From bbc77894854f7112235109be8c42ee1fa863ff77 Mon Sep 17 00:00:00 2001 From: mack-a <57424792+mack-a@users.noreply.github.com> Date: Thu, 26 Aug 2021 17:42:59 +0800 Subject: [PATCH 1/3] =?UTF-8?q?feat(=E8=84=9A=E6=9C=AC):=20=E6=B7=BB?= =?UTF-8?q?=E5=8A=A0=E8=8B=B1=E6=96=87=E7=89=88=E6=9C=AC?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- documents/en/README_EN.md | 15 +- install.sh | 2 +- shell/install_en.sh | 4290 +++++++++++++++++++++++++++++++++++++ 3 files changed, 4292 insertions(+), 15 deletions(-) create mode 100644 shell/install_en.sh diff --git a/documents/en/README_EN.md b/documents/en/README_EN.md index b8561f9..e580690 100644 --- a/documents/en/README_EN.md +++ b/documents/en/README_EN.md @@ -103,21 +103,8 @@ - Support shortcut start, after installation, shell input [**vasma**] to open the script, script execution path [**/etc/v2ray-agent/install.sh**] - Latest Version - ``` -wget -P /root -N --no-check-certificate "https://raw.githubusercontent.com/mack-a/v2ray-agent/master/install.sh" && chmod 700 /root/install.sh && /root/install.sh -``` - -- Stable-v2.2.24 - -``` -wget -P /root -N --no-check-certificate "https://raw.githubusercontent.com/mack-a/v2ray-agent/9ae23c13a56460d8c14f27c8eb65efc73b173f46/install.sh" && chmod 700 /root/install.sh && /root/install.sh -``` - -- Stable-v2.1.27 - -``` -wget -P /root -N --no-check-certificate "https://raw.githubusercontent.com/mack-a/v2ray-agent/3f8ea0aa364ae2e1e407056074c11b448396261f/install.sh" && chmod 700 /root/install.sh && /root/install.sh +wget -P /root -N --no-check-certificate "https://raw.githubusercontent.com/mack-a/v2ray-agent/master/shell/install_en.sh" && chmod 700 /root/install_en.sh && mv /root/install_en.sh /root/install.sh && /root/install.sh ``` - Example diagram diff --git a/install.sh b/install.sh index 7387f64..6c1c086 100644 --- a/install.sh +++ b/install.sh @@ -4182,7 +4182,7 @@ menu() { cd "$HOME" || exit echoContent red "\n==============================================================" echoContent green "作者：mack-a" - echoContent green "当前版本：v2.5.27" + echoContent green "当前版本：v2.5.28" echoContent green "Github：https://github.com/mack-a/v2ray-agent" echoContent green "描述：八合一共存脚本\c" showInstallStatus diff --git a/shell/install_en.sh b/shell/install_en.sh new file mode 100644 index 0000000..64b3ccd --- /dev/null +++ b/shell/install_en.sh @@ -0,0 +1,4290 @@ +#!/usr/bin/env bash +# Detection area +# ------------------------------------------------------------- +# Inspection system +export LANG=en_US.UTF-8 + +echoContent() { + case $1 in + # Red + "red") + # shellcheck disable=SC2154 + ${echoType} "\033[31m${printN}$2 \033[0m" + ;; + # sky blue + "skyBlue") + ${echoType} "\033[1;36m${printN}$2 \033[0m" + ;; + # green + "green") + ${echoType} "\033[32m${printN}$2 \033[0m" + ;; + # White + "white") + ${echoType} "\033[37m${printN}$2 \033[0m" + ;; + "magenta") + ${echoType} "\033[31m${printN}$2 \033[0m" + ;; + # yellow + "yellow") + ${echoType} "\033[33m${printN}$2 \033[0m" + ;; + esac +} +checkSystem() { + if [[ -n $(find /etc -name "redhat-release") ]] || grep " + exit 1 + ;; + esac + fi + else + echoContent red " Unable to recognize this CPU architecture, default AMD64, X86_64--->" + xrayCoreCPUVendor="Xray-linux-64" + v2rayCoreCPUVendor="v2ray-linux-64" + trojanGoCPUVendor="trojan-go-linux-amd64" + fi +} + +# Initialization global variable +initVar() { + installType='yum -y install' + removeType='yum -y remove' + upgrade="yum -y update" + echoType='echo -e' + + # Core supported CPU version + xrayCoreCPUVendor="" + v2rayCoreCPUVendor="" + trojanGoCPUVendor="" + # domain name + domain= + + # Cdn node Address + add= + + # Total installation + totalProgress=1 + + # 1.xray-core Install + # 2.v2ray-core Install + # 3.v2ray-core[xtls] Install + coreInstallType= + + # Core installation PATH + # coreInstallPath= + + # v2ctl Path + ctlPath= + # 1.All installation + # 2.Personalization installation + # v2rayAgentInstallType= + + # Current personalization installation method 01234 + currentInstallProtocolType= + + # Pre-type + frontingType= + + # Selected personalized installation method + selectCustomInstallType= + + # v2ray-core、xray-core Path of the configuration file + configPath= + + # Profile path + currentPath= + + # Profile host + currentHost= + + # Selected when installing core Types of + selectCoreType= + + # Default Core version + v2rayCoreVersion= + + # Random path + customPath= + + # centos version + centosVersion= + + # UUID + currentUUID= + + # pingIPv6 pingIPv4 + # pingIPv4= + pingIP= + pingIPv6= + localIP= + + # 集成更新证书逻辑不再使用单独的脚本--RenewTLS + renewTLS=$1 + + # tls安装失败后尝试的次数 + installTLSCount= +} + +# Detection installation method +readInstallType() { + coreInstallType= + configPath= + + # 1.Detection installation directory + if [[ -d "/etc/v2ray-agent" ]]; then + # Detection installation method v2ray-core + if [[ -d "/etc/v2ray-agent/v2ray" && -f "/etc/v2ray-agent/v2ray/v2ray" && -f "/etc/v2ray-agent/v2ray/v2ctl" ]]; then + if [[ -d "/etc/v2ray-agent/v2ray/conf" && -f "/etc/v2ray-agent/v2ray/conf/02_VLESS_TCP_inbounds.json" ]]; then + configPath=/etc/v2ray-agent/v2ray/conf/ + + if ! grep /dev/null + rm -f /etc/systemd/system/v2ray.service + elif [[ "$1" == "xrayClean" ]]; then + rm -rf "$(find /etc/v2ray-agent/xray/* | grep -E '(config_full.json|conf)')" + handleXray stop >/dev/null + rm -f /etc/systemd/system/xray.service + + elif [[ "$1" == "v2rayDel" ]]; then + rm -rf /etc/v2ray-agent/v2ray/* + + elif [[ "$1" == "xrayDel" ]]; then + rm -rf /etc/v2ray-agent/xray/* + fi +} + +initVar $1 +checkSystem +checkCPUVendor +readInstallType +readInstallProtocolType +readConfigHostPathUUID + +# ------------------------------------------------------------- + +# Initialization installation directory +mkdirTools() { + mkdir -p /etc/v2ray-agent/tls + mkdir -p /etc/v2ray-agent/subscribe + mkdir -p /etc/v2ray-agent/subscribe_tmp + mkdir -p /etc/v2ray-agent/v2ray/conf + mkdir -p /etc/v2ray-agent/xray/conf + mkdir -p /etc/v2ray-agent/trojan + mkdir -p /etc/systemd/system/ + mkdir -p /tmp/v2ray-agent-tls/ +} + +# Installation kit +installTools() { + echo 'Installation tool' + echoContent skyBlue "\nprogress $1/${totalProgress} : Installation tool" + # Repair Ubuntu Individual System Issues + if [[ "${release}" == "ubuntu" ]]; then + dpkg --configure -a + fi + + if [[ -n $(pgrep -f "apt") ]]; then + pgrep -f apt | xargs kill -9 + fi + + echoContent green " ---> Check, installation update [new machine will be very slow, if there is no response for a long time, please re-execute it manually]" + + ${upgrade} >/dev/null 2>&1 + if [[ "${release}" == "centos" ]]; then + rm -rf /var/run/yum.pid + ${installType} epel-release >/dev/null 2>&1 + fi + + # [[ -z `find /usr/bin /usr/sbin |grep -v grep|grep -w curl` ]] + + if ! find /usr/bin /usr/sbin | grep -q -w wget; then + echoContent green " ---> Install wget" + ${installType} wget >/dev/null 2>&1 + fi + + if ! find /usr/bin /usr/sbin | grep -q -w curl; then + echoContent green " ---> Install CURL" + ${installType} curl >/dev/null 2>&1 + fi + + if ! find /usr/bin /usr/sbin | grep -q -w unzip; then + echoContent green " ---> Install unzip" + ${installType} unzip >/dev/null 2>&1 + fi + + if ! find /usr/bin /usr/sbin | grep -q -w socat; then + echoContent green " ---> Install SOCAT" + ${installType} socat >/dev/null 2>&1 + fi + + if ! find /usr/bin /usr/sbin | grep -q -w tar; then + echoContent green " ---> Install tar" + ${installType} tar >/dev/null 2>&1 + fi + + if ! find /usr/bin /usr/sbin | grep -q -w cron; then + echoContent green " ---> Install crontabs" + if [[ "${release}" == "ubuntu" ]] || [[ "${release}" == "debian" ]]; then + ${installType} cron >/dev/null 2>&1 + else + ${installType} crontabs >/dev/null 2>&1 + fi + fi + if ! find /usr/bin /usr/sbin | grep -q -w jq; then + echoContent green " ---> Install JQ" + ${installType} jq >/dev/null 2>&1 + fi + + if ! find /usr/bin /usr/sbin | grep -q -w binutils; then + echoContent green " ---> Install binutils" + ${installType} binutils >/dev/null 2>&1 + fi + + if ! find /usr/bin /usr/sbin | grep -q -w ping6; then + echoContent green " ---> Install PING6" + ${installType} inetutils-ping >/dev/null 2>&1 + fi + + if ! find /usr/bin /usr/sbin | grep -q -w qrencode; then + echoContent green " ---> Install QRencode" + ${installType} qrencode >/dev/null 2>&1 + fi + + if ! find /usr/bin /usr/sbin | grep -q -w sudo; then + echoContent green " ---> Cheap Sudo" + ${installType} sudo >/dev/null 2>&1 + fi + + if ! find /usr/bin /usr/sbin | grep -q -w lsb-release; then + echoContent green " ---> Install LSB-RELEASE" + ${installType} lsb-release >/dev/null 2>&1 + fi + + # Detect the NGINX version and provide options to be uninstalled + + if ! find /usr/bin /usr/sbin | grep -q -w nginx; then + echoContent green " ---> Install nginx" + installNginxTools + else + nginxVersion=$(nginx -v 2>&1) + nginxVersion=$(echo "${nginxVersion}" | awk -F "[n][g][i][n][x][/]" '{print $2}' | awk -F "[.]" '{print $2}') + if [[ ${nginxVersion} -lt 14 ]]; then + read -r -p "Reading to the current NGINX version does not support GRPC, resulting in failure, whether to uninstall NGINX, reinstall ？[y/n]:" unInstallNginxStatus + if [[ "${unInstallNginxStatus}" == "y" ]]; then + ${removeType} nginx >/dev/null 2>&1 + echoContent yellow " ---> Nginx uninstalled completion" + echoContent green " ---> Install nginx" + installNginxTools >/dev/null 2>&1 + else + exit 0 + fi + fi + fi + if ! find /usr/bin /usr/sbin | grep -q -w semanage; then + echoContent green " ---> Install semanage" + ${installType} bash-completion >/dev/null 2>&1 + + if [[ "${centosVersion}" == "7" ]]; then + policyCoreUtils="policycoreutils-python.x86_64" + elif [[ "${centosVersion}" == "8" ]]; then + policyCoreUtils="policycoreutils-python-utils-2.9-9.el8.noarch" + fi + + if [[ -n "${policyCoreUtils}" ]]; then + ${installType} ${policyCoreUtils} >/dev/null 2>&1 + fi + if [[ -n $(which semanage) ]]; then + semanage port -a -t http_port_t -p tcp 31300 + + fi + fi + + if [[ ! -d "$HOME/.acme.sh" ]] || [[ -d "$HOME/.acme.sh" && -z $(find "$HOME/.acme.sh/acme.sh") ]]; then + echoContent green " ---> Install acme.sh" + curl -s https://get.acme.sh | sh -s >/etc/v2ray-agent/tls/acme.log 2>&1 + if [[ ! -d "$HOME/.acme.sh" ]] || [[ -z $(find "$HOME/.acme.sh/acme.sh") ]]; then + echoContent red " acme installation failed--->" + tail -n 100 /etc/v2ray-agent/tls/acme.log + echoContent yellow "Error investigation:" + echoContent red " 1.Get the github file failed, please wait for Gitub to restore, try, recover progress to view [https://www.githubstatus.com/]" + echoContent red " 2.acme.the sh script has bugs, you can view[https://github.com/acmesh-official/acme.sh] issues" + exit 0 + fi + fi +} + +# Install nginx +installNginxTools() { + + if [[ "${release}" == "debian" ]]; then + sudo apt install gnupg2 ca-certificates lsb-release -y >/dev/null 2>&1 + echo "deb http://nginx.org/packages/mainline/debian $(lsb_release -cs) nginx" | sudo tee /etc/apt/sources.list.d/nginx.list >/dev/null 2>&1 + echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n" | sudo tee /etc/apt/preferences.d/99nginx >/dev/null 2>&1 + curl -o /tmp/nginx_signing.key https://nginx.org/keys/nginx_signing.key >/dev/null 2>&1 + # gpg --dry-run --quiet --import --import-options import-show /tmp/nginx_signing.key + sudo mv /tmp/nginx_signing.key /etc/apt/trusted.gpg.d/nginx_signing.asc + sudo apt update >/dev/null 2>&1 + + elif [[ "${release}" == "ubuntu" ]]; then + sudo apt install gnupg2 ca-certificates lsb-release -y >/dev/null 2>&1 + echo "deb http://nginx.org/packages/mainline/ubuntu $(lsb_release -cs) nginx" | sudo tee /etc/apt/sources.list.d/nginx.list >/dev/null 2>&1 + echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n" | sudo tee /etc/apt/preferences.d/99nginx >/dev/null 2>&1 + curl -o /tmp/nginx_signing.key https://nginx.org/keys/nginx_signing.key >/dev/null 2>&1 + # gpg --dry-run --quiet --import --import-options import-show /tmp/nginx_signing.key + sudo mv /tmp/nginx_signing.key /etc/apt/trusted.gpg.d/nginx_signing.asc + sudo apt update >/dev/null 2>&1 + + elif [[ "${release}" == "centos" ]]; then + ${installType} yum-utils >/dev/null 2>&1 + cat </etc/yum.repos.d/nginx.repo +[nginx-stable] +name=nginx stable repo +baseurl=http://nginx.org/packages/centos/\$releasever/\$basearch/ +gpgcheck=1 +enabled=1 +gpgkey=https://nginx.org/keys/nginx_signing.key +module_hotfixes=true + +[nginx-mainline] +name=nginx mainline repo +baseurl=http://nginx.org/packages/mainline/centos/\$releasever/\$basearch/ +gpgcheck=1 +enabled=0 +gpgkey=https://nginx.org/keys/nginx_signing.key +module_hotfixes=true +EOF + sudo yum-config-manager --enable nginx-mainline >/dev/null 2>&1 + fi + ${installType} nginx >/dev/null 2>&1 + systemctl daemon-reload + systemctl enable nginx +} + +# Install WARP +installWarp(){ + ${installType} gnupg2 -y >/dev/null 2>&1 + if [[ "${release}" == "debian" ]]; then + curl -s https://pkg.cloudflareclient.com/pubkey.gpg | sudo apt-key add - >/dev/null 2>&1 + echo "deb http://pkg.cloudflareclient.com/ $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/cloudflare-client.list >/dev/null 2>&1 + sudo apt update >/dev/null 2>&1 + + elif [[ "${release}" == "ubuntu" ]]; then + curl -s https://pkg.cloudflareclient.com/pubkey.gpg | sudo apt-key add - >/dev/null 2>&1 + echo "deb http://pkg.cloudflareclient.com/ focal main" | sudo tee /etc/apt/sources.list.d/cloudflare-client.list >/dev/null 2>&1 + sudo apt update >/dev/null 2>&1 + + elif [[ "${release}" == "centos" ]]; then + ${installType} yum-utils >/dev/null 2>&1 + sudo rpm -ivh http://pkg.cloudflareclient.com/cloudflare-release-el${centosVersion}.rpm >/dev/null 2>&1 + fi + + echoContent green " ---> Install WARP" + ${installType} cloudflare-warp >/dev/null 2>&1 + if [[ -z $(which warp-cli) ]];then + echoContent red " ---> Install WARP failed" + exit 0; + fi + systemctl enable warp-svc + warp-cli --accept-tos register + warp-cli --accept-tos set-mode proxy + warp-cli --accept-tos set-proxy-port 31303 + warp-cli --accept-tos connect +# if [[]];then +# fi + # todo curl --socks5 127.0.0.1:31303 https://www.cloudflare.com/cdn-cgi/trace + # systemctl daemon-reload + # systemctl enable cloudflare-warp +} +# Initialization Nginx application certificate configuration +initTLSNginxConfig() { + handleNginx stop + echoContent skyBlue "\n progress $1/${totalProgress} : Initialization Nginx application certificate configuration" + if [[ -n "${currentHost}" ]]; then + echo + read -r -p "Read it to the last installation record, whether the domain name when the last installation is used ？[y/n]:" historyDomainStatus + if [[ "${historyDomainStatus}" == "y" ]]; then + domain=${currentHost} + echoContent yellow "\n ---> domain name:${domain}" + else + echo + echoContent yellow "Please enter the domain name to configure：www.v2ray-agent.com --->" + read -r -p "domain name:" domain + fi + else + echo + echoContent yellow "Please enter the domain name you want to configure example：www.v2ray-agent.com --->" + read -r -p "domain name:" domain + fi + + if [[ -z ${domain} ]]; then + echoContent red " Domain name--->" + initTLSNginxConfig + else + # 修改配置 + touch /etc/nginx/conf.d/alone.conf + cat </etc/nginx/conf.d/alone.conf +server { + listen 80; + listen [::]:80; + server_name ${domain}; + root /usr/share/nginx/html; + location ~ /.well-known { + allow all; + } + location /test { + return 200 'fjkvymb6len'; + } + location /ip { + proxy_set_header Host \$host; + proxy_set_header X-Real-IP \$remote_addr; + proxy_set_header REMOTE-HOST \$remote_addr; + proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; + default_type text/plain; + return 200 \$proxy_add_x_forwarded_for; + } +} +EOF + # 启动nginx + handleNginx start + checkIP + fi +} + +# Modify NGINX redirection configuration +updateRedirectNginxConf() { + + cat </etc/nginx/conf.d/alone.conf +server { + listen 80; + listen [::]:80; + server_name ${domain}; + # shellcheck disable=SC2154 + return 301 https://${domain}$request_uri; +} +server { + listen 127.0.0.1:31300; + server_name _; + return 403; +} +EOF +if [[ -n $(echo "${selectCustomInstallType}" |grep 2) && -n $(echo "${selectCustomInstallType}" |grep 5) ]] || [[ -z "${selectCustomInstallType}" ]];then + + cat <>/etc/nginx/conf.d/alone.conf +server { + listen 127.0.0.1:31302 http2; + server_name ${domain}; + root /usr/share/nginx/html; + location /s/ { + add_header Content-Type text/plain; + alias /etc/v2ray-agent/subscribe/; + } + + location /${currentPath}grpc { + client_max_body_size 0; +# keepalive_time 1071906480m; + keepalive_requests 4294967296; + client_body_timeout 1071906480m; + send_timeout 1071906480m; + lingering_close always; + grpc_read_timeout 1071906480m; + grpc_send_timeout 1071906480m; + grpc_pass grpc://127.0.0.1:31301; + } + + location /${currentPath}trojangrpc { + client_max_body_size 0; + # keepalive_time 1071906480m; + keepalive_requests 4294967296; + client_body_timeout 1071906480m; + send_timeout 1071906480m; + lingering_close always; + grpc_read_timeout 1071906480m; + grpc_send_timeout 1071906480m; + grpc_pass grpc://127.0.0.1:31304; + } +} +EOF + elif echo "${selectCustomInstallType}" |grep -q 5 || [[ -z "${selectCustomInstallType}" ]]; then + cat <>/etc/nginx/conf.d/alone.conf +server { + listen 127.0.0.1:31302 http2; + server_name ${domain}; + root /usr/share/nginx/html; + location /s/ { + add_header Content-Type text/plain; + alias /etc/v2ray-agent/subscribe/; + } + location /${currentPath}grpc { + client_max_body_size 0; +# keepalive_time 1071906480m; + keepalive_requests 4294967296; + client_body_timeout 1071906480m; + send_timeout 1071906480m; + lingering_close always; + grpc_read_timeout 1071906480m; + grpc_send_timeout 1071906480m; + grpc_pass grpc://127.0.0.1:31301; + } +} +EOF + + elif echo "${selectCustomInstallType}" |grep -q 2 || [[ -z "${selectCustomInstallType}" ]];then + + cat <>/etc/nginx/conf.d/alone.conf +server { + listen 127.0.0.1:31302 http2; + server_name ${domain}; + root /usr/share/nginx/html; + location /s/ { + add_header Content-Type text/plain; + alias /etc/v2ray-agent/subscribe/; + } + location /${currentPath}trojangrpc { + client_max_body_size 0; + # keepalive_time 1071906480m; + keepalive_requests 4294967296; + client_body_timeout 1071906480m; + send_timeout 1071906480m; + lingering_close always; + grpc_read_timeout 1071906480m; + grpc_send_timeout 1071906480m; + grpc_pass grpc://127.0.0.1:31301; + } +} +EOF + else + + cat <>/etc/nginx/conf.d/alone.conf +server { + listen 127.0.0.1:31302 http2; + server_name ${domain}; + root /usr/share/nginx/html; + location /s/ { + add_header Content-Type text/plain; + alias /etc/v2ray-agent/subscribe/; + } + location / { + } +} +EOF + fi + + cat <>/etc/nginx/conf.d/alone.conf +server { + listen 127.0.0.1:31300; + server_name ${domain}; + root /usr/share/nginx/html; + location /s/ { + add_header Content-Type text/plain; + alias /etc/v2ray-agent/subscribe/; + } + location / { + add_header Strict-Transport-Security "max-age=15552000; preload" always; + } +} +EOF + +} + +# Check IP +checkIP() { + echoContent skyBlue "\n ---> Check the domain name IP address" + localIP=$(curl -s -m 2 "${domain}/ip") + handleNginx stop + if [[ -z ${localIP} ]] || ! echo "${localIP}"|sed '1{s/[^(]*(//;s/).*//;q}'|grep -q '\.' && ! echo "${localIP}"|sed '1{s/[^(]*(//;s/).*//;q}'|grep -q ':';then + echoContent red "\n ---> The ip of the current domain name is not detected" + echoContent yellow " ---> Please check if the domain name is written correctly" + echoContent yellow " ---> Please check whether the domain name dns resolution is correct" + echoContent yellow " ---> If the resolution is correct, please wait for the dns to take effect, it is expected to take effect within three minutes" + echoContent yellow " ---> If the above settings are correct, please try again after reinstalling the pure system" + if [[ -n ${localIP} ]];then + echoContent yellow " ---> Detecting return value exceptions" + fi + echoContent red " ---> Please check if the firewall is closed\n" + read -r -p "Whether to turn off the firewall via script？[y/n]:" disableFirewallStatus + if [[ ${disableFirewallStatus} == "y" ]];then + handleFirewall stop + fi + + exit 0; + fi + + if echo "${localIP}"|awk -F "[,]" '{print $2}'|grep -q "." || echo "${localIP}"|awk -F "[,]" '{print $2}'|grep -q ":";then + echoContent red "\n ---> Multiple ip detected, please confirm whether to turn off the cloudflare proxy" + echoContent yellow " ---> Close the cloudflare proxy and wait three minutes before retrying" + echoContent yellow " ---> The detected ip is as follows：[${localIP}]" + exit 0; + fi + + echoContent green " ---> Current domain ip is：[${localIP}]" +} +# Install TLS +installTLS() { + echoContent skyBlue "\n progress $1/${totalProgress} : Apply for a TLS certificate\n" + local tlsDomain=${domain} + # Install TLS + if [[ -f "/etc/v2ray-agent/tls/${tlsDomain}.crt" && -f "/etc/v2ray-agent/tls/${tlsDomain}.key" && -n $(cat "/etc/v2ray-agent/tls/${tlsDomain}.crt") ]] || [[ -d "$HOME/.acme.sh/${tlsDomain}_ecc" && -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.key" && -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.cer" ]]; then + # Have a certificate + echoContent green " ---> Certificate" + checkTLStatus "${tlsDomain}" + if [[ "${tlsStatus}" == "expired" ]]; then + rm -rf $HOME/.acme.sh/${tlsDomain}_ecc/* + rm -rf /etc/v2ray-agent/tls/${tlsDomain}* + installTLS "$1" + else + echoContent green " ---> Certificate is valid" + + if ! ls /etc/v2ray-agent/tls/ | grep -q "${tlsDomain}.crt" || ! ls /etc/v2ray-agent/tls/ | grep -q "${tlsDomain}.key" || [[ -z $(cat "/etc/v2ray-agent/tls/${tlsDomain}.crt") ]]; then + sudo "$HOME/.acme.sh/acme.sh" --installcert -d "${tlsDomain}" --fullchainpath "/etc/v2ray-agent/tls/${tlsDomain}.crt" --keypath "/etc/v2ray-agent/tls/${tlsDomain}.key" --ecc >/dev/null + else + echoContent yellow " ---> If you have not expired, please choose[n]\n" + read -r -p "Do you reinstall?[y/n]:" reInstallStatus + if [[ "${reInstallStatus}" == "y" ]]; then + rm -rf /etc/v2ray-agent/tls/* + installTLS "$1" + fi + fi + fi + elif [[ -d "$HOME/.acme.sh" ]] && [[ ! -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.cer" || ! -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.key" ]]; then + echoContent green " ---> Install TLS certificate" + if [[ -n "${pingIPv6}" ]]; then + sudo "$HOME/.acme.sh/acme.sh" --issue -d "${tlsDomain}" --standalone -k ec-256 --server letsencrypt --listen-v6 >> /etc/v2ray-agent/tls/acme.log + else + sudo "$HOME/.acme.sh/acme.sh" --issue -d "${tlsDomain}" --standalone -k ec-256 --server letsencrypt >> /etc/v2ray-agent/tls/acme.log + fi + + if [[ -d "$HOME/.acme.sh/${tlsDomain}_ecc" && -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.key" && -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.cer" ]]; then + sudo "$HOME/.acme.sh/acme.sh" --installcert -d "${tlsDomain}" --fullchainpath "/etc/v2ray-agent/tls/${tlsDomain}.crt" --keypath "/etc/v2ray-agent/tls/${tlsDomain}.key" --ecc >/dev/null + fi + + if [[ ! -f "/etc/v2ray-agent/tls/${tlsDomain}.crt" || ! -f "/etc/v2ray-agent/tls/${tlsDomain}.key" ]] || [[ -z $(cat "/etc/v2ray-agent/tls/${tlsDomain}.key") || -z $(cat "/etc/v2ray-agent/tls/${tlsDomain}.crt") ]]; then + tail -n 10 /etc/v2ray-agent/tls/acme.log + if [[ ${installTLSCount} == "1" ]];then + echoContent red " ---> TLS installation failed, please check acme logs" + exit 0 + fi + echoContent red " ---> TLS installation failed, check the firewall in" + handleFirewall stop + echoContent yellow " ---> Retry to install the TLS certificate" + installTLSCount=1 + installTLS "$1" + fi + echoContent green " ---> TLS generation success" + else + echoContent yellow " ---> No acme is installed" + exit 0 + fi +} +# Configure a camouflage blog +initNginxConfig() { + echoContent skyBlue "\n progress $1/${totalProgress} : Configuring nginx" + + cat </etc/nginx/conf.d/alone.conf +server { + listen 80; + listen [::]:80; + server_name ${domain}; + root /usr/share/nginx/html; + location ~ /.well-known {allow all;} + location /test {return 200 'fjkvymb6len';} +} +EOF +} + +# customize/Random path +randomPathFunction() { + echoContent skyBlue "\n progress $1/${totalProgress} : Generate a random path" + + if [[ -n "${currentPath}" ]]; then + echo + read -r -p "Read to the last installation record, use the PATH path when the last installation is installed ？[y/n]:" historyPathStatus + echo + fi + + if [[ "${historyPathStatus}" == "y" ]]; then + customPath=${currentPath} + echoContent green " ---> Successful use\n" + else + echoContent yellow "Please enter a custom path[example: alone] path should be without slash. empty means random" + read -r -p 'path:' customPath + + if [[ -z "${customPath}" ]]; then + customPath=$(head -n 50 /dev/urandom | sed 's/[^a-z]//g' | strings -n 4 | tr 'A-Z' 'a-z' | head -1) + currentPath=${customPath:0:4} + customPath=${currentPath} + else + currentPath=${customPath} + fi + + fi + echoContent yellow "\n path：${currentPath}" + echoContent skyBlue "\n----------------------------" +} +# Nginx camouflage blog +nginxBlog() { + echoContent skyBlue "\n progress $1/${totalProgress} : Add a camouflage site" + if [[ -d "/usr/share/nginx/html" && -f "/usr/share/nginx/html/check" ]]; then + echo + read -r -p "Detecting the installation camouflage site, do you need to reinstall?[y/n]：" nginxBlogInstallStatus + if [[ "${nginxBlogInstallStatus}" == "y" ]]; then + rm -rf /usr/share/nginx/html + randomNum=$((RANDOM%6+1)) + wget -q -P /usr/share/nginx https://raw.githubusercontent.com/mack-a/v2ray-agent/master/fodder/blog/unable/html${randomNum}.zip >/dev/null + unzip -o /usr/share/nginx/html${randomNum}.zip -d /usr/share/nginx/html >/dev/null + rm -f /usr/share/nginx/html${randomNum}.zip* + echoContent green " ---> Add a camouflage site successfully" + fi + else + randomNum=$((RANDOM%6+1)) + rm -rf /usr/share/nginx/html + wget -q -P /usr/share/nginx https://raw.githubusercontent.com/mack-a/v2ray-agent/master/fodder/blog/unable/html${randomNum}.zip >/dev/null + unzip -o /usr/share/nginx/html${randomNum}.zip -d /usr/share/nginx/html >/dev/null + rm -f /usr/share/nginx/html${randomNum}.zip* + echoContent green " ---> Add a camouflage site successfully" + fi + +} +# Operation Nginx +handleNginx() { + + if [[ -z $(pgrep -f "nginx") ]] && [[ "$1" == "start" ]]; then + nginx + sleep 0.5 + if ! ps -ef | grep -v grep | grep -q nginx; then + echoContent red " ---> Nginx start failed" + echoContent red " ---> Please manually try NGINX, execute the script again" + exit 0 + fi + elif [[ "$1" == "stop" ]] && [[ -n $(pgrep -f "nginx") ]]; then + nginx -s stop >/dev/null 2>&1 + sleep 0.5 + if [[ -n $(pgrep -f "nginx") ]]; then + pgrep -f "nginx" | xargs kill -9 + fi + fi +} + +# Timed task update TLS certificate +installCronTLS() { + echoContent skyBlue "\n progress $1/${totalProgress} : Add tls certificate" + crontab -l >/etc/v2ray-agent/backup_crontab.cron + local historyCrontab=$(sed '/v2ray-agent/d;/acme.sh/d' /etc/v2ray-agent/backup_crontab.cron) + echo "${historyCrontab}" >/etc/v2ray-agent/backup_crontab.cron + echo "30 1 * * * /bin/bash /etc/v2ray-agent/install.sh RenewTLS >> /etc/v2ray-agent/crontab_tls.log 2>&1" >>/etc/v2ray-agent/backup_crontab.cron + crontab /etc/v2ray-agent/backup_crontab.cron + echoContent green "\n ---> Adding tls success" +} + +# Update certificate +renewalTLS() { + echoContent skyBlue "\n progress 1/1 : Update certificate" + + if [[ -d "$HOME/.acme.sh/${currentHost}_ecc" ]] && [[ -f "$HOME/.acme.sh/${currentHost}_ecc/${currentHost}.key" ]] && [[ -f "$HOME/.acme.sh/${currentHost}_ecc/${currentHost}.cer" ]]; then + modifyTime=$(stat $HOME/.acme.sh/${currentHost}_ecc/${currentHost}.cer | sed -n '7,6p' | awk '{print $2" "$3" "$4" "$5}') + + modifyTime=$(date +%s -d "${modifyTime}") + currentTime=$(date +%s) + stampDiff=$(expr ${currentTime} - ${modifyTime}) + days=$(expr ${stampDiff} / 86400) + remainingDays=$(expr 90 - ${days}) + tlsStatus=${remainingDays} + if [[ ${remainingDays} -le 0 ]]; then + tlsStatus="expired" + fi + + echoContent skyBlue " ---> Certificate check dates:$(date "+%F %H:%M:%S")" + echoContent skyBlue " ---> Certificate generation date:$(date -d @"${modifyTime}" +"%F %H:%M:%S")" + echoContent skyBlue " ---> Certificate generation days:${days}" + echoContent skyBlue " ---> Certificate remaining days:"${tlsStatus} + echoContent skyBlue " ---> Automatic update before the certificate expires, such as update failure, please update manually" + + if [[ ${remainingDays} -le 1 ]]; then + echoContent yellow " ---> Regeneration certificate" + handleNginx stop + sudo "$HOME/.acme.sh/acme.sh" --cron --home "$HOME/.acme.sh" + sudo "$HOME/.acme.sh/acme.sh" --installcert -d "${currentHost}" --fullchainpath /etc/v2ray-agent/tls/"${currentHost}.crt" --keypath /etc/v2ray-agent/tls/"${currentHost}.key" --ecc + reloadCore + else + echoContent green " ---> Certificate is valid" + fi + else + echoContent red " ---> Not Installed" + fi +} +# View the status of the TLS certificate +checkTLStatus() { + + if [[ -n "$1" ]]; then + if [[ -d "$HOME/.acme.sh/$1_ecc" ]] && [[ -f "$HOME/.acme.sh/$1_ecc/$1.key" ]] && [[ -f "$HOME/.acme.sh/$1_ecc/$1.cer" ]]; then + modifyTime=$(stat $HOME/.acme.sh/$1_ecc/$1.key | sed -n '7,6p' | awk '{print $2" "$3" "$4" "$5}') + + modifyTime=$(date +%s -d "${modifyTime}") + currentTime=$(date +%s) + stampDiff=$(expr ${currentTime} - ${modifyTime}) + days=$(expr ${stampDiff} / 86400) + remainingDays=$(expr 90 - ${days}) + tlsStatus=${remainingDays} + if [[ ${remainingDays} -le 0 ]]; then + tlsStatus="expired" + fi + echoContent skyBlue " ---> Certificate generation date:$(date -d "@${modifyTime}" +"%F %H:%M:%S")" + echoContent skyBlue " ---> Certificate generation days:${days}" + echoContent skyBlue " ---> Certificate remaining days:${tlsStatus}" + fi + fi +} + +# Install v2ray, specify version +installV2Ray() { + readInstallType + echoContent skyBlue "\n progress $1/${totalProgress} : Install v2ray" + + if [[ "${coreInstallType}" != "2" && "${coreInstallType}" != "3" ]]; then + if [[ "${selectCoreType}" == "2" ]]; then + + version=$(curl -s https://api.github.com/repos/v2fly/v2ray-core/releases | jq -r .[].tag_name|head -1) + else + version=${v2rayCoreVersion} + fi + + echoContent green " ---> v2ray-core version:${version}" + if wget --help | grep -q show-progress; then + wget -c -q --show-progress -P /etc/v2ray-agent/v2ray/ "https://github.com/v2fly/v2ray-core/releases/download/${version}/${v2rayCoreCPUVendor}.zip" + else + wget -c -P /etc/v2ray-agent/v2ray/ "https://github.com/v2fly/v2ray-core/releases/download/${version}/${v2rayCoreCPUVendor}.zip" >/dev/null 2>&1 + fi + + unzip -o /etc/v2ray-agent/v2ray/${v2rayCoreCPUVendor}.zip -d /etc/v2ray-agent/v2ray >/dev/null + rm -rf /etc/v2ray-agent/v2ray/${v2rayCoreCPUVendor}.zip + else + if [[ "${selectCoreType}" == "3" ]]; then + echoContent green " ---> lock v2ray-core version is v4.32.1" + rm -f /etc/v2ray-agent/v2ray/v2ray + rm -f /etc/v2ray-agent/v2ray/v2ctl + installV2Ray "$1" + else + echoContent green " ---> v2ray-core version:$(/etc/v2ray-agent/v2ray/v2ray --version | awk '{print $2}' | head -1)" + read -r -p "Is it updated, upgrade?[y/n]:" reInstallV2RayStatus + if [[ "${reInstallV2RayStatus}" == "y" ]]; then + rm -f /etc/v2ray-agent/v2ray/v2ray + rm -f /etc/v2ray-agent/v2ray/v2ctl + installV2Ray "$1" + fi + fi + fi +} + +# Install XRay +installXray() { + readInstallType + echoContent skyBlue "\n progress $1/${totalProgress} : Install XRay" + + if [[ "${coreInstallType}" != "1" ]]; then + + version=$(curl -s https://api.github.com/repos/XTLS/Xray-core/releases | jq -r .[].tag_name|head -1) + + echoContent green " ---> Xray-core version:${version}" + if wget --help | grep -q show-progress; then + wget -c -q --show-progress -P /etc/v2ray-agent/xray/ "https://github.com/XTLS/Xray-core/releases/download/${version}/${xrayCoreCPUVendor}.zip" + else + wget -c -P /etc/v2ray-agent/xray/ "https://github.com/XTLS/Xray-core/releases/download/${version}/${xrayCoreCPUVendor}.zip" >/dev/null 2>&1 + fi + + unzip -o /etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip -d /etc/v2ray-agent/xray >/dev/null + rm -rf /etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip + chmod 655 /etc/v2ray-agent/xray/xray + else + echoContent green " ---> Xray-core version:$(/etc/v2ray-agent/xray/xray --version | awk '{print $2}' | head -1)" + read -r -p "Is it updated, upgrade?[y/n]:" reInstallXrayStatus + if [[ "${reInstallXrayStatus}" == "y" ]]; then + rm -f /etc/v2ray-agent/xray/xray + installXray "$1" + fi + fi +} + +# Install Trojan-go +installTrojanGo() { + echoContent skyBlue "\n progress $1/${totalProgress} : Install Trojan-Go" + + if ! ls /etc/v2ray-agent/trojan/ | grep -q trojan-go; then + + version=$(curl -s https://api.github.com/repos/p4gefau1t/trojan-go/releases | jq -r .[0].tag_name) + echoContent green " ---> Trojan-Go version:${version}" + if wget --help | grep -q show-progress; then + wget -c -q --show-progress -P /etc/v2ray-agent/trojan/ "https://github.com/p4gefau1t/trojan-go/releases/download/${version}/${trojanGoCPUVendor}.zip" + else + wget -c -P /etc/v2ray-agent/trojan/ "https://github.com/p4gefau1t/trojan-go/releases/download/${version}/${trojanGoCPUVendor}.zip" >/dev/null 2>&1 + fi + unzip -o /etc/v2ray-agent/trojan/${trojanGoCPUVendor}.zip -d /etc/v2ray-agent/trojan >/dev/null + rm -rf /etc/v2ray-agent/trojan/${trojanGoCPUVendor}.zip + else + echoContent green " ---> Trojan-Go version:$(/etc/v2ray-agent/trojan/trojan-go --version | awk '{print $2}' | head -1)" + + read -r -p "Do you reinstall?[y/n]:" reInstallTrojanStatus + if [[ "${reInstallTrojanStatus}" == "y" ]]; then + rm -rf /etc/v2ray-agent/trojan/trojan-go* + installTrojanGo "$1" + fi + fi +} + +# V2Ray version management +v2rayVersionManageMenu() { + echoContent skyBlue "\n progress $1/${totalProgress} : V2Ray version management" + if [[ ! -d "/etc/v2ray-agent/v2ray/" ]]; then + echoContent red " ---> No installation directory is detected, please perform script installation content" + menu + exit 0 + fi + echoContent red "\n==============================================================" + echoContent yellow "1.upgrade" + echoContent yellow "2.go back" + echoContent yellow "3.Close V2ray-core" + echoContent yellow "4.Open v2ray-core" + echoContent yellow "5.Restart V2Ray-core" + echoContent red "==============================================================" + read -r -p "please choose:" selectV2RayType + if [[ "${selectV2RayType}" == "1" ]]; then + updateV2Ray + elif [[ "${selectV2RayType}" == "2" ]]; then + echoContent yellow "\n1.Can only fall back to the most recent version" + echoContent yellow "2.Do not guarantee that you must use it normally after the fallback" + echoContent yellow "3.If the version of the rollback does not support the current config, it will not be able to connect, careful" + echoContent skyBlue "------------------------Version-------------------------------" + curl -s https://api.github.com/repos/v2fly/v2ray-core/releases | jq -r .[].tag_name| head -5| awk '{print ""NR""":"$0}' + + echoContent skyBlue "--------------------------------------------------------------" + read -r -p "Please enter the version you want to fall back:" selectV2rayVersionType + version=$(curl -s https://api.github.com/repos/v2fly/v2ray-core/releases | jq -r .[].tag_name| head -5| awk '{print ""NR""":"$0}' | grep "${selectV2rayVersionType}:" | awk -F "[:]" '{print $2}') + if [[ -n "${version}" ]]; then + updateV2Ray ${version} + else + echoContent red "\n ---> Enter is incorrect, please re-enter" + v2rayVersionManageMenu 1 + fi + elif [[ "${selectXrayType}" == "3" ]]; then + handleV2Ray stop + elif [[ "${selectXrayType}" == "4" ]]; then + handleV2Ray start + elif [[ "${selectXrayType}" == "5" ]]; then + reloadCore + fi +} + +# XRay version management +xrayVersionManageMenu() { + echoContent skyBlue "\n progress $1/${totalProgress} : XRay version management" + if [[ ! -d "/etc/v2ray-agent/xray/" ]]; then + echoContent red " ---> No installation directory is detected, please perform script installation content" + menu + exit 0 + fi + echoContent red "\n==============================================================" + echoContent yellow "1.upgrade" + echoContent yellow "2.go back" + echoContent yellow "3.Close xray-core" + echoContent yellow "4.Open xray-core" + echoContent yellow "5.Restart XRAY-core" + echoContent red "==============================================================" + read -r -p "please choose:" selectXrayType + if [[ "${selectXrayType}" == "1" ]]; then + updateXray + elif [[ "${selectXrayType}" == "2" ]]; then + echoContent yellow "\n1.Due to XRay-Core frequently updated, only two recent versions" + echoContent yellow "2.Do not guarantee that you must use it normally after the fallback" + echoContent yellow "3.If the version of the rollback does not support the current config, it will not be able to connect, careful" + echoContent skyBlue "------------------------Version-------------------------------" + curl -s https://api.github.com/repos/XTLS/Xray-core/releases | jq -r .[].tag_name| head -2 | awk '{print ""NR""":"$0}' + echoContent skyBlue "--------------------------------------------------------------" + read -r -p "Please enter the version you want to fall back:" selectXrayVersionType + version=$(curl -s https://api.github.com/repos/XTLS/Xray-core/releases | jq -r .[].tag_name| head -2 | awk '{print ""NR""":"$0}' | grep "${selectXrayVersionType}:" | awk -F "[:]" '{print $2}') + if [[ -n "${version}" ]]; then + updateXray "${version}" + else + echoContent red "\n ---> Enter is incorrect, please re-enter" + xrayVersionManageMenu 1 + fi + elif [[ "${selectXrayType}" == "3" ]]; then + handleXray stop + elif [[ "${selectXrayType}" == "4" ]]; then + handleXray start + elif [[ "${selectXrayType}" == "5" ]]; then + reloadCore + fi + +} +# Update V2ray +updateV2Ray() { + readInstallType + if [[ -z "${coreInstallType}" ]]; then + + if [[ -n "$1" ]]; then + version=$1 + else + version=$(curl -s https://api.github.com/repos/v2fly/v2ray-core/releases | jq -r .[0].tag_name) + fi + # Use the locked version + if [[ -n "${v2rayCoreVersion}" ]]; then + version=${v2rayCoreVersion} + fi + echoContent green " ---> v2ray-Core version:${version}" + + if wget --help | grep -q show-progress; then + wget -c -q --show-progress -P /etc/v2ray-agent/v2ray/ "https://github.com/v2fly/v2ray-core/releases/download/${version}/${v2rayCoreCPUVendor}.zip" + else + wget -c -P "/etc/v2ray-agent/v2ray/ https://github.com/v2fly/v2ray-core/releases/download/${version}/${v2rayCoreCPUVendor}.zip" >/dev/null 2>&1 + fi + + unzip -o /etc/v2ray-agent/v2ray/${v2rayCoreCPUVendor}.zip -d /etc/v2ray-agent/v2ray >/dev/null + rm -rf /etc/v2ray-agent/v2ray/${v2rayCoreCPUVendor}.zip + handleV2Ray stop + handleV2Ray start + else + echoContent green " ---> Current v2ray-Core version:$(/etc/v2ray-agent/v2ray/v2ray --version | awk '{print $2}' | head -1)" + + if [[ -n "$1" ]]; then + version=$1 + else + version=$(curl -s https://api.github.com/repos/v2fly/v2ray-core/releases | jq -r .[0].tag_name) + fi + + if [[ -n "${v2rayCoreVersion}" ]]; then + version=${v2rayCoreVersion} + fi + if [[ -n "$1" ]]; then + read -r -p "Retreat${version},Whether to continue?[y/n]:" rollbackV2RayStatus + if [[ "${rollbackV2RayStatus}" == "y" ]]; then + if [[ "${coreInstallType}" == "2" || "${coreInstallType}" == "3" ]]; then + echoContent green " ---> Current v2ray-Core version:$(/etc/v2ray-agent/v2ray/v2ray --version | awk '{print $2}' | head -1)" + elif [[ "${coreInstallType}" == "1" ]]; then + echoContent green " ---> Current Xray-Core version:$(/etc/v2ray-agent/xray/xray --version | awk '{print $2}' | head -1)" + fi + + handleV2Ray stop + rm -f /etc/v2ray-agent/v2ray/v2ray + rm -f /etc/v2ray-agent/v2ray/v2ctl + updateV2Ray "${version}" + else + echoContent green " ---> Abandon the retreat version" + fi + elif [[ "${version}" == "v$(/etc/v2ray-agent/v2ray/v2ray --version | awk '{print $2}' | head -1)" ]]; then + read -r -p "The current version is the same as the latest version, is it reinstalled?[y/n]:" reInstallV2RayStatus + if [[ "${reInstallV2RayStatus}" == "y" ]]; then + handleV2Ray stop + rm -f /etc/v2ray-agent/v2ray/v2ray + rm -f /etc/v2ray-agent/v2ray/v2ctl + updateV2Ray + else + echoContent green " ---> Abandon reinstall" + fi + else + read -r -p "The latest version is:${version}Is it updated?[y/n]：" installV2RayStatus + if [[ "${installV2RayStatus}" == "y" ]]; then + rm -f /etc/v2ray-agent/v2ray/v2ray + rm -f /etc/v2ray-agent/v2ray/v2ctl + updateV2Ray + else + echoContent green " ---> Give up update" + fi + + fi + fi +} + +# Update xray +updateXray() { + readInstallType + if [[ -z "${coreInstallType}" ]]; then + if [[ -n "$1" ]]; then + version=$1 + else + version=$(curl -s https://api.github.com/repos/XTLS/Xray-core/releases | jq -r .[0].tag_name) + fi + + echoContent green " ---> Xray-Core version:${version}" + + if wget --help | grep -q show-progress; then + wget -c -q --show-progress -P /etc/v2ray-agent/xray/ "https://github.com/XTLS/Xray-core/releases/download/${version}/${xrayCoreCPUVendor}.zip" + else + wget -c -P /etc/v2ray-agent/xray/ "https://github.com/XTLS/Xray-core/releases/download/${version}/${xrayCoreCPUVendor}.zip" >/dev/null 2>&1 + fi + + unzip -o /etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip -d /etc/v2ray-agent/xray >/dev/null + rm -rf /etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip + chmod 655 /etc/v2ray-agent/xray/xray + handleXray stop + handleXray start + else + echoContent green " ---> Current Xray-Core version:$(/etc/v2ray-agent/xray/xray --version | awk '{print $2}' | head -1)" + + if [[ -n "$1" ]]; then + version=$1 + else + version=$(curl -s https://api.github.com/repos/XTLS/Xray-core/releases | jq -r .[0].tag_name) + fi + + if [[ -n "$1" ]]; then + read -r -p "Retreat${version},Whether to continue?[y/n]:" rollbackXrayStatus + if [[ "${rollbackXrayStatus}" == "y" ]]; then + echoContent green " ---> Current Xray-Core version:$(/etc/v2ray-agent/xray/xray --version | awk '{print $2}' | head -1)" + + handleXray stop + rm -f /etc/v2ray-agent/xray/xray + updateXray "${version}" + else + echoContent green " ---> Abandon the retreat version" + fi + elif [[ "${version}" == "v$(/etc/v2ray-agent/xray/xray --version | awk '{print $2}' | head -1)" ]]; then + read -r -p "The current version is the same as the latest version, is it reinstalled?[y/n]:" reInstallXrayStatus + if [[ "${reInstallXrayStatus}" == "y" ]]; then + handleXray stop + rm -f /etc/v2ray-agent/xray/xray + rm -f /etc/v2ray-agent/xray/xray + updateXray + else + echoContent green " ---> Abandon reinstall" + fi + else + read -r -p "The latest version is:${version}Is it updated?[y/n]：" installXrayStatus + if [[ "${installXrayStatus}" == "y" ]]; then + rm -f /etc/v2ray-agent/xray/xray + updateXray + else + echoContent green " ---> Give up update" + fi + + fi + fi +} + +# 验证整个服务是否可用 +checkGFWStatue() { + readInstallType + echoContent skyBlue "\n progress $1/${totalProgress} : Verify service startup status" + if [[ "${coreInstallType}" == "1" ]] && [[ -n $(pgrep -f xray/xray) ]]; then + echoContent green " ---> Service starts success" + elif [[ "${coreInstallType}" == "2" || "${coreInstallType}" == "3" ]] && [[ -n $(pgrep -f v2ray/v2ray) ]]; then + echoContent green " ---> Service starts success" + else + echoContent red " ---> Service startup failed, please check if the terminal has a log printing" + exit 0 + fi + +} + +# V2RAY boot +installV2RayService() { + echoContent skyBlue "\n progress $1/${totalProgress} : Configuring V2RAY boot" + if [[ -n $(find /bin /usr/bin -name "systemctl") ]]; then + rm -rf /etc/systemd/system/v2ray.service + touch /etc/systemd/system/v2ray.service + execStart='/etc/v2ray-agent/v2ray/v2ray -confdir /etc/v2ray-agent/v2ray/conf' + cat </etc/systemd/system/v2ray.service +[Unit] +Description=V2Ray - A unified platform for anti-censorship +Documentation=https://v2ray.com https://guide.v2fly.org +After=network.target nss-lookup.target +Wants=network-online.target + +[Service] +Type=simple +User=root +CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_RAW +NoNewPrivileges=yes +ExecStart=${execStart} +Restart=on-failure +RestartPreventExitStatus=23 + + +[Install] +WantedBy=multi-user.target +EOF + systemctl daemon-reload + systemctl enable v2ray.service + echoContent green " ---> Configuring V2RAY boot self-start" + fi +} + +# XRay boot +installXrayService() { + echoContent skyBlue "\n progress $1/${totalProgress} : Configuring XRAY boot self-start" + if [[ -n $(find /bin /usr/bin -name "systemctl") ]]; then + rm -rf /etc/systemd/system/xray.service + touch /etc/systemd/system/xray.service + execStart='/etc/v2ray-agent/xray/xray run -confdir /etc/v2ray-agent/xray/conf' + cat </etc/systemd/system/xray.service +[Unit] +Description=Xray - A unified platform for anti-censorship +# Documentation=https://v2ray.com https://guide.v2fly.org +After=network.target nss-lookup.target +Wants=network-online.target + +[Service] +Type=simple +User=root +CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_RAW +NoNewPrivileges=yes +ExecStart=${execStart} +Restart=on-failure +RestartPreventExitStatus=23 + + +[Install] +WantedBy=multi-user.target +EOF + systemctl daemon-reload + systemctl enable xray.service + echoContent green " ---> Configuring XRAY boot self-start" + fi +} +# Trojan boot self-start +installTrojanService() { + echoContent skyBlue "\n progress $1/${totalProgress} : Configuring Trojan boot self-start" + if [[ -n $(find /bin /usr/bin -name "systemctl") ]]; then + rm -rf /etc/systemd/system/trojan-go.service + touch /etc/systemd/system/trojan-go.service + + cat </etc/systemd/system/trojan-go.service +[Unit] +Description=Trojan-Go - A unified platform for anti-censorship +Documentation=Trojan-Go +After=network.target nss-lookup.target +Wants=network-online.target + +[Service] +Type=simple +User=root +CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_RAW +NoNewPrivileges=yes +ExecStart=/etc/v2ray-agent/trojan/trojan-go -config /etc/v2ray-agent/trojan/config_full.json +Restart=on-failure +RestartPreventExitStatus=23 + + +[Install] +WantedBy=multi-user.target +EOF + systemctl daemon-reload + systemctl enable trojan-go.service + echoContent green " ---> Configuring Trojan boot self-starting" + fi +} +# Operation v2ray +handleV2Ray() { + # shellcheck disable=SC2010 + if find /bin /usr/bin | grep -q systemctl && ls /etc/systemd/system/ | grep -q v2ray.service; then + if [[ -z $(pgrep -f "v2ray/v2ray") ]] && [[ "$1" == "start" ]]; then + systemctl start v2ray.service + elif [[ -n $(pgrep -f "v2ray/v2ray") ]] && [[ "$1" == "stop" ]]; then + systemctl stop v2ray.service + fi + fi + sleep 0.8 + + if [[ "$1" == "start" ]]; then + if [[ -n $(pgrep -f "v2ray/v2ray") ]]; then + echoContent green " ---> V2Ray starts success" + else + echoContent red "V2Ray starts failed" + echoContent red "Please manually【/etc/v2ray-agent/v2ray/v2ray -confdir /etc/v2ray-agent/v2ray/conf】，View the error log" + exit 0 + fi + elif [[ "$1" == "stop" ]]; then + if [[ -z $(pgrep -f "v2ray/v2ray") ]]; then + echoContent green " ---> V2RAY is successful" + else + echoContent red "V2Ray Close failed" + echoContent red "Please manually【ps -ef|grep -v grep|grep v2ray|awk '{print \$2}'|xargs kill -9】" + exit 0 + fi + fi +} +# Operation XRAY +handleXray() { + if [[ -n $(find /bin /usr/bin -name "systemctl") ]] && ls /etc/systemd/system/ | grep -q xray.service; then + if [[ -z $(pgrep -f "xray/xray") ]] && [[ "$1" == "start" ]]; then + systemctl start xray.service + elif [[ -n $(pgrep -f "xray/xray") ]] && [[ "$1" == "stop" ]]; then + systemctl stop xray.service + fi + fi + + sleep 0.8 + + if [[ "$1" == "start" ]]; then + if [[ -n $(pgrep -f "xray/xray") ]]; then + echoContent green " ---> Xray started successfully" + else + echoContent red "XRay start failed" + echoContent red "Please manually【/etc/v2ray-agent/xray/xray -confdir /etc/v2ray-agent/xray/conf】，View the error log" + exit 0 + fi + elif [[ "$1" == "stop" ]]; then + if [[ -z $(pgrep -f "xray/xray") ]]; then + echoContent green " ---> XRay close success" + else + echoContent red "XRay Close failed" + echoContent red "Please manually【ps -ef|grep -v grep|grep xray|awk '{print \$2}'|xargs kill -9】" + exit 0 + fi + fi +} + +# Operation Trojan-Go +handleTrojanGo() { + if [[ -n $(find /bin /usr/bin -name "systemctl") ]] && ls /etc/systemd/system/ | grep -q trojan-go.service; then + if [[ -z $(pgrep -f "trojan-go") ]] && [[ "$1" == "start" ]]; then + systemctl start trojan-go.service + elif [[ -n $(pgrep -f "trojan-go") ]] && [[ "$1" == "stop" ]]; then + systemctl stop trojan-go.service + fi + fi + + sleep 0.5 + if [[ "$1" == "start" ]]; then + if [[ -n $(pgrep -f "trojan-go") ]]; then + echoContent green " ---> Trojan-GO starts success" + else + echoContent red "Trojan-Go failed to start" + echoContent red "Please manually【/etc/v2ray-agent/trojan/trojan-go -config /etc/v2ray-agent/trojan/config_full.json】，View the error log" + exit 0 + fi + elif [[ "$1" == "stop" ]]; then + if [[ -z $(pgrep -f "trojan-go") ]]; then + echoContent green " ---> Trojan-GO close success" + else + echoContent red "Trojan-GO close failed" + echoContent red "Please manually【ps -ef|grep -v grep|grep trojan-go|awk '{print \$2}'|xargs kill -9】" + exit 0 + fi + fi +} + +# Initialize V2RAY configuration file +initV2RayConfig() { + echoContent skyBlue "\n schedule $2/${totalProgress} : Initialize V2RAY configuration" + echo + + read -r -p "Whether it is customized UUID ？[y/n]:" customUUIDStatus + echo + if [[ "${customUUIDStatus}" == "y" ]]; then + read -r -p "Please enter legal UUID:" currentCustomUUID + if [[ -n "${currentCustomUUID}" ]]; then + uuid=${currentCustomUUID} + fi + fi + + if [[ -n "${currentUUID}" && -z "${uuid}" ]]; then + read -r -p "Read to the last installation record，Whether to use the last installation UUID ？[y/n]:" historyUUIDStatus + if [[ "${historyUUIDStatus}" == "y" ]]; then + uuid=${currentUUID} + else + uuid=$(/etc/v2ray-agent/v2ray/v2ctl uuid) + fi + elif [[ -z "${uuid}" ]]; then + uuid=$(/etc/v2ray-agent/v2ray/v2ctl uuid) + fi + + if [[ -z "${uuid}" ]]; then + echoContent red "\n ---> uuid Read error，regenerate" + uuid=$(/etc/v2ray-agent/v2ray/v2ctl uuid) + fi + + rm -rf /etc/v2ray-agent/v2ray/conf/* + rm -rf /etc/v2ray-agent/v2ray/config_full.json + + cat </etc/v2ray-agent/v2ray/conf/00_log.json +{ + "log": { + "error": "/etc/v2ray-agent/v2ray/error.log", + "loglevel": "warning" + } +} +EOF + # outbounds + if [[ -n "${pingIPv6}" ]]; then + cat </etc/v2ray-agent/v2ray/conf/10_ipv6_outbounds.json +{ + "outbounds": [ + { + "protocol": "freedom", + "settings": {}, + "tag": "direct" + } + ] +} +EOF + else + + cat </etc/v2ray-agent/v2ray/conf/10_ipv4_outbounds.json +{ + "outbounds":[ + { + "protocol":"freedom", + "settings":{ + "domainStrategy":"UseIPv4" + }, + "tag":"IPv4-out" + }, + { + "protocol":"freedom", + "settings":{ + "domainStrategy":"UseIPv6" + }, + "tag":"IPv6-out" + }, + { + "protocol":"blackhole", + "tag":"blackhole-out" + } + ] +} +EOF + fi + + + # dns + cat </etc/v2ray-agent/v2ray/conf/11_dns.json +{ + "dns": { + "servers": [ + "localhost" + ] + } +} +EOF + # VLESS_TCP_TLS/XTLS + # Fall back nginx + local fallbacksList='{"dest":31300,"xver":0},{"alpn":"h2","dest":31302,"xver":0}' + +if [[ -n $(echo "${selectCustomInstallType}" | grep 4) || "$1" == "all" ]]; then + fallbacksList='{"dest":31296,"xver":1},{"alpn":"h2","dest":31302,"xver":0}' +cat </etc/v2ray-agent/v2ray/conf/04_trojan_TCP_inbounds.json +{ +"inbounds":[ + { + "port": 31296, + "listen": "127.0.0.1", + "protocol": "trojan", + "tag":"trojanTCP", + "settings": { + "clients": [ + { + "password": "${uuid}", + "email": "${domain}_trojan_tcp" + } + ], + "fallbacks":[ + {"dest":"31300"} + ] + }, + "streamSettings": { + "network": "tcp", + "security": "none", + "tcpSettings": { + "acceptProxyProtocol": true + } + } + } + ] +} +EOF + fi + + # VLESS_WS_TLS + if echo "${selectCustomInstallType}" | grep -q 1 || [[ "$1" == "all" ]]; then + fallbacksList=${fallbacksList}',{"path":"/'${customPath}'ws","dest":31297,"xver":1}' + cat </etc/v2ray-agent/v2ray/conf/03_VLESS_WS_inbounds.json +{ +"inbounds":[ + { + "port": 31297, + "listen": "127.0.0.1", + "protocol": "vless", + "tag":"VLESSWS", + "settings": { + "clients": [ + { + "id": "${uuid}", + "email": "${domain}_VLESS_WS" + } + ], + "decryption": "none" + }, + "streamSettings": { + "network": "ws", + "security": "none", + "wsSettings": { + "acceptProxyProtocol": true, + "path": "/${customPath}ws" + } + } +} +] +} +EOF + fi + + + # VMess_WS + if echo "${selectCustomInstallType}" | grep -q 3 || [[ "$1" == "all" ]]; then + fallbacksList=${fallbacksList}',{"path":"/'${customPath}'vws","dest":31299,"xver":1}' + cat </etc/v2ray-agent/v2ray/conf/05_VMess_WS_inbounds.json +{ +"inbounds":[ +{ + "listen": "127.0.0.1", + "port": 31299, + "protocol": "vmess", + "tag":"VMessWS", + "settings": { + "clients": [ + { + "id": "${uuid}", + "alterId": 0, + "add": "${add}", + "email": "${domain}_vmess_ws" + } + ] + }, + "streamSettings": { + "network": "ws", + "security": "none", + "wsSettings": { + "acceptProxyProtocol": true, + "path": "/${customPath}vws" + } + } +} +] +} +EOF + fi + # VLESS gRPC + if echo "${selectCustomInstallType}" | grep -q 5 || [[ "$1" == "all" ]]; then + cat </etc/v2ray-agent/v2ray/conf/06_VLESS_gRPC_inbounds.json +{ + "inbounds":[ + { + "port": 31301, + "listen": "127.0.0.1", + "protocol": "vless", + "tag":"VLESSGRPC", + "settings": { + "clients": [ + { + "id": "${uuid}", + "add": "${add}", + "email": "${domain}_VLESS_gRPC" + } + ], + "decryption": "none" + }, + "streamSettings": { + "network": "grpc", + "grpcSettings": { + "serviceName": "${customPath}grpc" + } + } + } +] +} +EOF + fi + + # VLESS_TCP + if [[ "${selectCoreType}" == "2" ]]; then + cat </etc/v2ray-agent/v2ray/conf/02_VLESS_TCP_inbounds.json +{ + "inbounds":[ + { + "port": 443, + "protocol": "vless", + "tag":"VLESSTCP", + "settings": { + "clients": [ + { + "id": "${uuid}", + "add": "${add}", + "email": "${domain}_VLESS_TLS_TCP" + } + ], + "decryption": "none", + "fallbacks": [ + ${fallbacksList} + ] + }, + "streamSettings": { + "network": "tcp", + "security": "tls", + "tlsSettings": { + "alpn": [ + "http/1.1", + "h2" + ], + "certificates": [ + { + "certificateFile": "/etc/v2ray-agent/tls/${domain}.crt", + "keyFile": "/etc/v2ray-agent/tls/${domain}.key" + } + ] + } + } + } + ] +} +EOF + elif [[ "${selectCoreType}" == "3" ]]; then + cat </etc/v2ray-agent/v2ray/conf/02_VLESS_TCP_inbounds.json +{ +"inbounds":[ +{ + "port": 443, + "protocol": "vless", + "tag":"VLESSTCP", + "settings": { + "clients": [ + { + "id": "${uuid}", + "add":"${add}", + "flow":"xtls-rprx-direct", + "email": "${domain}_VLESS_XTLS/TLS-direct_TCP" + } + ], + "decryption": "none", + "fallbacks": [ + ${fallbacksList} + ] + }, + "streamSettings": { + "network": "tcp", + "security": "xtls", + "xtlsSettings": { + "alpn": [ + "http/1.1" + ], + "certificates": [ + { + "certificateFile": "/etc/v2ray-agent/tls/${domain}.crt", + "keyFile": "/etc/v2ray-agent/tls/${domain}.key" + } + ] + } + } +} +] +} +EOF + fi +} + +# initializationXray Trojan XTLS 配置文件 +initXrayFrontingConfig(){ + if [[ -z "${configPath}" ]]; then + echoContent red " ---> Not installed, please use the script installation" + menu + exit 0 + fi + if [[ "${coreInstallType}" != "1" ]];then + echoContent red " ---> No available types" + fi + local xtlsType= + if echo ${currentInstallProtocolType} | grep -q trojan; then + xtlsType=VLESS + else + xtlsType=Trojan + + fi + + echoContent skyBlue "\n function 1/${totalProgress} : Pre-switching${xtlsType}" + echoContent red "\n==============================================================" + echoContent yellow "# Precautions \n" + echoContent yellow "Alternative to${xtlsType}" + echoContent yellow "If the front is Trojan, two Trojan protocols have nodes, there is an unavailable XTLS" + echoContent yellow "Execute it again to switch to the previous front \n" + + echoContent yellow "1.Switch to${xtlsType}" + echoContent red "==============================================================" + read -r -p "please choose:" selectType + if [[ "${selectType}" == "1" ]]; then + + if [[ "${xtlsType}" == "Trojan" ]];then + + local VLESSConfig=$(cat ${configPath}${frontingType}.json) + VLESSConfig=${VLESSConfig//"id"/"password"} + VLESSConfig=${VLESSConfig//VLESSTCP/TrojanTCPXTLS} + VLESSConfig=${VLESSConfig//VLESS/Trojan} + VLESSConfig=${VLESSConfig//"vless"/"trojan"} + VLESSConfig=${VLESSConfig//"id"/"password"} + + echo "${VLESSConfig}" | jq . >${configPath}02_trojan_TCP_inbounds.json + rm ${configPath}${frontingType}.json + elif [[ "${xtlsType}" == "VLESS" ]]; then + + local VLESSConfig=$(cat ${configPath}02_trojan_TCP_inbounds.json) + VLESSConfig=${VLESSConfig//"password"/"id"} + VLESSConfig=${VLESSConfig//TrojanTCPXTLS/VLESSTCP} + VLESSConfig=${VLESSConfig//Trojan/VLESS} + VLESSConfig=${VLESSConfig//"trojan"/"vless"} + VLESSConfig=${VLESSConfig//"password"/"id"} + + echo "${VLESSConfig}" | jq . >${configPath}02_VLESS_TCP_inbounds.json + rm ${configPath}02_trojan_TCP_inbounds.json + fi + reloadCore + fi + + exit 0; +} + +# Initialize XRAY profile +initXrayConfig() { + echoContent skyBlue "\n progress $2/${totalProgress} : Initialize XRAY configuration" + echo + local uuid= + if [[ -n "${currentUUID}" ]]; then + read -r -p "Read to the last installation record, is it used in the last installation? UUID ？[y/n]:" historyUUIDStatus + if [[ "${historyUUIDStatus}" == "y" ]]; then + uuid=${currentUUID} + echoContent green "\n ---> 使用成功" + else + uuid=$(/etc/v2ray-agent/xray/xray uuid) + fi + fi + + if [[ -z "${uuid}" ]];then + echoContent yellow "Please enter custom UUID [need to legal], [Enter] Random UUID" + read -r -p 'UUID:' customUUID + + if [[ -n ${customUUID} ]];then + uuid=${customUUID} + else + uuid=$(/etc/v2ray-agent/xray/xray uuid) + fi + + fi + + if [[ -z "${uuid}" ]]; then + echoContent red "\n ---> UUID read error, regenerate" + uuid=$(/etc/v2ray-agent/xray/xray uuid) + fi + + echoContent yellow "\n ${uuid}" + + rm -rf /etc/v2ray-agent/xray/conf/* + + # log + cat </etc/v2ray-agent/xray/conf/00_log.json +{ + "log": { + "error": "/etc/v2ray-agent/xray/error.log", + "loglevel": "warning" + } +} +EOF + + # outbounds + if [[ -n "${pingIPv6}" ]]; then + cat </etc/v2ray-agent/xray/conf/10_ipv6_outbounds.json +{ + "outbounds": [ + { + "protocol": "freedom", + "settings": {}, + "tag": "direct" + } + ] +} +EOF + + else + cat </etc/v2ray-agent/xray/conf/10_ipv4_outbounds.json +{ + "outbounds":[ + { + "protocol":"freedom", + "settings":{ + "domainStrategy":"UseIPv4" + }, + "tag":"IPv4-out" + }, + { + "protocol":"freedom", + "settings":{ + "domainStrategy":"UseIPv6" + }, + "tag":"IPv6-out" + }, + { + "protocol":"blackhole", + "tag":"blackhole-out" + } + ] +} +EOF + fi + + + # dns + cat </etc/v2ray-agent/xray/conf/11_dns.json +{ + "dns": { + "servers": [ + "localhost" + ] + } +} +EOF + + # VLESS_TCP_TLS/XTLS + # 回落nginx + local fallbacksList='{"dest":31300,"xver":0},{"alpn":"h2","dest":31302,"xver":0}' + + # trojan + if [[ -n $(echo "${selectCustomInstallType}" | grep 4) || "$1" == "all" ]]; then + fallbacksList='{"dest":31296,"xver":1},{"alpn":"h2","dest":31302,"xver":0}' + cat </etc/v2ray-agent/xray/conf/04_trojan_TCP_inbounds.json +{ +"inbounds":[ + { + "port": 31296, + "listen": "127.0.0.1", + "protocol": "trojan", + "tag":"trojanTCP", + "settings": { + "clients": [ + { + "password": "${uuid}", + "email": "${domain}_trojan_tcp" + } + ], + "fallbacks":[ + {"dest":"31300"} + ] + }, + "streamSettings": { + "network": "tcp", + "security": "none", + "tcpSettings": { + "acceptProxyProtocol": true + } + } + } + ] +} +EOF + fi + + # VLESS_WS_TLS + if echo "${selectCustomInstallType}" | grep -q 1 || [[ "$1" == "all" ]]; then + fallbacksList=${fallbacksList}',{"path":"/'${customPath}'ws","dest":31297,"xver":1}' + cat </etc/v2ray-agent/xray/conf/03_VLESS_WS_inbounds.json +{ +"inbounds":[ + { + "port": 31297, + "listen": "127.0.0.1", + "protocol": "vless", + "tag":"VLESSWS", + "settings": { + "clients": [ + { + "id": "${uuid}", + "email": "${domain}_VLESS_WS" + } + ], + "decryption": "none" + }, + "streamSettings": { + "network": "ws", + "security": "none", + "wsSettings": { + "acceptProxyProtocol": true, + "path": "/${customPath}ws" + } + } +} +] +} +EOF + fi + + + # trojan_grpc + if echo ${selectCustomInstallType} | grep -q 2 || [[ "$1" == "all" ]]; then + if ! echo ${selectCustomInstallType} | grep -q 5 && [[ -n ${selectCustomInstallType} ]];then + fallbacksList=${fallbacksList//31302/31304} + fi + + cat </etc/v2ray-agent/xray/conf/04_trojan_gRPC_inbounds.json +{ + "inbounds": [ + { + "port": 31304, + "listen": "127.0.0.1", + "protocol": "trojan", + "tag": "trojangRPCTCP", + "settings": { + "clients": [ + { + "password": "${uuid}", + "email": "${domain}_trojan_gRPC" + } + ], + "fallbacks": [ + { + "dest": "31300" + } + ] + }, + "streamSettings": { + "network": "grpc", + "grpcSettings": { + "serviceName": "${customPath}trojangrpc" + } + } + } + ] +} +EOF + fi + + + # VMess_WS + if echo "${selectCustomInstallType}" | grep -q 3 || [[ "$1" == "all" ]]; then + fallbacksList=${fallbacksList}',{"path":"/'${customPath}'vws","dest":31299,"xver":1}' + cat </etc/v2ray-agent/xray/conf/05_VMess_WS_inbounds.json +{ +"inbounds":[ +{ + "listen": "127.0.0.1", + "port": 31299, + "protocol": "vmess", + "tag":"VMessWS", + "settings": { + "clients": [ + { + "id": "${uuid}", + "alterId": 0, + "add": "${add}", + "email": "${domain}_vmess_ws" + } + ] + }, + "streamSettings": { + "network": "ws", + "security": "none", + "wsSettings": { + "acceptProxyProtocol": true, + "path": "/${customPath}vws" + } + } +} +] +} +EOF + fi + + if echo "${selectCustomInstallType}" | grep -q 5 || [[ "$1" == "all" ]]; then + cat </etc/v2ray-agent/xray/conf/06_VLESS_gRPC_inbounds.json +{ + "inbounds":[ + { + "port": 31301, + "listen": "127.0.0.1", + "protocol": "vless", + "tag":"VLESSGRPC", + "settings": { + "clients": [ + { + "id": "${uuid}", + "add": "${add}", + "email": "${domain}_VLESS_gRPC" + } + ], + "decryption": "none" + }, + "streamSettings": { + "network": "grpc", + "grpcSettings": { + "serviceName": "${customPath}grpc" + } + } + } +] +} +EOF + fi + + # VLESS_TCP + cat </etc/v2ray-agent/xray/conf/02_VLESS_TCP_inbounds.json +{ +"inbounds":[ +{ + "port": 443, + "protocol": "vless", + "tag":"VLESSTCP", + "settings": { + "clients": [ + { + "id": "${uuid}", + "add":"${add}", + "flow":"xtls-rprx-direct", + "email": "${domain}_VLESS_XTLS/TLS-direct_TCP" + } + ], + "decryption": "none", + "fallbacks": [ + ${fallbacksList} + ] + }, + "streamSettings": { + "network": "tcp", + "security": "xtls", + "xtlsSettings": { + "minVersion": "1.2", + "alpn": [ + "http/1.1", + "h2" + ], + "certificates": [ + { + "certificateFile": "/etc/v2ray-agent/tls/${domain}.crt", + "keyFile": "/etc/v2ray-agent/tls/${domain}.key", + "ocspStapling": 3600, + "usage":"encipherment" + } + ] + } + } +} +] +} +EOF +} + +# initialization Trojan-Go Configure +initTrojanGoConfig() { + + echoContent skyBlue "\n schedule $1/${totalProgress} : Initialization Trojan configuration" + cat </etc/v2ray-agent/trojan/config_full.json +{ + "run_type": "server", + "local_addr": "127.0.0.1", + "local_port": 31296, + "remote_addr": "127.0.0.1", + "remote_port": 31300, + "disable_http_check":true, + "log_level":3, + "log_file":"/etc/v2ray-agent/trojan/trojan.log", + "password": [ + "${uuid}" + ], + "dns":[ + "localhost" + ], + "transport_plugin":{ + "enabled":true, + "type":"plaintext" + }, + "websocket": { + "enabled": true, + "path": "/${customPath}tws", + "host": "${domain}", + "add":"${add}" + }, + "router": { + "enabled": false + } +} +EOF +} + +# customizeCDN IP +customCDNIP() { + echoContent skyBlue "\n progress $1/${totalProgress} : Add cloudflare self-selecting CNAME" + echoContent red "\n==============================================================" + echoContent yellow "# Cautions" + echoContent yellow "\n Tutorial Address:" + echoContent skyBlue "https://github.com/mack-a/v2ray-agent/blob/master/documents/optimize_V2Ray.md" + echoContent red "\n If you do not know about Cloudflare optimization, please do not use" + echoContent yellow "\n 1.china Mobile:104.16.123.96" + echoContent yellow " 2.china Unicom:www.cloudflare.com" + echoContent yellow " 3.china Telecom:www.digitalocean.com" + echoContent skyBlue "----------------------------" + read -r -p "Please choose[Carriage return not used]:" selectCloudflareType + case ${selectCloudflareType} in + 1) + add="104.16.123.96" + ;; + 2) + add="www.cloudflare.com" + ;; + 3) + add="www.digitalocean.com" + ;; + *) + add="${domain}" + echoContent yellow "\n ---> No use" + ;; + esac +} +# 通用 +defaultBase64Code() { + local type=$1 + local email=$2 + local id=$3 + local hostPort=$4 + local host= + local port= + if echo "${hostPort}" | grep -q ":"; then + host=$(echo "${hostPort}" | awk -F "[:]" '{print $1}') + port=$(echo "${hostPort}" | awk -F "[:]" '{print $2}') + else + host=${hostPort} + port=443 + fi + + local path=$5 + local add=$6 + + local subAccount=${currentHost}_$(echo "${id}_currentHost" | md5sum | awk '{print $1}') + if [[ "${type}" == "vlesstcp" ]]; then + + if [[ "${coreInstallType}" == "1" ]] && echo ${currentInstallProtocolType} | grep -q 0; then + echoContent yellow " ---> General format(VLESS+TCP+TLS/xtls-rprx-direct)" + echoContent green " vless://${id}@${host}:${port}?encryption=none&security=xtls&type=tcp&host=${host}&headerType=none&sni=${host}&flow=xtls-rprx-direct#${email}\n" + + echoContent yellow " ---> Format clear text(VLESS+TCP+TLS/xtls-rprx-direct)" + echoContent green "agreement type：VLESS，address：${host}，port：${port}，user ID：${id}，Safety：xtls，transfer method：tcp，flow：xtls-rprx-direct，account name:${email}\n" + cat <>"/etc/v2ray-agent/subscribe_tmp/${subAccount}" +vless://${id}@${host}:${port}?encryption=none&security=xtls&type=tcp&host=${host}&headerType=none&sni=${host}&flow=xtls-rprx-direct#${email} +EOF + echoContent yellow " ---> QR code VLESS(VLESS+TCP+TLS/xtls-rprx-direct)" + echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${id}%40${host}%3A${port}%3F${encryption}%3Dnone%26security%3Dxtls%26type%3Dtcp%26${host}%3D${host}%26headerType%3Dnone%26sni%3D${host}%26flow%3Dxtls-rprx-direct%23${email}\n" + + echoContent skyBlue "----------------------------------------------------------------------------------" + + echoContent yellow " ---> General format(VLESS+TCP+TLS/xtls-rprx-splice)" + echoContent green " vless://${id}@${host}:${port}?encryption=none&security=xtls&type=tcp&host=${host}&headerType=none&sni=${host}&flow=xtls-rprx-splice#${email}\n" + + echoContent yellow " ---> Format clear text(VLESS+TCP+TLS/xtls-rprx-splice)" + echoContent green " agreement type：VLESS，address：${host}，port：${port}，user ID：${id}，Safety：xtls，transfer method：tcp，flow：xtls-rprx-splice，account name:${email}\n" + cat <>"/etc/v2ray-agent/subscribe_tmp/${subAccount}" +vless://${id}@${host}:${port}?encryption=none&security=xtls&type=tcp&host=${host}&headerType=none&sni=${host}&flow=xtls-rprx-splice#${email} +EOF + echoContent yellow " ---> QR code VLESS(VLESS+TCP+TLS/xtls-rprx-splice)" + echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${id}%40${host}%3A${port}%3F${encryption}%3Dnone%26security%3Dxtls%26type%3Dtcp%26${host}%3D${host}%26headerType%3Dnone%26sni%3D${host}%26flow%3Dxtls-rprx-splice%23${email}\n" + + elif [[ "${coreInstallType}" == "2" || "${coreInstallType}" == "3" ]]; then + echoContent yellow " ---> General format(VLESS+TCP+TLS)" + echoContent green " vless://${id}@${host}:${port}?security=tls&encryption=none&host=${host}&headerType=none&type=tcp#${email}\n" + + echoContent yellow " ---> Format clear text(VLESS+TCP+TLS/xtls-rprx-splice)" + echoContent green " agreement type：VLESS，address：${host}，port：${port}，user ID：${id}, Safety: TLS, Transmission mode: TCP, account name:${email}\n" + + cat <>"/etc/v2ray-agent/subscribe_tmp/${subAccount}" +vless://${id}@${host}:${port}?security=tls&encryption=none&host=${host}&headerType=none&type=tcp#${email} +EOF + echoContent yellow " ---> QR code VLESS(VLESS+TCP+TLS)" + echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3a%2f%2f${id}%40${host}%3a${port}%3fsecurity%3dtls%26encryption%3dnone%26host%3d${host}%26headerType%3dnone%26type%3dtcp%23${email}\n" + fi + + elif [[ "${type}" == "trojanTCPXTLS" ]]; then + echoContent yellow " ---> General format(Trojan+TCP+TLS/xtls-rprx-direct)" + echoContent green " trojan://${id}@${host}:${port}?encryption=none&security=xtls&type=tcp&host=${host}&headerType=none&sni=${host}&flow=xtls-rprx-direct#${email}\n" + + echoContent yellow " ---> Format clear text(Trojan+TCP+TLS/xtls-rprx-direct)" + echoContent green "Type: Trojan, address：${host}，port：${port}，user ID：${id}，Safety：xtls，transfer method：tcp，flow：xtls-rprx-direct，account name:${email}\n" + cat <>"/etc/v2ray-agent/subscribe_tmp/${subAccount}" +trojan://${id}@${host}:${port}?encryption=none&security=xtls&type=tcp&host=${host}&headerType=none&sni=${host}&flow=xtls-rprx-direct#${email} +EOF + echoContent yellow " ---> QR code Trojan(Trojan+TCP+TLS/xtls-rprx-direct)" + echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=trojan%3A%2F%2F${id}%40${host}%3A${port}%3Fencryption%3Dnone%26security%3Dxtls%26type%3Dtcp%26${host}%3D${host}%26headerType%3Dnone%26sni%3D${host}%26flow%3Dxtls-rprx-direct%23${email}\n" + + echoContent skyBlue "----------------------------------------------------------------------------------" + + echoContent yellow " ---> General format(Trojan+TCP+TLS/xtls-rprx-splice)" + echoContent green " trojan://${id}@${host}:${port}?encryption=none&security=xtls&type=tcp&host=${host}&headerType=none&sni=${host}&flow=xtls-rprx-splice#${email}\n" + + echoContent yellow " ---> Format clear text(Trojan+TCP+TLS/xtls-rprx-splice)" + echoContent green " agreement type：VLESS，address：${host}，port：${port}，user ID：${id}，Safety：xtls，transfer method：tcp，flow：xtls-rprx-splice，account name:${email}\n" + cat <>"/etc/v2ray-agent/subscribe_tmp/${subAccount}" +trojan://${id}@${host}:${port}?encryption=none&security=xtls&type=tcp&host=${host}&headerType=none&sni=${host}&flow=xtls-rprx-splice#${email} +EOF + echoContent yellow " ---> QR code Trojan(Trojan+TCP+TLS/xtls-rprx-splice)" + echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=trojan%3A%2F%2F${id}%40${host}%3A${port}%3Fencryption%3Dnone%26security%3Dxtls%26type%3Dtcp%26${host}%3D${host}%26headerType%3Dnone%26sni%3D${host}%26flow%3Dxtls-rprx-splice%23${email}\n" + + + elif [[ "${type}" == "vmessws" ]]; then + + qrCodeBase64Default=$(echo -n '{"port":"'${port}'","ps":'\"${email}\"',"tls":"tls","id":'\"${id}\"',"aid":"0","v":"2","host":"'${host}'","type":"none","path":"/'${path}'","net":"ws","add":"'${add}'","allowInsecure":0,"method":"none","peer":"'${host}'","sni":"'${host}'"}' | sed 's#/#\\\/#g' | base64) + qrCodeBase64Default=$(echo ${qrCodeBase64Default} | sed 's/ //g') + + echoContent yellow " ---> Universal json(VMess+WS+TLS)" + echoContent green ' {"port":"'${port}'","ps":'\"${ps}\"',"tls":"tls","id":'\"${id}\"',"aid":"0","v":"2","host":"'${host}'","type":"none","path":"/'${path}'","net":"ws","add":"'${add}'","allowInsecure":0,"method":"none","peer":"'${host}'","sni":"'${host}'"}\n' + echoContent yellow " ---> Universal vmess(VMess+WS+TLS)Link" + echoContent green " vmess://${qrCodeBase64Default}\n" + echoContent yellow " ---> QR code vmess(VMess+WS+TLS)" + + cat <>"/etc/v2ray-agent/subscribe_tmp/${subAccount}" +vmess://${qrCodeBase64Default} +EOF + echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vmess://${qrCodeBase64Default}\n" + + elif [[ "${type}" == "vmesstcp" ]]; then + +# echoContent yellow " ---> 通用格式[新版，推荐]" +# +# echoContent green " vmess://tcp+tls:2e6257c5-1402-41a6-a96d-1e0bdad78159-0@vu3.s83h.xyz:443/?type=http&tlsServerName=vu3.s83h.xyz#vu3.s83h.xyz_vmess_tcp" +# echoContent green " vmess://tcp+tls:${id//\"/}-0@${add}:${port}/?type=http&path=/${path}&tlsServerName=${host}&alpn=http1.1#${ps//\"/}\n" +# +# echoContent yellow " ---> 格式化明文(vmess+http+tls)" +# echoContent green "协议类型：vmess，地址：${host}，端口：${port}，用户ID：${id}，安全：tls，传输方式：http，账户名:${ps}\n" +# cat <>"/etc/v2ray-agent/subscribe_tmp/${subAccount}" +#vmess://http+tls:${id}-0@${add}:${port}/?path=/${path}&tlsServerName=${host}&alpn=http1.1#${ps} +#EOF +# echoContent yellow " ---> 二维码 vmess(http+tls)" +# echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vmess%3A%2F%2Fhttp%2Btls%3A${id}-0%40add%3A${port}%2F%3Fpath%3D%2F${path}%26tlsServerName%3D${host}%26alpn%3Dhttp1.1%23%24%7B${ps}%7D\n" + + echoContent red path:${path} + qrCodeBase64Default=$(echo -n '{"add":"'${add}'","aid":"0","host":"'${host}'","id":'"${id}"',"net":"tcp","path":"/'${path}'","port":"'${port}'","ps":'${ps}',"scy":"none","sni":"'${host}'","tls":"tls","v":"2","type":"http","allowInsecure":0,"peer":"'${host}'","obfs":"http","obfsParam":"'${host}'"}' | base64) + qrCodeBase64Default=$(echo ${qrCodeBase64Default} | sed 's/ //g') + + echoContent yellow " ---> Universal json(VMess+TCP+TLS)" + echoContent green ' {"port":"'${port}'","ps":'${ps}',"tls":"tls","id":'"${id}"',"aid":"0","v":"2","host":"'${host}'","type":"http","path":"/'${path}'","net":"http","add":"'${add}'","allowInsecure":0,"method":"post","peer":"'${host}'","obfs":"http","obfsParam":"'${host}'"}\n' + echoContent yellow " ---> Universalvmess(VMess+TCP+TLS)Link" + echoContent green " vmess://${qrCodeBase64Default}\n" + + cat <>"/etc/v2ray-agent/subscribe_tmp/${subAccount}" +vmess://${qrCodeBase64Default} +EOF + echoContent yellow " ---> QR code vmess(VMess+TCP+TLS)" + echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vmess://${qrCodeBase64Default}\n" + + elif [[ "${type}" == "vlessws" ]]; then + + echoContent yellow " ---> General format(VLESS+WS+TLS)" + echoContent green " vless://${id}@${add}:${port}?encryption=none&security=tls&type=ws&host=${host}&sni=${host}&path=%2f${path}#${email}\n" + + echoContent yellow " ---> Format clear text(VLESS+WS+TLS)" + echoContent green " agreement type：VLESS，address：${add}，Camouflage domain name/SNI：${host}，port：${port}，user ID：${id}，Safety：tls，transfer method：ws，path:/${path}，account name:${email}\n" + + cat <>"/etc/v2ray-agent/subscribe_tmp/${subAccount}" +vless://${id}@${add}:${port}?encryption=none&security=tls&type=ws&host=${host}&sni=${host}&path=%2f${path}#${email} +EOF + + echoContent yellow " ---> QR code VLESS(VLESS+TCP+TLS/XTLS)" + echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${id}%40${add}%3A${port}%3Fencryption%3Dnone%26security%3Dtls%26type%3Dws%26host%3D${host}%26sni%3D${host}%26path%3D%252f${path}%23${email}" + + elif [[ "${type}" == "vlessgrpc" ]]; then + + echoContent yellow " ---> General format(VLESS+gRPC+TLS)" + echoContent green " vless://${id}@${add}:${port}?encryption=none&security=tls&type=grpc&host=${host}&path=${path}&serviceName=${path}&alpn=h2&sni=${host}#${email}\n" + + echoContent yellow " ---> Format clear text(VLESS+gRPC+TLS)" + echoContent green " agreement type：VLESS，address：${add}，Camouflage domain name/SNI：${host}，port：${port}，user ID：${id}，Safety：tls，transfer method：gRPC，alpn：h2，serviceName:${path}，account name:${email}\n" + + cat <>"/etc/v2ray-agent/subscribe_tmp/${subAccount}" +vless://${id}@${add}:${port}?encryption=none&security=tls&type=grpc&host=${host}&path=${path}&serviceName=${path}&alpn=h2&sni=${host}#${email} +EOF + echoContent yellow " ---> QR code VLESS(VLESS+gRPC+TLS)" + echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${id}%40${add}%3A${port}%3Fencryption%3Dnone%26security%3Dtls%26type%3Dgrpc%26host%3D${host}%26serviceName%3D${path}%26path%3D${path}%26sni%3D${host}%26alpn%3Dh2%23${email}" + + elif [[ "${type}" == "trojan" ]]; then + # URLEncode + echoContent yellow " ---> Trojan(TLS)" + echoContent green " trojan://${id}@${host}:${port}?peer=${host}&sni=${host}&alpn=http1.1#${host}_Trojan\n" + + cat <>"/etc/v2ray-agent/subscribe_tmp/${subAccount}" +trojan://${id}@${host}:${port}?peer=${host}&sni=${host}&alpn=http1.1#${host}_Trojan +EOF + echoContent yellow " ---> QR code Trojan(TLS)" + echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=trojan%3a%2f%2f${id}%40${host}%3a${port}%3fpeer%3d${host}%26sni%3d${host}%26alpn%3Dhttp1.1%23${host}_Trojan\n" + + elif [[ "${type}" == "trojangrpc" ]]; then + # URLEncode + + echoContent yellow " ---> Trojan gRPC(TLS)" + echoContent green " trojan://${id}@${host}:${port}?encryption=none&peer=${host}&security=tls&type=grpc&sni=${host}&alpn=h2&path=${path}&serviceName=${path}#${host}_Trojan_gRPC\n" + + cat <>"/etc/v2ray-agent/subscribe_tmp/${subAccount}" +trojan://${id}@${host}:${port}?encryption=none&peer=${host}&security=tls&type=grpc&sni=${host}&alpn=h2&path=${path}&serviceName=${path}#${host}_Trojan_gRPC +EOF + echoContent yellow " ---> QR code Trojan gRPC(TLS)" + echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=trojan%3a%2f%2f${id}%40${host}%3a${port}%3Fencryption%3Dnone%26security%3Dtls%26peer%3d${host}%26type%3Dgrpc%26sni%3d${host}%26path%3D${path}%26alpn%3D=h2%26serviceName%3D${path}%23${host}_Trojan_gRPC\n" + + elif [[ "${type}" == "trojangows" ]]; then + # URLEncode + echoContent yellow " ---> Trojan-Go(WS+TLS) Shadowrocket" + echoContent green " trojan://${id}@${add}:${port}?allowInsecure=0&&peer=${host}&sni=${host}&plugin=obfs-local;obfs=websocket;obfs-host=${host};obfs-uri=${path}#${host}_Trojan_ws\n" + + cat <>"/etc/v2ray-agent/subscribe_tmp/${subAccount}" +trojan://${id}@${add}:${port}?allowInsecure=0&&peer=${host}&sni=${host}&plugin=obfs-local;obfs=websocket;obfs-host=${host};obfs-uri=${path}#${host}_Trojan_ws +EOF + echoContent yellow " ---> QR code Trojan-Go(WS+TLS) Shadowrocket" + echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=trojan%3a%2f%2f${id}%40${add}%3a${port}%3fallowInsecure%3d0%26peer%3d${host}%26plugin%3dobfs-local%3bobfs%3dwebsocket%3bobfs-host%3d${host}%3bobfs-uri%3d${path}%23${host}_Trojan_ws\n" + + path=$(echo "${path}" | awk -F "[/]" '{print $2}') + echoContent yellow " ---> Trojan-Go(WS+TLS) QV2ray" + + cat <>"/etc/v2ray-agent/subscribe_tmp/${subAccount}" +trojan-go://${id}@${add}:${port}?sni=${host}&type=ws&host=${host}&path=%2F${path}#${host}_Trojan_ws +EOF + + echoContent green " trojan-go://${id}@${add}:${port}?sni=${host}&type=ws&host=${host}&path=%2F${path}#${host}_Trojan_ws\n" + + fi +} +# account +showAccounts() { + readInstallType + readInstallProtocolType + readConfigHostPathUUID + echoContent skyBlue "\n schedule $1/${totalProgress} : account" + local show + # VLESS TCP + if [[ -n "${configPath}" ]]; then + show=1 + if echo "${currentInstallProtocolType}" | grep -q trojan ;then + echoContent skyBlue "===================== Trojan TCP TLS/XTLS-direct/XTLS-splice ======================\n" + # cat ${configPath}02_VLESS_TCP_inbounds.json | jq .inbounds[0].settings.clients | jq -c '.[]' + jq .inbounds[0].settings.clients ${configPath}02_trojan_TCP_inbounds.json | jq -c '.[]' | while read -r user; do + echoContent skyBlue "\n ---> account number：$(echo "${user}" | jq -r .email )_$(echo "${user}" | jq -r .password)" + echo + defaultBase64Code trojanTCPXTLS $(echo "${user}" | jq -r .email) $(echo "${user}" | jq -r .password) "${currentHost}:${currentPort}" ${currentHost} + done + + else + echoContent skyBlue "===================== VLESS TCP TLS/XTLS-direct/XTLS-splice ======================\n" + # cat ${configPath}02_VLESS_TCP_inbounds.json | jq .inbounds[0].settings.clients | jq -c '.[]' + jq .inbounds[0].settings.clients ${configPath}02_VLESS_TCP_inbounds.json | jq -c '.[]' | while read -r user; do + echoContent skyBlue "\n ---> account number：$(echo "${user}" | jq -r .email )_$(echo "${user}" | jq -r .id)" + echo + defaultBase64Code vlesstcp $(echo "${user}" | jq -r .email) $(echo "${user}" | jq -r .id) "${currentHost}:${currentPort}" ${currentHost} + done + fi + + + # VLESS WS + if echo ${currentInstallProtocolType} | grep -q 1; then + echoContent skyBlue "\n================================ VLESS WS TLS CDN ================================\n" + + # cat ${configPath}03_VLESS_WS_inbounds.json | jq .inbounds[0].settings.clients | jq -c '.[]' + jq .inbounds[0].settings.clients ${configPath}03_VLESS_WS_inbounds.json | jq -c '.[]' | while read -r user; do + echoContent skyBlue "\n ---> account number：$(echo "${user}" | jq -r .email )_$(echo "${user}" | jq -r .id)" + echo + local path="${currentPath}ws" + if [[ ${coreInstallType} == "1" ]]; then + echoContent yellow "Xrayof0-RTT path Will there be? ED = 2048, is not compatible with clients with V2Ray as the core, please manually delete? ED = 2048 after use\n" + path="${currentPath}ws?ed=2048" + fi + defaultBase64Code vlessws $(echo "${user}" | jq -r .email) $(echo "${user}" | jq -r .id) "${currentHost}:${currentPort}" ${path} ${currentAdd} + done + fi + + # VMess WS + if echo ${currentInstallProtocolType} | grep -q 3; then + echoContent skyBlue "\n================================ VMess WS TLS CDN ================================\n" + local path="${currentPath}vws" + if [[ ${coreInstallType} == "1" ]]; then + path="${currentPath}vws?ed=2048" + fi + jq .inbounds[0].settings.clients ${configPath}05_VMess_WS_inbounds.json | jq -c '.[]' | while read -r user; do + echoContent skyBlue "\n ---> 帐号：$(echo "${user}" | jq -r .email )_$(echo "${user}" | jq -r .id)" + echo + defaultBase64Code vmessws $(echo "${user}" | jq -r .email) $(echo "${user}" | jq -r .id) "${currentHost}:${currentPort}" ${path} ${currentAdd} + done + fi + + # VLESS grpc + if echo ${currentInstallProtocolType} | grep -q 5; then + echoContent skyBlue "\n=============================== VLESS gRPC TLS CDN ===============================\n" + echoContent red "\n --->gRPC Currently in the test phase, it may not be compatible with the client you use, if you can't use it, please ignore" + local serviceName=$(jq -r .inbounds[0].streamSettings.grpcSettings.serviceName ${configPath}06_VLESS_gRPC_inbounds.json) + jq .inbounds[0].settings.clients ${configPath}06_VLESS_gRPC_inbounds.json | jq -c '.[]' | while read -r user; do + echoContent skyBlue "\n ---> account number：$(echo "${user}" | jq -r .email )_$(echo "${user}" | jq -r .id)" + echo + defaultBase64Code vlessgrpc $(echo "${user}" | jq -r .email) $(echo "${user}" | jq -r .id) "${currentHost}:${currentPort}" ${serviceName} ${currentAdd} + done + fi + fi + + # trojan tcp + if echo ${currentInstallProtocolType} | grep -q 4; then + echoContent skyBlue "\n================================== Trojan TLS ==================================\n" + jq .inbounds[0].settings.clients ${configPath}04_trojan_TCP_inbounds.json | jq -c '.[]' | while read -r user; do + echoContent skyBlue "\n ---> account number：$(echo "${user}" | jq -r .email )_$(echo "${user}" | jq -r .password)" + echo + defaultBase64Code trojan trojan $(echo "${user}" | jq -r .password) ${currentHost} + done + fi + + if echo ${currentInstallProtocolType} | grep -q 2; then + echoContent skyBlue "\n================================ Trojan gRPC TLS ================================\n" + echoContent red "\n --->gRPC Currently in the test phase, it may not be compatible with the client you use, if you can't use it, please ignore" + local serviceName=$(jq -r .inbounds[0].streamSettings.grpcSettings.serviceName ${configPath}04_trojan_gRPC_inbounds.json) + jq .inbounds[0].settings.clients ${configPath}04_trojan_gRPC_inbounds.json | jq -c '.[]' | while read -r user; do + echoContent skyBlue "\n ---> account number：$(echo "${user}" | jq -r .email )_$(echo "${user}" | jq -r .password)" + echo + defaultBase64Code trojangrpc $(echo "${user}" | jq -r .email) $(echo "${user}" | jq -r .password) "${currentHost}:${currentPort}" ${serviceName} ${currentAdd} + done + fi + + if [[ -z ${show} ]]; then + echoContent red " ---> Not Installed" + fi +} + +# Update camouflage station +updateNginxBlog() { + echoContent skyBlue "\n schedule$1/${totalProgress} : Replace the camouflage site" + echoContent red "==============================================================" + echoContent yellow "# To customize, manually copy the template file to /usr/share/nginx/html \n" + echoContent yellow "1.Beginner's guide" + echoContent yellow "2.Game website" + echoContent yellow "3.personal blog01" + echoContent yellow "4.Businesses" + echoContent yellow "5.Unlock the encrypted music file template[https://github.com/ix64/unlock-music]" + echoContent yellow "6.mikutap[https://github.com/HFIProgramming/mikutap]" + echoContent yellow "7.Enterprise station 02" + echoContent yellow "8.Personal blog 02" + echoContent yellow "9.404 Automatic jump Baidu" + echoContent red "==============================================================" + read -r -p "please choose：" selectInstallNginxBlogType + + if [[ "${selectInstallNginxBlogType}" =~ ^[1-9]$ ]]; then +# rm -rf /usr/share/nginx/html + rm -rf /usr/share/nginx/* + if wget --help | grep -q show-progress; then + wget -c -q --show-progress -P /usr/share/nginx "https://raw.githubusercontent.com/mack-a/v2ray-agent/master/fodder/blog/unable/html${selectInstallNginxBlogType}.zip" >/dev/null + else + wget -c -P /usr/share/nginx "https://raw.githubusercontent.com/mack-a/v2ray-agent/master/fodder/blog/unable/html${selectInstallNginxBlogType}.zip" >/dev/null + fi + + unzip -o "/usr/share/nginx/html${selectInstallNginxBlogType}.zip" -d /usr/share/nginx/html >/dev/null + rm -f "/usr/share/nginx/html${selectInstallNginxBlogType}.zip*" + echoContent green " ---> Replace the pseudo-station success" + else + echoContent red " ---> Select an error, please re-select" + updateNginxBlog + fi +} + +# Add a new port +addCorePort() { + echoContent skyBlue "\n Function 1/${totalProgress} : Add a new port" + echoContent red "\n==============================================================" + echoContent yellow "# Precautions\n" + echoContent yellow "Support quantity added" + echoContent yellow "Does not affect the use of 443 ports" + echoContent yellow "When you view your account, you will only show the account number of the default port 443." + echoContent yellow "Do not allow special characters, pay attention to the format of comma" + echoContent yellow "Entry example: 2053, 2083, 2087\n" + + echoContent yellow "1.Adding ports" + echoContent yellow "2.Delete port" + echoContent red "==============================================================" + read -r -p "please choose:" selectNewPortType + if [[ "${selectNewPortType}" == "1" ]]; then + read -r -p "Please enter the port number:" newPort + if [[ -n "${newPort}" ]]; then + + while read -r port; do + cat <${configPath}02_dokodemodoor_inbounds_${port}.json +{ + "inbounds": [ + { + "listen": "0.0.0.0", + "port": ${port}, + "protocol": "dokodemo-door", + "settings": { + "address": "127.0.0.1", + "port": 443, + "network": "tcp", + "followRedirect": false + }, + "tag": "dokodemo-door-newPort-${port}" + } + ] +} +EOF + done < <(echo "${newPort}" | tr ',' '\n') + + echoContent green " ---> Added successfully" + reloadCore + fi + elif [[ "${selectNewPortType}" == "2" ]]; then + + ls ${configPath} | grep dokodemodoor | awk -F "[_]" '{print $4}' | awk -F "[.]" '{print ""NR""":"$1}' + read -r -p "Please enter the port number you want to delete:" portIndex + + local dokoConfig=$(ls ${configPath} | grep dokodemodoor | awk '{print ""NR""":"$1}' | grep ${portIndex}":") + if [[ -n "${dokoConfig}" ]]; then + rm ${configPath}/$(echo "${dokoConfig}" | awk -F "[:]" '{print $2}') + reloadCore + else + echoContent yellow "\n ---> Number Enter an error, please re-select" + addCorePort + fi + fi +} + +# Uninstall +unInstall() { + read -r -p "Do you confirm that uninstall installation content?[y/n]:" unInstallStatus + if [[ "${unInstallStatus}" != "y" ]]; then + echoContent green " ---> Abandon unload" + menu + exit 0 + fi + + handleNginx stop + if [[ -z $(pgrep -f "nginx") ]]; then + echoContent green " ---> Stop Nginx success" + fi + + handleV2Ray stop +# handleTrojanGo stop + rm -rf /root/.acme.sh + echoContent green " ---> Delete acme.sh complete" + rm -rf /etc/systemd/system/v2ray.service + echoContent green " ---> Delete V2RAY boot self-start" + + rm -rf /etc/systemd/system/trojan-go.service + echoContent green " ---> Delete Trojan-GO boot self-start" + rm -rf /tmp/v2ray-agent-tls/* + if [[ -d "/etc/v2ray-agent/tls" ]] && [[ -n $(find /etc/v2ray-agent/tls/ -name "*.key") ]] && [[ -n $(find /etc/v2ray-agent/tls/ -name "*.crt") ]]; then + mv /etc/v2ray-agent/tls /tmp/v2ray-agent-tls + if [[ -n $(find /tmp/v2ray-agent-tls -name '*.key') ]]; then + echoContent yellow " ---> Keep paying attention to the backup certificate.[/tmp/v2ray-agent-tls]" + fi + fi + + rm -rf /etc/v2ray-agent + rm -rf /etc/nginx/conf.d/alone.conf + rm -rf /usr/bin/vasma + rm -rf /usr/sbin/vasma + echoContent green " ---> Uninstall shortcut" + echoContent green " ---> Uninstall V2RAY-Agent script completion" +} + +# Modify V2RAY CDN node +updateV2RayCDN() { + + # todo Reconstruct this method + echoContent skyBlue "\n progress $1/${totalProgress} : Modify CDN node" + + if [[ -n ${currentAdd} ]]; then + echoContent red "==============================================================" + echoContent yellow "1.CNAME www.digitalocean.com" + echoContent yellow "2.CNAME www.cloudflare.com" + echoContent yellow "3.CNAME hostmonit.com" + echoContent yellow "4.Manual input" + echoContent red "==============================================================" + read -r -p "please choose:" selectCDNType + case ${selectCDNType} in + 1) + setDomain="www.digitalocean.com" + ;; + 2) + setDomain="www.cloudflare.com" + ;; + 3) + setDomain="hostmonit.com" + ;; + 4) + read -r -p "Please enter you want to customize CDN IP or domain name:" setDomain + ;; + esac + + if [[ -n ${setDomain} ]]; then + if [[ -n ${currentAdd} ]]; then + sed -i "s/\"${currentAdd}\"/\"${setDomain}\"/g" $(grep "${currentAdd}" -rl ${configPath}${frontingType}.json) + fi + if [[ $(jq -r .inbounds[0].settings.clients[0].add ${configPath}${frontingType}.json) == ${setDomain} ]]; then + echoContent green " ---> CDN is successful" + reloadCore + else + echoContent red " ---> Modify CDN failure" + fi + fi + else + echoContent red " ---> No available types" + fi +} + +# manageUser User Management +manageUser() { + echoContent skyBlue "\n progress $1/${totalProgress} : Multi-user management" + echoContent skyBlue "-----------------------------------------------------" + echoContent yellow "1.Add user" + echoContent yellow "2.delete users" + echoContent skyBlue "-----------------------------------------------------" + read -r -p "please choose:" manageUserType + if [[ "${manageUserType}" == "1" ]]; then + addUser + elif [[ "${manageUserType}" == "2" ]]; then + removeUser + else + echoContent red " ---> wrong selection" + fi +} + +# Customize UUID +customUUID() { + read -r -p "Whether to customize UUID ？[y/n]:" customUUIDStatus + echo + if [[ "${customUUIDStatus}" == "y" ]]; then + read -r -p "Please enter the legal UUID:" currentCustomUUID + echo + if [[ -z "${currentCustomUUID}" ]]; then + echoContent red " ---> UUID can not be empty" + else + local repeat= + jq -r -c '.inbounds[0].settings.clients[].id' ${configPath}${frontingType}.json | while read -r line; do + if [[ "${line}" == "${currentCustomUUID}" ]]; then + echo repeat >/tmp/v2ray-agent + fi + done + if [[ -f "/tmp/v2ray-agent" && -n $(cat /tmp/v2ray-agent) ]]; then + echoContent red " ---> UUID is not repeatable" + rm /tmp/v2ray-agent + exit 0 + fi + fi + fi +} + +# Custom Email +customUserEmail() { + read -r -p "Whether to customize Email ？[y/n]:" customEmailStatus + echo + if [[ "${customEmailStatus}" == "y" ]]; then + read -r -p "Please enter legitimate Email:" currentCustomEmail + echo + if [[ -z "${currentCustomEmail}" ]]; then + echoContent red " ---> Email is not empty" + else + local repeat= + jq -r -c '.inbounds[0].settings.clients[].email' ${configPath}${frontingType}.json | while read -r line; do + if [[ "${line}" == "${currentCustomEmail}" ]]; then + echo repeat >/tmp/v2ray-agent + fi + done + if [[ -f "/tmp/v2ray-agent" && -n $(cat /tmp/v2ray-agent) ]]; then + echoContent red " ---> Email is not repeatable" + rm /tmp/v2ray-agent + exit 0 + fi + fi + fi +} + +# Add user +addUser() { + + echoContent yellow "After adding new users, you need to re-view subscriptions." + read -r -p "Please enter the number of users you want to add:" userNum + echo + if [[ -z ${userNum} || ${userNum} -le 0 ]]; then + echoContent red " ---> Enter is incorrect, please re-enter" + exit 0 + fi + + # Generate users + local users= + local trojanGoUsers= + if [[ "${userNum}" == "1" ]]; then + customUUID + customUserEmail + fi + + while [[ ${userNum} -gt 0 ]]; do + + ((userNum--)) || true + if [[ -n "${currentCustomUUID}" ]]; then + uuid=${currentCustomUUID} + else + uuid=$(${ctlPath} uuid) + fi + if [[ -n "${currentCustomEmail}" ]]; then + email=${currentCustomEmail} + else + email=${currentHost}_${uuid} + fi + + if [[ ${userNum} == 0 ]]; then + + users=${users}{\"id\":\"${uuid}\",\"flow\":\"xtls-rprx-direct\",\"email\":\"${email}\",\"alterId\":0} + + if echo ${currentInstallProtocolType} | grep -q 4; then + trojanGoUsers=${trojanGoUsers}\"${uuid}\" + fi + else + users=${users}{\"id\":\"${uuid}\",\"flow\":\"xtls-rprx-direct\",\"email\":\"${email}\",\"alterId\":0}, + + if echo ${currentInstallProtocolType} | grep -q 4; then + trojanGoUsers=${trojanGoUsers}\"${uuid}\", + fi + fi + done + + # Compatible with V2Ray-core + if [[ "${coreInstallType}" == "2" ]]; then + # | sed 's/"flow":"xtls-rprx-direct",/"alterId":1,/g') + users="${users//\"flow\":\"xtls-rprx-direct\"\,/}" + fi + + if echo ${currentInstallProtocolType} | grep -q 0; then + local vlessUsers="${users//\,\"alterId\":0/}" + + local vlessTcpResult + vlessTcpResult=$(jq -r '.inbounds[0].settings.clients += ['${vlessUsers}']' ${configPath}${frontingType}.json) + echo "${vlessTcpResult}" | jq . >${configPath}${frontingType}.json + fi + + if echo ${currentInstallProtocolType} | grep -q trojan; then + local trojanXTLSUsers="${users//\,\"alterId\":0/}" + trojanXTLSUsers=${trojanXTLSUsers//"id"/"password"} + echo trojanXTLSUsers:${trojanXTLSUsers} + local trojanXTLSResult + trojanXTLSResult=$(jq -r '.inbounds[0].settings.clients += ['${trojanXTLSUsers}']' ${configPath}${frontingType}.json) + echo "${trojanXTLSResult}" | jq . >${configPath}${frontingType}.json + fi + + # users="${users//"flow":"xtls-rprx-direct",/"alterId":1,}" + + if echo ${currentInstallProtocolType} | grep -q 1; then + local vlessUsers="${users//\,\"alterId\":0/}" + vlessUsers="${vlessUsers//\"flow\":\"xtls-rprx-direct\"\,/}" + local vlessWsResult + vlessWsResult=$(jq -r '.inbounds[0].settings.clients += ['${vlessUsers}']' ${configPath}03_VLESS_WS_inbounds.json) + echo "${vlessWsResult}" | jq . >${configPath}03_VLESS_WS_inbounds.json + fi + + if echo ${currentInstallProtocolType} | grep -q 2; then + local trojangRPCUsers="${users//\"flow\":\"xtls-rprx-direct\"\,/}" + trojangRPCUsers="${trojangRPCUsers//\,\"alterId\":0/}" + trojangRPCUsers=${trojangRPCUsers//"id"/"password"} + + local trojangRPCResult + trojangRPCResult=$(jq -r '.inbounds[0].settings.clients += ['${trojangRPCUsers}']' ${configPath}04_trojan_gRPC_inbounds.json) + echo "${trojangRPCResult}" | jq . >${configPath}04_trojan_gRPC_inbounds.json + fi + + if echo ${currentInstallProtocolType} | grep -q 3; then + local vmessUsers="${users//\"flow\":\"xtls-rprx-direct\"\,/}" + + local vmessWsResult + vmessWsResult=$(jq -r '.inbounds[0].settings.clients += ['${vmessUsers}']' ${configPath}05_VMess_WS_inbounds.json) + echo "${vmessWsResult}" | jq . >${configPath}05_VMess_WS_inbounds.json + fi + + if echo ${currentInstallProtocolType} | grep -q 5; then + local vlessGRPCUsers="${users//\"flow\":\"xtls-rprx-direct\"\,/}" + vlessGRPCUsers="${vlessGRPCUsers//\,\"alterId\":0/}" + + local vlessGRPCResult + vlessGRPCResult=$(jq -r '.inbounds[0].settings.clients += ['${vlessGRPCUsers}']' ${configPath}06_VLESS_gRPC_inbounds.json) + echo "${vlessGRPCResult}" | jq . >${configPath}06_VLESS_gRPC_inbounds.json + fi + + if echo ${currentInstallProtocolType} | grep -q 4; then + local trojanUsers="${users//\"flow\":\"xtls-rprx-direct\"\,/}" + trojanUsers="${trojanUsers//id/password}" + trojanUsers="${trojanUsers//\,\"alterId\":0/}" + + + local trojanTCPResult + trojanTCPResult=$(jq -r '.inbounds[0].settings.clients += ['${trojanUsers}']' ${configPath}04_trojan_TCP_inbounds.json) + echo "${trojanTCPResult}" | jq . >${configPath}04_trojan_TCP_inbounds.json + fi + +# if echo ${currentInstallProtocolType} | grep -q 4; then +# local trojanResult +# trojanResult=$(jq -r '.password += ['${trojanGoUsers}']' ${configPath}../../trojan/config_full.json) +# echo "${trojanResult}" | jq . >${configPath}../../trojan/config_full.json +# handleTrojanGo stop +# handleTrojanGo start +# fi + + reloadCore + echoContent green " ---> Add completion" + showAccounts 1 +} + +# Remove user +removeUser() { + + if echo ${currentInstallProtocolType} | grep -q 0 || echo ${currentInstallProtocolType} | grep -q trojan ; then + jq -r -c .inbounds[0].settings.clients[].email ${configPath}${frontingType}.json | awk '{print NR""":"$0}' + read -r -p "Please select the user number you want to delete[Also supports single deletion]:" delUserIndex + if [[ $(jq -r '.inbounds[0].settings.clients|length' ${configPath}${frontingType}.json) -lt ${delUserIndex} ]]; then + echoContent red " ---> wrong selection" + else + delUserIndex=$((${delUserIndex} - 1)) + local vlessTcpResult + vlessTcpResult=$(jq -r 'del(.inbounds[0].settings.clients['${delUserIndex}'])' ${configPath}${frontingType}.json) + echo "${vlessTcpResult}" | jq . >${configPath}${frontingType}.json + fi + fi + if [[ -n "${delUserIndex}" ]]; then + if echo ${currentInstallProtocolType} | grep -q 1; then + local vlessWSResult + vlessWSResult=$(jq -r 'del(.inbounds[0].settings.clients['${delUserIndex}'])' ${configPath}03_VLESS_WS_inbounds.json) + echo "${vlessWSResult}" | jq . >${configPath}03_VLESS_WS_inbounds.json + fi + + if echo ${currentInstallProtocolType} | grep -q 2; then + local trojangRPCUsers + trojangRPCUsers=$(jq -r 'del(.inbounds[0].settings.clients['${delUserIndex}'])' ${configPath}04_trojan_gRPC_inbounds.json) + echo "${trojangRPCUsers}" | jq . >${configPath}04_trojan_gRPC_inbounds.json + fi + + if echo ${currentInstallProtocolType} | grep -q 3; then + local vmessWSResult + vmessWSResult=$(jq -r 'del(.inbounds[0].settings.clients['${delUserIndex}'])' ${configPath}05_VMess_WS_inbounds.json) + echo "${vmessWSResult}" | jq . >${configPath}05_VMess_WS_inbounds.json + fi + + if echo ${currentInstallProtocolType} | grep -q 5; then + local vlessGRPCResult + vlessGRPCResult=$(jq -r 'del(.inbounds[0].settings.clients['${delUserIndex}'])' ${configPath}06_VLESS_gRPC_inbounds.json) + echo "${vlessGRPCResult}" | jq . >${configPath}06_VLESS_gRPC_inbounds.json + fi + + if echo ${currentInstallProtocolType} | grep -q 4; then + local trojanTCPResult + trojanTCPResult=$(jq -r 'del(.inbounds[0].settings.clients['${delUserIndex}'])' ${configPath}04_trojan_TCP_inbounds.json) + echo "${trojanTCPResult}" | jq . >${configPath}04_trojan_TCP_inbounds.json + fi + + reloadCore + fi +} +# Update script +updateV2RayAgent() { + echoContent skyBlue "\n progress $1/${totalProgress} : Update V2RAY-Agent script" + rm -rf /etc/v2ray-agent/install.sh + if wget --help | grep -q show-progress; then + wget -c -q --show-progress -P /etc/v2ray-agent/ -N --no-check-certificate "https://raw.githubusercontent.com/mack-a/v2ray-agent/master/install.sh" + else + wget -c -q -P /etc/v2ray-agent/ -N --no-check-certificate "https://raw.githubusercontent.com/mack-a/v2ray-agent/master/install.sh" + fi + + sudo chmod 700 /etc/v2ray-agent/install.sh + local version=$(cat /etc/v2ray-agent/install.sh | grep 'Current version: v' | awk -F "[v]" '{print $2}' | tail -n +2 | head -n 1 | awk -F "[\"]" '{print $1}') + + echoContent green "\n ---> update completed" + echoContent yellow " ---> Please manually[vasma]Open script" + echoContent green " ---> current version:${version}\n" + echoContent yellow "If the update is unsuccessful, please manually perform the following command.\n" + echoContent skyBlue "wget -P /root -N --no-check-certificate "https://raw.githubusercontent.com/mack-a/v2ray-agent/master/install.sh" && chmod 700 /root/install.sh && /root/install.sh" + echo + exit 0 +} + +# Firewall +handleFirewall(){ + if systemctl status ufw 2>/dev/null|grep -q "active (exited)" && [[ "$1" == "stop" ]]; then + systemctl stop ufw >/dev/null 2>&1 + systemctl disable ufw >/dev/null 2>&1 + echoContent green " ---> ufw Close successfully" + + fi + + if systemctl status firewalld 2>/dev/null|grep -q "active (running)" && [[ "$1" == "stop" ]]; then + systemctl stop firewalld >/dev/null 2>&1 + systemctl disable firewalld >/dev/null 2>&1 + echoContent green " ---> firewalld Close successfully" + fi +} + +# 安装BBR +bbrInstall() { + echoContent red "\n==============================================================" + echoContent green "BBR、DDMature works for [YLX2016] with scripts, address [https://github.com/ylx2016/linux-netspeed], please be familiar" + echoContent yellow "1.Installation script【Recommended original BBR+FQ】" + echoContent yellow "2.Return the rendering" + echoContent red "==============================================================" + read -r -p "please choose:" installBBRStatus + if [[ "${installBBRStatus}" == "1" ]]; then + wget -N --no-check-certificate "https://raw.githubusercontent.com/ylx2016/Linux-NetSpeed/master/tcp.sh" && chmod +x tcp.sh && ./tcp.sh + else + menu + fi +} + +# View, check the log +checkLog() { + if [[ -z ${configPath} ]]; then + echoContent red " ---> No installation directory is detected, please perform script installation content" + fi + local logStatus=false + if [[ -n $(cat ${configPath}00_log.json | grep access) ]]; then + logStatus=true + fi + + echoContent skyBlue "\n function $1/${totalProgress} : View log" + echoContent red "\n==============================================================" + echoContent yellow "# It is recommended to open the Access log when you debug it.\n" + + if [[ "${logStatus}" == "false" ]]; then + echoContent yellow "1.Open Access log" + else + echoContent yellow "1.Close Access log" + fi + + echoContent yellow "2.Monitor Access Log" + echoContent yellow "3.Monitor Error log" + echoContent yellow "4.View certificate timing task log" + echoContent yellow "5.View certificate installation log" + echoContent yellow "6.Empty log" + echoContent red "==============================================================" + + read -r -p "please choose:" selectAccessLogType + local configPathLog=${configPath//conf\//} + + case ${selectAccessLogType} in + 1) + if [[ "${logStatus}" == "false" ]]; then + cat <${configPath}00_log.json +{ + "log": { + "access":"${configPathLog}access.log", + "error": "${configPathLog}error.log", + "loglevel": "debug" + } +} +EOF + elif [[ "${logStatus}" == "true" ]]; then + cat <${configPath}00_log.json +{ + "log": { + "error": "${configPathLog}error.log", + "loglevel": "warning" + } +} +EOF + fi + reloadCore + checkLog 1 + ;; + 2) + tail -f ${configPathLog}access.log + ;; + 3) + tail -f ${configPathLog}error.log + ;; + 4) + tail -n 100 /etc/v2ray-agent/crontab_tls.log + ;; + 5) + tail -n 100 /etc/v2ray-agent/tls/acme.log + ;; + 6) + echo >${configPathLog}access.log + echo >${configPathLog}error.log + ;; + esac +} + +# Script shortcut +aliasInstall() { + + if [[ -f "$HOME/install.sh" ]] && [[ -d "/etc/v2ray-agent" ]] && grep <$HOME/install.sh -q "author：mack-a"; then + mv "$HOME/install.sh" /etc/v2ray-agent/install.sh + local vasmaType= + if [[ -d "/usr/bin/" ]] ; then + if [[ ! -f "/usr/bin/vasma" ]];then + ln -s /etc/v2ray-agent/install.sh /usr/bin/vasma + chmod 700 /usr/bin/vasma + vasmaType=true + fi + + rm -rf "$HOME/install.sh" + elif [[ -d "/usr/sbin" ]] ; then + if [[ ! -f "/usr/sbin/vasma" ]];then + ln -s /etc/v2ray-agent/install.sh /usr/sbin/vasma + chmod 700 /usr/sbin/vasma + vasmaType=true + fi + rm -rf "$HOME/install.sh" + fi + if [[ "${vasmaType}" == "true" ]];then + echoContent green "Quick way to create success, executable[vasma]Re-opening the script" + fi + fi +} + +# Check IPv6, IPv4 +checkIPv6() { + pingIPv6=$(ping6 -c 1 www.google.com | sed '2{s/[^(]*(//;s/).*//;q;}' | tail -n +2) + if [[ -z "${pingIPv6}" ]]; then + echoContent red " ---> IPv6 does not support" + exit 0 + fi +} + +# ipv6 Divert +ipv6Routing() { + if [[ -z "${configPath}" ]]; then + echoContent red " ---> Not installed, please use the script installation" + menu + exit 0 + fi + + checkIPv6 + echoContent skyBlue "\n function 1/${totalProgress} : IPv6 diversion" + echoContent red "\n==============================================================" + echoContent yellow "1.Add domain name" + echoContent yellow "2.Uninstall IPv6 diversion" + echoContent red "==============================================================" + read -r -p "please choose:" ipv6Status + if [[ "${ipv6Status}" == "1" ]]; then + echoContent red "==============================================================" + echoContent yellow "# Precautions\n" + echoContent yellow "1.Rules only support a predefined domain name list[https://github.com/v2fly/domain-list-community]" + echoContent yellow "2.Detailed documentation[https://www.v2fly.org/config/routing.html]" + echoContent yellow "3.If the kernel starts fail, check the domain name and re-add domain name." + echoContent yellow "4.Do not allow special characters, pay attention to the format of comma" + echoContent yellow "5.Every time you add it, it is re-added, and the last domain name will not be retained." + echoContent yellow "6.Enride example:google,youtube,facebook\n" + read -r -p "Please follow the example name of the above:" domainList + + if [[ -f "${configPath}09_routing.json" ]];then + + unInstallRouting IPv6-out + + routing=$(jq -r '.routing.rules += [{"type":"field","domain":["geosite:'${domainList//,/\",\"geosite:}'"],"outboundTag":"IPv6-out"}]' ${configPath}09_routing.json) + + echo "${routing}"|jq . >${configPath}09_routing.json + + else + cat <${configPath}09_routing.json +{ + "routing":{ + "domainStrategy": "IPOnDemand", + "rules": [ + { + "type": "field", + "domain": [ + "geosite:${domainList//,/\",\"geosite:}" + ], + "outboundTag": "IPv6-out" + } + ] + } +} +EOF +fi + + unInstallOutbounds IPv6-out + + outbounds=$(jq -r '.outbounds += [{"protocol":"freedom","settings":{"domainStrategy":"UseIPv6"},"tag":"IPv6-out"}]' ${configPath}10_ipv4_outbounds.json) + + echo "${outbounds}"|jq . >${configPath}10_ipv4_outbounds.json + + echoContent green " ---> Added successfully" + + elif [[ "${ipv6Status}" == "2" ]]; then + + unInstallRouting IPv6-out + + unInstallOutbounds IPv6-out + + echoContent green " ---> IPv6 shunt uninstallation is successful" + else + echoContent red " ---> wrong selection" + exit 0 + fi + + reloadCore +} + +# BT download management +btTools() { + if [[ -z "${configPath}" ]]; then + echoContent red " ---> Not installed, please use the script installation" + menu + exit 0 + fi + + echoContent skyBlue "\n function 1/${totalProgress} : BT download management" + echoContent red "\n==============================================================" + + if [[ -f ${configPath}09_routing.json ]] && grep -q bittorrent < ${configPath}09_routing.json;then + echoContent yellow "Current status: Disabled" + else + echoContent yellow "Current status: not disabled" + fi + + echoContent yellow "1.Disable" + echoContent yellow "2.Open" + echoContent red "==============================================================" + read -r -p "please choose:" btStatus + if [[ "${btStatus}" == "1" ]]; then + + if [[ -f "${configPath}09_routing.json" ]];then + + unInstallRouting blackhole-out + + routing=$(jq -r '.routing.rules += [{"type":"field","outboundTag":"blackhole-out","protocol":["bittorrent"]}]' ${configPath}09_routing.json) + + echo "${routing}"|jq . >${configPath}09_routing.json + + else + cat <${configPath}09_routing.json +{ + "routing":{ + "domainStrategy": "IPOnDemand", + "rules": [ + { + "type": "field", + "outboundTag": "blackhole-out", + "protocol": [ "bittorrent" ] + } + ] + } +} +EOF +fi + + installSniffing + + unInstallOutbounds blackhole-out + + outbounds=$(jq -r '.outbounds += [{"protocol":"blackhole","tag":"blackhole-out"}]' ${configPath}10_ipv4_outbounds.json) + + echo "${outbounds}"|jq . >${configPath}10_ipv4_outbounds.json + + + + echoContent green " ---> BT download disabled" + + elif [[ "${btStatus}" == "2" ]]; then + + unInstallSniffing + + unInstallRouting blackhole-out + + unInstallOutbounds blackhole-out + + echoContent green " ---> BT download is successful" + else + echoContent red " ---> wrong selection" + exit 0 + fi + + reloadCore +} + +# Uninstall Routing according to TAG +unInstallRouting(){ + local tag=$1 + + if [[ -f "${configPath}09_routing.json" ]];then + local routing= + if grep -q "${tag}" ${configPath}09_routing.json;then + local index=$(jq .routing.rules[].outboundTag ${configPath}09_routing.json|awk '{print ""NR""":"$0}'|grep "${tag}"|awk -F "[:]" '{print $1}'|head -1) + if [[ ${index} -gt 0 ]];then + routing=$(jq -r 'del(.routing.rules['$(expr ${index} - 1)'])' ${configPath}09_routing.json) + echo "${routing}" |jq . >${configPath}09_routing.json + fi + fi + fi +} + +# Uninstalling station according to TAG +unInstallOutbounds(){ + local tag=$1 + + if grep -q "${tag}" ${configPath}10_ipv4_outbounds.json;then + local ipv6OutIndex=$(jq .outbounds[].tag ${configPath}10_ipv4_outbounds.json|awk '{print ""NR""":"$0}'|grep "${tag}"|awk -F "[:]" '{print $1}'|head -1) + if [[ ${ipv6OutIndex} -gt 0 ]];then + routing=$(jq -r 'del(.outbounds['$(expr ${ipv6OutIndex} - 1)'])' ${configPath}10_ipv4_outbounds.json) + echo "${routing}" |jq . >${configPath}10_ipv4_outbounds.json + fi + fi + +} + +# Uninstall +unInstallSniffing(){ + ls ${configPath}|grep inbounds.json|while read -r inbound;do + sniffing=$(jq -r 'del(.inbounds[0].sniffing)' ${configPath}${inbound}) + echo "${sniffing}" |jq . >${configPath}${inbound} + done +} + +# Install a sniff +installSniffing(){ + ls ${configPath}|grep inbounds.json|while read -r inbound;do + sniffing=$(jq -r '.inbounds[0].sniffing = {"enabled":true,"destOverride":["http","tls"]}' ${configPath}${inbound}) + echo "${sniffing}" |jq . >${configPath}${inbound} + done +} + +# WARP diversion +warpRouting(){ + echoContent skyBlue "\n $1/${totalProgress} : WARP diversion" + echoContent red "==============================================================" + echoContent yellow "# Cautions\n" + echoContent yellow "1.The official warp has a bug after several rounds of testing, rebooting will cause warp to fail and not start, there is also a possibility of CPU usage spike" + echoContent yellow "2.It can be used normally without rebooting the machine, if you have to use the official warp, it is recommended not to reboot the machine" + echoContent yellow "3.Some machines still work normally after reboot" + echoContent yellow "4.Uninstall and reinstall if you can't use it after reboot" + # 安装warp + if [[ -z $(which warp-cli) ]];then + echo + read -r -p "WARP not installed, installed or not ？[y/n]:" installCloudflareWarpStatus + if [[ "${installCloudflareWarpStatus}" == "y" ]];then + installWarp + else + echoContent yellow " ---> Abandonment of installation" + exit 0 + fi + fi + + echoContent red "\n==============================================================" + echoContent yellow "1.Add Domain" + echoContent yellow "2.Uninstall the WARP diversion" + echoContent red "==============================================================" + read -r -p "请选择:" warpStatus + if [[ "${warpStatus}" == "1" ]]; then + echoContent red "==============================================================" + echoContent yellow "# Cautions\n" + echoContent yellow "1.Rules only support predefined domain lists[https://github.com/v2fly/domain-list-community]" + echoContent yellow "2.Detailed documentation[https://www.v2fly.org/config/routing.html]" + echoContent yellow "3.You can only divert traffic to warp, you cannot specify ipv4 or ipv6" + echoContent yellow "4.If the kernel fails to start, please check the domain name and add it again" + echoContent yellow "5.No special characters allowed, note the comma format" + echoContent yellow "6.Each time you add it, it is re-added and will not keep the last domain name" + echoContent yellow "7.Entry Example:google,youtube,facebook\n" + read -r -p "Please enter the domain name according to the example above：" domainList + + if [[ -f "${configPath}09_routing.json" ]];then + unInstallRouting warp-socks-out + + routing=$(jq -r '.routing.rules += [{"type":"field","domain":["geosite:'${domainList//,/\",\"geosite:}'"],"outboundTag":"warp-socks-out"}]' ${configPath}09_routing.json) + + echo "${routing}"|jq . >${configPath}09_routing.json + + else + cat <${configPath}09_routing.json +{ + "routing":{ + "domainStrategy": "IPOnDemand", + "rules": [ + { + "type": "field", + "domain": [ + "geosite:${domainList//,/\",\"geosite:}" + ], + "outboundTag": "warp-socks-out" + } + ] + } +} +EOF + fi + unInstallOutbounds warp-socks-out + + local outbounds=$(jq -r '.outbounds += [{"protocol":"socks","settings":{"servers":[{"address":"127.0.0.1","port":31303}]},"tag":"warp-socks-out"}]' ${configPath}10_ipv4_outbounds.json) + + echo "${outbounds}"|jq . >${configPath}10_ipv4_outbounds.json + + echoContent green " ---> Added successfully" + + elif [[ "${warpStatus}" == "2" ]]; then + + ${removeType} cloudflare-warp >/dev/null 2>&1 + + unInstallRouting warp-socks-out + + unInstallOutbounds warp-socks-out + + echoContent green " ---> WARP分流卸载成功" + else + echoContent red " ---> 选择错误" + exit 0 + fi + reloadCore +} +# Streaming media toolbox +streamingToolbox() { + echoContent skyBlue "\n function 1/${totalProgress} : Streaming media toolbox" + echoContent red "\n==============================================================" +# echoContent yellow "1.Netflix detection" + echoContent yellow "1.Any door floor machine unlock Netflix" + echoContent yellow "2.DNS unlock stream" + read -r -p "please choose:" selectType + + case ${selectType} in +# 1) +# checkNetflix +# ;; + 1) + checkNetflix + ;; + 1) + dokodemoDoorUnblockNetflix + ;; + 2) + dnsUnlockNetflix + ;; + esac + +} + +# Any door unlock Netflix +dokodemoDoorUnblockNetflix() { + echoContent skyBlue "\n function 1/${totalProgress} : Any door floor machine unlock Netflix" + echoContent red "\n==============================================================" + echoContent yellow "# Precautions" + echoContent yellow "Any door unlock detailed, please check this article[https://github.com/mack-a/v2ray-agent/blob/master/documents/netflix/dokodemo-unblock_netflix.md]\n" + + echoContent yellow "1.Add an outbound" + echoContent yellow "2.Adding a station" + echoContent yellow "3.Uninstall" + read -r -p "please choose:" selectType + + case ${selectType} in + 1) + setDokodemoDoorUnblockNetflixOutbounds + ;; + 2) + setDokodemoDoorUnblockNetflixInbounds + ;; + 3) + removeDokodemoDoorUnblockNetflix + ;; + esac +} + +# Set any door unlock Netflix@ outbound] +setDokodemoDoorUnblockNetflixOutbounds() { + read -r -p "Please enter unlock Netflix VPS IP:" setIP + if [[ -n "${setIP}" ]]; then + + unInstallOutbounds netflix-80 + unInstallOutbounds netflix-443 + + outbounds=$(jq -r '.outbounds += [{"tag":"netflix-80","protocol":"freedom","settings":{"domainStrategy":"AsIs","redirect":"'${setIP}':22387"}},{"tag":"netflix-443","protocol":"freedom","settings":{"domainStrategy":"AsIs","redirect":"'${setIP}':22388"}}]' ${configPath}10_ipv4_outbounds.json) + + echo "${outbounds}"|jq . >${configPath}10_ipv4_outbounds.json + + if [[ -f "${configPath}09_routing.json" ]] ;then + unInstallRouting netflix-80 + unInstallRouting netflix-443 + + local routing=$(jq -r '.routing.rules += [{"type":"field","port":80,"domain":["ip.sb","geosite:netflix"],"outboundTag":"netflix-80"},{"type":"field","port":443,"domain":["ip.sb","geosite:netflix"],"outboundTag":"netflix-443"}]' ${configPath}09_routing.json) + echo "${routing}"|jq . >${configPath}09_routing.json + else + cat <${configPath}09_routing.json +{ + "routing": { + "domainStrategy": "AsIs", + "rules": [ + { + "type": "field", + "port": 80, + "domain": [ + "ip.sb", + "geosite:netflix" + ], + "outboundTag": "netflix-80" + }, + { + "type": "field", + "port": 443, + "domain": [ + "ip.sb", + "geosite:netflix" + ], + "outboundTag": "netflix-443" + } + ] + } +} +EOF + fi + reloadCore + echoContent green " ---> Add Netflix to unlock successfully" +# echoContent yellow " ---> Trojan related nodes do not support" + exit 0 + fi + echoContent red " ---> IP cannot be empty" +} + +# Set up any door unlock Netflix [inbound] +setDokodemoDoorUnblockNetflixInbounds() { + + echoContent skyBlue "\n function 1/${totalProgress} : Any door to add station" + echoContent red "\n==============================================================" + echoContent yellow "# Precautions\n" + echoContent yellow "Support quantity added" + echoContent yellow "Do not allow special characters, pay attention to the format of comma" + echoContent yellow "Enride example:1.1.1.1,1.1.1.2\n" + read -r -p "Please enter the allowed access to the unlock Netflix VPS IP:" setIPs + if [[ -n "${setIPs}" ]]; then + cat <${configPath}01_netflix_inbounds.json +{ + "inbounds": [ + { + "listen": "0.0.0.0", + "port": 22387, + "protocol": "dokodemo-door", + "settings": { + "address": "0.0.0.0", + "port": 80, + "network": "tcp", + "followRedirect": false + }, + "sniffing": { + "enabled": true, + "destOverride": [ + "http" + ] + }, + "tag": "unblock-80" + }, + { + "listen": "0.0.0.0", + "port": 22388, + "protocol": "dokodemo-door", + "settings": { + "address": "0.0.0.0", + "port": 443, + "network": "tcp", + "followRedirect": false + }, + "sniffing": { + "enabled": true, + "destOverride": [ + "tls" + ] + }, + "tag": "unblock-443" + } + ] +} +EOF + + cat <${configPath}10_ipv4_outbounds.json +{ + "outbounds":[ + { + "protocol":"freedom", + "settings":{ + "domainStrategy":"UseIPv4" + }, + "tag":"IPv4-out" + }, + { + "protocol":"freedom", + "settings":{ + "domainStrategy":"UseIPv6" + }, + "tag":"IPv6-out" + }, + { + "protocol":"blackhole", + "tag":"blackhole-out" + } + ] +} +EOF + + cat <${configPath}09_routing.json +{ + "routing": { + "rules": [ + { + "source": [], + "type": "field", + "inboundTag": [ + "unblock-80", + "unblock-443" + ], + "outboundTag": "direct" + }, + { + "domains": [ + "geosite:netflix" + ], + "type": "field", + "inboundTag": [ + "unblock-80", + "unblock-443" + ], + "outboundTag": "blackhole-out" + } + ] + } +} +EOF + local ips= + while read -r ip; do + if [[ -z ${ips} ]];then + ips=\"${ip}\" + else + ips=${ips},\"${ip}\" + fi + done< <(echo ${setIPs}|tr ',' '\n') + + local routing=$(jq -r '.routing.rules[0].source += ['${ips}']' ${configPath}09_routing.json) + echo "${routing}" | jq . >${configPath}09_routing.json + reloadCore + echoContent green " ---> Add a landing machine entry to unlock Netflix success" + exit 0 + fi + echoContent red " ---> IP cannot be empty" +} + +# Remove any door unlock Netflix +removeDokodemoDoorUnblockNetflix() { + + unInstallOutbounds netflix-80 + unInstallOutbounds netflix-443 + unInstallRouting netflix-80 + unInstallRouting netflix-443 + rm -rf ${configPath}01_netflix_inbounds.json + + reloadCore + echoContent green " ---> Uninstall success" +} + +# Restart the core +reloadCore() { + if [[ "${coreInstallType}" == "1" ]]; then + handleXray stop + handleXray start + elif [[ "${coreInstallType}" == "2" || "${coreInstallType}" == "3" ]]; then + handleV2Ray stop + handleV2Ray start + fi +} + +# an examination Does VPS support Netflix +checkNetflix() { + echoContent red "\n precautions" + echoContent yellow " 1.Only if the VPS can support Netflix" + echoContent yellow " 2.Netflix supports Netflix after the agent is not detecting the agent configuration DNS unlock" + echoContent yellow " 3.Can detect VPS configuration DNS unlocking Netflix\n" + echoContent skyBlue " ---> checking" + netflixResult=$(curl -s -m 2 https://www.netflix.com | grep "Not Available") + if [[ -n ${netflixResult} ]]; then + echoContent red " ---> Netflix is not available" + exit 0 + fi + + netflixResult=$(curl -s -m 2 https://www.netflix.com | grep "NSEZ-403") + if [[ -n ${netflixResult} ]]; then + echoContent red " ---> Netflix is not available" + exit 0 + fi + + echoContent skyBlue " ---> Detect whether the desperate poisoning teacher can play" + result=$(curl -s -m 2 https://www.netflix.com/title/70143836 | grep "page-404") + if [[ -n ${result} ]]; then + echoContent green " ---> Only" + exit 0 + fi + echoContent green " ---> Netflix unlocked" + exit 0 +} + +# DNS unlock Netflix +dnsUnlockNetflix() { + echoContent skyBlue "\n function 1/${totalProgress} : DNS unlock Netflix" + echoContent red "\n==============================================================" + echoContent yellow "1.Add to" + echoContent yellow "2.Uninstall" + read -r -p "please choose:" selectType + + case ${selectType} in + 1) + setUnlockDNS + ;; + 2) + removeUnlockDNS + ;; + esac +} + +# Set DNS +setUnlockDNS() { + read -r -p "Please enter the DNS unlocked Netflix:" setDNS + if [[ -n ${setDNS} ]]; then + cat <${configPath}11_dns.json +{ + "dns": { + "servers": [ + { + "address": "${setDNS}", + "port": 53, + "domains": [ + "geosite:netflix", + "geosite:bahamut", + "geosite:hulu", + "geosite:hbo", + "geosite:disney", + "geosite:bbc", + "geosite:4chan", + "geosite:fox", + "geosite:abema", + "geosite:dmm", + "geosite:niconico", + "geosite:pixiv", + "geosite:bilibili", + "geosite:viu" + ] + }, + "localhost" + ] + } +} +EOF + reloadCore + + echoContent green "\n ---> DNS unlocks add success, this setting is invalid for Trojan-Go" + echoContent yellow "\n ---> If you can't watch it, you can try the following two programs." + echoContent yellow " 1.Restart VPS" + echoContent yellow " 2.After uninstalling the DNS unlock, modify the local [/etc/resolv.conf]DNs settings and restart VPS \ N)" + else + echoContent red " ---> DNS cannot be empty" + fi + exit 0 +} + +# Remove Netflix unlock +removeUnlockDNS() { + cat <${configPath}11_dns.json +{ + "dns": { + "servers": [ + "localhost" + ] + } +} +EOF + reloadCore + + echoContent green " ---> Uninstall success" + + exit 0 +} + +# v2ray-Core Personalization +customV2RayInstall() { + echoContent skyBlue "\n========================Personalization installation============================" + echoContent yellow "Vless front, you must install 0, if you only need to install 0, enter" + if [[ "${selectCoreType}" == "2" ]]; then + echoContent yellow "0.VLESS+TLS+TCP" + else + echoContent yellow "0.VLESS+TLS/XTLS+TCP" + fi + + echoContent yellow "1.VLESS+TLS+WS[CDN]" + echoContent yellow "2.VMess+TLS+TCP" + echoContent yellow "3.VMess+TLS+WS[CDN]" +# echoContent yellow "4.Trojan、Trojan+WS[CDN]" + echoContent yellow "4.Trojan" + echoContent yellow "5.VLESS+TLS+gRPC[CDN]" + read -r -p "Please select [Multiple Select], [for example: 123]:" selectCustomInstallType + echoContent skyBlue "--------------------------------------------------------------" + if [[ -z ${selectCustomInstallType} ]]; then + selectCustomInstallType=0 + fi + if [[ "${selectCustomInstallType}" =~ ^[0-5]+$ ]]; then + cleanUp xrayClean + totalProgress=17 + installTools 1 + # Apply for TLS + initTLSNginxConfig 2 + installTLS 3 + handleNginx stop + if echo ${selectCustomInstallType} | grep -q 1 || echo ${selectCustomInstallType} | grep -q 3 || echo ${selectCustomInstallType} | grep -q 4; then + randomPathFunction 5 + customCDNIP 6 + fi + nginxBlog 7 + updateRedirectNginxConf + handleNginx start + + # Install v2ray + installV2Ray 8 + installV2RayService 9 + initV2RayConfig custom 10 + cleanUp xrayDel + installCronTLS 14 + handleV2Ray stop + handleV2Ray start + # Account + checkGFWStatue 15 + showAccounts 16 + else + echoContent red " ---> Input is not legal" + customV2RayInstall + fi +} + +# Xray-core Personalization installation +customXrayInstall() { + echoContent skyBlue "\n========================Personalization installation============================" + echoContent yellow "Vless front, default installation 0, if only 0 is required, only 0 can be selected" + echoContent yellow "0.VLESS+TLS/XTLS+TCP" + echoContent yellow "1.VLESS+TLS+WS[CDN]" + echoContent yellow "2.Trojan+TLS+gRPC[CDN]" + echoContent yellow "3.VMess+TLS+WS[CDN]" + # echoContent yellow "4.Trojan、Trojan+WS[CDN]" + echoContent yellow "4.Trojan" + echoContent yellow "5.VLESS+TLS+gRPC[CDN]" + read -r -p "Please select [Multiple Select], [for example: 123]:" selectCustomInstallType + echoContent skyBlue "--------------------------------------------------------------" + if [[ -z ${selectCustomInstallType} ]]; then + echoContent red " ---> Cannot be empty" + customXrayInstall + elif [[ "${selectCustomInstallType}" =~ ^[0-5]+$ ]]; then + cleanUp v2rayClean + totalProgress=17 + installTools 1 + # Apply for TLS + initTLSNginxConfig 2 + installTLS 3 + handleNginx stop + + if echo "${selectCustomInstallType}" | grep -q 1 || echo "${selectCustomInstallType}" | grep -q 2 || echo "${selectCustomInstallType}" | grep -q 3 || echo "${selectCustomInstallType}" | grep -q 5; then + randomPathFunction 5 + customCDNIP 6 + fi + nginxBlog 7 + updateRedirectNginxConf + handleNginx start + + # Install v2ray + installXray 8 + installXrayService 9 + initXrayConfig custom 10 + cleanUp v2rayDel + + installCronTLS 14 + handleXray stop + handleXray start + # Account + checkGFWStatue 15 + showAccounts 16 + else + echoContent red " ---> Input is not legal" + customXrayInstall + fi +} + +# Select the core installation --- v2ray-core, xray-core, lock version of V2RAY-CORE [XTLS] +selectCoreInstall() { + echoContent skyBlue "\n function 1/${totalProgress} : Select core installation" + echoContent red "\n==============================================================" + echoContent yellow "1.Xray-core" + echoContent yellow "2.v2ray-core" + echoContent red "==============================================================" + read -r -p "please choose:" selectCoreType + case ${selectCoreType} in + 1) + if [[ "${selectInstallType}" == "2" ]]; then + customXrayInstall + else + xrayCoreInstall + fi + ;; + 2) + v2rayCoreVersion= + if [[ "${selectInstallType}" == "2" ]]; then + customV2RayInstall + else + v2rayCoreInstall + fi + ;; + 3) + v2rayCoreVersion=v4.32.1 + if [[ "${selectInstallType}" == "2" ]]; then + customV2RayInstall + else + v2rayCoreInstall + fi + ;; + *) + echoContent red ' ---> Select an error, reselect' + selectCoreInstall + ;; + esac +} + +# v2ray-core Install +v2rayCoreInstall() { + cleanUp xrayClean + selectCustomInstallType= + totalProgress=13 + installTools 2 + # Apply for tls + initTLSNginxConfig 3 + installTLS 4 + handleNginx stop + # initNginxConfig 5 + randomPathFunction 5 + # Installing V2Ray + installV2Ray 6 + installV2RayService 7 + customCDNIP 8 + initV2RayConfig all 9 + cleanUp xrayDel + installCronTLS 10 + nginxBlog 11 + updateRedirectNginxConf + handleV2Ray stop + sleep 2 + handleV2Ray start + handleNginx start + # Generate account + checkGFWStatue 12 + showAccounts 13 +} + +# xray-core Install +xrayCoreInstall() { + cleanUp v2rayClean + selectCustomInstallType= + totalProgress=13 + installTools 2 + # Apply for tls + initTLSNginxConfig 3 + installTLS 4 + handleNginx stop + randomPathFunction 5 + # Installing Xray + handleV2Ray stop + installXray 6 + installXrayService 7 + customCDNIP 8 + initXrayConfig all 9 + cleanUp v2rayDel + installCronTLS 10 + nginxBlog 11 + updateRedirectNginxConf + handleXray stop + sleep 2 + handleXray start + + handleNginx start + # Generate account + checkGFWStatue 12 + showAccounts 13 +} + +# Core management +coreVersionManageMenu() { + + if [[ -z "${coreInstallType}" ]]; then + echoContent red "\n ---> No installation directory is detected, please perform script installation content" + menu + exit 0 + fi + if [[ "${coreInstallType}" == "1" ]]; then + xrayVersionManageMenu 1 + elif [[ "${coreInstallType}" == "2" ]]; then + v2rayCoreVersion= + v2rayVersionManageMenu 1 + + elif [[ "${coreInstallType}" == "3" ]]; then + v2rayCoreVersion=v4.32.1 + v2rayVersionManageMenu 1 + fi +} +# Timing task check certificate +cronRenewTLS() { + if [[ "${renewTLS}" == "RenewTLS" ]]; then + renewalTLS + exit 0 + fi +} +# Account management +manageAccount() { + echoContent skyBlue "\n function 1/${totalProgress} : Account management" + echoContent red "\n==============================================================" + echoContent yellow "# Every time you delete, after adding an account, you need to re-view subscription generation subscriptions.\n" + echoContent yellow "1.View account" + echoContent yellow "2.View subscriptions" + echoContent yellow "3.Add user" + echoContent yellow "4.delete users" + echoContent red "==============================================================" + read -r -p "please enter:" manageAccountStatus + if [[ "${manageAccountStatus}" == "1" ]]; then + showAccounts 1 + elif [[ "${manageAccountStatus}" == "2" ]]; then + subscribe 1 + elif [[ "${manageAccountStatus}" == "3" ]]; then + addUser + elif [[ "${manageAccountStatus}" == "4" ]]; then + removeUser + else + echoContent red " ---> wrong selection" + fi +} + +# subscription +subscribe() { + if [[ -n "${configPath}" ]]; then + echoContent skyBlue "-------------------------Remark---------------------------------" + echoContent yellow "# When you check the subscription, you will regenerate your subscription." + echoContent yellow "# Each time you add, delete your account needs to reserve subscriptions" + rm -rf /etc/v2ray-agent/subscribe/* + rm -rf /etc/v2ray-agent/subscribe_tmp/* + showAccounts >/dev/null + mv /etc/v2ray-agent/subscribe_tmp/* /etc/v2ray-agent/subscribe/ + + if [[ -n $(ls /etc/v2ray-agent/subscribe) ]]; then + ls /etc/v2ray-agent/subscribe | while read -r email; do + local base64Result=$(base64 -w 0 /etc/v2ray-agent/subscribe/${email}) + echo ${base64Result} >"/etc/v2ray-agent/subscribe/${email}" + echoContent skyBlue "--------------------------------------------------------------" + echoContent yellow "email：$(echo "${email}" | awk -F "[_]" '{print $1}')\n" + echoContent yellow "url：https://${currentHost}/s/${email}\n" + echoContent yellow "Online QR code：https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=https://${currentHost}/s/${email}\n" + echo "https://${currentHost}/s/${email}" | qrencode -s 10 -m 1 -t UTF8 + echoContent skyBlue "--------------------------------------------------------------" + done + fi + else + echoContent red " ---> Not Installed" + fi +} + +# main menu +menu() { + cd "$HOME" || exit + echoContent red "\n==============================================================" + echoContent green "author：mack-a" + echoContent green "current version：v2.5.28" + echoContent green "Github：https://github.com/mack-a/v2ray-agent" + echoContent green "describe：Eight-in-one copy script\c" + showInstallStatus + echoContent red "\n==============================================================" + if [[ -n "${coreInstallType}" ]]; then + echoContent yellow "1.re-install" + else + echoContent yellow "1.Install" + fi + + echoContent yellow "2.Arbitrary combination installation" + if echo ${currentInstallProtocolType} | grep -q trojan; then + echoContent yellow "3.Switch VLESS[XTLS]" + elif echo ${currentInstallProtocolType} | grep -q 0;then + echoContent yellow "3.Switch Trojan[XTLS]" + fi + echoContent skyBlue "-------------------------Tool management-----------------------------" + echoContent yellow "4.Account management" + echoContent yellow "5.Replace the camouflage station" + echoContent yellow "6.Update certificate" + echoContent yellow "7.Replace CDN node" + echoContent yellow "8.IPv6 Divert" + echoContent yellow "9.WARP diversion" + echoContent yellow "10.Stream media tool" + echoContent yellow "11.Add a new port" + echoContent yellow "12.BT download management" + echoContent skyBlue "-------------------------Version management-----------------------------" + echoContent yellow "13.Core Management" + echoContent yellow "14.Update script" + echoContent yellow "15.Install BBR, DD script" + echoContent skyBlue "-------------------------Scripting management-----------------------------" + echoContent yellow "16.View log" + echoContent yellow "17.Uninstall" + echoContent red "==============================================================" + mkdirTools + aliasInstall + read -r -p "please choose:" selectInstallType + case ${selectInstallType} in + 1) + selectCoreInstall + ;; + 2) + selectCoreInstall + ;; + 3) + initXrayFrontingConfig 1 + ;; + 4) + manageAccount 1 + ;; + 5) + updateNginxBlog 1 + ;; + 6) + renewalTLS 1 + ;; + 7) + updateV2RayCDN 1 + ;; + 8) + ipv6Routing 1 + ;; + 9) + warpRouting 1 + ;; + 10) + streamingToolbox 1 + ;; + 11) + addCorePort 1 + ;; + 12) + btTools 1 + ;; + 13) + coreVersionManageMenu 1 + ;; + 14) + updateV2RayAgent 1 + ;; + 15) + bbrInstall + ;; + 16) + checkLog 1 + ;; + 17) + unInstall 1 + ;; + esac +} +cronRenewTLS +menu From 8c5ae0122416c6c83dc57a6efc9d260a089067db Mon Sep 17 00:00:00 2001 From: mack-a <57424792+mack-a@users.noreply.github.com> Date: Fri, 27 Aug 2021 21:10:35 +0800 Subject: [PATCH 2/3] =?UTF-8?q?feat(aff):=20=E4=BF=AE=E6=94=B9aff=E5=9C=B0?= =?UTF-8?q?=E5=9D=80?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index bb0ce16..e8f32bb 100644 --- a/README.md +++ b/README.md @@ -106,7 +106,7 @@ ## 捐赠 -[您可以使用我的AFF进行购买VPS捐赠](https://github.com/mack-a/v2ray-agent/blob/master/documents/donation_aff.md) +[您可以使用我的AFF进行购买VPS捐赠](https://www.v2ray-agent.com/%E6%82%A8%E5%8F%AF%E4%BB%A5%E9%80%9A%E8%BF%87%E6%88%91%E7%9A%84AFF%E8%B4%AD%E4%B9%B0vps%E6%8D%90%E8%B5%A0) [支持通过虚拟币向我捐赠](https://github.com/mack-a/v2ray-agent/blob/master/documents/donation.md) From 26ae1171b28727684261661d26fe62211a9ceafd Mon Sep 17 00:00:00 2001 From: mack-a <57424792+mack-a@users.noreply.github.com> Date: Mon, 30 Aug 2021 17:57:24 +0800 Subject: [PATCH 3/3] =?UTF-8?q?feat(=E8=84=9A=E6=9C=AC):=20=E4=BF=AE?= =?UTF-8?q?=E6=94=B9=E8=AD=A6=E5=91=8A=E4=BB=A3=E7=A0=81?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- install.sh | 160 +++++++++++++++++++------------------------- shell/install_en.sh | 24 +++---- 2 files changed, 79 insertions(+), 105 deletions(-) diff --git a/install.sh b/install.sh index 6c1c086..bed3d5d 100644 --- a/install.sh +++ b/install.sh @@ -50,9 +50,6 @@ checkSystem() { upgrade="yum update -y --skip-broken" elif grep 证书有效" - - if ! ls /etc/v2ray-agent/tls/ | grep -q "${tlsDomain}.crt" || ! ls /etc/v2ray-agent/tls/ | grep -q "${tlsDomain}.key" || [[ -z $(cat "/etc/v2ray-agent/tls/${tlsDomain}.crt") ]]; then + # + if [[ -z ${find /etc/v2ray-agent/tls/ -name "${tlsDomain}.crt"} ]] || [[ -z ${find /etc/v2ray-agent/tls/ -name "${tlsDomain}.key"} ]] || [[ -z $(cat "/etc/v2ray-agent/tls/${tlsDomain}.crt") ]];then sudo "$HOME/.acme.sh/acme.sh" --installcert -d "${tlsDomain}" --fullchainpath "/etc/v2ray-agent/tls/${tlsDomain}.crt" --keypath "/etc/v2ray-agent/tls/${tlsDomain}.key" --ecc >/dev/null else echoContent yellow " ---> 如未过期请选择[n]\n" @@ -872,9 +867,9 @@ installTLS() { elif [[ -d "$HOME/.acme.sh" ]] && [[ ! -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.cer" || ! -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.key" ]]; then echoContent green " ---> 安装TLS证书" if echo "${localIP}"|grep -q ":"; then - sudo "$HOME/.acme.sh/acme.sh" --issue -d "${tlsDomain}" --standalone -k ec-256 --server letsencrypt --listen-v6 >> /etc/v2ray-agent/tls/acme.log + sudo "$HOME/.acme.sh/acme.sh" --issue -d "${tlsDomain}" --standalone -k ec-256 --server letsencrypt --listen-v6 | tee -a /etc/v2ray-agent/tls/acme.log else - sudo "$HOME/.acme.sh/acme.sh" --issue -d "${tlsDomain}" --standalone -k ec-256 --server letsencrypt >> /etc/v2ray-agent/tls/acme.log + sudo "$HOME/.acme.sh/acme.sh" --issue -d "${tlsDomain}" --standalone -k ec-256 --server letsencrypt | tee -a /etc/v2ray-agent/tls/acme.log fi if [[ -d "$HOME/.acme.sh/${tlsDomain}_ecc" && -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.key" && -f "$HOME/.acme.sh/${tlsDomain}_ecc/${tlsDomain}.cer" ]]; then @@ -991,7 +986,8 @@ handleNginx() { installCronTLS() { echoContent skyBlue "\n进度 $1/${totalProgress} : 添加定时维护证书" crontab -l >/etc/v2ray-agent/backup_crontab.cron - local historyCrontab=$(sed '/v2ray-agent/d;/acme.sh/d' /etc/v2ray-agent/backup_crontab.cron) + local historyCrontab + historyCrontab=$(sed '/v2ray-agent/d;/acme.sh/d' /etc/v2ray-agent/backup_crontab.cron) echo "${historyCrontab}" >/etc/v2ray-agent/backup_crontab.cron echo "30 1 * * * /bin/bash /etc/v2ray-agent/install.sh RenewTLS >> /etc/v2ray-agent/crontab_tls.log 2>&1" >>/etc/v2ray-agent/backup_crontab.cron crontab /etc/v2ray-agent/backup_crontab.cron @@ -1003,13 +999,13 @@ renewalTLS() { echoContent skyBlue "\n进度 1/1 : 更新证书" if [[ -d "$HOME/.acme.sh/${currentHost}_ecc" ]] && [[ -f "$HOME/.acme.sh/${currentHost}_ecc/${currentHost}.key" ]] && [[ -f "$HOME/.acme.sh/${currentHost}_ecc/${currentHost}.cer" ]]; then - modifyTime=$(stat $HOME/.acme.sh/${currentHost}_ecc/${currentHost}.cer | sed -n '7,6p' | awk '{print $2" "$3" "$4" "$5}') + modifyTime=$(stat "$HOME/.acme.sh/${currentHost}_ecc/${currentHost}.cer" | sed -n '7,6p' | awk '{print $2" "$3" "$4" "$5}') modifyTime=$(date +%s -d "${modifyTime}") currentTime=$(date +%s) - stampDiff=$(expr ${currentTime} - ${modifyTime}) - days=$(expr ${stampDiff} / 86400) - remainingDays=$(expr 90 - ${days}) + stampDiff=$(("${currentTime}" - "${modifyTime}")) + days=$(("${stampDiff}" / 86400)) + remainingDays=$((90 - "${days}")) tlsStatus=${remainingDays} if [[ ${remainingDays} -le 0 ]]; then tlsStatus="已过期" @@ -1039,13 +1035,13 @@ checkTLStatus() { if [[ -n "$1" ]]; then if [[ -d "$HOME/.acme.sh/$1_ecc" ]] && [[ -f "$HOME/.acme.sh/$1_ecc/$1.key" ]] && [[ -f "$HOME/.acme.sh/$1_ecc/$1.cer" ]]; then - modifyTime=$(stat $HOME/.acme.sh/$1_ecc/$1.key | sed -n '7,6p' | awk '{print $2" "$3" "$4" "$5}') + modifyTime=$(stat "$HOME/.acme.sh/$1_ecc/$1.key" | sed -n '7,6p' | awk '{print $2" "$3" "$4" "$5}') modifyTime=$(date +%s -d "${modifyTime}") currentTime=$(date +%s) - stampDiff=$(expr ${currentTime} - ${modifyTime}) - days=$(expr ${stampDiff} / 86400) - remainingDays=$(expr 90 - ${days}) + stampDiff=$(("${currentTime}" - "${modifyTime}")) + days=$(("${stampDiff}" / 86400)) + remainingDays=$(( 90 - "${days}")) tlsStatus=${remainingDays} if [[ ${remainingDays} -le 0 ]]; then tlsStatus="已过期" @@ -1077,8 +1073,8 @@ installV2Ray() { wget -c -P /etc/v2ray-agent/v2ray/ "https://github.com/v2fly/v2ray-core/releases/download/${version}/${v2rayCoreCPUVendor}.zip" >/dev/null 2>&1 fi - unzip -o /etc/v2ray-agent/v2ray/${v2rayCoreCPUVendor}.zip -d /etc/v2ray-agent/v2ray >/dev/null - rm -rf /etc/v2ray-agent/v2ray/${v2rayCoreCPUVendor}.zip + unzip -o "/etc/v2ray-agent/v2ray/${v2rayCoreCPUVendor}.zip" -d /etc/v2ray-agent/v2ray >/dev/null + rm -rf "/etc/v2ray-agent/v2ray/${v2rayCoreCPUVendor}.zip" else if [[ "${selectCoreType}" == "3" ]]; then echoContent green " ---> 锁定v2ray-core版本为v4.32.1" @@ -1113,8 +1109,8 @@ installXray() { wget -c -P /etc/v2ray-agent/xray/ "https://github.com/XTLS/Xray-core/releases/download/${version}/${xrayCoreCPUVendor}.zip" >/dev/null 2>&1 fi - unzip -o /etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip -d /etc/v2ray-agent/xray >/dev/null - rm -rf /etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip + unzip -o "/etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip" -d /etc/v2ray-agent/xray >/dev/null + rm -rf "/etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip" chmod 655 /etc/v2ray-agent/xray/xray else echoContent green " ---> Xray-core版本:$(/etc/v2ray-agent/xray/xray --version | awk '{print $2}' | head -1)" @@ -1129,8 +1125,7 @@ installXray() { # 安装Trojan-go installTrojanGo() { echoContent skyBlue "\n进度 $1/${totalProgress} : 安装Trojan-Go" - - if ! ls /etc/v2ray-agent/trojan/ | grep -q trojan-go; then + if [[ -z ${find /etc/v2ray-agent/trojan/ -name "trojan-go"} ]]; then version=$(curl -s https://api.github.com/repos/p4gefau1t/trojan-go/releases | jq -r .[0].tag_name) echoContent green " ---> Trojan-Go版本:${version}" @@ -1139,8 +1134,8 @@ installTrojanGo() { else wget -c -P /etc/v2ray-agent/trojan/ "https://github.com/p4gefau1t/trojan-go/releases/download/${version}/${trojanGoCPUVendor}.zip" >/dev/null 2>&1 fi - unzip -o /etc/v2ray-agent/trojan/${trojanGoCPUVendor}.zip -d /etc/v2ray-agent/trojan >/dev/null - rm -rf /etc/v2ray-agent/trojan/${trojanGoCPUVendor}.zip + unzip -o "/etc/v2ray-agent/trojan/${trojanGoCPUVendor}.zip" -d /etc/v2ray-agent/trojan >/dev/null + rm -rf "/etc/v2ray-agent/trojan/${trojanGoCPUVendor}.zip" else echoContent green " ---> Trojan-Go版本:$(/etc/v2ray-agent/trojan/trojan-go --version | awk '{print $2}' | head -1)" @@ -1181,7 +1176,7 @@ v2rayVersionManageMenu() { read -r -p "请输入要回退的版本：" selectV2rayVersionType version=$(curl -s https://api.github.com/repos/v2fly/v2ray-core/releases | jq -r .[].tag_name| head -5| awk '{print ""NR""":"$0}' | grep "${selectV2rayVersionType}:" | awk -F "[:]" '{print $2}') if [[ -n "${version}" ]]; then - updateV2Ray ${version} + updateV2Ray "${version}" else echoContent red "\n ---> 输入有误，请重新输入" v2rayVersionManageMenu 1 @@ -1259,8 +1254,8 @@ updateV2Ray() { wget -c -P "/etc/v2ray-agent/v2ray/ https://github.com/v2fly/v2ray-core/releases/download/${version}/${v2rayCoreCPUVendor}.zip" >/dev/null 2>&1 fi - unzip -o /etc/v2ray-agent/v2ray/${v2rayCoreCPUVendor}.zip -d /etc/v2ray-agent/v2ray >/dev/null - rm -rf /etc/v2ray-agent/v2ray/${v2rayCoreCPUVendor}.zip + unzip -o "/etc/v2ray-agent/v2ray/${v2rayCoreCPUVendor}.zip" -d /etc/v2ray-agent/v2ray >/dev/null + rm -rf "/etc/v2ray-agent/v2ray/${v2rayCoreCPUVendor}.zip" handleV2Ray stop handleV2Ray start else @@ -1333,8 +1328,8 @@ updateXray() { wget -c -P /etc/v2ray-agent/xray/ "https://github.com/XTLS/Xray-core/releases/download/${version}/${xrayCoreCPUVendor}.zip" >/dev/null 2>&1 fi - unzip -o /etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip -d /etc/v2ray-agent/xray >/dev/null - rm -rf /etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip + unzip -o "/etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip" -d /etc/v2ray-agent/xray >/dev/null + rm -rf "/etc/v2ray-agent/xray/${xrayCoreCPUVendor}.zip" chmod 655 /etc/v2ray-agent/xray/xray handleXray stop handleXray start @@ -1525,7 +1520,7 @@ handleV2Ray() { } # 操作xray handleXray() { - if [[ -n $(find /bin /usr/bin -name "systemctl") ]] && ls /etc/systemd/system/ | grep -q xray.service; then + if [[ -n $(find /bin /usr/bin -name "systemctl") ]] && [[ -n $(find /etc/systemd/system/ -name "xray.service") ]];then if [[ -z $(pgrep -f "xray/xray") ]] && [[ "$1" == "start" ]]; then systemctl start xray.service elif [[ -n $(pgrep -f "xray/xray") ]] && [[ "$1" == "stop" ]]; then @@ -1554,36 +1549,6 @@ handleXray() { fi } -# 操作Trojan-Go -handleTrojanGo() { - if [[ -n $(find /bin /usr/bin -name "systemctl") ]] && ls /etc/systemd/system/ | grep -q trojan-go.service; then - if [[ -z $(pgrep -f "trojan-go") ]] && [[ "$1" == "start" ]]; then - systemctl start trojan-go.service - elif [[ -n $(pgrep -f "trojan-go") ]] && [[ "$1" == "stop" ]]; then - systemctl stop trojan-go.service - fi - fi - - sleep 0.5 - if [[ "$1" == "start" ]]; then - if [[ -n $(pgrep -f "trojan-go") ]]; then - echoContent green " ---> Trojan-Go启动成功" - else - echoContent red "Trojan-Go启动失败" - echoContent red "请手动执行【/etc/v2ray-agent/trojan/trojan-go -config /etc/v2ray-agent/trojan/config_full.json】，查看错误日志" - exit 0 - fi - elif [[ "$1" == "stop" ]]; then - if [[ -z $(pgrep -f "trojan-go") ]]; then - echoContent green " ---> Trojan-Go关闭成功" - else - echoContent red "Trojan-Go关闭失败" - echoContent red "请手动执行【ps -ef|grep -v grep|grep trojan-go|awk '{print \$2}'|xargs kill -9】" - exit 0 - fi - fi -} - # 初始化V2Ray 配置文件 initV2RayConfig() { echoContent skyBlue "\n进度 $2/${totalProgress} : 初始化V2Ray配置" @@ -1934,7 +1899,8 @@ initXrayFrontingConfig(){ if [[ "${xtlsType}" == "Trojan" ]];then - local VLESSConfig=$(cat ${configPath}${frontingType}.json) + local VLESSConfig + VLESSConfig=$(cat ${configPath}${frontingType}.json) VLESSConfig=${VLESSConfig//"id"/"password"} VLESSConfig=${VLESSConfig//VLESSTCP/TrojanTCPXTLS} VLESSConfig=${VLESSConfig//VLESS/Trojan} @@ -1945,7 +1911,8 @@ initXrayFrontingConfig(){ rm ${configPath}${frontingType}.json elif [[ "${xtlsType}" == "VLESS" ]]; then - local VLESSConfig=$(cat ${configPath}02_trojan_TCP_inbounds.json) + local VLESSConfig + VLESSConfig=$(cat ${configPath}02_trojan_TCP_inbounds.json) VLESSConfig=${VLESSConfig//"password"/"id"} VLESSConfig=${VLESSConfig//TrojanTCPXTLS/VLESSTCP} VLESSConfig=${VLESSConfig//Trojan/VLESS} @@ -2135,8 +2102,8 @@ EOF # trojan_grpc - if echo ${selectCustomInstallType} | grep -q 2 || [[ "$1" == "all" ]]; then - if ! echo ${selectCustomInstallType} | grep -q 5 && [[ -n ${selectCustomInstallType} ]];then + if echo "${selectCustomInstallType}" | grep -q 2 || [[ "$1" == "all" ]]; then + if ! echo "${selectCustomInstallType}" | grep -q 5 && [[ -n ${selectCustomInstallType} ]];then fallbacksList=${fallbacksList//31302/31304} fi @@ -2372,7 +2339,8 @@ defaultBase64Code() { local path=$5 local add=$6 - local subAccount=${currentHost}_$(echo "${id}_currentHost" | md5sum | awk '{print $1}') + local subAccount + subAccount=${currentHost}_$(echo "${id}_currentHost" | md5sum | awk '{print $1}') if [[ "${type}" == "vlesstcp" ]]; then if [[ "${coreInstallType}" == "1" ]] && echo ${currentInstallProtocolType} | grep -q 0; then @@ -2385,7 +2353,7 @@ defaultBase64Code() { vless://${id}@${host}:${port}?encryption=none&security=xtls&type=tcp&host=${host}&headerType=none&sni=${host}&flow=xtls-rprx-direct#${email} EOF echoContent yellow " ---> 二维码 VLESS(VLESS+TCP+TLS/xtls-rprx-direct)" - echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${id}%40${host}%3A${port}%3F${encryption}%3Dnone%26security%3Dxtls%26type%3Dtcp%26${host}%3D${host}%26headerType%3Dnone%26sni%3D${host}%26flow%3Dxtls-rprx-direct%23${email}\n" + echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${id}%40${host}%3A${port}%3Fencryption%3Dnone%26security%3Dxtls%26type%3Dtcp%26${host}%3D${host}%26headerType%3Dnone%26sni%3D${host}%26flow%3Dxtls-rprx-direct%23${email}\n" echoContent skyBlue "----------------------------------------------------------------------------------" @@ -2398,7 +2366,7 @@ EOF vless://${id}@${host}:${port}?encryption=none&security=xtls&type=tcp&host=${host}&headerType=none&sni=${host}&flow=xtls-rprx-splice#${email} EOF echoContent yellow " ---> 二维码 VLESS(VLESS+TCP+TLS/xtls-rprx-splice)" - echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${id}%40${host}%3A${port}%3F${encryption}%3Dnone%26security%3Dxtls%26type%3Dtcp%26${host}%3D${host}%26headerType%3Dnone%26sni%3D${host}%26flow%3Dxtls-rprx-splice%23${email}\n" + echoContent green " https://api.qrserver.com/v1/create-qr-code/?size=400x400&data=vless%3A%2F%2F${id}%40${host}%3A${port}%3Fencryption%3Dnone%26security%3Dxtls%26type%3Dtcp%26${host}%3D${host}%26headerType%3Dnone%26sni%3D${host}%26flow%3Dxtls-rprx-splice%23${email}\n" elif [[ "${coreInstallType}" == "2" || "${coreInstallType}" == "3" ]]; then echoContent yellow " ---> 通用格式(VLESS+TCP+TLS)" @@ -2442,11 +2410,12 @@ EOF elif [[ "${type}" == "vmessws" ]]; then - qrCodeBase64Default=$(echo -n '{"port":"'${port}'","ps":'\"${email}\"',"tls":"tls","id":'\"${id}\"',"aid":"0","v":"2","host":"'${host}'","type":"none","path":"/'${path}'","net":"ws","add":"'${add}'","allowInsecure":0,"method":"none","peer":"'${host}'","sni":"'${host}'"}' | sed 's#/#\\\/#g' | base64) - qrCodeBase64Default=$(echo ${qrCodeBase64Default} | sed 's/ //g') + qrCodeBase64Default=$(echo -n '{"port":"'${port}'","ps":"'"${email}"'","tls":"tls","id":"'"${id}"'","aid":"0","v":"2","host":"'"${host}"'","type":"none","path":"/'"${path}"'","net":"ws","add":"'"${add}"'","allowInsecure":0,"method":"none","peer":"'"${host}"'","sni":"'${host}'"}' | sed 's#/#\\\/#g' | base64) + qrCodeBase64Default="${qrCodeBase64Default// /}" + echoContent yellow " ---> 通用json(VMess+WS+TLS)" - echoContent green ' {"port":"'${port}'","ps":'\"${ps}\"',"tls":"tls","id":'\"${id}\"',"aid":"0","v":"2","host":"'${host}'","type":"none","path":"/'${path}'","net":"ws","add":"'${add}'","allowInsecure":0,"method":"none","peer":"'${host}'","sni":"'${host}'"}\n' + echoContent green " {"port":"'${port}'","ps":'"${ps}"',"tls":"tls","id":'"${id}"',"aid":"0","v":"2","host":'${host}',"type":"none","path":"/'${path}'","net":"ws","add":"'${add}'","allowInsecure":0,"method":"none","peer":"'${host}'","sni":"'${host}'"}\n" echoContent yellow " ---> 通用vmess(VMess+WS+TLS)链接" echoContent green " vmess://${qrCodeBase64Default}\n" echoContent yellow " ---> 二维码 vmess(VMess+WS+TLS)" @@ -2559,6 +2528,7 @@ EOF echoContent green " trojan-go://${id}@${add}:${port}?sni=${host}&type=ws&host=${host}&path=%2F${path}#${host}_Trojan_ws\n" fi + } # 账号 showAccounts() { @@ -2575,7 +2545,7 @@ showAccounts() { jq .inbounds[0].settings.clients ${configPath}02_trojan_TCP_inbounds.json | jq -c '.[]' | while read -r user; do echoContent skyBlue "\n ---> 帐号：$(echo "${user}" | jq -r .email )_$(echo "${user}" | jq -r .password)" echo - defaultBase64Code trojanTCPXTLS $(echo "${user}" | jq -r .email) $(echo "${user}" | jq -r .password) "${currentHost}:${currentPort}" ${currentHost} + defaultBase64Code trojanTCPXTLS "$(echo "${user}" | jq -r .email)" "$(echo "${user}" | jq -r .password)" "${currentHost}:${currentPort}" ${currentHost} done else @@ -2583,7 +2553,7 @@ showAccounts() { jq .inbounds[0].settings.clients ${configPath}02_VLESS_TCP_inbounds.json | jq -c '.[]' | while read -r user; do echoContent skyBlue "\n ---> 帐号：$(echo "${user}" | jq -r .email )_$(echo "${user}" | jq -r .id)" echo - defaultBase64Code vlesstcp $(echo "${user}" | jq -r .email) $(echo "${user}" | jq -r .id) "${currentHost}:${currentPort}" ${currentHost} + defaultBase64Code vlesstcp "$(echo "${user}" | jq -r .email)" "$(echo "${user}" | jq -r .id)" "${currentHost}:${currentPort}" ${currentHost} done fi @@ -2600,7 +2570,7 @@ showAccounts() { echoContent yellow "Xray的0-RTT path后面会有?ed=2048，不兼容以v2ray为核心的客户端，请手动删除?ed=2048后使用\n" path="${currentPath}ws?ed=2048" fi - defaultBase64Code vlessws $(echo "${user}" | jq -r .email) $(echo "${user}" | jq -r .id) "${currentHost}:${currentPort}" ${path} ${currentAdd} + defaultBase64Code vlessws "$(echo "${user}" | jq -r .email)" "$(echo "${user}" | jq -r .id)" "${currentHost}:${currentPort}" ${path} ${currentAdd} done fi @@ -2614,7 +2584,7 @@ showAccounts() { jq .inbounds[0].settings.clients ${configPath}05_VMess_WS_inbounds.json | jq -c '.[]' | while read -r user; do echoContent skyBlue "\n ---> 帐号：$(echo "${user}" | jq -r .email )_$(echo "${user}" | jq -r .id)" echo - defaultBase64Code vmessws $(echo "${user}" | jq -r .email) $(echo "${user}" | jq -r .id) "${currentHost}:${currentPort}" ${path} ${currentAdd} + defaultBase64Code vmessws "$(echo "${user}" | jq -r .email)" "$(echo "${user}" | jq -r .id)" "${currentHost}:${currentPort}" ${path} ${currentAdd} done fi @@ -2626,7 +2596,7 @@ showAccounts() { jq .inbounds[0].settings.clients ${configPath}06_VLESS_gRPC_inbounds.json | jq -c '.[]' | while read -r user; do echoContent skyBlue "\n ---> 帐号：$(echo "${user}" | jq -r .email )_$(echo "${user}" | jq -r .id)" echo - defaultBase64Code vlessgrpc $(echo "${user}" | jq -r .email) $(echo "${user}" | jq -r .id) "${currentHost}:${currentPort}" ${serviceName} ${currentAdd} + defaultBase64Code vlessgrpc "$(echo "${user}" | jq -r .email)" "$(echo "${user}" | jq -r .id)" "${currentHost}:${currentPort}" ${serviceName} ${currentAdd} done fi fi @@ -2637,18 +2607,19 @@ showAccounts() { jq .inbounds[0].settings.clients ${configPath}04_trojan_TCP_inbounds.json | jq -c '.[]' | while read -r user; do echoContent skyBlue "\n ---> 帐号：$(echo "${user}" | jq -r .email )_$(echo "${user}" | jq -r .password)" echo - defaultBase64Code trojan trojan $(echo "${user}" | jq -r .password) ${currentHost} + defaultBase64Code trojan trojan "$(echo "${user}" | jq -r .password)" "${currentHost}" done fi if echo ${currentInstallProtocolType} | grep -q 2; then echoContent skyBlue "\n================================ Trojan gRPC TLS ================================\n" echoContent red "\n --->gRPC目前处于测试阶段，可能对你使用的客户端不兼容，如不能使用请忽略" - local serviceName=$(jq -r .inbounds[0].streamSettings.grpcSettings.serviceName ${configPath}04_trojan_gRPC_inbounds.json) + local serviceName= + serviceName=$(jq -r .inbounds[0].streamSettings.grpcSettings.serviceName ${configPath}04_trojan_gRPC_inbounds.json) jq .inbounds[0].settings.clients ${configPath}04_trojan_gRPC_inbounds.json | jq -c '.[]' | while read -r user; do echoContent skyBlue "\n ---> 帐号：$(echo "${user}" | jq -r .email )_$(echo "${user}" | jq -r .password)" echo - defaultBase64Code trojangrpc $(echo "${user}" | jq -r .email) $(echo "${user}" | jq -r .password) "${currentHost}:${currentPort}" ${serviceName} ${currentAdd} + defaultBase64Code trojangrpc "$(echo "${user}" | jq -r .email)" "$(echo "${user}" | jq -r .password)" "${currentHost}:${currentPort}" ${serviceName} ${currentAdd} done fi @@ -2742,7 +2713,7 @@ EOF local dokoConfig=$(ls ${configPath} | grep dokodemodoor | awk '{print ""NR""":"$1}' | grep ${portIndex}":") if [[ -n "${dokoConfig}" ]]; then - rm ${configPath}/$(echo "${dokoConfig}" | awk -F "[:]" '{print $2}') + rm "${configPath}/$(echo "${dokoConfig}" | awk -F "[:]" '{print $2}')" reloadCore else echoContent yellow "\n ---> 编号输入错误，请重新选择" @@ -2821,7 +2792,7 @@ updateV2RayCDN() { if [[ -n ${setDomain} ]]; then if [[ -n ${currentAdd} ]]; then - sed -i "s/\"${currentAdd}\"/\"${setDomain}\"/g" $(grep "${currentAdd}" -rl ${configPath}${frontingType}.json) + sed -i "s/\"${currentAdd}\"/\"${setDomain}\"/g" "$(grep "${currentAdd}" -rl ${configPath}${frontingType}.json)" fi if [[ $(jq -r .inbounds[0].settings.clients[0].add ${configPath}${frontingType}.json) == ${setDomain} ]]; then echoContent green " ---> CDN修改成功" @@ -3405,11 +3376,12 @@ unInstallRouting(){ local tag=$1 if [[ -f "${configPath}09_routing.json" ]];then - local routing= + local routing if grep -q "${tag}" ${configPath}09_routing.json;then - local index=$(jq .routing.rules[].outboundTag ${configPath}09_routing.json|awk '{print ""NR""":"$0}'|grep "${tag}"|awk -F "[:]" '{print $1}'|head -1) + local index + index=$(jq .routing.rules[].outboundTag ${configPath}09_routing.json|awk '{print ""NR""":"$0}'|grep "${tag}"|awk -F "[:]" '{print $1}'|head -1) if [[ ${index} -gt 0 ]];then - routing=$(jq -r 'del(.routing.rules['$(expr ${index} - 1)'])' ${configPath}09_routing.json) + routing=$(jq -r 'del(.routing.rules['"$(("${index}" - 1))"'])' ${configPath}09_routing.json) echo "${routing}" |jq . >${configPath}09_routing.json fi fi @@ -3421,9 +3393,11 @@ unInstallOutbounds(){ local tag=$1 if grep -q "${tag}" ${configPath}10_ipv4_outbounds.json;then - local ipv6OutIndex=$(jq .outbounds[].tag ${configPath}10_ipv4_outbounds.json|awk '{print ""NR""":"$0}'|grep "${tag}"|awk -F "[:]" '{print $1}'|head -1) + local ipv6OutIndex + ipv6OutIndex=$(jq .outbounds[].tag ${configPath}10_ipv4_outbounds.json|awk '{print ""NR""":"$0}'|grep "${tag}"|awk -F "[:]" '{print $1}'|head -1) if [[ ${ipv6OutIndex} -gt 0 ]];then - routing=$(jq -r 'del(.outbounds['$(expr ${ipv6OutIndex} - 1)'])' ${configPath}10_ipv4_outbounds.json) + routing + routing=$(jq -r 'del(.outbounds['$(("${ipv6OutIndex}" - 1))'])' ${configPath}10_ipv4_outbounds.json) echo "${routing}" |jq . >${configPath}10_ipv4_outbounds.json fi fi diff --git a/shell/install_en.sh b/shell/install_en.sh index 64b3ccd..ae81db9 100644 --- a/shell/install_en.sh +++ b/shell/install_en.sh @@ -178,10 +178,10 @@ initVar() { pingIPv6= localIP= - # 集成更新证书逻辑不再使用单独的脚本--RenewTLS + # Integrated Update Certificate Logic No longer use separate scripts--RenewTLS renewTLS=$1 - # tls安装失败后尝试的次数 + # Number of attempts after a failed tls installation installTLSCount= } @@ -405,7 +405,7 @@ mkdirTools() { # Installation kit installTools() { echo 'Installation tool' - echoContent skyBlue "\nprogress $1/${totalProgress} : Installation tool" + echoContent skyBlue "\n progress $1/${totalProgress} : Installation tool" # Repair Ubuntu Individual System Issues if [[ "${release}" == "ubuntu" ]]; then dpkg --configure -a @@ -648,7 +648,7 @@ initTLSNginxConfig() { echoContent red " Domain name--->" initTLSNginxConfig else - # 修改配置 + # update config touch /etc/nginx/conf.d/alone.conf cat </etc/nginx/conf.d/alone.conf server { @@ -672,7 +672,7 @@ server { } } EOF - # 启动nginx + # start nginx handleNginx start checkIP fi @@ -1386,7 +1386,7 @@ updateXray() { fi } -# 验证整个服务是否可用 +# Verify that the entire service is available checkGFWStatue() { readInstallType echoContent skyBlue "\n progress $1/${totalProgress} : Verify service startup status" @@ -1907,7 +1907,7 @@ EOF fi } -# initializationXray Trojan XTLS 配置文件 +# initializationXray Trojan XTLS config initXrayFrontingConfig(){ if [[ -z "${configPath}" ]]; then echoContent red " ---> Not installed, please use the script installation" @@ -3130,7 +3130,7 @@ handleFirewall(){ fi } -# 安装BBR +# install BBR bbrInstall() { echoContent red "\n==============================================================" echoContent green "BBR、DDMature works for [YLX2016] with scripts, address [https://github.com/ylx2016/linux-netspeed], please be familiar" @@ -3464,7 +3464,7 @@ warpRouting(){ echoContent yellow "2.It can be used normally without rebooting the machine, if you have to use the official warp, it is recommended not to reboot the machine" echoContent yellow "3.Some machines still work normally after reboot" echoContent yellow "4.Uninstall and reinstall if you can't use it after reboot" - # 安装warp + # Install WARP if [[ -z $(which warp-cli) ]];then echo read -r -p "WARP not installed, installed or not ？[y/n]:" installCloudflareWarpStatus @@ -3480,7 +3480,7 @@ warpRouting(){ echoContent yellow "1.Add Domain" echoContent yellow "2.Uninstall the WARP diversion" echoContent red "==============================================================" - read -r -p "请选择:" warpStatus + read -r -p "please choose:" warpStatus if [[ "${warpStatus}" == "1" ]]; then echoContent red "==============================================================" echoContent yellow "# Cautions\n" @@ -3534,9 +3534,9 @@ EOF unInstallOutbounds warp-socks-out - echoContent green " ---> WARP分流卸载成功" + echoContent green " ---> WARP shunt uninstall success" else - echoContent red " ---> 选择错误" + echoContent red " ---> wrong selection" exit 0 fi reloadCore