• A_1.首先登录API密钥页面：

API密钥页面

选择新建子账号

• A_2.这里我选择自定义创建：

• A_3.选择可访问资源类型：

• A_4.填写子账号用户细节

用户名，手机号，邮箱等信息，注意勾选“编程访问”方式

• A_5.授权子账号策略为完整的云资源授权

如果需要其他授权，可以搜索对应关键字快速寻找
授权：QCloudResourceFullAccess
或者留空，创建完毕后，再去
控制台用户预览
用户列表选择授权需要的权限也行

• A_6.最后确认用户细节和策略清单

如果没问题就提交下一步

• A_7.保存你的API Secret ID信息

我们在此页面可以拿到对应的API ID和KEY密钥相关信息，请务必妥善保存，如果怕遗忘可以点选发送到可靠邮箱备份。

#!/bin/bash
domain='你的域名'#查询功能，不需要设置二级域名
sId='AKIxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
sKey='Qwxxxxxxxxxxxxxxxxxxxxxxxxxx'
signatureMethod='HmacSHA1'
timestamp=`date +%s`
nonce=`head -200 /dev/urandom | cksum | cut -f2 -d" "`
url="https://cns.api.qcloud.com/v2/index.php"
#获取域名解析条目ID：recordId
action='RecordList'
src=`printf "GETcns.api.qcloud.com/v2/index.php?Action=%s&Nonce=%s&SecretId=%s&SignatureMethod=%s&Timestamp=%s&domain=%s" $action $nonce $sId $signatureMethod $timestamp $domain`#公共请求参数中的region可以省略，不是cvm系统，域名没有region值
#echo 'src: ' $src
signature=`echo -n $src|openssl dgst -sha1 -hmac $sKey -binary |base64`
#echo 'signature: ' $signature
params=`printf "Action=%s&domain=%s&Nonce=%s&SecretId=%s&Signature=%s&SignatureMethod=%s&Timestamp=%s" $action $domain $nonce $sId "$signature" $signatureMethod $timestamp`
#echo 'params: ' $params
curl -G -d "$params" --data-urlencode "Signature=$signature" "$url"

#!/bin/bash
#/usr/bin/ddns
recordId='525537912'
domain='lolimoe.ltd'
subDomain='ddns'
sId='AKxxxxxxxxxxxxxxxxxxx'
sKey='Qwxxxxxxxxxxxxxxxxxxx'
signatureMethod='HmacSHA1'
timestamp=`date +%s`
nonce=`head -200 /dev/urandom | cksum | cut -f2 -d" "`
region=bj
url="https://cns.api.qcloud.com/v2/index.php"
#获取ip
ip=`curl ip.sb`
action='RecordModify'
recordType='A'
recordLine='默认'
value=$ip

src=`printf "GETcns.api.qcloud.com/v2/index.php?Action=%s&Nonce=%s&Region=%s&SecretId=%s&SignatureMethod=%s&Timestamp=%s&domain=%s&recordId=%s&recordLine=%s&recordType=%s&subDomain=%s&value=%s" $action $nonce $region $sId $signatureMethod $timestamp $domain $recordId $recordLine $recordType $subDomain $value`

#echo 'src: ' $src
signature=`echo -n $src|openssl dgst -sha1 -hmac $sKey -binary |base64`
#echo 'signature: ' $signature

params=`printf "Action=%s&Nonce=%s&Region=%s&SecretId=%s&SignatureMethod=%s&Timestamp=%s&domain=%s&recordId=%s&recordLine=%s&recordType=%s&subDomain=%s&value=%s" $action $nonce $region $sId $signatureMethod $timestamp $domain $recordId $recordLine $recordType $subDomain $value`

#echo 'params: ' $params

curl -G -d "$params" --data-urlencode "Signature=$signature" "$url"

因为shell脚本在windows环境下编码问题，导致web请求加密中文字符不符合腾讯云的编码规则，会导致请求出错，没错，就是请求里，解析线路那条“默认”两个中文字符的编码问题，不太懂这块，暂不知道处理方案，所以拿来一份大佬的python脚本，可以顺利解决这个问题，windows环境下安装python环境还是挺简单的，实在不会的话可以参看我这篇文章目录2.b章节有提到：

import hmac
import base64
from hashlib import sha1
from urllib.parse import urlencode, quote
from urllib import request
from datetime import datetime
import socket
import json

from urllib import request
IP = request.urlopen("https://api.ipify.org").read().decode('utf8')

def update_dns(IP):

ts = str(int(datetime.timestamp(datetime.now())))

# 填写你自己的 Id、Key 和域名
secretId = 'AKIxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
secretKey = 'Qwcwwwwwwwwwwwwwwwwww'
domain = 'unitymoe.com'
subDomain = 'ddns'

baseUrl = 'cns.api.qcloud.com/v2/index.php?'

# 请求的参数
para = {
'Action': 'RecordModify',
'Nonce': '22222',
'Region':'bj',
'SecretId': secretId,
'SignatureMethod':'HmacSHA1',
'Timestamp': ts,
'domain': domain,
'recordId': '648828796',
'recordLine': '默认',
'recordType': 'A', # "A"，"CNAME"，"MX"，"TXT"，"NS"，"AAAA"，"SRV"
'subDomain': subDomain,
'value': IP
}

sigSrcList = []

# urlencode 会对中文进行编码，导致验证失败，因此这里手动组装签名原始字符串

for k in para.keys():
sigSrcList.append(k + '=' + para[k])

sigSrcStr = 'GET' + baseUrl + '&'.join(sigSrcList)
para['Signature'] = base64.b64encode(hmac.new(secretKey.encode('utf-8'), sigSrcStr.encode('utf-8'), digestmod=sha1).digest())
url = 'https://' + baseUrl + urlencode(para, safe='')
response = request.urlopen(url)

print(response.read())

update_dns(IP)

大佬文章地址

• B_1.点击create tokens创建新的API

• B_2.取个喜欢的命名，选择必要的授权

ZONE范围，DNS解析项目，Edit编辑权限即可：

• B_3.最后确认下信息

• B_4.获得我们的API Key，保存好你的API key

Mnxxxxxxxxxxxxxxxxxxx

同时注意页面会给你一个形如下列的测试指令：

curl -X GET "https://api.cloudflare.com/client/v4/user/tokens/verify" \
     -H "Authorization: Bearer MnLX1qFiX-DMZD2nj1To2zW4Xupd4d9bgPNp5Dgn" \
     -H "Content-Type:application/json"

粘贴到ssh执行看看返回数据，如果类似以下语句

{"code":10000,"message":"This API Token is valid and active"

则ok

#!/bin/bash
###############  授权信息（需修改成你自己的） ################
# CloudFlare 注册邮箱
auth_email="your@email.com"
# CloudFlare Global API Key
auth_key="0302b8ed13acf6bdfdfddfdf980e9c4c"
# 做 DDNS 的根域名
zone_name="omo.moe"
# 做 DDNS 的域名
record_name="hkt.omo.moe"

######################  修改配置信息 #######################
# 域名类型，IPv4 为 A，IPv6 则是 AAAA
record_type="A"
# IPv6 检测服务
#ip=$(curl -s https://ipv6.vircloud.net)
# IPv4 检测服务
ip=$(curl -s ifconfig.me)
#如果无效，可以尝试替换为以下ip返回服务：
#curl ifconfig.me
#curl icanhazip.com
#curl ident.me
#curl ipecho.net/plain
#curl whatismyip.akamai.com
#curl tnx.nl/ip
#curl myip.dnsomatic.com
#curl ip.appspot.com
#curl -s checkip.dyndns.org | sed 's/.*IP Address: \([0-9\.]*\).*/\1/g'
# 变动前的公网 IP 保存位置
ip_file="ip.txt"
echo "your current vps IP is: "$ip
# 域名识别信息保存位置
id_file="cloudflare.ids"
# 监测日志保存位置
log_file="cloudflare.log"
 
######################  监测日志格式 ######################## 
log() {
    if [ "$1" ]; then
        echo -e "[$(date)] - $1"  $log_file
    fi
}
log "Check Initiated"
 
######################  判断 IP 是否变化 #################### 
if [ -f $ip_file ]; then
    old_ip=$(cat $ip_file)
    if [ "$ip" == "$old_ip" ]; then
        echo "IP has not changed."
        exit 0
    fi
fi
 
######################  获取域名及授权 ###################### 
if [ -f $id_file ] && [ $(wc -l $id_file | cut -d " " -f 1) == 2 ]; then
    zone_identifier=$(head -1 $id_file)
echo "Zone ID is" $zone_identifier
    record_identifier=$(tail -1 $id_file)
echo "Record ID is" $record_identifier
else
    zone_identifier=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones?name=$zone_name" -H "X-Auth-Email: $auth_email" -H "X-Auth-Key: $auth_key" -H "Content-Type: application/json" | grep -Po '(?<="id":")[^"]*' | head -1 )
    record_identifier=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones/$zone_identifier/dns_records?name=$record_name" -H "X-Auth-Email: $auth_email" -H "X-Auth-Key: $auth_key" -H "Content-Type: application/json"  | grep -Po '(?<="id":")[^"]*' | head -1)
    echo "$zone_identifier" > $id_file
    echo "$record_identifier" >> $id_file
fi
 
######################  更新 DNS 记录 ###################### 
update=$(curl -s -X PUT "https://api.cloudflare.com/client/v4/zones/$zone_identifier/dns_records/$record_identifier" -H "X-Auth-Email: $auth_email" -H "X-Auth-Key: $auth_key" -H "Content-Type: application/json" --data "{\"id\":\"$record_identifier\",\"type\":\"$record_type\",\"name\":\"$record_name\",\"content\":\"$ip\",\"proxied\":"false"}")
#########################  更新反馈 ######################### 
if [[ $update == *"\"success\":false"* ]]; then
    message="API UPDATE FAILED. DUMPING RESULTS:\n$update"
    log "$message"
    echo -e "$message"
    exit 1 
else
    message="IP changed to: $ip"
    echo "$ip" > $ip_file
    log "$message"
    echo "$message"
fi

其中更新DNS记录请求也可以规范写成：

update=$(curl -s -X PUT "https://api.cloudflare.com/client/v4/zones/$zone_identifier/dns_records/$record_identifier" \
-H "X-Auth-Email: $auth_email" \
-H "X-Auth-Key: $auth_key" \
-H "Content-Type: application/json" \
--data '{"id":"$record_identifier","type":"$record_type","name":"$record_name","content":"$ip","proxied":"false"}')

注意，选一种即可，不要都复制进去了。

server {
  listen 20788 ssl http2;
  root /home/wwwroot/lolimoe.ltd;
  index index.html index.htm index.php;
  #charset koi8-r;
  access_log /var/log/nginx/lolimoe.ltd.access.log main;
  server_name zhenjiang.lolimoe.ltd;
  ssl_certificate "/usr/local/cert/lolimoe_ltd.crt";
  ssl_certificate_key "/usr/local/cert/lolimoe_ltd.key";
  ssl_session_timeout 10m;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
  ssl_prefer_server_ciphers on;

  error_page 404 /404.html;
  error_page 500 502 503 504 /50x.html;
  location = /50x.html {
    root /usr/share/nginx/html;
  }
  client_max_body_size 8888m;
  location / {
    index index.html index.php;

    if (-f $request_filename/index.html) {
      rewrite (.*) $1/index.html break;
    }
    if (-f $request_filename/index.php) {
      rewrite (.*) $1/index.php;
    }
    if (!-f $request_filename) {
      rewrite (.*) /index.php;
    }
  }
  location ~ \.php {
    fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;
    fastcgi_index index.php;
    include fastcgi_params;
    fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
    fastcgi_param PATH_INFO $fastcgi_path_info;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
  }
  location ~ ^.+\.php {
    fastcgi_split_path_info ^(.+\.php)(.*)$;
    fastcgi_param PATH_INFO $fastcgi_path_info;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
  }
  location ~ /.ht {
    deny all;
  }
  location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
    expires 15d;
  }
  location ~ .*\.(js|css)?$ {
    expires 1d;
  }
}