From 0f626be4d5bff71bc0561cba09a3f879cde53e92 Mon Sep 17 00:00:00 2001 From: vincent Date: Tue, 5 Dec 2023 23:29:12 +0800 Subject: [PATCH] =?UTF-8?q?=E5=88=A0=E9=99=A4=E8=BF=87=E6=97=B6=E7=9A=84?= =?UTF-8?q?=E6=96=87=E4=BB=B6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- setFirewall.sh | 55 -- setNginxDefaultHtml.sh | 12 - xray.sh | 1932 ---------------------------------------- 3 files changed, 1999 deletions(-) delete mode 100644 setFirewall.sh delete mode 100644 setNginxDefaultHtml.sh delete mode 100644 xray.sh diff --git a/setFirewall.sh b/setFirewall.sh deleted file mode 100644 index 9a81673..0000000 --- a/setFirewall.sh +++ /dev/null @@ -1,55 +0,0 @@ -#!/bin/bash -setFirewall() { - res=`which firewall-cmd 2>/dev/null` - if [[ $? -eq 0 ]]; then - systemctl status firewalld > /dev/null 2>&1 - if [[ $? -eq 0 ]];then - firewall-cmd --permanent --add-service=http - firewall-cmd --permanent --add-service=https - if [[ "$PORT" != "443" ]]; then - firewall-cmd --permanent --add-port=${PORT}/tcp - firewall-cmd --permanent --add-port=${PORT}/udp - fi - firewall-cmd --reload - else - nl=`iptables -nL | nl | grep FORWARD | awk '{print $1}'` - if [[ "$nl" != "3" ]]; then - iptables -I INPUT -p tcp --dport 80 -j ACCEPT - iptables -I INPUT -p tcp --dport 443 -j ACCEPT - if [[ "$PORT" != "443" ]]; then - iptables -I INPUT -p tcp --dport ${PORT} -j ACCEPT - iptables -I INPUT -p udp --dport ${PORT} -j ACCEPT - fi - fi - fi - else - res=`which iptables 2>/dev/null` - if [[ $? -eq 0 ]]; then - nl=`iptables -nL | nl | grep FORWARD | awk '{print $1}'` - if [[ "$nl" != "3" ]]; then - iptables -I INPUT -p tcp --dport 80 -j ACCEPT - iptables -I INPUT -p tcp --dport 443 -j ACCEPT - if [[ "$PORT" != "443" ]]; then - iptables -I INPUT -p tcp --dport ${PORT} -j ACCEPT - iptables -I INPUT -p udp --dport ${PORT} -j ACCEPT - fi - fi - else - res=`which ufw 2>/dev/null` - if [[ $? -eq 0 ]]; then - res=`ufw status | grep -i inactive` - if [[ "$res" = "" ]]; then - ufw allow http/tcp - ufw allow https/tcp - if [[ "$PORT" != "443" ]]; then - ufw allow ${PORT}/tcp - ufw allow ${PORT}/udp - fi - fi - fi - fi - fi -} - - -setFirewall \ No newline at end of file diff --git a/setNginxDefaultHtml.sh b/setNginxDefaultHtml.sh deleted file mode 100644 index 9d74e20..0000000 --- a/setNginxDefaultHtml.sh +++ /dev/null @@ -1,12 +0,0 @@ -#!/bin/bash -HTML_PATH="/tmp/usr/share/nginx/html2" -STATIC_HTML_URL="https://github.com/vincent0214/static_html/releases/download/1.0/static_html.zip" - -# 修改nginx默认页面 -rm -rf ${HTML_PATH} -mkdir -p ${HTML_PATH} -wget ${STATIC_HTML_URL} -P ${HTML_PATH} -unzip -o -d ${HTML_PATH} ${HTML_PATH}/static_html.zip -rm ${HTML_PATH}/static_html.zip -mv ${HTML_PATH}/static_html/* ${HTML_PATH}/ -rm -rf ${HTML_PATH}/static_html diff --git a/xray.sh b/xray.sh deleted file mode 100644 index d788f66..0000000 --- a/xray.sh +++ /dev/null @@ -1,1932 +0,0 @@ -#!/bin/bash -# xray一键安装脚本 -# Author: hijk - - -RED="\033[31m" # Error message -GREEN="\033[32m" # Success message -YELLOW="\033[33m" # Warning message -BLUE="\033[36m" # Info message -PLAIN='\033[0m' - -# 以下网站是随机从Google上找到的无广告小说网站，不喜欢请改成其他网址，以http或https开头 -# 搭建好后无法打开伪装域名，可能是反代小说网站挂了，请在网站留言，或者Github发issue，以便替换新的网站 -SITES=( -http://www.zhuizishu.com/ -http://xs.56dyc.com/ -#http://www.xiaoshuosk.com/ -#https://www.quledu.net/ -http://www.ddxsku.com/ -http://www.biqu6.com/ -https://www.wenshulou.cc/ -#http://www.auutea.com/ -http://www.55shuba.com/ -http://www.39shubao.com/ -https://www.23xsw.cc/ -#https://www.huanbige.com/ -https://www.jueshitangmen.info/ -https://www.zhetian.org/ -http://www.bequgexs.com/ -http://www.tjwl.com/ -) - -CONFIG_FILE="/usr/local/etc/xray/config.json" -OS=`hostnamectl | grep -i system | cut -d: -f2` - -V6_PROXY="" -IP=`curl -sL -4 ip.sb` -if [[ "$?" != "0" ]]; then - IP=`curl -sL -6 ip.sb` - V6_PROXY="https://gh.hijk.art/" -fi - -BT="false" -NGINX_CONF_PATH="/etc/nginx/conf.d/" -res=`which bt 2>/dev/null` -if [[ "$res" != "" ]]; then - BT="true" - NGINX_CONF_PATH="/www/server/panel/vhost/nginx/" -fi - -VLESS="false" -TROJAN="false" -TLS="false" -WS="false" -XTLS="false" -KCP="false" - -checkSystem() { - result=$(id | awk '{print $1}') - if [[ $result != "uid=0(root)" ]]; then - colorEcho $RED " 请以root身份执行该脚本" - exit 1 - fi - - res=`which yum 2>/dev/null` - if [[ "$?" != "0" ]]; then - res=`which apt 2>/dev/null` - if [[ "$?" != "0" ]]; then - colorEcho $RED " 不受支持的Linux系统" - exit 1 - fi - PMT="apt" - CMD_INSTALL="apt install -y " - CMD_REMOVE="apt remove -y " - CMD_UPGRADE="apt update; apt upgrade -y; apt autoremove -y" - else - PMT="yum" - CMD_INSTALL="yum install -y " - CMD_REMOVE="yum remove -y " - CMD_UPGRADE="yum update -y" - fi - res=`which systemctl 2>/dev/null` - if [[ "$?" != "0" ]]; then - colorEcho $RED " 系统版本过低，请升级到最新版本" - exit 1 - fi -} - -colorEcho() { - echo -e "${1}${@:2}${PLAIN}" -} - -configNeedNginx() { - local ws=`grep wsSettings $CONFIG_FILE` - if [[ -z "$ws" ]]; then - echo no - return - fi - echo yes -} - -needNginx() { - if [[ "$WS" = "false" ]]; then - echo no - return - fi - echo yes -} - -status() { - if [[ ! -f /usr/local/bin/xray ]]; then - echo 0 - return - fi - if [[ ! -f $CONFIG_FILE ]]; then - echo 1 - return - fi - port=`grep port $CONFIG_FILE| head -n 1| cut -d: -f2| tr -d \",' '` - res=`ss -nutlp| grep ${port} | grep -i xray` - if [[ -z "$res" ]]; then - echo 2 - return - fi - - if [[ `configNeedNginx` != "yes" ]]; then - echo 3 - else - res=`ss -nutlp|grep -i nginx` - if [[ -z "$res" ]]; then - echo 4 - else - echo 5 - fi - fi -} - -statusText() { - res=`status` - case $res in - 2) - echo -e ${GREEN}已安装${PLAIN} ${RED}未运行${PLAIN} - ;; - 3) - echo -e ${GREEN}已安装${PLAIN} ${GREEN}Xray正在运行${PLAIN} - ;; - 4) - echo -e ${GREEN}已安装${PLAIN} ${GREEN}Xray正在运行${PLAIN}, ${RED}Nginx未运行${PLAIN} - ;; - 5) - echo -e ${GREEN}已安装${PLAIN} ${GREEN}Xray正在运行, Nginx正在运行${PLAIN} - ;; - *) - echo -e ${RED}未安装${PLAIN} - ;; - esac -} - -normalizeVersion() { - if [ -n "$1" ]; then - case "$1" in - v*) - echo "$1" - ;; - http*) - echo "v1.4.2" - ;; - *) - echo "v$1" - ;; - esac - else - echo "" - fi -} - -# 1: new Xray. 0: no. 1: yes. 2: not installed. 3: check failed. -getVersion() { - VER=`/usr/local/bin/xray version|head -n1 | awk '{print $2}'` - RETVAL=$? - CUR_VER="$(normalizeVersion "$(echo "$VER" | head -n 1 | cut -d " " -f2)")" - TAG_URL="${V6_PROXY}https://api.github.com/repos/XTLS/Xray-core/releases/latest" - NEW_VER="$(normalizeVersion "$(curl -s "${TAG_URL}" --connect-timeout 10| grep 'tag_name' | cut -d\" -f4)")" - - if [[ $? -ne 0 ]] || [[ $NEW_VER == "" ]]; then - colorEcho $RED " 检查Xray版本信息失败，请检查网络" - return 3 - elif [[ $RETVAL -ne 0 ]];then - return 2 - elif [[ $NEW_VER != $CUR_VER ]];then - return 1 - fi - return 0 -} - -archAffix(){ - case "$(uname -m)" in - i686|i386) - echo '32' - ;; - x86_64|amd64) - echo '64' - ;; - armv5tel) - echo 'arm32-v5' - ;; - armv6l) - echo 'arm32-v6' - ;; - armv7|armv7l) - echo 'arm32-v7a' - ;; - armv8|aarch64) - echo 'arm64-v8a' - ;; - mips64le) - echo 'mips64le' - ;; - mips64) - echo 'mips64' - ;; - mipsle) - echo 'mips32le' - ;; - mips) - echo 'mips32' - ;; - ppc64) - echo 'ppc64' - ;; - ppc64le) - echo 'ppc64le' - ;; - riscv64) - echo 'riscv64' - ;; - s390x) - echo 's390x' - ;; - *) - colorEcho $RED " 不支持的CPU架构！" - exit 1 - ;; - esac - - return 0 -} - -getData() { - if [[ "$TLS" = "true" || "$XTLS" = "true" ]]; then - echo "" - echo " Xray一键脚本，运行之前请确认如下条件已经具备：" - colorEcho ${YELLOW} " 1. 一个伪装域名" - colorEcho ${YELLOW} " 2. 伪装域名DNS解析指向当前服务器ip（${IP}）" - colorEcho ${BLUE} " 3. 如果/root目录下有 xray.pem 和 xray.key 证书密钥文件，无需理会条件2" - echo " " - read -ep " 确认满足按y，按其他退出脚本：" answer - if [[ "${answer,,}" != "y" ]]; then - exit 0 - fi - - echo "" - while true - do - read -ep " 请输入伪装域名：" DOMAIN - if [[ -z "${DOMAIN}" ]]; then - colorEcho ${RED} " 域名输入错误，请重新输入！" - else - break - fi - done - DOMAIN=${DOMAIN,,} - colorEcho ${BLUE} " 伪装域名(host)：$DOMAIN" - - echo "" - if [[ -f ~/xray.pem && -f ~/xray.key ]]; then - colorEcho ${BLUE} " 检测到自有证书，将使用其部署" - CERT_FILE="/usr/local/etc/xray/${DOMAIN}.pem" - KEY_FILE="/usr/local/etc/xray/${DOMAIN}.key" - # else - # resolve=`curl -sL https://hijk.art/hostip.php?d=${DOMAIN}` - # res=`echo -n ${resolve} | grep ${IP}` - # if [[ -z "${res}" ]]; then - # colorEcho ${BLUE} "${DOMAIN} 解析结果：${resolve}" - # colorEcho ${RED} " 域名未解析到当前服务器IP(${IP})!" - # exit 1 - # fi - fi - fi - - echo "" - if [[ "$(needNginx)" = "no" ]]; then - if [[ "$TLS" = "true" ]]; then - read -ep " 请输入xray监听端口[强烈建议443，默认443]：" PORT - [[ -z "${PORT}" ]] && PORT=443 - else - read -ep " 请输入xray监听端口[100-65535的一个数字]：" PORT - [[ -z "${PORT}" ]] && PORT=`shuf -i200-65000 -n1` - if [[ "${PORT:0:1}" = "0" ]]; then - colorEcho ${RED} " 端口不能以0开头" - exit 1 - fi - fi - colorEcho ${BLUE} " xray端口：$PORT" - else - read -ep " 请输入Nginx监听端口[100-65535的一个数字，默认443]：" PORT - [[ -z "${PORT}" ]] && PORT=443 - if [ "${PORT:0:1}" = "0" ]; then - colorEcho ${BLUE} " 端口不能以0开头" - exit 1 - fi - colorEcho ${BLUE} " Nginx端口：$PORT" - XPORT=`shuf -i10000-65000 -n1` - fi - - if [[ "$KCP" = "true" ]]; then - echo "" - colorEcho $BLUE " 请选择伪装类型：" - echo " 1) 无" - echo " 2) BT下载" - echo " 3) 视频通话" - echo " 4) 微信视频通话" - echo " 5) dtls" - echo " 6) wiregard" - read -ep " 请选择伪装类型[默认：无]：" answer - case $answer in - 2) - HEADER_TYPE="utp" - ;; - 3) - HEADER_TYPE="srtp" - ;; - 4) - HEADER_TYPE="wechat-video" - ;; - 5) - HEADER_TYPE="dtls" - ;; - 6) - HEADER_TYPE="wireguard" - ;; - *) - HEADER_TYPE="none" - ;; - esac - colorEcho $BLUE " 伪装类型：$HEADER_TYPE" - SEED=`cat /proc/sys/kernel/random/uuid` - fi - - if [[ "$TROJAN" = "true" ]]; then - echo "" - read -ep " 请设置trojan密码（不输则随机生成）:" PASSWORD - [[ -z "$PASSWORD" ]] && PASSWORD=`cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 16 | head -n 1` - colorEcho $BLUE " trojan密码：$PASSWORD" - fi - - if [[ "$XTLS" = "true" ]]; then - echo "" - colorEcho $BLUE " 请选择流控模式:" - echo -e " 1) xtls-rprx-direct [$RED推荐$PLAIN]" - echo " 2) xtls-rprx-origin" - read -ep " 请选择流控模式[默认:direct]：" answer - [[ -z "$answer" ]] && answer=1 - case $answer in - 1) - FLOW="xtls-rprx-direct" - ;; - 2) - FLOW="xtls-rprx-origin" - ;; - *) - colorEcho $RED " 无效选项，使用默认的xtls-rprx-direct" - FLOW="xtls-rprx-direct" - ;; - esac - colorEcho $BLUE " 流控模式：$FLOW" - fi - - if [[ "${WS}" = "true" ]]; then - echo "" - while true - do - read -ep " 请输入伪装路径，以/开头(不懂请直接回车)：" WSPATH - if [[ -z "${WSPATH}" ]]; then - len=`shuf -i5-12 -n1` - ws=`cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w $len | head -n 1` - WSPATH="/$ws" - break - elif [[ "${WSPATH:0:1}" != "/" ]]; then - colorEcho ${RED} " 伪装路径必须以/开头！" - elif [[ "${WSPATH}" = "/" ]]; then - colorEcho ${RED} " 不能使用根路径！" - else - break - fi - done - colorEcho ${BLUE} " ws路径：$WSPATH" - fi - - if [[ "$TLS" = "true" || "$XTLS" = "true" ]]; then - echo "" - colorEcho $BLUE " 请选择伪装站类型:" - echo " 1) (推荐)静态网站, 默认使用Vincent的html模板(位于/usr/share/nginx/html)" - echo " 2) 小说站(随机选择)" - echo " 3) 美女站(https://imeizi.me)" - echo " 4) 高清壁纸站(https://bing.imeizi.me)" - echo " 5) 自定义反代站点(需以http或者https开头)" - read -ep " 请选择伪装网站类型[默认:1)(推荐)静态网站, 默认使用Vincent的html模板]：" answer - if [[ -z "$answer" ]]; then - PROXY_URL="" - else - case $answer in - 1) - PROXY_URL="" - ;; - 2) - len=${#SITES[@]} - ((len--)) - while true - do - index=`shuf -i0-${len} -n1` - PROXY_URL=${SITES[$index]} - host=`echo ${PROXY_URL} | cut -d/ -f3` - ip=`curl -sL https://hijk.art/hostip.php?d=${host}` - res=`echo -n ${ip} | grep ${host}` - if [[ "${res}" = "" ]]; then - echo "$ip $host" >> /etc/hosts - break - fi - done - ;; - 3) - PROXY_URL="https://imeizi.me" - ;; - 4) - PROXY_URL="https://bing.imeizi.me" - ;; - 5) - read -ep " 请输入反代站点(以http或者https开头)：" PROXY_URL - if [[ -z "$PROXY_URL" ]]; then - colorEcho $RED " 请输入反代网站！" - exit 1 - elif [[ "${PROXY_URL:0:4}" != "http" ]]; then - colorEcho $RED " 反代网站必须以http或https开头！" - exit 1 - fi - ;; - *) - colorEcho $RED " 请输入正确的选项！" - exit 1 - esac - fi - REMOTE_HOST=`echo ${PROXY_URL} | cut -d/ -f3` - colorEcho $BLUE " 伪装网站：$PROXY_URL" - - ALLOW_SPIDER="n" - # echo "" - # colorEcho $BLUE " 是否允许搜索引擎爬取网站？[默认：不允许]" - # echo " y)允许，会有更多ip请求网站，但会消耗一些流量，vps流量充足情况下推荐使用" - # echo " n)不允许，爬虫不会访问网站，访问ip比较单一，但能节省vps流量" - # read -ep " 请选择：[y/n]：" answer - # if [[ -z "$answer" ]]; then - # ALLOW_SPIDER="n" - # elif [[ "${answer,,}" = "y" ]]; then - # ALLOW_SPIDER="y" - # else - # ALLOW_SPIDER="n" - # fi - colorEcho $BLUE " 允许搜索引擎：$ALLOW_SPIDER" - fi - - echo "" - read -ep " 是否安装BBR(默认安装)?[y/n]: " NEED_BBR - [[ -z "$NEED_BBR" ]] && NEED_BBR=y - [[ "$NEED_BBR" = "Y" ]] && NEED_BBR=y - colorEcho $BLUE " 安装BBR：$NEED_BBR" -} - -installNginx() { - echo "" - colorEcho $BLUE " 安装nginx..." - if [[ "$BT" = "false" ]]; then - if [[ "$PMT" = "yum" ]]; then - $CMD_INSTALL epel-release - if [[ "$?" != "0" ]]; then - echo '[nginx-stable] -name=nginx stable repo -baseurl=http://nginx.org/packages/centos/$releasever/$basearch/ -gpgcheck=1 -enabled=1 -gpgkey=https://nginx.org/keys/nginx_signing.key -module_hotfixes=true' > /etc/yum.repos.d/nginx.repo - fi - fi - $CMD_INSTALL nginx - if [[ "$?" != "0" ]]; then - colorEcho $RED " Nginx安装失败，请到 https://hijk.art 反馈" - exit 1 - fi - systemctl enable nginx - else - res=`which nginx 2>/dev/null` - if [[ "$?" != "0" ]]; then - colorEcho $RED " 您安装了宝塔，请在宝塔后台安装nginx后再运行本脚本" - exit 1 - fi - fi -} - -startNginx() { - if [[ "$BT" = "false" ]]; then - systemctl start nginx - else - nginx -c /www/server/nginx/conf/nginx.conf - fi -} - -stopNginx() { - if [[ "$BT" = "false" ]]; then - systemctl stop nginx - else - res=`ps aux | grep -i nginx` - if [[ "$res" != "" ]]; then - nginx -s stop - fi - fi -} - -getCert() { - mkdir -p /usr/local/etc/xray - if [[ -z ${CERT_FILE+x} ]]; then - stopNginx - systemctl stop xray - res=`netstat -ntlp| grep -E ':80 |:443 '` - if [[ "${res}" != "" ]]; then - colorEcho ${RED} " 其他进程占用了80或443端口，请先关闭再运行一键脚本" - echo " 端口占用信息如下：" - echo ${res} - exit 1 - fi - - $CMD_INSTALL socat openssl - if [[ "$PMT" = "yum" ]]; then - $CMD_INSTALL cronie - systemctl start crond - systemctl enable crond - else - $CMD_INSTALL cron - systemctl start cron - systemctl enable cron - fi - curl -sL https://get.acme.sh | sh -s email=vincent0214001@gmail.sh - source ~/.bashrc - ~/.acme.sh/acme.sh --upgrade --auto-upgrade - # ~/.acme.sh/acme.sh --set-default-ca --server letsencrypt - if [[ "$BT" = "false" ]]; then - ~/.acme.sh/acme.sh --issue -d $DOMAIN --keylength ec-256 --pre-hook "systemctl stop nginx" --post-hook "systemctl restart nginx" --standalone - else - ~/.acme.sh/acme.sh --issue -d $DOMAIN --keylength ec-256 --pre-hook "nginx -s stop || { echo -n ''; }" --post-hook "nginx -c /www/server/nginx/conf/nginx.conf || { echo -n ''; }" --standalone - fi - [[ -f ~/.acme.sh/${DOMAIN}_ecc/ca.cer ]] || { - colorEcho $RED " 获取证书失败，请复制上面的红色文字到 https://hijk.art 反馈" - exit 1 - } - CERT_FILE="/usr/local/etc/xray/${DOMAIN}.pem" - KEY_FILE="/usr/local/etc/xray/${DOMAIN}.key" - ~/.acme.sh/acme.sh --install-cert -d $DOMAIN --ecc \ - --key-file $KEY_FILE \ - --fullchain-file $CERT_FILE \ - --reloadcmd "service nginx force-reload" - [[ -f $CERT_FILE && -f $KEY_FILE ]] || { - colorEcho $RED " 获取证书失败，请到 https://hijk.art 反馈" - exit 1 - } - else - cp ~/xray.pem /usr/local/etc/xray/${DOMAIN}.pem - cp ~/xray.key /usr/local/etc/xray/${DOMAIN}.key - fi -} - -configNginx() { - mkdir -p /usr/share/nginx/html; - if [[ "$ALLOW_SPIDER" = "n" ]]; then - echo 'User-Agent: *' > /usr/share/nginx/html/robots.txt - echo 'Disallow: /' >> /usr/share/nginx/html/robots.txt - ROBOT_CONFIG=" location = /robots.txt {}" - else - ROBOT_CONFIG="" - fi - - if [[ "$BT" = "false" ]]; then - if [[ ! -f /etc/nginx/nginx.conf.bak ]]; then - mv /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak - fi - res=`id nginx 2>/dev/null` - if [[ "$?" != "0" ]]; then - user="www-data" - else - user="nginx" - fi - cat > /etc/nginx/nginx.conf<<-EOF -user $user; -worker_processes auto; -error_log /var/log/nginx/error.log; -pid /run/nginx.pid; - -# Load dynamic modules. See /usr/share/doc/nginx/README.dynamic. -include /usr/share/nginx/modules/*.conf; - -events { - worker_connections 1024; -} - -http { - log_format main '\$remote_addr - \$remote_user [\$time_local] "\$request" ' - '\$status \$body_bytes_sent "\$http_referer" ' - '"\$http_user_agent" "\$http_x_forwarded_for"'; - - access_log /var/log/nginx/access.log main; - server_tokens off; - - sendfile on; - tcp_nopush on; - tcp_nodelay on; - keepalive_timeout 65; - types_hash_max_size 2048; - gzip on; - - include /etc/nginx/mime.types; - default_type application/octet-stream; - - # Load modular configuration files from the /etc/nginx/conf.d directory. - # See http://nginx.org/en/docs/ngx_core_module.html#include - # for more information. - include /etc/nginx/conf.d/*.conf; -} -EOF - fi - - if [[ "$PROXY_URL" = "" ]]; then - action="" - else - action="proxy_ssl_server_name on; - proxy_pass $PROXY_URL; - proxy_set_header Accept-Encoding ''; - sub_filter \"$REMOTE_HOST\" \"$DOMAIN\"; - sub_filter_once off;" - fi - - if [[ "$TLS" = "true" || "$XTLS" = "true" ]]; then - mkdir -p ${NGINX_CONF_PATH} - # VMESS+WS+TLS - # VLESS+WS+TLS - if [[ "$WS" = "true" ]]; then - cat > ${NGINX_CONF_PATH}${DOMAIN}.conf<<-EOF -server { - listen 80; - listen [::]:80; - server_name ${DOMAIN}; - return 301 https://\$server_name:${PORT}\$request_uri; -} - -server { - listen ${PORT} ssl http2; - listen [::]:${PORT} ssl http2; - server_name ${DOMAIN}; - charset utf-8; - - # ssl配置 - ssl_protocols TLSv1.1 TLSv1.2; - ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; - ssl_ecdh_curve secp384r1; - ssl_prefer_server_ciphers on; - ssl_session_cache shared:SSL:10m; - ssl_session_timeout 10m; - ssl_session_tickets off; - ssl_certificate $CERT_FILE; - ssl_certificate_key $KEY_FILE; - - root /usr/share/nginx/html; - location / { - $action - } - $ROBOT_CONFIG - - location ${WSPATH} { - proxy_redirect off; - proxy_pass http://127.0.0.1:${XPORT}; - proxy_http_version 1.1; - proxy_set_header Upgrade \$http_upgrade; - proxy_set_header Connection "upgrade"; - proxy_set_header Host \$host; - proxy_set_header X-Real-IP \$remote_addr; - proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; - } -} -EOF - else - # VLESS+TCP+TLS - # VLESS+TCP+XTLS - # trojan - cat > ${NGINX_CONF_PATH}${DOMAIN}.conf<<-EOF -server { - listen 80; - listen [::]:80; - listen 81 http2; - server_name ${DOMAIN}; - root /usr/share/nginx/html; - location / { - $action - } - $ROBOT_CONFIG -} -EOF - fi - fi - - updateNginxPage -} - -# 修改nginx默认页面 -updateNginxPage() { - HTML_PATH="/usr/share/nginx/html" - STATIC_HTML_URL="https://github.com/vincent0214/static_html/releases/download/1.0/static_html.zip" - - rm -rf ${HTML_PATH} - mkdir -p ${HTML_PATH} - wget ${STATIC_HTML_URL} -P ${HTML_PATH} - unzip -o -d ${HTML_PATH} ${HTML_PATH}/static_html.zip - rm ${HTML_PATH}/static_html.zip - mv ${HTML_PATH}/static_html/* ${HTML_PATH}/ - rm -rf ${HTML_PATH}/static_html -} - -setSelinux() { - if [[ -s /etc/selinux/config ]] && grep 'SELINUX=enforcing' /etc/selinux/config; then - sed -i 's/SELINUX=enforcing/SELINUX=permissive/g' /etc/selinux/config - setenforce 0 - fi -} - -setFirewall() { - res=`which firewall-cmd 2>/dev/null` - if [[ $? -eq 0 ]]; then - systemctl status firewalld > /dev/null 2>&1 - if [[ $? -eq 0 ]];then - firewall-cmd --permanent --add-service=http - firewall-cmd --permanent --add-service=https - if [[ "$PORT" != "443" ]]; then - firewall-cmd --permanent --add-port=${PORT}/tcp - firewall-cmd --permanent --add-port=${PORT}/udp - fi - firewall-cmd --reload - else - nl=`iptables -nL | nl | grep FORWARD | awk '{print $1}'` - if [[ "$nl" != "3" ]]; then - iptables -I INPUT -p tcp --dport 80 -j ACCEPT - iptables -I INPUT -p tcp --dport 443 -j ACCEPT - if [[ "$PORT" != "443" ]]; then - iptables -I INPUT -p tcp --dport ${PORT} -j ACCEPT - iptables -I INPUT -p udp --dport ${PORT} -j ACCEPT - fi - fi - fi - else - res=`which iptables 2>/dev/null` - if [[ $? -eq 0 ]]; then - nl=`iptables -nL | nl | grep FORWARD | awk '{print $1}'` - if [[ "$nl" != "3" ]]; then - iptables -I INPUT -p tcp --dport 80 -j ACCEPT - iptables -I INPUT -p tcp --dport 443 -j ACCEPT - if [[ "$PORT" != "443" ]]; then - iptables -I INPUT -p tcp --dport ${PORT} -j ACCEPT - iptables -I INPUT -p udp --dport ${PORT} -j ACCEPT - fi - fi - else - res=`which ufw 2>/dev/null` - if [[ $? -eq 0 ]]; then - res=`ufw status | grep -i inactive` - if [[ "$res" = "" ]]; then - ufw allow http/tcp - ufw allow https/tcp - if [[ "$PORT" != "443" ]]; then - ufw allow ${PORT}/tcp - ufw allow ${PORT}/udp - fi - fi - fi - fi - fi -} - -installBBR() { - if [[ "$NEED_BBR" != "y" ]]; then - INSTALL_BBR=false - return - fi - result=$(lsmod | grep bbr) - if [[ "$result" != "" ]]; then - colorEcho $BLUE " BBR模块已安装" - INSTALL_BBR=false - return - fi - res=`hostnamectl | grep -i openvz` - if [[ "$res" != "" ]]; then - colorEcho $BLUE " openvz机器，跳过安装" - INSTALL_BBR=false - return - fi - - echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf - echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf - sysctl -p - result=$(lsmod | grep bbr) - if [[ "$result" != "" ]]; then - colorEcho $GREEN " BBR模块已启用" - INSTALL_BBR=false - return - fi - - colorEcho $BLUE " 安装BBR模块..." - if [[ "$PMT" = "yum" ]]; then - if [[ "$V6_PROXY" = "" ]]; then - rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org - rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-4.el7.elrepo.noarch.rpm - $CMD_INSTALL --enablerepo=elrepo-kernel kernel-ml - $CMD_REMOVE kernel-3.* - grub2-set-default 0 - echo "tcp_bbr" >> /etc/modules-load.d/modules.conf - INSTALL_BBR=true - fi - else - $CMD_INSTALL --install-recommends linux-generic-hwe-16.04 - grub-set-default 0 - echo "tcp_bbr" >> /etc/modules-load.d/modules.conf - INSTALL_BBR=true - fi -} - -installXray() { - rm -rf /tmp/xray - mkdir -p /tmp/xray - DOWNLOAD_LINK="${V6_PROXY}https://github.com/XTLS/Xray-core/releases/download/${NEW_VER}/Xray-linux-$(archAffix).zip" - colorEcho $BLUE " 下载Xray: ${DOWNLOAD_LINK}" - curl -L -H "Cache-Control: no-cache" -o /tmp/xray/xray.zip ${DOWNLOAD_LINK} - if [ $? != 0 ];then - colorEcho $RED " 下载Xray文件失败，请检查服务器网络设置" - exit 1 - fi - systemctl stop xray - mkdir -p /usr/local/etc/xray /usr/local/share/xray && \ - unzip /tmp/xray/xray.zip -d /tmp/xray - cp /tmp/xray/xray /usr/local/bin - cp /tmp/xray/geo* /usr/local/share/xray - chmod +x /usr/local/bin/xray || { - colorEcho $RED " Xray安装失败" - exit 1 - } - - cat >/etc/systemd/system/xray.service<<-EOF -[Unit] -Description=Xray Service -Documentation=https://github.com/xtls https://hijk.art -After=network.target nss-lookup.target - -[Service] -User=root -#User=nobody -#CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE -#AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE -NoNewPrivileges=true -ExecStart=/usr/local/bin/xray run -config /usr/local/etc/xray/config.json -Restart=on-failure -RestartPreventExitStatus=23 - -[Install] -WantedBy=multi-user.target -EOF - systemctl daemon-reload - systemctl enable xray.service -} - -trojanConfig() { - cat > $CONFIG_FILE<<-EOF -{ - "inbounds": [{ - "port": $PORT, - "protocol": "trojan", - "settings": { - "clients": [ - { - "password": "$PASSWORD" - } - ], - "fallbacks": [ - { - "alpn": "http/1.1", - "dest": 80 - }, - { - "alpn": "h2", - "dest": 81 - } - ] - }, - "streamSettings": { - "network": "tcp", - "security": "tls", - "tlsSettings": { - "serverName": "$DOMAIN", - "alpn": ["http/1.1", "h2"], - "certificates": [ - { - "certificateFile": "$CERT_FILE", - "keyFile": "$KEY_FILE" - } - ] - } - } - }], - "outbounds": [{ - "protocol": "freedom", - "settings": {} - },{ - "protocol": "blackhole", - "settings": {}, - "tag": "blocked" - }] -} -EOF -} - -trojanXTLSConfig() { - cat > $CONFIG_FILE<<-EOF -{ - "inbounds": [{ - "port": $PORT, - "protocol": "trojan", - "settings": { - "clients": [ - { - "password": "$PASSWORD", - "flow": "$FLOW" - } - ], - "fallbacks": [ - { - "alpn": "http/1.1", - "dest": 80 - }, - { - "alpn": "h2", - "dest": 81 - } - ] - }, - "streamSettings": { - "network": "tcp", - "security": "xtls", - "xtlsSettings": { - "serverName": "$DOMAIN", - "alpn": ["http/1.1", "h2"], - "certificates": [ - { - "certificateFile": "$CERT_FILE", - "keyFile": "$KEY_FILE" - } - ] - } - } - }], - "outbounds": [{ - "protocol": "freedom", - "settings": {} - },{ - "protocol": "blackhole", - "settings": {}, - "tag": "blocked" - }] -} -EOF -} - -vmessConfig() { - local uuid="$(cat '/proc/sys/kernel/random/uuid')" - local alterid=`shuf -i50-80 -n1` - cat > $CONFIG_FILE<<-EOF -{ - "inbounds": [{ - "port": $PORT, - "protocol": "vmess", - "settings": { - "clients": [ - { - "id": "$uuid", - "level": 1, - "alterId": $alterid - } - ] - } - }], - "outbounds": [{ - "protocol": "freedom", - "settings": {} - },{ - "protocol": "blackhole", - "settings": {}, - "tag": "blocked" - }] -} -EOF -} - -vmessKCPConfig() { - local uuid="$(cat '/proc/sys/kernel/random/uuid')" - local alterid=`shuf -i50-80 -n1` - cat > $CONFIG_FILE<<-EOF -{ - "inbounds": [{ - "port": $PORT, - "protocol": "vmess", - "settings": { - "clients": [ - { - "id": "$uuid", - "level": 1, - "alterId": $alterid - } - ] - }, - "streamSettings": { - "network": "mkcp", - "kcpSettings": { - "uplinkCapacity": 100, - "downlinkCapacity": 100, - "congestion": true, - "header": { - "type": "$HEADER_TYPE" - }, - "seed": "$SEED" - } - } - }], - "outbounds": [{ - "protocol": "freedom", - "settings": {} - },{ - "protocol": "blackhole", - "settings": {}, - "tag": "blocked" - }] -} -EOF -} - -vmessTLSConfig() { - local uuid="$(cat '/proc/sys/kernel/random/uuid')" - cat > $CONFIG_FILE<<-EOF -{ - "inbounds": [{ - "port": $PORT, - "protocol": "vmess", - "settings": { - "clients": [ - { - "id": "$uuid", - "level": 1, - "alterId": 0 - } - ], - "disableInsecureEncryption": false - }, - "streamSettings": { - "network": "tcp", - "security": "tls", - "tlsSettings": { - "serverName": "$DOMAIN", - "alpn": ["http/1.1", "h2"], - "certificates": [ - { - "certificateFile": "$CERT_FILE", - "keyFile": "$KEY_FILE" - } - ] - } - } - }], - "outbounds": [{ - "protocol": "freedom", - "settings": {} - },{ - "protocol": "blackhole", - "settings": {}, - "tag": "blocked" - }] -} -EOF -} - -vmessWSConfig() { - local uuid="$(cat '/proc/sys/kernel/random/uuid')" - cat > $CONFIG_FILE<<-EOF -{ - "inbounds": [{ - "port": $XPORT, - "listen": "127.0.0.1", - "protocol": "vmess", - "settings": { - "clients": [ - { - "id": "$uuid", - "level": 1, - "alterId": 0 - } - ], - "disableInsecureEncryption": false - }, - "streamSettings": { - "network": "ws", - "wsSettings": { - "path": "$WSPATH", - "headers": { - "Host": "$DOMAIN" - } - } - } - }], - "outbounds": [{ - "protocol": "freedom", - "settings": {} - },{ - "protocol": "blackhole", - "settings": {}, - "tag": "blocked" - }] -} -EOF -} - -vlessTLSConfig() { - local uuid="$(cat '/proc/sys/kernel/random/uuid')" - cat > $CONFIG_FILE<<-EOF -{ - "inbounds": [{ - "port": $PORT, - "protocol": "vless", - "settings": { - "clients": [ - { - "id": "$uuid", - "level": 0 - } - ], - "decryption": "none", - "fallbacks": [ - { - "alpn": "http/1.1", - "dest": 80 - }, - { - "alpn": "h2", - "dest": 81 - } - ] - }, - "streamSettings": { - "network": "tcp", - "security": "tls", - "tlsSettings": { - "serverName": "$DOMAIN", - "alpn": ["http/1.1", "h2"], - "certificates": [ - { - "certificateFile": "$CERT_FILE", - "keyFile": "$KEY_FILE" - } - ] - } - } - }], - "outbounds": [{ - "protocol": "freedom", - "settings": {} - },{ - "protocol": "blackhole", - "settings": {}, - "tag": "blocked" - }] -} -EOF -} - -vlessXTLSConfig() { - local uuid="$(cat '/proc/sys/kernel/random/uuid')" - cat > $CONFIG_FILE<<-EOF -{ - "inbounds": [{ - "port": $PORT, - "protocol": "vless", - "settings": { - "clients": [ - { - "id": "$uuid", - "flow": "$FLOW", - "level": 0 - } - ], - "decryption": "none", - "fallbacks": [ - { - "alpn": "http/1.1", - "dest": 80 - }, - { - "alpn": "h2", - "dest": 81 - } - ] - }, - "streamSettings": { - "network": "tcp", - "security": "xtls", - "xtlsSettings": { - "serverName": "$DOMAIN", - "alpn": ["http/1.1", "h2"], - "certificates": [ - { - "certificateFile": "$CERT_FILE", - "keyFile": "$KEY_FILE" - } - ] - } - } - }], - "outbounds": [{ - "protocol": "freedom", - "settings": {} - },{ - "protocol": "blackhole", - "settings": {}, - "tag": "blocked" - }] -} -EOF -} - -vlessWSConfig() { - local uuid="$(cat '/proc/sys/kernel/random/uuid')" - cat > $CONFIG_FILE<<-EOF -{ - "inbounds": [{ - "port": $XPORT, - "listen": "127.0.0.1", - "protocol": "vless", - "settings": { - "clients": [ - { - "id": "$uuid", - "level": 0 - } - ], - "decryption": "none" - }, - "streamSettings": { - "network": "ws", - "security": "none", - "wsSettings": { - "path": "$WSPATH", - "headers": { - "Host": "$DOMAIN" - } - } - } - }], - "outbounds": [{ - "protocol": "freedom", - "settings": {} - },{ - "protocol": "blackhole", - "settings": {}, - "tag": "blocked" - }] -} -EOF -} - -vlessKCPConfig() { - local uuid="$(cat '/proc/sys/kernel/random/uuid')" - cat > $CONFIG_FILE<<-EOF -{ - "inbounds": [{ - "port": $PORT, - "protocol": "vless", - "settings": { - "clients": [ - { - "id": "$uuid", - "level": 0 - } - ], - "decryption": "none" - }, - "streamSettings": { - "streamSettings": { - "network": "mkcp", - "kcpSettings": { - "uplinkCapacity": 100, - "downlinkCapacity": 100, - "congestion": true, - "header": { - "type": "$HEADER_TYPE" - }, - "seed": "$SEED" - } - } - } - }], - "outbounds": [{ - "protocol": "freedom", - "settings": {} - },{ - "protocol": "blackhole", - "settings": {}, - "tag": "blocked" - }] -} -EOF -} - -configXray() { - mkdir -p /usr/local/xray - if [[ "$TROJAN" = "true" ]]; then - if [[ "$XTLS" = "true" ]]; then - trojanXTLSConfig - else - trojanConfig - fi - return 0 - fi - if [[ "$VLESS" = "false" ]]; then - # VMESS + kcp - if [[ "$KCP" = "true" ]]; then - vmessKCPConfig - return 0 - fi - # VMESS - if [[ "$TLS" = "false" ]]; then - vmessConfig - elif [[ "$WS" = "false" ]]; then - # VMESS+TCP+TLS - vmessTLSConfig - # VMESS+WS+TLS - else - vmessWSConfig - fi - #VLESS - else - if [[ "$KCP" = "true" ]]; then - vlessKCPConfig - return 0 - fi - # VLESS+TCP - if [[ "$WS" = "false" ]]; then - # VLESS+TCP+TLS - if [[ "$XTLS" = "false" ]]; then - vlessTLSConfig - # VLESS+TCP+XTLS - else - vlessXTLSConfig - fi - # VLESS+WS+TLS - else - vlessWSConfig - fi - fi -} - -install() { - getData - - $PMT clean all - [[ "$PMT" = "apt" ]] && $PMT update - #echo $CMD_UPGRADE | bash - $CMD_INSTALL wget vim unzip tar gcc openssl - $CMD_INSTALL net-tools - if [[ "$PMT" = "apt" ]]; then - $CMD_INSTALL libssl-dev g++ - fi - res=`which unzip 2>/dev/null` - if [[ $? -ne 0 ]]; then - colorEcho $RED " unzip安装失败，请检查网络" - exit 1 - fi - - installNginx - setFirewall - if [[ "$TLS" = "true" || "$XTLS" = "true" ]]; then - getCert - fi - configNginx - - colorEcho $BLUE " 安装Xray..." - getVersion - RETVAL="$?" - if [[ $RETVAL == 0 ]]; then - colorEcho $BLUE " Xray最新版 ${CUR_VER} 已经安装" - elif [[ $RETVAL == 3 ]]; then - exit 1 - else - colorEcho $BLUE " 安装Xray ${NEW_VER} ，架构$(archAffix)" - installXray - fi - - configXray - - setSelinux - installBBR - - start - showInfo - - bbrReboot -} - -bbrReboot() { - if [[ "${INSTALL_BBR}" == "true" ]]; then - echo - echo " 为使BBR模块生效，系统将在30秒后重启" - echo - echo -e " 您可以按 ctrl + c 取消重启，稍后输入 ${RED}reboot${PLAIN} 重启系统" - sleep 30 - reboot - fi -} - -update() { - res=`status` - if [[ $res -lt 2 ]]; then - colorEcho $RED " Xray未安装，请先安装！" - return - fi - - getVersion - RETVAL="$?" - if [[ $RETVAL == 0 ]]; then - colorEcho $BLUE " Xray最新版 ${CUR_VER} 已经安装" - elif [[ $RETVAL == 3 ]]; then - exit 1 - else - colorEcho $BLUE " 安装Xray ${NEW_VER} ，架构$(archAffix)" - installXray - stop - start - - colorEcho $GREEN " 最新版Xray安装成功！" - fi -} - -uninstall() { - res=`status` - if [[ $res -lt 2 ]]; then - colorEcho $RED " Xray未安装，请先安装！" - return - fi - - echo "" - read -ep " 确定卸载Xray？[y/n]：" answer - if [[ "${answer,,}" = "y" ]]; then - domain=`grep Host $CONFIG_FILE | cut -d: -f2 | tr -d \",' '` - if [[ "$domain" = "" ]]; then - domain=`grep serverName $CONFIG_FILE | cut -d: -f2 | tr -d \",' '` - fi - - stop - systemctl disable xray - rm -rf /etc/systemd/system/xray.service - rm -rf /usr/local/bin/xray - rm -rf /usr/local/etc/xray - - if [[ "$BT" = "false" ]]; then - systemctl disable nginx - $CMD_REMOVE nginx - if [[ "$PMT" = "apt" ]]; then - $CMD_REMOVE nginx-common - fi - rm -rf /etc/nginx/nginx.conf - if [[ -f /etc/nginx/nginx.conf.bak ]]; then - mv /etc/nginx/nginx.conf.bak /etc/nginx/nginx.conf - fi - fi - if [[ "$domain" != "" ]]; then - rm -rf ${NGINX_CONF_PATH}${domain}.conf - fi - [[ -f ~/.acme.sh/acme.sh ]] && ~/.acme.sh/acme.sh --uninstall - colorEcho $GREEN " Xray卸载成功" - fi -} - -start() { - res=`status` - if [[ $res -lt 2 ]]; then - colorEcho $RED " Xray未安装，请先安装！" - return - fi - stopNginx - startNginx - systemctl restart xray - sleep 2 - - port=`grep port $CONFIG_FILE| head -n 1| cut -d: -f2| tr -d \",' '` - res=`ss -nutlp| grep ${port} | grep -i xray` - if [[ "$res" = "" ]]; then - colorEcho $RED " Xray启动失败，请检查日志或查看端口是否被占用！" - else - colorEcho $BLUE " Xray启动成功" - fi -} - -stop() { - stopNginx - systemctl stop xray - colorEcho $BLUE " Xray停止成功" -} - - -restart() { - res=`status` - if [[ $res -lt 2 ]]; then - colorEcho $RED " Xray未安装，请先安装！" - return - fi - - stop - start -} - - -getConfigFileInfo() { - vless="false" - tls="false" - ws="false" - xtls="false" - trojan="false" - protocol="VMess" - kcp="false" - - uid=`grep id $CONFIG_FILE | head -n1| cut -d: -f2 | tr -d \",' '` - alterid=`grep alterId $CONFIG_FILE | cut -d: -f2 | tr -d \",' '` - network=`grep network $CONFIG_FILE | tail -n1| cut -d: -f2 | tr -d \",' '` - [[ -z "$network" ]] && network="tcp" - domain=`grep serverName $CONFIG_FILE | cut -d: -f2 | tr -d \",' '` - if [[ "$domain" = "" ]]; then - domain=`grep Host $CONFIG_FILE | cut -d: -f2 | tr -d \",' '` - if [[ "$domain" != "" ]]; then - ws="true" - tls="true" - wspath=`grep path $CONFIG_FILE | cut -d: -f2 | tr -d \",' '` - fi - else - tls="true" - fi - if [[ "$ws" = "true" ]]; then - port=`grep -i ssl $NGINX_CONF_PATH${domain}.conf| head -n1 | awk '{print $2}'` - else - port=`grep port $CONFIG_FILE | cut -d: -f2 | tr -d \",' '` - fi - res=`grep -i kcp $CONFIG_FILE` - if [[ "$res" != "" ]]; then - kcp="true" - type=`grep header -A 3 $CONFIG_FILE | grep 'type' | cut -d: -f2 | tr -d \",' '` - seed=`grep seed $CONFIG_FILE | cut -d: -f2 | tr -d \",' '` - fi - - vmess=`grep vmess $CONFIG_FILE` - if [[ "$vmess" = "" ]]; then - trojan=`grep trojan $CONFIG_FILE` - if [[ "$trojan" = "" ]]; then - vless="true" - protocol="VLESS" - else - trojan="true" - password=`grep password $CONFIG_FILE | cut -d: -f2 | tr -d \",' '` - protocol="trojan" - fi - tls="true" - encryption="none" - xtls=`grep xtlsSettings $CONFIG_FILE` - if [[ "$xtls" != "" ]]; then - xtls="true" - flow=`grep flow $CONFIG_FILE | cut -d: -f2 | tr -d \",' '` - else - flow="无" - fi - fi -} - -outputVmess() { - raw="{ - \"v\":\"2\", - \"ps\":\"\", - \"add\":\"$IP\", - \"port\":\"${port}\", - \"id\":\"${uid}\", - \"aid\":\"$alterid\", - \"net\":\"tcp\", - \"type\":\"none\", - \"host\":\"\", - \"path\":\"\", - \"tls\":\"\" -}" - link=`echo -n ${raw} | base64 -w 0` - link="vmess://${link}" - - echo -e " ${BLUE}IP(address): ${PLAIN} ${RED}${IP}${PLAIN}" - echo -e " ${BLUE}端口(port)：${PLAIN}${RED}${port}${PLAIN}" - echo -e " ${BLUE}id(uuid)：${PLAIN}${RED}${uid}${PLAIN}" - echo -e " ${BLUE}额外id(alterid)：${PLAIN} ${RED}${alterid}${PLAIN}" - echo -e " ${BLUE}加密方式(security)：${PLAIN} ${RED}auto${PLAIN}" - echo -e " ${BLUE}传输协议(network)：${PLAIN} ${RED}${network}${PLAIN}" - echo - echo -e " ${BLUE}vmess链接:${PLAIN} $RED$link$PLAIN" -} - -outputVmessKCP() { - echo -e " ${BLUE}IP(address): ${PLAIN} ${RED}${IP}${PLAIN}" - echo -e " ${BLUE}端口(port)：${PLAIN}${RED}${port}${PLAIN}" - echo -e " ${BLUE}id(uuid)：${PLAIN}${RED}${uid}${PLAIN}" - echo -e " ${BLUE}额外id(alterid)：${PLAIN} ${RED}${alterid}${PLAIN}" - echo -e " ${BLUE}加密方式(security)：${PLAIN} ${RED}auto${PLAIN}" - echo -e " ${BLUE}传输协议(network)：${PLAIN} ${RED}${network}${PLAIN}" - echo -e " ${BLUE}伪装类型(type)：${PLAIN} ${RED}${type}${PLAIN}" - echo -e " ${BLUE}mkcp seed：${PLAIN} ${RED}${seed}${PLAIN}" -} - -outputTrojan() { - if [[ "$xtls" = "true" ]]; then - echo -e " ${BLUE}IP/域名(address): ${PLAIN} ${RED}${domain}${PLAIN}" - echo -e " ${BLUE}端口(port)：${PLAIN}${RED}${port}${PLAIN}" - echo -e " ${BLUE}密码(password)：${PLAIN}${RED}${password}${PLAIN}" - echo -e " ${BLUE}流控(flow)：${PLAIN}$RED$flow${PLAIN}" - echo -e " ${BLUE}加密(encryption)：${PLAIN} ${RED}none${PLAIN}" - echo -e " ${BLUE}传输协议(network)：${PLAIN} ${RED}${network}${PLAIN}" - echo -e " ${BLUE}底层安全传输(tls)：${PLAIN}${RED}XTLS${PLAIN}" - else - echo -e " ${BLUE}IP/域名(address): ${PLAIN} ${RED}${domain}${PLAIN}" - echo -e " ${BLUE}端口(port)：${PLAIN}${RED}${port}${PLAIN}" - echo -e " ${BLUE}密码(password)：${PLAIN}${RED}${password}${PLAIN}" - echo -e " ${BLUE}传输协议(network)：${PLAIN} ${RED}${network}${PLAIN}" - echo -e " ${BLUE}底层安全传输(tls)：${PLAIN}${RED}TLS${PLAIN}" - fi -} - -outputVmessTLS() { - raw="{ - \"v\":\"2\", - \"ps\":\"\", - \"add\":\"$IP\", - \"port\":\"${port}\", - \"id\":\"${uid}\", - \"aid\":\"$alterid\", - \"net\":\"${network}\", - \"type\":\"none\", - \"host\":\"${domain}\", - \"path\":\"\", - \"tls\":\"tls\" -}" - link=`echo -n ${raw} | base64 -w 0` - link="vmess://${link}" - echo -e " ${BLUE}IP(address): ${PLAIN} ${RED}${IP}${PLAIN}" - echo -e " ${BLUE}端口(port)：${PLAIN}${RED}${port}${PLAIN}" - echo -e " ${BLUE}id(uuid)：${PLAIN}${RED}${uid}${PLAIN}" - echo -e " ${BLUE}额外id(alterid)：${PLAIN} ${RED}${alterid}${PLAIN}" - echo -e " ${BLUE}加密方式(security)：${PLAIN} ${RED}none${PLAIN}" - echo -e " ${BLUE}传输协议(network)：${PLAIN} ${RED}${network}${PLAIN}" - echo -e " ${BLUE}伪装域名/主机名(host)/SNI/peer名称：${PLAIN}${RED}${domain}${PLAIN}" - echo -e " ${BLUE}底层安全传输(tls)：${PLAIN}${RED}TLS${PLAIN}" - echo - echo -e " ${BLUE}vmess链接: ${PLAIN}$RED$link$PLAIN" -} - -outputVmessWS() { - raw="{ - \"v\":\"2\", - \"ps\":\"\", - \"add\":\"$IP\", - \"port\":\"${port}\", - \"id\":\"${uid}\", - \"aid\":\"$alterid\", - \"net\":\"${network}\", - \"type\":\"none\", - \"host\":\"${domain}\", - \"path\":\"${wspath}\", - \"tls\":\"tls\" -}" - link=`echo -n ${raw} | base64 -w 0` - link="vmess://${link}" - - echo -e " ${BLUE}IP(address): ${PLAIN} ${RED}${IP}${PLAIN}" - echo -e " ${BLUE}端口(port)：${PLAIN}${RED}${port}${PLAIN}" - echo -e " ${BLUE}id(uuid)：${PLAIN}${RED}${uid}${PLAIN}" - echo -e " ${BLUE}额外id(alterid)：${PLAIN} ${RED}${alterid}${PLAIN}" - echo -e " ${BLUE}加密方式(security)：${PLAIN} ${RED}none${PLAIN}" - echo -e " ${BLUE}传输协议(network)：${PLAIN} ${RED}${network}${PLAIN}" - echo -e " ${BLUE}伪装类型(type)：${PLAIN}${RED}none$PLAIN" - echo -e " ${BLUE}伪装域名/主机名(host)/SNI/peer名称：${PLAIN}${RED}${domain}${PLAIN}" - echo -e " ${BLUE}路径(path)：${PLAIN}${RED}${wspath}${PLAIN}" - echo -e " ${BLUE}底层安全传输(tls)：${PLAIN}${RED}TLS${PLAIN}" - echo - echo -e " ${BLUE}vmess链接:${PLAIN} $RED$link$PLAIN" -} - -showInfo() { - res=`status` - if [[ $res -lt 2 ]]; then - colorEcho $RED " Xray未安装，请先安装！" - return - fi - - echo "" - echo -n -e " ${BLUE}Xray运行状态：${PLAIN}" - statusText - echo -e " ${BLUE}Xray配置文件: ${PLAIN} ${RED}${CONFIG_FILE}${PLAIN}" - colorEcho $BLUE " Xray配置信息：" - - getConfigFileInfo - - echo -e " ${BLUE}协议: ${PLAIN} ${RED}${protocol}${PLAIN}" - if [[ "$trojan" = "true" ]]; then - outputTrojan - return 0 - fi - if [[ "$vless" = "false" ]]; then - if [[ "$kcp" = "true" ]]; then - outputVmessKCP - return 0 - fi - if [[ "$tls" = "false" ]]; then - outputVmess - elif [[ "$ws" = "false" ]]; then - outputVmessTLS - else - outputVmessWS - fi - else - if [[ "$kcp" = "true" ]]; then - echo -e " ${BLUE}IP(address): ${PLAIN} ${RED}${IP}${PLAIN}" - echo -e " ${BLUE}端口(port)：${PLAIN}${RED}${port}${PLAIN}" - echo -e " ${BLUE}id(uuid)：${PLAIN}${RED}${uid}${PLAIN}" - echo -e " ${BLUE}加密(encryption)：${PLAIN} ${RED}none${PLAIN}" - echo -e " ${BLUE}传输协议(network)：${PLAIN} ${RED}${network}${PLAIN}" - echo -e " ${BLUE}伪装类型(type)：${PLAIN} ${RED}${type}${PLAIN}" - echo -e " ${BLUE}mkcp seed：${PLAIN} ${RED}${seed}${PLAIN}" - return 0 - fi - if [[ "$xtls" = "true" ]]; then - echo -e " ${BLUE}IP(address): ${PLAIN} ${RED}${IP}${PLAIN}" - echo -e " ${BLUE}端口(port)：${PLAIN}${RED}${port}${PLAIN}" - echo -e " ${BLUE}id(uuid)：${PLAIN}${RED}${uid}${PLAIN}" - echo -e " ${BLUE}流控(flow)：${PLAIN}$RED$flow${PLAIN}" - echo -e " ${BLUE}加密(encryption)：${PLAIN} ${RED}none${PLAIN}" - echo -e " ${BLUE}传输协议(network)：${PLAIN} ${RED}${network}${PLAIN}" - echo -e " ${BLUE}伪装类型(type)：${PLAIN}${RED}none$PLAIN" - echo -e " ${BLUE}伪装域名/主机名(host)/SNI/peer名称：${PLAIN}${RED}${domain}${PLAIN}" - echo -e " ${BLUE}底层安全传输(tls)：${PLAIN}${RED}XTLS${PLAIN}" - elif [[ "$ws" = "false" ]]; then - echo -e " ${BLUE}IP(address): ${PLAIN}${RED}${IP}${PLAIN}" - echo -e " ${BLUE}端口(port)：${PLAIN}${RED}${port}${PLAIN}" - echo -e " ${BLUE}id(uuid)：${PLAIN}${RED}${uid}${PLAIN}" - echo -e " ${BLUE}流控(flow)：${PLAIN}$RED$flow${PLAIN}" - echo -e " ${BLUE}加密(encryption)：${PLAIN} ${RED}none${PLAIN}" - echo -e " ${BLUE}传输协议(network)：${PLAIN} ${RED}${network}${PLAIN}" - echo -e " ${BLUE}伪装类型(type)：${PLAIN}${RED}none$PLAIN" - echo -e " ${BLUE}伪装域名/主机名(host)/SNI/peer名称：${PLAIN}${RED}${domain}${PLAIN}" - echo -e " ${BLUE}底层安全传输(tls)：${PLAIN}${RED}TLS${PLAIN}" - else - echo -e " ${BLUE}IP(address): ${PLAIN} ${RED}${IP}${PLAIN}" - echo -e " ${BLUE}端口(port)：${PLAIN}${RED}${port}${PLAIN}" - echo -e " ${BLUE}id(uuid)：${PLAIN}${RED}${uid}${PLAIN}" - echo -e " ${BLUE}流控(flow)：${PLAIN}$RED$flow${PLAIN}" - echo -e " ${BLUE}加密(encryption)：${PLAIN} ${RED}none${PLAIN}" - echo -e " ${BLUE}传输协议(network)：${PLAIN} ${RED}${network}${PLAIN}" - echo -e " ${BLUE}伪装类型(type)：${PLAIN}${RED}none$PLAIN" - echo -e " ${BLUE}伪装域名/主机名(host)/SNI/peer名称：${PLAIN}${RED}${domain}${PLAIN}" - echo -e " ${BLUE}路径(path)：${PLAIN}${RED}${wspath}${PLAIN}" - echo -e " ${BLUE}底层安全传输(tls)：${PLAIN}${RED}TLS${PLAIN}" - fi - fi -} - -showLog() { - res=`status` - if [[ $res -lt 2 ]]; then - colorEcho $RED " Xray未安装，请先安装！" - return - fi - - journalctl -xen -u xray --no-pager -} - -menu() { - clear - echo "#############################################################" - echo -e "# ${RED}Xray一键安装脚本${PLAIN} #" - echo -e "# ${GREEN}作者${PLAIN}: 网络跳越(hijk) #" - echo -e "# ${GREEN}网址${PLAIN}: https://hijk.art #" - echo -e "# ${GREEN}论坛${PLAIN}: https://hijk.club #" - echo -e "# ${GREEN}TG群${PLAIN}: https://t.me/hijkclub #" - echo -e "# ${GREEN}Youtube频道${PLAIN}: https://youtube.com/channel/UCYTB--VsObzepVJtc9yvUxQ #" - echo "#############################################################" - echo -e " ${GREEN}1.${PLAIN} 安装Xray-VMESS" - echo -e " ${GREEN}2.${PLAIN} 安装Xray-${BLUE}VMESS+mKCP${PLAIN}" - echo -e " ${GREEN}3.${PLAIN} 安装Xray-VMESS+TCP+TLS" - echo -e " ${GREEN}4.${PLAIN} 安装Xray-${BLUE}VMESS+WS+TLS${PLAIN}${RED}(推荐)${PLAIN}" - echo -e " ${GREEN}5.${PLAIN} 安装Xray-${BLUE}VLESS+mKCP${PLAIN}" - echo -e " ${GREEN}6.${PLAIN} 安装Xray-VLESS+TCP+TLS" - echo -e " ${GREEN}7.${PLAIN} 安装Xray-${BLUE}VLESS+WS+TLS${PLAIN}${RED}(可过cdn)${PLAIN}" - echo -e " ${GREEN}8.${PLAIN} 安装Xray-${BLUE}VLESS+TCP+XTLS${PLAIN}${RED}(强烈推荐)${PLAIN}" - echo -e " ${GREEN}9.${PLAIN} 安装${BLUE}trojan${PLAIN}${RED}(推荐)${PLAIN}" - echo -e " ${GREEN}10.${PLAIN} 安装${BLUE}trojan+XTLS${PLAIN}${RED}(推荐)${PLAIN}" - echo " -------------" - echo -e " ${GREEN}11.${PLAIN} 更新Xray" - echo -e " ${GREEN}12. ${RED}卸载Xray${PLAIN}" - echo " -------------" - echo -e " ${GREEN}13.${PLAIN} 启动Xray" - echo -e " ${GREEN}14.${PLAIN} 重启Xray" - echo -e " ${GREEN}15.${PLAIN} 停止Xray" - echo " -------------" - echo -e " ${GREEN}16.${PLAIN} 查看Xray配置" - echo -e " ${GREEN}17.${PLAIN} 查看Xray日志" - echo " -------------" - echo -e " ${GREEN}0.${PLAIN} 退出" - echo -n " 当前状态：" - statusText - echo - - read -ep " 请选择操作[0-17]：" answer - case $answer in - 0) - exit 0 - ;; - 1) - install - ;; - 2) - KCP="true" - install - ;; - 3) - TLS="true" - install - ;; - 4) - TLS="true" - WS="true" - install - ;; - 5) - VLESS="true" - KCP="true" - install - ;; - 6) - VLESS="true" - TLS="true" - install - ;; - 7) - VLESS="true" - TLS="true" - WS="true" - install - ;; - 8) - VLESS="true" - TLS="true" - XTLS="true" - install - ;; - 9) - TROJAN="true" - TLS="true" - install - ;; - 10) - TROJAN="true" - TLS="true" - XTLS="true" - install - ;; - 11) - update - ;; - 12) - uninstall - ;; - 13) - start - ;; - 14) - restart - ;; - 15) - stop - ;; - 16) - showInfo - ;; - 17) - showLog - ;; - *) - colorEcho $RED " 请选择正确的操作！" - exit 1 - ;; - esac -} - -checkSystem - -action=$1 -[[ -z $1 ]] && action=menu -case "$action" in - menu|update|uninstall|start|restart|stop|showInfo|showLog) - ${action} - ;; - *) - echo " 参数错误" - echo " 用法: `basename $0` [menu|update|uninstall|start|restart|stop|showInfo|showLog]" - ;; -esac -