本文档整合了以下源文件：privacy.md, privacy2.md, survival.md, sentinel.md, security.md, firewall.md, vpn.md

1. 理解 VPN 技术
2. Mullvad VPN 概述
3. 安装与设置
4. 配置选项
5. 高级功能
6. 隐私最佳实践
7. 故障排除
8. 安全考虑

虚拟专用网络（VPN）在你的设备和远程服务器之间创建加密隧道，隐藏你的 IP 地址并保护你的在线活动免受监控。

Mullvad 是一家总部位于瑞典的隐私优先 VPN 服务，以其对用户隐私的坚定承诺和最少数据收集而闻名。

在所有主要平台上安装 Mullvad VPN 都很简单。

Account Number Format: XXXX XXXX XXXX XXXX

Payment Options:
- Credit Card
- Bitcoin
- Cash (mail to Sweden)
- Bank Wire
- Swish (Sweden only)

正确的配置可以针对你的特定需求优化安全性和性能。

Mullvad 为需要增强隐私和控制的用户提供高级功能。

# Connect to specific country
mullvad relay set location se

# Enable kill switch
mullvad lockdown-mode set on

# Check connection status
mullvad status

# Set DNS
mullvad dns set default

将 VPN 与其他隐私措施结合可以创建全面的安全防护。

Mullvad VPN 常见问题及解决方案。

# Check public IP
curl ifconfig.me

# Test DNS leak
nslookup example.com

# Check connection logs
mullvad relay get

# Reset settings
mullvad reset

了解 VPN 的局限性和补充安全措施。

Awesome Privacy 是一个精心策划的尊重隐私的软件和服务列表。本指南涵盖了维护数字隐私的基本工具，涵盖从通信到浏览和文件存储的各个类别。

1. 隐私原则
2. 通信工具
3. Web 浏览器
4. 电子邮件服务
5. 云存储
6. VPN 服务
7. 操作系统
8. 密码管理器
9. 搜索引擎

维护数字隐私需要为通信、浏览、存储和系统安全选择适当的工具。具有端到端加密的开源解决方案提供最强的隐私保障。本指南中列出的工具代表了每个类别的成熟选项，允许用户构建全面的隐私优先工作流。

Survival priorities are governed by a simple framework:

In most outdoor emergencies, exposure (hypothermia or hyperthermia) is the first lethal threat, not starvation or dehydration. Build or find shelter before searching for water.

• Avoid dry riverbeds (flash flood risk).
• Avoid lone trees and hilltops (lightning risk).
• Avoid avalanche paths, rockfall zones, and dead trees with hanging branches.
• Look for natural windbreaks: rock faces, dense tree lines, ridges.
• Stay slightly elevated to avoid cold air pooling in valleys.

1. Find a ridgepole -- a sturdy branch about 9 feet long.
2. Prop one end on a stump or rock at about 3 feet high, or wedge into a tree fork.
3. Lean shorter branches along both sides to form an A-frame.
4. Pile debris (leaves, pine needles, grass) thickly over the frame -- at least 2 feet deep.
5. Line the inside with dry debris for insulation from the ground.
6. Keep the entrance small and plug it with debris when inside.

The inside should be just large enough for your body. A smaller space retains heat better.

Dehydration kills within days. Never skip water purification in the backcountry.

1. Spring water emerging from rock -- generally safest natural source.
2. Fast-moving streams in forested, uninhabited areas.
3. Lakes and ponds (requires thorough treatment).
4. Puddles and standing water (last resort; heavy treatment needed).
5. Snow -- melt before drinking. Eating snow lowers body temperature.

Fire provides warmth, purifies water (via boiling), signals rescuers, and boosts morale.

You need three elements: heat (ignition), fuel (wood), and oxygen (airflow). Remove any one and the fire dies.

1. Tinder: Fine, dry material that catches a spark. Examples: birch bark shavings, dryer lint, cotton balls with petroleum jelly, dry grass, cedar bark fibers, fatwood shavings.
2. Kindling: Pencil-thin dry sticks and twigs.
3. Fuel: Progressively larger wood, from finger-thick to wrist-thick.

Build in a teepee or log cabin structure. Light the tinder, add kindling as the flame grows, then add fuel gradually. Do not smother a young fire with too much wood too soon.

The most reliable navigation method. Electronics fail; a compass does not.

Basic compass use:

1. Hold the compass flat in front of you.
2. Rotate the bezel until the red magnetic needle aligns with the orienting arrow (red in the shed).
3. Read your bearing at the index line.
4. To follow a bearing: rotate your body until the needle aligns, then walk toward a landmark in that direction.

Declination: Magnetic north and true north differ. Adjust your compass or account for the difference (shown on your topographic map).

When you lack a compass:

Critical warning: Misidentifying plants can be fatal. Do not eat any plant you cannot identify with certainty. When in doubt, do not eat it.

If you must test an unknown plant and have no other food source:

1. Test for contact reaction: Rub on inner wrist. Wait 15 minutes.
2. Test for lip reaction: Touch to corner of mouth. Wait 15 minutes.
3. Test for tongue reaction: Place on tongue. Wait 15 minutes.
4. Test for mouth reaction: Chew and hold in mouth (do not swallow). Wait 15 minutes.
5. Test for digestion: Swallow a small amount. Wait 8 hours.

If any reaction occurs at any stage, stop immediately.

• Any plant with milky or discolored sap.
• Any plant with a bitter or soapy taste.
• Umbrella-shaped flower clusters (resemble poison hemlock).
• Beans or seeds from pods you cannot identify.
• Any plant with a strong almond scent in the leaves (cyanide compounds).

• Tell someone your plan: where you are going, your route, and when you expect to return.
• Carry a whistle on your person, not in your pack.
• A knife with a fixed blade is more reliable than a folding knife in survival situations.
• Duct tape wrapped around a water bottle or trekking pole saves pack weight and is endlessly useful.

Source: https://github.com/kr-stn/awesome-sentinel

This tutorial covers the key resources and tools from the kr-stn/awesome-sentinel project.

A curated list of awesome tools, tutorials and APIs related to data from the Copernicus Sentinel Satellites.

Official datahubs and mirrors by the Copernicus partners and Collaborative Ground Segment members.

• Copernicus Data Spaces Ecosystem (CDSE)
• Australia National Mirror
• Austria National Mirror
• Czech Rebublic National Mirror
• Estonia National Mirror
• Finland National Mirror
• France National Mirror (PEPS)
• Germany National Mirror (CODE-DE)
• Greece National Mirror
• Luxembourg National Mirror
• Norway National Mirror
• Portugal National Mirror
• United Kingdom National Mirror (SEDAS)

Initiatives to integrate specific Sentinel data into existing search and discovery platforms.

• Alaska Satellite Facility (Sentinel-1)
• Centre for Environmental Data Analysis - CEDA (Sentinel-1, -2)
• Theia (Sentinel-2)
  • atmospherically corrected L2A products covering several European countries and areas proposed by scientists
  • published less than two days after L1C is available
• USGS EarthExplorer (Sentinel-2)
• EUMETSAT CODA (Sentinel-3 Marine Products)
  • 14 day rolling archive of Sentinel-3 L1 and L2 marine products in near real-time (NRT), short time critical (STC) and non time critical (NTC) latency mode
• DLR Geoservice (Sentinel-2)
  • Download 2 years rolling archive of MAJA-corrected Sentinel-2 scenes covering Germany
• NOAA CoastWatch
  • Sentinel-3 OLCI and Sentinel-2 over United States coasts
• NASA Earthdata
  • search NASA mirrors for Sentinel-1, Sentinel-3, and Sentinel-5P

Providers that host Copernicus Sentinel data and allow you to bring your own code to process it without the need to download the data.

• Open data on AWS
  • Sentinel-2 L1C and L2A hosted in region eu-central-1 (Frankfurt), requester-pays S3 buckets
  • Sentinel-2 L2A Cloud-Optimized GeoTIFFs, hosted in region us-west-2 (Oregon), S3 buckets
    • STAC Browser for Sentinel-2 COG hosted on AWS
  • Sentinel-1 GRD hosted in region eu-central-1 (Frankfurt), requester-pays S3 buckets
  • Sentinel-1 ARD CONUS - analysis ready dataset of Sentinel-1, tiled COGs, for contiguous United States
  • Sentinel-3 NRT, STC, NTC, COG - all Sentinel-3 products for near-real time, short time critical and not time critical, all products also available converted to COGs
  • Sentinel-5P L2 - all Level-2 products from Sentinel-5P, also available as COG converted data
• Google (Sentinel-2)
  • public Google Cloud Storage bucket, .SAFE format, EU region
• Planet
  • Sentinel-2 included in commercial API
• Microsoft Planetary Computer
  • offers many EO catalogs as COGs, including Sentinel-2 L2A data. provides a STAC-API. data can be obtained free of charge, but must be signed with a SAS token.

Data and Information Access Services (DIAS), funded by the European Commission "providing centralised access to Copernicus data and information, as well as to processing tools"

• CREODIAS
  • full Sentinel archive, free visualization and download through data discovery portal and CREODIAS Browser
  • large EO data archive including Landsat, Envisat and others, next to Copernicus data
• MUNDI
  • Sentinel archive, free visualization and download through mundi web services
• ONDA DIAS
  • VM Infrastructure as a Service, with an API for access to hosted Copernicus data
• sobloo
  • on-demand processing of thematic products with link to other data-sets (i.e. geo-marketing)
• WEkEO
  • harmonised data access with a REST API, hosted VM options

Specific to Copernicus Sentinel data discovery, download and processing.

• sentinelsat
  • search and download from any DHuS-powered Datahub. Comes with an intuitive command line and a flexible Python API.
• Sentinel-download
  • download Sentinel-2 data from Copernicus SciHub. Supports download of sub-tiles in the old product format (PDS <14).
• peps_download
  • download data from the French National Mirror (PEPS).
• Sentinel2ProductIngestor
  • ingest Sentinel-2 data from SciHub into S3. Used by Sinergise to populate the AWS Sentinel-2 mirror
• sat-download
  • download Sentinel-2 data from AWS
• sat-api
  • query Sentinel-2 data on AWS using APIGateWay
  • deployed by Development Seed at https://api.developmentseed.org/satellites
• awsdownload
  • downloader for Sentinel-2 products from Amazon or SciHub
• sentinelhub-py
  • Python library for downloading Sentinel-2 data from Amazon into ESA .SAFE format and interface Sentinel Hub OGC services
• aws-sat-api
  • Simple Serverless API for satellite data hosted on AWS Public Dataset
• sentinel2-search-api
  • query Sentinel-2 data hosted on AWS by MGRS tile
  • API deployed at https://sentinel2.satgateway.com, tile preview front-end deployed at https://s2viewer.satgateway.com
• sentinel2_aws
  • Ruby gem for parsing Sentinel-2 metadata from AWS
• eodag
  • command line tool and plugin-oriented Python framework for search and download from multiple providers including all DIAS
• sentinelloader
  • Sentinel-2 satellite tiles images downloader from Copernicus. Minimizes data download and combines multiple tiles to return a single area of interest

• AWS/Sinergise "Sentinel Image Browser"

  • search Sentinel-2 data available on Amazon Webservices

• EOS "Land Viewer"

  • viewer for Landsat-8/7, MODIS and Sentinel-2 data hosted by AWS
  • visualize band combinations on-the-fly

• jeobrowser "Rocket"

  • viewer for Sentinel (1,2,3), Landsat-8, SPOT and Pleiades imagery
  • based on resto search engine and used as frontend for PEPS

• mundialis "EO-me"

  • viewer for Sentinel-2 and Landsat-8 data with custom metadata filters
  • satellite tiles enriched with additional metadata (e.g. terrain statistics, NDVI at overpass, climatic parameters, population count)

• OceanDataLab

  • portals focussing on Ocean Remote Sensing data, including Sentinel-1 and 3

• Research and User Support (RUS)

  • service portal to promote the uptake of Copernicus data and scaling of R&D activities
  • provides training and computing environments

• Sinergise "Sentinel Playground"

  • visualize AWS Sentinel-2 data in different band combinations
  • offers a WMS/WMTS service.

• Sinergise "Sentinel-Hub"

  • search Sentinel-1, 2, 3 and other free satellite data
  • supports pixel based band-math operations and simple data processing

• SnapPlanet

  • Android / iOS App to to view Sentinel-2 images, compare changes and share

• Spectator

  • real-time tracking of EO satellites, set-up custom channels to track ROI overpass and preview images

• Thematic Exploitation Platforms "TEPs"

  • platforms for finding and processing (Sentinel) data relating to a thematic topic
  • available platforms: Coastal, Forestry, Geohazards, Hydrology, Polar, Urban, Food Security

• USGS "Sentinel2Look"

  • variant of the LandsatLook Viewer to search and download Sentinel-2 data from the USGS archive

• ESRI Sentinel-2 Explorer

  • view Sentinel-2 data rendered with a number of indexes
  • available as ArcGIS ImageServer (REST)

• RemotePixel "Viewer" (no longer active)

  • open source viewer for Landsat-8, Sentinel-2 and CBERS-4 data hosted by AWS
  • uses sentinel-tiler (tiles server based on AWS Lambda)

• RemotePixel "Satellite Search" (no longer active)

  • open source Browser for Landsat-8 and Sentinel-2 data hosted by AWS
  • supports on-the-fly display and calculation of band combinations
  • uses remotepixel-api (based on AWS Lambda)

• SNAP (Sentinel Application Plattform)
  • (pre-)process any Sentinel data
  • also available as docker
• ARCSI (Atmospheric and Radiometric Correction of Satellite Imagery)
  • atmospheric correction of Sentinel-2 data
• Google Earth Engine
  • process the global Sentinel archives directly on Google's servers
• EOS Processing
  • workflow library for thematic processing of (Sentinel-2) satellite data
• iCOR
  • atmospheric correction of Sentinel-2 data
  • available as SNAP plugin
• MAJA (MACCS ATCOR Joint Algorithm)
  • atmospheric correction of Sentinel-2 data using time series
  • used for Theia and Sen2-Agri
• Sen2-Agri
  • toolbox for processing images for agricultural purposes
  • includes modules for atmospheric correction, monthly syntheses, biophysical variables, crop mask, crop-type classification and an orchestrator
• s2cloudless
  • single scene, pixel-based cloud detection algorithm used at Sentinel-Hub
  • accompanying write-up with performance comparison to other cloud detection algorithms
• Sen2Cor
  • atmospheric correction of Sentinel-2 data
  • basis for L2A data published on Copernicus Open Access Hub
• sen2r
  • R toolbox to search, download and pre-process Sentinel-2 data
• ACOLITE
  • atmospheric correction algorithms for aquatic applications of Landsat and Sentinel-2
• C2RCC
  • atmospheric correction of Sentinel-3 and -2 for coast colour applications
  • included in the SNAP toolbox for Sentinel-3
• i.sentinel.mask
  • GRASS GIS addon for atmospheric correction of Sentinel-2 including cloud and shadow detection
• sat-stac-sentinel
  • convert original Sentinel-1 and -2 metadata into STAC items
• EOReader
  • Opensource Python library reading Sentinel-1, 2, 3, and other optical and SAR sensors - loading and stacking bands in a sensor-agnostic way
• xsar
  • read Sentinel-1 data into xarray for further processing
• FORCE Processing Framework
  • Generate analysis ready data for Sentinel-2 and Landsat-4/5/7/8/9 (including atmospheric correction and homogenization of Sentinel-2 and Landsat data)

本指南提供了一份全面的安全清单，用于保护个人数字资产。基于 Personal Security Checklist 项目，涵盖了个人必备的安全实践。

Firezone 是一个基于 WireGuard 构建的开源 VPN 网关和防火墙。它提供安全的远程访问，支持基于身份的策略、分流隧道以及与流行身份提供商的集成，实现零信任网络访问。

version: '3.8'
services:
  firezone:
    image: firezone/firezone:latest
    ports:
      - "443:443"
      - "51820:51820/udp"
    env_file:
      - .env
    volumes:
      - ./firezone-data:/var/firezone
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv6.conf.all.forwarding=1
    depends_on:
      - db
    restart: unless-stopped

  db:
    image: postgres:15
    volumes:
      - pg-data:/var/lib/postgresql/data
    environment:
      POSTGRES_DB: firezone
      POSTGRES_USER: firezone
      POSTGRES_PASSWORD: changeme
    restart: unless-stopped

volumes:
  pg-data:

# .env
EXTERNAL_URL=https://vpn.example.com
DEFAULT_ADMIN_EMAIL=admin@example.com
DEFAULT_ADMIN_PASSWORD=securepassword
DATABASE_URL=postgres://firezone:changeme@db/firezone
SECRET_KEY_BASE=generate-a-long-random-string-here
WIREGUARD_PORT=51820
WIREGUARD_IPV4_ADDRESS=10.3.2.1
WIREGUARD_IPV6_ADDRESS=fd00::3:2:1

# 网关日志
docker logs firezone-gateway -f

# 控制平面日志
docker logs firezone -f

# 最近的连接流
docker exec firezone-db psql -U firezone \
  -c "SELECT * FROM flows ORDER BY created_at DESC LIMIT 10;"

curl -H "Authorization: Bearer YOUR_TOKEN" \
  https://vpn.example.com/api/v1/users

Firezone 提供了一个基于 WireGuard 构建的现代 VPN 解决方案，具有基于身份的访问控制。其与身份提供商的集成、分流隧道能力以及多平台客户端支持，使其适合寻求零信任网络访问的各种规模组织。

SoftEther VPN 是由筑波大学开发的开源、跨平台 VPN 服务器和客户端软件。它支持多种 VPN 协议，提供高性能、灵活性和强大的安全功能。

# 下载 SoftEther VPN Server
wget https://github.com/SoftEtherVPN/SoftEtherVPN_Stable/releases/download/v4.41-9787-beta/softether-vpnserver-v4.41-9787-beta-2022.04.26-linux-x64-64bit.tar.gz

# 解压
tar -xzf softether-vpnserver-*.tar.gz
cd vpnserver

# 编译（Linux 上需要）
make

# 启动服务器
./vpnserver start

docker run -d \
  --name=softether-vpn \
  --cap-add=NET_ADMIN \
  -p 443:443 \
  -p 992:992 \
  -p 5555:5555 \
  -p 500:500/udp \
  -p 4500:4500/udp \
  -p 1194:1194/udp \
  -v ./vpn_server.config:/usr/local/vpnserver/vpn_server.config \
  --restart unless-stopped \
  siomiz/softethervpn

# 使用 vpncmd
./vpncmd localhost /SERVER /CMD UserCreate username /GROUP:none /REALNAME:"User Name" /NOTE:""
./vpncmd localhost /SERVER /CMD UserPasswordSet username /PASSWORD:strongpassword