点开的时候先显示了一个很明显的二维码，然后很快变成半透明的二维码+美女。

openwrt + docker 麻雀虽小五脏俱全

acme.sh + nginx 完事

化妆后漂亮能接受吧，至少有真底子，照骗无法接受

化妆后漂亮应该能接受吧，至少

NAS 路由器 充电头

百度也很恶心，搜索结果里一堆视频自动播放，随随便便几十兆流量就没有了，还找不到设置地方

教育部等八部门关于规范“大学”“学院”名称登记使用的意见 https://www.gov.cn/zhengce/zhengceku/2021-05/19/content_5608515.htm

@MrKeanu 现在留邮箱都搞这么复杂了吗？只说是 aes

你们没有内网穿透在外网访问的需求吗？我最开始也是在 nginx 里配置域名，但是域名多了也记不住。后来用 panel_iframe 配置到 homeassistant 的侧边栏，不常用的用 weblink 做成链接。但是直接以域名暴露到外网，要想安全就得设置密码，输密码我嫌麻烦，所以整了个 ha 的反代插件，由 ha 来反代服务，这样我只需要给 HA 配置域名就行了，其他服务通过 HA 侧边栏或链接访问，能免密免登录的都尽量免登录。

N1 呗，2G 运存 8G 闪存，CPU 性能跑常用软路由应用也足够，最大缺点就是单网口，我的不知道是有问题还是本来就这样，600M 宽带只能跑 450 ，但是你才 100M 宽带，对你来说完美。

clash fakedns 透明代理 不香吗？

@ai277014717 缺个禁止 ensure_ascii 的参数，实用性大打折扣。

去错地方了，应该去贴吧。

意思就是想在 image 里埋个后门程序，什么后门程序合适？

if (a==1 && b==2) || (a!=1 && b!=2) {
}

前几年还的都是利息不是提前还贷的好理由，你要是等额本息贷 100 万 30 年利率 3%，3 年后合计还了 4216.04*36=15 万多，其中本金只还了 6 万 4 ，按你的感觉也是还的都是利息得提前还款吧，但实际上 3%的利率比 3 年存款利率还低，同样多的钱你存定期比提前还还划算。所以是否提前还要看理财收益率能否跑赢房贷利率以及是否愿意为了保持一定的流动性牺牲一些利率，而非因为前期还的都是利息就要提前还。利率 4.95 的话，我也会选择提前还一些。

@wowofe dnsmasq
--server=[/[<domain>]/[domain/]][<server>[#<port>]][@<interface>][@<source-ip>[#<port>]]
Specify upstream servers directly. Setting this flag does not suppress reading of /etc/resolv.conf, use --no-resolv to do that. If one or more optional domains are given, that server is used only for those domains and they are queried only using the specified server. This is intended for private nameservers: if you have a nameserver on your network which deals with names of the form xxx.internal.thekelleys.org.uk at 192.168.1.1 then giving the flag --server=/internal.thekelleys.org.uk/192.168.1.1 will send all queries for internal machines to that nameserver, everything else will go to the servers in /etc/resolv.conf. DNSSEC validation is turned off for such private nameservers, UNLESS a --trust-anchor is specified for the domain in question. An empty domain specification, // has the special meaning of "unqualified names only" ie names without any dots in them. A non-standard port may be specified as part of the IP address using a # character. More than one --server flag is allowed, with repeated domain or ipaddr parts as required.
More specific domains take precedence over less specific domains, so: --server=/google.com/1.2.3.4 --server=/www.google.com/2.3.4.5 will send queries for google.com and gmail.google.com to 1.2.3.4, but www.google.com will go to 2.3.4.5

Matching of domains is normally done on complete labels, so /google.com/ matches google.com and www.google.com but NOT supergoogle.com. This can be overridden with a * at the start of a pattern only: /*google.com/ will match google.com and www.google.com AND supergoogle.com. The non-wildcard form has priority, so if /google.com/ and /*google.com/ are both specified then google.com and www.google.com will match /google.com/ and /*google.com/ will only match supergoogle.com.

For historical reasons, the pattern /.google.com/ is equivalent to /google.com/ if you wish to match any subdomain of google.com but NOT google.com itself, use /*.google.com/

The special server address '#' means, "use the standard servers", so --server=/google.com/1.2.3.4 --server=/www.google.com/# will send queries for google.com and its subdomains to 1.2.3.4, except www.google.com (and its subdomains) which will be forwarded as usual.

Also permitted is a -S flag which gives a domain but no IP address; this tells dnsmasq that a domain is local and it may answer queries from /etc/hosts or DHCP but should never forward queries on that domain to any upstream servers. --local is a synonym for --server to make configuration files clearer in this case.

IPv6 addresses may include an %interface scope-id, eg fe80::202:a412:4512:7bbf%eth0.

The optional string after the @ character tells dnsmasq how to set the source of the queries to this nameserver. It can either be an ip-address, an interface name or both. The ip-address should belong to the machine on which dnsmasq is running, otherwise this server line will be logged and then ignored. If an interface name is given, then queries to the server will be forced via that interface; if an ip-address is given then the source address of the queries will be set to that address; and if both are given then a combination of ip-address and interface name will be used to steer requests to the server. The query-port flag is ignored for any servers which have a source address specified but the port may be specified directly as part of the source address. Forcing queries to an interface is not implemented on all platforms supported by dnsmasq.

Upstream servers may be specified with a hostname rather than an IP address. In this case, dnsmasq will try to use the system resolver to get the IP address of a server during startup. If name resolution fails, starting dnsmasq fails, too. If the system's configuration is such that the system resolver sends DNS queries through the dnsmasq instance which is starting up then this will time-out and fail.