diff --git a/sb.sh b/sb.sh deleted file mode 100644 index ee2ed55..0000000 --- a/sb.sh +++ /dev/null @@ -1,4868 +0,0 @@ -#!/bin/bash -export LANG=en_US.UTF-8 -red='\033[0;31m' -green='\033[0;32m' -yellow='\033[0;33m' -blue='\033[0;36m' -bblue='\033[0;34m' -plain='\033[0m' -red(){ echo -e "\033[31m\033[01m$1\033[0m";} -green(){ echo -e "\033[32m\033[01m$1\033[0m";} -yellow(){ echo -e "\033[33m\033[01m$1\033[0m";} -blue(){ echo -e "\033[36m\033[01m$1\033[0m";} -white(){ echo -e "\033[37m\033[01m$1\033[0m";} -readp(){ read -p "$(yellow "$1")" $2;} -[[ $EUID -ne 0 ]] && yellow "请以root模式运行脚本" && exit -#[[ -e /etc/hosts ]] && grep -qE '^ *172.65.251.78 gitlab.com' /etc/hosts || echo -e '\n172.65.251.78 gitlab.com' >> /etc/hosts -if [[ -f /etc/redhat-release ]]; then -release="Centos" -elif cat /etc/issue | grep -q -E -i "alpine"; then -release="alpine" -elif cat /etc/issue | grep -q -E -i "debian"; then -release="Debian" -elif cat /etc/issue | grep -q -E -i "ubuntu"; then -release="Ubuntu" -elif cat /etc/issue | grep -q -E -i "centos|red hat|redhat"; then -release="Centos" -elif cat /proc/version | grep -q -E -i "debian"; then -release="Debian" -elif cat /proc/version | grep -q -E -i "ubuntu"; then -release="Ubuntu" -elif cat /proc/version | grep -q -E -i "centos|red hat|redhat"; then -release="Centos" -else -red "脚本不支持当前的系统，请选择使用Ubuntu,Debian,Centos系统。" && exit -fi -vsid=$(grep -i version_id /etc/os-release | cut -d \" -f2 | cut -d . -f1) -op=$(cat /etc/redhat-release 2>/dev/null || cat /etc/os-release 2>/dev/null | grep -i pretty_name | cut -d \" -f2) -#if [[ $(echo "$op" | grep -i -E "arch|alpine") ]]; then -if [[ $(echo "$op" | grep -i -E "arch") ]]; then -red "脚本不支持当前的 $op 系统，请选择使用Ubuntu,Debian,Centos系统。" && exit -fi -version=$(uname -r | cut -d "-" -f1) -[[ -z $(systemd-detect-virt 2>/dev/null) ]] && vi=$(virt-what 2>/dev/null) || vi=$(systemd-detect-virt 2>/dev/null) -bit=$(uname -m) -if [[ $bit = "aarch64" ]]; then -cpu="arm64" -elif [[ $bit = "x86_64" ]]; then -amdv=$(cat /proc/cpuinfo | grep flags | head -n 1 | cut -d: -f2) -[[ $amdv == *avx2* && $amdv == *f16c* ]] && cpu="amd64v3" || cpu="amd64" -else -red "目前脚本不支持 $bit 架构" && exit -fi -if [[ -n $(sysctl net.ipv4.tcp_congestion_control 2>/dev/null | awk -F ' ' '{print $3}') ]]; then -bbr=`sysctl net.ipv4.tcp_congestion_control | awk -F ' ' '{print $3}'` -elif [[ -n $(ping 10.0.0.2 -c 2 | grep ttl) ]]; then -bbr="Openvz版bbr-plus" -else -bbr="Openvz/Lxc" -fi -hostname=$(hostname) - -if [ ! -f sbyg_update ]; then -green "首次安装Sing-box-yg脚本必要的依赖……" -if [[ x"${release}" == x"alpine" ]]; then -apk update -apk add wget curl tar jq tzdata openssl expect git socat iproute2 iptables -apk add virt-what -apk add qrencode -else -if [[ $release = Centos && ${vsid} =~ 8 ]]; then -cd /etc/yum.repos.d/ && mkdir backup && mv *repo backup/ -curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-8.repo -sed -i -e "s|mirrors.cloud.aliyuncs.com|mirrors.aliyun.com|g " /etc/yum.repos.d/CentOS-* -sed -i -e "s|releasever|releasever-stream|g" /etc/yum.repos.d/CentOS-* -yum clean all && yum makecache -cd -fi -if [ -x "$(command -v apt-get)" ]; then -apt update -y -apt install jq iptables-persistent -y -elif [ -x "$(command -v yum)" ]; then -yum update -y && yum install epel-release -y -yum install jq -y -elif [ -x "$(command -v dnf)" ]; then -dnf update -y -dnf install jq -y -fi -if [ -x "$(command -v yum)" ] || [ -x "$(command -v dnf)" ]; then -if [ -x "$(command -v yum)" ]; then -yum install -y cronie iptables-services -elif [ -x "$(command -v dnf)" ]; then -dnf install -y cronie iptables-services -fi -systemctl enable iptables >/dev/null 2>&1 -systemctl start iptables >/dev/null 2>&1 -fi -if [[ -z $vi ]]; then -apt install iputils-ping iproute2 systemctl -y -fi - -packages=("curl" "openssl" "iptables" "tar" "expect" "wget" "xxd" "python3" "qrencode" "git" "cron") -inspackages=("curl" "openssl" "iptables" "tar" "expect" "wget" "xxd" "python3" "qrencode" "git" "cron") -for i in "${!packages[@]}"; do -package="${packages[$i]}" -inspackage="${inspackages[$i]}" -if ! command -v "$package" &> /dev/null; then -if [ -x "$(command -v apt-get)" ]; then -apt-get install -y "$inspackage" -elif [ -x "$(command -v yum)" ]; then -yum install -y "$inspackage" -elif [ -x "$(command -v dnf)" ]; then -dnf install -y "$inspackage" -fi -fi -done -fi -touch sbyg_update -fi - -if [[ $vi = openvz ]]; then -TUN=$(cat /dev/net/tun 2>&1) -if [[ ! $TUN =~ 'in bad state' ]] && [[ ! $TUN =~ '处于错误状态' ]] && [[ ! $TUN =~ 'Die Dateizugriffsnummer ist in schlechter Verfassung' ]]; then -red "检测到未开启TUN，现尝试添加TUN支持" && sleep 4 -cd /dev && mkdir net && mknod net/tun c 10 200 && chmod 0666 net/tun -TUN=$(cat /dev/net/tun 2>&1) -if [[ ! $TUN =~ 'in bad state' ]] && [[ ! $TUN =~ '处于错误状态' ]] && [[ ! $TUN =~ 'Die Dateizugriffsnummer ist in schlechter Verfassung' ]]; then -green "添加TUN支持失败，建议与VPS厂商沟通或后台设置开启" && exit -else -echo '#!/bin/bash' > /root/tun.sh && echo 'cd /dev && mkdir net && mknod net/tun c 10 200 && chmod 0666 net/tun' >> /root/tun.sh && chmod +x /root/tun.sh -grep -qE "^ *@reboot root bash /root/tun.sh >/dev/null 2>&1" /etc/crontab || echo "@reboot root bash /root/tun.sh >/dev/null 2>&1" >> /etc/crontab -green "TUN守护功能已启动" -fi -fi -fi - -v4v6(){ -v4=$(curl -s4m5 icanhazip.com -k) -v6=$(curl -s6m5 icanhazip.com -k) -} - -warpcheck(){ -wgcfv6=$(curl -s6m5 https://www.cloudflare.com/cdn-cgi/trace -k | grep warp | cut -d= -f2) -wgcfv4=$(curl -s4m5 https://www.cloudflare.com/cdn-cgi/trace -k | grep warp | cut -d= -f2) -} - -v6(){ -v4orv6(){ -if [ -z $(curl -s4m5 icanhazip.com -k) ]; then -echo -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -yellow "检测到 纯IPV6 VPS，添加DNS64" -echo -e "nameserver 2a00:1098:2b::1\nnameserver 2a00:1098:2c::1\nnameserver 2a01:4f8:c2c:123f::1" > /etc/resolv.conf -endip=2606:4700:d0::a29f:c101 -ipv=prefer_ipv6 -else -endip=162.159.193.10 -ipv=prefer_ipv4 -#echo '4' > /etc/s-box/i -fi -} -warpcheck -if [[ ! $wgcfv4 =~ on|plus && ! $wgcfv6 =~ on|plus ]]; then -v4orv6 -else -systemctl stop wg-quick@wgcf >/dev/null 2>&1 -kill -15 $(pgrep warp-go) >/dev/null 2>&1 && sleep 2 -v4orv6 -systemctl start wg-quick@wgcf >/dev/null 2>&1 -systemctl restart warp-go >/dev/null 2>&1 -systemctl enable warp-go >/dev/null 2>&1 -systemctl start warp-go >/dev/null 2>&1 -fi -} - -argopid(){ -ym=$(cat /etc/s-box/sbargoympid.log 2>/dev/null) -ls=$(cat /etc/s-box/sbargopid.log 2>/dev/null) -} - -close(){ -systemctl stop firewalld.service >/dev/null 2>&1 -systemctl disable firewalld.service >/dev/null 2>&1 -setenforce 0 >/dev/null 2>&1 -ufw disable >/dev/null 2>&1 -iptables -P INPUT ACCEPT >/dev/null 2>&1 -iptables -P FORWARD ACCEPT >/dev/null 2>&1 -iptables -P OUTPUT ACCEPT >/dev/null 2>&1 -iptables -t mangle -F >/dev/null 2>&1 -iptables -F >/dev/null 2>&1 -iptables -X >/dev/null 2>&1 -netfilter-persistent save >/dev/null 2>&1 -if [[ -n $(apachectl -v 2>/dev/null) ]]; then -systemctl stop httpd.service >/dev/null 2>&1 -systemctl disable httpd.service >/dev/null 2>&1 -service apache2 stop >/dev/null 2>&1 -systemctl disable apache2 >/dev/null 2>&1 -fi -sleep 1 -green "执行开放端口，关闭防火墙完毕" -} - -openyn(){ -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -readp "是否开放端口，关闭防火墙？\n1、是，执行 (回车默认)\n2、否，跳过！自行处理\n请选择【1-2】：" action -if [[ -z $action ]] || [[ "$action" = "1" ]]; then -close -elif [[ "$action" = "2" ]]; then -echo -else -red "输入错误,请重新选择" && openyn -fi -} - -inssb(){ -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -green "一、开始下载并安装Sing-box正式版内核……请稍等" -echo -sbcore=$(curl -Ls https://data.jsdelivr.com/v1/package/gh/SagerNet/sing-box | grep -Eo '"[0-9.]+",' | sed -n 1p | tr -d '",') -sbname="sing-box-$sbcore-linux-$cpu" -curl -L -o /etc/s-box/sing-box.tar.gz -# --retry 2 https://github.com/SagerNet/sing-box/releases/download/v$sbcore/$sbname.tar.gz -if [[ -f '/etc/s-box/sing-box.tar.gz' ]]; then -tar xzf /etc/s-box/sing-box.tar.gz -C /etc/s-box -mv /etc/s-box/$sbname/sing-box /etc/s-box -rm -rf /etc/s-box/{sing-box.tar.gz,$sbname} -if [[ -f '/etc/s-box/sing-box' ]]; then -chown root:root /etc/s-box/sing-box -chmod +x /etc/s-box/sing-box -blue "成功安装 Sing-box 内核版本：$(/etc/s-box/sing-box version | awk '/version/{print $NF}')" -else -red "下载 Sing-box 内核不完整，安装失败，请再运行安装一次" && exit -fi -else -red "下载 Sing-box 内核失败，请再运行安装一次，并检测VPS的网络是否可以访问Github" && exit -fi -} - -inscertificate(){ -ymzs(){ -ym_vl_re=www.yahoo.com -echo -blue "Vless-reality的SNI域名默认为 www.yahoo.com" -blue "Vmess-ws将开启TLS，Hysteria-2、Tuic-v5将使用 $(cat /root/ygkkkca/ca.log 2>/dev/null) 证书，并开启SNI证书验证" -tlsyn=true -ym_vm_ws=$(cat /root/ygkkkca/ca.log 2>/dev/null) -certificatec_vmess_ws='/root/ygkkkca/cert.crt' -certificatep_vmess_ws='/root/ygkkkca/private.key' -certificatec_hy2='/root/ygkkkca/cert.crt' -certificatep_hy2='/root/ygkkkca/private.key' -certificatec_tuic='/root/ygkkkca/cert.crt' -certificatep_tuic='/root/ygkkkca/private.key' -} - -zqzs(){ -ym_vl_re=www.yahoo.com -echo -blue "Vless-reality的SNI域名默认为 www.yahoo.com" -blue "Vmess-ws将关闭TLS，Hysteria-2、Tuic-v5将使用bing自签证书，并关闭SNI证书验证" -tlsyn=false -ym_vm_ws=www.bing.com -certificatec_vmess_ws='/etc/s-box/cert.pem' -certificatep_vmess_ws='/etc/s-box/private.key' -certificatec_hy2='/etc/s-box/cert.pem' -certificatep_hy2='/etc/s-box/private.key' -certificatec_tuic='/etc/s-box/cert.pem' -certificatep_tuic='/etc/s-box/private.key' -} - -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -green "二、生成并设置相关证书" -echo -blue "自动生成bing自签证书中……" && sleep 2 -openssl ecparam -genkey -name prime256v1 -out /etc/s-box/private.key -openssl req -new -x509 -days 36500 -key /etc/s-box/private.key -out /etc/s-box/cert.pem -subj "/CN=www.bing.com" -echo -if [[ -f /etc/s-box/cert.pem ]]; then -blue "生成bing自签证书成功" -else -red "生成bing自签证书失败" && exit -fi -echo -if [[ -f /root/ygkkkca/cert.crt && -f /root/ygkkkca/private.key && -s /root/ygkkkca/cert.crt && -s /root/ygkkkca/private.key ]]; then -yellow "经检测，之前已使用Acme-yg脚本申请过Acme域名证书：$(cat /root/ygkkkca/ca.log) " -green "是否使用 $(cat /root/ygkkkca/ca.log) 域名证书？" -yellow "1：否！使用自签的证书 (回车默认)" -yellow "2：是！使用 $(cat /root/ygkkkca/ca.log) 域名证书" -readp "请选择【1-2】：" menu -if [ -z "$menu" ] || [ "$menu" = "1" ] ; then -zqzs -else -ymzs -fi -else -green "如果你有解析完成的域名，是否申请一个Acme域名证书？" -yellow "1：否！继续使用自签的证书 (回车默认)" -yellow "2：是！使用Acme-yg脚本申请Acme证书 (支持常规80端口模式与Dns API模式)" -readp "请选择【1-2】：" menu -if [ -z "$menu" ] || [ "$menu" = "1" ] ; then -zqzs -else -bash <(curl -Ls https://gitlab.com/rwkgyg/acme-script/raw/main/acme.sh) -if [[ ! -f /root/ygkkkca/cert.crt && ! -f /root/ygkkkca/private.key && ! -s /root/ygkkkca/cert.crt && ! -s /root/ygkkkca/private.key ]]; then -red "Acme证书申请失败，继续使用自签证书" -zqzs -else -ymzs -fi -fi -fi -} - -chooseport(){ -if [[ -z $port ]]; then -port=$(shuf -i 10000-65535 -n 1) -until [[ -z $(ss -tunlp | grep -w udp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") && -z $(ss -tunlp | grep -w tcp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") ]] -do -[[ -n $(ss -tunlp | grep -w udp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") || -n $(ss -tunlp | grep -w tcp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") ]] && yellow "\n端口被占用，请重新输入端口" && readp "自定义端口:" port -done -else -until [[ -z $(ss -tunlp | grep -w udp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") && -z $(ss -tunlp | grep -w tcp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") ]] -do -[[ -n $(ss -tunlp | grep -w udp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") || -n $(ss -tunlp | grep -w tcp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") ]] && yellow "\n端口被占用，请重新输入端口" && readp "自定义端口:" port -done -fi -blue "确认的端口：$port" && sleep 2 -} - -vlport(){ -readp "\n设置Vless-reality端口[1-65535] (回车跳过为10000-65535之间的随机端口)：" port -chooseport -port_vl_re=$port -} -vmport(){ -readp "\n设置Vmess-ws端口[1-65535] (回车跳过为10000-65535之间的随机端口)：" port -chooseport -port_vm_ws=$port -} -hy2port(){ -readp "\n设置Hysteria2主端口[1-65535] (回车跳过为10000-65535之间的随机端口)：" port -chooseport -port_hy2=$port -} -tu5port(){ -readp "\n设置Tuic5主端口[1-65535] (回车跳过为10000-65535之间的随机端口)：" port -chooseport -port_tu=$port -} - -insport(){ -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -green "三、设置各个协议端口" -yellow "1：自动生成每个协议的随机端口 (10000-65535范围内)，回车默认" -yellow "2：自定义每个协议端口" -readp "请输入【1-2】：" port -if [ -z "$port" ] || [ "$port" = "1" ] ; then -ports=() -for i in {1..4}; do -while true; do -port=$(shuf -i 10000-65535 -n 1) -if ! [[ " ${ports[@]} " =~ " $port " ]] && \ -[[ -z $(ss -tunlp | grep -w tcp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") ]] && \ -[[ -z $(ss -tunlp | grep -w udp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") ]]; then -ports+=($port) -break -fi -done -done -port_vm_ws=${ports[0]} -port_vl_re=${ports[1]} -port_hy2=${ports[2]} -port_tu=${ports[3]} -if [[ $tlsyn == "true" ]]; then -numbers=("2053" "2083" "2087" "2096" "8443") -else -numbers=("8080" "8880" "2052" "2082" "2086" "2095") -fi -port_vm_ws=${numbers[$RANDOM % ${#numbers[@]}]} -until [[ -z $(ss -tunlp | grep -w tcp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port_vm_ws") ]] -do -if [[ $tlsyn == "true" ]]; then -numbers=("2053" "2083" "2087" "2096" "8443") -else -numbers=("8080" "8880" "2052" "2082" "2086" "2095") -fi -port_vm_ws=${numbers[$RANDOM % ${#numbers[@]}]} -done -echo -blue "根据Vmess-ws协议是否启用TLS，随机指定支持CDN优选IP的标准端口：$port_vm_ws" -else -vlport && vmport && hy2port && tu5port -fi -echo -blue "各协议端口确认如下" -blue "Vless-reality端口：$port_vl_re" -blue "Vmess-ws端口：$port_vm_ws" -blue "Hysteria-2端口：$port_hy2" -blue "Tuic-v5端口：$port_tu" -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -green "四、自动生成各个协议统一的uuid (密码)" -uuid=$(/etc/s-box/sing-box generate uuid) -blue "已确认uuid (密码)：${uuid}" -blue "已确认Vmess的path路径：${uuid}-vm" -} - -inssbjsonser(){ -cat > /etc/s-box/sb.json < /etc/init.d/sing-box -chmod +x /etc/init.d/sing-box -rc-update add sing-box default -rc-service sing-box start -else -cat > /etc/systemd/system/sing-box.service </dev/null 2>&1 -systemctl start sing-box -systemctl restart sing-box -fi -} - -ipuuid(){ -uuid=$(jq -r '.inbounds[0].users[0].uuid' /etc/s-box/sb.json) -serip=$(curl -s4m5 icanhazip.com -k || curl -s6m5 icanhazip.com -k) -if [[ "$serip" =~ : ]]; then -sbdnsip='tls://[2001:4860:4860::8888]/dns-query' -server_ip="[$serip]" -server_ipcl="$serip" -else -sbdnsip='tls://8.8.8.8/dns-query' -server_ip="$serip" -server_ipcl="$serip" -fi -} - -wgcfgo(){ -warpcheck -if [[ ! $wgcfv4 =~ on|plus && ! $wgcfv6 =~ on|plus ]]; then -ipuuid -else -systemctl stop wg-quick@wgcf >/dev/null 2>&1 -kill -15 $(pgrep warp-go) >/dev/null 2>&1 && sleep 2 -ipuuid -systemctl start wg-quick@wgcf >/dev/null 2>&1 -systemctl restart warp-go >/dev/null 2>&1 -systemctl enable warp-go >/dev/null 2>&1 -systemctl start warp-go >/dev/null 2>&1 -fi -} - -result_vl_vm_hy_tu(){ -rm -rf /etc/s-box/vm_ws_argo.txt /etc/s-box/vm_ws.txt /etc/s-box/vm_ws_tls.txt -wgcfgo -vl_port=$(jq -r '.inbounds[0].listen_port' /etc/s-box/sb.json) -vl_name=$(jq -r '.inbounds[0].tls.server_name' /etc/s-box/sb.json) -public_key=$(cat /etc/s-box/public.key) -short_id=$(jq -r '.inbounds[0].tls.reality.short_id[0]' /etc/s-box/sb.json) -argo=$(cat /etc/s-box/argo.log 2>/dev/null | grep -a trycloudflare.com | awk 'NR==2{print}' | awk -F// '{print $2}' | awk '{print $1}') -ws_path=$(jq -r '.inbounds[1].transport.path' /etc/s-box/sb.json) -vm_port=$(jq -r '.inbounds[1].listen_port' /etc/s-box/sb.json) -tls=$(jq -r '.inbounds[1].tls.enabled' /etc/s-box/sb.json) -vm_name=$(jq -r '.inbounds[1].tls.server_name' /etc/s-box/sb.json) -if [[ "$tls" = "false" ]]; then -if [[ -f /etc/s-box/cfymjx.txt ]]; then -vm_name=$(cat /etc/s-box/cfymjx.txt 2>/dev/null) -else -vm_name=$(jq -r '.inbounds[1].tls.server_name' /etc/s-box/sb.json) -fi -vmadd_local=$server_ipcl -vmadd_are_local=$server_ip -else -vmadd_local=$vm_name -vmadd_are_local=$server_ip -fi -if [[ -f /etc/s-box/cfvmadd_local.txt ]]; then -vmadd_local=$(cat /etc/s-box/cfvmadd_local.txt 2>/dev/null) -vmadd_are_local=$(cat /etc/s-box/cfvmadd_local.txt 2>/dev/null) -fi -if [[ -f /etc/s-box/cfvmadd_argo.txt ]]; then -vmadd_argo=$(cat /etc/s-box/cfvmadd_argo.txt 2>/dev/null) -else -vmadd_argo=www.visa.com.sg -fi -hy2_port=$(jq -r '.inbounds[2].listen_port' /etc/s-box/sb.json) -hy2_ports=$(iptables -t nat -nL --line 2>/dev/null | grep -w "$hy2_port" | awk '{print $8}' | sed 's/dpts://; s/dpt://' | tr '\n' ',' | sed 's/,$//') -if [[ -n $hy2_ports ]]; then -hy2ports=$(echo $hy2_ports | sed 's/:/-/g') -hyps=$hy2_port,$hy2ports -else -hyps=$hy2_port -fi -ym=$(cat /root/ygkkkca/ca.log 2>/dev/null) -hy2_sniname=$(jq -r '.inbounds[2].tls.key_path' /etc/s-box/sb.json) -if [[ "$hy2_sniname" = '/etc/s-box/private.key' ]]; then -hy2_name=www.bing.com -sb_hy2_ip=$server_ip -cl_hy2_ip=$server_ipcl -ins_hy2=1 -hy2_ins=true -else -hy2_name=$ym -sb_hy2_ip=$ym -cl_hy2_ip=$ym -ins_hy2=0 -hy2_ins=false -fi -tu5_port=$(jq -r '.inbounds[3].listen_port' /etc/s-box/sb.json) -ym=$(cat /root/ygkkkca/ca.log 2>/dev/null) -tu5_sniname=$(jq -r '.inbounds[3].tls.key_path' /etc/s-box/sb.json) -if [[ "$tu5_sniname" = '/etc/s-box/private.key' ]]; then -tu5_name=www.bing.com -sb_tu5_ip=$server_ip -cl_tu5_ip=$server_ipcl -ins=1 -tu5_ins=true -else -tu5_name=$ym -sb_tu5_ip=$ym -cl_tu5_ip=$ym -ins=0 -tu5_ins=false -fi -} - -resvless(){ -echo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -vl_link="vless://$uuid@$server_ip:$vl_port?encryption=none&flow=xtls-rprx-vision&security=reality&sni=$vl_name&fp=chrome&pbk=$public_key&sid=$short_id&type=tcp&headerType=none#vl-reality-$hostname" -echo "$vl_link" > /etc/s-box/vl_reality.txt -red "🚀【 vless-reality-vision 】节点信息如下：" && sleep 2 -echo -echo "分享链接【v2rayn、v2rayng、nekobox、小火箭shadowrocket】" -echo -e "${yellow}$vl_link${plain}" -echo -echo "二维码【v2rayn、v2rayng、nekobox、小火箭shadowrocket】" -qrencode -o - -t ANSIUTF8 "$(cat /etc/s-box/vl_reality.txt)" -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -} - -resvmess(){ -if [[ "$tls" = "false" ]]; then -argopid -if [[ -n $(ps -e | grep -w $ls 2>/dev/null) ]]; then -echo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -red "🚀【 vmess-ws(tls)+Argo 】临时节点信息如下(可选择3-8-3，自定义CDN优选地址)：" && sleep 2 -echo -echo "分享链接【v2rayn、v2rayng、nekobox、小火箭shadowrocket】" -echo -e "${yellow}vmess://$(echo '{"add":"'$vmadd_argo'","aid":"0","host":"'$argo'","id":"'$uuid'","net":"ws","path":"'$ws_path'","port":"8443","ps":"'vm-argo-$hostname'","tls":"tls","sni":"'$argo'","type":"none","v":"2"}' | base64 -w 0)${plain}" -echo -echo "二维码【v2rayn、v2rayng、nekobox、小火箭shadowrocket】" -echo 'vmess://'$(echo '{"add":"'$vmadd_argo'","aid":"0","host":"'$argo'","id":"'$uuid'","net":"ws","path":"'$ws_path'","port":"8443","ps":"'vm-argo-$hostname'","tls":"tls","sni":"'$argo'","type":"none","v":"2"}' | base64 -w 0) > /etc/s-box/vm_ws_argols.txt -qrencode -o - -t ANSIUTF8 "$(cat /etc/s-box/vm_ws_argols.txt)" -fi -if [[ -n $(ps -e | grep -w $ym 2>/dev/null) ]]; then -argogd=$(cat /etc/s-box/sbargoym.log 2>/dev/null) -echo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -red "🚀【 vmess-ws(tls)+Argo 】固定节点信息如下 (可选择3-8-3，自定义CDN优选地址)：" && sleep 2 -echo -echo "分享链接【v2rayn、v2rayng、nekobox、小火箭shadowrocket】" -echo -e "${yellow}vmess://$(echo '{"add":"'$vmadd_argo'","aid":"0","host":"'$argogd'","id":"'$uuid'","net":"ws","path":"'$ws_path'","port":"8443","ps":"'vm-argo-$hostname'","tls":"tls","sni":"'$argogd'","type":"none","v":"2"}' | base64 -w 0)${plain}" -echo -echo "二维码【v2rayn、v2rayng、nekobox、小火箭shadowrocket】" -echo 'vmess://'$(echo '{"add":"'$vmadd_argo'","aid":"0","host":"'$argogd'","id":"'$uuid'","net":"ws","path":"'$ws_path'","port":"8443","ps":"'vm-argo-$hostname'","tls":"tls","sni":"'$argogd'","type":"none","v":"2"}' | base64 -w 0) > /etc/s-box/vm_ws_argogd.txt -qrencode -o - -t ANSIUTF8 "$(cat /etc/s-box/vm_ws_argogd.txt)" -fi -echo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -red "🚀【 vmess-ws 】节点信息如下 (建议选择3-8-1，设置为CDN优选节点)：" && sleep 2 -echo -echo "分享链接【v2rayn、v2rayng、nekobox、小火箭shadowrocket】" -echo -e "${yellow}vmess://$(echo '{"add":"'$vmadd_are_local'","aid":"0","host":"'$vm_name'","id":"'$uuid'","net":"ws","path":"'$ws_path'","port":"'$vm_port'","ps":"'vm-ws-$hostname'","tls":"","type":"none","v":"2"}' | base64 -w 0)${plain}" -echo -echo "二维码【v2rayn、v2rayng、nekobox、小火箭shadowrocket】" -echo 'vmess://'$(echo '{"add":"'$vmadd_are_local'","aid":"0","host":"'$vm_name'","id":"'$uuid'","net":"ws","path":"'$ws_path'","port":"'$vm_port'","ps":"'vm-ws-$hostname'","tls":"","type":"none","v":"2"}' | base64 -w 0) > /etc/s-box/vm_ws.txt -qrencode -o - -t ANSIUTF8 "$(cat /etc/s-box/vm_ws.txt)" -else -echo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -red "🚀【 vmess-ws-tls 】节点信息如下 (建议选择3-8-1，设置为CDN优选节点)：" && sleep 2 -echo -echo "分享链接【v2rayn、v2rayng、nekobox、小火箭shadowrocket】" -echo -e "${yellow}vmess://$(echo '{"add":"'$vmadd_are_local'","aid":"0","host":"'$vm_name'","id":"'$uuid'","net":"ws","path":"'$ws_path'","port":"'$vm_port'","ps":"'vm-ws-tls-$hostname'","tls":"tls","sni":"'$vm_name'","type":"none","v":"2"}' | base64 -w 0)${plain}" -echo -echo "二维码【v2rayn、v2rayng、nekobox、小火箭shadowrocket】" -echo 'vmess://'$(echo '{"add":"'$vmadd_are_local'","aid":"0","host":"'$vm_name'","id":"'$uuid'","net":"ws","path":"'$ws_path'","port":"'$vm_port'","ps":"'vm-ws-tls-$hostname'","tls":"tls","sni":"'$vm_name'","type":"none","v":"2"}' | base64 -w 0) > /etc/s-box/vm_ws_tls.txt -qrencode -o - -t ANSIUTF8 "$(cat /etc/s-box/vm_ws_tls.txt)" -fi -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -} - -reshy2(){ -echo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -hy2_link="hysteria2://$uuid@$sb_hy2_ip:$hy2_port?&alpn=h3&insecure=$ins_hy2&mport=$hyps&sni=$hy2_name#hy2-$hostname" -echo "$hy2_link" > /etc/s-box/hy2.txt -red "🚀【 Hysteria-2 】节点信息如下：" && sleep 2 -echo -echo "分享链接【v2rayn、nekobox、小火箭shadowrocket】" -echo -e "${yellow}$hy2_link${plain}" -echo -echo "二维码【v2rayn、nekobox、小火箭shadowrocket】" -qrencode -o - -t ANSIUTF8 "$(cat /etc/s-box/hy2.txt)" -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -} - -restu5(){ -echo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -tuic5_link="tuic://$uuid:$uuid@$sb_tu5_ip:$tu5_port?congestion_control=bbr&udp_relay_mode=native&alpn=h3&sni=$tu5_name&allow_insecure=$ins#tu5-$hostname" -echo "$tuic5_link" > /etc/s-box/tuic5.txt -red "🚀【 Tuic-v5 】节点信息如下：" && sleep 2 -echo -echo "分享链接【v2rayn、nekobox、小火箭shadowrocket】" -echo -e "${yellow}$tuic5_link${plain}" -echo -echo "二维码【v2rayn、nekobox、小火箭shadowrocket】" -qrencode -o - -t ANSIUTF8 "$(cat /etc/s-box/tuic5.txt)" -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -} - -sb_client(){ -tls=$(jq -r '.inbounds[1].tls.enabled' /etc/s-box/sb.json) -argopid -if [[ -n $(ps -e | grep -w $ym 2>/dev/null) && -n $(ps -e | grep -w $ls 2>/dev/null) && "$tls" = "false" ]]; then -cat > /etc/s-box/sing_box_client.json < /etc/s-box/clash_meta_client.yaml </dev/null) && -n $(ps -e | grep -w $ls 2>/dev/null) && "$tls" = "false" ]]; then -cat > /etc/s-box/sing_box_client.json < /etc/s-box/clash_meta_client.yaml </dev/null) && ! -n $(ps -e | grep -w $ls 2>/dev/null) && "$tls" = "false" ]]; then -cat > /etc/s-box/sing_box_client.json < /etc/s-box/clash_meta_client.yaml < /etc/s-box/sing_box_client.json < /etc/s-box/clash_meta_client.yaml < /etc/s-box/v2rayn_hy2.yaml < /etc/s-box/v2rayn_tu5.json </dev/null)" -green "当前Argo固定隧道Token：$(cat /etc/s-box/sbargotoken.log 2>/dev/null)" -fi -echo -green "请确保Cloudflare官网 --- Zero Trust --- Networks --- Tunnels已设置完成" -yellow "1：重置/设置Argo固定隧道域名" -yellow "2：停止Argo固定隧道" -yellow "0：返回上层" -readp "请选择【0-2】：" menu -if [ "$menu" = "1" ]; then -cloudflaredargo -readp "输入Argo固定隧道Token: " argotoken -readp "输入Argo固定隧道域名: " argoym -if [[ -n $(ps -e | grep cloudflared) ]]; then -kill -15 $(cat /etc/s-box/sbargoympid.log 2>/dev/null) >/dev/null 2>&1 -fi -echo -if [[ -n "${argotoken}" && -n "${argoym}" ]]; then -nohup setsid /etc/s-box/cloudflared tunnel --no-autoupdate --edge-ip-version auto --protocol http2 run --token ${argotoken} >/dev/null 2>&1 & echo "$!" > /etc/s-box/sbargoympid.log -sleep 20 -fi -echo ${argoym} > /etc/s-box/sbargoym.log -echo ${argotoken} > /etc/s-box/sbargotoken.log -crontab -l > /tmp/crontab.tmp -sed -i '/sbargoympid/d' /tmp/crontab.tmp -echo '@reboot /bin/bash -c "nohup setsid /etc/s-box/cloudflared tunnel --no-autoupdate --edge-ip-version auto --protocol http2 run --token $(cat /etc/s-box/sbargotoken.log 2>/dev/null) >/dev/null 2>&1 & pid=\$! && echo \$pid > /etc/s-box/sbargoympid.log"' >> /tmp/crontab.tmp -crontab /tmp/crontab.tmp -rm /tmp/crontab.tmp -argo=$(cat /etc/s-box/sbargoym.log 2>/dev/null) -blue "Argo固定隧道设置完成，固定域名：$argo" -elif [ "$menu" = "2" ]; then -kill -15 $(cat /etc/s-box/sbargoympid.log 2>/dev/null) >/dev/null 2>&1 -crontab -l > /tmp/crontab.tmp -sed -i '/sbargoympid/d' /tmp/crontab.tmp -crontab /tmp/crontab.tmp -rm /tmp/crontab.tmp -rm -rf /etc/s-box/vm_ws_argogd.txt -green "Argo固定隧道已停止" -else -cfargo_ym -fi -} - -cfargo(){ -echo -yellow "1：重置Argo临时隧道域名" -yellow "2：停止Argo临时隧道" -yellow "0：返回上层" -readp "请选择【0-2】：" menu -if [ "$menu" = "1" ]; then -cloudflaredargo -i=0 -while [ $i -le 4 ]; do let i++ -yellow "第$i次刷新验证Cloudflared Argo临时隧道域名有效性，请稍等……" -if [[ -n $(ps -e | grep cloudflared) ]]; then -kill -15 $(cat /etc/s-box/sbargopid.log 2>/dev/null) >/dev/null 2>&1 -fi -/etc/s-box/cloudflared tunnel --url http://localhost:$(jq -r '.inbounds[1].listen_port' /etc/s-box/sb.json) --edge-ip-version auto --no-autoupdate --protocol http2 > /etc/s-box/argo.log 2>&1 & -echo "$!" > /etc/s-box/sbargopid.log -sleep 20 -if [[ -n $(curl -sL https://$(cat /etc/s-box/argo.log 2>/dev/null | grep -a trycloudflare.com | awk 'NR==2{print}' | awk -F// '{print $2}' | awk '{print $1}')/ -I | awk 'NR==1 && /404|400|503/') ]]; then -argo=$(cat /etc/s-box/argo.log 2>/dev/null | grep -a trycloudflare.com | awk 'NR==2{print}' | awk -F// '{print $2}' | awk '{print $1}') -blue "Argo临时隧道申请成功，域名验证有效：$argo" && sleep 2 -break -fi -if [ $i -eq 5 ]; then -echo -yellow "Argo临时域名验证暂不可用，稍后可能会自动恢复，或者申请重置" && sleep 3 -fi -done -crontab -l > /tmp/crontab.tmp -sed -i '/sbargopid/d' /tmp/crontab.tmp -echo '@reboot /bin/bash -c "/etc/s-box/cloudflared tunnel --url http://localhost:$(jq -r '.inbounds[1].listen_port' /etc/s-box/sb.json) --edge-ip-version auto --no-autoupdate --protocol http2 > /etc/s-box/argo.log 2>&1 & pid=\$! && echo \$pid > /etc/s-box/sbargopid.log"' >> /tmp/crontab.tmp -crontab /tmp/crontab.tmp -rm /tmp/crontab.tmp -elif [ "$menu" = "2" ]; then -kill -15 $(cat /etc/s-box/sbargopid.log 2>/dev/null) >/dev/null 2>&1 -crontab -l > /tmp/crontab.tmp -sed -i '/sbargopid/d' /tmp/crontab.tmp -crontab /tmp/crontab.tmp -rm /tmp/crontab.tmp -rm -rf /etc/s-box/vm_ws_argols.txt -green "Argo临时隧道已停止" -else -cfargo_ym -fi -} - -instsllsingbox(){ -if [[ -f '/etc/systemd/system/sing-box.service' ]]; then -red "已安装Sing-box服务，无法再次安装" && exit -fi -mkdir -p /etc/s-box -v6 -openyn -inssb -inscertificate -insport -sleep 2 -echo -blue "Vless-reality相关key与id将自动生成……" -key_pair=$(/etc/s-box/sing-box generate reality-keypair) -private_key=$(echo "$key_pair" | awk '/PrivateKey/ {print $2}' | tr -d '"') -public_key=$(echo "$key_pair" | awk '/PublicKey/ {print $2}' | tr -d '"') -echo "$public_key" > /etc/s-box/public.key -short_id=$(/etc/s-box/sing-box generate rand --hex 4) -wget -q -O /root/geoip.db https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geoip.db -wget -q -O /root/geosite.db https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geosite.db -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -green "五、自动生成warp-wireguard出站账户" && sleep 2 -warpwg -inssbjsonser && sbservice && sbactive -#curl -sL https://gitlab.com/rwkgyg/sing-box-yg/-/raw/main/version/version | awk -F "更新内容" '{print $1}' | head -n 1 > /etc/s-box/v -curl -sL https://raw.githubusercontent.com/yonggekkk/sing-box-yg/main/version | awk -F "更新内容" '{print $1}' | head -n 1 > /etc/s-box/v -clear -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -lnsb && blue "Sing-box-yg脚本安装成功，脚本快捷方式：sb" && cronsb && sleep 1 -sbshare -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -blue "Hysteria2/Tuic5自定义V2rayN配置、Clash-Meta/Sing-box客户端配置及私有订阅链接，请选择9查看" -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -} - -changeym(){ -[ -f /root/ygkkkca/ca.log ] && ymzs="$yellow切换为域名证书：$(cat /root/ygkkkca/ca.log 2>/dev/null)$plain" || ymzs="$yellow未申请域名证书，无法切换$plain" -vl_na="正在使用的域名：$(jq -r '.inbounds[0].tls.server_name' /etc/s-box/sb.json)。$yellow更换符合reality要求的域名，不支持证书域名$plain" -tls=$(jq -r '.inbounds[1].tls.enabled' /etc/s-box/sb.json) -[[ "$tls" = "false" ]] && vm_na="当前已关闭TLS。$ymzs ${yellow}将开启TLS，Argo隧道将不支持开启${plain}" || vm_na="正在使用的域名证书：$(cat /root/ygkkkca/ca.log 2>/dev/null)。$yellow切换为关闭TLS，Argo隧道将可用$plain" -hy2_sniname=$(jq -r '.inbounds[2].tls.key_path' /etc/s-box/sb.json) -[[ "$hy2_sniname" = '/etc/s-box/private.key' ]] && hy2_na="正在使用自签bing证书。$ymzs" || hy2_na="正在使用的域名证书：$(cat /root/ygkkkca/ca.log 2>/dev/null)。$yellow切换为自签bing证书$plain" -tu5_sniname=$(jq -r '.inbounds[3].tls.key_path' /etc/s-box/sb.json) -[[ "$tu5_sniname" = '/etc/s-box/private.key' ]] && tu5_na="正在使用自签bing证书。$ymzs" || tu5_na="正在使用的域名证书：$(cat /root/ygkkkca/ca.log 2>/dev/null)。$yellow切换为自签bing证书$plain" -echo -green "请选择要切换证书模式的协议" -green "1：vless-reality协议，$vl_na" -if [[ -f /root/ygkkkca/ca.log ]]; then -green "2：vmess-ws协议，$vm_na" -green "3：Hysteria2协议，$hy2_na" -green "4：Tuic5协议，$tu5_na" -else -red "仅支持选项1 (vless-reality)。因未申请域名证书，vmess-ws、Hysteria-2、Tuic-v5的证书切换选项暂不予显示" -fi -green "0：返回上层" -readp "请选择：" menu -if [ "$menu" = "1" ]; then -readp "请输入vless-reality域名 (回车使用www.yahoo.com)：" menu -ym_vl_re=${menu:-www.yahoo.com} -a=$(jq -r '.inbounds[0].tls.server_name' /etc/s-box/sb.json) -b=$(jq -r '.inbounds[0].tls.reality.handshake.server' /etc/s-box/sb.json) -c=$(cat /etc/s-box/vl_reality.txt | cut -d'=' -f5 | cut -d'&' -f1) -sed -i "23s/$a/$ym_vl_re/" /etc/s-box/sb.json -sed -i "27s/$b/$ym_vl_re/" /etc/s-box/sb.json -restartsb -blue "设置完毕，请回到主菜单进入选项9更新节点配置" -elif [ "$menu" = "2" ]; then -if [ -f /root/ygkkkca/ca.log ]; then -a=$(jq -r '.inbounds[1].tls.enabled' /etc/s-box/sb.json) -[ "$a" = "true" ] && a_a=false || a_a=true -b=$(jq -r '.inbounds[1].tls.server_name' /etc/s-box/sb.json) -[ "$b" = "www.bing.com" ] && b_b=$(cat /root/ygkkkca/ca.log) || b_b=$(cat /root/ygkkkca/ca.log) -c=$(jq -r '.inbounds[1].tls.certificate_path' /etc/s-box/sb.json) -d=$(jq -r '.inbounds[1].tls.key_path' /etc/s-box/sb.json) -if [ "$d" = '/etc/s-box/private.key' ]; then -c_c='/root/ygkkkca/cert.crt' -d_d='/root/ygkkkca/private.key' -else -c_c='/etc/s-box/cert.pem' -d_d='/etc/s-box/private.key' -fi -sed -i "55s#$a#$a_a#" /etc/s-box/sb.json -sed -i "56s#$b#$b_b#" /etc/s-box/sb.json -sed -i "57s#$c#$c_c#" /etc/s-box/sb.json -sed -i "58s#$d#$d_d#" /etc/s-box/sb.json -restartsb -blue "设置完毕，请回到主菜单进入选项9更新节点配置" -echo -tls=$(jq -r '.inbounds[1].tls.enabled' /etc/s-box/sb.json) -vm_port=$(jq -r '.inbounds[1].listen_port' /etc/s-box/sb.json) -blue "当前Vmess-ws(tls)的端口：$vm_port" -[[ "$tls" = "false" ]] && blue "切记：可进入主菜单选项4-2，将Vmess-ws端口更改为任意7个80系端口(80、8080、8880、2052、2082、2086、2095)，可实现CDN优选IP" || blue "切记：可进入主菜单选项4-2，将Vmess-ws-tls端口更改为任意6个443系的端口(443、8443、2053、2083、2087、2096)，可实现CDN优选IP" -echo -else -red "当前未申请域名证书，不可切换。主菜单选择12，执行Acme证书申请" && sleep 2 && sb -fi -elif [ "$menu" = "3" ]; then -if [ -f /root/ygkkkca/ca.log ]; then -c=$(jq -r '.inbounds[2].tls.certificate_path' /etc/s-box/sb.json) -d=$(jq -r '.inbounds[2].tls.key_path' /etc/s-box/sb.json) -if [ "$d" = '/etc/s-box/private.key' ]; then -c_c='/root/ygkkkca/cert.crt' -d_d='/root/ygkkkca/private.key' -else -c_c='/etc/s-box/cert.pem' -d_d='/etc/s-box/private.key' -fi -sed -i "79s#$c#$c_c#" /etc/s-box/sb.json -sed -i "80s#$d#$d_d#" /etc/s-box/sb.json -restartsb -blue "设置完毕，请回到主菜单进入选项9更新节点配置" -else -red "当前未申请域名证书，不可切换。主菜单选择12，执行Acme证书申请" && sleep 2 && sb -fi -elif [ "$menu" = "4" ]; then -if [ -f /root/ygkkkca/ca.log ]; then -c=$(jq -r '.inbounds[3].tls.certificate_path' /etc/s-box/sb.json) -d=$(jq -r '.inbounds[3].tls.key_path' /etc/s-box/sb.json) -if [ "$d" = '/etc/s-box/private.key' ]; then -c_c='/root/ygkkkca/cert.crt' -d_d='/root/ygkkkca/private.key' -else -c_c='/etc/s-box/cert.pem' -d_d='/etc/s-box/private.key' -fi -sed -i "102s#$c#$c_c#" /etc/s-box/sb.json -sed -i "103s#$d#$d_d#" /etc/s-box/sb.json -restartsb -blue "设置完毕，请回到主菜单进入选项9更新节点配置" -else -red "当前未申请域名证书，不可切换。主菜单选择12，执行Acme证书申请" && sleep 2 && sb -fi -else -sb -fi -} - -allports(){ -vl_port=$(jq -r '.inbounds[0].listen_port' /etc/s-box/sb.json) -vm_port=$(jq -r '.inbounds[1].listen_port' /etc/s-box/sb.json) -hy2_port=$(jq -r '.inbounds[2].listen_port' /etc/s-box/sb.json) -tu5_port=$(jq -r '.inbounds[3].listen_port' /etc/s-box/sb.json) -hy2_ports=$(iptables -t nat -nL --line 2>/dev/null | grep -w "$hy2_port" | awk '{print $8}' | sed 's/dpts://; s/dpt://' | tr '\n' ',' | sed 's/,$//') -tu5_ports=$(iptables -t nat -nL --line 2>/dev/null | grep -w "$tu5_port" | awk '{print $8}' | sed 's/dpts://; s/dpt://' | tr '\n' ',' | sed 's/,$//') -[[ -n $hy2_ports ]] && hy2zfport="$hy2_ports" || hy2zfport="未添加" -[[ -n $tu5_ports ]] && tu5zfport="$tu5_ports" || tu5zfport="未添加" -} - -changeport(){ -sbactive -allports -fports(){ -readp "\n请输入转发的端口范围 (1000-65535范围内，格式为 小数字:大数字)：" rangeport -if [[ $rangeport =~ ^([1-9][0-9]{3,4}:[1-9][0-9]{3,4})$ ]]; then -b=${rangeport%%:*} -c=${rangeport##*:} -if [[ $b -ge 1000 && $b -le 65535 && $c -ge 1000 && $c -le 65535 && $b -lt $c ]]; then -iptables -t nat -A PREROUTING -p udp --dport $rangeport -j DNAT --to-destination :$port -ip6tables -t nat -A PREROUTING -p udp --dport $rangeport -j DNAT --to-destination :$port -netfilter-persistent save >/dev/null 2>&1 -service iptables save >/dev/null 2>&1 -blue "已确认转发的端口范围：$rangeport" -else -red "输入的端口范围不在有效范围内" && fports -fi -else -red "输入格式不正确。格式为 小数字:大数字" && fports -fi -echo -} -fport(){ -readp "\n请输入一个转发的端口 (1000-65535范围内)：" onlyport -if [[ $onlyport -ge 1000 && $onlyport -le 65535 ]]; then -iptables -t nat -A PREROUTING -p udp --dport $onlyport -j DNAT --to-destination :$port -ip6tables -t nat -A PREROUTING -p udp --dport $onlyport -j DNAT --to-destination :$port -netfilter-persistent save >/dev/null 2>&1 -service iptables save >/dev/null 2>&1 -blue "已确认转发的端口：$onlyport" -else -blue "输入的端口不在有效范围内" && fport -fi -echo -} - -hy2deports(){ -allports -hy2_ports=$(echo "$hy2_ports" | sed 's/,/,/g') -IFS=',' read -ra ports <<< "$hy2_ports" -for port in "${ports[@]}"; do -iptables -t nat -D PREROUTING -p udp --dport $port -j DNAT --to-destination :$hy2_port -ip6tables -t nat -D PREROUTING -p udp --dport $port -j DNAT --to-destination :$hy2_port -done -netfilter-persistent save >/dev/null 2>&1 -service iptables save >/dev/null 2>&1 -} -tu5deports(){ -allports -tu5_ports=$(echo "$tu5_ports" | sed 's/,/,/g') -IFS=',' read -ra ports <<< "$tu5_ports" -for port in "${ports[@]}"; do -iptables -t nat -D PREROUTING -p udp --dport $port -j DNAT --to-destination :$tu5_port -ip6tables -t nat -D PREROUTING -p udp --dport $port -j DNAT --to-destination :$tu5_port -done -netfilter-persistent save >/dev/null 2>&1 -service iptables save >/dev/null 2>&1 -} - -allports -green "Vless-reality与Vmess-ws仅能更改唯一的端口，vmess-ws注意Argo端口重置" -green "Hysteria2与Tuic5支持更改主端口，也支持增删多个转发端口" -green "Hysteria2支持端口跳跃，且与Tuic5都支持多端口复用" -echo -green "1：Vless-reality协议 ${yellow}端口:$vl_port${plain}" -green "2：Vmess-ws协议 ${yellow}端口:$vm_port${plain}" -green "3：Hysteria2协议 ${yellow}端口:$hy2_port 转发多端口: $hy2zfport${plain}" -green "4：Tuic5协议 ${yellow}端口:$tu5_port 转发多端口: $tu5zfport${plain}" -green "0：返回上层" -readp "请选择要变更端口的协议【0-4】：" menu -if [ "$menu" = "1" ]; then -vlport -sed -i "14s/$vl_port/$port_vl_re/" /etc/s-box/sb.json -restartsb -blue "Vless-reality端口更改完成，可选择9输出配置信息" -echo -elif [ "$menu" = "2" ]; then -vmport -sed -i "41s/$vm_port/$port_vm_ws/" /etc/s-box/sb.json -restartsb -blue "Vmess-ws端口更改完成，可选择9输出配置信息" -tls=$(jq -r '.inbounds[1].tls.enabled' /etc/s-box/sb.json) -if [[ "$tls" = "false" ]]; then -blue "切记：如果Argo使用中，临时隧道必须重置，固定隧道的CF设置界面端口必须修改为$port_vm_ws。" -else -blue "当前Argo隧道已不支持开启" -fi -echo -elif [ "$menu" = "3" ]; then -green "1：更换Hysteria2主端口 (原多端口自动重置删除)" -green "2：添加Hysteria2多端口" -green "3：重置删除Hysteria2多端口" -green "0：返回上层" -readp "请选择【0-3】：" menu -if [ "$menu" = "1" ]; then -if [ -n $hy2_ports ]; then -hy2deports -hy2port -sed -i "67s/$hy2_port/$port_hy2/" /etc/s-box/sb.json -restartsb -result_vl_vm_hy_tu && reshy2 && sb_client -else -hy2port -sed -i "67s/$hy2_port/$port_hy2/" /etc/s-box/sb.json -restartsb -result_vl_vm_hy_tu && reshy2 && sb_client -fi -elif [ "$menu" = "2" ]; then -green "1：添加Hysteria2范围端口" -green "2：添加Hysteria2单端口" -green "0：返回上层" -readp "请选择【0-2】：" menu -if [ "$menu" = "1" ]; then -port=$(jq -r '.inbounds[2].listen_port' /etc/s-box/sb.json) -fports && result_vl_vm_hy_tu && sb_client && changeport -elif [ "$menu" = "2" ]; then -port=$(jq -r '.inbounds[2].listen_port' /etc/s-box/sb.json) -fport && result_vl_vm_hy_tu && sb_client && changeport -else -changeport -fi -elif [ "$menu" = "3" ]; then -if [ -n $hy2_ports ]; then -hy2deports && result_vl_vm_hy_tu && sb_client && changeport -else -yellow "Hysteria2未设置多端口" && changeport -fi -else -changeport -fi - -elif [ "$menu" = "4" ]; then -green "1：更换Tuic5主端口 (原多端口自动重置删除)" -green "2：添加Tuic5多端口" -green "3：重置删除Tuic5多端口" -green "0：返回上层" -readp "请选择【0-3】：" menu -if [ "$menu" = "1" ]; then -if [ -n $tu5_ports ]; then -tu5deports -tu5port -sed -i "89s/$tu5_port/$port_tu/" /etc/s-box/sb.json -restartsb -result_vl_vm_hy_tu && restu5 && sb_client -else -tu5port -sed -i "89s/$tu5_port/$port_tu/" /etc/s-box/sb.json -restartsb -result_vl_vm_hy_tu && restu5 && sb_client -fi -elif [ "$menu" = "2" ]; then -green "1：添加Tuic5范围端口" -green "2：添加Tuic5单端口" -green "0：返回上层" -readp "请选择【0-2】：" menu -if [ "$menu" = "1" ]; then -port=$(jq -r '.inbounds[3].listen_port' /etc/s-box/sb.json) -fports && result_vl_vm_hy_tu && sb_client && changeport -elif [ "$menu" = "2" ]; then -port=$(jq -r '.inbounds[3].listen_port' /etc/s-box/sb.json) -fport && result_vl_vm_hy_tu && sb_client && changeport -else -changeport -fi -elif [ "$menu" = "3" ]; then -if [ -n $tu5_ports ]; then -tu5deports && result_vl_vm_hy_tu && sb_client && changeport -else -yellow "Tuic5未设置多端口" && changeport -fi -else -changeport -fi -else -sb -fi -} - -changeuuid(){ -echo -olduuid=$(jq -r '.inbounds[0].users[0].uuid' /etc/s-box/sb.json) -oldvmpath=$(jq -r '.inbounds[1].transport.path' /etc/s-box/sb.json) -green "全协议的uuid (密码)：$olduuid" -green "Vmess的path路径：$oldvmpath" -echo -yellow "1：自定义全协议的uuid (密码)" -yellow "2：自定义Vmess的path路径" -yellow "0：返回上层" -readp "请选择【0-2】：" menu -if [ "$menu" = "1" ]; then -readp "输入uuid，必须是uuid格式，不懂就回车(重置并随机生成uuid)：" menu -if [ -z "$menu" ]; then -uuid=$(/etc/s-box/sing-box generate uuid) -else -uuid=$menu -fi -sed -i "s/$olduuid/$uuid/g" /etc/s-box/sb.json -restartsb -blue "已确认uuid (密码)：${uuid}" -blue "已确认Vmess的path路径：$(jq -r '.inbounds[1].transport.path' /etc/s-box/sb.json)" -elif [ "$menu" = "2" ]; then -readp "输入Vmess的path路径，回车表示不变：" menu -if [ -z "$menu" ]; then -echo -else -vmpath=$menu -sed -i "50s#$oldvmpath#$vmpath#g" /etc/s-box/sb.json -restartsb -fi -blue "已确认Vmess的path路径：$(jq -r '.inbounds[1].transport.path' /etc/s-box/sb.json)" -sbshare -else -changeserv -fi -} - -changeip(){ -v4v6 -chip(){ -rpip=$(jq -r '.outbounds[0].domain_strategy' /etc/s-box/sb.json) -sed -i "111s/$rpip/$rrpip/g" /etc/s-box/sb.json -restartsb -} -readp "1. IPV4优先\n2. IPV6优先\n3. 仅IPV4\n4. 仅IPV6\n请选择：" choose -if [[ $choose == "1" && -n $v4 ]]; then -rrpip="prefer_ipv4" && chip && v4_6="IPV4优先($v4)" -elif [[ $choose == "2" && -n $v6 ]]; then -rrpip="prefer_ipv6" && chip && v4_6="IPV6优先($v6)" -elif [[ $choose == "3" && -n $v4 ]]; then -rrpip="ipv4_only" && chip && v4_6="仅IPV4($v4)" -elif [[ $choose == "4" && -n $v6 ]]; then -rrpip="ipv6_only" && chip && v4_6="仅IPV6($v6)" -else -red "当前不存在你选择的IPV4/IPV6地址，或者输入错误" && changeip -fi -blue "当前已更换的IP优先级：${v4_6}" && sb -} - -tgsbshow(){ -echo -yellow "1：重置/设置Telegram机器人的Token、用户ID" -yellow "0：返回上层" -readp "请选择【0-1】：" menu -if [ "$menu" = "1" ]; then -rm -rf /etc/s-box/sbtg.sh -readp "输入Telegram机器人Token: " token -telegram_token=$token -readp "输入Telegram机器人用户ID: " userid -telegram_id=$userid -echo '#!/bin/bash -export LANG=en_US.UTF-8 - -total_lines=$(wc -l < /etc/s-box/clash_meta_client.yaml) -half=$((total_lines / 2)) -head -n $half /etc/s-box/clash_meta_client.yaml > /etc/s-box/clash_meta_client1.txt -tail -n +$((half + 1)) /etc/s-box/clash_meta_client.yaml > /etc/s-box/clash_meta_client2.txt - -total_lines=$(wc -l < /etc/s-box/sing_box_client.json) -quarter=$((total_lines / 4)) -head -n $quarter /etc/s-box/sing_box_client.json > /etc/s-box/sing_box_client1.txt -tail -n +$((quarter + 1)) /etc/s-box/sing_box_client.json | head -n $quarter > /etc/s-box/sing_box_client2.txt -tail -n +$((2 * quarter + 1)) /etc/s-box/sing_box_client.json | head -n $quarter > /etc/s-box/sing_box_client3.txt -tail -n +$((3 * quarter + 1)) /etc/s-box/sing_box_client.json > /etc/s-box/sing_box_client4.txt - -m1=$(cat /etc/s-box/vl_reality.txt 2>/dev/null) -m2=$(cat /etc/s-box/vm_ws.txt 2>/dev/null) -m3=$(cat /etc/s-box/vm_ws_argols.txt 2>/dev/null) -m3_5=$(cat /etc/s-box/vm_ws_argogd.txt 2>/dev/null) -m4=$(cat /etc/s-box/vm_ws_tls.txt 2>/dev/null) -m5=$(cat /etc/s-box/hy2.txt 2>/dev/null) -m6=$(cat /etc/s-box/tuic5.txt 2>/dev/null) -m7=$(cat /etc/s-box/sing_box_client1.txt 2>/dev/null) -m7_5=$(cat /etc/s-box/sing_box_client2.txt 2>/dev/null) -m7_5_5=$(cat /etc/s-box/sing_box_client3.txt 2>/dev/null) -m7_5_5_5=$(cat /etc/s-box/sing_box_client4.txt 2>/dev/null) -m8=$(cat /etc/s-box/clash_meta_client1.txt 2>/dev/null) -m8_5=$(cat /etc/s-box/clash_meta_client2.txt 2>/dev/null) -m9=$(cat /etc/s-box/sing_box_gitlab.txt 2>/dev/null) -m10=$(cat /etc/s-box/clash_meta_gitlab.txt 2>/dev/null) -m11=$(cat /etc/s-box/jh_sub.txt 2>/dev/null) -message_text_m1=$(echo "$m1") -message_text_m2=$(echo "$m2") -message_text_m3=$(echo "$m3") -message_text_m3_5=$(echo "$m3_5") -message_text_m4=$(echo "$m4") -message_text_m5=$(echo "$m5") -message_text_m6=$(echo "$m6") -message_text_m7=$(echo "$m7") -message_text_m7_5=$(echo "$m7_5") -message_text_m7_5_5=$(echo "$m7_5_5") -message_text_m7_5_5_5=$(echo "$m7_5_5_5") -message_text_m8=$(echo "$m8") -message_text_m8_5=$(echo "$m8_5") -message_text_m9=$(echo "$m9") -message_text_m10=$(echo "$m10") -message_text_m11=$(echo "$m11") -MODE=HTML -URL="https://api.telegram.org/bottelegram_token/sendMessage" -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=🚀【 Vless-reality-vision 分享链接 】：支持v2rayng、nekobox、小火箭shadowrocket "$'"'"'\n\n'"'"'"${message_text_m1}") -if [[ -f /etc/s-box/vm_ws.txt ]]; then -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=🚀【 Vmess-ws 分享链接 】：支持v2rayng、nekobox、小火箭shadowrocket "$'"'"'\n\n'"'"'"${message_text_m2}") -fi -if [[ -f /etc/s-box/vm_ws_argols.txt ]]; then -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=🚀【 Vmess-ws(tls)+Argo临时域名分享链接 】：支持v2rayng、nekobox、小火箭shadowrocket "$'"'"'\n\n'"'"'"${message_text_m3}") -fi -if [[ -f /etc/s-box/vm_ws_argogd.txt ]]; then -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=🚀【 Vmess-ws(tls)+Argo固定域名分享链接 】：支持v2rayng、nekobox、小火箭shadowrocket "$'"'"'\n\n'"'"'"${message_text_m3_5}") -fi -if [[ -f /etc/s-box/vm_ws_tls.txt ]]; then -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=🚀【 Vmess-ws-tls 分享链接 】：支持v2rayng、nekobox、小火箭shadowrocket "$'"'"'\n\n'"'"'"${message_text_m4}") -fi -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=🚀【 Hysteria-2 分享链接 】：支持nekobox、小火箭shadowrocket "$'"'"'\n\n'"'"'"${message_text_m5}") -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=🚀【 Tuic-v5 分享链接 】：支持nekobox、小火箭shadowrocket "$'"'"'\n\n'"'"'"${message_text_m6}") - -if [[ -f /etc/s-box/sing_box_gitlab.txt ]]; then -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=🚀【 Sing-box 订阅链接 】：支持SFA、SFW、SFI "$'"'"'\n\n'"'"'"${message_text_m9}") -else -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=🚀【 Sing-box 配置文件(4段) 】：支持SFA、SFW、SFI "$'"'"'\n\n'"'"'"${message_text_m7}") -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=${message_text_m7_5}") -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=${message_text_m7_5_5}") -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=${message_text_m7_5_5_5}") -fi - -if [[ -f /etc/s-box/clash_meta_gitlab.txt ]]; then -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=🚀【 Clash-meta 订阅链接 】：支持Clash-meta相关客户端 "$'"'"'\n\n'"'"'"${message_text_m10}") -else -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=🚀【 Clash-meta 配置文件(2段) 】：支持Clash-meta相关客户端 "$'"'"'\n\n'"'"'"${message_text_m8}") -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=${message_text_m8_5}") -fi -res=$(timeout 20s curl -s -X POST $URL -d chat_id=telegram_id -d parse_mode=${MODE} --data-urlencode "text=🚀【 四合一协议聚合订阅链接 】：支持v2rayng、nekobox、小火箭shadowrocket "$'"'"'\n\n'"'"'"${message_text_m11}") - -if [ $? == 124 ];then -echo TG_api请求超时,请检查网络是否重启完成并是否能够访问TG -fi -resSuccess=$(echo "$res" | jq -r ".ok") -if [[ $resSuccess = "true" ]]; then -echo "TG推送成功"; -else -echo "TG推送失败，请检查TG机器人Token和ID"; -fi -' > /etc/s-box/sbtg.sh -sed -i "s/telegram_token/$telegram_token/g" /etc/s-box/sbtg.sh -sed -i "s/telegram_id/$telegram_id/g" /etc/s-box/sbtg.sh -green "设置完成！请确保TG机器人已处于激活状态！" -tgnotice -else -changeserv -fi -} - -tgnotice(){ -if [[ -f /etc/s-box/sbtg.sh ]]; then -green "请稍等5秒，TG机器人准备推送……" -sbshare > /dev/null 2>&1 -bash /etc/s-box/sbtg.sh -else -yellow "未设置TG通知功能" -fi -exit -} - -changeserv(){ -sbactive -echo -green "Sing-box配置变更选择如下:" -readp "1：更换Reality域名伪装地址、切换自签证书与Acme域名证书、开关TLS\n2：更换全协议UUID(密码)、Vmess-Path路径\n3：设置Argo临时隧道、固定隧道\n4：切换IPV4或IPV6的代理优先级\n5：设置Telegram推送节点通知\n6：更换Warp-wireguard出站账户、自动优选对端IP\n7：设置Gitlab订阅分享链接\n8：设置所有Vmess节点的CDN优选地址\n0：返回上层\n请选择【0-8】：" menu -if [ "$menu" = "1" ];then -changeym -elif [ "$menu" = "2" ];then -changeuuid -elif [ "$menu" = "3" ];then -cfargo_ym -elif [ "$menu" = "4" ];then -changeip -elif [ "$menu" = "5" ];then -tgsbshow -elif [ "$menu" = "6" ];then -changewg -elif [ "$menu" = "7" ];then -gitlabsub -elif [ "$menu" = "8" ];then -vmesscfadd -else -sb -fi -} - -vmesscfadd(){ -echo -green "推荐使用稳定的世界大厂或组织的官方CDN域名作为CDN优选地址：" -blue "www.visa.com.sg" -blue "www.wto.org" -blue "www.web.com" -echo -yellow "1：自定义Vmess-ws(tls)主协议节点的CDN优选地址" -yellow "2：针对选项1，重置客户端host/sni域名(IP解析到CF上的域名)" -yellow "3：自定义Vmess-ws(tls)-Argo节点的CDN优选地址" -yellow "0：返回上层" -readp "请选择【0-3】：" menu -if [ "$menu" = "1" ]; then -echo -green "请确保VPS的IP已解析到Cloudflare的域名上" -if [[ ! -f /etc/s-box/cfymjx.txt ]] 2>/dev/null; then -readp "输入客户端host/sni域名(IP解析到CF上的域名)：" menu -echo "$menu" > /etc/s-box/cfymjx.txt -fi -echo -readp "输入自定义的优选IP/域名：" menu -echo "$menu" > /etc/s-box/cfvmadd_local.txt -green "设置成功，选择主菜单9进行节点配置更新" && sleep 2 && vmesscfadd -elif [ "$menu" = "2" ]; then -rm -rf /etc/s-box/cfymjx.txt -green "重置成功，可选择1重新设置" && sleep 2 && vmesscfadd -elif [ "$menu" = "3" ]; then -readp "输入自定义的优选IP/域名：" menu -echo "$menu" > /etc/s-box/cfvmadd_argo.txt -green "设置成功，选择主菜单9进行节点配置更新" && sleep 2 && vmesscfadd -else -changeserv -fi -} - -gitlabsub(){ -echo -green "请确保Gitlab官网上已建立项目，已开启推送功能，已获取访问令牌" -yellow "1：重置/设置Gitlab订阅链接" -yellow "0：返回上层" -readp "请选择【0-1】：" menu -if [ "$menu" = "1" ]; then -cd /etc/s-box -readp "输入登录邮箱: " email -readp "输入访问令牌: " token -readp "输入用户名: " userid -readp "输入项目名: " project -echo -green "多台VPS共用一个令牌及项目名，可创建多个分支订阅链接" -green "回车跳过表示不新建，仅使用主分支main订阅链接(首台VPS建议回车跳过)" -readp "新建分支名称: " gitlabml -echo -if [[ -z "$gitlabml" ]]; then -gitlab_ml='' -git_sk=main -rm -rf /etc/s-box/gitlab_ml_ml -else -gitlab_ml=":${gitlabml}" -git_sk="${gitlabml}" -echo "${gitlab_ml}" > /etc/s-box/gitlab_ml_ml -fi -echo "$token" > /etc/s-box/gitlabtoken.txt -rm -rf /etc/s-box/.git -git init >/dev/null 2>&1 -git add sing_box_client.json clash_meta_client.yaml jh_sub.txt >/dev/null 2>&1 -git config --global user.email "${email}" >/dev/null 2>&1 -git config --global user.name "${userid}" >/dev/null 2>&1 -git commit -m "commit_add_$(date +"%F %T")" >/dev/null 2>&1 -branches=$(git branch) -if [[ $branches == *master* ]]; then -git branch -m master main >/dev/null 2>&1 -fi -git remote add origin https://${token}@gitlab.com/${userid}/${project}.git >/dev/null 2>&1 -if [[ $(ls -a | grep '^\.git$') ]]; then -cat > /etc/s-box/gitpush.sh </dev/null)@gitlab.com':" -send "$(cat /etc/s-box/gitlabtoken.txt 2>/dev/null)\r" -interact -EOF -chmod +x gitpush.sh -./gitpush.sh "git push -f origin main${gitlab_ml}" cat /etc/s-box/gitlabtoken.txt >/dev/null 2>&1 -echo "https://gitlab.com/api/v4/projects/${userid}%2F${project}/repository/files/sing_box_client.json/raw?ref=${git_sk}&private_token=${token}" > /etc/s-box/sing_box_gitlab.txt -echo "https://gitlab.com/api/v4/projects/${userid}%2F${project}/repository/files/clash_meta_client.yaml/raw?ref=${git_sk}&private_token=${token}" > /etc/s-box/clash_meta_gitlab.txt -echo "https://gitlab.com/api/v4/projects/${userid}%2F${project}/repository/files/jh_sub.txt/raw?ref=${git_sk}&private_token=${token}" > /etc/s-box/jh_sub_gitlab.txt -clsbshow -else -yellow "设置Gitlab订阅链接失败，请反馈" -fi -cd -else -changeserv -fi -} - -gitlabsubgo(){ -cd /etc/s-box -if [[ $(ls -a | grep '^\.git$') ]]; then -if [ -f /etc/s-box/gitlab_ml_ml ]; then -gitlab_ml=$(cat /etc/s-box/gitlab_ml_ml) -fi -git rm --cached sing_box_client.json clash_meta_client.yaml jh_sub.txt >/dev/null 2>&1 -git commit -m "commit_rm_$(date +"%F %T")" >/dev/null 2>&1 -git add sing_box_client.json clash_meta_client.yaml jh_sub.txt >/dev/null 2>&1 -git commit -m "commit_add_$(date +"%F %T")" >/dev/null 2>&1 -chmod +x gitpush.sh -./gitpush.sh "git push -f origin main${gitlab_ml}" cat /etc/s-box/gitlabtoken.txt >/dev/null 2>&1 -clsbshow -else -yellow "未设置Gitlab订阅链接" -fi -cd -} - -clsbshow(){ -green "当前Sing-box节点已更新并推送" -green "Sing-box订阅链接如下：" -blue "$(cat /etc/s-box/sing_box_gitlab.txt 2>/dev/null)" -echo -green "Sing-box订阅链接二维码如下：" -qrencode -o - -t ANSIUTF8 "$(cat /etc/s-box/sing_box_gitlab.txt 2>/dev/null)" -echo -echo "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -green "当前Clash-meta节点配置已更新并推送" -green "Clash-meta订阅链接如下：" -blue "$(cat /etc/s-box/clash_meta_gitlab.txt 2>/dev/null)" -echo -green "Clash-meta订阅链接二维码如下：" -qrencode -o - -t ANSIUTF8 "$(cat /etc/s-box/clash_meta_gitlab.txt 2>/dev/null)" -echo -echo "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -green "当前聚合订阅节点配置已更新并推送" -green "订阅链接如下：" -blue "$(cat /etc/s-box/jh_sub_gitlab.txt 2>/dev/null)" -echo -yellow "可以在网页上输入订阅链接查看配置内容，如果无配置内容，请自检Gitlab相关设置并重置" -echo -} - -warpwg(){ -warpcode(){ -reg(){ -keypair=$(openssl genpkey -algorithm X25519|openssl pkey -text -noout) -private_key=$(echo "$keypair" | awk '/priv:/{flag=1; next} /pub:/{flag=0} flag' | tr -d '[:space:]' | xxd -r -p | base64) -public_key=$(echo "$keypair" | awk '/pub:/{flag=1} flag' | tr -d '[:space:]' | xxd -r -p | base64) -curl -X POST 'https://api.cloudflareclient.com/v0a2158/reg' -sL --tlsv1.3 \ --H 'CF-Client-Version: a-7.21-0721' -H 'Content-Type: application/json' \ --d \ -'{ -"key":"'${public_key}'", -"tos":"'$(date +"%Y-%m-%dT%H:%M:%S.000Z")'" -}' \ -| python3 -m json.tool | sed "/\"account_type\"/i\ \"private_key\": \"$private_key\"," -} -reserved(){ -reserved_str=$(echo "$warp_info" | grep 'client_id' | cut -d\" -f4) -reserved_hex=$(echo "$reserved_str" | base64 -d | xxd -p) -reserved_dec=$(echo "$reserved_hex" | fold -w2 | while read HEX; do printf '%d ' "0x${HEX}"; done | awk '{print "["$1", "$2", "$3"]"}') -echo -e "{\n \"reserved_dec\": $reserved_dec," -echo -e " \"reserved_hex\": \"0x$reserved_hex\"," -echo -e " \"reserved_str\": \"$reserved_str\"\n}" -} -result() { -echo "$warp_reserved" | grep -P "reserved" | sed "s/ //g" | sed 's/:"/: "/g' | sed 's/:\[/: \[/g' | sed 's/\([0-9]\+\),\([0-9]\+\),\([0-9]\+\)/\1, \2, \3/' | sed 's/^"/ "/g' | sed 's/"$/",/g' -echo "$warp_info" | grep -P "(private_key|public_key|\"v4\": \"172.16.0.2\"|\"v6\": \"2)" | sed "s/ //g" | sed 's/:"/: "/g' | sed 's/^"/ "/g' -echo "}" -} -warp_info=$(reg) -warp_reserved=$(reserved) -result -} -output=$(warpcode) -if ! echo "$output" 2>/dev/null | grep -w "private_key" > /dev/null; then -v6=2606:4700:110:8f20:f22e:2c8d:d8ee:fe7 -pvk=SGU6hx3CJAWGMr6XYoChvnrKV61hxAw2S4VlgBAxzFs= -res=[15,242,244] -else -pvk=$(echo "$output" | sed -n 4p | awk '{print $2}' | tr -d ' "' | sed 's/.$//') -v6=$(echo "$output" | sed -n 7p | awk '{print $2}' | tr -d ' "') -res=$(echo "$output" | sed -n 1p | awk -F":" '{print $NF}' | tr -d ' ' | sed 's/.$//') -fi -blue "Private_key私钥：$pvk" -blue "IPV6地址：$v6" -blue "reserved值：$res" -} - -changewg(){ -wgipv6=$(cat /etc/s-box/sb.json | jq -r '.outbounds[] | select(.type == "wireguard") | .local_address[1] | split("/")[0]') -wgprkey=$(cat /etc/s-box/sb.json | jq '.outbounds[] | select(.type == "wireguard") | .private_key' | tr -d '"') -wgres=$(sed -n '165s/.*\[\(.*\)\].*/\1/p' /etc/s-box/sb.json) -wgip=$(cat /etc/s-box/sb.json | jq '.outbounds[] | select(.type == "wireguard") | .server' | tr -d '"') -wgpo=$(cat /etc/s-box/sb.json | jq '.outbounds[] | select(.type == "wireguard") | .server_port' | tr -d '"') -echo -green "当前warp-wireguard可更换的参数如下：" -green "Private_key私钥：$wgprkey" -green "IPV6地址：$wgipv6" -green "Reserved值：$wgres" -green "对端IP：$wgip:$wgpo" -echo -yellow "1：更换warp-wireguard账户" -yellow "2：自动优选warp-wireguard对端IP" -yellow "0：返回上层" -readp "请选择【0-2】：" menu -if [ "$menu" = "1" ]; then -green "最新随机生成普通warp-wireguard账户如下" -warpwg -echo -readp "输入自定义Private_key：" menu -sed -i "163s#$wgprkey#$menu#g" /etc/s-box/sb.json -readp "输入自定义IPV6地址：" menu -sed -i "161s/$wgipv6/$menu/g" /etc/s-box/sb.json -readp "输入自定义Reserved值 (格式：数字,数字,数字)，如无值则回车跳过：" menu -if [ -z "$menu" ]; then -menu=0,0,0 -fi -sed -i "165s/$wgres/$menu/g" /etc/s-box/sb.json -restartsb -green "设置结束" -green "可以先在选项5-1或5-2使用完整域名分流：cloudflare.com" -green "然后使用任意节点打开网页https://cloudflare.com/cdn-cgi/trace，查看当前WARP账户类型" -elif [ "$menu" = "2" ]; then -green "请稍等……更新中……" -if [ -z $(curl -s4m5 icanhazip.com -k) ]; then -curl -sSL https://gitlab.com/rwkgyg/CFwarp/raw/main/point/endip.sh -o endip.sh && chmod +x endip.sh && (echo -e "1\n2\n") | bash endip.sh > /dev/null 2>&1 -nwgip=$(awk -F, 'NR==2 {print $1}' /root/result.csv 2>/dev/null | grep -o '\[.*\]' | tr -d '[]') -nwgpo=$(awk -F, 'NR==2 {print $1}' /root/result.csv 2>/dev/null | awk -F "]" '{print $2}' | tr -d ':') -else -curl -sSL https://gitlab.com/rwkgyg/CFwarp/raw/main/point/endip.sh -o endip.sh && chmod +x endip.sh && (echo -e "1\n1\n") | bash endip.sh > /dev/null 2>&1 -nwgip=$(awk -F, 'NR==2 {print $1}' /root/result.csv 2>/dev/null | awk -F: '{print $1}') -nwgpo=$(awk -F, 'NR==2 {print $1}' /root/result.csv 2>/dev/null | awk -F: '{print $2}') -fi -a=$(cat /root/result.csv 2>/dev/null | awk -F, '$3!="timeout ms" {print} ' | sed -n '2p' | awk -F ',' '{print $2}') -if [[ -z $a || $a = "100.00%" ]]; then -if [[ -z $(curl -s4m5 icanhazip.com -k) ]]; then -nwgip=2606:4700:d0::a29f:c001 -nwgpo=2408 -else -nwgip=162.159.193.10 -nwgpo=1701 -fi -fi -sed -i "157s#$wgip#$nwgip#g" /etc/s-box/sb.json -sed -i "158s#$wgpo#$nwgpo#g" /etc/s-box/sb.json -restartsb -rm -rf /root/result.csv /root/endip.sh -echo -green "优选完毕，当前使用的对端IP：$nwgip:$nwgpo" -else -changeserv -fi -} - -sbymfl(){ -sbport=$(cat /etc/s-box/sbwpph.log 2>/dev/null | awk '{print $3}' | awk -F":" '{print $NF}') -sbport=${sbport:-'40000'} -resv1=$(curl -s --socks5 localhost:$sbport icanhazip.com) -resv2=$(curl -sx socks5h://localhost:$sbport icanhazip.com) -if [[ -z $resv1 && -z $resv2 ]]; then -warp_s4_ip='Socks5-IPV4未启动，黑名单模式' -warp_s6_ip='Socks5-IPV6未启动，黑名单模式' -else -warp_s4_ip='Socks5-IPV4可用' -warp_s6_ip='Socks5-IPV6自测' -fi -v4v6 -if [[ -z $v4 ]]; then -vps_ipv4='无本地IPV4，黑名单模式' -vps_ipv6="当前IP：$v6" -elif [[ -n $v4 && -n $v6 ]]; then -vps_ipv4="当前IP：$v4" -vps_ipv6="当前IP：$v6" -else -vps_ipv4="当前IP：$v4" -vps_ipv6='无本地IPV6，黑名单模式' -fi -unset swg4 swd4 swd6 swg6 ssd4 ssg4 ssd6 ssg6 sad4 sag4 sad6 sag6 -wd4=$(jq -r '.route.rules[1].domain | join(" ")' /etc/s-box/sb.json) -wg4=$(jq -r '.route.rules[1].geosite | join(" ")' /etc/s-box/sb.json) -if [[ "$wd4" == "yg_kkk" && "$wg4" == "yg_kkk" ]]; then -wfl4="${yellow}【warp出站IPV4可用】未分流${plain}" -else -if [[ "$wd4" != "yg_kkk" ]]; then -swd4="$wd4 " -fi -if [[ "$wg4" != "yg_kkk" ]]; then -swg4=$wg4 -fi -wfl4="${yellow}【warp出站IPV4可用】已分流：$swd4$swg4${plain} " -fi - -wd6=$(jq -r '.route.rules[2].domain | join(" ")' /etc/s-box/sb.json) -wg6=$(jq -r '.route.rules[2].geosite | join(" ")' /etc/s-box/sb.json) -if [[ "$wd6" == "yg_kkk" && "$wg6" == "yg_kkk" ]]; then -wfl6="${yellow}【warp出站IPV6自测】未分流${plain}" -else -if [[ "$wd6" != "yg_kkk" ]]; then -swd6="$wd6 " -fi -if [[ "$wg6" != "yg_kkk" ]]; then -swg6=$wg6 -fi -wfl6="${yellow}【warp出站IPV6自测】已分流：$swd6$swg6${plain} " -fi - -sd4=$(jq -r '.route.rules[3].domain | join(" ")' /etc/s-box/sb.json) -sg4=$(jq -r '.route.rules[3].geosite | join(" ")' /etc/s-box/sb.json) -if [[ "$sd4" == "yg_kkk" && "$sg4" == "yg_kkk" ]]; then -sfl4="${yellow}【$warp_s4_ip】未分流${plain}" -else -if [[ "$sd4" != "yg_kkk" ]]; then -ssd4="$sd4 " -fi -if [[ "$sg4" != "yg_kkk" ]]; then -ssg4=$sg4 -fi -sfl4="${yellow}【$warp_s4_ip】已分流：$ssd4$ssg4${plain} " -fi - -sd6=$(jq -r '.route.rules[4].domain | join(" ")' /etc/s-box/sb.json) -sg6=$(jq -r '.route.rules[4].geosite | join(" ")' /etc/s-box/sb.json) -if [[ "$sd6" == "yg_kkk" && "$sg6" == "yg_kkk" ]]; then -sfl6="${yellow}【$warp_s6_ip】未分流${plain}" -else -if [[ "$sd6" != "yg_kkk" ]]; then -ssd6="$sd6 " -fi -if [[ "$sg6" != "yg_kkk" ]]; then -ssg6=$sg6 -fi -sfl6="${yellow}【$warp_s6_ip】已分流：$ssd6$ssg6${plain} " -fi - -ad4=$(jq -r '.route.rules[5].domain | join(" ")' /etc/s-box/sb.json) -ag4=$(jq -r '.route.rules[5].geosite | join(" ")' /etc/s-box/sb.json) -if [[ "$ad4" == "yg_kkk" && "$ag4" == "yg_kkk" ]]; then -adfl4="${yellow}【$vps_ipv4】未分流${plain}" -else -if [[ "$ad4" != "yg_kkk" ]]; then -sad4="$ad4 " -fi -if [[ "$ag4" != "yg_kkk" ]]; then -sag4=$ag4 -fi -adfl4="${yellow}【$vps_ipv4】已分流：$sad4$sag4${plain} " -fi - -ad6=$(jq -r '.route.rules[6].domain | join(" ")' /etc/s-box/sb.json) -ag6=$(jq -r '.route.rules[6].geosite | join(" ")' /etc/s-box/sb.json) -if [[ "$ad6" == "yg_kkk" && "$ag6" == "yg_kkk" ]]; then -adfl6="${yellow}【$vps_ipv6】未分流${plain}" -else -if [[ "$ad6" != "yg_kkk" ]]; then -sad6="$ad6 " -fi -if [[ "$ag6" != "yg_kkk" ]]; then -sag6=$ag6 -fi -adfl6="${yellow}【$vps_ipv6】已分流：$sad6$sag6${plain} " -fi -} - -changefl(){ -sbactive -green "对所有协议进行统一的域名分流" -yellow "warp-wireguard默认开启，IPV4与IPV6可用 (选项1与2)" -yellow "socks5需要在VPS安装warp官方客户端或者WARP-plus-Socks5-赛风VPN (选项3与4)" -yellow "VPS本地出站分流(选项5与6)" -echo -green "支持完整域名方式与geosite方式" -yellow "注意：" -yellow "一、完整域名方式只能填完整域名 (例：谷歌网站填写：www.google.com)" -yellow "二、geosite方式须填写geosite规则名 (例：奈飞填写：netflix ；迪士尼填写：disney ；ChatGPT填写：openai ；全局且绕过中国填写：geolocation-!cn)" -yellow "三、同一个完整域名或者geosite切勿重复分流" -yellow "四、如该分流通道无网络，所填分流为黑名单模式，即屏蔽该网站访问" -changef -} - -changef(){ -sbymfl -echo -green "1：重置warp-wireguard-ipv4分流域名 $wfl4" -green "2：重置warp-wireguard-ipv6分流域名 $wfl6" -green "3：重置warp-socks5-ipv4分流域名 $sfl4" -green "4：重置warp-socks5-ipv6分流域名 $sfl6" -green "5：重置VPS本地ipv4分流域名 $adfl4" -green "6：重置VPS本地ipv6分流域名 $adfl6" -green "0：返回上层" -echo -readp "请选择【0-6】：" menu - -if [ "$menu" = "1" ]; then -readp "1：使用完整域名方式\n2：使用geosite方式\n3：返回上层\n请选择：" menu -if [ "$menu" = "1" ]; then -readp "每个域名之间留空格，回车跳过表示重置清空warp-wireguard-ipv4的完整域名方式的分流通道)：" w4flym -if [ -z "$w4flym" ]; then -w4flym='"yg_kkk"' -else -w4flym="$(echo "$w4flym" | sed 's/ /","/g')" -w4flym="\"$w4flym\"" -fi -sed -i "184s/.*/$w4flym/" /etc/s-box/sb.json -restartsb -changef -elif [ "$menu" = "2" ]; then -readp "每个域名之间留空格，回车跳过表示重置清空warp-wireguard-ipv4的geosite方式的分流通道)：" w4flym -if [ -z "$w4flym" ]; then -w4flym='"yg_kkk"' -else -w4flym="$(echo "$w4flym" | sed 's/ /","/g')" -w4flym="\"$w4flym\"" -fi -sed -i "187s/.*/$w4flym/" /etc/s-box/sb.json -restartsb -changef -else -changef -fi - -elif [ "$menu" = "2" ]; then -readp "1：使用完整域名方式\n2：使用geosite方式\n3：返回上层\n请选择：" menu -if [ "$menu" = "1" ]; then -readp "每个域名之间留空格，回车跳过表示重置清空warp-wireguard-ipv6的完整域名方式的分流通道：" w6flym -if [ -z "$w6flym" ]; then -w6flym='"yg_kkk"' -else -w6flym="$(echo "$w6flym" | sed 's/ /","/g')" -w6flym="\"$w6flym\"" -fi -sed -i "193s/.*/$w6flym/" /etc/s-box/sb.json -restartsb -changef -elif [ "$menu" = "2" ]; then -readp "每个域名之间留空格，回车跳过表示重置清空warp-wireguard-ipv6的geosite方式的分流通道：" w6flym -if [ -z "$w6flym" ]; then -w6flym='"yg_kkk"' -else -w6flym="$(echo "$w6flym" | sed 's/ /","/g')" -w6flym="\"$w6flym\"" -fi -sed -i "196s/.*/$w6flym/" /etc/s-box/sb.json -restartsb -changef -else -changef -fi - -elif [ "$menu" = "3" ]; then -readp "1：使用完整域名方式\n2：使用geosite方式\n3：返回上层\n请选择：" menu -if [ "$menu" = "1" ]; then -readp "每个域名之间留空格，回车跳过表示重置清空warp-socks5-ipv4的完整域名方式的分流通道：" s4flym -if [ -z "$s4flym" ]; then -s4flym='"yg_kkk"' -else -s4flym="$(echo "$s4flym" | sed 's/ /","/g')" -s4flym="\"$s4flym\"" -fi -sed -i "202s/.*/$s4flym/" /etc/s-box/sb.json -restartsb -changef -elif [ "$menu" = "2" ]; then -readp "每个域名之间留空格，回车跳过表示重置清空warp-socks5-ipv4的geosite方式的分流通道：" s4flym -if [ -z "$s4flym" ]; then -s4flym='"yg_kkk"' -else -s4flym="$(echo "$s4flym" | sed 's/ /","/g')" -s4flym="\"$s4flym\"" -fi -sed -i "205s/.*/$s4flym/" /etc/s-box/sb.json -restartsb -changef -else -changef -fi - -elif [ "$menu" = "4" ]; then -readp "1：使用完整域名方式\n2：使用geosite方式\n3：返回上层\n请选择：" menu -if [ "$menu" = "1" ]; then -readp "每个域名之间留空格，回车跳过表示重置清空warp-socks5-ipv6的完整域名方式的分流通道：" s6flym -if [ -z "$s6flym" ]; then -s6flym='"yg_kkk"' -else -s6flym="$(echo "$s6flym" | sed 's/ /","/g')" -s6flym="\"$s6flym\"" -fi -sed -i "211s/.*/$s6flym/" /etc/s-box/sb.json -restartsb -changef -elif [ "$menu" = "2" ]; then -readp "每个域名之间留空格，回车跳过表示重置清空warp-socks5-ipv6的geosite方式的分流通道：" s6flym -if [ -z "$s6flym" ]; then -s6flym='"yg_kkk"' -else -s6flym="$(echo "$s6flym" | sed 's/ /","/g')" -s6flym="\"$s6flym\"" -fi -sed -i "214s/.*/$s6flym/" /etc/s-box/sb.json -restartsb -changef -else -changef -fi - -elif [ "$menu" = "5" ]; then -readp "1：使用完整域名方式\n2：使用geosite方式\n3：返回上层\n请选择：" menu -if [ "$menu" = "1" ]; then -readp "每个域名之间留空格，回车跳过表示重置清空VPS本地ipv4的完整域名方式的分流通道：" ad4flym -if [ -z "$ad4flym" ]; then -ad4flym='"yg_kkk"' -else -ad4flym="$(echo "$ad4flym" | sed 's/ /","/g')" -ad4flym="\"$ad4flym\"" -fi -sed -i "220s/.*/$ad4flym/" /etc/s-box/sb.json -restartsb -changef -elif [ "$menu" = "2" ]; then -readp "每个域名之间留空格，回车跳过表示重置清空VPS本地ipv4的geosite方式的分流通道：" ad4flym -if [ -z "$ad4flym" ]; then -ad4flym='"yg_kkk"' -else -ad4flym="$(echo "$ad4flym" | sed 's/ /","/g')" -ad4flym="\"$ad4flym\"" -fi -sed -i "223s/.*/$ad4flym/" /etc/s-box/sb.json -restartsb -changef -else -changef -fi - -elif [ "$menu" = "6" ]; then -readp "1：使用完整域名方式\n2：使用geosite方式\n3：返回上层\n请选择：" menu -if [ "$menu" = "1" ]; then -readp "每个域名之间留空格，回车跳过表示重置清空VPS本地ipv6的完整域名方式的分流通道：" ad6flym -if [ -z "$ad6flym" ]; then -ad6flym='"yg_kkk"' -else -ad6flym="$(echo "$ad6flym" | sed 's/ /","/g')" -ad6flym="\"$ad6flym\"" -fi -sed -i "229s/.*/$ad6flym/" /etc/s-box/sb.json -restartsb -changef -elif [ "$menu" = "2" ]; then -readp "每个域名之间留空格，回车跳过表示重置清空VPS本地ipv6的geosite方式的分流通道：" ad6flym -if [ -z "$ad6flym" ]; then -ad6flym='"yg_kkk"' -else -ad6flym="$(echo "$ad6flym" | sed 's/ /","/g')" -ad6flym="\"$ad6flym\"" -fi -sed -i "232s/.*/$ad6flym/" /etc/s-box/sb.json -restartsb -changef -else -changef -fi -else -sb -fi -} - -restartsb(){ -if [[ x"${release}" == x"alpine" ]]; then -rc-service sing-box restart -else -systemctl enable sing-box -systemctl start sing-box -systemctl restart sing-box -fi -} - -stclre(){ -if [[ ! -f '/etc/s-box/sb.json' ]]; then -red "未正常安装Sing-box" && exit -fi -readp "1：重启\n2：关闭\n请选择：" menu -if [ "$menu" = "1" ]; then -restartsb -sbactive -green "Sing-box服务已重启\n" && sleep 3 && sb -elif [ "$menu" = "2" ]; then -if [[ x"${release}" == x"alpine" ]]; then -rc-service sing-box stop -else -systemctl stop sing-box -systemctl disable sing-box -fi -green "Sing-box服务已关闭\n" && sleep 3 && sb -else -stclre -fi -} - -cronsb(){ -uncronsb -crontab -l > /tmp/crontab.tmp -echo "0 1 * * * systemctl restart sing-box;rc-service sing-box restart" >> /tmp/crontab.tmp -crontab /tmp/crontab.tmp -rm /tmp/crontab.tmp -} -uncronsb(){ -crontab -l > /tmp/crontab.tmp -sed -i '/sing-box/d' /tmp/crontab.tmp -sed -i '/sbargopid/d' /tmp/crontab.tmp -sed -i '/sbargoympid/d' /tmp/crontab.tmp -sed -i '/sbwpphid.log/d' /tmp/crontab.tmp -crontab /tmp/crontab.tmp -rm /tmp/crontab.tmp -} - -lnsb(){ -curl -L -o /usr/bin/sb -# --retry 2 --insecure https://raw.githubusercontent.com/yonggekkk/sing-box-yg/main/sb.sh -chmod +x /usr/bin/sb -} - -upsbyg(){ -if [[ ! -f '/usr/bin/sb' ]]; then -red "未正常安装Sing-box-yg" && exit -fi -lnsb -curl -sL https://raw.githubusercontent.com/yonggekkk/sing-box-yg/main/version | awk -F "更新内容" '{print $1}' | head -n 1 > /etc/s-box/v -green "Sing-box-yg安装脚本升级成功" && sleep 5 && sb -} - -lapre(){ -latcore=$(curl -Ls https://data.jsdelivr.com/v1/package/gh/SagerNet/sing-box | grep -Eo '"[0-9.]+",' | sed -n 1p | tr -d '",') -precore=$(curl -Ls https://data.jsdelivr.com/v1/package/gh/SagerNet/sing-box | grep -Eo '"[0-9.]*-[^"]*"' | sed -n 1p | tr -d '",') -inscore=$(/etc/s-box/sing-box version 2>/dev/null | awk '/version/{print $NF}') -} - -upsbcroe(){ -sbactive -lapre -[[ $inscore =~ ^[0-9.]+$ ]] && lat="【已安装v$inscore】" || pre="【已安装v$inscore】" -green "1：升级/切换Sing-box最新正式版 v$latcore ${bblue}${lat}${plain}" -green "2：升级/切换Sing-box最新测试版 v$precore ${bblue}${pre}${plain}" -green "3：切换Sing-box某个正式版或测试版，需指定版本号 (建议1.8.0以上版本)" -green "0：返回上层" -readp "请选择【0-3】：" menu -if [ "$menu" = "1" ]; then -upcore=$(curl -Ls https://data.jsdelivr.com/v1/package/gh/SagerNet/sing-box | grep -Eo '"[0-9.]+",' | sed -n 1p | tr -d '",') -elif [ "$menu" = "2" ]; then -upcore=$(curl -Ls https://data.jsdelivr.com/v1/package/gh/SagerNet/sing-box | grep -Eo '"[0-9.]*-[^"]*"' | sed -n 1p | tr -d '",') -elif [ "$menu" = "3" ]; then -echo -red "注意: 版本号在 https://github.com/SagerNet/sing-box/tags 可查，且有Downloads字样 (建议1.8.0以上版本)" -green "正式版版本号格式：数字.数字.数字 (例：1.8.0)" -green "测试版版本号格式：数字.数字.数字-alpha或rc或beta.数字 (例：1.8.0-alpha或rc或beta.1)" -readp "请输入Sing-box版本号：" upcore -else -sb -fi -if [[ -n $upcore ]]; then -green "开始下载并更新Sing-box内核……请稍等" -sbname="sing-box-$upcore-linux-$cpu" -curl -L -o /etc/s-box/sing-box.tar.gz -# --retry 2 https://github.com/SagerNet/sing-box/releases/download/v$upcore/$sbname.tar.gz -if [[ -f '/etc/s-box/sing-box.tar.gz' ]]; then -tar xzf /etc/s-box/sing-box.tar.gz -C /etc/s-box -mv /etc/s-box/$sbname/sing-box /etc/s-box -rm -rf /etc/s-box/{sing-box.tar.gz,$sbname} -if [[ -f '/etc/s-box/sing-box' ]]; then -chown root:root /etc/s-box/sing-box -chmod +x /etc/s-box/sing-box -restartsb -blue "成功升级/切换 Sing-box 内核版本：$(/etc/s-box/sing-box version | awk '/version/{print $NF}')" && sleep 3 && sb -else -red "下载 Sing-box 内核不完整，安装失败，请重试" && upsbcroe -fi -else -red "下载 Sing-box 内核失败或不存在，请重试" && upsbcroe -fi -else -red "版本号检测出错，请重试" && upsbcroe -fi -} - -unins(){ -if [[ x"${release}" == x"alpine" ]]; then -rc-service sing-box stop -rc-update del sing-box default -rm /etc/init.d/sing-box -f -else -systemctl stop sing-box >/dev/null 2>&1 -systemctl disable sing-box >/dev/null 2>&1 -rm -f /etc/systemd/system/sing-box.service -fi -kill -15 $(cat /etc/s-box/sbargopid.log 2>/dev/null) >/dev/null 2>&1 -kill -15 $(cat /etc/s-box/sbargoympid.log 2>/dev/null) >/dev/null 2>&1 -kill -15 $(cat /etc/s-box/sbwpphid.log 2>/dev/null) >/dev/null 2>&1 -rm -rf /etc/s-box sbyg_update /usr/bin/sb /root/geoip.db /root/geosite.db /root/warpapi /root/warpip -uncronsb -iptables -t nat -F PREROUTING >/dev/null 2>&1 -netfilter-persistent save >/dev/null 2>&1 -service iptables save >/dev/null 2>&1 -green "Sing-box卸载完成！" -blue "欢迎继续使用Sing-box-yg脚本：bash <(curl -Ls https://raw.githubusercontent.com/yonggekkk/sing-box-yg/main/sb.sh)" -echo -} - -sblog(){ -red "退出日志 Ctrl+c" -if [[ x"${release}" == x"alpine" ]]; then -yellow "暂不支持alpine查看日志" -else -#systemctl status sing-box -journalctl -u sing-box.service -o cat -f -fi -} - -sbactive(){ -if [[ ! -f /etc/s-box/sb.json ]]; then -red "未正常启动Sing-box，请卸载重装或者选择10查看运行日志反馈" && exit -fi -} - -sbshare(){ -rm -rf /etc/s-box/jhdy.txt /etc/s-box/vl_reality.txt /etc/s-box/vm_ws_argols.txt /etc/s-box/vm_ws_argogd.txt /etc/s-box/vm_ws.txt /etc/s-box/vm_ws_tls.txt /etc/s-box/hy2.txt /etc/s-box/tuic5.txt -result_vl_vm_hy_tu && resvless && resvmess && reshy2 && restu5 -cat /etc/s-box/vl_reality.txt 2>/dev/null >> /etc/s-box/jhdy.txt -cat /etc/s-box/vm_ws_argols.txt 2>/dev/null >> /etc/s-box/jhdy.txt -cat /etc/s-box/vm_ws_argogd.txt 2>/dev/null >> /etc/s-box/jhdy.txt -cat /etc/s-box/vm_ws.txt 2>/dev/null >> /etc/s-box/jhdy.txt -cat /etc/s-box/vm_ws_tls.txt 2>/dev/null >> /etc/s-box/jhdy.txt -cat /etc/s-box/hy2.txt 2>/dev/null >> /etc/s-box/jhdy.txt -cat /etc/s-box/tuic5.txt 2>/dev/null >> /etc/s-box/jhdy.txt -url=$(cat /etc/s-box/jhdy.txt 2>/dev/null) -baseurl=$(echo -e "$url" | base64 -w 0) -echo "$baseurl" > /etc/s-box/jh_sub.txt -echo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -red "🚀【 四合一聚合订阅 】节点信息如下：" && sleep 2 -echo -echo "分享链接【v2rayn、v2rayng、nekobox、Karing、小火箭shadowrocket】" -echo -e "${yellow}$baseurl${plain}" -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -sb_client -} - -clash_sb_share(){ -sbactive -echo -yellow "1：刷新并查看各协议分享链接、二维码、四合一聚合订阅" -yellow "2：刷新并查看Clash-Meta、Sing-box客户端SFA/SFI/SFW三合一配置、Gitlab私有订阅链接" -yellow "3：刷新并查看Hysteria2、Tuic5的V2rayN客户端自定义配置" -yellow "4：推送最新节点配置信息(选项1+选项2)到Telegram通知" -yellow "0：返回上层" -readp "请选择【0-4】：" menu -if [ "$menu" = "1" ]; then -sbshare -elif [ "$menu" = "2" ]; then -green "请稍等……" -sbshare > /dev/null 2>&1 -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -red "Gitlab订阅链接如下：" -gitlabsubgo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -red "🚀【 vless-reality、vmess-ws、Hysteria2、Tuic5 】Clash-Meta配置文件显示如下：" -red "文件目录 /etc/s-box/clash_meta_client.yaml ，复制自建以yaml文件格式为准" && sleep 2 -echo -cat /etc/s-box/clash_meta_client.yaml -echo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -red "🚀【 vless-reality、vmess-ws、Hysteria2、Tuic5 】SFA/SFI/SFW配置文件显示如下：" -red "安卓SFA、苹果SFI，win电脑官方文件包SFW请到甬哥Github项目自行下载，" -red "文件目录 /etc/s-box/sing_box_client.json ，复制自建以json文件格式为准" && sleep 2 -echo -cat /etc/s-box/sing_box_client.json -echo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -elif [ "$menu" = "3" ]; then -green "请稍等……" -sbshare > /dev/null 2>&1 -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -red "🚀【 Hysteria-2 】自定义V2rayN配置文件显示如下：" -red "文件目录 /etc/s-box/v2rayn_hy2.yaml ，复制自建以yaml文件格式为准" && sleep 2 -echo -cat /etc/s-box/v2rayn_hy2.yaml -echo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -tu5_sniname=$(jq -r '.inbounds[3].tls.key_path' /etc/s-box/sb.json) -if [[ "$tu5_sniname" = '/etc/s-box/private.key' ]]; then -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -red "注意：V2rayN客户端使用自定义Tuic5官方客户端核心时，不支持Tuic5自签证书，仅支持域名证书" && sleep 2 -echo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -else -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -red "🚀【 Tuic-v5 】自定义V2rayN配置文件显示如下：" -red "文件目录 /etc/s-box/v2rayn_tu5.json ，复制自建以json文件格式为准" && sleep 2 -echo -cat /etc/s-box/v2rayn_tu5.json -echo -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -fi -elif [ "$menu" = "4" ]; then -tgnotice -else -sb -fi -} - -acme(){ -bash <(curl -Ls https://gitlab.com/rwkgyg/acme-script/raw/main/acme.sh) -} -cfwarp(){ -bash <(curl -Ls https://gitlab.com/rwkgyg/CFwarp/raw/main/CFwarp.sh) -} -bbr(){ -if [[ $vi =~ lxc|openvz ]]; then -yellow "当前VPS的架构为 $vi，不支持开启原版BBR加速" && sleep 2 && exit -else -green "点击任意键，即可开启BBR加速，ctrl+c退出" -bash <(curl -Ls https://raw.githubusercontent.com/teddysun/across/master/bbr.sh) -fi -} - -showprotocol(){ -allports -sbymfl -tls=$(jq -r '.inbounds[1].tls.enabled' /etc/s-box/sb.json) -if [[ "$tls" = "false" ]]; then -argopid -if [[ -n $(ps -e | grep -w $ym 2>/dev/null) || -n $(ps -e | grep -w $ls 2>/dev/null) ]]; then -vm_zs="TLS关闭" -argoym="已开启" -else -vm_zs="TLS关闭" -argoym="未开启" -fi -else -vm_zs="TLS开启" -argoym="不支持开启" -fi -hy2_sniname=$(jq -r '.inbounds[2].tls.key_path' /etc/s-box/sb.json) -[[ "$hy2_sniname" = '/etc/s-box/private.key' ]] && hy2_zs="自签证书" || hy2_zs="域名证书" -tu5_sniname=$(jq -r '.inbounds[3].tls.key_path' /etc/s-box/sb.json) -[[ "$tu5_sniname" = '/etc/s-box/private.key' ]] && tu5_zs="自签证书" || tu5_zs="域名证书" -echo -e "Sing-box节点关键信息、已分流域名情况如下：" -echo -e "🚀【 Vless-reality 】${yellow}端口:$vl_port Reality域名证书伪装地址：$(jq -r '.inbounds[0].tls.server_name' /etc/s-box/sb.json)${plain}" -if [[ "$tls" = "false" ]]; then -echo -e "🚀【 Vmess-ws 】${yellow}端口:$vm_port 证书形式:$vm_zs Argo状态:$argoym${plain}" -else -echo -e "🚀【 Vmess-ws-tls 】${yellow}端口:$vm_port 证书形式:$vm_zs Argo状态:$argoym${plain}" -fi -echo -e "🚀【 Hysteria-2 】${yellow}端口:$hy2_port 证书形式:$hy2_zs 转发多端口: $hy2zfport${plain}" -echo -e "🚀【 Tuic-v5 】${yellow}端口:$tu5_port 证书形式:$tu5_zs 转发多端口: $tu5zfport${plain}" -if [ "$argoym" = "已开启" ]; then -echo -e "Vmess-UUID：${yellow}$(jq -r '.inbounds[0].users[0].uuid' /etc/s-box/sb.json)${plain}" -echo -e "Vmess-Path：${yellow}$(jq -r '.inbounds[1].transport.path' /etc/s-box/sb.json)${plain}" -if [[ -n $(ps -e | grep -w $ls 2>/dev/null) ]]; then -echo -e "Argo临时域名：${yellow}$(cat /etc/s-box/argo.log 2>/dev/null | grep -a trycloudflare.com | awk 'NR==2{print}' | awk -F// '{print $2}' | awk '{print $1}')${plain}" -fi -if [[ -n $(ps -e | grep -w $ym 2>/dev/null) ]]; then -echo -e "Argo固定域名：${yellow}$(cat /etc/s-box/sbargoym.log 2>/dev/null)${plain}" -fi -fi -echo "------------------------------------------------------------------------------------" -if [[ -n $(ps -e | grep sbwpph) ]]; then -s5port=$(cat /etc/s-box/sbwpph.log 2>/dev/null | awk '{print $3}'| awk -F":" '{print $NF}') -s5gj=$(cat /etc/s-box/sbwpph.log 2>/dev/null | awk '{print $6}') -case "$s5gj" in -AT) showgj="奥地利" ;; -AU) showgj="澳大利亚" ;; -BE) showgj="比利时" ;; -BG) showgj="保加利亚" ;; -CA) showgj="加拿大" ;; -CH) showgj="瑞士" ;; -CZ) showgj="捷克" ;; -DE) showgj="德国" ;; -DK) showgj="丹麦" ;; -EE) showgj="爱沙尼亚" ;; -ES) showgj="西班牙" ;; -FI) showgj="芬兰" ;; -FR) showgj="法国" ;; -GB) showgj="英国" ;; -HR) showgj="克罗地亚" ;; -HU) showgj="匈牙利" ;; -IE) showgj="爱尔兰" ;; -IN) showgj="印度" ;; -IT) showgj="意大利" ;; -JP) showgj="日本" ;; -LV) showgj="拉脱维亚" ;; -NL) showgj="荷兰" ;; -NO) showgj="挪威" ;; -PL) showgj="波兰" ;; -PT) showgj="葡萄牙" ;; -RO) showgj="罗马尼亚" ;; -RS) showgj="塞尔维亚" ;; -SE) showgj="瑞典" ;; -SG) showgj="新加坡" ;; -SK) showgj="斯洛伐克" ;; -US) showgj="美国" ;; -esac -grep -q "country" /etc/s-box/sbwpph.log 2>/dev/null && s5ms="多地区Psiphon代理模式 (端口:$s5port 国家:$showgj)" || s5ms="本地Warp代理模式 (端口:$s5port)" -echo -e "WARP-plus-Socks5状态：$yellow已启动 $s5ms$plain" -else -echo -e "WARP-plus-Socks5状态：$yellow未启动$plain" -fi -echo "------------------------------------------------------------------------------------" -ww4="warp-wireguard-ipv4分流域名：$wfl4" -ww6="warp-wireguard-ipv6分流域名：$wfl6" -ws4="warp-socks5-ipv4分流域名：$sfl4" -ws6="warp-socks5-ipv6分流域名：$sfl6" -l4="VPS本地ipv4分流域名：$adfl4" -l6="VPS本地ipv6分流域名：$adfl6" -ymflzu=("ww4" "ww6" "ws4" "ws6" "l4" "l6") -for ymfl in "${ymflzu[@]}"; do -if [[ ${!ymfl} != *"未"* ]]; then -echo -e "${!ymfl}" -fi -done -if [[ $ww4 = *"未"* && $ww6 = *"未"* && $ws4 = *"未"* && $ws6 = *"未"* && $l4 = *"未"* && $l6 = *"未"* ]] ; then -echo -e "未设置域名分流" -fi -} - -inssbwpph(){ -sbactive -ins(){ -if [ ! -e /etc/s-box/sbwpph ]; then -case $(uname -m) in -aarch64) cpu=arm64;; -x86_64) cpu=amd64;; -esac -curl -L -o /etc/s-box/sbwpph -# --retry 2 --insecure https://raw.githubusercontent.com/yonggekkk/sing-box-yg/main/sbwpph_$cpu -chmod +x /etc/s-box/sbwpph -fi -if [[ -n $(ps -e | grep sbwpph) ]]; then -kill -15 $(cat /etc/s-box/sbwpphid.log 2>/dev/null) >/dev/null 2>&1 -fi -v4v6 -if [[ -z $v4 ]]; then -red "IPV4不存在，确保安装过WARP-IPV4模式" -fi -[[ -n $v6 ]] && sw46=6 || sw46=4 -echo -readp "设置WARP-plus-Socks5端口（回车跳过端口默认40000）：" port -if [[ -z $port ]]; then -port=40000 -until [[ -z $(ss -tunlp | grep -w udp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") && -z $(ss -tunlp | grep -w tcp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") ]] -do -[[ -n $(ss -tunlp | grep -w udp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") || -n $(ss -tunlp | grep -w tcp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") ]] && yellow "\n端口被占用，请重新输入端口" && readp "自定义端口:" port -done -else -until [[ -z $(ss -tunlp | grep -w udp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") && -z $(ss -tunlp | grep -w tcp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") ]] -do -[[ -n $(ss -tunlp | grep -w udp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") || -n $(ss -tunlp | grep -w tcp | awk '{print $5}' | sed 's/.*://g' | grep -w "$port") ]] && yellow "\n端口被占用，请重新输入端口" && readp "自定义端口:" port -done -fi -s5port=$(cat /etc/s-box/sb.json | jq '.outbounds[] | select(.type == "socks") | .server_port' | tr -d '"') -sed -i "127s/$s5port/$port/g" /etc/s-box/sb.json -restartsb -} -unins(){ -kill -15 $(cat /etc/s-box/sbwpphid.log 2>/dev/null) >/dev/null 2>&1 -rm -rf /etc/s-box/sbwpph.log /etc/s-box/sbwpphid.log -crontab -l > /tmp/crontab.tmp -sed -i '/sbwpphid.log/d' /tmp/crontab.tmp -crontab /tmp/crontab.tmp -rm /tmp/crontab.tmp -} -echo -yellow "1：重置启用WARP-plus-Socks5本地Warp代理模式" -yellow "2：重置启用WARP-plus-Socks5多地区Psiphon代理模式" -yellow "3：停止WARP-plus-Socks5代理模式" -yellow "0：返回上层" -readp "请选择【0-3】：" menu -if [ "$menu" = "1" ]; then -ins -nohup setsid /etc/s-box/sbwpph -b 127.0.0.1:$port --gool -$sw46 >/dev/null 2>&1 & echo "$!" > /etc/s-box/sbwpphid.log -green "申请IP中……请稍等……" && sleep 20 -resv1=$(curl -s --socks5 localhost:$port icanhazip.com) -resv2=$(curl -sx socks5h://localhost:$port icanhazip.com) -if [[ -z $resv1 && -z $resv2 ]]; then -red "WARP-plus-Socks5的IP获取失败" && unins && exit -else -echo "/etc/s-box/sbwpph -b 127.0.0.1:$port --gool -$sw46 >/dev/null 2>&1" > /etc/s-box/sbwpph.log -crontab -l > /tmp/crontab.tmp -sed -i '/sbwpphid.log/d' /tmp/crontab.tmp -echo '@reboot /bin/bash -c "nohup setsid $(cat /etc/s-box/sbwpph.log 2>/dev/null) & pid=\$! && echo \$pid > /etc/s-box/sbwpphid.log"' >> /tmp/crontab.tmp -crontab /tmp/crontab.tmp -rm /tmp/crontab.tmp -green "WARP-plus-Socks5的IP获取成功，可进行Socks5代理分流" -fi -elif [ "$menu" = "2" ]; then -ins -echo ' -奥地利（AT） -澳大利亚（AU） -比利时（BE） -保加利亚（BG） -加拿大（CA） -瑞士（CH） -捷克 (CZ) -德国（DE） -丹麦（DK） -爱沙尼亚（EE） -西班牙（ES） -芬兰（FI） -法国（FR） -英国（GB） -克罗地亚（HR） -匈牙利 (HU) -爱尔兰（IE） -印度（IN） -意大利 (IT) -日本（JP） -拉脱维亚（LV） -荷兰（NL） -挪威 (NO) -波兰（PL） -葡萄牙（PT） -罗马尼亚 (RO) -塞尔维亚（RS） -瑞典（SE） -新加坡 (SG) -斯洛伐克（SK） -美国（US） -' -readp "可选择国家地区（输入末尾两个大写字母，如美国，则输入US）：" guojia -nohup setsid /etc/s-box/sbwpph -b 127.0.0.1:$port --cfon --country $guojia -$sw46 >/dev/null 2>&1 & echo "$!" > /etc/s-box/sbwpphid.log -green "申请IP中……请稍等……" && sleep 20 -resv1=$(curl -s --socks5 localhost:$port icanhazip.com) -resv2=$(curl -sx socks5h://localhost:$port icanhazip.com) -if [[ -z $resv1 && -z $resv2 ]]; then -red "WARP-plus-Socks5的IP获取失败，尝试换个国家地区吧" && unins && exit -else -echo "/etc/s-box/sbwpph -b 127.0.0.1:$port --cfon --country $guojia -$sw46 >/dev/null 2>&1" > /etc/s-box/sbwpph.log -crontab -l > /tmp/crontab.tmp -sed -i '/sbwpphid.log/d' /tmp/crontab.tmp -echo '@reboot /bin/bash -c "nohup setsid $(cat /etc/s-box/sbwpph.log 2>/dev/null) & pid=\$! && echo \$pid > /etc/s-box/sbwpphid.log"' >> /tmp/crontab.tmp -crontab /tmp/crontab.tmp -rm /tmp/crontab.tmp -green "WARP-plus-Socks5的IP获取成功，可进行Socks5代理分流" -fi -elif [ "$menu" = "3" ]; then -unins && green "已停止WARP-plus-Socks5代理功能" -else -sb -fi -} - -clear -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -e "${bblue} ░██ ░██ ░██ ██ ██ ░█${plain}█ ░██ ░██ ░██ ░█${red}█ ░██${plain} " -echo -e "${bblue} ░██ ░██ ░██ ░░██${plain} ░██ ░██ ░██ ░██${red} ░██ ░██${plain} " -echo -e "${bblue} ░██ ░██ ░██ ${plain} ░██ ██ ░██ █${red}█ ░██ ██ ${plain} " -echo -e "${bblue} ░██ ░${plain}██ ░██ ██ ░██ ██ ░█${red}█ ██ ░██ ██ ${plain} " -echo -e "${bblue} ░██ ${plain} ░██ ░░██ ░██ ░██ ░${red}██ ░██ ░██ ░██ ${plain} " -echo -e "${bblue} ░█${plain}█ ░██ ██ ██ ░██ ░░${red}██ ░██ ░░██ ░██ ░░██ ${plain} " -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -white "甬哥Github项目 ：github.com/yonggekkk" -white "甬哥Blogger博客 ：ygkkk.blogspot.com" -white "甬哥YouTube频道 ：www.youtube.com/@ygkkk" -white "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -white "Vless-reality-vision、Vmess-ws(tls)+Argo、Hysteria-2、Tuic-v5 四协议共存脚本" -white "脚本快捷方式：sb" -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -green " 1. 一键安装 Sing-box" -green " 2. 删除卸载 Sing-box" -white "----------------------------------------------------------------------------------" -green " 3. 变更配置 【双证书TLS/UUID路径/Argo/IP优先/TG通知/Warp/订阅/CDN优选】" -green " 4. 更改主端口/添加多端口跳跃复用" -green " 5. 三通道域名分流" -green " 6. 关闭/重启 Sing-box" -green " 7. 更新 Sing-box-yg 脚本" -green " 8. 更新/切换/指定 Sing-box 内核版本" -white "----------------------------------------------------------------------------------" -green " 9. 刷新并查看节点 【Clash-Meta/SFA+SFI+SFW三合一配置/订阅链接/推送TG通知】" -green "10. 查看 Sing-box 运行日志" -green "11. 一键原版BBR+FQ加速" -green "12. 管理 Acme 申请域名证书" -green "13. 管理 Warp 查看Netflix/ChatGPT解锁情况" -green "14. 添加 WARP-plus-Socks5 代理模式 【本地Warp/多地区Psiphon-VPN】" -green " 0. 退出脚本" -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -insV=$(cat /etc/s-box/v 2>/dev/null) -latestV=$(curl -sL https://raw.githubusercontent.com/yonggekkk/sing-box-yg/main/version | awk -F "更新内容" '{print $1}' | head -n 1) -if [ -f /etc/s-box/v ]; then -if [ "$insV" = "$latestV" ]; then -echo -e "当前 Sing-box-yg 脚本最新版：${bblue}${insV}${plain} (已安装)" -else -echo -e "当前 Sing-box-yg 脚本版本号：${bblue}${insV}${plain}" -echo -e "检测到最新 Sing-box-yg 脚本版本号：${yellow}${latestV}${plain} (可选择7进行更新)" -echo -e "${yellow}$(curl -sL https://raw.githubusercontent.com/yonggekkk/sing-box-yg/main/version)${plain}" -fi -else -echo -e "当前 Sing-box-yg 脚本版本号：${bblue}${latestV}${plain}" -echo -e "请先选择 1 ，安装 Sing-box-yg 脚本" -fi - -lapre -if [ -f '/etc/s-box/sb.json' ]; then -if [[ $inscore =~ ^[0-9.]+$ ]]; then -if [ "${inscore}" = "${latcore}" ]; then -echo -echo -e "当前 Sing-box 最新正式版内核：${bblue}${inscore}${plain} (已安装)" -echo -echo -e "当前 Sing-box 最新测试版内核：${bblue}${precore}${plain} (可切换)" -else -echo -echo -e "当前 Sing-box 已安装正式版内核：${bblue}${inscore}${plain}" -echo -e "检测到最新 Sing-box 正式版内核：${yellow}${latcore}${plain} (可选择8进行更新)" -echo -echo -e "当前 Sing-box 最新测试版内核：${bblue}${precore}${plain} (可切换)" -fi -else -if [ "${inscore}" = "${precore}" ]; then -echo -echo -e "当前 Sing-box 最新测试版内核：${bblue}${inscore}${plain} (已安装)" -echo -echo -e "当前 Sing-box 最新正式版内核：${bblue}${latcore}${plain} (可切换)" -else -echo -echo -e "当前 Sing-box 已安装测试版内核：${bblue}${inscore}${plain}" -echo -e "检测到最新 Sing-box 测试版内核：${yellow}${precore}${plain} (可选择8进行更新)" -echo -echo -e "当前 Sing-box 最新正式版内核：${bblue}${latcore}${plain} (可切换)" -fi -fi -else -echo -echo -e "当前 Sing-box 最新正式版内核：${bblue}${latcore}${plain}" -echo -e "当前 Sing-box 最新测试版内核：${bblue}${precore}${plain}" -fi -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -e "VPS状态如下：" -echo -e "系统:$blue$op$plain \c";echo -e "内核:$blue$version$plain \c";echo -e "处理器:$blue$cpu$plain \c";echo -e "虚拟化:$blue$vi$plain \c";echo -e "BBR算法:$blue$bbr$plain" -v4v6 -if [[ "$v6" == "2a09"* ]]; then -w6="【WARP】" -fi -if [[ "$v4" == "104.28"* ]]; then -w4="【WARP】" -fi -rpip=$(jq -r '.outbounds[0].domain_strategy' /etc/s-box/sb.json 2>/dev/null) -[[ -z $v4 ]] && showv4='IPV4地址丢失，请切换至IPV6或者重装Sing-box' || showv4=$v4$w4 -[[ -z $v6 ]] && showv6='IPV6地址丢失，请切换至IPV4或者重装Sing-box' || showv6=$v6$w6 -if [[ $rpip = 'prefer_ipv6' ]]; then -v4_6="IPV6优先出站($showv6)" -elif [[ $rpip = 'prefer_ipv4' ]]; then -v4_6="IPV4优先出站($showv4)" -elif [[ $rpip = 'ipv4_only' ]]; then -v4_6="仅IPV4出站($showv4)" -elif [[ $rpip = 'ipv6_only' ]]; then -v4_6="仅IPV6出站($showv6)" -fi -if [[ -z $v4 ]]; then -vps_ipv4='无IPV4' -vps_ipv6="$v6" -elif [[ -n $v4 && -n $v6 ]]; then -vps_ipv4="$v4" -vps_ipv6="$v6" -else -vps_ipv4="$v4" -vps_ipv6='无IPV6' -fi -echo -e "本地IPV4地址：$blue$vps_ipv4$w4$plain 本地IPV6地址：$blue$vps_ipv6$w6$plain" -if [[ -n $rpip ]]; then -echo -e "代理IP优先级：$blue$v4_6$plain" -fi -if [[ x"${release}" == x"alpine" ]]; then -status_cmd="rc-service sing-box status" -status_pattern="started" -else -status_cmd="systemctl status sing-box" -status_pattern="active" -fi -if [[ -n $($status_cmd 2>/dev/null | grep -w "$status_pattern") && -f '/etc/s-box/sb.json' ]]; then -echo -e "Sing-box状态：$blue运行中$plain" -elif [[ -z $($status_cmd 2>/dev/null | grep -w "$status_pattern") && -f '/etc/s-box/sb.json' ]]; then -echo -e "Sing-box状态：$yellow未启动，选择10查看日志并反馈，建议卸载重装Sing-box-yg脚本$plain" -else -echo -e "Sing-box状态：$red未安装$plain" -fi -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -if [ -f '/etc/s-box/sb.json' ]; then -showprotocol -fi -red "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~" -echo -readp "请输入数字【0-14】:" Input -case "$Input" in - 1 ) instsllsingbox;; - 2 ) unins;; - 3 ) changeserv;; - 4 ) changeport;; - 5 ) changefl;; - 6 ) stclre;; - 7 ) upsbyg;; - 8 ) upsbcroe;; - 9 ) clash_sb_share;; -10 ) sblog;; -11 ) bbr;; -12 ) acme;; -13 ) cfwarp;; -14 ) inssbwpph;; - * ) exit -esac