#!/usr/bin/env bash # Maintainer:dodo258 # Upstream attribution and license details: see NOTICE.md # 检测区 # ------------------------------------------------------------- # 检查系统 export LANG=en_US.UTF-8 xrayBinaryPath="/etc/v2ray-agent/xray/xray" singBoxBinaryPath="/etc/v2ray-agent/sing-box/sing-box" xrayServiceName="dodo258-xray" singBoxServiceName="dodo258-sing-box" xraySystemdServicePath="/etc/systemd/system/${xrayServiceName}.service" singBoxSystemdServicePath="/etc/systemd/system/${singBoxServiceName}.service" xrayOpenrcServicePath="/etc/init.d/${xrayServiceName}" singBoxOpenrcServicePath="/etc/init.d/${singBoxServiceName}" managedMultiRealityPrefix="30_VLESS_vision_reality_multi_" managedMultiRealityDNSPrefix="31_VLESS_vision_reality_multi_dns_" managedMultiAnyTLSPrefix="32_anytls_multi_" managedMultiAnyTLSDNSPrefix="33_anytls_multi_dns_" managedMultiRealityShortID="6ba85179e30d4fc2" managedMultiRealityKeySuffix=".key" snellShadowTLSRoot="/etc/v2ray-agent/snell-shadowtls" snellShadowTLSNodeRoot="${snellShadowTLSRoot}/nodes" snellBinaryRoot="${snellShadowTLSRoot}/bin" snellConfigRoot="${snellShadowTLSRoot}/conf" snellServicePrefix="dodo258-snell" shadowTLSServicePrefix="dodo258-shadowtls" shadowTLSBinaryPath="${snellBinaryRoot}/shadow-tls" websiteManagerRoot="/etc/v2ray-agent/website-manager" websiteMetadataFile="${websiteManagerRoot}/site.env" websiteActiveDomainFile="${websiteManagerRoot}/active_domain" websitePublishLog="${websiteManagerRoot}/publish.log" websiteCronTag="WebsitePublish" websiteNginxConfigName="website_manager.conf" echoContent() { case $1 in # 红色 "red") # shellcheck disable=SC2154 ${echoType} "\033[31m${printN}$2 \033[0m" ;; # 天蓝色 "skyBlue") ${echoType} "\033[1;36m${printN}$2 \033[0m" ;; # 绿色 "green") ${echoType} "\033[32m${printN}$2 \033[0m" ;; # 白色 "white") ${echoType} "\033[37m${printN}$2 \033[0m" ;; "magenta") ${echoType} "\033[31m${printN}$2 \033[0m" ;; # 黄色 "yellow") ${echoType} "\033[33m${printN}$2 \033[0m" ;; esac } echoMenuHint() { ${echoType} "\033[33m${printN}$1\033[1;36m[$2] \033[0m" } echoMenuHintInline() { ${echoType} "\033[33m${printN}$1\033[1;36m[$2]\033[0m\c" } echoMenuHintGreen() { ${echoType} "\033[32m${printN}$1\033[1;36m[$2] \033[0m" } echoMenuHintSuffix() { ${echoType} "\033[33m${printN}$1\033[1;36m[$2]\033[33m$3 \033[0m" } # 检查SELinux状态 checkCentosSELinux() { if command -v getenforce >/dev/null 2>&1 && [ "$(getenforce)" == "Enforcing" ]; then echoContent yellow "# 注意事项" echoContent yellow "检测到SELinux已开启，请手动关闭后重试" echoContent yellow "项目说明：https://github.com/dodo258/sing-box-reality-manager" exit 0 fi } checkSystem() { if [[ -n $(find /etc -name "redhat-release") ]] || grep " exit 1 ;; esac fi else echoContent red " 无法识别此CPU架构，默认amd64、x86_64--->" xrayCoreCPUVendor="Xray-linux-64" # v2rayCoreCPUVendor="v2ray-linux-64" fi } # 初始化全局变量 initVar() { installType='yum -y install' removeType='yum -y remove' upgrade="yum -y update" echoType='echo -e' # sudoCMD="" # 核心支持的cpu版本 xrayCoreCPUVendor="" warpRegCoreCPUVendor="" cpuVendor="" # 域名 domain= websiteDomain= websiteType= websiteVariant= websiteTitle= websiteDescription= websiteTLSAutoMode=false # 安装总进度 totalProgress=1 # 1.xray-core安装 # 2.v2ray-core 安装 # 3.v2ray-core[xtls] 安装 coreInstallType= # 核心安装path # coreInstallPath= # v2ctl Path ctlPath= # 1.全部安装 # 2.个性化安装 # v2rayAgentInstallType= # 当前的个性化安装方式 01234 currentInstallProtocolType= # 当前alpn的顺序 currentAlpn= # 前置类型 frontingType= # 选择的个性化安装方式 selectCustomInstallType= # v2ray-core、xray-core配置文件的路径 configPath= # xray-core reality状态 realityStatus= # sing-box配置文件路径 singBoxConfigPath= # sing-box端口 singBoxVLESSVisionPort= singBoxVLESSRealityVisionPort= singBoxVLESSRealityGRPCPort= singBoxHysteria2Port= singBoxTrojanPort= singBoxTuicPort= singBoxNaivePort= singBoxVMessWSPort= singBoxVLESSWSPort= singBoxVMessHTTPUpgradePort= # nginx订阅端口 subscribePort= subscribeType= # sing-box reality serverName publicKey singBoxVLESSRealityGRPCServerName= singBoxVLESSRealityVisionServerName= singBoxVLESSRealityPublicKey= # xray-core reality serverName publicKey xrayVLESSRealityServerName= xrayVLESSRealityPort= xrayVLESSRealityXHTTPServerName= xrayVLESSRealityXHTTPort= # xrayVLESSRealityPublicKey= # interfaceName= # 端口跳跃 portHoppingStart= portHoppingEnd= portHopping= hysteria2PortHoppingStart= hysteria2PortHoppingEnd= hysteria2PortHopping= # tuicPortHoppingStart= # tuicPortHoppingEnd= # tuicPortHopping= # tuic配置文件路径 # tuicConfigPath= tuicAlgorithm= tuicPort= # 配置文件的path currentPath= # 配置文件的host currentHost= # 安装时选择的core类型 selectCoreType= # 默认core版本 # v2rayCoreVersion= # 随机路径 customPath= # centos version centosVersion= # UUID currentUUID= # clients currentClients= # previousClients # previousClients= localIP= # 定时任务执行任务名称 RenewTLS-更新证书 UpdateGeo-更新geo文件 cronName=$1 # tls安装失败后尝试的次数 installTLSCount= # BTPanel状态 # BTPanelStatus= # 宝塔域名 btDomain= # nginx配置文件路径 nginxConfigPath=/etc/nginx/conf.d/ nginxStaticPath=/usr/share/nginx/html/ # 是否为预览版 prereleaseStatus=false # ssl类型 sslType= # SSL CF API Token cfAPIToken= # ssl邮箱 sslEmail= # 检查天数 sslRenewalDays=90 # dns ssl状态 # dnsSSLStatus= # dns tls domain dnsTLSDomain= ipType= # 该域名是否通过dns安装通配符证书 # installDNSACMEStatus= # 自定义端口 customPort= # hysteria端口 hysteriaPort= # hysteria协议 # hysteriaProtocol= # hysteria延迟 # hysteriaLag= # hysteria下行速度 hysteria2ClientDownloadSpeed= # hysteria上行速度 hysteria2ClientUploadSpeed= # Reality realityPrivateKey= realityServerName= realityDestDomain= # 端口状态 # isPortOpen= # 通配符域名状态 # wildcardDomainStatus= # 通过nginx检查的端口 # nginxIPort= # wget show progress wgetShowProgressStatus= # warp reservedWarpReg= publicKeyWarpReg= addressWarpReg= secretKeyWarpReg= # 上次安装配置状态 lastInstallationConfig= } # 读取tls证书详情 readAcmeTLS() { local readAcmeDomain= if [[ -n "${currentHost}" ]]; then readAcmeDomain="${currentHost}" fi if [[ -n "${domain}" ]]; then readAcmeDomain="${domain}" fi dnsTLSDomain=$(echo "${readAcmeDomain}" | awk -F "." '{$1="";print $0}' | sed 's/^[[:space:]]*//' | sed 's/ /./g') if [[ -d "$HOME/.acme.sh/*.${dnsTLSDomain}_ecc" && -f "$HOME/.acme.sh/*.${dnsTLSDomain}_ecc/*.${dnsTLSDomain}.key" && -f "$HOME/.acme.sh/*.${dnsTLSDomain}_ecc/*.${dnsTLSDomain}.cer" ]]; then installedDNSAPIStatus=true fi } # 读取默认自定义端口 readCustomPort() { if [[ -n "${configPath}" && -z "${realityStatus}" && "${coreInstallType}" == "1" ]]; then local port= port=$(jq -r .inbounds[0].port "${configPath}${frontingType}.json") if [[ "${port}" != "443" ]]; then customPort=${port} fi fi } # 读取nginx订阅端口 readNginxSubscribe() { subscribeType="https" if [[ -f "${nginxConfigPath}subscribe.conf" ]]; then if grep -q "sing-box" "${nginxConfigPath}subscribe.conf"; then subscribePort=$(grep "listen" "${nginxConfigPath}subscribe.conf" | awk '{print $2}') subscribeDomain=$(grep "server_name" "${nginxConfigPath}subscribe.conf" | awk '{print $2}') subscribeDomain=${subscribeDomain//;/} if [[ -n "${currentHost}" && "${subscribeDomain}" != "${currentHost}" ]]; then subscribePort= subscribeType= else if ! grep "listen" "${nginxConfigPath}subscribe.conf" | grep -q "ssl"; then subscribeType="http" fi fi fi fi } # 检测安装方式 readInstallType() { coreInstallType= configPath= singBoxConfigPath= # 1.检测安装目录 if [[ -d "/etc/v2ray-agent" ]]; then if [[ -f "/etc/v2ray-agent/xray/xray" ]]; then # 检测xray-core if [[ -d "/etc/v2ray-agent/xray/conf" ]] && [[ -f "/etc/v2ray-agent/xray/conf/02_VLESS_TCP_inbounds.json" || -f "/etc/v2ray-agent/xray/conf/02_trojan_TCP_inbounds.json" || -f "/etc/v2ray-agent/xray/conf/07_VLESS_vision_reality_inbounds.json" || -f "/etc/v2ray-agent/xray/conf/12_VLESS_XHTTP_inbounds.json" ]]; then # xray-core configPath=/etc/v2ray-agent/xray/conf/ ctlPath=/etc/v2ray-agent/xray/xray coreInstallType=1 if [[ -f "${configPath}07_VLESS_vision_reality_inbounds.json" ]]; then realityStatus=7 fi if [[ -f "${configPath}12_VLESS_XHTTP_inbounds.json" ]]; then realityStatus=12 fi if [[ -f "/etc/v2ray-agent/sing-box/sing-box" ]] && [[ -f "/etc/v2ray-agent/sing-box/conf/config/06_hysteria2_inbounds.json" || -f "/etc/v2ray-agent/sing-box/conf/config/09_tuic_inbounds.json" || -f "/etc/v2ray-agent/sing-box/conf/config/20_socks5_inbounds.json" ]]; then singBoxConfigPath=/etc/v2ray-agent/sing-box/conf/config/ fi fi elif [[ -f "/etc/v2ray-agent/sing-box/sing-box" && -f "/etc/v2ray-agent/sing-box/conf/config.json" ]]; then # 检测sing-box ctlPath=/etc/v2ray-agent/sing-box/sing-box coreInstallType=2 configPath=/etc/v2ray-agent/sing-box/conf/config/ singBoxConfigPath=/etc/v2ray-agent/sing-box/conf/config/ fi fi } # 读取协议类型 readInstallProtocolType() { currentInstallProtocolType= frontingType= xrayVLESSRealityPort= xrayVLESSRealityServerName= xrayVLESSRealityXHTTPort= xrayVLESSRealityXHTTPServerName= # currentRealityXHTTPPrivateKey= currentRealityXHTTPPublicKey= currentRealityPrivateKey= currentRealityPublicKey= currentRealityMldsa65Seed= currentRealityMldsa65Verify= singBoxVLESSVisionPort= singBoxHysteria2Port= singBoxTrojanPort= frontingTypeReality= singBoxVLESSRealityVisionPort= singBoxVLESSRealityVisionServerName= singBoxVLESSRealityGRPCPort= singBoxVLESSRealityGRPCServerName= singBoxAnyTLSPort= singBoxTuicPort= singBoxNaivePort= singBoxVMessWSPort= singBoxSocks5Port= while read -r row; do if echo "${row}" | grep -q VLESS_TCP_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}0," frontingType=02_VLESS_TCP_inbounds if [[ "${coreInstallType}" == "2" ]]; then singBoxVLESSVisionPort=$(jq .inbounds[0].listen_port "${row}.json") fi fi if echo "${row}" | grep -q VLESS_WS_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}1," if [[ "${coreInstallType}" == "2" ]]; then frontingType=03_VLESS_WS_inbounds singBoxVLESSWSPort=$(jq .inbounds[0].listen_port "${row}.json") fi fi if echo "${row}" | grep -q VLESS_XHTTP_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}12," xrayVLESSRealityXHTTPort=$(jq -r .inbounds[0].port "${row}.json") xrayVLESSRealityXHTTPServerName=$(jq -r .inbounds[0].streamSettings.realitySettings.serverNames[0] "${row}.json") currentRealityXHTTPPublicKey= if [[ -f "${configPath}reality_key" ]]; then currentRealityXHTTPPublicKey=$(grep '^publicKey:' <"${configPath}reality_key" | awk -F "[:]" '{print $2}') fi if [[ -z "${currentRealityXHTTPPublicKey}" ]]; then currentRealityXHTTPPublicKey=$(deriveRealityPublicKeyFromPrivateKey "$(jq -r '.inbounds[0].streamSettings.realitySettings.privateKey // ""' "${row}.json")") fi # currentRealityXHTTPPrivateKey=$(jq -r .inbounds[0].streamSettings.realitySettings.privateKey "${row}.json") # if [[ "${coreInstallType}" == "2" ]]; then # frontingType=03_VLESS_WS_inbounds # singBoxVLESSWSPort=$(jq .inbounds[0].listen_port "${row}.json") # fi fi if echo "${row}" | grep -q trojan_gRPC_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}2," fi if echo "${row}" | grep -q VMess_WS_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}3," if [[ "${coreInstallType}" == "2" ]]; then frontingType=05_VMess_WS_inbounds singBoxVMessWSPort=$(jq .inbounds[0].listen_port "${row}.json") fi fi if echo "${row}" | grep -q trojan_TCP_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}4," if [[ "${coreInstallType}" == "2" ]]; then frontingType=04_trojan_TCP_inbounds singBoxTrojanPort=$(jq .inbounds[0].listen_port "${row}.json") fi fi if echo "${row}" | grep -q VLESS_gRPC_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}5," fi if echo "${row}" | grep -q hysteria2_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}6," if [[ "${coreInstallType}" == "2" ]]; then frontingType=06_hysteria2_inbounds singBoxHysteria2Port=$(jq .inbounds[0].listen_port "${row}.json") fi fi if echo "${row}" | grep -q VLESS_vision_reality_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}7," if [[ "${coreInstallType}" == "1" ]]; then xrayVLESSRealityServerName=$(jq -r .inbounds[1].streamSettings.realitySettings.serverNames[0] "${row}.json") realityServerName=${xrayVLESSRealityServerName} xrayVLESSRealityPort=$(jq -r .inbounds[0].port "${row}.json") realityDomainPort=$(jq -r '.inbounds[1].streamSettings.realitySettings.dest // .inbounds[1].streamSettings.realitySettings.target // ""' "${row}.json" | awk -F '[:]' '{print $2}') currentRealityPrivateKey=$(jq -r '.inbounds[1].streamSettings.realitySettings.privateKey // ""' "${row}.json") currentRealityPublicKey= if [[ -f "${configPath}reality_key" ]]; then currentRealityPublicKey=$(grep '^publicKey:' <"${configPath}reality_key" | awk -F "[:]" '{print $2}') currentRealityMldsa65Verify=$(grep '^mldsa65Verify:' <"${configPath}reality_key" | awk -F "[:]" '{print $2}') fi if [[ -z "${currentRealityPublicKey}" ]]; then currentRealityPublicKey=$(deriveRealityPublicKeyFromPrivateKey "${currentRealityPrivateKey}") fi currentRealityMldsa65Seed=$(jq -r '.inbounds[1].streamSettings.realitySettings.mldsa65Seed // ""' "${row}.json") if [[ -z "${currentRealityMldsa65Verify}" ]]; then currentRealityMldsa65Verify=$(jq -r '.inbounds[1].streamSettings.realitySettings.mldsa65Verify // ""' "${row}.json") fi frontingTypeReality=07_VLESS_vision_reality_inbounds elif [[ "${coreInstallType}" == "2" ]]; then frontingTypeReality=07_VLESS_vision_reality_inbounds singBoxVLESSRealityVisionPort=$(jq -r .inbounds[0].listen_port "${row}.json") singBoxVLESSRealityVisionServerName=$(jq -r .inbounds[0].tls.server_name "${row}.json") realityDomainPort=$(jq -r .inbounds[0].tls.reality.handshake.server_port "${row}.json") realityServerName=${singBoxVLESSRealityVisionServerName} if [[ -f "${configPath}reality_key" ]]; then singBoxVLESSRealityPublicKey=$(grep "publicKey" <"${configPath}reality_key" | awk -F "[:]" '{print $2}') currentRealityPrivateKey=$(jq -r .inbounds[0].tls.reality.private_key "${row}.json") currentRealityPublicKey=$(grep "publicKey" <"${configPath}reality_key" | awk -F "[:]" '{print $2}') fi fi fi if echo "${row}" | grep -q VLESS_vision_gRPC_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}8," if [[ "${coreInstallType}" == "2" ]]; then frontingTypeReality=08_VLESS_vision_gRPC_inbounds singBoxVLESSRealityGRPCPort=$(jq -r .inbounds[0].listen_port "${row}.json") singBoxVLESSRealityGRPCServerName=$(jq -r .inbounds[0].tls.server_name "${row}.json") if [[ -f "${configPath}reality_key" ]]; then singBoxVLESSRealityPublicKey=$(grep "publicKey" <"${configPath}reality_key" | awk -F "[:]" '{print $2}') fi fi fi if echo "${row}" | grep -q tuic_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}9," if [[ "${coreInstallType}" == "2" ]]; then frontingType=09_tuic_inbounds singBoxTuicPort=$(jq .inbounds[0].listen_port "${row}.json") fi fi if echo "${row}" | grep -q naive_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}10," if [[ "${coreInstallType}" == "2" ]]; then frontingType=10_naive_inbounds singBoxNaivePort=$(jq .inbounds[0].listen_port "${row}.json") fi fi if echo "${row}" | grep -q anytls_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}13," if [[ "${coreInstallType}" == "2" ]]; then frontingType=13_anytls_inbounds singBoxAnyTLSPort=$(jq .inbounds[0].listen_port "${row}.json") fi fi if echo "${row}" | grep -q VMess_HTTPUpgrade_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}11," if [[ "${coreInstallType}" == "2" ]]; then frontingType=11_VMess_HTTPUpgrade_inbounds singBoxVMessHTTPUpgradePort=$(grep 'listen' <${nginxConfigPath}sing_box_VMess_HTTPUpgrade.conf | awk '{print $2}') fi fi if echo "${row}" | grep -q socks5_inbounds; then currentInstallProtocolType="${currentInstallProtocolType}20," singBoxSocks5Port=$(jq .inbounds[0].listen_port "${row}.json") fi done < <(find ${configPath} -name "*inbounds.json" | sort | awk -F "[.]" '{print $1}') if [[ "${coreInstallType}" == "1" && -n "${singBoxConfigPath}" ]]; then if [[ -f "${singBoxConfigPath}06_hysteria2_inbounds.json" ]]; then currentInstallProtocolType="${currentInstallProtocolType}6," singBoxHysteria2Port=$(jq .inbounds[0].listen_port "${singBoxConfigPath}06_hysteria2_inbounds.json") fi if [[ -f "${singBoxConfigPath}09_tuic_inbounds.json" ]]; then currentInstallProtocolType="${currentInstallProtocolType}9," singBoxTuicPort=$(jq .inbounds[0].listen_port "${singBoxConfigPath}09_tuic_inbounds.json") fi fi if [[ "${currentInstallProtocolType:0:1}" != "," ]]; then currentInstallProtocolType=",${currentInstallProtocolType}" fi } # 检查是否安装宝塔 checkBTPanel() { if [[ -n $(pgrep -f "BT-Panel") ]]; then # 读取域名 if [[ -d '/www/server/panel/vhost/cert/' && -n $(find /www/server/panel/vhost/cert/*/fullchain.pem) ]]; then if [[ -z "${currentHost}" ]]; then echoContent skyBlue "\n读取宝塔配置\n" find /www/server/panel/vhost/cert/*/fullchain.pem | awk -F "[/]" '{print $7}' | awk '{print NR""":"$0}' read -r -p "请输入编号选择:" selectBTDomain else selectBTDomain=$(find /www/server/panel/vhost/cert/*/fullchain.pem | awk -F "[/]" '{print $7}' | awk '{print NR""":"$0}' | grep "${currentHost}" | cut -d ":" -f 1) fi if [[ -n "${selectBTDomain}" ]]; then btDomain=$(find /www/server/panel/vhost/cert/*/fullchain.pem | awk -F "[/]" '{print $7}' | awk '{print NR""":"$0}' | grep -e "^${selectBTDomain}:" | cut -d ":" -f 2) if [[ -z "${btDomain}" ]]; then echoContent red " ---> 选择错误，请重新选择" checkBTPanel else domain=${btDomain} if [[ ! -f "/etc/v2ray-agent/tls/${btDomain}.crt" && ! -f "/etc/v2ray-agent/tls/${btDomain}.key" ]]; then ln -s "/www/server/panel/vhost/cert/${btDomain}/fullchain.pem" "/etc/v2ray-agent/tls/${btDomain}.crt" ln -s "/www/server/panel/vhost/cert/${btDomain}/privkey.pem" "/etc/v2ray-agent/tls/${btDomain}.key" fi nginxStaticPath="/www/wwwroot/${btDomain}/html/" mkdir -p "/www/wwwroot/${btDomain}/html/" if [[ -f "/www/wwwroot/${btDomain}/.user.ini" ]]; then chattr -i "/www/wwwroot/${btDomain}/.user.ini" fi nginxConfigPath="/www/server/panel/vhost/nginx/" fi else echoContent red " ---> 选择错误，请重新选择" checkBTPanel fi fi fi } check1Panel() { if [[ -n $(pgrep -f "1panel") ]]; then # 读取域名 if [[ -d '/opt/1panel/apps/openresty/openresty/www/sites/' && -n $(find /opt/1panel/apps/openresty/openresty/www/sites/*/ssl/fullchain.pem) ]]; then if [[ -z "${currentHost}" ]]; then echoContent skyBlue "\n读取1Panel配置\n" find /opt/1panel/apps/openresty/openresty/www/sites/*/ssl/fullchain.pem | awk -F "[/]" '{print $9}' | awk '{print NR""":"$0}' read -r -p "请输入编号选择:" selectBTDomain else selectBTDomain=$(find /opt/1panel/apps/openresty/openresty/www/sites/*/ssl/fullchain.pem | awk -F "[/]" '{print $9}' | awk '{print NR""":"$0}' | grep "${currentHost}" | cut -d ":" -f 1) fi if [[ -n "${selectBTDomain}" ]]; then btDomain=$(find /opt/1panel/apps/openresty/openresty/www/sites/*/ssl/fullchain.pem | awk -F "[/]" '{print $9}' | awk '{print NR""":"$0}' | grep "${selectBTDomain}:" | cut -d ":" -f 2) if [[ -z "${btDomain}" ]]; then echoContent red " ---> 选择错误，请重新选择" check1Panel else domain=${btDomain} if [[ ! -f "/etc/v2ray-agent/tls/${btDomain}.crt" && ! -f "/etc/v2ray-agent/tls/${btDomain}.key" ]]; then ln -s "/opt/1panel/apps/openresty/openresty/www/sites/${btDomain}/ssl/fullchain.pem" "/etc/v2ray-agent/tls/${btDomain}.crt" ln -s "/opt/1panel/apps/openresty/openresty/www/sites/${btDomain}/ssl/privkey.pem" "/etc/v2ray-agent/tls/${btDomain}.key" fi nginxStaticPath="/opt/1panel/apps/openresty/openresty/www/sites/${btDomain}/index/" fi else echoContent red " ---> 选择错误，请重新选择" check1Panel fi fi fi } # 检查防火墙 allowPort() { local type=$2 if [[ -z "${type}" ]]; then type=tcp fi # 如果防火墙启动状态则添加相应的开放端口 if command -v dpkg >/dev/null 2>&1 && dpkg -l | grep -q "^[[:space:]]*ii[[:space:]]\+ufw" && ufw status | grep -q "Status: active"; then if ! ufw status | grep -q "$1/${type}"; then sudo ufw allow "$1/${type}" checkUFWAllowPort "$1" fi elif systemctl status firewalld 2>/dev/null | grep -q "active (running)"; then local updateFirewalldStatus= if ! firewall-cmd --list-ports --permanent | grep -qw "$1/${type}"; then updateFirewalldStatus=true local firewallPort=$1 if echo "${firewallPort}" | grep -q ":"; then firewallPort=$(echo "${firewallPort}" | awk -F ":" '{print $1"-"$2}') fi firewall-cmd --zone=public --add-port="${firewallPort}/${type}" --permanent checkFirewalldAllowPort "${firewallPort}" fi if echo "${updateFirewalldStatus}" | grep -q "true"; then firewall-cmd --reload fi elif rc-update show 2>/dev/null | grep -q ufw && ufw status | grep -q "Status: active"; then if ! ufw status | grep -q "$1/${type}"; then sudo ufw allow "$1/${type}" checkUFWAllowPort "$1" fi elif dpkg -l | grep -q "^[[:space:]]*ii[[:space:]]\+netfilter-persistent" && systemctl status netfilter-persistent 2>/dev/null | grep -q "active (exited)"; then local updateFirewalldStatus= if ! iptables -L | grep -q "$1/${type}(dodo258)"; then updateFirewalldStatus=true iptables -I INPUT -p "${type}" --dport "$1" -m comment --comment "allow $1/${type}(dodo258)" -j ACCEPT fi if echo "${updateFirewalldStatus}" | grep -q "true"; then netfilter-persistent save fi fi } # 获取公网IP getPublicIP() { local type=4 if [[ -n "$1" ]]; then type=$1 fi if [[ -n "${currentHost}" && -z "$1" ]] && [[ "${singBoxVLESSRealityVisionServerName}" == "${currentHost}" || "${singBoxVLESSRealityGRPCServerName}" == "${currentHost}" || "${xrayVLESSRealityServerName}" == "${currentHost}" ]]; then echo "${currentHost}" else local currentIP= currentIP=$(curl -s "-${type}" http://www.cloudflare.com/cdn-cgi/trace | grep "ip" | awk -F "[=]" '{print $2}') if [[ -z "${currentIP}" && -z "$1" ]]; then currentIP=$(curl -s "-6" http://www.cloudflare.com/cdn-cgi/trace | grep "ip" | awk -F "[=]" '{print $2}') fi echo "${currentIP}" fi } # 输出ufw端口开放状态 checkUFWAllowPort() { if ufw status | grep -q "$1"; then echoContent green " ---> $1端口开放成功" else echoContent red " ---> $1端口开放失败" exit 0 fi } # 输出firewall-cmd端口开放状态 checkFirewalldAllowPort() { if firewall-cmd --list-ports --permanent | grep -q "$1"; then echoContent green " ---> $1端口开放成功" else echoContent red " ---> $1端口开放失败" exit 0 fi } # 读取Tuic配置 readSingBoxConfig() { tuicPort= hysteriaPort= if [[ -n "${singBoxConfigPath}" ]]; then if [[ -f "${singBoxConfigPath}09_tuic_inbounds.json" ]]; then tuicPort=$(jq -r '.inbounds[0].listen_port' "${singBoxConfigPath}09_tuic_inbounds.json") tuicAlgorithm=$(jq -r '.inbounds[0].congestion_control' "${singBoxConfigPath}09_tuic_inbounds.json") fi if [[ -f "${singBoxConfigPath}06_hysteria2_inbounds.json" ]]; then hysteriaPort=$(jq -r '.inbounds[0].listen_port' "${singBoxConfigPath}06_hysteria2_inbounds.json") hysteria2ClientUploadSpeed=$(jq -r '.inbounds[0].down_mbps' "${singBoxConfigPath}06_hysteria2_inbounds.json") hysteria2ClientDownloadSpeed=$(jq -r '.inbounds[0].up_mbps' "${singBoxConfigPath}06_hysteria2_inbounds.json") fi fi } listSingBoxAddedPortFiles() { if [[ -z "${configPath}" ]]; then return 0 fi find "${configPath}" -maxdepth 1 -type f -name "02_direct_inbounds_*.json" ! -name "*hysteria*" | sort } removeSingBoxDefaultPortFilesByTargetPort() { local targetPort=$1 if [[ -z "${targetPort}" || -z "${configPath}" ]]; then return 0 fi while read -r file; do if [[ -z "${file}" ]]; then continue fi local overridePort= overridePort=$(jq -r '.inbounds[0].override_port // ""' "${file}") if [[ "${overridePort}" == "${targetPort}" ]]; then rm -f "${file}" fi done < <(find "${configPath}" -maxdepth 1 -type f -name "02_direct_inbounds_*_default.json" ! -name "*hysteria*" | sort) } resolveSingBoxForwardTargetLabel() { local targetPort=$1 if [[ -z "${targetPort}" ]]; then echo "未知目标" return 0 fi if [[ -n "${singBoxVLESSVisionPort}" && "${targetPort}" == "${singBoxVLESSVisionPort}" ]]; then echo "VLESS+Vision+TCP" elif [[ -n "${singBoxVLESSWSPort}" && "${targetPort}" == "${singBoxVLESSWSPort}" ]]; then echo "VLESS+TLS+WS" elif [[ -n "${singBoxVMessWSPort}" && "${targetPort}" == "${singBoxVMessWSPort}" ]]; then echo "VMess+TLS+WS" elif [[ -n "${singBoxTrojanPort}" && "${targetPort}" == "${singBoxTrojanPort}" ]]; then echo "Trojan+TLS" elif [[ -n "${singBoxVLESSRealityVisionPort}" && "${targetPort}" == "${singBoxVLESSRealityVisionPort}" ]]; then echo "VLESS+Reality+Vision" elif [[ -n "${singBoxVLESSRealityGRPCPort}" && "${targetPort}" == "${singBoxVLESSRealityGRPCPort}" ]]; then echo "VLESS+Reality+gRPC" elif [[ -n "${singBoxNaivePort}" && "${targetPort}" == "${singBoxNaivePort}" ]]; then echo "Naive" elif [[ -n "${singBoxVMessHTTPUpgradePort}" && "${targetPort}" == "${singBoxVMessHTTPUpgradePort}" ]]; then echo "VMess+HTTPUpgrade" elif [[ -n "${singBoxAnyTLSPort}" && "${targetPort}" == "${singBoxAnyTLSPort}" ]]; then echo "AnyTLS" else echo "目标端口" fi } getSingBoxForwardDefaultPort() { local targetPort=$1 if [[ -z "${targetPort}" || -z "${configPath}" ]]; then return 0 fi while read -r file; do if [[ -z "${file}" ]]; then continue fi local overridePort= overridePort=$(jq -r '.inbounds[0].override_port // ""' "${file}") if [[ "${overridePort}" == "${targetPort}" ]]; then jq -r '.inbounds[0].listen_port // ""' "${file}" return 0 fi done < <(find "${configPath}" -maxdepth 1 -type f -name "02_direct_inbounds_*_default.json" ! -name "*hysteria*" | sort) } getSingBoxDisplayPort() { local targetPort=$1 local defaultPort= defaultPort=$(getSingBoxForwardDefaultPort "${targetPort}") if [[ -n "${defaultPort}" ]]; then echo "${defaultPort}" else echo "${targetPort}" fi } # 读取上次安装的配置 readLastInstallationConfig() { if [[ -n "${configPath}" ]]; then read -r -p "读取到上次安装的配置，是否使用 ？[y/n]:" lastInstallationConfigStatus if [[ "${lastInstallationConfigStatus}" == "y" ]]; then lastInstallationConfig=true fi fi } clearRealityHistoryCache() { lastInstallationConfig= currentUUID= currentClients= xrayVLESSRealityPort= xrayVLESSRealityXHTTPort= singBoxVLESSRealityVisionPort= singBoxVLESSRealityGRPCPort= realityServerName= realityDomainPort= currentRealityPublicKey= currentRealityPrivateKey= currentRealityXHTTPPublicKey= currentRealityMldsa65Seed= currentRealityMldsa65Verify= } deriveRealityPublicKeyFromPrivateKey() { local privateKey=$1 local realityKeyInfo= if [[ -z "${privateKey}" ]]; then return 0 fi realityKeyInfo=$(/etc/v2ray-agent/xray/xray x25519 -i "${privateKey}" 2>/dev/null) echo "${realityKeyInfo}" | grep "Password" | awk '{print $3}' | tail -n 1 } persistXrayRealityKeyInfo() { if [[ -z "${configPath}" ]]; then return 0 fi cat <"${configPath}reality_key" publicKey:${realityPublicKey} mldsa65Verify:${realityMldsa65Verify} EOF } # 卸载 sing-box unInstallSingBox() { local type=$1 if [[ -n "${singBoxConfigPath}" ]]; then if grep -q 'tuic' 删除sing-box tuic配置成功" fi if grep -q 'hysteria2' 删除sing-box hysteria2配置成功" fi rm "${singBoxConfigPath}config.json" fi readInstallType if [[ -n "${singBoxConfigPath}" ]]; then echoContent yellow " ---> 检测到有其他配置，保留sing-box核心" handleSingBox restart else handleSingBox stop rm -f "${singBoxSystemdServicePath}" "${singBoxOpenrcServicePath}" rm -rf /etc/v2ray-agent/sing-box/* echoContent green " ---> sing-box 卸载完成" fi } # 检查文件目录以及path路径 readConfigHostPathUUID() { currentPath= currentDefaultPort= currentUUID= currentClients= currentHost= currentPort= currentCDNAddress= singBoxVMessWSPath= singBoxVLESSWSPath= singBoxVMessHTTPUpgradePath= if [[ "${coreInstallType}" == "1" ]]; then # 安装 if [[ -n "${frontingType}" ]]; then currentHost=$(jq -r .inbounds[0].streamSettings.tlsSettings.certificates[0].certificateFile ${configPath}${frontingType}.json | awk -F '[t][l][s][/]' '{print $2}' | awk -F '[.][c][r][t]' '{print $1}') currentPort=$(jq .inbounds[0].port ${configPath}${frontingType}.json) local defaultPortFile= defaultPortFile=$(find ${configPath}* | grep "default") if [[ -n "${defaultPortFile}" ]]; then currentDefaultPort=$(echo "${defaultPortFile}" | awk -F [_] '{print $4}') else currentDefaultPort=$(jq -r .inbounds[0].port ${configPath}${frontingType}.json) fi currentUUID=$(jq -r .inbounds[0].settings.clients[0].id ${configPath}${frontingType}.json) currentClients=$(jq -r .inbounds[0].settings.clients ${configPath}${frontingType}.json) fi # reality if echo ${currentInstallProtocolType} | grep -q ",7,"; then currentClients=$(jq -r .inbounds[1].settings.clients ${configPath}07_VLESS_vision_reality_inbounds.json) currentUUID=$(jq -r .inbounds[1].settings.clients[0].id ${configPath}07_VLESS_vision_reality_inbounds.json) xrayVLESSRealityPort=$(jq -r .inbounds[0].port ${configPath}07_VLESS_vision_reality_inbounds.json) if [[ "${currentPort}" == "${xrayVLESSRealityPort}" ]]; then xrayVLESSRealityPort="${currentDefaultPort}" fi fi # reality xhttp if echo ${currentInstallProtocolType} | grep -q ",12,"; then currentClients=$(jq -r .inbounds[0].settings.clients ${configPath}12_VLESS_XHTTP_inbounds.json) currentUUID=$(jq -r .inbounds[0].settings.clients[0].id ${configPath}12_VLESS_XHTTP_inbounds.json) xrayVLESSRealityXHTTPort=$(jq -r .inbounds[0].port ${configPath}12_VLESS_XHTTP_inbounds.json) if [[ "${currentPort}" == "${xrayVLESSRealityXHTTPort}" ]]; then xrayVLESSRealityXHTTPort="${currentDefaultPort}" fi currentPath=$(jq -r .inbounds[0].streamSettings.xhttpSettings.path ${configPath}12_VLESS_XHTTP_inbounds.json | awk -F "[/]" '{print $2}' | awk -F "[x][H][T][T][P]" '{print $1}') fi elif [[ "${coreInstallType}" == "2" ]]; then if [[ -n "${frontingType}" ]]; then currentHost=$(jq -r .inbounds[0].tls.server_name ${configPath}${frontingType}.json) if echo ${currentInstallProtocolType} | grep -q ",11," && [[ "${currentHost}" == "null" ]]; then currentHost=$(grep 'server_name' <${nginxConfigPath}sing_box_VMess_HTTPUpgrade.conf | awk '{print $2}') currentHost=${currentHost//;/} fi currentUUID=$(jq -r .inbounds[0].users[0].uuid ${configPath}${frontingType}.json) currentClients=$(jq -r .inbounds[0].users ${configPath}${frontingType}.json) else currentUUID=$(jq -r .inbounds[0].users[0].uuid ${configPath}${frontingTypeReality}.json) currentClients=$(jq -r .inbounds[0].users ${configPath}${frontingTypeReality}.json) fi fi # 读取path if [[ -n "${configPath}" && -n "${frontingType}" ]]; then if [[ "${coreInstallType}" == "1" ]]; then local fallback fallback=$(jq -r -c '.inbounds[0].settings.fallbacks[]|select(.path)' ${configPath}${frontingType}.json | head -1) local path path=$(echo "${fallback}" | jq -r .path | awk -F "[/]" '{print $2}') if [[ $(echo "${fallback}" | jq -r .dest) == 31297 ]]; then currentPath=$(echo "${path}" | awk -F "[w][s]" '{print $1}') elif [[ $(echo "${fallback}" | jq -r .dest) == 31299 ]]; then currentPath=$(echo "${path}" | awk -F "[v][w][s]" '{print $1}') fi # 尝试读取alpn h2 Path if [[ -z "${currentPath}" ]]; then dest=$(jq -r -c '.inbounds[0].settings.fallbacks[]|select(.alpn)|.dest' ${configPath}${frontingType}.json | head -1) if [[ "${dest}" == "31302" || "${dest}" == "31304" ]]; then # checkBTPanel # check1Panel if grep -q "trojangrpc {" <${nginxConfigPath}alone.conf; then currentPath=$(grep "trojangrpc {" <${nginxConfigPath}alone.conf | awk -F "[/]" '{print $2}' | awk -F "[t][r][o][j][a][n]" '{print $1}') elif grep -q "grpc {" <${nginxConfigPath}alone.conf; then currentPath=$(grep "grpc {" <${nginxConfigPath}alone.conf | head -1 | awk -F "[/]" '{print $2}' | awk -F "[g][r][p][c]" '{print $1}') fi fi fi if [[ -z "${currentPath}" && -f "${configPath}12_VLESS_XHTTP_inbounds.json" ]]; then currentPath=$(jq -r .inbounds[0].streamSettings.xhttpSettings.path "${configPath}12_VLESS_XHTTP_inbounds.json" | awk -F "[x][H][T][T][P]" '{print $1}' | awk -F "[/]" '{print $2}') fi elif [[ "${coreInstallType}" == "2" && -f "${singBoxConfigPath}05_VMess_WS_inbounds.json" ]]; then singBoxVMessWSPath=$(jq -r .inbounds[0].transport.path "${singBoxConfigPath}05_VMess_WS_inbounds.json") currentPath=$(jq -r .inbounds[0].transport.path "${singBoxConfigPath}05_VMess_WS_inbounds.json" | awk -F "[/]" '{print $2}') fi if [[ "${coreInstallType}" == "2" && -f "${singBoxConfigPath}03_VLESS_WS_inbounds.json" ]]; then singBoxVLESSWSPath=$(jq -r .inbounds[0].transport.path "${singBoxConfigPath}03_VLESS_WS_inbounds.json") currentPath=$(jq -r .inbounds[0].transport.path "${singBoxConfigPath}03_VLESS_WS_inbounds.json" | awk -F "[/]" '{print $2}') currentPath=${currentPath::-2} fi if [[ "${coreInstallType}" == "2" && -f "${singBoxConfigPath}11_VMess_HTTPUpgrade_inbounds.json" ]]; then singBoxVMessHTTPUpgradePath=$(jq -r .inbounds[0].transport.path "${singBoxConfigPath}11_VMess_HTTPUpgrade_inbounds.json") currentPath=$(jq -r .inbounds[0].transport.path "${singBoxConfigPath}11_VMess_HTTPUpgrade_inbounds.json" | awk -F "[/]" '{print $2}') fi fi if [[ -f "/etc/v2ray-agent/cdn" ]] && [[ -n "$(head -1 /etc/v2ray-agent/cdn)" ]]; then currentCDNAddress=$(head -1 /etc/v2ray-agent/cdn) else currentCDNAddress="${currentHost}" fi } # 状态展示 showInstallStatus() { if [[ -n "${coreInstallType}" ]]; then if [[ "${coreInstallType}" == 1 ]]; then if isManagedXrayRunning; then echoMenuHintGreen "\n核心: Xray-core" "运行中" else echoMenuHint "\n核心: Xray-core" "未运行" fi elif [[ "${coreInstallType}" == 2 ]]; then if isManagedSingBoxRunning; then echoMenuHintGreen "\n核心: sing-box" "运行中" else echoMenuHint "\n核心: sing-box" "未运行" fi fi # 读取协议类型 readInstallProtocolType if [[ -n ${currentInstallProtocolType} ]]; then echoContent yellow "已安装协议: \c" fi if echo ${currentInstallProtocolType} | grep -q ",0,"; then echoMenuHintInline "VLESS+TCP" "TLS_Vision" fi if echo ${currentInstallProtocolType} | grep -q ",1,"; then echoMenuHintInline "VLESS+WS" "TLS" fi if echo ${currentInstallProtocolType} | grep -q ",2,"; then echoMenuHintInline "Trojan+gRPC" "TLS" fi if echo ${currentInstallProtocolType} | grep -q ",3,"; then echoMenuHintInline "VMess+WS" "TLS" fi if echo ${currentInstallProtocolType} | grep -q ",4,"; then echoMenuHintInline "Trojan+TCP" "TLS" fi if echo ${currentInstallProtocolType} | grep -q ",5,"; then echoMenuHintInline "VLESS+gRPC" "TLS" fi if echo ${currentInstallProtocolType} | grep -q ",6,"; then echoContent yellow "Hysteria2 \c" fi if echo ${currentInstallProtocolType} | grep -q ",7,"; then echoContent yellow "VLESS+Reality+Vision \c" fi if echo ${currentInstallProtocolType} | grep -q ",8,"; then echoContent yellow "VLESS+Reality+gRPC \c" fi if echo ${currentInstallProtocolType} | grep -q ",9,"; then echoContent yellow "Tuic \c" fi if echo ${currentInstallProtocolType} | grep -q ",10,"; then echoContent yellow "Naive \c" fi if echo ${currentInstallProtocolType} | grep -q ",11,"; then echoContent yellow "VMess+TLS+HTTPUpgrade \c" fi if echo ${currentInstallProtocolType} | grep -q ",12,"; then echoContent yellow "VLESS+Reality+XHTTP \c" fi if echo ${currentInstallProtocolType} | grep -q ",13,"; then echoContent yellow "AnyTLS \c" fi local managedMultiRealityCount= managedMultiRealityCount=$(countManagedMultiRealityNodes) if [[ "${managedMultiRealityCount}" != "0" ]]; then echoMenuHint "\n多实例Reality节点" "${managedMultiRealityCount}个" fi local managedMultiAnyTLSCount= managedMultiAnyTLSCount=$(countManagedMultiAnyTLSNodes) if [[ "${managedMultiAnyTLSCount}" != "0" ]]; then echoMenuHint "\n多实例AnyTLS节点" "${managedMultiAnyTLSCount}个" fi fi } # 清理旧残留 cleanUp() { if [[ "$1" == "xrayDel" ]]; then handleXray stop rm -rf /etc/v2ray-agent/xray/* elif [[ "$1" == "singBoxDel" ]]; then if [[ -f "${singBoxSystemdServicePath}" ]]; then systemctl stop "${singBoxServiceName}.service" >/dev/null 2>&1 elif [[ -f "${singBoxOpenrcServicePath}" ]]; then rc-service "${singBoxServiceName}" stop >/dev/null 2>&1 fi pkill -f "${singBoxBinaryPath}" >/dev/null 2>&1 sleep 1 rm -rf /etc/v2ray-agent/sing-box/conf/config.json >/dev/null 2>&1 rm -rf /etc/v2ray-agent/sing-box/conf/config/* >/dev/null 2>&1 fi } initVar "$1" checkSystem checkCPUVendor hasSystemd() { command -v systemctl >/dev/null 2>&1 && [[ "${release}" != "alpine" ]] } isManagedXrayRunning() { pgrep -f "${xrayBinaryPath}" >/dev/null 2>&1 } isManagedSingBoxRunning() { pgrep -f "${singBoxBinaryPath}" >/dev/null 2>&1 } cleanupLegacyManagedSystemdUnit() { local legacyServiceName=$1 local expectedBinaryPath=$2 local legacyUnitPath="/etc/systemd/system/${legacyServiceName}.service" local legacyDropInDir="/etc/systemd/system/${legacyServiceName}.service.d" if [[ ! -f "${legacyUnitPath}" ]]; then return 0 fi if [[ -d "${legacyDropInDir}" ]] && find "${legacyDropInDir}" -maxdepth 1 -type f 2>/dev/null | grep -q .; then return 0 fi if grep -qF "${expectedBinaryPath}" "${legacyUnitPath}"; then systemctl stop "${legacyServiceName}.service" >/dev/null 2>&1 systemctl disable "${legacyServiceName}.service" >/dev/null 2>&1 rm -f "${legacyUnitPath}" systemctl daemon-reload >/dev/null 2>&1 fi } cleanupLegacyManagedOpenrcUnit() { local legacyServiceName=$1 local expectedBinaryPath=$2 local legacyInitPath="/etc/init.d/${legacyServiceName}" if [[ -f "${legacyInitPath}" ]] && grep -qF "${expectedBinaryPath}" "${legacyInitPath}"; then rc-service "${legacyServiceName}" stop >/dev/null 2>&1 rc-update del "${legacyServiceName}" default >/dev/null 2>&1 rm -f "${legacyInitPath}" fi } readInstallType readInstallProtocolType readConfigHostPathUUID readCustomPort readSingBoxConfig # ------------------------------------------------------------- # 初始化安装目录 mkdirTools() { mkdir -p /etc/v2ray-agent/tls mkdir -p /etc/v2ray-agent/subscribe_local/default mkdir -p /etc/v2ray-agent/subscribe_local/clashMeta mkdir -p /etc/v2ray-agent/subscribe_remote/default mkdir -p /etc/v2ray-agent/subscribe_remote/clashMeta mkdir -p /etc/v2ray-agent/subscribe/default mkdir -p /etc/v2ray-agent/subscribe/clashMetaProfiles mkdir -p /etc/v2ray-agent/subscribe/clashMeta mkdir -p /etc/v2ray-agent/subscribe/sing-box mkdir -p /etc/v2ray-agent/subscribe/sing-box_profiles mkdir -p /etc/v2ray-agent/subscribe_local/sing-box mkdir -p /etc/v2ray-agent/xray/conf mkdir -p /etc/v2ray-agent/xray/reality_scan mkdir -p /etc/v2ray-agent/xray/tmp mkdir -p /etc/systemd/system/ mkdir -p /tmp/v2ray-agent-tls/ mkdir -p /etc/v2ray-agent/warp mkdir -p /etc/v2ray-agent/sing-box/conf/config mkdir -p /usr/share/nginx/html/ } # 检测root checkRoot() { if [ "$(id -u)" -ne 0 ]; then # sudoCMD="sudo" echo "检测到非 Root 用户，将使用 sudo 执行命令..." fi } # 安装工具包 installTools() { echoContent skyBlue "\n进度 $1/${totalProgress} : 安装工具" # 修复ubuntu个别系统问题 if [[ "${release}" == "ubuntu" ]]; then dpkg --configure -a fi if [[ -n $(pgrep -f "apt") ]]; then pgrep -f apt | xargs kill -9 fi echoContent green " ---> 检查、安装更新【新机器会很慢，如长时间无反应，请手动停止后重新执行】" if [[ "${release}" != "centos" ]]; then ${upgrade} >/etc/v2ray-agent/install.log 2>&1 fi if grep <"/etc/v2ray-agent/install.log" -q "changed"; then ${updateReleaseInfoChange} >/dev/null 2>&1 fi if [[ "${release}" == "centos" ]]; then rm -rf /var/run/yum.pid ${installType} epel-release >/dev/null 2>&1 fi if ! sudo --version >/dev/null 2>&1; then echoContent green " ---> 安装sudo" ${installType} sudo >/dev/null 2>&1 fi if ! wget --help >/dev/null 2>&1; then echoContent green " ---> 安装wget" ${installType} wget >/dev/null 2>&1 fi # if ! command -v netfilter-persistent >/dev/null 2>&1; then # if [[ "${release}" != "centos" ]]; then # echoContent green " ---> 安装iptables" # echo "iptables-persistent iptables-persistent/autosave_v4 boolean true" | sudo debconf-set-selections # echo "iptables-persistent iptables-persistent/autosave_v6 boolean true" | sudo debconf-set-selections # ${installType} iptables-persistent >/dev/null 2>&1 # fi # fi if ! curl --help >/dev/null 2>&1; then echoContent green " ---> 安装curl" ${installType} curl >/dev/null 2>&1 fi if ! unzip >/dev/null 2>&1; then echoContent green " ---> 安装unzip" ${installType} unzip >/dev/null 2>&1 fi if ! socat -h >/dev/null 2>&1; then echoContent green " ---> 安装socat" ${installType} socat >/dev/null 2>&1 fi if ! tar --help >/dev/null 2>&1; then echoContent green " ---> 安装tar" ${installType} tar >/dev/null 2>&1 fi if ! crontab -l >/dev/null 2>&1; then echoContent green " ---> 安装crontabs" if [[ "${release}" == "ubuntu" || "${release}" == "debian" ]]; then ${installType} cron >/dev/null 2>&1 else ${installType} crontabs >/dev/null 2>&1 fi fi if ! jq --help >/dev/null 2>&1; then echoContent green " ---> 安装jq" ${installType} jq >/dev/null 2>&1 fi if ! command -v ld >/dev/null 2>&1; then echoContent green " ---> 安装binutils" ${installType} binutils >/dev/null 2>&1 fi if ! openssl help >/dev/null 2>&1; then echoContent green " ---> 安装openssl" ${installType} openssl >/dev/null 2>&1 fi if ! ping6 --help >/dev/null 2>&1; then echoContent green " ---> 安装ping6" ${installType} inetutils-ping >/dev/null 2>&1 fi if ! qrencode --help >/dev/null 2>&1; then echoContent green " ---> 安装qrencode" ${installType} qrencode >/dev/null 2>&1 fi if ! command -v lsb_release >/dev/null 2>&1; then if [[ "${release}" == "ubuntu" || "${release}" == "debian" ]]; then ${installType} lsb-release >/dev/null 2>&1 elif [[ "${release}" == "centos" ]]; then ${installType} redhat-lsb-core >/dev/null 2>&1 else ${installType} lsb-release >/dev/null 2>&1 fi fi if ! lsof -h >/dev/null 2>&1; then echoContent green " ---> 安装lsof" ${installType} lsof >/dev/null 2>&1 fi if ! dig -h >/dev/null 2>&1; then echoContent green " ---> 安装dig" if echo "${installType}" | grep -qw "apt"; then ${installType} dnsutils >/dev/null 2>&1 elif echo "${installType}" | grep -qw "yum"; then ${installType} bind-utils >/dev/null 2>&1 elif echo "${installType}" | grep -qw "apk"; then ${installType} bind-tools >/dev/null 2>&1 fi fi # 检测nginx版本，并提供是否卸载的选项 if echo "${selectCustomInstallType}" | grep -qwE ",7,|,8,|,7,8,|,12,|,7,12,"; then echoContent green " ---> 检测到无需依赖Nginx的服务，跳过安装" else if ! nginx >/dev/null 2>&1; then echoContent green " ---> 安装nginx" installNginxTools else nginxVersion=$(nginx -v 2>&1) nginxVersion=$(echo "${nginxVersion}" | awk -F "[n][g][i][n][x][/]" '{print $2}' | awk -F "[.]" '{print $2}') if [[ ${nginxVersion} -lt 14 ]]; then read -r -p "读取到当前的Nginx版本不支持gRPC，会导致安装失败，是否卸载Nginx后重新安装 ？[y/n]:" unInstallNginxStatus if [[ "${unInstallNginxStatus}" == "y" ]]; then ${removeType} nginx >/dev/null 2>&1 echoContent yellow " ---> nginx卸载完成" echoContent green " ---> 安装nginx" installNginxTools >/dev/null 2>&1 else exit 0 fi fi fi fi # if ! command -v semanage >/dev/null 2>&1 && [[ "${release}" == "centos" ]]; then # if command -v getenforce >/dev/null 2>&1 && [ "$(getenforce)" == "Enforcing" ]; then # if [[ "${centosVersion}" == "7" ]]; then # policyCoreUtils="policycoreutils-python" # elif [[ "${centosVersion}" == "8" || "${centosVersion}" == "9" || "${centosVersion}" == "10" ]]; then # policyCoreUtils="policycoreutils-python-utils" # fi # echoContent green " ---> 安装semanage" # # if [[ -n "${policyCoreUtils}" ]]; then # ${installType} bash-completion >/dev/null 2>&1 # ${installType} ${policyCoreUtils} >/dev/null 2>&1 # fi # if [[ -n $(which semanage) ]]; then # semanage port -a -t http_port_t -p tcp 31300 # fi # fi # fi if [[ "${selectCustomInstallType}" == "7" ]]; then echoContent green " ---> 检测到无需依赖证书的服务，跳过安装" else if [[ ! -d "$HOME/.acme.sh" ]] || [[ -d "$HOME/.acme.sh" && -z $(find "$HOME/.acme.sh/acme.sh") ]]; then echoContent green " ---> 安装acme.sh" curl -s https://get.acme.sh | sh >/etc/v2ray-agent/tls/acme.log 2>&1 if [[ ! -d "$HOME/.acme.sh" ]] || [[ -z $(find "$HOME/.acme.sh/acme.sh") ]]; then echoContent red " acme安装失败--->" tail -n 100 /etc/v2ray-agent/tls/acme.log echoContent yellow "错误排查:" echoContent red " 1.获取Github文件失败，请等待Github恢复后尝试，恢复进度可查看 [https://www.githubstatus.com/]" echoContent red " 2.acme.sh脚本出现bug，可查看[https://github.com/acmesh-official/acme.sh] issues" echoContent red " 3.如纯IPv6机器，请设置NAT64,可执行下方命令，如果添加下方命令还是不可用，请尝试更换其他NAT64" echoContent skyBlue " sed -i \"1i\\\nameserver 2a00:1098:2b::1\\\nnameserver 2a00:1098:2c::1\\\nnameserver 2a01:4f8:c2c:123f::1\\\nnameserver 2a01:4f9:c010:3f02::1\" /etc/resolv.conf" exit 0 fi fi fi } # 开机启动 bootStartup() { local serviceName=$1 if [[ "${release}" == "alpine" ]]; then rc-update add "${serviceName}" default else systemctl daemon-reload systemctl enable "${serviceName}" fi } # 安装Nginx installNginxTools() { if [[ "${release}" == "debian" ]]; then sudo apt install gnupg2 ca-certificates lsb-release -y >/dev/null 2>&1 echo "deb http://nginx.org/packages/mainline/debian $(lsb_release -cs) nginx" | sudo tee /etc/apt/sources.list.d/nginx.list >/dev/null 2>&1 echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n" | sudo tee /etc/apt/preferences.d/99nginx >/dev/null 2>&1 curl -o /tmp/nginx_signing.key https://nginx.org/keys/nginx_signing.key >/dev/null 2>&1 # gpg --dry-run --quiet --import --import-options import-show /tmp/nginx_signing.key sudo mv /tmp/nginx_signing.key /etc/apt/trusted.gpg.d/nginx_signing.asc sudo apt update >/dev/null 2>&1 elif [[ "${release}" == "ubuntu" ]]; then sudo apt install gnupg2 ca-certificates lsb-release -y >/dev/null 2>&1 echo "deb http://nginx.org/packages/mainline/ubuntu $(lsb_release -cs) nginx" | sudo tee /etc/apt/sources.list.d/nginx.list >/dev/null 2>&1 echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n" | sudo tee /etc/apt/preferences.d/99nginx >/dev/null 2>&1 curl -o /tmp/nginx_signing.key https://nginx.org/keys/nginx_signing.key >/dev/null 2>&1 # gpg --dry-run --quiet --import --import-options import-show /tmp/nginx_signing.key sudo mv /tmp/nginx_signing.key /etc/apt/trusted.gpg.d/nginx_signing.asc sudo apt update >/dev/null 2>&1 elif [[ "${release}" == "centos" ]]; then ${installType} yum-utils >/dev/null 2>&1 cat </etc/yum.repos.d/nginx.repo [nginx-stable] name=nginx stable repo baseurl=http://nginx.org/packages/centos/\$releasever/\$basearch/ gpgcheck=1 enabled=1 gpgkey=https://nginx.org/keys/nginx_signing.key module_hotfixes=true [nginx-mainline] name=nginx mainline repo baseurl=http://nginx.org/packages/mainline/centos/\$releasever/\$basearch/ gpgcheck=1 enabled=0 gpgkey=https://nginx.org/keys/nginx_signing.key module_hotfixes=true EOF sudo yum-config-manager --enable nginx-mainline >/dev/null 2>&1 elif [[ "${release}" == "alpine" ]]; then rm "${nginxConfigPath}default.conf" fi ${installType} nginx >/dev/null 2>&1 bootStartup nginx } # 安装warp installWarp() { if [[ "${cpuVendor}" == "arm" ]]; then echoContent red " ---> 官方WARP客户端不支持ARM架构" exit 0 fi ${installType} gnupg2 -y >/dev/null 2>&1 if [[ "${release}" == "debian" ]]; then curl -s https://pkg.cloudflareclient.com/pubkey.gpg | sudo apt-key add - >/dev/null 2>&1 echo "deb http://pkg.cloudflareclient.com/ $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/cloudflare-client.list >/dev/null 2>&1 sudo apt update >/dev/null 2>&1 elif [[ "${release}" == "ubuntu" ]]; then curl -s https://pkg.cloudflareclient.com/pubkey.gpg | sudo apt-key add - >/dev/null 2>&1 echo "deb http://pkg.cloudflareclient.com/ focal main" | sudo tee /etc/apt/sources.list.d/cloudflare-client.list >/dev/null 2>&1 sudo apt update >/dev/null 2>&1 elif [[ "${release}" == "centos" ]]; then ${installType} yum-utils >/dev/null 2>&1 sudo rpm -ivh "http://pkg.cloudflareclient.com/cloudflare-release-el${centosVersion}.rpm" >/dev/null 2>&1 fi echoContent green " ---> 安装WARP" ${installType} cloudflare-warp >/dev/null 2>&1 if [[ -z $(which warp-cli) ]]; then echoContent red " ---> 安装WARP失败" exit 0 fi systemctl enable warp-svc warp-cli --accept-tos register warp-cli --accept-tos set-mode proxy warp-cli --accept-tos set-proxy-port 31303 warp-cli --accept-tos connect warp-cli --accept-tos enable-always-on local warpStatus= warpStatus=$(curl -s --socks5 127.0.0.1:31303 https://www.cloudflare.com/cdn-cgi/trace | grep "warp" | cut -d "=" -f 2) if [[ "${warpStatus}" == "on" ]]; then echoContent green " ---> WARP启动成功" fi } # 通过dns检查域名的IP checkDNSIP() { local domain=$1 local dnsIP= ipType=4 dnsIP=$(dig @1.1.1.1 +time=2 +short "${domain}" | grep -E "^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])$") if [[ -z "${dnsIP}" ]]; then dnsIP=$(dig @8.8.8.8 +time=2 +short "${domain}" | grep -E "^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])$") fi if echo "${dnsIP}" | grep -q "timed out" || [[ -z "${dnsIP}" ]]; then echo echoContent red " ---> 无法通过DNS获取域名 IPv4 地址" echoContent green " ---> 尝试检查域名 IPv6 地址" dnsIP=$(dig @2606:4700:4700::1111 +time=2 aaaa +short "${domain}") ipType=6 if echo "${dnsIP}" | grep -q "network unreachable" || [[ -z "${dnsIP}" ]]; then echoContent red " ---> 无法通过DNS获取域名IPv6地址，退出安装" exit 0 fi fi local publicIP= publicIP=$(getPublicIP "${ipType}") if [[ "${publicIP}" != "${dnsIP}" ]]; then echoContent red " ---> 域名解析IP与当前服务器IP不一致\n" echoContent yellow " ---> 请检查域名解析是否生效以及正确" echoContent green " ---> 当前VPS IP：${publicIP}" echoContent green " ---> DNS解析 IP：${dnsIP}" exit 0 else echoContent green " ---> 域名IP校验通过" fi } # 检查端口实际开放状态 checkPortOpen() { handleSingBox stop >/dev/null 2>&1 handleXray stop >/dev/null 2>&1 local port=$1 local domain=$2 local checkPortOpenResult= allowPort "${port}" if [[ -z "${btDomain}" ]]; then handleNginx stop # 初始化nginx配置 touch ${nginxConfigPath}checkPortOpen.conf local listenIPv6PortConfig= if [[ -n $(curl -s -6 -m 4 http://www.cloudflare.com/cdn-cgi/trace | grep "ip" | cut -d "=" -f 2) ]]; then listenIPv6PortConfig="listen [::]:${port};" fi cat <${nginxConfigPath}checkPortOpen.conf server { listen ${port}; ${listenIPv6PortConfig} server_name ${domain}; location /checkPort { return 200 'fjkvymb6len'; } location /ip { proxy_set_header Host \$host; proxy_set_header X-Real-IP \$remote_addr; proxy_set_header REMOTE-HOST \$remote_addr; proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; default_type text/plain; return 200 \$proxy_add_x_forwarded_for; } } EOF handleNginx start # 检查域名+端口的开放 checkPortOpenResult=$(curl -s -m 10 "http://${domain}:${port}/checkPort") localIP=$(curl -s -m 10 "http://${domain}:${port}/ip") rm "${nginxConfigPath}checkPortOpen.conf" handleNginx stop if [[ "${checkPortOpenResult}" == "fjkvymb6len" ]]; then echoContent green " ---> 检测到${port}端口已开放" else echoContent green " ---> 未检测到${port}端口开放，退出安装" if echo "${checkPortOpenResult}" | grep -q "cloudflare"; then echoContent yellow " ---> 请关闭云朵后等待三分钟重新尝试" else if [[ -z "${checkPortOpenResult}" ]]; then echoContent red " ---> 请检查是否有网页防火墙，比如Oracle等云服务商" echoContent red " ---> 检查是否自己安装过nginx并且有配置冲突，可以尝试DD纯净系统后重新尝试" else echoContent red " ---> 错误日志：${checkPortOpenResult}，请将此错误日志通过issues提交反馈" fi fi exit 0 fi checkIP "${localIP}" fi } # 初始化Nginx申请证书配置 initTLSNginxConfig() { handleNginx stop echoContent skyBlue "\n进度 $1/${totalProgress} : 初始化Nginx申请证书配置" if [[ -n "${currentHost}" && -z "${lastInstallationConfig}" ]]; then echo read -r -p "读取到上次安装记录，是否使用上次安装时的域名 ？[y/n]:" historyDomainStatus if [[ "${historyDomainStatus}" == "y" ]]; then domain=${currentHost} echoContent yellow "\n ---> 域名: ${domain}" else echo echoContent yellow "请输入要配置的域名 例: www.example.com --->" read -r -p "域名:" domain fi elif [[ -n "${currentHost}" && -n "${lastInstallationConfig}" ]]; then domain=${currentHost} else echo echoContent yellow "请输入要配置的域名 例: www.example.com --->" read -r -p "域名:" domain fi if [[ -z ${domain} ]]; then echoContent red " 域名不可为空--->" initTLSNginxConfig 3 else dnsTLSDomain=$(echo "${domain}" | awk -F "." '{$1="";print $0}' | sed 's/^[[:space:]]*//' | sed 's/ /./g') if [[ "${selectCoreType}" == "1" ]]; then customPortFunction fi # 修改配置 handleNginx stop fi } # 删除nginx默认的配置 removeNginxDefaultConf() { if [[ -f ${nginxConfigPath}default.conf ]]; then if [[ "$(grep -c "server_name" <${nginxConfigPath}default.conf)" == "1" ]] && [[ "$(grep -c "server_name localhost;" <${nginxConfigPath}default.conf)" == "1" ]]; then echoContent green " ---> 删除Nginx默认配置" rm -rf ${nginxConfigPath}default.conf >/dev/null 2>&1 fi fi } # 修改nginx重定向配置 updateRedirectNginxConf() { local redirectDomain= redirectDomain=${domain}:${port} local nginxH2Conf= nginxH2Conf="listen 127.0.0.1:31302 http2 so_keepalive=on proxy_protocol;" nginxVersion=$(nginx -v 2>&1) if echo "${nginxVersion}" | grep -q "1.25" && [[ $(echo "${nginxVersion}" | awk -F "[.]" '{print $3}') -gt 0 ]] || [[ $(echo "${nginxVersion}" | awk -F "[.]" '{print $2}') -gt 25 ]]; then nginxH2Conf="listen 127.0.0.1:31302 so_keepalive=on proxy_protocol;http2 on;" fi cat <${nginxConfigPath}alone.conf server { listen 127.0.0.1:31300; server_name _; return 403; } EOF if echo "${selectCustomInstallType}" | grep -qE ",2,|,5," || [[ -z "${selectCustomInstallType}" ]]; then cat <>${nginxConfigPath}alone.conf server { ${nginxH2Conf} server_name ${domain}; root ${nginxStaticPath}; set_real_ip_from 127.0.0.1; real_ip_header proxy_protocol; client_header_timeout 1071906480m; keepalive_timeout 1071906480m; location /${currentPath}grpc { if (\$content_type !~ "application/grpc") { return 404; } client_max_body_size 0; grpc_set_header X-Real-IP \$proxy_add_x_forwarded_for; client_body_timeout 1071906480m; grpc_read_timeout 1071906480m; grpc_pass grpc://127.0.0.1:31301; } location /${currentPath}trojangrpc { if (\$content_type !~ "application/grpc") { return 404; } client_max_body_size 0; grpc_set_header X-Real-IP \$proxy_add_x_forwarded_for; client_body_timeout 1071906480m; grpc_read_timeout 1071906480m; grpc_pass grpc://127.0.0.1:31304; } location / { } } EOF elif echo "${selectCustomInstallType}" | grep -q ",5," || [[ -z "${selectCustomInstallType}" ]]; then cat <>${nginxConfigPath}alone.conf server { ${nginxH2Conf} set_real_ip_from 127.0.0.1; real_ip_header proxy_protocol; server_name ${domain}; root ${nginxStaticPath}; location /${currentPath}grpc { client_max_body_size 0; keepalive_requests 4294967296; client_body_timeout 1071906480m; send_timeout 1071906480m; lingering_close always; grpc_read_timeout 1071906480m; grpc_send_timeout 1071906480m; grpc_pass grpc://127.0.0.1:31301; } location / { } } EOF elif echo "${selectCustomInstallType}" | grep -q ",2," || [[ -z "${selectCustomInstallType}" ]]; then cat <>${nginxConfigPath}alone.conf server { ${nginxH2Conf} set_real_ip_from 127.0.0.1; real_ip_header proxy_protocol; server_name ${domain}; root ${nginxStaticPath}; location /${currentPath}trojangrpc { client_max_body_size 0; # keepalive_time 1071906480m; keepalive_requests 4294967296; client_body_timeout 1071906480m; send_timeout 1071906480m; lingering_close always; grpc_read_timeout 1071906480m; grpc_send_timeout 1071906480m; grpc_pass grpc://127.0.0.1:31301; } location / { } } EOF else cat <>${nginxConfigPath}alone.conf server { ${nginxH2Conf} set_real_ip_from 127.0.0.1; real_ip_header proxy_protocol; server_name ${domain}; root ${nginxStaticPath}; location / { } } EOF fi cat <>${nginxConfigPath}alone.conf server { listen 127.0.0.1:31300 proxy_protocol; server_name ${domain}; set_real_ip_from 127.0.0.1; real_ip_header proxy_protocol; root ${nginxStaticPath}; location / { } } EOF handleNginx stop } # singbox Nginx config singBoxNginxConfig() { local type=$1 local port=$2 local nginxH2Conf= nginxH2Conf="listen ${port} http2 so_keepalive=on ssl;" nginxVersion=$(nginx -v 2>&1) local singBoxNginxSSL= singBoxNginxSSL="ssl_certificate /etc/v2ray-agent/tls/${domain}.crt;ssl_certificate_key /etc/v2ray-agent/tls/${domain}.key;" if echo "${nginxVersion}" | grep -q "1.25" && [[ $(echo "${nginxVersion}" | awk -F "[.]" '{print $3}') -gt 0 ]] || [[ $(echo "${nginxVersion}" | awk -F "[.]" '{print $2}') -gt 25 ]]; then nginxH2Conf="listen ${port} so_keepalive=on ssl;http2 on;" fi if echo "${selectCustomInstallType}" | grep -q ",11," || [[ "$1" == "all" ]]; then cat <>${nginxConfigPath}sing_box_VMess_HTTPUpgrade.conf server { ${nginxH2Conf} server_name ${domain}; root ${nginxStaticPath}; ${singBoxNginxSSL} ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers TLS13_AES_128_GCM_SHA256:TLS13_AES_256_GCM_SHA384:TLS13_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305; ssl_prefer_server_ciphers on; resolver 1.1.1.1 valid=60s; resolver_timeout 2s; client_max_body_size 100m; location /${currentPath} { if (\$http_upgrade != "websocket") { return 444; } proxy_pass http://127.0.0.1:31306; proxy_http_version 1.1; proxy_set_header Upgrade \$http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header X-Real-IP \$remote_addr; proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; proxy_set_header Host \$host; proxy_redirect off; } } EOF fi } # 检查ip checkIP() { echoContent skyBlue "\n ---> 检查域名ip中" local localIP=$1 if [[ -z ${localIP} ]] || ! echo "${localIP}" | sed '1{s/[^(]*(//;s/).*//;q}' | grep -q '\.' && ! echo "${localIP}" | sed '1{s/[^(]*(//;s/).*//;q}' | grep -q ':'; then echoContent red "\n ---> 未检测到当前域名的ip" echoContent skyBlue " ---> 请依次进行下列检查" echoContent yellow " ---> 1.检查域名是否书写正确" echoContent yellow " ---> 2.检查域名dns解析是否正确" echoContent yellow " ---> 3.如解析正确，请等待dns生效，预计三分钟内生效" echoContent yellow " ---> 4.如报Nginx启动问题，请手动启动nginx查看错误，如自己无法处理请提issues" echo echoContent skyBlue " ---> 如以上设置都正确，请重新安装纯净系统后再次尝试" if [[ -n ${localIP} ]]; then echoContent yellow " ---> 检测返回值异常，建议手动卸载nginx后重新执行脚本" echoContent red " ---> 异常结果：${localIP}" fi exit 0 else if echo "${localIP}" | awk -F "[,]" '{print $2}' | grep -q "." || echo "${localIP}" | awk -F "[,]" '{print $2}' | grep -q ":"; then echoContent red "\n ---> 检测到多个ip，请确认是否关闭cloudflare的云朵" echoContent yellow " ---> 关闭云朵后等待三分钟后重试" echoContent yellow " ---> 检测到的ip如下:[${localIP}]" exit 0 fi echoContent green " ---> 检查当前域名IP正确" fi } # 自定义email customSSLEmail() { if echo "$1" | grep -q "validate email"; then read -r -p "是否重新输入邮箱地址[y/n]:" sslEmailStatus if [[ "${sslEmailStatus}" == "y" ]]; then sed '/ACCOUNT_EMAIL/d' /root/.acme.sh/account.conf >/root/.acme.sh/account.conf_tmp && mv /root/.acme.sh/account.conf_tmp /root/.acme.sh/account.conf else exit 0 fi fi if [[ -d "/root/.acme.sh" && -f "/root/.acme.sh/account.conf" ]]; then if ! grep -q "ACCOUNT_EMAIL" <"/root/.acme.sh/account.conf" && ! echo "${sslType}" | grep -q "letsencrypt"; then read -r -p "请输入邮箱地址:" sslEmail if echo "${sslEmail}" | grep -q "@"; then echo "ACCOUNT_EMAIL='${sslEmail}'" >>/root/.acme.sh/account.conf echoContent green " ---> 添加完毕" else echoContent yellow "请重新输入正确的邮箱格式[例: username@example.com]" customSSLEmail fi fi fi } # DNS API申请证书 switchDNSAPI() { read -r -p "是否使用DNS API申请证书[支持NAT]？[y/n]:" dnsAPIStatus if [[ "${dnsAPIStatus}" == "y" ]]; then echoContent red "\n==============================================================" echoMenuHint "1.cloudflare" "默认" echoContent yellow "2.aliyun" echoContent red "==============================================================" read -r -p "请选择[回车]使用默认:" selectDNSAPIType case ${selectDNSAPIType} in 1) dnsAPIType="cloudflare" ;; 2) dnsAPIType="aliyun" ;; *) dnsAPIType="cloudflare" ;; esac initDNSAPIConfig "${dnsAPIType}" fi } # 初始化dns配置 initDNSAPIConfig() { if [[ "$1" == "cloudflare" ]]; then echoContent yellow "\n CF_Token 配置请参考仓库 README：https://github.com/dodo258/sing-box-reality-manager\n" read -r -p "请输入API Token:" cfAPIToken if [[ -z "${cfAPIToken}" ]]; then echoContent red " ---> 输入为空，请重新输入" initDNSAPIConfig "$1" else echo if ! echo "${dnsTLSDomain}" | grep -q "\." || [[ -z $(echo "${dnsTLSDomain}" | awk -F "[.]" '{print $1}') ]]; then echoContent green " ---> 不支持此域名申请通配符证书，建议使用此格式[xx.xx.xx]" exit 0 fi read -r -p "是否使用*.${dnsTLSDomain}进行API申请通配符证书？[y/n]:" dnsAPIStatus fi elif [[ "$1" == "aliyun" ]]; then read -r -p "请输入Ali Key:" aliKey read -r -p "请输入Ali Secret:" aliSecret if [[ -z "${aliKey}" || -z "${aliSecret}" ]]; then echoContent red " ---> 输入为空，请重新输入" initDNSAPIConfig "$1" else echo if ! echo "${dnsTLSDomain}" | grep -q "\." || [[ -z $(echo "${dnsTLSDomain}" | awk -F "[.]" '{print $1}') ]]; then echoContent green " ---> 不支持此域名申请通配符证书，建议使用此格式[xx.xx.xx]" exit 0 fi read -r -p "是否使用*.${dnsTLSDomain}进行API申请通配符证书？[y/n]:" dnsAPIStatus fi fi } # 选择ssl安装类型 switchSSLType() { if [[ -z "${sslType}" ]]; then echoContent red "\n==============================================================" echoMenuHint "1.letsencrypt" "默认" echoContent yellow "2.zerossl" echoMenuHint "3.buypass" "不支持DNS申请" echoContent red "==============================================================" read -r -p "请选择[回车]使用默认:" selectSSLType case ${selectSSLType} in 1) sslType="letsencrypt" ;; 2) sslType="zerossl" ;; 3) sslType="buypass" ;; *) sslType="letsencrypt" ;; esac if [[ -n "${dnsAPIType}" && "${sslType}" == "buypass" ]]; then echoContent red " ---> buypass不支持API申请证书" exit 0 fi echo "${sslType}" >/etc/v2ray-agent/tls/ssl_type fi } # 选择acme安装证书方式 selectAcmeInstallSSL() { # local sslIPv6= # local currentIPType= if [[ "${ipType}" == "6" ]]; then sslIPv6="--listen-v6" fi # currentIPType=$(curl -s "-${ipType}" http://www.cloudflare.com/cdn-cgi/trace | grep "ip" | cut -d "=" -f 2) # if [[ -z "${currentIPType}" ]]; then # currentIPType=$(curl -s -6 http://www.cloudflare.com/cdn-cgi/trace | grep "ip" | cut -d "=" -f 2) # if [[ -n "${currentIPType}" ]]; then # sslIPv6="--listen-v6" # fi # fi acmeInstallSSL readAcmeTLS } # 安装SSL证书 acmeInstallSSL() { local dnsAPIDomain="${tlsDomain}" local nginxWasRunning= if [[ "${dnsAPIStatus}" == "y" ]]; then dnsAPIDomain="*.${dnsTLSDomain}" fi if [[ "${dnsAPIType}" == "cloudflare" ]]; then echoContent green " ---> DNS API 生成证书中" sudo CF_Token="${cfAPIToken}" "$HOME/.acme.sh/acme.sh" --issue -d "${dnsAPIDomain}" -d "${dnsTLSDomain}" --dns dns_cf -k ec-256 --server "${sslType}" ${sslIPv6} 2>&1 | tee -a /etc/v2ray-agent/tls/acme.log >/dev/null elif [[ "${dnsAPIType}" == "aliyun" ]]; then echoContent green " ---> DNS API 生成证书中" sudo Ali_Key="${aliKey}" Ali_Secret="${aliSecret}" "$HOME/.acme.sh/acme.sh" --issue -d "${dnsAPIDomain}" -d "${dnsTLSDomain}" --dns dns_ali -k ec-256 --server "${sslType}" ${sslIPv6} 2>&1 | tee -a /etc/v2ray-agent/tls/acme.log >/dev/null else echoContent green " ---> 生成证书中" if pgrep -f "nginx" >/dev/null 2>&1; then nginxWasRunning="true" handleNginx stop fi sudo "$HOME/.acme.sh/acme.sh" --issue -d "${tlsDomain}" --standalone -k ec-256 --server "${sslType}" ${sslIPv6} 2>&1 | tee -a /etc/v2ray-agent/tls/acme.log >/dev/null if [[ "${nginxWasRunning}" == "true" ]]; then handleNginx start fi fi } # 自定义端口 customPortFunction() { local historyCustomPortStatus= if [[ -n "${customPort}" || -n "${currentPort}" ]]; then echo if [[ -z "${lastInstallationConfig}" ]]; then read -r -p "读取到上次安装时的端口，是否使用上次安装时的端口？[y/n]:" historyCustomPortStatus if [[ "${historyCustomPortStatus}" == "y" ]]; then port=${currentPort} echoContent yellow "\n ---> 端口: ${port}" fi elif [[ -n "${lastInstallationConfig}" ]]; then port=${currentPort} fi fi if [[ -z "${currentPort}" ]] || [[ "${historyCustomPortStatus}" == "n" ]]; then echo if [[ -n "${btDomain}" ]]; then echoContent yellow "请输入端口[不可与BT Panel/1Panel端口相同，回车随机]" read -r -p "端口:" port if [[ -z "${port}" ]]; then port=$((RANDOM % 20001 + 10000)) fi else echo echoContent yellow "请输入端口[默认: 443]，可自定义端口[回车使用默认]" read -r -p "端口:" port if [[ -z "${port}" ]]; then port=443 fi if [[ "${port}" == "${xrayVLESSRealityPort}" ]]; then handleXray stop fi fi if [[ -n "${port}" ]]; then if ((port >= 1 && port <= 65535)); then allowPort "${port}" echoContent yellow "\n ---> 端口: ${port}" if [[ -z "${btDomain}" ]]; then checkDNSIP "${domain}" removeNginxDefaultConf checkPortOpen "${port}" "${domain}" fi else echoContent red " ---> 端口输入错误" exit 0 fi else echoContent red " ---> 端口不可为空" exit 0 fi fi } # 检测端口是否占用 checkPort() { if [[ -n "$1" ]] && lsof -i "tcp:$1" | grep -q LISTEN; then echoContent red "\n ---> $1端口被占用，请手动关闭后安装\n" lsof -i "tcp:$1" | grep LISTEN exit 0 fi } # 安装TLS installTLS() { echoContent skyBlue "\n进度 $1/${totalProgress} : 申请TLS证书\n" readAcmeTLS local tlsDomain=${domain} # 安装tls if [[ -f "/etc/v2ray-agent/tls/${tlsDomain}.crt" && -f "/etc/v2ray-agent/tls/${tlsDomain}.key" && -n $(cat "/etc/v2ray-agent/tls/${tlsDomain}.crt") ]] || [[ -d "$HOME/.acme.sh/${tlsDomain}_ecc" && -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.key" && -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.cer" ]] || [[ "${installedDNSAPIStatus}" == "true" ]]; then echoContent green " ---> 检测到证书" renewalTLS if [[ -z $(find /etc/v2ray-agent/tls/ -name "${tlsDomain}.crt") ]] || [[ -z $(find /etc/v2ray-agent/tls/ -name "${tlsDomain}.key") ]] || [[ -z $(cat "/etc/v2ray-agent/tls/${tlsDomain}.crt") ]]; then if [[ "${installedDNSAPIStatus}" == "true" ]]; then sudo "$HOME/.acme.sh/acme.sh" --installcert -d "*.${dnsTLSDomain}" --fullchainpath "/etc/v2ray-agent/tls/${tlsDomain}.crt" --keypath "/etc/v2ray-agent/tls/${tlsDomain}.key" --ecc >/dev/null else sudo "$HOME/.acme.sh/acme.sh" --installcert -d "${tlsDomain}" --fullchainpath "/etc/v2ray-agent/tls/${tlsDomain}.crt" --keypath "/etc/v2ray-agent/tls/${tlsDomain}.key" --ecc >/dev/null fi else if [[ -d "$HOME/.acme.sh/${tlsDomain}_ecc" && -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.key" && -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.cer" ]] || [[ "${installedDNSAPIStatus}" == "true" ]]; then if [[ -z "${lastInstallationConfig}" ]]; then echoContent yellow " ---> 如未过期或者自定义证书请选择[n]\n" read -r -p "是否重新安装？[y/n]:" reInstallStatus if [[ "${reInstallStatus}" == "y" ]]; then rm -rf /etc/v2ray-agent/tls/* installTLS "$1" fi fi fi fi elif [[ "${websiteTLSAutoMode}" == "true" ]]; then if [[ ! -d "$HOME/.acme.sh" ]]; then echoContent yellow " ---> 未安装acme.sh" exit 0 fi dnsAPIStatus="n" dnsAPIType="" installedDNSAPIStatus= sslType="letsencrypt" echoContent yellow "\n ---> 网站模式默认使用 Let's Encrypt 免费证书" echoContent green " ---> 网站证书申请依赖80端口，当前不启用DNS API流程" allowPort 80 selectAcmeInstallSSL sudo "$HOME/.acme.sh/acme.sh" --installcert -d "${tlsDomain}" --fullchainpath "/etc/v2ray-agent/tls/${tlsDomain}.crt" --keypath "/etc/v2ray-agent/tls/${tlsDomain}.key" --ecc >/dev/null if [[ ! -f "/etc/v2ray-agent/tls/${tlsDomain}.crt" || ! -f "/etc/v2ray-agent/tls/${tlsDomain}.key" ]] || [[ -z $(cat "/etc/v2ray-agent/tls/${tlsDomain}.key") || -z $(cat "/etc/v2ray-agent/tls/${tlsDomain}.crt") ]]; then tail -n 10 /etc/v2ray-agent/tls/acme.log if [[ ${installTLSCount} == "1" ]]; then echoContent red " ---> TLS安装失败，请检查acme日志" exit 0 fi installTLSCount=1 installTLS "$1" fi echoContent green " ---> TLS生成成功" elif [[ -d "$HOME/.acme.sh" ]] && [[ ! -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.cer" || ! -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.key" ]]; then switchDNSAPI if [[ -z "${dnsAPIType}" ]]; then echoContent yellow "\n ---> 不采用API申请证书" echoContent green " ---> 安装TLS证书，需要依赖80端口" allowPort 80 fi switchSSLType customSSLEmail selectAcmeInstallSSL if [[ "${installedDNSAPIStatus}" == "true" ]]; then sudo "$HOME/.acme.sh/acme.sh" --installcert -d "*.${dnsTLSDomain}" --fullchainpath "/etc/v2ray-agent/tls/${tlsDomain}.crt" --keypath "/etc/v2ray-agent/tls/${tlsDomain}.key" --ecc >/dev/null else sudo "$HOME/.acme.sh/acme.sh" --installcert -d "${tlsDomain}" --fullchainpath "/etc/v2ray-agent/tls/${tlsDomain}.crt" --keypath "/etc/v2ray-agent/tls/${tlsDomain}.key" --ecc >/dev/null fi if [[ ! -f "/etc/v2ray-agent/tls/${tlsDomain}.crt" || ! -f "/etc/v2ray-agent/tls/${tlsDomain}.key" ]] || [[ -z $(cat "/etc/v2ray-agent/tls/${tlsDomain}.key") || -z $(cat "/etc/v2ray-agent/tls/${tlsDomain}.crt") ]]; then tail -n 10 /etc/v2ray-agent/tls/acme.log if [[ ${installTLSCount} == "1" ]]; then echoContent red " ---> TLS安装失败，请检查acme日志" exit 0 fi installTLSCount=1 echo if tail -n 10 /etc/v2ray-agent/tls/acme.log | grep -q "Could not validate email address as valid"; then echoContent red " ---> 邮箱无法通过SSL厂商验证，请重新输入" echo customSSLEmail "validate email" installTLS "$1" else installTLS "$1" fi fi echoContent green " ---> TLS生成成功" else echoContent yellow " ---> 未安装acme.sh" exit 0 fi } # 初始化随机字符串 initRandomPath() { local chars="abcdefghijklmnopqrtuxyz" local initCustomPath= for i in {1..4}; do echo "${i}" >/dev/null initCustomPath+="${chars:RANDOM%${#chars}:1}" done customPath=${initCustomPath} } # 自定义/随机路径 randomPathFunction() { if [[ -n $1 ]]; then echoContent skyBlue "\n进度 $1/${totalProgress} : 生成随机路径" else echoContent skyBlue "生成随机路径" fi if [[ -n "${currentPath}" && -z "${lastInstallationConfig}" ]]; then echo read -r -p "读取到上次安装记录，是否使用上次安装时的path路径 ？[y/n]:" historyPathStatus echo elif [[ -n "${currentPath}" && -n "${lastInstallationConfig}" ]]; then historyPathStatus="y" fi if [[ "${historyPathStatus}" == "y" ]]; then customPath=${currentPath} echoContent green " ---> 使用成功\n" else echoContent yellow "请输入自定义路径[例: alone]，不需要斜杠，[回车]随机路径" read -r -p '路径:' customPath if [[ -z "${customPath}" ]]; then initRandomPath currentPath=${customPath} else if [[ "${customPath: -2}" == "ws" ]]; then echo echoContent red " ---> 自定义path结尾不可用ws结尾，否则无法区分分流路径" randomPathFunction "$1" else currentPath=${customPath} fi fi fi echoContent yellow "\n path:${currentPath}" echoContent skyBlue "\n----------------------------" } # 随机数 randomNum() { if [[ "${release}" == "alpine" ]]; then local ranNum= ranNum="$(shuf -i "$1"-"$2" -n 1)" echo "${ranNum}" else echo $((RANDOM % $2 + $1)) fi } # Nginx伪装博客 nginxBlog() { if [[ -n "$1" ]]; then echoContent skyBlue "\n进度 $1/${totalProgress} : 添加伪装站点" else echoContent yellow "\n开始添加伪装站点" fi if [[ -d "${nginxStaticPath}" && -f "${nginxStaticPath}/check" ]]; then echo if [[ -z "${lastInstallationConfig}" ]]; then read -r -p "检测到安装伪装站点，是否需要重新安装[y/n]:" nginxBlogInstallStatus else nginxBlogInstallStatus="n" fi if [[ "${nginxBlogInstallStatus}" == "y" ]]; then rm -rf "${nginxStaticPath}*" # randomNum=$((RANDOM % 6 + 1)) randomNum=$(randomNum 1 9) if [[ "${release}" == "alpine" ]]; then wget -q -P "${nginxStaticPath}" "https://raw.githubusercontent.com/dodo258/sing-box-reality-manager/main/fodder/blog/unable/html${randomNum}.zip" else wget -q "${wgetShowProgressStatus}" -P "${nginxStaticPath}" "https://raw.githubusercontent.com/dodo258/sing-box-reality-manager/main/fodder/blog/unable/html${randomNum}.zip" fi unzip -o "${nginxStaticPath}html${randomNum}.zip" -d "${nginxStaticPath}" >/dev/null rm -f "${nginxStaticPath}html${randomNum}.zip*" echoContent green " ---> 添加伪装站点成功" fi else randomNum=$(randomNum 1 9) # randomNum=$((RANDOM % 6 + 1)) rm -rf "${nginxStaticPath}*" if [[ "${release}" == "alpine" ]]; then wget -q -P "${nginxStaticPath}" "https://raw.githubusercontent.com/dodo258/sing-box-reality-manager/main/fodder/blog/unable/html${randomNum}.zip" else wget -q "${wgetShowProgressStatus}" -P "${nginxStaticPath}" "https://raw.githubusercontent.com/dodo258/sing-box-reality-manager/main/fodder/blog/unable/html${randomNum}.zip" fi unzip -o "${nginxStaticPath}html${randomNum}.zip" -d "${nginxStaticPath}" >/dev/null rm -f "${nginxStaticPath}html${randomNum}.zip*" echoContent green " ---> 添加伪装站点成功" fi } websiteSetPaths() { if [[ -z "$1" ]]; then return 1 fi websiteDomain="$1" websiteSiteRoot="${websiteManagerRoot}/sites/${websiteDomain}/public" websiteContentRoot="${websiteManagerRoot}/sites/${websiteDomain}/content" websitePendingRoot="${websiteContentRoot}/pending" websitePublishedRoot="${websiteContentRoot}/published" websiteNginxConfigPath="${nginxConfigPath}${websiteNginxConfigName}" } websiteEnsureManagerDirs() { mkdir -p "${websiteManagerRoot}" >/dev/null 2>&1 } websiteLoadMetadata() { if [[ -f "${websiteMetadataFile}" ]]; then # shellcheck disable=SC1090 . "${websiteMetadataFile}" if [[ "${websiteType}" == "blog" && -z "${websiteVariant}" ]]; then websiteVariant="blog-basic" elif [[ "${websiteType}" == "tools" && -z "${websiteVariant}" ]]; then websiteVariant="tools-dev" fi websiteSetPaths "${websiteDomain}" return 0 fi return 1 } websiteSaveMetadata() { websiteEnsureManagerDirs cat <"${websiteMetadataFile}" websiteDomain='${websiteDomain}' websiteType='${websiteType}' websiteVariant='${websiteVariant}' websiteTitle='${websiteTitle}' websiteDescription='${websiteDescription}' EOF echo "${websiteDomain}" >"${websiteActiveDomainFile}" } websiteGetVariantName() { case "${websiteVariant}" in blog-basic) echo "简洁技术笔记版" ;; blog-docs) echo "文档目录版" ;; tools-dev) echo "开发工具版" ;; tools-text) echo "文本处理版" ;; tools-ops) echo "运维常用版" ;; custom-upload) echo "自定义静态站" ;; archived-2) echo "归档模板：中文企业站" ;; archived-4) echo "归档模板：企业展示站" ;; archived-7) echo "归档模板：中文企业站二" ;; archived-8) echo "归档模板：个人主页" ;; *) echo "默认" ;; esac } websiteApplyBlogDefaults() { case "${websiteVariant}" in blog-docs) websiteTitle="运维文档与实践手册" websiteDescription="围绕 Linux、Docker、Nginx、DNS、Shell 和服务器维护整理的中文技术文档站。" ;; *) websiteVariant="blog-basic" websiteTitle="技术笔记与运维记录" websiteDescription="记录 Linux、Docker、Nginx、VPS 运维和轻量开发相关的日常笔记。" ;; esac } websiteApplyToolDefaults() { case "${websiteVariant}" in tools-text) websiteTitle="常用文本处理小工具" websiteDescription="用于整理文本、清理换行、转换大小写和常见编码的中文轻工具站。" ;; tools-ops) websiteTitle="运维常用小工具" websiteDescription="面向服务器维护、排障和日常巡检的轻量中文工具与速查页。" ;; *) websiteVariant="tools-dev" websiteTitle="常用开发与文本小工具" websiteDescription="一个轻量、直接、够用的中文小工具站，适合承载 Markdown、JSON 与时间相关的常用工具页。" ;; esac } websiteSelectBlogVariant() { echoContent skyBlue "\n功能 1/2 : 选择博客模板" echoContent red "==============================================================" echoContent yellow "1.简洁技术笔记版[默认]" echoContent yellow "2.文档目录版" echoContent red "==============================================================" read -r -p "请选择[回车默认1]:" websiteBlogVariantChoice case "${websiteBlogVariantChoice}" in 2) websiteVariant="blog-docs" ;; *) websiteVariant="blog-basic" ;; esac websiteApplyBlogDefaults } websiteSelectToolVariant() { echoContent skyBlue "\n功能 1/2 : 选择工具站模板" echoContent red "==============================================================" echoContent yellow "1.开发工具版[默认]" echoContent yellow "2.文本处理版" echoContent yellow "3.运维常用版" echoContent red "==============================================================" read -r -p "请选择[回车默认1]:" websiteToolVariantChoice case "${websiteToolVariantChoice}" in 2) websiteVariant="tools-text" ;; 3) websiteVariant="tools-ops" ;; *) websiteVariant="tools-dev" ;; esac websiteApplyToolDefaults } websiteEnsureNginxInstalled() { if ! command -v nginx >/dev/null 2>&1; then echoContent yellow "\n ---> 未检测到Nginx，开始安装" installNginxTools fi } websiteCheckPortConflict() { local conflictLog= local blockingLog= if command -v lsof >/dev/null 2>&1; then conflictLog=$(lsof -nP -iTCP:80 -sTCP:LISTEN 2>/dev/null; lsof -nP -iTCP:443 -sTCP:LISTEN 2>/dev/null) blockingLog=$(echo "${conflictLog}" | awk 'NR > 1 && $1 != "nginx"') if [[ -n "${blockingLog}" ]]; then echoContent red "\n ---> 检测到80或443被非Nginx进程占用，当前网站管理无法安全接管" echoContent yellow " ---> 请保持节点使用随机端口，或先手动释放80/443后再部署网站" echoContent yellow "${blockingLog}" exit 0 fi elif command -v ss >/dev/null 2>&1; then conflictLog=$(ss -ltnp 2>/dev/null | grep -E '(:80 |:443 )') blockingLog=$(echo "${conflictLog}" | grep -v "nginx" || true) if [[ -n "${blockingLog}" ]]; then echoContent red "\n ---> 检测到80或443被非Nginx进程占用，当前网站管理无法安全接管" echoContent yellow " ---> 请保持节点使用随机端口，或先手动释放80/443后再部署网站" echoContent yellow "${blockingLog}" exit 0 fi fi } websitePromptDomain() { local reuseStatus= local selectedWebsiteType="${websiteType}" local selectedWebsiteVariant="${websiteVariant}" local selectedWebsiteTitle="${websiteTitle}" local selectedWebsiteDescription="${websiteDescription}" local existingWebsiteDomain= local inputWebsiteDomain= if websiteLoadMetadata >/dev/null 2>&1; then existingWebsiteDomain="${websiteDomain}" fi websiteType="${selectedWebsiteType}" websiteVariant="${selectedWebsiteVariant}" websiteTitle="${selectedWebsiteTitle}" websiteDescription="${selectedWebsiteDescription}" if [[ -n "${existingWebsiteDomain}" ]]; then echoContent yellow "\n检测到当前网站域名：${existingWebsiteDomain}" read -r -p "是否继续使用这个域名？[y/n]:" reuseStatus if [[ "${reuseStatus}" == "y" ]]; then websiteSetPaths "${existingWebsiteDomain}" return 0 elif [[ -n "${reuseStatus}" && "${reuseStatus}" != "n" && "${reuseStatus}" == *.* ]]; then websiteDomain="${reuseStatus}" websiteSetPaths "${websiteDomain}" return 0 fi fi while true; do echoContent yellow "\n# 网站部署引导" echoContent yellow "1. 请提前把域名A记录解析到当前服务器" echoContent yellow "2. 网站会使用真实HTTPS证书" echoContent yellow "3. 节点请继续使用随机端口，网站使用80/443\n" if ! read -r -p "请输入网站域名[例: blog.example.com]:" inputWebsiteDomain; then echoContent red " ---> 未输入网站域名，已取消" exit 0 fi if [[ -n "${inputWebsiteDomain}" && "${inputWebsiteDomain}" == *.* ]]; then websiteDomain="${inputWebsiteDomain}" websiteSetPaths "${websiteDomain}" return 0 fi echoContent red " ---> 域名格式不正确，请重新输入" done } websiteWriteFavicon() { printf '%s' 'AAABAAEAEBAAAAEAIABpAAAAFgAAAIlQTkcNChoKAAAADUlIRFIAAAAQAAAAEAgGAAAAH/P/YQAAADBJREFUeJxjkLZL/E8JZqCaAaQCrAYQayvtDYjc9h8rHjWAngYMXDqgKClTnJnIxQA1WExzxDwlegAAAABJRU5ErkJggg==' | base64 -d >"${websiteSiteRoot}/favicon.ico" } websiteWriteRobots() { cat <"${websiteSiteRoot}/robots.txt" User-agent: * Allow: / Sitemap: https://${websiteDomain}/sitemap.xml EOF } websiteWriteCommonAssets() { mkdir -p "${websiteSiteRoot}/assets" >/dev/null 2>&1 cat <<'EOF' >"${websiteSiteRoot}/assets/style.css" :root { --bg: #f5f7fb; --surface: #ffffff; --line: #dbe3ef; --text: #1f2d3d; --muted: #5a6b7f; --brand: #1565c0; --brand-soft: #e8f1fb; --accent: #0d9488; --shadow: 0 12px 30px rgba(18, 40, 72, 0.08); } * { box-sizing: border-box; } html, body { margin: 0; padding: 0; background: var(--bg); color: var(--text); font: 16px/1.7 "PingFang SC","Microsoft YaHei","Noto Sans SC",sans-serif; } a { color: var(--brand); text-decoration: none; } a:hover { text-decoration: underline; } img { max-width: 100%; } .site-shell { max-width: 1080px; margin: 0 auto; padding: 0 24px 64px; } .site-header { display: flex; justify-content: space-between; align-items: center; gap: 16px; padding: 28px 0; border-bottom: 1px solid var(--line); } .brand { font-size: 24px; font-weight: 700; color: var(--text); } .nav { display: flex; gap: 18px; flex-wrap: wrap; } .nav a { color: var(--muted); font-weight: 600; } .hero { padding: 56px 0 28px; } .hero h1 { margin: 0 0 12px; font-size: 40px; line-height: 1.2; } .hero p { margin: 0; color: var(--muted); max-width: 760px; } .grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(260px, 1fr)); gap: 20px; } .card { background: var(--surface); border: 1px solid var(--line); border-radius: 20px; padding: 24px; box-shadow: var(--shadow); } .card h2, .card h3 { margin-top: 0; } .badge { display: inline-flex; align-items: center; padding: 6px 12px; border-radius: 999px; background: var(--brand-soft); color: var(--brand); font-size: 13px; font-weight: 700; } .section-title { margin: 40px 0 18px; font-size: 24px; } .post-list { display: grid; gap: 16px; } .post-item { background: var(--surface); border: 1px solid var(--line); border-radius: 18px; padding: 22px; box-shadow: var(--shadow); } .post-item h3 { margin: 0 0 8px; font-size: 22px; } .post-item p { margin: 0; color: var(--muted); } .meta { color: var(--muted); font-size: 14px; margin-bottom: 10px; } .article { background: var(--surface); border: 1px solid var(--line); border-radius: 22px; padding: 28px; box-shadow: var(--shadow); } .article h1 { margin-top: 0; font-size: 34px; } .article p, .article li { color: var(--text); } .article ul, .article ol { padding-left: 22px; } .tools { display: grid; grid-template-columns: repeat(auto-fit, minmax(300px, 1fr)); gap: 22px; } .tool-card textarea, .tool-card input { width: 100%; border: 1px solid var(--line); border-radius: 14px; padding: 12px 14px; font: inherit; background: #fff; color: var(--text); } .tool-card button { border: 0; background: var(--brand); color: #fff; border-radius: 12px; padding: 10px 16px; cursor: pointer; font-weight: 700; } .tool-card pre { white-space: pre-wrap; word-break: break-word; background: #0f172a; color: #dbeafe; padding: 16px; border-radius: 14px; overflow: auto; } .tool-actions { display: flex; gap: 10px; margin: 12px 0 0; flex-wrap: wrap; } .site-footer { margin-top: 40px; padding-top: 20px; border-top: 1px solid var(--line); color: var(--muted); font-size: 14px; } .note { color: var(--muted); font-size: 14px; } @media (max-width: 720px) { .site-shell { padding: 0 18px 52px; } .hero h1 { font-size: 30px; } .site-header { padding: 20px 0; align-items: flex-start; flex-direction: column; } } EOF cat <<'EOF' >"${websiteSiteRoot}/assets/site.js" function formatJsonInput() { const input = document.getElementById('json-input'); const output = document.getElementById('json-output'); if (!input || !output) return; try { const parsed = JSON.parse(input.value); output.textContent = JSON.stringify(parsed, null, 2); } catch (error) { output.textContent = 'JSON 解析失败：' + error.message; } } function convertTimestamp() { const input = document.getElementById('ts-input'); const output = document.getElementById('ts-output'); if (!input || !output) return; const raw = input.value.trim(); if (!raw) { output.textContent = '请输入时间戳'; return; } const value = raw.length === 13 ? Number(raw) : Number(raw) * 1000; if (Number.isNaN(value)) { output.textContent = '输入内容不是有效时间戳'; return; } const date = new Date(value); output.textContent = isNaN(date.getTime()) ? '无法转换' : date.toLocaleString('zh-CN', { hour12: false }); } function summarizeMarkdown() { const input = document.getElementById('md-input'); const output = document.getElementById('md-output'); if (!input || !output) return; const text = input.value.trim(); if (!text) { output.textContent = '请输入 Markdown 文本'; return; } const lines = text.split(/\n+/).filter(Boolean); output.textContent = '共 ' + lines.length + ' 行，首行：' + lines[0]; } function unicodeToBase64(text) { return btoa(unescape(encodeURIComponent(text))); } function base64ToUnicode(text) { return decodeURIComponent(escape(atob(text))); } function encodeBase64Input() { const input = document.getElementById('b64-input'); const output = document.getElementById('b64-output'); if (!input || !output) return; output.textContent = input.value ? unicodeToBase64(input.value) : '请输入内容'; } function decodeBase64Input() { const input = document.getElementById('b64-input'); const output = document.getElementById('b64-output'); if (!input || !output) return; try { output.textContent = input.value ? base64ToUnicode(input.value.trim()) : '请输入 Base64 内容'; } catch (error) { output.textContent = 'Base64 解码失败：' + error.message; } } function encodeUrlInput() { const input = document.getElementById('url-input'); const output = document.getElementById('url-output'); if (!input || !output) return; output.textContent = input.value ? encodeURIComponent(input.value) : '请输入内容'; } function decodeUrlInput() { const input = document.getElementById('url-input'); const output = document.getElementById('url-output'); if (!input || !output) return; try { output.textContent = input.value ? decodeURIComponent(input.value) : '请输入 URL 编码内容'; } catch (error) { output.textContent = 'URL 解码失败：' + error.message; } } function dedupeLines() { const input = document.getElementById('dedupe-input'); const output = document.getElementById('dedupe-output'); if (!input || !output) return; const lines = input.value.split(/\n/).map(line => line.trim()).filter(Boolean); output.textContent = lines.length ? Array.from(new Set(lines)).join('\n') : '请输入需要去重的内容'; } function cleanTextLines() { const input = document.getElementById('clean-input'); const output = document.getElementById('clean-output'); if (!input || !output) return; const lines = input.value.split(/\n/).map(line => line.trim()).filter(Boolean); output.textContent = lines.length ? lines.join('\n') : '请输入需要整理的内容'; } function convertTextCase(mode) { const input = document.getElementById('case-input'); const output = document.getElementById('case-output'); if (!input || !output) return; const text = input.value; if (!text) { output.textContent = '请输入需要转换的内容'; return; } if (mode === 'upper') { output.textContent = text.toUpperCase(); } else if (mode === 'lower') { output.textContent = text.toLowerCase(); } else { output.textContent = text.split(/\b/).map(chunk => chunk ? chunk.charAt(0).toUpperCase() + chunk.slice(1).toLowerCase() : chunk).join(''); } } async function hashTextSha256() { const input = document.getElementById('hash-input'); const output = document.getElementById('hash-output'); if (!input || !output) return; if (!input.value) { output.textContent = '请输入需要计算摘要的内容'; return; } const data = new TextEncoder().encode(input.value); const digest = await crypto.subtle.digest('SHA-256', data); const hashArray = Array.from(new Uint8Array(digest)); output.textContent = hashArray.map(byte => byte.toString(16).padStart(2, '0')).join(''); } function buildCurlSnippet() { const input = document.getElementById('curl-input'); const output = document.getElementById('curl-output'); if (!input || !output) return; const url = input.value.trim(); if (!url) { output.textContent = '请输入完整的 URL，例如 https://example.com/health'; return; } output.textContent = 'curl -I -sS --max-time 15 ' + JSON.stringify(url); } EOF } websiteWriteDefaultAboutPage() { local title="$1" local description="$2" mkdir -p "${websiteSiteRoot}/about" >/dev/null 2>&1 cat <"${websiteSiteRoot}/about/index.html" 关于本站 - ${title}
${title}
关于本站

${title}

${description}

这是一个部署在独立服务器上的中文静态站点，用于承载日常技术记录、工具页或个人内容。

本站保持正常的 HTTPS、网站结构、静态资源和页面访问行为，适合作为长期维护的轻量网站。

© $(date +%Y) ${title}
EOF } websiteRenderSitemap() { local urlsFile="${websiteManagerRoot}/sitemap.urls" : >"${urlsFile}" echo "https://${websiteDomain}/" >>"${urlsFile}" if [[ -f "${websiteSiteRoot}/about/index.html" ]]; then echo "https://${websiteDomain}/about/" >>"${urlsFile}" fi if [[ "${websiteType}" == "blog" ]]; then find "${websiteSiteRoot}/posts" -mindepth 2 -maxdepth 2 -name "index.html" 2>/dev/null | sort | while read -r postFile; do local postSlug postSlug=$(echo "${postFile}" | awk -F "/posts/" '{print $2}' | awk -F "/index.html" '{print $1}') echo "https://${websiteDomain}/posts/${postSlug}/" >>"${urlsFile}" done elif [[ "${websiteType}" == "tools" ]]; then find "${websiteSiteRoot}/tools" -mindepth 2 -maxdepth 2 -name "index.html" 2>/dev/null | sort | while read -r toolFile; do local toolSlug toolSlug=$(echo "${toolFile}" | awk -F "/tools/" '{print $2}' | awk -F "/index.html" '{print $1}') echo "https://${websiteDomain}/tools/${toolSlug}/" >>"${urlsFile}" done fi { echo '' echo '' while read -r item; do [[ -z "${item}" ]] && continue echo " ${item}" done <"${urlsFile}" echo '' } >"${websiteSiteRoot}/sitemap.xml" rm -f "${urlsFile}" } websiteReadArticleField() { local articleFile="$1" local key="$2" awk -F ': ' -v target="${key}" '$1 == target {sub($1 ": ", ""); print; exit}' "${articleFile}" } websiteReadArticleBody() { local articleFile="$1" awk 'found { print } /^---$/ { found=1 }' "${articleFile}" } websiteSeedBlogArticles() { mkdir -p "${websitePendingRoot}" "${websitePublishedRoot}" >/dev/null 2>&1 if [[ -n $(find "${websitePendingRoot}" -type f -name "*.md" 2>/dev/null) || -n $(find "${websitePublishedRoot}" -type f -name "*.md" 2>/dev/null) ]]; then return 0 fi cat <<'EOF' >"${websitePendingRoot}/2026-05-01-linux-common-commands.md" TITLE: Linux 常用命令整理 DATE: 2026-05-01 SLUG: linux-common-commands SUMMARY: 记录日常服务器维护里最常用的系统检查、磁盘、网络与日志命令。 ---

这篇记录主要汇总日常运维里最常用的一组 Linux 命令，适合在登录服务器后快速确认系统状态。

  • uptime：查看系统运行时长与负载
  • df -h：查看磁盘使用情况
  • free -h：查看内存情况
  • ss -lntp：查看监听端口
  • journalctl -u 服务名 -n 100：查看服务最近日志

建议把这类高频命令整理成自己的速查页，后续排障会快很多。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-02-nginx-static-site-checklist.md" TITLE: 静态站点上线检查清单 DATE: 2026-05-02 SLUG: nginx-static-site-checklist SUMMARY: 静态网站上线前，重点检查 HTTPS、favicon、robots、sitemap 与错误页行为。 ---

静态站点本身很轻，但上线前最好还是做一轮清单式检查。

  1. 证书链是否正常，浏览器访问是否完整显示 HTTPS
  2. 根路径是否能稳定返回 200
  3. favicon.ico、robots.txt、sitemap.xml 是否存在
  4. 静态资源路径是否正常，没有大量 404
  5. 访问日志是否有持续写入

这类站不需要复杂后端，但细节越完整，越像长期维护的正常网站。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-03-docker-routine-notes.md" TITLE: Docker 日常维护小记 DATE: 2026-05-03 SLUG: docker-routine-notes SUMMARY: 记录容器状态检查、日志查看、镜像清理和配置导出这几类高频动作。 ---

容器化服务越多，越需要形成一套统一的日常检查动作。

  • docker ps --format '{{.Names}}\t{{.Status}}' 快速看服务状态
  • docker logs --tail 100 容器名 快速看近端日志
  • docker inspect 容器名 核对挂载、网络和启动参数
  • docker image prune -f 定期清理无用镜像

如果一台机器同时承担网站和代理入口，建议把容器和系统服务的端口规划写进单独文档，避免后续冲突。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-04-vps-firewall-notes.md" TITLE: VPS 防火墙规则排查 DATE: 2026-05-04 SLUG: vps-firewall-notes SUMMARY: 记录端口已监听但外网仍超时时，应该先排查的几类防火墙和持久化规则。 ---

端口明明监听了，但外网仍超时，最常见的问题其实不在服务本身，而在防火墙链路。

  • 确认系统实际生效的是 ufw、iptables、nftables 还是云厂商防火墙
  • 确认开放规则是否已经持久化
  • 确认 IPv4 和 IPv6 是否都放行
  • 确认不是运营商或上游 ACL 拦截

排障时尽量把监听、放行、回连测试分开验证，定位会更快。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-05-systemd-service-checklist.md" TITLE: systemd 服务排查清单 DATE: 2026-05-05 SLUG: systemd-service-checklist SUMMARY: 服务部署后最值得先确认的几项 systemd 状态、日志和自动拉起行为。 ---

一台机器上的核心服务越来越多时，systemd 状态检查应该变成固定动作。

  1. systemctl status 服务名 看最近状态是否稳定
  2. systemctl is-enabled 服务名 确认是否开机自启
  3. journalctl -u 服务名 -n 100 --no-pager 查看失败原因
  4. 重点看服务文件里是否有 Restart=on-failure

如果一项服务需要长期跑，最好在上线当天就验证一次重启系统后的自动恢复行为。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-06-dns-resolution-notes.md" TITLE: DNS 解析链路排查笔记 DATE: 2026-05-06 SLUG: dns-resolution-notes SUMMARY: 域名访问异常时，优先拆开看权威解析、递归解析和本地缓存，不要只盯浏览器。 ---

DNS 问题经常被误判成网站或服务故障，实际上解析链路本身就可能出错。

  • 先确认权威 DNS 是否已经返回目标记录
  • 再看本地递归 DNS 是否已同步
  • 浏览器缓存和系统缓存必要时都要清理
  • 切换网络环境后再复测一次，能更快排除本地问题

如果网站刚迁移 IP，建议记录 TTL 和生效时间，后续排障会轻松很多。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-07-nginx-access-log-basics.md" TITLE: Nginx 访问日志基础观察 DATE: 2026-05-07 SLUG: nginx-access-log-basics SUMMARY: 通过访问日志看真实请求来源、状态码分布和静态资源命中情况。 ---

很多问题不需要抓包，先看访问日志就能发现异常模式。

  • tail -f access.log 观察实时请求
  • 看是否大量集中在某个资源路径返回 404
  • 看 User-Agent 是否正常，还是明显脚本扫描
  • 看请求来源 IP 是否集中在少数网段

站点上线后，访问日志本身也是判断“这个站看起来像不像正常网站”的重要线索。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-08-server-backup-routine.md" TITLE: 服务器备份的最低标准 DATE: 2026-05-08 SLUG: server-backup-routine SUMMARY: 即使是轻量站点，也应该至少备份配置、证书和发布内容。 ---

很多人以为静态站点不重要，但真正出问题时，最可惜的往往是细碎配置和更新记录。

  • 备份站点目录和 Nginx 配置
  • 备份证书文件和续期配置
  • 备份发布过的文章和待发布文章池
  • 备份 crontab 和系统服务文件

如果条件允许，至少保留一份异地压缩包，并且定期抽查能否恢复。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-09-ssh-key-rotation-notes.md" TITLE: SSH 密钥轮换注意事项 DATE: 2026-05-09 SLUG: ssh-key-rotation-notes SUMMARY: 管理多台机器时，SSH 密钥轮换要先做好别名、授权和回滚方案。 ---

SSH 密钥轮换最怕的是直接替换后把自己锁在门外。

  1. 先新增新密钥，不要立刻删除旧密钥
  2. 验证新密钥能独立登录后，再清理旧授权
  3. 保留一条密码或控制台回滚路径
  4. 更新本地别名和自动化脚本里引用的 IdentityFile

如果一台机器承担多个服务，轮换前最好先确认控制台入口是可用的。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-10-crontab-maintenance-notes.md" TITLE: crontab 定时任务维护习惯 DATE: 2026-05-10 SLUG: crontab-maintenance-notes SUMMARY: 定时任务长期跑起来后，日志位置、失败重试和注释说明都应该固定下来。 ---

定时任务不是写完就结束，长期维护时最怕“知道有任务，但不知道它现在在干嘛”。

  • 每条关键任务最好有独立日志文件
  • 任务行后面加注释标签，方便 grep 和清理
  • 涉及网络请求的任务要考虑失败后的下次执行影响
  • 修改 crontab 前先备份旧内容

对个人站点来说，定时发布和证书续期这类任务都值得单独留痕。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-11-certificate-renewal-check.md" TITLE: 证书续期前后检查点 DATE: 2026-05-11 SLUG: certificate-renewal-check SUMMARY: HTTPS 证书不是拿到就结束，续期日志、安装路径和 reload 行为都要验证。 ---

HTTPS 的稳定性不仅在于申请成功，还在于后续续期能不能持续自动跑通。

  • 确认续期工具的账户配置已经落盘
  • 确认实际部署到服务使用的证书路径
  • 确认续期完成后是否自动 reload 对应服务
  • 确认日志里没有权限或 DNS 验证失败

如果一套脚本同时负责服务和证书，最好在部署完成当天就做一次续期链路复查。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-12-static-site-release-notes.md" TITLE: 静态站发布流程小结 DATE: 2026-05-12 SLUG: static-site-release-notes SUMMARY: 静态站的发布流程看起来简单，但每次上线还是应该有固定步骤。 ---

静态站没有数据库和应用进程，发布成本低，但也更适合做成标准流程。

  1. 先检查站点目录结构是否完整
  2. 再检查 index、about、assets、robots、sitemap
  3. 上线前跑一次本地或服务器端静态检查
  4. 发布后立即看首页、详情页和 HTTPS 状态

只要形成固定步骤，静态站的日常维护会比想象中轻松很多。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-13-shell-script-safety-notes.md" TITLE: Shell 脚本维护时的安全习惯 DATE: 2026-05-13 SLUG: shell-script-safety-notes SUMMARY: 线上机器上的脚本修改，最重要的是备份、幂等和明确失败输出。 ---

Shell 脚本执行面广，一次小改动就可能影响多个服务，所以修改时要保守。

  • 先备份关键配置文件
  • 重复执行不应导致结果越来越乱
  • 失败时要有明确错误提示，不能静默吞掉
  • 涉及删除动作时要尽量缩小范围

能复用现有函数就复用，不要为了一点新功能重写整条稳定链路。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-14-service-port-planning.md" TITLE: 服务端口规划建议 DATE: 2026-05-14 SLUG: service-port-planning SUMMARY: 同一台机器上同时跑网站、代理、订阅和辅助服务时，端口规划最好先写清楚。 ---

端口冲突很多时候不是技术问题，而是没有提前规划。

  • 网站优先固定在 80/443
  • 代理节点走随机高位端口
  • 后台管理和订阅接口单独规划子域名或高位端口
  • 每次新增服务后，都把监听端口补进文档

一台机器职责越多，越要在最开始就把端口规划整理清楚。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-15-curl-healthcheck-notes.md" TITLE: curl 探活检查习惯 DATE: 2026-05-15 SLUG: curl-healthcheck-notes SUMMARY: 网站和服务上线后，用 curl 做一轮最基础的探活检查，往往能提前发现不少问题。 ---

很多服务在浏览器里“能打开”，不代表协议、状态码和响应头都对。上线后先用一轮 curl 检查很有必要。

  • 确认首页返回码是否为 200 或预期跳转
  • 确认 HTTPS 是否能正常协商并返回正文
  • 确认重定向路径是否符合预期
  • 确认静态资源不会出现批量 404

把最常用的探活命令保留在文档里，比每次临时回忆更稳。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-16-logrotate-basic-checks.md" TITLE: logrotate 基础检查点 DATE: 2026-05-16 SLUG: logrotate-basic-checks SUMMARY: 日志切割看似是小事，但站点和服务长时间运行后，不做切割很容易把磁盘拖满。 ---

日志管理往往被忽略，直到磁盘快满时才想起来处理。对于长期运行的网站和服务，logrotate 是很基础的一环。

  • 确认哪些日志文件会持续增长
  • 确认切割后是否需要 reload 对应服务
  • 确认保留周期是否符合机器磁盘大小
  • 确认旧日志是否会被压缩

只要提前做好，站点和节点一起跑也不会被日志拖垮。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-17-http-status-observation.md" TITLE: HTTP 状态码观察要点 DATE: 2026-05-17 SLUG: http-status-observation SUMMARY: 站点上线后，最先该看的往往不是页面好不好看，而是状态码和跳转是否自然。 ---

很多问题第一眼看不出来，但状态码已经暴露得很明显。首页、详情页、静态资源和 404 页都值得抽样检查。

  • 首页应返回 200 或明确的 301/302 跳转
  • 静态资源不应频繁返回 404
  • 不存在页面应返回正常 404，而不是整站空白
  • HTTPS 跳转和 www/non-www 策略应保持一致

这类检查简单，但非常适合写成固定上线步骤。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-18-static-assets-checklist.md" TITLE: 静态资源检查清单 DATE: 2026-05-18 SLUG: static-assets-checklist SUMMARY: 真正像样的静态站，不只是首页能打开，还要保证资源结构完整。 ---

一个正常网站至少要有稳定的资源结构。图标、样式、脚本和说明页越齐全，整体观感越自然。

  • 确认 favicon.ico 存在
  • 确认 assets 目录里的 CSS 和 JS 正常加载
  • 确认 robots.txt 和 sitemap.xml 已生成
  • 确认 about 页能正常访问

这类资源不复杂，但缺一个都会让网站显得很临时。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-19-domain-resolution-cutover.md" TITLE: 域名切换前的解析确认 DATE: 2026-05-19 SLUG: domain-resolution-cutover SUMMARY: 新站上线前，域名解析的生效情况最好先确认，再去做证书和回源配置。 ---

很多部署流程卡住，不是服务本身有问题，而是域名解析还没稳定落到目标服务器。

  • 先确认权威记录已经改到目标 IP
  • 再从不同网络环境抽样看解析结果
  • 确认 TTL 不会拖太久
  • 证书申请前先确保 80 端口能被正常访问

解析确认做在前面，后面的 HTTPS 和站点发布都会顺得多。

EOF cat <<'EOF' >"${websitePendingRoot}/2026-05-20-service-restart-notes.md" TITLE: 服务重启前后该看什么 DATE: 2026-05-20 SLUG: service-restart-notes SUMMARY: 线上服务改配置后，重启不是结束，关键是重启后立刻做状态和日志确认。 ---

很多配置问题不是写文件时暴露，而是在服务重启后才表现出来。所以重启动作后面必须跟检查。

  • 确认 systemd 状态是 active
  • 确认最近日志没有明显报错
  • 确认监听端口已经起来
  • 确认外部探活能通

形成固定习惯后，很多“看起来改完了其实没生效”的问题会少很多。

EOF } websiteWriteBlogShellPages() { websiteWriteCommonAssets websiteWriteFavicon websiteWriteRobots websiteWriteDefaultAboutPage "${websiteTitle}" "${websiteDescription}" } websiteRenderBlogArticlePage() { local articleFile="$1" local postTitle postDate postSlug postSummary postTitle=$(websiteReadArticleField "${articleFile}" "TITLE") postDate=$(websiteReadArticleField "${articleFile}" "DATE") postSlug=$(websiteReadArticleField "${articleFile}" "SLUG") postSummary=$(websiteReadArticleField "${articleFile}" "SUMMARY") mkdir -p "${websiteSiteRoot}/posts/${postSlug}" >/dev/null 2>&1 cat <"${websiteSiteRoot}/posts/${postSlug}/index.html" ${postTitle} - ${websiteTitle}
${websiteTitle}
技术记录

${postTitle}

发布时间：${postDate}
$(websiteReadArticleBody "${articleFile}")
EOF } websiteGetArticleCategory() { local articleFile="$1" local articleTitle articleBody articleTitle=$(websiteReadArticleField "${articleFile}" "TITLE") articleBody=$(websiteReadArticleBody "${articleFile}") if echo "${articleTitle} ${articleBody}" | grep -qiE "docker|容器"; then echo "Docker" elif echo "${articleTitle} ${articleBody}" | grep -qiE "nginx|https|证书"; then echo "Nginx/HTTPS" elif echo "${articleTitle} ${articleBody}" | grep -qiE "dns|解析"; then echo "DNS" elif echo "${articleTitle} ${articleBody}" | grep -qiE "shell|bash|ssh"; then echo "Shell/SSH" elif echo "${articleTitle} ${articleBody}" | grep -qiE "systemd|防火墙|端口|日志|备份|服务器|vps"; then echo "运维" else echo "Linux" fi } websiteRebuildBlogSite() { websiteWriteBlogShellPages mkdir -p "${websiteSiteRoot}/posts" >/dev/null 2>&1 local postCards= local latestCards= local categoryCards= local articleFile= local count=0 local totalLinux=0 local totalDocker=0 local totalNginx=0 local totalDNS=0 local totalShell=0 local totalOps=0 while read -r articleFile; do [[ -z "${articleFile}" ]] && continue websiteRenderBlogArticlePage "${articleFile}" local postTitle postDate postSlug postSummary articleCategory postTitle=$(websiteReadArticleField "${articleFile}" "TITLE") postDate=$(websiteReadArticleField "${articleFile}" "DATE") postSlug=$(websiteReadArticleField "${articleFile}" "SLUG") postSummary=$(websiteReadArticleField "${articleFile}" "SUMMARY") articleCategory=$(websiteGetArticleCategory "${articleFile}") local currentCard currentCard=$(cat <
${postDate}

${postTitle}

${postSummary}

分类：${articleCategory}

EOF ) postCards="${postCards} ${currentCard}" if [[ ${count} -lt 3 ]]; then latestCards="${latestCards} ${currentCard}" fi case "${articleCategory}" in "Linux") totalLinux=$((totalLinux + 1)) ;; "Docker") totalDocker=$((totalDocker + 1)) ;; "Nginx/HTTPS") totalNginx=$((totalNginx + 1)) ;; "DNS") totalDNS=$((totalDNS + 1)) ;; "Shell/SSH") totalShell=$((totalShell + 1)) ;; *) totalOps=$((totalOps + 1)) ;; esac count=$((count + 1)) done < <(find "${websitePublishedRoot}" -type f -name "*.md" | sort -r) if [[ "${websiteVariant}" == "blog-docs" ]]; then categoryCards=$(cat <

Linux

系统基础、常用命令与日常维护。

当前内容：${totalLinux} 篇

Docker

容器运行、镜像清理、部署检查。

当前内容：${totalDocker} 篇

Nginx / HTTPS

站点配置、证书链路和访问行为。

当前内容：${totalNginx} 篇

DNS

权威解析、递归解析与生效时间排查。

当前内容：${totalDNS} 篇

Shell / SSH

脚本、密钥轮换和远程连接习惯。

当前内容：${totalShell} 篇

运维

systemd、日志、防火墙和备份清单。

当前内容：${totalOps} 篇

EOF ) fi if [[ "${websiteVariant}" == "blog-docs" ]]; then cat <"${websiteSiteRoot}/index.html" ${websiteTitle}
${websiteTitle}
中文技术文档站

按主题归档的运维知识库

${websiteDescription}

目录分类

${categoryCards}

最近更新

${latestCards}

全部文档

${postCards}
© $(date +%Y) ${websiteTitle} · 当前已发布 ${count} 篇内容
EOF else cat <"${websiteSiteRoot}/index.html" ${websiteTitle}
${websiteTitle}
中文技术博客

日常运维与轻量开发记录

${websiteDescription}

最新内容

${latestCards}

全部文章

${postCards}
© $(date +%Y) ${websiteTitle} · 当前已发布 ${count} 篇内容
EOF fi websiteRenderSitemap } websitePublishNextPendingArticle() { local quiet="$1" local nextArticle= nextArticle=$(find "${websitePendingRoot}" -type f -name "*.md" | sort | head -1) if [[ -z "${nextArticle}" ]]; then [[ "${quiet}" != "true" ]] && echoContent yellow " ---> 暂无待发布文章" return 1 fi mv "${nextArticle}" "${websitePublishedRoot}/" websiteRebuildBlogSite [[ "${quiet}" != "true" ]] && echoContent green " ---> 已发布一篇预置文章" return 0 } websitePublishArticleMenu() { if ! websiteLoadMetadata || [[ "${websiteType}" != "blog" ]]; then echoContent red "\n ---> 当前只有中文技术博客支持发布预置文章" exit 0 fi echoContent skyBlue "\n功能 1/1 : 发布预置文章" echoContent red "==============================================================" echoContent yellow "1.发布下一篇待发布文章" echoContent yellow "2.发布全部待发布文章" echoContent yellow "3.查看待发布文章" echoContent red "==============================================================" read -r -p "请选择:" websitePublishAction if [[ "${websitePublishAction}" == "1" ]]; then websitePublishNextPendingArticle elif [[ "${websitePublishAction}" == "2" ]]; then local publishedCount=0 while websitePublishNextPendingArticle true; do publishedCount=$((publishedCount + 1)) done if [[ ${publishedCount} -gt 0 ]]; then echoContent green " ---> 已发布 ${publishedCount} 篇待发布文章" else echoContent yellow " ---> 暂无待发布文章" fi elif [[ "${websitePublishAction}" == "3" ]]; then local articleIndex=1 find "${websitePendingRoot}" -type f -name "*.md" | sort | while read -r articleFile; do local postTitle postTitle=$(websiteReadArticleField "${articleFile}" "TITLE") echoContent yellow "${articleIndex}. ${postTitle}" articleIndex=$((articleIndex + 1)) done if [[ ${articleIndex} -eq 1 ]]; then echoContent yellow " ---> 暂无待发布文章" fi fi } websiteInstallPublishSchedule() { local cronExpr="$1" local backupCronFile="/etc/v2ray-agent/backup_crontab.cron" if crontab -l 2>/dev/null | grep -q "${websiteCronTag}"; then crontab -l 2>/dev/null | grep -v "${websiteCronTag}" >"${backupCronFile}" || true else crontab -l 2>/dev/null >"${backupCronFile}" || true fi if [[ -n "${cronExpr}" ]]; then echo "${cronExpr} /bin/bash /etc/v2ray-agent/install.sh ${websiteCronTag} >> ${websitePublishLog} 2>&1" >>"${backupCronFile}" fi crontab "${backupCronFile}" rm -f "${backupCronFile}" } websitePublishScheduleMenu() { if ! websiteLoadMetadata || [[ "${websiteType}" != "blog" ]]; then echoContent red "\n ---> 当前只有中文技术博客支持定时发布" exit 0 fi echoContent skyBlue "\n功能 1/1 : 配置定时发布" echoContent red "==============================================================" echoContent yellow "1.每周一凌晨发布一篇" echoContent yellow "2.每月1号和15号凌晨各发布一篇" echoContent yellow "3.关闭定时发布" echoContent yellow "4.查看当前状态" echoContent red "==============================================================" read -r -p "请选择:" websiteScheduleAction case "${websiteScheduleAction}" in 1) websiteInstallPublishSchedule "15 4 * * 1" echoContent green " ---> 已设置为每周一凌晨自动发布一篇" ;; 2) websiteInstallPublishSchedule "15 4 1,15 * *" echoContent green " ---> 已设置为每月1号和15号凌晨自动发布一篇" ;; 3) websiteInstallPublishSchedule "" echoContent green " ---> 已关闭定时发布" ;; 4) if crontab -l 2>/dev/null | grep -q "${websiteCronTag}"; then crontab -l 2>/dev/null | grep "${websiteCronTag}" else echoContent yellow " ---> 当前未开启定时发布" fi ;; esac } websiteRenderToolPage() { local toolPath="$1" local toolTitle="$2" local toolDescription="$3" local toolBadge="$4" local toolBody="$5" mkdir -p "${websiteSiteRoot}/tools/${toolPath}" >/dev/null 2>&1 cat <"${websiteSiteRoot}/tools/${toolPath}/index.html" ${toolTitle} - ${websiteTitle}
${websiteTitle}
${toolBadge}

${toolTitle}

${toolDescription}

${toolBody}
EOF } websiteRenderToolCardsPage() { local badgeTitle="$1" local heroTitle="$2" local heroDescription="$3" local cardsHtml="$4" cat <"${websiteSiteRoot}/index.html" ${websiteTitle}
${websiteTitle}
${badgeTitle}

${heroTitle}

${heroDescription}

${cardsHtml}
© $(date +%Y) ${websiteTitle}
EOF } websiteRenderToolSiteDev() { local cardsHtml cardsHtml=$(cat <<'EOF'

文本去重

按行去重，适合整理域名、IP、规则集。

EOF ) websiteRenderToolCardsPage "开发工具版" "开发调试常用工具集" "${websiteDescription}" "${cardsHtml}" websiteRenderToolPage "markdown-summary" "Markdown 内容概览" "输入一段 Markdown 文本，快速确认内容行数和首行标题。" "Markdown 工具" '
结果会显示在这里
' websiteRenderToolPage "json-formatter" "JSON 格式化" "适合接口调试时快速查看返回结构。" "JSON 工具" '
结果会显示在这里
' websiteRenderToolPage "timestamp-converter" "时间戳转换" "支持常见秒级和毫秒级 Unix 时间戳。" "时间工具" '
结果会显示在这里
' websiteRenderToolPage "base64-codec" "Base64 编解码" "对文本做 Base64 编码与解码，适合处理调试样例。" "编码工具" '
结果会显示在这里
' websiteRenderToolPage "url-codec" "URL 编解码" "快速处理查询参数、回调地址与签名字段。" "URL 工具" '
结果会显示在这里
' websiteRenderToolPage "text-dedup" "文本去重" "按行去重，适合整理规则集、域名、IP 和清单内容。" "文本工具" '
结果会显示在这里
' } websiteRenderToolSiteText() { local cardsHtml cardsHtml=$(cat <<'EOF'

文本去重

对清单内容按行去重，清理重复项。

换行整理

清理空行和多余空格，保留干净段落。

EOF ) websiteRenderToolCardsPage "文本处理版" "常见文本整理与转换工具" "${websiteDescription}" "${cardsHtml}" websiteRenderToolPage "text-dedup" "文本去重" "按行去重，适合整理名单、规则和批量内容。" "文本工具" '
结果会显示在这里
' websiteRenderToolPage "text-cleaner" "换行整理" "清理多余空格和空行，让文案结构更干净。" "文本工具" '
结果会显示在这里
' websiteRenderToolPage "case-converter" "大小写转换" "适合处理变量名、标题或批量英文内容。" "文本工具" '
结果会显示在这里
' websiteRenderToolPage "url-codec" "URL 编解码" "快速处理中文参数、回调地址和 URL 拼接。" "URL 工具" '
结果会显示在这里
' } websiteRenderToolSiteOps() { local cardsHtml cardsHtml=$(cat <<'EOF' EOF ) websiteRenderToolCardsPage "运维常用版" "偏运维排障的轻量工具与速查页" "${websiteDescription}" "${cardsHtml}" websiteRenderToolPage "timestamp-converter" "时间戳转换" "支持秒级和毫秒级 Unix 时间戳。" "时间工具" '
结果会显示在这里
' websiteRenderToolPage "sha256-text" "SHA-256 摘要" "对文本做 SHA-256 摘要，适合比对配置片段或规则内容。" "运维工具" '
结果会显示在这里
' websiteRenderToolPage "curl-builder" "curl 探活命令生成" "输入 URL 后快速生成一条常用探活命令。" "运维工具" '
结果会显示在这里
' websiteRenderToolPage "systemd-cheatsheet" "systemd 速查" "整理服务状态、自启与日志排查时最常用的一组命令。" "运维速查" '
  • systemctl status 服务名：查看当前状态
  • systemctl is-enabled 服务名：确认开机自启
  • journalctl -u 服务名 -n 100 --no-pager：查看近端日志
  • systemctl restart 服务名：重启服务
  • systemctl daemon-reload：服务文件变更后重载

这页是轻量速查页，适合站点里承载常用运维命令备忘。

' } websiteRenderToolSite() { websiteWriteCommonAssets websiteWriteFavicon websiteWriteRobots websiteWriteDefaultAboutPage "${websiteTitle}" "${websiteDescription}" mkdir -p "${websiteSiteRoot}/tools" >/dev/null 2>&1 case "${websiteVariant}" in tools-text) websiteRenderToolSiteText ;; tools-ops) websiteRenderToolSiteOps ;; *) websiteVariant="tools-dev"; websiteRenderToolSiteDev ;; esac websiteRenderSitemap } websiteEnsureCustomCommonFiles() { mkdir -p "${websiteSiteRoot}" >/dev/null 2>&1 [[ -f "${websiteSiteRoot}/favicon.ico" ]] || websiteWriteFavicon [[ -f "${websiteSiteRoot}/robots.txt" ]] || websiteWriteRobots if [[ ! -f "${websiteSiteRoot}/about.html" && ! -f "${websiteSiteRoot}/about/index.html" ]]; then websiteWriteDefaultAboutPage "${websiteTitle}" "${websiteDescription}" fi [[ -f "${websiteSiteRoot}/sitemap.xml" ]] || websiteRenderSitemap } websitePrepareTLS() { local oldDomain="${domain}" local oldCurrentHost="${currentHost}" local oldWebsiteTLSAutoMode="${websiteTLSAutoMode}" domain="${websiteDomain}" currentHost="" allowPort 80 allowPort 443 checkDNSIP "${websiteDomain}" if [[ ! -s "/etc/v2ray-agent/tls/${websiteDomain}.crt" || ! -s "/etc/v2ray-agent/tls/${websiteDomain}.key" ]]; then echoContent yellow "\n ---> 未检测到 ${websiteDomain} 的证书，开始申请" echoContent skyBlue " ---> 网站管理沿用 13.证书管理 的 acme.sh 免费证书与自动续期链路" websiteTLSAutoMode=true installTLS 2 else echoContent green " ---> 已检测到 ${websiteDomain} 的证书，直接复用" echoContent skyBlue " ---> 当前网站证书与 13.证书管理 共用同一套续期机制" fi websiteTLSAutoMode="${oldWebsiteTLSAutoMode}" domain="${oldDomain}" currentHost="${oldCurrentHost}" } websiteWriteNginxConfig() { mkdir -p "${websiteSiteRoot}" >/dev/null 2>&1 cat <"${websiteNginxConfigPath}" server { listen 80; listen [::]:80; server_name ${websiteDomain}; root ${websiteSiteRoot}; index index.html; location /.well-known/acme-challenge/ { root ${websiteSiteRoot}; } location / { return 301 https://\$host\$request_uri; } } server { listen 443 ssl; listen [::]:443 ssl; server_name ${websiteDomain}; root ${websiteSiteRoot}; index index.html; ssl_certificate /etc/v2ray-agent/tls/${websiteDomain}.crt; ssl_certificate_key /etc/v2ray-agent/tls/${websiteDomain}.key; ssl_protocols TLSv1.2 TLSv1.3; ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:10m; ssl_session_timeout 10m; add_header X-Content-Type-Options nosniff always; add_header X-Frame-Options SAMEORIGIN always; add_header Referrer-Policy no-referrer-when-downgrade always; location / { try_files \$uri \$uri/ /index.html; } } EOF } websiteReloadNginx() { nginx -t >/etc/v2ray-agent/nginx_error.log 2>&1 if [[ "$?" != "0" ]]; then echoContent red "\n ---> Nginx配置校验失败" cat /etc/v2ray-agent/nginx_error.log exit 0 fi if pgrep -f "nginx" >/dev/null 2>&1; then nginx -s reload >/etc/v2ray-agent/nginx_error.log 2>&1 || true fi handleNginx start } websitePrepareShell() { websiteEnsureManagerDirs websiteEnsureNginxInstalled websiteCheckPortConflict websiteSetPaths "${websiteDomain}" rm -rf "${websiteSiteRoot}" mkdir -p "${websiteSiteRoot}" "${websiteContentRoot}" "${websitePendingRoot}" "${websitePublishedRoot}" >/dev/null 2>&1 websitePrepareTLS } websiteDeployBlog() { websiteType="blog" websiteSelectBlogVariant websitePromptDomain websitePrepareShell websiteSeedBlogArticles websitePublishNextPendingArticle true >/dev/null 2>&1 || true websitePublishNextPendingArticle true >/dev/null 2>&1 || true websiteRebuildBlogSite websiteWriteNginxConfig websiteSaveMetadata websiteReloadNginx echoContent green "\n ---> 中文技术博客部署成功" echoContent yellow " ---> 模板: $(websiteGetVariantName)" echoContent yellow " ---> 域名: https://${websiteDomain}" } websiteDeployToolSite() { websiteType="tools" websiteSelectToolVariant websitePromptDomain websitePrepareShell websiteRenderToolSite websiteWriteNginxConfig websiteSaveMetadata websiteReloadNginx echoContent green "\n ---> 中文小工具站部署成功" echoContent yellow " ---> 模板: $(websiteGetVariantName)" echoContent yellow " ---> 域名: https://${websiteDomain}" } websiteExtractCustomStaticArchive() { local archivePath="$1" if [[ ! -f "${archivePath}" ]]; then echoContent red " ---> 文件不存在：${archivePath}" exit 0 fi if echo "${archivePath}" | grep -qE "\.zip$"; then unzip -o "${archivePath}" -d "${websiteSiteRoot}" >/dev/null elif echo "${archivePath}" | grep -qE "\.(tar\.gz|tgz)$"; then tar -xzf "${archivePath}" -C "${websiteSiteRoot}" else echoContent red " ---> 仅支持 .zip / .tar.gz / .tgz" exit 0 fi if [[ ! -f "${websiteSiteRoot}/index.html" ]] && [[ ! -f "${websiteSiteRoot}/index.htm" ]]; then if [[ -n $(find "${websiteSiteRoot}" -mindepth 1 -maxdepth 1 -type d | head -1) ]]; then local nestedRoot nestedRoot=$(find "${websiteSiteRoot}" -mindepth 1 -maxdepth 1 -type d | head -1) if [[ -f "${nestedRoot}/index.html" || -f "${nestedRoot}/index.htm" ]]; then find "${nestedRoot}" -mindepth 1 -maxdepth 1 -exec mv {} "${websiteSiteRoot}/" \; rmdir "${nestedRoot}" >/dev/null 2>&1 || true fi fi fi if [[ ! -f "${websiteSiteRoot}/index.html" ]] && [[ ! -f "${websiteSiteRoot}/index.htm" ]]; then echoContent red " ---> 压缩包解压后未检测到 index.html/index.htm" exit 0 fi } websiteDeployCustomStaticSite() { websiteTitle="自定义静态站点" websiteDescription="用户自定义上传的静态站点内容。" websiteType="custom" websiteVariant="custom-upload" websitePromptDomain websitePrepareShell echoContent yellow "\n请先把静态站压缩包上传到服务器，例如：/root/site.zip" read -r -p "请输入压缩包路径:" websiteArchivePath websiteExtractCustomStaticArchive "${websiteArchivePath}" websiteEnsureCustomCommonFiles websiteWriteNginxConfig websiteSaveMetadata websiteReloadNginx echoContent green "\n ---> 自定义静态站部署成功" echoContent yellow " ---> 域名: https://${websiteDomain}" } websiteDeployArchivedTemplate() { local templateId="$1" websiteType="archived" case "${templateId}" in 2) websiteVariant="archived-2" websiteTitle="归档模板：中文企业站" websiteDescription="旧版兼容模板，保留用于快速占位。" ;; 4) websiteVariant="archived-4" websiteTitle="归档模板：企业展示站" websiteDescription="旧版兼容模板，保留用于快速占位。" ;; 7) websiteVariant="archived-7" websiteTitle="归档模板：中文企业站二" websiteDescription="旧版兼容模板，保留用于快速占位。" ;; 8) websiteVariant="archived-8" websiteTitle="归档模板：个人主页" websiteDescription="旧版兼容模板，保留用于快速占位。" ;; *) echoContent red " ---> 当前仅保留 2/4/7/8 这四套归档模板" exit 0 ;; esac websitePromptDomain websitePrepareShell if [[ "${release}" == "alpine" ]]; then wget -q -P "${websiteSiteRoot}" "https://raw.githubusercontent.com/dodo258/sing-box-reality-manager/main/fodder/blog/unable/html${templateId}.zip" else wget -q "${wgetShowProgressStatus}" -P "${websiteSiteRoot}" "https://raw.githubusercontent.com/dodo258/sing-box-reality-manager/main/fodder/blog/unable/html${templateId}.zip" fi unzip -o "${websiteSiteRoot}/html${templateId}.zip" -d "${websiteSiteRoot}" >/dev/null rm -f "${websiteSiteRoot}/html${templateId}.zip"* websiteEnsureCustomCommonFiles websiteWriteNginxConfig websiteSaveMetadata websiteReloadNginx echoContent green "\n ---> 归档模板部署成功" } websiteCompatibilityTemplateMenu() { echoContent skyBlue "\n功能 1/1 : 归档伪装模板" echoContent red "==============================================================" echoContent yellow "# 这里保留旧模板作兼容项，主推荐仍是中文技术博客/小工具站\n" echoContent yellow "1.中文企业站 01" echoContent yellow "2.企业展示站" echoContent yellow "3.中文企业站 02" echoContent yellow "4.个人主页" echoContent red "==============================================================" read -r -p "请选择:" websiteArchivedChoice case "${websiteArchivedChoice}" in 1) websiteDeployArchivedTemplate 2 ;; 2) websiteDeployArchivedTemplate 4 ;; 3) websiteDeployArchivedTemplate 7 ;; 4) websiteDeployArchivedTemplate 8 ;; *) echoContent red " ---> 选择错误" ;; esac } websiteShowStatus() { if ! websiteLoadMetadata; then echoContent red "\n ---> 当前未部署网站" exit 0 fi local certStatus="未检测到" local pendingCount=0 local publishedCount=0 if [[ -s "/etc/v2ray-agent/tls/${websiteDomain}.crt" && -s "/etc/v2ray-agent/tls/${websiteDomain}.key" ]]; then certStatus="已就绪" fi [[ -d "${websitePendingRoot}" ]] && pendingCount=$(find "${websitePendingRoot}" -type f -name "*.md" | wc -l | tr -d ' ') [[ -d "${websitePublishedRoot}" ]] && publishedCount=$(find "${websitePublishedRoot}" -type f -name "*.md" | wc -l | tr -d ' ') echoContent skyBlue "\n功能 1/1 : 网站状态" echoContent red "==============================================================" echoContent yellow "网站类型: ${websiteType}" echoContent yellow "模板类型: $(websiteGetVariantName)" echoContent yellow "网站域名: ${websiteDomain}" echoContent yellow "网站标题: ${websiteTitle}" echoContent yellow "站点目录: ${websiteSiteRoot}" echoContent yellow "证书状态: ${certStatus}" echoContent yellow "待发文章: ${pendingCount}" echoContent yellow "已发文章: ${publishedCount}" if crontab -l 2>/dev/null | grep -q "${websiteCronTag}"; then echoContent yellow "定时发布: 已开启" crontab -l 2>/dev/null | grep "${websiteCronTag}" else echoContent yellow "定时发布: 未开启" fi echoContent red "==============================================================" } websiteUpdateTemplate() { if ! websiteLoadMetadata; then echoContent red "\n ---> 当前未部署网站" exit 0 fi case "${websiteType}" in blog) websiteApplyBlogDefaults websiteRebuildBlogSite websiteWriteNginxConfig websiteReloadNginx echoContent green " ---> 中文技术博客已更新" ;; tools) websiteApplyToolDefaults websiteRenderToolSite websiteWriteNginxConfig websiteReloadNginx echoContent green " ---> 中文小工具站已更新" ;; archived) echoContent yellow " ---> 当前使用的是归档模板，请通过兼容模板入口重新选择模板" ;; custom) echoContent yellow " ---> 自定义静态站不提供模板更新，请手动替换站点内容" ;; *) echoContent red " ---> 未识别的网站类型" ;; esac } websiteUninstall() { if ! websiteLoadMetadata; then echoContent red "\n ---> 当前未部署网站" exit 0 fi read -r -p "是否确认卸载网站内容？[y/n]:" websiteRemoveStatus if [[ "${websiteRemoveStatus}" != "y" ]]; then echoContent yellow " ---> 已取消" exit 0 fi rm -rf "${websiteSiteRoot}" "${websiteContentRoot}" "${websiteMetadataFile}" "${websiteActiveDomainFile}" "${websiteNginxConfigPath}" >/dev/null 2>&1 websiteInstallPublishSchedule "" websiteReloadNginx echoContent green " ---> 网站内容与配置已卸载" } websiteManagementMenu() { echoContent skyBlue "\n功能 1/1 : 网站管理" echoContent red "==============================================================" echoContent yellow "# 注意事项" echoContent yellow "# 网站功能与节点功能解耦，网站使用80/443，Reality等节点继续使用随机端口" echoContent yellow "# 建议使用真实域名、正常解析和可信HTTPS证书" echoContent yellow "# 网站证书沿用13.证书管理同一套免费证书与自动续期逻辑" echoContent yellow "# 旧伪装模板只保留兼容入口，主推荐是中文技术博客和中文小工具站\n" echoContent yellow "1.部署中文技术博客[可选简洁版/文档版]" echoContent yellow "2.部署中文小工具站[可选开发/文本/运维版]" echoContent yellow "3.上传自定义静态站" echoContent yellow "4.发布预置文章" echoContent yellow "5.配置定时发布" echoContent yellow "6.更新网站模板" echoContent yellow "7.兼容旧伪装模板" echoContent yellow "8.查看网站状态" echoContent yellow "9.卸载网站" echoContent red "==============================================================" read -r -p "请选择:" websiteManageType case "${websiteManageType}" in 1) websiteDeployBlog ;; 2) websiteDeployToolSite ;; 3) websiteDeployCustomStaticSite ;; 4) websitePublishArticleMenu ;; 5) websitePublishScheduleMenu ;; 6) websiteUpdateTemplate ;; 7) websiteCompatibilityTemplateMenu ;; 8) websiteShowStatus ;; 9) websiteUninstall ;; *) echoContent red " ---> 选择错误" ;; esac } # 修改http_port_t端口 updateSELinuxHTTPPortT() { $(find /usr/bin /usr/sbin | grep -w journalctl) -xe >/etc/v2ray-agent/nginx_error.log 2>&1 if find /usr/bin /usr/sbin | grep -q -w semanage && find /usr/bin /usr/sbin | grep -q -w getenforce && grep -E "31300|31302" 检查SELinux端口是否开放" if ! $(find /usr/bin /usr/sbin | grep -w semanage) port -l | grep http_port | grep -q 31300; then $(find /usr/bin /usr/sbin | grep -w semanage) port -a -t http_port_t -p tcp 31300 echoContent green " ---> http_port_t 31300 端口开放成功" fi if ! $(find /usr/bin /usr/sbin | grep -w semanage) port -l | grep http_port | grep -q 31302; then $(find /usr/bin /usr/sbin | grep -w semanage) port -a -t http_port_t -p tcp 31302 echoContent green " ---> http_port_t 31302 端口开放成功" fi handleNginx start else exit 0 fi } # 操作Nginx handleNginx() { if ! echo "${selectCustomInstallType}" | grep -qwE ",7,|,8,|,7,8," && [[ -z $(pgrep -f "nginx") ]] && [[ "$1" == "start" ]]; then if [[ "${release}" == "alpine" ]]; then rc-service nginx start 2>/etc/v2ray-agent/nginx_error.log else systemctl start nginx 2>/etc/v2ray-agent/nginx_error.log fi sleep 0.5 if [[ -z $(pgrep -f "nginx") ]]; then echoContent red " ---> Nginx启动失败" echoContent red " ---> 请将下方日志反馈给开发者" nginx if grep -q "journalctl -xe" Nginx启动成功" fi elif [[ -n $(pgrep -f "nginx") ]] && [[ "$1" == "stop" ]]; then if [[ "${release}" == "alpine" ]]; then rc-service nginx stop else systemctl stop nginx fi sleep 0.5 if [[ -z ${btDomain} && -n $(pgrep -f "nginx") ]]; then pgrep -f "nginx" | xargs kill -9 fi echoContent green " ---> Nginx关闭成功" fi } # 定时任务更新tls证书 installCronTLS() { if [[ -z "${btDomain}" ]]; then echoContent skyBlue "\n进度 $1/${totalProgress} : 添加定时维护证书" crontab -l >/etc/v2ray-agent/backup_crontab.cron local historyCrontab historyCrontab=$(sed '/v2ray-agent/d;/acme.sh/d' /etc/v2ray-agent/backup_crontab.cron) echo "${historyCrontab}" >/etc/v2ray-agent/backup_crontab.cron echo "30 1 * * * /bin/bash /etc/v2ray-agent/install.sh RenewTLS >> /etc/v2ray-agent/crontab_tls.log 2>&1" >>/etc/v2ray-agent/backup_crontab.cron crontab /etc/v2ray-agent/backup_crontab.cron echoContent green "\n ---> 添加定时维护证书成功" fi } # 定时任务更新geo文件 installCronUpdateGeo() { if [[ "${coreInstallType}" == "1" ]]; then if crontab -l | grep -q "UpdateGeo"; then echoContent red "\n ---> 已添加自动更新定时任务，请不要重复添加" exit 0 fi echoContent skyBlue "\n进度 1/1 : 添加定时更新geo文件" crontab -l >/etc/v2ray-agent/backup_crontab.cron echo "35 1 * * * /bin/bash /etc/v2ray-agent/install.sh UpdateGeo >> /etc/v2ray-agent/crontab_tls.log 2>&1" >>/etc/v2ray-agent/backup_crontab.cron crontab /etc/v2ray-agent/backup_crontab.cron echoContent green "\n ---> 添加定时更新geo文件成功" fi } # 更新证书 renewalTLS() { if [[ -n $1 ]]; then echoContent skyBlue "\n进度 $1/1 : 更新证书" fi readAcmeTLS local domain=${currentHost} if [[ -z "${currentHost}" && -n "${tlsDomain}" ]]; then domain=${tlsDomain} fi if [[ -f "/etc/v2ray-agent/tls/ssl_type" ]]; then if grep -q "buypass" <"/etc/v2ray-agent/tls/ssl_type"; then sslRenewalDays=180 fi fi if [[ -d "$HOME/.acme.sh/${domain}_ecc" && -f "$HOME/.acme.sh/${domain}_ecc/${domain}.key" && -f "$HOME/.acme.sh/${domain}_ecc/${domain}.cer" ]] || [[ "${installedDNSAPIStatus}" == "true" ]]; then modifyTime= if [[ "${installedDNSAPIStatus}" == "true" ]]; then modifyTime=$(stat --format=%z "$HOME/.acme.sh/*.${dnsTLSDomain}_ecc/*.${dnsTLSDomain}.cer") else modifyTime=$(stat --format=%z "$HOME/.acme.sh/${domain}_ecc/${domain}.cer") fi modifyTime=$(date +%s -d "${modifyTime}") currentTime=$(date +%s) ((stampDiff = currentTime - modifyTime)) ((days = stampDiff / 86400)) ((remainingDays = sslRenewalDays - days)) tlsStatus=${remainingDays} if [[ ${remainingDays} -le 0 ]]; then tlsStatus="已过期" fi echoContent skyBlue " ---> 证书检查日期:$(date "+%F %H:%M:%S")" echoContent skyBlue " ---> 证书生成日期:$(date -d @"${modifyTime}" +"%F %H:%M:%S")" echoContent skyBlue " ---> 证书生成天数:${days}" echoContent skyBlue " ---> 证书剩余天数:"${tlsStatus} echoContent skyBlue " ---> 证书过期前最后一天自动更新，如更新失败请手动更新" if [[ ${remainingDays} -le 1 ]]; then echoContent yellow " ---> 重新生成证书" handleNginx stop if [[ "${coreInstallType}" == "1" ]]; then handleXray stop elif [[ "${coreInstallType}" == "2" ]]; then handleSingBox stop fi sudo "$HOME/.acme.sh/acme.sh" --cron --home "$HOME/.acme.sh" sudo "$HOME/.acme.sh/acme.sh" --installcert -d "${domain}" --fullchainpath /etc/v2ray-agent/tls/"${domain}.crt" --keypath /etc/v2ray-agent/tls/"${domain}.key" --ecc reloadCore handleNginx start else echoContent green " ---> 证书有效" fi elif [[ -f "/etc/v2ray-agent/tls/${tlsDomain}.crt" && -f "/etc/v2ray-agent/tls/${tlsDomain}.key" && -n $(cat "/etc/v2ray-agent/tls/${tlsDomain}.crt") ]]; then echoContent yellow " ---> 检测到使用自定义证书，无法执行renew操作。" else echoContent red " ---> 未安装" fi } # 安装 sing-box installSingBox() { readInstallType echoContent skyBlue "\n进度 $1/${totalProgress} : 安装sing-box" if [[ ! -f "/etc/v2ray-agent/sing-box/sing-box" ]]; then version=$(curl -s "https://api.github.com/repos/SagerNet/sing-box/releases?per_page=20" | jq -r ".[]|select (.prerelease==${prereleaseStatus})|.tag_name" | head -1) echoContent green " ---> 最新版本:${version}" if [[ "${release}" == "alpine" ]]; then wget -c -q -P /etc/v2ray-agent/sing-box/ "https://github.com/SagerNet/sing-box/releases/download/${version}/sing-box-${version/v/}${singBoxCoreCPUVendor}.tar.gz" else wget -c -q "${wgetShowProgressStatus}" -P /etc/v2ray-agent/sing-box/ "https://github.com/SagerNet/sing-box/releases/download/${version}/sing-box-${version/v/}${singBoxCoreCPUVendor}.tar.gz" fi if [[ ! -f "/etc/v2ray-agent/sing-box/sing-box-${version/v/}${singBoxCoreCPUVendor}.tar.gz" ]]; then read -r -p "核心下载失败，请重新尝试安装，是否重新尝试？[y/n]" downloadStatus if [[ "${downloadStatus}" == "y" ]]; then installSingBox "$1" fi else tar zxvf "/etc/v2ray-agent/sing-box/sing-box-${version/v/}${singBoxCoreCPUVendor}.tar.gz" -C "/etc/v2ray-agent/sing-box/" >/dev/null 2>&1 mv "/etc/v2ray-agent/sing-box/sing-box-${version/v/}${singBoxCoreCPUVendor}/sing-box" /etc/v2ray-agent/sing-box/sing-box rm -rf /etc/v2ray-agent/sing-box/sing-box-* chmod 655 /etc/v2ray-agent/sing-box/sing-box fi else echoContent green " ---> 当前版本:v$(/etc/v2ray-agent/sing-box/sing-box version | grep "sing-box version" | awk '{print $3}')" version=$(curl -s "https://api.github.com/repos/SagerNet/sing-box/releases?per_page=20" | jq -r ".[]|select (.prerelease==${prereleaseStatus})|.tag_name" | head -1) echoContent green " ---> 最新版本:${version}" if [[ -z "${lastInstallationConfig}" ]]; then read -r -p "是否更新、升级？[y/n]:" reInstallSingBoxStatus if [[ "${reInstallSingBoxStatus}" == "y" ]]; then rm -f /etc/v2ray-agent/sing-box/sing-box installSingBox "$1" fi fi fi } # 检查wget showProgress checkWgetShowProgress() { if [[ "${release}" != "alpine" ]]; then if find /usr/bin /usr/sbin | grep -q "/wget" && wget --help | grep -q show-progress; then wgetShowProgressStatus="--show-progress" fi fi } # 安装xray installXray() { readInstallType local prereleaseStatus=false if [[ "$2" == "true" ]]; then prereleaseStatus=true fi echoContent skyBlue "\n进度 $1/${totalProgress} : 安装Xray" if [[ ! -f "/etc/v2ray-agent/xray/xray" ]]; then version=$(curl -s "https://api.github.com/repos/XTLS/Xray-core/releases?per_page=5" | jq -r ".[]|select (.prerelease==${prereleaseStatus})|.tag_name" | head -1) echoContent green " ---> Xray-core版本:${version}" if [[ "${release}" == "alpine" ]]; then wget -c -q -P /etc/v2ray-agent/xray/ "https://github.com/XTLS/Xray-core/releases/download/${version}/${xrayCoreCPUVendor}.zip" else wget -c -q "${wgetShowProgressStatus}" -P /etc/v2ray-agent/xray/ "https://github.com/XTLS/Xray-core/releases/download/${version}/${xrayCoreCPUVendor}.zip" fi if [[ ! -f "/etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip" ]]; then read -r -p "核心下载失败，请重新尝试安装，是否重新尝试？[y/n]" downloadStatus if [[ "${downloadStatus}" == "y" ]]; then installXray "$1" fi else unzip -o "/etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip" -d /etc/v2ray-agent/xray >/dev/null rm -rf "/etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip" version=$(curl -s https://api.github.com/repos/Loyalsoldier/v2ray-rules-dat/releases?per_page=1 | jq -r '.[]|.tag_name') echoContent skyBlue "------------------------Version-------------------------------" echo "version:${version}" rm /etc/v2ray-agent/xray/geo* >/dev/null 2>&1 if [[ "${release}" == "alpine" ]]; then wget -c -q -P /etc/v2ray-agent/xray/ "https://github.com/Loyalsoldier/v2ray-rules-dat/releases/download/${version}/geosite.dat" wget -c -q -P /etc/v2ray-agent/xray/ "https://github.com/Loyalsoldier/v2ray-rules-dat/releases/download/${version}/geoip.dat" else wget -c -q "${wgetShowProgressStatus}" -P /etc/v2ray-agent/xray/ "https://github.com/Loyalsoldier/v2ray-rules-dat/releases/download/${version}/geosite.dat" wget -c -q "${wgetShowProgressStatus}" -P /etc/v2ray-agent/xray/ "https://github.com/Loyalsoldier/v2ray-rules-dat/releases/download/${version}/geoip.dat" fi chmod 655 /etc/v2ray-agent/xray/xray fi else if [[ -z "${lastInstallationConfig}" ]]; then echoContent green " ---> Xray-core版本:$(/etc/v2ray-agent/xray/xray --version | awk '{print $2}' | head -1)" read -r -p "是否更新、升级？[y/n]:" reInstallXrayStatus if [[ "${reInstallXrayStatus}" == "y" ]]; then rm -f /etc/v2ray-agent/xray/xray installXray "$1" "$2" fi fi fi } # xray版本管理 xrayVersionManageMenu() { echoContent skyBlue "\n进度 $1/${totalProgress} : Xray版本管理" if [[ "${coreInstallType}" != "1" ]]; then echoContent red " ---> 没有检测到安装目录，请执行脚本安装内容" exit 0 fi echoContent red "\n==============================================================" echoContent yellow "1.升级Xray-core" echoContent yellow "2.升级Xray-core 预览版" echoContent yellow "3.回退Xray-core" echoContent yellow "4.关闭Xray-core" echoContent yellow "5.打开Xray-core" echoContent yellow "6.重启Xray-core" echoContent yellow "7.更新geosite、geoip" echoMenuHint "8.设置自动更新geo文件" "每天凌晨更新" echoContent yellow "9.查看日志" echoContent red "==============================================================" read -r -p "请选择:" selectXrayType if [[ "${selectXrayType}" == "1" ]]; then prereleaseStatus=false updateXray elif [[ "${selectXrayType}" == "2" ]]; then prereleaseStatus=true updateXray elif [[ "${selectXrayType}" == "3" ]]; then echoContent yellow "\n1.只可以回退最近的五个版本" echoContent yellow "2.不保证回退后一定可以正常使用" echoContent yellow "3.如果回退的版本不支持当前的config，则会无法连接，谨慎操作" echoContent skyBlue "------------------------Version-------------------------------" curl -s "https://api.github.com/repos/XTLS/Xray-core/releases?per_page=5" | jq -r ".[]|select (.prerelease==false)|.tag_name" | awk '{print ""NR""":"$0}' echoContent skyBlue "--------------------------------------------------------------" read -r -p "请输入要回退的版本:" selectXrayVersionType version=$(curl -s "https://api.github.com/repos/XTLS/Xray-core/releases?per_page=5" | jq -r ".[]|select (.prerelease==false)|.tag_name" | awk '{print ""NR""":"$0}' | grep "${selectXrayVersionType}:" | awk -F "[:]" '{print $2}') if [[ -n "${version}" ]]; then updateXray "${version}" else echoContent red "\n ---> 输入有误，请重新输入" xrayVersionManageMenu 1 fi elif [[ "${selectXrayType}" == "4" ]]; then handleXray stop elif [[ "${selectXrayType}" == "5" ]]; then handleXray start elif [[ "${selectXrayType}" == "6" ]]; then reloadCore elif [[ "${selectXrayType}" == "7" ]]; then updateGeoSite elif [[ "${selectXrayType}" == "8" ]]; then installCronUpdateGeo elif [[ "${selectXrayType}" == "9" ]]; then checkLog 1 fi } # 更新 geosite updateGeoSite() { echoContent yellow "\n来源 https://github.com/Loyalsoldier/v2ray-rules-dat" version=$(curl -s https://api.github.com/repos/Loyalsoldier/v2ray-rules-dat/releases?per_page=1 | jq -r '.[]|.tag_name') echoContent skyBlue "------------------------Version-------------------------------" echo "version:${version}" rm ${configPath}../geo* >/dev/null if [[ "${release}" == "alpine" ]]; then wget -c -q -P ${configPath}../ "https://github.com/Loyalsoldier/v2ray-rules-dat/releases/download/${version}/geosite.dat" wget -c -q -P ${configPath}../ "https://github.com/Loyalsoldier/v2ray-rules-dat/releases/download/${version}/geoip.dat" else wget -c -q "${wgetShowProgressStatus}" -P ${configPath}../ "https://github.com/Loyalsoldier/v2ray-rules-dat/releases/download/${version}/geosite.dat" wget -c -q "${wgetShowProgressStatus}" -P ${configPath}../ "https://github.com/Loyalsoldier/v2ray-rules-dat/releases/download/${version}/geoip.dat" fi reloadCore echoContent green " ---> 更新完毕" } # 更新Xray updateXray() { readInstallType if [[ -z "${coreInstallType}" || "${coreInstallType}" != "1" ]]; then if [[ -n "$1" ]]; then version=$1 else version=$(curl -s "https://api.github.com/repos/XTLS/Xray-core/releases?per_page=5" | jq -r ".[]|select (.prerelease==${prereleaseStatus})|.tag_name" | head -1) fi echoContent green " ---> Xray-core版本:${version}" if [[ "${release}" == "alpine" ]]; then wget -c -q -P /etc/v2ray-agent/xray/ "https://github.com/XTLS/Xray-core/releases/download/${version}/${xrayCoreCPUVendor}.zip" else wget -c -q "${wgetShowProgressStatus}" -P /etc/v2ray-agent/xray/ "https://github.com/XTLS/Xray-core/releases/download/${version}/${xrayCoreCPUVendor}.zip" fi unzip -o "/etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip" -d /etc/v2ray-agent/xray >/dev/null rm -rf "/etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip" chmod 655 /etc/v2ray-agent/xray/xray handleXray restart else echoContent green " ---> 当前版本:v$(/etc/v2ray-agent/xray/xray --version | awk '{print $2}' | head -1)" remoteVersion=$(curl -s "https://api.github.com/repos/XTLS/Xray-core/releases?per_page=5" | jq -r ".[]|select (.prerelease==${prereleaseStatus})|.tag_name" | head -1) echoContent green " ---> 最新版本:${remoteVersion}" if [[ -n "$1" ]]; then version=$1 else version=$(curl -s "https://api.github.com/repos/XTLS/Xray-core/releases?per_page=10" | jq -r ".[]|select (.prerelease==${prereleaseStatus})|.tag_name" | head -1) fi if [[ -n "$1" ]]; then read -r -p "回退版本为${version}，是否继续？[y/n]:" rollbackXrayStatus if [[ "${rollbackXrayStatus}" == "y" ]]; then echoContent green " ---> 当前Xray-core版本:$(/etc/v2ray-agent/xray/xray --version | awk '{print $2}' | head -1)" handleXray stop rm -f /etc/v2ray-agent/xray/xray updateXray "${version}" else echoContent green " ---> 放弃回退版本" fi elif [[ "${version}" == "v$(/etc/v2ray-agent/xray/xray --version | awk '{print $2}' | head -1)" ]]; then read -r -p "当前版本与最新版相同，是否重新安装？[y/n]:" reInstallXrayStatus if [[ "${reInstallXrayStatus}" == "y" ]]; then handleXray stop rm -f /etc/v2ray-agent/xray/xray updateXray else echoContent green " ---> 放弃重新安装" fi else read -r -p "最新版本为:${version}，是否更新？[y/n]:" installXrayStatus if [[ "${installXrayStatus}" == "y" ]]; then rm /etc/v2ray-agent/xray/xray updateXray else echoContent green " ---> 放弃更新" fi fi fi } # 验证整个服务是否可用 checkGFWStatue() { readInstallType echoContent skyBlue "\n进度 $1/${totalProgress} : 验证服务启动状态" if [[ "${coreInstallType}" == "1" ]] && isManagedXrayRunning; then echoContent green " ---> 服务启动成功" elif [[ "${coreInstallType}" == "2" ]] && isManagedSingBoxRunning; then echoContent green " ---> 服务启动成功" else echoContent red " ---> 服务启动失败，请检查终端是否有日志打印" exit 0 fi } # 安装alpine开机启动 installAlpineStartup() { local serviceType=$1 local serviceName=$2 if [[ "${serviceType}" == "sing-box" ]]; then cat <"/etc/init.d/${serviceName}" #!/sbin/openrc-run description="sing-box service" command="${singBoxBinaryPath}" command_args="run -c /etc/v2ray-agent/sing-box/conf/config.json" command_background=true pidfile="/var/run/sing-box.pid" EOF elif [[ "${serviceType}" == "xray" ]]; then cat <"/etc/init.d/${serviceName}" #!/sbin/openrc-run description="xray service" command="${xrayBinaryPath}" command_args="run -confdir /etc/v2ray-agent/xray/conf" command_background=true pidfile="/var/run/xray.pid" EOF fi chmod +x "/etc/init.d/${serviceName}" } # sing-box开机自启 installSingBoxService() { echoContent skyBlue "\n进度 $1/${totalProgress} : 配置sing-box开机自启" execStart="${singBoxBinaryPath} run -c /etc/v2ray-agent/sing-box/conf/config.json" if hasSystemd; then cleanupLegacyManagedSystemdUnit "sing-box" "${singBoxBinaryPath}" rm -rf "${singBoxSystemdServicePath}" touch "${singBoxSystemdServicePath}" cat <"${singBoxSystemdServicePath}" [Unit] Description=Sing-Box Service Documentation=https://sing-box.sagernet.org After=network.target nss-lookup.target [Service] User=root WorkingDirectory=/root CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_SYS_PTRACE CAP_DAC_READ_SEARCH AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_SYS_PTRACE CAP_DAC_READ_SEARCH ExecStart=${execStart} ExecReload=/bin/kill -HUP $MAINPID Restart=on-failure RestartSec=10 LimitNPROC=infinity LimitNOFILE=infinity [Install] WantedBy=multi-user.target EOF bootStartup "${singBoxServiceName}.service" elif [[ "${release}" == "alpine" ]]; then cleanupLegacyManagedOpenrcUnit "sing-box" "${singBoxBinaryPath}" installAlpineStartup "sing-box" "${singBoxServiceName}" bootStartup "${singBoxServiceName}" fi echoContent green " ---> 配置sing-box开机启动完毕" } # Xray开机自启 installXrayService() { echoContent skyBlue "\n进度 $1/${totalProgress} : 配置Xray开机自启" execStart="${xrayBinaryPath} run -confdir /etc/v2ray-agent/xray/conf" if hasSystemd; then cleanupLegacyManagedSystemdUnit "xray" "${xrayBinaryPath}" rm -rf "${xraySystemdServicePath}" touch "${xraySystemdServicePath}" cat <"${xraySystemdServicePath}" [Unit] Description=Xray Service Documentation=https://github.com/xtls After=network.target nss-lookup.target [Service] User=root ExecStart=${execStart} Restart=on-failure RestartPreventExitStatus=23 LimitNPROC=infinity LimitNOFILE=infinity [Install] WantedBy=multi-user.target EOF bootStartup "${xrayServiceName}.service" echoContent green " ---> 配置Xray开机自启成功" elif [[ "${release}" == "alpine" ]]; then cleanupLegacyManagedOpenrcUnit "xray" "${xrayBinaryPath}" installAlpineStartup "xray" "${xrayServiceName}" bootStartup "${xrayServiceName}" fi } # 操作Hysteria handleHysteria() { # shellcheck disable=SC2010 if find /bin /usr/bin | grep -q systemctl && ls /etc/systemd/system/ | grep -q hysteria.service; then if [[ -z $(pgrep -f "hysteria/hysteria") ]] && [[ "$1" == "start" ]]; then systemctl start hysteria.service elif [[ -n $(pgrep -f "hysteria/hysteria") ]] && [[ "$1" == "stop" ]]; then systemctl stop hysteria.service fi fi sleep 0.8 if [[ "$1" == "start" ]]; then if [[ -n $(pgrep -f "hysteria/hysteria") ]]; then echoContent green " ---> Hysteria启动成功" else echoContent red "Hysteria启动失败" echoContent red "请手动执行【/etc/v2ray-agent/hysteria/hysteria --log-level debug -c /etc/v2ray-agent/hysteria/conf/config.json server】，查看错误日志" exit 0 fi elif [[ "$1" == "stop" ]]; then if [[ -z $(pgrep -f "hysteria/hysteria") ]]; then echoContent green " ---> Hysteria关闭成功" else echoContent red "Hysteria关闭失败" echoContent red "请手动执行【ps -ef|grep -v grep|grep hysteria|awk '{print \$2}'|xargs kill -9】" exit 0 fi fi } # 操作sing-box handleSingBox() { if [[ "$1" == "restart" ]]; then if [[ -f "${singBoxSystemdServicePath}" ]]; then systemctl stop "${singBoxServiceName}.service" >/dev/null 2>&1 elif [[ -f "${singBoxOpenrcServicePath}" ]]; then rc-service "${singBoxServiceName}" stop >/dev/null 2>&1 fi if isManagedSingBoxRunning; then pkill -f "${singBoxBinaryPath}" >/dev/null 2>&1 fi sleep 1 if [[ -f "${singBoxSystemdServicePath}" ]]; then singBoxMergeConfig systemctl start "${singBoxServiceName}.service" elif [[ -f "${singBoxOpenrcServicePath}" ]]; then singBoxMergeConfig rc-service "${singBoxServiceName}" start fi sleep 1 if isManagedSingBoxRunning; then echoContent green " ---> sing-box重启成功" else echoContent red "sing-box重启失败" echoContent yellow "请手动执行【 /etc/v2ray-agent/sing-box/sing-box merge config.json -C /etc/v2ray-agent/sing-box/conf/config/ -D /etc/v2ray-agent/sing-box/conf/ 】，查看错误日志" echo echoContent yellow "如上面命令没有错误，请手动执行【 /etc/v2ray-agent/sing-box/sing-box run -c /etc/v2ray-agent/sing-box/conf/config.json 】，查看错误日志" exit 0 fi return 0 fi if [[ -f "${singBoxSystemdServicePath}" ]]; then if ! isManagedSingBoxRunning && [[ "$1" == "start" ]]; then singBoxMergeConfig systemctl start "${singBoxServiceName}.service" elif [[ "$1" == "stop" ]]; then systemctl stop "${singBoxServiceName}.service" >/dev/null 2>&1 fi elif [[ -f "${singBoxOpenrcServicePath}" ]]; then if ! isManagedSingBoxRunning && [[ "$1" == "start" ]]; then singBoxMergeConfig rc-service "${singBoxServiceName}" start elif [[ "$1" == "stop" ]]; then rc-service "${singBoxServiceName}" stop >/dev/null 2>&1 fi fi if [[ "$1" == "stop" ]] && isManagedSingBoxRunning; then pkill -f "${singBoxBinaryPath}" >/dev/null 2>&1 fi sleep 1 if [[ "$1" == "start" ]]; then if isManagedSingBoxRunning; then echoContent green " ---> sing-box启动成功" else echoContent red "sing-box启动失败" echoContent yellow "请手动执行【 /etc/v2ray-agent/sing-box/sing-box merge config.json -C /etc/v2ray-agent/sing-box/conf/config/ -D /etc/v2ray-agent/sing-box/conf/ 】，查看错误日志" echo echoContent yellow "如上面命令没有错误，请手动执行【 /etc/v2ray-agent/sing-box/sing-box run -c /etc/v2ray-agent/sing-box/conf/config.json 】，查看错误日志" exit 0 fi elif [[ "$1" == "stop" ]]; then if ! isManagedSingBoxRunning; then echoContent green " ---> sing-box关闭成功" else echoContent red " ---> sing-box关闭失败" echoContent red "请手动执行【ps -ef|grep -v grep|grep sing-box|awk '{print \$2}'|xargs kill -9】" exit 0 fi fi } # 操作xray handleXray() { if [[ "$1" == "restart" ]]; then if hasSystemd && [[ -f "${xraySystemdServicePath}" ]]; then systemctl stop "${xrayServiceName}.service" >/dev/null 2>&1 elif [[ -f "${xrayOpenrcServicePath}" ]]; then rc-service "${xrayServiceName}" stop >/dev/null 2>&1 fi if isManagedXrayRunning; then pkill -f "${xrayBinaryPath}" >/dev/null 2>&1 fi sleep 0.8 if hasSystemd && [[ -f "${xraySystemdServicePath}" ]]; then systemctl start "${xrayServiceName}.service" elif [[ -f "${xrayOpenrcServicePath}" ]]; then rc-service "${xrayServiceName}" start fi sleep 0.8 if isManagedXrayRunning; then echoContent green " ---> Xray重启成功" else local xrayDebugOutput= if command -v timeout >/dev/null 2>&1; then xrayDebugOutput=$(timeout 8 "${xrayBinaryPath}" -confdir /etc/v2ray-agent/xray/conf 2>&1 | head -n 20) else xrayDebugOutput=$("${xrayBinaryPath}" -confdir /etc/v2ray-agent/xray/conf 2>&1 | head -n 20) fi echoContent red "Xray重启失败" if [[ -n "${xrayDebugOutput}" ]]; then echoContent red "Xray错误输出:" echoContent red "${xrayDebugOutput}" fi echoContent red "请手动执行以下的命令后【/etc/v2ray-agent/xray/xray -confdir /etc/v2ray-agent/xray/conf】将错误日志进行反馈" exit 0 fi return 0 fi if hasSystemd && [[ -f "${xraySystemdServicePath}" ]]; then if ! isManagedXrayRunning && [[ "$1" == "start" ]]; then systemctl start "${xrayServiceName}.service" elif [[ "$1" == "stop" ]]; then systemctl stop "${xrayServiceName}.service" >/dev/null 2>&1 fi elif [[ -f "${xrayOpenrcServicePath}" ]]; then if ! isManagedXrayRunning && [[ "$1" == "start" ]]; then rc-service "${xrayServiceName}" start elif [[ "$1" == "stop" ]]; then rc-service "${xrayServiceName}" stop >/dev/null 2>&1 fi fi if [[ "$1" == "stop" ]] && isManagedXrayRunning; then pkill -f "${xrayBinaryPath}" >/dev/null 2>&1 fi sleep 0.8 if [[ "$1" == "start" ]]; then if isManagedXrayRunning; then echoContent green " ---> Xray启动成功" else local xrayDebugOutput= if command -v timeout >/dev/null 2>&1; then xrayDebugOutput=$(timeout 8 "${xrayBinaryPath}" -confdir /etc/v2ray-agent/xray/conf 2>&1 | head -n 20) else xrayDebugOutput=$("${xrayBinaryPath}" -confdir /etc/v2ray-agent/xray/conf 2>&1 | head -n 20) fi echoContent red "Xray启动失败" if [[ -n "${xrayDebugOutput}" ]]; then echoContent red "Xray错误输出:" echoContent red "${xrayDebugOutput}" fi echoContent red "请手动执行以下的命令后【/etc/v2ray-agent/xray/xray -confdir /etc/v2ray-agent/xray/conf】将错误日志进行反馈" exit 0 fi elif [[ "$1" == "stop" ]]; then if ! isManagedXrayRunning; then echoContent green " ---> Xray关闭成功" else echoContent red "xray关闭失败" echoContent red "请手动执行【ps -ef|grep -v grep|grep xray|awk '{print \$2}'|xargs kill -9】" exit 0 fi fi } # 读取Xray用户数据并初始化 initXrayClients() { local type=",$1," local newUUID=$2 local newEmail=$3 if [[ -n "${newUUID}" ]]; then local newUser= newUser="{\"id\":\"${uuid}\",\"flow\":\"xtls-rprx-vision\",\"email\":\"${newEmail}-VLESS_TCP/TLS_Vision\"}" currentClients=$(echo "${currentClients}" | jq -r ". +=[${newUser}]") fi local users= users=[] while read -r user; do uuid=$(echo "${user}" | jq -r .id//.uuid) email=$(echo "${user}" | jq -r .email//.name | awk -F "[-]" '{print $1}') currentUser= if echo "${type}" | grep -q "0"; then currentUser="{\"id\":\"${uuid}\",\"flow\":\"xtls-rprx-vision\",\"email\":\"${email}-VLESS_TCP/TLS_Vision\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # VLESS WS if echo "${type}" | grep -q ",1,"; then currentUser="{\"id\":\"${uuid}\",\"email\":\"${email}-VLESS_WS\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # VLESS XHTTP if echo "${type}" | grep -q ",12,"; then currentUser="{\"id\":\"${uuid}\",\"email\":\"${email}-VLESS_Reality_XHTTP\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # trojan grpc if echo "${type}" | grep -q ",2,"; then currentUser="{\"password\":\"${uuid}\",\"email\":\"${email}-Trojan_gRPC\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # VMess WS if echo "${type}" | grep -q ",3,"; then currentUser="{\"id\":\"${uuid}\",\"email\":\"${email}-VMess_WS\",\"alterId\": 0}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # trojan tcp if echo "${type}" | grep -q ",4,"; then currentUser="{\"password\":\"${uuid}\",\"email\":\"${email}-trojan_tcp\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # vless grpc if echo "${type}" | grep -q ",5,"; then currentUser="{\"id\":\"${uuid}\",\"email\":\"${email}-vless_grpc\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # hysteria if echo "${type}" | grep -q ",6,"; then currentUser="{\"password\":\"${uuid}\",\"name\":\"${email}-singbox_hysteria2\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # vless reality vision if echo "${type}" | grep -q ",7,"; then currentUser="{\"id\":\"${uuid}\",\"email\":\"${email}-vless_reality_vision\",\"flow\":\"xtls-rprx-vision\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # vless reality grpc if echo "${type}" | grep -q ",8,"; then currentUser="{\"id\":\"${uuid}\",\"email\":\"${email}-vless_reality_grpc\",\"flow\":\"\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # tuic if echo "${type}" | grep -q ",9,"; then currentUser="{\"uuid\":\"${uuid}\",\"password\":\"${uuid}\",\"name\":\"${email}-singbox_tuic\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi done < <(echo "${currentClients}" | jq -c '.[]') echo "${users}" } # 读取singbox用户数据并初始化 initSingBoxClients() { local type=",$1," local newUUID=$2 local newName=$3 if [[ -n "${newUUID}" ]]; then local newUser= newUser="{\"uuid\":\"${newUUID}\",\"flow\":\"xtls-rprx-vision\",\"name\":\"${newName}-VLESS_TCP/TLS_Vision\"}" currentClients=$(echo "${currentClients}" | jq -r ". +=[${newUser}]") fi local users= users=[] while read -r user; do uuid=$(echo "${user}" | jq -r .uuid//.id//.password) name=$(echo "${user}" | jq -r .name//.email//.username | awk -F "[-]" '{print $1}') currentUser= # VLESS Vision if echo "${type}" | grep -q ",0,"; then currentUser="{\"uuid\":\"${uuid}\",\"flow\":\"xtls-rprx-vision\",\"name\":\"${name}-VLESS_TCP/TLS_Vision\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # VLESS WS if echo "${type}" | grep -q ",1,"; then currentUser="{\"uuid\":\"${uuid}\",\"name\":\"${name}-VLESS_WS\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # VMess ws if echo "${type}" | grep -q ",3,"; then currentUser="{\"uuid\":\"${uuid}\",\"name\":\"${name}-VMess_WS\",\"alterId\": 0}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # trojan if echo "${type}" | grep -q ",4,"; then currentUser="{\"password\":\"${uuid}\",\"name\":\"${name}-Trojan_TCP\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # VLESS Reality Vision if echo "${type}" | grep -q ",7,"; then currentUser="{\"uuid\":\"${uuid}\",\"flow\":\"xtls-rprx-vision\",\"name\":\"${name}-VLESS_Reality_Vision\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # VLESS Reality gRPC if echo "${type}" | grep -q ",8,"; then currentUser="{\"uuid\":\"${uuid}\",\"name\":\"${name}-VLESS_Reality_gPRC\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # hysteria2 if echo "${type}" | grep -q ",6,"; then currentUser="{\"password\":\"${uuid}\",\"name\":\"${name}-singbox_hysteria2\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # tuic if echo "${type}" | grep -q ",9,"; then currentUser="{\"uuid\":\"${uuid}\",\"password\":\"${uuid}\",\"name\":\"${name}-singbox_tuic\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # naive if echo "${type}" | grep -q ",10,"; then currentUser="{\"password\":\"${uuid}\",\"username\":\"${name}-singbox_naive\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # VMess HTTPUpgrade if echo "${type}" | grep -q ",11,"; then currentUser="{\"uuid\":\"${uuid}\",\"name\":\"${name}-VMess_HTTPUpgrade\",\"alterId\": 0}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi # anytls if echo "${type}" | grep -q ",13,"; then currentUser="{\"password\":\"${uuid}\",\"name\":\"${name}-anytls\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi if echo "${type}" | grep -q ",20,"; then currentUser="{\"username\":\"${uuid}\",\"password\":\"${uuid}\"}" users=$(echo "${users}" | jq -r ". +=[${currentUser}]") fi done < <(echo "${currentClients}" | jq -c '.[]') echo "${users}" } managedMultiRealityNodeFiles=() managedMultiRealityNodeIds=() managedMultiRealityNodeLabels=() managedMultiRealityNodePorts=() managedMultiRealityNodeTargets=() managedMultiRealityNodeUserCounts=() managedMultiRealitySelectedDisplayName= singBoxRealityDNSNodeFiles=() singBoxRealityDNSNodeIds=() singBoxRealityDNSNodeDisplayNames=() singBoxRealityDNSNodeLabels=() singBoxRealityDNSNodePorts=() singBoxRealityDNSNodeTargets=() singBoxRealityDNSNodeInboundTags=() singBoxRealityDNSNodeDNSFiles=() managedMultiAnyTLSNodeFiles=() managedMultiAnyTLSNodeIds=() managedMultiAnyTLSNodeLabels=() managedMultiAnyTLSNodePorts=() managedMultiAnyTLSNodeDomains=() managedMultiAnyTLSNodeUserCounts=() managedMultiAnyTLSSelectedFile= managedMultiAnyTLSSelectedId= managedMultiAnyTLSSelectedPort= managedMultiAnyTLSSelectedDomain= managedMultiAnyTLSSelectedInboundTag= managedMultiAnyTLSSelectedDNSConfigFile= listManagedMultiRealityFiles() { if [[ "${coreInstallType}" == "1" ]]; then find /etc/v2ray-agent/xray/conf -maxdepth 1 -type f -name "${managedMultiRealityPrefix}*.json" 2>/dev/null | sort elif [[ "${coreInstallType}" == "2" ]]; then find /etc/v2ray-agent/sing-box/conf/config -maxdepth 1 -type f -name "${managedMultiRealityPrefix}*.json" 2>/dev/null | sort fi } listManagedMultiAnyTLSFiles() { if [[ "${coreInstallType}" == "2" ]]; then find /etc/v2ray-agent/sing-box/conf/config -maxdepth 1 -type f -name "${managedMultiAnyTLSPrefix}*.json" 2>/dev/null | sort fi } countManagedMultiAnyTLSNodes() { local count=0 while read -r _file; do count=$((count + 1)) done < <(listManagedMultiAnyTLSFiles) echo "${count}" } getManagedMultiAnyTLSDNSConfigFileById() { local nodeId=$1 if [[ "${coreInstallType}" == "2" ]]; then echo "/etc/v2ray-agent/sing-box/conf/config/${managedMultiAnyTLSDNSPrefix}${nodeId}.json" fi } getSingBoxMainAnyTLSDNSConfigFile() { echo "/etc/v2ray-agent/sing-box/conf/config/33_anytls_dns_main.json" } buildManagedMultiAnyTLSEntries() { managedMultiAnyTLSNodeFiles=() managedMultiAnyTLSNodeIds=() managedMultiAnyTLSNodeLabels=() managedMultiAnyTLSNodePorts=() managedMultiAnyTLSNodeDomains=() managedMultiAnyTLSNodeUserCounts=() local file= local index=0 while read -r file; do [[ -z "${file}" ]] && continue local nodeId= local port= local domain= local userCount= local dnsConfigFile= local dnsServer= local dnsSummary= nodeId=$(basename "${file}" .json) nodeId=${nodeId#${managedMultiAnyTLSPrefix}} port=$(jq -r '.inbounds[0].listen_port // ""' "${file}") domain=$(jq -r '.inbounds[0].tls.server_name // ""' "${file}") userCount=$(jq -r '.inbounds[0].users | length' "${file}") dnsConfigFile=$(getManagedMultiAnyTLSDNSConfigFileById "${nodeId}") if [[ -n "${dnsConfigFile}" && -f "${dnsConfigFile}" ]]; then dnsServer=$(readManagedMultiRealityDNSServer "${dnsConfigFile}") if [[ -n "${dnsServer}" ]]; then dnsSummary=" DNS:${dnsServer}" else dnsSummary=" DNS:已配置" fi fi managedMultiAnyTLSNodeFiles[index]="${file}" managedMultiAnyTLSNodeIds[index]="${nodeId}" managedMultiAnyTLSNodePorts[index]="${port}" managedMultiAnyTLSNodeDomains[index]="${domain}" managedMultiAnyTLSNodeUserCounts[index]="${userCount}" managedMultiAnyTLSNodeLabels[index]="端口:${port} 域名:${domain} 用户:${userCount}${dnsSummary}" index=$((index + 1)) done < <(listManagedMultiAnyTLSFiles) } selectManagedMultiAnyTLSNode() { local actionLabel=$1 buildManagedMultiAnyTLSEntries if [[ ${#managedMultiAnyTLSNodeFiles[@]} -eq 0 ]]; then echoContent yellow " ---> 当前没有已部署的多实例 AnyTLS 节点" exit 0 fi echoContent yellow "\n请选择要${actionLabel}的多实例 AnyTLS 节点" local index=0 for index in "${!managedMultiAnyTLSNodeFiles[@]}"; do echoContent green "$((index + 1)).${managedMultiAnyTLSNodeIds[${index}]} ${managedMultiAnyTLSNodeLabels[${index}]}" done read -r -p "请选择节点编号:" managedMultiAnyTLSNodeIndex if ! [[ "${managedMultiAnyTLSNodeIndex}" =~ ^[0-9]+$ ]] || ((managedMultiAnyTLSNodeIndex < 1 || managedMultiAnyTLSNodeIndex > ${#managedMultiAnyTLSNodeFiles[@]})); then echoContent red " ---> 选择错误" exit 0 fi managedMultiAnyTLSNodeIndex=$((managedMultiAnyTLSNodeIndex - 1)) managedMultiAnyTLSSelectedFile="${managedMultiAnyTLSNodeFiles[${managedMultiAnyTLSNodeIndex}]}" managedMultiAnyTLSSelectedId="${managedMultiAnyTLSNodeIds[${managedMultiAnyTLSNodeIndex}]}" managedMultiAnyTLSSelectedPort="${managedMultiAnyTLSNodePorts[${managedMultiAnyTLSNodeIndex}]}" managedMultiAnyTLSSelectedDomain="${managedMultiAnyTLSNodeDomains[${managedMultiAnyTLSNodeIndex}]}" managedMultiAnyTLSSelectedInboundTag="$(getManagedMultiRealityInboundTag "${managedMultiAnyTLSSelectedFile}")" managedMultiAnyTLSSelectedDNSConfigFile="$(getManagedMultiAnyTLSDNSConfigFileById "${managedMultiAnyTLSSelectedId}")" } countManagedMultiRealityNodes() { local count=0 while read -r _file; do count=$((count + 1)) done < <(listManagedMultiRealityFiles) echo "${count}" } getManagedMultiRealityKeyFile() { local configFile=$1 echo "${configFile%.json}${managedMultiRealityKeySuffix}" } getManagedMultiRealityDNSConfigFileById() { local nodeId=$1 if [[ "${coreInstallType}" == "2" ]]; then echo "/etc/v2ray-agent/sing-box/conf/config/${managedMultiRealityDNSPrefix}${nodeId}.json" fi } getSingBoxMainRealityDNSConfigFile() { echo "/etc/v2ray-agent/sing-box/conf/config/31_VLESS_vision_reality_dns_main.json" } getManagedMultiRealityInboundTag() { local configFile=$1 jq -r '.inbounds[0].tag // ""' "${configFile}" } readManagedMultiRealityDNSServer() { local dnsConfigFile=$1 if [[ -f "${dnsConfigFile}" ]]; then jq -r '.dns.servers[]? | select(.tag | startswith("managedMultiDNS_")) | .server // empty' "${dnsConfigFile}" | head -n 1 fi } persistManagedMultiRealityKeyInfo() { local configFile=$1 local publicKey=$2 local keyFile= keyFile=$(getManagedMultiRealityKeyFile "${configFile}") cat <"${keyFile}" publicKey:${publicKey} shortId:${managedMultiRealityShortID} EOF } readManagedMultiRealityPublicKey() { local configFile=$1 local keyFile= keyFile=$(getManagedMultiRealityKeyFile "${configFile}") if [[ -f "${keyFile}" ]]; then grep '^publicKey:' <"${keyFile}" | awk -F "[:]" '{print $2}' | tail -n 1 fi } buildManagedMultiRealityEntries() { managedMultiRealityNodeFiles=() managedMultiRealityNodeIds=() managedMultiRealityNodeLabels=() managedMultiRealityNodePorts=() managedMultiRealityNodeTargets=() managedMultiRealityNodeUserCounts=() local file= local index=0 while read -r file; do [[ -z "${file}" ]] && continue local nodeId= local port= local target= local userCount= local dnsConfigFile= local dnsServer= local dnsSummary= nodeId=$(basename "${file}" .json) nodeId=${nodeId#${managedMultiRealityPrefix}} if [[ "${coreInstallType}" == "1" ]]; then port=$(jq -r '.inbounds[0].port // ""' "${file}") target=$(jq -r '.inbounds[0].streamSettings.realitySettings.dest // .inbounds[0].streamSettings.realitySettings.target // ""' "${file}") userCount=$(jq -r '.inbounds[0].settings.clients | length' "${file}") elif [[ "${coreInstallType}" == "2" ]]; then port=$(jq -r '.inbounds[0].listen_port // ""' "${file}") target="$(jq -r '.inbounds[0].tls.reality.handshake.server // ""' "${file}"):$(jq -r '.inbounds[0].tls.reality.handshake.server_port // ""' "${file}")" userCount=$(jq -r '.inbounds[0].users | length' "${file}") fi managedMultiRealityNodeFiles[index]="${file}" managedMultiRealityNodeIds[index]="${nodeId}" managedMultiRealityNodePorts[index]="${port}" managedMultiRealityNodeTargets[index]="${target}" managedMultiRealityNodeUserCounts[index]="${userCount}" dnsConfigFile=$(getManagedMultiRealityDNSConfigFileById "${nodeId}") if [[ -n "${dnsConfigFile}" && -f "${dnsConfigFile}" ]]; then dnsServer=$(readManagedMultiRealityDNSServer "${dnsConfigFile}") if [[ -n "${dnsServer}" ]]; then dnsSummary=" DNS:${dnsServer}" else dnsSummary=" DNS:已配置" fi else dnsSummary= fi managedMultiRealityNodeLabels[index]="端口:${port} 目标:${target} 用户:${userCount}${dnsSummary}" index=$((index + 1)) done < <(listManagedMultiRealityFiles) } selectManagedMultiRealityNode() { local actionLabel=$1 buildManagedMultiRealityEntries if [[ ${#managedMultiRealityNodeFiles[@]} -eq 0 ]]; then echoContent yellow " ---> 当前没有已部署的多实例 Reality 节点" exit 0 fi echoContent yellow "\n请选择要${actionLabel}的多实例 Reality 节点" local index=0 for index in "${!managedMultiRealityNodeFiles[@]}"; do echoContent green "$((index + 1)).${managedMultiRealityNodeIds[${index}]} ${managedMultiRealityNodeLabels[${index}]}" done read -r -p "请选择节点编号:" managedMultiRealityNodeIndex if ! [[ "${managedMultiRealityNodeIndex}" =~ ^[0-9]+$ ]] || ((managedMultiRealityNodeIndex < 1 || managedMultiRealityNodeIndex > ${#managedMultiRealityNodeFiles[@]})); then echoContent red " ---> 选择错误" exit 0 fi managedMultiRealityNodeIndex=$((managedMultiRealityNodeIndex - 1)) managedMultiRealitySelectedFile="${managedMultiRealityNodeFiles[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedId="${managedMultiRealityNodeIds[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedDisplayName="${managedMultiRealitySelectedId}" managedMultiRealitySelectedPort="${managedMultiRealityNodePorts[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedTarget="${managedMultiRealityNodeTargets[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedInboundTag="$(getManagedMultiRealityInboundTag "${managedMultiRealitySelectedFile}")" } buildSingBoxRealityDNSEntries() { singBoxRealityDNSNodeFiles=() singBoxRealityDNSNodeIds=() singBoxRealityDNSNodeDisplayNames=() singBoxRealityDNSNodeLabels=() singBoxRealityDNSNodePorts=() singBoxRealityDNSNodeTargets=() singBoxRealityDNSNodeInboundTags=() singBoxRealityDNSNodeDNSFiles=() if [[ "${coreInstallType}" != "2" ]]; then return fi local index=0 local mainFile="${singBoxConfigPath}07_VLESS_vision_reality_inbounds.json" if [[ -f "${mainFile}" ]]; then local dnsConfigFile= local dnsServer= local dnsSummary= dnsConfigFile=$(getSingBoxMainRealityDNSConfigFile) if [[ -f "${dnsConfigFile}" ]]; then dnsServer=$(readManagedMultiRealityDNSServer "${dnsConfigFile}") if [[ -n "${dnsServer}" ]]; then dnsSummary=" DNS:${dnsServer}" else dnsSummary=" DNS:已配置" fi fi singBoxRealityDNSNodeFiles[index]="${mainFile}" singBoxRealityDNSNodeIds[index]="main_reality" singBoxRealityDNSNodeDisplayNames[index]="主节点" singBoxRealityDNSNodePorts[index]="$(jq -r '.inbounds[0].listen_port // ""' "${mainFile}")" singBoxRealityDNSNodeTargets[index]="$(jq -r '.inbounds[0].tls.reality.handshake.server // ""' "${mainFile}")":"$(jq -r '.inbounds[0].tls.reality.handshake.server_port // ""' "${mainFile}")" singBoxRealityDNSNodeInboundTags[index]="$(getManagedMultiRealityInboundTag "${mainFile}")" singBoxRealityDNSNodeDNSFiles[index]="${dnsConfigFile}" singBoxRealityDNSNodeLabels[index]="主节点 端口:${singBoxRealityDNSNodePorts[${index}]} 目标:${singBoxRealityDNSNodeTargets[${index}]} 用户:$(jq -r '.inbounds[0].users | length' "${mainFile}")${dnsSummary}" index=$((index + 1)) fi buildManagedMultiRealityEntries local multiIndex=0 for multiIndex in "${!managedMultiRealityNodeFiles[@]}"; do singBoxRealityDNSNodeFiles[index]="${managedMultiRealityNodeFiles[${multiIndex}]}" singBoxRealityDNSNodeIds[index]="${managedMultiRealityNodeIds[${multiIndex}]}" singBoxRealityDNSNodeDisplayNames[index]="${managedMultiRealityNodeIds[${multiIndex}]}" singBoxRealityDNSNodeLabels[index]="${managedMultiRealityNodeLabels[${multiIndex}]}" singBoxRealityDNSNodePorts[index]="${managedMultiRealityNodePorts[${multiIndex}]}" singBoxRealityDNSNodeTargets[index]="${managedMultiRealityNodeTargets[${multiIndex}]}" singBoxRealityDNSNodeInboundTags[index]="$(getManagedMultiRealityInboundTag "${managedMultiRealityNodeFiles[${multiIndex}]}")" singBoxRealityDNSNodeDNSFiles[index]="$(getManagedMultiRealityDNSConfigFileById "${managedMultiRealityNodeIds[${multiIndex}]}")" index=$((index + 1)) done local anyTLSMainFile="${singBoxConfigPath}13_anytls_inbounds.json" if [[ -f "${anyTLSMainFile}" ]]; then local anyTLSDNSConfigFile= local anyTLSDNSServer= local anyTLSDNSSummary= anyTLSDNSConfigFile=$(getSingBoxMainAnyTLSDNSConfigFile) if [[ -f "${anyTLSDNSConfigFile}" ]]; then anyTLSDNSServer=$(readManagedMultiRealityDNSServer "${anyTLSDNSConfigFile}") if [[ -n "${anyTLSDNSServer}" ]]; then anyTLSDNSSummary=" DNS:${anyTLSDNSServer}" else anyTLSDNSSummary=" DNS:已配置" fi fi singBoxRealityDNSNodeFiles[index]="${anyTLSMainFile}" singBoxRealityDNSNodeIds[index]="main_anytls" singBoxRealityDNSNodeDisplayNames[index]="AnyTLS主节点" singBoxRealityDNSNodePorts[index]="$(jq -r '.inbounds[0].listen_port // ""' "${anyTLSMainFile}")" singBoxRealityDNSNodeTargets[index]="$(jq -r '.inbounds[0].tls.server_name // ""' "${anyTLSMainFile}")" singBoxRealityDNSNodeInboundTags[index]="$(getManagedMultiRealityInboundTag "${anyTLSMainFile}")" singBoxRealityDNSNodeDNSFiles[index]="${anyTLSDNSConfigFile}" singBoxRealityDNSNodeLabels[index]="AnyTLS主节点 端口:${singBoxRealityDNSNodePorts[${index}]} 域名:${singBoxRealityDNSNodeTargets[${index}]} 用户:$(jq -r '.inbounds[0].users | length' "${anyTLSMainFile}")${anyTLSDNSSummary}" index=$((index + 1)) fi buildManagedMultiAnyTLSEntries local anyTLSIndex=0 for anyTLSIndex in "${!managedMultiAnyTLSNodeFiles[@]}"; do singBoxRealityDNSNodeFiles[index]="${managedMultiAnyTLSNodeFiles[${anyTLSIndex}]}" singBoxRealityDNSNodeIds[index]="${managedMultiAnyTLSNodeIds[${anyTLSIndex}]}" singBoxRealityDNSNodeDisplayNames[index]="${managedMultiAnyTLSNodeIds[${anyTLSIndex}]}" singBoxRealityDNSNodeLabels[index]="AnyTLS ${managedMultiAnyTLSNodeLabels[${anyTLSIndex}]}" singBoxRealityDNSNodePorts[index]="${managedMultiAnyTLSNodePorts[${anyTLSIndex}]}" singBoxRealityDNSNodeTargets[index]="${managedMultiAnyTLSNodeDomains[${anyTLSIndex}]}" singBoxRealityDNSNodeInboundTags[index]="$(getManagedMultiRealityInboundTag "${managedMultiAnyTLSNodeFiles[${anyTLSIndex}]}")" singBoxRealityDNSNodeDNSFiles[index]="$(getManagedMultiAnyTLSDNSConfigFileById "${managedMultiAnyTLSNodeIds[${anyTLSIndex}]}")" index=$((index + 1)) done } selectSingBoxRealityDNSNode() { local actionLabel=$1 buildSingBoxRealityDNSEntries if [[ ${#singBoxRealityDNSNodeFiles[@]} -eq 0 ]]; then echoContent yellow " ---> 当前没有可配置节点级 DNS 分流的 sing-box 节点" exit 0 fi echoContent yellow "\n请选择要${actionLabel}的 sing-box 节点" local index=0 for index in "${!singBoxRealityDNSNodeFiles[@]}"; do echoContent green "$((index + 1)).${singBoxRealityDNSNodeLabels[${index}]}" done read -r -p "请选择节点编号:" managedMultiRealityNodeIndex if ! [[ "${managedMultiRealityNodeIndex}" =~ ^[0-9]+$ ]] || ((managedMultiRealityNodeIndex < 1 || managedMultiRealityNodeIndex > ${#singBoxRealityDNSNodeFiles[@]})); then echoContent red " ---> 选择错误" exit 0 fi managedMultiRealityNodeIndex=$((managedMultiRealityNodeIndex - 1)) managedMultiRealitySelectedFile="${singBoxRealityDNSNodeFiles[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedId="${singBoxRealityDNSNodeIds[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedDisplayName="${singBoxRealityDNSNodeDisplayNames[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedPort="${singBoxRealityDNSNodePorts[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedTarget="${singBoxRealityDNSNodeTargets[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedInboundTag="${singBoxRealityDNSNodeInboundTags[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedDNSConfigFile="${singBoxRealityDNSNodeDNSFiles[${managedMultiRealityNodeIndex}]}" } promptManagedMultiRealityPort() { echoContent yellow "请输入多实例 Reality 端口[回车随机10000-30000]" read -r -p "端口:" managedMultiRealityPort if [[ -z "${managedMultiRealityPort}" ]]; then managedMultiRealityPort=$((RANDOM % 20001 + 10000)) fi if ! [[ "${managedMultiRealityPort}" =~ ^[0-9]+$ ]] || ((managedMultiRealityPort < 1 || managedMultiRealityPort > 65535)); then echoContent red " ---> 端口不合法" exit 0 fi checkPort "${managedMultiRealityPort}" allowPort "${managedMultiRealityPort}" echoContent green "\n ---> 端口: ${managedMultiRealityPort}" } promptManagedMultiRealityTarget() { local savedLastInstallationConfig="${lastInstallationConfig}" local savedRealityServerName="${realityServerName}" local savedRealityDomainPort="${realityDomainPort}" local savedSelectCoreType="${selectCoreType}" realityServerName= realityDomainPort= selectCoreType="${coreInstallType}" lastInstallationConfig= initRealityClientServersName lastInstallationConfig="${savedLastInstallationConfig}" selectCoreType="${savedSelectCoreType}" managedMultiRealityTargetServerName="${realityServerName}" managedMultiRealityTargetPort="${realityDomainPort}" realityServerName="${savedRealityServerName}" realityDomainPort="${savedRealityDomainPort}" } generateManagedMultiRealityKeypair() { echoContent skyBlue "\n生成Reality key\n" if [[ "${coreInstallType}" == "1" ]]; then managedMultiRealityKeypair=$("${xrayBinaryPath}" x25519 2>/dev/null) managedMultiRealityPrivateKey=$(echo "${managedMultiRealityKeypair}" | grep "PrivateKey" | awk '{print $2}') managedMultiRealityPublicKey=$(echo "${managedMultiRealityKeypair}" | grep "Password" | awk '{print $3}') elif [[ "${coreInstallType}" == "2" ]]; then managedMultiRealityKeypair=$("${singBoxBinaryPath}" generate reality-keypair 2>/dev/null) managedMultiRealityPrivateKey=$(echo "${managedMultiRealityKeypair}" | head -1 | awk '{print $2}') managedMultiRealityPublicKey=$(echo "${managedMultiRealityKeypair}" | tail -n 1 | awk '{print $2}') fi if [[ -z "${managedMultiRealityPrivateKey}" || -z "${managedMultiRealityPublicKey}" ]]; then echoContent red " ---> 生成 Reality 密钥失败" exit 0 fi echoContent green "\n privateKey:${managedMultiRealityPrivateKey}" echoContent green "\n publicKey:${managedMultiRealityPublicKey}" } generateManagedMultiRealityUserIdentity() { echoContent yellow "\n请输入自定义UUID[需合法]，[回车]随机UUID" read -r -p "UUID:" managedMultiRealityUUID if [[ -z "${managedMultiRealityUUID}" ]]; then if [[ "${coreInstallType}" == "1" ]]; then managedMultiRealityUUID=$("${xrayBinaryPath}" uuid) else managedMultiRealityUUID=$("${singBoxBinaryPath}" generate uuid) fi fi echoContent yellow "\n请输入自定义用户名[需合法]，[回车]随机用户名" read -r -p "用户名:" managedMultiRealityUserName if [[ -z "${managedMultiRealityUserName}" ]]; then managedMultiRealityUserName="$(echo "${managedMultiRealityUUID}" | cut -d "-" -f 1)" fi } buildManagedMultiRealityXrayUsersJson() { local uuid=$1 local userName=$2 cat <"${file}" { "inbounds": [ { "listen": "::", "port": ${port}, "protocol": "vless", "tag": "VLESSRealityMulti${port}", "settings": { "clients": ${usersJson}, "decryption": "none" }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "show": false, "dest": "${targetServer}:${targetPort}", "xver": 0, "serverNames": [ "${targetServer}" ], "privateKey": "${privateKey}", "maxTimeDiff": 70000, "shortIds": [ "", "${managedMultiRealityShortID}" ] } }, "sniffing": { "enabled": true, "destOverride": [ "http", "tls", "quic" ], "routeOnly": true } } ] } EOF } writeManagedMultiRealitySingBoxConfig() { local file=$1 local port=$2 local targetServer=$3 local targetPort=$4 local privateKey=$5 local usersJson=$6 cat <"${file}" { "inbounds": [ { "type": "vless", "listen":"::", "listen_port":${port}, "tag": "VLESSRealityMulti${port}", "users":${usersJson}, "tls": { "enabled": true, "server_name": "${targetServer}", "reality": { "enabled": true, "handshake": { "server": "${targetServer}", "server_port": ${targetPort} }, "private_key": "${privateKey}", "short_id": [ "", "${managedMultiRealityShortID}" ] } } } ] } EOF } ensureSingBoxDefaultDNSConfig() { if [[ -z "${singBoxConfigPath}" ]]; then singBoxConfigPath=/etc/v2ray-agent/sing-box/conf/config/ fi if [[ ! -f "${singBoxConfigPath}dns.json" ]]; then cat <"${singBoxConfigPath}dns.json" { "dns": { "servers": [ { "tag": "local", "type": "local" } ], "final": "local" }, "route": { "default_domain_resolver": "local" } } EOF fi } writeManagedMultiRealitySingBoxDNSRoutingConfig() { local file=$1 local inboundTag=$2 local dnsServer=$3 local domainList=$4 local nodeId=$5 local safeNodeId= safeNodeId=$(echo "${nodeId}" | tr -c '[:alnum:]' '_') local routingName="managed_multi_dns_${safeNodeId}" local dnsTag="managedMultiDNS_${safeNodeId}" local rules= rules=$(initSingBoxRules "${domainList}" "${routingName}") local domainRules= domainRules=$(echo "${rules}" | jq '.domainRules') local ruleSet= ruleSet=$(echo "${rules}" | jq '.ruleSet') local ruleSetTag=[] if [[ "$(echo "${ruleSet}" | jq '.|length')" != "0" ]]; then ruleSetTag=$(echo "${ruleSet}" | jq '.|map(.tag)') fi cat <"${file}" { "dns": { "servers": [ { "tag": "${dnsTag}", "type": "udp", "server": "${dnsServer}" } ], "rules": [ { "inbound": [ "${inboundTag}" ], "rule_set": ${ruleSetTag}, "domain_regex": ${domainRules}, "server": "${dnsTag}" } ] }, "route": { "default_domain_resolver": "local", "rules": [ { "inbound": [ "${inboundTag}" ], "rule_set": ${ruleSetTag}, "domain_regex": ${domainRules}, "action": "resolve", "server": "${dnsTag}", "strategy": "prefer_ipv4" }, { "inbound": [ "${inboundTag}" ], "action": "resolve", "strategy": "prefer_ipv4" } ], "rule_set": ${ruleSet} } } EOF jq 'if .dns.rules[0].rule_set == [] then del(.dns.rules[0].rule_set) else . end | if .dns.rules[0].domain_regex == [] then del(.dns.rules[0].domain_regex) else . end | if .route.rules[0].rule_set == [] then del(.route.rules[0].rule_set) else . end | if .route.rules[0].domain_regex == [] then del(.route.rules[0].domain_regex) else . end | if .route.rule_set == [] then del(.route.rule_set) else . end' "${file}" >"${file}.tmp" && mv "${file}.tmp" "${file}" } selectManagedMultiRealityNodeWithDNS() { local actionLabel=$1 buildSingBoxRealityDNSEntries if [[ ${#singBoxRealityDNSNodeFiles[@]} -eq 0 ]]; then echoContent yellow " ---> 当前没有已部署的 sing-box 节点" exit 0 fi local matchedNodeFiles=() local matchedNodeIds=() local matchedNodeDisplayNames=() local matchedNodeLabels=() local matchedNodePorts=() local matchedNodeTargets=() local matchedNodeInboundTags=() local matchedNodeDNSFiles=() local index=0 for index in "${!singBoxRealityDNSNodeFiles[@]}"; do local dnsConfigFile= dnsConfigFile="${singBoxRealityDNSNodeDNSFiles[${index}]}" if [[ -n "${dnsConfigFile}" && -f "${dnsConfigFile}" ]]; then matchedNodeFiles+=("${singBoxRealityDNSNodeFiles[${index}]}") matchedNodeIds+=("${singBoxRealityDNSNodeIds[${index}]}") matchedNodeDisplayNames+=("${singBoxRealityDNSNodeDisplayNames[${index}]}") matchedNodeLabels+=("${singBoxRealityDNSNodeLabels[${index}]}") matchedNodePorts+=("${singBoxRealityDNSNodePorts[${index}]}") matchedNodeTargets+=("${singBoxRealityDNSNodeTargets[${index}]}") matchedNodeInboundTags+=("${singBoxRealityDNSNodeInboundTags[${index}]}") matchedNodeDNSFiles+=("${dnsConfigFile}") fi done if [[ ${#matchedNodeFiles[@]} -eq 0 ]]; then echoContent yellow " ---> 当前没有已配置节点级 DNS 分流的 sing-box 节点" exit 0 fi echoContent yellow "\n请选择要${actionLabel}的 sing-box 节点" for index in "${!matchedNodeFiles[@]}"; do echoContent green "$((index + 1)).${matchedNodeLabels[${index}]}" done read -r -p "请选择节点编号:" managedMultiRealityNodeIndex if ! [[ "${managedMultiRealityNodeIndex}" =~ ^[0-9]+$ ]] || ((managedMultiRealityNodeIndex < 1 || managedMultiRealityNodeIndex > ${#matchedNodeFiles[@]})); then echoContent red " ---> 选择错误" exit 0 fi managedMultiRealityNodeIndex=$((managedMultiRealityNodeIndex - 1)) managedMultiRealitySelectedFile="${matchedNodeFiles[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedId="${matchedNodeIds[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedDisplayName="${matchedNodeDisplayNames[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedPort="${matchedNodePorts[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedTarget="${matchedNodeTargets[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedInboundTag="${matchedNodeInboundTags[${managedMultiRealityNodeIndex}]}" managedMultiRealitySelectedDNSConfigFile="${matchedNodeDNSFiles[${managedMultiRealityNodeIndex}]}" } setManagedMultiRealityDNSRouting() { if [[ "${coreInstallType}" != "2" ]]; then echoContent red " ---> 当前仅支持 sing-box 节点按节点配置 DNS 分流" echoContent yellow " ---> Xray-core 现阶段仍是核心级 DNS 分流，不支持同一进程内按多个 Reality 节点分别指定上游 DNS" exit 0 fi selectSingBoxRealityDNSNode "配置节点级 DNS 分流" if [[ -z "${managedMultiRealitySelectedInboundTag}" ]]; then echoContent red " ---> 节点入站标签读取失败" exit 0 fi local setDNS= local domainList= local dnsConfigFile= dnsConfigFile="${managedMultiRealitySelectedDNSConfigFile}" if [[ -f "${dnsConfigFile}" ]]; then echoContent yellow " ---> 当前节点已存在节点级 DNS 分流配置，继续会直接覆盖" read -r -p "是否继续覆盖？[y/n]:" managedMultiRealityDNSOverwrite if [[ "${managedMultiRealityDNSOverwrite}" != "y" ]]; then echoContent yellow " ---> 已取消" exit 0 fi fi echoContent red "==============================================================" echoContent yellow "节点:${managedMultiRealitySelectedId}" echoContent yellow "端口:${managedMultiRealitySelectedPort}" echoContent yellow "目标:${managedMultiRealitySelectedTarget}" read -r -p "请输入分流的DNS:" setDNS if [[ -z "${setDNS}" ]]; then echoContent red " ---> dns不可为空" exit 0 fi echoContent yellow "录入示例:netflix,disney,hulu" read -r -p "请按照上面示例录入域名:" domainList if [[ -z "${domainList}" ]]; then echoContent red " ---> 域名不可为空" exit 0 fi ensureSingBoxDefaultDNSConfig addSingBoxOutbound 01_direct_outbound writeManagedMultiRealitySingBoxDNSRoutingConfig "${dnsConfigFile}" "${managedMultiRealitySelectedInboundTag}" "${setDNS}" "${domainList}" "${managedMultiRealitySelectedId}" handleSingBox restart echoContent green " ---> 节点级 DNS 分流配置成功: ${managedMultiRealitySelectedDisplayName}" } removeManagedMultiRealityDNSRouting() { if [[ "${coreInstallType}" != "2" ]]; then echoContent red " ---> 当前仅支持 sing-box 节点按节点卸载 DNS 分流" exit 0 fi selectManagedMultiRealityNodeWithDNS "卸载节点级 DNS 分流" rm -f "${managedMultiRealitySelectedDNSConfigFile}" handleSingBox restart echoContent green " ---> 已卸载节点级 DNS 分流: ${managedMultiRealitySelectedDisplayName}" } deployManagedMultiRealityNode() { if [[ -z "${coreInstallType}" ]]; then echoContent red " ---> 请先安装并启动一个核心后再部署多实例节点" exit 0 fi if [[ "${coreInstallType}" != "1" && "${coreInstallType}" != "2" ]]; then echoContent red " ---> 当前核心不支持多实例 Reality 节点" exit 0 fi echoContent skyBlue "\n功能 1/1 : 部署多实例 Reality 节点" promptManagedMultiRealityPort promptManagedMultiRealityTarget generateManagedMultiRealityKeypair generateManagedMultiRealityUserIdentity local nodeId= local usersJson= local configFile= nodeId="$(date +%Y%m%d%H%M%S)-${managedMultiRealityPort}" if [[ "${coreInstallType}" == "1" ]]; then usersJson=$(buildManagedMultiRealityXrayUsersJson "${managedMultiRealityUUID}" "${managedMultiRealityUserName}") configFile="/etc/v2ray-agent/xray/conf/${managedMultiRealityPrefix}${nodeId}.json" writeManagedMultiRealityXrayConfig "${configFile}" "${managedMultiRealityPort}" "${managedMultiRealityTargetServerName}" "${managedMultiRealityTargetPort}" "${managedMultiRealityPrivateKey}" "${usersJson}" persistManagedMultiRealityKeyInfo "${configFile}" "${managedMultiRealityPublicKey}" handleXray restart echoContent green " ---> Xray 多实例 Reality 节点部署成功" else usersJson=$(buildManagedMultiRealitySingBoxUsersJson "${managedMultiRealityUUID}" "${managedMultiRealityUserName}") configFile="/etc/v2ray-agent/sing-box/conf/config/${managedMultiRealityPrefix}${nodeId}.json" writeManagedMultiRealitySingBoxConfig "${configFile}" "${managedMultiRealityPort}" "${managedMultiRealityTargetServerName}" "${managedMultiRealityTargetPort}" "${managedMultiRealityPrivateKey}" "${usersJson}" persistManagedMultiRealityKeyInfo "${configFile}" "${managedMultiRealityPublicKey}" handleSingBox restart echoContent green " ---> sing-box 多实例 Reality 节点部署成功" fi managedMultiRealitySelectedFile="${configFile}" managedMultiRealitySelectedId="${nodeId}" showManagedMultiRealityAccounts true } showManagedMultiRealityNodes() { buildManagedMultiRealityEntries echoContent skyBlue "\n功能 1/1 : 多实例 Reality 节点总览" echoContent red "\n==============================================================" if [[ ${#managedMultiRealityNodeFiles[@]} -eq 0 ]]; then echoContent yellow " ---> 当前没有已部署的多实例 Reality 节点" exit 0 fi local index=0 for index in "${!managedMultiRealityNodeFiles[@]}"; do echoContent green "$((index + 1)).${managedMultiRealityNodeIds[${index}]}" echoContent yellow " ${managedMultiRealityNodeLabels[${index}]}" done } showManagedMultiRealityAccounts() { local skipSelect=$1 if [[ "${skipSelect}" != "true" ]]; then selectManagedMultiRealityNode "查看账号" fi local file="${managedMultiRealitySelectedFile}" local port= local targetServer= local privateKey= local usersPath= local publicKey= local address= address=$(getPublicIP) if [[ "${coreInstallType}" == "1" ]]; then port=$(jq -r '.inbounds[0].port // ""' "${file}") targetServer=$(jq -r '.inbounds[0].streamSettings.realitySettings.serverNames[0] // ""' "${file}") privateKey=$(jq -r '.inbounds[0].streamSettings.realitySettings.privateKey // ""' "${file}") usersPath='.inbounds[0].settings.clients[]' else port=$(jq -r '.inbounds[0].listen_port // ""' "${file}") targetServer=$(jq -r '.inbounds[0].tls.server_name // ""' "${file}") privateKey=$(jq -r '.inbounds[0].tls.reality.private_key // ""' "${file}") usersPath='.inbounds[0].users[]' fi publicKey=$(readManagedMultiRealityPublicKey "${file}") if [[ -z "${publicKey}" ]]; then publicKey=$(deriveRealityPublicKeyFromPrivateKey "${privateKey}") fi echoContent skyBlue "\n========================= 多实例 Reality 账号 =========================\n" jq -c "${usersPath}" "${file}" | while read -r user; do local email= local uuid= email=$(echo "${user}" | jq -r '.email // .name') uuid=$(echo "${user}" | jq -r '.id // .uuid') echoContent skyBlue "\n ---> 节点:${managedMultiRealitySelectedId}" echoContent skyBlue " ---> 账号:${email}" echo echoContent yellow " ---> 通用格式(VLESS+reality+uTLS+Vision)" echoContent green " vless://${uuid}@${address}:${port}?encryption=none&security=reality&type=tcp&sni=${targetServer}&fp=chrome&pbk=${publicKey}&sid=${managedMultiRealityShortID}&flow=xtls-rprx-vision#${email}\n" echoContent yellow " ---> 格式化明文(VLESS+reality+uTLS+Vision)" echoContent green "协议类型:VLESS reality，地址:${address}，publicKey:${publicKey}，shortId:${managedMultiRealityShortID}，serverNames:${targetServer}，端口:${port}，用户ID:${uuid}，传输方式:tcp，账户名:${email}\n" echoContent yellow " ---> 二维码 VLESS(VLESS+reality+uTLS+Vision)" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${uuid}%40${address}%3A${port}%3Fencryption%3Dnone%26security%3Dreality%26type%3Dtcp%26sni%3D${targetServer}%26fp%3Dchrome%26pbk%3D${publicKey}%26sid%3D${managedMultiRealityShortID}%26flow%3Dxtls-rprx-vision%23${email}\n" done } addManagedMultiRealityUser() { selectManagedMultiRealityNode "添加用户" local file="${managedMultiRealitySelectedFile}" local uuid= local userName= local usersJson= generateManagedMultiRealityUserIdentity uuid="${managedMultiRealityUUID}" userName="${managedMultiRealityUserName}" if [[ "${coreInstallType}" == "1" ]]; then if jq -e --arg uuid "${uuid}" '.inbounds[0].settings.clients[] | select(.id == $uuid)' "${file}" >/dev/null; then echoContent red " ---> UUID不可重复" exit 0 fi usersJson=$(buildManagedMultiRealityXrayUsersJson "${uuid}" "${userName}") jq --argjson users "${usersJson}" '.inbounds[0].settings.clients += $users' "${file}" | jq . >"${file}" handleXray restart else if jq -e --arg uuid "${uuid}" '.inbounds[0].users[] | select(.uuid == $uuid)' "${file}" >/dev/null; then echoContent red " ---> UUID不可重复" exit 0 fi usersJson=$(buildManagedMultiRealitySingBoxUsersJson "${uuid}" "${userName}") jq --argjson users "${usersJson}" '.inbounds[0].users += $users' "${file}" | jq . >"${file}" handleSingBox restart fi echoContent green " ---> 添加完成" } removeManagedMultiRealityUser() { selectManagedMultiRealityNode "删除用户" local file="${managedMultiRealitySelectedFile}" local userCount= if [[ "${coreInstallType}" == "1" ]]; then userCount=$(jq -r '.inbounds[0].settings.clients | length' "${file}") if ((userCount <= 1)); then echoContent red " ---> 当前节点只剩最后一个用户，如需删除请直接删除整个节点" exit 0 fi jq -r '.inbounds[0].settings.clients[].email' "${file}" | awk '{print NR":"$0}' else userCount=$(jq -r '.inbounds[0].users | length' "${file}") if ((userCount <= 1)); then echoContent red " ---> 当前节点只剩最后一个用户，如需删除请直接删除整个节点" exit 0 fi jq -r '.inbounds[0].users[].name' "${file}" | awk '{print NR":"$0}' fi read -r -p "请选择要删除的用户编号:" managedMultiRealityDeleteUserIndex if ! [[ "${managedMultiRealityDeleteUserIndex}" =~ ^[0-9]+$ ]] || ((managedMultiRealityDeleteUserIndex < 1 || managedMultiRealityDeleteUserIndex > userCount)); then echoContent red " ---> 选择错误" exit 0 fi managedMultiRealityDeleteUserIndex=$((managedMultiRealityDeleteUserIndex - 1)) if [[ "${coreInstallType}" == "1" ]]; then jq "del(.inbounds[0].settings.clients[${managedMultiRealityDeleteUserIndex}])" "${file}" | jq . >"${file}" handleXray restart else jq "del(.inbounds[0].users[${managedMultiRealityDeleteUserIndex}])" "${file}" | jq . >"${file}" handleSingBox restart fi echoContent green " ---> 删除完成" } deleteManagedMultiRealityNode() { selectManagedMultiRealityNode "删除" rm -f "${managedMultiRealitySelectedFile}" rm -f "$(getManagedMultiRealityKeyFile "${managedMultiRealitySelectedFile}")" rm -f "$(getManagedMultiRealityDNSConfigFileById "${managedMultiRealitySelectedId}")" if [[ "${coreInstallType}" == "1" ]]; then handleXray restart else handleSingBox restart fi echoContent green " ---> 已删除多实例 Reality 节点: ${managedMultiRealitySelectedId}" } managedMultiRealityMenu() { if [[ -z "${coreInstallType}" ]]; then echoContent red " ---> 请先安装对应核心后再使用多实例 Reality 功能" exit 0 fi echoContent skyBlue "\n功能 1/1 : 多实例 Reality 管理" echoContent red "\n==============================================================" echoContent yellow "# 注意事项" echoContent yellow "# 这里只部署独立的 Reality 节点，不是给旧节点补入口端口" echoContent yellow "# 当前版本按当前已安装核心工作，不涉及双核心同时托管" echoContent yellow "1.部署新的独立节点" echoContent yellow "2.查看已部署节点" echoMenuHint "3.查看某个节点账号" "多实例其他节点在这里看" echoContent yellow "4.给某个节点添加用户" echoContent yellow "5.删除某个节点用户" echoContent yellow "6.删除某个节点" echoContent red "==============================================================" read -r -p "请选择:" managedMultiRealityAction case "${managedMultiRealityAction}" in 1) deployManagedMultiRealityNode ;; 2) showManagedMultiRealityNodes ;; 3) showManagedMultiRealityAccounts ;; 4) addManagedMultiRealityUser ;; 5) removeManagedMultiRealityUser ;; 6) deleteManagedMultiRealityNode ;; *) echoContent red " ---> 选择错误" exit 0 ;; esac } promptManagedMultiAnyTLSPort() { echoContent yellow "请输入多实例 AnyTLS 端口[回车随机10000-30000]" read -r -p "端口:" managedMultiAnyTLSPort if [[ -z "${managedMultiAnyTLSPort}" ]]; then managedMultiAnyTLSPort=$((RANDOM % 20001 + 10000)) fi if ! [[ "${managedMultiAnyTLSPort}" =~ ^[0-9]+$ ]] || ((managedMultiAnyTLSPort < 1 || managedMultiAnyTLSPort > 65535)); then echoContent red " ---> 端口不合法" promptManagedMultiAnyTLSPort return fi checkPort "${managedMultiAnyTLSPort}" allowPort "${managedMultiAnyTLSPort}" echoContent yellow "\n ---> 端口: ${managedMultiAnyTLSPort}" } promptManagedMultiAnyTLSDomain() { read -r -p "请输入该 AnyTLS 节点独立域名[例: anytls.example.com]:" managedMultiAnyTLSDomain if [[ -z "${managedMultiAnyTLSDomain}" ]]; then echoContent red " ---> 域名不可为空" promptManagedMultiAnyTLSDomain return fi domain="${managedMultiAnyTLSDomain}" dnsTLSDomain=$(echo "${managedMultiAnyTLSDomain}" | awk -F "." '{$1="";print $0}' | sed 's/^[[:space:]]*//' | sed 's/ /./g') checkDNSIP "${managedMultiAnyTLSDomain}" } ensureManagedMultiAnyTLSCert() { echoContent skyBlue "\n进度 1/${totalProgress} : 申请 AnyTLS 节点证书" installTLS 1 if [[ ! -f "/etc/v2ray-agent/tls/${managedMultiAnyTLSDomain}.crt" || ! -f "/etc/v2ray-agent/tls/${managedMultiAnyTLSDomain}.key" ]]; then echoContent red " ---> 未检测到 ${managedMultiAnyTLSDomain} 证书，无法继续" exit 0 fi installCronTLS 1 } generateManagedMultiAnyTLSUserIdentity() { local defaultPassword= defaultPassword=$("${singBoxBinaryPath}" generate uuid) read -r -p "请输入自定义 AnyTLS 密码[需合法]，[回车]随机密码:" managedMultiAnyTLSPassword if [[ -z "${managedMultiAnyTLSPassword}" ]]; then managedMultiAnyTLSPassword="${defaultPassword}" fi local defaultName="${managedMultiAnyTLSPassword:0:8}-anytls" read -r -p "请输入自定义用户名[需合法]，[回车]随机用户名:" managedMultiAnyTLSUserName if [[ -z "${managedMultiAnyTLSUserName}" ]]; then managedMultiAnyTLSUserName="${defaultName}" fi } buildManagedMultiAnyTLSUsersJson() { local password="$1" local userName="$2" jq -n --arg password "${password}" --arg name "${userName}" '[{"password":$password,"name":$name}]' } writeManagedMultiAnyTLSConfig() { local file="$1" local port="$2" local domainName="$3" local usersJson="$4" jq -n \ --argjson port "${port}" \ --arg tag "AnyTLSMulti${port}" \ --arg domain "${domainName}" \ --arg cert "/etc/v2ray-agent/tls/${domainName}.crt" \ --arg key "/etc/v2ray-agent/tls/${domainName}.key" \ --argjson users "${usersJson}" \ '{ inbounds: [ { type: "anytls", listen: "::", tag: $tag, listen_port: $port, users: $users, tls: { enabled: true, server_name: $domain, certificate_path: $cert, key_path: $key } } ] }' >"${file}" } deployManagedMultiAnyTLSNode() { if [[ "${coreInstallType}" != "2" ]]; then echoContent red " ---> 多实例 AnyTLS 仅支持 sing-box 核心" echoContent yellow " ---> 请先安装一个 sing-box 主节点后再使用该功能" exit 0 fi totalProgress=1 promptManagedMultiAnyTLSPort promptManagedMultiAnyTLSDomain ensureManagedMultiAnyTLSCert generateManagedMultiAnyTLSUserIdentity local nodeId= local file= local usersJson= nodeId="$(date +%Y%m%d%H%M%S)-${managedMultiAnyTLSPort}" file="${singBoxConfigPath}${managedMultiAnyTLSPrefix}${nodeId}.json" usersJson=$(buildManagedMultiAnyTLSUsersJson "${managedMultiAnyTLSPassword}" "${managedMultiAnyTLSUserName}") writeManagedMultiAnyTLSConfig "${file}" "${managedMultiAnyTLSPort}" "${managedMultiAnyTLSDomain}" "${usersJson}" handleSingBox restart echoContent green " ---> sing-box 多实例 AnyTLS 节点部署成功" managedMultiAnyTLSSelectedFile="${file}" managedMultiAnyTLSSelectedId="${nodeId}" showManagedMultiAnyTLSAccounts true } showManagedMultiAnyTLSNodes() { buildManagedMultiAnyTLSEntries if [[ ${#managedMultiAnyTLSNodeFiles[@]} -eq 0 ]]; then echoContent yellow " ---> 当前没有已部署的多实例 AnyTLS 节点" exit 0 fi echoContent skyBlue "\n====================== 多实例 AnyTLS 节点 ======================\n" for i in "${!managedMultiAnyTLSNodeLabels[@]}"; do echoContent green "$((i + 1)).${managedMultiAnyTLSNodeLabels[$i]}" done } showManagedMultiAnyTLSAccounts() { local skipSelect="$1" if [[ "${skipSelect}" != "true" ]]; then selectManagedMultiAnyTLSNode "查看账号" fi local file="${managedMultiAnyTLSSelectedFile}" local port= local domainName= port=$(jq -r '.inbounds[0].listen_port' "${file}") domainName=$(jq -r '.inbounds[0].tls.server_name' "${file}") echoContent skyBlue "\n====================== 多实例 AnyTLS 账号 ======================\n" jq -c '.inbounds[0].users[]' "${file}" | while read -r user; do local userName= local password= userName=$(echo "${user}" | jq -r '.name') password=$(echo "${user}" | jq -r '.password') echoContent skyBlue "\n ---> 节点:${managedMultiAnyTLSSelectedId}" echoContent skyBlue " ---> 账号:${userName}" echo echoContent yellow " ---> 通用格式(AnyTLS)" echoContent green " anytls://${password}@${domainName}:${port}?peer=${domainName}&insecure=0&sni=${domainName}#${userName}\n" echoContent yellow " ---> 格式化明文(AnyTLS)" echoContent green "协议类型:AnyTLS，地址:${domainName}，端口:${port}，SNI:${domainName}，账户名:${userName}\n" done } addManagedMultiAnyTLSUser() { selectManagedMultiAnyTLSNode "添加用户" local file="${managedMultiAnyTLSSelectedFile}" local usersJson= generateManagedMultiAnyTLSUserIdentity if jq -e --arg password "${managedMultiAnyTLSPassword}" '.inbounds[0].users[] | select(.password == $password)' "${file}" >/dev/null; then echoContent red " ---> AnyTLS 密码不可重复" exit 0 fi usersJson=$(buildManagedMultiAnyTLSUsersJson "${managedMultiAnyTLSPassword}" "${managedMultiAnyTLSUserName}") jq --argjson users "${usersJson}" '.inbounds[0].users += $users' "${file}" | jq . >"${file}" handleSingBox restart echoContent green " ---> 添加完成" } removeManagedMultiAnyTLSUser() { selectManagedMultiAnyTLSNode "删除用户" local file="${managedMultiAnyTLSSelectedFile}" local userCount= userCount=$(jq -r '.inbounds[0].users | length' "${file}") if ((userCount <= 1)); then echoContent red " ---> 当前节点只剩最后一个用户，如需删除请直接删除整个节点" exit 0 fi jq -r '.inbounds[0].users[].name' "${file}" | awk '{print NR":"$0}' read -r -p "请选择要删除的用户编号:" managedMultiAnyTLSDeleteUserIndex if ! [[ "${managedMultiAnyTLSDeleteUserIndex}" =~ ^[0-9]+$ ]] || ((managedMultiAnyTLSDeleteUserIndex < 1 || managedMultiAnyTLSDeleteUserIndex > userCount)); then echoContent red " ---> 选择错误" exit 0 fi managedMultiAnyTLSDeleteUserIndex=$((managedMultiAnyTLSDeleteUserIndex - 1)) jq "del(.inbounds[0].users[${managedMultiAnyTLSDeleteUserIndex}])" "${file}" | jq . >"${file}" handleSingBox restart echoContent green " ---> 删除完成" } deleteManagedMultiAnyTLSNode() { selectManagedMultiAnyTLSNode "删除" rm -f "${managedMultiAnyTLSSelectedFile}" rm -f "$(getManagedMultiAnyTLSDNSConfigFileById "${managedMultiAnyTLSSelectedId}")" handleSingBox restart echoContent green " ---> 已删除多实例 AnyTLS 节点: ${managedMultiAnyTLSSelectedId}" } managedMultiAnyTLSMenu() { if [[ "${coreInstallType}" != "2" ]]; then echoContent red " ---> 多实例 AnyTLS 仅支持 sing-box 核心" echoContent yellow " ---> 请先安装一个 sing-box 主节点后再使用该功能" exit 0 fi echoContent skyBlue "\n功能 1/1 : 多实例 AnyTLS 管理" echoContent red "\n==============================================================" echoContent yellow "# 注意事项" echoContent yellow "# 这里只部署独立 AnyTLS 节点，每个节点使用自己的域名和证书" echoContent yellow "# 可与 sing-box 托管的 Reality 节点同时运行" echoContent yellow "1.部署新的独立节点" echoContent yellow "2.查看已部署节点" echoContent yellow "3.查看某个节点账号" echoContent yellow "4.给某个节点添加用户" echoContent yellow "5.删除某个节点用户" echoContent yellow "6.删除某个节点" echoContent red "==============================================================" read -r -p "请选择:" managedMultiAnyTLSAction case "${managedMultiAnyTLSAction}" in 1) deployManagedMultiAnyTLSNode ;; 2) showManagedMultiAnyTLSNodes ;; 3) showManagedMultiAnyTLSAccounts ;; 4) addManagedMultiAnyTLSUser ;; 5) removeManagedMultiAnyTLSUser ;; 6) deleteManagedMultiAnyTLSNode ;; *) echoContent red " ---> 选择错误" exit 0 ;; esac } # Snell + Shadow-TLS v3 管理 shadowTLSTargetDomains=( "www.apple.com:443" "www.microsoft.com:443" "www.bing.com:443" "www.nvidia.com:443" "www.intel.com:443" "www.oracle.com:443" "www.cisco.com:443" "www.samsung.com:443" "www.asus.com:443" "www.dell.com:443" "www.hp.com:443" "www.ibm.com:443" "www.adobe.com:443" "www.cloudflare.com:443" "www.cloudflarestatus.com:443" "www.mozilla.org:443" "addons.mozilla.org:443" "www.python.org:443" "www.java.com:443" "www.mysql.com:443" "www.mongodb.com:443" "redis.io:443" "www.booking.com:443" "www.trip.com:443" "www.marriott.com:443" "www.hyatt.com:443" "www.hilton.com:443" "www.ritzcarlton.com:443" "www.nintendo.com:443" "www.playstation.com:443" "www.xbox.com:443" "www.unrealengine.com:443" "www.autodesk.com:443" "www.vmware.com:443" "www.salesforce.com:443" "www.sap.com:443" "www.umich.edu:443" "www.caltech.edu:443" "www.stanford.edu:443" ) snellShadowTLSNodeFiles=() snellShadowTLSNodeIds=() snellShadowTLSNodeLabels=() snellShadowTLSSelectedFile= snellShadowTLSSelectedId= ensureSnellShadowTLSDirs() { mkdir -p "${snellShadowTLSNodeRoot}" "${snellBinaryRoot}" "${snellConfigRoot}" >/dev/null 2>&1 } randomSafeString() { local length="$1" [[ -n "${length}" ]] || length=24 LC_ALL=C tr -dc 'A-Za-z0-9' Snell 暂不支持当前CPU架构: $(uname -m)" exit 0 ;; esac } getShadowTLSArch() { case "$(uname -m)" in amd64 | x86_64) echo "x86_64-unknown-linux-musl" ;; armv8 | aarch64) echo "aarch64-unknown-linux-musl" ;; *) echoContent red " ---> Shadow-TLS 暂不支持当前CPU架构: $(uname -m)" exit 0 ;; esac } installSnellBinary() { local version="$1" local binaryPath= local arch= local downloadVersion= local downloadUrl= binaryPath="$(getSnellBinaryPath "${version}")" if [[ -x "${binaryPath}" ]]; then echoContent green " ---> Snell v${version} 已安装" return fi ensureSnellShadowTLSDirs arch="$(getSnellArch)" case "${version}" in 4) downloadVersion="v4.1.1" ;; 5) downloadVersion="v5.0.0" ;; *) echoContent red " ---> Snell 版本只支持 v4 或 v5" exit 0 ;; esac downloadUrl="https://dl.nssurge.com/snell/snell-server-${downloadVersion}-linux-${arch}.zip" echoContent green " ---> 下载 Snell ${downloadVersion}" wget -q "${wgetShowProgressStatus}" -O "${snellBinaryRoot}/snell-server-${downloadVersion}.zip" "${downloadUrl}" if [[ ! -f "${snellBinaryRoot}/snell-server-${downloadVersion}.zip" ]]; then echoContent red " ---> Snell 下载失败: ${downloadUrl}" exit 0 fi unzip -o "${snellBinaryRoot}/snell-server-${downloadVersion}.zip" -d "${snellBinaryRoot}/snell-${downloadVersion}" >/dev/null if [[ ! -f "${snellBinaryRoot}/snell-${downloadVersion}/snell-server" ]]; then echoContent red " ---> Snell 解压失败" exit 0 fi mv "${snellBinaryRoot}/snell-${downloadVersion}/snell-server" "${binaryPath}" chmod 755 "${binaryPath}" rm -rf "${snellBinaryRoot}/snell-${downloadVersion}" "${snellBinaryRoot}/snell-server-${downloadVersion}.zip" } installShadowTLSBinary() { if [[ -x "${shadowTLSBinaryPath}" ]]; then echoContent green " ---> Shadow-TLS 已安装" return fi ensureSnellShadowTLSDirs local arch= local version= local assetName= arch="$(getShadowTLSArch)" version=$(curl -s https://api.github.com/repos/ihciah/shadow-tls/releases/latest | jq -r '.tag_name') if [[ -z "${version}" || "${version}" == "null" ]]; then echoContent red " ---> 获取 Shadow-TLS 最新版本失败" exit 0 fi assetName="shadow-tls-${arch}" echoContent green " ---> 下载 Shadow-TLS ${version}" wget -q "${wgetShowProgressStatus}" -O "${shadowTLSBinaryPath}" "https://github.com/ihciah/shadow-tls/releases/download/${version}/${assetName}" if [[ ! -s "${shadowTLSBinaryPath}" ]]; then echoContent red " ---> Shadow-TLS 下载失败" exit 0 fi chmod 755 "${shadowTLSBinaryPath}" } promptSnellShadowTLSPublicPort() { echoContent yellow "请输入 Snell+ShadowTLS 对外端口[回车随机10000-30000，可手动填443]" read -r -p "端口:" snellShadowTLSPort [[ -n "${snellShadowTLSPort}" ]] || snellShadowTLSPort=$((RANDOM % 20001 + 10000)) if ! [[ "${snellShadowTLSPort}" =~ ^[0-9]+$ ]] || ((snellShadowTLSPort < 1 || snellShadowTLSPort > 65535)); then echoContent red " ---> 端口不合法" promptSnellShadowTLSPublicPort return fi checkPort "${snellShadowTLSPort}" allowPort "${snellShadowTLSPort}" tcp echoContent yellow "\n ---> 对外端口: ${snellShadowTLSPort}" } pickSnellLocalPort() { local port= while true; do port=$((RANDOM % 18001 + 31000)) if ! ss -lnt 2>/dev/null | awk '{print $4}' | grep -qE "[:.]${port}$"; then echo "${port}" return fi done } selectSnellVersion() { echoContent yellow "\n请选择 Snell 协议版本" echoContent yellow "1.Snell v5[默认]" echoContent yellow "2.Snell v4" read -r -p "请选择[回车默认1]:" snellVersionChoice case "${snellVersionChoice}" in 2) snellVersion="4" ;; *) snellVersion="5" ;; esac } normalizeHostPort() { if [[ "$1" == *":"* ]]; then echo "$1" else echo "$1:$2" fi } selectShadowTLSTarget() { local defaultTarget= defaultTarget="${shadowTLSTargetDomains[$((RANDOM % ${#shadowTLSTargetDomains[@]}))]}" echoContent skyBlue "\n================= 配置 Shadow-TLS v3 目标域名 =================" echoContent yellow "# 目标域名要求：国内可直连、TLS1.3、SNI匹配；默认池优先选择大厂正常站点" echoContent yellow "# 推荐文档：documents/shadowtls_target_domains.md" read -r -p "请输入目标域名，[回车]随机域名，默认端口443:" shadowTLSTargetInput if [[ -z "${shadowTLSTargetInput}" ]]; then shadowTLSTarget="${defaultTarget}" else shadowTLSTarget="$(normalizeHostPort "${shadowTLSTargetInput}" 443)" fi shadowTLSTargetDomain="${shadowTLSTarget%:*}" shadowTLSTargetPort="${shadowTLSTarget##*:}" echoContent yellow "\n ---> Shadow-TLS 目标: ${shadowTLSTargetDomain}:${shadowTLSTargetPort}" if command -v openssl >/dev/null 2>&1 && command -v timeout >/dev/null 2>&1; then if timeout 8 openssl s_client -tls1_3 -servername "${shadowTLSTargetDomain}" -connect "${shadowTLSTargetDomain}:${shadowTLSTargetPort}" /dev/null 2>&1; then echoContent green " ---> 目标域名 TLS1.3 探测通过" else echoContent yellow " ---> 目标域名 TLS1.3 探测未通过或超时，建议换一个目标" fi fi } promptSnellShadowTLSUser() { snellPSK="$(randomSafeString 28)" shadowTLSPassword="$(randomSafeString 24)" read -r -p "请输入自定义 Snell PSK[回车随机]:" inputSnellPSK [[ -z "${inputSnellPSK}" ]] || snellPSK="${inputSnellPSK}" read -r -p "请输入自定义 Shadow-TLS 密码[回车随机]:" inputShadowTLSPassword [[ -z "${inputShadowTLSPassword}" ]] || shadowTLSPassword="${inputShadowTLSPassword}" snellShadowTLSUserName="${snellPSK:0:8}-snell" read -r -p "请输入自定义用户名[回车随机]:" inputSnellName [[ -z "${inputSnellName}" ]] || snellShadowTLSUserName="${inputSnellName}" } writeSnellShadowTLSNodeFiles() { local nodeId="$1" local snellConf="${snellConfigRoot}/${nodeId}.snell.conf" local metaFile="${snellShadowTLSNodeRoot}/${nodeId}.env" cat <"${snellConf}" [snell-server] listen = 127.0.0.1:${snellLocalPort} psk = ${snellPSK} ipv6 = true reuse = true EOF [[ -z "${snellNodeDNS}" ]] || echo "dns = ${snellNodeDNS}" >>"${snellConf}" cat <"${metaFile}" nodeId='${nodeId}' nodeType='${snellShadowTLSNodeType}' snellVersion='${snellVersion}' publicPort='${snellShadowTLSPort}' localPort='${snellLocalPort}' targetDomain='${shadowTLSTargetDomain}' targetPort='${shadowTLSTargetPort}' snellPSK='${snellPSK}' shadowTLSPassword='${shadowTLSPassword}' userName='${snellShadowTLSUserName}' snellNodeDNS='${snellNodeDNS}' EOF } writeSnellShadowTLSSystemd() { local nodeId="$1" local snellService="/etc/systemd/system/${snellServicePrefix}-${nodeId}.service" local shadowService="/etc/systemd/system/${shadowTLSServicePrefix}-${nodeId}.service" local snellBinary= snellBinary="$(getSnellBinaryPath "${snellVersion}")" cat <"${snellService}" [Unit] Description=dodo258 Snell v${snellVersion} backend ${nodeId} After=network.target [Service] Type=simple ExecStart=${snellBinary} -c ${snellConfigRoot}/${nodeId}.snell.conf Restart=on-failure RestartSec=3 LimitNOFILE=1048576 [Install] WantedBy=multi-user.target EOF cat <"${shadowService}" [Unit] Description=dodo258 Shadow-TLS v3 for Snell ${nodeId} After=network.target ${snellServicePrefix}-${nodeId}.service Requires=${snellServicePrefix}-${nodeId}.service [Service] Type=simple ExecStart=${shadowTLSBinaryPath} --v3 server --listen [::]:${snellShadowTLSPort} --server 127.0.0.1:${snellLocalPort} --tls ${shadowTLSTargetDomain}:${shadowTLSTargetPort} --password ${shadowTLSPassword} Restart=on-failure RestartSec=3 LimitNOFILE=1048576 [Install] WantedBy=multi-user.target EOF systemctl daemon-reload systemctl enable --now "${snellServicePrefix}-${nodeId}.service" >/dev/null 2>&1 systemctl enable --now "${shadowTLSServicePrefix}-${nodeId}.service" >/dev/null 2>&1 } loadSnellShadowTLSNodes() { snellShadowTLSNodeFiles=() snellShadowTLSNodeIds=() snellShadowTLSNodeLabels=() ensureSnellShadowTLSDirs local index=0 local file= for file in "${snellShadowTLSNodeRoot}"/*.env; do [[ -f "${file}" ]] || continue nodeId= nodeType= snellVersion= publicPort= targetDomain= targetPort= userName= snellNodeDNS= # shellcheck disable=SC1090 . "${file}" snellShadowTLSNodeFiles[index]="${file}" snellShadowTLSNodeIds[index]="${nodeId}" snellShadowTLSNodeLabels[index]="端口:${publicPort} 版本:v${snellVersion} 目标:${targetDomain}:${targetPort} 用户:${userName}${snellNodeDNS:+ DNS:${snellNodeDNS}}" index=$((index + 1)) done } selectSnellShadowTLSNode() { local action="$1" loadSnellShadowTLSNodes if [[ ${#snellShadowTLSNodeFiles[@]} -eq 0 ]]; then echoContent yellow " ---> 当前没有已部署的 Snell+ShadowTLS 节点" exit 0 fi echoContent skyBlue "\n请选择要${action}的 Snell+ShadowTLS 节点" local i= for i in "${!snellShadowTLSNodeLabels[@]}"; do echoContent green "$((i + 1)).${snellShadowTLSNodeIds[$i]} ${snellShadowTLSNodeLabels[$i]}" done read -r -p "请选择节点编号:" snellShadowTLSNodeIndex if ! [[ "${snellShadowTLSNodeIndex}" =~ ^[0-9]+$ ]] || ((snellShadowTLSNodeIndex < 1 || snellShadowTLSNodeIndex > ${#snellShadowTLSNodeFiles[@]})); then echoContent red " ---> 选择错误" exit 0 fi snellShadowTLSNodeIndex=$((snellShadowTLSNodeIndex - 1)) snellShadowTLSSelectedFile="${snellShadowTLSNodeFiles[${snellShadowTLSNodeIndex}]}" snellShadowTLSSelectedId="${snellShadowTLSNodeIds[${snellShadowTLSNodeIndex}]}" } deploySnellShadowTLSNode() { snellShadowTLSNodeType="$1" totalProgress=1 echoContent skyBlue "\n功能 1/1 : 部署 Snell+ShadowTLS v3 节点" installTools 1 ensureSnellShadowTLSDirs selectSnellVersion installSnellBinary "${snellVersion}" installShadowTLSBinary promptSnellShadowTLSPublicPort snellLocalPort="$(pickSnellLocalPort)" selectShadowTLSTarget promptSnellShadowTLSUser snellNodeDNS= local nodeId= nodeId="$(date +%Y%m%d%H%M%S)-${snellShadowTLSPort}" writeSnellShadowTLSNodeFiles "${nodeId}" writeSnellShadowTLSSystemd "${nodeId}" if systemctl is-active --quiet "${shadowTLSServicePrefix}-${nodeId}.service"; then echoContent green " ---> Snell+ShadowTLS 节点部署成功" snellShadowTLSSelectedFile="${snellShadowTLSNodeRoot}/${nodeId}.env" snellShadowTLSSelectedId="${nodeId}" showSnellShadowTLSAccounts true else echoContent red " ---> Shadow-TLS 启动失败，请执行 journalctl -u ${shadowTLSServicePrefix}-${nodeId}.service -n 80 --no-pager 查看日志" exit 0 fi } showSnellShadowTLSNodes() { loadSnellShadowTLSNodes if [[ ${#snellShadowTLSNodeFiles[@]} -eq 0 ]]; then echoContent yellow " ---> 当前没有已部署的 Snell+ShadowTLS 节点" exit 0 fi echoContent skyBlue "\n==================== Snell+ShadowTLS 节点 ====================\n" local i= for i in "${!snellShadowTLSNodeLabels[@]}"; do echoContent green "$((i + 1)).${snellShadowTLSNodeIds[$i]} ${snellShadowTLSNodeLabels[$i]}" done } showSnellShadowTLSAccounts() { local skipSelect="$1" if [[ "${skipSelect}" != "true" ]]; then selectSnellShadowTLSNode "查看账号" fi # shellcheck disable=SC1090 . "${snellShadowTLSSelectedFile}" local host= host="$(getPublicIP)" echoContent skyBlue "\n==================== Snell+ShadowTLS 账号 ====================\n" echoContent skyBlue " ---> 节点:${nodeId}" echoContent skyBlue " ---> 账号:${userName}" echoContent yellow "\n ---> Surge/Loon 常用写法" echoContent green " ${userName} = snell, ${host}, ${publicPort}, psk=${snellPSK}, version=${snellVersion}, reuse=true, shadow-tls-password=${shadowTLSPassword}, shadow-tls-sni=${targetDomain}, shadow-tls-version=3\n" echoContent yellow " ---> 格式化明文" echoContent green "协议类型:Snell v${snellVersion}+ShadowTLS v3，地址:${host}，端口:${publicPort}，PSK:${snellPSK}，ShadowTLS密码:${shadowTLSPassword}，SNI:${targetDomain}\n" } setSnellShadowTLSDNS() { selectSnellShadowTLSNode "配置DNS" # shellcheck disable=SC1090 . "${snellShadowTLSSelectedFile}" echoContent yellow "# Snell 节点 DNS 是全节点上游 DNS，不是 sing-box 的 geosite 按域名分流" read -r -p "请输入该节点上游DNS IP[留空表示卸载DNS]:" newSnellDNS snellNodeDNS="${newSnellDNS}" snellShadowTLSNodeType="${nodeType}" snellShadowTLSPort="${publicPort}" snellLocalPort="${localPort}" shadowTLSTargetDomain="${targetDomain}" shadowTLSTargetPort="${targetPort}" snellShadowTLSUserName="${userName}" writeSnellShadowTLSNodeFiles "${nodeId}" systemctl restart "${snellServicePrefix}-${nodeId}.service" "${shadowTLSServicePrefix}-${nodeId}.service" echoContent green " ---> Snell+ShadowTLS 节点 DNS 配置已更新" } deleteSnellShadowTLSNode() { selectSnellShadowTLSNode "删除" read -r -p "确认删除该 Snell+ShadowTLS 节点？[y/n]:" confirmDeleteSnell [[ "${confirmDeleteSnell}" == "y" ]] || exit 0 # shellcheck disable=SC1090 . "${snellShadowTLSSelectedFile}" systemctl disable --now "${shadowTLSServicePrefix}-${nodeId}.service" >/dev/null 2>&1 systemctl disable --now "${snellServicePrefix}-${nodeId}.service" >/dev/null 2>&1 rm -f "/etc/systemd/system/${shadowTLSServicePrefix}-${nodeId}.service" "/etc/systemd/system/${snellServicePrefix}-${nodeId}.service" rm -f "${snellConfigRoot}/${nodeId}.snell.conf" "${snellShadowTLSSelectedFile}" systemctl daemon-reload echoContent green " ---> 已删除 Snell+ShadowTLS 节点: ${nodeId}" } snellShadowTLSMenu() { echoContent skyBlue "\n功能 1/1 : Snell+ShadowTLS 管理" echoContent red "\n==============================================================" echoContent yellow "# 注意事项" echoContent yellow "# Shadow-TLS v3 对外监听，Snell 后端只监听本机随机端口" echoContent yellow "# 默认使用随机公网端口；443 只有在未被 Nginx/旧节点占用时才允许使用" echoContent yellow "# Snell 节点 DNS 是全节点 DNS，不等同 sing-box 的节点级 geosite 分流" echoContent yellow "1.部署新的 Snell+ShadowTLS 节点" echoContent yellow "2.查看已部署节点" echoContent yellow "3.查看某个节点账号" echoContent yellow "4.配置某个节点DNS" echoContent yellow "5.删除某个节点" echoContent red "==============================================================" read -r -p "请选择:" snellShadowTLSAction case "${snellShadowTLSAction}" in 1) deploySnellShadowTLSNode "multi" ;; 2) showSnellShadowTLSNodes ;; 3) showSnellShadowTLSAccounts ;; 4) setSnellShadowTLSDNS ;; 5) deleteSnellShadowTLSNode ;; *) echoContent red " ---> 选择错误" exit 0 ;; esac } installSnellShadowTLS() { deploySnellShadowTLSNode "main" } # 初始化hysteria端口 initHysteriaPort() { readSingBoxConfig if [[ -n "${hysteriaPort}" ]]; then read -r -p "读取到上次安装时的端口，是否使用上次安装时的端口？[y/n]:" historyHysteriaPortStatus if [[ "${historyHysteriaPortStatus}" == "y" ]]; then echoContent yellow "\n ---> 端口: ${hysteriaPort}" else hysteriaPort= fi fi if [[ -z "${hysteriaPort}" ]]; then echoContent yellow "请输入Hysteria端口[回车随机10000-30000]，不可与其他服务重复" read -r -p "端口:" hysteriaPort if [[ -z "${hysteriaPort}" ]]; then hysteriaPort=$((RANDOM % 20001 + 10000)) fi fi if [[ -z ${hysteriaPort} ]]; then echoContent red " ---> 端口不可为空" initHysteriaPort "$2" elif ((hysteriaPort < 1 || hysteriaPort > 65535)); then echoContent red " ---> 端口不合法" initHysteriaPort "$2" fi allowPort "${hysteriaPort}" allowPort "${hysteriaPort}" "udp" } # 初始化hysteria网络信息 initHysteria2Network() { echoContent yellow "请输入本地带宽峰值的下行速度（默认：100，单位：Mbps）" read -r -p "下行速度:" hysteria2ClientDownloadSpeed if [[ -z "${hysteria2ClientDownloadSpeed}" ]]; then hysteria2ClientDownloadSpeed=100 echoContent green "\n ---> 下行速度: ${hysteria2ClientDownloadSpeed}\n" fi echoContent yellow "请输入本地带宽峰值的上行速度（默认：50，单位：Mbps）" read -r -p "上行速度:" hysteria2ClientUploadSpeed if [[ -z "${hysteria2ClientUploadSpeed}" ]]; then hysteria2ClientUploadSpeed=50 echoContent green "\n ---> 上行速度: ${hysteria2ClientUploadSpeed}\n" fi } # firewalld设置端口跳跃 addFirewalldPortHopping() { local start=$1 local end=$2 local targetPort=$3 for port in $(seq "$start" "$end"); do sudo firewall-cmd --permanent --add-forward-port=port="${port}":proto=udp:toport="${targetPort}" done sudo firewall-cmd --reload } # 端口跳跃 addPortHopping() { local type=$1 local targetPort=$2 if [[ -n "${portHoppingStart}" || -n "${portHoppingEnd}" ]]; then echoContent red " ---> 已添加不可重复添加，可删除后重新添加" exit 0 fi if [[ "${release}" == "centos" ]]; then if ! systemctl status firewalld 2>/dev/null | grep -q "active (running)"; then echoContent red " ---> 未启动firewalld防火墙，无法设置端口跳跃。" exit 0 fi fi echoContent skyBlue "\n进度 1/1 : 端口跳跃" echoContent red "\n==============================================================" echoContent yellow "# 注意事项\n" echoContent yellow "仅支持Hysteria2、Tuic" echoContent yellow "端口跳跃的起始位置为30000" echoContent yellow "端口跳跃的结束位置为40000" echoContent yellow "可以在30000-40000范围中选一段" echoContent yellow "建议1000个左右" echoContent yellow "注意不要和其他的端口跳跃设置范围一样，设置相同会覆盖。" echoContent yellow "请输入端口跳跃的范围，例如[30000-31000]" read -r -p "范围:" portHoppingRange if [[ -z "${portHoppingRange}" ]]; then echoContent red " ---> 范围不可为空" addPortHopping "${type}" "${targetPort}" elif echo "${portHoppingRange}" | grep -q "-"; then local portStart= local portEnd= portStart=$(echo "${portHoppingRange}" | awk -F '-' '{print $1}') portEnd=$(echo "${portHoppingRange}" | awk -F '-' '{print $2}') if [[ -z "${portStart}" || -z "${portEnd}" ]]; then echoContent red " ---> 范围不合法" addPortHopping "${type}" "${targetPort}" elif ((portStart < 30000 || portStart > 40000 || portEnd < 30000 || portEnd > 40000 || portEnd < portStart)); then echoContent red " ---> 范围不合法" addPortHopping "${type}" "${targetPort}" else echoContent green "\n端口范围: ${portHoppingRange}\n" if [[ "${release}" == "centos" ]]; then sudo firewall-cmd --permanent --add-masquerade sudo firewall-cmd --reload addFirewalldPortHopping "${portStart}" "${portEnd}" "${targetPort}" if ! sudo firewall-cmd --list-forward-ports | grep -q "toport=${targetPort}"; then echoContent red " ---> 端口跳跃添加失败" exit 0 fi else iptables -t nat -A PREROUTING -p udp --dport "${portStart}:${portEnd}" -m comment --comment "dodo258_${type}_portHopping" -j DNAT --to-destination ":${targetPort}" sudo netfilter-persistent save if ! iptables-save | grep -q "dodo258_${type}_portHopping"; then echoContent red " ---> 端口跳跃添加失败" exit 0 fi fi allowPort "${portStart}:${portEnd}" udp echoContent green " ---> 端口跳跃添加成功" fi fi } # 读取端口跳跃的配置 readPortHopping() { local type=$1 local targetPort=$2 local portHoppingStart= local portHoppingEnd= if [[ "${release}" == "centos" ]]; then portHoppingStart=$(sudo firewall-cmd --list-forward-ports | grep "toport=${targetPort}" | head -1 | cut -d ":" -f 1 | cut -d "=" -f 2) portHoppingEnd=$(sudo firewall-cmd --list-forward-ports | grep "toport=${targetPort}" | tail -n 1 | cut -d ":" -f 1 | cut -d "=" -f 2) else if iptables-save | grep -q "dodo258_${type}_portHopping"; then local portHopping= portHopping=$(iptables-save | grep "dodo258_${type}_portHopping" | cut -d " " -f 8) portHoppingStart=$(echo "${portHopping}" | cut -d ":" -f 1) portHoppingEnd=$(echo "${portHopping}" | cut -d ":" -f 2) fi fi if [[ "${type}" == "hysteria2" ]]; then hysteria2PortHoppingStart="${portHoppingStart}" hysteria2PortHoppingEnd=${portHoppingEnd} hysteria2PortHopping="${portHoppingStart}-${portHoppingEnd}" elif [[ "${type}" == "tuic" ]]; then tuicPortHoppingStart="${portHoppingStart}" tuicPortHoppingEnd="${portHoppingEnd}" # tuicPortHopping="${portHoppingStart}-${portHoppingEnd}" fi } # 删除端口跳跃iptables规则 deletePortHoppingRules() { local type=$1 local start=$2 local end=$3 local targetPort=$4 if [[ "${release}" == "centos" ]]; then for port in $(seq "${start}" "${end}"); do sudo firewall-cmd --permanent --remove-forward-port=port="${port}":proto=udp:toport="${targetPort}" done sudo firewall-cmd --reload else iptables -t nat -L PREROUTING --line-numbers | grep "dodo258_${type}_portHopping" | awk '{print $1}' | while read -r line; do iptables -t nat -D PREROUTING 1 sudo netfilter-persistent save done fi } # 端口跳跃菜单 portHoppingMenu() { local type=$1 # 判断iptables是否存在 if ! find /usr/bin /usr/sbin | grep -q -w iptables; then echoContent red " ---> 无法识别iptables工具，无法使用端口跳跃，退出安装" exit 0 fi local targetPort= local portHoppingStart= local portHoppingEnd= if [[ "${type}" == "hysteria2" ]]; then readPortHopping "${type}" "${singBoxHysteria2Port}" targetPort=${singBoxHysteria2Port} portHoppingStart=${hysteria2PortHoppingStart} portHoppingEnd=${hysteria2PortHoppingEnd} elif [[ "${type}" == "tuic" ]]; then readPortHopping "${type}" "${singBoxTuicPort}" targetPort=${singBoxTuicPort} portHoppingStart=${tuicPortHoppingStart} portHoppingEnd=${tuicPortHoppingEnd} fi echoContent skyBlue "\n进度 1/1 : 端口跳跃" echoContent red "\n==============================================================" echoContent yellow "1.添加端口跳跃" echoContent yellow "2.删除端口跳跃" echoContent yellow "3.查看端口跳跃" read -r -p "请选择:" selectPortHoppingStatus if [[ "${selectPortHoppingStatus}" == "1" ]]; then addPortHopping "${type}" "${targetPort}" elif [[ "${selectPortHoppingStatus}" == "2" ]]; then deletePortHoppingRules "${type}" "${portHoppingStart}" "${portHoppingEnd}" "${targetPort}" echoContent green " ---> 删除成功" elif [[ "${selectPortHoppingStatus}" == "3" ]]; then if [[ -n "${portHoppingStart}" && -n "${portHoppingEnd}" ]]; then echoContent green " ---> 当前端口跳跃范围为: ${portHoppingStart}-${portHoppingEnd}" else echoContent yellow " ---> 未设置端口跳跃" fi else portHoppingMenu fi } # 初始化tuic端口 initTuicPort() { readSingBoxConfig if [[ -n "${tuicPort}" ]]; then read -r -p "读取到上次安装时的端口，是否使用上次安装时的端口？[y/n]:" historyTuicPortStatus if [[ "${historyTuicPortStatus}" == "y" ]]; then echoContent yellow "\n ---> 端口: ${tuicPort}" else tuicPort= fi fi if [[ -z "${tuicPort}" ]]; then echoContent yellow "请输入Tuic端口[回车随机10000-30000]，不可与其他服务重复" read -r -p "端口:" tuicPort if [[ -z "${tuicPort}" ]]; then tuicPort=$((RANDOM % 20001 + 10000)) fi fi if [[ -z ${tuicPort} ]]; then echoContent red " ---> 端口不可为空" initTuicPort "$2" elif ((tuicPort < 1 || tuicPort > 65535)); then echoContent red " ---> 端口不合法" initTuicPort "$2" fi echoContent green "\n ---> 端口: ${tuicPort}" allowPort "${tuicPort}" allowPort "${tuicPort}" "udp" } # 初始化tuic的协议 initTuicProtocol() { if [[ -n "${tuicAlgorithm}" && -z "${lastInstallationConfig}" ]]; then read -r -p "读取到上次使用的算法，是否使用 ？[y/n]:" historyTuicAlgorithm if [[ "${historyTuicAlgorithm}" != "y" ]]; then tuicAlgorithm= else echoContent yellow "\n ---> 算法: ${tuicAlgorithm}\n" fi elif [[ -n "${tuicAlgorithm}" && -n "${lastInstallationConfig}" ]]; then echoContent yellow "\n ---> 算法: ${tuicAlgorithm}\n" fi if [[ -z "${tuicAlgorithm}" ]]; then echoContent skyBlue "\n请选择算法类型" echoContent red "==============================================================" echoContent yellow "1.bbr(默认)" echoContent yellow "2.cubic" echoContent yellow "3.new_reno" echoContent red "==============================================================" read -r -p "请选择:" selectTuicAlgorithm case ${selectTuicAlgorithm} in 1) tuicAlgorithm="bbr" ;; 2) tuicAlgorithm="cubic" ;; 3) tuicAlgorithm="new_reno" ;; *) tuicAlgorithm="bbr" ;; esac echoContent yellow "\n ---> 算法: ${tuicAlgorithm}\n" fi } # 初始化tuic配置 #initTuicConfig() { # echoContent skyBlue "\n进度 $1/${totalProgress} : 初始化Tuic配置" # # initTuicPort # initTuicProtocol # cat </etc/v2ray-agent/tuic/conf/config.json #{ # "server": "[::]:${tuicPort}", # "users": $(initXrayClients 9), # "certificate": "/etc/v2ray-agent/tls/${currentHost}.crt", # "private_key": "/etc/v2ray-agent/tls/${currentHost}.key", # "congestion_control":"${tuicAlgorithm}", # "alpn": ["h3"], # "log_level": "warn" #} #EOF #} # 初始化singbox route配置 initSingBoxRouteConfig() { downloadSingBoxGeositeDB local outboundTag=$1 if [[ ! -f "${singBoxConfigPath}${outboundTag}_route.json" ]]; then cat <"${singBoxConfigPath}${outboundTag}_route.json" { "route": { "geosite": { "path": "${singBoxConfigPath}geosite.db" }, "rules": [ { "domain": [ ], "geosite": [ ], "outbound": "${outboundTag}" } ] } } EOF fi } # 下载sing-box geosite db downloadSingBoxGeositeDB() { if [[ ! -f "${singBoxConfigPath}geosite.db" ]]; then if [[ "${release}" == "alpine" ]]; then wget -q -P "${singBoxConfigPath}" https://github.com/Johnshall/sing-geosite/releases/latest/download/geosite.db else wget -q "${wgetShowProgressStatus}" -P "${singBoxConfigPath}" https://github.com/Johnshall/sing-geosite/releases/latest/download/geosite.db fi fi } # 添加sing-box路由规则 addSingBoxRouteRule() { local outboundTag=$1 # 域名列表 local domainList=$2 # 路由文件名称 local routingName=$3 # 读取上次安装内容 if [[ -f "${singBoxConfigPath}${routingName}.json" ]]; then read -r -p "读取到上次的配置，是否保留 ？[y/n]:" historyRouteStatus if [[ "${historyRouteStatus}" == "y" ]]; then domainList="${domainList},$(jq -rc .route.rules[0].rule_set[] "${singBoxConfigPath}${routingName}.json" | awk -F "[_]" '{print $1}' | paste -sd ',')" domainList="${domainList},$(jq -rc .route.rules[0].domain_regex[] "${singBoxConfigPath}${routingName}.json" | awk -F "[*]" '{print $2}' | paste -sd ',' | sed 's/\\//g')" fi fi local rules= rules=$(initSingBoxRules "${domainList}" "${routingName}") # domain精确匹配规则 local domainRules= domainRules=$(echo "${rules}" | jq .domainRules) # ruleSet规则集 local ruleSet= ruleSet=$(echo "${rules}" | jq .ruleSet) # ruleSet规则tag local ruleSetTag=[] if [[ "$(echo "${ruleSet}" | jq '.|length')" != "0" ]]; then ruleSetTag=$(echo "${ruleSet}" | jq '.|map(.tag)') fi if [[ -n "${singBoxConfigPath}" ]]; then cat <"${singBoxConfigPath}${routingName}.json" { "route": { "rules": [ { "rule_set":${ruleSetTag}, "domain_regex":${domainRules}, "outbound": "${outboundTag}" } ], "rule_set":${ruleSet} } } EOF jq 'if .route.rule_set == [] then del(.route.rule_set) else . end' "${singBoxConfigPath}${routingName}.json" >"${singBoxConfigPath}${routingName}_tmp.json" && mv "${singBoxConfigPath}${routingName}_tmp.json" "${singBoxConfigPath}${routingName}.json" fi } # 移除sing-box route rule removeSingBoxRouteRule() { local outboundTag=$1 local delRules if [[ -f "${singBoxConfigPath}${outboundTag}_route.json" ]]; then delRules=$(jq -r 'del(.route.rules[]|select(.outbound=="'"${outboundTag}"'"))' "${singBoxConfigPath}${outboundTag}_route.json") echo "${delRules}" >"${singBoxConfigPath}${outboundTag}_route.json" fi } # 添加sing-box出站 addSingBoxOutbound() { local tag=$1 local type="ipv4" local detour=${2:-} if echo "${tag}" | grep -q "IPv6"; then type=ipv6 fi if [[ -n "${detour}" ]]; then cat <"${singBoxConfigPath}${tag}.json" { "outbounds": [ { "type": "direct", "tag": "${tag}", "detour": "${detour}", "domain_strategy": "${type}_only" } ] } EOF elif echo "${tag}" | grep -q "direct"; then cat <"${singBoxConfigPath}${tag}.json" { "outbounds": [ { "type": "direct", "tag": "${tag}" } ] } EOF elif echo "${tag}" | grep -q "block"; then cat <"${singBoxConfigPath}${tag}.json" { "outbounds": [ { "type": "block", "tag": "${tag}" } ] } EOF else cat <"${singBoxConfigPath}${tag}.json" { "outbounds": [ { "type": "direct", "tag": "${tag}", "domain_strategy": "${type}_only" } ] } EOF fi } # 添加Xray-core 出站 addXrayOutbound() { local tag=$1 local domainStrategy= if echo "${tag}" | grep -q "IPv4"; then domainStrategy="ForceIPv4" elif echo "${tag}" | grep -q "IPv6"; then domainStrategy="ForceIPv6" fi if [[ -n "${domainStrategy}" ]]; then cat <"/etc/v2ray-agent/xray/conf/${tag}.json" { "outbounds":[ { "protocol":"freedom", "settings":{ "domainStrategy":"${domainStrategy}" }, "tag":"${tag}" } ] } EOF fi # direct if echo "${tag}" | grep -q "direct"; then cat <"/etc/v2ray-agent/xray/conf/${tag}.json" { "outbounds":[ { "protocol":"freedom", "settings": { "domainStrategy":"UseIP" }, "tag":"${tag}" } ] } EOF fi # blackhole if echo "${tag}" | grep -q "blackhole"; then cat <"/etc/v2ray-agent/xray/conf/${tag}.json" { "outbounds":[ { "protocol":"blackhole", "tag":"${tag}" } ] } EOF fi # socks5 outbound if echo "${tag}" | grep -q "socks5"; then cat <"/etc/v2ray-agent/xray/conf/${tag}.json" { "outbounds": [ { "protocol": "socks", "tag": "${tag}", "settings": { "servers": [ { "address": "${socks5RoutingOutboundIP}", "port": ${socks5RoutingOutboundPort}, "users": [ { "user": "${socks5RoutingOutboundUserName}", "pass": "${socks5RoutingOutboundPassword}" } ] } ] } } ] } EOF fi if echo "${tag}" | grep -q "wireguard_out_IPv4"; then cat <"/etc/v2ray-agent/xray/conf/${tag}.json" { "outbounds": [ { "protocol": "wireguard", "settings": { "secretKey": "${secretKeyWarpReg}", "address": [ "${address}" ], "peers": [ { "publicKey": "${publicKeyWarpReg}", "allowedIPs": [ "0.0.0.0/0", "::/0" ], "endpoint": "162.159.192.1:2408" } ], "reserved": ${reservedWarpReg}, "mtu": 1280 }, "tag": "${tag}" } ] } EOF fi if echo "${tag}" | grep -q "wireguard_out_IPv6"; then cat <"/etc/v2ray-agent/xray/conf/${tag}.json" { "outbounds": [ { "protocol": "wireguard", "settings": { "secretKey": "${secretKeyWarpReg}", "address": [ "${address}" ], "peers": [ { "publicKey": "${publicKeyWarpReg}", "allowedIPs": [ "0.0.0.0/0", "::/0" ], "endpoint": "162.159.192.1:2408" } ], "reserved": ${reservedWarpReg}, "mtu": 1280 }, "tag": "${tag}" } ] } EOF fi if echo "${tag}" | grep -q "vmess-out"; then cat <"/etc/v2ray-agent/xray/conf/${tag}.json" { "outbounds": [ { "tag": "${tag}", "protocol": "vmess", "streamSettings": { "network": "ws", "security": "tls", "tlsSettings": {}, "wsSettings": { "path": "${setVMessWSTLSPath}" } }, "mux": { "enabled": true, "concurrency": 8 }, "settings": { "vnext": [ { "address": "${setVMessWSTLSAddress}", "port": "${setVMessWSTLSPort}", "users": [ { "id": "${setVMessWSTLSUUID}", "security": "auto", "alterId": 0 } ] } ] } } ] } EOF fi } # 删除 Xray-core出站 removeXrayOutbound() { local tag=$1 if [[ -f "/etc/v2ray-agent/xray/conf/${tag}.json" ]]; then rm "/etc/v2ray-agent/xray/conf/${tag}.json" >/dev/null 2>&1 fi } # 移除sing-box配置 removeSingBoxConfig() { local tag=$1 if [[ -f "${singBoxConfigPath}${tag}.json" ]]; then rm "${singBoxConfigPath}${tag}.json" fi } # 初始化wireguard出站信息 addSingBoxWireGuardEndpoints() { local type=$1 readConfigWarpReg cat <"${singBoxConfigPath}wireguard_endpoints_${type}.json" { "endpoints": [ { "type": "wireguard", "tag": "wireguard_endpoints_${type}", "address": [ "${address}" ], "private_key": "${secretKeyWarpReg}", "peers": [ { "address": "162.159.192.1", "port": 2408, "public_key": "${publicKeyWarpReg}", "reserved":${reservedWarpReg}, "allowed_ips": ["0.0.0.0/0","::/0"] } ] } ] } EOF } # 初始化 sing-box Hysteria2 配置 initSingBoxHysteria2Config() { echoContent skyBlue "\n进度 $1/${totalProgress} : 初始化Hysteria2配置" initHysteriaPort initHysteria2Network cat </etc/v2ray-agent/sing-box/conf/config/hysteria2.json { "inbounds": [ { "type": "hysteria2", "listen": "::", "listen_port": ${hysteriaPort}, "users": $(initXrayClients 6), "up_mbps":${hysteria2ClientDownloadSpeed}, "down_mbps":${hysteria2ClientUploadSpeed}, "tls": { "enabled": true, "server_name":"${currentHost}", "alpn": [ "h3" ], "certificate_path": "/etc/v2ray-agent/tls/${currentHost}.crt", "key_path": "/etc/v2ray-agent/tls/${currentHost}.key" } } ] } EOF } # sing-box Tuic安装 singBoxTuicInstall() { if ! echo "${currentInstallProtocolType}" | grep -qE ",0,|,1,|,2,|,3,|,4,|,5,|,6,|,9,|,10,"; then echoContent red "\n ---> 由于需要依赖证书，如安装Tuic，请先安装带有TLS标识协议" exit 0 fi totalProgress=5 installSingBox 1 selectCustomInstallType=",9," initSingBoxConfig custom 2 true installSingBoxService 3 reloadCore showAccounts 4 } # sing-box hy2安装 singBoxHysteria2Install() { if ! echo "${currentInstallProtocolType}" | grep -qE ",0,|,1,|,2,|,3,|,4,|,5,|,6,|,9,|,10,"; then echoContent red "\n ---> 由于需要依赖证书，如安装Hysteria2，请先安装带有TLS标识协议" exit 0 fi totalProgress=5 installSingBox 1 selectCustomInstallType=",6," initSingBoxConfig custom 2 true installSingBoxService 3 reloadCore showAccounts 4 } # 合并config singBoxMergeConfig() { rm /etc/v2ray-agent/sing-box/conf/config.json >/dev/null 2>&1 /etc/v2ray-agent/sing-box/sing-box merge config.json -C /etc/v2ray-agent/sing-box/conf/config/ -D /etc/v2ray-agent/sing-box/conf/ >/dev/null 2>&1 } # 初始化Xray Trojan XTLS 配置文件 #initXrayFrontingConfig() { # echoContent red " ---> Trojan暂不支持 xtls-rprx-vision" # if [[ -z "${configPath}" ]]; then # echoContent red " ---> 未安装，请使用脚本安装" # menu # exit 0 # fi # if [[ "${coreInstallType}" != "1" ]]; then # echoContent red " ---> 未安装可用类型" # fi # local xtlsType= # if echo ${currentInstallProtocolType} | grep -q trojan; then # xtlsType=VLESS # else # xtlsType=Trojan # fi # # echoContent skyBlue "\n功能 1/${totalProgress} : 前置切换为${xtlsType}" # echoContent red "\n==============================================================" # echoContent yellow "# 注意事项\n" # echoContent yellow "会将前置替换为${xtlsType}" # echoContent yellow "如果前置是Trojan，查看账号时则会出现两个Trojan协议的节点，有一个不可用xtls" # echoContent yellow "再次执行可切换至上一次的前置\n" # # echoContent yellow "1.切换至${xtlsType}" # echoContent red "==============================================================" # read -r -p "请选择:" selectType # if [[ "${selectType}" == "1" ]]; then # # if [[ "${xtlsType}" == "Trojan" ]]; then # # local VLESSConfig # VLESSConfig=$(cat ${configPath}${frontingType}.json) # VLESSConfig=${VLESSConfig//"id"/"password"} # VLESSConfig=${VLESSConfig//VLESSTCP/TrojanTCPXTLS} # VLESSConfig=${VLESSConfig//VLESS/Trojan} # VLESSConfig=${VLESSConfig//"vless"/"trojan"} # VLESSConfig=${VLESSConfig//"id"/"password"} # # echo "${VLESSConfig}" | jq . >${configPath}02_trojan_TCP_inbounds.json # rm ${configPath}${frontingType}.json # elif [[ "${xtlsType}" == "VLESS" ]]; then # # local VLESSConfig # VLESSConfig=$(cat ${configPath}02_trojan_TCP_inbounds.json) # VLESSConfig=${VLESSConfig//"password"/"id"} # VLESSConfig=${VLESSConfig//TrojanTCPXTLS/VLESSTCP} # VLESSConfig=${VLESSConfig//Trojan/VLESS} # VLESSConfig=${VLESSConfig//"trojan"/"vless"} # VLESSConfig=${VLESSConfig//"password"/"id"} # # echo "${VLESSConfig}" | jq . >${configPath}02_VLESS_TCP_inbounds.json # rm ${configPath}02_trojan_TCP_inbounds.json # fi # reloadCore # fi # # exit 0 #} # 初始化sing-box端口 initSingBoxPort() { local port=$1 if [[ -n "${port}" && -z "${lastInstallationConfig}" ]]; then read -r -p "读取到上次使用的端口，是否使用 ？[y/n]:" historyPort if [[ "${historyPort}" != "y" ]]; then port= else echo "${port}" fi elif [[ -n "${port}" && -n "${lastInstallationConfig}" ]]; then echo "${port}" fi if [[ -z "${port}" ]]; then read -r -p '请输入自定义端口[需合法]，端口不可重复，[回车]随机端口:' port if [[ -z "${port}" ]]; then port=$((RANDOM % 50001 + 10000)) fi if ((port >= 1 && port <= 65535)); then allowPort "${port}" allowPort "${port}" "udp" echo "${port}" else echoContent red " ---> 端口输入错误" exit 0 fi fi } # 初始化Xray 配置文件 initXrayConfig() { echoContent skyBlue "\n进度 $2/${totalProgress} : 初始化Xray配置" echo local uuid= local addClientsStatus= if [[ -n "${currentUUID}" && -z "${lastInstallationConfig}" ]]; then read -r -p "读取到上次用户配置，是否使用上次安装的配置 ？[y/n]:" historyUUIDStatus if [[ "${historyUUIDStatus}" == "y" ]]; then addClientsStatus=true echoContent green "\n ---> 使用成功" fi elif [[ -n "${currentUUID}" && -n "${lastInstallationConfig}" ]]; then addClientsStatus=true fi if [[ -z "${addClientsStatus}" ]]; then echoContent yellow "请输入自定义UUID[需合法]，[回车]随机UUID" read -r -p 'UUID:' customUUID if [[ -n ${customUUID} ]]; then uuid=${customUUID} else uuid=$(/etc/v2ray-agent/xray/xray uuid) fi echoContent yellow "\n请输入自定义用户名[需合法]，[回车]随机用户名" read -r -p '用户名:' customEmail if [[ -z ${customEmail} ]]; then customEmail="$(echo "${uuid}" | cut -d "-" -f 1)-VLESS_TCP/TLS_Vision" fi fi if [[ -z "${addClientsStatus}" && -z "${uuid}" ]]; then addClientsStatus= echoContent red "\n ---> uuid读取错误，随机生成" uuid=$(/etc/v2ray-agent/xray/xray uuid) fi if [[ -n "${uuid}" ]]; then currentClients='[{"id":"'${uuid}'","add":"'${add}'","flow":"xtls-rprx-vision","email":"'${customEmail}'"}]' echoContent green "\n ${customEmail}:${uuid}" echo fi # log if [[ ! -f "/etc/v2ray-agent/xray/conf/00_log.json" ]]; then cat </etc/v2ray-agent/xray/conf/00_log.json { "log": { "error": "/etc/v2ray-agent/xray/error.log", "loglevel": "warning", "dnsLog": false } } EOF fi if [[ ! -f "/etc/v2ray-agent/xray/conf/12_policy.json" ]]; then cat </etc/v2ray-agent/xray/conf/12_policy.json { "policy": { "levels": { "0": { "handshake": $((1 + RANDOM % 4)), "connIdle": $((250 + RANDOM % 51)) } } } } EOF fi addXrayOutbound "z_direct_outbound" # dns if [[ ! -f "/etc/v2ray-agent/xray/conf/11_dns.json" ]]; then cat </etc/v2ray-agent/xray/conf/11_dns.json { "dns": { "servers": [ "localhost" ] } } EOF fi # routing cat </etc/v2ray-agent/xray/conf/09_routing.json { "routing": { "rules": [ { "type": "field", "domain": [ "domain:gstatic.com", "domain:googleapis.com", "domain:googleapis.cn" ], "outboundTag": "z_direct_outbound" } ] } } EOF # VLESS_TCP_TLS_Vision # 回落nginx local fallbacksList='{"dest":31300,"xver":1},{"alpn":"h2","dest":31302,"xver":1}' # trojan if echo "${selectCustomInstallType}" | grep -q ",4," || [[ "$1" == "all" ]]; then fallbacksList='{"dest":31296,"xver":1},{"alpn":"h2","dest":31302,"xver":1}' cat </etc/v2ray-agent/xray/conf/04_trojan_TCP_inbounds.json { "inbounds":[ { "port": 31296, "listen": "127.0.0.1", "protocol": "trojan", "tag":"trojanTCP", "settings": { "clients": $(initXrayClients 4), "fallbacks":[ { "dest":"31300", "xver":1 } ] }, "streamSettings": { "network": "tcp", "security": "none", "tcpSettings": { "acceptProxyProtocol": true } } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/xray/conf/04_trojan_TCP_inbounds.json >/dev/null 2>&1 fi # VLESS_WS_TLS if echo "${selectCustomInstallType}" | grep -q ",1," || [[ "$1" == "all" ]]; then fallbacksList=${fallbacksList}',{"path":"/'${customPath}'ws","dest":31297,"xver":1}' cat </etc/v2ray-agent/xray/conf/03_VLESS_WS_inbounds.json { "inbounds":[ { "port": 31297, "listen": "127.0.0.1", "protocol": "vless", "tag":"VLESSWS", "settings": { "clients": $(initXrayClients 1), "decryption": "none" }, "streamSettings": { "network": "ws", "security": "none", "wsSettings": { "acceptProxyProtocol": true, "path": "/${customPath}ws" } } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/xray/conf/03_VLESS_WS_inbounds.json >/dev/null 2>&1 fi # VLESS_Reality_XHTTP_TLS if echo "${selectCustomInstallType}" | grep -q ",12," || [[ "$1" == "all" ]]; then initXrayXHTTPort initRealityClientServersName initRealityKey initRealityMldsa65 cat </etc/v2ray-agent/xray/conf/12_VLESS_XHTTP_inbounds.json { "inbounds":[ { "port": ${xHTTPort}, "listen": "0.0.0.0", "protocol": "vless", "tag":"VLESSRealityXHTTP", "settings": { "clients": $(initXrayClients 12), "decryption": "none" }, "streamSettings": { "network": "xhttp", "security": "reality", "realitySettings": { "show": false, "dest": "${realityServerName}:${realityDomainPort}", "xver": 0, "serverNames": [ "${realityServerName}" ], "privateKey": "${realityPrivateKey}", "maxTimeDiff": 70000, "shortIds": [ "", "6ba85179e30d4fc2" ] }, "xhttpSettings": { "host": "${realityServerName}", "path": "/${customPath}xHTTP", "mode": "auto" } } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/xray/conf/12_VLESS_XHTTP_inbounds.json >/dev/null 2>&1 fi if echo "${selectCustomInstallType}" | grep -q ",3," || [[ "$1" == "all" ]]; then fallbacksList=${fallbacksList}',{"path":"/'${customPath}'vws","dest":31299,"xver":1}' cat </etc/v2ray-agent/xray/conf/05_VMess_WS_inbounds.json { "inbounds":[ { "listen": "127.0.0.1", "port": 31299, "protocol": "vmess", "tag":"VMessWS", "settings": { "clients": $(initXrayClients 3) }, "streamSettings": { "network": "ws", "security": "none", "wsSettings": { "acceptProxyProtocol": true, "path": "/${customPath}vws" } } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/xray/conf/05_VMess_WS_inbounds.json >/dev/null 2>&1 fi # VLESS_gRPC # if echo "${selectCustomInstallType}" | grep -q ",5," || [[ "$1" == "all" ]]; then # cat </etc/v2ray-agent/xray/conf/06_VLESS_gRPC_inbounds.json #{ # "inbounds":[ # { # "port": 31301, # "listen": "127.0.0.1", # "protocol": "vless", # "tag":"VLESSGRPC", # "settings": { # "clients": $(initXrayClients 5), # "decryption": "none" # }, # "streamSettings": { # "network": "grpc", # "grpcSettings": { # "serviceName": "${customPath}grpc" # } # } # } # ] #} #EOF # elif [[ -z "$3" ]]; then # rm /etc/v2ray-agent/xray/conf/06_VLESS_gRPC_inbounds.json >/dev/null 2>&1 # fi # VLESS Vision if echo "${selectCustomInstallType}" | grep -q ",0," || [[ "$1" == "all" ]]; then cat </etc/v2ray-agent/xray/conf/02_VLESS_TCP_inbounds.json { "inbounds":[ { "port": ${port}, "protocol": "vless", "tag":"VLESSTCP", "settings": { "clients":$(initXrayClients 0), "decryption": "none", "fallbacks": [ ${fallbacksList} ] }, "add": "${add}", "streamSettings": { "network": "tcp", "security": "tls", "tlsSettings": { "rejectUnknownSni": true, "minVersion": "1.2", "certificates": [ { "certificateFile": "/etc/v2ray-agent/tls/${domain}.crt", "keyFile": "/etc/v2ray-agent/tls/${domain}.key", "ocspStapling": 3600 } ] } } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/xray/conf/02_VLESS_TCP_inbounds.json >/dev/null 2>&1 fi # VLESS_TCP/reality if echo "${selectCustomInstallType}" | grep -q ",7," || [[ "$1" == "all" ]]; then echoContent skyBlue "\n===================== 配置VLESS+Reality =====================\n" local realityMldsaConfig= initXrayRealityPort initRealityClientServersName initRealityKey initRealityMldsa65 if [[ -n "${realityMldsa65Seed}" ]]; then realityMldsaConfig=$(cat </etc/v2ray-agent/xray/conf/07_VLESS_vision_reality_inbounds.json { "inbounds": [ { "tag": "dokodemo-in-VLESSReality", "port": ${realityPort}, "protocol": "dokodemo-door", "settings": { "address": "127.0.0.1", "port": 45987, "network": "tcp" }, "sniffing": { "enabled": true, "destOverride": [ "tls" ], "routeOnly": true } }, { "listen": "127.0.0.1", "port": 45987, "protocol": "vless", "settings": { "clients": $(initXrayClients 7), "decryption": "none", "fallbacks":[ ] }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "show": false, "dest": "${realityServerName}:${realityDomainPort}", "xver": 0, "serverNames": [ "${realityServerName}" ], "privateKey": "${realityPrivateKey}", ${realityMldsaConfig} "maxTimeDiff": 70000, "shortIds": [ "", "6ba85179e30d4fc2" ] } }, "sniffing": { "enabled": true, "destOverride": [ "http", "tls", "quic" ], "routeOnly": true } } ], "routing": { "rules": [ { "inboundTag": [ "dokodemo-in" ], "domain": [ "${realityServerName}" ], "outboundTag": "z_direct_outbound" }, { "inboundTag": [ "dokodemo-in" ], "outboundTag": "blackhole_out" } ] } } EOF # cat </etc/v2ray-agent/xray/conf/08_VLESS_vision_gRPC_inbounds.json #{ # "inbounds": [ # { # "port": 31305, # "listen": "127.0.0.1", # "protocol": "vless", # "tag": "VLESSRealityGRPC", # "settings": { # "clients": $(initXrayClients 8), # "decryption": "none" # }, # "streamSettings": { # "network": "grpc", # "grpcSettings": { # "serviceName": "grpc", # "multiMode": true # }, # "sockopt": { # "acceptProxyProtocol": true # } # } # } # ] #} #EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/xray/conf/07_VLESS_vision_reality_inbounds.json >/dev/null 2>&1 rm /etc/v2ray-agent/xray/conf/08_VLESS_vision_gRPC_inbounds.json >/dev/null 2>&1 fi installSniffing if [[ -z "$3" ]]; then removeXrayOutbound wireguard_out_IPv4_route removeXrayOutbound wireguard_out_IPv6_route removeXrayOutbound wireguard_outbound removeXrayOutbound IPv4_out removeXrayOutbound IPv6_out removeXrayOutbound socks5_outbound removeXrayOutbound blackhole_out removeXrayOutbound wireguard_out_IPv6 removeXrayOutbound wireguard_out_IPv4 addXrayOutbound z_direct_outbound addXrayOutbound blackhole_out fi } # 初始化TCP Brutal initTCPBrutal() { echoContent skyBlue "\n进度 $2/${totalProgress} : 初始化TCP_Brutal配置" read -r -p "是否使用TCP_Brutal？[y/n]:" tcpBrutalStatus if [[ "${tcpBrutalStatus}" == "y" ]]; then read -r -p "请输入本地带宽峰值的下行速度（默认：100，单位：Mbps）:" tcpBrutalClientDownloadSpeed if [[ -z "${tcpBrutalClientDownloadSpeed}" ]]; then tcpBrutalClientDownloadSpeed=100 fi read -r -p "请输入本地带宽峰值的上行速度（默认：50，单位：Mbps）:" tcpBrutalClientUploadSpeed if [[ -z "${tcpBrutalClientUploadSpeed}" ]]; then tcpBrutalClientUploadSpeed=50 fi fi } # 初始化sing-box配置文件 initSingBoxConfig() { echoContent skyBlue "\n进度 $2/${totalProgress} : 初始化sing-box配置" echo local uuid= local addClientsStatus= local sslDomain= if [[ -n "${domain}" ]]; then sslDomain="${domain}" elif [[ -n "${currentHost}" ]]; then sslDomain="${currentHost}" fi if [[ -n "${currentUUID}" && -z "${lastInstallationConfig}" ]]; then read -r -p "读取到上次用户配置，是否使用上次安装的配置 ？[y/n]:" historyUUIDStatus if [[ "${historyUUIDStatus}" == "y" ]]; then addClientsStatus=true echoContent green "\n ---> 使用成功" fi elif [[ -n "${currentUUID}" && -n "${lastInstallationConfig}" ]]; then addClientsStatus=true fi if [[ -z "${addClientsStatus}" ]]; then echoContent yellow "请输入自定义UUID[需合法]，[回车]随机UUID" read -r -p 'UUID:' customUUID if [[ -n ${customUUID} ]]; then uuid=${customUUID} else uuid=$(/etc/v2ray-agent/sing-box/sing-box generate uuid) fi echoContent yellow "\n请输入自定义用户名[需合法]，[回车]随机用户名" read -r -p '用户名:' customEmail if [[ -z ${customEmail} ]]; then customEmail="$(echo "${uuid}" | cut -d "-" -f 1)-VLESS_TCP/TLS_Vision" fi fi if [[ -z "${addClientsStatus}" && -z "${uuid}" ]]; then addClientsStatus= echoContent red "\n ---> uuid读取错误，随机生成" uuid=$(/etc/v2ray-agent/sing-box/sing-box generate uuid) fi if [[ -n "${uuid}" ]]; then currentClients='[{"uuid":"'${uuid}'","flow":"xtls-rprx-vision","name":"'${customEmail}'"}]' echoContent yellow "\n ${customEmail}:${uuid}" fi # VLESS Vision if echo "${selectCustomInstallType}" | grep -q ",0," || [[ "$1" == "all" ]]; then echoContent yellow "\n===================== 配置VLESS+Vision =====================\n" echoContent skyBlue "\n开始配置VLESS+Vision协议端口" echo mapfile -t result < <(initSingBoxPort "${singBoxVLESSVisionPort}") echoContent green "\n ---> VLESS_Vision端口：${result[-1]}" checkDNSIP "${domain}" removeNginxDefaultConf handleSingBox stop checkPortOpen "${result[-1]}" "${domain}" cat </etc/v2ray-agent/sing-box/conf/config/02_VLESS_TCP_inbounds.json { "inbounds":[ { "type": "vless", "listen":"::", "listen_port":${result[-1]}, "tag":"VLESSTCP", "users":$(initSingBoxClients 0), "tls":{ "server_name": "${sslDomain}", "enabled": true, "certificate_path": "/etc/v2ray-agent/tls/${sslDomain}.crt", "key_path": "/etc/v2ray-agent/tls/${sslDomain}.key" } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/sing-box/conf/config/02_VLESS_TCP_inbounds.json >/dev/null 2>&1 fi if echo "${selectCustomInstallType}" | grep -q ",1," || [[ "$1" == "all" ]]; then echoContent yellow "\n===================== 配置VLESS+WS =====================\n" echoContent skyBlue "\n开始配置VLESS+WS协议端口" echo mapfile -t result < <(initSingBoxPort "${singBoxVLESSWSPort}") echoContent green "\n ---> VLESS_WS端口：${result[-1]}" checkDNSIP "${domain}" removeNginxDefaultConf handleSingBox stop randomPathFunction checkPortOpen "${result[-1]}" "${domain}" cat </etc/v2ray-agent/sing-box/conf/config/03_VLESS_WS_inbounds.json { "inbounds":[ { "type": "vless", "listen":"::", "listen_port":${result[-1]}, "tag":"VLESSWS", "users":$(initSingBoxClients 1), "tls":{ "server_name": "${sslDomain}", "enabled": true, "certificate_path": "/etc/v2ray-agent/tls/${sslDomain}.crt", "key_path": "/etc/v2ray-agent/tls/${sslDomain}.key" }, "transport": { "type": "ws", "path": "/${currentPath}ws", "max_early_data": 2048, "early_data_header_name": "Sec-WebSocket-Protocol" } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/sing-box/conf/config/03_VLESS_WS_inbounds.json >/dev/null 2>&1 fi if echo "${selectCustomInstallType}" | grep -q ",3," || [[ "$1" == "all" ]]; then echoContent yellow "\n===================== 配置VMess+ws =====================\n" echoContent skyBlue "\n开始配置VMess+ws协议端口" echo mapfile -t result < <(initSingBoxPort "${singBoxVMessWSPort}") echoContent green "\n ---> VMess_ws端口：${result[-1]}" checkDNSIP "${domain}" removeNginxDefaultConf handleSingBox stop randomPathFunction checkPortOpen "${result[-1]}" "${domain}" cat </etc/v2ray-agent/sing-box/conf/config/05_VMess_WS_inbounds.json { "inbounds":[ { "type": "vmess", "listen":"::", "listen_port":${result[-1]}, "tag":"VMessWS", "users":$(initSingBoxClients 3), "tls":{ "server_name": "${sslDomain}", "enabled": true, "certificate_path": "/etc/v2ray-agent/tls/${sslDomain}.crt", "key_path": "/etc/v2ray-agent/tls/${sslDomain}.key" }, "transport": { "type": "ws", "path": "/${currentPath}", "max_early_data": 2048, "early_data_header_name": "Sec-WebSocket-Protocol" } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/sing-box/conf/config/05_VMess_WS_inbounds.json >/dev/null 2>&1 fi # VLESS_Reality_Vision if echo "${selectCustomInstallType}" | grep -q ",7," || [[ "$1" == "all" ]]; then echoContent yellow "\n================= 配置VLESS+Reality+Vision =================\n" initRealityClientServersName initRealityKey echoContent skyBlue "\n开始配置VLESS+Reality+Vision协议端口" echo mapfile -t result < <(initSingBoxPort "${singBoxVLESSRealityVisionPort}") echoContent green "\n ---> VLESS_Reality_Vision端口：${result[-1]}" cat </etc/v2ray-agent/sing-box/conf/config/07_VLESS_vision_reality_inbounds.json { "inbounds": [ { "type": "vless", "listen":"::", "listen_port":${result[-1]}, "tag": "VLESSReality", "users":$(initSingBoxClients 7), "tls": { "enabled": true, "server_name": "${realityServerName}", "reality": { "enabled": true, "handshake":{ "server": "${realityServerName}", "server_port":${realityDomainPort} }, "private_key": "${realityPrivateKey}", "short_id": [ "", "6ba85179e30d4fc2" ] } } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/sing-box/conf/config/07_VLESS_vision_reality_inbounds.json >/dev/null 2>&1 fi if echo "${selectCustomInstallType}" | grep -q ",8," || [[ "$1" == "all" ]]; then echoContent yellow "\n================== 配置VLESS+Reality+gRPC ==================\n" initRealityClientServersName initRealityKey echoContent skyBlue "\n开始配置VLESS+Reality+gRPC协议端口" echo mapfile -t result < <(initSingBoxPort "${singBoxVLESSRealityGRPCPort}") echoContent green "\n ---> VLESS_Reality_gPRC端口：${result[-1]}" cat </etc/v2ray-agent/sing-box/conf/config/08_VLESS_vision_gRPC_inbounds.json { "inbounds": [ { "type": "vless", "listen":"::", "listen_port":${result[-1]}, "users":$(initSingBoxClients 8), "tag": "VLESSRealityGRPC", "tls": { "enabled": true, "server_name": "${realityServerName}", "reality": { "enabled": true, "handshake":{ "server":"${realityServerName}", "server_port":${realityDomainPort} }, "private_key": "${realityPrivateKey}", "short_id": [ "", "6ba85179e30d4fc2" ] } }, "transport": { "type": "grpc", "service_name": "grpc" } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/sing-box/conf/config/08_VLESS_vision_gRPC_inbounds.json >/dev/null 2>&1 fi if echo "${selectCustomInstallType}" | grep -q ",6," || [[ "$1" == "all" ]]; then echoContent yellow "\n================== 配置 Hysteria2 ==================\n" echoContent skyBlue "\n开始配置Hysteria2协议端口" echo mapfile -t result < <(initSingBoxPort "${singBoxHysteria2Port}") echoContent green "\n ---> Hysteria2端口：${result[-1]}" initHysteria2Network cat </etc/v2ray-agent/sing-box/conf/config/06_hysteria2_inbounds.json { "inbounds": [ { "type": "hysteria2", "listen": "::", "listen_port": ${result[-1]}, "users": $(initSingBoxClients 6), "up_mbps":${hysteria2ClientDownloadSpeed}, "down_mbps":${hysteria2ClientUploadSpeed}, "tls": { "enabled": true, "server_name":"${sslDomain}", "alpn": [ "h3" ], "certificate_path": "/etc/v2ray-agent/tls/${sslDomain}.crt", "key_path": "/etc/v2ray-agent/tls/${sslDomain}.key" } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/sing-box/conf/config/06_hysteria2_inbounds.json >/dev/null 2>&1 fi if echo "${selectCustomInstallType}" | grep -q ",4," || [[ "$1" == "all" ]]; then echoContent yellow "\n================== 配置 Trojan ==================\n" echoContent skyBlue "\n开始配置Trojan协议端口" echo mapfile -t result < <(initSingBoxPort "${singBoxTrojanPort}") echoContent green "\n ---> Trojan端口：${result[-1]}" cat </etc/v2ray-agent/sing-box/conf/config/04_trojan_TCP_inbounds.json { "inbounds": [ { "type": "trojan", "listen": "::", "listen_port": ${result[-1]}, "users": $(initSingBoxClients 4), "tls": { "enabled": true, "server_name":"${sslDomain}", "certificate_path": "/etc/v2ray-agent/tls/${sslDomain}.crt", "key_path": "/etc/v2ray-agent/tls/${sslDomain}.key" } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/sing-box/conf/config/04_trojan_TCP_inbounds.json >/dev/null 2>&1 fi if echo "${selectCustomInstallType}" | grep -q ",9," || [[ "$1" == "all" ]]; then echoContent yellow "\n==================== 配置 Tuic =====================\n" echoContent skyBlue "\n开始配置Tuic协议端口" echo mapfile -t result < <(initSingBoxPort "${singBoxTuicPort}") echoContent green "\n ---> Tuic端口：${result[-1]}" initTuicProtocol cat </etc/v2ray-agent/sing-box/conf/config/09_tuic_inbounds.json { "inbounds": [ { "type": "tuic", "listen": "::", "tag": "singbox-tuic-in", "listen_port": ${result[-1]}, "users": $(initSingBoxClients 9), "congestion_control": "${tuicAlgorithm}", "tls": { "enabled": true, "server_name":"${sslDomain}", "alpn": [ "h3" ], "certificate_path": "/etc/v2ray-agent/tls/${sslDomain}.crt", "key_path": "/etc/v2ray-agent/tls/${sslDomain}.key" } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/sing-box/conf/config/09_tuic_inbounds.json >/dev/null 2>&1 fi if echo "${selectCustomInstallType}" | grep -q ",10," || [[ "$1" == "all" ]]; then echoContent yellow "\n==================== 配置 Naive =====================\n" echoContent skyBlue "\n开始配置Naive协议端口" echo mapfile -t result < <(initSingBoxPort "${singBoxNaivePort}") echoContent green "\n ---> Naive端口：${result[-1]}" cat </etc/v2ray-agent/sing-box/conf/config/10_naive_inbounds.json { "inbounds": [ { "type": "naive", "listen": "::", "tag": "singbox-naive-in", "listen_port": ${result[-1]}, "users": $(initSingBoxClients 10), "tls": { "enabled": true, "server_name":"${sslDomain}", "certificate_path": "/etc/v2ray-agent/tls/${sslDomain}.crt", "key_path": "/etc/v2ray-agent/tls/${sslDomain}.key" } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/sing-box/conf/config/10_naive_inbounds.json >/dev/null 2>&1 fi if echo "${selectCustomInstallType}" | grep -q ",11," || [[ "$1" == "all" ]]; then echoContent yellow "\n===================== 配置VMess+HTTPUpgrade =====================\n" echoContent skyBlue "\n开始配置VMess+HTTPUpgrade协议端口" echo mapfile -t result < <(initSingBoxPort "${singBoxVMessHTTPUpgradePort}") echoContent green "\n ---> VMess_HTTPUpgrade端口：${result[-1]}" checkDNSIP "${domain}" removeNginxDefaultConf handleSingBox stop randomPathFunction rm -rf "${nginxConfigPath}sing_box_VMess_HTTPUpgrade.conf" >/dev/null 2>&1 checkPortOpen "${result[-1]}" "${domain}" singBoxNginxConfig "$1" "${result[-1]}" bootStartup nginx cat </etc/v2ray-agent/sing-box/conf/config/11_VMess_HTTPUpgrade_inbounds.json { "inbounds":[ { "type": "vmess", "listen":"127.0.0.1", "listen_port":31306, "tag":"VMessHTTPUpgrade", "users":$(initSingBoxClients 11), "transport": { "type": "httpupgrade", "path": "/${currentPath}" } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/sing-box/conf/config/11_VMess_HTTPUpgrade_inbounds.json >/dev/null 2>&1 fi if echo "${selectCustomInstallType}" | grep -q ",13," || [[ "$1" == "all" ]]; then echoContent yellow "\n================== 配置 AnyTLS ==================\n" echoContent skyBlue "\n开始配置AnyTLS协议端口" echo mapfile -t result < <(initSingBoxPort "${singBoxAnyTLSPort}") echoContent green "\n ---> AnyTLS端口：${result[-1]}" cat </etc/v2ray-agent/sing-box/conf/config/13_anytls_inbounds.json { "inbounds": [ { "type": "anytls", "listen": "::", "tag":"anytls", "listen_port": ${result[-1]}, "users": $(initSingBoxClients 13), "tls": { "enabled": true, "server_name":"${sslDomain}", "certificate_path": "/etc/v2ray-agent/tls/${sslDomain}.crt", "key_path": "/etc/v2ray-agent/tls/${sslDomain}.key" } } ] } EOF elif [[ -z "$3" ]]; then rm /etc/v2ray-agent/sing-box/conf/config/13_anytls_inbounds.json >/dev/null 2>&1 fi if [[ -z "$3" ]]; then removeSingBoxConfig wireguard_endpoints_IPv4_route removeSingBoxConfig wireguard_endpoints_IPv6_route removeSingBoxConfig wireguard_endpoints_IPv4 removeSingBoxConfig wireguard_endpoints_IPv6 removeSingBoxConfig IPv4_out removeSingBoxConfig IPv6_out removeSingBoxConfig IPv6_route removeSingBoxConfig block removeSingBoxConfig cn_block_outbound removeSingBoxConfig cn_block_route removeSingBoxConfig 01_direct_outbound removeSingBoxConfig socks5_outbound.json removeSingBoxConfig block_domain_outbound removeSingBoxConfig dns fi setSniffRouting } # 初始化 sing-box订阅配置 initSubscribeLocalConfig() { rm -rf /etc/v2ray-agent/subscribe_local/sing-box/* } # 通用 defaultBase64Code() { local type=$1 local port=$2 local email=$3 local id=$4 local add=$5 local path=$6 local user= user=$(echo "${email}" | awk -F "[-]" '{print $1}') if [[ ! -f "/etc/v2ray-agent/subscribe_local/sing-box/${user}" ]]; then echo [] >"/etc/v2ray-agent/subscribe_local/sing-box/${user}" fi local singBoxSubscribeLocalConfig= if [[ "${type}" == "vlesstcp" ]]; then echoContent yellow " ---> 通用格式(VLESS+TCP+TLS_Vision)" echoContent green " vless://${id}@${currentHost}:${port}?encryption=none&security=tls&fp=chrome&type=tcp&host=${currentHost}&headerType=none&sni=${currentHost}&flow=xtls-rprx-vision#${email}\n" echoContent yellow " ---> 格式化明文(VLESS+TCP+TLS_Vision)" echoContent green "协议类型:VLESS，地址:${currentHost}，端口:${port}，用户ID:${id}，安全:tls，client-fingerprint: chrome，传输方式:tcp，flow:xtls-rprx-vision，账户名:${email}\n" cat <>"/etc/v2ray-agent/subscribe_local/default/${user}" vless://${id}@${currentHost}:${port}?encryption=none&security=tls&type=tcp&host=${currentHost}&fp=chrome&headerType=none&sni=${currentHost}&flow=xtls-rprx-vision#${email} EOF cat <>"/etc/v2ray-agent/subscribe_local/clashMeta/${user}" - name: "${email}" type: vless server: ${currentHost} port: ${port} uuid: ${id} network: tcp tls: true udp: true flow: xtls-rprx-vision client-fingerprint: chrome EOF singBoxSubscribeLocalConfig=$(jq -r ". += [{\"tag\":\"${email}\",\"type\":\"vless\",\"server\":\"${currentHost}\",\"server_port\":${port},\"uuid\":\"${id}\",\"flow\":\"xtls-rprx-vision\",\"tls\":{\"enabled\":true,\"server_name\":\"${currentHost}\",\"utls\":{\"enabled\":true,\"fingerprint\":\"chrome\"}},\"packet_encoding\":\"xudp\"}]" "/etc/v2ray-agent/subscribe_local/sing-box/${user}") echo "${singBoxSubscribeLocalConfig}" | jq . >"/etc/v2ray-agent/subscribe_local/sing-box/${user}" echoContent yellow " ---> 二维码 VLESS(VLESS+TCP+TLS_Vision)" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${id}%40${currentHost}%3A${port}%3Fencryption%3Dnone%26fp%3Dchrome%26security%3Dtls%26type%3Dtcp%26${currentHost}%3D${currentHost}%26headerType%3Dnone%26sni%3D${currentHost}%26flow%3Dxtls-rprx-vision%23${email}\n" elif [[ "${type}" == "vmessws" ]]; then qrCodeBase64Default=$(echo -n "{\"port\":${port},\"ps\":\"${email}\",\"tls\":\"tls\",\"id\":\"${id}\",\"aid\":0,\"v\":2,\"host\":\"${currentHost}\",\"type\":\"none\",\"path\":\"${path}\",\"net\":\"ws\",\"add\":\"${add}\",\"method\":\"none\",\"peer\":\"${currentHost}\",\"sni\":\"${currentHost}\"}" | base64 -w 0) qrCodeBase64Default="${qrCodeBase64Default// /}" echoContent yellow " ---> 通用json(VMess+WS+TLS)" echoContent green " {\"port\":${port},\"ps\":\"${email}\",\"tls\":\"tls\",\"id\":\"${id}\",\"aid\":0,\"v\":2,\"host\":\"${currentHost}\",\"type\":\"none\",\"path\":\"${path}\",\"net\":\"ws\",\"add\":\"${add}\",\"method\":\"none\",\"peer\":\"${currentHost}\",\"sni\":\"${currentHost}\"}\n" echoContent yellow " ---> 通用vmess(VMess+WS+TLS)链接" echoContent green " vmess://${qrCodeBase64Default}\n" echoContent yellow " ---> 二维码 vmess(VMess+WS+TLS)" cat <>"/etc/v2ray-agent/subscribe_local/default/${user}" vmess://${qrCodeBase64Default} EOF cat <>"/etc/v2ray-agent/subscribe_local/clashMeta/${user}" - name: "${email}" type: vmess server: ${add} port: ${port} uuid: ${id} alterId: 0 cipher: none udp: true tls: true client-fingerprint: chrome servername: ${currentHost} network: ws ws-opts: path: ${path} headers: Host: ${currentHost} EOF singBoxSubscribeLocalConfig=$(jq -r ". += [{\"tag\":\"${email}\",\"type\":\"vmess\",\"server\":\"${add}\",\"server_port\":${port},\"uuid\":\"${id}\",\"alter_id\":0,\"tls\":{\"enabled\":true,\"server_name\":\"${currentHost}\",\"utls\":{\"enabled\":true,\"fingerprint\":\"chrome\"}},\"packet_encoding\":\"packetaddr\",\"transport\":{\"type\":\"ws\",\"path\":\"${path}\",\"max_early_data\":2048,\"early_data_header_name\":\"Sec-WebSocket-Protocol\"}}]" "/etc/v2ray-agent/subscribe_local/sing-box/${user}") echo "${singBoxSubscribeLocalConfig}" | jq . >"/etc/v2ray-agent/subscribe_local/sing-box/${user}" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vmess://${qrCodeBase64Default}\n" elif [[ "${type}" == "vlessws" ]]; then echoContent yellow " ---> 通用格式(VLESS+WS+TLS)" echoContent green " vless://${id}@${add}:${port}?encryption=none&security=tls&type=ws&host=${currentHost}&sni=${currentHost}&fp=chrome&path=${path}#${email}\n" echoContent yellow " ---> 格式化明文(VLESS+WS+TLS)" echoContent green " 协议类型:VLESS，地址:${add}，伪装域名/SNI:${currentHost}，端口:${port}，client-fingerprint: chrome,用户ID:${id}，安全:tls，传输方式:ws，路径:${path}，账户名:${email}\n" cat <>"/etc/v2ray-agent/subscribe_local/default/${user}" vless://${id}@${add}:${port}?encryption=none&security=tls&type=ws&host=${currentHost}&sni=${currentHost}&fp=chrome&path=${path}#${email} EOF cat <>"/etc/v2ray-agent/subscribe_local/clashMeta/${user}" - name: "${email}" type: vless server: ${add} port: ${port} uuid: ${id} udp: true tls: true network: ws client-fingerprint: chrome servername: ${currentHost} ws-opts: path: ${path} headers: Host: ${currentHost} EOF singBoxSubscribeLocalConfig=$(jq -r ". += [{\"tag\":\"${email}\",\"type\":\"vless\",\"server\":\"${add}\",\"server_port\":${port},\"uuid\":\"${id}\",\"tls\":{\"enabled\":true,\"server_name\":\"${currentHost}\",\"utls\":{\"enabled\":true,\"fingerprint\":\"chrome\"}},\"multiplex\":{\"enabled\":false,\"protocol\":\"smux\",\"max_streams\":32},\"packet_encoding\":\"xudp\",\"transport\":{\"type\":\"ws\",\"path\":\"${path}\",\"headers\":{\"Host\":\"${currentHost}\"}}}]" "/etc/v2ray-agent/subscribe_local/sing-box/${user}") echo "${singBoxSubscribeLocalConfig}" | jq . >"/etc/v2ray-agent/subscribe_local/sing-box/${user}" echoContent yellow " ---> 二维码 VLESS(VLESS+WS+TLS)" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${id}%40${add}%3A${port}%3Fencryption%3Dnone%26security%3Dtls%26type%3Dws%26host%3D${currentHost}%26fp%3Dchrome%26sni%3D${currentHost}%26path%3D${path}%23${email}" elif [[ "${type}" == "vlessXHTTP" ]]; then echoContent yellow " ---> 通用格式(VLESS+reality+XHTTP)" echoContent green " vless://${id}@${add}:${port}?encryption=none&security=reality&type=xhttp&sni=${xrayVLESSRealityXHTTPServerName}&host=${xrayVLESSRealityXHTTPServerName}&fp=chrome&path=${path}&pbk=${currentRealityXHTTPPublicKey}&sid=6ba85179e30d4fc2#${email}\n" echoContent yellow " ---> 格式化明文(VLESS+reality+XHTTP)" echoContent green "协议类型:VLESS reality，地址:${add}，publicKey:${currentRealityXHTTPPublicKey}，shortId: 6ba85179e30d4fc2,serverNames：${xrayVLESSRealityXHTTPServerName}，端口:${port}，路径：${path}，SNI:${xrayVLESSRealityXHTTPServerName}，伪装域名:${xrayVLESSRealityXHTTPServerName}，用户ID:${id}，传输方式:xhttp，账户名:${email}\n" cat <>"/etc/v2ray-agent/subscribe_local/default/${user}" vless://${id}@${add}:${port}?encryption=none&security=reality&type=xhttp&sni=${xrayVLESSRealityXHTTPServerName}&fp=chrome&path=${path}&pbk=${currentRealityXHTTPPublicKey}&sid=6ba85179e30d4fc2#${email} EOF cat <>"/etc/v2ray-agent/subscribe_local/clashMeta/${user}" - name: "${email}" type: vless server: ${add} port: ${port} uuid: ${id} udp: true tls: true network: xhttp client-fingerprint: chrome alpn: - h2 servername: ${xrayVLESSRealityXHTTPServerName} xhttp-opts: path: ${path} host: ${xrayVLESSRealityXHTTPServerName} reality-opts: public-key: ${currentRealityXHTTPPublicKey} short-id: 6ba85179e30d4fc2 EOF echoContent yellow " ---> 二维码 VLESS(VLESS+reality+XHTTP)" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${id}%40${add}%3A${port}%3Fencryption%3Dnone%26security%3Dreality%26type%3Dxhttp%26sni%3D${xrayVLESSRealityXHTTPServerName}%26fp%3Dchrome%26path%3D${path}%26host%3D${xrayVLESSRealityXHTTPServerName}%26pbk%3D${currentRealityXHTTPPublicKey}%26sid%3D6ba85179e30d4fc2%23${email}\n" elif [[ "${type}" == "vlessgrpc" ]] then echoContent yellow " ---> 通用格式(VLESS+gRPC+TLS)" echoContent green " vless://${id}@${add}:${port}?encryption=none&security=tls&type=grpc&host=${currentHost}&path=${currentPath}grpc&fp=chrome&serviceName=${currentPath}grpc&alpn=h2&sni=${currentHost}#${email}\n" echoContent yellow " ---> 格式化明文(VLESS+gRPC+TLS)" echoContent green " 协议类型:VLESS，地址:${add}，伪装域名/SNI:${currentHost}，端口:${port}，用户ID:${id}，安全:tls，传输方式:gRPC，alpn:h2，client-fingerprint: chrome,serviceName:${currentPath}grpc，账户名:${email}\n" cat <>"/etc/v2ray-agent/subscribe_local/default/${user}" vless://${id}@${add}:${port}?encryption=none&security=tls&type=grpc&host=${currentHost}&path=${currentPath}grpc&serviceName=${currentPath}grpc&fp=chrome&alpn=h2&sni=${currentHost}#${email} EOF cat <>"/etc/v2ray-agent/subscribe_local/clashMeta/${user}" - name: "${email}" type: vless server: ${add} port: ${port} uuid: ${id} udp: true tls: true network: grpc client-fingerprint: chrome servername: ${currentHost} grpc-opts: grpc-service-name: ${currentPath}grpc EOF singBoxSubscribeLocalConfig=$(jq -r ". += [{\"tag\":\"${email}\",\"type\": \"vless\",\"server\": \"${add}\",\"server_port\": ${port},\"uuid\": \"${id}\",\"tls\": { \"enabled\": true, \"server_name\": \"${currentHost}\", \"utls\": { \"enabled\": true, \"fingerprint\": \"chrome\" }},\"packet_encoding\": \"xudp\",\"transport\": { \"type\": \"grpc\", \"service_name\": \"${currentPath}grpc\"}}]" "/etc/v2ray-agent/subscribe_local/sing-box/${user}") echo "${singBoxSubscribeLocalConfig}" | jq . >"/etc/v2ray-agent/subscribe_local/sing-box/${user}" echoContent yellow " ---> 二维码 VLESS(VLESS+gRPC+TLS)" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${id}%40${add}%3A${port}%3Fencryption%3Dnone%26security%3Dtls%26type%3Dgrpc%26host%3D${currentHost}%26serviceName%3D${currentPath}grpc%26fp%3Dchrome%26path%3D${currentPath}grpc%26sni%3D${currentHost}%26alpn%3Dh2%23${email}" elif [[ "${type}" == "trojan" ]]; then # URLEncode echoContent yellow " ---> Trojan(TLS)" echoContent green " trojan://${id}@${currentHost}:${port}?peer=${currentHost}&fp=chrome&sni=${currentHost}&alpn=http/1.1#${currentHost}_Trojan\n" cat <>"/etc/v2ray-agent/subscribe_local/default/${user}" trojan://${id}@${currentHost}:${port}?peer=${currentHost}&fp=chrome&sni=${currentHost}&alpn=http/1.1#${email}_Trojan EOF cat <>"/etc/v2ray-agent/subscribe_local/clashMeta/${user}" - name: "${email}" type: trojan server: ${currentHost} port: ${port} password: ${id} client-fingerprint: chrome udp: true sni: ${currentHost} EOF singBoxSubscribeLocalConfig=$(jq -r ". += [{\"tag\":\"${email}\",\"type\":\"trojan\",\"server\":\"${currentHost}\",\"server_port\":${port},\"password\":\"${id}\",\"tls\":{\"alpn\":[\"http/1.1\"],\"enabled\":true,\"server_name\":\"${currentHost}\",\"utls\":{\"enabled\":true,\"fingerprint\":\"chrome\"}}}]" "/etc/v2ray-agent/subscribe_local/sing-box/${user}") echo "${singBoxSubscribeLocalConfig}" | jq . >"/etc/v2ray-agent/subscribe_local/sing-box/${user}" echoContent yellow " ---> 二维码 Trojan(TLS)" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=trojan%3a%2f%2f${id}%40${currentHost}%3a${port}%3fpeer%3d${currentHost}%26fp%3Dchrome%26sni%3d${currentHost}%26alpn%3Dhttp/1.1%23${email}\n" elif [[ "${type}" == "trojangrpc" ]]; then # URLEncode echoContent yellow " ---> Trojan gRPC(TLS)" echoContent green " trojan://${id}@${add}:${port}?encryption=none&peer=${currentHost}&fp=chrome&security=tls&type=grpc&sni=${currentHost}&alpn=h2&path=${currentPath}trojangrpc&serviceName=${currentPath}trojangrpc#${email}\n" cat <>"/etc/v2ray-agent/subscribe_local/default/${user}" trojan://${id}@${add}:${port}?encryption=none&peer=${currentHost}&security=tls&type=grpc&fp=chrome&sni=${currentHost}&alpn=h2&path=${currentPath}trojangrpc&serviceName=${currentPath}trojangrpc#${email} EOF cat <>"/etc/v2ray-agent/subscribe_local/clashMeta/${user}" - name: "${email}" server: ${add} port: ${port} type: trojan password: ${id} network: grpc sni: ${currentHost} udp: true grpc-opts: grpc-service-name: ${currentPath}trojangrpc EOF singBoxSubscribeLocalConfig=$(jq -r ". += [{\"tag\":\"${email}\",\"type\":\"trojan\",\"server\":\"${add}\",\"server_port\":${port},\"password\":\"${id}\",\"tls\":{\"enabled\":true,\"server_name\":\"${currentHost}\",\"insecure\":true,\"utls\":{\"enabled\":true,\"fingerprint\":\"chrome\"}},\"transport\":{\"type\":\"grpc\",\"service_name\":\"${currentPath}trojangrpc\",\"idle_timeout\":\"15s\",\"ping_timeout\":\"15s\",\"permit_without_stream\":false},\"multiplex\":{\"enabled\":false,\"protocol\":\"smux\",\"max_streams\":32}}]" "/etc/v2ray-agent/subscribe_local/sing-box/${user}") echo "${singBoxSubscribeLocalConfig}" | jq . >"/etc/v2ray-agent/subscribe_local/sing-box/${user}" echoContent yellow " ---> 二维码 Trojan gRPC(TLS)" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=trojan%3a%2f%2f${id}%40${add}%3a${port}%3Fencryption%3Dnone%26fp%3Dchrome%26security%3Dtls%26peer%3d${currentHost}%26type%3Dgrpc%26sni%3d${currentHost}%26path%3D${currentPath}trojangrpc%26alpn%3Dh2%26serviceName%3D${currentPath}trojangrpc%23${email}\n" elif [[ "${type}" == "hysteria" ]]; then echoContent yellow " ---> Hysteria(TLS)" local clashMetaPortContent="port: ${port}" local multiPort= local multiPortEncode if echo "${port}" | grep -q "-"; then clashMetaPortContent="ports: ${port}" multiPort="mport=${port}&" multiPortEncode="mport%3D${port}%26" fi echoContent green " hysteria2://${id}@${currentHost}:${singBoxHysteria2Port}?${multiPort}peer=${currentHost}&insecure=0&sni=${currentHost}&alpn=h3#${email}\n" cat <>"/etc/v2ray-agent/subscribe_local/default/${user}" hysteria2://${id}@${currentHost}:${singBoxHysteria2Port}?${multiPort}peer=${currentHost}&insecure=0&sni=${currentHost}&alpn=h3#${email} EOF echoContent yellow " ---> v2rayN(hysteria+TLS)" echo "{\"server\": \"${currentHost}:${port}\",\"socks5\": { \"listen\": \"127.0.0.1:7798\", \"timeout\": 300},\"auth\":\"${id}\",\"tls\":{\"sni\":\"${currentHost}\"}}" | jq cat <>"/etc/v2ray-agent/subscribe_local/clashMeta/${user}" - name: "${email}" type: hysteria2 server: ${currentHost} ${clashMetaPortContent} password: ${id} alpn: - h3 sni: ${currentHost} up: "${hysteria2ClientUploadSpeed} Mbps" down: "${hysteria2ClientDownloadSpeed} Mbps" EOF singBoxSubscribeLocalConfig=$(jq -r ". += [{\"tag\":\"${email}\",\"type\":\"hysteria2\",\"server\":\"${currentHost}\",\"server_port\":${singBoxHysteria2Port},\"up_mbps\":${hysteria2ClientUploadSpeed},\"down_mbps\":${hysteria2ClientDownloadSpeed},\"password\":\"${id}\",\"tls\":{\"enabled\":true,\"server_name\":\"${currentHost}\",\"alpn\":[\"h3\"]}}]" "/etc/v2ray-agent/subscribe_local/sing-box/${user}") echo "${singBoxSubscribeLocalConfig}" | jq . >"/etc/v2ray-agent/subscribe_local/sing-box/${user}" echoContent yellow " ---> 二维码 Hysteria2(TLS)" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=hysteria2%3A%2F%2F${id}%40${currentHost}%3A${singBoxHysteria2Port}%3F${multiPortEncode}peer%3D${currentHost}%26insecure%3D0%26sni%3D${currentHost}%26alpn%3Dh3%23${email}\n" elif [[ "${type}" == "vlessReality" ]]; then local realityServerName=${xrayVLESSRealityServerName} local publicKey=${currentRealityPublicKey} local realityMldsa65Verify=${currentRealityMldsa65Verify} if [[ "${coreInstallType}" == "2" ]]; then realityServerName=${singBoxVLESSRealityVisionServerName} publicKey=${singBoxVLESSRealityPublicKey} fi echoContent yellow " ---> 通用格式(VLESS+reality+uTLS+Vision)" echoContent green " vless://${id}@$(getPublicIP):${port}?encryption=none&security=reality&pqv=${realityMldsa65Verify}&type=tcp&sni=${realityServerName}&fp=chrome&pbk=${publicKey}&sid=6ba85179e30d4fc2&flow=xtls-rprx-vision#${email}\n" echoContent yellow " ---> 格式化明文(VLESS+reality+uTLS+Vision)" echoContent green "协议类型:VLESS reality，地址:$(getPublicIP)，publicKey:${publicKey}，shortId: 6ba85179e30d4fc2，pqv=${realityMldsa65Verify}，serverNames：${realityServerName}，端口:${port}，用户ID:${id}，传输方式:tcp，账户名:${email}\n" cat <>"/etc/v2ray-agent/subscribe_local/default/${user}" vless://${id}@$(getPublicIP):${port}?encryption=none&security=reality&pqv=${realityMldsa65Verify}&type=tcp&sni=${realityServerName}&fp=chrome&pbk=${publicKey}&sid=6ba85179e30d4fc2&flow=xtls-rprx-vision#${email} EOF cat <>"/etc/v2ray-agent/subscribe_local/clashMeta/${user}" - name: "${email}" type: vless server: $(getPublicIP) port: ${port} uuid: ${id} network: tcp tls: true udp: true flow: xtls-rprx-vision servername: ${realityServerName} reality-opts: public-key: ${publicKey} short-id: 6ba85179e30d4fc2 client-fingerprint: chrome EOF singBoxSubscribeLocalConfig=$(jq -r ". += [{\"tag\":\"${email}\",\"type\":\"vless\",\"server\":\"$(getPublicIP)\",\"server_port\":${port},\"uuid\":\"${id}\",\"flow\":\"xtls-rprx-vision\",\"tls\":{\"enabled\":true,\"server_name\":\"${realityServerName}\",\"utls\":{\"enabled\":true,\"fingerprint\":\"chrome\"},\"reality\":{\"enabled\":true,\"public_key\":\"${publicKey}\",\"short_id\":\"6ba85179e30d4fc2\"}},\"packet_encoding\":\"xudp\"}]" "/etc/v2ray-agent/subscribe_local/sing-box/${user}") echo "${singBoxSubscribeLocalConfig}" | jq . >"/etc/v2ray-agent/subscribe_local/sing-box/${user}" echoContent yellow " ---> 二维码 VLESS(VLESS+reality+uTLS+Vision)" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${id}%40$(getPublicIP)%3A${port}%3Fencryption%3Dnone%26security%3Dreality%26type%3Dtcp%26sni%3D${realityServerName}%26fp%3Dchrome%26pbk%3D${publicKey}%26sid%3D6ba85179e30d4fc2%26flow%3Dxtls-rprx-vision%23${email}\n" elif [[ "${type}" == "vlessRealityGRPC" ]]; then local realityServerName=${xrayVLESSRealityServerName} local publicKey=${currentRealityPublicKey} local realityMldsa65Verify=${currentRealityMldsa65Verify} if [[ "${coreInstallType}" == "2" ]]; then realityServerName=${singBoxVLESSRealityGRPCServerName} publicKey=${singBoxVLESSRealityPublicKey} fi echoContent yellow " ---> 通用格式(VLESS+reality+uTLS+gRPC)" # pqv=${realityMldsa65Verify}& echoContent green " vless://${id}@$(getPublicIP):${port}?encryption=none&security=reality&type=grpc&sni=${realityServerName}&fp=chrome&pbk=${publicKey}&sid=6ba85179e30d4fc2&path=grpc&serviceName=grpc#${email}\n" echoContent yellow " ---> 格式化明文(VLESS+reality+uTLS+gRPC)" # pqv=${realityMldsa65Verify}， echoContent green "协议类型:VLESS reality，serviceName:grpc，地址:$(getPublicIP)，publicKey:${publicKey}，shortId: 6ba85179e30d4fc2，serverNames：${realityServerName}，端口:${port}，用户ID:${id}，传输方式:gRPC，client-fingerprint：chrome，账户名:${email}\n" cat <>"/etc/v2ray-agent/subscribe_local/default/${user}" vless://${id}@$(getPublicIP):${port}?encryption=none&security=reality&pqv=${realityMldsa65Verify}&type=grpc&sni=${realityServerName}&fp=chrome&pbk=${publicKey}&sid=6ba85179e30d4fc2&path=grpc&serviceName=grpc#${email} EOF cat <>"/etc/v2ray-agent/subscribe_local/clashMeta/${user}" - name: "${email}" type: vless server: $(getPublicIP) port: ${port} uuid: ${id} network: grpc tls: true udp: true servername: ${realityServerName} reality-opts: public-key: ${publicKey} short-id: 6ba85179e30d4fc2 grpc-opts: grpc-service-name: "grpc" client-fingerprint: chrome EOF singBoxSubscribeLocalConfig=$(jq -r ". += [{\"tag\":\"${email}\",\"type\":\"vless\",\"server\":\"$(getPublicIP)\",\"server_port\":${port},\"uuid\":\"${id}\",\"tls\":{\"enabled\":true,\"server_name\":\"${realityServerName}\",\"utls\":{\"enabled\":true,\"fingerprint\":\"chrome\"},\"reality\":{\"enabled\":true,\"public_key\":\"${publicKey}\",\"short_id\":\"6ba85179e30d4fc2\"}},\"packet_encoding\":\"xudp\",\"transport\":{\"type\":\"grpc\",\"service_name\":\"grpc\"}}]" "/etc/v2ray-agent/subscribe_local/sing-box/${user}") echo "${singBoxSubscribeLocalConfig}" | jq . >"/etc/v2ray-agent/subscribe_local/sing-box/${user}" echoContent yellow " ---> 二维码 VLESS(VLESS+reality+uTLS+gRPC)" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${id}%40$(getPublicIP)%3A${port}%3Fencryption%3Dnone%26security%3Dreality%26type%3Dgrpc%26sni%3D${realityServerName}%26fp%3Dchrome%26pbk%3D${publicKey}%26sid%3D6ba85179e30d4fc2%26path%3Dgrpc%26serviceName%3Dgrpc%23${email}\n" elif [[ "${type}" == "tuic" ]]; then local tuicUUID= tuicUUID=$(echo "${id}" | awk -F "[_]" '{print $1}') local tuicPassword= tuicPassword=$(echo "${id}" | awk -F "[_]" '{print $2}') if [[ -z "${email}" ]]; then echoContent red " ---> 读取配置失败，请重新安装" exit 0 fi echoContent yellow " ---> 格式化明文(Tuic+TLS)" echoContent green " 协议类型:Tuic，地址:${currentHost}，端口：${port}，uuid：${tuicUUID}，password：${tuicPassword}，congestion-controller:${tuicAlgorithm}，alpn: h3，账户名:${email}\n" cat <>"/etc/v2ray-agent/subscribe_local/default/${user}" tuic://${tuicUUID}:${tuicPassword}@${currentHost}:${port}?congestion_control=${tuicAlgorithm}&alpn=h3&sni=${currentHost}&udp_relay_mode=quic&allow_insecure=0#${email} EOF echoContent yellow " ---> v2rayN(Tuic+TLS)" echo "{\"relay\": {\"server\": \"${currentHost}:${port}\",\"uuid\": \"${tuicUUID}\",\"password\": \"${tuicPassword}\",\"ip\": \"${currentHost}\",\"congestion_control\": \"${tuicAlgorithm}\",\"alpn\": [\"h3\"]},\"local\": {\"server\": \"127.0.0.1:7798\"},\"log_level\": \"warn\"}" | jq cat <>"/etc/v2ray-agent/subscribe_local/clashMeta/${user}" - name: "${email}" server: ${currentHost} type: tuic port: ${port} uuid: ${tuicUUID} password: ${tuicPassword} alpn: - h3 congestion-controller: ${tuicAlgorithm} disable-sni: true reduce-rtt: true sni: ${email} EOF singBoxSubscribeLocalConfig=$(jq -r ". += [{\"tag\":\"${email}\",\"type\": \"tuic\",\"server\": \"${currentHost}\",\"server_port\": ${port},\"uuid\": \"${tuicUUID}\",\"password\": \"${tuicPassword}\",\"congestion_control\": \"${tuicAlgorithm}\",\"tls\": {\"enabled\": true,\"server_name\": \"${currentHost}\",\"alpn\": [\"h3\"]}}]" "/etc/v2ray-agent/subscribe_local/sing-box/${user}") echo "${singBoxSubscribeLocalConfig}" | jq . >"/etc/v2ray-agent/subscribe_local/sing-box/${user}" echoContent yellow "\n ---> 二维码 Tuic" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=tuic%3A%2F%2F${tuicUUID}%3A${tuicPassword}%40${currentHost}%3A${tuicPort}%3Fcongestion_control%3D${tuicAlgorithm}%26alpn%3Dh3%26sni%3D${currentHost}%26udp_relay_mode%3Dquic%26allow_insecure%3D0%23${email}\n" elif [[ "${type}" == "naive" ]]; then echoContent yellow " ---> Naive(TLS)" echoContent green " naive+https://${email}:${id}@${currentHost}:${port}?padding=true#${email}\n" cat <>"/etc/v2ray-agent/subscribe_local/default/${user}" naive+https://${email}:${id}@${currentHost}:${port}?padding=true#${email} EOF echoContent yellow " ---> 二维码 Naive(TLS)" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=naive%2Bhttps%3A%2F%2F${email}%3A${id}%40${currentHost}%3A${port}%3Fpadding%3Dtrue%23${email}\n" elif [[ "${type}" == "vmessHTTPUpgrade" ]]; then qrCodeBase64Default=$(echo -n "{\"port\":${port},\"ps\":\"${email}\",\"tls\":\"tls\",\"id\":\"${id}\",\"aid\":0,\"v\":2,\"host\":\"${currentHost}\",\"type\":\"none\",\"path\":\"${path}\",\"net\":\"httpupgrade\",\"add\":\"${add}\",\"method\":\"none\",\"peer\":\"${currentHost}\",\"sni\":\"${currentHost}\"}" | base64 -w 0) qrCodeBase64Default="${qrCodeBase64Default// /}" echoContent yellow " ---> 通用json(VMess+HTTPUpgrade+TLS)" echoContent green " {\"port\":${port},\"ps\":\"${email}\",\"tls\":\"tls\",\"id\":\"${id}\",\"aid\":0,\"v\":2,\"host\":\"${currentHost}\",\"type\":\"none\",\"path\":\"${path}\",\"net\":\"httpupgrade\",\"add\":\"${add}\",\"method\":\"none\",\"peer\":\"${currentHost}\",\"sni\":\"${currentHost}\"}\n" echoContent yellow " ---> 通用vmess(VMess+HTTPUpgrade+TLS)链接" echoContent green " vmess://${qrCodeBase64Default}\n" echoContent yellow " ---> 二维码 vmess(VMess+HTTPUpgrade+TLS)" cat <>"/etc/v2ray-agent/subscribe_local/default/${user}" vmess://${qrCodeBase64Default} EOF cat <>"/etc/v2ray-agent/subscribe_local/clashMeta/${user}" - name: "${email}" type: vmess server: ${add} port: ${port} uuid: ${id} alterId: 0 cipher: auto udp: true tls: true client-fingerprint: chrome servername: ${currentHost} network: ws ws-opts: path: ${path} headers: Host: ${currentHost} v2ray-http-upgrade: true EOF singBoxSubscribeLocalConfig=$(jq -r ". += [{\"tag\":\"${email}\",\"type\":\"vmess\",\"server\":\"${add}\",\"server_port\":${port},\"uuid\":\"${id}\",\"security\":\"auto\",\"alter_id\":0,\"tls\":{\"enabled\":true,\"server_name\":\"${currentHost}\",\"utls\":{\"enabled\":true,\"fingerprint\":\"chrome\"}},\"packet_encoding\":\"packetaddr\",\"transport\":{\"type\":\"httpupgrade\",\"path\":\"${path}\"}}]" "/etc/v2ray-agent/subscribe_local/sing-box/${user}") echo "${singBoxSubscribeLocalConfig}" | jq . >"/etc/v2ray-agent/subscribe_local/sing-box/${user}" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vmess://${qrCodeBase64Default}\n" elif [[ "${type}" == "anytls" ]]; then echoContent yellow " ---> AnyTLS" echoContent yellow " ---> 格式化明文(AnyTLS)" echoContent green "协议类型:anytls，地址:${currentHost}，端口:${singBoxAnyTLSPort}，用户ID:${id}，传输方式:tcp，账户名:${email}\n" echoContent green " anytls://${id}@${currentHost}:${singBoxAnyTLSPort}?peer=${currentHost}&insecure=0&sni=${currentHost}#${email}\n" cat <>"/etc/v2ray-agent/subscribe_local/default/${user}" anytls://${id}@${currentHost}:${singBoxAnyTLSPort}?peer=${currentHost}&insecure=0&sni=${currentHost}#${email} EOF cat <>"/etc/v2ray-agent/subscribe_local/clashMeta/${user}" - name: "${email}" type: anytls port: ${singBoxAnyTLSPort} server: ${currentHost} password: ${id} client-fingerprint: chrome udp: true sni: ${currentHost} alpn: - h2 - http/1.1 EOF singBoxSubscribeLocalConfig=$(jq -r ". += [{\"tag\":\"${email}\",\"type\":\"anytls\",\"server\":\"${currentHost}\",\"server_port\":${singBoxAnyTLSPort},\"password\":\"${id}\",\"tls\":{\"enabled\":true,\"server_name\":\"${currentHost}\"}}]" "/etc/v2ray-agent/subscribe_local/sing-box/${user}") echo "${singBoxSubscribeLocalConfig}" | jq . >"/etc/v2ray-agent/subscribe_local/sing-box/${user}" echoContent yellow " ---> 二维码 AnyTLS" echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=anytls%3A%2F%2F${id}%40${currentHost}%3A${singBoxAnyTLSPort}%3Fpeer%3D${currentHost}%26insecure%3D0%26sni%3D${currentHost}%23${email}\n" fi } # 账号 showAccounts() { readInstallType readInstallProtocolType readConfigHostPathUUID readSingBoxConfig echo echoContent skyBlue "\n进度 $1/${totalProgress} : 账号" initSubscribeLocalConfig # VLESS TCP if echo ${currentInstallProtocolType} | grep -q ",0,"; then echoContent skyBlue "============================= VLESS TCP TLS_Vision [推荐] ==============================\n" jq .inbounds[0].settings.clients//.inbounds[0].users ${configPath}02_VLESS_TCP_inbounds.json | jq -c '.[]' | while read -r user; do local email= email=$(echo "${user}" | jq -r .email//.name) local vlessTCPPort=${currentDefaultPort} if [[ "${coreInstallType}" == "2" ]]; then vlessTCPPort=$(getSingBoxDisplayPort "${singBoxVLESSVisionPort}") fi echoContent skyBlue "\n ---> 账号:${email}" echo defaultBase64Code vlesstcp "${vlessTCPPort}" "${email}" "$(echo "${user}" | jq -r .id//.uuid)" done fi # VLESS WS if echo ${currentInstallProtocolType} | grep -q ",1,"; then echoContent skyBlue "\n================================ VLESS WS TLS [仅CDN推荐] ================================\n" jq .inbounds[0].settings.clients//.inbounds[0].users ${configPath}03_VLESS_WS_inbounds.json | jq -c '.[]' | while read -r user; do local email= email=$(echo "${user}" | jq -r .email//.name) local vlessWSPort=${currentDefaultPort} if [[ "${coreInstallType}" == "2" ]]; then vlessWSPort=$(getSingBoxDisplayPort "${singBoxVLESSWSPort}") fi echo local path="${currentPath}ws" if [[ ${coreInstallType} == "1" ]]; then path="/${currentPath}ws" elif [[ "${coreInstallType}" == "2" ]]; then path="${singBoxVLESSWSPath}" fi local count= while read -r line; do echoContent skyBlue "\n ---> 账号:${email}${count}" if [[ -n "${line}" ]]; then defaultBase64Code vlessws "${vlessWSPort}" "${email}${count}" "$(echo "${user}" | jq -r .id//.uuid)" "${line}" "${path}" count=$((count + 1)) echo fi done < <(echo "${currentCDNAddress}" | tr ',' '\n') done fi # trojan grpc if echo ${currentInstallProtocolType} | grep -q ",2,"; then echoContent skyBlue "\n================================ Trojan gRPC TLS [仅CDN推荐] ================================\n" jq .inbounds[0].settings.clients ${configPath}04_trojan_gRPC_inbounds.json | jq -c '.[]' | while read -r user; do local email= email=$(echo "${user}" | jq -r .email) local count= while read -r line; do echoContent skyBlue "\n ---> 账号:${email}${count}" echo if [[ -n "${line}" ]]; then defaultBase64Code trojangrpc "${currentDefaultPort}" "${email}${count}" "$(echo "${user}" | jq -r .password)" "${line}" count=$((count + 1)) fi done < <(echo "${currentCDNAddress}" | tr ',' '\n') done fi # VMess WS if echo ${currentInstallProtocolType} | grep -q ",3,"; then echoContent skyBlue "\n================================ VMess WS TLS [仅CDN推荐] ================================\n" local path="${currentPath}vws" if [[ ${coreInstallType} == "1" ]]; then path="/${currentPath}vws" elif [[ "${coreInstallType}" == "2" ]]; then path="${singBoxVMessWSPath}" fi jq .inbounds[0].settings.clients//.inbounds[0].users ${configPath}05_VMess_WS_inbounds.json | jq -c '.[]' | while read -r user; do local email= email=$(echo "${user}" | jq -r .email//.name) local vmessPort=${currentDefaultPort} if [[ "${coreInstallType}" == "2" ]]; then vmessPort=$(getSingBoxDisplayPort "${singBoxVMessWSPort}") fi local count= while read -r line; do echoContent skyBlue "\n ---> 账号:${email}${count}" echo if [[ -n "${line}" ]]; then defaultBase64Code vmessws "${vmessPort}" "${email}${count}" "$(echo "${user}" | jq -r .id//.uuid)" "${line}" "${path}" count=$((count + 1)) fi done < <(echo "${currentCDNAddress}" | tr ',' '\n') done fi # trojan tcp if echo ${currentInstallProtocolType} | grep -q ",4,"; then echoContent skyBlue "\n================================== Trojan TLS [不推荐] ==================================\n" jq .inbounds[0].settings.clients//.inbounds[0].users ${configPath}04_trojan_TCP_inbounds.json | jq -c '.[]' | while read -r user; do local email= email=$(echo "${user}" | jq -r .email//.name) echoContent skyBlue "\n ---> 账号:${email}" local trojanPort=${currentDefaultPort} if [[ "${coreInstallType}" == "2" ]]; then trojanPort=$(getSingBoxDisplayPort "${singBoxTrojanPort}") fi defaultBase64Code trojan "${trojanPort}" "${email}" "$(echo "${user}" | jq -r .password)" done fi # VLESS grpc if echo ${currentInstallProtocolType} | grep -q ",5,"; then echoContent skyBlue "\n=============================== VLESS gRPC TLS [仅CDN推荐] ===============================\n" jq .inbounds[0].settings.clients ${configPath}06_VLESS_gRPC_inbounds.json | jq -c '.[]' | while read -r user; do local email= email=$(echo "${user}" | jq -r .email) local count= while read -r line; do echoContent skyBlue "\n ---> 账号:${email}${count}" echo if [[ -n "${line}" ]]; then defaultBase64Code vlessgrpc "${currentDefaultPort}" "${email}${count}" "$(echo "${user}" | jq -r .id)" "${line}" count=$((count + 1)) fi done < <(echo "${currentCDNAddress}" | tr ',' '\n') done fi # hysteria2 if echo ${currentInstallProtocolType} | grep -q ",6," || [[ -n "${hysteriaPort}" ]]; then readPortHopping "hysteria2" "${singBoxHysteria2Port}" echoContent skyBlue "\n================================ Hysteria2 TLS [推荐] ================================\n" local path="${configPath}" if [[ "${coreInstallType}" == "1" ]]; then path="${singBoxConfigPath}" fi local hysteria2DefaultPort= if [[ -n "${hysteria2PortHoppingStart}" && -n "${hysteria2PortHoppingEnd}" ]]; then hysteria2DefaultPort="${hysteria2PortHopping}" else hysteria2DefaultPort=${singBoxHysteria2Port} fi jq -r -c '.inbounds[]|.users[]' "${path}06_hysteria2_inbounds.json" | while read -r user; do echoContent skyBlue "\n ---> 账号:$(echo "${user}" | jq -r .name)" echo defaultBase64Code hysteria "${hysteria2DefaultPort}" "$(echo "${user}" | jq -r .name)" "$(echo "${user}" | jq -r .password)" done fi # VLESS reality vision if echo ${currentInstallProtocolType} | grep -q ",7,"; then echoContent skyBlue "============================= VLESS reality_vision [推荐] ==============================\n" jq .inbounds[1].settings.clients//.inbounds[0].users ${configPath}07_VLESS_vision_reality_inbounds.json | jq -c '.[]' | while read -r user; do local email= email=$(echo "${user}" | jq -r .email//.name) local realityVisionPort=${xrayVLESSRealityPort} if [[ "${coreInstallType}" == "1" && -n "${currentDefaultPort}" ]]; then realityVisionPort="${currentDefaultPort}" elif [[ "${coreInstallType}" == "2" ]]; then realityVisionPort=$(getSingBoxDisplayPort "${singBoxVLESSRealityVisionPort}") fi echoContent skyBlue "\n ---> 账号:${email}" echo defaultBase64Code vlessReality "${realityVisionPort}" "${email}" "$(echo "${user}" | jq -r .id//.uuid)" done fi # VLESS reality gRPC if echo ${currentInstallProtocolType} | grep -q ",8,"; then echoContent skyBlue "============================== VLESS reality_gRPC [推荐] ===============================\n" jq .inbounds[0].settings.clients//.inbounds[0].users ${configPath}08_VLESS_vision_gRPC_inbounds.json | jq -c '.[]' | while read -r user; do local email= email=$(echo "${user}" | jq -r .email//.name) local realityGRPCPort=${singBoxVLESSRealityGRPCPort} if [[ -n "${realityGRPCPort}" ]]; then realityGRPCPort=$(getSingBoxDisplayPort "${realityGRPCPort}") fi echoContent skyBlue "\n ---> 账号:${email}" echo defaultBase64Code vlessRealityGRPC "${realityGRPCPort}" "${email}" "$(echo "${user}" | jq -r .id//.uuid)" done fi # tuic if echo ${currentInstallProtocolType} | grep -q ",9," || [[ -n "${tuicPort}" ]]; then echoContent skyBlue "\n================================ Tuic TLS [推荐] ================================\n" local path="${configPath}" if [[ "${coreInstallType}" == "1" ]]; then path="${singBoxConfigPath}" fi jq -r -c '.inbounds[].users[]' "${path}09_tuic_inbounds.json" | while read -r user; do echoContent skyBlue "\n ---> 账号:$(echo "${user}" | jq -r .name)" echo defaultBase64Code tuic "${singBoxTuicPort}" "$(echo "${user}" | jq -r .name)" "$(echo "${user}" | jq -r .uuid)_$(echo "${user}" | jq -r .password)" done fi # naive if echo ${currentInstallProtocolType} | grep -q ",10," || [[ -n "${singBoxNaivePort}" ]]; then echoContent skyBlue "\n================================ naive TLS [推荐，不支持ClashMeta] ================================\n" jq -r -c '.inbounds[]|.users[]' "${configPath}10_naive_inbounds.json" | while read -r user; do echoContent skyBlue "\n ---> 账号:$(echo "${user}" | jq -r .username)" echo defaultBase64Code naive "$(getSingBoxDisplayPort "${singBoxNaivePort}")" "$(echo "${user}" | jq -r .username)" "$(echo "${user}" | jq -r .password)" done fi # VMess HTTPUpgrade if echo ${currentInstallProtocolType} | grep -q ",11,"; then echoContent skyBlue "\n================================ VMess HTTPUpgrade TLS [仅CDN推荐] ================================\n" local path="${currentPath}vws" if [[ ${coreInstallType} == "1" ]]; then path="/${currentPath}vws" elif [[ "${coreInstallType}" == "2" ]]; then path="${singBoxVMessHTTPUpgradePath}" fi jq .inbounds[0].settings.clients//.inbounds[0].users ${configPath}11_VMess_HTTPUpgrade_inbounds.json | jq -c '.[]' | while read -r user; do local email= email=$(echo "${user}" | jq -r .email//.name) local vmessHTTPUpgradePort=${currentDefaultPort} if [[ "${coreInstallType}" == "2" ]]; then vmessHTTPUpgradePort=$(getSingBoxDisplayPort "${singBoxVMessHTTPUpgradePort}") fi local count= while read -r line; do echoContent skyBlue "\n ---> 账号:${email}${count}" echo if [[ -n "${line}" ]]; then defaultBase64Code vmessHTTPUpgrade "${vmessHTTPUpgradePort}" "${email}${count}" "$(echo "${user}" | jq -r .id//.uuid)" "${line}" "${path}" count=$((count + 1)) fi done < <(echo "${currentCDNAddress}" | tr ',' '\n') done fi # VLESS Reality XHTTP if echo ${currentInstallProtocolType} | grep -q ",12,"; then echoContent skyBlue "\n================================ VLESS Reality XHTTP TLS [仅CDN推荐] ================================\n" jq .inbounds[0].settings.clients//.inbounds[0].users ${configPath}12_VLESS_XHTTP_inbounds.json | jq -c '.[]' | while read -r user; do local email= email=$(echo "${user}" | jq -r .email//.name) echo local path="${currentPath}xHTTP" local count= while read -r line; do echoContent skyBlue "\n ---> 账号:${email}${count}" if [[ -z "${line}" ]]; then line=$(getPublicIP) fi if [[ -n "${line}" ]]; then defaultBase64Code vlessXHTTP "${xrayVLESSRealityXHTTPort}" "${email}${count}" "$(echo "${user}" | jq -r .id//.uuid)" "${line}" "${path}" count=$((count + 1)) echo fi done < <(echo "${currentCDNAddress}" | tr ',' '\n') done fi # AnyTLS if echo ${currentInstallProtocolType} | grep -q ",13,"; then echoContent skyBlue "\n================================ AnyTLS ================================\n" jq -r -c '.inbounds[]|.users[]' "${configPath}13_anytls_inbounds.json" | while read -r user; do echoContent skyBlue "\n ---> 账号:$(echo "${user}" | jq -r .name)" echo defaultBase64Code anytls "$(getSingBoxDisplayPort "${singBoxAnyTLSPort}")" "$(echo "${user}" | jq -r .name)" "$(echo "${user}" | jq -r .password)" done fi } installedNodeCoreTypes=() installedNodeProtocolTypes=() installedNodeLabels=() appendInstalledNodeEntry() { local coreType=$1 local protocolType=$2 local label=$3 local port=$4 local userCount=$5 local detail=$6 local index=${#installedNodeLabels[@]} local coreName="Xray-core" if [[ "${coreType}" == "2" ]]; then coreName="sing-box" fi installedNodeCoreTypes[index]="${coreType}" installedNodeProtocolTypes[index]="${protocolType}" installedNodeLabels[index]="${label}" echoContent yellow "$((index + 1)).${label}" local summary=" 核心:${coreName}" if [[ -n "${port}" ]]; then summary="${summary} 端口:${port}" fi if [[ -n "${userCount}" && "${userCount}" != "null" ]]; then summary="${summary} 用户:${userCount}" fi if [[ -n "${detail}" ]]; then summary="${summary} ${detail}" fi echoContent skyBlue "${summary}" } hasManagedXrayInboundConfigs() { [[ -n "${configPath}" ]] && [[ -d "${configPath}" ]] && find "${configPath}" -maxdepth 1 -type f \ \( -name "02_VLESS_TCP_inbounds.json" -o -name "03_VLESS_WS_inbounds.json" -o -name "04_trojan_TCP_inbounds.json" -o -name "05_VMess_WS_inbounds.json" -o -name "07_VLESS_vision_reality_inbounds.json" -o -name "12_VLESS_XHTTP_inbounds.json" \) | grep -q . } hasManagedSingBoxInboundConfigs() { [[ -n "${singBoxConfigPath}" ]] && [[ -d "${singBoxConfigPath}" ]] && find "${singBoxConfigPath}" -maxdepth 1 -type f \ \( -name "02_VLESS_TCP_inbounds.json" -o -name "03_VLESS_WS_inbounds.json" -o -name "04_trojan_TCP_inbounds.json" -o -name "05_VMess_WS_inbounds.json" -o -name "06_hysteria2_inbounds.json" -o -name "07_VLESS_vision_reality_inbounds.json" -o -name "08_VLESS_vision_gRPC_inbounds.json" -o -name "09_tuic_inbounds.json" -o -name "10_naive_inbounds.json" -o -name "11_VMess_HTTPUpgrade_inbounds.json" -o -name "13_anytls_inbounds.json" \) | grep -q . } buildInstalledNodeEntries() { installedNodeCoreTypes=() installedNodeProtocolTypes=() installedNodeLabels=() readInstallType readInstallProtocolType readConfigHostPathUUID if [[ "${coreInstallType}" == "1" ]]; then local xrayTlsPort= local xrayTlsDomain= if [[ -f "${configPath}02_VLESS_TCP_inbounds.json" ]]; then xrayTlsPort=$(jq -r '.inbounds[0].port // ""' "${configPath}02_VLESS_TCP_inbounds.json") xrayTlsDomain=$(jq -r '.inbounds[0].streamSettings.tlsSettings.certificates[0].certificateFile // ""' "${configPath}02_VLESS_TCP_inbounds.json" | awk -F '[t][l][s][/]' '{print $2}' | awk -F '[.][c][r][t]' '{print $1}') appendInstalledNodeEntry "1" "0" "VLESS+TLS_Vision+TCP" "${xrayTlsPort}" "$(jq -r '.inbounds[0].settings.clients | length' "${configPath}02_VLESS_TCP_inbounds.json")" "域名:${xrayTlsDomain}" fi if [[ -f "${configPath}03_VLESS_WS_inbounds.json" ]]; then appendInstalledNodeEntry "1" "1" "VLESS+TLS+WS" "${xrayTlsPort}" "$(jq -r '.inbounds[0].settings.clients | length' "${configPath}03_VLESS_WS_inbounds.json")" "域名:${xrayTlsDomain} 路径:$(jq -r '.inbounds[0].streamSettings.wsSettings.path // ""' "${configPath}03_VLESS_WS_inbounds.json")" fi if [[ -f "${configPath}05_VMess_WS_inbounds.json" ]]; then appendInstalledNodeEntry "1" "3" "VMess+TLS+WS" "${xrayTlsPort}" "$(jq -r '.inbounds[0].settings.clients | length' "${configPath}05_VMess_WS_inbounds.json")" "域名:${xrayTlsDomain} 路径:$(jq -r '.inbounds[0].streamSettings.wsSettings.path // ""' "${configPath}05_VMess_WS_inbounds.json")" fi if [[ -f "${configPath}04_trojan_TCP_inbounds.json" ]]; then appendInstalledNodeEntry "1" "4" "Trojan+TLS" "${xrayTlsPort}" "$(jq -r '.inbounds[0].settings.clients | length' "${configPath}04_trojan_TCP_inbounds.json")" "域名:${xrayTlsDomain}" fi if [[ -f "${configPath}07_VLESS_vision_reality_inbounds.json" ]]; then appendInstalledNodeEntry "1" "7" "VLESS+Reality+Vision" "$(jq -r '.inbounds[0].port // ""' "${configPath}07_VLESS_vision_reality_inbounds.json")" "$(jq -r '.inbounds[1].settings.clients | length' "${configPath}07_VLESS_vision_reality_inbounds.json")" "目标:$(jq -r '.inbounds[1].streamSettings.realitySettings.dest // .inbounds[1].streamSettings.realitySettings.target // ""' "${configPath}07_VLESS_vision_reality_inbounds.json")" fi if [[ -f "${configPath}12_VLESS_XHTTP_inbounds.json" ]]; then appendInstalledNodeEntry "1" "12" "VLESS+Reality+XHTTP" "$(jq -r '.inbounds[0].port // ""' "${configPath}12_VLESS_XHTTP_inbounds.json")" "$(jq -r '.inbounds[0].settings.clients | length' "${configPath}12_VLESS_XHTTP_inbounds.json")" "目标:$(jq -r '.inbounds[0].streamSettings.realitySettings.dest // .inbounds[0].streamSettings.realitySettings.target // ""' "${configPath}12_VLESS_XHTTP_inbounds.json") 路径:$(jq -r '.inbounds[0].streamSettings.xhttpSettings.path // ""' "${configPath}12_VLESS_XHTTP_inbounds.json")" fi fi if [[ -f "${singBoxConfigPath}02_VLESS_TCP_inbounds.json" ]]; then appendInstalledNodeEntry "2" "0" "VLESS+TLS_Vision+TCP" "$(jq -r '.inbounds[0].listen_port // ""' "${singBoxConfigPath}02_VLESS_TCP_inbounds.json")" "$(jq -r '.inbounds[0].users | length' "${singBoxConfigPath}02_VLESS_TCP_inbounds.json")" "域名:$(jq -r '.inbounds[0].tls.server_name // ""' "${singBoxConfigPath}02_VLESS_TCP_inbounds.json")" fi if [[ -f "${singBoxConfigPath}03_VLESS_WS_inbounds.json" ]]; then appendInstalledNodeEntry "2" "1" "VLESS+TLS+WS" "$(jq -r '.inbounds[0].listen_port // ""' "${singBoxConfigPath}03_VLESS_WS_inbounds.json")" "$(jq -r '.inbounds[0].users | length' "${singBoxConfigPath}03_VLESS_WS_inbounds.json")" "域名:$(jq -r '.inbounds[0].tls.server_name // ""' "${singBoxConfigPath}03_VLESS_WS_inbounds.json") 路径:$(jq -r '.inbounds[0].transport.path // ""' "${singBoxConfigPath}03_VLESS_WS_inbounds.json")" fi if [[ -f "${singBoxConfigPath}05_VMess_WS_inbounds.json" ]]; then appendInstalledNodeEntry "2" "3" "VMess+TLS+WS" "$(jq -r '.inbounds[0].listen_port // ""' "${singBoxConfigPath}05_VMess_WS_inbounds.json")" "$(jq -r '.inbounds[0].users | length' "${singBoxConfigPath}05_VMess_WS_inbounds.json")" "域名:$(jq -r '.inbounds[0].tls.server_name // ""' "${singBoxConfigPath}05_VMess_WS_inbounds.json") 路径:$(jq -r '.inbounds[0].transport.path // ""' "${singBoxConfigPath}05_VMess_WS_inbounds.json")" fi if [[ -f "${singBoxConfigPath}04_trojan_TCP_inbounds.json" ]]; then appendInstalledNodeEntry "2" "4" "Trojan+TLS" "$(jq -r '.inbounds[0].listen_port // ""' "${singBoxConfigPath}04_trojan_TCP_inbounds.json")" "$(jq -r '.inbounds[0].users | length' "${singBoxConfigPath}04_trojan_TCP_inbounds.json")" "域名:$(jq -r '.inbounds[0].tls.server_name // ""' "${singBoxConfigPath}04_trojan_TCP_inbounds.json")" fi if [[ -f "${singBoxConfigPath}07_VLESS_vision_reality_inbounds.json" ]]; then appendInstalledNodeEntry "2" "7" "VLESS+Reality+Vision" "$(jq -r '.inbounds[0].listen_port // ""' "${singBoxConfigPath}07_VLESS_vision_reality_inbounds.json")" "$(jq -r '.inbounds[0].users | length' "${singBoxConfigPath}07_VLESS_vision_reality_inbounds.json")" "目标:$(jq -r '.inbounds[0].tls.reality.handshake.server // ""' "${singBoxConfigPath}07_VLESS_vision_reality_inbounds.json"):$(jq -r '.inbounds[0].tls.reality.handshake.server_port // ""' "${singBoxConfigPath}07_VLESS_vision_reality_inbounds.json")" fi if [[ -f "${singBoxConfigPath}08_VLESS_vision_gRPC_inbounds.json" ]]; then appendInstalledNodeEntry "2" "8" "VLESS+Reality+gRPC" "$(jq -r '.inbounds[0].listen_port // ""' "${singBoxConfigPath}08_VLESS_vision_gRPC_inbounds.json")" "$(jq -r '.inbounds[0].users | length' "${singBoxConfigPath}08_VLESS_vision_gRPC_inbounds.json")" "目标:$(jq -r '.inbounds[0].tls.reality.handshake.server // ""' "${singBoxConfigPath}08_VLESS_vision_gRPC_inbounds.json"):$(jq -r '.inbounds[0].tls.reality.handshake.server_port // ""' "${singBoxConfigPath}08_VLESS_vision_gRPC_inbounds.json")" fi if [[ -f "${singBoxConfigPath}06_hysteria2_inbounds.json" ]]; then appendInstalledNodeEntry "2" "6" "Hysteria2" "$(jq -r '.inbounds[0].listen_port // ""' "${singBoxConfigPath}06_hysteria2_inbounds.json")" "$(jq -r '.inbounds[0].users | length' "${singBoxConfigPath}06_hysteria2_inbounds.json")" "域名:$(jq -r '.inbounds[0].tls.server_name // ""' "${singBoxConfigPath}06_hysteria2_inbounds.json")" fi if [[ -f "${singBoxConfigPath}09_tuic_inbounds.json" ]]; then appendInstalledNodeEntry "2" "9" "Tuic" "$(jq -r '.inbounds[0].listen_port // ""' "${singBoxConfigPath}09_tuic_inbounds.json")" "$(jq -r '.inbounds[0].users | length' "${singBoxConfigPath}09_tuic_inbounds.json")" "域名:$(jq -r '.inbounds[0].tls.server_name // ""' "${singBoxConfigPath}09_tuic_inbounds.json") 拥塞:$(jq -r '.inbounds[0].congestion_control // ""' "${singBoxConfigPath}09_tuic_inbounds.json")" fi if [[ -f "${singBoxConfigPath}10_naive_inbounds.json" ]]; then appendInstalledNodeEntry "2" "10" "Naive" "$(jq -r '.inbounds[0].listen_port // ""' "${singBoxConfigPath}10_naive_inbounds.json")" "$(jq -r '.inbounds[0].users | length' "${singBoxConfigPath}10_naive_inbounds.json")" "域名:$(jq -r '.inbounds[0].tls.server_name // ""' "${singBoxConfigPath}10_naive_inbounds.json")" fi if [[ -f "${singBoxConfigPath}11_VMess_HTTPUpgrade_inbounds.json" ]]; then appendInstalledNodeEntry "2" "11" "VMess+HTTPUpgrade" "$(grep 'listen ' <"${nginxConfigPath}sing_box_VMess_HTTPUpgrade.conf" 2>/dev/null | awk '{print $2}' | tr -d ';')" "$(jq -r '.inbounds[0].users | length' "${singBoxConfigPath}11_VMess_HTTPUpgrade_inbounds.json")" "域名:$(grep 'server_name' <"${nginxConfigPath}sing_box_VMess_HTTPUpgrade.conf" 2>/dev/null | awk '{print $2}' | tr -d ';') 路径:$(jq -r '.inbounds[0].transport.path // ""' "${singBoxConfigPath}11_VMess_HTTPUpgrade_inbounds.json")" fi if [[ -f "${singBoxConfigPath}13_anytls_inbounds.json" ]]; then appendInstalledNodeEntry "2" "13" "AnyTLS" "$(jq -r '.inbounds[0].listen_port // ""' "${singBoxConfigPath}13_anytls_inbounds.json")" "$(jq -r '.inbounds[0].users | length' "${singBoxConfigPath}13_anytls_inbounds.json")" "域名:$(jq -r '.inbounds[0].tls.server_name // ""' "${singBoxConfigPath}13_anytls_inbounds.json")" fi } showInstalledNodes() { echoContent skyBlue "\n功能 1/1 : 节点总览" echoContent red "\n==============================================================" echoContent yellow "# 下面展示的是当前机器实际检测到的已部署节点" echoContent yellow "# Xray 的 VLESS+WS / VMess+WS / Trojan+TLS 共享 TLS 入口端口\n" echoContent red "==============================================================" buildInstalledNodeEntries if [[ ${#installedNodeLabels[@]} -eq 0 ]]; then echoContent red " ---> 当前没有检测到已部署的节点" exit 0 fi echoContent red "==============================================================" } removeInstalledNodeConfig() { local coreType=$1 local protocolType=$2 case "${coreType}:${protocolType}" in "1:0") if [[ -f "${configPath}03_VLESS_WS_inbounds.json" || -f "${configPath}05_VMess_WS_inbounds.json" || -f "${configPath}04_trojan_TCP_inbounds.json" ]]; then echoContent red " ---> Xray 的 VLESS+TLS_Vision+TCP 同时承担 1/3/4 的 TLS 入口，不能单独删除" echoContent yellow " ---> 请先删除 VLESS+WS / VMess+WS / Trojan+TLS，再删除这个入口节点" return 1 fi rm -f "${configPath}02_VLESS_TCP_inbounds.json" ;; "1:1") rm -f "${configPath}03_VLESS_WS_inbounds.json" ;; "1:3") rm -f "${configPath}05_VMess_WS_inbounds.json" ;; "1:4") rm -f "${configPath}04_trojan_TCP_inbounds.json" ;; "1:7") rm -f "${configPath}07_VLESS_vision_reality_inbounds.json" ;; "1:12") rm -f "${configPath}12_VLESS_XHTTP_inbounds.json" ;; "2:0") rm -f "${singBoxConfigPath}02_VLESS_TCP_inbounds.json" ;; "2:1") rm -f "${singBoxConfigPath}03_VLESS_WS_inbounds.json" ;; "2:3") rm -f "${singBoxConfigPath}05_VMess_WS_inbounds.json" ;; "2:4") rm -f "${singBoxConfigPath}04_trojan_TCP_inbounds.json" ;; "2:6") rm -f "${singBoxConfigPath}06_hysteria2_inbounds.json" ;; "2:7") rm -f "${singBoxConfigPath}07_VLESS_vision_reality_inbounds.json" ;; "2:8") rm -f "${singBoxConfigPath}08_VLESS_vision_gRPC_inbounds.json" ;; "2:9") rm -f "${singBoxConfigPath}09_tuic_inbounds.json" ;; "2:10") rm -f "${singBoxConfigPath}10_naive_inbounds.json" ;; "2:11") rm -f "${singBoxConfigPath}11_VMess_HTTPUpgrade_inbounds.json" rm -f "${nginxConfigPath}sing_box_VMess_HTTPUpgrade.conf" >/dev/null 2>&1 handleNginx stop handleNginx start ;; "2:13") rm -f "${singBoxConfigPath}13_anytls_inbounds.json" ;; *) echoContent red " ---> 暂不支持删除这个节点" return 1 ;; esac return 0 } reloadInstalledNodeCores() { if hasManagedXrayInboundConfigs; then handleXray restart else handleXray stop >/dev/null 2>&1 fi if hasManagedSingBoxInboundConfigs; then handleSingBox restart else handleSingBox stop >/dev/null 2>&1 fi readNginxSubscribe if [[ -n "${subscribePort}" && -f "/etc/v2ray-agent/subscribe_local/subscribeSalt" ]]; then subscribe true true >/dev/null 2>&1 fi } deleteInstalledNode() { echoContent skyBlue "\n功能 1/1 : 删除指定节点" echoContent red "\n==============================================================" echoContent yellow "# 删除的是某个协议节点，不是整个脚本" echoContent yellow "# 某些基于域名的节点删除后，旧的 Nginx 路径转发残留不会影响其他节点使用\n" echoContent red "==============================================================" buildInstalledNodeEntries if [[ ${#installedNodeLabels[@]} -eq 0 ]]; then echoContent red " ---> 当前没有可删除的节点" exit 0 fi echoContent red "==============================================================" read -r -p "请选择要删除的节点编号:" selectedNodeIndex if ! [[ "${selectedNodeIndex}" =~ ^[0-9]+$ ]] || ((selectedNodeIndex < 1 || selectedNodeIndex > ${#installedNodeLabels[@]})); then echoContent red " ---> 选择错误" exit 0 fi local selectedIndex=$((selectedNodeIndex - 1)) local selectedLabel="${installedNodeLabels[${selectedIndex}]}" local selectedCoreType="${installedNodeCoreTypes[${selectedIndex}]}" local selectedProtocolType="${installedNodeProtocolTypes[${selectedIndex}]}" read -r -p "确认删除【${selectedLabel}】吗？[y/n]:" confirmDeleteNodeStatus if [[ "${confirmDeleteNodeStatus}" != "y" ]]; then echoContent yellow " ---> 已取消删除" exit 0 fi if removeInstalledNodeConfig "${selectedCoreType}" "${selectedProtocolType}"; then reloadInstalledNodeCores echoContent green " ---> 节点删除完成: ${selectedLabel}" echoContent yellow " ---> 建议顺手执行一次 9.账号/订阅管理 -> 查看订阅，确认客户端节点列表已同步" fi } manageInstalledNodes() { echoContent skyBlue "\n功能 1/1 : 节点管理" echoContent red "\n==============================================================" echoContent yellow "1.查看已部署节点" echoContent yellow "2.删除指定节点" echoContent yellow "3.切换ALPN" echoContent red "==============================================================" read -r -p "请选择:" manageInstalledNodeStatus case "${manageInstalledNodeStatus}" in 1) showInstalledNodes ;; 2) deleteInstalledNode ;; 3) readInstallAlpn switchAlpn 1 ;; *) echoContent red " ---> 选择错误" ;; esac } # 移除nginx302配置 removeNginx302() { local count= grep -n "return 302" <"${nginxConfigPath}alone.conf" | while read -r line; do if ! echo "${line}" | grep -q "request_uri"; then local removeIndex= removeIndex=$(echo "${line}" | awk -F "[:]" '{print $1}') removeIndex=$((removeIndex + count)) sed -i "${removeIndex}d" ${nginxConfigPath}alone.conf count=$((count - 1)) fi done } # 检查302是否成功 checkNginx302() { local domain302Status= domain302Status=$(curl -s "https://${currentHost}:${currentPort}") if echo "${domain302Status}" | grep -q "302"; then # local domain302Result= # domain302Result=$(curl -L -s "https://${currentHost}:${currentPort}") # if [[ -n "${domain302Result}" ]]; then echoContent green " ---> 302重定向设置完毕" exit 0 # fi fi echoContent red " ---> 302重定向设置失败，请仔细检查是否和示例相同" backupNginxConfig restoreBackup } # 备份恢复nginx文件 backupNginxConfig() { if [[ "$1" == "backup" ]]; then cp ${nginxConfigPath}alone.conf /etc/v2ray-agent/alone_backup.conf echoContent green " ---> nginx配置文件备份成功" fi if [[ "$1" == "restoreBackup" ]] && [[ -f "/etc/v2ray-agent/alone_backup.conf" ]]; then cp /etc/v2ray-agent/alone_backup.conf ${nginxConfigPath}alone.conf echoContent green " ---> nginx配置文件恢复备份成功" rm /etc/v2ray-agent/alone_backup.conf fi } # 添加302配置 addNginx302() { local count=1 grep -n "location / {" <"${nginxConfigPath}alone.conf" | while read -r line; do if [[ -n "${line}" ]]; then local insertIndex= insertIndex="$(echo "${line}" | awk -F "[:]" '{print $1}')" insertIndex=$((insertIndex + count)) sed "${insertIndex}i return 302 '$1';" ${nginxConfigPath}alone.conf >${nginxConfigPath}tmpfile && mv ${nginxConfigPath}tmpfile ${nginxConfigPath}alone.conf count=$((count + 1)) else echoContent red " ---> 302添加失败" backupNginxConfig restoreBackup fi done } # 更新伪装站 updateNginxBlog() { if [[ "${coreInstallType}" == "2" ]]; then echoContent red "\n ---> 此功能仅支持Xray-core内核" exit 0 fi echoContent skyBlue "\n进度 $1/${totalProgress} : 更换伪装站点" if ! echo "${currentInstallProtocolType}" | grep -q ",0," || [[ -z "${coreInstallType}" ]]; then echoContent red "\n ---> 由于环境依赖，请先安装Xray-core的VLESS_TCP_TLS_Vision" exit 0 fi echoContent red "==============================================================" echoContent yellow "# 如需自定义，请手动复制模版文件到 ${nginxStaticPath} \n" echoContent yellow "1.新手引导" echoContent yellow "2.游戏网站" echoContent yellow "3.个人博客01" echoContent yellow "4.企业站" echoMenuHint "5.解锁加密的音乐文件模版" "https://github.com/ix64/unlock-music" echoMenuHint "6.mikutap" "https://github.com/HFIProgramming/mikutap" echoContent yellow "7.企业站02" echoContent yellow "8.个人博客02" echoContent yellow "9.404自动跳转baidu" echoContent yellow "10.302重定向网站" echoContent red "==============================================================" read -r -p "请选择:" selectInstallNginxBlogType if [[ "${selectInstallNginxBlogType}" == "10" ]]; then if [[ "${coreInstallType}" == "2" ]]; then echoContent red "\n ---> 此功能仅支持Xray-core内核，请等待后续更新" exit 0 fi echoContent red "\n==============================================================" echoContent yellow "重定向的优先级更高，配置302之后如果更改伪装站点，根路由下伪装站点将不起作用" echoContent yellow "如想要伪装站点实现作用需删除302重定向配置\n" echoContent yellow "1.添加" echoContent yellow "2.删除" echoContent red "==============================================================" read -r -p "请选择:" redirectStatus if [[ "${redirectStatus}" == "1" ]]; then backupNginxConfig backup read -r -p "请输入要重定向的域名,例如 https://www.baidu.com:" redirectDomain removeNginx302 addNginx302 "${redirectDomain}" handleNginx stop handleNginx start if [[ -z $(pgrep -f "nginx") ]]; then backupNginxConfig restoreBackup handleNginx start exit 0 fi checkNginx302 exit 0 fi if [[ "${redirectStatus}" == "2" ]]; then removeNginx302 echoContent green " ---> 移除302重定向成功" exit 0 fi fi if [[ "${selectInstallNginxBlogType}" =~ ^[1-9]$ ]]; then rm -rf "${nginxStaticPath}*" if [[ "${release}" == "alpine" ]]; then wget -q -P "${nginxStaticPath}" "https://raw.githubusercontent.com/dodo258/sing-box-reality-manager/main/fodder/blog/unable/html${selectInstallNginxBlogType}.zip" else wget -q "${wgetShowProgressStatus}" -P "${nginxStaticPath}" "https://raw.githubusercontent.com/dodo258/sing-box-reality-manager/main/fodder/blog/unable/html${selectInstallNginxBlogType}.zip" fi unzip -o "${nginxStaticPath}html${selectInstallNginxBlogType}.zip" -d "${nginxStaticPath}" >/dev/null rm -f "${nginxStaticPath}html${selectInstallNginxBlogType}.zip*" echoContent green " ---> 更换伪站成功" else echoContent red " ---> 选择错误，请重新选择" updateNginxBlog fi } # 添加新端口 addCorePort() { echoContent skyBlue "\n功能 1/${totalProgress} : 添加新端口" echoContent red "\n==============================================================" echoContent yellow "# 注意事项\n" echoContent yellow "支持批量添加" echoContent yellow "不影响默认端口的使用" echoContent yellow "查看账号时，只会展示默认端口的账号" echoContent yellow "不允许有特殊字符，注意逗号的格式" echoContent yellow "如已安装hysteria，会同时安装hysteria新端口" if [[ "${coreInstallType}" == "2" ]]; then echoContent yellow "sing-box 下会先选择要补充新端口的目标协议" fi echoContent yellow "录入示例:2053,2083,2087\n" echoContent yellow "1.查看已添加端口" echoContent yellow "2.添加端口" echoContent yellow "3.删除端口" echoContent red "==============================================================" read -r -p "请选择:" selectNewPortType if [[ "${selectNewPortType}" == "1" ]]; then if [[ "${coreInstallType}" == "2" ]]; then mapfile -t singBoxAddedPortFiles < <(listSingBoxAddedPortFiles) if [[ ${#singBoxAddedPortFiles[@]} -eq 0 ]]; then echoContent yellow " ---> 当前没有已添加的新端口" exit 0 fi local index=1 local file= for file in "${singBoxAddedPortFiles[@]}"; do local listenPort= local targetPort= local targetLabel= local defaultMark= listenPort=$(jq -r '.inbounds[0].listen_port // ""' "${file}") targetPort=$(jq -r '.inbounds[0].override_port // ""' "${file}") targetLabel=$(resolveSingBoxForwardTargetLabel "${targetPort}") if [[ "${file}" == *_default.json ]]; then defaultMark="[默认]" fi echoContent green "${index}.${listenPort}${defaultMark} -> ${targetLabel}:${targetPort}" index=$((index + 1)) done else find ${configPath} -name "*dokodemodoor*" | grep -v "hysteria" | awk -F "[c][o][n][f][/]" '{print $2}' | awk -F "[_]" '{print $4}' | awk -F "[.]" '{print ""NR""":"$1}' fi exit 0 elif [[ "${selectNewPortType}" == "2" ]]; then local singBoxSelectedTargetLabel= local singBoxSelectedTargetPort= if [[ "${coreInstallType}" == "2" ]]; then local singBoxForwardTargetLabels=() local singBoxForwardTargetPorts=() local appendSingBoxForwardTargetStatus= appendSingBoxForwardTargetStatus() { local label=$1 local port=$2 local existingPort= if [[ -z "${port}" || "${port}" == "null" ]]; then return 0 fi for existingPort in "${singBoxForwardTargetPorts[@]}"; do if [[ "${existingPort}" == "${port}" ]]; then return 0 fi done singBoxForwardTargetLabels+=("${label}") singBoxForwardTargetPorts+=("${port}") } if echo "${currentInstallProtocolType}" | grep -q ",0,"; then appendSingBoxForwardTargetStatus "VLESS+Vision+TCP" "${singBoxVLESSVisionPort}" fi if echo "${currentInstallProtocolType}" | grep -q ",1,"; then appendSingBoxForwardTargetStatus "VLESS+TLS+WS" "${singBoxVLESSWSPort}" fi if echo "${currentInstallProtocolType}" | grep -q ",3,"; then appendSingBoxForwardTargetStatus "VMess+TLS+WS" "${singBoxVMessWSPort}" fi if echo "${currentInstallProtocolType}" | grep -q ",4,"; then appendSingBoxForwardTargetStatus "Trojan+TLS" "${singBoxTrojanPort}" fi if echo "${currentInstallProtocolType}" | grep -q ",7,"; then appendSingBoxForwardTargetStatus "VLESS+Reality+Vision" "${singBoxVLESSRealityVisionPort}" fi if echo "${currentInstallProtocolType}" | grep -q ",8,"; then appendSingBoxForwardTargetStatus "VLESS+Reality+gRPC" "${singBoxVLESSRealityGRPCPort}" fi if echo "${currentInstallProtocolType}" | grep -q ",10,"; then appendSingBoxForwardTargetStatus "Naive" "${singBoxNaivePort}" fi if echo "${currentInstallProtocolType}" | grep -q ",11,"; then appendSingBoxForwardTargetStatus "VMess+HTTPUpgrade" "${singBoxVMessHTTPUpgradePort}" fi if echo "${currentInstallProtocolType}" | grep -q ",13,"; then appendSingBoxForwardTargetStatus "AnyTLS" "${singBoxAnyTLSPort}" fi if [[ ${#singBoxForwardTargetPorts[@]} -eq 0 ]]; then echoContent red "\n ---> 当前 sing-box 未安装可补充新端口的 TCP 节点" echoContent yellow " ---> 当前仅支持 VLESS/Trojan/Naive/AnyTLS/HTTPUpgrade/Reality 这类 TCP 入口" exit 0 elif [[ ${#singBoxForwardTargetPorts[@]} -eq 1 ]]; then singBoxSelectedTargetLabel="${singBoxForwardTargetLabels[0]}" singBoxSelectedTargetPort="${singBoxForwardTargetPorts[0]}" echoContent yellow " ---> 已自动选择目标协议: ${singBoxSelectedTargetLabel}:${singBoxSelectedTargetPort}" else echoContent yellow "\n请选择要补充新端口的 sing-box 节点" local index=0 for index in "${!singBoxForwardTargetLabels[@]}"; do echoContent green "$((index + 1)).${singBoxForwardTargetLabels[${index}]}:${singBoxForwardTargetPorts[${index}]}" done read -r -p "请选择目标协议编号:" singBoxForwardTargetIndex if ! [[ "${singBoxForwardTargetIndex}" =~ ^[0-9]+$ ]] || ((singBoxForwardTargetIndex < 1 || singBoxForwardTargetIndex > ${#singBoxForwardTargetPorts[@]})); then echoContent red " ---> 选择错误" exit 0 fi singBoxForwardTargetIndex=$((singBoxForwardTargetIndex - 1)) singBoxSelectedTargetLabel="${singBoxForwardTargetLabels[${singBoxForwardTargetIndex}]}" singBoxSelectedTargetPort="${singBoxForwardTargetPorts[${singBoxForwardTargetIndex}]}" fi fi read -r -p "请输入端口号:" newPort read -r -p "请输入默认的端口号，同时会更改订阅端口以及节点端口，[回车]默认443:" defaultPort if [[ -n "${defaultPort}" && "${coreInstallType}" != "2" ]]; then rm -rf "$(find ${configPath}* | grep "default")" elif [[ -n "${defaultPort}" && "${coreInstallType}" == "2" ]]; then removeSingBoxDefaultPortFilesByTargetPort "${singBoxSelectedTargetPort}" fi if [[ -n "${newPort}" ]]; then while read -r port; do if ! [[ "${port}" =~ ^[0-9]+$ ]] || ((port < 1 || port > 65535)); then echoContent red " ---> 端口输入错误" exit 0 fi if [[ "${coreInstallType}" == "2" ]]; then if [[ "${port}" == "${singBoxSelectedTargetPort}" ]]; then echoContent red " ---> 端口 ${port} 与目标节点端口重复，跳过" continue fi rm -f "${configPath}02_direct_inbounds_${port}.json" "${configPath}02_direct_inbounds_${port}_default.json" "${configPath}02_direct_inbounds_hysteria_${port}.json" >/dev/null 2>&1 else rm -rf "$(find ${configPath}* | grep "${port}")" fi local fileName= local hysteriaFileName= if [[ -n "${defaultPort}" && "${port}" == "${defaultPort}" && "${coreInstallType}" != "2" ]]; then fileName="${configPath}02_dokodemodoor_inbounds_${port}_default.json" elif [[ -n "${defaultPort}" && "${port}" == "${defaultPort}" && "${coreInstallType}" == "2" ]]; then fileName="${configPath}02_direct_inbounds_${port}_default.json" elif [[ "${coreInstallType}" == "2" ]]; then fileName="${configPath}02_direct_inbounds_${port}.json" else fileName="${configPath}02_dokodemodoor_inbounds_${port}.json" fi if [[ -n ${hysteriaPort} ]]; then if [[ "${coreInstallType}" == "2" ]]; then if [[ "${port}" != "${hysteriaPort}" ]]; then hysteriaFileName="${configPath}02_direct_inbounds_hysteria_${port}.json" fi else hysteriaFileName="${configPath}02_dokodemodoor_inbounds_hysteria_${port}.json" fi fi # 开放端口 allowPort "${port}" allowPort "${port}" "udp" local settingsPort=443 if [[ -n "${customPort}" ]]; then settingsPort=${customPort} fi if [[ -n ${hysteriaFileName} && "${coreInstallType}" == "2" ]]; then cat <"${hysteriaFileName}" { "inbounds": [ { "type": "direct", "listen": "::", "listen_port": ${port}, "tag": "direct-newPort-hysteria-${port}", "network": "udp", "override_address": "127.0.0.1", "override_port": ${hysteriaPort} } ] } EOF elif [[ -n ${hysteriaFileName} ]]; then cat <"${hysteriaFileName}" { "inbounds": [ { "listen": "0.0.0.0", "port": ${port}, "protocol": "dokodemo-door", "settings": { "address": "127.0.0.1", "port": ${hysteriaPort}, "network": "udp", "followRedirect": false }, "tag": "dokodemo-door-newPort-hysteria-${port}" } ] } EOF fi if [[ "${coreInstallType}" == "2" ]]; then cat <"${fileName}" { "inbounds": [ { "type": "direct", "listen": "::", "listen_port": ${port}, "tag": "direct-newPort-${port}", "network": "tcp", "override_address": "127.0.0.1", "override_port": ${singBoxSelectedTargetPort} } ] } EOF else cat <"${fileName}" { "inbounds": [ { "listen": "0.0.0.0", "port": ${port}, "protocol": "dokodemo-door", "settings": { "address": "127.0.0.1", "port": ${settingsPort}, "network": "tcp", "followRedirect": false }, "tag": "dokodemo-door-newPort-${port}" } ] } EOF fi done < <(echo "${newPort}" | tr ',' '\n') if [[ "${coreInstallType}" == "2" ]]; then echoContent green " ---> 已为 ${singBoxSelectedTargetLabel} 添加额外端口" else echoContent green " ---> 添加完毕" fi reloadCore addCorePort fi elif [[ "${selectNewPortType}" == "3" ]]; then if [[ "${coreInstallType}" == "2" ]]; then mapfile -t singBoxAddedPortFiles < <(listSingBoxAddedPortFiles) if [[ ${#singBoxAddedPortFiles[@]} -eq 0 ]]; then echoContent yellow " ---> 当前没有可删除的新端口" exit 0 fi local index=1 local file= for file in "${singBoxAddedPortFiles[@]}"; do local listenPort= local targetPort= local targetLabel= local defaultMark= listenPort=$(jq -r '.inbounds[0].listen_port // ""' "${file}") targetPort=$(jq -r '.inbounds[0].override_port // ""' "${file}") targetLabel=$(resolveSingBoxForwardTargetLabel "${targetPort}") if [[ "${file}" == *_default.json ]]; then defaultMark="[默认]" fi echoContent green "${index}.${listenPort}${defaultMark} -> ${targetLabel}:${targetPort}" index=$((index + 1)) done read -r -p "请输入要删除的端口编号:" portIndex if ! [[ "${portIndex}" =~ ^[0-9]+$ ]] || ((portIndex < 1 || portIndex > ${#singBoxAddedPortFiles[@]})); then echoContent yellow "\n ---> 编号输入错误，请重新选择" addCorePort exit 0 fi local selectedFile="${singBoxAddedPortFiles[$((portIndex - 1))]}" local selectedPort= selectedPort=$(jq -r '.inbounds[0].listen_port // ""' "${selectedFile}") rm -f "${configPath}02_direct_inbounds_${selectedPort}.json" "${configPath}02_direct_inbounds_${selectedPort}_default.json" "${configPath}02_direct_inbounds_hysteria_${selectedPort}.json" >/dev/null 2>&1 reloadCore addCorePort else find ${configPath} -name "*dokodemodoor*" | grep -v "hysteria" | awk -F "[c][o][n][f][/]" '{print $2}' | awk -F "[_]" '{print $4}' | awk -F "[.]" '{print ""NR""":"$1}' read -r -p "请输入要删除的端口编号:" portIndex local dokoConfig dokoConfig=$(find ${configPath} -name "*dokodemodoor*" | grep -v "hysteria" | awk -F "[c][o][n][f][/]" '{print $2}' | awk -F "[_]" '{print $4}' | awk -F "[.]" '{print ""NR""":"$1}' | grep "${portIndex}:") if [[ -n "${dokoConfig}" ]]; then local selectedPort= selectedPort=$(echo "${dokoConfig}" | awk -F "[:]" '{print $2}') rm -f "${configPath}02_dokodemodoor_inbounds_${selectedPort}.json" "${configPath}02_dokodemodoor_inbounds_${selectedPort}_default.json" >/dev/null 2>&1 local hysteriaDokodemodoorFilePath= hysteriaDokodemodoorFilePath="${configPath}02_dokodemodoor_inbounds_hysteria_${selectedPort}.json" if [[ -f "${hysteriaDokodemodoorFilePath}" ]]; then rm "${hysteriaDokodemodoorFilePath}" fi reloadCore addCorePort else echoContent yellow "\n ---> 编号输入错误，请重新选择" addCorePort fi fi fi } # 卸载脚本 unInstall() { read -r -p "是否确认卸载安装内容？[y/n]:" unInstallStatus if [[ "${unInstallStatus}" != "y" ]]; then echoContent green " ---> 放弃卸载" menu exit 0 fi # checkBTPanel echoContent yellow " ---> 脚本不会删除acme相关配置，删除请手动执行 [rm -rf /root/.acme.sh]" handleNginx stop if [[ -z $(pgrep -f "nginx") ]]; then echoContent green " ---> 停止Nginx成功" fi if [[ "${release}" == "alpine" ]]; then if [[ "${coreInstallType}" == "1" ]]; then handleXray stop cleanupLegacyManagedOpenrcUnit "xray" "${xrayBinaryPath}" rc-update del "${xrayServiceName}" default >/dev/null 2>&1 rm -rf "${xrayOpenrcServicePath}" echoContent green " ---> 删除Xray开机自启完成" fi if [[ "${coreInstallType}" == "2" || -n "${singBoxConfigPath}" ]]; then handleSingBox stop cleanupLegacyManagedOpenrcUnit "sing-box" "${singBoxBinaryPath}" rc-update del "${singBoxServiceName}" default >/dev/null 2>&1 rm -rf "${singBoxOpenrcServicePath}" echoContent green " ---> 删除sing-box开机自启完成" fi else if [[ "${coreInstallType}" == "1" ]]; then handleXray stop cleanupLegacyManagedSystemdUnit "xray" "${xrayBinaryPath}" rm -rf "${xraySystemdServicePath}" echoContent green " ---> 删除Xray开机自启完成" fi if [[ "${coreInstallType}" == "2" || -n "${singBoxConfigPath}" ]]; then handleSingBox stop cleanupLegacyManagedSystemdUnit "sing-box" "${singBoxBinaryPath}" rm -rf "${singBoxSystemdServicePath}" echoContent green " ---> 删除sing-box开机自启完成" fi systemctl daemon-reload >/dev/null 2>&1 fi rm -rf /etc/v2ray-agent rm -rf ${nginxConfigPath}alone.conf rm -rf ${nginxConfigPath}checkPortOpen.conf >/dev/null 2>&1 rm -rf "${nginxConfigPath}sing_box_VMess_HTTPUpgrade.conf" >/dev/null 2>&1 rm -rf ${nginxConfigPath}checkPortOpen.conf >/dev/null 2>&1 unInstallSubscribe if [[ -d "${nginxStaticPath}" && -f "${nginxStaticPath}/check" ]]; then rm -rf "${nginxStaticPath}" echoContent green " ---> 删除伪装网站完成" fi rm -rf /usr/bin/vasma rm -rf /usr/sbin/vasma echoContent green " ---> 卸载快捷方式完成" echoContent green " ---> 卸载v2ray-agent脚本完成" } # CDN节点管理 manageCDN() { echoContent skyBlue "\n进度 $1/1 : CDN节点管理" local setCDNDomain= if echo "${currentInstallProtocolType}" | grep -qE ",1,|,2,|,3,|,5,|,11,"; then echoContent red "==============================================================" echoContent yellow "# 注意事项" echoContent yellow "\n教程地址:" echoContent skyBlue "Cloudflare 优选 IP 请根据自身网络环境测试，详情见仓库 README" echoContent red "\n如对Cloudflare优化不了解，请不要使用" echoContent yellow "1.CNAME www.digitalocean.com" echoContent yellow "2.CNAME who.int" echoContent yellow "3.CNAME blog.hostmonit.com" echoContent yellow "4.CNAME www.visa.com.hk" echoMenuHint "5.手动输入" "可输入多个，比如: 1.1.1.1,1.1.2.2,cloudflare.com 逗号分隔" echoContent yellow "6.移除CDN节点" echoContent red "==============================================================" read -r -p "请选择:" selectCDNType case ${selectCDNType} in 1) setCDNDomain="www.digitalocean.com" ;; 2) setCDNDomain="who.int" ;; 3) setCDNDomain="blog.hostmonit.com" ;; 4) setCDNDomain="www.visa.com.hk" ;; 5) read -r -p "请输入想要自定义CDN IP或者域名:" setCDNDomain ;; 6) echo >/etc/v2ray-agent/cdn echoContent green " ---> 移除成功" exit 0 ;; esac if [[ -n "${setCDNDomain}" ]]; then echo >/etc/v2ray-agent/cdn echo "${setCDNDomain}" >"/etc/v2ray-agent/cdn" echoContent green " ---> 修改CDN成功" subscribe false false else echoContent red " ---> 不可以为空，请重新输入" manageCDN 1 fi else echoContent yellow "\n教程地址:" echoContent skyBlue "Cloudflare 优选 IP 请根据自身网络环境测试，详情见仓库 README\n" echoContent red " ---> 未检测到可以使用的协议，仅支持ws、grpc、HTTPUpgrade相关的协议" fi } # 自定义uuid customUUID() { read -r -p "请输入合法的UUID，[回车]随机UUID:" currentCustomUUID echo if [[ -z "${currentCustomUUID}" ]]; then if [[ "${selectInstallType}" == "1" || "${coreInstallType}" == "1" ]]; then currentCustomUUID=$(${ctlPath} uuid) elif [[ "${selectInstallType}" == "2" || "${coreInstallType}" == "2" ]]; then currentCustomUUID=$(${ctlPath} generate uuid) fi echoContent yellow "uuid：${currentCustomUUID}\n" else local checkUUID= if [[ "${coreInstallType}" == "1" ]]; then checkUUID=$(jq -r --arg currentUUID "$currentCustomUUID" "(.inbounds[0].settings.clients // .inbounds[1].settings.clients)[]? | select(.id == \$currentUUID) | .email" ${configPath}${frontingType:-$frontingTypeReality}.json) elif [[ "${coreInstallType}" == "2" ]]; then checkUUID=$(jq -r --arg currentUUID "$currentCustomUUID" ".inbounds[0].users[] | select(.uuid == \$currentUUID) | .name//.username" ${configPath}${frontingType}.json) fi if [[ -n "${checkUUID}" ]]; then echoContent red " ---> UUID不可重复" exit 0 fi fi } # 自定义email customUserEmail() { read -r -p "请输入合法的email，[回车]随机email:" currentCustomEmail echo if [[ -z "${currentCustomEmail}" ]]; then currentCustomEmail="${currentCustomUUID}" echoContent yellow "email: ${currentCustomEmail}\n" else local checkEmail= if [[ "${coreInstallType}" == "1" ]]; then local frontingTypeConfig="${frontingType}" if [[ "${currentInstallProtocolType}" == ",7,8," ]]; then frontingTypeConfig="07_VLESS_vision_reality_inbounds" fi checkEmail=$(jq -r --arg currentEmail "$currentCustomEmail" "(.inbounds[0].settings.clients // .inbounds[1].settings.clients)[]? | select(.email == \$currentEmail) | .email" ${configPath}${frontingTypeConfig:-$frontingTypeReality}.json) elif [[ "${coreInstallType}" == "2" ]] then checkEmail=$(jq -r --arg currentEmail "$currentCustomEmail" ".inbounds[0].users[] | select(.name == \$currentEmail) | .name" ${configPath}${frontingType}.json) fi if [[ -n "${checkEmail}" ]]; then echoContent red " ---> email不可重复" exit 0 fi fi } # 添加用户 addUser() { read -r -p "请输入要添加的用户数量:" userNum echo if [[ -z ${userNum} || ${userNum} -le 0 ]]; then echoContent red " ---> 输入有误，请重新输入" exit 0 fi local userConfig= if [[ "${coreInstallType}" == "1" ]]; then userConfig=".inbounds[0].settings.clients" elif [[ "${coreInstallType}" == "2" ]]; then userConfig=".inbounds[0].users" fi while [[ ${userNum} -gt 0 ]]; do readConfigHostPathUUID local users= ((userNum--)) || true customUUID customUserEmail uuid=${currentCustomUUID} email=${currentCustomEmail} # VLESS TCP if echo "${currentInstallProtocolType}" | grep -q ",0,"; then local clients= if [[ "${coreInstallType}" == "1" ]]; then clients=$(initXrayClients 0 "${uuid}" "${email}") elif [[ "${coreInstallType}" == "2" ]]; then clients=$(initSingBoxClients 0 "${uuid}" "${email}") fi clients=$(jq -r "${userConfig} = ${clients}" ${configPath}02_VLESS_TCP_inbounds.json) echo "${clients}" | jq . >${configPath}02_VLESS_TCP_inbounds.json fi # VLESS WS if echo "${currentInstallProtocolType}" | grep -q ",1,"; then local clients= if [[ "${coreInstallType}" == "1" ]]; then clients=$(initXrayClients 1 "${uuid}" "${email}") elif [[ "${coreInstallType}" == "2" ]]; then clients=$(initSingBoxClients 1 "${uuid}" "${email}") fi clients=$(jq -r "${userConfig} = ${clients}" ${configPath}03_VLESS_WS_inbounds.json) echo "${clients}" | jq . >${configPath}03_VLESS_WS_inbounds.json fi # trojan grpc if echo "${currentInstallProtocolType}" | grep -q ",2,"; then local clients= if [[ "${coreInstallType}" == "1" ]]; then clients=$(initXrayClients 2 "${uuid}" "${email}") elif [[ "${coreInstallType}" == "2" ]]; then clients=$(initSingBoxClients 2 "${uuid}" "${email}") fi clients=$(jq -r "${userConfig} = ${clients}" ${configPath}04_trojan_gRPC_inbounds.json) echo "${clients}" | jq . >${configPath}04_trojan_gRPC_inbounds.json fi # VMess WS if echo "${currentInstallProtocolType}" | grep -q ",3,"; then local clients= if [[ "${coreInstallType}" == "1" ]]; then clients=$(initXrayClients 3 "${uuid}" "${email}") elif [[ "${coreInstallType}" == "2" ]]; then clients=$(initSingBoxClients 3 "${uuid}" "${email}") fi clients=$(jq -r "${userConfig} = ${clients}" ${configPath}05_VMess_WS_inbounds.json) echo "${clients}" | jq . >${configPath}05_VMess_WS_inbounds.json fi # trojan tcp if echo "${currentInstallProtocolType}" | grep -q ",4,"; then local clients= if [[ "${coreInstallType}" == "1" ]]; then clients=$(initXrayClients 4 "${uuid}" "${email}") elif [[ "${coreInstallType}" == "2" ]]; then clients=$(initSingBoxClients 4 "${uuid}" "${email}") fi clients=$(jq -r "${userConfig} = ${clients}" ${configPath}04_trojan_TCP_inbounds.json) echo "${clients}" | jq . >${configPath}04_trojan_TCP_inbounds.json fi # vless grpc if echo "${currentInstallProtocolType}" | grep -q ",5,"; then local clients= if [[ "${coreInstallType}" == "1" ]]; then clients=$(initXrayClients 5 "${uuid}" "${email}") elif [[ "${coreInstallType}" == "2" ]]; then clients=$(initSingBoxClients 5 "${uuid}" "${email}") fi clients=$(jq -r "${userConfig} = ${clients}" ${configPath}06_VLESS_gRPC_inbounds.json) echo "${clients}" | jq . >${configPath}06_VLESS_gRPC_inbounds.json fi # vless reality vision if echo "${currentInstallProtocolType}" | grep -q ",7,"; then local clients= local realityUserConfig= if [[ "${coreInstallType}" == "1" ]]; then clients=$(initXrayClients 7 "${uuid}" "${email}") realityUserConfig=".inbounds[1].settings.clients" elif [[ "${coreInstallType}" == "2" ]]; then clients=$(initSingBoxClients 7 "${uuid}" "${email}") realityUserConfig=".inbounds[0].users" fi clients=$(jq -r "${realityUserConfig} = ${clients}" ${configPath}07_VLESS_vision_reality_inbounds.json) echo "${clients}" | jq . >${configPath}07_VLESS_vision_reality_inbounds.json fi # vless reality grpc if echo "${currentInstallProtocolType}" | grep -q ",8,"; then local clients= if [[ "${coreInstallType}" == "1" ]]; then clients=$(initXrayClients 8 "${uuid}" "${email}") elif [[ "${coreInstallType}" == "2" ]]; then clients=$(initSingBoxClients 8 "${uuid}" "${email}") fi clients=$(jq -r "${userConfig} = ${clients}" ${configPath}08_VLESS_vision_gRPC_inbounds.json) echo "${clients}" | jq . >${configPath}08_VLESS_vision_gRPC_inbounds.json fi # hysteria2 if echo ${currentInstallProtocolType} | grep -q ",6,"; then local clients= if [[ "${coreInstallType}" == "1" ]]; then clients=$(initXrayClients 6 "${uuid}" "${email}") elif [[ -n "${singBoxConfigPath}" ]]; then clients=$(initSingBoxClients 6 "${uuid}" "${email}") fi clients=$(jq -r ".inbounds[0].users = ${clients}" "${singBoxConfigPath}06_hysteria2_inbounds.json") echo "${clients}" | jq . >"${singBoxConfigPath}06_hysteria2_inbounds.json" fi # tuic if echo ${currentInstallProtocolType} | grep -q ",9,"; then local clients= if [[ "${coreInstallType}" == "1" ]]; then clients=$(initXrayClients 9 "${uuid}" "${email}") elif [[ "${coreInstallType}" == "2" ]]; then clients=$(initSingBoxClients 9 "${uuid}" "${email}") fi clients=$(jq -r ".inbounds[0].users = ${clients}" "${singBoxConfigPath}09_tuic_inbounds.json") echo "${clients}" | jq . >"${singBoxConfigPath}09_tuic_inbounds.json" fi # naive if echo ${currentInstallProtocolType} | grep -q ",10,"; then local clients= clients=$(initSingBoxClients 10 "${uuid}" "${email}") clients=$(jq -r ".inbounds[0].users = ${clients}" "${singBoxConfigPath}10_naive_inbounds.json") echo "${clients}" | jq . >"${singBoxConfigPath}10_naive_inbounds.json" fi # VMess WS if echo "${currentInstallProtocolType}" | grep -q ",11,"; then local clients= if [[ "${coreInstallType}" == "1" ]]; then clients=$(initXrayClients 11 "${uuid}" "${email}") elif [[ "${coreInstallType}" == "2" ]]; then clients=$(initSingBoxClients 11 "${uuid}" "${email}") fi clients=$(jq -r "${userConfig} = ${clients}" ${configPath}11_VMess_HTTPUpgrade_inbounds.json) echo "${clients}" | jq . >${configPath}11_VMess_HTTPUpgrade_inbounds.json fi # anytls if echo "${currentInstallProtocolType}" | grep -q ",13,"; then local clients= clients=$(initSingBoxClients 13 "${uuid}" "${email}") clients=$(jq -r "${userConfig} = ${clients}" ${configPath}13_anytls_inbounds.json) echo "${clients}" | jq . >${configPath}13_anytls_inbounds.json fi done reloadCore echoContent green " ---> 添加完成" readNginxSubscribe if [[ -n "${subscribePort}" ]]; then subscribe false fi manageAccount 1 } # 移除用户 removeUser() { local uuid= if [[ "${coreInstallType}" == "1" ]]; then jq -r -c '(.inbounds[0].settings.clients // .inbounds[1].settings.clients)[]?|.email' ${configPath}${frontingType:-$frontingTypeReality}.json | awk '{print NR""":"$0}' read -r -p "请选择要删除的用户编号[仅支持单个删除]:" delUserIndex if [[ $(jq -r '(.inbounds[0].settings.clients // .inbounds[1].settings.clients)?|length' ${configPath}${frontingType:-$frontingTypeReality}.json) -lt ${delUserIndex} ]]; then echoContent red " ---> 选择错误" else delUserIndex=$((delUserIndex - 1)) fi elif [[ "${coreInstallType}" == "2" ]]; then jq -r -c .inbounds[0].users[].name//.inbounds[0].users[].username ${configPath}${frontingType:-$frontingTypeReality}.json | awk '{print NR""":"$0}' read -r -p "请选择要删除的用户编号[仅支持单个删除]:" delUserIndex if [[ $(jq -r '.inbounds[0].users|length' ${configPath}${frontingType:-$frontingTypeReality}.json) -lt ${delUserIndex} ]]; then echoContent red " ---> 选择错误" else delUserIndex=$((delUserIndex - 1)) fi fi if [[ -n "${delUserIndex}" ]]; then if echo ${currentInstallProtocolType} | grep -q ",0,"; then local vlessVision vlessVision=$(jq -r 'del(.inbounds[0].settings.clients['"${delUserIndex}"']//.inbounds[0].users['"${delUserIndex}"'])' ${configPath}02_VLESS_TCP_inbounds.json) echo "${vlessVision}" | jq . >${configPath}02_VLESS_TCP_inbounds.json fi if echo ${currentInstallProtocolType} | grep -q ",1,"; then local vlessWSResult vlessWSResult=$(jq -r 'del(.inbounds[0].settings.clients['"${delUserIndex}"']//.inbounds[0].users['"${delUserIndex}"'])' ${configPath}03_VLESS_WS_inbounds.json) echo "${vlessWSResult}" | jq . >${configPath}03_VLESS_WS_inbounds.json fi if echo ${currentInstallProtocolType} | grep -q ",2,"; then local trojangRPCUsers trojangRPCUsers=$(jq -r 'del(.inbounds[0].settings.clients['"${delUserIndex}"']//.inbounds[0].users['"${delUserIndex}"')' ${configPath}04_trojan_gRPC_inbounds.json) echo "${trojangRPCUsers}" | jq . >${configPath}04_trojan_gRPC_inbounds.json fi if echo ${currentInstallProtocolType} | grep -q ",3,"; then local vmessWSResult vmessWSResult=$(jq -r 'del(.inbounds[0].settings.clients['"${delUserIndex}"']//.inbounds[0].users['"${delUserIndex}"'])' ${configPath}05_VMess_WS_inbounds.json) echo "${vmessWSResult}" | jq . >${configPath}05_VMess_WS_inbounds.json fi if echo ${currentInstallProtocolType} | grep -q ",5,"; then local vlessGRPCResult vlessGRPCResult=$(jq -r 'del(.inbounds[0].settings.clients['"${delUserIndex}"']//.inbounds[0].users['"${delUserIndex}"'])' ${configPath}06_VLESS_gRPC_inbounds.json) echo "${vlessGRPCResult}" | jq . >${configPath}06_VLESS_gRPC_inbounds.json fi if echo ${currentInstallProtocolType} | grep -q ",4,"; then local trojanTCPResult trojanTCPResult=$(jq -r 'del(.inbounds[0].settings.clients['"${delUserIndex}"']//.inbounds[0].users['"${delUserIndex}"'])' ${configPath}04_trojan_TCP_inbounds.json) echo "${trojanTCPResult}" | jq . >${configPath}04_trojan_TCP_inbounds.json fi if echo ${currentInstallProtocolType} | grep -q ",6,"; then local hysteriaResult hysteriaResult=$(jq -r 'del(.inbounds[0].users['"${delUserIndex}"'])' "${singBoxConfigPath}06_hysteria2_inbounds.json") echo "${hysteriaResult}" | jq . >"${singBoxConfigPath}06_hysteria2_inbounds.json" fi if echo ${currentInstallProtocolType} | grep -q ",7,"; then local vlessRealityResult vlessRealityResult=$(jq -r 'del(.inbounds[1].settings.clients['"${delUserIndex}"']//.inbounds[0].users['"${delUserIndex}"'])' ${configPath}07_VLESS_vision_reality_inbounds.json) echo "${vlessRealityResult}" | jq . >${configPath}07_VLESS_vision_reality_inbounds.json fi if echo ${currentInstallProtocolType} | grep -q ",8,"; then local vlessRealityGRPCResult vlessRealityGRPCResult=$(jq -r 'del(.inbounds[0].settings.clients['"${delUserIndex}"']//.inbounds[0].users['"${delUserIndex}"'])' ${configPath}08_VLESS_vision_gRPC_inbounds.json) echo "${vlessRealityGRPCResult}" | jq . >${configPath}08_VLESS_vision_gRPC_inbounds.json fi if echo ${currentInstallProtocolType} | grep -q ",9,"; then local tuicResult tuicResult=$(jq -r 'del(.inbounds[0].users['"${delUserIndex}"'])' "${singBoxConfigPath}09_tuic_inbounds.json") echo "${tuicResult}" | jq . >"${singBoxConfigPath}09_tuic_inbounds.json" fi if echo ${currentInstallProtocolType} | grep -q ",10,"; then local naiveResult naiveResult=$(jq -r 'del(.inbounds[0].users['"${delUserIndex}"'])' "${singBoxConfigPath}10_naive_inbounds.json") echo "${naiveResult}" | jq . >"${singBoxConfigPath}10_naive_inbounds.json" fi # VMess HTTPUpgrade if echo ${currentInstallProtocolType} | grep -q ",11,"; then local vmessHTTPUpgradeResult vmessHTTPUpgradeResult=$(jq -r 'del(.inbounds[0].users['"${delUserIndex}"'])' "${singBoxConfigPath}11_VMess_HTTPUpgrade_inbounds.json") echo "${vmessHTTPUpgradeResult}" | jq . >"${singBoxConfigPath}11_VMess_HTTPUpgrade_inbounds.json" echo "${vmessHTTPUpgradeResult}" | jq . >${configPath}11_VMess_HTTPUpgrade_inbounds.json fi # AnyTLS if echo ${currentInstallProtocolType} | grep -q ",13,"; then local anyTLSResult anyTLSResult=$(jq -r 'del(.inbounds[0].users['"${delUserIndex}"'])' "${singBoxConfigPath}13_anytls_inbounds.json") echo "${anyTLSResult}" | jq . >"${singBoxConfigPath}13_anytls_inbounds.json" fi reloadCore readNginxSubscribe if [[ -n "${subscribePort}" ]]; then subscribe false fi fi manageAccount 1 } # 更新脚本 updateV2RayAgent() { echoContent skyBlue "\n进度 $1/${totalProgress} : 更新v2ray-agent脚本" rm -rf /etc/v2ray-agent/install.sh if [[ "${release}" == "alpine" ]]; then wget -c -q -P /etc/v2ray-agent/ -N --no-check-certificate "https://raw.githubusercontent.com/dodo258/sing-box-reality-manager/main/install.sh" else wget -c -q "${wgetShowProgressStatus}" -P /etc/v2ray-agent/ -N --no-check-certificate "https://raw.githubusercontent.com/dodo258/sing-box-reality-manager/main/install.sh" fi sudo chmod 700 /etc/v2ray-agent/install.sh local version version=$(grep '当前版本：v' "/etc/v2ray-agent/install.sh" | awk -F "[v]" '{print $2}' | tail -n +2 | head -n 1 | awk -F "[\"]" '{print $1}') echoContent green "\n ---> 更新完毕" echoContent yellow " ---> 请手动执行[vasma]打开脚本" echoContent green " ---> 当前版本：${version}\n" echoContent yellow "如更新不成功，请手动执行下面命令\n" echoContent skyBlue "wget -P /root -N --no-check-certificate https://raw.githubusercontent.com/dodo258/sing-box-reality-manager/main/install.sh && chmod 700 /root/install.sh && /root/install.sh" echo exit 0 } # 防火墙 handleFirewall() { if systemctl status ufw 2>/dev/null | grep -q "active (exited)" && [[ "$1" == "stop" ]]; then systemctl stop ufw >/dev/null 2>&1 systemctl disable ufw >/dev/null 2>&1 echoContent green " ---> ufw关闭成功" fi if systemctl status firewalld 2>/dev/null | grep -q "active (running)" && [[ "$1" == "stop" ]]; then systemctl stop firewalld >/dev/null 2>&1 systemctl disable firewalld >/dev/null 2>&1 echoContent green " ---> firewalld关闭成功" fi } # 安装BBR bbrInstall() { echoContent red "\n==============================================================" echoContent green "BBR、DD脚本用的[ylx2016]的成熟作品，地址[https://github.com/ylx2016/Linux-NetSpeed]，请熟知" echoContent yellow "1.安装脚本【推荐原版BBR+FQ】" echoContent yellow "2.回退主目录" echoContent red "==============================================================" read -r -p "请选择:" installBBRStatus if [[ "${installBBRStatus}" == "1" ]]; then wget -O tcpx.sh "https://github.com/ylx2016/Linux-NetSpeed/raw/master/tcpx.sh" && chmod +x tcpx.sh && ./tcpx.sh else menu fi } # 查看、检查日志 checkLog() { if [[ "${coreInstallType}" == "2" ]]; then echoContent red "\n ---> 此功能仅支持Xray-core内核" exit 0 fi if [[ -z "${configPath}" && -z "${realityStatus}" ]]; then echoContent red " ---> 没有检测到安装目录，请执行脚本安装内容" exit 0 fi local realityLogShow= local logStatus=false if grep -q "access" ${configPath}00_log.json; then logStatus=true fi echoContent skyBlue "\n功能 $1/${totalProgress} : 查看日志" echoContent red "\n==============================================================" echoContent yellow "# 建议仅调试时打开access日志\n" if [[ "${logStatus}" == "false" ]]; then echoContent yellow "1.打开access日志" else echoContent yellow "1.关闭access日志" fi echoContent yellow "2.监听access日志" echoContent yellow "3.监听error日志" echoContent yellow "4.查看证书定时任务日志" echoContent yellow "5.查看证书安装日志" echoContent yellow "6.清空日志" echoContent red "==============================================================" read -r -p "请选择:" selectAccessLogType local configPathLog=${configPath//conf\//} case ${selectAccessLogType} in 1) if [[ "${logStatus}" == "false" ]]; then realityLogShow=true cat <${configPath}00_log.json { "log": { "access":"${configPathLog}access.log", "error": "${configPathLog}error.log", "loglevel": "debug" } } EOF elif [[ "${logStatus}" == "true" ]]; then realityLogShow=false cat <${configPath}00_log.json { "log": { "error": "${configPathLog}error.log", "loglevel": "warning" } } EOF fi if [[ ${realityStatus} == "7" ]]; then local vlessVisionRealityInbounds vlessVisionRealityInbounds=$(jq -r ".inbounds[0].streamSettings.realitySettings.show=${realityLogShow}" ${configPath}07_VLESS_vision_reality_inbounds.json) echo "${vlessVisionRealityInbounds}" | jq . >${configPath}07_VLESS_vision_reality_inbounds.json fi if [[ ${realityStatus} == "12" ]]; then local vlessVisionRealityXHTTPInbounds vlessVisionRealityXHTTPInbounds=$(jq -r ".inbounds[0].streamSettings.realitySettings.show=${realityLogShow}" ${configPath}12_VLESS_XHTTP_inbounds.json) echo "${vlessVisionRealityXHTTPInbounds}" | jq . >${configPath}12_VLESS_XHTTP_inbounds.json fi reloadCore checkLog 1 ;; 2) tail -f "${configPathLog}access.log" ;; 3) tail -f "${configPathLog}error.log" ;; 4) if [[ ! -f "/etc/v2ray-agent/crontab_tls.log" ]]; then touch /etc/v2ray-agent/crontab_tls.log fi tail -n 100 /etc/v2ray-agent/crontab_tls.log ;; 5) tail -n 100 /etc/v2ray-agent/tls/acme.log ;; 6) echo >"${configPathLog}access.log" echo >"${configPathLog}error.log" ;; esac } # 脚本快捷方式 aliasInstall() { if [[ -f "$HOME/install.sh" ]] && [[ -d "/etc/v2ray-agent" ]] && grep -Eq "Maintainer:dodo258" <"$HOME/install.sh"; then mv "$HOME/install.sh" /etc/v2ray-agent/install.sh chmod 700 /etc/v2ray-agent/install.sh local vasmaType= if [[ -d "/usr/bin/" ]]; then if [[ ! -f "/usr/bin/vasma" ]]; then ln -s /etc/v2ray-agent/install.sh /usr/bin/vasma chmod 700 /usr/bin/vasma vasmaType=true else chmod 700 /etc/v2ray-agent/install.sh fi rm -rf "$HOME/install.sh" elif [[ -d "/usr/sbin" ]]; then if [[ ! -f "/usr/sbin/vasma" ]]; then ln -s /etc/v2ray-agent/install.sh /usr/sbin/vasma chmod 700 /usr/sbin/vasma vasmaType=true else chmod 700 /etc/v2ray-agent/install.sh fi rm -rf "$HOME/install.sh" fi if [[ "${vasmaType}" == "true" ]]; then echoContent green "快捷方式创建成功，可执行[vasma]重新打开脚本" fi fi } # 检查ipv6、ipv4 checkIPv6() { currentIPv6IP=$(curl -s -6 -m 4 http://www.cloudflare.com/cdn-cgi/trace | grep "ip" | cut -d "=" -f 2) if [[ -z "${currentIPv6IP}" ]]; then echoContent red " ---> 不支持ipv6" exit 0 fi } # ipv6 分流 ipv6Routing() { if [[ -z "${configPath}" ]]; then echoContent red " ---> 未安装，请使用脚本安装" menu exit 0 fi checkIPv6 echoContent skyBlue "\n功能 1/${totalProgress} : IPv6分流" echoContent red "\n==============================================================" echoContent yellow "1.查看已分流域名" echoContent yellow "2.添加域名" echoContent yellow "3.设置IPv6全局" echoContent yellow "4.卸载IPv6分流" echoContent red "==============================================================" read -r -p "请选择:" ipv6Status if [[ "${ipv6Status}" == "1" ]]; then showIPv6Routing exit 0 elif [[ "${ipv6Status}" == "2" ]]; then echoContent red "==============================================================" echoContent yellow "# 注意事项\n" echoContent yellow "# 注意事项" echoContent yellow "# 使用说明：请参考仓库 README \n" read -r -p "请按照上面示例录入域名:" domainList if [[ "${coreInstallType}" == "1" ]]; then addXrayRouting IPv6_out outboundTag "${domainList}" addXrayOutbound IPv6_out fi if [[ -n "${singBoxConfigPath}" ]]; then addSingBoxRouteRule "IPv6_out" "${domainList}" "IPv6_route" addSingBoxOutbound 01_direct_outbound addSingBoxOutbound IPv6_out addSingBoxOutbound IPv4_out fi echoContent green " ---> 添加完毕" elif [[ "${ipv6Status}" == "3" ]]; then echoContent red "==============================================================" echoContent yellow "# 注意事项\n" echoContent yellow "1.会删除所有设置的分流规则" echoContent yellow "2.会删除IPv6之外的所有出站规则\n" read -r -p "是否确认设置？[y/n]:" IPv6OutStatus if [[ "${IPv6OutStatus}" == "y" ]]; then if [[ "${coreInstallType}" == "1" ]]; then addXrayOutbound IPv6_out removeXrayOutbound IPv4_out removeXrayOutbound z_direct_outbound removeXrayOutbound blackhole_out removeXrayOutbound wireguard_out_IPv4 removeXrayOutbound wireguard_out_IPv6 removeXrayOutbound socks5_outbound rm ${configPath}09_routing.json >/dev/null 2>&1 fi if [[ -n "${singBoxConfigPath}" ]]; then removeSingBoxConfig IPv4_out removeSingBoxConfig wireguard_endpoints_IPv4_route removeSingBoxConfig wireguard_endpoints_IPv6_route removeSingBoxConfig wireguard_endpoints_IPv4 removeSingBoxConfig wireguard_endpoints_IPv6 removeSingBoxConfig socks5_02_inbound_route removeSingBoxConfig IPv6_route removeSingBoxConfig 01_direct_outbound addSingBoxOutbound IPv6_out fi echoContent green " ---> IPv6全局出站设置完毕" else echoContent green " ---> 放弃设置" exit 0 fi elif [[ "${ipv6Status}" == "4" ]]; then if [[ "${coreInstallType}" == "1" ]]; then unInstallRouting IPv6_out outboundTag removeXrayOutbound IPv6_out addXrayOutbound "z_direct_outbound" fi if [[ -n "${singBoxConfigPath}" ]]; then removeSingBoxConfig IPv6_out removeSingBoxConfig "IPv6_route" addSingBoxOutbound "01_direct_outbound" fi echoContent green " ---> IPv6分流卸载成功" else echoContent red " ---> 选择错误" exit 0 fi reloadCore } # ipv6分流规则展示 showIPv6Routing() { if [[ "${coreInstallType}" == "1" ]]; then if [[ -f "${configPath}09_routing.json" ]]; then echoContent yellow "Xray-core：" jq -r -c '.routing.rules[]|select (.outboundTag=="IPv6_out")|.domain' ${configPath}09_routing.json | jq -r elif [[ ! -f "${configPath}09_routing.json" && -f "${configPath}IPv6_out.json" ]]; then echoContent yellow "Xray-core" echoContent green " ---> 已设置IPv6全局分流" else echoContent yellow " ---> 未安装IPv6分流" fi fi if [[ -n "${singBoxConfigPath}" ]]; then if [[ -f "${singBoxConfigPath}IPv6_route.json" ]]; then echoContent yellow "sing-box" jq -r -c '.route.rules[]|select (.outbound=="IPv6_out")' "${singBoxConfigPath}IPv6_route.json" | jq -r elif [[ ! -f "${singBoxConfigPath}IPv6_route.json" && -f "${singBoxConfigPath}IPv6_out.json" ]]; then echoContent yellow "sing-box" echoContent green " ---> 已设置IPv6全局分流" else echoContent yellow " ---> 未安装IPv6分流" fi fi } # bt下载管理 btTools() { if [[ "${coreInstallType}" == "2" ]]; then echoContent red "\n ---> 此功能仅支持Xray-core内核，请等待后续更新" exit 0 fi if [[ -z "${configPath}" ]]; then echoContent red " ---> 未安装，请使用脚本安装" menu exit 0 fi echoContent skyBlue "\n功能 1/${totalProgress} : bt下载管理" echoContent red "\n==============================================================" if [[ -f ${configPath}09_routing.json ]] && grep -q bittorrent <${configPath}09_routing.json; then echoContent yellow "当前状态:已禁止下载BT" else echoContent yellow "当前状态:允许下载BT" fi echoContent yellow "1.禁止下载BT" echoContent yellow "2.允许下载BT" echoContent red "==============================================================" read -r -p "请选择:" btStatus if [[ "${btStatus}" == "1" ]]; then if [[ -f "${configPath}09_routing.json" ]]; then unInstallRouting blackhole_out outboundTag bittorrent routing=$(jq -r '.routing.rules += [{"type":"field","outboundTag":"blackhole_out","protocol":["bittorrent"]}]' ${configPath}09_routing.json) echo "${routing}" | jq . >${configPath}09_routing.json else cat <${configPath}09_routing.json { "routing":{ "domainStrategy": "IPOnDemand", "rules": [ { "type": "field", "outboundTag": "blackhole_out", "protocol": [ "bittorrent" ] } ] } } EOF fi installSniffing removeXrayOutbound blackhole_out addXrayOutbound blackhole_out echoContent green " ---> 禁止BT下载" elif [[ "${btStatus}" == "2" ]]; then unInstallSniffing unInstallRouting blackhole_out outboundTag bittorrent echoContent green " ---> 允许BT下载" else echoContent red " ---> 选择错误" exit 0 fi reloadCore } # 域名黑名单 blacklist() { if [[ -z "${configPath}" ]]; then echoContent red " ---> 未安装，请使用脚本安装" menu exit 0 fi echoContent skyBlue "\n进度 $1/${totalProgress} : 域名黑名单" echoContent red "\n==============================================================" echoContent yellow "1.查看已屏蔽域名" echoContent yellow "2.添加域名" echoContent yellow "3.屏蔽大陆域名+IP" echoContent yellow "4.卸载黑/白名单" echoContent yellow "5.添加IP" echoContent yellow "6.添加域名白名单" echoContent red "==============================================================" read -r -p "请选择:" blacklistStatus if [[ "${blacklistStatus}" == "1" ]]; then jq -r -c '.routing.rules[]|select (.outboundTag=="blackhole_out")|.domain' ${configPath}09_routing.json | jq -r exit 0 elif [[ "${blacklistStatus}" == "2" ]]; then echoContent red "==============================================================" echoContent yellow "# 注意事项\n" echoMenuHint "1.规则支持预定义域名列表" "https://github.com/v2fly/domain-list-community" echoContent yellow "2.规则支持自定义域名" echoContent yellow "3.录入示例:speedtest,facebook,cn,example.com" echoContent yellow "4.如果域名在预定义域名列表中存在则使用 geosite:xx，如果不存在则默认使用输入的域名" echoContent yellow "5.添加规则为增量配置，不会删除之前设置的内容\n" read -r -p "请按照上面示例录入域名:" domainList if [[ "${coreInstallType}" == "1" ]]; then addXrayRouting blackhole_out outboundTag "${domainList}" addXrayOutbound blackhole_out fi if [[ -n "${singBoxConfigPath}" ]]; then addSingBoxRouteRule "block_domain_outbound" "${domainList}" "block_domain_route" addSingBoxOutbound "block_domain_outbound" addSingBoxOutbound "01_direct_outbound" fi echoContent green " ---> 添加完毕" elif [[ "${blacklistStatus}" == "3" ]]; then local allowDomainList="dl.google.com,apple.com,bing.com,microsoft.com,gstatic,xn--ngstr-lra8j.com,googleapis.com,googleapis.cn" if [[ "${coreInstallType}" == "1" ]]; then unInstallRouting blackhole_out outboundTag unInstallRouting blackhole_ip_out outboundTag addXrayRouting blackhole_out outboundTag "cn" addXrayIPRouting blackhole_ip_out outboundTag "cn" addXrayRouting allow_domain_direct_outbound outboundTag "${allowDomainList}" "top" addXrayOutbound blackhole_out addXrayOutbound blackhole_ip_out addXrayOutbound allow_domain_direct_outbound fi if [[ -n "${singBoxConfigPath}" ]]; then addSingBoxRouteRule "cn_block_outbound" "cn" "cn_block_route" addSingBoxGeoIPRouteRule "block_ip_outbound" "cn" "cn_block_ip_route" addSingBoxRouteRule "01_direct_outbound" "${allowDomainList}" "00_allow_domain_route" addSingBoxOutbound "cn_block_outbound" addSingBoxOutbound "block_ip_outbound" addSingBoxOutbound "01_direct_outbound" fi echoContent green " ---> 屏蔽大陆域名+IP完毕" elif [[ "${blacklistStatus}" == "4" ]]; then if [[ "${coreInstallType}" == "1" ]]; then unInstallRouting blackhole_out outboundTag unInstallRouting blackhole_ip_out outboundTag unInstallRouting allow_domain_direct_outbound outboundTag removeXrayOutbound blackhole_ip_out removeXrayOutbound allow_domain_direct_outbound fi if [[ -n "${singBoxConfigPath}" ]]; then removeSingBoxConfig "cn_block_route" removeSingBoxConfig "cn_block_outbound" removeSingBoxConfig "cn_block_ip_route" removeSingBoxConfig "block_ip_route" removeSingBoxConfig "block_ip_outbound" removeSingBoxConfig "cn_01_google_play_route" removeSingBoxConfig "00_allow_domain_route" removeSingBoxConfig "block_domain_route" removeSingBoxConfig "block_domain_outbound" fi echoContent green " ---> 域名黑名单/白名单删除完毕" elif [[ "${blacklistStatus}" == "5" ]]; then echoContent red "==============================================================" echoContent yellow "录入示例:1.1.1.1,8.8.8.8,1.1.1.0/24,2400:3200::/32\n" read -r -p "请按照上面示例录入IP:" ipList if [[ -z "${ipList}" ]]; then echoContent red " ---> IP不可为空" exit 0 fi if [[ "${coreInstallType}" == "1" ]]; then addXrayIPRouting blackhole_ip_out outboundTag "${ipList}" addXrayOutbound blackhole_ip_out fi if [[ -n "${singBoxConfigPath}" ]]; then addSingBoxIPRouteRule "block_ip_outbound" "${ipList}" "block_ip_route" addSingBoxOutbound "block_ip_outbound" fi echoContent green " ---> 添加IP完毕" elif [[ "${blacklistStatus}" == "6" ]]; then echoContent red "==============================================================" echoContent yellow "录入示例:speedtest,openai,google.com\n" read -r -p "请按照上面示例录入域名:" allowDomainList if [[ -z "${allowDomainList}" ]]; then echoContent red " ---> 域名不可为空" exit 0 fi if [[ "${coreInstallType}" == "1" ]]; then addXrayRouting allow_domain_direct_outbound outboundTag "${allowDomainList}" "top" addXrayOutbound allow_domain_direct_outbound fi if [[ -n "${singBoxConfigPath}" ]]; then addSingBoxRouteRule "01_direct_outbound" "${allowDomainList}" "00_allow_domain_route" addSingBoxOutbound "01_direct_outbound" fi echoContent green " ---> 添加域名白名单完毕" else echoContent red " ---> 选择错误" exit 0 fi reloadCore } # 下载 dlc.dat_plain.yml 到核心目录 downloadDLCPlainYAML() { local corePath=$1 local dlcFilePath="${corePath}/dlc.dat_plain.yml" local tmpFilePath="${dlcFilePath}.tmp" if [[ -z "${corePath}" ]]; then return 1 fi mkdir -p "${corePath}" >/dev/null 2>&1 if [[ -s "${dlcFilePath}" ]]; then return 0 fi local dlcDownloadURL="https://github.com/v2fly/domain-list-community/releases/latest/download/dlc.dat_plain.yml" if [[ "${release}" == "alpine" ]]; then wget -c -O "${tmpFilePath}" "${dlcDownloadURL}" >/dev/null 2>&1 else wget -c "${wgetShowProgressStatus}" -O "${tmpFilePath}" "${dlcDownloadURL}" >/dev/null 2>&1 fi # shellcheck disable=SC2181 if [[ "$?" -ne 0 || ! -s "${tmpFilePath}" ]]; then rm -f "${tmpFilePath}" >/dev/null 2>&1 return 1 fi mv "${tmpFilePath}" "${dlcFilePath}" >/dev/null 2>&1 } # 转义grep/regex匹配字符 escapeDLCRegexPattern() { # shellcheck disable=SC2016 # shellcheck disable=SC2001 echo "$1" | sed -e 's/[.[\*^$()+?{|]/\\&/g' } # 根据规则行号向上回溯对应name getDLCNameByRuleLine() { local ruleLine=$1 local dlcFilePath=$2 awk -v targetLine="${ruleLine}" ' /^[[:space:]]*-[[:space:]]*name:[[:space:]]*/ { line = $0 sub(/^[[:space:]]*-[[:space:]]*name:[[:space:]]*/, "", line) currentName = line } NR == targetLine { print currentName exit }' "${dlcFilePath}" } isDomainFormat() { local target=$1 [[ "${target}" =~ ^([a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z0-9-]{2,63}$ ]] } # 根据输入域名匹配 dlc.dat_plain.yml 对应 geosite name getDLCGeositeName() { local inputRule=$1 local corePath=$2 local dlcFilePath="${corePath}/dlc.dat_plain.yml" if [[ -z "${inputRule}" || -z "${corePath}" ]]; then echo "" return fi local normalizedInput normalizedInput=$(echo "${inputRule}" | tr '[:upper:]' '[:lower:]' | sed 's/^[[:space:]]*//;s/[[:space:]]*$//') normalizedInput=${normalizedInput#domain:} normalizedInput=${normalizedInput#full:} normalizedInput=${normalizedInput#keyword:} if [[ -z "${normalizedInput}" ]]; then echo "" return fi if isDomainFormat "${normalizedInput}"; then return fi if ! downloadDLCPlainYAML "${corePath}"; then echo "" return fi local escapedInput= escapedInput=$(escapeDLCRegexPattern "${normalizedInput}") local matchedLine= matchedLine=$(grep -n -m1 -E "^[[:space:]]*-[[:space:]]*name:[[:space:]]*${escapedInput}[[:space:]]*$" "${dlcFilePath}") if [[ -n "${matchedLine}" ]]; then echo "${normalizedInput}" fi } # 获取规则匹配结果，优先geosite，失败回退domain getDLCMatchedRuleValue() { local inputRule=$1 local corePath=$2 local normalizedInput= normalizedInput=$(echo "${inputRule}" | tr '[:upper:]' '[:lower:]' | sed 's/^[[:space:]]*//;s/[[:space:]]*$//') if isDomainFormat "${normalizedInput}"; then local escapedDomain= escapedDomain=$(escapeDLCRegexPattern "${normalizedInput}") echo "regexp:.*${escapedDomain}.*" return fi local matchedRuleName= matchedRuleName=$(getDLCGeositeName "${normalizedInput}" "${corePath}") if [[ -n "${matchedRuleName}" ]]; then echo "geosite:${matchedRuleName}" else echo "domain:${normalizedInput}" fi } # 添加routing配置 addXrayRouting() { local tag=$1 # warp-socks local type=$2 # outboundTag/inboundTag local domain=$3 # 域名 local rulePosition=$4 if [[ -z "${tag}" || -z "${type}" || -z "${domain}" ]]; then echoContent red " ---> 参数错误" exit 0 fi local routingRule= if [[ ! -f "${configPath}09_routing.json" ]]; then cat <${configPath}09_routing.json { "routing":{ "type": "field", "rules": [ { "type": "field", "domain": [ ], "outboundTag": "${tag}" } ] } } EOF fi local routingRule= routingRule=$(jq -r ".routing.rules[]|select(.outboundTag==\"${tag}\" and (.protocol == null))" ${configPath}09_routing.json) if [[ -z "${routingRule}" ]]; then routingRule="{\"type\": \"field\",\"domain\": [],\"outboundTag\": \"${tag}\"}" fi while read -r line; do if echo "${routingRule}" | grep -q "${line}"; then echoContent yellow " ---> ${line}已存在，跳过" else local matchedRuleValue matchedRuleValue=$(getDLCMatchedRuleValue "${line}" "/etc/v2ray-agent/xray") routingRule=$(echo "${routingRule}" | jq -r --arg rule "${matchedRuleValue}" '.domain += [$rule]') fi done < <(echo "${domain}" | tr ',' '\n') unInstallRouting "${tag}" "${type}" if ! grep -q "gstatic.com" ${configPath}09_routing.json && [[ "${tag}" == "blackhole_out" ]]; then local routing= routing=$(jq -r ".routing.rules += [{\"type\": \"field\",\"domain\": [\"domain:gstatic.com\"],\"outboundTag\": \"allow_domain_direct_outbound\"}]" ${configPath}09_routing.json) echo "${routing}" | jq . >${configPath}09_routing.json addXrayOutbound allow_domain_direct_outbound fi if [[ "${rulePosition}" == "top" ]]; then routing=$(jq -r ".routing.rules = [${routingRule}] + .routing.rules" ${configPath}09_routing.json) else routing=$(jq -r ".routing.rules += [${routingRule}]" ${configPath}09_routing.json) fi echo "${routing}" | jq . >${configPath}09_routing.json } # 添加 Xray IP 屏蔽路由规则 # 支持 geoip:cn 与自定义 IPv4/IPv6/CIDR addXrayIPRouting() { local tag=$1 local type=$2 local ipList=$3 if [[ -z "${tag}" || -z "${type}" || -z "${ipList}" ]]; then echoContent red " ---> 参数错误" exit 0 fi if [[ ! -f "${configPath}09_routing.json" ]]; then cat <${configPath}09_routing.json { "routing":{ "type": "field", "rules": [] } } EOF fi local routingRule= routingRule=$(jq -r ".routing.rules[]|select(.outboundTag==\"${tag}\" and (.protocol == null) and (.ip != null))" ${configPath}09_routing.json) if [[ -z "${routingRule}" ]]; then routingRule="{\"type\": \"field\",\"ip\": [],\"outboundTag\": \"${tag}\"}" fi while read -r line; do line=$(echo "${line}" | sed 's/^[[:space:]]*//;s/[[:space:]]*$//') if [[ -z "${line}" ]]; then continue fi local ipRuleValue=${line} if [[ "${line}" == "cn" ]]; then ipRuleValue="geoip:cn" fi if echo "${routingRule}" | grep -q "${ipRuleValue}"; then echoContent yellow " ---> ${ipRuleValue}已存在，跳过" else routingRule=$(echo "${routingRule}" | jq -r '.ip += ["'"${ipRuleValue}"'"]') fi done < <(echo "${ipList}" | tr ',' '\n') unInstallRouting "${tag}" "${type}" local routing= routing=$(jq -r ".routing.rules += [${routingRule}]" ${configPath}09_routing.json) echo "${routing}" | jq . >${configPath}09_routing.json } # 添加 sing-box IP 屏蔽路由规则 # 支持增量合并历史 ip_cidr addSingBoxIPRouteRule() { local outboundTag=$1 local ipList=$2 local routingName=$3 local historyIPs= if [[ -f "${singBoxConfigPath}${routingName}.json" ]]; then historyIPs=$(jq -r '.route.rules[0].ip_cidr[]?' "${singBoxConfigPath}${routingName}.json" | paste -sd ',') fi if [[ -n "${historyIPs}" ]]; then ipList="${ipList},${historyIPs}" fi local ipCIDR=[] ipCIDR=$(echo "${ipList}" | tr ',' '\n' | sed 's/^[[:space:]]*//;s/[[:space:]]*$//' | grep -v '^$' | sort -n | uniq | jq -R . | jq -s .) cat <"${singBoxConfigPath}${routingName}.json" { "route": { "rules": [ { "ip_cidr": ${ipCIDR}, "outbound": "${outboundTag}" } ] } } EOF } # 添加 sing-box GeoIP 远程规则 # 用于大陆 IP 自动屏蔽场景 addSingBoxGeoIPRouteRule() { local outboundTag=$1 local geoipCode=$2 local routingName=$3 cat <"${singBoxConfigPath}${routingName}.json" { "route": { "rules": [ { "rule_set": [ "geoip_${geoipCode}_${routingName}" ], "outbound": "${outboundTag}" } ], "rule_set": [ { "tag": "geoip_${geoipCode}_${routingName}", "type": "remote", "format": "binary", "url": "https://raw.githubusercontent.com/SagerNet/sing-geoip/rule-set/geoip-${geoipCode}.srs", "download_detour": "01_direct_outbound" } ] } } EOF } # 根据tag卸载Routing unInstallRouting() { local tag=$1 local type=$2 local protocol=$3 if [[ -f "${configPath}09_routing.json" ]]; then local routing= if [[ -n "${protocol}" ]]; then routing=$(jq -r "del(.routing.rules[] | select(.${type} == \"${tag}\" and (.protocol | index(\"${protocol}\"))))" ${configPath}09_routing.json) echo "${routing}" | jq . >${configPath}09_routing.json else routing=$(jq -r "del(.routing.rules[] | select(.${type} == \"${tag}\" and (.protocol == null )))" ${configPath}09_routing.json) echo "${routing}" | jq . >${configPath}09_routing.json fi fi } # 卸载嗅探 unInstallSniffing() { find ${configPath} -name "*inbounds.json*" | awk -F "[c][o][n][f][/]" '{print $2}' | while read -r inbound; do if grep -q "destOverride" <"${configPath}${inbound}"; then sniffing=$(jq -r 'del(.inbounds[0].sniffing)' "${configPath}${inbound}") echo "${sniffing}" | jq . >"${configPath}${inbound}" fi done } # 安装嗅探 installSniffing() { readInstallType if [[ "${coreInstallType}" == "1" ]]; then if [[ -f "${configPath}02_VLESS_TCP_inbounds.json" ]]; then if ! grep -q "destOverride" <"${configPath}02_VLESS_TCP_inbounds.json"; then sniffing=$(jq -r '.inbounds[0].sniffing = {"enabled":true,"destOverride":["http","tls","quic"]}' "${configPath}02_VLESS_TCP_inbounds.json") echo "${sniffing}" | jq . >"${configPath}02_VLESS_TCP_inbounds.json" fi fi fi } # 读取第三方warp配置 readConfigWarpReg() { if [[ ! -f "/etc/v2ray-agent/warp/config" ]]; then /etc/v2ray-agent/warp/warp-reg >/etc/v2ray-agent/warp/config fi secretKeyWarpReg=$(grep <"/etc/v2ray-agent/warp/config" private_key | awk '{print $2}') addressWarpReg=$(grep <"/etc/v2ray-agent/warp/config" v6 | awk '{print $2}') publicKeyWarpReg=$(grep <"/etc/v2ray-agent/warp/config" public_key | awk '{print $2}') reservedWarpReg=$(grep <"/etc/v2ray-agent/warp/config" reserved | awk -F "[:]" '{print $2}') } # 安装warp-reg工具 installWarpReg() { if [[ ! -f "/etc/v2ray-agent/warp/warp-reg" ]]; then echo echoContent yellow "# 注意事项" echoContent yellow "# 依赖第三方程序，请熟知其中风险" echoContent yellow "# 项目地址：https://github.com/badafans/warp-reg \n" read -r -p "warp-reg未安装，是否安装 ？[y/n]:" installWarpRegStatus if [[ "${installWarpRegStatus}" == "y" ]]; then curl -sLo /etc/v2ray-agent/warp/warp-reg "https://github.com/badafans/warp-reg/releases/download/v1.0/${warpRegCoreCPUVendor}" chmod 655 /etc/v2ray-agent/warp/warp-reg else echoContent yellow " ---> 放弃安装" exit 0 fi fi } # 展示warp分流域名 showWireGuardDomain() { local type=$1 # xray if [[ "${coreInstallType}" == "1" ]]; then if [[ -f "${configPath}09_routing.json" ]]; then echoContent yellow "Xray-core" jq -r -c '.routing.rules[]|select (.outboundTag=="wireguard_out_'"${type}"'")|.domain' ${configPath}09_routing.json | jq -r elif [[ ! -f "${configPath}09_routing.json" && -f "${configPath}wireguard_out_${type}.json" ]]; then echoContent yellow "Xray-core" echoContent green " ---> 已设置warp ${type}全局分流" else echoContent yellow " ---> 未安装warp ${type}分流" fi fi # sing-box if [[ -n "${singBoxConfigPath}" ]]; then if [[ -f "${singBoxConfigPath}wireguard_endpoints_${type}_route.json" ]]; then echoContent yellow "sing-box" jq -r -c '.route.rules[]' "${singBoxConfigPath}wireguard_endpoints_${type}_route.json" | jq -r elif [[ ! -f "${singBoxConfigPath}wireguard_endpoints_${type}_route.json" && -f "${singBoxConfigPath}wireguard_endpoints_${type}.json" ]]; then echoContent yellow "sing-box" echoContent green " ---> 已设置warp ${type}全局分流" else echoContent yellow " ---> 未安装warp ${type}分流" fi fi } # 添加WireGuard分流 addWireGuardRoute() { local type=$1 local tag=$2 local domainList=$3 # xray if [[ "${coreInstallType}" == "1" ]]; then addXrayRouting "wireguard_out_${type}" "${tag}" "${domainList}" addXrayOutbound "wireguard_out_${type}" fi # sing-box if [[ -n "${singBoxConfigPath}" ]]; then # rule addSingBoxRouteRule "wireguard_endpoints_${type}" "${domainList}" "wireguard_endpoints_${type}_route" # addSingBoxOutbound "wireguard_out_${type}" "wireguard_out" if [[ -n "${domainList}" ]]; then addSingBoxOutbound "01_direct_outbound" fi # outbound addSingBoxWireGuardEndpoints "${type}" fi } # 卸载wireGuard unInstallWireGuard() { local type=$1 if [[ "${coreInstallType}" == "1" ]]; then if [[ "${type}" == "IPv4" ]]; then if [[ ! -f "${configPath}wireguard_out_IPv6.json" ]]; then rm -rf /etc/v2ray-agent/warp/config >/dev/null 2>&1 fi elif [[ "${type}" == "IPv6" ]]; then if [[ ! -f "${configPath}wireguard_out_IPv4.json" ]]; then rm -rf /etc/v2ray-agent/warp/config >/dev/null 2>&1 fi fi fi if [[ -n "${singBoxConfigPath}" ]]; then if [[ ! -f "${singBoxConfigPath}wireguard_endpoints_IPv6_route.json" && ! -f "${singBoxConfigPath}wireguard_endpoints_IPv4_route.json" ]]; then rm "${singBoxConfigPath}wireguard_outbound.json" >/dev/null 2>&1 rm -rf /etc/v2ray-agent/warp/config >/dev/null 2>&1 fi fi } # 移除WireGuard分流 removeWireGuardRoute() { local type=$1 if [[ "${coreInstallType}" == "1" ]]; then unInstallRouting wireguard_out_"${type}" outboundTag removeXrayOutbound "wireguard_out_${type}" if [[ ! -f "${configPath}IPv4_out.json" ]]; then addXrayOutbound IPv4_out fi fi # sing-box if [[ -n "${singBoxConfigPath}" ]]; then removeSingBoxRouteRule "wireguard_endpoints_${type}" fi unInstallWireGuard "${type}" } # warp分流-第三方IPv4 warpRoutingReg() { local type=$2 echoContent skyBlue "\n进度 $1/${totalProgress} : WARP分流[第三方]" echoContent red "==============================================================" echoContent yellow "1.查看已分流域名" echoContent yellow "2.添加域名" echoContent yellow "3.设置WARP全局" echoContent yellow "4.卸载WARP分流" echoContent red "==============================================================" read -r -p "请选择:" warpStatus installWarpReg readConfigWarpReg local address= if [[ ${type} == "IPv4" ]]; then address="172.16.0.2/32" elif [[ ${type} == "IPv6" ]]; then address="${addressWarpReg}/128" else echoContent red " ---> IP获取失败，退出安装" fi if [[ "${warpStatus}" == "1" ]]; then showWireGuardDomain "${type}" exit 0 elif [[ "${warpStatus}" == "2" ]]; then echoContent yellow "# 注意事项" echoContent yellow "# 支持sing-box、Xray-core" echoContent yellow "# 使用说明：请参考仓库 README \n" read -r -p "请按照上面示例录入域名:" domainList addWireGuardRoute "${type}" outboundTag "${domainList}" echoContent green " ---> 添加完毕" elif [[ "${warpStatus}" == "3" ]]; then echoContent red "==============================================================" echoContent yellow "# 注意事项\n" echoContent yellow "1.会删除所有设置的分流规则" echoMenuHintSuffix "2.会删除除WARP" "第三方" "之外的所有出站规则\n" read -r -p "是否确认设置？[y/n]:" warpOutStatus if [[ "${warpOutStatus}" == "y" ]]; then readConfigWarpReg if [[ "${coreInstallType}" == "1" ]]; then addXrayOutbound "wireguard_out_${type}" if [[ "${type}" == "IPv4" ]]; then removeXrayOutbound "wireguard_out_IPv6" elif [[ "${type}" == "IPv6" ]]; then removeXrayOutbound "wireguard_out_IPv4" fi removeXrayOutbound IPv4_out removeXrayOutbound IPv6_out removeXrayOutbound z_direct_outbound removeXrayOutbound blackhole_out removeXrayOutbound socks5_outbound rm ${configPath}09_routing.json >/dev/null 2>&1 fi if [[ -n "${singBoxConfigPath}" ]]; then removeSingBoxConfig IPv4_out removeSingBoxConfig IPv6_out removeSingBoxConfig 01_direct_outbound # 删除所有分流规则 removeSingBoxConfig wireguard_endpoints_IPv4_route removeSingBoxConfig wireguard_endpoints_IPv6_route removeSingBoxConfig IPv6_route removeSingBoxConfig socks5_02_inbound_route addSingBoxWireGuardEndpoints "${type}" addWireGuardRoute "${type}" outboundTag "" if [[ "${type}" == "IPv4" ]]; then removeSingBoxConfig wireguard_endpoints_IPv6 else removeSingBoxConfig wireguard_endpoints_IPv4 fi # outbound # addSingBoxOutbound "wireguard_out_${type}" "wireguard_out" fi echoContent green " ---> WARP全局出站设置完毕" else echoContent green " ---> 放弃设置" exit 0 fi elif [[ "${warpStatus}" == "4" ]]; then if [[ "${coreInstallType}" == "1" ]]; then unInstallRouting "wireguard_out_${type}" outboundTag removeXrayOutbound "wireguard_out_${type}" addXrayOutbound "z_direct_outbound" fi if [[ -n "${singBoxConfigPath}" ]]; then removeSingBoxConfig "wireguard_endpoints_${type}_route" removeSingBoxConfig "wireguard_endpoints_${type}" addSingBoxOutbound "01_direct_outbound" fi echoContent green " ---> 卸载WARP ${type}分流完毕" else echoContent red " ---> 选择错误" exit 0 fi reloadCore } # 分流工具 routingToolsMenu() { echoContent skyBlue "\n功能 1/${totalProgress} : 分流工具" echoContent red "\n==============================================================" echoContent yellow "# 注意事项" echoContent yellow "# 用于服务端的流量分流，可用于解锁ChatGPT、流媒体等相关内容\n" echoContent yellow "1.WARP分流【第三方 IPv4】" echoContent yellow "2.WARP分流【第三方 IPv6】" echoContent yellow "3.IPv6分流" echoContent yellow "4.Socks5分流【替换任意门分流】" echoMenuHint "5.DNS分流" "流媒体/解锁常用" # echoContent yellow "6.VMess+WS+TLS分流" echoContent yellow "7.SNI反向代理分流" read -r -p "请选择:" selectType case ${selectType} in 1) warpRoutingReg 1 IPv4 ;; 2) warpRoutingReg 1 IPv6 ;; 3) ipv6Routing 1 ;; 4) socks5Routing ;; 5) dnsRouting 1 ;; # 6) # if [[ -n "${singBoxConfigPath}" ]]; then # echoContent red "\n ---> 此功能不支持Hysteria2、Tuic" # fi # vmessWSRouting 1 # ;; 7) if [[ -n "${singBoxConfigPath}" ]]; then echoContent red "\n ---> 此功能不支持Hysteria2、Tuic" fi sniRouting 1 ;; esac } # VMess+WS+TLS 分流 vmessWSRouting() { echoContent skyBlue "\n功能 1/${totalProgress} : VMess+WS+TLS 分流" echoContent red "\n==============================================================" echoContent yellow "# 注意事项" echoContent yellow "# 使用说明：请参考仓库 README \n" echoContent yellow "1.添加出站" echoContent yellow "2.卸载" read -r -p "请选择:" selectType case ${selectType} in 1) setVMessWSRoutingOutbounds ;; 2) removeVMessWSRouting ;; esac } # Socks5分流 socks5Routing() { if [[ -z "${coreInstallType}" ]]; then echoContent red " ---> 未安装任意协议，请使用 1.安装 或者 2.任意组合安装 进行安装后使用" exit 0 fi echoContent skyBlue "\n功能 1/${totalProgress} : Socks5分流" echoContent red "\n==============================================================" echoContent red "# 注意事项" echoContent yellow "# 流量明文访问" echoContent yellow "# 仅限正常网络环境下设备间流量转发，禁止用于代理访问。" echoContent yellow "# 使用说明：请参考仓库 README \n" echoContent yellow "1.Socks5出站" echoContent yellow "2.Socks5入站" echoContent yellow "3.卸载" read -r -p "请选择:" selectType case ${selectType} in 1) socks5OutboundRoutingMenu ;; 2) socks5InboundRoutingMenu ;; 3) removeSocks5Routing ;; esac } # Socks5入站菜单 socks5InboundRoutingMenu() { readInstallType echoContent skyBlue "\n功能 1/1 : Socks5入站" echoContent red "\n==============================================================" echoContent yellow "1.安装Socks5入站" echoContent yellow "2.查看分流规则" echoContent yellow "3.添加分流规则" echoContent yellow "4.查看入站配置" read -r -p "请选择:" selectType case ${selectType} in 1) totalProgress=1 installSingBox 1 installSingBoxService 1 setSocks5Inbound setSocks5InboundRouting reloadCore socks5InboundRoutingMenu ;; 2) showSingBoxRoutingRules socks5_02_inbound_route socks5InboundRoutingMenu ;; 3) setSocks5InboundRouting addRules reloadCore socks5InboundRoutingMenu ;; 4) if [[ -f "${singBoxConfigPath}20_socks5_inbounds.json" ]]; then echoContent yellow "\n ---> 下列内容需要配置到其他机器的出站，请不要进行代理行为\n" echoContent green " 端口：$(jq .inbounds[0].listen_port ${singBoxConfigPath}20_socks5_inbounds.json)" echoContent green " 用户名称：$(jq -r .inbounds[0].users[0].username ${singBoxConfigPath}20_socks5_inbounds.json)" echoContent green " 用户密码：$(jq -r .inbounds[0].users[0].password ${singBoxConfigPath}20_socks5_inbounds.json)" else echoContent red " ---> 未安装相应功能" socks5InboundRoutingMenu fi ;; esac } # Socks5出站菜单 socks5OutboundRoutingMenu() { echoContent skyBlue "\n功能 1/1 : Socks5出站" echoContent red "\n==============================================================" echoContent yellow "1.安装Socks5出站" echoContent yellow "2.设置Socks5全局转发" echoContent yellow "3.查看分流规则" echoContent yellow "4.添加分流规则" read -r -p "请选择:" selectType case ${selectType} in 1) setSocks5Outbound setSocks5OutboundRouting reloadCore socks5OutboundRoutingMenu ;; 2) setSocks5Outbound setSocks5OutboundRoutingAll reloadCore socks5OutboundRoutingMenu ;; 3) showSingBoxRoutingRules socks5_01_outbound_route showXrayRoutingRules socks5_outbound socks5OutboundRoutingMenu ;; 4) setSocks5OutboundRouting addRules reloadCore socks5OutboundRoutingMenu ;; esac } # socks5全局 setSocks5OutboundRoutingAll() { echoContent red "==============================================================" echoContent yellow "# 注意事项\n" echoContent yellow "1.会删除所有已经设置的分流规则，包括其他分流（warp、IPv6等）" echoContent yellow "2.会删除Socks5之外的所有出站规则\n" read -r -p "是否确认设置？[y/n]:" socksOutStatus if [[ "${socksOutStatus}" == "y" ]]; then if [[ "${coreInstallType}" == "1" ]]; then removeXrayOutbound IPv4_out removeXrayOutbound IPv6_out removeXrayOutbound z_direct_outbound removeXrayOutbound blackhole_out removeXrayOutbound wireguard_out_IPv4 removeXrayOutbound wireguard_out_IPv6 rm ${configPath}09_routing.json >/dev/null 2>&1 fi if [[ -n "${singBoxConfigPath}" ]]; then removeSingBoxConfig IPv4_out removeSingBoxConfig IPv6_out removeSingBoxConfig wireguard_endpoints_IPv4_route removeSingBoxConfig wireguard_endpoints_IPv6_route removeSingBoxConfig wireguard_endpoints_IPv4 removeSingBoxConfig wireguard_endpoints_IPv6 removeSingBoxConfig socks5_01_outbound_route removeSingBoxConfig 01_direct_outbound fi echoContent green " ---> Socks5全局出站设置完毕" fi } # socks5 分流规则 showSingBoxRoutingRules() { if [[ -n "${singBoxConfigPath}" ]]; then if [[ -f "${singBoxConfigPath}$1.json" ]]; then jq .route.rules "${singBoxConfigPath}$1.json" elif [[ "$1" == "socks5_01_outbound_route" && -f "${singBoxConfigPath}socks5_outbound.json" ]]; then echoContent yellow "已安装 sing-box socks5全局出站分流" echoContent yellow "\n出站分流配置：" echoContent skyBlue "$(jq .outbounds[0] ${singBoxConfigPath}socks5_outbound.json)" elif [[ "$1" == "socks5_02_inbound_route" && -f "${singBoxConfigPath}20_socks5_inbounds.json" ]]; then echoContent yellow "已安装 sing-box socks5全局入站分流" echoContent yellow "\n出站分流配置：" echoContent skyBlue "$(jq .outbounds[0] ${singBoxConfigPath}socks5_outbound.json)" fi fi } # xray内核分流规则 showXrayRoutingRules() { if [[ "${coreInstallType}" == "1" ]]; then if [[ -f "${configPath}09_routing.json" ]]; then jq ".routing.rules[]|select(.outboundTag==\"$1\")" "${configPath}09_routing.json" echoContent yellow "\n已安装 xray-core socks5全局出站分流" echoContent yellow "\n出站分流配置：" echoContent skyBlue "$(jq .outbounds[0].settings.servers[0] ${configPath}socks5_outbound.json)" elif [[ "$1" == "socks5_outbound" && -f "${configPath}socks5_outbound.json" ]]; then echoContent yellow "\n已安装 xray-core socks5全局出站分流" echoContent yellow "\n出站分流配置：" echoContent skyBlue "$(jq .outbounds[0].settings.servers[0] ${configPath}socks5_outbound.json)" fi fi } # 卸载Socks5分流 removeSocks5Routing() { echoContent skyBlue "\n功能 1/1 : 卸载Socks5分流" echoContent red "\n==============================================================" echoContent yellow "1.卸载Socks5出站" echoContent yellow "2.卸载Socks5入站" echoContent yellow "3.卸载全部" read -r -p "请选择:" unInstallSocks5RoutingStatus if [[ "${unInstallSocks5RoutingStatus}" == "1" ]]; then if [[ "${coreInstallType}" == "1" ]]; then removeXrayOutbound socks5_outbound unInstallRouting socks5_outbound outboundTag addXrayOutbound z_direct_outbound fi if [[ -n "${singBoxConfigPath}" ]]; then removeSingBoxConfig socks5_outbound removeSingBoxConfig socks5_01_outbound_route addSingBoxOutbound 01_direct_outbound fi elif [[ "${unInstallSocks5RoutingStatus}" == "2" ]]; then removeSingBoxConfig 20_socks5_inbounds removeSingBoxConfig socks5_02_inbound_route removeSingBoxConfig sniff_socks5_inbound removeSingBoxConfig "strategy_ipv4_only_socks5_inbound" removeSingBoxConfig "strategy_ipv6_only_socks5_inbound" handleSingBox stop elif [[ "${unInstallSocks5RoutingStatus}" == "3" ]]; then if [[ "${coreInstallType}" == "1" ]]; then removeXrayOutbound socks5_outbound unInstallRouting socks5_outbound outboundTag addXrayOutbound z_direct_outbound fi if [[ -n "${singBoxConfigPath}" ]]; then removeSingBoxConfig socks5_outbound removeSingBoxConfig socks5_01_outbound_route removeSingBoxConfig 20_socks5_inbounds removeSingBoxConfig socks5_02_inbound_route removeSingBoxConfig sniff_socks5_inbound removeSingBoxConfig "strategy_ipv4_only_socks5_inbound" removeSingBoxConfig "strategy_ipv6_only_socks5_inbound" addSingBoxOutbound 01_direct_outbound fi handleSingBox stop else echoContent red " ---> 选择错误" exit 0 fi echoContent green " ---> 卸载完毕" reloadCore } # Socks5入站 setSocks5Inbound() { echoContent yellow "\n==================== 配置 Socks5 入站(解锁机、落地机) =====================\n" echoContent skyBlue "\n开始配置Socks5协议入站端口" echo mapfile -t result < <(initSingBoxPort "${singBoxSocks5Port}") echoContent green "\n ---> 入站Socks5端口：${result[-1]}" echoContent green "\n ---> 此端口需要配置到其他机器出站，请不要进行代理行为" echoContent yellow "\n请输入自定义UUID[需合法]，[回车]随机UUID" read -r -p 'UUID:' socks5RoutingUUID if [[ -z "${socks5RoutingUUID}" ]]; then if [[ "${coreInstallType}" == "1" ]]; then socks5RoutingUUID=$(/etc/v2ray-agent/xray/xray uuid) elif [[ -n "${singBoxConfigPath}" ]]; then socks5RoutingUUID=$(/etc/v2ray-agent/sing-box/sing-box generate uuid) fi fi echo echoContent green "用户名称：${socks5RoutingUUID}" echoContent green "用户密码：${socks5RoutingUUID}" echoContent yellow "\n请选择分流域名DNS解析类型" echoContent yellow "# 注意事项：需要保证vps支持相应的DNS解析" echoMenuHint "1.IPv4" "回车默认" echoContent yellow "2.IPv6" read -r -p 'IP类型:' socks5InboundDomainStrategyStatus local domainStrategy= if [[ -z "${socks5InboundDomainStrategyStatus}" || "${socks5InboundDomainStrategyStatus}" == "1" ]]; then domainStrategy="ipv4_only" elif [[ "${socks5InboundDomainStrategyStatus}" == "2" ]]; then domainStrategy="ipv6_only" else echoContent red " ---> 选择类型错误" exit 0 fi cat </etc/v2ray-agent/sing-box/conf/config/20_socks5_inbounds.json { "inbounds":[ { "type": "socks", "listen":"::", "listen_port":${result[-1]}, "tag":"socks5_inbound", "users":[ { "username": "${socks5RoutingUUID}", "password": "${socks5RoutingUUID}" } ] } ] } EOF setStrategyRouting socks5_inbound "${domainStrategy}" } # 初始化sing-box rule配置 initSingBoxRules() { local domainRules=[] local ruleSet=[] while read -r line; do local normalizedLine= normalizedLine=$(echo "${line}" | tr '[:upper:]' '[:lower:]' | sed 's/^[[:space:]]*//;s/[[:space:]]*$//') if isDomainFormat "${normalizedLine}"; then local escapedDomain= escapedDomain=${normalizedLine//./\\.} domainRules=$(echo "${domainRules}" | jq -r --arg reg ".*${escapedDomain}.*" '. += [$reg]') else local matchedRuleName matchedRuleName=$(getDLCGeositeName "${normalizedLine}" "/etc/v2ray-agent/sing-box") if [[ -n "${matchedRuleName}" ]]; then ruleSet=$(echo "${ruleSet}" | jq -r ". += [{\"tag\":\"${matchedRuleName}_$2\",\"type\":\"remote\",\"format\":\"binary\",\"url\":\"https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-${matchedRuleName}.srs\",\"download_detour\":\"01_direct_outbound\"}]") else domainRules=$(echo "${domainRules}" | jq -r --arg reg "^([a-zA-Z0-9_-]+\\.)*${normalizedLine//./\\.}" '. += [$reg]') fi fi done < <(echo "$1" | tr ',' '\n' | grep -v '^$' | sort -n | uniq | paste -sd ',' | tr ',' '\n') echo "{ \"domainRules\":${domainRules},\"ruleSet\":${ruleSet}}" } # socks5 inbound routing规则 setSocks5InboundRouting() { singBoxConfigPath=/etc/v2ray-agent/sing-box/conf/config/ if [[ "$1" == "addRules" && ! -f "${singBoxConfigPath}socks5_02_inbound_route.json" && ! -f "${configPath}09_routing.json" ]]; then echoContent red " ---> 请安装入站分流后再添加分流规则" echoContent red " ---> 如已选择允许所有网站，请重新安装分流后设置规则" exit 0 fi local socks5InboundRoutingIPs= if [[ "$1" == "addRules" ]]; then socks5InboundRoutingIPs=$(jq .route.rules[0].source_ip_cidr "${singBoxConfigPath}socks5_02_inbound_route.json") else echoContent red "==============================================================" echoContent skyBlue "请输入允许访问的IP地址，多个IP英文逗号隔开。例如:1.1.1.1,2.2.2.2\n" read -r -p "IP:" socks5InboundRoutingIPs if [[ -z "${socks5InboundRoutingIPs}" ]]; then echoContent red " ---> IP不可为空" exit 0 fi socks5InboundRoutingIPs=$(echo "\"${socks5InboundRoutingIPs}"\" | jq -c '.|split(",")') fi echoContent red "==============================================================" echoContent skyBlue "请输入要分流的域名\n" echoContent yellow "支持Xray-core geosite匹配，支持sing-box1.8+ rule_set匹配\n" echoContent yellow "非增量添加，会替换原有规则\n" echoContent yellow "当输入的规则匹配到geosite或者rule_set后会使用相应的规则\n" echoContent yellow "如无法匹配则，则使用domain精确匹配\n" read -r -p "是否允许所有网站？请选择[y/n]:" socks5InboundRoutingDomainStatus if [[ "${socks5InboundRoutingDomainStatus}" == "y" ]]; then addSingBoxRouteRule "01_direct_outbound" "" "socks5_02_inbound_route" local route= route=$(jq ".route.rules[0].inbound = [\"socks5_inbound\"]" "${singBoxConfigPath}socks5_02_inbound_route.json") route=$(echo "${route}" | jq ".route.rules[0].source_ip_cidr=${socks5InboundRoutingIPs}") echo "${route}" | jq . >"${singBoxConfigPath}socks5_02_inbound_route.json" addSingBoxOutbound block addSingBoxOutbound "01_direct_outbound" else echoContent yellow "录入示例:netflix,openai,example.com\n" read -r -p "域名:" socks5InboundRoutingDomain if [[ -z "${socks5InboundRoutingDomain}" ]]; then echoContent red " ---> 域名不可为空" exit 0 fi addSingBoxRouteRule "01_direct_outbound" "${socks5InboundRoutingDomain}" "socks5_02_inbound_route" local route= route=$(jq ".route.rules[0].inbound = [\"socks5_inbound\"]" "${singBoxConfigPath}socks5_02_inbound_route.json") route=$(echo "${route}" | jq ".route.rules[0].source_ip_cidr=${socks5InboundRoutingIPs}") echo "${route}" | jq . >"${singBoxConfigPath}socks5_02_inbound_route.json" addSingBoxOutbound block addSingBoxOutbound "01_direct_outbound" fi } # 设置sniff routing规则 setSniffRouting() { cat <"/etc/v2ray-agent/sing-box/conf/config/sniff.json" { "route":{ "rules":[ { "action": "sniff", "timeout": "1s" } ] } } EOF } # 设置sniff routing规则 setStrategyRouting() { local tag=$1 local strategy=$2 cat <"/etc/v2ray-agent/sing-box/conf/config/strategy_${strategy}_${tag}.json" { "route":{ "rules":[ { "inbound": "${tag}", "action": "resolve", "strategy": "${strategy}" } ] } } EOF } # socks5 出站 setSocks5Outbound() { echoContent yellow "\n==================== 配置 Socks5 出站（转发机、代理机） =====================\n" echo read -r -p "请输入落地机IP地址:" socks5RoutingOutboundIP if [[ -z "${socks5RoutingOutboundIP}" ]]; then echoContent red " ---> IP不可为空" exit 0 fi echo read -r -p "请输入落地机端口:" socks5RoutingOutboundPort if [[ -z "${socks5RoutingOutboundPort}" ]]; then echoContent red " ---> 端口不可为空" exit 0 fi echo read -r -p "请输入用户名:" socks5RoutingOutboundUserName if [[ -z "${socks5RoutingOutboundUserName}" ]]; then echoContent red " ---> 用户名不可为空" exit 0 fi echo read -r -p "请输入用户密码:" socks5RoutingOutboundPassword if [[ -z "${socks5RoutingOutboundPassword}" ]]; then echoContent red " ---> 用户密码不可为空" exit 0 fi echo if [[ -n "${singBoxConfigPath}" ]]; then cat <"${singBoxConfigPath}socks5_outbound.json" { "outbounds":[ { "type": "socks", "tag":"socks5_outbound", "server": "${socks5RoutingOutboundIP}", "server_port": ${socks5RoutingOutboundPort}, "version": "5", "username":"${socks5RoutingOutboundUserName}", "password":"${socks5RoutingOutboundPassword}" } ] } EOF fi if [[ "${coreInstallType}" == "1" ]]; then addXrayOutbound socks5_outbound fi } # socks5 outbound routing规则 setSocks5OutboundRouting() { if [[ "$1" == "addRules" && ! -f "${singBoxConfigPath}socks5_01_outbound_route.json" && ! -f "${configPath}09_routing.json" ]]; then echoContent red " ---> 请安装出站分流后再添加分流规则" exit 0 fi echoContent red "==============================================================" echoContent skyBlue "请输入要分流的域名\n" echoContent yellow "支持Xray-core geosite匹配，支持sing-box1.8+ rule_set匹配\n" echoContent yellow "非增量添加，会替换原有规则\n" echoContent yellow "当输入的规则匹配到geosite或者rule_set后会使用相应的规则\n" echoContent yellow "如无法匹配则，则使用domain精确匹配\n" echoContent yellow "录入示例:netflix,openai,example.com\n" read -r -p "域名:" socks5RoutingOutboundDomain if [[ -z "${socks5RoutingOutboundDomain}" ]]; then echoContent red " ---> IP不可为空" exit 0 fi addSingBoxRouteRule "socks5_outbound" "${socks5RoutingOutboundDomain}" "socks5_01_outbound_route" addSingBoxOutbound "01_direct_outbound" if [[ "${coreInstallType}" == "1" ]]; then unInstallRouting "socks5_outbound" "outboundTag" local domainRules=[] while read -r line; do if echo "${routingRule}" | grep -q "${line}"; then echoContent yellow " ---> ${line}已存在，跳过" else local matchedRuleValue matchedRuleValue=$(getDLCMatchedRuleValue "${line}" "/etc/v2ray-agent/xray") domainRules=$(echo "${domainRules}" | jq -r --arg rule "${matchedRuleValue}" '. += [$rule]') fi done < <(echo "${socks5RoutingOutboundDomain}" | tr ',' '\n') if [[ ! -f "${configPath}09_routing.json" ]]; then cat <${configPath}09_routing.json { "routing":{ "rules": [] } } EOF fi routing=$(jq -r ".routing.rules += [{\"type\": \"field\",\"domain\": ${domainRules},\"outboundTag\": \"socks5_outbound\"}]" ${configPath}09_routing.json) echo "${routing}" | jq . >${configPath}09_routing.json fi } # 设置VMess+WS+TLS【仅出站】 setVMessWSRoutingOutbounds() { read -r -p "请输入VMess+WS+TLS的地址:" setVMessWSTLSAddress echoContent red "==============================================================" echoContent yellow "录入示例:netflix,openai\n" read -r -p "请按照上面示例录入域名:" domainList if [[ -z ${domainList} ]]; then echoContent red " ---> 域名不可为空" setVMessWSRoutingOutbounds fi if [[ -n "${setVMessWSTLSAddress}" ]]; then removeXrayOutbound VMess-out echo read -r -p "请输入VMess+WS+TLS的端口:" setVMessWSTLSPort echo if [[ -z "${setVMessWSTLSPort}" ]]; then echoContent red " ---> 端口不可为空" fi read -r -p "请输入VMess+WS+TLS的UUID:" setVMessWSTLSUUID echo if [[ -z "${setVMessWSTLSUUID}" ]]; then echoContent red " ---> UUID不可为空" fi read -r -p "请输入VMess+WS+TLS的Path路径:" setVMessWSTLSPath echo if [[ -z "${setVMessWSTLSPath}" ]]; then echoContent red " ---> 路径不可为空" elif ! echo "${setVMessWSTLSPath}" | grep -q "/"; then setVMessWSTLSPath="/${setVMessWSTLSPath}" fi addXrayOutbound "VMess-out" addXrayRouting VMess-out outboundTag "${domainList}" reloadCore echoContent green " ---> 添加分流成功" exit 0 fi echoContent red " ---> 地址不可为空" setVMessWSRoutingOutbounds } # 移除VMess+WS+TLS分流 removeVMessWSRouting() { removeXrayOutbound VMess-out unInstallRouting VMess-out outboundTag reloadCore echoContent green " ---> 卸载成功" } # 重启核心 reloadCore() { readInstallType if [[ "${coreInstallType}" == "1" ]]; then handleXray restart fi if echo "${currentInstallProtocolType}" | grep -q ",20," || [[ "${coreInstallType}" == "2" || -n "${singBoxConfigPath}" ]]; then handleSingBox restart fi } # dns分流 dnsRouting() { if [[ -z "${configPath}" ]]; then echoContent red " ---> 未安装，请使用脚本安装" menu exit 0 fi echoContent skyBlue "\n功能 1/${totalProgress} : DNS分流" echoContent red "\n==============================================================" echoContent yellow "# 注意事项" echoContent yellow "# 使用说明：请参考仓库 README \n" echoContent yellow "# sing-box 节点级 DNS 分流支持 Reality/AnyTLS 主节点和多实例节点，节点可单独指定上游 DNS\n" if [[ "${coreInstallType}" == "1" ]]; then echoContent yellow "# 当前核心为 Xray-core，节点级 DNS 分流暂不可用，仅支持全局 DNS 分流\n" fi echoContent yellow "1.全局添加" echoContent yellow "2.全局卸载" echoContent yellow "3.节点添加" echoContent yellow "4.节点卸载" read -r -p "请选择:" selectType case ${selectType} in 1) setUnlockDNS ;; 2) removeUnlockDNS ;; 3) setManagedMultiRealityDNSRouting ;; 4) removeManagedMultiRealityDNSRouting ;; esac } # SNI反向代理分流 sniRouting() { if [[ -z "${configPath}" ]]; then echoContent red " ---> 未安装，请使用脚本安装" menu exit 0 fi echoContent skyBlue "\n功能 1/${totalProgress} : SNI反向代理分流" echoContent red "\n==============================================================" echoContent yellow "# 注意事项" echoContent yellow "# 使用说明：请参考仓库 README \n" echoContent yellow "# sing-box不支持规则集，仅支持指定域名。\n" echoContent yellow "1.添加" echoContent yellow "2.卸载" read -r -p "请选择:" selectType case ${selectType} in 1) setUnlockSNI ;; 2) removeUnlockSNI ;; esac } # 设置SNI分流 setUnlockSNI() { read -r -p "请输入分流的SNI IP:" setSNIP if [[ -n ${setSNIP} ]]; then echoContent red "==============================================================" if [[ "${coreInstallType}" == 1 ]]; then echoContent yellow "录入示例:netflix,disney,hulu" read -r -p "请按照上面示例录入域名:" xrayDomainList local hosts={} while read -r domain; do local matchedRuleValue matchedRuleValue=$(getDLCMatchedRuleValue "${domain}" "/etc/v2ray-agent/xray") hosts=$(echo "${hosts}" | jq -r --arg key "${matchedRuleValue}" --arg value "${setSNIP}" '. + {($key):$value}') done < <(echo "${xrayDomainList}" | tr ',' '\n') cat <${configPath}11_dns.json { "dns": { "hosts":${hosts}, "servers": [ "8.8.8.8", "1.1.1.1" ] } } EOF fi if [[ -n "${singBoxConfigPath}" ]]; then echoContent yellow "录入示例:www.netflix.com,www.google.com" read -r -p "请按照上面示例录入域名:" singboxDomainList addSingBoxDNSConfig "${setSNIP}" "${singboxDomainList}" "predefined" fi echoContent yellow " ---> SNI反向代理分流成功" reloadCore else echoContent red " ---> SNI IP不可为空" fi exit 0 } # 添加xray dns 配置 addXrayDNSConfig() { local ip=$1 local domainList=$2 local domains=[] while read -r line; do local matchedRuleValue matchedRuleValue=$(getDLCMatchedRuleValue "${line}" "/etc/v2ray-agent/xray") domains=$(echo "${domains}" | jq -r --arg rule "${matchedRuleValue}" '. += [$rule]') done < <(echo "${domainList}" | tr ',' '\n') if [[ "${coreInstallType}" == "1" ]]; then cat <${configPath}11_dns.json { "dns": { "servers": [ { "address": "${ip}", "port": 53, "domains": ${domains} }, "localhost" ] } } EOF fi } # 添加sing-box dns配置 addSingBoxDNSConfig() { local ip=$1 local domainList=$2 local actionType=$3 local rules= rules=$(initSingBoxRules "${domainList}" "dns") # domain精确匹配规则 local domainRules= domainRules=$(echo "${rules}" | jq .domainRules) # ruleSet规则集 local ruleSet= ruleSet=$(echo "${rules}" | jq .ruleSet) # ruleSet规则tag local ruleSetTag=[] if [[ "$(echo "${ruleSet}" | jq '.|length')" != "0" ]]; then ruleSetTag=$(echo "${ruleSet}" | jq '.|map(.tag)') fi if [[ -n "${singBoxConfigPath}" ]]; then if [[ "${actionType}" == "predefined" ]]; then local predefined={} while read -r line; do predefined=$(echo "${predefined}" | jq ".\"${line}\"=\"${ip}\"") done < <(echo "${domainList}" | tr ',' '\n' | grep -v '^$' | sort -n | uniq | paste -sd ',' | tr ',' '\n') cat <"${singBoxConfigPath}dns.json" { "dns": { "servers": [ { "tag": "local", "type": "local" }, { "tag": "hosts", "type": "hosts", "predefined": ${predefined} } ], "rules": [ { "domain_regex":${domainRules}, "server":"hosts" } ] }, "route": { "default_domain_resolver": "local" } } EOF else cat <"${singBoxConfigPath}dns.json" { "dns": { "servers": [ { "tag": "local", "type": "local" }, { "tag": "dnsRouting", "type": "udp", "server": "${ip}" } ], "rules": [ { "rule_set": ${ruleSetTag}, "domain_regex": ${domainRules}, "server":"dnsRouting" } ] }, "route":{ "default_domain_resolver":"local", "rule_set":${ruleSet} } } EOF fi fi } # 设置dns setUnlockDNS() { read -r -p "请输入分流的DNS:" setDNS if [[ -n ${setDNS} ]]; then echoContent red "==============================================================" echoContent yellow "录入示例:netflix,disney,hulu" read -r -p "请按照上面示例录入域名:" domainList if [[ "${coreInstallType}" == "1" ]]; then addXrayDNSConfig "${setDNS}" "${domainList}" fi if [[ -n "${singBoxConfigPath}" ]]; then addSingBoxOutbound 01_direct_outbound addSingBoxDNSConfig "${setDNS}" "${domainList}" fi reloadCore echoContent yellow "\n ---> 如还无法观看可以尝试以下两种方案" echoContent yellow " 1.重启vps" echoContent yellow " 2.卸载dns解锁后，修改本地的[/etc/resolv.conf]DNS设置并重启vps\n" else echoContent red " ---> dns不可为空" fi exit 0 } # 移除 DNS分流 removeUnlockDNS() { if [[ "${coreInstallType}" == "1" && -f "${configPath}11_dns.json" ]]; then cat <${configPath}11_dns.json { "dns": { "servers": [ "localhost" ] } } EOF fi if [[ "${coreInstallType}" == "2" && -f "${singBoxConfigPath}dns.json" ]]; then cat <${singBoxConfigPath}dns.json { "dns": { "servers":[ { "type":"local", "tag":"local" } ] }, "route": { "default_domain_resolver":"local" } } EOF fi reloadCore echoContent green " ---> 卸载成功" exit 0 } # 移除SNI分流 removeUnlockSNI() { if [[ "${coreInstallType}" == 1 ]]; then cat <${configPath}11_dns.json { "dns": { "servers": [ "localhost" ] } } EOF fi if [[ "${coreInstallType}" == "2" && -f "${singBoxConfigPath}dns.json" ]]; then cat <${singBoxConfigPath}dns.json { "dns": { "servers":[ { "type":"local", "tag":"local" } ] }, "route": { "default_domain_resolver":"local" } } EOF fi reloadCore echoContent green " ---> 卸载成功" exit 0 } # sing-box 个性化安装 customSingBoxInstall() { echoContent skyBlue "\n========================个性化安装============================" echoContent green "新手提示：无域名优先选 7，有域名直连优先选 0，需要 CDN 再选 1" echoMenuHint "0.VLESS+Vision+TCP" "有域名直连推荐" echoMenuHint "1.VLESS+TLS+WS" "仅CDN推荐" echoMenuHint "3.VMess+TLS+WS" "仅CDN推荐" echoMenuHint "4.Trojan+TLS" "不推荐" echoContent yellow "6.Hysteria2" echoMenuHint "7.VLESS+Reality+Vision" "无域名推荐" echoMenuHint "8.VLESS+Reality+gRPC" "进阶" echoContent yellow "9.Tuic" echoContent yellow "10.Naive" echoContent yellow "11.VMess+TLS+HTTPUpgrade" echoMenuHint "13.AnyTLS" "sing-box/需自备域名" read -r -p "请选择[多选]，[例如:1,2,3]:" selectCustomInstallType echoContent skyBlue "--------------------------------------------------------------" if echo "${selectCustomInstallType}" | grep -q "，"; then echoContent red " ---> 请使用英文逗号分隔" exit 0 fi if [[ "${selectCustomInstallType}" != "10" ]] && [[ "${selectCustomInstallType}" != "11" ]] && [[ "${selectCustomInstallType}" != "13" ]] && ((${#selectCustomInstallType} >= 2)) && ! echo "${selectCustomInstallType}" | grep -q ","; then echoContent red " ---> 多选请使用英文逗号分隔" exit 0 fi if [[ "${selectCustomInstallType: -1}" != "," ]]; then selectCustomInstallType="${selectCustomInstallType}," fi if [[ "${selectCustomInstallType:0:1}" != "," ]]; then selectCustomInstallType=",${selectCustomInstallType}," fi if [[ "${selectCustomInstallType//,/}" =~ ^[0-9]+$ ]]; then if echo "${selectCustomInstallType}" | grep -qE '^(,7,|,8,|,7,8,)$'; then clearRealityHistoryCache else readLastInstallationConfig fi unInstallSubscribe totalProgress=9 installTools 1 # 申请tls if echo "${selectCustomInstallType}" | grep -q -E ",0,|,1,|,3,|,4,|,6,|,9,|,10,|,11,|,13,"; then initTLSNginxConfig 2 installTLS 3 handleNginx stop fi installSingBox 4 installSingBoxService 5 initSingBoxConfig custom 6 cleanUp xrayDel installCronTLS 7 handleSingBox restart handleNginx stop handleNginx start # 生成账号 checkGFWStatue 8 showAccounts 9 else echoContent red " ---> 输入不合法" customSingBoxInstall fi } # 一键无域名Xray-core Reality installXrayReality() { selectCustomInstallType=",7," clearRealityHistoryCache unInstallSubscribe totalProgress=6 installTools 1 handleNginx stop # 安装Xray installXray 2 false installXrayService 3 initXrayConfig custom 4 cleanUp singBoxDel handleXray restart # 生成账号 checkGFWStatue 5 showAccounts 6 } # 一键无域名sing-box Reality installSingBoxReality() { selectCustomInstallType=",7," clearRealityHistoryCache unInstallSubscribe totalProgress=6 installTools 1 installSingBox 2 installSingBoxService 3 initSingBoxConfig custom 4 cleanUp xrayDel handleSingBox restart # 生成账号 checkGFWStatue 5 showAccounts 6 } # 一键 AnyTLS，使用 sing-box 托管，可与 sing-box Reality 配置并存 installSingBoxAnyTLS() { selectCustomInstallType=",13," selectCoreType="2" unInstallSubscribe totalProgress=9 installTools 1 initTLSNginxConfig 2 installTLS 3 handleNginx stop installSingBox 4 installSingBoxService 5 initSingBoxConfig custom 6 keep if [[ "${coreInstallType}" != "2" ]]; then cleanUp xrayDel fi installCronTLS 7 handleSingBox restart handleNginx stop handleNginx start checkGFWStatue 8 showAccounts 9 } # Xray-core个性化安装 customXrayInstall() { echoContent skyBlue "\n========================个性化安装============================" echoContent green "新手最推荐：无域名选 7；有域名不走 CDN 选 0；必须套 CDN 再看 1 或 12" echoMenuHint "0.VLESS+TLS_Vision+TCP" "有域名直连推荐" echoMenuHint "1.VLESS+TLS+WS" "仅CDN推荐" # echoContent yellow "2.Trojan+TLS+gRPC[仅CDN推荐]" echoMenuHint "3.VMess+TLS+WS" "仅CDN推荐" echoMenuHint "4.Trojan+TLS" "不推荐" # echoContent yellow "5.VLESS+TLS+gRPC[仅CDN推荐]" echoMenuHint "7.VLESS+Reality+uTLS+Vision" "无域名/新手最推荐" # echoContent yellow "8.VLESS+Reality+gRPC" echoMenuHint "12.VLESS+Reality+XHTTP+TLS" "CDN可用/进阶" read -r -p "请选择[多选]，[例如:1,2,3]:" selectCustomInstallType echoContent skyBlue "--------------------------------------------------------------" if echo "${selectCustomInstallType}" | grep -q "，"; then echoContent red " ---> 请使用英文逗号分隔" exit 0 fi if [[ "${selectCustomInstallType}" != "12" ]] && ((${#selectCustomInstallType} >= 2)) && ! echo "${selectCustomInstallType}" | grep -q ","; then echoContent red " ---> 多选请使用英文逗号分隔" exit 0 fi if echo "${selectCustomInstallType}" | grep -qE '^(7|7,12|12)$'; then selectCustomInstallType=",${selectCustomInstallType}," else if ! echo "${selectCustomInstallType}" | grep -q "0,"; then selectCustomInstallType=",0,${selectCustomInstallType}," else selectCustomInstallType=",${selectCustomInstallType}," fi fi if [[ "${selectCustomInstallType:0:1}" != "," ]]; then selectCustomInstallType=",${selectCustomInstallType}," fi if [[ "${selectCustomInstallType//,/}" =~ ^[0-7]+$ ]]; then if echo "${selectCustomInstallType}" | grep -qE '^(,7,|,7,12,|,12,)$'; then clearRealityHistoryCache else readLastInstallationConfig fi unInstallSubscribe # checkBTPanel # check1Panel totalProgress=12 installTools 1 if [[ -n "${btDomain}" ]]; then echoContent skyBlue "\n进度 3/${totalProgress} : 检测到宝塔面板/1Panel，跳过申请TLS步骤" handleXray stop if [[ "${selectCustomInstallType}" != ",7," ]]; then customPortFunction fi else # 申请tls if ! echo "${selectCustomInstallType}" | grep -qE '^(,7,|,7,12,|,12,)$'; then initTLSNginxConfig 2 handleXray stop installTLS 3 else echoContent skyBlue "\n进度 2/${totalProgress} : 检测到仅安装Reality，跳过TLS证书步骤" fi fi handleNginx stop # 随机path if echo "${selectCustomInstallType}" | grep -qE ",1,|,2,|,3,|,5,|,12,"; then randomPathFunction 4 fi if [[ -n "${btDomain}" ]]; then echoContent skyBlue "\n进度 6/${totalProgress} : 检测到宝塔面板/1Panel，跳过伪装网站" else nginxBlog 6 fi if ! echo "${selectCustomInstallType}" | grep -qE '^(,7,|,7,12,|,12,)$'; then updateRedirectNginxConf handleNginx start fi # 安装Xray installXray 7 false installXrayService 8 initXrayConfig custom 9 cleanUp singBoxDel if ! echo "${selectCustomInstallType}" | grep -qE '^(,7,|,7,12,|,12,)$'; then installCronTLS 10 fi handleXray restart # 生成账号 checkGFWStatue 11 showAccounts 12 else echoContent red " ---> 输入不合法" customXrayInstall fi } # 选择核心安装sing-box、xray-core selectCoreInstall() { echoContent skyBlue "\n功能 1/${totalProgress} : 选择核心安装" if [[ "${selectInstallType}" == "3" ]]; then echoContent yellow "# 注意：该功能会覆盖当前Reality节点并全新安装" echoContent yellow "# 已有节点想继续加用户/看订阅，请返回主菜单选 9.账号/订阅管理" echoContent yellow "# 同机想再加独立节点，请返回主菜单选 6/7/8 多实例入口\n" fi echoContent red "\n==============================================================" echoMenuHint "1.Xray-core" "兼容旧功能时选这个" echoMenuHint "2.sing-box" "推荐：多实例优先选这个" echoContent red "==============================================================" read -r -p "请选择:" selectCoreType case ${selectCoreType} in 1) if [[ "${selectInstallType}" == "1" ]]; then xrayCoreInstall elif [[ "${selectInstallType}" == "2" ]]; then customXrayInstall elif [[ "${selectInstallType}" == "3" ]]; then installXrayReality fi ;; 2) if [[ "${selectInstallType}" == "1" ]]; then singBoxInstall elif [[ "${selectInstallType}" == "2" ]]; then customSingBoxInstall elif [[ "${selectInstallType}" == "3" ]]; then installSingBoxReality fi ;; *) echoContent red ' ---> 选择错误，重新选择' selectCoreInstall ;; esac } # xray-core 安装 xrayCoreInstall() { readLastInstallationConfig unInstallSubscribe # checkBTPanel # check1Panel selectCustomInstallType= totalProgress=12 installTools 2 if [[ -n "${btDomain}" ]]; then echoContent skyBlue "\n进度 3/${totalProgress} : 检测到宝塔面板/1Panel，跳过申请TLS步骤" handleXray stop customPortFunction else # 申请tls initTLSNginxConfig 3 handleXray stop installTLS 4 fi handleNginx stop randomPathFunction 5 # 安装Xray installXray 6 false installXrayService 7 initXrayConfig all 8 cleanUp singBoxDel installCronTLS 9 if [[ -n "${btDomain}" ]]; then echoContent skyBlue "\n进度 11/${totalProgress} : 检测到宝塔面板/1Panel，跳过伪装网站" else nginxBlog 10 fi updateRedirectNginxConf handleXray stop sleep 2 handleXray start handleNginx start # 生成账号 checkGFWStatue 11 showAccounts 12 } # sing-box 全部安装 singBoxInstall() { readLastInstallationConfig unInstallSubscribe # checkBTPanel # check1Panel selectCustomInstallType= totalProgress=8 installTools 2 if [[ -n "${btDomain}" ]]; then echoContent skyBlue "\n进度 3/${totalProgress} : 检测到宝塔面板/1Panel，跳过申请TLS步骤" handleXray stop customPortFunction else # 申请tls initTLSNginxConfig 3 handleXray stop installTLS 4 fi handleNginx stop installSingBox 5 installSingBoxService 6 initSingBoxConfig all 7 cleanUp xrayDel installCronTLS 8 handleSingBox restart handleNginx stop handleNginx start # 生成账号 showAccounts 9 } # 核心管理 coreVersionManageMenu() { if [[ -z "${coreInstallType}" ]]; then echoContent red "\n ---> 没有检测到安装目录，请执行脚本安装内容" menu exit 0 fi echoContent skyBlue "\n功能 1/1 : 请选择核心" echoContent red "\n==============================================================" echoContent yellow "1.Xray-core" echoContent yellow "2.sing-box" echoContent red "==============================================================" read -r -p "请输入:" selectCore if [[ "${selectCore}" == "1" ]]; then xrayVersionManageMenu 1 elif [[ "${selectCore}" == "2" ]]; then singBoxVersionManageMenu 1 fi } # 定时任务检查 cronFunction() { if [[ "${cronName}" == "RenewTLS" ]]; then renewalTLS exit 0 elif [[ "${cronName}" == "UpdateGeo" ]]; then updateGeoSite >>/etc/v2ray-agent/crontab_updateGeoSite.log echoContent green " ---> geo更新日期:$(date "+%F %H:%M:%S")" >>/etc/v2ray-agent/crontab_updateGeoSite.log exit 0 elif [[ "${cronName}" == "${websiteCronTag}" ]]; then if websiteLoadMetadata && [[ "${websiteType}" == "blog" ]]; then websitePublishNextPendingArticle true >>"${websitePublishLog}" 2>&1 || true fi exit 0 fi } # 账号管理 manageAccount() { echoContent skyBlue "\n功能 1/${totalProgress} : 账号管理" if [[ -z "${configPath}" ]]; then echoContent red " ---> 未安装" exit 0 fi echoContent red "\n==============================================================" echoContent yellow "# 已有节点想继续加用户或查看订阅，请在这里操作，不要重复跑 3.一键无域名Reality" echoContent yellow "# 添加单个用户时可自定义email和uuid" echoContent yellow "# 如安装了Hysteria或者Tuic，账号会同时添加到相应的类型下面\n" echoContent yellow "# 删除用户时，会同步删除当前已安装协议里的同名账号\n" echoContent yellow "1.查看账号" echoContent yellow "2.查看订阅" echoContent yellow "3.管理其他订阅" echoContent yellow "4.添加用户" echoContent yellow "5.删除用户" echoContent red "==============================================================" read -r -p "请输入:" manageAccountStatus if [[ "${manageAccountStatus}" == "1" ]]; then showAccounts 1 elif [[ "${manageAccountStatus}" == "2" ]]; then subscribe elif [[ "${manageAccountStatus}" == "3" ]]; then addSubscribeMenu 1 elif [[ "${manageAccountStatus}" == "4" ]]; then addUser elif [[ "${manageAccountStatus}" == "5" ]]; then removeUser else echoContent red " ---> 选择错误" fi } # 安装订阅 installSubscribe() { readNginxSubscribe local nginxSubscribeListen= local nginxSubscribeSSL= local serverName= local SSLType= local listenIPv6= if [[ -z "${subscribePort}" ]]; then nginxVersion=$(nginx -v 2>&1) if echo "${nginxVersion}" | grep -q "not found" || [[ -z "${nginxVersion}" ]]; then echoContent yellow "未检测到nginx，无法使用订阅服务\n" read -r -p "是否安装[y/n]？" installNginxStatus if [[ "${installNginxStatus}" == "y" ]]; then installNginxTools else echoContent red " ---> 放弃安装nginx\n" exit 0 fi fi echoContent yellow "开始配置订阅，请输入订阅的端口\n" mapfile -t result < <(initSingBoxPort "${subscribePort}") echo echoContent yellow " ---> 开始配置订阅的伪装站点\n" nginxBlog echo local httpSubscribeStatus= if ! echo "${selectCustomInstallType}" | grep -qE ",0,|,1,|,2,|,3,|,4,|,5,|,6,|,9,|,10,|,11,|,13," && ! echo "${currentInstallProtocolType}" | grep -qE ",0,|,1,|,2,|,3,|,4,|,5,|,6,|,9,|,10,|,11,|,13," && [[ -z "${domain}" ]]; then httpSubscribeStatus=true fi if [[ "${httpSubscribeStatus}" == "true" ]]; then echoContent yellow "未发现tls证书，使用无加密订阅，可能被运营商拦截，请注意风险。" echo read -r -p "是否使用http订阅[y/n]？" addNginxSubscribeStatus echo if [[ "${addNginxSubscribeStatus}" != "y" ]]; then echoContent yellow " ---> 退出安装" exit fi else local subscribeServerName= if [[ -n "${currentHost}" ]]; then subscribeServerName="${currentHost}" else subscribeServerName="${domain}" fi SSLType="ssl" serverName="server_name ${subscribeServerName};" nginxSubscribeSSL="ssl_certificate /etc/v2ray-agent/tls/${subscribeServerName}.crt;ssl_certificate_key /etc/v2ray-agent/tls/${subscribeServerName}.key;" fi if [[ -n "$(curl --connect-timeout 2 -s -6 http://www.cloudflare.com/cdn-cgi/trace | grep "ip" | cut -d "=" -f 2)" ]]; then listenIPv6="listen [::]:${result[-1]} ${SSLType};" fi if echo "${nginxVersion}" | grep -q "1.25" && [[ $(echo "${nginxVersion}" | awk -F "[.]" '{print $3}') -gt 0 ]] || [[ $(echo "${nginxVersion}" | awk -F "[.]" '{print $2}') -gt 25 ]]; then nginxSubscribeListen="listen ${result[-1]} ${SSLType} so_keepalive=on;http2 on;${listenIPv6}" else nginxSubscribeListen="listen ${result[-1]} ${SSLType} so_keepalive=on;${listenIPv6}" fi cat <${nginxConfigPath}subscribe.conf server { ${nginxSubscribeListen} ${serverName} ${nginxSubscribeSSL} ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers TLS13_AES_128_GCM_SHA256:TLS13_AES_256_GCM_SHA384:TLS13_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305; ssl_prefer_server_ciphers on; resolver 1.1.1.1 valid=60s; resolver_timeout 2s; client_max_body_size 100m; root ${nginxStaticPath}; location ~ ^/s/(clashMeta|default|clashMetaProfiles|sing-box|sing-box_profiles)/(.*) { default_type 'text/plain; charset=utf-8'; alias /etc/v2ray-agent/subscribe/\$1/\$2; } location / { } } EOF bootStartup nginx handleNginx stop handleNginx start fi if [[ -z $(pgrep -f "nginx") ]]; then handleNginx start fi } # 卸载订阅 unInstallSubscribe() { rm -rf ${nginxConfigPath}subscribe.conf >/dev/null 2>&1 } # 添加订阅 addSubscribeMenu() { echoContent skyBlue "\n===================== 添加其他机器订阅 =======================" echoContent yellow "1.添加" echoContent yellow "2.移除" echoContent red "==============================================================" read -r -p "请选择:" addSubscribeStatus if [[ "${addSubscribeStatus}" == "1" ]]; then addOtherSubscribe elif [[ "${addSubscribeStatus}" == "2" ]]; then if [[ ! -f "/etc/v2ray-agent/subscribe_remote/remoteSubscribeUrl" ]]; then echoContent green " ---> 未安装其他订阅" exit 0 fi grep -v '^$' "/etc/v2ray-agent/subscribe_remote/remoteSubscribeUrl" | awk '{print NR""":"$0}' read -r -p "请选择要删除的订阅编号[仅支持单个删除]:" delSubscribeIndex if [[ -z "${delSubscribeIndex}" ]]; then echoContent green " ---> 不可以为空" exit 0 fi sed -i "$((delSubscribeIndex))d" "/etc/v2ray-agent/subscribe_remote/remoteSubscribeUrl" >/dev/null 2>&1 echoContent green " ---> 其他机器订阅删除成功" subscribe fi } # 添加其他机器clashMeta订阅 addOtherSubscribe() { echoContent yellow "#注意事项:" echoContent yellow "请先确认反代目标已正确配置并可访问" echoContent skyBlue "录入示例：www.example.com:443:vps1\n" read -r -p "请输入域名 端口 机器别名:" remoteSubscribeUrl if [[ -z "${remoteSubscribeUrl}" ]]; then echoContent red " ---> 不可为空" addOtherSubscribe elif ! echo "${remoteSubscribeUrl}" | grep -q ":"; then echoContent red " ---> 规则不合法" else if [[ -f "/etc/v2ray-agent/subscribe_remote/remoteSubscribeUrl" ]] && grep -q "${remoteSubscribeUrl}" /etc/v2ray-agent/subscribe_remote/remoteSubscribeUrl; then echoContent red " ---> 此订阅已添加" exit 0 fi echo read -r -p "是否是HTTP订阅？[y/n]" httpSubscribeStatus if [[ "${httpSubscribeStatus}" == "y" ]]; then remoteSubscribeUrl="${remoteSubscribeUrl}:http" fi echo "${remoteSubscribeUrl}" >>/etc/v2ray-agent/subscribe_remote/remoteSubscribeUrl subscribe fi } # clashMeta配置文件 clashMetaConfig() { local url=$1 local id=$2 cat <"/etc/v2ray-agent/subscribe/clashMetaProfiles/${id}" log-level: debug mode: rule ipv6: true mixed-port: 7890 allow-lan: true bind-address: "*" lan-allowed-ips: - 0.0.0.0/0 - ::/0 find-process-mode: strict external-controller: 0.0.0.0:9090 geox-url: geoip: "https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip.dat" geosite: "https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geosite.dat" mmdb: "https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip.metadb" geo-auto-update: true geo-update-interval: 24 external-controller-cors: allow-private-network: true global-client-fingerprint: chrome profile: store-selected: true store-fake-ip: true sniffer: enable: true override-destination: false sniff: QUIC: ports: [ 443 ] TLS: ports: [ 443 ] HTTP: ports: [80] dns: enable: true prefer-h3: false listen: 0.0.0.0:1053 ipv6: true enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 fake-ip-filter: - '*.lan' - '*.local' - 'dns.google' - "localhost.ptlogin2.qq.com" use-hosts: true nameserver: - https://1.1.1.1/dns-query - https://8.8.8.8/dns-query - 1.1.1.1 - 8.8.8.8 proxy-server-nameserver: - https://223.5.5.5/dns-query - https://1.12.12.12/dns-query nameserver-policy: "geosite:cn,private": - https://doh.pub/dns-query - https://dns.alidns.com/dns-query proxy-providers: ${subscribeSalt}_provider: type: http path: ./${subscribeSalt}_provider.yaml url: ${url} interval: 3600 proxy: DIRECT health-check: enable: true url: https://cp.cloudflare.com/generate_204 interval: 300 proxy-groups: - name: 手动切换 type: select use: - ${subscribeSalt}_provider proxies: null - name: 自动选择 type: url-test url: http://www.gstatic.com/generate_204 interval: 36000 tolerance: 50 use: - ${subscribeSalt}_provider proxies: null - name: 全球代理 type: select use: - ${subscribeSalt}_provider proxies: - 手动切换 - 自动选择 - name: 流媒体 type: select use: - ${subscribeSalt}_provider proxies: - 手动切换 - 自动选择 - DIRECT - name: DNS_Proxy type: select use: - ${subscribeSalt}_provider proxies: - 自动选择 - 手动切换 - DIRECT - name: Telegram type: select use: - ${subscribeSalt}_provider proxies: - 手动切换 - 自动选择 - name: Google type: select use: - ${subscribeSalt}_provider proxies: - 手动切换 - 自动选择 - DIRECT - name: YouTube type: select use: - ${subscribeSalt}_provider proxies: - 手动切换 - 自动选择 - name: Netflix type: select use: - ${subscribeSalt}_provider proxies: - 流媒体 - 手动切换 - 自动选择 - name: Spotify type: select use: - ${subscribeSalt}_provider proxies: - 流媒体 - 手动切换 - 自动选择 - DIRECT - name: HBO type: select use: - ${subscribeSalt}_provider proxies: - 流媒体 - 手动切换 - 自动选择 - name: Bing type: select use: - ${subscribeSalt}_provider proxies: - 手动切换 - 自动选择 - name: OpenAI type: select use: - ${subscribeSalt}_provider proxies: - 手动切换 - 自动选择 - name: ClaudeAI type: select use: - ${subscribeSalt}_provider proxies: - 手动切换 - 自动选择 - name: Disney type: select use: - ${subscribeSalt}_provider proxies: - 流媒体 - 手动切换 - 自动选择 - name: GitHub type: select use: - ${subscribeSalt}_provider proxies: - 手动切换 - 自动选择 - DIRECT - name: 国内媒体 type: select use: - ${subscribeSalt}_provider proxies: - DIRECT - name: 本地直连 type: select use: - ${subscribeSalt}_provider proxies: - DIRECT - 自动选择 - name: 漏网之鱼 type: select use: - ${subscribeSalt}_provider proxies: - DIRECT - 手动切换 - 自动选择 rule-providers: lan: type: http behavior: classical interval: 86400 url: https://gh-proxy.com/https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/Lan/Lan.yaml path: ./Rules/lan.yaml reject: type: http behavior: domain url: https://gh-proxy.com/https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/reject.txt path: ./ruleset/reject.yaml interval: 86400 proxy: type: http behavior: domain url: https://gh-proxy.com/https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/proxy.txt path: ./ruleset/proxy.yaml interval: 86400 direct: type: http behavior: domain url: https://gh-proxy.com/https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/direct.txt path: ./ruleset/direct.yaml interval: 86400 private: type: http behavior: domain url: https://gh-proxy.com/https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/private.txt path: ./ruleset/private.yaml interval: 86400 gfw: type: http behavior: domain url: https://gh-proxy.com/https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/gfw.txt path: ./ruleset/gfw.yaml interval: 86400 greatfire: type: http behavior: domain url: https://gh-proxy.com/https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/greatfire.txt path: ./ruleset/greatfire.yaml interval: 86400 tld-not-cn: type: http behavior: domain url: https://gh-proxy.com/https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/tld-not-cn.txt path: ./ruleset/tld-not-cn.yaml interval: 86400 telegramcidr: type: http behavior: ipcidr url: https://gh-proxy.com/https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/telegramcidr.txt path: ./ruleset/telegramcidr.yaml interval: 86400 applications: type: http behavior: classical url: https://gh-proxy.com/https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/applications.txt path: ./ruleset/applications.yaml interval: 86400 Disney: type: http behavior: classical url: https://gh-proxy.com/https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/Disney/Disney.yaml path: ./ruleset/disney.yaml interval: 86400 Netflix: type: http behavior: classical url: https://gh-proxy.com/https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/Netflix/Netflix.yaml path: ./ruleset/netflix.yaml interval: 86400 YouTube: type: http behavior: classical url: https://gh-proxy.com/https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/YouTube/YouTube.yaml path: ./ruleset/youtube.yaml interval: 86400 HBO: type: http behavior: classical url: https://gh-proxy.com/https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/HBO/HBO.yaml path: ./ruleset/hbo.yaml interval: 86400 OpenAI: type: http behavior: classical url: https://gh-proxy.com/https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/OpenAI/OpenAI.yaml path: ./ruleset/openai.yaml interval: 86400 ClaudeAI: type: http behavior: classical url: https://gh-proxy.com/https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/Claude/Claude.yaml path: ./ruleset/claudeai.yaml interval: 86400 Bing: type: http behavior: classical url: https://gh-proxy.com/https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/Bing/Bing.yaml path: ./ruleset/bing.yaml interval: 86400 Google: type: http behavior: classical url: https://gh-proxy.com/https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/Google/Google.yaml path: ./ruleset/google.yaml interval: 86400 GitHub: type: http behavior: classical url: https://gh-proxy.com/https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/GitHub/GitHub.yaml path: ./ruleset/github.yaml interval: 86400 Spotify: type: http behavior: classical url: https://gh-proxy.com/https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/Spotify/Spotify.yaml path: ./ruleset/spotify.yaml interval: 86400 ChinaMaxDomain: type: http behavior: domain interval: 86400 url: https://gh-proxy.com/https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/ChinaMax/ChinaMax_Domain.yaml path: ./Rules/ChinaMaxDomain.yaml ChinaMaxIPNoIPv6: type: http behavior: ipcidr interval: 86400 url: https://gh-proxy.com/https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/ChinaMax/ChinaMax_IP_No_IPv6.yaml path: ./Rules/ChinaMaxIPNoIPv6.yaml rules: - RULE-SET,YouTube,YouTube,no-resolve - RULE-SET,Google,Google,no-resolve - RULE-SET,GitHub,GitHub - RULE-SET,telegramcidr,Telegram,no-resolve - RULE-SET,Spotify,Spotify,no-resolve - RULE-SET,Netflix,Netflix - RULE-SET,HBO,HBO - RULE-SET,Bing,Bing - RULE-SET,OpenAI,OpenAI - RULE-SET,ClaudeAI,ClaudeAI - RULE-SET,Disney,Disney - RULE-SET,proxy,全球代理 - RULE-SET,gfw,全球代理 - RULE-SET,applications,本地直连 - RULE-SET,ChinaMaxDomain,本地直连 - RULE-SET,ChinaMaxIPNoIPv6,本地直连,no-resolve - RULE-SET,lan,本地直连,no-resolve - GEOIP,CN,本地直连 - MATCH,漏网之鱼 EOF } # 随机salt initRandomSalt() { local chars="abcdefghijklmnopqrtuxyz" local initCustomPath= for i in {1..10}; do echo "${i}" >/dev/null initCustomPath+="${chars:RANDOM%${#chars}:1}" done echo "${initCustomPath}" } # 订阅 subscribe() { readInstallProtocolType installSubscribe readNginxSubscribe local renewSalt=$1 local showStatus=$2 if [[ "${coreInstallType}" == "1" || "${coreInstallType}" == "2" ]]; then echoContent skyBlue "-------------------------备注---------------------------------" echoContent yellow "# 查看订阅会重新生成本地账号的订阅" echoContent red "# 需要手动输入md5加密的salt值，如果不了解使用随机即可" echoContent yellow "# 不影响已添加的远程订阅的内容\n" if [[ -f "/etc/v2ray-agent/subscribe_local/subscribeSalt" && -n $(cat "/etc/v2ray-agent/subscribe_local/subscribeSalt") ]]; then if [[ -z "${renewSalt}" ]]; then read -r -p "读取到上次安装设置的Salt，是否使用上次生成的Salt ？[y/n]:" historySaltStatus if [[ "${historySaltStatus}" == "y" ]]; then subscribeSalt=$(cat /etc/v2ray-agent/subscribe_local/subscribeSalt) else read -r -p "请输入salt值, [回车]使用随机:" subscribeSalt fi else subscribeSalt=$(cat /etc/v2ray-agent/subscribe_local/subscribeSalt) fi else read -r -p "请输入salt值, [回车]使用随机:" subscribeSalt showStatus= fi if [[ -z "${subscribeSalt}" ]]; then subscribeSalt=$(initRandomSalt) fi echoContent yellow "\n ---> Salt: ${subscribeSalt}" echo "${subscribeSalt}" >/etc/v2ray-agent/subscribe_local/subscribeSalt rm -rf /etc/v2ray-agent/subscribe/default/* rm -rf /etc/v2ray-agent/subscribe/clashMeta/* rm -rf /etc/v2ray-agent/subscribe_local/default/* rm -rf /etc/v2ray-agent/subscribe_local/clashMeta/* rm -rf /etc/v2ray-agent/subscribe_local/sing-box/* showAccounts >/dev/null if [[ -n $(ls /etc/v2ray-agent/subscribe_local/default/) ]]; then if [[ -f "/etc/v2ray-agent/subscribe_remote/remoteSubscribeUrl" && -n $(cat "/etc/v2ray-agent/subscribe_remote/remoteSubscribeUrl") ]]; then if [[ -z "${renewSalt}" ]]; then read -r -p "读取到其他订阅，是否更新？[y/n]" updateOtherSubscribeStatus else updateOtherSubscribeStatus=y fi fi local subscribePortLocal="${subscribePort}" find /etc/v2ray-agent/subscribe_local/default/* | while read -r email; do email=$(echo "${email}" | awk -F "[d][e][f][a][u][l][t][/]" '{print $2}') local emailMd5= emailMd5=$(echo -n "${email}${subscribeSalt}"$'\n' | md5sum | awk '{print $1}') cat "/etc/v2ray-agent/subscribe_local/default/${email}" >>"/etc/v2ray-agent/subscribe/default/${emailMd5}" if [[ "${updateOtherSubscribeStatus}" == "y" ]]; then updateRemoteSubscribe "${emailMd5}" "${email}" fi local base64Result base64Result=$(base64 -w 0 "/etc/v2ray-agent/subscribe/default/${emailMd5}") echo "${base64Result}" >"/etc/v2ray-agent/subscribe/default/${emailMd5}" echoContent yellow "--------------------------------------------------------------" local currentDomain=${currentHost} if [[ -n "${currentDefaultPort}" && "${currentDefaultPort}" != "443" ]]; then currentDomain="${currentHost}:${currentDefaultPort}" fi if [[ -n "${subscribePortLocal}" ]]; then if [[ "${subscribeType}" == "http" ]]; then currentDomain="$(getPublicIP):${subscribePort}" else currentDomain="${currentHost}:${subscribePort}" fi fi if [[ -z "${showStatus}" ]]; then echoContent skyBlue "\n----------默认订阅----------\n" echoContent green "email:${email}\n" echoContent yellow "url:${subscribeType}://${currentDomain}/s/default/${emailMd5}\n" echoContent yellow "在线二维码:https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=${subscribeType}://${currentDomain}/s/default/${emailMd5}\n" if [[ "${release}" != "alpine" ]]; then echo "${subscribeType}://${currentDomain}/s/default/${emailMd5}" | qrencode -s 10 -m 1 -t UTF8 fi # clashMeta if [[ -f "/etc/v2ray-agent/subscribe_local/clashMeta/${email}" ]]; then cat "/etc/v2ray-agent/subscribe_local/clashMeta/${email}" >>"/etc/v2ray-agent/subscribe/clashMeta/${emailMd5}" sed -i '1i\proxies:' "/etc/v2ray-agent/subscribe/clashMeta/${emailMd5}" local clashProxyUrl="${subscribeType}://${currentDomain}/s/clashMeta/${emailMd5}" clashMetaConfig "${clashProxyUrl}" "${emailMd5}" echoContent skyBlue "\n----------clashMeta订阅----------\n" echoContent yellow "url:${subscribeType}://${currentDomain}/s/clashMetaProfiles/${emailMd5}\n" echoContent yellow "在线二维码:https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=${subscribeType}://${currentDomain}/s/clashMetaProfiles/${emailMd5}\n" if [[ "${release}" != "alpine" ]]; then echo "${subscribeType}://${currentDomain}/s/clashMetaProfiles/${emailMd5}" | qrencode -s 10 -m 1 -t UTF8 fi fi # sing-box if [[ -f "/etc/v2ray-agent/subscribe_local/sing-box/${email}" ]]; then cp "/etc/v2ray-agent/subscribe_local/sing-box/${email}" "/etc/v2ray-agent/subscribe/sing-box_profiles/${emailMd5}" echoContent skyBlue " ---> 下载 sing-box 通用配置文件" if [[ "${release}" == "alpine" ]]; then wget -O "/etc/v2ray-agent/subscribe/sing-box/${emailMd5}" -q "https://raw.githubusercontent.com/dodo258/sing-box-reality-manager/main/documents/sing-box.json" else wget -O "/etc/v2ray-agent/subscribe/sing-box/${emailMd5}" -q "${wgetShowProgressStatus}" "https://raw.githubusercontent.com/dodo258/sing-box-reality-manager/main/documents/sing-box.json" fi jq ".outbounds=$(jq ".outbounds|map(if has(\"outbounds\") then .outbounds += $(jq ".|map(.tag)" "/etc/v2ray-agent/subscribe_local/sing-box/${email}") else . end)" "/etc/v2ray-agent/subscribe/sing-box/${emailMd5}")" "/etc/v2ray-agent/subscribe/sing-box/${emailMd5}" >"/etc/v2ray-agent/subscribe/sing-box/${emailMd5}_tmp" && mv "/etc/v2ray-agent/subscribe/sing-box/${emailMd5}_tmp" "/etc/v2ray-agent/subscribe/sing-box/${emailMd5}" jq ".outbounds += $(jq '.' "/etc/v2ray-agent/subscribe_local/sing-box/${email}")" "/etc/v2ray-agent/subscribe/sing-box/${emailMd5}" >"/etc/v2ray-agent/subscribe/sing-box/${emailMd5}_tmp" && mv "/etc/v2ray-agent/subscribe/sing-box/${emailMd5}_tmp" "/etc/v2ray-agent/subscribe/sing-box/${emailMd5}" echoContent skyBlue "\n----------sing-box订阅----------\n" echoContent yellow "url:${subscribeType}://${currentDomain}/s/sing-box/${emailMd5}\n" echoContent yellow "在线二维码:https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=${subscribeType}://${currentDomain}/s/sing-box/${emailMd5}\n" if [[ "${release}" != "alpine" ]]; then echo "${subscribeType}://${currentDomain}/s/sing-box/${emailMd5}" | qrencode -s 10 -m 1 -t UTF8 fi fi echoContent skyBlue "--------------------------------------------------------------" else echoContent green " ---> email:${email}，订阅已更新，请使用客户端重新拉取" fi done fi else echoContent red " ---> 未安装伪装站点，无法使用订阅服务" fi } # 更新远程订阅 updateRemoteSubscribe() { local emailMD5=$1 local email=$2 while read -r line; do local subscribeType= subscribeType="https" local serverAlias= serverAlias=$(echo "${line}" | awk -F "[:]" '{print $3}') local remoteUrl= remoteUrl=$(echo "${line}" | awk -F "[:]" '{print $1":"$2}') local subscribeTypeRemote= subscribeTypeRemote=$(echo "${line}" | awk -F "[:]" '{print $4}') if [[ -n "${subscribeTypeRemote}" ]]; then subscribeType="${subscribeTypeRemote}" fi local clashMetaProxies= clashMetaProxies=$(curl -s "${subscribeType}://${remoteUrl}/s/clashMeta/${emailMD5}" | sed '/proxies:/d' | sed "s/\"${email}/\"${email}_${serverAlias}/g") if ! echo "${clashMetaProxies}" | grep -q "nginx" && [[ -n "${clashMetaProxies}" ]]; then echo "${clashMetaProxies}" >>"/etc/v2ray-agent/subscribe/clashMeta/${emailMD5}" echoContent green " ---> clashMeta订阅 ${remoteUrl}:${email} 更新成功" else echoContent red " ---> clashMeta订阅 ${remoteUrl}:${email}不存在" fi local default= default=$(curl -s "${subscribeType}://${remoteUrl}/s/default/${emailMD5}") if ! echo "${default}" | grep -q "nginx" && [[ -n "${default}" ]]; then default=$(echo "${default}" | base64 -d | sed "s/#${email}/#${email}_${serverAlias}/g") echo "${default}" >>"/etc/v2ray-agent/subscribe/default/${emailMD5}" echoContent green " ---> 通用订阅 ${remoteUrl}:${email} 更新成功" else echoContent red " ---> 通用订阅 ${remoteUrl}:${email} 不存在" fi local singBoxSubscribe= singBoxSubscribe=$(curl -s "${subscribeType}://${remoteUrl}/s/sing-box_profiles/${emailMD5}") if ! echo "${singBoxSubscribe}" | grep -q "nginx" && [[ -n "${singBoxSubscribe}" ]]; then singBoxSubscribe=${singBoxSubscribe//tag\": \"${email}/tag\": \"${email}_${serverAlias}} singBoxSubscribe=$(jq ". +=${singBoxSubscribe}" "/etc/v2ray-agent/subscribe_local/sing-box/${email}") echo "${singBoxSubscribe}" | jq . >"/etc/v2ray-agent/subscribe_local/sing-box/${email}" echoContent green " ---> 通用订阅 ${remoteUrl}:${email} 更新成功" else echoContent red " ---> 通用订阅 ${remoteUrl}:${email} 不存在" fi done < <(grep -v '^$' <"/etc/v2ray-agent/subscribe_remote/remoteSubscribeUrl") } # 切换alpn switchAlpn() { echoContent skyBlue "\n功能 1/${totalProgress} : 切换alpn" if [[ -z ${currentAlpn} ]]; then echoContent red " ---> 无法读取alpn，请检查是否安装" exit 0 fi echoContent red "\n==============================================================" echoContent green "当前alpn首位为:${currentAlpn}" echoContent yellow " 1.当http/1.1首位时，trojan可用，gRPC部分客户端可用【客户端支持手动选择alpn的可用】" echoContent yellow " 2.当h2首位时，gRPC可用，trojan部分客户端可用【客户端支持手动选择alpn的可用】" echoContent yellow " 3.如客户端不支持手动更换alpn，建议使用此功能更改服务端alpn顺序，来使用相应的协议" echoContent red "==============================================================" if [[ "${currentAlpn}" == "http/1.1" ]]; then echoContent yellow "1.切换alpn h2 首位" elif [[ "${currentAlpn}" == "h2" ]]; then echoContent yellow "1.切换alpn http/1.1 首位" else echoContent red '不符合' fi echoContent red "==============================================================" read -r -p "请选择:" selectSwitchAlpnType if [[ "${selectSwitchAlpnType}" == "1" && "${currentAlpn}" == "http/1.1" ]]; then local frontingTypeJSON frontingTypeJSON=$(jq -r ".inbounds[0].streamSettings.tlsSettings.alpn = [\"h2\",\"http/1.1\"]" ${configPath}${frontingType}.json) echo "${frontingTypeJSON}" | jq . >${configPath}${frontingType}.json elif [[ "${selectSwitchAlpnType}" == "1" && "${currentAlpn}" == "h2" ]]; then local frontingTypeJSON frontingTypeJSON=$(jq -r ".inbounds[0].streamSettings.tlsSettings.alpn =[\"http/1.1\",\"h2\"]" ${configPath}${frontingType}.json) echo "${frontingTypeJSON}" | jq . >${configPath}${frontingType}.json else echoContent red " ---> 选择错误" exit 0 fi reloadCore } # 初始化realityKey initRealityKey() { echoContent skyBlue "\n生成Reality key\n" if [[ -n "${currentRealityPublicKey}" && -z "${lastInstallationConfig}" ]]; then read -r -p "读取到上次安装记录，是否使用上次安装时的PublicKey/PrivateKey ？[y/n]:" historyKeyStatus if [[ "${historyKeyStatus}" == "y" ]]; then realityPrivateKey=${currentRealityPrivateKey} realityPublicKey=${currentRealityPublicKey} fi elif [[ -n "${currentRealityPublicKey}" && -n "${lastInstallationConfig}" ]]; then realityPrivateKey=${currentRealityPrivateKey} realityPublicKey=${currentRealityPublicKey} fi if [[ -z "${realityPrivateKey}" ]]; then if [[ "${selectCoreType}" == "2" || "${coreInstallType}" == "2" ]]; then realityX25519Key=$(/etc/v2ray-agent/sing-box/sing-box generate reality-keypair) realityPrivateKey=$(echo "${realityX25519Key}" | head -1 | awk '{print $2}') realityPublicKey=$(echo "${realityX25519Key}" | tail -n 1 | awk '{print $2}') echo "publicKey:${realityPublicKey}" >/etc/v2ray-agent/sing-box/conf/config/reality_key else read -r -p "请输入Private Key[回车自动生成]:" historyPrivateKey if [[ -n "${historyPrivateKey}" ]]; then realityX25519Key=$(/etc/v2ray-agent/xray/xray x25519 -i "${historyPrivateKey}") else realityX25519Key=$(/etc/v2ray-agent/xray/xray x25519) fi realityPrivateKey=$(echo "${realityX25519Key}" | grep "PrivateKey" | awk '{print $2}') realityPublicKey=$(echo "${realityX25519Key}" | grep "Password" | awk '{print $3}') if [[ -z "${realityPrivateKey}" ]]; then echoContent red "输入的Private Key不合法" initRealityKey else persistXrayRealityKeyInfo echoContent green "\n privateKey:${realityPrivateKey}" echoContent green "\n publicKey:${realityPublicKey}" fi fi fi } # 初始化 mldsa65Seed initRealityMldsa65() { echoContent skyBlue "\n生成Reality mldsa65\n" local tlsPingResult= local tlsPingStatus=0 local realityMldsa65Status=0 local length= if ! command -v timeout >/dev/null 2>&1; then echoContent yellow " 系统缺少timeout命令，跳过ML-DSA-65探测，避免长时间卡住。" return 0 fi tlsPingResult=$(timeout 12 /etc/v2ray-agent/xray/xray tls ping "${realityServerName}:${realityDomainPort}" 2>/dev/null) tlsPingStatus=$? if [[ ${tlsPingStatus} -eq 124 ]]; then echoContent yellow " 目标域名TLS探测超时，建议优先使用443端口的目标域名。" return 0 elif [[ ${tlsPingStatus} -ne 0 || -z "${tlsPingResult}" ]]; then echoContent yellow " 目标域名TLS探测失败。" return 0 fi if echo "${tlsPingResult}" | grep -q "X25519MLKEM768"; then length=$(echo "${tlsPingResult}" | grep "Certificate chain's total length:" | awk '{print $5}' | head -1) if [[ -n "${length}" ]] && [ "$length" -gt 3500 ]; then if [[ -n "${currentRealityMldsa65Seed}" && -z "${lastInstallationConfig}" ]]; then read -r -p "读取到上次安装记录，是否使用上次安装时的Seed/Verify ？[y/n]:" historyMldsa65Status if [[ "${historyMldsa65Status}" == "y" ]]; then realityMldsa65Seed=${currentRealityMldsa65Seed} realityMldsa65Verify=${currentRealityMldsa65Verify} fi elif [[ -n "${currentRealityMldsa65Seed}" && -n "${lastInstallationConfig}" ]]; then realityMldsa65Seed=${currentRealityMldsa65Seed} realityMldsa65Verify=${currentRealityMldsa65Verify} fi if [[ -z "${realityMldsa65Seed}" ]]; then # if [[ "${selectCoreType}" == "2" || "${coreInstallType}" == "2" ]]; then # realityX25519Key=$(/etc/v2ray-agent/sing-box/sing-box generate reality-keypair) # realityPrivateKey=$(echo "${realityX25519Key}" | head -1 | awk '{print $2}') # realityPublicKey=$(echo "${realityX25519Key}" | tail -n 1 | awk '{print $2}') # echo "publicKey:${realityPublicKey}" >/etc/v2ray-agent/sing-box/conf/config/reality_key # else realityMldsa65=$(timeout 15 /etc/v2ray-agent/xray/xray mldsa65 2>/dev/null) realityMldsa65Status=$? if [[ ${realityMldsa65Status} -eq 124 ]]; then echoContent yellow " 附加验证超时，已自动跳过。" return 0 elif [[ ${realityMldsa65Status} -ne 0 || -z "${realityMldsa65}" ]]; then echoContent yellow " 附加验证失败，已自动跳过。" return 0 fi realityMldsa65Seed=$(echo "${realityMldsa65}" | head -1 | awk '{print $2}') realityMldsa65Verify=$(echo "${realityMldsa65}" | tail -n 1 | awk '{print $2}') if [[ "${selectCoreType}" != "2" && "${coreInstallType}" != "2" ]]; then persistXrayRealityKeyInfo fi # fi fi # echoContent green "\n Seed:${realityMldsa65Seed}" # echoContent green "\n Verify:${realityMldsa65Verify}" else echoContent green " 目标域名支持X25519MLKEM768。" fi fi } # 检查reality域名是否符合 checkRealityDest() { local traceResult= traceResult=$(curl -s "https://$(echo "${realityDestDomain}" | cut -d ':' -f 1)/cdn-cgi/trace" | grep "visit_scheme=https") if [[ -n "${traceResult}" ]]; then echoContent red "\n ---> 检测到使用的域名，托管在cloudflare并开启了代理，使用此类型域名可能导致VPS流量被其他人使用[不建议使用]\n" read -r -p "是否继续 ？[y/n]" setRealityDestStatus if [[ "${setRealityDestStatus}" != 'y' ]]; then exit 0 fi echoContent yellow "\n ---> 忽略风险，继续使用" fi } # 初始化客户端可用的ServersName initRealityClientServersName() { local realityDestDomainList= if [[ "${coreInstallType}" == "1" || "${selectCoreType}" == "1" ]]; then realityDestDomainList="www.japan.travel,www.aniplex.co.jp,www.caltech.edu,www.princeton.edu,www.columbia.edu,www.ucla.edu,www.umich.edu,www.ox.ac.uk,www.nyu.edu,www.asus.com,www.ibm.com,www.ericsson.com,www.tp-link.com,www.synology.com,www.logitech.com,www.seagate.com,www.vmware.com,www.sennheiser.com,www.sothebysrealty.com,www.century21.com" elif [[ "${coreInstallType}" == "2" || "${selectCoreType}" == "2" ]]; then realityDestDomainList="www.japan.travel,www.aniplex.co.jp,www.caltech.edu,www.princeton.edu,www.columbia.edu,www.ucla.edu,www.umich.edu,www.ox.ac.uk,www.nyu.edu,www.asus.com,www.ibm.com,www.ericsson.com,www.tp-link.com,www.synology.com,www.logitech.com,www.seagate.com,www.vmware.com,www.sennheiser.com,www.sothebysrealty.com,www.century21.com" fi if [[ -n "${realityServerName}" && -z "${lastInstallationConfig}" ]]; then if echo ${realityDestDomainList} | grep -q "${realityServerName}"; then read -r -p "读取到上次安装设置的Reality域名，是否使用？[y/n]:" realityServerNameStatus if [[ "${realityServerNameStatus}" != "y" ]]; then realityServerName= realityDomainPort= fi else realityServerName= realityDomainPort= fi elif [[ -n "${realityServerName}" && -n "${lastInstallationConfig}" ]]; then echoContent yellow " ---> 继续使用上次安装的Reality目标域名: ${realityServerName}:${realityDomainPort}" fi if [[ -z "${realityServerName}" ]]; then if [[ -n "${domain}" ]]; then echo read -r -p "是否使用 ${domain} 此域名作为Reality目标域名 ？[y/n]:" realityServerNameCurrentDomainStatus if [[ "${realityServerNameCurrentDomainStatus}" == "y" ]]; then realityServerName="${domain}" if [[ "${selectCoreType}" == "1" ]]; then if [[ -z "${subscribePort}" ]]; then echo installSubscribe readNginxSubscribe realityDomainPort="${subscribePort}" else realityDomainPort="${subscribePort}" fi fi if [[ "${selectCoreType}" == "2" ]]; then if [[ -z "${subscribePort}" ]]; then echo installSubscribe readNginxSubscribe realityDomainPort="${subscribePort}" else realityDomainPort="${subscribePort}" fi fi fi fi if [[ -z "${realityServerName}" ]]; then realityDomainPort=443 echoContent skyBlue "\n================ 配置客户端可用的serverNames ===============\n" echoContent yellow "#注意事项" echoContent green "Reality 目标域名建议优先使用仓库整理过的一线域名池，并自行复测可达性\n" echoContent green "默认随机池已收紧为国内机严格复测后的低时延白名单域名组\n" echoContent yellow "推荐文档: documents/reality_target_domains.md" echoContent yellow "录入示例:addons.mozilla.org:443\n" read -r -p "请输入目标域名，[回车]随机域名，默认端口443:" realityServerName if [[ -z "${realityServerName}" ]]; then count=$(echo ${realityDestDomainList} | awk -F',' '{print NF}') randomNum=$(randomNum 1 "${count}") realityServerName=$(echo "${realityDestDomainList}" | awk -F ',' -v randomNum="$randomNum" '{print $randomNum}') fi if echo "${realityServerName}" | grep -q ":"; then realityDomainPort=$(echo "${realityServerName}" | awk -F "[:]" '{print $2}') realityServerName=$(echo "${realityServerName}" | awk -F "[:]" '{print $1}') fi fi fi echoContent yellow "\n ---> 客户端可用域名: ${realityServerName}:${realityDomainPort}\n" } # 初始化reality端口 initXrayRealityPort() { if [[ -n "${xrayVLESSRealityPort}" && -z "${lastInstallationConfig}" ]]; then read -r -p "读取到上次安装记录，是否使用上次安装时的端口 ？[y/n]:" historyRealityPortStatus if [[ "${historyRealityPortStatus}" == "y" ]]; then realityPort=${xrayVLESSRealityPort} fi elif [[ -n "${xrayVLESSRealityPort}" && -n "${lastInstallationConfig}" ]]; then realityPort=${xrayVLESSRealityPort} fi if [[ -z "${realityPort}" ]]; then # if [[ -n "${port}" ]]; then # read -r -p "是否使用TLS+Vision端口 ？[y/n]:" realityPortTLSVisionStatus # if [[ "${realityPortTLSVisionStatus}" == "y" ]]; then # realityPort=${port} # fi # fi # if [[ -z "${realityPort}" ]]; then echoContent yellow "请输入端口[回车随机10000-30000]" read -r -p "端口:" realityPort if [[ -z "${realityPort}" ]]; then realityPort=$((RANDOM % 20001 + 10000)) fi # fi if [[ -n "${realityPort}" && "${xrayVLESSRealityPort}" == "${realityPort}" ]]; then handleXray stop else checkPort "${realityPort}" fi fi if [[ -z "${realityPort}" ]]; then initXrayRealityPort else allowPort "${realityPort}" echoContent yellow "\n ---> 端口: ${realityPort}" fi } # 初始化XHTTP端口 initXrayXHTTPort() { if [[ -n "${xrayVLESSRealityXHTTPort}" && -z "${lastInstallationConfig}" ]]; then read -r -p "读取到上次安装记录，是否使用上次安装时的端口 ？[y/n]:" historyXHTTPortStatus if [[ "${historyXHTTPortStatus}" == "y" ]]; then xHTTPort=${xrayVLESSRealityXHTTPort} fi elif [[ -n "${xrayVLESSRealityXHTTPort}" && -n "${lastInstallationConfig}" ]]; then xHTTPort=${xrayVLESSRealityXHTTPort} fi if [[ -z "${xHTTPort}" ]]; then echoContent yellow "请输入端口[回车随机10000-30000]" read -r -p "端口:" xHTTPort if [[ -z "${xHTTPort}" ]]; then xHTTPort=$((RANDOM % 20001 + 10000)) fi if [[ -n "${xHTTPort}" && "${xrayVLESSRealityXHTTPort}" == "${xHTTPort}" ]]; then handleXray stop else checkPort "${xHTTPort}" fi fi if [[ -z "${xHTTPort}" ]]; then initXrayXHTTPort else allowPort "${xHTTPort}" allowPort "${xHTTPort}" "udp" echoContent yellow "\n ---> 端口: ${xHTTPort}" fi } # reality管理 manageReality() { readInstallProtocolType readConfigHostPathUUID readCustomPort readSingBoxConfig if ! echo "${currentInstallProtocolType}" | grep -q -E "7,|8," || [[ -z "${coreInstallType}" ]]; then echoContent red "\n ---> 请先安装 Reality 协议后再执行此操作，详情请参考仓库 README" exit 0 fi if [[ "${coreInstallType}" == "1" ]]; then selectCustomInstallType=",7," initXrayConfig custom 1 true elif [[ "${coreInstallType}" == "2" ]]; then if echo "${currentInstallProtocolType}" | grep -q ",7,"; then selectCustomInstallType=",7," fi if echo "${currentInstallProtocolType}" | grep -q ",8,"; then selectCustomInstallType="${selectCustomInstallType},8," fi initSingBoxConfig custom 1 true fi reloadCore subscribe false } # 安装reality scanner installRealityScanner() { if [[ ! -f "/etc/v2ray-agent/xray/reality_scan/RealiTLScanner-linux-64" ]]; then version=$(curl -s https://api.github.com/repos/XTLS/RealiTLScanner/releases?per_page=1 | jq -r '.[]|.tag_name') wget -c -q -P /etc/v2ray-agent/xray/reality_scan/ "https://github.com/XTLS/RealiTLScanner/releases/download/${version}/RealiTLScanner-linux-64" chmod 655 /etc/v2ray-agent/xray/reality_scan/RealiTLScanner-linux-64 fi } # reality scanner realityScanner() { echoContent skyBlue "\n进度 1/1 : 扫描Reality域名" echoContent red "\n==============================================================" echoContent yellow "# 注意事项" echoContent yellow "扫描完成后，请自行检查扫描网站结果内容是否合规，需个人承担风险" echoContent red "某些IDC不允许扫描操作，比如搬瓦工，其中风险请自行承担\n" echoContent yellow "1.扫描IPv4" echoContent yellow "2.扫描IPv6" echoContent red "==============================================================" read -r -p "请选择:" realityScannerStatus local type= if [[ "${realityScannerStatus}" == "1" ]]; then type=4 elif [[ "${realityScannerStatus}" == "2" ]]; then type=6 fi read -r -p "某些IDC不允许扫描操作，比如搬瓦工，其中风险请自行承担，是否继续？[y/n]:" scanStatus if [[ "${scanStatus}" != "y" ]]; then exit 0 fi publicIP=$(getPublicIP "${type}") echoContent yellow "IP:${publicIP}" if [[ -z "${publicIP}" ]]; then echoContent red " ---> 无法获取IP" exit 0 fi read -r -p "IP是否正确？[y/n]:" ipStatus if [[ "${ipStatus}" == "y" ]]; then echoContent yellow "结果存储在 /etc/v2ray-agent/xray/reality_scan/result.log 文件中\n" /etc/v2ray-agent/xray/reality_scan/RealiTLScanner-linux-64 -addr "${publicIP}" | tee /etc/v2ray-agent/xray/reality_scan/result.log else echoContent red " ---> 无法读取正确IP" fi } # hysteria管理 manageHysteria() { echoContent skyBlue "\n进度 1/1 : Hysteria2 管理" echoContent red "\n==============================================================" local hysteria2Status= if [[ -n "${singBoxConfigPath}" ]] && [[ -f "/etc/v2ray-agent/sing-box/conf/config/06_hysteria2_inbounds.json" ]]; then echoContent yellow "依赖第三方sing-box\n" echoContent yellow "1.重新安装" echoContent yellow "2.卸载" echoContent yellow "3.端口跳跃管理" hysteria2Status=true else echoContent yellow "依赖sing-box内核\n" echoContent yellow "1.安装" fi echoContent red "==============================================================" read -r -p "请选择:" installHysteria2Status if [[ "${installHysteria2Status}" == "1" ]]; then singBoxHysteria2Install elif [[ "${installHysteria2Status}" == "2" && "${hysteria2Status}" == "true" ]]; then unInstallSingBox hysteria2 elif [[ "${installHysteria2Status}" == "3" && "${hysteria2Status}" == "true" ]]; then portHoppingMenu hysteria2 fi } # tuic管理 manageTuic() { echoContent skyBlue "\n进度 1/1 : Tuic管理" echoContent red "\n==============================================================" local tuicStatus= if [[ -n "${singBoxConfigPath}" ]] && [[ -f "/etc/v2ray-agent/sing-box/conf/config/09_tuic_inbounds.json" ]]; then echoContent yellow "依赖sing-box内核\n" echoContent yellow "1.重新安装" echoContent yellow "2.卸载" echoContent yellow "3.端口跳跃管理" tuicStatus=true else echoContent yellow "依赖sing-box内核\n" echoContent yellow "1.安装" fi echoContent red "==============================================================" read -r -p "请选择:" installTuicStatus if [[ "${installTuicStatus}" == "1" ]]; then singBoxTuicInstall elif [[ "${installTuicStatus}" == "2" && "${tuicStatus}" == "true" ]]; then unInstallSingBox tuic elif [[ "${installTuicStatus}" == "3" && "${tuicStatus}" == "true" ]]; then portHoppingMenu tuic fi } # sing-box log日志 singBoxLog() { cat </etc/v2ray-agent/sing-box/conf/config/log.json { "log": { "disabled": $1, "level": "debug", "output": "/etc/v2ray-agent/sing-box/conf/box.log", "timestamp": true } } EOF handleSingBox restart } advancedCompatibilityMenu() { echoContent skyBlue "\n功能 1/1 : 高级/兼容功能" echoContent red "\n==============================================================" echoContent yellow "# 注意事项" echoContent yellow "# 这里保留低频功能和旧兼容入口，日常部署优先使用主菜单推荐项" echoContent yellow "1.Hysteria2管理" echoContent yellow "2.REALITY管理" echoContent yellow "3.Tuic管理" echoContent yellow "4.CDN节点管理" echoContent yellow "5.BT下载管理" echoContent yellow "6.域名黑名单" echoContent yellow "7.添加新端口" echoContent red "==============================================================" read -r -p "请选择:" advancedCompatibilityAction case "${advancedCompatibilityAction}" in 1) manageHysteria ;; 2) manageReality 1 ;; 3) manageTuic ;; 4) manageCDN 1 ;; 5) btTools 1 ;; 6) blacklist 1 ;; 7) addCorePort 1 ;; *) echoContent red " ---> 选择错误" exit 0 ;; esac } # sing-box 版本管理 singBoxVersionManageMenu() { echoContent skyBlue "\n进度 $1/${totalProgress} : sing-box 版本管理" if [[ -z "${singBoxConfigPath}" ]]; then echoContent red " ---> 没有检测到安装程序，请执行脚本安装内容" menu exit 0 fi echoContent red "\n==============================================================" echoContent yellow "1.升级 sing-box" echoContent yellow "2.关闭 sing-box" echoContent yellow "3.打开 sing-box" echoContent yellow "4.重启 sing-box" echoContent yellow "==============================================================" local logStatus= if [[ -n "${singBoxConfigPath}" && -f "${singBoxConfigPath}log.json" && "$(jq -r .log.disabled "${singBoxConfigPath}log.json")" == "false" ]]; then echoContent yellow "5.关闭日志" logStatus=true else echoContent yellow "5.启用日志" logStatus=false fi echoContent yellow "6.查看日志" echoContent red "==============================================================" read -r -p "请选择:" selectSingBoxType if [[ ! -f "${singBoxConfigPath}../box.log" ]]; then touch "${singBoxConfigPath}../box.log" >/dev/null 2>&1 fi if [[ "${selectSingBoxType}" == "1" ]]; then installSingBox 1 handleSingBox restart elif [[ "${selectSingBoxType}" == "2" ]]; then handleSingBox stop elif [[ "${selectSingBoxType}" == "3" ]]; then handleSingBox start elif [[ "${selectSingBoxType}" == "4" ]]; then handleSingBox restart elif [[ "${selectSingBoxType}" == "5" ]]; then singBoxLog ${logStatus} if [[ "${logStatus}" == "false" ]]; then tail -f "${singBoxConfigPath}../box.log" fi elif [[ "${selectSingBoxType}" == "6" ]]; then tail -f "${singBoxConfigPath}../box.log" fi } # 主菜单 menu() { cd "$HOME" || exit echoContent red "\n==============================================================" echoContent green "维护：dodo258" echoContent green "当前版本：v3.8.0" echoContent green "项目：https://github.com/dodo258/sing-box-reality-manager" echoContent green "描述：多实例重构版管理脚本\c" showInstallStatus checkWgetShowProgress echoContent red "==============================================================" if [[ -n "${coreInstallType}" ]]; then echoContent yellow "1.重新安装" else echoContent yellow "1.安装" fi echoContent yellow "2.高级组合安装" echoMenuHint "3.一键无域名Reality" "只装推荐VLESS，新手最推荐" "覆盖当前Reality节点并全新安装" echoMenuHint "4.一键AnyTLS" "sing-box/需自备域名" echoMenuHint "5.一键Snell+ShadowTLS" "Snell v4/v5 + Shadow-TLS v3" echoMenuHint "6.多实例Reality" "先装一个主节点再用这个" echoMenuHint "7.多实例AnyTLS" "sing-box/每节点独立域名" echoMenuHint "8.多实例Snell+ShadowTLS" "独立端口/可多节点" echoContent skyBlue "-------------------------工具管理-----------------------------" echoMenuHint "9.账号/订阅管理" "主节点账号在这里看" echoContent yellow "10.节点管理" echoContent yellow "11.分流工具" echoContent yellow "12.网站管理" echoContent yellow "13.证书管理" echoContent skyBlue "-------------------------版本管理-----------------------------" echoContent yellow "14.core管理" echoContent yellow "15.更新脚本" echoContent yellow "16.安装BBR、DD脚本" echoContent skyBlue "-------------------------脚本管理-----------------------------" echoContent yellow "17.高级/兼容功能" echoContent yellow "18.卸载脚本" echoContent red "==============================================================" mkdirTools aliasInstall read -r -p "请选择:" selectInstallType case ${selectInstallType} in 1) selectCoreInstall ;; 2) selectCoreInstall ;; 3) selectCoreInstall ;; 4) installSingBoxAnyTLS ;; 5) installSnellShadowTLS ;; 6) managedMultiRealityMenu ;; 7) managedMultiAnyTLSMenu ;; 8) snellShadowTLSMenu ;; 9) manageAccount 1 ;; 10) manageInstalledNodes ;; 11) routingToolsMenu 1 ;; 12) websiteManagementMenu ;; 13) renewalTLS 1 ;; 14) coreVersionManageMenu 1 ;; 15) updateV2RayAgent 1 ;; 16) bbrInstall ;; 17) advancedCompatibilityMenu ;; 18) unInstall 1 ;; esac } cronFunction menu