mirror of https://github.com/wulabing/Xray_onekey
750 lines
24 KiB
Bash
750 lines
24 KiB
Bash
#!/usr/bin/env bash
|
||
|
||
#====================================================
|
||
# System Request:Debian 10+/Ubuntu 20.04+/Centos 8+
|
||
# Author: wulabing
|
||
# Dscription: Xray onekey Management
|
||
# email: admin@wulabing.com
|
||
#====================================================
|
||
|
||
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
||
stty erase ^?
|
||
|
||
cd "$(
|
||
cd "$(dirname "$0")" || exit
|
||
pwd
|
||
)" || exit
|
||
|
||
# 字体颜色配置
|
||
Green="\033[32m"
|
||
Red="\033[31m"
|
||
Yellow="\033[33m"
|
||
Blue="\033[36m"
|
||
Font="\033[0m"
|
||
GreenBG="\033[42;37m"
|
||
RedBG="\033[41;37m"
|
||
OK="${Green}[OK]${Font}"
|
||
ERROR="${Red}[ERROR]${Font}"
|
||
|
||
# 变量
|
||
shell_version="0.2.2"
|
||
github_branch="nginx_forward"
|
||
xray_conf_dir="/usr/local/etc/xray"
|
||
website_dir="/www/xray_web/"
|
||
xray_access_log="/var/log/xray/access.log"
|
||
xray_error_log="/var/log/xray/error.log"
|
||
cert_dir="/usr/local/etc/xray"
|
||
domain_tmp_dir="/usr/local/etc/xray"
|
||
nginx_conf_dir="/etc/nginx/conf/conf.d"
|
||
compatible_nginx_conf="no"
|
||
|
||
cert_group="nobody"
|
||
random_num=$((RANDOM % 12 + 4))
|
||
|
||
VERSION=$(echo "${VERSION}" | awk -F "[()]" '{print $2}')
|
||
WS_PATH="/$(head -n 10 /dev/urandom | md5sum | head -c ${random_num})/"
|
||
|
||
function shell_mode_check() {
|
||
if [ -f ${xray_conf_dir}/config.json ]; then
|
||
if [ "$(grep -c "wsSettings" ${xray_conf_dir}/config.json)" -ge 1 ]; then
|
||
shell_mode="ws"
|
||
fi
|
||
else
|
||
shell_mode="None"
|
||
fi
|
||
}
|
||
function print_ok() {
|
||
echo -e "${OK} ${Blue} $1 ${Font}"
|
||
}
|
||
|
||
function print_error() {
|
||
echo -e "${ERROR} ${RedBG} $1 ${Font}"
|
||
}
|
||
|
||
function is_root() {
|
||
if [[ 0 == "$UID" ]]; then
|
||
print_ok "当前用户是 root 用户，开始安装流程"
|
||
else
|
||
print_error "当前用户不是 root 用户，请切换到 root 用户后重新执行脚本"
|
||
exit 1
|
||
fi
|
||
}
|
||
|
||
judge() {
|
||
if [[ 0 -eq $? ]]; then
|
||
print_ok "$1 完成"
|
||
sleep 1
|
||
else
|
||
print_error "$1 失败"
|
||
exit 1
|
||
fi
|
||
}
|
||
|
||
function system_check() {
|
||
source '/etc/os-release'
|
||
|
||
if [[ "${ID}" == "centos" && ${VERSION_ID} -ge 7 ]]; then
|
||
if [[ ${VERSION_ID} -ge 8 ]]; then
|
||
compatible_nginx_conf="no"
|
||
else
|
||
compatible_nginx_conf="yes"
|
||
fi
|
||
print_ok "当前系统为 Centos ${VERSION_ID} ${VERSION}"
|
||
INS="yum install -y"
|
||
wget -N -P /etc/yum.repos.d/ https://raw.githubusercontent.com/wulabing/Xray_onekey/${github_branch}/basic/nginx.repo
|
||
elif [[ "${ID}" == "ol" ]]; then
|
||
print_ok "当前系统为 Oracle Linux ${VERSION_ID} ${VERSION}"
|
||
INS="yum install -y"
|
||
compatible_nginx_conf="yes"
|
||
wget -N -P /etc/yum.repos.d/ https://raw.githubusercontent.com/wulabing/Xray_onekey/${github_branch}/basic/nginx.repo
|
||
elif [[ "${ID}" == "debian" && ${VERSION_ID} -ge 9 ]]; then
|
||
if [[ ${VERSION_ID} -ge 10 ]]; then
|
||
compatible_nginx_conf="no"
|
||
else
|
||
compatible_nginx_conf="yes"
|
||
fi
|
||
print_ok "当前系统为 Debian ${VERSION_ID} ${VERSION}"
|
||
INS="apt install -y"
|
||
# 清除可能的遗留问题
|
||
rm -f /etc/apt/sources.list.d/nginx.list
|
||
# nginx 安装预处理
|
||
$INS curl gnupg2 ca-certificates lsb-release debian-archive-keyring
|
||
curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor \
|
||
| tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null
|
||
echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
|
||
http://nginx.org/packages/debian `lsb_release -cs` nginx" \
|
||
| tee /etc/apt/sources.list.d/nginx.list
|
||
echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n" \
|
||
| tee /etc/apt/preferences.d/99nginx
|
||
|
||
apt update
|
||
elif [[ "${ID}" == "ubuntu" && $(echo "${VERSION_ID}" | cut -d '.' -f1) -ge 18 ]]; then
|
||
print_ok "当前系统为 Ubuntu ${VERSION_ID} ${UBUNTU_CODENAME}"
|
||
if [[ $(echo "${VERSION_ID}" | cut -d '.' -f1) -ge 20 ]]; then
|
||
compatible_nginx_conf="no"
|
||
else
|
||
compatible_nginx_conf="yes"
|
||
fi
|
||
INS="apt install -y"
|
||
# 清除可能的遗留问题
|
||
rm -f /etc/apt/sources.list.d/nginx.list
|
||
# nginx 安装预处理
|
||
$INS curl gnupg2 ca-certificates lsb-release ubuntu-keyring
|
||
curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor \
|
||
| tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null
|
||
echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
|
||
http://nginx.org/packages/ubuntu `lsb_release -cs` nginx" \
|
||
| tee /etc/apt/sources.list.d/nginx.list
|
||
echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n" \
|
||
| tee /etc/apt/preferences.d/99nginx
|
||
|
||
apt update
|
||
else
|
||
print_error "当前系统为 ${ID} ${VERSION_ID} 不在支持的系统列表内"
|
||
exit 1
|
||
fi
|
||
|
||
if [[ $(grep "nogroup" /etc/group) ]]; then
|
||
cert_group="nogroup"
|
||
fi
|
||
|
||
$INS dbus
|
||
|
||
# 关闭各类防火墙
|
||
systemctl stop firewalld
|
||
systemctl disable firewalld
|
||
systemctl stop nftables
|
||
systemctl disable nftables
|
||
systemctl stop ufw
|
||
systemctl disable ufw
|
||
}
|
||
|
||
function nginx_install() {
|
||
if ! command -v nginx >/dev/null 2>&1; then
|
||
${INS} nginx
|
||
judge "Nginx 安装"
|
||
else
|
||
print_ok "Nginx 已存在"
|
||
# 防止部分异常
|
||
${INS} nginx
|
||
fi
|
||
# 遗留问题处理
|
||
mkdir -p /etc/nginx/conf.d >/dev/null 2>&1
|
||
}
|
||
function dependency_install() {
|
||
${INS} wget lsof tar bind9-dnsutils
|
||
judge "安装 wget lsof tar"
|
||
|
||
if [[ "${ID}" == "centos" || "${ID}" == "ol" ]]; then
|
||
${INS} crontabs
|
||
else
|
||
${INS} cron
|
||
fi
|
||
judge "安装 crontab"
|
||
|
||
if [[ "${ID}" == "centos" || "${ID}" == "ol" ]]; then
|
||
touch /var/spool/cron/root && chmod 600 /var/spool/cron/root
|
||
systemctl start crond && systemctl enable crond
|
||
else
|
||
touch /var/spool/cron/crontabs/root && chmod 600 /var/spool/cron/crontabs/root
|
||
systemctl start cron && systemctl enable cron
|
||
|
||
fi
|
||
judge "crontab 自启动配置 "
|
||
|
||
${INS} unzip
|
||
judge "安装 unzip"
|
||
|
||
${INS} curl
|
||
judge "安装 curl"
|
||
|
||
# upgrade systemd
|
||
${INS} systemd
|
||
judge "安装/升级 systemd"
|
||
|
||
# Nginx 后置 无需编译 不再需要
|
||
# if [[ "${ID}" == "centos" || "${ID}" == "ol" ]]; then
|
||
# yum -y groupinstall "Development tools"
|
||
# else
|
||
# ${INS} build-essential
|
||
# fi
|
||
# judge "编译工具包 安装"
|
||
|
||
if [[ "${ID}" == "centos" ]]; then
|
||
${INS} pcre pcre-devel zlib-devel epel-release openssl openssl-devel
|
||
elif [[ "${ID}" == "ol" ]]; then
|
||
${INS} pcre pcre-devel zlib-devel openssl openssl-devel
|
||
# Oracle Linux 不同日期版本的 VERSION_ID 比较乱 直接暴力处理
|
||
yum-config-manager --enable ol7_developer_EPEL >/dev/null 2>&1
|
||
yum-config-manager --enable ol8_developer_EPEL >/dev/null 2>&1
|
||
else
|
||
${INS} libpcre3 libpcre3-dev zlib1g-dev openssl libssl-dev
|
||
fi
|
||
|
||
${INS} jq
|
||
|
||
if ! command -v jq; then
|
||
wget -P /usr/bin https://raw.githubusercontent.com/wulabing/Xray_onekey/${github_branch}/binary/jq && chmod +x /usr/bin/jq
|
||
judge "安装 jq"
|
||
fi
|
||
|
||
# 防止部分系统xray的默认bin目录缺失
|
||
mkdir /usr/local/bin >/dev/null 2>&1
|
||
}
|
||
|
||
function basic_optimization() {
|
||
# 最大文件打开数
|
||
sed -i '/^\*\ *soft\ *nofile\ *[[:digit:]]*/d' /etc/security/limits.conf
|
||
sed -i '/^\*\ *hard\ *nofile\ *[[:digit:]]*/d' /etc/security/limits.conf
|
||
echo '* soft nofile 65536' >>/etc/security/limits.conf
|
||
echo '* hard nofile 65536' >>/etc/security/limits.conf
|
||
|
||
# 关闭 Selinux
|
||
if [[ "${ID}" == "centos" || "${ID}" == "ol" ]]; then
|
||
sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config
|
||
setenforce 0
|
||
fi
|
||
}
|
||
|
||
function domain_check() {
|
||
read -rp "请输入你的域名信息(eg: www.wulabing.com):" domain
|
||
domain_ipv4="$(dig +short "${domain}" a)"
|
||
domain_ipv6="$(dig +short "${domain}" aaaa)"
|
||
print_ok "正在获取 IP 地址信息，请耐心等待"
|
||
wgcfv4_status=$(curl -s4m8 https://www.cloudflare.com/cdn-cgi/trace -k | grep warp | cut -d= -f2)
|
||
wgcfv6_status=$(curl -s6m8 https://www.cloudflare.com/cdn-cgi/trace -k | grep warp | cut -d= -f2)
|
||
if [[ ${wgcfv4_status} =~ "on"|"plus" ]] || [[ ${wgcfv6_status} =~ "on"|"plus" ]]; then
|
||
# 关闭wgcf-warp，以防误判VPS IP情况
|
||
wg-quick down wgcf >/dev/null 2>&1
|
||
print_ok "已关闭 wgcf-warp"
|
||
fi
|
||
local_ipv4=$(curl -s4m8 http://ip.gs)
|
||
local_ipv6=$(curl -s6m8 http://ip.gs)
|
||
if [[ -z ${local_ipv4} && -n ${local_ipv6} ]]; then
|
||
# 纯IPv6 VPS，自动添加DNS64服务器以备acme.sh申请证书使用
|
||
echo -e nameserver 2a01:4f8:c2c:123f::1 > /etc/resolv.conf
|
||
print_ok "识别为 IPv6 Only 的 VPS，自动添加 DNS64 服务器"
|
||
fi
|
||
echo -e "域名通过 DNS 解析的 IP 地址：${domain_ip}"
|
||
echo -e "本机公网 IPv4 地址： ${local_ipv4}"
|
||
echo -e "本机公网 IPv6 地址： ${local_ipv6}"
|
||
sleep 2
|
||
if [[ ${domain_ipv4} == "${local_ipv4}" ]]; then
|
||
print_ok "域名通过 DNS 解析的 IP 地址与 本机 IPv4 地址匹配"
|
||
sleep 2
|
||
elif [[ ${domain_ipv6} == "${local_ipv6}" ]]; then
|
||
print_ok "域名通过 DNS 解析的 IP 地址与 本机 IPv6 地址匹配"
|
||
sleep 2
|
||
else
|
||
print_error "请确保域名添加了正确的 A / AAAA 记录，否则将无法正常使用 xray"
|
||
print_error "域名通过 DNS 解析的 IP 地址与 本机 IPv4 / IPv6 地址不匹配，是否继续安装？（y/n）" && read -r install
|
||
case $install in
|
||
[yY][eE][sS] | [yY])
|
||
print_ok "继续安装"
|
||
sleep 2
|
||
;;
|
||
*)
|
||
print_error "安装终止"
|
||
exit 2
|
||
;;
|
||
esac
|
||
fi
|
||
}
|
||
|
||
function port_exist_check() {
|
||
if [[ 0 -eq $(lsof -i:"$1" | grep -i -c "listen") ]]; then
|
||
print_ok "$1 端口未被占用"
|
||
sleep 1
|
||
else
|
||
print_error "检测到 $1 端口被占用，以下为 $1 端口占用信息"
|
||
lsof -i:"$1"
|
||
print_error "5s 后将尝试自动 kill 占用进程"
|
||
sleep 5
|
||
lsof -i:"$1" | awk '{print $2}' | grep -v "PID" | xargs kill -9
|
||
print_ok "kill 完成"
|
||
sleep 1
|
||
fi
|
||
}
|
||
function update_sh() {
|
||
ol_version=$(curl -L -s https://raw.githubusercontent.com/wulabing/Xray_onekey/${github_branch}/install.sh | grep "shell_version=" | head -1 | awk -F '=|"' '{print $3}')
|
||
if [[ "$shell_version" != "$(echo -e "$shell_version\n$ol_version" | sort -rV | head -1)" ]]; then
|
||
print_ok "存在新版本，是否更新 [Y/N]?"
|
||
read -r update_confirm
|
||
case $update_confirm in
|
||
[yY][eE][sS] | [yY])
|
||
wget -N --no-check-certificate https://raw.githubusercontent.com/wulabing/Xray_onekey/${github_branch}/install.sh
|
||
print_ok "更新完成"
|
||
print_ok "您可以通过 bash $0 执行本程序"
|
||
exit 0
|
||
;;
|
||
*) ;;
|
||
esac
|
||
else
|
||
print_ok "当前版本为最新版本"
|
||
print_ok "您可以通过 bash $0 执行本程序"
|
||
fi
|
||
}
|
||
|
||
function xray_tmp_config_file_check_and_use() {
|
||
if [[ -s ${xray_conf_dir}/config_tmp.json ]]; then
|
||
mv -f ${xray_conf_dir}/config_tmp.json ${xray_conf_dir}/config.json
|
||
else
|
||
print_error "xray 配置文件修改异常"
|
||
fi
|
||
}
|
||
|
||
function modify_UUID() {
|
||
[ -z "$UUID" ] && UUID=$(cat /proc/sys/kernel/random/uuid)
|
||
cat ${xray_conf_dir}/config.json | jq 'setpath(["inbounds",0,"settings","clients",0,"id"];"'${UUID}'")' >${xray_conf_dir}/config_tmp.json
|
||
xray_tmp_config_file_check_and_use
|
||
judge "Xray TCP UUID 修改"
|
||
}
|
||
|
||
function modify_ws() {
|
||
cat ${xray_conf_dir}/config.json | jq 'setpath(["inbounds",0,"streamSettings","wsSettings","path"];"'${WS_PATH}'")' >${xray_conf_dir}/config_tmp.json
|
||
xray_tmp_config_file_check_and_use
|
||
judge "Xray ws 修改"
|
||
}
|
||
|
||
function modify_nginx_port() {
|
||
sed -i "/ssl http2;$/c \\\tlisten ${PORT} ssl http2;" ${nginx_conf}
|
||
sed -i "3c \\\tlisten [::]:${PORT} ssl http2;" ${nginx_conf}
|
||
judge "Xray port 修改"
|
||
}
|
||
|
||
function modify_nginx_ws(){
|
||
sed -i "/location/c \\\tlocation ${WS_PATH}" ${nginx_conf}
|
||
judge "Nginx ws 修改"
|
||
}
|
||
|
||
function modify_nginx_other() {
|
||
modify_nginx_ws
|
||
sed -i "/proxy_pass/c \\\tproxy_pass http://127.0.0.1:${inbound_port};" ${nginx_conf}
|
||
}
|
||
|
||
|
||
|
||
function modify_port() {
|
||
read -rp "请输入端口号(默认：443)：" PORT
|
||
[ -z "$PORT" ] && PORT="443"
|
||
if [[ $PORT -le 0 ]] || [[ $PORT -gt 65535 ]]; then
|
||
print_error "请输入 0-65535 之间的值"
|
||
exit 1
|
||
fi
|
||
port_exist_check $PORT
|
||
modify_nginx_port
|
||
}
|
||
|
||
function configure_nginx_temp(){
|
||
nginx_conf="/etc/nginx/conf.d/${domain}.conf"
|
||
cd /etc/nginx/conf.d/ && rm -f ${domain}.conf
|
||
wget -O ${domain}.conf https://raw.githubusercontent.com/wulabing/Xray_onekey/${github_branch}/config/web_temp.conf
|
||
sed -i "s/xxx/${domain}/g" ${nginx_conf}
|
||
}
|
||
|
||
function configure_nginx() {
|
||
nginx_conf="/etc/nginx/conf.d/${domain}.conf"
|
||
cd /etc/nginx/conf.d/ && rm -f ${domain}.conf
|
||
if [[ $compatible_nginx_conf == "yes" ]]; then
|
||
wget -O ${domain}.conf https://raw.githubusercontent.com/wulabing/Xray_onekey/${github_branch}/config/web_compatible.conf
|
||
elif [[ $compatible_nginx_conf == "no" ]]; then
|
||
wget -O ${domain}.conf https://raw.githubusercontent.com/wulabing/Xray_onekey/${github_branch}/config/web.conf
|
||
fi
|
||
sed -i "s/xxx/${domain}/g" ${nginx_conf}
|
||
modify_port
|
||
modify_nginx_other
|
||
systemctl restart nginx
|
||
}
|
||
|
||
|
||
function modify_inbound_port() {
|
||
inbound_port=$((RANDOM + 10000))
|
||
cat ${xray_conf_dir}/config.json | jq 'setpath(["inbounds",0,"port"];'${inbound_port}')' >${xray_conf_dir}/config_tmp.json
|
||
xray_tmp_config_file_check_and_use
|
||
judge "Xray inbound_port 修改"
|
||
}
|
||
|
||
function configure_xray_ws() {
|
||
cd /usr/local/etc/xray && rm -f config.json && wget -O config.json https://raw.githubusercontent.com/wulabing/Xray_onekey/${github_branch}/config/xray_tls_ws.json
|
||
modify_UUID
|
||
modify_ws
|
||
modify_inbound_port
|
||
}
|
||
|
||
function xray_install() {
|
||
print_ok "安装 Xray"
|
||
curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh | bash -s -- install
|
||
judge "Xray 安装"
|
||
|
||
# 用于生成 Xray 的导入链接
|
||
echo $domain >$domain_tmp_dir/domain
|
||
judge "域名记录"
|
||
}
|
||
|
||
function ssl_install() {
|
||
# 使用 Nginx 配合签发 无需安装相关依赖
|
||
# if [[ "${ID}" == "centos" || "${ID}" == "ol" ]]; then
|
||
# ${INS} socat nc
|
||
# else
|
||
# ${INS} socat netcat
|
||
# fi
|
||
# judge "安装 SSL 证书生成脚本依赖"
|
||
|
||
curl -L get.acme.sh | bash
|
||
judge "安装 SSL 证书生成脚本"
|
||
}
|
||
|
||
function acme() {
|
||
"$HOME"/.acme.sh/acme.sh --set-default-ca --server letsencrypt
|
||
|
||
systemctl restart nginx
|
||
|
||
if "$HOME"/.acme.sh/acme.sh --issue -d "${domain}" -k ec-256 --webroot "$website_dir" --force; then
|
||
print_ok "SSL 证书生成成功"
|
||
sleep 2
|
||
if "$HOME"/.acme.sh/acme.sh --installcert -d "${domain}" --fullchainpath /ssl/xray.crt --keypath /ssl/xray.key --reloadcmd "systemctl restart xray" --reloadcmd "systemctl restart nginx" --ecc --force; then
|
||
print_ok "SSL 证书配置成功"
|
||
sleep 2
|
||
if [[ -n $(type -P wgcf) && -n $(type -P wg-quick) ]]; then
|
||
wg-quick up wgcf >/dev/null 2>&1
|
||
print_ok "已启动 wgcf-warp"
|
||
fi
|
||
fi
|
||
elif "$HOME"/.acme.sh/acme.sh --issue -d "${domain}" -k ec-256 --webroot "$website_dir" --force --listen-v6; then
|
||
print_ok "SSL 证书生成成功"
|
||
sleep 2
|
||
if "$HOME"/.acme.sh/acme.sh --installcert -d "${domain}" --fullchainpath /ssl/xray.crt --keypath /ssl/xray.key --reloadcmd "systemctl restart xray" --reloadcmd "systemctl restart nginx" --ecc --force; then
|
||
print_ok "SSL 证书配置成功"
|
||
sleep 2
|
||
if [[ -n $(type -P wgcf) && -n $(type -P wg-quick) ]]; then
|
||
wg-quick up wgcf >/dev/null 2>&1
|
||
print_ok "已启动 wgcf-warp"
|
||
fi
|
||
fi
|
||
else
|
||
print_error "SSL 证书生成失败"
|
||
rm -rf "$HOME/.acme.sh/${domain}_ecc"
|
||
if [[ -n $(type -P wgcf) && -n $(type -P wg-quick) ]]; then
|
||
wg-quick up wgcf >/dev/null 2>&1
|
||
print_ok "已启动 wgcf-warp"
|
||
fi
|
||
exit 1
|
||
fi
|
||
|
||
}
|
||
|
||
function ssl_judge_and_install() {
|
||
|
||
mkdir -p /ssl >/dev/null 2>&1
|
||
if [[ -f "/ssl/xray.key" || -f "/ssl/xray.crt" ]]; then
|
||
print_ok "/ssl 目录下证书文件已存在"
|
||
print_ok "是否删除 /ssl 目录下的证书文件 [Y/N]?"
|
||
read -r ssl_delete
|
||
case $ssl_delete in
|
||
[yY][eE][sS] | [yY])
|
||
rm -rf /ssl/*
|
||
print_ok "已删除"
|
||
;;
|
||
*) ;;
|
||
|
||
esac
|
||
fi
|
||
|
||
if [[ -f "/ssl/xray.key" || -f "/ssl/xray.crt" ]]; then
|
||
echo "证书文件已存在"
|
||
elif [[ -f "$HOME/.acme.sh/${domain}_ecc/${domain}.key" && -f "$HOME/.acme.sh/${domain}_ecc/${domain}.cer" ]]; then
|
||
echo "证书文件已存在"
|
||
"$HOME"/.acme.sh/acme.sh --installcert -d "${domain}" --fullchainpath /ssl/xray.crt --keypath /ssl/xray.key --ecc
|
||
judge "证书应用"
|
||
else
|
||
mkdir /ssl
|
||
ssl_install
|
||
acme
|
||
fi
|
||
|
||
# Xray 默认以 nobody 用户运行，证书权限适配
|
||
chown -R nobody.$cert_group /ssl/*
|
||
}
|
||
|
||
function generate_certificate() {
|
||
if [[ -z ${local_ipv4} && -n ${local_ipv6} ]]; then
|
||
signedcert=$(xray tls cert -domain="$local_ipv6" -name="$local_ipv6" -org="$local_ipv6" -expire=87600h)
|
||
else
|
||
signedcert=$(xray tls cert -domain="$local_ipv4" -name="$local_ipv4" -org="$local_ipv4" -expire=87600h)
|
||
fi
|
||
echo $signedcert | jq '.certificate[]' | sed 's/\"//g' | tee $cert_dir/self_signed_cert.pem
|
||
echo $signedcert | jq '.key[]' | sed 's/\"//g' >$cert_dir/self_signed_key.pem
|
||
openssl x509 -in $cert_dir/self_signed_cert.pem -noout || print_error "生成自签名证书失败" && exit 1
|
||
print_ok "生成自签名证书成功"
|
||
chown nobody.$cert_group $cert_dir/self_signed_cert.pem
|
||
chown nobody.$cert_group $cert_dir/self_signed_key.pem
|
||
}
|
||
|
||
function configure_web() {
|
||
rm -rf /www/xray_web
|
||
mkdir -p /www/xray_web
|
||
print_ok "是否配置伪装网页？[Y/N]"
|
||
read -r webpage
|
||
case $webpage in
|
||
[yY][eE][sS] | [yY])
|
||
wget -O web.tar.gz https://raw.githubusercontent.com/wulabing/Xray_onekey/main/basic/web.tar.gz
|
||
tar xzf web.tar.gz -C /www/xray_web
|
||
judge "站点伪装"
|
||
rm -f web.tar.gz
|
||
;;
|
||
*) ;;
|
||
esac
|
||
}
|
||
|
||
function xray_uninstall() {
|
||
curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh | bash -s -- remove --purge
|
||
rm -rf $website_dir
|
||
print_ok "是否卸载nginx [Y/N]?"
|
||
read -r uninstall_nginx
|
||
case $uninstall_nginx in
|
||
[yY][eE][sS] | [yY])
|
||
if [[ "${ID}" == "centos" || "${ID}" == "ol" ]]; then
|
||
yum remove nginx -y
|
||
else
|
||
apt purge nginx -y
|
||
fi
|
||
;;
|
||
*) ;;
|
||
esac
|
||
print_ok "是否卸载acme.sh [Y/N]?"
|
||
read -r uninstall_acme
|
||
case $uninstall_acme in
|
||
[yY][eE][sS] | [yY])
|
||
/root/.acme.sh/acme.sh --uninstall
|
||
rm -rf /root/.acme.sh
|
||
rm -rf /ssl/
|
||
;;
|
||
*) ;;
|
||
esac
|
||
print_ok "卸载完成"
|
||
exit 0
|
||
}
|
||
|
||
function restart_all() {
|
||
systemctl restart nginx
|
||
judge "Nginx 启动"
|
||
systemctl restart xray
|
||
judge "Xray 启动"
|
||
}
|
||
|
||
|
||
function ws_information() {
|
||
DOMAIN=$(cat ${domain_tmp_dir}/domain)
|
||
UUID=$(cat ${xray_conf_dir}/config.json | jq .inbounds[0].settings.clients[0].id | tr -d '"')
|
||
PORT=$(cat "/etc/nginx/conf.d/${DOMAIN}.conf" | grep 'ssl http2' | awk -F ' ' '{print $2}' )
|
||
FLOW=$(cat ${xray_conf_dir}/config.json | jq .inbounds[0].settings.clients[0].flow | tr -d '"')
|
||
WS_PATH=$(cat ${xray_conf_dir}/config.json | jq .inbounds[0].streamSettings.wsSettings.path | tr -d '"')
|
||
|
||
|
||
echo -e "${Red} Xray 配置信息 ${Font}"
|
||
echo -e "${Red} 地址（address）:${Font} $DOMAIN"
|
||
echo -e "${Red} 端口（port）：${Font} $PORT"
|
||
echo -e "${Red} 用户 ID（UUID）：${Font} $UUID"
|
||
echo -e "${Red} 加密方式（security）：${Font} none "
|
||
echo -e "${Red} 传输协议（network）：${Font} ws "
|
||
echo -e "${Red} 伪装类型（type）：${Font} none "
|
||
echo -e "${Red} 路径（path）：${Font} $WS_PATH "
|
||
echo -e "${Red} 底层传输安全：${Font} tls "
|
||
}
|
||
|
||
function ws_link() {
|
||
DOMAIN=$(cat ${domain_tmp_dir}/domain)
|
||
UUID=$(cat ${xray_conf_dir}/config.json | jq .inbounds[0].settings.clients[0].id | tr -d '"')
|
||
PORT=$(cat "/etc/nginx/conf.d/${DOMAIN}.conf" | grep 'ssl http2' | awk -F ' ' '{print $2}' )
|
||
FLOW=$(cat ${xray_conf_dir}/config.json | jq .inbounds[0].settings.clients[0].flow | tr -d '"')
|
||
WS_PATH=$(cat ${xray_conf_dir}/config.json | jq .inbounds[0].streamSettings.wsSettings.path | tr -d '"')
|
||
WS_PATH_WITHOUT_SLASH=$(echo $WS_PATH | tr -d '/')
|
||
|
||
print_ok "URL 链接（VLESS + WebSocket + TLS）"
|
||
print_ok "vless://$UUID@$DOMAIN:$PORT?type=ws&security=tls&path=%2f${WS_PATH_WITHOUT_SLASH}%2f#WS_TLS_wulabing-$DOMAIN"
|
||
print_ok "URL 二维码（VLESS + WebSocket + TLS）（请在浏览器中访问）"
|
||
print_ok "https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless://$UUID@$DOMAIN:$PORT?type=ws%26security=tls%26path=%2f${WS_PATH_WITHOUT_SLASH}%2f%23WS_TLS_wulabing-$DOMAIN"
|
||
}
|
||
|
||
function basic_ws_information() {
|
||
print_ok "VLESS + TCP + TLS + Nginx + WebSocket 安装成功"
|
||
ws_information
|
||
print_ok "————————————————————————"
|
||
ws_link
|
||
}
|
||
|
||
function show_access_log() {
|
||
[ -f ${xray_access_log} ] && tail -f ${xray_access_log} || echo -e "${RedBG}log文件不存在${Font}"
|
||
}
|
||
|
||
function show_error_log() {
|
||
[ -f ${xray_error_log} ] && tail -f ${xray_error_log} || echo -e "${RedBG}log文件不存在${Font}"
|
||
}
|
||
|
||
function bbr_boost_sh() {
|
||
[ -f "tcp.sh" ] && rm -rf ./tcp.sh
|
||
wget -N --no-check-certificate "https://raw.githubusercontent.com/ylx2016/Linux-NetSpeed/master/tcp.sh" && chmod +x tcp.sh && ./tcp.sh
|
||
}
|
||
|
||
function mtproxy_sh() {
|
||
wget -N --no-check-certificate "https://github.com/wulabing/mtp/raw/master/mtproxy.sh" && chmod +x mtproxy.sh && bash mtproxy.sh
|
||
}
|
||
|
||
function install_xray_ws() {
|
||
is_root
|
||
system_check
|
||
dependency_install
|
||
basic_optimization
|
||
domain_check
|
||
port_exist_check 80
|
||
xray_install
|
||
configure_xray_ws
|
||
nginx_install
|
||
configure_nginx_temp
|
||
configure_web
|
||
ssl_judge_and_install
|
||
configure_nginx
|
||
restart_all
|
||
basic_ws_information
|
||
}
|
||
|
||
menu() {
|
||
update_sh
|
||
shell_mode_check
|
||
echo -e "\t Xray 安装管理脚本 ${Red}[${shell_version}]${Font}"
|
||
echo -e "\t---authored by wulabing---"
|
||
echo -e "\thttps://github.com/wulabing\n"
|
||
|
||
echo -e "当前已安装版本：${shell_mode}"
|
||
echo -e "—————————————— 安装向导 ——————————————"""
|
||
echo -e "${Green}0.${Font} 升级 脚本"
|
||
echo -e "${Green}1.${Font} 安装 Xray (VLESS + TCP + TLS + Nginx + WebSocket)"
|
||
echo -e "—————————————— 配置变更 ——————————————"
|
||
echo -e "${Green}11.${Font} 变更 UUID"
|
||
echo -e "${Green}13.${Font} 变更 连接端口"
|
||
echo -e "${Green}14.${Font} 变更 WebSocket PATH"
|
||
echo -e "—————————————— 查看信息 ——————————————"
|
||
echo -e "${Green}21.${Font} 查看 实时访问日志"
|
||
echo -e "${Green}22.${Font} 查看 实时错误日志"
|
||
echo -e "${Green}23.${Font} 查看 Xray 配置链接"
|
||
# echo -e "${Green}23.${Font} 查看 V2Ray 配置信息"
|
||
echo -e "—————————————— 其他选项 ——————————————"
|
||
echo -e "${Green}31.${Font} 安装 4 合 1 BBR、锐速安装脚本"
|
||
echo -e "${Yellow}32.${Font} 安装 MTproxy(不推荐使用,请相关用户关闭或卸载)"
|
||
echo -e "${Green}33.${Font} 卸载 Xray"
|
||
echo -e "${Green}34.${Font} 更新 Xray-core"
|
||
echo -e "${Green}35.${Font} 安装 Xray-core 测试版(Pre)"
|
||
echo -e "${Green}36.${Font} 手动更新SSL证书"
|
||
echo -e "${Green}40.${Font} 退出"
|
||
read -rp "请输入数字：" menu_num
|
||
case $menu_num in
|
||
0)
|
||
update_sh
|
||
;;
|
||
1)
|
||
install_xray_ws
|
||
;;
|
||
11)
|
||
read -rp "请输入UUID:" UUID
|
||
modify_UUID
|
||
restart_all
|
||
;;
|
||
13)
|
||
DOMAIN=$(cat ${domain_tmp_dir}/domain)
|
||
nginx_conf="/etc/nginx/conf.d/${DOMAIN}.conf"
|
||
modify_port
|
||
restart_all
|
||
;;
|
||
14)
|
||
DOMAIN=$(cat ${domain_tmp_dir}/domain)
|
||
nginx_conf="/etc/nginx/conf.d/${DOMAIN}.conf"
|
||
read -rp "请输入路径(示例：/wulabing/ 要求两侧都包含/):" WS_PATH
|
||
modify_ws
|
||
modify_nginx_ws
|
||
restart_all
|
||
;;
|
||
21)
|
||
tail -f $xray_access_log
|
||
;;
|
||
22)
|
||
tail -f $xray_error_log
|
||
;;
|
||
23)
|
||
if [[ -f $xray_conf_dir/config.json ]]; then
|
||
basic_ws_information
|
||
else
|
||
print_error "xray 配置文件不存在"
|
||
fi
|
||
;;
|
||
31)
|
||
bbr_boost_sh
|
||
;;
|
||
32)
|
||
mtproxy_sh
|
||
;;
|
||
33)
|
||
source '/etc/os-release'
|
||
xray_uninstall
|
||
;;
|
||
34)
|
||
bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" - install
|
||
restart_all
|
||
;;
|
||
35)
|
||
bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" - install --beta
|
||
restart_all
|
||
;;
|
||
36)
|
||
"/root/.acme.sh"/acme.sh --cron --home "/root/.acme.sh"
|
||
restart_all
|
||
;;
|
||
40)
|
||
exit 0
|
||
;;
|
||
*)
|
||
print_error "请输入正确的数字"
|
||
;;
|
||
esac
|
||
}
|
||
menu "$@"
|