mirror of
https://github.com/TheyCallMeSecond/sing-box-manager.git
synced 2024-11-16 19:56:10 +08:00
2617 lines
103 KiB
Bash
2617 lines
103 KiB
Bash
#!/bin/bash
|
||
|
||
RED='\033[0;31m'
|
||
CYAN='\033[0;36m'
|
||
YELLOW='\033[0;33m'
|
||
NC='\033[0m'
|
||
|
||
function configure_dns64() {
|
||
local ipv4_address
|
||
local ipv6_address
|
||
|
||
ipv4_address=$(curl -s4 ifconfig.co)
|
||
ipv6_address=$(curl -s6 ifconfig.co)
|
||
|
||
if [[ -n $ipv4_address ]]; then
|
||
return
|
||
fi
|
||
|
||
if [[ -n $ipv6_address ]]; then
|
||
echo "Check that the machine is IPv6 single-stack network, configure DNS64..."
|
||
sed -i '/^nameserver /s/^/#/' /etc/resolv.conf
|
||
echo "nameserver 2001:67c:2b0::4" >> /etc/resolv.conf
|
||
echo "nameserver 2001:67c:2b0::6" >> /etc/resolv.conf
|
||
echo "DNS64 configuration is complete."
|
||
fi
|
||
}
|
||
|
||
function check_firewall_configuration() {
|
||
local os_name=$(uname -s)
|
||
local firewall
|
||
|
||
if [[ $os_name == "Linux" ]]; then
|
||
if command -v ufw >/dev/null 2>&1 && ufw status | grep -q "Status: active"; then
|
||
firewall="ufw"
|
||
elif command -v ip6tables >/dev/null 2>&1 && ip6tables -S | grep -q "INPUT -j DROP"; then
|
||
firewall="ip6tables"
|
||
elif command -v iptables >/dev/null 2>&1 && iptables -S | grep -q "INPUT -j DROP"; then
|
||
firewall="iptables"
|
||
elif systemctl is-active --quiet netfilter-persistent; then
|
||
firewall="iptables-persistent"
|
||
elif systemctl is-active --quiet iptables.service; then
|
||
firewall="iptables-service"
|
||
elif command -v firewalld >/dev/null 2>&1 && firewall-cmd --state | grep -q "running"; then
|
||
firewall="firewalld"
|
||
fi
|
||
fi
|
||
|
||
if [[ -z $firewall ]]; then
|
||
echo "No firewall configuration detected or firewall is not enabled, skipping firewall configuration."
|
||
return
|
||
fi
|
||
|
||
echo "Checking firewall configuration..."
|
||
case $firewall in
|
||
ufw)
|
||
if ! ufw status | grep -q "Status: active" 2>/dev/null; then
|
||
ufw enable > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! ufw status | grep -q " $listen_port" 2>/dev/null; then
|
||
ufw allow "$listen_port" > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! ufw status | grep -q " $override_port" 2>/dev/null; then
|
||
ufw allow "$override_port" > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! ufw status | grep -q " $fallback_port" 2>/dev/null; then
|
||
ufw allow "$fallback_port" > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! ufw status | grep -q " 80" 2>/dev/null; then
|
||
ufw allow 80 > /dev/null 2>&1
|
||
fi
|
||
|
||
echo "Firewall configuration has been updated."
|
||
;;
|
||
iptables | iptables-persistent | iptables-service)
|
||
# IPv4 rules
|
||
if ! iptables -C INPUT -p tcp --dport "$listen_port" -j ACCEPT >/dev/null 2>&1; then
|
||
iptables -A INPUT -p tcp --dport "$listen_port" -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! iptables -C INPUT -p udp --dport "$listen_port" -j ACCEPT >/dev/null 2>&1; then
|
||
iptables -A INPUT -p udp --dport "$listen_port" -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! iptables -C INPUT -p tcp --dport "$override_port" -j ACCEPT >/dev/null 2>&1; then
|
||
iptables -A INPUT -p tcp --dport "$override_port" -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! iptables -C INPUT -p udp --dport "$override_port" -j ACCEPT >/dev/null 2>&1; then
|
||
iptables -A INPUT -p udp --dport "$override_port" -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! iptables -C INPUT -p tcp --dport "$fallback_port" -j ACCEPT >/dev/null 2>&1; then
|
||
iptables -A INPUT -p tcp --dport "$fallback_port" -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! iptables -C INPUT -p udp --dport "$fallback_port" -j ACCEPT >/dev/null 2>&1; then
|
||
iptables -A INPUT -p udp --dport "$fallback_port" -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! iptables -C INPUT -p tcp --dport 80 -j ACCEPT >/dev/null 2>&1; then
|
||
iptables -A INPUT -p tcp --dport 80 -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! iptables -C INPUT -p udp --dport 80 -j ACCEPT >/dev/null 2>&1; then
|
||
iptables -A INPUT -p udp --dport 80 -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
# IPv6 rules
|
||
if ! ip6tables -C INPUT -p tcp --dport "$listen_port" -j ACCEPT >/dev/null 2>&1; then
|
||
ip6tables -A INPUT -p tcp --dport "$listen_port" -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! ip6tables -C INPUT -p udp --dport "$listen_port" -j ACCEPT >/dev/null 2>&1; then
|
||
ip6tables -A INPUT -p udp --dport "$listen_port" -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! ip6tables -C INPUT -p tcp --dport "$override_port" -j ACCEPT >/dev/null 2>&1; then
|
||
ip6tables -A INPUT -p tcp --dport "$override_port" -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! ip6tables -C INPUT -p udp --dport "$override_port" -j ACCEPT >/dev/null 2>&1; then
|
||
ip6tables -A INPUT -p udp --dport "$override_port" -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! ip6tables -C INPUT -p tcp --dport "$fallback_port" -j ACCEPT >/dev/null 2>&1; then
|
||
ip6tables -A INPUT -p tcp --dport "$fallback_port" -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! ip6tables -C INPUT -p udp --dport "$fallback_port" -j ACCEPT >/dev/null 2>&1; then
|
||
ip6tables -A INPUT -p udp --dport "$fallback_port" -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! ip6tables -C INPUT -p tcp --dport 80 -j ACCEPT >/dev/null 2>&1; then
|
||
ip6tables -A INPUT -p tcp --dport 80 -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! ip6tables -C INPUT -p udp --dport 80 -j ACCEPT >/dev/null 2>&1; then
|
||
ip6tables -A INPUT -p udp --dport 80 -j ACCEPT > /dev/null 2>&1
|
||
fi
|
||
|
||
if [[ -e /etc/iptables/rules.v4 ]]; then
|
||
iptables-save > /etc/iptables/rules.v4
|
||
elif [[ -e /etc/sysconfig/iptables ]]; then
|
||
iptables-save > /etc/sysconfig/iptables
|
||
fi
|
||
|
||
if [[ -e /etc/iptables/rules.v6 ]]; then
|
||
ip6tables-save > /etc/iptables/rules.v6
|
||
elif [[ -e /etc/sysconfig/ip6tables ]]; then
|
||
ip6tables-save > /etc/sysconfig/ip6tables
|
||
fi
|
||
|
||
echo "Firewall configuration has been updated."
|
||
;;
|
||
firewalld)
|
||
# IPv4 rules
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "$listen_port/tcp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port="$listen_port/tcp" --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "$listen_port/udp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port="$listen_port/udp" --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "$override_port/tcp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port="$override_port/tcp" --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "$override_port/udp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port="$override_port/udp" --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "$fallback_port/tcp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port="$fallback_port/tcp" --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "$fallback_port/udp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port="$fallback_port/udp" --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "80/tcp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port=80/tcp --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "80/udp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port=80/udp --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
# IPv6 rules
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "$listen_port/tcp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port="$listen_port/tcp" --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "$listen_port/udp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port="$listen_port/udp" --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "$override_port/tcp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port="$override_port/tcp" --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "$override_port/udp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port="$override_port/udp" --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "$fallback_port/tcp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port="$fallback_port/tcp" --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "$fallback_port/udp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port="$fallback_port/udp" --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "80/tcp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port=80/tcp --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
if ! firewall-cmd --zone=public --list-ports | grep -q "80/udp" 2>/dev/null; then
|
||
firewall-cmd --zone=public --add-port=80/udp --permanent > /dev/null 2>&1
|
||
fi
|
||
|
||
firewall-cmd --reload
|
||
|
||
echo "Firewall configuration has been updated."
|
||
;;
|
||
esac
|
||
}
|
||
|
||
function create_sing_box_folder() {
|
||
local folder="/usr/local/etc/sing-box"
|
||
if [[ ! -d "$folder" ]]; then
|
||
mkdir -p "$folder"
|
||
fi
|
||
touch "$folder/config.json"
|
||
}
|
||
|
||
function create_caddy_folder() {
|
||
local folder="/usr/local/etc/caddy"
|
||
if [[ ! -d "$folder" ]]; then
|
||
mkdir -p "$folder"
|
||
fi
|
||
}
|
||
|
||
function create_ssl_folder() {
|
||
local ssl_folder="/etc/ssl/private"
|
||
|
||
if [[ ! -d "$ssl_folder" ]]; then
|
||
mkdir -p "$ssl_folder"
|
||
fi
|
||
}
|
||
|
||
function create_juicity_folder() {
|
||
local folder="/usr/local/etc/juicity"
|
||
if [[ ! -d "$folder" ]]; then
|
||
mkdir -p "$folder"
|
||
fi
|
||
}
|
||
|
||
function check_config_file_existence() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
if [ ! -f "$config_file" ]; then
|
||
echo -e "${RED}sing-box 配置文件不存在，请先搭建节点！${NC}"
|
||
exit 1
|
||
fi
|
||
}
|
||
|
||
function check_sing_box_existence() {
|
||
if [[ -f "/usr/local/bin/sing-box" ]]; then
|
||
return 1
|
||
else
|
||
return 0
|
||
fi
|
||
}
|
||
|
||
function install_sing_box() {
|
||
check_sing_box_existence
|
||
local result=$?
|
||
|
||
if [[ $result -eq 0 ]]; then
|
||
configure_dns64
|
||
enable_bbr
|
||
select_sing_box_install_option
|
||
configure_sing_box_service
|
||
create_sing_box_folder
|
||
create_ssl_folder
|
||
|
||
fi
|
||
}
|
||
|
||
function enable_bbr() {
|
||
if ! grep -q "net.core.default_qdisc=fq" /etc/sysctl.conf; then
|
||
echo "Enable BBR..."
|
||
echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf
|
||
echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf
|
||
sysctl -p
|
||
echo "BBR has been enabled"
|
||
else
|
||
echo "BBR is already enabled, skipping configuration."
|
||
fi
|
||
}
|
||
|
||
function select_sing_box_install_option() {
|
||
while true; do
|
||
echo "请选择 sing-box 的安装方式（默认1）："
|
||
echo "1). 下载安装 sing-box（Latest 版本，推荐使用）"
|
||
echo "2). 下载安装 sing-box（Beta 版本，支持hysteria2）"
|
||
echo "3). 编译安装 sing-box（低配置服务器慎用）"
|
||
|
||
local install_option
|
||
read -p "请选择 [1-2]: " install_option
|
||
install_option="${install_option:-1}"
|
||
|
||
case $install_option in
|
||
1)
|
||
install_latest_sing_box
|
||
break
|
||
;;
|
||
2)
|
||
install_Pre_release_sing_box
|
||
break
|
||
;;
|
||
|
||
3)
|
||
install_go
|
||
compile_install_sing_box
|
||
break
|
||
;;
|
||
*)
|
||
echo -e "${RED}无效的选择，请重新输入。${NC}"
|
||
;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
function install_go() {
|
||
if ! command -v go &> /dev/null; then
|
||
echo "Downloading Go..."
|
||
local go_arch
|
||
case $(uname -m) in
|
||
x86_64)
|
||
go_arch="amd64"
|
||
;;
|
||
i686)
|
||
go_arch="386"
|
||
;;
|
||
aarch64)
|
||
go_arch="arm64"
|
||
;;
|
||
armv6l)
|
||
go_arch="armv6l"
|
||
;;
|
||
*)
|
||
echo -e "${RED}不支持的架构: $(uname -m)${NC}"
|
||
exit 1
|
||
;;
|
||
esac
|
||
|
||
local go_version
|
||
go_version=$(curl -sL "https://golang.org/VERSION?m=text" | grep -o 'go[0-9]\+\.[0-9]\+\.[0-9]\+')
|
||
local go_download_url="https://go.dev/dl/$go_version.linux-$go_arch.tar.gz"
|
||
|
||
wget -qO- "$go_download_url" | tar -xz -C /usr/local
|
||
echo 'export PATH=$PATH:/usr/local/go/bin' | tee -a /etc/profile >/dev/null
|
||
source /etc/profile
|
||
go version
|
||
|
||
echo "Go has been installed."
|
||
else
|
||
echo "Go is already installed, skipping installation."
|
||
fi
|
||
}
|
||
|
||
function compile_install_sing_box() {
|
||
local go_install_command="go install -v -tags \
|
||
with_quic,\
|
||
with_grpc,\
|
||
with_dhcp,\
|
||
with_wireguard,\
|
||
with_shadowsocksr,\
|
||
with_ech,\
|
||
with_utls,\
|
||
with_reality_server,\
|
||
with_acme,\
|
||
with_clash_api,\
|
||
with_v2ray_api,\
|
||
with_gvisor,\
|
||
with_lwip \
|
||
github.com/sagernet/sing-box/cmd/sing-box@latest"
|
||
|
||
echo "Compiling and installing sing-box, please wait..."
|
||
$go_install_command
|
||
|
||
if [[ $? -eq 0 ]]; then
|
||
mv ~/go/bin/sing-box /usr/local/bin/
|
||
chmod +x /usr/local/bin/sing-box
|
||
echo "sing-box has been compiled and installed successfully."
|
||
else
|
||
echo -e "${RED}sing-box compilation and installation failed.${NC}"
|
||
exit 1
|
||
fi
|
||
}
|
||
|
||
function install_latest_sing_box() {
|
||
local arch=$(uname -m)
|
||
local url="https://api.github.com/repos/SagerNet/sing-box/releases/latest"
|
||
local download_url
|
||
|
||
case $arch in
|
||
x86_64)
|
||
download_url=$(curl -s $url | grep -o "https://github.com[^\"']*linux-amd64.tar.gz")
|
||
;;
|
||
armv7l)
|
||
download_url=$(curl -s $url | grep -o "https://github.com[^\"']*linux-armv7.tar.gz")
|
||
;;
|
||
aarch64)
|
||
download_url=$(curl -s $url | grep -o "https://github.com[^\"']*linux-arm64.tar.gz")
|
||
;;
|
||
amd64v3)
|
||
download_url=$(curl -s $url | grep -o "https://github.com[^\"']*linux-amd64v3.tar.gz")
|
||
;;
|
||
*)
|
||
echo -e "${RED}不支持的架构：$arch${NC}"
|
||
return 1
|
||
;;
|
||
esac
|
||
|
||
if [ -n "$download_url" ]; then
|
||
echo "Downloading Sing-Box..."
|
||
wget -qO sing-box.tar.gz "$download_url" 2>&1 >/dev/null
|
||
tar -xzf sing-box.tar.gz -C /usr/local/bin --strip-components=1
|
||
rm sing-box.tar.gz
|
||
chmod +x /usr/local/bin/sing-box
|
||
|
||
echo "Sing-Box installed successfully."
|
||
else
|
||
echo -e "${RED}Unable to retrieve the download URL for Sing-Box.${NC}"
|
||
return 1
|
||
fi
|
||
}
|
||
|
||
function install_Pre_release_sing_box() {
|
||
local arch=$(uname -m)
|
||
local url="https://api.github.com/repos/SagerNet/sing-box/releases"
|
||
local download_url
|
||
|
||
case $arch in
|
||
x86_64)
|
||
download_url=$(curl -s "$url" | jq -r '.[] | select(.prerelease == true) | .assets[] | select(.browser_download_url | contains("linux-amd64.tar.gz")) | .browser_download_url' | head -n 1)
|
||
;;
|
||
armv7l)
|
||
download_url=$(curl -s "$url" | jq -r '.[] | select(.prerelease == true) | .assets[] | select(.browser_download_url | contains("linux-armv7.tar.gz")) | .browser_download_url' | head -n 1)
|
||
;;
|
||
aarch64)
|
||
download_url=$(curl -s "$url" | jq -r '.[] | select(.prerelease == true) | .assets[] | select(.browser_download_url | contains("linux-arm64.tar.gz")) | .browser_download_url' | head -n 1)
|
||
;;
|
||
amd64v3)
|
||
download_url=$(curl -s "$url" | jq -r '.[] | select(.prerelease == true) | .assets[] | select(.browser_download_url | contains("linux-amd64v3.tar.gz")) | .browser_download_url' | head -n 1)
|
||
;;
|
||
*)
|
||
echo -e "${RED}不支持的架构：$arch${NC}"
|
||
return 1
|
||
;;
|
||
esac
|
||
|
||
if [ -n "$download_url" ]; then
|
||
echo "Downloading Sing-Box..."
|
||
wget -qO sing-box.tar.gz "$download_url" 2>&1 >/dev/null
|
||
tar -xzf sing-box.tar.gz -C /usr/local/bin --strip-components=1
|
||
rm sing-box.tar.gz
|
||
chmod +x /usr/local/bin/sing-box
|
||
|
||
echo "Sing-Box installed successfully."
|
||
else
|
||
echo -e "${RED}Unable to get pre-release download link for Sing-Box.${NC}"
|
||
return 1
|
||
fi
|
||
}
|
||
|
||
function install_latest_juicity() {
|
||
local arch=$(uname -m)
|
||
|
||
case $arch in
|
||
"arm64")
|
||
arch_suffix="arm64"
|
||
;;
|
||
"armv5")
|
||
arch_suffix="armv5"
|
||
;;
|
||
"armv6")
|
||
arch_suffix="armv6"
|
||
;;
|
||
"armv7")
|
||
arch_suffix="armv7"
|
||
;;
|
||
"mips")
|
||
arch_suffix="mips32"
|
||
;;
|
||
"mipsel")
|
||
arch_suffix="mips32le"
|
||
;;
|
||
"mips64")
|
||
arch_suffix="mips64"
|
||
;;
|
||
"mips64el")
|
||
arch_suffix="mips64le"
|
||
;;
|
||
"riscv64")
|
||
arch_suffix="riscv64"
|
||
;;
|
||
"i686")
|
||
arch_suffix="x86_32"
|
||
;;
|
||
"x86_64")
|
||
if [ -n "$(grep avx2 /proc/cpuinfo)" ]; then
|
||
arch_suffix="x86_64_v3_avx2"
|
||
else
|
||
arch_suffix="x86_64_v2_sse"
|
||
fi
|
||
;;
|
||
*)
|
||
echo "Unsupported architecture: $arch"
|
||
return 1
|
||
;;
|
||
esac
|
||
|
||
local github_api_url="https://api.github.com/repos/juicity/juicity/releases/latest"
|
||
local download_url=$(curl -s "$github_api_url" | grep "browser_download_url.*$arch_suffix.zip\"" | cut -d '"' -f 4)
|
||
local temp_dir=$(mktemp -d)
|
||
local install_path="/usr/local/bin/juicity-server"
|
||
|
||
echo "Downloading the latest version of juicity-server..."
|
||
wget -P "$temp_dir" "$download_url" >/dev/null 2>&1
|
||
unzip "$temp_dir/*.zip" -d "$temp_dir" >/dev/null 2>&1
|
||
mv "$temp_dir/juicity-server" "$install_path" >/dev/null 2>&1
|
||
chmod +x /usr/local/bin/juicity-server
|
||
echo "juicity-server has been downloaded."
|
||
rm -rf "$temp_dir"
|
||
}
|
||
|
||
function install_latest_caddy() {
|
||
local architecture=$(uname -m)
|
||
|
||
case "$architecture" in
|
||
"x86_64"|"amd64")
|
||
architecture="amd64"
|
||
;;
|
||
"i686"|"i386")
|
||
architecture="386"
|
||
;;
|
||
"aarch64"|"arm64")
|
||
architecture="arm64"
|
||
;;
|
||
"armv5tel")
|
||
architecture="armv5"
|
||
;;
|
||
"armv6l")
|
||
architecture="armv6"
|
||
;;
|
||
"armv7l")
|
||
architecture="armv7"
|
||
;;
|
||
"s390x")
|
||
architecture="s390"
|
||
;;
|
||
*)
|
||
echo "Unsupported architecture: $architecture"
|
||
exit 1
|
||
;;
|
||
esac
|
||
|
||
local latest_version=$(curl -s https://api.github.com/repos/caddyserver/caddy/releases/latest | grep -o '"tag_name": "v.*"' | cut -d'"' -f4)
|
||
local download_url="https://github.com/caddyserver/caddy/releases/download/$latest_version/caddy_${latest_version:1}_linux_$architecture.tar.gz"
|
||
|
||
echo "Downloading Caddy version $latest_version..."
|
||
wget -q -O caddy.tar.gz $download_url
|
||
tar -xf caddy.tar.gz -C /usr/bin/
|
||
chmod +x /usr/bin/caddy
|
||
rm caddy.tar.gz
|
||
|
||
echo "Caddy has been installed."
|
||
}
|
||
|
||
function get_temp_config_file() {
|
||
temp_file=$(mktemp)
|
||
curl -sSL "https://api.zeroteam.top/warp?format=sing-box" > "$temp_file"
|
||
}
|
||
|
||
function configure_sing_box_service() {
|
||
echo "Configuring sing-box startup service..."
|
||
local service_file="/etc/systemd/system/sing-box.service"
|
||
|
||
if [[ -f $service_file ]]; then
|
||
rm "$service_file"
|
||
fi
|
||
|
||
local service_config='[Unit]
|
||
Description=sing-box service
|
||
Documentation=https://sing-box.sagernet.org
|
||
After=network.target nss-lookup.target
|
||
|
||
[Service]
|
||
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_SYS_PTRACE CAP_DAC_READ_SEARCH
|
||
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_SYS_PTRACE CAP_DAC_READ_SEARCH
|
||
ExecStart=/usr/local/bin/sing-box run -c /usr/local/etc/sing-box/config.json
|
||
ExecReload=/bin/kill -HUP $MAINPID
|
||
Restart=on-failure
|
||
RestartSec=10s
|
||
LimitNOFILE=infinity
|
||
|
||
[Install]
|
||
WantedBy=multi-user.target'
|
||
|
||
echo "$service_config" >"$service_file"
|
||
echo "sing-box startup service has been configured."
|
||
}
|
||
|
||
function configure_caddy_service() {
|
||
echo "Configuring Caddy startup service..."
|
||
local service_file="/etc/systemd/system/caddy.service"
|
||
|
||
if [[ -f $service_file ]]; then
|
||
rm "$service_file"
|
||
fi
|
||
|
||
local service_config='[Unit]
|
||
Description=Caddy
|
||
Documentation=https://caddyserver.com/docs/
|
||
After=network.target network-online.target
|
||
Requires=network-online.target
|
||
|
||
[Service]
|
||
Type=notify
|
||
ExecStart=/usr/bin/caddy run --environ --config /usr/local/etc/caddy/caddy.json
|
||
ExecReload=/usr/bin/caddy reload --config /usr/local/etc/caddy/caddy.json
|
||
TimeoutStopSec=5s
|
||
LimitNOFILE=1048576
|
||
LimitNPROC=512
|
||
PrivateTmp=true
|
||
ProtectSystem=full
|
||
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
||
|
||
[Install]
|
||
WantedBy=multi-user.target'
|
||
|
||
echo "$service_config" >"$service_file"
|
||
echo "Caddy startup service has been configured."
|
||
}
|
||
|
||
function configure_juicity_service() {
|
||
echo "Configuring juicity startup service..."
|
||
local service_file="/etc/systemd/system/juicity.service"
|
||
|
||
if [[ -f $service_file ]]; then
|
||
rm "$service_file"
|
||
fi
|
||
|
||
local service_config='[Unit]
|
||
Description=juicity-server Service
|
||
Documentation=https://github.com/juicity/juicity
|
||
After=network.target nss-lookup.target
|
||
|
||
[Service]
|
||
Type=simple
|
||
User=root
|
||
Environment=QUIC_GO_ENABLE_GSO=true
|
||
ExecStart=/usr/local/bin/juicity-server run -c /usr/local/etc/juicity/config.json --disable-timestamp
|
||
Restart=on-failure
|
||
LimitNPROC=512
|
||
LimitNOFILE=infinity
|
||
|
||
[Install]
|
||
WantedBy=multi-user.target'
|
||
|
||
echo "$service_config" >"$service_file"
|
||
echo "juicity startup service has been configured."
|
||
}
|
||
|
||
function listen_port() {
|
||
while true; do
|
||
read -p "请输入监听端口 (默认443): " listen_port
|
||
listen_port=${listen_port:-443}
|
||
|
||
if [[ $listen_port =~ ^[1-9][0-9]{0,4}$ && $listen_port -le 65535 ]]; then
|
||
echo "监听端口: $listen_port"
|
||
break
|
||
else
|
||
echo -e "${RED}错误：端口范围1-65535，请重新输入！${NC}" >&2
|
||
fi
|
||
done
|
||
}
|
||
|
||
function set_username() {
|
||
read -p "请输入用户名 (默认随机生成): " new_username
|
||
if [[ -z "$new_username" ]]; then
|
||
username=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1)
|
||
echo "随机生成的用户名: $username"
|
||
else
|
||
username="$new_username"
|
||
echo "用户名: $username"
|
||
fi
|
||
}
|
||
|
||
function set_password() {
|
||
read -p "请输入密码（默认随机生成）: " password
|
||
|
||
if [[ -z "$password" ]]; then
|
||
password=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 12 | head -n 1)
|
||
echo "随机生成的密码：$password"
|
||
else
|
||
echo "密码：$password"
|
||
fi
|
||
}
|
||
|
||
function read_up_speed() {
|
||
while true; do
|
||
read -p "请输入上行速度 (默认50): " up_mbps
|
||
up_mbps=${up_mbps:-50}
|
||
|
||
if [[ $up_mbps =~ ^[0-9]+$ ]]; then
|
||
echo "上行速度设置成功：$up_mbps Mbps"
|
||
break
|
||
else
|
||
echo -e "${RED}错误：请输入数字作为上行速度。${NC}"
|
||
fi
|
||
done
|
||
}
|
||
|
||
function read_down_speed() {
|
||
while true; do
|
||
read -p "请输入下行速度 (默认100): " down_mbps
|
||
down_mbps=${down_mbps:-100}
|
||
|
||
if [[ $down_mbps =~ ^[0-9]+$ ]]; then
|
||
echo "下行速度设置成功：$down_mbps Mbps"
|
||
break
|
||
else
|
||
echo -e "${RED}错误：请输入数字作为下行速度。${NC}"
|
||
fi
|
||
done
|
||
}
|
||
|
||
function generate_uuid() {
|
||
if [[ -n $(command -v uuidgen) ]]; then
|
||
command_name="uuidgen"
|
||
elif [[ -n $(command -v uuid) ]]; then
|
||
command_name="uuid -v 4"
|
||
else
|
||
echo -e "${RED}错误：无法生成UUID，请手动设置。${NC}"
|
||
exit 1
|
||
fi
|
||
|
||
while true; do
|
||
read -p "请输入UUID（默认随机生成）: " input_uuid
|
||
if [[ -n $input_uuid ]]; then
|
||
if [[ $input_uuid =~ ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$ ]]; then
|
||
uuid=$input_uuid
|
||
break
|
||
else
|
||
echo -e "${RED}无效的UUID格式，请重新输入。${NC}"
|
||
fi
|
||
else
|
||
uuid=$($command_name)
|
||
break
|
||
fi
|
||
done
|
||
|
||
echo "生成的UUID：$uuid"
|
||
}
|
||
|
||
function generate_transport_config() {
|
||
if [[ "$flow_type" == "xtls-rprx-vision" ]]; then
|
||
transport_config=""
|
||
else
|
||
generate_transport_type
|
||
transport_config='
|
||
"transport": {
|
||
"type": "'"$transport_type"'"
|
||
},'
|
||
fi
|
||
}
|
||
|
||
function set_short_id() {
|
||
while true; do
|
||
read -p "请输入 short id (默认随机生成): " short_id
|
||
|
||
if [[ -z "$short_id" ]]; then
|
||
short_id=$(openssl rand -hex 8)
|
||
break
|
||
elif [[ "$short_id" =~ ^[0-9a-fA-F]{2,8}$ ]]; then
|
||
break
|
||
else
|
||
echo "错误：请输入两到八位的十六进制字符串。"
|
||
fi
|
||
done
|
||
}
|
||
|
||
function override_port() {
|
||
while true; do
|
||
read -p "请输入目标端口 (默认443): " override_port
|
||
override_port=${override_port:-443}
|
||
|
||
if [[ $override_port =~ ^[1-9][0-9]{0,4}$ && $override_port -le 65535 ]]; then
|
||
echo "目标端口: $override_port"
|
||
break
|
||
else
|
||
echo -e "${RED}错误：端口范围1-65535，请重新输入！${NC}"
|
||
fi
|
||
done
|
||
}
|
||
|
||
function web_port() {
|
||
while true; do
|
||
read -p "请输入web伪装监听端口 (默认8080): " fallback_port
|
||
fallback_port=${fallback_port:-8080}
|
||
|
||
if [[ "$fallback_port" =~ ^[1-9][0-9]{0,4}$ && $fallback_port -le 65535 ]]; then
|
||
echo "web端口: $fallback_port"
|
||
break
|
||
else
|
||
echo -e "${RED}错误：端口范围1-65535，请重新输入！${NC}"
|
||
fi
|
||
done
|
||
}
|
||
|
||
function generate_unique_tag() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
while true; do
|
||
random_tag=$(head /dev/urandom | tr -dc 'a-z0-9' | fold -w 8 | head -n 1)
|
||
tag_label="${random_tag}-in"
|
||
|
||
if ! grep -qE "\"tag\":\\s*\"$tag_label\"(,|$)" "$config_file"; then
|
||
break
|
||
fi
|
||
done
|
||
}
|
||
|
||
function override_address() {
|
||
while true; do
|
||
read -p "请输入目标地址（IP或域名）: " target_address
|
||
|
||
if [[ -z "$target_address" ]]; then
|
||
echo -e "${RED}错误：目标地址不能为空！${NC}"
|
||
continue
|
||
fi
|
||
|
||
if [[ $target_address =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
|
||
if [[ $(grep -o '\.' <<< "$target_address" | wc -l) -eq 3 ]]; then
|
||
break
|
||
else
|
||
echo -e "${RED}错误：请输入有效的 IPv4 地址！${NC}"
|
||
fi
|
||
elif [[ $target_address =~ ^[a-fA-F0-9:]+$ ]]; then
|
||
if [[ $(grep -o ':' <<< "$target_address" | wc -l) -ge 2 ]]; then
|
||
break
|
||
else
|
||
echo -e "${RED}错误：请输入有效的 IPv6 地址！${NC}"
|
||
fi
|
||
else
|
||
resolved_ips=$(host -t A "$target_address" | awk '/has address/ { print $4 }')
|
||
|
||
if [[ -n "$resolved_ips" ]]; then
|
||
valid_ip=0
|
||
for ip in $resolved_ips; do
|
||
if [[ $ip =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
|
||
valid_ip=1
|
||
break
|
||
fi
|
||
done
|
||
if [[ $valid_ip -eq 1 ]]; then
|
||
break
|
||
else
|
||
echo -e "${RED}错误：域名未解析为有效的 IPv4 地址，请重新输入！${NC}"
|
||
fi
|
||
else
|
||
echo -e "${RED}错误：请输入有效的 IP 地址或域名！${NC}"
|
||
fi
|
||
fi
|
||
done
|
||
}
|
||
|
||
function generate_private_key_config() {
|
||
local private_key
|
||
|
||
while true; do
|
||
read -p "请输入私钥 (默认随机生成私钥): " private_key
|
||
|
||
if [[ -z "$private_key" ]]; then
|
||
local keypair_output=$(sing-box generate reality-keypair)
|
||
private_key=$(echo "$keypair_output" | awk -F: '/PrivateKey/{gsub(/ /, "", $2); print $2}')
|
||
echo "$keypair_output" | awk -F: '/PublicKey/{gsub(/ /, "", $2); print $2}' > /tmp/public_key_temp.txt
|
||
break
|
||
fi
|
||
|
||
if openssl pkey -inform PEM -noout -text -in <(echo "$private_key") >/dev/null 2>&1; then
|
||
break
|
||
else
|
||
echo -e "${RED}无效的私钥，请重新输入！${NC}" >&2
|
||
fi
|
||
done
|
||
|
||
echo "$private_key"
|
||
}
|
||
|
||
function generate_server_name() {
|
||
while true; do
|
||
read -p "请输入可用的 serverName 列表 (默认为 nijigen-works.jp): " user_input
|
||
if [[ -z "$user_input" ]]; then
|
||
server_name="nijigen-works.jp"
|
||
break
|
||
else
|
||
server_name="$user_input"
|
||
echo "Verifying server's TLS version support..."
|
||
|
||
if command -v openssl >/dev/null 2>&1; then
|
||
local openssl_output=$(timeout 10s openssl s_client -connect "$server_name:443" -tls1_3 2>&1)
|
||
if [[ $openssl_output == *"TLS_AES_256_GCM_SHA384"* || \
|
||
$openssl_output == *"TLS_AES_128_GCM_SHA256"* || \
|
||
$openssl_output == *"TLS_CHACHA20_POLY1305_SHA256"* || \
|
||
$openssl_output == *"TLS_AES_128_CCM_SHA256"* || \
|
||
$openssl_output == *"TLS_AES_128_CCM_8_SHA256"* ]]; then
|
||
break
|
||
else
|
||
echo -e "${RED}该网址不支持 TLS 1.3，请重新输入！${NC}"
|
||
fi
|
||
else
|
||
echo "OpenSSL is not installed, cannot verify TLS support."
|
||
break
|
||
fi
|
||
fi
|
||
done
|
||
}
|
||
|
||
function generate_target_server() {
|
||
while true; do
|
||
read -p "请输入目标网站地址(默认为 nijigen-works.jp): " user_input
|
||
|
||
if [[ -z "$user_input" ]]; then
|
||
target_server="nijigen-works.jp"
|
||
break
|
||
else
|
||
target_server="$user_input"
|
||
echo "Verifying server's TLS version support..."
|
||
|
||
if command -v openssl >/dev/null 2>&1; then
|
||
local openssl_output=$(timeout 10s openssl s_client -connect "$target_server:443" -tls1_3 2>&1)
|
||
if [[ $openssl_output == *"TLS_AES_256_GCM_SHA384"* || \
|
||
$openssl_output == *"TLS_AES_128_GCM_SHA256"* || \
|
||
$openssl_output == *"TLS_CHACHA20_POLY1305_SHA256"* || \
|
||
$openssl_output == *"TLS_AES_128_CCM_SHA256"* || \
|
||
$openssl_output == *"TLS_AES_128_CCM_8_SHA256"* ]]; then
|
||
break
|
||
else
|
||
echo -e "${RED}该目标网站地址不支持 TLS 1.3，请重新输入！${NC}"
|
||
fi
|
||
else
|
||
echo "OpenSSL is not installed, cannot verify TLS support."
|
||
break
|
||
fi
|
||
fi
|
||
done
|
||
}
|
||
|
||
function get_local_ip() {
|
||
local local_ip_v4
|
||
local local_ip_v6
|
||
|
||
local_ip_v4=$(curl -s https://ipinfo.io/ip || curl -s https://api.ipify.org || curl -s https://ifconfig.co/ip || curl -s https://api.myip.com | grep -oE "([0-9]{1,3}\.){3}[0-9]{1,3}")
|
||
local_ip_v6=$(ip -o -6 addr show scope global | awk '{split($4, a, "/"); print a[1]; exit}')
|
||
|
||
if [[ -n "$local_ip_v4" ]]; then
|
||
echo "$local_ip_v4"
|
||
elif [[ -n "$local_ip_v6" ]]; then
|
||
echo "$local_ip_v6"
|
||
else
|
||
echo "无法获取本机IP地址"
|
||
fi
|
||
}
|
||
|
||
function get_domain() {
|
||
while true; do
|
||
read -p "请输入域名： " domain
|
||
|
||
local_ip_v4=$(curl -s https://ipinfo.io/ip || curl -s https://api.ipify.org || curl -s https://ifconfig.co/ip || curl -s https://api.myip.com | grep -oE "([0-9]{1,3}\.){3}[0-9]{1,3}" || curl -s icanhazip.com || curl -s myip.ipip.net | grep -oE "([0-9]{1,3}\.){3}[0-9]{1,3}")
|
||
local_ip_v6=$(curl -6 -s https://ifconfig.co/ip || curl -6 -s https://api.myip.com | jq -r '.ip' || ip -o -6 addr show scope global | awk '{split($4, a, "/"); print a[1]; exit}')
|
||
|
||
resolved_ipv4=$(dig +short A "$domain" 2>/dev/null)
|
||
resolved_ipv6=$(dig +short AAAA "$domain" 2>/dev/null)
|
||
|
||
if [[ -z $domain ]]; then
|
||
echo -e "${RED}错误：域名不能为空，请重新输入。${NC}"
|
||
else
|
||
if [[ ("$resolved_ipv4" == "$local_ip_v4" && ! -z "$resolved_ipv4") || ("$resolved_ipv6" == "$local_ip_v6" && ! -z "$resolved_ipv6") ]]; then
|
||
break
|
||
else
|
||
if [[ -z "$resolved_ipv4" && -n "$local_ip_v4" ]]; then
|
||
resolved_ip_v4=$(ping -4 "$domain" -c 1 | sed '1{s/[^(]*(//;s/).*//;q}')
|
||
if [[ ("$resolved_ip_v4" == "$local_ip_v4" && ! -z "$resolved_ip_v4") ]]; then
|
||
break
|
||
fi
|
||
fi
|
||
if [[ -z "$resolved_ipv6" && -n "$local_ip_v6" ]]; then
|
||
resolved_ip_v6=$(ping -6 "$domain" -c 1 | sed '1{s/[^(]*(//;s/).*//;q}')
|
||
if [[ ("$resolved_ip_v6" == "$local_ip_v6" && ! -z "$resolved_ip_v6") ]]; then
|
||
break
|
||
fi
|
||
fi
|
||
echo -e "${RED}错误：域名未绑定本机IP，请重新输入。${NC}"
|
||
fi
|
||
fi
|
||
done
|
||
}
|
||
|
||
function get_fake_domain() {
|
||
while true; do
|
||
read -p "请输入伪装网址（默认: www.fan-2000.com）: " fake_domain
|
||
fake_domain=${fake_domain:-"www.fan-2000.com"}
|
||
|
||
if curl --output /dev/null --silent --head --fail "$fake_domain"; then
|
||
echo "伪装网址: $fake_domain"
|
||
break
|
||
else
|
||
echo -e "${RED}伪装网址无效或不可用，请重新输入。${NC}"
|
||
fi
|
||
done
|
||
}
|
||
|
||
function test_caddy_config() {
|
||
echo "Testing Caddy configuration file..."
|
||
local output
|
||
local caddy_pid
|
||
|
||
output=$(timeout 8 /usr/bin/caddy run --environ --config /usr/local/etc/caddy/caddy.json 2>&1 &)
|
||
caddy_pid=$!
|
||
|
||
wait $caddy_pid 2>/dev/null
|
||
|
||
if echo "$output" | grep -i "error"; then
|
||
echo -e "${RED}Caddy configuration test failed. Please check the configuration file.${NC}"
|
||
echo "$output" | grep -i "error" --color=always
|
||
else
|
||
echo "Caddy configuration test passed."
|
||
fi
|
||
}
|
||
|
||
function set_certificate_and_private_key() {
|
||
while true; do
|
||
read -p "请输入 PEM 证书路径 (默认/etc/ssl/private/cert.crt): " certificate_path
|
||
certificate_path=${certificate_path:-"/etc/ssl/private/cert.crt"}
|
||
|
||
if [[ "$certificate_path" != "/etc/ssl/private/cert.crt" ]]; then
|
||
certificate_file=$(basename "$certificate_path")
|
||
allowed_extensions=("crt" "pem")
|
||
|
||
if [[ ! -f "$certificate_path" ]]; then
|
||
echo -e "${RED}错误：证书文件不存在，请重新输入!${NC}"
|
||
continue
|
||
elif [[ ! "${allowed_extensions[@]}" =~ "${certificate_file##*.}" ]]; then
|
||
echo -e "${RED}错误：不支持的证书格式，请配置.crt或.pem格式的证书文件!${NC}"
|
||
continue
|
||
fi
|
||
fi
|
||
break
|
||
done
|
||
|
||
while true; do
|
||
read -p "请输入 PEM 私钥路径 (默认/etc/ssl/private/private.key): " private_key_path
|
||
private_key_path=${private_key_path:-"/etc/ssl/private/private.key"}
|
||
|
||
if [[ "$private_key_path" != "/etc/ssl/private/private.key" ]]; then
|
||
private_key_file=$(basename "$private_key_path")
|
||
allowed_extensions=("key" "pem")
|
||
|
||
if [[ ! -f "$private_key_path" ]]; then
|
||
echo -e "${RED}错误：私钥文件不存在，请重新输入!${NC}"
|
||
continue
|
||
elif [[ ! "${allowed_extensions[@]}" =~ "${private_key_file##*.}" ]]; then
|
||
echo -e "${RED}错误：不支持的私钥格式，请配置.key或.pem格式的私钥文件!${NC}"
|
||
continue
|
||
fi
|
||
fi
|
||
break
|
||
done
|
||
}
|
||
|
||
function apply_certificate() {
|
||
local domain="$1"
|
||
local has_ipv4=false
|
||
|
||
if curl -s4 ifconfig.co &>/dev/null; then
|
||
has_ipv4=true
|
||
fi
|
||
|
||
echo "Requesting a certificate..."
|
||
curl -s https://get.acme.sh | sh -s email=example@gmail.com
|
||
alias acme.sh=~/.acme.sh/acme.sh
|
||
~/.acme.sh/acme.sh --set-default-ca --server letsencrypt
|
||
|
||
if $has_ipv4; then
|
||
~/.acme.sh/acme.sh --issue -d "$domain" --standalone
|
||
else
|
||
~/.acme.sh/acme.sh --issue -d "$domain" --standalone --listen-v6
|
||
fi
|
||
|
||
echo "Installing the certificate..."
|
||
certificate_path=$(~/.acme.sh/acme.sh --install-cert -d "$domain" --ecc --key-file "$private_key_path" --fullchain-file "$certificate_path")
|
||
|
||
set_certificate_path="$certificate_path"
|
||
set_private_key_path="$private_key_path"
|
||
}
|
||
|
||
function generate_private_key() {
|
||
while true; do
|
||
read -p "请输入私钥 (默认随机生成私钥): " private_key
|
||
|
||
if [[ -z "$private_key" ]]; then
|
||
local keypair_output=$(sing-box generate reality-keypair)
|
||
private_key=$(echo "$keypair_output" | awk -F: '/PrivateKey/{gsub(/ /, "", $2); print $2}')
|
||
echo "$keypair_output" | awk -F: '/PublicKey/{gsub(/ /, "", $2); print $2}' > /tmp/public_key_temp.txt
|
||
break
|
||
fi
|
||
|
||
if openssl pkey -inform PEM -noout -text -in <(echo "$private_key") >/dev/null 2>&1; then
|
||
break
|
||
else
|
||
echo -e "${RED}无效的私钥，请重新输入！${NC}"
|
||
fi
|
||
done
|
||
}
|
||
|
||
function encryption_method() {
|
||
while true; do
|
||
read -p "请选择加密方式(默认1)：
|
||
1). 2022-blake3-chacha20-poly1305
|
||
2). 2022-blake3-aes-256-gcm
|
||
3). 2022-blake3-aes-128-gcm
|
||
4). xchacha20-ietf-poly1305
|
||
5). chacha20-ietf-poly1305
|
||
6). aes-256-gcm
|
||
7). aes-192-gcm
|
||
8). aes-128-gcm
|
||
请选择[1-8]: " encryption_choice
|
||
encryption_choice=${encryption_choice:-1}
|
||
|
||
case $encryption_choice in
|
||
1)
|
||
ss_method="2022-blake3-chacha20-poly1305"
|
||
ss_password=$(sing-box generate rand --base64 32)
|
||
shadowtls_password=$(openssl rand -base64 32)
|
||
break
|
||
;;
|
||
2)
|
||
ss_method="2022-blake3-aes-256-gcm"
|
||
ss_password=$(sing-box generate rand --base64 32)
|
||
shadowtls_password=$(openssl rand -base64 32)
|
||
break
|
||
;;
|
||
3)
|
||
ss_method="2022-blake3-aes-128-gcm"
|
||
ss_password=$(sing-box generate rand --base64 16)
|
||
shadowtls_password=$(openssl rand -base64 16)
|
||
break
|
||
;;
|
||
|
||
4)
|
||
ss_method="xchacha20-ietf-poly1305"
|
||
ss_password=$(sing-box generate rand --base64 16)
|
||
shadowtls_password=$(openssl rand -base64 16)
|
||
break
|
||
;;
|
||
5)
|
||
ss_method="chacha20-ietf-poly1305"
|
||
ss_password=$(sing-box generate rand --base64 16)
|
||
shadowtls_password=$(openssl rand -base64 16)
|
||
break
|
||
;;
|
||
6)
|
||
ss_method="aes-256-gcm"
|
||
ss_password=$(sing-box generate rand --base64 16)
|
||
shadowtls_password=$(openssl rand -base64 16)
|
||
break
|
||
;;
|
||
7)
|
||
ss_method="aes-192-gcm"
|
||
ss_password=$(sing-box generate rand --base64 16)
|
||
shadowtls_password=$(openssl rand -base64 16)
|
||
break
|
||
;;
|
||
8)
|
||
ss_method="aes-128-gcm"
|
||
ss_password=$(sing-box generate rand --base64 16)
|
||
shadowtls_password=$(openssl rand -base64 16)
|
||
break
|
||
;;
|
||
*)
|
||
echo -e "${RED}错误：无效的选择，请重新输入。${NC}"
|
||
;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
function select_unlocked_items() {
|
||
while true; do
|
||
read -p "请选择要解锁的项目（支持多选）：
|
||
1). ChatGPT
|
||
2). Netflix
|
||
3). Disney+
|
||
请选择[1-3]: " choices
|
||
|
||
if [[ "$choices" =~ ^[123]+$ ]]; then
|
||
selected=($(echo "$choices" | sed 's/./& /g'))
|
||
break
|
||
else
|
||
echo -e "${RED}错误：无效的选择，请重新输入!${NC}"
|
||
fi
|
||
done
|
||
}
|
||
|
||
function update_geosite_array() {
|
||
for choice in "${selected[@]}"; do
|
||
case $choice in
|
||
1)
|
||
geosite+=("\"openai\"")
|
||
;;
|
||
2)
|
||
geosite+=("\"netflix\"")
|
||
;;
|
||
3)
|
||
geosite+=("\"disney\"")
|
||
;;
|
||
*)
|
||
echo -e "${RED}无效的选择: $choice${NC}"
|
||
;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
function select_outbound() {
|
||
while true; do
|
||
read -p "请选择出站网络 (默认1)
|
||
1). warp-IPv4
|
||
2). warp-IPv6
|
||
请选择[1-2]: " outbound_choice
|
||
case $outbound_choice in
|
||
1|"")
|
||
outbound="warp-IPv4-out"
|
||
break
|
||
;;
|
||
2)
|
||
outbound="warp-IPv6-out"
|
||
break
|
||
;;
|
||
*)
|
||
echo -e "${RED}错误：无效的选项，请重新输入！${NC}"
|
||
;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
function set_congestion_control() {
|
||
local default_congestion_control="bbr"
|
||
|
||
while true; do
|
||
read -p "请选择拥塞控制算法 (默认$default_congestion_control):
|
||
1). bbr
|
||
2). cubic
|
||
3). new_reno
|
||
请选择[1-3]: " congestion_control
|
||
|
||
case $congestion_control in
|
||
1)
|
||
congestion_control="bbr"
|
||
break
|
||
;;
|
||
2)
|
||
congestion_control="cubic"
|
||
break
|
||
;;
|
||
3)
|
||
congestion_control="new_reno"
|
||
break
|
||
;;
|
||
"")
|
||
congestion_control=$default_congestion_control
|
||
break
|
||
;;
|
||
*)
|
||
echo -e "${RED}错误：无效的选择，请重新输入。${NC}"
|
||
;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
function ask_certificate_option() {
|
||
while true; do
|
||
read -p "请选择证书来源：
|
||
1). 自动申请证书
|
||
2). 自备证书
|
||
请选择[1-2]: " certificate_option
|
||
|
||
case $certificate_option in
|
||
1)
|
||
echo "You have chosen to automatically request a certificate."
|
||
apply_certificate "$domain" "$private_key_path" "$certificate_path"
|
||
break
|
||
;;
|
||
2)
|
||
echo "You have chosen to use your own certificate."
|
||
break
|
||
;;
|
||
|
||
*)
|
||
echo -e "${RED}错误：无效的选择，请重新输入。${NC}"
|
||
;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
function add_multiple_shadowtls_users() {
|
||
local add_multiple_users="Y"
|
||
|
||
while [[ $add_multiple_users == [Yy] ]]; do
|
||
read -p "是否添加多用户？(Y/N，默认为N): " add_multiple_users
|
||
|
||
if [[ $add_multiple_users == [Yy] ]]; then
|
||
add_shadowtls_user
|
||
fi
|
||
done
|
||
}
|
||
|
||
function select_flow_type() {
|
||
while true; do
|
||
read -p "请选择节点类型 (默认1)：
|
||
1). vless+vision+reality
|
||
2). vless+h2/grpc+reality
|
||
请选择[1-2]: " flow_option
|
||
|
||
case $flow_option in
|
||
"" | 1)
|
||
flow_type="xtls-rprx-vision"
|
||
break
|
||
;;
|
||
2)
|
||
flow_type=""
|
||
break
|
||
;;
|
||
*)
|
||
echo -e "${RED}错误的选项，请重新输入！${NC}" >&2
|
||
;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
function prompt_setup_type() {
|
||
while true; do
|
||
echo "请选择传输层协议（默认1）："
|
||
echo "1). TCP（trojan+tcp+tls+web）"
|
||
echo "2). ws（trojan+ws+tls+CDN）"
|
||
|
||
read -p "请选择 [1-2]: " setup_type
|
||
if [ -z "$setup_type" ]; then
|
||
setup_type="1"
|
||
fi
|
||
|
||
case $setup_type in
|
||
1)
|
||
transport_removed=true
|
||
fallback_removed=false
|
||
break
|
||
;;
|
||
2)
|
||
transport_removed=false
|
||
fallback_removed=true
|
||
break
|
||
;;
|
||
*)
|
||
echo -e "${RED}无效的选择，请重新输入!${NC}"
|
||
;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
function generate_transport_type() {
|
||
while true; do
|
||
read -p "请选择传输层协议(默认1)：
|
||
1). http
|
||
2). grpc
|
||
请选择[1-2]: " transport_option
|
||
|
||
case $transport_option in
|
||
1)
|
||
transport_type="http"
|
||
break
|
||
;;
|
||
2)
|
||
transport_type="grpc"
|
||
break
|
||
;;
|
||
"")
|
||
transport_type="http"
|
||
break
|
||
;;
|
||
*)
|
||
echo -e "${RED}错误的选项，请重新输入！${NC}" >&2
|
||
;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
function configure_short_ids() {
|
||
short_ids="\"$(openssl rand -hex 7)\""
|
||
current_length=7
|
||
|
||
while true; do
|
||
read -p "是否继续添加 short id？(Y/N，默认N): " choice
|
||
choice=${choice,,}
|
||
|
||
if [[ "$choice" == "y" ]]; then
|
||
set_short_id
|
||
current_length=$((current_length - 1))
|
||
if [[ "$current_length" -ge 1 ]]; then
|
||
short_ids+=$',\n "'$(openssl rand -hex "$current_length")'"'
|
||
else
|
||
break
|
||
fi
|
||
elif [[ "$choice" == "n" || -z "$choice" ]]; then
|
||
break
|
||
else
|
||
echo "错误：请输入 'Y' 或 'N'。"
|
||
fi
|
||
done
|
||
|
||
short_ids+=$''
|
||
}
|
||
|
||
function tuic_multiple_users() {
|
||
users="[
|
||
{
|
||
\"name\": \"$username\",
|
||
\"uuid\": \"$uuid\",
|
||
\"password\": \"$password\"
|
||
}"
|
||
|
||
while true; do
|
||
read -p "是否继续添加用户？(Y/N，默认N): " -e add_multiple_users
|
||
|
||
if [[ -z "$add_multiple_users" ]]; then
|
||
add_multiple_users="N"
|
||
fi
|
||
|
||
if [[ "$add_multiple_users" == "Y" || "$add_multiple_users" == "y" ]]; then
|
||
set_username
|
||
set_password
|
||
generate_uuid
|
||
users+=",
|
||
{
|
||
\"name\": \"$username\",
|
||
\"uuid\": \"$uuid\",
|
||
\"password\": \"$password\"
|
||
}"
|
||
elif [[ "$add_multiple_users" == "N" || "$add_multiple_users" == "n" ]]; then
|
||
break
|
||
else
|
||
echo -e "${RED}无效的输入，请重新输入。${NC}"
|
||
fi
|
||
done
|
||
|
||
users+=$'\n ]'
|
||
}
|
||
|
||
function naive_multiple_users() {
|
||
users="[
|
||
{
|
||
\"username\": \"$username\",
|
||
\"password\": \"$password\"
|
||
}"
|
||
|
||
while true; do
|
||
read -p "是否继续添加用户？(Y/N，默认N): " -e add_multiple_users
|
||
|
||
if [[ -z "$add_multiple_users" ]]; then
|
||
add_multiple_users="N"
|
||
fi
|
||
|
||
if [[ "$add_multiple_users" == "Y" || "$add_multiple_users" == "y" ]]; then
|
||
set_username
|
||
set_password
|
||
users+=",
|
||
{
|
||
\"username\": \"$username\",
|
||
\"password\": \"$password\"
|
||
}"
|
||
elif [[ "$add_multiple_users" == "N" || "$add_multiple_users" == "n" ]]; then
|
||
break
|
||
else
|
||
echo -e "${RED}无效的输入，请重新输入。${NC}"
|
||
fi
|
||
done
|
||
|
||
users+=$'\n ]'
|
||
}
|
||
|
||
function hysteria_multiple_users() {
|
||
users="[
|
||
{
|
||
\"name\": \"$username\",
|
||
\"auth_str\": \"$password\"
|
||
}"
|
||
|
||
while true; do
|
||
read -p "是否继续添加用户？(Y/N，默认N): " -e add_multiple_users
|
||
|
||
if [[ -z "$add_multiple_users" ]]; then
|
||
add_multiple_users="N"
|
||
fi
|
||
|
||
if [[ "$add_multiple_users" == "Y" || "$add_multiple_users" == "y" ]]; then
|
||
set_username
|
||
set_password
|
||
users+=",
|
||
{
|
||
\"name\": \"$username\",
|
||
\"auth_str\": \"$password\"
|
||
}"
|
||
elif [[ "$add_multiple_users" == "N" || "$add_multiple_users" == "n" ]]; then
|
||
break
|
||
else
|
||
echo -e "${RED}无效的输入，请重新输入。${NC}"
|
||
fi
|
||
done
|
||
|
||
users+=$'\n ]'
|
||
}
|
||
|
||
function hy2_multiple_users() {
|
||
users="[
|
||
{
|
||
\"name\": \"$username\",
|
||
\"password\": \"$password\"
|
||
}"
|
||
|
||
while true; do
|
||
read -p "是否继续添加用户？(Y/N，默认N): " -e add_multiple_users
|
||
|
||
if [[ -z "$add_multiple_users" ]]; then
|
||
add_multiple_users="N"
|
||
fi
|
||
|
||
if [[ "$add_multiple_users" == "Y" || "$add_multiple_users" == "y" ]]; then
|
||
set_username
|
||
set_password
|
||
users+=",
|
||
{
|
||
\"name\": \"$username\",
|
||
\"password\": \"$password\"
|
||
}"
|
||
elif [[ "$add_multiple_users" == "N" || "$add_multiple_users" == "n" ]]; then
|
||
break
|
||
else
|
||
echo -e "${RED}无效的输入，请重新输入。${NC}"
|
||
fi
|
||
done
|
||
|
||
users+=$'\n ]'
|
||
}
|
||
|
||
function add_shadowtls_user() {
|
||
local user_password=""
|
||
if [[ $encryption_choice == 1 || $encryption_choice == 2 ]]; then
|
||
user_password=$(openssl rand -base64 32)
|
||
elif [[ $encryption_choice == 3 || $encryption_choice == 4 || $encryption_choice == 5 || $encryption_choice == 6 || $encryption_choice == 7 || $encryption_choice == 8 ]]; then
|
||
user_password=$(openssl rand -base64 16)
|
||
fi
|
||
|
||
local new_user=$(set_username)
|
||
new_user=${new_user##*: }
|
||
|
||
if [[ -n "$users" ]]; then
|
||
users+=","
|
||
fi
|
||
|
||
users+="
|
||
{
|
||
\"name\": \"$new_user\",
|
||
\"password\": \"$user_password\"
|
||
}"
|
||
|
||
echo "用户名: $new_user"
|
||
echo "ShadowTLS 密码: $user_password"
|
||
}
|
||
|
||
function trojan_multiple_users() {
|
||
users="[
|
||
{
|
||
\"password\": \"$password\"
|
||
}"
|
||
|
||
while true; do
|
||
read -p "是否继续添加用户？(Y/N，默认N): " -e add_multiple_users
|
||
|
||
if [[ -z "$add_multiple_users" ]]; then
|
||
add_multiple_users="N"
|
||
fi
|
||
|
||
if [[ "$add_multiple_users" == "Y" || "$add_multiple_users" == "y" ]]; then
|
||
set_password
|
||
users+=",
|
||
{
|
||
\"password\": \"$password\"
|
||
}"
|
||
elif [[ "$add_multiple_users" == "N" || "$add_multiple_users" == "n" ]]; then
|
||
break
|
||
else
|
||
echo -e "${RED}无效的输入，请重新输入。${NC}"
|
||
fi
|
||
done
|
||
|
||
users+=$'\n ]'
|
||
}
|
||
|
||
function prompt_and_generate_transport_config() {
|
||
if [[ $setup_type == 2 ]]; then
|
||
read -p "请输入 ws 路径 (默认随机生成): " transport_path_input
|
||
transport_path=${transport_path_input:-/$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 8)}
|
||
|
||
if [[ ! "$transport_path" =~ ^/ ]]; then
|
||
transport_path="/$transport_path"
|
||
fi
|
||
|
||
echo ",
|
||
\"transport\": {
|
||
\"type\": \"ws\",
|
||
\"path\": \"$transport_path\"
|
||
}"
|
||
fi
|
||
|
||
if [[ $setup_type == 1 ]]; then
|
||
echo ",
|
||
\"fallback\": {
|
||
\"server\": \"127.0.0.1\",
|
||
\"server_port\": $fallback_port
|
||
}"
|
||
fi
|
||
}
|
||
|
||
function extract_variables_and_cleanup() {
|
||
server=$(jq -r '.server' "$temp_file")
|
||
server_port=$(jq -r '.server_port' "$temp_file")
|
||
local_address_ipv4=$(jq -r '.local_address[0]' "$temp_file")
|
||
local_address_ipv6=$(jq -r '.local_address[1]' "$temp_file")
|
||
private_key=$(jq -r '.private_key' "$temp_file")
|
||
peer_public_key=$(jq -r '.peer_public_key' "$temp_file")
|
||
reserved=$(jq -c '.reserved' "$temp_file")
|
||
mtu=$(jq -r '.mtu' "$temp_file")
|
||
rm "$temp_file"
|
||
}
|
||
|
||
function log_outbound_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
|
||
if ! grep -q '"log": {' "$config_file" || ! grep -q '"route": {' "$config_file" || ! grep -q '"inbounds": \[' "$config_file" || ! grep -q '"outbounds": \[' "$config_file"; then
|
||
echo -e '{\n "log": {\n },\n "route": {\n },\n "inbounds": [\n ],\n "outbounds": [\n ]\n}' > "$config_file"
|
||
sed -i '/"log": {/!b;n;c\ "disabled": false,\n "level": "info",\n "timestamp": true\n },' "$config_file"
|
||
sed -i '/"route": {/!b;n;c\ "rules": [\n ]\n },' "$config_file"
|
||
sed -i '/"outbounds": \[/!b;n;c\ {\n "type": "direct",\n "tag": "direct"\n }\n ]' "$config_file"
|
||
fi
|
||
}
|
||
|
||
function modify_format_inbounds_and_outbounds() {
|
||
file_path="/usr/local/etc/sing-box/config.json"
|
||
start_line_inbounds=$(grep -n '"inbounds": \[' "$file_path" | cut -d: -f1)
|
||
start_line_outbounds=$(grep -n '"outbounds": \[' "$file_path" | cut -d: -f1)
|
||
|
||
if [ -n "$start_line_inbounds" ]; then
|
||
line_to_modify_inbounds=$((start_line_inbounds - 3))
|
||
if [ "$line_to_modify_inbounds" -ge 1 ]; then
|
||
sed -i "$line_to_modify_inbounds s/,//" "$file_path"
|
||
fi
|
||
fi
|
||
|
||
if [ -n "$start_line_outbounds" ]; then
|
||
line_to_modify_outbounds_1=$((start_line_outbounds - 2))
|
||
line_to_modify_outbounds_2=$((start_line_outbounds - 1))
|
||
|
||
if [ "$line_to_modify_outbounds_1" -ge 1 ]; then
|
||
sed -i "$line_to_modify_outbounds_1 s/.*/ }/" "$file_path"
|
||
sed -i "$line_to_modify_outbounds_2 s/.*/ ],/" "$file_path"
|
||
fi
|
||
fi
|
||
}
|
||
|
||
function generate_Direct_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local tag_label
|
||
generate_unique_tag
|
||
local found_rules=0
|
||
local found_inbounds=0
|
||
awk -v tag_label="$tag_label" -v listen_port="$listen_port" -v target_address="$target_address" -v override_port="$override_port" '
|
||
/"rules": \[/{found_rules=1}
|
||
/"inbounds": \[/{found_inbounds=1}
|
||
{print}
|
||
found_rules && /"rules": \[/{print " {"; print " \"inbound\": [\"" tag_label "\"],"; print " \"outbound\": \"direct\""; print " },"; found_rules=0}
|
||
found_inbounds && /"inbounds": \[/{print " {"; print " \"type\": \"direct\","; print " \"tag\": \"" tag_label "\","; print " \"listen\": \"::\","; print " \"listen_port\": " listen_port ","; print " \"sniff\": true,"; print " \"sniff_override_destination\": true,"; print " \"sniff_timeout\": \"300ms\","; print " \"proxy_protocol\": false,"; print " \"override_address\": \"" target_address "\","; print " \"override_port\": " override_port; print " },"; found_inbounds=0}
|
||
' "$config_file" > "$config_file.tmp"
|
||
mv "$config_file.tmp" "$config_file"
|
||
}
|
||
|
||
function generate_ss_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local tag_label
|
||
generate_unique_tag
|
||
local found_rules=0
|
||
local found_inbounds=0
|
||
awk -v tag_label="$tag_label" -v listen_port="$listen_port" -v ss_method="$ss_method" -v ss_password="$ss_password" '
|
||
/"rules": \[/{found_rules=1}
|
||
/"inbounds": \[/{found_inbounds=1}
|
||
{print}
|
||
found_rules && /"rules": \[/{print " {"; print " \"inbound\": [\"" tag_label "\"],"; print " \"outbound\": \"direct\""; print " },"; found_rules=0}
|
||
found_inbounds && /"inbounds": \[/{print " {"; print " \"type\": \"shadowsocks\","; print " \"tag\": \"" tag_label "\","; print " \"listen\": \"::\","; print " \"listen_port\": " listen_port ","; print " \"sniff\": true,"; print " \"sniff_override_destination\": true,"; print " \"method\": \"" ss_method "\","; print " \"password\": \"" ss_password "\""; print " },"; found_inbounds=0}
|
||
' "$config_file" > "$config_file.tmp"
|
||
mv "$config_file.tmp" "$config_file"
|
||
}
|
||
|
||
function generate_naive_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local certificate=""
|
||
local private_key=""
|
||
local tag_label
|
||
generate_unique_tag
|
||
listen_port
|
||
set_username
|
||
set_password
|
||
naive_multiple_users
|
||
get_domain
|
||
set_certificate_and_private_key
|
||
certificate_path="$certificate_path"
|
||
private_key_path="$private_key_path"
|
||
local found_rules=0
|
||
local found_inbounds=0
|
||
awk -v tag_label="$tag_label" -v listen_port="$listen_port" -v users="$users" -v domain="$domain" -v certificate_path="$certificate_path" -v private_key_path="$private_key_path" '
|
||
/"rules": \[/{found_rules=1}
|
||
/"inbounds": \[/{found_inbounds=1}
|
||
{print}
|
||
found_rules && /"rules": \[/{print " {"; print " \"inbound\": [\"" tag_label "\"],"; print " \"outbound\": \"direct\""; print " },"; found_rules=0}
|
||
found_inbounds && /"inbounds": \[/{print " {"; print " \"type\": \"naive\","; print " \"tag\": \"" tag_label "\","; print " \"listen\": \"::\","; print " \"listen_port\": " listen_port ","; print " \"sniff\": true,"; print " \"sniff_override_destination\": true,"; print " \"users\": " users ","; print " \"tls\": {"; print " \"enabled\": true,"; print " \"server_name\": \"" domain "\","; print " \"certificate_path\": \"" certificate_path "\","; print " \"key_path\": \"" private_key_path "\""; print " }"; print " },"; found_inbounds=0}
|
||
' "$config_file" > "$config_file.tmp"
|
||
mv "$config_file.tmp" "$config_file"
|
||
}
|
||
|
||
function generate_tuic_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local certificate=""
|
||
local private_key=""
|
||
local tag_label
|
||
generate_unique_tag
|
||
listen_port
|
||
set_username
|
||
set_password
|
||
generate_uuid
|
||
tuic_multiple_users
|
||
set_congestion_control
|
||
get_domain
|
||
set_certificate_and_private_key
|
||
certificate_path="$certificate_path"
|
||
private_key_path="$private_key_path"
|
||
local found_rules=0
|
||
local found_inbounds=0
|
||
awk -v tag_label="$tag_label" -v listen_port="$listen_port" -v users="$users" -v congestion_control="$congestion_control" -v domain="$domain" -v certificate_path="$certificate_path" -v private_key_path="$private_key_path" '
|
||
/"rules": \[/{found_rules=1}
|
||
/"inbounds": \[/{found_inbounds=1}
|
||
{print}
|
||
found_rules && /"rules": \[/{print " {"; print " \"inbound\": [\"" tag_label "\"],"; print " \"outbound\": \"direct\""; print " },"; found_rules=0}
|
||
found_inbounds && /"inbounds": \[/{print " {"; print " \"type\": \"tuic\","; print " \"tag\": \"" tag_label "\","; print " \"listen\": \"::\","; print " \"listen_port\": " listen_port ","; print " \"sniff\": true,"; print " \"sniff_override_destination\": true,"; print " \"users\": " users ","; print " \"congestion_control\": \"" congestion_control "\","; print " \"auth_timeout\": \"3s\","; print " \"zero_rtt_handshake\": false,"; print " \"heartbeat\": \"10s\","; print " \"tls\": {"; print " \"enabled\": true,"; print " \"server_name\": \"" domain "\","; print " \"alpn\": ["; print " \"h3\""; print " ],"; print " \"certificate_path\": \"" certificate_path "\","; print " \"key_path\": \"" private_key_path "\""; print " }"; print " },"; found_inbounds=0}
|
||
' "$config_file" > "$config_file.tmp"
|
||
mv "$config_file.tmp" "$config_file"
|
||
}
|
||
|
||
function generate_Hysteria_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local certificate=""
|
||
local private_key=""
|
||
local tag_label
|
||
generate_unique_tag
|
||
listen_port
|
||
read_up_speed
|
||
read_down_speed
|
||
set_username
|
||
set_password
|
||
hysteria_multiple_users
|
||
get_domain
|
||
set_certificate_and_private_key
|
||
certificate_path="$certificate_path"
|
||
private_key_path="$private_key_path"
|
||
local found_rules=0
|
||
local found_inbounds=0
|
||
awk -v tag_label="$tag_label" -v listen_port="$listen_port" -v up_mbps="$up_mbps" -v down_mbps="$down_mbps" -v users="$users" -v domain="$domain" -v certificate_path="$certificate_path" -v private_key_path="$private_key_path" '
|
||
/"rules": \[/{found_rules=1}
|
||
/"inbounds": \[/{found_inbounds=1}
|
||
{print}
|
||
found_rules && /"rules": \[/{print " {"; print " \"inbound\": [\"" tag_label "\"],"; print " \"outbound\": \"direct\""; print " },"; found_rules=0}
|
||
found_inbounds && /"inbounds": \[/{print " {"; print " \"type\": \"hysteria\","; print " \"tag\": \"" tag_label "\","; print " \"listen\": \"::\","; print " \"listen_port\": " listen_port ","; print " \"sniff\": true,"; print " \"sniff_override_destination\": true,"; print " \"up_mbps\": " up_mbps ","; print " \"down_mbps\": " down_mbps ","; print " \"users\": " users ","; print " \"tls\": {"; print " \"enabled\": true,"; print " \"server_name\": \"" domain "\","; print " \"alpn\": ["; print " \"h3\""; print " ],"; print " \"certificate_path\": \"" certificate_path "\","; print " \"key_path\": \"" private_key_path "\""; print " }"; print " },"; found_inbounds=0}
|
||
' "$config_file" > "$config_file.tmp"
|
||
mv "$config_file.tmp" "$config_file"
|
||
}
|
||
|
||
function generate_shadowtls_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local users=""
|
||
local tag_label
|
||
generate_unique_tag
|
||
tag_label1="$tag_label"
|
||
generate_unique_tag
|
||
tag_label2="$tag_label"
|
||
listen_port
|
||
encryption_method
|
||
add_shadowtls_user
|
||
add_multiple_shadowtls_users
|
||
generate_target_server
|
||
local found_rules=0
|
||
local found_inbounds=0
|
||
awk -v tag_label1="$tag_label1" -v tag_label2="$tag_label2" -v listen_port="$listen_port" -v users="$users" -v target_server="$target_server" -v ss_method="$ss_method" -v ss_password="$ss_password" '
|
||
/"rules": \[/{found_rules=1}
|
||
/"inbounds": \[/{found_inbounds=1}
|
||
{print}
|
||
found_rules && /"rules": \[/{print " {"; print " \"inbound\": [\"" tag_label1 "\"],"; print " \"outbound\": \"direct\""; print " },"; found_rules=0}
|
||
found_inbounds && /"inbounds": \[/{print " {"; print " \"type\": \"shadowtls\","; print " \"tag\": \"" tag_label1 "\","; print " \"listen\": \"::\","; print " \"listen_port\": " listen_port ","; print " \"version\": 3,"; print " \"users\": [" users ""; print " ],"; print " \"handshake\": {"; print " \"server\": \"" target_server "\","; print " \"server_port\": 443"; print " },"; print " \"strict_mode\": true,"; print " \"detour\": \"" tag_label2 "\""; print " },"; print " {"; print " \"type\": \"shadowsocks\","; print " \"tag\": \"" tag_label2 "\","; print " \"listen\": \"127.0.0.1\","; print " \"network\": \"tcp\","; print " \"method\": \"" ss_method "\","; print " \"password\": \"" ss_password "\""; print " },"; found=0}
|
||
' "$config_file" > "$config_file.tmp"
|
||
mv "$config_file.tmp" "$config_file"
|
||
}
|
||
|
||
function generate_juicity_config() {
|
||
local config_file="/usr/local/etc/juicity/config.json"
|
||
local users=""
|
||
local certificate=""
|
||
local private_key=""
|
||
listen_port
|
||
generate_uuid
|
||
set_password
|
||
users="\"$uuid\": \"$password\""
|
||
get_domain
|
||
set_certificate_and_private_key
|
||
certificate_path="$certificate_path"
|
||
private_key_path="$private_key_path"
|
||
set_congestion_control
|
||
|
||
echo "{
|
||
\"listen\": \":$listen_port\",
|
||
\"users\": {
|
||
$users
|
||
},
|
||
\"certificate\": \"$certificate_path\",
|
||
\"private_key\": \"$private_key_path\",
|
||
\"congestion_control\": \"$congestion_control\",
|
||
\"log_level\": \"info\"
|
||
}" > "$config_file"
|
||
}
|
||
|
||
function generate_reality_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local tag_label
|
||
generate_unique_tag
|
||
listen_port
|
||
select_flow_type
|
||
generate_uuid
|
||
generate_transport_config
|
||
generate_server_name
|
||
generate_target_server
|
||
generate_private_key
|
||
set_short_id
|
||
configure_short_ids
|
||
local found_rules=0
|
||
local found_inbounds=0
|
||
awk -v tag_label="$tag_label" -v listen_port="$listen_port" -v uuid="$uuid" -v flow_type="$flow_type" -v transport_config="$transport_config" -v server_name="$server_name" -v target_server="$target_server" -v private_key="$private_key" -v short_id="$short_id" -v short_ids="$short_ids" '
|
||
/"rules": \[/{found_rules=1}
|
||
/"inbounds": \[/{found_inbounds=1}
|
||
{print}
|
||
found_rules && /"rules": \[/{print " {"; print " \"inbound\": [\"" tag_label "\"],"; print " \"outbound\": \"direct\""; print " },"; found_rules=0}
|
||
found_inbounds && /"inbounds": \[/{print " {"; print " \"type\": \"vless\","; print " \"tag\": \"" tag_label "\","; print " \"listen\": \"::\","; print " \"listen_port\": " listen_port ","; print " \"sniff\": true,"; print " \"sniff_override_destination\": true,"; print " \"users\": ["; print " {"; print " \"uuid\": \"" uuid "\","; print " \"flow\": \"" flow_type "\""; print " }"; print " ], " transport_config; print " \"tls\": {"; print " \"enabled\": true,"; print " \"server_name\": \"" server_name "\","; print " \"reality\": {"; print " \"enabled\": true,"; print " \"handshake\": {"; print " \"server\": \"" target_server "\","; print " \"server_port\": 443"; print " },"; print " \"private_key\": \"" private_key "\","; print " \"short_id\": ["; print " \"" short_id "\","; print " " short_ids; print " ]"; print " }"; print " }"; print " },"; found=0}
|
||
' "$config_file" > "$config_file.tmp"
|
||
mv "$config_file.tmp" "$config_file"
|
||
}
|
||
|
||
function generate_Hy2_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local certificate=""
|
||
local private_key=""
|
||
local tag_label
|
||
generate_unique_tag
|
||
listen_port
|
||
read_up_speed
|
||
read_down_speed
|
||
set_username
|
||
set_password
|
||
hy2_multiple_users
|
||
get_fake_domain
|
||
get_domain
|
||
set_certificate_and_private_key
|
||
certificate_path="$certificate_path"
|
||
private_key_path="$private_key_path"
|
||
local found_rules=0
|
||
local found_inbounds=0
|
||
awk -v tag_label="$tag_label" -v listen_port="$listen_port" -v up_mbps="$up_mbps" -v down_mbps="$down_mbps" -v users="$users" -v fake_domain="$fake_domain" -v domain="$domain" -v certificate_path="$certificate_path" -v private_key_path="$private_key_path" '
|
||
/"rules": \[/{found_rules=1}
|
||
/"inbounds": \[/{found_inbounds=1}
|
||
{print}
|
||
found_rules && /"rules": \[/{print " {"; print " \"inbound\": [\"" tag_label "\"],"; print " \"outbound\": \"direct\""; print " },"; found_rules=0}
|
||
found_inbounds && /"inbounds": \[/{print " {"; print " \"type\": \"hysteria2\","; print " \"tag\": \"" tag_label "\","; print " \"listen\": \"::\","; print " \"listen_port\": " listen_port ","; print " \"sniff\": true,"; print " \"sniff_override_destination\": true,"; print " \"up_mbps\": " up_mbps ","; print " \"down_mbps\": " down_mbps ","; print " \"users\": " users ","; print " "; print " \"ignore_client_bandwidth\": false,"; print " \"masquerade\": \"https://" fake_domain "\","; print " \"tls\": {"; print " \"enabled\": true,"; print " \"server_name\": \"" domain "\","; print " \"alpn\": ["; print " \"h3\""; print " ],"; print " \"certificate_path\": \"" certificate_path "\","; print " \"key_path\": \"" private_key_path "\""; print " }"; print " },"; found=0}
|
||
' "$config_file" > "$config_file.tmp"
|
||
mv "$config_file.tmp" "$config_file"
|
||
}
|
||
|
||
function generate_trojan_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local tag_label
|
||
generate_unique_tag
|
||
local found_rules=0
|
||
local found_inbounds=0
|
||
awk -v tag_label="$tag_label" -v listen_port="$listen_port" -v users="$users" -v domain="$domain" -v certificate_path="$certificate_path" -v private_key_path="$private_key_path" -v transport_and_fallback_config="$transport_and_fallback_config" '
|
||
/"rules": \[/{found_rules=1}
|
||
/"inbounds": \[/{found_inbounds=1}
|
||
{print}
|
||
found_rules && /"rules": \[/{print " {"; print " \"inbound\": [\"" tag_label "\"],"; print " \"outbound\": \"direct\""; print " },"; found_rules=0}
|
||
found_inbounds && /"inbounds": \[/{print " {"; print " \"type\": \"trojan\","; print " \"tag\": \"" tag_label "\","; print " \"listen\": \"::\","; print " \"listen_port\": " listen_port ","; print " \"sniff\": true,"; print " \"sniff_override_destination\": true,"; print " \"users\": " users ","; print " \"tls\": {"; print " \"enabled\": true,"; print " \"server_name\": \"" domain "\","; print " \"alpn\": ["; print " \"h2\","; print " \"http/1.1\""; print " ],"; print " \"certificate_path\": \"/etc/ssl/certificates/acme-v02.api.letsencrypt.org-directory/" domain "/" domain ".crt\","; print " \"key_path\": \"/etc/ssl/certificates/acme-v02.api.letsencrypt.org-directory/" domain "/" domain ".key\""; print " }" transport_and_fallback_config; print " },"; found=0}
|
||
' "$config_file" > "$config_file.tmp"
|
||
mv "$config_file.tmp" "$config_file"
|
||
}
|
||
|
||
function generate_caddy_config() {
|
||
local caddy_config="/usr/local/etc/caddy/caddy.json"
|
||
awk -v fallback_port="$fallback_port" -v fake_domain="$fake_domain" -v domain="$domain" '
|
||
BEGIN { print "{"; print " \"logging\": {"; print " \"logs\": {"; print " \"default\": {"; print " \"writer\": {"; print " \"output\": \"file\","; print " \"filename\": \"/var/log/caddy.log\""; print " },"; print " \"level\": \"WARN\""; print " }"; print " }"; print " },"; print " \"storage\": {"; print " \"module\": \"file_system\","; print " \"root\": \"/etc/ssl\""; print " },"; print " \"apps\": {"; print " \"http\": {"; print " \"servers\": {"; print " \"h1\": {"; print " \"listen\": [\":80\"],"; print " \"routes\": ["; print " {"; print " \"handle\": ["; print " {"; print " \"handler\": \"static_response\","; print " \"headers\": {"; print " \"Location\": [\"https://{http.request.host}{http.request.uri}\"]"; print " },"; print " \"status_code\": 301"; print " }"; print " ]"; print " }"; print " ],"; print " \"protocols\": [\"h1\"]"; print " },"; print " \"h1h2c\": {"; print " \"listen\": [\"127.0.0.1:" fallback_port "\"],"; print " \"routes\": ["; print " {"; print " \"handle\": ["; print " {"; print " \"handler\": \"headers\","; print " \"response\": {"; print " \"set\": {"; print " \"Strict-Transport-Security\": [\"max-age=31536000; includeSubDomains; preload\"]"; print " }"; print " }"; print " },"; print " {"; print " \"handler\": \"reverse_proxy\","; print " \"headers\": {"; print " \"request\": {"; print " \"set\": {"; print " \"Host\": [\"{http.reverse_proxy.upstream.hostport}\"],"; print " \"X-Forwarded-Host\": [\"{http.request.host}\"]"; print " }"; print " }"; print " },"; print " \"transport\": {"; print " \"protocol\": \"http\","; print " \"tls\": {}"; print " },"; print " \"upstreams\": [{\"dial\": \"" fake_domain ":443\"}]"; print " }"; print " ]"; print " }"; print " ],"; print " \"protocols\": [\"h1\",\"h2c\"]"; print " }"; print " }"; print " },"; print " \"tls\": {"; print " \"certificates\": {"; print " \"automate\": [\"" domain "\"]"; print " },"; print " \"automation\": {"; print " \"policies\": ["; print " {"; print " \"issuers\": ["; print " {"; print " \"module\": \"acme\""; print " }"; print " ]"; print " }"; print " ]"; print " }"; print " }"; print " }"; print "}";
|
||
}' > "$caddy_config"
|
||
}
|
||
|
||
function update_route_file() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local geosite_list=$(IFS=,; echo "${geosite[*]}")
|
||
local geosite_formatted=$(sed 's/,/,\\n /g' <<< "$geosite_list")
|
||
|
||
sed -i '/"rules": \[/!b;a\
|
||
{\
|
||
"geosite": [\
|
||
'"$geosite_formatted"'\
|
||
],\
|
||
"outbound": "'"$1"'"\
|
||
},' "$config_file"
|
||
}
|
||
|
||
function update_outbound_file() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
awk -v server="$server" -v server_port="$server_port" -v local_address_ipv4="$local_address_ipv4" -v local_address_ipv6="$local_address_ipv6" -v private_key="$private_key" -v peer_public_key="$peer_public_key" -v reserved="$reserved" -v mtu="$mtu" '
|
||
{
|
||
if ($0 ~ /"outbounds": \[/) {
|
||
print $0
|
||
for (i=1; i<=4; i++) {
|
||
getline
|
||
if (i == 4) {
|
||
print "" $0 ","
|
||
} else {
|
||
print $0
|
||
}
|
||
}
|
||
print " {"; print " \"type\": \"direct\","; print " \"tag\": \"warp-IPv4-out\","; print " \"detour\": \"wireguard-out\","; print " \"domain_strategy\": \"ipv4_only\""; print " },"; print " {"; print " \"type\": \"direct\","; print " \"tag\": \"warp-IPv6-out\","; print " \"detour\": \"wireguard-out\","; print " \"domain_strategy\": \"ipv6_only\""; print " },"; print " {"; print " \"type\": \"wireguard\","; print " \"tag\": \"wireguard-out\","; print " \"server\": \"" server "\","; print " \"server_port\": " server_port ","; print " \"system_interface\": false,"; print " \"interface_name\": \"wg0\","; print " \"local_address\": ["; print " \"" local_address_ipv4 "\","; print " \"" local_address_ipv6 "\"" ; print " ],"; print " \"private_key\": \"" private_key "\","; print " \"peer_public_key\": \"" peer_public_key "\","; print " \"reserved\": " reserved ","; print " \"mtu\": " mtu; print " }"
|
||
} else {
|
||
print $0
|
||
}
|
||
}
|
||
' "$config_file" > "$config_file.tmp"
|
||
mv "$config_file.tmp" "$config_file"
|
||
echo "warp配置完成。"
|
||
}
|
||
|
||
function display_reality_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local output_file="/usr/local/etc/sing-box/output.txt"
|
||
local local_ip
|
||
local_ip=$(get_local_ip)
|
||
local listen_port=$(jq -r '.inbounds[0].listen_port' "$config_file")
|
||
local users=$(jq -r '.inbounds[0].users[].uuid' "$config_file")
|
||
local flow_type=$(jq -r '.inbounds[0].users[0].flow' "$config_file")
|
||
local transport_type=$(jq -r '.inbounds[0].transport.type' "$config_file")
|
||
local server_name=$(jq -r '.inbounds[0].tls.server_name' "$config_file")
|
||
local target_server=$(jq -r '.inbounds[0].tls.reality.handshake.server' "$config_file")
|
||
local short_ids=$(jq -r '.inbounds[0].tls.reality.short_id[]' "$config_file")
|
||
local public_key=$(cat /tmp/public_key_temp.txt)
|
||
if [[ "$flow_type" == "xtls-rprx-vision" ]]; then
|
||
transport_type="tcp"
|
||
fi
|
||
|
||
echo -e "${CYAN}Vless+Reality 节点配置信息：${NC}" | tee -a "$output_file"
|
||
echo -e "${CYAN}==================================================================${NC}" | tee -a "$output_file"
|
||
echo "服务器地址: $local_ip" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "监听端口: $listen_port" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "用户 UUID： $users" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "流控类型: $flow_type" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "传输层协议: $transport_type" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "ServerName: $server_name" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "目标网站地址: $target_server" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "Short ID:" | tee -a "$output_file"
|
||
echo "$short_ids" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "PublicKey: $public_key" | tee -a "$output_file"
|
||
echo -e "${CYAN}==================================================================${NC}" | tee -a "$output_file"
|
||
echo "配置信息已保存至 $output_file"
|
||
}
|
||
|
||
function display_trojan_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local output_file="/usr/local/etc/sing-box/output.txt"
|
||
local server_name=$(jq -r '.inbounds[0].tls.server_name' "$config_file")
|
||
local listen_port=$(jq -r '.inbounds[0].listen_port' "$config_file")
|
||
local passwords=($(jq -r '.inbounds[0].users[].password' "$config_file"))
|
||
local password_list=""
|
||
for password in "${passwords[@]}"; do
|
||
password_list+="\n$password"
|
||
done
|
||
local alpn=$(jq -r '.inbounds[0].tls.alpn | join(", ")' "$config_file")
|
||
local transport_type=$(jq -r '.inbounds[0].transport.type' "$config_file")
|
||
local transport_path=$(jq -r '.inbounds[0].transport.path' "$config_file")
|
||
|
||
echo -e "${CYAN}trojan 节点配置信息：${NC}" | tee -a "$output_file"
|
||
echo -e "${CYAN}==================================================================${NC}" | tee -a "$output_file"
|
||
echo "地址: $server_name" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "监听端口: $listen_port" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo -e "密码:$password_list" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "ALPN: $alpn" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
if [ "$transport_type" != "null" ]; then
|
||
echo "传输协议: $transport_type" | tee -a "$output_file"
|
||
echo "路径: $transport_path" | tee -a "$output_file"
|
||
else
|
||
echo "传输协议: tcp" | tee -a "$output_file"
|
||
fi
|
||
echo -e "${CYAN}==================================================================${NC}" | tee -a "$output_file"
|
||
echo "配置信息已保存至 $output_file"
|
||
}
|
||
|
||
function display_tuic_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local output_file="/usr/local/etc/sing-box/output.txt"
|
||
local server_name=$(jq -r '.inbounds[0].tls.server_name' "$config_file")
|
||
local listen_port=$(jq -r '.inbounds[0].listen_port' "$config_file")
|
||
local users=$(jq -r '.inbounds[0].users[] | "\(.name) \(.uuid) \(.password)"' "$config_file")
|
||
local congestion_control=$(jq -r '.inbounds[0].congestion_control' "$config_file")
|
||
local alpn=$(jq -r '.inbounds[0].tls.alpn[0]' "$config_file")
|
||
|
||
echo -e "${CYAN}TUIC 节点配置信息：${NC}" | tee -a "$output_file"
|
||
echo -e "${CYAN}==================================================================${NC}" | tee -a "$output_file"
|
||
echo "服务器地址: $server_name" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "监听端口: $listen_port" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "用户密码列表:" | tee -a "$output_file"
|
||
echo "------------------------------------------------------------------" | tee -a "$output_file"
|
||
echo " 用户名 UUID 密码" | tee -a "$output_file"
|
||
echo "------------------------------------------------------------------" | tee -a "$output_file"
|
||
echo "$users" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "拥塞控制算法: $congestion_control" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "ALPN: $alpn" | tee -a "$output_file"
|
||
echo -e "${CYAN}==================================================================${NC}" | tee -a "$output_file"
|
||
echo "配置信息已保存至 $output_file"
|
||
}
|
||
|
||
function display_Hysteria_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local output_file="/usr/local/etc/sing-box/output.txt"
|
||
local server_name=$(jq -r '.inbounds[0].tls.server_name' "$config_file")
|
||
local alpn=$(jq -r '.inbounds[0].tls.alpn[0]' "$config_file")
|
||
echo -e "${CYAN}Hysteria 节点配置信息：${NC}" | tee -a "$output_file"
|
||
echo -e "${CYAN}==================================================================${NC}" | tee -a "$output_file"
|
||
echo "服务器地址：$server_name" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "监听端口：$listen_port" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "上行速度：${up_mbps}Mbps" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "下行速度：${down_mbps}Mbps" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "ALPN：$alpn" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "用户密码："
|
||
local user_count=$(echo "$users" | jq length)
|
||
for ((i = 0; i < user_count; i++)); do
|
||
local auth_str=$(echo "$users" | jq -r ".[$i].auth_str")
|
||
echo "用户$i: $auth_str" | tee -a "$output_file"
|
||
done
|
||
echo -e "${CYAN}==================================================================${NC}" | tee -a "$output_file"
|
||
echo "配置信息已保存至 $output_file"
|
||
}
|
||
|
||
function display_Hy2_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local output_file="/usr/local/etc/sing-box/output.txt"
|
||
local server_name=$(jq -r '.inbounds[0].tls.server_name' "$config_file")
|
||
local alpn=$(jq -r '.inbounds[0].tls.alpn[0]' "$config_file")
|
||
echo -e "${CYAN}Hysteria2 节点配置信息：${NC}" | tee -a "$output_file"
|
||
echo -e "${CYAN}==================================================================${NC}" | tee -a "$output_file"
|
||
echo "服务器地址：$server_name" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "监听端口：$listen_port" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "上行速度：${up_mbps}Mbps" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "下行速度：${down_mbps}Mbps" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "ALPN：$alpn" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "用户密码："
|
||
local user_count=$(echo "$users" | jq length)
|
||
for ((i = 0; i < user_count; i++)); do
|
||
local password=$(echo "$users" | jq -r ".[$i].password")
|
||
echo "用户$i: $password" | tee -a "$output_file"
|
||
done
|
||
echo -e "${CYAN}==================================================================${NC}" | tee -a "$output_file"
|
||
echo "配置信息已保存至 $output_file"
|
||
}
|
||
|
||
function display_shadowtls_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local output_file="/usr/local/etc/sing-box/output.txt"
|
||
local local_ip
|
||
local_ip=$(get_local_ip)
|
||
local listen_port=$(jq -r '.inbounds[0].listen_port' "$config_file")
|
||
local shadowtls_passwords=$(jq -r '.inbounds[0].users[] | "ShadowTLS 密码: \(.password)"' "$config_file")
|
||
local user_input=$(jq -r '.inbounds[0].handshake.server' "$config_file")
|
||
local ss_password=$(jq -r '.inbounds[1].password' "$config_file")
|
||
|
||
echo -e "${CYAN}ShadowTLS 节点配置信息：${NC}" | tee -a "$output_file"
|
||
echo -e "${CYAN}================================================================${NC}" | tee -a "$output_file"
|
||
echo "服务器地址: $local_ip" | tee -a "$output_file"
|
||
echo -e "${CYAN}----------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "监听端口: $listen_port" | tee -a "$output_file"
|
||
echo -e "${CYAN}----------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "$shadowtls_passwords" | tee -a "$output_file"
|
||
echo -e "${CYAN}----------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "Shadowsocks 密码: $ss_password" | tee -a "$output_file"
|
||
echo -e "${CYAN}----------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "握手服务器地址: $user_input" | tee -a "$output_file"
|
||
echo -e "${CYAN}================================================================${NC}" | tee -a "$output_file"
|
||
echo "配置信息已保存至 $output_file"
|
||
}
|
||
|
||
function display_Direct_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local output_file="/usr/local/etc/sing-box/output.txt"
|
||
local local_ip
|
||
local_ip=$(get_local_ip)
|
||
local override_address=$(jq -r '.inbounds[0].override_address' "$config_file")
|
||
local listen_port=$(jq -r '.inbounds[0].listen_port' "$config_file")
|
||
local override_port=$(jq -r '.inbounds[0].override_port' "$config_file")
|
||
|
||
echo -e "${CYAN}Direct 节点配置信息：${NC}" | tee -a "$output_file"
|
||
echo -e "${CYAN}================================================================${NC}" | tee -a "$output_file"
|
||
echo "中转地址: $local_ip" | tee -a "$output_file"
|
||
echo -e "${CYAN}----------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "监听端口: $listen_port" | tee -a "$output_file"
|
||
echo -e "${CYAN}----------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "目标地址: $override_address" | tee -a "$output_file"
|
||
echo -e "${CYAN}----------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "目标端口: $override_port" | tee -a "$output_file"
|
||
echo -e "${CYAN}================================================================${NC}" | tee -a "$output_file"
|
||
echo "配置信息已保存至 $output_file"
|
||
}
|
||
|
||
function display_Shadowsocks_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local output_file="/usr/local/etc/sing-box/output.txt"
|
||
local local_ip
|
||
local_ip=$(get_local_ip)
|
||
local listen_port=$(jq -r '.inbounds[0].listen_port' "$config_file")
|
||
local ss_method=$(jq -r '.inbounds[0].method' "$config_file")
|
||
local ss_password=$(jq -r '.inbounds[0].password' "$config_file")
|
||
|
||
echo -e "${CYAN}Shadowsocks 节点配置信息：${NC}" | tee -a "$output_file"
|
||
echo -e "${CYAN}================================================================${NC}" | tee -a "$output_file"
|
||
echo "服务器地址: $local_ip" | tee -a "$output_file"
|
||
echo -e "${CYAN}----------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "监听端口: $listen_port" | tee -a "$output_file"
|
||
echo -e "${CYAN}----------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "加密方式: $ss_method" | tee -a "$output_file"
|
||
echo -e "${CYAN}----------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "密码: $ss_password" | tee -a "$output_file"
|
||
echo -e "${CYAN}================================================================${NC}" | tee -a "$output_file"
|
||
echo "配置信息已保存至 $output_file"
|
||
}
|
||
|
||
function display_NaiveProxy_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
local output_file="/usr/local/etc/sing-box/output.txt"
|
||
local server_name=$(jq -r '.inbounds[0].tls.server_name' "$config_file")
|
||
local listen_port=$(jq -r '.inbounds[0].listen_port' "$config_file")
|
||
local users=$(jq -r '.inbounds[0].users[] | "\(.username) \(.password)"' "$config_file")
|
||
|
||
echo -e "${CYAN}NaiveProxy 节点配置信息：${NC}" | tee -a "$output_file"
|
||
echo -e "${CYAN}================================================================${NC}" | tee -a "$output_file"
|
||
echo "服务器地址: $server_name" | tee -a "$output_file"
|
||
echo -e "${CYAN}----------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "监听端口: $listen_port" | tee -a "$output_file"
|
||
echo -e "${CYAN}----------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "用 户 名 密 码" | tee -a "$output_file"
|
||
echo "----------------------------------------------------------------" | tee -a "$output_file"
|
||
echo "$users" | tee -a "$output_file"
|
||
echo -e "${CYAN}================================================================${NC}" | tee -a "$output_file"
|
||
echo "配置信息已保存至 $output_file"
|
||
}
|
||
|
||
function display_juicity_config() {
|
||
local config_file="/usr/local/etc/juicity/config.json"
|
||
local output_file="/usr/local/etc/juicity/output.txt"
|
||
local listen_port=$(jq -r '.listen' "$config_file" | sed 's/\://')
|
||
local UUIDS=$(jq -r '.users | to_entries[] | "UUID: \(.key)\t密码: \(.value)"' "$config_file")
|
||
local congestion_control=$(jq -r '.congestion_control' "$config_file")
|
||
|
||
echo -e "${CYAN}juicity 节点配置信息：${NC}" | tee -a "$output_file"
|
||
echo -e "${CYAN}==================================================================${NC}" | tee -a "$output_file"
|
||
echo "监听端口: $listen_port" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "UUID和密码:" | tee -a "$output_file"
|
||
echo "$UUIDS" | tee -a "$output_file"
|
||
echo -e "${CYAN}------------------------------------------------------------------${NC}" | tee -a "$output_file"
|
||
echo "拥塞控制算法: $congestion_control" | tee -a "$output_file"
|
||
echo -e "${CYAN}==================================================================${NC}" | tee -a "$output_file"
|
||
echo "配置信息已保存至 $output_file"
|
||
}
|
||
|
||
function view_saved_config() {
|
||
local config_paths=(
|
||
"/usr/local/etc/sing-box/output.txt"
|
||
"/usr/local/etc/juicity/output.txt"
|
||
)
|
||
|
||
local found=false
|
||
for path in "${config_paths[@]}"; do
|
||
if [[ -f "$path" ]]; then
|
||
echo "配置信息文件 ($path):"
|
||
cat "$path"
|
||
found=true
|
||
fi
|
||
done
|
||
|
||
if [[ "$found" == false ]]; then
|
||
echo "未找到保存的配置信息文件！"
|
||
fi
|
||
}
|
||
|
||
function check_and_restart_services() {
|
||
if [ -f "/etc/systemd/system/sing-box.service" ]; then
|
||
systemctl restart sing-box.service
|
||
systemctl status --no-pager sing-box.service
|
||
fi
|
||
|
||
if [ -f "/etc/systemd/system/caddy.service" ]; then
|
||
systemctl reload caddy.service
|
||
systemctl status --no-pager caddy.service
|
||
fi
|
||
|
||
if [ -f "/etc/systemd/system/juicity.service" ]; then
|
||
systemctl restart juicity.service
|
||
systemctl status --no-pager juicity.service
|
||
fi
|
||
}
|
||
|
||
function uninstall_sing_box() {
|
||
echo "开始卸载 sing-box..."
|
||
systemctl stop sing-box
|
||
systemctl disable sing-box
|
||
rm -rf /usr/local/bin/sing-box
|
||
rm -rf /usr/local/etc/sing-box
|
||
rm -rf /etc/systemd/system/sing-box.service
|
||
systemctl daemon-reload
|
||
echo "sing-box 卸载完成。"
|
||
}
|
||
|
||
function uninstall_caddy() {
|
||
echo "开始卸载 caddy..."
|
||
systemctl stop caddy
|
||
systemctl disable caddy
|
||
rm -rf /etc/systemd/system/caddy.service
|
||
rm -rf /usr/local/etc/caddy
|
||
rm -rf /usr/bin/caddy
|
||
systemctl daemon-reload
|
||
echo "caddy 卸载完成。"
|
||
}
|
||
|
||
function uninstall_juicity() {
|
||
echo "开始卸载 juicity..."
|
||
systemctl stop juicity.service
|
||
systemctl disable juicity.service
|
||
rm -rf /etc/systemd/system/juicity.service
|
||
rm -rf /usr/local/etc/juicity
|
||
rm -rf /usr/local/bin/juicity-server
|
||
echo "juicity 卸载完成。"
|
||
}
|
||
|
||
function update_proxy_tool() {
|
||
if [ -e /usr/local/bin/juicity-server ]; then
|
||
install_latest_juicity
|
||
fi
|
||
|
||
if [ -e /usr/bin/caddy ]; then
|
||
install_latest_caddy
|
||
fi
|
||
|
||
if [ -e /usr/local/bin/sing-box ]; then
|
||
select_sing_box_install_option
|
||
fi
|
||
}
|
||
|
||
function uninstall() {
|
||
local uninstall_sing_box=false
|
||
local uninstall_caddy=false
|
||
local uninstall_juicity=false
|
||
|
||
if [[ -f "/etc/systemd/system/sing-box.service" ]] || [[ -f "/usr/local/bin/sing-box" ]] || [[ -d "/usr/local/etc/sing-box/" ]]; then
|
||
uninstall_sing_box=true
|
||
fi
|
||
|
||
if [[ -f "/etc/systemd/system/caddy.service" ]] || [[ -f "/usr/bin/caddy" ]] || [[ -d "/usr/local/etc/caddy" ]]; then
|
||
uninstall_caddy=true
|
||
fi
|
||
|
||
if [[ -f "/etc/systemd/system/juicity.service" ]] || [[ -f "/usr/local/bin/juicity-server" ]] || [[ -d "/usr/local/etc/juicity/" ]]; then
|
||
uninstall_juicity=true
|
||
fi
|
||
|
||
if [[ "$uninstall_sing_box" == true ]]; then
|
||
uninstall_sing_box
|
||
fi
|
||
|
||
if [[ "$uninstall_caddy" == true ]]; then
|
||
uninstall_caddy
|
||
fi
|
||
|
||
if [[ "$uninstall_juicity" == true ]]; then
|
||
uninstall_juicity
|
||
fi
|
||
}
|
||
|
||
function check_wireguard_config() {
|
||
local config_file="/usr/local/etc/sing-box/config.json"
|
||
|
||
if grep -q "wireguard" "$config_file"; then
|
||
echo -e "${RED}Warp 已安装，请勿重复安装！${NC}"
|
||
exit 1
|
||
fi
|
||
}
|
||
|
||
function juicity_install() {
|
||
configure_dns64
|
||
enable_bbr
|
||
create_juicity_folder
|
||
create_ssl_folder
|
||
install_latest_juicity
|
||
generate_juicity_config
|
||
check_firewall_configuration
|
||
ask_certificate_option
|
||
configure_juicity_service
|
||
systemctl daemon-reload
|
||
systemctl enable juicity.service
|
||
systemctl start juicity.service
|
||
systemctl restart juicity.service
|
||
display_juicity_config
|
||
}
|
||
|
||
function Direct_install() {
|
||
install_sing_box
|
||
log_outbound_config
|
||
listen_port
|
||
override_address
|
||
override_port
|
||
generate_Direct_config
|
||
modify_format_inbounds_and_outbounds
|
||
check_firewall_configuration
|
||
systemctl daemon-reload
|
||
systemctl enable sing-box
|
||
systemctl start sing-box
|
||
systemctl restart sing-box
|
||
display_Direct_config
|
||
}
|
||
|
||
function Shadowsocks_install() {
|
||
install_sing_box
|
||
log_outbound_config
|
||
listen_port
|
||
encryption_method
|
||
generate_ss_config
|
||
modify_format_inbounds_and_outbounds
|
||
check_firewall_configuration
|
||
systemctl daemon-reload
|
||
systemctl enable sing-box
|
||
systemctl start sing-box
|
||
systemctl restart sing-box
|
||
display_Shadowsocks_config
|
||
}
|
||
|
||
function NaiveProxy_install() {
|
||
install_sing_box
|
||
log_outbound_config
|
||
generate_naive_config
|
||
modify_format_inbounds_and_outbounds
|
||
check_firewall_configuration
|
||
ask_certificate_option
|
||
systemctl daemon-reload
|
||
systemctl enable sing-box
|
||
systemctl start sing-box
|
||
systemctl restart sing-box
|
||
display_NaiveProxy_config
|
||
}
|
||
|
||
function tuic_install() {
|
||
install_sing_box
|
||
log_outbound_config
|
||
generate_tuic_config
|
||
modify_format_inbounds_and_outbounds
|
||
check_firewall_configuration
|
||
ask_certificate_option
|
||
systemctl daemon-reload
|
||
systemctl enable sing-box
|
||
systemctl start sing-box
|
||
systemctl restart sing-box
|
||
display_tuic_config
|
||
}
|
||
|
||
function Hysteria_install() {
|
||
install_sing_box
|
||
log_outbound_config
|
||
generate_Hysteria_config
|
||
modify_format_inbounds_and_outbounds
|
||
check_firewall_configuration
|
||
ask_certificate_option
|
||
systemctl daemon-reload
|
||
systemctl enable sing-box
|
||
systemctl start sing-box
|
||
systemctl restart sing-box
|
||
display_Hysteria_config
|
||
}
|
||
|
||
function Hysteria2_install() {
|
||
install_sing_box
|
||
log_outbound_config
|
||
generate_Hy2_config
|
||
modify_format_inbounds_and_outbounds
|
||
check_firewall_configuration
|
||
ask_certificate_option
|
||
systemctl daemon-reload
|
||
systemctl enable sing-box
|
||
systemctl start sing-box
|
||
systemctl restart sing-box
|
||
display_Hy2_config
|
||
}
|
||
|
||
function shadowtls_install() {
|
||
install_sing_box
|
||
log_outbound_config
|
||
generate_shadowtls_config
|
||
modify_format_inbounds_and_outbounds
|
||
check_firewall_configuration
|
||
systemctl daemon-reload
|
||
systemctl enable sing-box
|
||
systemctl start sing-box
|
||
systemctl restart sing-box
|
||
display_shadowtls_config
|
||
}
|
||
|
||
function reality_install() {
|
||
install_sing_box
|
||
log_outbound_config
|
||
generate_reality_config
|
||
modify_format_inbounds_and_outbounds
|
||
check_firewall_configuration
|
||
systemctl daemon-reload
|
||
systemctl enable sing-box
|
||
systemctl start sing-box
|
||
systemctl restart sing-box
|
||
display_reality_config
|
||
}
|
||
|
||
function trojan_install() {
|
||
install_sing_box
|
||
install_latest_caddy
|
||
configure_caddy_service
|
||
create_caddy_folder
|
||
log_outbound_config
|
||
prompt_setup_type
|
||
listen_port
|
||
set_password
|
||
trojan_multiple_users
|
||
web_port
|
||
get_fake_domain
|
||
get_domain
|
||
generate_caddy_config
|
||
transport_and_fallback_config=$(prompt_and_generate_transport_config)
|
||
check_firewall_configuration
|
||
test_caddy_config
|
||
generate_trojan_config
|
||
modify_format_inbounds_and_outbounds
|
||
check_firewall_configuration
|
||
systemctl daemon-reload
|
||
systemctl enable caddy
|
||
systemctl enable sing-box
|
||
systemctl start caddy
|
||
systemctl start sing-box
|
||
systemctl restart caddy
|
||
systemctl restart sing-box
|
||
display_trojan_config
|
||
}
|
||
|
||
function wireguard_install() {
|
||
check_wireguard_config
|
||
check_config_file_existence
|
||
select_unlocked_items
|
||
geosite=()
|
||
update_geosite_array
|
||
select_outbound
|
||
update_route_file "$outbound"
|
||
get_temp_config_file
|
||
extract_variables_and_cleanup
|
||
update_outbound_file
|
||
systemctl restart sing-box
|
||
}
|
||
|
||
function main_menu() {
|
||
echo "╔════════════════════════════════════════════════════════════════════════╗"
|
||
echo -e "║ ${CYAN}作者${NC}： Mr. xiao ║"
|
||
echo -e "║ ${CYAN}项目地址${NC}: https://github.com/TinrLin ║"
|
||
echo -e "║ ${CYAN}Telegram 群组${NC}: https://t.me/mrxiao758 ║"
|
||
echo -e "║ ${CYAN}YouTube频道${NC}: https://youtube.com/@Mr_xiao502 ║"
|
||
echo "╠════════════════════════════════════════════════════════════════════════╣"
|
||
echo "║ 请选择要执行的操作： ║"
|
||
echo -e "║${CYAN} [1]${NC} TUIC ${CYAN} [2]${NC} Juicity ║"
|
||
echo -e "║${CYAN} [3]${NC} Vless ${CYAN} [4]${NC} Direct ║"
|
||
echo -e "║${CYAN} [5]${NC} Trojan ${CYAN} [6]${NC} Hysteria ║"
|
||
echo -e "║${CYAN} [7]${NC} ShadowTLS ${CYAN} [8]${NC} NaiveProxy ║"
|
||
echo -e "║${CYAN} [9]${NC} Shadowsocks ${CYAN} [10]${NC} WireGuard ║"
|
||
echo -e "║${CYAN} [11]${NC} Hysteria2 ${CYAN} [12]${NC} 查看节点信息 ║"
|
||
echo -e "║${CYAN} [13]${NC} 重启服务 ${CYAN} [14]${NC} 更新代理工具 ║"
|
||
echo -e "║${CYAN} [15]${NC} 卸载 ${CYAN} [0]${NC} 退出 ║"
|
||
echo "╚════════════════════════════════════════════════════════════════════════╝"
|
||
|
||
local choice
|
||
read -p "请选择 [0-15]: " choice
|
||
|
||
case $choice in
|
||
1)
|
||
tuic_install
|
||
;;
|
||
2)
|
||
juicity_install
|
||
;;
|
||
3)
|
||
reality_install
|
||
;;
|
||
4)
|
||
Direct_install
|
||
;;
|
||
5)
|
||
trojan_install
|
||
;;
|
||
6)
|
||
Hysteria_install
|
||
;;
|
||
7)
|
||
shadowtls_install
|
||
;;
|
||
8)
|
||
NaiveProxy_install
|
||
;;
|
||
9)
|
||
Shadowsocks_install
|
||
;;
|
||
10)
|
||
wireguard_install
|
||
;;
|
||
11)
|
||
Hysteria2_install
|
||
;;
|
||
12)
|
||
view_saved_config
|
||
;;
|
||
|
||
13)
|
||
check_and_restart_services
|
||
;;
|
||
14)
|
||
update_proxy_tool
|
||
;;
|
||
15)
|
||
uninstall
|
||
;;
|
||
0)
|
||
echo "感谢使用 Mr. xiao 安装脚本！再见！"
|
||
exit 0
|
||
;;
|
||
*)
|
||
echo -e "${RED}无效的选择，请重新输入。${NC}"
|
||
main_menu
|
||
;;
|
||
esac
|
||
}
|
||
|
||
main_menu
|