mirror of
https://github.com/juewuy/ShellCrash.git
synced 2024-11-16 19:55:57 +08:00
81159b6176
~Redir模式增加基于tproxy的udp代理 ~增加自动生成pac逻辑 ~增加Gnome以及KDE桌面的自动设置本机代理功能 ~修复各种更新检测失败的bug ~修复关闭时报错的bug
481 lines
19 KiB
Bash
481 lines
19 KiB
Bash
#!/bin/sh
|
||
# Copyright (C) Juewuy
|
||
|
||
getconfig(){
|
||
#加载配置文件
|
||
[ -z "$clashdir" ] && source /etc/profile > /dev/null
|
||
[ -z "$clashdir" ] && source ~/.bashrc > /dev/null
|
||
ccfg=$clashdir/mark
|
||
[ -f $ccfg ] && source $ccfg
|
||
#默认设置
|
||
[ -z "$skip_cert" ] && skip_cert=已开启
|
||
[ -z "$common_ports" ] && common_ports=已开启
|
||
[ -z "$dns_mod" ] && dns_mod=redir_host
|
||
[ -z "$dns_over" ] && dns_over=已开启
|
||
[ -z "$modify_yaml" ] && modify_yaml=未开启
|
||
[ -z "$ipv6_support" ] && ipv6_support=未开启
|
||
[ -z "$start_old" ] && start_old=未开启
|
||
[ -z "$local_proxy" ] && local_proxy=未开启
|
||
[ -z "$mix_port" ] && mix_port=7890
|
||
[ -z "$redir_port" ] && redir_port=7892
|
||
[ -z "$db_port" ] && db_port=9999
|
||
[ -z "$dns_port" ] && dns_port=1053
|
||
[ -z "$dns_nameserver" ] && dns_nameserver='114.114.114.114, 223.5.5.5'
|
||
[ -z "$dns_fallback" ] && dns_fallback='1.0.0.1, 8.8.4.4'
|
||
#是否代理常用端口
|
||
[ "$common_ports" = "已开启" ] && ports='-m multiport --dports 53,587,465,995,993,143,80,443 '
|
||
}
|
||
logger(){
|
||
[ -z "$1" ] && echo -e "\033[31m$1\033[0m"
|
||
echo `date "+%G-%m-%d %H:%M:%S"` $1 >> $clashdir/log
|
||
[ "$(wc -l $clashdir/log | awk '{print $1}')" -gt 30 ] && sed -i '1d' $clashdir/log
|
||
}
|
||
getyaml(){
|
||
#前后端订阅服务器地址索引，可在此处添加！
|
||
Server=`sed -n ""$server_link"p"<<EOF
|
||
subcon.dlj.tf
|
||
subconverter.herokuapp.com
|
||
subcon.py6.pw
|
||
api.dler.io
|
||
api.wcc.best
|
||
EOF`
|
||
Config=`sed -n ""$rule_link"p"<<EOF
|
||
https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/config/ACL4SSR_Online_NoReject.ini
|
||
https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/config/ACL4SSR_Online_Mini_MultiMode.ini
|
||
https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/config/ACL4SSR_Online_AdblockPlus.ini
|
||
https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/config/ACL4SSR_Online_Mini_AdblockPlus.ini
|
||
https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/config/ACL4SSR_Online_Full_Netflix.ini
|
||
https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/config/ACL4SSR_Online_Full_AdblockPlus.ini
|
||
https://gist.githubusercontent.com/tindy2013/1fa08640a9088ac8652dbd40c5d2715b/raw/lhie1_clash.ini
|
||
https://gist.githubusercontent.com/tindy2013/1fa08640a9088ac8652dbd40c5d2715b/raw/lhie1_dler.ini
|
||
https://gist.githubusercontent.com/tindy2013/1fa08640a9088ac8652dbd40c5d2715b/raw/connershua_pro.ini
|
||
https://gist.githubusercontent.com/tindy2013/1fa08640a9088ac8652dbd40c5d2715b/raw/connershua_backtocn.ini
|
||
https://gist.githubusercontent.com/tindy2013/1fa08640a9088ac8652dbd40c5d2715b/raw/dlercloud_lige_platinum.ini
|
||
https://subconverter.oss-ap-southeast-1.aliyuncs.com/Rules/RemoteConfig/special/basic.ini
|
||
https://subconverter.oss-ap-southeast-1.aliyuncs.com/Rules/RemoteConfig/special/netease.ini
|
||
EOF`
|
||
#如果传来的是Url链接则合成Https链接，否则直接使用Https链接
|
||
if [ -z "$Https" ];then
|
||
Https="https://$Server/sub?target=clash&insert=true&new_name=true&scv=true&exclude=$exclude&include=$include&url=$Url&config=$Config"
|
||
markhttp=1
|
||
fi
|
||
#输出
|
||
echo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||
echo 正在连接服务器获取配置文件…………链接地址为：
|
||
echo -e "\033[4;32m$Https\033[0m"
|
||
echo 可以手动复制该链接到浏览器打开并查看数据是否正常！
|
||
echo -e "\033[36m~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"
|
||
echo -e "| |"
|
||
echo -e "| 需要一点时间，请耐心等待！ |"
|
||
echo -e "| \033[0m如长时间没有数据请用ctrl+c退出\033[36m |"
|
||
echo -e "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\033[0m"
|
||
#获取在线yaml文件
|
||
yaml=$clashdir/config.yaml
|
||
yamlnew=/tmp/config.yaml
|
||
rm -rf $yamlnew
|
||
source $clashdir/getdate.sh && webget $yamlnew $Https
|
||
if [ "$result" != "200" ];then
|
||
if [ -z "$markhttp" ];then
|
||
echo -----------------------------------------------
|
||
logger "配置文件获取失败！"
|
||
echo -e "\033[31m请尝试使用【导入订阅】功能！\033[0m"
|
||
echo -----------------------------------------------
|
||
exit 1
|
||
else
|
||
if [ "$retry" -ge 5 ];then
|
||
logger "无法获取配置文件，请检查链接格式以及网络连接状态！"
|
||
exit 1
|
||
else
|
||
retry=$((retry+1))
|
||
logger "配置文件获取失败！"
|
||
echo -e "\033[32m尝试使用其他服务器获取配置！\033[0m"
|
||
logger "正在重试第$retry次/共5次！"
|
||
sed -i '/server_link=*/'d $ccfg
|
||
if [ "$server_link" -ge 5 ]; then
|
||
server_link=0
|
||
fi
|
||
server_link=$((server_link+1))
|
||
sed -i "1i\server_link=$server_link" $ccfg
|
||
Https=""
|
||
getyaml
|
||
fi
|
||
fi
|
||
else
|
||
Https=""
|
||
#检测节点
|
||
if [ -z "$(cat $yamlnew | grep 'server:' | grep -v 'nameserver')" ];then
|
||
echo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||
logger "获取到了配置文件，但似乎并不包含正确的节点信息！"
|
||
echo -----------------------------------------------
|
||
sed -n '1,30p' $yamlnew
|
||
echo -----------------------------------------------
|
||
echo -e "\033[33m请检查如上配置文件信息:\033[0m"
|
||
echo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||
exit 1
|
||
fi
|
||
#检测旧格式
|
||
if cat $yamlnew | grep 'Proxy Group:' >/dev/null;then
|
||
echo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||
logger "已经停止对旧格式配置文件的支持！！！"
|
||
echo -e "请使用新格式或者使用【导入节点/链接】功能！"
|
||
echo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||
exit 1
|
||
fi
|
||
#检测不支持的加密协议
|
||
if cat $yamlnew | grep 'cipher: chacha20,' >/dev/null;then
|
||
echo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||
logger "不支持chacha20加密，请更换节点加密协议！！！"
|
||
echo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||
exit 1
|
||
fi
|
||
#替换文件
|
||
[ -f $yaml ] && mv $yaml $yaml.bak
|
||
mv $yamlnew $yaml
|
||
echo 配置文件已生成！正在启动clash使其生效！
|
||
#重启clash服务
|
||
$0 stop
|
||
$0 start
|
||
sleep 1
|
||
if [ -z "$(pidof clash)" ];then
|
||
echo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||
if [ -f $yaml.bak ];then
|
||
$clashdir/start.sh stop
|
||
mv $yaml.bak $yaml
|
||
$0 start
|
||
logger "clash服务启动失败！已还原配置文件并重启clash！"
|
||
sleep 1
|
||
[ -n "$(pidof clash)" ] && exit 0
|
||
fi
|
||
logger "clash服务启动失败！请查看报错信息！"
|
||
$0 stop
|
||
$clashdir/clash -t -d $clashdir
|
||
echo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||
exit 1
|
||
else
|
||
logger "配置文件获取成功！clash服务已启动！" echooff
|
||
fi
|
||
fi
|
||
}
|
||
modify_yaml(){
|
||
##########需要变更的配置###########
|
||
lan='allow-lan: true'
|
||
mode='mode: Rule'
|
||
log='log-level: info'
|
||
[ "$ipv6_support" = "已开启" ] && ipv6='ipv6: true' || ipv6='ipv6: false'
|
||
external="external-controller: 0.0.0.0:$db_port"
|
||
[ -d $clashdir/ui ] && db_ui=ui
|
||
[ "$redir_mod" != "Redir模式" ] && tun='tun: {enable: true, stack: system}' || tun='tun: {enable: false}'
|
||
exper='experimental: {ignore-resolve-fail: true, interface-name: en0}'
|
||
#dns配置
|
||
[ "$dns_over" = "未开启" ] && dns_local=', 127.0.0.1:53'
|
||
if [ "$dns_mod" = "fake-ip" ];then
|
||
dns='dns: {enable: true, listen: 0.0.0.0:'$dns_port', use-hosts: true, fake-ip-range: 198.18.0.1/16, enhanced-mode: fake-ip, fake-ip-filter: ["*.lan", "time.windows.com", "time.nist.gov", "time.apple.com", "time.asia.apple.com", "*.ntp.org.cn", "*.openwrt.pool.ntp.org", "time1.cloud.tencent.com", "time.ustc.edu.cn", "pool.ntp.org", "ntp.ubuntu.com", "ntp.aliyun.com", "ntp1.aliyun.com", "ntp2.aliyun.com", "ntp3.aliyun.com", "ntp4.aliyun.com", "ntp5.aliyun.com", "ntp6.aliyun.com", "ntp7.aliyun.com", "time1.aliyun.com", "time2.aliyun.com", "time3.aliyun.com", "time4.aliyun.com", "time5.aliyun.com", "time6.aliyun.com", "time7.aliyun.com", "*.time.edu.cn", "time1.apple.com", "time2.apple.com", "time3.apple.com", "time4.apple.com", "time5.apple.com", "time6.apple.com", "time7.apple.com", "time1.google.com", "time2.google.com", "time3.google.com", "time4.google.com", "music.163.com", "*.music.163.com", "*.126.net", "musicapi.taihe.com", "music.taihe.com", "songsearch.kugou.com", "trackercdn.kugou.com", "*.kuwo.cn", "api-jooxtt.sanook.com", "api.joox.com", "joox.com", "y.qq.com", "*.y.qq.com", "streamoc.music.tc.qq.com", "mobileoc.music.tc.qq.com", "isure.stream.qqmusic.qq.com", "dl.stream.qqmusic.qq.com", "aqqmusic.tc.qq.com", "amobile.music.tc.qq.com", "*.xiami.com", "*.music.migu.cn", "music.migu.cn", "*.msftconnecttest.com", "*.msftncsi.com", "localhost.ptlogin2.qq.com", "*.*.*.srv.nintendo.net", "*.*.stun.playstation.net", "xbox.*.*.microsoft.com", "*.*.xboxlive.com", "proxy.golang.org"], nameserver: ['$dns_nameserver', 127.0.0.1:53], fallback: ['$dns_fallback'], fallback-filter: {geoip: true}}'
|
||
else
|
||
dns='dns: {enable: true, ipv6: true, listen: 0.0.0.0:'$dns_port', use-hosts: true, enhanced-mode: redir-host, nameserver: ['$dns_nameserver$dns_local'], fallback: ['$dns_fallback'], fallback-filter: {geoip: true}}'
|
||
fi
|
||
|
||
###################################
|
||
yaml=$clashdir/config.yaml
|
||
#预删除需要添加的项目
|
||
a=$(grep -n "port:" $yaml | head -1 | cut -d ":" -f 1)
|
||
b=$(grep -n "^prox" $yaml | head -1 | cut -d ":" -f 1)
|
||
b=$((b-1))
|
||
sed -i "${a},${b}d" $yaml
|
||
#添加配置
|
||
sed -i "1imixed-port:\ $mix_port" $yaml
|
||
sed -i "1aredir-port:\ $redir_port" $yaml
|
||
sed -i "2aauthentication:\ \[\"$authentication\"\]" $yaml
|
||
sed -i "3a$lan" $yaml
|
||
sed -i "4a$mode" $yaml
|
||
sed -i "5a$log" $yaml
|
||
sed -i "6a$ipv6" $yaml
|
||
sed -i "7aexternal-controller:\ :$db_port" $yaml
|
||
sed -i "8aexternal-ui:\ $db_ui" $yaml
|
||
sed -i "9asecret:\ $secret" $yaml
|
||
sed -i "10a$tun" $yaml
|
||
sed -i "11a$exper" $yaml
|
||
sed -i "12a$dns" $yaml
|
||
#跳过本地tls证书验证
|
||
if [ "$skip_cert" = "已开启" ];then
|
||
sed -i '10,99s/skip-cert-verify: false/skip-cert-verify: true/' $yaml
|
||
else
|
||
sed -i '10,99s/skip-cert-verify: true/skip-cert-verify: false/' $yaml
|
||
fi
|
||
#禁止fake-ip回环流量
|
||
#sed -i '/198.18.0.0/'d $yaml
|
||
#sed -i '/rules:/a \ - IP-CIDR,198.18.0.0/16,REJECT' $yaml
|
||
}
|
||
mark_time(){
|
||
start_time=`date +%s`
|
||
sed -i '/start_time*/'d $clashdir/mark
|
||
sed -i "1i\start_time=$start_time" $clashdir/mark
|
||
}
|
||
start_redir(){
|
||
#流量过滤规则
|
||
iptables -t nat -N clash
|
||
iptables -t nat -A clash -d 0.0.0.0/8 -j RETURN
|
||
iptables -t nat -A clash -d 10.0.0.0/8 -j RETURN
|
||
iptables -t nat -A clash -d 127.0.0.0/8 -j RETURN
|
||
iptables -t nat -A clash -d 169.254.0.0/16 -j RETURN
|
||
iptables -t nat -A clash -d 172.16.0.0/12 -j RETURN
|
||
iptables -t nat -A clash -d 192.168.0.0/16 -j RETURN
|
||
iptables -t nat -A clash -d 224.0.0.0/4 -j RETURN
|
||
iptables -t nat -A clash -d 240.0.0.0/4 -j RETURN
|
||
for mac in $(cat $clashdir/mac); do
|
||
iptables -t nat -A clash -m mac --mac-source $mac -j RETURN
|
||
done
|
||
#设置防火墙流量转发
|
||
iptables -t nat -A clash -p tcp $ports-j REDIRECT --to-ports $redir_port
|
||
iptables -t nat -A PREROUTING -p tcp -j clash
|
||
#设置ipv6转发
|
||
if [ -n "ip6_nat" -a "$ipv6_support" = "已开启" ];then
|
||
ip6tables -t nat -N clashv6
|
||
for mac in $(cat $clashdir/mac); do
|
||
ip6tables -t nat -A clashv6 -m mac --mac-source $mac -j RETURN
|
||
done
|
||
ip6tables -t nat -A clashv6 -p tcp $ports-j REDIRECT --to-ports $redir_port
|
||
ip6tables -t nat -A PREROUTING -p tcp -j clashv6
|
||
fi
|
||
}
|
||
start_udp(){
|
||
ip rule add fwmark 1 table 100
|
||
ip route add local default dev lo table 100
|
||
iptables -t mangle -N clash
|
||
iptables -t mangle -A clash -d 0.0.0.0/8 -j RETURN
|
||
iptables -t mangle -A clash -d 10.0.0.0/8 -j RETURN
|
||
iptables -t mangle -A clash -d 127.0.0.0/8 -j RETURN
|
||
iptables -t mangle -A clash -d 169.254.0.0/16 -j RETURN
|
||
iptables -t mangle -A clash -d 172.16.0.0/12 -j RETURN
|
||
iptables -t mangle -A clash -d 192.168.0.0/16 -j RETURN
|
||
iptables -t mangle -A clash -d 224.0.0.0/4 -j RETURN
|
||
iptables -t mangle -A clash -d 240.0.0.0/4 -j RETURN
|
||
iptables -t mangle -A clash -p udp -j TPROXY --on-port $redir_port --tproxy-mark 1
|
||
iptables -t mangle -A PREROUTING -p udp -j clash
|
||
}
|
||
stop_iptables(){
|
||
#重置iptables规则
|
||
iptables -t nat -D PREROUTING -p tcp -j clash > /dev/null 2>&1
|
||
iptables -t nat -D PREROUTING -p udp -j clash_dns > /dev/null 2>&1
|
||
iptables -t nat -D PREROUTING -p tcp -d 8.8.8.8 -j clash_dns > /dev/null 2>&1
|
||
iptables -t nat -D PREROUTING -p tcp -d 8.8.4.4 -j clash_dns > /dev/null 2>&1
|
||
iptables -t nat -F clash > /dev/null 2>&1
|
||
iptables -t nat -X clash > /dev/null 2>&1
|
||
iptables -t nat -F clash_dns > /dev/null 2>&1
|
||
iptables -t nat -X clash_dns > /dev/null 2>&1
|
||
iptables -D FORWARD -o utun -j ACCEPT > /dev/null 2>&1
|
||
#重置udp规则
|
||
iptables -t mangle -D PREROUTING -p udp -j clash > /dev/null 2>&1
|
||
iptables -t mangle -F clash > /dev/null 2>&1
|
||
iptables -t mangle -X clash > /dev/null 2>&1
|
||
#重置ipv6规则
|
||
ip6tables -t nat -D PREROUTING -p tcp -j clashv6 > /dev/null 2>&1
|
||
ip6tables -t nat -D PREROUTING -p udp -j clashv6_dns > /dev/null 2>&1
|
||
ip6tables -t nat -F clashv6 > /dev/null 2>&1
|
||
ip6tables -t nat -X clashv6 > /dev/null 2>&1
|
||
ip6tables -t nat -F clashv6_dns > /dev/null 2>&1
|
||
ip6tables -t nat -X clashv6_dns > /dev/null 2>&1
|
||
ip6tables -D FORWARD -o utun -j ACCEPT > /dev/null 2>&1
|
||
}
|
||
start_dns(){
|
||
#允许tun网卡接受流量
|
||
if [ "$redir_mod" = "Tun模式" -o "$redir_mod" = "混合模式" ];then
|
||
iptables -I FORWARD -o utun -j ACCEPT
|
||
[ "$ipv6_support" = "已开启" ] && ip6tables -I FORWARD -o utun -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
#设置dns转发
|
||
iptables -t nat -N clash_dns
|
||
for mac in $(cat $clashdir/mac); do
|
||
iptables -t nat -A clash_dns -m mac --mac-source $mac -j RETURN
|
||
done
|
||
iptables -t nat -A clash_dns -p udp --dport 53 -j REDIRECT --to $dns_port
|
||
iptables -t nat -A clash_dns -p tcp --dport 53 -j REDIRECT --to $dns_port
|
||
iptables -t nat -A PREROUTING -p udp -j clash_dns
|
||
#Google home DNS特殊处理
|
||
iptables -t nat -I PREROUTING -p tcp -d 8.8.8.8 -j clash_dns
|
||
iptables -t nat -I PREROUTING -p tcp -d 8.8.4.4 -j clash_dns
|
||
#ipv6DNS
|
||
ip6_nat=$(ip6tables -t nat -L 2>&1|grep -o 'Chain')
|
||
if [ -n "ip6_nat" ];then
|
||
ip6tables -t nat -N clashv6_dns > /dev/null 2>&1
|
||
for mac in $(cat $clashdir/mac); do
|
||
ip6tables -t nat -A clashv6_dns -m mac --mac-source $mac -j RETURN > /dev/null 2>&1
|
||
done
|
||
ip6tables -t nat -A clashv6_dns -p udp --dport 53 -j REDIRECT --to $dns_port > /dev/null 2>&1
|
||
ip6tables -t nat -A PREROUTING -p udp -j clashv6_dns > /dev/null 2>&1
|
||
else
|
||
ip6tables -I INPUT -p tcp --dport 53 -j REJECT
|
||
ip6tables -I INPUT -p udp --dport 53 -j REJECT
|
||
fi
|
||
}
|
||
daemon(){
|
||
if [ -n "$cronpath" ];then
|
||
echo '*/1 * * * * test -z "$(pidof clash)" && /etc/init.d/clash restart #clash保守模式守护进程' >> $cronpath
|
||
chmod 600 $cronpath
|
||
fi
|
||
}
|
||
web_save(){
|
||
get_save(){
|
||
if curl --version > /dev/null 2>&1;then
|
||
curl -s -H "Authorization: Bearer ${secret}" -H "Content-Type:application/json" "$1"
|
||
elif [ -n "$(wget --help 2>&1|grep '\-\-method')" ];then
|
||
wget -q --header="Authorization: Bearer ${secret}" --header="Content-Type:application/json" -O - "$1"
|
||
else
|
||
logger 当前系统未安装curl且wget的版本太低，无法保存节点配置！
|
||
getconfig
|
||
sed -i /保存节点配置/d $cronpath >/dev/null 2>&1
|
||
fi
|
||
}
|
||
#使用get_save获取面板节点设置
|
||
get_save http://localhost:${db_port}/proxies | awk -F "{" '{for(i=1;i<=NF;i++) print $i}' | grep -E '^"all".*"Selector"' | grep -oE '"name".*"now".*",' | sed 's/"name"://g' | sed 's/"now"://g'| sed 's/"//g' > /tmp/clash_web_save
|
||
#对比文件，如果有变动则写入磁盘，否则清除缓存
|
||
if [ "$(cat /tmp/clash_web_save)" = "$(cat $clashdir/web_save 2>/dev/null)" ];then
|
||
rm -rf /tmp/clash_web_save
|
||
else
|
||
mv -f /tmp/clash_web_save $clashdir/web_save
|
||
fi
|
||
}
|
||
web_restore(){
|
||
put_save(){
|
||
if curl --version > /dev/null 2>&1;then
|
||
curl -sS -X PUT -H "Authorization: Bearer ${secret}" -H "Content-Type:application/json" "$1" -d "$2" >/dev/null
|
||
else
|
||
wget --method=PUT --header="Authorization: Bearer ${secret}" --header="Content-Type:application/json" --body-data="$2" "$1" >/dev/null
|
||
fi
|
||
}
|
||
#设置循环检测clash面板端口
|
||
i=1
|
||
while [ $i -lt 10 ]
|
||
do
|
||
sleep 1
|
||
if curl --version > /dev/null 2>&1;then
|
||
test=$(curl -s http://localhost:${db_port})
|
||
else
|
||
test=$(wget -q -O - http://localhost:${db_port})
|
||
fi
|
||
[ -n "$test" ] && i=10
|
||
done
|
||
#发送数据
|
||
num=$(cat $clashdir/web_save | wc -l)
|
||
for i in `seq $num`;
|
||
do
|
||
group_name=$(awk -F ',' 'NR=="'${i}'" {print $1}' $clashdir/web_save | sed 's/ /%20/g')
|
||
now_name=$(awk -F ',' 'NR=="'${i}'" {print $2}' $clashdir/web_save)
|
||
put_save http://localhost:${db_port}/proxies/${group_name} "{\"name\":\"${now_name}\"}"
|
||
done
|
||
exit 0
|
||
}
|
||
web_save_auto(){
|
||
if [ -n "$cronpath" ];then
|
||
if [ -z "$(cat $cronpath | grep '保存节点配置')" ];then
|
||
echo '*/10 * * * * test -n "$(pidof clash)" && /etc/init.d/clash web_save #每10分钟保存节点配置' >> $cronpath
|
||
chmod 600 $cronpath
|
||
fi
|
||
fi
|
||
}
|
||
afstart(){
|
||
#读取配置文件
|
||
getconfig
|
||
#修改iptables规则使流量进入clash
|
||
[ "$redir_mod" != "纯净模式" ] && [ "$dns_no" != "true" ] && start_dns
|
||
[ "$redir_mod" != "纯净模式" ] && [ "$redir_mod" != "Tun模式" ] && start_redir
|
||
[ "$redir_mod" = "Redir模式" ] && [ "$tproxy_mod" = "已开启" ] && start_udp
|
||
#标记启动时间
|
||
mark_time
|
||
#设置本机代理
|
||
[ "$local_proxy" = "已开启" ] && $0 set_proxy $mix_port
|
||
#还原面板配置
|
||
web_save_auto #启用面板配置自动保存
|
||
[ -f $clashdir/web_save ] && web_restore & #后台还原面板配置
|
||
}
|
||
|
||
case "$1" in
|
||
|
||
afstart)
|
||
afstart
|
||
;;
|
||
start)
|
||
getconfig
|
||
[ "$modify_yaml" != "已开启" ] && modify_yaml #使用内置规则强行覆盖config配置文件
|
||
#使用不同方式启动clash服务
|
||
if [ "$start_old" = "已开启" ];then
|
||
$clashdir/clash -d $clashdir >/dev/null 2>&1 &
|
||
sleep 1
|
||
daemon
|
||
afstart
|
||
elif [ -f /etc/rc.common ];then
|
||
/etc/init.d/clash start
|
||
else
|
||
systemctl start clash.service
|
||
fi
|
||
;;
|
||
stop)
|
||
getconfig
|
||
web_save #保存面板配置
|
||
#删除守护进程&面板配置自动保存
|
||
sed -i /clash保守模式守护进程/d $cronpath >/dev/null 2>&1
|
||
sed -i /保存节点配置/d $cronpath >/dev/null 2>&1
|
||
#多种方式结束进程
|
||
if [ -f /etc/rc.common ];then
|
||
/etc/init.d/clash stop >/dev/null 2>&1
|
||
else
|
||
systemctl stop clash.service >/dev/null 2>&1
|
||
fi
|
||
pidof clash | xargs kill -9 >/dev/null 2>&1
|
||
killall -9 clash >/dev/null 2>&1
|
||
stop_iptables #清理iptables
|
||
[ "$local_proxy" = "已开启" ] && $0 unset_proxy #禁用本机代理
|
||
;;
|
||
restart)
|
||
$0 stop
|
||
$0 start
|
||
;;
|
||
getyaml)
|
||
getconfig
|
||
getyaml
|
||
;;
|
||
daemon)
|
||
daemon
|
||
;;
|
||
web_save)
|
||
getconfig
|
||
web_save
|
||
;;
|
||
set_proxy)
|
||
#GNOME配置
|
||
if gsettings --version >/dev/null 2>&1 ;then
|
||
gsettings set org.gnome.system.proxy autoconfig-url "http://127.0.0.1:$1/ui/pac"
|
||
gsettings set org.gnome.system.proxy mode "auto"
|
||
[ "$?" = 0 ] && check=$?
|
||
#KDE配置
|
||
elif kwriteconfig5 -h >/dev/null 2>&1 ;then
|
||
kwriteconfig5 --file kioslaverc --group "Proxy Settings" --key "Proxy Config Script" "http://127.0.0.1:$1/ui/pac"
|
||
kwriteconfig5 --file kioslaverc --group "Proxy Settings" --key "ProxyType" 2
|
||
[ "$?" = 0 ] && check=$?
|
||
#环境变量方式
|
||
fi
|
||
if [ -z "$check" ];then
|
||
[ -w ~/.bashrc ] && profile=~/.bashrc
|
||
[ -w /etc/profile ] && profile=/etc/profile
|
||
echo 'export all_proxy=http://127.0.0.1:'"$1" >> $profile
|
||
echo 'export ALL_PROXY=$all_proxy' >> $profile
|
||
fi
|
||
;;
|
||
unset_proxy)
|
||
#GNOME配置
|
||
if gsettings --version >/dev/null 2>&1 ;then
|
||
gsettings set org.gnome.system.proxy mode "none"
|
||
#KDE配置
|
||
elif kwriteconfig5 -h >/dev/null 2>&1 ;then
|
||
kwriteconfig5 --file kioslaverc --group "Proxy Settings" --key "ProxyType" 0
|
||
#环境变量方式
|
||
else
|
||
[ -w ~/.bashrc ] && profile=~/.bashrc
|
||
[ -w /etc/profile ] && profile=/etc/profile
|
||
sed -i '/all_proxy/'d $profile
|
||
sed -i '/ALL_PROXY/'d $profile
|
||
fi
|
||
;;
|
||
esac
|
||
|
||
exit 0
|