开源自托管短链方案：Shlink、YOURLS、Polr、Supabase 四方案选型指南

# docker-compose.yml
version: '3'
services:
  shlink:
    image: shlinkio/shlink:stable
    restart: always
    ports:
      - "8080:8080"
    environment:
      - DEFAULT_DOMAIN=go.yourdomain.com
      - IS_HTTPS_ENABLED=true
      - GEOLITE_LICENSE_KEY=${GEOLITE_KEY}
      - DB_DRIVER=mysql
      - DB_NAME=shlink
      - DB_USER=shlink
      - DB_PASSWORD=${DB_PASSWORD}
      - DB_HOST=database
    depends_on:
      - database

  database:
    image: mysql:8.0
    restart: always
    environment:
      - MYSQL_ROOT_PASSWORD=${DB_ROOT_PASSWORD}
      - MYSQL_DATABASE=shlink
      - MYSQL_USER=shlink
      - MYSQL_PASSWORD=${DB_PASSWORD}
    volumes:
      - mysql_data:/var/lib/mysql

volumes:
  mysql_data:

docker-compose up -d
# 生成初始 API Key
docker exec shlink shlink api-key:generate

# 创建短链
curl -X POST https://go.yourdomain.com/rest/v3/short-urls \
  -H "X-Api-Key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "longUrl": "https://example.com/very/long/path",
    "customSlug": "launch2026",
    "tags": ["campaign", "spring"],
    "findIfExists": true
  }'

# 获取点击统计
curl https://go.yourdomain.com/rest/v3/short-urls/launch2026/visits \
  -H "X-Api-Key: YOUR_KEY"

# config/redirect-rules.yml
rules:
  - shortCode: sale2026
    conditions:
      - type: geo_country
        match: CN
        target: https://example.com/cn-sale
      - type: device_type
        match: mobile
        target: https://m.example.com/sale
    default: https://example.com/sale

version: '3'
services:
  yourls:
    image: yourls:latest
    restart: always
    ports:
      - "8080:80"
    environment:
      - YOURLS_DB_HOST=database
      - YOURLS_DB_USER=yourls
      - YOURLS_DB_PASS=${DB_PASSWORD}
      - YOURLS_DB_NAME=yourls
      - YOURLS_SITE=https://go.yourdomain.com
      - YOURLS_USER=admin
      - YOURLS_PASS=${ADMIN_PASSWORD}
    depends_on:
      - database

  database:
    image: mysql:5.7
    restart: always
    environment:
      - MYSQL_ROOT_PASSWORD=${DB_ROOT_PASSWORD}
      - MYSQL_DATABASE=yourls
      - MYSQL_USER=yourls
      - MYSQL_PASSWORD=${DB_PASSWORD}
    volumes:
      - mysql_data:/var/lib/mysql

volumes:
  mysql_data:

git clone https://github.com/Cydrobolt/polr.git
cd polr
composer install --no-dev
php artisan migrate
php artisan key:generate

-- 启用 Row Level Security
CREATE TABLE short_links (
    id BIGSERIAL PRIMARY KEY,
    slug VARCHAR(16) UNIQUE NOT NULL,
    target_url TEXT NOT NULL,
    title VARCHAR(200),
    clicks BIGINT DEFAULT 0,
    created_at TIMESTAMPTZ DEFAULT NOW(),
    expires_at TIMESTAMPTZ,
    is_active BOOLEAN DEFAULT true,
    tenant_id UUID REFERENCES auth.users(id)
);

-- RLS 策略：用户只能查看自己的链接
ALTER TABLE short_links ENABLE ROW LEVEL SECURITY;

CREATE POLICY "Users can only access own links"
    ON short_links
    FOR ALL
    USING (tenant_id = auth.uid());

-- 统计表（时序）
CREATE TABLE click_events (
    id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
    link_id BIGINT REFERENCES short_links(id),
    ip_hash VARCHAR(64),
    country_code CHAR(2),
    city VARCHAR(100),
    user_agent TEXT,
    referrer TEXT,
    created_at TIMESTAMPTZ DEFAULT NOW()
);

// supabase/functions/redirect/index.ts
import { serve } from 'https://deno.land/std@0.168.0/http/server.ts'
import { createClient } from 'https://esm.sh/@supabase/supabase-js@2'

serve(async (req) => {
  const slug = new URL(req.url).pathname.replace('/', '')
  const supabase = createClient(Deno.env.get('SUPABASE_URL')!, Deno.env.get('SUPABASE_ANON_KEY')!)

  // 1. 从数据库获取目标链接
  const { data: link } = await supabase
    .from('short_links')
    .select('target_url, is_active, expires_at')
    .eq('slug', slug)
    .single()

  if (!link || !link.is_active || (link.expires_at && new Date(link.expires_at) < new Date())) {
    return new Response('Not Found', { status: 404 })
  }

  // 2. 异步记录点击（不阻塞跳转）
  const eventData = {
    link_id: slug,
    ip_hash: await sha256(req.headers.get('x-forwarded-for') || ''),
    country_code: req.headers.get('cf-ipcountry'),
    referrer: req.headers.get('referer'),
    user_agent: req.headers.get('user-agent'),
  }

  // Edge Function 结束后异步触发
  supabase.from('click_events').insert(eventData).then(() => {})

  // 3. 302 临时跳转或 301 永久跳转
  return new Response(null, {
    status: 301,
    headers: {
      'Location': link.target_url,
      'Cache-Control': 'public, max-age=3600',
    },
  })
})

async function sha256(str: string): Promise<string> {
  const buf = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(str))
  return Array.from(new Uint8Array(buf)).map(b => b.toString(16).padStart(2, '0')).join('')
}

// supabase/functions/create-link/index.ts
serve(async (req) => {
  const { target_url, custom_slug, expires_in_days } = await req.json()

  // 生成 slug
  const slug = custom_slug || await generateUniqueSlug()

  const { data, error } = await supabase
    .from('short_links')
    .insert({
      slug,
      target_url,
      expires_at: expires_in_days ? new Date(Date.now() + expires_in_days * 86400000) : null,
      tenant_id: user.id,
    })
    .select()
    .single()

  return new Response(JSON.stringify(data), {
    headers: { 'Content-Type': 'application/json' },
  })
})

async function generateUniqueSlug(): Promise<string> {
  const chars = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ'
  while (true) {
    const slug = Array.from({ length: 6 }, () => chars[Math.floor(Math.random() * 62)]).join('')
    const { count } = await supabase.from('short_links').select('*', { count: 'exact' }).eq('slug', slug)
    if (count === 0) return slug
  }
}

# migrate_bitly_to_shlink.py
import requests

BITLY_TOKEN = "your_bitly_token"
SHLINK_URL = "https://go.yourdomain.com"
SHLINK_KEY = "your_shlink_api_key"

def fetch_bitly_links():
    links = []
    url = "https://api-ssl.bitly.com/v4/groups/default/bitlinks"
    headers = {"Authorization": f"Bearer {BITLY_TOKEN}"}

    while url:
        resp = requests.get(url, headers=headers)
        data = resp.json()
        links.extend(data['links'])
        url = data.get('pagination', {}).get('next')

    return links

def import_to_shlink(bitly_link):
    payload = {
        "longUrl": bitly_link['long_url'],
        "customSlug": bitly_link['id'].split('/')[-1],
        "tags": bitly_link.get('tags', []),
    }

    resp = requests.post(
        f"{SHLINK_URL}/rest/v3/short-urls",
        headers={"X-Api-Key": SHLINK_KEY, "Content-Type": "application/json"},
        json=payload
    )
    return resp.json()

if __name__ == "__main__":
    links = fetch_bitly_links()
    for link in links:
        result = import_to_shlink(link)
        print(f"Imported: {link['id']} → {result.get('shortUrl')}")

# 安全加固版 docker-compose
services:
  shlink:
    image: shlinkio/shlink:stable
    read_only: true          # 只读根目录
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /tmp:noexec,nosuid,size=100m
    # 不使用 root 运行
    user: "1000:1000"