mirror of https://github.com/wulabing/Xray_onekey
376 lines
12 KiB
Bash
376 lines
12 KiB
Bash
#!/bin/bash
|
||
|
||
#====================================================
|
||
# System Request:Debian 7+/Ubuntu 14.04+/Centos 6+
|
||
# Author: wulabing
|
||
# Dscription: V2ray ws+tls onekey
|
||
# Version: 3.3.1
|
||
# Blog: https://www.wulabing.com
|
||
# Official document: www.v2ray.com
|
||
#====================================================
|
||
|
||
#fonts color
|
||
Green="\033[32m"
|
||
Red="\033[31m"
|
||
Yellow="\033[33m"
|
||
GreenBG="\033[42;37m"
|
||
RedBG="\033[41;37m"
|
||
Font="\033[0m"
|
||
|
||
#notification information
|
||
Info="${Green}[信息]${Font}"
|
||
OK="${Green}[OK]${Font}"
|
||
Error="${Red}[错误]${Font}"
|
||
|
||
v2ray_conf_dir="/etc/v2ray"
|
||
nginx_conf_dir="/etc/nginx/conf.d"
|
||
v2ray_conf="${v2ray_conf_dir}/config.json"
|
||
nginx_conf="${nginx_conf_dir}/v2ray.conf"
|
||
|
||
#生成伪装路径
|
||
camouflage=`cat /dev/urandom | head -n 10 | md5sum | head -c 8`
|
||
|
||
source /etc/os-release
|
||
|
||
#从VERSION中提取发行版系统的英文名称，为了在debian/ubuntu下添加相对应的Nginx apt源
|
||
VERSION=`echo ${VERSION} | awk -F "[()]" '{print $2}'`
|
||
|
||
check_system(){
|
||
|
||
if [[ "${ID}" == "centos" && ${VERSION_ID} -ge 7 ]];then
|
||
echo -e "${OK} ${GreenBG} 当前系统为 Centos ${VERSION_ID} ${VERSION} ${Font} "
|
||
INS="yum"
|
||
echo -e "${OK} ${GreenBG} SElinux 设置中，请耐心等待，不要进行其他操作${Font} "
|
||
setsebool -P httpd_can_network_connect 1
|
||
echo -e "${OK} ${GreenBG} SElinux 设置完成 ${Font} "
|
||
## Centos 也可以通过添加 epel 仓库来安装，目前不做改动
|
||
cat>/etc/yum.repos.d/nginx.repo<<EOF
|
||
[nginx]
|
||
name=nginx repo
|
||
baseurl=http://nginx.org/packages/mainline/centos/7/\$basearch/
|
||
gpgcheck=0
|
||
enabled=1
|
||
EOF
|
||
echo -e "${OK} ${GreenBG} Nginx 源 安装完成 ${Font}"
|
||
elif [[ "${ID}" == "debian" && ${VERSION_ID} -ge 8 ]];then
|
||
echo -e "${OK} ${GreenBG} 当前系统为 Debian ${VERSION_ID} ${VERSION} ${Font} "
|
||
INS="apt"
|
||
## 添加 Nginx apt源
|
||
if [ ! -f nginx_signing.key ];then
|
||
echo "deb http://nginx.org/packages/mainline/debian/ ${VERSION} nginx" >> /etc/apt/sources.list
|
||
echo "deb-src http://nginx.org/packages/mainline/debian/ ${VERSION} nginx" >> /etc/apt/sources.list
|
||
wget -nc https://nginx.org/keys/nginx_signing.key
|
||
apt-key add nginx_signing.key
|
||
fi
|
||
elif [[ "${ID}" == "ubuntu" && `echo "${VERSION_ID}" | cut -d '.' -f1` -ge 16 ]];then
|
||
echo -e "${OK} ${GreenBG} 当前系统为 Ubuntu ${VERSION_ID} ${VERSION_CODENAME} ${Font} "
|
||
INS="apt"
|
||
## 添加 Nginx apt源
|
||
if [ ! -f nginx_signing.key ];then
|
||
echo "deb http://nginx.org/packages/mainline/ubuntu/ ${VERSION_CODENAME} nginx" >> /etc/apt/sources.list
|
||
echo "deb-src http://nginx.org/packages/mainline/ubuntu/ ${VERSION_CODENAME} nginx" >> /etc/apt/sources.list
|
||
wget -nc https://nginx.org/keys/nginx_signing.key
|
||
apt-key add nginx_signing.key
|
||
fi
|
||
else
|
||
echo -e "${Error} ${RedBG} 当前系统为 ${ID} ${VERSION_ID} 不在支持的系统列表内，安装中断 ${Font} "
|
||
exit 1
|
||
fi
|
||
|
||
}
|
||
is_root(){
|
||
if [ `id -u` == 0 ]
|
||
then echo -e "${OK} ${GreenBG} 当前用户是root用户，进入安装流程 ${Font} "
|
||
sleep 3
|
||
else
|
||
echo -e "${Error} ${RedBG} 当前用户不是root用户，请切换到root用户后重新执行脚本 ${Font}"
|
||
exit 1
|
||
fi
|
||
}
|
||
judge(){
|
||
if [[ $? -eq 0 ]];then
|
||
echo -e "${OK} ${GreenBG} $1 完成 ${Font}"
|
||
sleep 1
|
||
else
|
||
echo -e "${Error} ${RedBG} $1 失败${Font}"
|
||
exit 1
|
||
fi
|
||
}
|
||
ntpdate_install(){
|
||
if [[ "${ID}" == "centos" ]];then
|
||
${INS} install ntpdate -y
|
||
else
|
||
${INS} update
|
||
${INS} install ntpdate -y
|
||
fi
|
||
judge "安装 NTPdate 时间同步服务 "
|
||
}
|
||
time_modify(){
|
||
|
||
ntpdate_install
|
||
|
||
systemctl stop ntp &>/dev/null
|
||
|
||
echo -e "${Info} ${GreenBG} 正在进行时间同步 ${Font}"
|
||
ntpdate time.nist.gov
|
||
|
||
if [[ $? -eq 0 ]];then
|
||
echo -e "${OK} ${GreenBG} 时间同步成功 ${Font}"
|
||
echo -e "${OK} ${GreenBG} 当前系统时间 `date -R`（请注意时区间时间换算，换算后时间误差应为三分钟以内）${Font}"
|
||
sleep 1
|
||
else
|
||
echo -e "${Error} ${RedBG} 时间同步失败，请检查ntpdate服务是否正常工作 ${Font}"
|
||
fi
|
||
}
|
||
dependency_install(){
|
||
${INS} install wget git lsof -y
|
||
|
||
if [[ "${ID}" == "centos" ]];then
|
||
${INS} -y install crontabs
|
||
else
|
||
${INS} install cron
|
||
fi
|
||
judge "安装 crontab"
|
||
|
||
# 新版的IP判定不需要使用net-tools
|
||
# ${INS} install net-tools -y
|
||
# judge "安装 net-tools"
|
||
|
||
${INS} install bc -y
|
||
judge "安装 bc"
|
||
|
||
${INS} install unzip -y
|
||
judge "安装 unzip"
|
||
}
|
||
port_alterid_set(){
|
||
stty erase '^H' && read -p "请输入连接端口（default:443）:" port
|
||
[[ -z ${port} ]] && port="443"
|
||
stty erase '^H' && read -p "请输入alterID（default:64）:" alterID
|
||
[[ -z ${alterID} ]] && alterID="64"
|
||
}
|
||
modify_port_UUID(){
|
||
let PORT=$RANDOM+10000
|
||
UUID=$(cat /proc/sys/kernel/random/uuid)
|
||
sed -i "/\"port\"/c \ \"port\":${PORT}," ${v2ray_conf}
|
||
sed -i "/\"id\"/c \\\t \"id\":\"${UUID}\"," ${v2ray_conf}
|
||
sed -i "/\"alterId\"/c \\\t \"alterId\":${alterID}" ${v2ray_conf}
|
||
sed -i "/\"path\"/c \\\t \"path\":\"\/${camouflage}\/\"" ${v2ray_conf}
|
||
}
|
||
modify_nginx(){
|
||
## sed 部分地方 适应新配置修正
|
||
if [[ -f /etc/nginx/nginx.conf.bak ]];then
|
||
cp /etc/nginx/nginx.conf.bak /etc/nginx/nginx.conf
|
||
fi
|
||
sed -i "1,/listen/{s/listen 443 ssl;/listen ${port} ssl;/}" ${v2ray_conf}
|
||
sed -i "/server_name/c \\\tserver_name ${domain};" ${nginx_conf}
|
||
sed -i "/location/c \\\tlocation \/${camouflage}\/" ${nginx_conf}
|
||
sed -i "/proxy_pass/c \\\tproxy_pass http://127.0.0.1:${PORT};" ${nginx_conf}
|
||
sed -i "/return/c \\\treturn 301 https://${domain}\$request_uri;" ${nginx_conf}
|
||
sed -i "27i \\\tproxy_intercept_errors on;" /etc/nginx/nginx.conf
|
||
}
|
||
web_camouflage(){
|
||
##请注意 这里和LNMP脚本的默认路径冲突，千万不要在安装了LNMP的环境下使用本脚本，否则后果自负
|
||
rm -rf /home/wwwroot && mkdir -p /home/wwwroot && cd /home/wwwroot
|
||
git clone https://github.com/wulabing/sCalc.git
|
||
judge "web 站点伪装"
|
||
}
|
||
v2ray_install(){
|
||
if [[ -d /root/v2ray ]];then
|
||
rm -rf /root/v2ray
|
||
fi
|
||
|
||
mkdir -p /root/v2ray && cd /root/v2ray
|
||
wget --no-check-certificate https://install.direct/go.sh
|
||
|
||
## wget http://install.direct/go.sh
|
||
|
||
if [[ -f go.sh ]];then
|
||
bash go.sh --force
|
||
judge "安装 V2ray"
|
||
else
|
||
echo -e "${Error} ${RedBG} V2ray 安装文件下载失败，请检查下载地址是否可用 ${Font}"
|
||
exit 4
|
||
fi
|
||
}
|
||
nginx_install(){
|
||
${INS} install nginx -y
|
||
if [[ -d /etc/nginx ]];then
|
||
echo -e "${OK} ${GreenBG} nginx 安装完成 ${Font}"
|
||
sleep 2
|
||
else
|
||
echo -e "${Error} ${RedBG} nginx 安装失败 ${Font}"
|
||
exit 5
|
||
fi
|
||
if [[ ! -f /etc/nginx/nginx.conf.bak ]];then
|
||
cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak
|
||
echo -e "${OK} ${GreenBG} nginx 初始配置备份完成 ${Font}"
|
||
sleep 1
|
||
fi
|
||
}
|
||
ssl_install(){
|
||
if [[ "${ID}" == "centos" ]];then
|
||
${INS} install socat nc -y
|
||
else
|
||
${INS} install socat netcat -y
|
||
fi
|
||
judge "安装 SSL 证书生成脚本依赖"
|
||
|
||
curl https://get.acme.sh | sh
|
||
judge "安装 SSL 证书生成脚本"
|
||
|
||
}
|
||
domain_check(){
|
||
stty erase '^H' && read -p "请输入你的域名信息(eg:www.wulabing.com):" domain
|
||
domain_ip=`ping ${domain} -c 1 | sed '1{s/[^(]*(//;s/).*//;q}'`
|
||
echo -e "${OK} ${GreenBG} 正在获取 公网ip 信息，请耐心等待 ${Font}"
|
||
local_ip=`curl -4 ip.sb`
|
||
echo -e "域名dns解析IP：${domain_ip}"
|
||
echo -e "本机IP: ${local_ip}"
|
||
sleep 2
|
||
if [[ $(echo ${local_ip}|tr '.' '+'|bc) -eq $(echo ${domain_ip}|tr '.' '+'|bc) ]];then
|
||
echo -e "${OK} ${GreenBG} 域名dns解析IP 与 本机IP 匹配 ${Font}"
|
||
sleep 2
|
||
else
|
||
echo -e "${Error} ${RedBG} 域名dns解析IP 与 本机IP 不匹配 是否继续安装？（y/n）${Font}" && read install
|
||
case $install in
|
||
[yY][eE][sS]|[yY])
|
||
echo -e "${GreenBG} 继续安装 ${Font}"
|
||
sleep 2
|
||
;;
|
||
*)
|
||
echo -e "${RedBG} 安装终止 ${Font}"
|
||
exit 2
|
||
;;
|
||
esac
|
||
fi
|
||
}
|
||
|
||
port_exist_check(){
|
||
if [[ 0 -eq `lsof -i:"$1" | wc -l` ]];then
|
||
echo -e "${OK} ${GreenBG} $1 端口未被占用 ${Font}"
|
||
sleep 1
|
||
else
|
||
echo -e "${Error} ${RedBG} 检测到 $1 端口被占用，以下为 $1 端口占用信息 ${Font}"
|
||
lsof -i:"$1"
|
||
echo -e "${OK} ${GreenBG} 5s 后将尝试自动 kill 占用进程 ${Font}"
|
||
sleep 5
|
||
lsof -i:"$1" | awk '{print $2}'| grep -v "PID" | xargs kill -9
|
||
echo -e "${OK} ${GreenBG} kill 完成 ${Font}"
|
||
sleep 1
|
||
fi
|
||
}
|
||
acme(){
|
||
~/.acme.sh/acme.sh --issue -d ${domain} --standalone -k ec-256 --force
|
||
if [[ $? -eq 0 ]];then
|
||
echo -e "${OK} ${GreenBG} SSL 证书生成成功 ${Font}"
|
||
sleep 2
|
||
~/.acme.sh/acme.sh --installcert -d ${domain} --fullchainpath /etc/v2ray/v2ray.crt --keypath /etc/v2ray/v2ray.key --ecc
|
||
if [[ $? -eq 0 ]];then
|
||
echo -e "${OK} ${GreenBG} 证书配置成功 ${Font}"
|
||
sleep 2
|
||
fi
|
||
else
|
||
echo -e "${Error} ${RedBG} SSL 证书生成失败 ${Font}"
|
||
exit 1
|
||
fi
|
||
}
|
||
v2ray_conf_add(){
|
||
cd /etc/v2ray
|
||
wget https://raw.githubusercontent.com/wulabing/V2Ray_ws-tls_bash_onekey/master/tls/config.json
|
||
modify_port_UUID
|
||
judge "V2ray 配置修改"
|
||
}
|
||
nginx_conf_add(){
|
||
touch ${nginx_conf_dir}/v2ray.conf
|
||
cat>${nginx_conf_dir}/v2ray.conf<<EOF
|
||
server {
|
||
listen 443 ssl;
|
||
ssl on;
|
||
ssl_certificate /etc/v2ray/v2ray.crt;
|
||
ssl_certificate_key /etc/v2ray/v2ray.key;
|
||
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
||
ssl_ciphers HIGH:!aNULL:!MD5;
|
||
server_name serveraddr.com;
|
||
index index.html index.htm;
|
||
root /home/wwwroot/sCalc;
|
||
error_page 400 = /400.html;
|
||
location /ray/
|
||
{
|
||
proxy_redirect off;
|
||
proxy_pass http://127.0.0.1:10000;
|
||
proxy_http_version 1.1;
|
||
proxy_set_header Upgrade \$http_upgrade;
|
||
proxy_set_header Connection "upgrade";
|
||
proxy_set_header Host \$http_host;
|
||
}
|
||
}
|
||
server {
|
||
listen 80;
|
||
server_name serveraddr.com;
|
||
return 301 https://use.shadowsocksr.win\$request_uri;
|
||
}
|
||
EOF
|
||
|
||
modify_nginx
|
||
judge "Nginx 配置修改"
|
||
|
||
}
|
||
|
||
start_process_systemd(){
|
||
### nginx服务在安装完成后会自动启动。需要通过restart或reload重新加载配置
|
||
systemctl start nginx
|
||
judge "Nginx 启动"
|
||
|
||
|
||
systemctl start v2ray
|
||
judge "V2ray 启动"
|
||
}
|
||
|
||
show_information(){
|
||
clear
|
||
|
||
echo -e "${OK} ${Green} V2ray+ws+tls 安装成功 "
|
||
echo -e "${Red} V2ray 配置信息 ${Font}"
|
||
echo -e "${Red} 地址（address）:${Font} ${domain} "
|
||
echo -e "${Red} 端口（port）：${Font} ${port} "
|
||
echo -e "${Red} 用户id（UUID）：${Font} ${UUID}"
|
||
echo -e "${Red} 额外id（alterId）：${Font} ${alterID}"
|
||
echo -e "${Red} 加密方式（security）：${Font} 自适应 "
|
||
echo -e "${Red} 传输协议（network）：${Font} ws "
|
||
echo -e "${Red} 伪装类型（type）：${Font} none "
|
||
echo -e "${Red} 路径（不要落下/）：${Font} /${camouflage}/ "
|
||
echo -e "${Red} 底层传输安全：${Font} tls "
|
||
|
||
|
||
|
||
}
|
||
|
||
main(){
|
||
is_root
|
||
check_system
|
||
time_modify
|
||
dependency_install
|
||
domain_check
|
||
port_alterid_set
|
||
v2ray_install
|
||
port_exist_check 80
|
||
port_exist_check ${port}
|
||
nginx_install
|
||
v2ray_conf_add
|
||
nginx_conf_add
|
||
web_camouflage
|
||
|
||
#改变证书安装位置，防止端口冲突关闭相关应用
|
||
systemctl stop nginx
|
||
systemctl stop v2ray
|
||
|
||
#将证书生成放在最后，尽量避免多次尝试脚本从而造成的多次证书申请
|
||
ssl_install
|
||
acme
|
||
|
||
show_information
|
||
start_process_systemd
|
||
}
|
||
|
||
main
|