2025 lines
66 KiB
Bash
2025 lines
66 KiB
Bash
#!/bin/bash
|
|
|
|
protocol_list=(
|
|
TUIC
|
|
Trojan
|
|
Hysteria2
|
|
VMess-WS
|
|
VMess-TCP
|
|
VMess-HTTP
|
|
VMess-QUIC
|
|
Shadowsocks
|
|
VMess-H2-TLS
|
|
VMess-WS-TLS
|
|
VLESS-H2-TLS
|
|
VLESS-WS-TLS
|
|
Trojan-H2-TLS
|
|
Trojan-WS-TLS
|
|
VMess-HTTPUpgrade-TLS
|
|
VLESS-HTTPUpgrade-TLS
|
|
Trojan-HTTPUpgrade-TLS
|
|
VLESS-REALITY
|
|
VLESS-HTTP2-REALITY
|
|
AnyTLS
|
|
# Direct
|
|
Socks
|
|
)
|
|
ss_method_list=(
|
|
aes-128-gcm
|
|
aes-256-gcm
|
|
chacha20-ietf-poly1305
|
|
xchacha20-ietf-poly1305
|
|
2022-blake3-aes-128-gcm
|
|
2022-blake3-aes-256-gcm
|
|
2022-blake3-chacha20-poly1305
|
|
)
|
|
mainmenu=(
|
|
"添加配置"
|
|
"更改配置"
|
|
"查看配置"
|
|
"删除配置"
|
|
"运行管理"
|
|
"更新"
|
|
"卸载"
|
|
"帮助"
|
|
"其他"
|
|
)
|
|
info_list=(
|
|
"协议 (protocol)"
|
|
"地址 (address)"
|
|
"端口 (port)"
|
|
"用户ID (id)"
|
|
"传输协议 (network)"
|
|
"伪装类型 (type)"
|
|
"伪装域名 (host)"
|
|
"路径 (path)"
|
|
"传输层安全 (TLS)"
|
|
"应用层协议协商 (Alpn)"
|
|
"密码 (password)"
|
|
"加密方式 (encryption)"
|
|
"链接 (URL)"
|
|
"目标地址 (remote addr)"
|
|
"目标端口 (remote port)"
|
|
"流控 (flow)"
|
|
"SNI (serverName)"
|
|
"指纹 (Fingerprint)"
|
|
"公钥 (Public key)"
|
|
"用户名 (Username)"
|
|
"跳过证书验证 (allowInsecure)"
|
|
"拥塞控制算法 (congestion_control)"
|
|
)
|
|
change_list=(
|
|
"更改协议"
|
|
"更改端口"
|
|
"更改域名"
|
|
"更改路径"
|
|
"更改密码"
|
|
"更改 UUID"
|
|
"更改加密方式"
|
|
"更改目标地址"
|
|
"更改目标端口"
|
|
"更改密钥"
|
|
"更改 SNI (serverName)"
|
|
"更改伪装网站"
|
|
"更改用户名 (Username)"
|
|
)
|
|
servername_list=(
|
|
www.amazon.com
|
|
www.ebay.com
|
|
www.paypal.com
|
|
www.cloudflare.com
|
|
dash.cloudflare.com
|
|
aws.amazon.com
|
|
)
|
|
|
|
# shuf fallback for systems without shuf (e.g., Alpine BusyBox)
|
|
if ! type -P shuf &>/dev/null; then
|
|
shuf() {
|
|
local min max n
|
|
while [[ $# -gt 0 ]]; do
|
|
case $1 in
|
|
-i) IFS=- read min max <<<"$2"; shift 2 ;;
|
|
-n) n=$2; shift 2 ;;
|
|
esac
|
|
done
|
|
echo $(( RANDOM % (max - min + 1) + min ))
|
|
}
|
|
fi
|
|
|
|
is_random_ss_method=${ss_method_list[$(shuf -i 4-6 -n1)]} # random only use ss2022
|
|
is_random_servername=${servername_list[$(shuf -i 0-${#servername_list[@]} -n1) - 1]}
|
|
|
|
msg() {
|
|
echo -e "$@"
|
|
}
|
|
|
|
msg_ul() {
|
|
echo -e "\e[4m$@\e[0m"
|
|
}
|
|
|
|
# pause
|
|
pause() {
|
|
echo
|
|
echo -ne "按 $(_green Enter 回车键) 继续, 或按 $(_red Ctrl + C) 取消."
|
|
read -rs -d $'\n'
|
|
echo
|
|
}
|
|
|
|
get_uuid() {
|
|
tmp_uuid=$(cat /proc/sys/kernel/random/uuid)
|
|
}
|
|
|
|
get_ip() {
|
|
[[ $ip || $is_no_auto_tls || $is_gen || $is_dont_get_ip ]] && return
|
|
export "$(_wget -4 -qO- https://one.one.one.one/cdn-cgi/trace | grep ip=)" &>/dev/null
|
|
[[ ! $ip ]] && export "$(_wget -6 -qO- https://one.one.one.one/cdn-cgi/trace | grep ip=)" &>/dev/null
|
|
[[ ! $ip ]] && {
|
|
err "获取服务器 IP 失败.."
|
|
}
|
|
}
|
|
|
|
get_port() {
|
|
is_count=0
|
|
while :; do
|
|
((is_count++))
|
|
if [[ $is_count -ge 233 ]]; then
|
|
err "自动获取可用端口失败次数达到 233 次, 请检查端口占用情况."
|
|
fi
|
|
tmp_port=$(shuf -i 445-65535 -n 1)
|
|
[[ ! $(is_test port_used $tmp_port) && $tmp_port != $port ]] && break
|
|
done
|
|
}
|
|
|
|
update_caddyfile_fallback() {
|
|
[[ ! -f $is_caddyfile ]] && return
|
|
# Backup Caddyfile
|
|
cp -f $is_caddyfile ${is_caddyfile}.bak
|
|
|
|
# 1. Replace servers :443 with servers :4443
|
|
sed -i 's/servers :443/servers :4443/g' $is_caddyfile
|
|
|
|
# 2. Replace any site block headers explicit :443 with :4443
|
|
sed -i 's/:443[[:space:]]*{/:4443 {/g' $is_caddyfile
|
|
|
|
# 3. Add or update https_port 4443 in global block
|
|
if [[ $(grep "https_port" $is_caddyfile) ]]; then
|
|
# Replace existing https_port with 4443
|
|
sed -i 's/https_port[[:space:]]\+[0-9]\+/https_port 4443/g' $is_caddyfile
|
|
else
|
|
# Find first { and insert https_port 4443 on the next line
|
|
sed -i '0,/^[[:space:]]*{[[:space:]]*$/s//{\n https_port 4443/' $is_caddyfile
|
|
fi
|
|
}
|
|
|
|
install_haproxy() {
|
|
[[ $(type -P haproxy) ]] && return
|
|
msg "正在安装 HAProxy 用于四层端口分流..."
|
|
if [[ $(type -P apt-get) ]]; then
|
|
apt-get update && apt-get install -y haproxy
|
|
elif [[ $(type -P dnf) ]]; then
|
|
dnf install -y haproxy
|
|
elif [[ $(type -P yum) ]]; then
|
|
yum install -y haproxy
|
|
else
|
|
err "未知的软件包管理器，请手动安装 haproxy！"
|
|
fi
|
|
}
|
|
|
|
restore_caddy_default() {
|
|
[[ ! -f $is_caddyfile ]] && return
|
|
if [[ -f ${is_caddyfile}.bak ]]; then
|
|
mv -f ${is_caddyfile}.bak $is_caddyfile
|
|
else
|
|
sed -i 's/servers :4443/servers :443/g' $is_caddyfile
|
|
sed -i 's/:4443[[:space:]]*{/:443 {/g' $is_caddyfile
|
|
sed -i 's/https_port 4443/https_port 443/g' $is_caddyfile
|
|
fi
|
|
systemctl restart caddy >/dev/null 2>&1
|
|
}
|
|
|
|
update_haproxy_config() {
|
|
[[ ! -d $is_conf_dir ]] && return
|
|
|
|
local haproxy_conf="/etc/haproxy/haproxy.cfg"
|
|
[[ ! -d /etc/haproxy ]] && mkdir -p /etc/haproxy
|
|
|
|
[[ -f $haproxy_conf ]] && cp -f $haproxy_conf ${haproxy_conf}.bak
|
|
|
|
cat >$haproxy_conf <<'EOF'
|
|
global
|
|
log /dev/log local0
|
|
log /dev/log local1 notice
|
|
chroot /var/lib/haproxy
|
|
user haproxy
|
|
group haproxy
|
|
daemon
|
|
|
|
defaults
|
|
log global
|
|
mode tcp
|
|
timeout connect 5s
|
|
timeout client 50s
|
|
timeout server 50s
|
|
|
|
frontend https-in
|
|
bind *:443
|
|
mode tcp
|
|
tcp-request inspect-delay 5s
|
|
tcp-request content accept if { req_ssl_hello_type 1 }
|
|
EOF
|
|
|
|
local acl_rules=""
|
|
local use_backend_rules=""
|
|
local backends=""
|
|
local has_reality=0
|
|
|
|
for config in $is_conf_dir/*.json; do
|
|
[[ ! -f $config ]] && continue
|
|
local json_clean=$(cat "$config" | sed s#//.*##)
|
|
|
|
local is_real=$(jq -r '.inbounds[0].tls.reality.enabled // empty' <<<"$json_clean")
|
|
[[ $is_real != "true" ]] && continue
|
|
|
|
local local_port=$(jq -r '.inbounds[0].listen_port // empty' <<<"$json_clean")
|
|
local sni=$(jq -r '.inbounds[0].tls.server_name // empty' <<<"$json_clean")
|
|
|
|
[[ ! $local_port || ! $sni ]] && continue
|
|
[[ $local_port == "443" ]] && continue
|
|
|
|
has_reality=1
|
|
local backend_name="singbox_backend_${local_port}"
|
|
|
|
acl_rules="${acl_rules}\n acl is_reality_${local_port} req.ssl_sni -i ${sni}"
|
|
use_backend_rules="${use_backend_rules}\n use_backend ${backend_name} if is_reality_${local_port}"
|
|
|
|
backends="${backends}\n\nbackend ${backend_name}\n mode tcp\n server srv1 127.0.0.1:${local_port}"
|
|
done
|
|
|
|
if [[ $has_reality -eq 1 ]]; then
|
|
echo -e "$acl_rules" >>$haproxy_conf
|
|
echo -e "$use_backend_rules" >>$haproxy_conf
|
|
echo -e " default_backend caddy_backend" >>$haproxy_conf
|
|
|
|
cat >>$haproxy_conf <<'EOF'
|
|
|
|
backend caddy_backend
|
|
mode tcp
|
|
server caddy 127.0.0.1:4443
|
|
EOF
|
|
echo -e "$backends" >>$haproxy_conf
|
|
|
|
systemctl daemon-reload
|
|
systemctl enable haproxy >/dev/null 2>&1
|
|
systemctl restart haproxy >/dev/null 2>&1
|
|
else
|
|
if systemctl is-active --quiet haproxy; then
|
|
systemctl stop haproxy >/dev/null 2>&1
|
|
systemctl disable haproxy >/dev/null 2>&1
|
|
fi
|
|
restore_caddy_default
|
|
fi
|
|
}
|
|
|
|
|
|
get_pbk() {
|
|
is_tmp_pbk=($($is_core_bin generate reality-keypair | sed 's/.*://'))
|
|
is_public_key=${is_tmp_pbk[1]}
|
|
is_private_key=${is_tmp_pbk[0]}
|
|
}
|
|
|
|
show_list() {
|
|
PS3=''
|
|
COLUMNS=1
|
|
select i in "$@"; do echo; done &
|
|
wait
|
|
# i=0
|
|
# for v in "$@"; do
|
|
# ((i++))
|
|
# echo "$i) $v"
|
|
# done
|
|
# echo
|
|
|
|
}
|
|
|
|
is_test() {
|
|
case $1 in
|
|
number)
|
|
echo $2 | grep -E '^[1-9][0-9]?+$'
|
|
;;
|
|
port)
|
|
if [[ $(is_test number $2) ]]; then
|
|
[[ $2 -le 65535 ]] && echo ok
|
|
fi
|
|
;;
|
|
port_used)
|
|
[[ $(is_port_used $2) && ! $is_cant_test_port ]] && echo ok
|
|
;;
|
|
domain)
|
|
echo $2 | grep -E -i '^\w(\w|\-|\.)?+\.\w+$'
|
|
;;
|
|
path)
|
|
echo $2 | grep -E -i '^\/\w(\w|\-|\/)?+\w$'
|
|
;;
|
|
uuid)
|
|
echo $2 | grep -E -i '[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}'
|
|
;;
|
|
esac
|
|
|
|
}
|
|
|
|
is_port_used() {
|
|
if [[ $(type -P netstat) ]]; then
|
|
[[ ! $is_used_port ]] && is_used_port="$(netstat -tunlp | sed -n 's/.*:\([0-9]\+\).*/\1/p' | sort -nu)"
|
|
echo $is_used_port | sed 's/ /\n/g' | grep ^${1}$
|
|
return
|
|
fi
|
|
if [[ $(type -P ss) ]]; then
|
|
[[ ! $is_used_port ]] && is_used_port="$(ss -tunlp | sed -n 's/.*:\([0-9]\+\).*/\1/p' | sort -nu)"
|
|
echo $is_used_port | sed 's/ /\n/g' | grep ^${1}$
|
|
return
|
|
fi
|
|
is_cant_test_port=1
|
|
msg "$is_warn 无法检测端口是否可用."
|
|
msg "请执行: $(_yellow "${cmd} update -y; ${cmd} install net-tools -y") 来修复此问题."
|
|
}
|
|
|
|
# ask input a string or pick a option for list.
|
|
ask() {
|
|
case $1 in
|
|
set_ss_method)
|
|
is_tmp_list=(${ss_method_list[@]})
|
|
is_default_arg=$is_random_ss_method
|
|
is_opt_msg="\n请选择加密方式:\n"
|
|
is_opt_input_msg="(默认\e[92m $is_default_arg\e[0m):"
|
|
is_ask_set=ss_method
|
|
;;
|
|
set_protocol)
|
|
is_tmp_list=(${protocol_list[@]})
|
|
[[ $is_no_auto_tls ]] && {
|
|
unset is_tmp_list
|
|
for v in ${protocol_list[@]}; do
|
|
[[ $(grep -i "\-tls$" <<<$v) ]] && is_tmp_list=(${is_tmp_list[@]} $v)
|
|
done
|
|
}
|
|
is_opt_msg="\n请选择协议:\n"
|
|
is_ask_set=is_new_protocol
|
|
;;
|
|
set_change_list)
|
|
is_tmp_list=()
|
|
for v in ${is_can_change[@]}; do
|
|
is_tmp_list+=("${change_list[$v]}")
|
|
done
|
|
is_opt_msg="\n请选择更改:\n"
|
|
is_ask_set=is_change_str
|
|
is_opt_input_msg=$3
|
|
;;
|
|
string)
|
|
is_ask_set=$2
|
|
is_opt_input_msg=$3
|
|
;;
|
|
list)
|
|
is_ask_set=$2
|
|
[[ ! $is_tmp_list ]] && is_tmp_list=($3)
|
|
is_opt_msg=$4
|
|
is_opt_input_msg=$5
|
|
;;
|
|
get_config_file)
|
|
is_tmp_list=("${is_all_json[@]}")
|
|
is_opt_msg="\n请选择配置:\n"
|
|
is_ask_set=is_config_file
|
|
;;
|
|
mainmenu)
|
|
is_tmp_list=("${mainmenu[@]}")
|
|
is_ask_set=is_main_pick
|
|
is_emtpy_exit=1
|
|
;;
|
|
esac
|
|
msg $is_opt_msg
|
|
[[ ! $is_opt_input_msg ]] && is_opt_input_msg="请选择 [\e[91m1-${#is_tmp_list[@]}\e[0m]:"
|
|
[[ $is_tmp_list ]] && show_list "${is_tmp_list[@]}"
|
|
while :; do
|
|
echo -ne $is_opt_input_msg
|
|
read REPLY
|
|
[[ ! $REPLY && $is_emtpy_exit ]] && exit
|
|
[[ ! $REPLY && $is_default_arg ]] && export $is_ask_set=$is_default_arg && break
|
|
[[ "$REPLY" == "${is_str}2${is_get}3${is_opt}3" && $is_ask_set == 'is_main_pick' ]] && {
|
|
msg "\n${is_get}2${is_str}3${is_msg}3b${is_tmp}o${is_opt}y\n" && exit
|
|
}
|
|
if [[ ! $is_tmp_list ]]; then
|
|
[[ $(grep port <<<$is_ask_set) ]] && {
|
|
[[ ! $(is_test port "$REPLY") ]] && {
|
|
msg "$is_err 请输入正确的端口, 可选(1-65535)"
|
|
continue
|
|
}
|
|
if [[ $REPLY == 443 && $is_caddy && ${is_new_protocol,,} =~ "reality" ]]; then
|
|
msg "\n检测到你的系统已启用 Caddy。"
|
|
msg "你可以选择启用 REALITY 回落分流功能，将非科学上网流量转发给本地 Caddy (4443 端口)。"
|
|
if [[ $(is_test port_used 443) ]]; then
|
|
msg "这需要自动或手动将 Caddyfile 中的默认 https 端口修改为 4443 并重启 Caddy。"
|
|
else
|
|
msg "检测到 443 端口当前空闲（可能是已转移到了 4443 端口）。"
|
|
fi
|
|
echo -ne "是否启用 Caddy 回落分流？(y/n):"
|
|
read is_enable_fallback
|
|
if [[ $is_enable_fallback =~ ^[Yy]$ ]]; then
|
|
is_reality_fallback=1
|
|
export $is_ask_set=$REPLY
|
|
break
|
|
fi
|
|
fi
|
|
if [[ $(is_test port_used $REPLY) && $is_ask_set != 'door_port' ]]; then
|
|
msg "$is_err 无法使用 ($REPLY) 端口."
|
|
continue
|
|
fi
|
|
}
|
|
[[ $(grep path <<<$is_ask_set) && ! $(is_test path "$REPLY") ]] && {
|
|
[[ ! $tmp_uuid ]] && get_uuid
|
|
msg "$is_err 请输入正确的路径, 例如: /$tmp_uuid"
|
|
continue
|
|
}
|
|
[[ $(grep uuid <<<$is_ask_set) && ! $(is_test uuid "$REPLY") ]] && {
|
|
[[ ! $tmp_uuid ]] && get_uuid
|
|
msg "$is_err 请输入正确的 UUID, 例如: $tmp_uuid"
|
|
continue
|
|
}
|
|
[[ $(grep ^y$ <<<$is_ask_set) ]] && {
|
|
[[ $(grep -i ^y$ <<<"$REPLY") ]] && break
|
|
msg "请输入 (y)"
|
|
continue
|
|
}
|
|
[[ $REPLY ]] && export $is_ask_set=$REPLY && msg "使用: ${!is_ask_set}" && break
|
|
else
|
|
[[ $(is_test number "$REPLY") ]] && is_ask_result=${is_tmp_list[$REPLY - 1]}
|
|
[[ $is_ask_result ]] && export $is_ask_set="$is_ask_result" && msg "选择: ${!is_ask_set}" && break
|
|
fi
|
|
|
|
msg "输入${is_err}"
|
|
done
|
|
unset is_opt_msg is_opt_input_msg is_tmp_list is_ask_result is_default_arg is_emtpy_exit
|
|
}
|
|
|
|
# create file
|
|
create() {
|
|
case $1 in
|
|
server)
|
|
is_tls=none
|
|
get new
|
|
# listen
|
|
is_listen='listen: "::"'
|
|
# file name
|
|
if [[ $host ]]; then
|
|
is_config_name=$2-${host}.json
|
|
is_listen='listen: "127.0.0.1"'
|
|
elif [[ $is_anytls_domain ]]; then
|
|
is_config_name=$2-${is_anytls_domain}.json
|
|
else
|
|
is_config_name=$2-${port}.json
|
|
fi
|
|
is_json_file=$is_conf_dir/$is_config_name
|
|
# get json
|
|
[[ $is_change || ! $json_str ]] && get protocol $2
|
|
[[ $net == "reality" ]] && is_add_public_key=",outbounds:[{type:\"direct\"},{tag:\"public_key_$is_public_key\",type:\"direct\"}]"
|
|
local write_port=$port
|
|
if [[ $is_reality_fallback ]]; then
|
|
get_port
|
|
write_port=$tmp_port
|
|
fi
|
|
is_new_json=$(jq "{inbounds:[{tag:\"$is_config_name\",type:\"$is_protocol\",$is_listen,listen_port:$write_port,$json_str}]$is_add_public_key}" <<<{})
|
|
[[ $is_test_json ]] && return # tmp test
|
|
# only show json, dont save to file.
|
|
[[ $is_gen ]] && {
|
|
msg
|
|
jq <<<$is_new_json
|
|
msg
|
|
return
|
|
}
|
|
# del old file
|
|
[[ $is_config_file ]] && is_no_del_msg=1 && del $is_config_file
|
|
# save json to file
|
|
cat <<<$is_new_json >$is_json_file
|
|
if [[ ! -f $is_config_json ]]; then
|
|
# config.json
|
|
create config.json
|
|
fi
|
|
# If reality fallback is enabled, automatically update Caddyfile!
|
|
if [[ $is_reality_fallback ]]; then
|
|
msg "\n自动调整 Caddy 配置文件以支持 4443 端口回落..."
|
|
update_caddyfile_fallback
|
|
msg "Caddy 配置文件更新成功，备份已保存至 ${is_caddyfile}.bak"
|
|
msg "正在重启 Caddy 以释放 443 端口..."
|
|
manage restart caddy &>/dev/null
|
|
sleep 1
|
|
install_haproxy
|
|
update_haproxy_config
|
|
fi
|
|
# caddy auto tls
|
|
[[ $is_caddy && $host && ! $is_no_auto_tls ]] && {
|
|
create caddy $net
|
|
}
|
|
# restart core
|
|
manage restart &
|
|
;;
|
|
client)
|
|
is_tls=tls
|
|
is_client=1
|
|
get info $2
|
|
[[ ! $is_client_id_json ]] && err "($is_config_name) 不支持生成客户端配置."
|
|
is_new_json=$(jq '{outbounds:[{tag:'\"$is_config_name\"',protocol:'\"$is_protocol\"','"$is_client_id_json"','"$is_stream"'}]}' <<<{})
|
|
msg
|
|
jq <<<$is_new_json
|
|
msg
|
|
;;
|
|
caddy)
|
|
load caddy.sh
|
|
[[ $is_install_caddy ]] && caddy_config new
|
|
[[ ! $(grep "$is_caddy_conf" $is_caddyfile) ]] && {
|
|
msg "import $is_caddy_conf/*.conf" >>$is_caddyfile
|
|
}
|
|
[[ ! -d $is_caddy_conf ]] && mkdir -p $is_caddy_conf
|
|
caddy_config $2
|
|
manage restart caddy &
|
|
;;
|
|
config.json)
|
|
is_log='log:{output:"/var/log/'$is_core'/access.log",level:"info","timestamp":true}'
|
|
is_dns='dns:{}'
|
|
is_ntp='ntp:{"enabled":true,"server":"time.apple.com"},'
|
|
if [[ -f $is_config_json ]]; then
|
|
[[ $(jq .ntp.enabled $is_config_json) != "true" ]] && is_ntp=
|
|
else
|
|
[[ ! $is_ntp_on ]] && is_ntp=
|
|
fi
|
|
is_outbounds='outbounds:[{tag:"direct",type:"direct"}]'
|
|
is_server_config_json=$(jq "{$is_log,$is_dns,$is_ntp$is_outbounds}" <<<{})
|
|
cat <<<$is_server_config_json >$is_config_json
|
|
manage restart &
|
|
;;
|
|
esac
|
|
}
|
|
|
|
# change config file
|
|
change() {
|
|
is_change=1
|
|
is_dont_show_info=1
|
|
if [[ $2 ]]; then
|
|
case ${2,,} in
|
|
full)
|
|
is_change_id=full
|
|
;;
|
|
new)
|
|
is_change_id=0
|
|
;;
|
|
port)
|
|
is_change_id=1
|
|
;;
|
|
host)
|
|
is_change_id=2
|
|
;;
|
|
path)
|
|
is_change_id=3
|
|
;;
|
|
pass | passwd | password)
|
|
is_change_id=4
|
|
;;
|
|
id | uuid)
|
|
is_change_id=5
|
|
;;
|
|
ssm | method | ss-method | ss_method)
|
|
is_change_id=6
|
|
;;
|
|
dda | door-addr | door_addr)
|
|
is_change_id=7
|
|
;;
|
|
ddp | door-port | door_port)
|
|
is_change_id=8
|
|
;;
|
|
key | publickey | privatekey)
|
|
is_change_id=9
|
|
;;
|
|
sni | servername | servernames)
|
|
is_change_id=10
|
|
;;
|
|
web | proxy-site)
|
|
is_change_id=11
|
|
;;
|
|
*)
|
|
[[ $is_try_change ]] && return
|
|
err "无法识别 ($2) 更改类型."
|
|
;;
|
|
esac
|
|
fi
|
|
[[ $is_try_change ]] && return
|
|
[[ $is_dont_auto_exit ]] && {
|
|
get info $1
|
|
} || {
|
|
[[ $is_change_id ]] && {
|
|
is_change_msg=${change_list[$is_change_id]}
|
|
[[ $is_change_id == 'full' ]] && {
|
|
[[ $3 ]] && is_change_msg="更改多个参数" || is_change_msg=
|
|
}
|
|
[[ $is_change_msg ]] && _green "\n快速执行: $is_change_msg"
|
|
}
|
|
info $1
|
|
[[ $is_auto_get_config ]] && msg "\n自动选择: $is_config_file"
|
|
}
|
|
is_old_net=$net
|
|
[[ $is_tcp_http ]] && net=http
|
|
[[ $host ]] && net=$is_protocol-$net-tls
|
|
[[ $is_reality && $net_type =~ 'http' ]] && net=rh2
|
|
|
|
[[ $3 == 'auto' ]] && is_auto=1
|
|
# if is_dont_show_info exist, cant show info.
|
|
is_dont_show_info=
|
|
# if not prefer args, show change list and then get change id.
|
|
[[ ! $is_change_id ]] && {
|
|
ask set_change_list
|
|
is_change_id=${is_can_change[$REPLY - 1]}
|
|
}
|
|
case $is_change_id in
|
|
full)
|
|
add $net ${@:3}
|
|
;;
|
|
0)
|
|
# new protocol
|
|
is_set_new_protocol=1
|
|
add ${@:3}
|
|
;;
|
|
1)
|
|
# new port
|
|
is_new_port=$3
|
|
[[ $host && ! $is_caddy || $is_no_auto_tls ]] && err "($is_config_file) 不支持更改端口, 因为没啥意义."
|
|
if [[ $is_new_port && ! $is_auto ]]; then
|
|
[[ ! $(is_test port $is_new_port) ]] && err "请输入正确的端口, 可选(1-65535)"
|
|
[[ $is_new_port != 443 && $(is_test port_used $is_new_port) ]] && err "无法使用 ($is_new_port) 端口"
|
|
fi
|
|
[[ $is_auto ]] && get_port && is_new_port=$tmp_port
|
|
[[ ! $is_new_port ]] && ask string is_new_port "请输入新端口:"
|
|
if [[ $is_caddy && $host ]]; then
|
|
net=$is_old_net
|
|
is_https_port=$is_new_port
|
|
load caddy.sh
|
|
caddy_config $net
|
|
manage restart caddy &
|
|
info
|
|
else
|
|
add $net $is_new_port
|
|
fi
|
|
;;
|
|
2)
|
|
# new host
|
|
is_new_host=$3
|
|
[[ ! $host ]] && err "($is_config_file) 不支持更改域名."
|
|
[[ ! $is_new_host ]] && ask string is_new_host "请输入新域名:"
|
|
old_host=$host # del old host
|
|
add $net $is_new_host
|
|
;;
|
|
3)
|
|
# new path
|
|
is_new_path=$3
|
|
[[ ! $path ]] && err "($is_config_file) 不支持更改路径."
|
|
[[ $is_auto ]] && get_uuid && is_new_path=/$tmp_uuid
|
|
[[ ! $is_new_path ]] && ask string is_new_path "请输入新路径:"
|
|
add $net auto auto $is_new_path
|
|
;;
|
|
4)
|
|
# new password
|
|
is_new_pass=$3
|
|
if [[ $ss_password || $password ]]; then
|
|
[[ $is_auto ]] && {
|
|
get_uuid && is_new_pass=$tmp_uuid
|
|
[[ $ss_password ]] && is_new_pass=$(get ss2022)
|
|
}
|
|
else
|
|
err "($is_config_file) 不支持更改密码."
|
|
fi
|
|
[[ ! $is_new_pass ]] && ask string is_new_pass "请输入新密码:"
|
|
password=$is_new_pass
|
|
ss_password=$is_new_pass
|
|
is_socks_pass=$is_new_pass
|
|
add $net
|
|
;;
|
|
5)
|
|
# new uuid
|
|
is_new_uuid=$3
|
|
[[ ! $uuid ]] && err "($is_config_file) 不支持更改 UUID."
|
|
[[ $is_auto ]] && get_uuid && is_new_uuid=$tmp_uuid
|
|
[[ ! $is_new_uuid ]] && ask string is_new_uuid "请输入新 UUID:"
|
|
add $net auto $is_new_uuid
|
|
;;
|
|
6)
|
|
# new method
|
|
is_new_method=$3
|
|
[[ $net != 'ss' ]] && err "($is_config_file) 不支持更改加密方式."
|
|
[[ $is_auto ]] && is_new_method=$is_random_ss_method
|
|
[[ ! $is_new_method ]] && {
|
|
ask set_ss_method
|
|
is_new_method=$ss_method
|
|
}
|
|
add $net auto auto $is_new_method
|
|
;;
|
|
7)
|
|
# new remote addr
|
|
is_new_door_addr=$3
|
|
[[ $net != 'direct' ]] && err "($is_config_file) 不支持更改目标地址."
|
|
[[ ! $is_new_door_addr ]] && ask string is_new_door_addr "请输入新的目标地址:"
|
|
door_addr=$is_new_door_addr
|
|
add $net
|
|
;;
|
|
8)
|
|
# new remote port
|
|
is_new_door_port=$3
|
|
[[ $net != 'direct' ]] && err "($is_config_file) 不支持更改目标端口."
|
|
[[ ! $is_new_door_port ]] && {
|
|
ask string door_port "请输入新的目标端口:"
|
|
is_new_door_port=$door_port
|
|
}
|
|
add $net auto auto $is_new_door_port
|
|
;;
|
|
9)
|
|
# new is_private_key is_public_key
|
|
is_new_private_key=$3
|
|
is_new_public_key=$4
|
|
[[ ! $is_reality ]] && err "($is_config_file) 不支持更改密钥."
|
|
if [[ $is_auto ]]; then
|
|
get_pbk
|
|
add $net
|
|
else
|
|
[[ $is_new_private_key && ! $is_new_public_key ]] && {
|
|
err "无法找到 Public key."
|
|
}
|
|
[[ ! $is_new_private_key ]] && ask string is_new_private_key "请输入新 Private key:"
|
|
[[ ! $is_new_public_key ]] && ask string is_new_public_key "请输入新 Public key:"
|
|
if [[ $is_new_private_key == $is_new_public_key ]]; then
|
|
err "Private key 和 Public key 不能一样."
|
|
fi
|
|
is_tmp_json=$is_conf_dir/$is_config_file-$uuid
|
|
cp -f $is_conf_dir/$is_config_file $is_tmp_json
|
|
sed -i s#$is_private_key #$is_new_private_key# $is_tmp_json
|
|
$is_core_bin check -c $is_tmp_json &>/dev/null
|
|
if [[ $? != 0 ]]; then
|
|
is_key_err=1
|
|
is_key_err_msg="Private key 无法通过测试."
|
|
fi
|
|
sed -i s#$is_new_private_key #$is_new_public_key# $is_tmp_json
|
|
$is_core_bin check -c $is_tmp_json &>/dev/null
|
|
if [[ $? != 0 ]]; then
|
|
is_key_err=1
|
|
is_key_err_msg+="Public key 无法通过测试."
|
|
fi
|
|
rm $is_tmp_json
|
|
[[ $is_key_err ]] && err $is_key_err_msg
|
|
is_private_key=$is_new_private_key
|
|
is_public_key=$is_new_public_key
|
|
is_test_json=
|
|
add $net
|
|
fi
|
|
;;
|
|
10)
|
|
# new serverName
|
|
is_new_servername=$3
|
|
[[ ! $is_reality ]] && err "($is_config_file) 不支持更改 serverName."
|
|
[[ $is_auto ]] && is_new_servername=$is_random_servername
|
|
[[ ! $is_new_servername ]] && ask string is_new_servername "请输入新的 serverName:"
|
|
is_servername=$is_new_servername
|
|
add $net
|
|
;;
|
|
11)
|
|
# new proxy site
|
|
is_new_proxy_site=$3
|
|
[[ ! $is_caddy && ! $host ]] && {
|
|
err "($is_config_file) 不支持更改伪装网站."
|
|
}
|
|
[[ ! -f $is_caddy_conf/${host}.conf.add ]] && err "无法配置伪装网站."
|
|
[[ ! $is_new_proxy_site ]] && ask string is_new_proxy_site "请输入新的伪装网站 (例如 example.com):"
|
|
proxy_site=$(sed 's#^.*//##;s#/$##' <<<$is_new_proxy_site)
|
|
load caddy.sh
|
|
caddy_config proxy
|
|
manage restart caddy &
|
|
msg "\n已更新伪装网站为: $(_green $proxy_site) \n"
|
|
;;
|
|
12)
|
|
# new socks user
|
|
[[ ! $is_socks_user ]] && err "($is_config_file) 不支持更改用户名 (Username)."
|
|
ask string is_socks_user "请输入新用户名 (Username):"
|
|
add $net
|
|
;;
|
|
esac
|
|
}
|
|
|
|
# delete config.
|
|
del() {
|
|
# dont get ip
|
|
is_dont_get_ip=1
|
|
[[ $is_conf_dir_empty ]] && return # not found any json file.
|
|
# get a config file
|
|
[[ ! $is_config_file ]] && get info $1
|
|
if [[ $is_config_file ]]; then
|
|
if [[ $is_main_start && ! $is_no_del_msg ]]; then
|
|
msg "\n是否删除配置文件?: $is_config_file"
|
|
pause
|
|
fi
|
|
rm -rf $is_conf_dir/"$is_config_file"
|
|
update_haproxy_config
|
|
[[ ! $is_new_json ]] && manage restart &
|
|
[[ ! $is_no_del_msg ]] && _green "\n已删除: $is_config_file\n"
|
|
|
|
[[ $is_caddy ]] && {
|
|
is_del_host=$host
|
|
[[ $is_change ]] && {
|
|
[[ ! $old_host ]] && return # no host exist or not set new host;
|
|
is_del_host=$old_host
|
|
}
|
|
[[ $is_del_host && $host != $old_host && -f $is_caddy_conf/$is_del_host.conf ]] && {
|
|
rm -rf $is_caddy_conf/$is_del_host.conf $is_caddy_conf/$is_del_host.conf.add
|
|
[[ ! $is_new_json ]] && manage restart caddy &
|
|
}
|
|
}
|
|
fi
|
|
if [[ ! $(ls $is_conf_dir | grep .json) && ! $is_change ]]; then
|
|
warn "当前配置目录为空! 因为你刚刚删除了最后一个配置文件."
|
|
is_conf_dir_empty=1
|
|
fi
|
|
unset is_dont_get_ip
|
|
[[ $is_dont_auto_exit ]] && unset is_config_file
|
|
}
|
|
|
|
# uninstall
|
|
uninstall() {
|
|
if [[ $is_caddy ]]; then
|
|
is_tmp_list=("卸载 $is_core_name" "卸载 ${is_core_name} & Caddy")
|
|
ask list is_do_uninstall
|
|
else
|
|
ask string y "是否卸载 ${is_core_name}? [y]:"
|
|
fi
|
|
# Clean up HAProxy and restore Caddy before removing files
|
|
if systemctl is-active --quiet haproxy >/dev/null 2>&1; then
|
|
systemctl stop haproxy >/dev/null 2>&1
|
|
systemctl disable haproxy >/dev/null 2>&1
|
|
if [[ $(type -P apt-get) ]]; then
|
|
apt-get purge -y haproxy >/dev/null 2>&1
|
|
apt-get autoremove -y >/dev/null 2>&1
|
|
elif [[ $(type -P dnf) ]]; then
|
|
dnf remove -y haproxy >/dev/null 2>&1
|
|
elif [[ $(type -P yum) ]]; then
|
|
yum remove -y haproxy >/dev/null 2>&1
|
|
fi
|
|
fi
|
|
# If Caddy is NOT being uninstalled (REPLY != '2'), we must restore Caddy back to port 443!
|
|
if [[ $REPLY != '2' ]]; then
|
|
restore_caddy_default
|
|
fi
|
|
|
|
manage stop &>/dev/null
|
|
manage disable &>/dev/null
|
|
rm -rf $is_core_dir $is_log_dir $is_sh_bin ${is_sh_bin/$is_core/sb}
|
|
if [[ $is_systemd ]]; then
|
|
rm -f /lib/systemd/system/$is_core.service
|
|
elif [[ $is_openrc ]]; then
|
|
rm -f /etc/init.d/$is_core
|
|
fi
|
|
sed -i "/$is_core/d" /root/.bashrc
|
|
# uninstall caddy; 2 is ask result
|
|
if [[ $REPLY == '2' ]]; then
|
|
manage stop caddy &>/dev/null
|
|
manage disable caddy &>/dev/null
|
|
if [[ $is_systemd ]]; then
|
|
rm -rf $is_caddy_dir $is_caddy_bin /lib/systemd/system/caddy.service
|
|
elif [[ $is_openrc ]]; then
|
|
rm -rf $is_caddy_dir $is_caddy_bin /etc/init.d/caddy
|
|
fi
|
|
fi
|
|
[[ $is_install_sh ]] && return # reinstall
|
|
_green "\n卸载完成!\n"
|
|
}
|
|
|
|
# manage run status
|
|
manage() {
|
|
[[ $is_dont_auto_exit ]] && return
|
|
case $1 in
|
|
1 | start)
|
|
is_do=start
|
|
is_do_msg=启动
|
|
is_test_run=1
|
|
;;
|
|
2 | stop)
|
|
is_do=stop
|
|
is_do_msg=停止
|
|
;;
|
|
3 | r | restart)
|
|
is_do=restart
|
|
is_do_msg=重启
|
|
is_test_run=1
|
|
;;
|
|
*)
|
|
is_do=$1
|
|
is_do_msg=$1
|
|
;;
|
|
esac
|
|
case $2 in
|
|
caddy)
|
|
is_do_name=$2
|
|
is_run_bin=$is_caddy_bin
|
|
is_do_name_msg=Caddy
|
|
;;
|
|
*)
|
|
is_do_name=$is_core
|
|
is_run_bin=$is_core_bin
|
|
is_do_name_msg=$is_core_name
|
|
;;
|
|
esac
|
|
if [[ $is_systemd ]]; then
|
|
systemctl $is_do $is_do_name 2>/dev/null
|
|
elif [[ $is_openrc ]]; then
|
|
case $is_do in
|
|
enable)
|
|
rc-update add $is_do_name default 2>/dev/null
|
|
;;
|
|
disable)
|
|
rc-update del $is_do_name default 2>/dev/null
|
|
;;
|
|
*)
|
|
rc-service $is_do_name $is_do 2>/dev/null
|
|
;;
|
|
esac
|
|
fi
|
|
[[ $is_test_run && ! $is_new_install ]] && {
|
|
sleep 2
|
|
if [[ ! $(pgrep -f $is_run_bin) ]]; then
|
|
is_run_fail=${is_do_name_msg,,}
|
|
[[ ! $is_no_manage_msg ]] && {
|
|
msg
|
|
warn "($is_do_msg) $is_do_name_msg 失败"
|
|
_yellow "检测到运行失败, 自动执行测试运行."
|
|
get test-run
|
|
_yellow "测试结束, 请按 Enter 退出."
|
|
}
|
|
fi
|
|
}
|
|
}
|
|
|
|
# add a config
|
|
add() {
|
|
is_lower=${1,,}
|
|
if [[ $is_lower ]]; then
|
|
case $is_lower in
|
|
ws | tcp | quic | http)
|
|
is_new_protocol=VMess-${is_lower^^}
|
|
;;
|
|
wss | h2 | hu | vws | vh2 | vhu | tws | th2 | thu)
|
|
is_new_protocol=$(sed -E "s/^V/VLESS-/;s/^T/Trojan-/;/^(W|H)/{s/^/VMess-/};s/WSS/WS/;s/HU/HTTPUpgrade/" <<<${is_lower^^})-TLS
|
|
;;
|
|
r | reality)
|
|
is_new_protocol=VLESS-REALITY
|
|
;;
|
|
rh2)
|
|
is_new_protocol=VLESS-HTTP2-REALITY
|
|
;;
|
|
ss)
|
|
is_new_protocol=Shadowsocks
|
|
;;
|
|
door | direct)
|
|
is_new_protocol=Direct
|
|
;;
|
|
tuic)
|
|
is_new_protocol=TUIC
|
|
;;
|
|
hy | hy2 | hysteria*)
|
|
is_new_protocol=Hysteria2
|
|
;;
|
|
trojan)
|
|
is_new_protocol=Trojan
|
|
;;
|
|
anytls)
|
|
is_new_protocol=AnyTLS
|
|
;;
|
|
socks)
|
|
is_new_protocol=Socks
|
|
;;
|
|
*)
|
|
for v in ${protocol_list[@]}; do
|
|
[[ $(grep -E -i "^$is_lower$" <<<$v) ]] && is_new_protocol=$v && break
|
|
done
|
|
|
|
[[ ! $is_new_protocol ]] && err "无法识别 ($1), 请使用: $is_core add [protocol] [args... | auto]"
|
|
;;
|
|
esac
|
|
fi
|
|
|
|
# no prefer protocol
|
|
[[ ! $is_new_protocol ]] && ask set_protocol
|
|
|
|
if [[ ${is_new_protocol,,} == 'anytls' ]]; then
|
|
is_core_major=$(echo "$is_core_ver" | cut -d. -f1)
|
|
is_core_minor=$(echo "$is_core_ver" | cut -d. -f2)
|
|
if [[ ${is_core_major:-0} -lt 1 || ${is_core_major:-0} -eq 1 && ${is_core_minor:-0} -lt 12 ]]; then
|
|
err "当前 sing-box 版本 ($is_core_ver) 不支持 AnyTLS，请先升级 sing-box core 到 1.12.0 或更高版本。"
|
|
fi
|
|
fi
|
|
|
|
case ${is_new_protocol,,} in
|
|
*-tls)
|
|
is_use_tls=1
|
|
is_use_host=$2
|
|
is_use_uuid=$3
|
|
is_use_path=$4
|
|
is_add_opts="[host] [uuid] [/path]"
|
|
;;
|
|
vmess* | tuic*)
|
|
is_use_port=$2
|
|
is_use_uuid=$3
|
|
is_add_opts="[port] [uuid]"
|
|
;;
|
|
trojan* | hysteria*)
|
|
is_use_port=$2
|
|
is_use_pass=$3
|
|
is_add_opts="[port] [password]"
|
|
;;
|
|
*reality*)
|
|
is_reality=1
|
|
is_use_port=$2
|
|
is_use_uuid=$3
|
|
is_use_servername=$4
|
|
is_add_opts="[port] [uuid] [sni]"
|
|
;;
|
|
shadowsocks)
|
|
is_use_port=$2
|
|
is_use_pass=$3
|
|
is_use_method=$4
|
|
is_add_opts="[port] [password] [method]"
|
|
;;
|
|
direct)
|
|
is_use_port=$2
|
|
is_use_door_addr=$3
|
|
is_use_door_port=$4
|
|
is_add_opts="[port] [remote_addr] [remote_port]"
|
|
;;
|
|
anytls*)
|
|
is_use_port=$2
|
|
is_use_pass=$3
|
|
[[ $4 ]] && is_anytls_domain=$4
|
|
is_add_opts="[port] [password] [domain]"
|
|
;;
|
|
socks)
|
|
is_socks=1
|
|
is_use_port=$2
|
|
is_use_socks_user=$3
|
|
is_use_socks_pass=$4
|
|
is_add_opts="[port] [username] [password]"
|
|
;;
|
|
esac
|
|
|
|
[[ $1 && ! $is_change ]] && {
|
|
msg "\n使用协议: $is_new_protocol"
|
|
# err msg tips
|
|
is_err_tips="\n\n请使用: $(_green $is_core add $1 $is_add_opts) 来添加 $is_new_protocol 配置"
|
|
}
|
|
|
|
# remove old protocol args
|
|
if [[ $is_set_new_protocol ]]; then
|
|
case $is_old_net in
|
|
h2 | ws | httpupgrade)
|
|
old_host=$host
|
|
[[ ! $is_use_tls ]] && unset host is_no_auto_tls
|
|
;;
|
|
reality)
|
|
net_type=
|
|
[[ ! $(grep -i reality <<<$is_new_protocol) ]] && is_reality=
|
|
;;
|
|
ss)
|
|
[[ $(is_test uuid $ss_password) ]] && uuid=$ss_password
|
|
;;
|
|
esac
|
|
[[ ! $(is_test uuid $uuid) ]] && uuid=
|
|
[[ $(is_test uuid $password) ]] && uuid=$password
|
|
fi
|
|
|
|
# no-auto-tls only use h2,ws,grpc
|
|
if [[ $is_no_auto_tls && ! $is_use_tls ]]; then
|
|
err "$is_new_protocol 不支持手动配置 tls."
|
|
fi
|
|
|
|
# prefer args.
|
|
if [[ $2 ]]; then
|
|
for v in is_use_port is_use_uuid is_use_host is_use_path is_use_pass is_use_method is_use_door_addr is_use_door_port; do
|
|
[[ ${!v} == 'auto' ]] && unset $v
|
|
done
|
|
|
|
if [[ $is_use_port ]]; then
|
|
[[ ! $(is_test port ${is_use_port}) ]] && {
|
|
err "($is_use_port) 不是一个有效的端口. $is_err_tips"
|
|
}
|
|
if [[ $is_use_port == 443 && $is_caddy && ${is_new_protocol,,} =~ "reality" ]]; then
|
|
msg "\n检测到你的系统已启用 Caddy。"
|
|
msg "你可以选择启用 REALITY 回落分流功能，将非科学上网流量转发给本地 Caddy (4443 端口)。"
|
|
if [[ $(is_test port_used 443) ]]; then
|
|
msg "这需要自动或手动将 Caddyfile 中的默认 https 端口修改为 4443 并重启 Caddy。"
|
|
else
|
|
msg "检测到 443 端口当前空闲（可能是已转移到了 4443 端口）。"
|
|
fi
|
|
echo -ne "是否启用 Caddy 回落分流？(y/n):"
|
|
read is_enable_fallback
|
|
if [[ $is_enable_fallback =~ ^[Yy]$ ]]; then
|
|
is_reality_fallback=1
|
|
fi
|
|
fi
|
|
[[ $(is_test port_used $is_use_port) && ! $is_gen && ! $is_reality_fallback ]] && {
|
|
err "无法使用 ($is_use_port) 端口. $is_err_tips"
|
|
}
|
|
port=$is_use_port
|
|
fi
|
|
if [[ $is_use_door_port ]]; then
|
|
[[ ! $(is_test port ${is_use_door_port}) ]] && {
|
|
err "(${is_use_door_port}) 不是一个有效的目标端口. $is_err_tips"
|
|
}
|
|
door_port=$is_use_door_port
|
|
fi
|
|
if [[ $is_use_uuid ]]; then
|
|
[[ ! $(is_test uuid $is_use_uuid) ]] && {
|
|
err "($is_use_uuid) 不是一个有效的 UUID. $is_err_tips"
|
|
}
|
|
uuid=$is_use_uuid
|
|
fi
|
|
if [[ $is_use_path ]]; then
|
|
[[ ! $(is_test path $is_use_path) ]] && {
|
|
err "($is_use_path) 不是有效的路径. $is_err_tips"
|
|
}
|
|
path=$is_use_path
|
|
fi
|
|
if [[ $is_use_method ]]; then
|
|
is_tmp_use_name=加密方式
|
|
is_tmp_list=${ss_method_list[@]}
|
|
for v in ${is_tmp_list[@]}; do
|
|
[[ $(grep -E -i "^${is_use_method}$" <<<$v) ]] && is_tmp_use_type=$v && break
|
|
done
|
|
[[ ! ${is_tmp_use_type} ]] && {
|
|
warn "(${is_use_method}) 不是一个可用的${is_tmp_use_name}."
|
|
msg "${is_tmp_use_name}可用如下: "
|
|
for v in ${is_tmp_list[@]}; do
|
|
msg "\t\t$v"
|
|
done
|
|
msg "$is_err_tips\n"
|
|
exit 1
|
|
}
|
|
ss_method=$is_tmp_use_type
|
|
fi
|
|
[[ $is_use_pass ]] && ss_password=$is_use_pass && password=$is_use_pass
|
|
[[ $is_use_host ]] && host=$is_use_host
|
|
[[ $is_use_door_addr ]] && door_addr=$is_use_door_addr
|
|
[[ $is_use_servername ]] && is_servername=$is_use_servername
|
|
[[ $is_use_socks_user ]] && is_socks_user=$is_use_socks_user
|
|
[[ $is_use_socks_pass ]] && is_socks_pass=$is_use_socks_pass
|
|
fi
|
|
|
|
# anytls with domain (ACME TLS)
|
|
if [[ $is_anytls_domain && ! $is_change && ! $is_gen ]]; then
|
|
get_ip
|
|
host=$is_anytls_domain
|
|
get host-test
|
|
host=
|
|
fi
|
|
|
|
if [[ $is_use_tls ]]; then
|
|
if [[ ! $is_no_auto_tls && ! $is_caddy && ! $is_gen && ! $is_dont_test_host ]]; then
|
|
# test auto tls
|
|
[[ $(is_test port_used 80) || $(is_test port_used 443) ]] && {
|
|
get_port
|
|
is_http_port=$tmp_port
|
|
get_port
|
|
is_https_port=$tmp_port
|
|
warn "端口 (80 或 443) 已经被占用, 你也可以考虑使用 no-auto-tls"
|
|
msg "\n Caddy 将使用非标准端口实现自动配置 TLS, HTTP:$is_http_port HTTPS:$is_https_port\n"
|
|
msg "请确定是否继续???"
|
|
pause
|
|
}
|
|
is_install_caddy=1
|
|
fi
|
|
# set host
|
|
[[ ! $host ]] && ask string host "请输入域名:"
|
|
# test host dns
|
|
get host-test
|
|
else
|
|
# for main menu start, dont auto create args
|
|
if [[ $is_main_start ]]; then
|
|
|
|
# set port
|
|
[[ ! $port ]] && ask string port "请输入端口:"
|
|
|
|
case ${is_new_protocol,,} in
|
|
socks)
|
|
# set user
|
|
[[ ! $is_socks_user ]] && ask string is_socks_user "请设置用户名:"
|
|
# set password
|
|
[[ ! $is_socks_pass ]] && ask string is_socks_pass "请设置密码:"
|
|
;;
|
|
shadowsocks)
|
|
# set method
|
|
[[ ! $ss_method ]] && ask set_ss_method
|
|
# set password
|
|
[[ ! $ss_password ]] && ask string ss_password "请设置密码:"
|
|
;;
|
|
esac
|
|
|
|
fi
|
|
fi
|
|
|
|
# Dokodemo-Door
|
|
if [[ $is_new_protocol == 'Direct' ]]; then
|
|
# set remote addr
|
|
[[ ! $door_addr ]] && ask string door_addr "请输入目标地址:"
|
|
# set remote port
|
|
[[ ! $door_port ]] && ask string door_port "请输入目标端口:"
|
|
fi
|
|
|
|
# Shadowsocks 2022
|
|
if [[ $(grep 2022 <<<$ss_method) ]]; then
|
|
# test ss2022 password
|
|
[[ $ss_password ]] && {
|
|
is_test_json=1
|
|
create server Shadowsocks
|
|
[[ ! $tmp_uuid ]] && get_uuid
|
|
is_test_json_save=$is_conf_dir/tmp-test-$tmp_uuid
|
|
cat <<<"$is_new_json" >$is_test_json_save
|
|
$is_core_bin check -c $is_test_json_save &>/dev/null
|
|
if [[ $? != 0 ]]; then
|
|
warn "Shadowsocks 协议 ($ss_method) 不支持使用密码 ($(_red_bg $ss_password))\n\n你可以使用命令: $(_green $is_core ss2022) 生成支持的密码.\n\n脚本将自动创建可用密码:)"
|
|
ss_password=
|
|
# create new json.
|
|
json_str=
|
|
fi
|
|
is_test_json=
|
|
rm -f $is_test_json_save
|
|
}
|
|
|
|
fi
|
|
|
|
# install caddy
|
|
if [[ $is_install_caddy ]]; then
|
|
get install-caddy
|
|
fi
|
|
|
|
# create json
|
|
create server $is_new_protocol
|
|
|
|
# show config info.
|
|
info
|
|
}
|
|
|
|
# get config info
|
|
# or somes required args
|
|
get() {
|
|
case $1 in
|
|
addr)
|
|
is_addr=$host
|
|
[[ ! $is_addr ]] && {
|
|
get_ip
|
|
is_addr=$ip
|
|
[[ $(grep ":" <<<$ip) ]] && is_addr="[$ip]"
|
|
}
|
|
;;
|
|
new)
|
|
[[ ! $host ]] && get_ip
|
|
[[ ! $port ]] && get_port && port=$tmp_port
|
|
[[ ! $uuid ]] && get_uuid && uuid=$tmp_uuid
|
|
;;
|
|
file)
|
|
is_file_str=$2
|
|
[[ ! $is_file_str ]] && is_file_str='.json$'
|
|
# is_all_json=("$(ls $is_conf_dir | grep -E $is_file_str)")
|
|
readarray -t is_all_json <<<"$(ls $is_conf_dir | grep -E -i "$is_file_str" | sed '/dynamic-port-.*-link/d' | head -233)" # limit max 233 lines for show.
|
|
[[ ! $is_all_json ]] && err "无法找到相关的配置文件: $2"
|
|
[[ ${#is_all_json[@]} -eq 1 ]] && is_config_file=$is_all_json && is_auto_get_config=1
|
|
[[ ! $is_config_file ]] && {
|
|
[[ $is_dont_auto_exit ]] && return
|
|
ask get_config_file
|
|
}
|
|
;;
|
|
info)
|
|
get file $2
|
|
if [[ $is_config_file ]]; then
|
|
is_json_str=$(cat $is_conf_dir/"$is_config_file" | sed s#//.*##)
|
|
is_json_data=$(jq '(.inbounds[0]|.type,.listen_port,(.users[0]|.uuid,.password,.username),.method,.password,.override_port,.override_address,(.transport|.type,.path,.headers.host),(.tls|.server_name,.reality.private_key),.fallback.server_port),(.outbounds[1].tag)' <<<$is_json_str)
|
|
[[ $? != 0 ]] && err "无法读取此文件: $is_config_file"
|
|
is_up_var_set=(null is_protocol port uuid password username ss_method ss_password door_port door_addr net_type path host is_servername is_private_key is_reality_fallback_port is_public_key)
|
|
[[ $is_debug ]] && msg "\n------------- debug: $is_config_file -------------"
|
|
i=0
|
|
for v in $(sed 's/""/null/g;s/"//g' <<<"$is_json_data"); do
|
|
((i++))
|
|
[[ $is_debug ]] && msg "$i-${is_up_var_set[$i]}: $v"
|
|
export ${is_up_var_set[$i]}="${v}"
|
|
done
|
|
for v in ${is_up_var_set[@]}; do
|
|
[[ ${!v} == 'null' ]] && unset $v
|
|
done
|
|
|
|
# Override port if it's mapped behind HAProxy
|
|
local file_port=$(echo "$is_config_file" | grep -oE '[0-9]+\.json' | grep -oE '[0-9]+')
|
|
if [[ $file_port && $port && $port != $file_port ]]; then
|
|
port=$file_port
|
|
fi
|
|
|
|
if [[ $is_private_key ]]; then
|
|
is_reality=1
|
|
net_type+=reality
|
|
is_public_key=${is_public_key/public_key_/}
|
|
if [[ $is_reality_fallback_port == '4443' || $port == '443' ]]; then
|
|
is_reality_fallback=1
|
|
fi
|
|
fi
|
|
is_socks_user=$username
|
|
is_socks_pass=$password
|
|
|
|
# extract anytls ACME domain
|
|
[[ $is_protocol == 'anytls' ]] && {
|
|
is_anytls_domain=$(jq -r '(.inbounds[0].tls.certificate_provider.domain[0] // .inbounds[0].tls.acme.domain[0]) // empty' <<<$is_json_str 2>/dev/null)
|
|
}
|
|
|
|
is_config_name=$is_config_file
|
|
|
|
if [[ $is_caddy && $host && -f $is_caddy_conf/$host.conf ]]; then
|
|
is_tmp_https_port=$(grep -E -o "$host:[1-9][0-9]?+" $is_caddy_conf/$host.conf | sed s/.*://)
|
|
fi
|
|
if [[ $host && ! -f $is_caddy_conf/$host.conf ]]; then
|
|
is_no_auto_tls=1
|
|
fi
|
|
[[ $is_tmp_https_port ]] && is_https_port=$is_tmp_https_port
|
|
[[ $is_client && $host ]] && port=$is_https_port
|
|
get protocol $is_protocol-$net_type
|
|
fi
|
|
;;
|
|
protocol)
|
|
get addr # get host or server ip
|
|
is_lower=${2,,}
|
|
net=
|
|
is_users="users:[{uuid:\"$uuid\"}]"
|
|
is_tls_json='tls:{enabled:true,alpn:["h3"],key_path:"'$is_tls_key'",certificate_path:"'$is_tls_cer'"}'
|
|
case $is_lower in
|
|
vmess*)
|
|
is_protocol=vmess
|
|
[[ $is_lower =~ "tcp" || ! $net_type && $is_up_var_set ]] && net=tcp && json_str=$is_users
|
|
;;
|
|
vless*)
|
|
is_protocol=vless
|
|
;;
|
|
tuic*)
|
|
net=tuic
|
|
is_protocol=$net
|
|
[[ ! $password ]] && password=$uuid
|
|
is_users="users:[{uuid:\"$uuid\",password:\"$password\"}]"
|
|
json_str="$is_users,congestion_control:\"bbr\",$is_tls_json"
|
|
;;
|
|
trojan*)
|
|
is_protocol=trojan
|
|
[[ ! $password ]] && password=$uuid
|
|
is_users="users:[{password:\"$password\"}]"
|
|
[[ ! $host ]] && {
|
|
net=trojan
|
|
json_str="$is_users,${is_tls_json/alpn\:\[\"h3\"\],/}"
|
|
}
|
|
;;
|
|
hysteria2*)
|
|
net=hysteria2
|
|
is_protocol=$net
|
|
[[ ! $password ]] && password=$uuid
|
|
json_str="users:[{password:\"$password\"}],$is_tls_json"
|
|
;;
|
|
shadowsocks*)
|
|
net=ss
|
|
is_protocol=shadowsocks
|
|
[[ ! $ss_method ]] && ss_method=$is_random_ss_method
|
|
[[ ! $ss_password ]] && {
|
|
ss_password=$uuid
|
|
[[ $(grep 2022 <<<$ss_method) ]] && ss_password=$(get ss2022)
|
|
}
|
|
json_str="method:\"$ss_method\",password:\"$ss_password\""
|
|
;;
|
|
direct*)
|
|
net=direct
|
|
is_protocol=$net
|
|
json_str="override_port:$door_port,override_address:\"$door_addr\""
|
|
;;
|
|
anytls*)
|
|
net=anytls
|
|
is_protocol=$net
|
|
[[ ! $password ]] && password=$uuid
|
|
is_users="users:[{password:\"$password\"}]"
|
|
if [[ $is_anytls_domain ]]; then
|
|
# sing-box >= 1.14.0 uses certificate_provider; older uses acme
|
|
is_core_minor=$(echo "$is_core_ver" | cut -d. -f2)
|
|
if [[ ${is_core_minor:-0} -ge 14 ]]; then
|
|
is_anytls_tls="tls:{enabled:true,certificate_provider:{type:\"acme\",domain:[\"$is_anytls_domain\"]}}"
|
|
else
|
|
is_anytls_tls="tls:{enabled:true,acme:{domain:[\"$is_anytls_domain\"]}}"
|
|
fi
|
|
else
|
|
is_anytls_tls="${is_tls_json/alpn\:\[\"h3\"\],/}"
|
|
fi
|
|
json_str="$is_users,$is_anytls_tls"
|
|
;;
|
|
socks*)
|
|
net=socks
|
|
is_protocol=$net
|
|
[[ ! $is_socks_user ]] && is_socks_user=admin
|
|
[[ ! $is_socks_pass ]] && is_socks_pass=$uuid
|
|
json_str="users:[{username: \"$is_socks_user\", password: \"$is_socks_pass\"}]"
|
|
;;
|
|
*)
|
|
err "无法识别协议: $is_config_file"
|
|
;;
|
|
esac
|
|
[[ $net ]] && return # if net exist, dont need more json args
|
|
[[ $host && $is_lower =~ "tls" ]] && {
|
|
[[ ! $path ]] && path="/$uuid"
|
|
is_path_host_json=",path:\"$path\",headers:{host:\"$host\"}"
|
|
}
|
|
case $is_lower in
|
|
*quic*)
|
|
net=quic
|
|
is_json_add="$is_tls_json,transport:{type:\"$net\"}"
|
|
;;
|
|
*ws*)
|
|
net=ws
|
|
is_json_add="transport:{type:\"$net\"$is_path_host_json,early_data_header_name:\"Sec-WebSocket-Protocol\"}"
|
|
;;
|
|
*reality*)
|
|
net=reality
|
|
[[ ! $is_servername ]] && is_servername=$is_random_servername
|
|
[[ ! $is_private_key ]] && get_pbk
|
|
local handshake_server=$is_servername
|
|
local handshake_port=443
|
|
local fallback_json=""
|
|
[[ $is_reality_fallback ]] && {
|
|
fallback_json=",fallback:{server:\"127.0.0.1\",server_port:4443}"
|
|
}
|
|
is_json_add="tls:{enabled:true,server_name:\"$is_servername\",reality:{enabled:true,handshake:{server:\"$handshake_server\",server_port:$handshake_port},private_key:\"$is_private_key\",short_id:[\"\"]}}$fallback_json"
|
|
[[ $is_lower =~ "http" ]] && {
|
|
is_json_add="$is_json_add,transport:{type:\"http\"}"
|
|
} || {
|
|
is_users=${is_users/uuid/flow:\"xtls-rprx-vision\",uuid}
|
|
}
|
|
;;
|
|
*http* | *h2*)
|
|
net=http
|
|
[[ $is_lower =~ "up" ]] && net=httpupgrade
|
|
is_json_add="transport:{type:\"$net\"$is_path_host_json}"
|
|
[[ $is_lower =~ "h2" || ! $is_lower =~ "httpupgrade" && $host ]] && {
|
|
net=h2
|
|
is_json_add="${is_tls_json/alpn\:\[\"h3\"\],/},$is_json_add"
|
|
}
|
|
;;
|
|
*)
|
|
err "无法识别传输协议: $is_config_file"
|
|
;;
|
|
esac
|
|
json_str="$is_users,$is_json_add"
|
|
;;
|
|
host-test) # test host dns record; for auto *tls required.
|
|
[[ $is_no_auto_tls || $is_gen || $is_dont_test_host ]] && return
|
|
get_ip
|
|
get ping
|
|
if [[ ! $(grep $ip <<<$is_host_dns) ]]; then
|
|
msg "\n请将 ($(_red_bg $host)) 解析到 ($(_red_bg $ip))"
|
|
msg "\n如果使用 Cloudflare, 在 DNS 那; 关闭 (Proxy status / 代理状态), 即是 (DNS only / 仅限 DNS)"
|
|
ask string y "我已经确定解析 [y]:"
|
|
get ping
|
|
if [[ ! $(grep $ip <<<$is_host_dns) ]]; then
|
|
_cyan "\n测试结果: $is_host_dns"
|
|
err "域名 ($host) 没有解析到 ($ip)"
|
|
fi
|
|
fi
|
|
;;
|
|
ssss | ss2022)
|
|
if [[ $(grep 128 <<<$ss_method) ]]; then
|
|
$is_core_bin generate rand 16 --base64
|
|
else
|
|
$is_core_bin generate rand 32 --base64
|
|
fi
|
|
;;
|
|
ping)
|
|
# is_ip_type="-4"
|
|
# [[ $(grep ":" <<<$ip) ]] && is_ip_type="-6"
|
|
# is_host_dns=$(ping $host $is_ip_type -c 1 -W 2 | head -1)
|
|
is_dns_type="a"
|
|
[[ $(grep ":" <<<$ip) ]] && is_dns_type="aaaa"
|
|
is_host_dns=$(_wget -qO- --header="accept: application/dns-json" "https://one.one.one.one/dns-query?name=$host&type=$is_dns_type")
|
|
;;
|
|
install-caddy)
|
|
if [[ -f $is_caddy_bin || $(type -P caddy) ]]; then
|
|
[[ ! -f $is_caddy_bin ]] && is_caddy_bin=$(type -P caddy)
|
|
_green "\n检测到系统已安装 Caddy (${is_caddy_bin})，将直接使用现有版本。\n"
|
|
else
|
|
_green "\n安装 Caddy 实现自动配置 TLS.\n"
|
|
load download.sh
|
|
download caddy
|
|
fi
|
|
load systemd.sh
|
|
install_service caddy &>/dev/null
|
|
is_caddy=1
|
|
_green "Caddy 配置成功.\n"
|
|
;;
|
|
reinstall)
|
|
is_install_sh=$(cat $is_sh_dir/install.sh)
|
|
uninstall
|
|
bash <<<$is_install_sh
|
|
;;
|
|
test-run)
|
|
if [[ $is_systemd ]]; then
|
|
systemctl list-units --full -all &>/dev/null
|
|
[[ $? != 0 ]] && {
|
|
_yellow "\n无法执行测试, 请检查 systemctl 状态.\n"
|
|
return
|
|
}
|
|
fi
|
|
is_no_manage_msg=1
|
|
if [[ ! $(pgrep -f $is_core_bin) ]]; then
|
|
_yellow "\n测试运行 $is_core_name ..\n"
|
|
manage start &>/dev/null
|
|
if [[ $is_run_fail == $is_core ]]; then
|
|
_red "$is_core_name 运行失败信息:"
|
|
$is_core_bin run -c $is_config_json -C $is_conf_dir
|
|
else
|
|
_green "\n测试通过, 已启动 $is_core_name ..\n"
|
|
fi
|
|
else
|
|
_green "\n$is_core_name 正在运行, 跳过测试\n"
|
|
fi
|
|
if [[ $is_caddy ]]; then
|
|
if [[ ! $(pgrep -f $is_caddy_bin) ]]; then
|
|
_yellow "\n测试运行 Caddy ..\n"
|
|
manage start caddy &>/dev/null
|
|
if [[ $is_run_fail == 'caddy' ]]; then
|
|
_red "Caddy 运行失败信息:"
|
|
$is_caddy_bin run --config $is_caddyfile
|
|
else
|
|
_green "\n测试通过, 已启动 Caddy ..\n"
|
|
fi
|
|
else
|
|
_green "\nCaddy 正在运行, 跳过测试\n"
|
|
fi
|
|
fi
|
|
;;
|
|
esac
|
|
}
|
|
|
|
# show info
|
|
info() {
|
|
if [[ ! $is_protocol ]]; then
|
|
get info $1
|
|
fi
|
|
# is_color=$(shuf -i 41-45 -n1)
|
|
is_color=44
|
|
case $net in
|
|
ws | tcp | h2 | quic | http*)
|
|
if [[ $host ]]; then
|
|
is_color=45
|
|
is_can_change=(0 1 2 3 5)
|
|
is_info_show=(0 1 2 3 4 6 7 8)
|
|
[[ $is_protocol == 'vmess' ]] && {
|
|
is_vmess_url=$(jq -c '{v:2,ps:'\"sb-$net-$host\"',add:'\"$is_addr\"',port:'\"$is_https_port\"',id:'\"$uuid\"',aid:"0",net:'\"$net\"',host:'\"$host\"',path:'\"$path\"',tls:'\"tls\"'}' <<<{})
|
|
is_url=vmess://$(echo -n $is_vmess_url | base64 -w 0)
|
|
} || {
|
|
[[ $is_protocol == "trojan" ]] && {
|
|
uuid=$password
|
|
# is_info_str=($is_protocol $is_addr $is_https_port $password $net $host $path 'tls')
|
|
is_can_change=(0 1 2 3 4)
|
|
is_info_show=(0 1 2 10 4 6 7 8)
|
|
}
|
|
is_url="$is_protocol://$uuid@$host:$is_https_port?encryption=none&security=tls&type=$net&host=$host&path=$path#sb-$net-$host"
|
|
}
|
|
[[ $is_caddy ]] && is_can_change+=(11)
|
|
is_info_str=($is_protocol $is_addr $is_https_port $uuid $net $host $path 'tls')
|
|
else
|
|
is_type=none
|
|
is_can_change=(0 1 5)
|
|
is_info_show=(0 1 2 3 4)
|
|
is_info_str=($is_protocol $is_addr $port $uuid $net)
|
|
[[ $net == "http" ]] && {
|
|
net=tcp
|
|
is_type=http
|
|
is_tcp_http=1
|
|
is_info_show+=(5)
|
|
is_info_str=(${is_info_str[@]/http/tcp http})
|
|
}
|
|
[[ $net == "quic" ]] && {
|
|
is_insecure=1
|
|
is_info_show+=(8 9 20)
|
|
is_info_str+=(tls h3 true)
|
|
is_quic_add=",tls:\"tls\",alpn:\"h3\"" # cant add allowInsecure
|
|
}
|
|
is_vmess_url=$(jq -c "{v:2,ps:\"sb-${net}-$is_addr\",add:\"$is_addr\",port:\"$port\",id:\"$uuid\",aid:\"0\",net:\"$net\",type:\"$is_type\"$is_quic_add}" <<<{})
|
|
is_url=vmess://$(echo -n $is_vmess_url | base64 -w 0)
|
|
fi
|
|
;;
|
|
ss)
|
|
is_can_change=(0 1 4 6)
|
|
is_info_show=(0 1 2 10 11)
|
|
is_url="ss://$(echo -n ${ss_method}:${ss_password} | base64 -w 0)@${is_addr}:${port}#sb-$net-${is_addr}"
|
|
is_info_str=($is_protocol $is_addr $port $ss_password $ss_method)
|
|
;;
|
|
trojan)
|
|
is_insecure=1
|
|
is_can_change=(0 1 4)
|
|
is_info_show=(0 1 2 10 4 8 20)
|
|
is_url="$is_protocol://$password@$is_addr:$port?type=tcp&security=tls&insecure=1&allowInsecure=1#sb-$net-$is_addr"
|
|
is_info_str=($is_protocol $is_addr $port $password tcp tls true)
|
|
;;
|
|
hy*)
|
|
is_can_change=(0 1 4)
|
|
is_info_show=(0 1 2 10 8 9 20)
|
|
# fix xray core for client use.
|
|
is_sha256=$(openssl x509 -noout -fingerprint -sha256 -in $is_core_dir/bin/tls.cer | sed 's/.*=//;s/://g')
|
|
is_url="$is_protocol://$password@$is_addr:$port?alpn=h3&insecure=1&allowInsecure=1&pinSHA256=$is_sha256#sb-$net-$is_addr"
|
|
is_info_str=($is_protocol $is_addr $port $password tls h3 "true (设置, 固定证书>证书指纹(SHA-256): $is_sha256)")
|
|
;;
|
|
tuic)
|
|
is_insecure=1
|
|
is_can_change=(0 1 4 5)
|
|
is_info_show=(0 1 2 3 10 8 9 20 21)
|
|
is_url="$is_protocol://$uuid:$password@$is_addr:$port?alpn=h3&insecure=1&allowInsecure=1&congestion_control=bbr#sb-$net-$is_addr"
|
|
is_info_str=($is_protocol $is_addr $port $uuid $password tls h3 true bbr)
|
|
;;
|
|
reality)
|
|
is_color=41
|
|
is_can_change=(0 1 5 9 10)
|
|
is_info_show=(0 1 2 3 15 4 8 16 17 18)
|
|
is_flow=xtls-rprx-vision
|
|
is_net_type=tcp
|
|
[[ $net_type =~ "http" || ${is_new_protocol,,} =~ "http" ]] && {
|
|
is_flow=
|
|
is_net_type=h2
|
|
is_info_show=(${is_info_show[@]/15/})
|
|
}
|
|
is_info_str=($is_protocol $is_addr $port $uuid $is_flow $is_net_type reality $is_servername chrome $is_public_key)
|
|
is_url="$is_protocol://$uuid@$is_addr:$port?encryption=none&security=reality&flow=$is_flow&type=$is_net_type&sni=$is_servername&pbk=$is_public_key&fp=chrome#sb-$net-$is_addr"
|
|
;;
|
|
anytls)
|
|
is_can_change=(0 1 4)
|
|
if [[ $is_anytls_domain ]]; then
|
|
is_info_show=(0 1 2 10 8)
|
|
is_info_str=($is_protocol $is_anytls_domain $port $password tls)
|
|
is_url="anytls://$password@$is_anytls_domain:$port#sb-$net-$is_anytls_domain"
|
|
else
|
|
is_insecure=1
|
|
is_info_show=(0 1 2 10 8 20)
|
|
is_info_str=($is_protocol $is_addr $port $password tls true)
|
|
is_url="anytls://$password@$is_addr:$port?insecure=1&allowInsecure=1#sb-$net-$is_addr"
|
|
fi
|
|
;;
|
|
direct)
|
|
is_can_change=(0 1 7 8)
|
|
is_info_show=(0 1 2 13 14)
|
|
is_info_str=($is_protocol $is_addr $port $door_addr $door_port)
|
|
;;
|
|
socks)
|
|
is_can_change=(0 1 12 4)
|
|
is_info_show=(0 1 2 19 10)
|
|
is_info_str=($is_protocol $is_addr $port $is_socks_user $is_socks_pass)
|
|
is_url="socks://$(echo -n ${is_socks_user}:${is_socks_pass} | base64 -w 0)@${is_addr}:${port}#sb-$net-${is_addr}"
|
|
;;
|
|
esac
|
|
[[ $is_dont_show_info || $is_gen || $is_dont_auto_exit ]] && return # dont show info
|
|
msg "-------------- $is_config_name -------------"
|
|
for ((i = 0; i < ${#is_info_show[@]}; i++)); do
|
|
a=${info_list[${is_info_show[$i]}]}
|
|
if [[ ${#a} -eq 11 || ${#a} -ge 13 ]]; then
|
|
tt='\t'
|
|
else
|
|
tt='\t\t'
|
|
fi
|
|
msg "$a $tt= \e[${is_color}m${is_info_str[$i]}\e[0m"
|
|
done
|
|
if [[ $is_new_install ]]; then
|
|
warn "首次安装建议运行 sing-box help 查看帮助信息"
|
|
fi
|
|
if [[ $is_url ]]; then
|
|
msg "------------- ${info_list[12]} -------------"
|
|
msg "\e[4;${is_color}m${is_url}\e[0m"
|
|
[[ $is_insecure ]] && {
|
|
warn "某些客户端如(V2rayN 等)导入URL需手动将: 跳过证书验证(allowInsecure) 设置为 true, 或打开: 允许不安全的连接"
|
|
}
|
|
fi
|
|
if [[ $is_no_auto_tls ]]; then
|
|
msg "------------- no-auto-tls INFO -------------"
|
|
msg "端口(port): $port"
|
|
msg "路径(path): $path"
|
|
fi
|
|
if [[ $is_reality_fallback ]]; then
|
|
msg "------------- REALITY Fallback NOTICE -------------"
|
|
_green "检测到启用了 Caddy 回落分流，脚本已自动为你调整了 Caddy 配置文件："
|
|
msg "1. 已自动将你的 ${yellow}/etc/caddy/Caddyfile${none} 中的默认 https 端口修改为 ${green}4443${none}。"
|
|
msg "2. 原配置文件备份已保存至 ${yellow}${is_caddyfile}.bak${none}。"
|
|
msg "3. Caddy 和 sing-box 已自动重启，现在 443 端口由 sing-box 监听，普通流量会自动分流回落至 Caddy。"
|
|
msg "---------------------------------------------------"
|
|
fi
|
|
footer_msg
|
|
}
|
|
|
|
# footer msg
|
|
footer_msg() {
|
|
[[ $is_core_stop && ! $is_new_json ]] && warn "$is_core_name 当前处于停止状态."
|
|
[[ $is_caddy_stop && $host ]] && warn "Caddy 当前处于停止状态."
|
|
msg "------------- END -------------"
|
|
}
|
|
|
|
# URL or qrcode
|
|
url_qr() {
|
|
is_dont_show_info=1
|
|
info $2
|
|
if [[ $is_url ]]; then
|
|
[[ $1 == 'url' ]] && {
|
|
msg "\n------------- $is_config_name & URL 链接 -------------"
|
|
msg "\n\e[${is_color}m${is_url}\e[0m\n"
|
|
footer_msg
|
|
} || {
|
|
msg "\n------------- $is_config_name & QR code 二维码 -------------"
|
|
msg
|
|
if [[ $(type -P qrencode) ]]; then
|
|
qrencode -t ANSI "${is_url}"
|
|
else
|
|
msg "请安装 qrencode: $(_green "$cmd update -y; $cmd install qrencode -y")"
|
|
fi
|
|
msg
|
|
footer_msg
|
|
}
|
|
else
|
|
[[ $1 == 'url' ]] && {
|
|
err "($is_config_name) 无法生成 URL 链接."
|
|
} || {
|
|
err "($is_config_name) 无法生成 QR code 二维码."
|
|
}
|
|
fi
|
|
}
|
|
|
|
# update core, sh, caddy
|
|
update() {
|
|
case $1 in
|
|
1 | core | $is_core)
|
|
is_update_name=core
|
|
is_show_name=$is_core_name
|
|
is_run_ver=v${is_core_ver##* }
|
|
is_update_repo=$is_core_repo
|
|
;;
|
|
2 | sh)
|
|
err "当前项目已净化，已禁用自动更新脚本以防止覆盖净化修改。"
|
|
;;
|
|
3 | caddy)
|
|
[[ ! $is_caddy ]] && err "不支持更新 Caddy."
|
|
is_update_name=caddy
|
|
is_show_name="Caddy"
|
|
is_run_ver=$is_caddy_ver
|
|
is_update_repo=$is_caddy_repo
|
|
;;
|
|
*)
|
|
err "无法识别 ($1), 请使用: $is_core update [core | sh | caddy] [ver]"
|
|
;;
|
|
esac
|
|
[[ $2 ]] && is_new_ver=v${2#v}
|
|
[[ $is_run_ver == $is_new_ver ]] && {
|
|
msg "\n自定义版本和当前 $is_show_name 版本一样, 无需更新.\n"
|
|
exit
|
|
}
|
|
load download.sh
|
|
if [[ $is_new_ver ]]; then
|
|
msg "\n使用自定义版本更新 $is_show_name: $(_green $is_new_ver)\n"
|
|
else
|
|
get_latest_version $is_update_name
|
|
[[ $is_run_ver == $latest_ver ]] && {
|
|
msg "\n$is_show_name 当前已经是最新版本了.\n"
|
|
exit
|
|
}
|
|
msg "\n发现 $is_show_name 新版本: $(_green $latest_ver)\n"
|
|
is_new_ver=$latest_ver
|
|
fi
|
|
download $is_update_name $is_new_ver
|
|
msg "更新成功, 当前 $is_show_name 版本: $(_green $is_new_ver)\n"
|
|
msg "$(_green 请查看更新说明: https://github.com/$is_update_repo/releases/tag/$is_new_ver)\n"
|
|
[[ $is_update_name != 'sh' ]] && manage restart $is_update_name &
|
|
}
|
|
|
|
# main menu; if no prefer args.
|
|
is_main_menu() {
|
|
msg "\n------------- $is_core_name script $is_sh_ver -------------"
|
|
msg "$is_core_name $is_core_ver: $is_core_status"
|
|
is_main_start=1
|
|
ask mainmenu
|
|
case $REPLY in
|
|
1)
|
|
add
|
|
;;
|
|
2)
|
|
change
|
|
;;
|
|
3)
|
|
info
|
|
;;
|
|
4)
|
|
del
|
|
;;
|
|
5)
|
|
ask list is_do_manage "启动 停止 重启"
|
|
manage $REPLY &
|
|
msg "\n管理状态执行: $(_green $is_do_manage)\n"
|
|
;;
|
|
6)
|
|
is_tmp_list=("更新$is_core_name" "更新脚本")
|
|
[[ $is_caddy ]] && is_tmp_list+=("更新Caddy")
|
|
ask list is_do_update null "\n请选择更新:\n"
|
|
update $REPLY
|
|
;;
|
|
7)
|
|
uninstall
|
|
;;
|
|
8)
|
|
msg
|
|
load help.sh
|
|
show_help
|
|
;;
|
|
9)
|
|
ask list is_do_other "启用BBR 查看日志 测试运行 重装脚本 设置DNS"
|
|
case $REPLY in
|
|
1)
|
|
load bbr.sh
|
|
_try_enable_bbr
|
|
;;
|
|
2)
|
|
load log.sh
|
|
log_set
|
|
;;
|
|
3)
|
|
get test-run
|
|
;;
|
|
4)
|
|
get reinstall
|
|
;;
|
|
5)
|
|
load dns.sh
|
|
dns_set
|
|
;;
|
|
esac
|
|
;;
|
|
esac
|
|
}
|
|
|
|
# check prefer args, if not exist prefer args and show main menu
|
|
main() {
|
|
case $1 in
|
|
a | add | gen | no-auto-tls)
|
|
[[ $1 == 'gen' ]] && is_gen=1
|
|
[[ $1 == 'no-auto-tls' ]] && is_no_auto_tls=1
|
|
add ${@:2}
|
|
;;
|
|
bin | pbk | check | completion | format | generate | geoip | geosite | merge | rule-set | run | tools)
|
|
is_run_command=$1
|
|
if [[ $1 == 'bin' ]]; then
|
|
$is_core_bin ${@:2}
|
|
else
|
|
[[ $is_run_command == 'pbk' ]] && is_run_command="generate reality-keypair"
|
|
$is_core_bin $is_run_command ${@:2}
|
|
fi
|
|
;;
|
|
bbr)
|
|
load bbr.sh
|
|
_try_enable_bbr
|
|
;;
|
|
c | config | change)
|
|
change ${@:2}
|
|
;;
|
|
# client | genc)
|
|
# create client $2
|
|
# ;;
|
|
d | del | rm)
|
|
del $2
|
|
;;
|
|
dd | ddel | fix | fix-all)
|
|
case $1 in
|
|
fix)
|
|
[[ $2 ]] && {
|
|
change $2 full
|
|
} || {
|
|
is_change_id=full && change
|
|
}
|
|
return
|
|
;;
|
|
fix-all)
|
|
is_dont_auto_exit=1
|
|
msg
|
|
for v in $(ls $is_conf_dir | grep .json$ | sed '/dynamic-port-.*-link/d'); do
|
|
msg "fix: $v"
|
|
change $v full
|
|
done
|
|
_green "\nfix 完成.\n"
|
|
;;
|
|
*)
|
|
is_dont_auto_exit=1
|
|
[[ ! $2 ]] && {
|
|
err "无法找到需要删除的参数"
|
|
} || {
|
|
for v in ${@:2}; do
|
|
del $v
|
|
done
|
|
}
|
|
;;
|
|
esac
|
|
is_dont_auto_exit=
|
|
manage restart &
|
|
[[ $is_del_host ]] && manage restart caddy &
|
|
;;
|
|
dns)
|
|
load dns.sh
|
|
dns_set ${@:2}
|
|
;;
|
|
debug)
|
|
is_debug=1
|
|
get info $2
|
|
warn "如果需要复制; 请把 *uuid, *password, *host, *key 的值改写, 以避免泄露."
|
|
;;
|
|
fix-config.json)
|
|
create config.json
|
|
;;
|
|
fix-caddyfile)
|
|
if [[ $is_caddy ]]; then
|
|
load caddy.sh
|
|
caddy_config new
|
|
manage restart caddy &
|
|
_green "\nfix 完成.\n"
|
|
else
|
|
err "无法执行此操作"
|
|
fi
|
|
;;
|
|
i | info)
|
|
info $2
|
|
;;
|
|
ip)
|
|
get_ip
|
|
msg $ip
|
|
;;
|
|
in | import)
|
|
load import.sh
|
|
;;
|
|
log)
|
|
load log.sh
|
|
log_set $2
|
|
;;
|
|
url | qr)
|
|
url_qr $@
|
|
;;
|
|
un | uninstall)
|
|
uninstall
|
|
;;
|
|
u | up | update | U | update.sh)
|
|
is_update_name=$2
|
|
is_update_ver=$3
|
|
[[ ! $is_update_name ]] && is_update_name=core
|
|
[[ $1 == 'U' || $1 == 'update.sh' ]] && {
|
|
is_update_name=sh
|
|
is_update_ver=
|
|
}
|
|
update $is_update_name $is_update_ver
|
|
;;
|
|
ssss | ss2022)
|
|
get $@
|
|
;;
|
|
s | status)
|
|
msg "\n$is_core_name $is_core_ver: $is_core_status\n"
|
|
[[ $is_caddy ]] && msg "Caddy $is_caddy_ver: $is_caddy_status\n"
|
|
;;
|
|
start | stop | r | restart)
|
|
[[ $2 && $2 != 'caddy' ]] && err "无法识别 ($2), 请使用: $is_core $1 [caddy]"
|
|
manage $1 $2 &
|
|
;;
|
|
t | test)
|
|
get test-run
|
|
;;
|
|
reinstall)
|
|
get $1
|
|
;;
|
|
get-port)
|
|
get_port
|
|
msg $tmp_port
|
|
;;
|
|
main)
|
|
is_main_menu
|
|
;;
|
|
v | ver | version)
|
|
[[ $is_caddy_ver ]] && is_caddy_ver="/ $(_blue Caddy $is_caddy_ver)"
|
|
msg "\n$(_green $is_core_name $is_core_ver) / $(_cyan $is_core_name script $is_sh_ver) $is_caddy_ver\n"
|
|
;;
|
|
h | help | --help)
|
|
load help.sh
|
|
show_help ${@:2}
|
|
;;
|
|
*)
|
|
is_try_change=1
|
|
change test $1
|
|
if [[ $is_change_id ]]; then
|
|
unset is_try_change
|
|
[[ $2 ]] && {
|
|
change $2 $1 ${@:3}
|
|
} || {
|
|
change
|
|
}
|
|
else
|
|
err "无法识别 ($1), 获取帮助请使用: $is_core help"
|
|
fi
|
|
;;
|
|
esac
|
|
}
|