mirror of https://github.com/wulabing/Xray_onekey
wulabing
parent
df10c81b31
commit
0d8a89d654
|
|
@ -0,0 +1,35 @@
|
|||
server
|
||||
{
|
||||
listen 80;
|
||||
server_name xxx;
|
||||
return 301 https://$http_host$request_uri;
|
||||
|
||||
access_log /dev/null;
|
||||
error_log /dev/null;
|
||||
}
|
||||
|
||||
server
|
||||
{
|
||||
listen 127.0.0.1:60000 proxy_protocol;
|
||||
listen 127.0.0.1:60001 http2 proxy_protocol;
|
||||
server_name xxx;
|
||||
index index.html index.htm index.php default.php default.htm default.html;
|
||||
root /www/xray_web;
|
||||
add_header Strict-Transport-Security "max-age=63072000" always;
|
||||
|
||||
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
|
||||
{
|
||||
expires 30d;
|
||||
error_log off;
|
||||
access_log /dev/null;
|
||||
}
|
||||
|
||||
location ~ .*\.(js|css)?$
|
||||
{
|
||||
expires 12h;
|
||||
error_log off;
|
||||
access_log /dev/null;
|
||||
}
|
||||
access_log /dev/null;
|
||||
error_log /dev/null;
|
||||
}
|
||||
|
|
@ -0,0 +1,61 @@
|
|||
{
|
||||
"log": {
|
||||
"access": "/var/log/xray/access.log",
|
||||
"error": "/var/log/xray/error.log",
|
||||
"loglevel": "warning"
|
||||
},
|
||||
"inbounds": [
|
||||
{
|
||||
"port": 443,
|
||||
"protocol": "vless",
|
||||
"settings": {
|
||||
"clients": [
|
||||
{
|
||||
"id": "xx",
|
||||
"flow": "xtls-rprx-direct"
|
||||
}
|
||||
],
|
||||
"decryption": "none",
|
||||
"fallbacks": [
|
||||
{
|
||||
"dest": 60000,
|
||||
"alpn": "http/1.1",
|
||||
"xver": 1
|
||||
},
|
||||
{
|
||||
"dest": 60001,
|
||||
"alpn": "h2",
|
||||
"xver": 1
|
||||
}
|
||||
]
|
||||
},
|
||||
"streamSettings": {
|
||||
"network": "tcp",
|
||||
"security": "xtls",
|
||||
"xtlsSettings": {
|
||||
"allowInsecure": false,
|
||||
"minVersion": "1.2",
|
||||
"certificates": [
|
||||
{
|
||||
"certificateFile": "/ssl/xray.crt",
|
||||
"keyFile": "/ssl/xray.key",
|
||||
"ocspStapling": 3600
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"sniffing": {
|
||||
"enabled": true,
|
||||
"destOverride": [
|
||||
"http",
|
||||
"tls"
|
||||
]
|
||||
}
|
||||
}
|
||||
],
|
||||
"outbounds": [
|
||||
{
|
||||
"protocol": "freedom"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
|
@ -0,0 +1,347 @@
|
|||
#!/usr/bin/env bash
|
||||
|
||||
cd "$(
|
||||
cd "$(dirname "$0")" || exit
|
||||
pwd
|
||||
)" || exit
|
||||
|
||||
# 字体颜色配置
|
||||
Green="\033[32m"
|
||||
Red="\033[31m"
|
||||
Yellow="\033[33m"
|
||||
Font="\033[0m"
|
||||
GreenBG="\033[42;37m"
|
||||
RedBG="\033[41;37m"
|
||||
OK="${Green}[OK]${Font}"
|
||||
ERROR="${Red}[ERROR]${Font}"
|
||||
|
||||
# 变量
|
||||
shell_version="0.1"
|
||||
github_branch="xray"
|
||||
version_cmp="/tmp/version_cmp.tmp"
|
||||
xray_conf_dir="/usr/local/etc/xray"
|
||||
xray_info_file="$HOME/v2ray_info.inf"
|
||||
|
||||
VERSION=$(echo "${VERSION}" | awk -F "[()]" '{print $2}')
|
||||
|
||||
function print_ok() {
|
||||
echo -e "${OK} ${GreenBG} $1 ${Font}"
|
||||
}
|
||||
|
||||
function print_error() {
|
||||
echo -e "${ERROR} ${RedBG} $1 ${Font}"
|
||||
}
|
||||
|
||||
function is_root() {
|
||||
if [[ 0 == "$UID" ]]; then
|
||||
print_ok "当前用户是root用户，开始安装流程"
|
||||
else
|
||||
print_error "当前用户不是root用户，请切换到root用户后重新执行脚本"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
judge() {
|
||||
if [[ 0 -eq $? ]]; then
|
||||
print_ok "$1 完成"
|
||||
sleep 1
|
||||
else
|
||||
print_error "$1 失败"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
function system_check() {
|
||||
source '/etc/os-release'
|
||||
|
||||
if [[ "${ID}" == "centos" && ${VERSION_ID} -ge 7 ]]; then
|
||||
print_ok "当前系统为 Centos ${VERSION_ID} ${VERSION}"
|
||||
INS="yum install -y"
|
||||
elif [[ "${ID}" == "debian" && ${VERSION_ID} -ge 9 ]]; then
|
||||
print_ok "当前系统为 Debian ${VERSION_ID} ${VERSION}"
|
||||
INS="apt install -y"
|
||||
$INS update
|
||||
elif [[ "${ID}" == "ubuntu" && $(echo "${VERSION_ID}" | cut -d '.' -f1) -ge 16 ]]; then
|
||||
print_ok "当前系统为 Ubuntu ${VERSION_ID} ${UBUNTU_CODENAME}"
|
||||
INS="apt install -y"
|
||||
$INS update
|
||||
else
|
||||
print_error "当前系统为 ${ID} ${VERSION_ID} 不在支持的系统列表内"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
$INS dbus
|
||||
|
||||
# 关闭各类防火墙
|
||||
systemctl stop firewalld
|
||||
systemctl disable firewalld
|
||||
systemctl stop nftables
|
||||
systemctl disable nftables
|
||||
systemctl stop ufw
|
||||
systemctl disable ufw
|
||||
}
|
||||
|
||||
function nginx_install() {
|
||||
if ! command -v nginx >/dev/null 2>&1; then
|
||||
${INS} nginx
|
||||
judge "Nginx 安装"
|
||||
else
|
||||
print_ok "Nginx 已存在"
|
||||
fi
|
||||
}
|
||||
function dependency_install() {
|
||||
${INS} wget git lsof
|
||||
judge "安装 wget git lsof"
|
||||
|
||||
if [[ "${ID}" == "centos" ]]; then
|
||||
${INS} crontabs
|
||||
else
|
||||
${INS} cron
|
||||
fi
|
||||
judge "安装 crontab"
|
||||
|
||||
if [[ "${ID}" == "centos" ]]; then
|
||||
touch /var/spool/cron/root && chmod 600 /var/spool/cron/root
|
||||
systemctl start crond && systemctl enable crond
|
||||
else
|
||||
touch /var/spool/cron/crontabs/root && chmod 600 /var/spool/cron/crontabs/root
|
||||
systemctl start cron && systemctl enable cron
|
||||
|
||||
fi
|
||||
judge "crontab 自启动配置 "
|
||||
|
||||
${INS} bc
|
||||
judge "安装 bc"
|
||||
|
||||
${INS} unzip
|
||||
judge "安装 unzip"
|
||||
|
||||
${INS} curl
|
||||
judge "安装 curl"
|
||||
|
||||
if [[ "${ID}" == "centos" ]]; then
|
||||
yum -y groupinstall "Development tools"
|
||||
else
|
||||
${INS} build-essential
|
||||
fi
|
||||
judge "编译工具包 安装"
|
||||
|
||||
if [[ "${ID}" == "centos" ]]; then
|
||||
${INS} pcre pcre-devel zlib-devel epel-release
|
||||
else
|
||||
${INS} libpcre3 libpcre3-dev zlib1g-dev dbus
|
||||
fi
|
||||
|
||||
${INS} jq
|
||||
|
||||
if ! command -v jq; then
|
||||
wget -P /usr/bin https://raw.githubusercontent.com/wulabing/V2Ray_ws-tls_bash_onekey/xray/binary/jq && chmod +x /usr/bin/jq
|
||||
judge "安装 jq"
|
||||
fi
|
||||
}
|
||||
|
||||
function basic_optimization() {
|
||||
# 最大文件打开数
|
||||
sed -i '/^\*\ *soft\ *nofile\ *[[:digit:]]*/d' /etc/security/limits.conf
|
||||
sed -i '/^\*\ *hard\ *nofile\ *[[:digit:]]*/d' /etc/security/limits.conf
|
||||
echo '* soft nofile 65536' >>/etc/security/limits.conf
|
||||
echo '* hard nofile 65536' >>/etc/security/limits.conf
|
||||
|
||||
# 关闭 Selinux
|
||||
if [[ "${ID}" == "centos" ]]; then
|
||||
sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config
|
||||
setenforce 0
|
||||
fi
|
||||
}
|
||||
function domain_check() {
|
||||
read -rp "请输入你的域名信息(eg:www.wulabing.com):" domain
|
||||
domain_ip=$(ping "${domain}" -c 1 | sed '1{s/[^(]*(//;s/).*//;q}')
|
||||
print_ok "正在获取 公网ip 信息，请耐心等待"
|
||||
local_ip=$(curl https://api-ipv4.ip.sb/ip)
|
||||
echo -e "域名dns解析IP：${domain_ip}"
|
||||
echo -e "本机IP: ${local_ip}"
|
||||
sleep 2
|
||||
if [[ $(echo "${local_ip}" | tr '.' '+' | bc) -eq $(echo "${domain_ip}" | tr '.' '+' | bc) ]]; then
|
||||
print_ok "域名dns解析IP 与 本机IP 匹配"
|
||||
sleep 2
|
||||
else
|
||||
print_error "请确保域名添加了正确的 A 记录，否则将无法正常使用 V2ray"
|
||||
print_error "域名dns解析IP 与 本机IP 不匹配 是否继续安装？（y/n）" && read -r install
|
||||
case $install in
|
||||
[yY][eE][sS] | [yY])
|
||||
print_ok "继续安装"
|
||||
sleep 2
|
||||
;;
|
||||
*)
|
||||
print_error "安装终止"
|
||||
exit 2
|
||||
;;
|
||||
esac
|
||||
fi
|
||||
}
|
||||
|
||||
function port_exist_check() {
|
||||
if [[ 0 -eq $(lsof -i:"$1" | grep -i -c "listen") ]]; then
|
||||
print_ok "$1 端口未被占用"
|
||||
sleep 1
|
||||
else
|
||||
print_error "检测到 $1 端口被占用，以下为 $1 端口占用信息"
|
||||
lsof -i:"$1"
|
||||
print_error "5s 后将尝试自动 kill 占用进程"
|
||||
sleep 5
|
||||
lsof -i:"$1" | awk '{print $2}' | grep -v "PID" | xargs kill -9
|
||||
print_ok "kill 完成"
|
||||
sleep 1
|
||||
fi
|
||||
}
|
||||
function update_sh() {
|
||||
ol_version=$(curl -L -s https://raw.githubusercontent.com/wulabing/V2Ray_ws-tls_bash_onekey/${github_branch}/install.sh | grep "shell_version=" | head -1 | awk -F '=|"' '{print $3}')
|
||||
echo "$ol_version" >$version_cmp
|
||||
echo "$shell_version" >>$version_cmp
|
||||
if [[ "$shell_version" < "$(sort -rV $version_cmp | head -1)" ]]; then
|
||||
echo -e "${OK} ${GreenBG} 存在新版本，是否更新 [Y/N]? ${Font}"
|
||||
read -r update_confirm
|
||||
case $update_confirm in
|
||||
[yY][eE][sS] | [yY])
|
||||
wget -N --no-check-certificate https://raw.githubusercontent.com/wulabing/V2Ray_ws-tls_bash_onekey/${github_branch}/install.sh
|
||||
echo -e "${OK} ${GreenBG} 更新完成 ${Font}"
|
||||
exit 0
|
||||
;;
|
||||
*) ;;
|
||||
|
||||
esac
|
||||
else
|
||||
echo -e "${OK} ${GreenBG} 当前版本为最新版本 ${Font}"
|
||||
fi
|
||||
}
|
||||
function modify_UUID() {
|
||||
[ -z "$UUID" ] && UUID=$(cat /proc/sys/kernel/random/uuid)
|
||||
cat ${xray_conf_dir}/config.json | jq 'setpath(["inbounds",0,"settings","clients",0,"id"];"'${UUID}'")' >${xray_conf_dir}/config_tmp.json
|
||||
mv -f ${xray_conf_dir}/config_tmp.json ${xray_conf_dir}/config.json
|
||||
judge "Xray UUID 修改成功"
|
||||
}
|
||||
|
||||
function modify_tls_version() {
|
||||
cat ${xray_conf_dir}/config.json | jq 'setpath(["inbounds",0,"streamSettings","xtlsSettings","minVersion"];"'$1'")' >${xray_conf_dir}/config.json
|
||||
mv -f ${xray_conf_dir}/config_tmp.json ${xray_conf_dir}/config.json
|
||||
judge "Xray TLS_version 修改成功"
|
||||
}
|
||||
|
||||
function modify_nginx() {
|
||||
nginx_conf="/etc/nginx/conf.d/${domain}.conf"
|
||||
cd /usr/local/etc/xray && rm -f config.json && wget -O config.json https://raw.githubusercontent.com/wulabing/V2Ray_ws-tls_bash_onekey/xray/config/xray_xtls-rprx-direct.json
|
||||
sed -i "/server_name/c \\\tserver_name ${domain};" ${nginx_conf}
|
||||
judge "Nginx config modify"
|
||||
}
|
||||
|
||||
function tls_type() {
|
||||
echo "请选择支持的 TLS 版本（default:3）:"
|
||||
echo "1: TLS1.1 TLS1.2 and TLS1.3（兼容模式）"
|
||||
echo "2: TLS1.2 and TLS1.3 (兼容模式)"
|
||||
echo "3: TLS1.3 only"
|
||||
read -rp "请输入：" tls_version
|
||||
[[ -z ${tls_version} ]] && tls_version=3
|
||||
if [[ $tls_version == 3 ]]; then
|
||||
modify_tls_version "1.3"
|
||||
elif [[ $tls_version == 2 ]]; then
|
||||
modify_tls_version "1.2"
|
||||
else
|
||||
modify_tls_version "1.1"
|
||||
fi
|
||||
}
|
||||
|
||||
function configure_xray() {
|
||||
cd /usr/local/etc/xray && rm -f config.json && wget -O config.json https://raw.githubusercontent.com/wulabing/V2Ray_ws-tls_bash_onekey/xray/config/xray_xtls-rprx-direct.json
|
||||
rm -f $xray_conf_dir/config.json
|
||||
modify_UUID
|
||||
# tls_type
|
||||
}
|
||||
|
||||
function xray_install() {
|
||||
print_ok "安装 xary"
|
||||
curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh | bash -s -- install
|
||||
judge "xray 安装"
|
||||
}
|
||||
|
||||
function ssl_install() {
|
||||
if [[ "${ID}" == "centos" ]]; then
|
||||
${INS} socat nc
|
||||
else
|
||||
${INS} socat netcat
|
||||
fi
|
||||
judge "安装 SSL 证书生成脚本依赖"
|
||||
|
||||
curl https://get.acme.sh | sh
|
||||
judge "安装 SSL 证书生成脚本"
|
||||
}
|
||||
|
||||
function acme() {
|
||||
if "$HOME"/.acme.sh/acme.sh --issue -d "${domain}" --standalone -k ec-256 --force; then
|
||||
echo -e "${OK} ${GreenBG} SSL 证书生成成功 ${Font}"
|
||||
sleep 2
|
||||
mkdir /ssl
|
||||
if "$HOME"/.acme.sh/acme.sh --installcert -d "${domain}" --fullchainpath /ssl/xray.crt --keypath /ssl/xray.key --ecc --force; then
|
||||
echo -e "${OK} ${GreenBG} 证书配置成功 ${Font}"
|
||||
sleep 2
|
||||
fi
|
||||
else
|
||||
echo -e "${Error} ${RedBG} SSL 证书生成失败 ${Font}"
|
||||
rm -rf "$HOME/.acme.sh/${domain}_ecc"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
function ssl_judge_and_install() {
|
||||
if [[ -f "/ssl/v2ray.key" || -f "/ssl/v2ray.crt" ]]; then
|
||||
echo "/ssl 目录下证书文件已存在"
|
||||
echo -e "${OK} ${GreenBG} 是否删除 [Y/N]? ${Font}"
|
||||
read -r ssl_delete
|
||||
case $ssl_delete in
|
||||
[yY][eE][sS] | [yY])
|
||||
rm -rf /ssl/*
|
||||
echo -e "${OK} ${GreenBG} 已删除 ${Font}"
|
||||
;;
|
||||
*) ;;
|
||||
|
||||
esac
|
||||
fi
|
||||
|
||||
if [[ -f "/ssl/v2ray.key" || -f "/ssl/v2ray.crt" ]]; then
|
||||
echo "证书文件已存在"
|
||||
elif [[ -f "$HOME/.acme.sh/${domain}_ecc/${domain}.key" && -f "$HOME/.acme.sh/${domain}_ecc/${domain}.cer" ]]; then
|
||||
echo "证书文件已存在"
|
||||
"$HOME"/.acme.sh/acme.sh --installcert -d "${domain}" --fullchainpath /ssl/v2ray.key --keypath /ssl/v2ray.crt --ecc
|
||||
judge "证书应用"
|
||||
else
|
||||
ssl_install
|
||||
acme
|
||||
fi
|
||||
|
||||
# xray 默认以 nobody 用户运行，证书权限适配
|
||||
chown -R nobody.nobody /ssl/*
|
||||
}
|
||||
|
||||
function basic_information() {
|
||||
{
|
||||
echo -e "${OK} ${GreenBG} VLESS+tcp+xtls+nginx 安装成功" ${Font}
|
||||
} >"${xray_info_file}"
|
||||
}
|
||||
|
||||
function install_xray() {
|
||||
is_root
|
||||
system_check
|
||||
dependency_install
|
||||
basic_optimization
|
||||
domain_check
|
||||
port_exist_check 80
|
||||
port_exist_check 443
|
||||
xray_install
|
||||
configure_xray
|
||||
nginx_install
|
||||
modify_nginx
|
||||
ssl_judge_and_install
|
||||
# xray_qr_config
|
||||
basic_information
|
||||
}
|
||||
|
||||
install_xray "$@"
|
||||
Loading…
Reference in New Issue