n                uri strip_prefix /xjtumen-g\n                root /xjtumen-g/* /var/g/\n                file_server {\n                     browse \n                     hide .git\n                }\n        }\n\n        log {\n                output file /var/log/caddy/xjtu\n        }\n}\n\nimport /etc/caddy/common\n\n

/etc/caddy/Caddyfile.rebuild

xjtu.app:443, xjtu.app:443, xjtu.love:443 {\n        import /etc/caddy/hsts-xjtu\n        respond \"交大門正在更新，预计 10min 内完成。Thanks for your patience!\"\n        #root * /usr/share/nginx/xjtu-men-maintainence/\n        #root * /var/www/xjtu.app\n        #file_server\n        #rewrite / index.html\n        log {\n                output file /var/log/caddy/xjtu-rebuild\n        }\n}\nimport /etc/caddy/common\n

/etc/caddy/common

www.xjtu.app:443, www.xjtu.app:443, www.xjtu.love:443 {\n        import /etc/caddy/hsts-xjtu\n        redir https://xjtu.app{uri} 301\n}\n

/etc/caddy/hsts-xjtu

tls /etc/caddy/ssl/xjtu.app.cer /etc/caddy/ssl/xjtu.app.key\n\nheader {\n    Strict-Transport-Security \"max-age=31536000; includeSubDomains; preload\"\n        X-Xss-Protection \"1; mode=block\"\n        X-Content-Type-Options \"nosniff\"\n        Content-Security-Policy \"upgrade-insecure-requests\"\n        Referrer-Policy \"strict-origin-when-cross-origin\"\n        Cache-Control \"public, max-age=15, must-revalidate\"\n        Permissions-Policy interest-cohort=()\n        Feature-Policy \"accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'self'; camera 'none'; encrypted-media 'none'; fullscreen 'self'; geolocation 'none'; gyroscope 'none';       magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture *; speaker 'none'; sync-xhr 'none'; usb 'none'; vr 'none'\"\n}\n

/etc/caddy/pass-ip-to-backend

# https://caddyserver.com/docs/modules/http\nreverse_proxy /ip 127.0.0.1:7001 {\nheader_up X-Real-IP {http.request.header.CF-Connecting-IP}\nheader_up X-Forwarded-For {http.request.header.CF-Connecting-IP}\nheader_up REMOTE_HOST {http.request.remote.host}\nheader_up REQ_HOST {http.request.host}\nheader_up REQ_HOSTPORT {http.request.hostport}\nheader_up REMOTE_PORT {http.request.remote.port}\nheader_up DURATION_MS {http.request.duration_ms}\nheader_up UUID {http.request.uuid}\nheader_up SCEME {http.request.scheme}\nheader_up TLS_VER {http.request.tls.version}\nheader_up TLS_CIPHER {http.request.tls.cipher_suite}\nheader_up TLS_PROTO {http.request.tls.proto}\nheader_up PROTO {http.request.proto}\nheader_up TLS_RESUMED {http.request.tls.resumed}\nheader_up TLS_SERVER_NAME {http.request.tls.server_name}\nheader_up REQ_URI {http.request.uri}\nheader_up REQ_METHOD {http.request.method}\nheader_up REQ_ORIG_METHOD {http.request.orig_method}\nheader_up RES_CACHE_CONTROL {http.response.header.cache-control}\nheader_up RES_CONTENT_LEN {http.response.header.content-length}\nheader_up RES_CONTENT_TYPE {http.response.header.content-type}\nheader_up RES_DATE http.response.header.date}\nheader_up RES_CSP {http.response.header.content-security-policy}\n}\n

go install github.com/caddyserver/xcaddy/cmd/xcaddy@latest\n~/go/bin/xcaddy build  --with github.com/xjtu-men/caddy-ratelimit@latest --with github.com/mholt/caddy-l4  --with github.com/quic-go/quic-go@v0.37.4\nsystemctl enable --now caddy\n

插件

一些插件在私有 GitHub 仓库里，例如 discourse-multiple-hostnames 插件：

git clone https://github_pat_<redacted>@github.com/xjtu-men/discourse-multiple-hostnames.git\n

\nyaml 中插件部分

hooks:\n  after_code:\n    - exec:\n        cd: $home/plugins\n        cmd:\n          - git clone https://github.com/discourse/docker_manager\n          - git clone https://github.com/discourse/discourse-follow\n          - git clone https://github.com/discourse/discourse-apple-add-to-homescreen\n          - git clone https://github.com/discourse/header-category-dropdown\n          - git clone https://github.com/discourse/discourse-post-voting\n          - git clone https://github.com/discourse/discourse-solved\n          - git clone https://github.com/discourse/discourse-data-explorer\n          - git clone https://github.com/discourse/discourse-whos-online\n          - git clone https://github.com/discourse/discourse-calendar\n          - git clone https://github.com/discourse/discourse-math\n          - git clone https://github.com/discourse/discourse-reactions\n          - git clone https://github.com/ShuiyuanSJTU/retort\n          - git clone https://github.com/discourse/discourse-ai\n          - git clone https://github.com/discourse/discourse-perspective-api\n          - git clone https://github.com/discourse/discourse-github\n          - git clone https://github.com/discourse/discourse-user-notes\n          - git clone https://github.com/discourse/discourse-templates\n          - git clone https://github.com/discourse/discourse-assign\n          - git clone https://github.com/discourse/discourse-cakeday\n          - git clone https://github.com/discourse/discourse-yearly-review\n          - git clone https://github.com/discourse/discourse-graphviz\n          - git clone https://github.com/discourse/discourse-bbcode\n          - git clone https://github.com/discourse/discourse-saved-searches\n          - git clone https://github.com/discourse/discourse-chart\n          - git clone https://github.com/communiteq/discourse-multiple-hostnames\n          - git clone https://github.com/mondiscourse/discourse-formatting-toolbar\n          - git clone https://github.com/paviliondev/discourse-topic-previews-sidecar\n          - git clone https://github.com/merefield/discourse-chatbot\n          - git clone https://github.com/discourse/discourse-gamification\n          - git clone https://github.com/discourse/discourse-policy\n          - git clone https://github.com/discourse/discourse-animated-avatars\n          - git clone https://github.com/discourse/discourse-signatures\n          - git clone https://github.com/paviliondev/discourse-locations\n          - git clone https://github.com/xjtumen/discourse-shadowban\n          - git clone https://github.com/xjtumen/discourse-ip-location\n          - git clone https://github.com/discourse/discourse-steam-login\n          - git clone https://github.com/discourse/discourse-geoblocking\n          - git clone https://github.com/communiteq/discourse-geo-blocking\n          - git clone https://github.com/discourse/discourse-bcc\n          - git clone https://github.com/discourse/discourse-shared-edits\n          - git clone https://github.com/paviliondev/discourse-custom-wizard\n          - git clone https://github.com/paviliondev/discourse-journal\n          - git clone https://github.com/discourse/discourse-oauth2-basic\n          - git clone https://github.com/discourse/discourse-openid-connect\n          - git clone https://github.com/discourse/discourse-microsoft-auth\n          - git clone https://github.com/discourse/discourse-hCaptcha\n          - git clone https://github.com/discourse/discourse-user-card-badges\n          - git clone https://github.com/communiteq/discourse-private-topics\n          - git clone https://github.com/paviliondev/discourse-ratings\n          - git clone https://github.com/discourse/discourse-surveys\n          - git clone https://github.com/discourse/discourse-adplugin\n          - git clone https://github.com/discourse/discourse-subscriptions\n          - git clone https://github.com/discourse/discourse-akismet\n          - git clone https://github.com/discourse/discourse-custom-topic-lists\n          - git clone https://github.com/xjtumen/discourse-group-membership-ip-block\n          - git clone https://github.com/discourse/discourse-chat-integration\n          - git clone https://github.com/davidtaylorhq/discourse-telegram-notifications\n          - git clone https://github.com/fokx/discourse-cjk-formatter\n          - git clone https://github.com/Lemon-planting-light/user-autonomy-plugin\n          - git clone https://github.com/Lhcfl/discourse-post-folding\n          - git clone https://github.com/discourse/discourse-preset-topic-composer\n          - git clone https://github.com/xjtumen/discourse-staff-alias\n    - exec:\n        cd: $home/plugins/discourse-animated-avatars\n        raise_on_fail: false\n        cmd:\n          - $home/plugins/discourse-animated-avatars/scripts/install.sh\n\n

以下是插件列表：

\n
docker_manager
\n允许在网页端进行管理，包括调用 docker 更新命令，注意：可能会失败，而且失败后有一定概率损坏浏览器缓存，并需要命令行 rebuild app。建议不使用热更新。
\n
\n
discourse-follow
\nFollow 其他用户
\n
\n
discourse-apple-add-to-homescreen
\n针对苹果用户的浏览器显示“添加到主屏幕”提示。Android 的提示（PWA）集成在 Core 里。
\n
\n
discourse-activity-pub
\n理论上允许和 Mastodon 互联，但没有成功过。
\n
\n
header-category-dropdown
\n允许在最上栏显示下拉菜单，暂时没用到。
\n
\n
discourse-post-voting
\n在话题内，对后续的回复进行 Up/Down Voting
\n
\n
discourse-topic-voting
\n发表投票/调查话题，允许多选/单选。
\n
\n
discourse-teambuild
\n类似于让門友做任务，暂时没用到
\n
\n
discourse-solved
\n将回答中的某个回答设为“已解决”，适合于提问帖
\n
\n
discourse-data-explorer
\n在网页端调用数据库查询，仅限管理员使用
\n
\n
discourse-whos-online
\n查看当前在线情况，仅限管理员使用
\n
\n
discourse-calendar
\n日历支持
\n
\n
discourse-math
\n支持 Latex 数学公式，单行/多行。可选后端：MathJAX / KaTex
\n
\n
discourse-reactions
\n用更多 emoji 对话题作出回应，默认只有 ❤️
\n
\n
discourse-ai
\n众多 AI 功能
\n
\n
discourse-perspective-api
\n调用 Google Perspective API 分析帖文是否违反社区规范
\n
\n
discourse-github
\n和 GitHub 联动，例如 issues 和 pull request
\n
\n
discourse-user-notes
\n用于 mod 对用户进行备注
\n
\n
discourse-encrypt
\n端到端聊天加密
\n
\n
discourse-automation
\n执行自动化任务，当前尚未使用，后续准备用来更新关于西安交大导师信息类的 /tag/empty 标签
\n
\n
discourse-templates
\n允许设置话题的模板
\n
\n
discourse-assign
\n允许将话题分配给某些人，适合于问答场景。
\n
\n
discourse-ai-topic-summary
\n使用 AI 对长话题进行总结
\n
\n
discourse-user-network-vis
\n可视化社交关系
\n
\n
discourse-nationalflags
\n国旗扩展
\n
\n
discourse-telegram-notifications
\n同步到 Telegram 消息
\n
\n
discourse-word-cloud
\n字数统计
\n
\n
discourse-chatbot
\n主页上悬浮的 AIBot 和可以私聊/私信的 AIBot
\n
\n
discourse-layouts
\n自定义页面布局
\n
\n
discourse-locations
\n支持定位功能，目前想不到应用场景，暂未启用
\n
\n
discourse-topic-list-previews
\n启用 Discourse 默认的一行行帖子的用户界面，实现类似于小红书之类软件的瀑布流效果（列数随浏览器宽度自动调整，移动端只有一列）。但由于全屏幕帖子数量少，~~以及未知原因造成的偶尔出现从主题返回主页慢~~的问题，因而只在 redditish 和 Material Design 这两个主题启用（FKBPro 自带主题内容预览功能，也可一试），可以在用户偏好里设置。
\n $\"Screenshot_20230813_214532\"$
\n
\n
discourse-multiple-hostnames
\n允许 Discourse 用多域名访问（注意 app.yml 里只能配置一个域名，它将作为 canonical name 用户）搜索引擎检索，因而可以看成是反向代理域名白名单列表
\n

\n\t\t\t\t\t

\n\t\t\t\t\t\t

\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\tえしりなか，post:6, topic:4330:\n\t\t\t\t\t\t

\n\t\t\t\t\t

\n
\n
\n
xjtu.app
\nSan Jose, CA
\n优质中国电信 CN2 GIA，电信、联通、移动、教育网都是当前国际联网最优的线路。仅 IPv4。
\n
\n
\n
xjtu.love 域名：
\nSan Francisco, CA
\n普通线路 AS4134 China Telecom Backbone
\nArelion / Telia / twelve99 动态 BGP 路由
\n平常也可使用，或者当.men, .live 全都挂掉的时候备用。IPv4/IPv6 双线。
\n
\n
\n
可参考下图：
\n

\n\t\t\t\t

\n
discourse-anonymous-post
\n允许匿名回复/发贴，无需登录即可使用，只需点击右上的回复按钮。
\n
\n
discourse-autobot
\n从其他消息源自动拉取更新并发帖。
\n
\n
discourse-shadowban
\n残忍的 Shadowban，仅发帖人可见自己的帖子，其他人/未登录者看不到，仅用于短时间应对极端刷屏用户。
\n
\n
retort
\n自选 eomji 回应回复，来自上交维护的 ShuiyuanSJTU/retort，fork 自早已 EOF 的 gdpelican/retort。
\n

服务器状态

root@archlinuxDO ~ # df -h\nFilesystem      Size  Used Avail Use% Mounted on\ndev             978M     0  978M   0% /dev\nrun             987M  676K  986M   1% /run\n/dev/vda1        59G   44G   13G  78% /\ntmpfs           987M  1.1M  985M   1% /dev/shm\ntmpfs           987M  4.8M  982M   1% /tmp\noverlay          59G   44G   13G  78% /var/lib/docker/overlay2/cfceca63649b674ce9a0706ebb64ecbd6b58389a73f3981226ff9387c04be342/merged\n\nroot@archlinuxDO ~ # free -h\n               total        used        free      shared  buff/cache   available\nMem:           1.9Gi       1.7Gi       127Mi        35Mi       303Mi       220Mi\nSwap:          4.0Gi       2.4Gi       1.6Gi\n\n\nroot@archlinuxDO ~ # uptime\n 21:57:44 up 3 days,  7:32,  2 users,  load average: 0.34, 0.45, 0.39\n\n

Theme (Component)

Theme

不同的主题不仅颜色、界面不同，而且启用的 Theme Component 不同，如果你不喜欢某种功能，可以尝试不同的主题。在不同的设备上也可以选择不同的主题。

DiscourseDefault
\n默认和推荐主题，主题的话题列表是单列。

无话题内容预览。

有显示额外信息的侧边栏，如话题类别，热门 tag，常用链接等。另外 Material Design 也有该侧边栏。如果不喜欢可以换用其他主题。移动设备上没有侧边栏。

\n
FKB Pro Theme
\n采用类似 Win11 的圆角设计，有话题图文预览。无侧边栏。
\n
\n
graceful
\n也有柔和的边角设计，但不建议移动端使用，因为边缘间隙比较大。无侧边栏。
\n
\n
Material Design Theme
\nMaterial Design 风格，移动端倒是感觉不到，有话题图文预览，采用砖块/窗口式帖子列表，可自动根据页面缩放自动调节列数，有侧边栏。
\n
\n
redditish
\nReddit 风格，有话题图文预览。侧边栏仅显示最近的话题。
\n

Theme Component

被移除的 TC

https://github.com/discourse/discourse-category-badge-styles.git\nhttps://github.com/VaperinaDEV/custom-embedded-replies.git\nhttps://github.com/discourse/discourse-colorful-categories.git\nhttps://github.com/xjtu-men/discourse-gray-filter\nhttps://github.com/xjtu-men/discourse-hide-ip-info.git\nhttps://github.com/Lhcfl/discourse-larger-long-image.git\nhttps://github.com/fokx/discourse-marquee.git\nhttps://github.com/xjtumen/discourse-matomo-analytics\nhttps://github.com/literatecomputing/discourse-qrcode-wrap-theme-component.git\nhttps://github.com/discourse/discourse-thin-header-theme-component.git\nhttps://github.com/discourse/Discourse-Tiles-image-gallery.git\nhttps://github.com/Arkshine/discourse-chat-sidebar.git\nhttps://github.com/VaperinaDEV/discourse-stickers.git\n

被禁用的 TC

https://github.com/discourse/discourse-category-icons.git\nhttps://github.com/xjtumen/discourse-custom-header-links.git\nhttps://github.com/awesomerobot/discourse-button-styles.git\nhttps://github.com/Arkshine/discourse-fireworks/tree/mobile-support-and-settings\nhttps://github.com/discourse/discourse-gated-topics-in-category.git\nhttps://github.com/discourse/discourse-icon-header-links.git\n\n

所有 TC

\n
Anonymous Post
\n和插件配合实现不登录发帖/回复。
\n
\n
Colorful categories
\n根据不同的类别改变界面的颜色，不改变顶栏颜色，因为屏幕对比度太高、有长条色块容易晃眼睛。
\n
\n
Custom Header Links
\n在顶栏插入链接，如 评课社区 和 学习资料。
\n
\n
Icon Header Links
\n顶栏添加图标超链接
\n
\n
Dark-Light Toggle
\n允许手动切换亮暗色主题，一般是不需要的，可以自动识别浏览器的亮暗状态。
\n
\n
DiscoTOC
\n自动添加目录，无需任何人工操作
\n
\n
discourse-buttons
\n定制按钮颜色和形状如圆角
\n
\n
Discourse Clickable Topic
\n话题的整个区域都可点击，不仅仅是标题文字
\n
\n
discourse-gifs
\n编辑器 GIPHY / Tenor 表情包 GIF
\n
\n
discourse-right-sidebar-blocks
\n侧边栏
\n
\n
PDF previews
\n页面内嵌入 pdf，无需下载，无需新标签页打开
\n
\n
Play G Widget
\ngame widget
\n
\n
QR Code Inserter
\n编辑器插入 QR Code（quick-response code，二维码），可以是到任意 URL，或者是本当前页面（url 参数为空时）
\n
\n
Showcased Categories
\n侧边栏展示两个类别
\n
\n
Table Builder
\n编辑器插入表格
\n
\n
Tag Cloud
\n可视化所有的 tag
\n
\n
Text Highlighter and Coloring Composer Button (BBCODE)
\n编辑器支持 BBCode，以及快速高亮文本
\n
\n
Tiles - Gallery Component
\n最优地放置多图片
\n
\n
Topic Excerpts
\n显示文本预览
\n
\n
Topic Thumbnails
\n显示图片预览
\n
\n
Topic List Previews
\n图文预览
\n
\n
Topic List Item Click Animation
\n话题点击动画
\n
\n
xjtu.app custom theme-component
\n用于自定义一些 css 和 js，例如允许复制代码块内容，代码块支持 Intel One Mono 字体，调整顶栏项目的顺序
\n
\n
Brand Header Theme Component
\n在当前的顶栏上面在加一行，类似菜单
\n
\n
Category Headers theme component
\n在每个类别的主页添加自定义内容
\n
\n
Discourse Docs Card Filter
\n允许将某些类别设置成文档的效果
\n
\n
discourse-homepage-feature-component
\n主页显示 featured topic
\n
\n
discourse-category-icons
\ncategory icon
\n
\n
discourse-tc-character-count
\ncharacter count in editor
\n
\n
Category Badge Styles
\ncategory badge set to none to show icon only
\n
\n
discourse-header-submenus
\nshow submenu above normal header
\n
\n
discourse-gated-topics-in-category
\n提示未登录用户只有登录才能查看内容
\n
\n
discourse-reply-template-component
\n使用模板新建话题/回复/私信
\nhttps://meta.discourse.org/t/reply-template/162373
\n

默认主题：
\nhttps://github.com/OsamaSayegh/discourse-tab-bar-theme
\n加载了的组件：
\n $\"Screenshot_20240108_173957\"$

配色

用户有很多配色方案可以选择，默认是 OpenAI-Partial。参考了 OpenAI Developer Forum。OpenAI 的配色十分好看，我们想要模仿，即是可以用 console 调出 :root 的 color_definitions.css，可惜没法完全一样。

OpenAI-Partial-Dark Palette

\"OpenAI-Partial-Dark\": {\n  \"primary\": \"ffffff\",\n  \"secondary\": \"262727\",\n  \"tertiary\": \"2ec27e\",\n  \"quaternary\": \"b9b4ec\",\n  \"header_background\": \"111111\",\n  \"header_primary\": \"dddddd\",\n  \"highlight\": \"b496ff\",\n  \"danger\": \"f17173\",\n  \"success\": \"09cf09\",\n  \"love\": \"fa6c8d\",\n  \"selected\": \"183d31\",\n  \"hover\": \"2d2e31\"\n}\n

OpenAI-Partial Palette

\"OpenAI-Partial\": {\n  \"primary\": \"202123\",\n  \"secondary\": \"ffffff\",\n  \"tertiary\": \"10a37f\",\n  \"quaternary\": \"715fde\",\n  \"header_background\": \"ffffff\",\n  \"header_primary\": \"333333\",\n  \"highlight\": \"482da8\",\n  \"danger\": \"ef4146\",\n  \"success\": \"009900\",\n  \"love\": \"fa6c8d\",\n  \"selected\": \"e6f3f3\",\n  \"hover\": \"f7f7f8\"\n}\n

在线配置

网页端可以改不少配置选项，比较重要的有：

base font 以及针对 code blocks 使用 Intel One Mono
固定左边栏类别的顺序，调整移动设备上顶栏按钮的顺序和桌面/移动端可见性
调整“提醒注册”的 banner 对已登录用户不可见
中文帖名和内容的长度，用户名长度限制，保留的用户名及 regex
不同 Trust Level 实现的条件、允许的功能和 rate limit (incl. API key)
max image size kb, max attachment size kb, 需要./launcher enter app 改 nginx 的配置
AI 模型选择和服务网址

存在的问题

Discourse docker 容器里面使用 nginx 做服务器，监听到 unix socket，再用宿主机 caddy 反代，存在~~性能损失~~（unix socket 很高效，可以忽略）和不必要的内存占用
nftables 和 docker 冲突，~~没有配置防火墙~~ 已采用云服务商防火墙

\n","createdAt":"2023-08-13 13:51:30.534545","updatedAt":"2025-03-10 15:22:07.068027","replyToPostNumber":null,"replyCount":0,"likeCount":16,"wordCount":3288,"liked":false,"bookmarked":false,"polls":[],"reactions":[{"reaction":"👍️","count":5,"users":[{"id":39,"username":"Jeremy","name":"YBY"},{"id":428,"username":"Goto_Hitori","name":"後藤　ひとり"},{"id":677,"username":"Aftersun","name":null},{"id":1133,"username":"curve","name":null},{"id":1835,"username":"Dusk","name":"夕大画家"}],"hasReacted":false},{"reaction":"❤️","count":16,"users":[{"id":31,"username":"TsuinoSora","name":null},{"id":178,"username":"Hypocrisy","name":"rotartsinimdA"},{"id":237,"username":"Harbour","name":null},{"id":299,"username":"sola","name":null},{"id":307,"username":"Fast","name":null},{"id":1012,"username":"Ratled","name":"精神zjuer"},{"id":1047,"username":"anonymous_coward_old","name":"Anonymous Coward Old"},{"id":1390,"username":"whl","name":null},{"id":1716,"username":"Mk_XVII_CQC","name":"CQC"},{"id":1817,"username":"anon1678451","name":null},{"id":1819,"username":"Thevenin","name":"交大金猫"},{"id":1834,"username":"Ayanami","name":"东川路第二小绫波"},{"id":1892,"username":"AI","name":null},{"id":1929,"username":"Quit","name":"Qwen"},{"id":1941,"username":"john","name":"John"},{"id":3273,"username":"anon18815924","name":null}],"hasReacted":false}],"wiki":false,"version":28,"publicVersion":28,"deletedAt":null,"isAnonymous":false,"user":{"id":1047,"username":"anonymous_coward_old","name":"Anonymous Coward Old","avatarUrl":"/uploads/image/43/32/4332638c11248b8ff07033c11de0759a55205facfbec85e14458245a91991faf.avif","admin":false,"moderator":false,"signatureRaw":null,"signatureCooked":null}}],"hasMore":false,"lastReadPostNumber":1,"hasUrlPostNumber":false}