#!/bin/bash red='\033[0;31m' green='\033[0;32m' yellow='\033[0;33m' plain='\033[0m' #Add some basic function here function LOGD() { echo -e "${yellow}[DEG] $* ${plain}" } function LOGE() { echo -e "${red}[ERR] $* ${plain}" } function LOGI() { echo -e "${green}[INF] $* ${plain}" } # check root [[ $EUID -ne 0 ]] && LOGE "ERROR: You must be root to run this script! \n" && exit 1 # Check OS and set release variable if [[ -f /etc/os-release ]]; then source /etc/os-release release=$ID elif [[ -f /usr/lib/os-release ]]; then source /usr/lib/os-release release=$ID else echo "Failed to check the system OS, please contact the author!" >&2 exit 1 fi echo "The OS release is: $release" os_version="" os_version=$(grep -i version_id /etc/os-release | cut -d \" -f2 | cut -d . -f1) if [[ "${release}" == "arch" ]]; then echo "Your OS is Arch Linux" elif [[ "${release}" == "parch" ]]; then echo "Your OS is Parch linux" elif [[ "${release}" == "manjaro" ]]; then echo "Your OS is Manjaro" elif [[ "${release}" == "armbian" ]]; then echo "Your OS is Armbian" elif [[ "${release}" == "opensuse-tumbleweed" ]]; then echo "Your OS is OpenSUSE Tumbleweed" elif [[ "${release}" == "centos" ]]; then if [[ ${os_version} -lt 8 ]]; then echo -e "${red} Please use CentOS 8 or higher ${plain}\n" && exit 1 fi elif [[ "${release}" == "ubuntu" ]]; then if [[ ${os_version} -lt 20 ]]; then echo -e "${red} Please use Ubuntu 20 or higher version!${plain}\n" && exit 1 fi elif [[ "${release}" == "fedora" ]]; then if [[ ${os_version} -lt 36 ]]; then echo -e "${red} Please use Fedora 36 or higher version!${plain}\n" && exit 1 fi elif [[ "${release}" == "debian" ]]; then if [[ ${os_version} -lt 11 ]]; then echo -e "${red} Please use Debian 11 or higher ${plain}\n" && exit 1 fi elif [[ "${release}" == "almalinux" ]]; then if [[ ${os_version} -lt 9 ]]; then echo -e "${red} Please use AlmaLinux 9 or higher ${plain}\n" && exit 1 fi elif [[ "${release}" == "rocky" ]]; then if [[ ${os_version} -lt 9 ]]; then echo -e "${red} Please use Rocky Linux 9 or higher ${plain}\n" && exit 1 fi elif [[ "${release}" == "oracle" ]]; then if [[ ${os_version} -lt 8 ]]; then echo -e "${red} Please use Oracle Linux 8 or higher ${plain}\n" && exit 1 fi else echo -e "${red}Your operating system is not supported by this script.${plain}\n" echo "Please ensure you are using one of the following supported operating systems:" echo "- Ubuntu 20.04+" echo "- Debian 11+" echo "- CentOS 8+" echo "- Fedora 36+" echo "- Arch Linux" echo "- Parch Linux" echo "- Manjaro" echo "- Armbian" echo "- AlmaLinux 9+" echo "- Rocky Linux 9+" echo "- Oracle Linux 8+" echo "- OpenSUSE Tumbleweed" exit 1 fi confirm() { if [[ $# > 1 ]]; then echo && read -p "$1 [Default$2]: " temp if [[ x"${temp}" == x"" ]]; then temp=$2 fi else read -p "$1 [y/n]: " temp fi if [[ x"${temp}" == x"y" || x"${temp}" == x"Y" ]]; then return 0 else return 1 fi } confirm_restart() { confirm "Restart the ${1} service" "y" if [[ $? == 0 ]]; then restart else show_menu fi } before_show_menu() { echo && echo -n -e "${yellow}Press enter to return to the main menu: ${plain}" && read temp show_menu } install() { bash <(curl -Ls https://raw.githubusercontent.com/alireza0/s-ui/main/install.sh) if [[ $? == 0 ]]; then if [[ $# == 0 ]]; then start else start 0 fi fi } update() { confirm "This function will forcefully reinstall the latest version, and the data will not be lost. Do you want to continue?" "n" if [[ $? != 0 ]]; then LOGE "Cancelled" if [[ $# == 0 ]]; then before_show_menu fi return 0 fi bash <(curl -Ls https://raw.githubusercontent.com/alireza0/s-ui/main/install.sh) if [[ $? == 0 ]]; then LOGI "Update is complete, Panel has automatically restarted " exit 0 fi } custom_version() { echo "Enter the panel version (like 0.0.1):" read panel_version if [ -z "$panel_version" ]; then echo "Panel version cannot be empty. Exiting." exit 1 fi download_link="https://raw.githubusercontent.com/alireza0/s-ui/master/install.sh" # Use the entered panel version in the download link install_command="bash <(curl -Ls $download_link) $panel_version" echo "Downloading and installing panel version $panel_version..." eval $install_command } uninstall() { confirm "Are you sure you want to uninstall the panel?" "n" if [[ $? != 0 ]]; then if [[ $# == 0 ]]; then show_menu fi return 0 fi systemctl stop s-ui systemctl disable s-ui rm /etc/systemd/system/s-ui.service -f systemctl daemon-reload systemctl reset-failed rm /etc/s-ui/ -rf rm /usr/local/s-ui/ -rf echo "" echo -e "Uninstalled Successfully, If you want to remove this script, then after exiting the script run ${green}rm /usr/local/s-ui -f${plain} to delete it." echo "" if [[ $# == 0 ]]; then before_show_menu fi } reset_admin() { echo "It is not recommended to set admin's credentials to default!" confirm "Are you sure you want to reset admin's credentials to default ?" "n" if [[ $? == 0 ]]; then /usr/local/s-ui/sui admin -reset fi before_show_menu } set_admin() { echo "It is not recommended to set admin's credentials to a complex text." read -p "Please set up your username:" config_account read -p "Please set up your password:" config_password /usr/local/s-ui/sui admin -username ${config_account} -password ${config_password} before_show_menu } view_admin() { /usr/local/s-ui/sui admin -show before_show_menu } reset_setting() { confirm "Are you sure you want to reset settings to default ?" "n" if [[ $? == 0 ]]; then /usr/local/s-ui/sui setting -reset fi before_show_menu } set_setting() { echo -e "Enter the ${yellow}panel port${plain} (leave blank for existing/default value):" read config_port echo -e "Enter the ${yellow}panel path${plain} (leave blank for existing/default value):" read config_path # Sub configuration echo -e "Enter the ${yellow}subscription port${plain} (leave blank for existing/default value):" read config_subPort echo -e "Enter the ${yellow}subscription path${plain} (leave blank for existing/default value):" read config_subPath # Set configs echo -e "${yellow}Initializing, please wait...${plain}" params="" [ -z "$config_port" ] || params="$params -port $config_port" [ -z "$config_path" ] || params="$params -path $config_path" [ -z "$config_subPort" ] || params="$params -subPort $config_subPort" [ -z "$config_subPath" ] || params="$params -subPath $config_subPath" /usr/local/s-ui/sui setting ${params} before_show_menu } view_setting() { /usr/local/s-ui/sui setting -show view_uri before_show_menu } view_uri() { info=$(/usr/local/s-ui/sui uri) if [[ $? != 0 ]]; then LOGE "Get current uri error" before_show_menu fi LOGI "You may access the Panel with following URL(s):" echo -e "${green}${info}${plain}" } start() { check_status $1 if [[ $? == 0 ]]; then echo "" LOGI -e "${1} is running, No need to start again, If you need to restart, please select restart" else systemctl start $1 sleep 2 check_status $1 if [[ $? == 0 ]]; then LOGI "${1} Started Successfully" else LOGE "Failed to start ${1}, Probably because it takes longer than two seconds to start, Please check the log information later" fi fi if [[ $# == 1 ]]; then before_show_menu fi } stop() { check_status $1 if [[ $? == 1 ]]; then echo "" LOGI "${1} stopped, No need to stop again!" else systemctl stop $1 sleep 2 check_status if [[ $? == 1 ]]; then LOGI "${1} stopped successfully" else LOGE "Failed to stop ${1}, Probably because the stop time exceeds two seconds, Please check the log information later" fi fi if [[ $# == 1 ]]; then before_show_menu fi } restart() { systemctl restart $1 sleep 2 check_status $1 if [[ $? == 0 ]]; then LOGI "${1} Restarted successfully" else LOGE "Failed to restart ${1}, Probably because it takes longer than two seconds to start, Please check the log information later" fi if [[ $# == 1 ]]; then before_show_menu fi } status() { systemctl status s-ui -l if [[ $# == 0 ]]; then before_show_menu fi } enable() { systemctl enable $1 if [[ $? == 0 ]]; then LOGI "Set ${1} to boot automatically on startup successfully" else LOGE "Failed to set ${1} Autostart" fi if [[ $# == 1 ]]; then before_show_menu fi } disable() { systemctl disable $1 if [[ $? == 0 ]]; then LOGI "Autostart ${1} Cancelled successfully" else LOGE "Failed to cancel ${1} autostart" fi if [[ $# == 1 ]]; then before_show_menu fi } show_log() { journalctl -u $1.service -e --no-pager -f if [[ $# == 1 ]]; then before_show_menu fi } update_shell() { wget -O /usr/bin/s-ui -N --no-check-certificate https://github.com/alireza0/s-ui/raw/main/s-ui.sh if [[ $? != 0 ]]; then echo "" LOGE "Failed to download script, Please check whether the machine can connect Github" before_show_menu else chmod +x /usr/bin/s-ui LOGI "Upgrade script succeeded, Please rerun the script" && exit 0 fi } # 0: running, 1: not running, 2: not installed check_status() { if [[ ! -f "/etc/systemd/system/$1.service" ]]; then return 2 fi temp=$(systemctl status "$1" | grep Active | awk '{print $3}' | cut -d "(" -f2 | cut -d ")" -f1) if [[ x"${temp}" == x"running" ]]; then return 0 else return 1 fi } check_enabled() { temp=$(systemctl is-enabled $1) if [[ x"${temp}" == x"enabled" ]]; then return 0 else return 1 fi } check_uninstall() { check_status s-ui if [[ $? != 2 ]]; then echo "" LOGE "Panel is already installed, Please do not reinstall" if [[ $# == 0 ]]; then before_show_menu fi return 1 else return 0 fi } check_install() { check_status s-ui if [[ $? == 2 ]]; then echo "" LOGE "Please install the panel first" if [[ $# == 0 ]]; then before_show_menu fi return 1 else return 0 fi } show_status() { check_status $1 case $? in 0) echo -e "${1} state: ${green}Running${plain}" show_enable_status $1 ;; 1) echo -e "${1} state: ${yellow}Not Running${plain}" show_enable_status $1 ;; 2) echo -e "${1} state: ${red}Not Installed${plain}" ;; esac } show_enable_status() { check_enabled $1 if [[ $? == 0 ]]; then echo -e "Start ${1} automatically: ${green}Yes${plain}" else echo -e "Start ${1} automatically: ${red}No${plain}" fi } check_s-ui_status() { count=$(ps -ef | grep "sui" | grep -v "grep" | wc -l) if [[ count -ne 0 ]]; then return 0 else return 1 fi } show_s-ui_status() { check_s-ui_status if [[ $? == 0 ]]; then echo -e "s-ui state: ${green}Running${plain}" else echo -e "s-ui state: ${red}Not Running${plain}" fi } bbr_menu() { echo -e "${green}\t1.${plain} Enable BBR" echo -e "${green}\t2.${plain} Disable BBR" echo -e "${green}\t0.${plain} Back to Main Menu" read -p "Choose an option: " choice case "$choice" in 0) show_menu ;; 1) enable_bbr ;; 2) disable_bbr ;; *) echo "Invalid choice" ;; esac } disable_bbr() { if ! grep -q "net.core.default_qdisc=fq" /etc/sysctl.conf || ! grep -q "net.ipv4.tcp_congestion_control=bbr" /etc/sysctl.conf; then echo -e "${yellow}BBR is not currently enabled.${plain}" exit 0 fi # Replace BBR with CUBIC configurations sed -i 's/net.core.default_qdisc=fq/net.core.default_qdisc=pfifo_fast/' /etc/sysctl.conf sed -i 's/net.ipv4.tcp_congestion_control=bbr/net.ipv4.tcp_congestion_control=cubic/' /etc/sysctl.conf # Apply changes sysctl -p # Verify that BBR is replaced with CUBIC if [[ $(sysctl net.ipv4.tcp_congestion_control | awk '{print $3}') == "cubic" ]]; then echo -e "${green}BBR has been replaced with CUBIC successfully.${plain}" else echo -e "${red}Failed to replace BBR with CUBIC. Please check your system configuration.${plain}" fi } enable_bbr() { if grep -q "net.core.default_qdisc=fq" /etc/sysctl.conf && grep -q "net.ipv4.tcp_congestion_control=bbr" /etc/sysctl.conf; then echo -e "${green}BBR is already enabled!${plain}" exit 0 fi # Check the OS and install necessary packages case "${release}" in ubuntu | debian | armbian) apt-get update && apt-get install -yqq --no-install-recommends ca-certificates ;; centos | almalinux | rocky | oracle) yum -y update && yum -y install ca-certificates ;; fedora) dnf -y update && dnf -y install ca-certificates ;; arch | manjaro | parch) pacman -Sy --noconfirm ca-certificates ;; *) echo -e "${red}Unsupported operating system. Please check the script and install the necessary packages manually.${plain}\n" exit 1 ;; esac # Enable BBR echo "net.core.default_qdisc=fq" | tee -a /etc/sysctl.conf echo "net.ipv4.tcp_congestion_control=bbr" | tee -a /etc/sysctl.conf # Apply changes sysctl -p # Verify that BBR is enabled if [[ $(sysctl net.ipv4.tcp_congestion_control | awk '{print $3}') == "bbr" ]]; then echo -e "${green}BBR has been enabled successfully.${plain}" else echo -e "${red}Failed to enable BBR. Please check your system configuration.${plain}" fi } install_acme() { cd ~ LOGI "install acme..." curl https://get.acme.sh | sh if [ $? -ne 0 ]; then LOGE "install acme failed" return 1 else LOGI "install acme succeed" fi return 0 } ssl_cert_issue_main() { echo -e "${green}\t1.${plain} Get SSL" echo -e "${green}\t2.${plain} Revoke" echo -e "${green}\t3.${plain} Force Renew" read -p "Choose an option: " choice case "$choice" in 1) ssl_cert_issue ;; 2) local domain="" read -p "Please enter your domain name to revoke the certificate: " domain ~/.acme.sh/acme.sh --revoke -d ${domain} LOGI "Certificate revoked" ;; 3) local domain="" read -p "Please enter your domain name to forcefully renew an SSL certificate: " domain ~/.acme.sh/acme.sh --renew -d ${domain} --force ;; *) echo "Invalid choice" ;; esac } ssl_cert_issue() { # check for acme.sh first if ! command -v ~/.acme.sh/acme.sh &>/dev/null; then echo "acme.sh could not be found. we will install it" install_acme if [ $? -ne 0 ]; then LOGE "install acme failed, please check logs" exit 1 fi fi # install socat second case "${release}" in ubuntu | debian | armbian) apt update && apt install socat -y ;; centos | almalinux | rocky | oracle) yum -y update && yum -y install socat ;; fedora) dnf -y update && dnf -y install socat ;; arch | manjaro | parch) pacman -Sy --noconfirm socat ;; *) echo -e "${red}Unsupported operating system. Please check the script and install the necessary packages manually.${plain}\n" exit 1 ;; esac if [ $? -ne 0 ]; then LOGE "install socat failed, please check logs" exit 1 else LOGI "install socat succeed..." fi # get the domain here,and we need verify it local domain="" read -p "Please enter your domain name:" domain LOGD "your domain is:${domain},check it..." # here we need to judge whether there exists cert already local currentCert=$(~/.acme.sh/acme.sh --list | tail -1 | awk '{print $1}') if [ ${currentCert} == ${domain} ]; then local certInfo=$(~/.acme.sh/acme.sh --list) LOGE "system already has certs here,can not issue again,current certs details:" LOGI "$certInfo" exit 1 else LOGI "your domain is ready for issuing cert now..." fi # create a directory for install cert certPath="/root/cert/${domain}" if [ ! -d "$certPath" ]; then mkdir -p "$certPath" else rm -rf "$certPath" mkdir -p "$certPath" fi # get needed port here local WebPort=80 read -p "please choose which port do you use,default will be 80 port:" WebPort if [[ ${WebPort} -gt 65535 || ${WebPort} -lt 1 ]]; then LOGE "your input ${WebPort} is invalid,will use default port" fi LOGI "will use port:${WebPort} to issue certs,please make sure this port is open..." # NOTE:This should be handled by user # open the port and kill the occupied progress ~/.acme.sh/acme.sh --set-default-ca --server letsencrypt ~/.acme.sh/acme.sh --issue -d ${domain} --standalone --httpport ${WebPort} if [ $? -ne 0 ]; then LOGE "issue certs failed,please check logs" rm -rf ~/.acme.sh/${domain} exit 1 else LOGE "issue certs succeed,installing certs..." fi # install cert ~/.acme.sh/acme.sh --installcert -d ${domain} \ --key-file /root/cert/${domain}/privkey.pem \ --fullchain-file /root/cert/${domain}/fullchain.pem if [ $? -ne 0 ]; then LOGE "install certs failed,exit" rm -rf ~/.acme.sh/${domain} exit 1 else LOGI "install certs succeed,enable auto renew..." fi ~/.acme.sh/acme.sh --upgrade --auto-upgrade if [ $? -ne 0 ]; then LOGE "auto renew failed, certs details:" ls -lah cert/* chmod 755 $certPath/* exit 1 else LOGI "auto renew succeed, certs details:" ls -lah cert/* chmod 755 $certPath/* fi } ssl_cert_issue_CF() { echo -E "" LOGD "******Instructions for use******" LOGI "This Acme script requires the following data:" LOGI "1.Cloudflare Registered e-mail" LOGI "2.Cloudflare Global API Key" LOGI "3.The domain name that has been resolved dns to the current server by Cloudflare" LOGI "4.The script applies for a certificate. The default installation path is /root/cert " confirm "Confirmed?[y/n]" "y" if [ $? -eq 0 ]; then # check for acme.sh first if ! command -v ~/.acme.sh/acme.sh &>/dev/null; then echo "acme.sh could not be found. we will install it" install_acme if [ $? -ne 0 ]; then LOGE "install acme failed, please check logs" exit 1 fi fi CF_Domain="" CF_GlobalKey="" CF_AccountEmail="" certPath=/root/cert if [ ! -d "$certPath" ]; then mkdir $certPath else rm -rf $certPath mkdir $certPath fi LOGD "Please set a domain name:" read -p "Input your domain here:" CF_Domain LOGD "Your domain name is set to:${CF_Domain}" LOGD "Please set the API key:" read -p "Input your key here:" CF_GlobalKey LOGD "Your API key is:${CF_GlobalKey}" LOGD "Please set up registered email:" read -p "Input your email here:" CF_AccountEmail LOGD "Your registered email address is:${CF_AccountEmail}" ~/.acme.sh/acme.sh --set-default-ca --server letsencrypt if [ $? -ne 0 ]; then LOGE "Default CA, Lets'Encrypt fail, script exiting..." exit 1 fi export CF_Key="${CF_GlobalKey}" export CF_Email=${CF_AccountEmail} ~/.acme.sh/acme.sh --issue --dns dns_cf -d ${CF_Domain} -d *.${CF_Domain} --log if [ $? -ne 0 ]; then LOGE "Certificate issuance failed, script exiting..." exit 1 else LOGI "Certificate issued Successfully, Installing..." fi ~/.acme.sh/acme.sh --installcert -d ${CF_Domain} -d *.${CF_Domain} --ca-file /root/cert/ca.cer \ --cert-file /root/cert/${CF_Domain}.cer --key-file /root/cert/${CF_Domain}.key \ --fullchain-file /root/cert/fullchain.cer if [ $? -ne 0 ]; then LOGE "Certificate installation failed, script exiting..." exit 1 else LOGI "Certificate installed Successfully,Turning on automatic updates..." fi ~/.acme.sh/acme.sh --upgrade --auto-upgrade if [ $? -ne 0 ]; then LOGE "Auto update setup Failed, script exiting..." ls -lah cert chmod 755 $certPath exit 1 else LOGI "The certificate is installed and auto-renewal is turned on, Specific information is as follows" ls -lah cert chmod 755 $certPath fi else show_menu fi } show_usage() { echo -e "S-UI Control Menu Usage" echo -e "------------------------------------------" echo -e "SUBCOMMANDS:" echo -e "s-ui - Admin Management Script" echo -e "s-ui start - Start s-ui" echo -e "s-ui stop - Stop s-ui" echo -e "s-ui restart - Restart s-ui" echo -e "s-ui status - Current Status of s-ui" echo -e "s-ui enable - Enable Autostart on OS Startup" echo -e "s-ui disable - Disable Autostart on OS Startup" echo -e "s-ui log - Check s-ui Logs" echo -e "s-ui update - Update" echo -e "s-ui install - Install" echo -e "s-ui uninstall - Uninstall" echo -e "s-ui help - Control Menu Usage" echo -e "------------------------------------------" } show_menu() { echo -e " ${green}S-UI Admin Management Script ${plain} ———————————————————————————————— ${green}0.${plain} Exit ———————————————————————————————— ${green}1.${plain} Install ${green}2.${plain} Update ${green}3.${plain} Custom Version ${green}4.${plain} Uninstall ———————————————————————————————— ${green}5.${plain} Reset admin credentials to default ${green}6.${plain} Set admin credentials ${green}7.${plain} View admin credentials ———————————————————————————————— ${green}8.${plain} Reset Panel Settings ${green}9.${plain} Set Panel settings ${green}10.${plain} View Panel Settings ———————————————————————————————— ${green}11.${plain} S-UI Start ${green}12.${plain} S-UI Stop ${green}13.${plain} S-UI Restart ${green}14.${plain} S-UI Check State ${green}15.${plain} S-UI Check Logs ${green}16.${plain} S-UI Enable Autostart ${green}17.${plain} S-UI Disable Autostart ———————————————————————————————— ${green}18.${plain} Enable or Disable BBR ${green}19.${plain} SSL Certificate Management ${green}20.${plain} Cloudflare SSL Certificate ———————————————————————————————— " show_status s-ui echo && read -p "Please enter your selection [0-20]: " num case "${num}" in 0) exit 0 ;; 1) check_uninstall && install ;; 2) check_install && update ;; 3) check_install && custom_version ;; 4) check_install && uninstall ;; 5) check_install && reset_admin ;; 6) check_install && set_admin ;; 7) check_install && view_admin ;; 8) check_install && reset_setting ;; 9) check_install && set_setting ;; 10) check_install && view_setting ;; 11) check_install && start s-ui ;; 12) check_install && stop s-ui ;; 13) check_install && restart s-ui ;; 14) check_install && status s-ui ;; 15) check_install && show_log s-ui ;; 16) check_install && enable s-ui ;; 17) check_install && disable s-ui ;; 18) bbr_menu ;; 19) ssl_cert_issue_main ;; 20) ssl_cert_issue_CF ;; *) LOGE "Please enter the correct number [0-20]" ;; esac } if [[ $# > 0 ]]; then case $1 in "start") check_install 0 && start s-ui 0 ;; "stop") check_install 0 && stop s-ui 0 ;; "restart") check_install 0 && restart s-ui 0 ;; "status") check_install 0 && status 0 ;; "enable") check_install 0 && enable s-ui 0 ;; "disable") check_install 0 && disable s-ui 0 ;; "log") check_install 0 && show_log s-ui 0 ;; "update") check_install 0 && update 0 ;; "install") check_uninstall 0 && install 0 ;; "uninstall") check_install 0 && uninstall 0 ;; *) show_usage ;; esac else show_menu fi