1095 lines
31 KiB
Bash
1095 lines
31 KiB
Bash
#!/bin/bash
|
||
# 定义颜色
|
||
re="\033[0m"
|
||
red="\033[1;91m"
|
||
green="\e[1;32m"
|
||
yellow="\e[1;33m"
|
||
purple="\e[1;35m"
|
||
red() { echo -e "\e[1;91m$1\033[0m"; }
|
||
green() { echo -e "\e[1;32m$1\033[0m"; }
|
||
yellow() { echo -e "\e[1;33m$1\033[0m"; }
|
||
purple() { echo -e "\e[1;35m$1\033[0m"; }
|
||
reading() { read -p "$(red "$1")" "$2"; }
|
||
export LC_ALL=C
|
||
export UUID=${UUID:-''}
|
||
export ARGO_DOMAIN=${ARGO_DOMAIN:-''}
|
||
export ARGO_AUTH=${ARGO_AUTH:-''}
|
||
export vless_port=${vless_port:-''}
|
||
export vmess_port=${vmess_port:-''}
|
||
export hy2_port=${hy2_port:-''}
|
||
export IP=${IP:-''}
|
||
export reym=${reym:-''}
|
||
export reset=${reset:-''}
|
||
|
||
if [[ "$reset" =~ ^[Yy]$ ]]; then
|
||
crontab -l | grep -v "serv00keep" >rmcron
|
||
crontab rmcron >/dev/null 2>&1
|
||
rm rmcron
|
||
bash -c 'ps aux | grep $(whoami) | grep -v "sshd\|bash\|grep" | awk "{print \$2}" | xargs -r kill -9 >/dev/null 2>&1' >/dev/null 2>&1
|
||
find ~ -type f -exec chmod 644 {} \; 2>/dev/null
|
||
find ~ -type d -exec chmod 755 {} \; 2>/dev/null
|
||
find ~ -type f -exec rm -f {} \; 2>/dev/null
|
||
find ~ -type d -empty -exec rmdir {} \; 2>/dev/null
|
||
find ~ -exec rm -rf {} \; 2>/dev/null
|
||
echo "重置系统完成"
|
||
fi
|
||
sleep 2
|
||
USERNAME=$(whoami)
|
||
HOSTNAME=$(hostname)
|
||
[[ "$HOSTNAME" == "s1.ct8.pl" ]] && export WORKDIR="domains/${USERNAME}.ct8.pl/logs" || export WORKDIR="domains/${USERNAME}.serv00.net/logs"
|
||
[ -d "$WORKDIR" ] || (mkdir -p "$WORKDIR" && chmod 777 "$WORKDIR")
|
||
|
||
read_ip(){
|
||
nb=$(echo "$HOSTNAME" | cut -d '.' -f 1 | tr -d 's')
|
||
ym=("$HOSTNAME" "cache$nb.serv00.com" "web$nb.serv00.com")
|
||
rm -rf ip.txt
|
||
for ym in "${ym[@]}"; do
|
||
# 引用frankiejun API
|
||
response=$(curl -s "https://ss.botai.us.kg/api/getip?host=$ym")
|
||
if [[ -z "$response" ]]; then
|
||
for ip in "${ym[@]}"; do
|
||
dig @8.8.8.8 +time=2 +short $ip >> ip.txt
|
||
sleep 1
|
||
done
|
||
break
|
||
else
|
||
echo "$response" | while IFS='|' read -r ip status; do
|
||
if [[ $status == "Accessible" ]]; then
|
||
echo "$ip: 可用" >> ip.txt
|
||
else
|
||
echo "$ip: 被墙 (Argo与CDN回源节点、proxyip依旧有效)" >> ip.txt
|
||
fi
|
||
done
|
||
fi
|
||
done
|
||
if [[ -z "$IP" ]]; then
|
||
IP=$(grep -m 1 "可用" ip.txt | awk -F ':' '{print $1}')
|
||
if [ -z "$IP" ]; then
|
||
IP=$(okip)
|
||
if [ -z "$IP" ]; then
|
||
IP=$(head -n 1 ip.txt | awk -F ':' '{print $1}')
|
||
fi
|
||
fi
|
||
fi
|
||
}
|
||
|
||
okip(){
|
||
IP_LIST=($(devil vhost list | awk '/^[0-9]+/ {print $1}'))
|
||
API_URL="https://status.eooce.com/api"
|
||
IP=""
|
||
THIRD_IP=${IP_LIST[2]}
|
||
RESPONSE=$(curl -s --max-time 2 "${API_URL}/${THIRD_IP}")
|
||
if [[ $(echo "$RESPONSE" | jq -r '.status') == "Available" ]]; then
|
||
IP=$THIRD_IP
|
||
else
|
||
FIRST_IP=${IP_LIST[0]}
|
||
RESPONSE=$(curl -s --max-time 2 "${API_URL}/${FIRST_IP}")
|
||
|
||
if [[ $(echo "$RESPONSE" | jq -r '.status') == "Available" ]]; then
|
||
IP=$FIRST_IP
|
||
else
|
||
IP=${IP_LIST[1]}
|
||
fi
|
||
fi
|
||
echo "$IP"
|
||
}
|
||
|
||
# Generating argo Config
|
||
argo_configure() {
|
||
if [[ $ARGO_AUTH =~ TunnelSecret ]]; then
|
||
echo $ARGO_AUTH > tunnel.json
|
||
cat > tunnel.yml << EOF
|
||
tunnel: $(cut -d\" -f12 <<< "$ARGO_AUTH")
|
||
credentials-file: tunnel.json
|
||
protocol: http2
|
||
|
||
ingress:
|
||
- hostname: $ARGO_DOMAIN
|
||
service: http://localhost:$vmess_port
|
||
originRequest:
|
||
noTLSVerify: true
|
||
- service: http_status:404
|
||
EOF
|
||
fi
|
||
}
|
||
|
||
uuidport(){
|
||
if [[ -z "$UUID" ]]; then
|
||
if [ ! -e UUID.txt ]; then
|
||
UUID=$(uuidgen -r)
|
||
echo "$UUID" > UUID.txt
|
||
else
|
||
UUID=$(<UUID.txt)
|
||
fi
|
||
fi
|
||
if [[ -z "$reym" ]]; then
|
||
reym=$USERNAME.serv00.net
|
||
fi
|
||
if [[ -z "$vless_port" ]] || [[ -z "$vmess_port" ]] || [[ -z "$hy2_port" ]]; then
|
||
port_list=$(devil port list)
|
||
tcp_ports=$(echo "$port_list" | grep -c "tcp")
|
||
udp_ports=$(echo "$port_list" | grep -c "udp")
|
||
|
||
if [[ $tcp_ports -ne 2 || $udp_ports -ne 1 ]]; then
|
||
echo "端口数量不符合要求，正在调整..."
|
||
|
||
if [[ $tcp_ports -gt 2 ]]; then
|
||
tcp_to_delete=$((tcp_ports - 2))
|
||
echo "$port_list" | awk '/tcp/ {print $1, $2}' | head -n $tcp_to_delete | while read port type; do
|
||
devil port del $type $port
|
||
echo "已删除TCP端口: $port"
|
||
done
|
||
fi
|
||
|
||
if [[ $udp_ports -gt 1 ]]; then
|
||
udp_to_delete=$((udp_ports - 1))
|
||
echo "$port_list" | awk '/udp/ {print $1, $2}' | head -n $udp_to_delete | while read port type; do
|
||
devil port del $type $port
|
||
echo "已删除UDP端口: $port"
|
||
done
|
||
fi
|
||
|
||
if [[ $tcp_ports -lt 2 ]]; then
|
||
tcp_ports_to_add=$((2 - tcp_ports))
|
||
tcp_ports_added=0
|
||
while [[ $tcp_ports_added -lt $tcp_ports_to_add ]]; do
|
||
tcp_port=$(shuf -i 10000-65535 -n 1)
|
||
result=$(devil port add tcp $tcp_port 2>&1)
|
||
if [[ $result == *"succesfully"* ]]; then
|
||
echo "已添加TCP端口: $tcp_port"
|
||
if [[ $tcp_ports_added -eq 0 ]]; then
|
||
tcp_port1=$tcp_port
|
||
else
|
||
tcp_port2=$tcp_port
|
||
fi
|
||
tcp_ports_added=$((tcp_ports_added + 1))
|
||
else
|
||
echo "端口 $tcp_port 不可用，尝试其他端口..."
|
||
fi
|
||
done
|
||
fi
|
||
|
||
if [[ $udp_ports -lt 1 ]]; then
|
||
while true; do
|
||
udp_port=$(shuf -i 10000-65535 -n 1)
|
||
result=$(devil port add udp $udp_port 2>&1)
|
||
if [[ $result == *"succesfully"* ]]; then
|
||
echo "已添加UDP端口: $udp_port"
|
||
break
|
||
else
|
||
echo "端口 $udp_port 不可用，尝试其他端口..."
|
||
fi
|
||
done
|
||
fi
|
||
echo "端口已调整完成,将断开ssh连接"
|
||
sleep 3
|
||
devil binexec on >/dev/null 2>&1
|
||
kill -9 $(ps -o ppid= -p $$) >/dev/null 2>&1
|
||
else
|
||
tcp_ports=$(echo "$port_list" | awk '/tcp/ {print $1}')
|
||
tcp_port1=$(echo "$tcp_ports" | sed -n '1p')
|
||
tcp_port2=$(echo "$tcp_ports" | sed -n '2p')
|
||
udp_port=$(echo "$port_list" | awk '/udp/ {print $1}')
|
||
|
||
echo "当前reality的TCP端口: $tcp_port1"
|
||
echo "当前vmess的TCP端口(Argo)：$tcp_port2"
|
||
echo "当前hy2的UDP端口: $udp_port"
|
||
fi
|
||
export vless_port=$tcp_port1
|
||
export vmess_port=$tcp_port2
|
||
export hy2_port=$udp_port
|
||
fi
|
||
}
|
||
|
||
download_and_run_singbox() {
|
||
if [ ! -s sb.txt ] && [ ! -s ag.txt ]; then
|
||
ARCH=$(uname -m) && DOWNLOAD_DIR="." && mkdir -p "$DOWNLOAD_DIR" && FILE_INFO=()
|
||
if [ "$ARCH" == "arm" ] || [ "$ARCH" == "arm64" ] || [ "$ARCH" == "aarch64" ]; then
|
||
FILE_INFO=("https://github.com/eooce/test/releases/download/arm64/sb web" "https://github.com/eooce/test/releases/download/arm64/bot13 bot")
|
||
elif [ "$ARCH" == "amd64" ] || [ "$ARCH" == "x86_64" ] || [ "$ARCH" == "x86" ]; then
|
||
FILE_INFO=("https://github.com/yonggekkk/Cloudflare_vless_trojan/releases/download/serv00/sb web" "https://github.com/yonggekkk/Cloudflare_vless_trojan/releases/download/serv00/server bot")
|
||
else
|
||
echo "Unsupported architecture: $ARCH"
|
||
exit 1
|
||
fi
|
||
|
||
declare -A FILE_MAP
|
||
generate_random_name() {
|
||
local chars=abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
|
||
local name=""
|
||
for i in {1..6}; do
|
||
name="$name${chars:RANDOM%${#chars}:1}"
|
||
done
|
||
echo "$name"
|
||
}
|
||
|
||
download_with_fallback() {
|
||
local URL=$1
|
||
local NEW_FILENAME=$2
|
||
|
||
curl -L -sS --max-time 2 -o "$NEW_FILENAME" "$URL" &
|
||
CURL_PID=$!
|
||
CURL_START_SIZE=$(stat -c%s "$NEW_FILENAME" 2>/dev/null || echo 0)
|
||
|
||
sleep 1
|
||
CURL_CURRENT_SIZE=$(stat -c%s "$NEW_FILENAME" 2>/dev/null || echo 0)
|
||
|
||
if [ "$CURL_CURRENT_SIZE" -le "$CURL_START_SIZE" ]; then
|
||
kill $CURL_PID 2>/dev/null
|
||
wait $CURL_PID 2>/dev/null
|
||
wget -q -O "$NEW_FILENAME" "$URL"
|
||
echo -e "\e[1;32mDownloading $NEW_FILENAME by wget\e[0m"
|
||
else
|
||
wait $CURL_PID
|
||
echo -e "\e[1;32mDownloading $NEW_FILENAME by curl\e[0m"
|
||
fi
|
||
}
|
||
|
||
for entry in "${FILE_INFO[@]}"; do
|
||
URL=$(echo "$entry" | cut -d ' ' -f 1)
|
||
RANDOM_NAME=$(generate_random_name)
|
||
NEW_FILENAME="$DOWNLOAD_DIR/$RANDOM_NAME"
|
||
|
||
if [ -e "$NEW_FILENAME" ]; then
|
||
echo -e "\e[1;32m$NEW_FILENAME already exists, Skipping download\e[0m"
|
||
else
|
||
download_with_fallback "$URL" "$NEW_FILENAME"
|
||
fi
|
||
|
||
chmod +x "$NEW_FILENAME"
|
||
FILE_MAP[$(echo "$entry" | cut -d ' ' -f 2)]="$NEW_FILENAME"
|
||
done
|
||
wait
|
||
fi
|
||
|
||
if [ ! -e private_key.txt ]; then
|
||
output=$(./"$(basename ${FILE_MAP[web]})" generate reality-keypair)
|
||
private_key=$(echo "${output}" | awk '/PrivateKey:/ {print $2}')
|
||
public_key=$(echo "${output}" | awk '/PublicKey:/ {print $2}')
|
||
echo "${private_key}" > private_key.txt
|
||
echo "${public_key}" > public_key.txt
|
||
fi
|
||
private_key=$(<private_key.txt)
|
||
public_key=$(<public_key.txt)
|
||
|
||
openssl ecparam -genkey -name prime256v1 -out "private.key"
|
||
openssl req -new -x509 -days 3650 -key "private.key" -out "cert.pem" -subj "/CN=$USERNAME.serv00.net"
|
||
|
||
nb=$(hostname | cut -d '.' -f 1 | tr -d 's')
|
||
if [ "$nb" == "14" ]; then
|
||
ytb='"jnn-pa.googleapis.com",'
|
||
fi
|
||
|
||
cat > config.json << EOF
|
||
{
|
||
"log": {
|
||
"disabled": true,
|
||
"level": "info",
|
||
"timestamp": true
|
||
},
|
||
"inbounds": [
|
||
{
|
||
"tag": "hysteria-in",
|
||
"type": "hysteria2",
|
||
"listen": "$IP",
|
||
"listen_port": $hy2_port,
|
||
"users": [
|
||
{
|
||
"password": "$UUID"
|
||
}
|
||
],
|
||
"masquerade": "https://www.bing.com",
|
||
"ignore_client_bandwidth":false,
|
||
"tls": {
|
||
"enabled": true,
|
||
"alpn": [
|
||
"h3"
|
||
],
|
||
"certificate_path": "cert.pem",
|
||
"key_path": "private.key"
|
||
}
|
||
},
|
||
{
|
||
"tag": "vless-reality-vesion",
|
||
"type": "vless",
|
||
"listen": "::",
|
||
"listen_port": $vless_port,
|
||
"users": [
|
||
{
|
||
"uuid": "$UUID",
|
||
"flow": "xtls-rprx-vision"
|
||
}
|
||
],
|
||
"tls": {
|
||
"enabled": true,
|
||
"server_name": "$reym",
|
||
"reality": {
|
||
"enabled": true,
|
||
"handshake": {
|
||
"server": "$reym",
|
||
"server_port": 443
|
||
},
|
||
"private_key": "$private_key",
|
||
"short_id": [
|
||
""
|
||
]
|
||
}
|
||
}
|
||
},
|
||
{
|
||
"tag": "vmess-ws-in",
|
||
"type": "vmess",
|
||
"listen": "::",
|
||
"listen_port": $vmess_port,
|
||
"users": [
|
||
{
|
||
"uuid": "$UUID"
|
||
}
|
||
],
|
||
"transport": {
|
||
"type": "ws",
|
||
"path": "$UUID-vm",
|
||
"early_data_header_name": "Sec-WebSocket-Protocol"
|
||
}
|
||
}
|
||
],
|
||
"outbounds": [
|
||
{
|
||
"type": "wireguard",
|
||
"tag": "wg",
|
||
"server": "162.159.192.200",
|
||
"server_port": 4500,
|
||
"local_address": [
|
||
"172.16.0.2/32",
|
||
"2606:4700:110:8f77:1ca9:f086:846c:5f9e/128"
|
||
],
|
||
"private_key": "wIxszdR2nMdA7a2Ul3XQcniSfSZqdqjPb6w6opvf5AU=",
|
||
"peer_public_key": "bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=",
|
||
"reserved": [
|
||
126,
|
||
246,
|
||
173
|
||
]
|
||
},
|
||
{
|
||
"type": "direct",
|
||
"tag": "direct"
|
||
},
|
||
{
|
||
"type": "block",
|
||
"tag": "block"
|
||
}
|
||
],
|
||
"route": {
|
||
"rules": [
|
||
{
|
||
"domain": [
|
||
$ytb
|
||
"oh.my.god"
|
||
],
|
||
"outbound": "wg"
|
||
}
|
||
],
|
||
"final": "direct"
|
||
}
|
||
}
|
||
EOF
|
||
|
||
if ! ps aux | grep '[c]onfig' > /dev/null; then
|
||
ps aux | grep '[c]onfig' | awk '{print $2}' | xargs -r kill -9 > /dev/null 2>&1
|
||
if [ -e "$(basename "${FILE_MAP[web]}")" ]; then
|
||
echo "$(basename "${FILE_MAP[web]}")" > sb.txt
|
||
sbb=$(cat sb.txt)
|
||
nohup ./"$sbb" run -c config.json >/dev/null 2>&1 &
|
||
sleep 5
|
||
if pgrep -x "$sbb" > /dev/null; then
|
||
green "$sbb 主进程已启动"
|
||
else
|
||
red "$sbb 主进程未启动, 重启中..."
|
||
pkill -x "$sbb"
|
||
nohup ./"$sbb" run -c config.json >/dev/null 2>&1 &
|
||
sleep 2
|
||
purple "$sbb 主进程已重启"
|
||
fi
|
||
else
|
||
sbb=$(cat sb.txt)
|
||
nohup ./"$sbb" run -c config.json >/dev/null 2>&1 &
|
||
sleep 5
|
||
if pgrep -x "$sbb" > /dev/null; then
|
||
green "$sbb 主进程已启动"
|
||
else
|
||
red "$sbb 主进程未启动, 重启中..."
|
||
pkill -x "$sbb"
|
||
nohup ./"$sbb" run -c config.json >/dev/null 2>&1 &
|
||
sleep 2
|
||
purple "$sbb 主进程已重启"
|
||
fi
|
||
fi
|
||
else
|
||
green "主进程已启动"
|
||
fi
|
||
cfgo() {
|
||
rm -rf boot.log
|
||
if [ -e "$(basename "${FILE_MAP[bot]}")" ]; then
|
||
echo "$(basename "${FILE_MAP[bot]}")" > ag.txt
|
||
agg=$(cat ag.txt)
|
||
if [[ $ARGO_AUTH =~ ^[A-Z0-9a-z=]{120,250}$ ]]; then
|
||
#args="tunnel --edge-ip-version auto --no-autoupdate --protocol http2 run --token ${ARGO_AUTH}"
|
||
args="tunnel --no-autoupdate run --token ${ARGO_AUTH}"
|
||
elif [[ $ARGO_AUTH =~ TunnelSecret ]]; then
|
||
args="tunnel --edge-ip-version auto --config tunnel.yml run"
|
||
else
|
||
#args="tunnel --edge-ip-version auto --no-autoupdate --protocol http2 --logfile boot.log --loglevel info --url http://localhost:$vmess_port"
|
||
args="tunnel --url http://localhost:$vmess_port --no-autoupdate --logfile boot.log --loglevel info"
|
||
fi
|
||
nohup ./"$agg" $args >/dev/null 2>&1 &
|
||
sleep 10
|
||
if pgrep -x "$agg" > /dev/null; then
|
||
green "$agg Arog进程已启动"
|
||
else
|
||
red "$agg Argo进程未启动, 重启中..."
|
||
pkill -x "$agg"
|
||
nohup ./"$agg" "${args}" >/dev/null 2>&1 &
|
||
sleep 5
|
||
purple "$agg Argo进程已重启"
|
||
fi
|
||
else
|
||
agg=$(cat ag.txt)
|
||
if [[ $ARGO_AUTH =~ ^[A-Z0-9a-z=]{120,250}$ ]]; then
|
||
args="tunnel --edge-ip-version auto --no-autoupdate --protocol http2 run --token ${ARGO_AUTH}"
|
||
elif [[ $ARGO_AUTH =~ TunnelSecret ]]; then
|
||
args="tunnel --edge-ip-version auto --config tunnel.yml run"
|
||
else
|
||
args="tunnel --edge-ip-version auto --no-autoupdate --protocol http2 --logfile boot.log --loglevel info --url http://localhost:$vmess_port"
|
||
fi
|
||
nohup ./"$agg" $args >/dev/null 2>&1 &
|
||
sleep 10
|
||
if pgrep -x "$agg" > /dev/null; then
|
||
green "$agg Arog进程已启动"
|
||
else
|
||
red "$agg Argo进程未启动, 重启中..."
|
||
pkill -x "$agg"
|
||
nohup ./"$agg" "${args}" >/dev/null 2>&1 &
|
||
sleep 5
|
||
purple "$agg Argo进程已重启"
|
||
fi
|
||
fi
|
||
}
|
||
if [ -z "$ARGO_DOMAIN" ] && ! ps aux | grep "[l]ocalhost:$vmess_port" > /dev/null; then
|
||
ps aux | grep '[l]ocalhost' | awk '{print $2}' | xargs -r kill -9 > /dev/null 2>&1
|
||
cfgo
|
||
elif [ -n "$ARGO_DOMAIN" ] && ! ps aux | grep "[t]oken $ARGO_AUTH" > /dev/null; then
|
||
ps aux | grep '[t]oken' | awk '{print $2}' | xargs -r kill -9 > /dev/null 2>&1
|
||
cfgo
|
||
else
|
||
green "Arog进程已启动"
|
||
fi
|
||
sleep 2
|
||
if ! pgrep -x "$(cat sb.txt)" > /dev/null; then
|
||
red "主进程未启动，根据以下情况一一排查"
|
||
yellow "1、网页端权限是否开启"
|
||
yellow "2、网页后台删除所有端口，让脚本自动生成随机可用端口"
|
||
yellow "3、选择y运行一次重置"
|
||
yellow "4、当前Serv00服务器炸了？等会再试"
|
||
red "5、以上都试了，哥直接躺平，交给进程保活，过会再来看"
|
||
fi
|
||
}
|
||
|
||
get_argodomain() {
|
||
if [[ -n $ARGO_AUTH ]]; then
|
||
echo "$ARGO_DOMAIN" > gdym.log
|
||
echo "$ARGO_DOMAIN"
|
||
else
|
||
local retry=0
|
||
local max_retries=6
|
||
local argodomain=""
|
||
while [[ $retry -lt $max_retries ]]; do
|
||
((retry++))
|
||
argodomain=$(grep -oE 'https://[[:alnum:]+\.-]+\.trycloudflare\.com' boot.log 2>/dev/null | sed 's@https://@@')
|
||
if [[ -n $argodomain ]]; then
|
||
break
|
||
fi
|
||
sleep 2
|
||
done
|
||
if [ -z ${argodomain} ]; then
|
||
argodomain="Argo临时域名暂时获取失败，Argo节点暂不可用"
|
||
fi
|
||
echo "$argodomain"
|
||
fi
|
||
}
|
||
|
||
get_links(){
|
||
argodomain=$(get_argodomain)
|
||
echo -e "\e[1;32mArgo域名：\e[1;35m${argodomain}\e[0m\n"
|
||
ISP=$(curl -sL --max-time 5 https://speed.cloudflare.com/meta | awk -F\" '{print $26}' | sed -e 's/ /_/g' || echo "0")
|
||
get_name() { if [ "$HOSTNAME" = "s1.ct8.pl" ]; then SERVER="CT8"; else SERVER=$(echo "$HOSTNAME" | cut -d '.' -f 1); fi; echo "$SERVER"; }
|
||
NAME="$ISP-$(get_name)"
|
||
rm -rf jh.txt
|
||
vl_link="vless://$UUID@$IP:$vless_port?encryption=none&flow=xtls-rprx-vision&security=reality&sni=$reym&fp=chrome&pbk=$public_key&type=tcp&headerType=none#$NAME-reality"
|
||
echo "$vl_link" >> jh.txt
|
||
vmws_link="vmess://$(echo "{ \"v\": \"2\", \"ps\": \"$NAME-vmess-ws\", \"add\": \"$IP\", \"port\": \"$vmess_port\", \"id\": \"$UUID\", \"aid\": \"0\", \"scy\": \"auto\", \"net\": \"ws\", \"type\": \"none\", \"host\": \"\", \"path\": \"/$UUID-vm?ed=2048\", \"tls\": \"\", \"sni\": \"\", \"alpn\": \"\", \"fp\": \"\"}" | base64 -w0)"
|
||
echo "$vmws_link" >> jh.txt
|
||
vmatls_link="vmess://$(echo "{ \"v\": \"2\", \"ps\": \"$NAME-vmess-ws-tls-argo\", \"add\": \"icook.hk\", \"port\": \"8443\", \"id\": \"$UUID\", \"aid\": \"0\", \"scy\": \"auto\", \"net\": \"ws\", \"type\": \"none\", \"host\": \"$argodomain\", \"path\": \"/$UUID-vm?ed=2048\", \"tls\": \"tls\", \"sni\": \"$argodomain\", \"alpn\": \"\", \"fp\": \"\"}" | base64 -w0)"
|
||
echo "$vmatls_link" >> jh.txt
|
||
vma_link="vmess://$(echo "{ \"v\": \"2\", \"ps\": \"$NAME-vmess-ws-argo\", \"add\": \"icook.hk\", \"port\": \"8880\", \"id\": \"$UUID\", \"aid\": \"0\", \"scy\": \"auto\", \"net\": \"ws\", \"type\": \"none\", \"host\": \"$argodomain\", \"path\": \"/$UUID-vm?ed=2048\", \"tls\": \"\"}" | base64 -w0)"
|
||
echo "$vma_link" >> jh.txt
|
||
hy2_link="hysteria2://$UUID@$IP:$hy2_port?sni=www.bing.com&alpn=h3&insecure=1#$NAME-hy2"
|
||
echo "$hy2_link" >> jh.txt
|
||
url=$(cat jh.txt 2>/dev/null)
|
||
baseurl=$(echo -e "$url" | base64 -w 0)
|
||
|
||
cat > sing_box.json <<EOF
|
||
{
|
||
"log": {
|
||
"disabled": false,
|
||
"level": "info",
|
||
"timestamp": true
|
||
},
|
||
"experimental": {
|
||
"clash_api": {
|
||
"external_controller": "127.0.0.1:9090",
|
||
"external_ui": "ui",
|
||
"external_ui_download_url": "",
|
||
"external_ui_download_detour": "",
|
||
"secret": "",
|
||
"default_mode": "Rule"
|
||
},
|
||
"cache_file": {
|
||
"enabled": true,
|
||
"path": "cache.db",
|
||
"store_fakeip": true
|
||
}
|
||
},
|
||
"dns": {
|
||
"servers": [
|
||
{
|
||
"tag": "proxydns",
|
||
"address": "tls://8.8.8.8/dns-query",
|
||
"detour": "select"
|
||
},
|
||
{
|
||
"tag": "localdns",
|
||
"address": "h3://223.5.5.5/dns-query",
|
||
"detour": "direct"
|
||
},
|
||
{
|
||
"tag": "dns_fakeip",
|
||
"address": "fakeip"
|
||
}
|
||
],
|
||
"rules": [
|
||
{
|
||
"outbound": "any",
|
||
"server": "localdns",
|
||
"disable_cache": true
|
||
},
|
||
{
|
||
"clash_mode": "Global",
|
||
"server": "proxydns"
|
||
},
|
||
{
|
||
"clash_mode": "Direct",
|
||
"server": "localdns"
|
||
},
|
||
{
|
||
"rule_set": "geosite-cn",
|
||
"server": "localdns"
|
||
},
|
||
{
|
||
"rule_set": "geosite-geolocation-!cn",
|
||
"server": "proxydns"
|
||
},
|
||
{
|
||
"rule_set": "geosite-geolocation-!cn",
|
||
"query_type": [
|
||
"A",
|
||
"AAAA"
|
||
],
|
||
"server": "dns_fakeip"
|
||
}
|
||
],
|
||
"fakeip": {
|
||
"enabled": true,
|
||
"inet4_range": "198.18.0.0/15",
|
||
"inet6_range": "fc00::/18"
|
||
},
|
||
"independent_cache": true,
|
||
"final": "proxydns"
|
||
},
|
||
"inbounds": [
|
||
{
|
||
"type": "tun",
|
||
"tag": "tun-in",
|
||
"address": [
|
||
"172.19.0.1/30",
|
||
"fd00::1/126"
|
||
],
|
||
"auto_route": true,
|
||
"strict_route": true,
|
||
"sniff": true,
|
||
"sniff_override_destination": true,
|
||
"domain_strategy": "prefer_ipv4"
|
||
}
|
||
],
|
||
"outbounds": [
|
||
{
|
||
"tag": "select",
|
||
"type": "selector",
|
||
"default": "auto",
|
||
"outbounds": [
|
||
"auto",
|
||
"vless-$NAME",
|
||
"vmess-$NAME",
|
||
"hy2-$NAME",
|
||
"vmess-tls-argo-$NAME",
|
||
"vmess-argo-$NAME"
|
||
]
|
||
},
|
||
{
|
||
"type": "vless",
|
||
"tag": "vless-$NAME",
|
||
"server": "$IP",
|
||
"server_port": $vless_port,
|
||
"uuid": "$UUID",
|
||
"packet_encoding": "xudp",
|
||
"flow": "xtls-rprx-vision",
|
||
"tls": {
|
||
"enabled": true,
|
||
"server_name": "$reym",
|
||
"utls": {
|
||
"enabled": true,
|
||
"fingerprint": "chrome"
|
||
},
|
||
"reality": {
|
||
"enabled": true,
|
||
"public_key": "$public_key",
|
||
"short_id": ""
|
||
}
|
||
}
|
||
},
|
||
{
|
||
"server": "$IP",
|
||
"server_port": $vmess_port,
|
||
"tag": "vmess-$NAME",
|
||
"tls": {
|
||
"enabled": false,
|
||
"server_name": "www.bing.com",
|
||
"insecure": false,
|
||
"utls": {
|
||
"enabled": true,
|
||
"fingerprint": "chrome"
|
||
}
|
||
},
|
||
"packet_encoding": "packetaddr",
|
||
"transport": {
|
||
"headers": {
|
||
"Host": [
|
||
"www.bing.com"
|
||
]
|
||
},
|
||
"path": "/$UUID-vm",
|
||
"type": "ws"
|
||
},
|
||
"type": "vmess",
|
||
"security": "auto",
|
||
"uuid": "$UUID"
|
||
},
|
||
|
||
{
|
||
"type": "hysteria2",
|
||
"tag": "hy2-$NAME",
|
||
"server": "$IP",
|
||
"server_port": $hy2_port,
|
||
"password": "$UUID",
|
||
"tls": {
|
||
"enabled": true,
|
||
"server_name": "www.bing.com",
|
||
"insecure": true,
|
||
"alpn": [
|
||
"h3"
|
||
]
|
||
}
|
||
},
|
||
{
|
||
"server": "icook.hk",
|
||
"server_port": 8443,
|
||
"tag": "vmess-tls-argo-$NAME",
|
||
"tls": {
|
||
"enabled": true,
|
||
"server_name": "$argodomain",
|
||
"insecure": false,
|
||
"utls": {
|
||
"enabled": true,
|
||
"fingerprint": "chrome"
|
||
}
|
||
},
|
||
"packet_encoding": "packetaddr",
|
||
"transport": {
|
||
"headers": {
|
||
"Host": [
|
||
"$argodomain"
|
||
]
|
||
},
|
||
"path": "/$UUID-vm",
|
||
"type": "ws"
|
||
},
|
||
"type": "vmess",
|
||
"security": "auto",
|
||
"uuid": "$UUID"
|
||
},
|
||
{
|
||
"server": "icook.hk",
|
||
"server_port": 8880,
|
||
"tag": "vmess-argo-$NAME",
|
||
"tls": {
|
||
"enabled": false,
|
||
"server_name": "$argodomain",
|
||
"insecure": false,
|
||
"utls": {
|
||
"enabled": true,
|
||
"fingerprint": "chrome"
|
||
}
|
||
},
|
||
"packet_encoding": "packetaddr",
|
||
"transport": {
|
||
"headers": {
|
||
"Host": [
|
||
"$argodomain"
|
||
]
|
||
},
|
||
"path": "/$UUID-vm",
|
||
"type": "ws"
|
||
},
|
||
"type": "vmess",
|
||
"security": "auto",
|
||
"uuid": "$UUID"
|
||
},
|
||
{
|
||
"tag": "direct",
|
||
"type": "direct"
|
||
},
|
||
{
|
||
"tag": "auto",
|
||
"type": "urltest",
|
||
"outbounds": [
|
||
"vless-$NAME",
|
||
"vmess-$NAME",
|
||
"hy2-$NAME",
|
||
"vmess-tls-argo-$NAME",
|
||
"vmess-argo-$NAME"
|
||
],
|
||
"url": "https://www.gstatic.com/generate_204",
|
||
"interval": "1m",
|
||
"tolerance": 50,
|
||
"interrupt_exist_connections": false
|
||
}
|
||
],
|
||
"route": {
|
||
"rule_set": [
|
||
{
|
||
"tag": "geosite-geolocation-!cn",
|
||
"type": "remote",
|
||
"format": "binary",
|
||
"url": "https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@sing/geo/geosite/geolocation-!cn.srs",
|
||
"download_detour": "select",
|
||
"update_interval": "1d"
|
||
},
|
||
{
|
||
"tag": "geosite-cn",
|
||
"type": "remote",
|
||
"format": "binary",
|
||
"url": "https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@sing/geo/geosite/geolocation-cn.srs",
|
||
"download_detour": "select",
|
||
"update_interval": "1d"
|
||
},
|
||
{
|
||
"tag": "geoip-cn",
|
||
"type": "remote",
|
||
"format": "binary",
|
||
"url": "https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@sing/geo/geoip/cn.srs",
|
||
"download_detour": "select",
|
||
"update_interval": "1d"
|
||
}
|
||
],
|
||
"auto_detect_interface": true,
|
||
"final": "select",
|
||
"rules": [
|
||
{
|
||
"inbound": "tun-in",
|
||
"action": "sniff"
|
||
},
|
||
{
|
||
"protocol": "dns",
|
||
"action": "hijack-dns"
|
||
},
|
||
{
|
||
"port": 443,
|
||
"network": "udp",
|
||
"action": "reject"
|
||
},
|
||
{
|
||
"clash_mode": "Direct",
|
||
"outbound": "direct"
|
||
},
|
||
{
|
||
"clash_mode": "Global",
|
||
"outbound": "select"
|
||
},
|
||
{
|
||
"rule_set": "geoip-cn",
|
||
"outbound": "direct"
|
||
},
|
||
{
|
||
"rule_set": "geosite-cn",
|
||
"outbound": "direct"
|
||
},
|
||
{
|
||
"ip_is_private": true,
|
||
"outbound": "direct"
|
||
},
|
||
{
|
||
"rule_set": "geosite-geolocation-!cn",
|
||
"outbound": "select"
|
||
}
|
||
]
|
||
},
|
||
"ntp": {
|
||
"enabled": true,
|
||
"server": "time.apple.com",
|
||
"server_port": 123,
|
||
"interval": "30m",
|
||
"detour": "direct"
|
||
}
|
||
}
|
||
EOF
|
||
|
||
cat > clash_meta.yaml <<EOF
|
||
port: 7890
|
||
allow-lan: true
|
||
mode: rule
|
||
log-level: info
|
||
unified-delay: true
|
||
global-client-fingerprint: chrome
|
||
dns:
|
||
enable: true
|
||
listen: :53
|
||
ipv6: true
|
||
enhanced-mode: fake-ip
|
||
fake-ip-range: 198.18.0.1/16
|
||
default-nameserver:
|
||
- 223.5.5.5
|
||
- 8.8.8.8
|
||
nameserver:
|
||
- https://dns.alidns.com/dns-query
|
||
- https://doh.pub/dns-query
|
||
fallback:
|
||
- https://1.0.0.1/dns-query
|
||
- tls://dns.google
|
||
fallback-filter:
|
||
geoip: true
|
||
geoip-code: CN
|
||
ipcidr:
|
||
- 240.0.0.0/4
|
||
|
||
proxies:
|
||
- name: vless-reality-vision-$NAME
|
||
type: vless
|
||
server: $IP
|
||
port: $vless_port
|
||
uuid: $UUID
|
||
network: tcp
|
||
udp: true
|
||
tls: true
|
||
flow: xtls-rprx-vision
|
||
servername: $reym
|
||
reality-opts:
|
||
public-key: $public_key
|
||
client-fingerprint: chrome
|
||
|
||
- name: vmess-ws-$NAME
|
||
type: vmess
|
||
server: $IP
|
||
port: $vmess_port
|
||
uuid: $UUID
|
||
alterId: 0
|
||
cipher: auto
|
||
udp: true
|
||
tls: false
|
||
network: ws
|
||
servername: www.bing.com
|
||
ws-opts:
|
||
path: "/$UUID-vm"
|
||
headers:
|
||
Host: www.bing.com
|
||
|
||
- name: hysteria2-$NAME
|
||
type: hysteria2
|
||
server: $IP
|
||
port: $hy2_port
|
||
password: $UUID
|
||
alpn:
|
||
- h3
|
||
sni: www.bing.com
|
||
skip-cert-verify: true
|
||
fast-open: true
|
||
|
||
- name: vmess-tls-argo-$NAME
|
||
type: vmess
|
||
server: icook.hk
|
||
port: 8443
|
||
uuid: $UUID
|
||
alterId: 0
|
||
cipher: auto
|
||
udp: true
|
||
tls: true
|
||
network: ws
|
||
servername: $argodomain
|
||
ws-opts:
|
||
path: "/$UUID-vm"
|
||
headers:
|
||
Host: $argodomain
|
||
|
||
- name: vmess-argo-$NAME
|
||
type: vmess
|
||
server: icook.hk
|
||
port: 8880
|
||
uuid: $UUID
|
||
alterId: 0
|
||
cipher: auto
|
||
udp: true
|
||
tls: false
|
||
network: ws
|
||
servername: $argodomain
|
||
ws-opts:
|
||
path: "/$UUID-vm"
|
||
headers:
|
||
Host: $argodomain
|
||
|
||
proxy-groups:
|
||
- name: 负载均衡
|
||
type: load-balance
|
||
url: https://www.gstatic.com/generate_204
|
||
interval: 300
|
||
strategy: round-robin
|
||
proxies:
|
||
- vless-reality-vision-$NAME
|
||
- vmess-ws-$NAME
|
||
- hysteria2-$NAME
|
||
- vmess-tls-argo-$NAME
|
||
- vmess-argo-$NAME
|
||
|
||
- name: 自动选择
|
||
type: url-test
|
||
url: https://www.gstatic.com/generate_204
|
||
interval: 300
|
||
tolerance: 50
|
||
proxies:
|
||
- vless-reality-vision-$NAME
|
||
- vmess-ws-$NAME
|
||
- hysteria2-$NAME
|
||
- vmess-tls-argo-$NAME
|
||
- vmess-argo-$NAME
|
||
|
||
- name: 🌍选择代理节点
|
||
type: select
|
||
proxies:
|
||
- 负载均衡
|
||
- 自动选择
|
||
- DIRECT
|
||
- vless-reality-vision-$NAME
|
||
- vmess-ws-$NAME
|
||
- hysteria2-$NAME
|
||
- vmess-tls-argo-$NAME
|
||
- vmess-argo-$NAME
|
||
rules:
|
||
- GEOIP,LAN,DIRECT
|
||
- GEOIP,CN,DIRECT
|
||
- MATCH,🌍选择代理节点
|
||
|
||
EOF
|
||
|
||
sibsub=$(cat sing_box.json 2>/dev/null)
|
||
clmsub=$(cat clash_meta.yaml 2>/dev/null)
|
||
echo
|
||
sleep 2
|
||
cat > list.txt <<EOF
|
||
=================================================================================================
|
||
|
||
一、Vless-reality分享链接如下：
|
||
$vl_link
|
||
|
||
注意：如果之前输入的reality域名为CF域名，将激活以下功能：
|
||
可应用在 https://github.com/yonggekkk/Cloudflare_vless_trojan 项目中创建CF vless/trojan 节点
|
||
1、Proxyip(带端口)信息如下：
|
||
方式一全局应用：设置变量名：proxyip 设置变量值：$IP:$vless_port
|
||
方式二单节点应用：path路径改为：/pyip=$IP:$vless_port
|
||
CF节点的TLS可开可关
|
||
CF节点落地到CF网站的地区为：$IP所在地区
|
||
|
||
2、非标端口反代IP信息如下：
|
||
客户端优选IP地址为：$IP，端口：$vless_port
|
||
CF节点的TLS必须开启
|
||
CF节点落地到非CF网站的地区为：$IP所在地区
|
||
|
||
注：如果serv00的IP被墙，proxyip依旧有效，但用于客户端地址与端口的非标端口反代IP将不可用
|
||
注：可能有大佬会扫Serv00的反代IP作为其共享IP库或者出售，请慎重将reality域名设置为CF域名
|
||
-------------------------------------------------------------------------------------------------
|
||
|
||
|
||
二、Vmess-ws分享链接三形态如下：
|
||
|
||
1、Vmess-ws主节点分享链接如下：
|
||
(该节点默认不支持CDN，如果设置为CDN回源(需域名)：客户端地址可自行修改优选IP/域名，7个80系端口随便换，被墙依旧能用！)
|
||
$vmws_link
|
||
|
||
Argo域名：${argodomain}
|
||
如果上面Argo临时域名未生成，以下 2 与 3 的Argo节点将不可用 (打开Argo固定/临时域名网页，显示HTTP ERROR 404说明正常可用)
|
||
|
||
2、Vmess-ws-tls_Argo分享链接如下：
|
||
(该节点为CDN优选IP节点，客户端地址可自行修改优选IP/域名，6个443系端口随便换，被墙依旧能用！)
|
||
$vmatls_link
|
||
|
||
3、Vmess-ws_Argo分享链接如下：
|
||
(该节点为CDN优选IP节点，客户端地址可自行修改优选IP/域名，7个80系端口随便换，被墙依旧能用！)
|
||
$vma_link
|
||
-------------------------------------------------------------------------------------------------
|
||
|
||
|
||
三、HY2分享链接如下：
|
||
$hy2_link
|
||
-------------------------------------------------------------------------------------------------
|
||
|
||
|
||
四、以上五个节点的聚合通用分享链接如下：
|
||
$baseurl
|
||
-------------------------------------------------------------------------------------------------
|
||
EOF
|
||
cat list.txt
|
||
echo "-------------------------------------------------------------------------------------------------"
|
||
sleep 2
|
||
echo
|
||
echo "五、查看Clash-meta订阅配置文件"
|
||
cat clash_meta.yaml
|
||
echo "-------------------------------------------------------------------------------------------------"
|
||
sleep 2
|
||
echo
|
||
echo "六、查看Sing-box订阅配置文件"
|
||
cat sing_box.json
|
||
echo
|
||
echo "-------------------------------------------------------------------------------------------------"
|
||
echo "================================================================================================="
|
||
echo
|
||
sleep 2
|
||
rm -rf sb.log core tunnel.yml tunnel.json fake_useragent_0.2.0.json
|
||
}
|
||
|
||
install_singbox() {
|
||
cd $WORKDIR
|
||
read_ip
|
||
argo_configure
|
||
uuidport
|
||
download_and_run_singbox
|
||
get_links
|
||
}
|
||
install_singbox
|