简单五步设置群晖NAS绑定自有域名实现外网访问-LonHowe Blog

1.注册阿里云账号。

2.注册一个域名。如果域名不在阿里云解析托管，需要先转过去，具体方法是联系域名提供商修改域名的DNS服务器，修改方式参考这里：https://help.aliyun.com/knowledge_detail/39844.html 然后去控制台找到云解析，将域名添加进去；

3.到阿里云控制中心找到access key和secret并保存下来（强烈建议遵循阿里云安全最佳实践的说明，使用RAM子用户的AccessKey）；

4.到群晖控制中心找到任务计划新增一个计划。新增->计划的任务->用户自定义脚本

设置10分钟定时

复制以下内容，根据自己的情况修改中文部分并添加到任务设置自定义脚本

#!/bin/sh
aliddns_name="你的域名前缀"
aliddns_domain="你的域名"
aliddns_ak="你的AccessKeyId"
aliddns_sk="你的AccessKeySecret"
 
aliddns_curl="curl -s whatismyip.akamai.com"
aliddns_dns="8.8.8.8"
aliddns_ttl="600"
 
ip=`$aliddns_curl 2&gt;&amp;1`
 
current_ip=`nslookup $aliddns_name.$aliddns_domain $aliddns_dns 2&gt;&amp;1`
 
if [ "$?" -eq "0" ]
then
    current_ip=`echo "$current_ip" | grep \'Address 1\' | tail -n1 | awk \'{print $NF}\'`
    if [ "$ip" = "$current_ip" ]
    then
        exit 0
    fi 
fi
 
timestamp=`date -u " %Y-%m-%dT%H%:%M%:%SZ"`
 
urlencode() {
    # urlencode 
    out=""
    while read -n1 c
    do
        case $c in
            [a-zA-Z0-9._-]) out="$out$c" ;;
            *) out="$out`printf \'%%X\' "\'$c"`" ;;
        esac
    done
    echo -n $out
}
enc() {
    echo -n "$1" | urlencode
}
send_request() {
    local args="AccessKeyId=$aliddns_ak&amp;Action=$1&amp;Format=json&amp;$2&amp;Version=2015-01-09"
    local hash=$(echo -n "GET&amp;/&amp;$(enc "$args")" | openssl dgst -sha1 -hmac "$aliddns_sk&amp;" -binary | openssl base64)
    curl -s "http://alidns.aliyuncs.com/?$args&amp;Signature=$(enc "$hash")"
}
get_recordid() {
    grep -Eo \'"RecordId":"[0-9] "\' | cut -d\':\' -f2 | tr -d \'"\'
}
query_recordid() {
    send_request "DescribeSubDomainRecords" "SignatureMethod=HMAC-SHA1&amp;SignatureNonce=$timestamp&amp;SignatureVersion=1.0&amp;SubDomain=$aliddns_name.$aliddns_domain&amp;Timestamp=$timestamp"
}
update_record() {
    send_request "UpdateDomainRecord" "RR=$aliddns_name&amp;RecordId=$1&amp;SignatureMethod=HMAC-SHA1&amp;SignatureNonce=$timestamp&amp;SignatureVersion=1.0&amp;TTL=$aliddns_ttl&amp;Timestamp=$timestamp&amp;Type=A&amp;Value=$ip"
}
add_record() {
    send_request "AddDomainRecord&amp;DomainName=$aliddns_domain" "RR=$aliddns_name&amp;SignatureMethod=HMAC-SHA1&amp;SignatureNonce=$timestamp&amp;SignatureVersion=1.0&amp;TTL=$aliddns_ttl&amp;Timestamp=$timestamp&amp;Type=A&amp;Value=$ip"
}
if [ "$aliddns_record_id" = "" ]
then
    aliddns_record_id=`query_recordid | get_recordid`
fi
if [ "$aliddns_record_id" = "" ]
then
    aliddns_record_id=`add_record | get_recordid`
    echo "added record $aliddns_record_id"
else
    update_record $aliddns_record_id
    echo "updated record $aliddns_record_id"
fi

#!/bin/sh

aliddns_name="你的域名前缀"

aliddns_domain="你的域名"

aliddns_ak="你的AccessKeyId"

aliddns_sk="你的AccessKeySecret"

aliddns_curl="curl -s whatismyip.akamai.com"

aliddns_dns="8.8.8.8"

aliddns_ttl="600"

ip=`$aliddns_curl 2>&1`

current_ip=`nslookup $aliddns_name.$aliddns_domain $aliddns_dns 2>&1`

if [ "$?" -eq "0" ]

then

current_ip=`echo "$current_ip" | grep \'Address 1\' | tail -n1 | awk \'{print $NF}\'`

if [ "$ip" = "$current_ip" ]

then

exit 0

timestamp=`date -u " %Y-%m-%dT%H%:%M%:%SZ"`

urlencode() {

# urlencode

out=""

while read -n1 c

case $c in

[a-zA-Z0-9._-]) out="$out$c" ;;

*) out="$out`printf \'%%X\' "\'$c"`" ;;

esac

done

echo -n $out

}

enc() {

echo -n "$1" | urlencode

}

send_request() {

local args="AccessKeyId=$aliddns_ak&Action=$1&Format=json&$2&Version=2015-01-09"

local hash=$(echo -n "GET&/&$(enc "$args")" | openssl dgst -sha1 -hmac "$aliddns_sk&" -binary | openssl base64)

curl -s "http://alidns.aliyuncs.com/?$args&Signature=$(enc "$hash")"

}

get_recordid() {

grep -Eo \'"RecordId":"[0-9] "\' | cut -d\':\' -f2 | tr -d \'"\'

}

query_recordid() {

send_request "DescribeSubDomainRecords" "SignatureMethod=HMAC-SHA1&SignatureNonce=$timestamp&SignatureVersion=1.0&SubDomain=$aliddns_name.$aliddns_domain&Timestamp=$timestamp"

}

update_record() {

send_request "UpdateDomainRecord" "RR=$aliddns_name&RecordId=$1&SignatureMethod=HMAC-SHA1&SignatureNonce=$timestamp&SignatureVersion=1.0&TTL=$aliddns_ttl&Timestamp=$timestamp&Type=A&Value=$ip"

}

add_record() {

send_request "AddDomainRecord&DomainName=$aliddns_domain" "RR=$aliddns_name&SignatureMethod=HMAC-SHA1&SignatureNonce=$timestamp&SignatureVersion=1.0&TTL=$aliddns_ttl&Timestamp=$timestamp&Type=A&Value=$ip"

}

if [ "$aliddns_record_id" = "" ]

then

aliddns_record_id=`query_recordid | get_recordid`

if [ "$aliddns_record_id" = "" ]

then

aliddns_record_id=`add_record | get_recordid`

echo "added record $aliddns_record_id"

else

update_record $aliddns_record_id

echo "updated record $aliddns_record_id"

5.设置好端口转发。