上传文件至 sh
This commit is contained in:
parent
66cd6418fc
commit
75eebfd3b1
922
sh/reality_hy2_ws (0).sh
Normal file
922
sh/reality_hy2_ws (0).sh
Normal file
@ -0,0 +1,922 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Function to print characters with delay
|
||||||
|
print_with_delay() {
|
||||||
|
text="$1"
|
||||||
|
delay="$2"
|
||||||
|
for ((i = 0; i < ${#text}; i++)); do
|
||||||
|
echo -n "${text:$i:1}"
|
||||||
|
sleep $delay
|
||||||
|
done
|
||||||
|
echo
|
||||||
|
}
|
||||||
|
#notice
|
||||||
|
show_notice() {
|
||||||
|
local message="$1"
|
||||||
|
|
||||||
|
echo "#######################################################################################################################"
|
||||||
|
echo " "
|
||||||
|
echo " ${message} "
|
||||||
|
echo " "
|
||||||
|
echo "#######################################################################################################################"
|
||||||
|
}
|
||||||
|
# Introduction animation
|
||||||
|
print_with_delay "sing-reality-hy2-wss-box by 绵阿羊" 0.05
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
# install base
|
||||||
|
install_base(){
|
||||||
|
# Check if jq is installed, and install it if not
|
||||||
|
if ! command -v jq &> /dev/null; then
|
||||||
|
echo "jq is not installed. Installing..."
|
||||||
|
if [ -n "$(command -v apt)" ]; then
|
||||||
|
apt update > /dev/null 2>&1
|
||||||
|
apt install -y jq > /dev/null 2>&1
|
||||||
|
elif [ -n "$(command -v yum)" ]; then
|
||||||
|
yum install -y epel-release
|
||||||
|
yum install -y jq
|
||||||
|
elif [ -n "$(command -v dnf)" ]; then
|
||||||
|
dnf install -y jq
|
||||||
|
else
|
||||||
|
echo "Cannot install jq. Please install jq manually and rerun the script."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
# regenrate cloudflared argo
|
||||||
|
regenarte_cloudflared_argo(){
|
||||||
|
pid=$(pgrep -f cloudflared)
|
||||||
|
if [ -n "$pid" ]; then
|
||||||
|
# 终止进程
|
||||||
|
kill "$pid"
|
||||||
|
fi
|
||||||
|
|
||||||
|
vmess_port=$(jq -r '.inbounds[2].listen_port' /root/sbox/sbconfig_server.json)
|
||||||
|
#生成地址
|
||||||
|
/root/sbox/cloudflared-linux tunnel --url http://localhost:$vmess_port --no-autoupdate --edge-ip-version auto --protocol h2mux>argo.log 2>&1 &
|
||||||
|
sleep 2
|
||||||
|
clear
|
||||||
|
echo 等待cloudflare argo生成地址
|
||||||
|
sleep 5
|
||||||
|
#连接到域名
|
||||||
|
argo=$(cat argo.log | grep trycloudflare.com | awk 'NR==2{print}' | awk -F// '{print $2}' | awk '{print $1}')
|
||||||
|
echo "$argo" | base64 > /root/sbox/argo.txt.b64
|
||||||
|
rm -rf argo.log
|
||||||
|
|
||||||
|
}
|
||||||
|
# download singbox and cloudflared
|
||||||
|
download_singbox(){
|
||||||
|
arch=$(uname -m)
|
||||||
|
echo "Architecture: $arch"
|
||||||
|
# Map architecture names
|
||||||
|
case ${arch} in
|
||||||
|
x86_64)
|
||||||
|
arch="amd64"
|
||||||
|
;;
|
||||||
|
aarch64)
|
||||||
|
arch="arm64"
|
||||||
|
;;
|
||||||
|
armv7l)
|
||||||
|
arch="armv7"
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
# Fetch the latest (including pre-releases) release version number from GitHub API
|
||||||
|
# 正式版
|
||||||
|
#latest_version_tag=$(curl -s "https://api.github.com/repos/SagerNet/sing-box/releases" | grep -Po '"tag_name": "\K.*?(?=")' | head -n 1)
|
||||||
|
#beta版本
|
||||||
|
latest_version_tag=$(curl -s "https://api.github.com/repos/SagerNet/sing-box/releases" | grep -Po '"tag_name": "\K.*?(?=")' | sort -V | tail -n 1)
|
||||||
|
latest_version=${latest_version_tag#v} # Remove 'v' prefix from version number
|
||||||
|
echo "Latest version: $latest_version"
|
||||||
|
# Detect server architecture
|
||||||
|
# Prepare package names
|
||||||
|
package_name="sing-box-${latest_version}-linux-${arch}"
|
||||||
|
# Prepare download URL
|
||||||
|
url="https://github.com/SagerNet/sing-box/releases/download/${latest_version_tag}/${package_name}.tar.gz"
|
||||||
|
# Download the latest release package (.tar.gz) from GitHub
|
||||||
|
curl -sLo "/root/${package_name}.tar.gz" "$url"
|
||||||
|
|
||||||
|
# Extract the package and move the binary to /root
|
||||||
|
tar -xzf "/root/${package_name}.tar.gz" -C /root
|
||||||
|
mv "/root/${package_name}/sing-box" /root/sbox
|
||||||
|
|
||||||
|
# Cleanup the package
|
||||||
|
rm -r "/root/${package_name}.tar.gz" "/root/${package_name}"
|
||||||
|
|
||||||
|
# Set the permissions
|
||||||
|
chown root:root /root/sbox/sing-box
|
||||||
|
chmod +x /root/sbox/sing-box
|
||||||
|
}
|
||||||
|
|
||||||
|
# download singbox and cloudflared
|
||||||
|
download_cloudflared(){
|
||||||
|
arch=$(uname -m)
|
||||||
|
# Map architecture names
|
||||||
|
case ${arch} in
|
||||||
|
x86_64)
|
||||||
|
cf_arch="amd64"
|
||||||
|
;;
|
||||||
|
aarch64)
|
||||||
|
cf_arch="arm64"
|
||||||
|
;;
|
||||||
|
armv7l)
|
||||||
|
cf_arch="arm"
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
# install cloudflared linux
|
||||||
|
cf_url="https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-${cf_arch}"
|
||||||
|
curl -sLo "/root/sbox/cloudflared-linux" "$cf_url"
|
||||||
|
chmod +x /root/sbox/cloudflared-linux
|
||||||
|
echo ""
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
# client configuration
|
||||||
|
show_client_configuration() {
|
||||||
|
# Get current listen port
|
||||||
|
current_listen_port=$(jq -r '.inbounds[0].listen_port' /root/sbox/sbconfig_server.json)
|
||||||
|
# Get current server name
|
||||||
|
current_server_name=$(jq -r '.inbounds[0].tls.server_name' /root/sbox/sbconfig_server.json)
|
||||||
|
# Get the UUID
|
||||||
|
uuid=$(jq -r '.inbounds[0].users[0].uuid' /root/sbox/sbconfig_server.json)
|
||||||
|
# Get the public key from the file, decoding it from base64
|
||||||
|
public_key=$(base64 --decode /root/sbox/public.key.b64)
|
||||||
|
# Get the short ID
|
||||||
|
short_id=$(jq -r '.inbounds[0].tls.reality.short_id[0]' /root/sbox/sbconfig_server.json)
|
||||||
|
# Retrieve the server IP address
|
||||||
|
server_ip=$(curl -s4m8 ip.sb -k) || server_ip=$(curl -s6m8 ip.sb -k)
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
show_notice "Reality 客户端通用链接"
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
server_link="vless://$uuid@$server_ip:$current_listen_port?encryption=none&flow=xtls-rprx-vision&security=reality&sni=$current_server_name&fp=chrome&pbk=$public_key&sid=$short_id&type=tcp&headerType=none#SING-BOX-Reality"
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
echo "$server_link"
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
# Print the server details
|
||||||
|
show_notice "Reality 客户端通用参数"
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
echo "服务器ip: $server_ip"
|
||||||
|
echo "监听端口: $current_listen_port"
|
||||||
|
echo "UUID: $uuid"
|
||||||
|
echo "域名SNI: $current_server_name"
|
||||||
|
echo "Public Key: $public_key"
|
||||||
|
echo "Short ID: $short_id"
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
# Get current listen port
|
||||||
|
hy_current_listen_port=$(jq -r '.inbounds[1].listen_port' /root/sbox/sbconfig_server.json)
|
||||||
|
# Get current server name
|
||||||
|
hy_current_server_name=$(openssl x509 -in /root/self-cert/cert.pem -noout -subject -nameopt RFC2253 | awk -F'=' '{print $NF}')
|
||||||
|
# Get the password
|
||||||
|
hy_password=$(jq -r '.inbounds[1].users[0].password' /root/sbox/sbconfig_server.json)
|
||||||
|
# Generate the link
|
||||||
|
|
||||||
|
hy2_server_link="hysteria2://$hy_password@$server_ip:$hy_current_listen_port?insecure=1&sni=$hy_current_server_name"
|
||||||
|
|
||||||
|
show_notice "Hysteria2 客户端通用链接"
|
||||||
|
echo ""
|
||||||
|
echo "官方 hysteria2通用链接格式"
|
||||||
|
echo ""
|
||||||
|
echo "$hy2_server_link"
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
# Print the server details
|
||||||
|
show_notice "Hysteria2 客户端通用参数"
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
echo "服务器ip: $server_ip"
|
||||||
|
echo "端口号: $hy_current_listen_port"
|
||||||
|
echo "password: $hy_password"
|
||||||
|
echo "域名SNI: $hy_current_server_name"
|
||||||
|
echo "跳过证书验证: True"
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
show_notice "Hysteria2 客户端yaml文件"
|
||||||
|
cat << EOF
|
||||||
|
|
||||||
|
server: $server_ip:$hy_current_listen_port
|
||||||
|
|
||||||
|
auth: $hy_password
|
||||||
|
|
||||||
|
tls:
|
||||||
|
sni: $hy_current_server_name
|
||||||
|
insecure: true
|
||||||
|
|
||||||
|
# 可自己修改对应带宽，不添加则默认为bbr，否则使用hy2的brutal拥塞控制
|
||||||
|
# bandwidth:
|
||||||
|
# up: 100 mbps
|
||||||
|
# down: 100 mbps
|
||||||
|
|
||||||
|
fastOpen: true
|
||||||
|
|
||||||
|
socks5:
|
||||||
|
listen: 127.0.0.1:50000
|
||||||
|
|
||||||
|
EOF
|
||||||
|
|
||||||
|
argo=$(base64 --decode /root/sbox/argo.txt.b64)
|
||||||
|
vmess_uuid=$(jq -r '.inbounds[2].users[0].uuid' /root/sbox/sbconfig_server.json)
|
||||||
|
ws_path=$(jq -r '.inbounds[2].transport.path' /root/sbox/sbconfig_server.json)
|
||||||
|
show_notice "vmess ws 通用链接参数"
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
echo "以下为vmess链接，替换speed.cloudflare.com为自己的优选ip可获得极致体验"
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
echo 'vmess://'$(echo '{"add":"speed.cloudflare.com","aid":"0","host":"'$argo'","id":"'$vmess_uuid'","net":"ws","path":"'$ws_path'","port":"443","ps":"sing-box-vmess-tls","tls":"tls","type":"none","v":"2"}' | base64 -w 0)
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
echo -e "端口 443 可改为 2053 2083 2087 2096 8443"
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
echo 'vmess://'$(echo '{"add":"speed.cloudflare.com","aid":"0","host":"'$argo'","id":"'$vmess_uuid'","net":"ws","path":"'$ws_path'","port":"80","ps":"sing-box-vmess","tls":"","type":"none","v":"2"}' | base64 -w 0)
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
echo -e "端口 80 可改为 8080 8880 2052 2082 2086 2095"
|
||||||
|
echo ""
|
||||||
|
echo ""
|
||||||
|
show_notice "clash-meta配置参数"
|
||||||
|
cat << EOF
|
||||||
|
|
||||||
|
port: 7890
|
||||||
|
allow-lan: true
|
||||||
|
mode: rule
|
||||||
|
log-level: info
|
||||||
|
unified-delay: true
|
||||||
|
global-client-fingerprint: chrome
|
||||||
|
ipv6: true
|
||||||
|
dns:
|
||||||
|
enable: true
|
||||||
|
listen: :53
|
||||||
|
ipv6: true
|
||||||
|
enhanced-mode: fake-ip
|
||||||
|
fake-ip-range: 198.18.0.1/16
|
||||||
|
default-nameserver:
|
||||||
|
- 223.5.5.5
|
||||||
|
- 8.8.8.8
|
||||||
|
nameserver:
|
||||||
|
- https://dns.alidns.com/dns-query
|
||||||
|
- https://doh.pub/dns-query
|
||||||
|
fallback:
|
||||||
|
- https://1.0.0.1/dns-query
|
||||||
|
- tls://dns.google
|
||||||
|
fallback-filter:
|
||||||
|
geoip: true
|
||||||
|
geoip-code: CN
|
||||||
|
ipcidr:
|
||||||
|
- 240.0.0.0/4
|
||||||
|
|
||||||
|
proxies:
|
||||||
|
- name: Reality
|
||||||
|
type: vless
|
||||||
|
server: $server_ip
|
||||||
|
port: $current_listen_port
|
||||||
|
uuid: $uuid
|
||||||
|
network: tcp
|
||||||
|
udp: true
|
||||||
|
tls: true
|
||||||
|
flow: xtls-rprx-vision
|
||||||
|
servername: $current_server_name
|
||||||
|
client-fingerprint: chrome
|
||||||
|
reality-opts:
|
||||||
|
public-key: $public_key
|
||||||
|
short-id: $short_id
|
||||||
|
|
||||||
|
- name: Hysteria2
|
||||||
|
type: hysteria2
|
||||||
|
server: $server_ip
|
||||||
|
port: $hy_current_listen_port
|
||||||
|
# up和down均不写或为0则使用BBR流控
|
||||||
|
# up: "30 Mbps" # 若不写单位，默认为 Mbps
|
||||||
|
# down: "200 Mbps" # 若不写单位，默认为 Mbps
|
||||||
|
password: $hy_password
|
||||||
|
sni: $hy_current_server_name
|
||||||
|
skip-cert-verify: true
|
||||||
|
alpn:
|
||||||
|
- h3
|
||||||
|
- name: Vmess
|
||||||
|
type: vmess
|
||||||
|
server: speed.cloudflare.com
|
||||||
|
port: 443
|
||||||
|
uuid: $vmess_uuid
|
||||||
|
alterId: 0
|
||||||
|
cipher: auto
|
||||||
|
udp: true
|
||||||
|
tls: true
|
||||||
|
client-fingerprint: chrome
|
||||||
|
skip-cert-verify: true
|
||||||
|
servername: $argo
|
||||||
|
network: ws
|
||||||
|
ws-opts:
|
||||||
|
path: $ws_path
|
||||||
|
headers:
|
||||||
|
Host: $argo
|
||||||
|
|
||||||
|
proxy-groups:
|
||||||
|
- name: 节点选择
|
||||||
|
type: select
|
||||||
|
proxies:
|
||||||
|
- 自动选择
|
||||||
|
- Reality
|
||||||
|
- Hysteria2
|
||||||
|
- Vmess
|
||||||
|
- DIRECT
|
||||||
|
|
||||||
|
- name: 自动选择
|
||||||
|
type: url-test #选出延迟最低的机场节点
|
||||||
|
proxies:
|
||||||
|
- Reality
|
||||||
|
- Hysteria2
|
||||||
|
- Vmess
|
||||||
|
url: "http://www.gstatic.com/generate_204"
|
||||||
|
interval: 300
|
||||||
|
tolerance: 50
|
||||||
|
|
||||||
|
|
||||||
|
rules:
|
||||||
|
- GEOIP,LAN,DIRECT
|
||||||
|
- GEOIP,CN,DIRECT
|
||||||
|
- MATCH,节点选择
|
||||||
|
|
||||||
|
EOF
|
||||||
|
|
||||||
|
show_notice "sing-box客户端配置参数"
|
||||||
|
cat << EOF
|
||||||
|
{
|
||||||
|
"dns": {
|
||||||
|
"servers": [
|
||||||
|
{
|
||||||
|
"tag": "remote",
|
||||||
|
"address": "https://1.1.1.1/dns-query",
|
||||||
|
"detour": "select"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"tag": "local",
|
||||||
|
"address": "https://223.5.5.5/dns-query",
|
||||||
|
"detour": "direct"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"address": "rcode://success",
|
||||||
|
"tag": "block"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"rules": [
|
||||||
|
{
|
||||||
|
"outbound": [
|
||||||
|
"any"
|
||||||
|
],
|
||||||
|
"server": "local"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"disable_cache": true,
|
||||||
|
"geosite": [
|
||||||
|
"category-ads-all"
|
||||||
|
],
|
||||||
|
"server": "block"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"clash_mode": "global",
|
||||||
|
"server": "remote"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"clash_mode": "direct",
|
||||||
|
"server": "local"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"geosite": "cn",
|
||||||
|
"server": "local"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"strategy": "prefer_ipv4"
|
||||||
|
},
|
||||||
|
"inbounds": [
|
||||||
|
{
|
||||||
|
"type": "tun",
|
||||||
|
"inet4_address": "172.19.0.1/30",
|
||||||
|
"inet6_address": "2001:0470:f9da:fdfa::1/64",
|
||||||
|
"sniff": true,
|
||||||
|
"sniff_override_destination": true,
|
||||||
|
"domain_strategy": "prefer_ipv4",
|
||||||
|
"stack": "mixed",
|
||||||
|
"strict_route": true,
|
||||||
|
"mtu": 9000,
|
||||||
|
"endpoint_independent_nat": true,
|
||||||
|
"auto_route": true
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "socks",
|
||||||
|
"tag": "socks-in",
|
||||||
|
"listen": "127.0.0.1",
|
||||||
|
"sniff": true,
|
||||||
|
"sniff_override_destination": true,
|
||||||
|
"domain_strategy": "prefer_ipv4",
|
||||||
|
"listen_port": 2333,
|
||||||
|
"users": []
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "mixed",
|
||||||
|
"tag": "mixed-in",
|
||||||
|
"sniff": true,
|
||||||
|
"sniff_override_destination": true,
|
||||||
|
"domain_strategy": "prefer_ipv4",
|
||||||
|
"listen": "127.0.0.1",
|
||||||
|
"listen_port": 2334,
|
||||||
|
"users": []
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"experimental": {
|
||||||
|
"clash_api": {
|
||||||
|
"external_controller": "127.0.0.1:9090",
|
||||||
|
"secret": "",
|
||||||
|
"store_selected": true
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"log": {
|
||||||
|
"disabled": false,
|
||||||
|
"level": "info",
|
||||||
|
"timestamp": true
|
||||||
|
},
|
||||||
|
"outbounds": [
|
||||||
|
{
|
||||||
|
"tag": "select",
|
||||||
|
"type": "selector",
|
||||||
|
"default": "urltest",
|
||||||
|
"outbounds": [
|
||||||
|
"urltest",
|
||||||
|
"sing-box-reality",
|
||||||
|
"sing-box-hysteria2",
|
||||||
|
"sing-box-vmess"
|
||||||
|
]
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "vless",
|
||||||
|
"tag": "sing-box-reality",
|
||||||
|
"uuid": "$uuid",
|
||||||
|
"flow": "xtls-rprx-vision",
|
||||||
|
"packet_encoding": "xudp",
|
||||||
|
"server": "$server_ip",
|
||||||
|
"server_port": $current_listen_port,
|
||||||
|
"tls": {
|
||||||
|
"enabled": true,
|
||||||
|
"server_name": "$current_server_name",
|
||||||
|
"utls": {
|
||||||
|
"enabled": true,
|
||||||
|
"fingerprint": "chrome"
|
||||||
|
},
|
||||||
|
"reality": {
|
||||||
|
"enabled": true,
|
||||||
|
"public_key": "$public_key",
|
||||||
|
"short_id": "$short_id"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "hysteria2",
|
||||||
|
"server": "$server_ip",
|
||||||
|
"server_port": $hy_current_listen_port,
|
||||||
|
"tag": "sing-box-hysteria2",
|
||||||
|
|
||||||
|
"up_mbps": 100,
|
||||||
|
"down_mbps": 100,
|
||||||
|
"password": "$hy_password",
|
||||||
|
"tls": {
|
||||||
|
"enabled": true,
|
||||||
|
"server_name": "$hy_current_server_name",
|
||||||
|
"insecure": true,
|
||||||
|
"alpn": [
|
||||||
|
"h3"
|
||||||
|
]
|
||||||
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"server": "speed.cloudflare.com",
|
||||||
|
"server_port": 443,
|
||||||
|
"tag": "sing-box-vmess",
|
||||||
|
"tls": {
|
||||||
|
"enabled": true,
|
||||||
|
"server_name": "$argo",
|
||||||
|
"insecure": true,
|
||||||
|
"utls": {
|
||||||
|
"enabled": true,
|
||||||
|
"fingerprint": "chrome"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"transport": {
|
||||||
|
"headers": {
|
||||||
|
"Host": [
|
||||||
|
"$argo"
|
||||||
|
]
|
||||||
|
},
|
||||||
|
"path": "$ws_path",
|
||||||
|
"type": "ws"
|
||||||
|
},
|
||||||
|
"type": "vmess",
|
||||||
|
"security": "auto",
|
||||||
|
"uuid": "$vmess_uuid"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"tag": "direct",
|
||||||
|
"type": "direct"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"tag": "block",
|
||||||
|
"type": "block"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"tag": "dns-out",
|
||||||
|
"type": "dns"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"tag": "urltest",
|
||||||
|
"type": "urltest",
|
||||||
|
"outbounds": [
|
||||||
|
"sing-box-reality",
|
||||||
|
"sing-box-hysteria2",
|
||||||
|
"sing-box-vmess"
|
||||||
|
]
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"route": {
|
||||||
|
"auto_detect_interface": true,
|
||||||
|
"rules": [
|
||||||
|
{
|
||||||
|
"geosite": "category-ads-all",
|
||||||
|
"outbound": "block"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"outbound": "dns-out",
|
||||||
|
"protocol": "dns"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"clash_mode": "direct",
|
||||||
|
"outbound": "direct"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"clash_mode": "global",
|
||||||
|
"outbound": "select"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"geoip": [
|
||||||
|
"cn",
|
||||||
|
"private"
|
||||||
|
],
|
||||||
|
"outbound": "direct"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"geosite": "geolocation-!cn",
|
||||||
|
"outbound": "select"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"geosite": "cn",
|
||||||
|
"outbound": "direct"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"geoip": {
|
||||||
|
"download_detour": "select"
|
||||||
|
},
|
||||||
|
"geosite": {
|
||||||
|
"download_detour": "select"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
EOF
|
||||||
|
|
||||||
|
}
|
||||||
|
uninstall_singbox() {
|
||||||
|
echo "Uninstalling..."
|
||||||
|
# Stop and disable sing-box service
|
||||||
|
systemctl stop sing-box
|
||||||
|
systemctl disable sing-box > /dev/null 2>&1
|
||||||
|
|
||||||
|
# Remove files
|
||||||
|
rm /etc/systemd/system/sing-box.service
|
||||||
|
rm /root/sbox/sbconfig_server.json
|
||||||
|
rm /root/sbox/sing-box
|
||||||
|
rm /root/sbox/cloudflared-linux
|
||||||
|
rm /root/sbox/argo.txt.b64
|
||||||
|
rm /root/sbox/public.key.b64
|
||||||
|
rm /root/self-cert/private.key
|
||||||
|
rm /root/self-cert/cert.pem
|
||||||
|
rm -rf /root/self-cert/
|
||||||
|
rm -rf /root/sbox/
|
||||||
|
echo "DONE!"
|
||||||
|
}
|
||||||
|
install_base
|
||||||
|
|
||||||
|
# Check if reality.json, sing-box, and sing-box.service already exist
|
||||||
|
if [ -f "/root/sbox/sbconfig_server.json" ] && [ -f "/root/sbox/sing-box" ] && [ -f "/root/sbox/public.key.b64" ] && [ -f "/root/sbox/argo.txt.b64" ] && [ -f "/etc/systemd/system/sing-box.service" ]; then
|
||||||
|
|
||||||
|
echo "sing-box-reality-hysteria2已经安装"
|
||||||
|
echo ""
|
||||||
|
echo "请选择选项:"
|
||||||
|
echo ""
|
||||||
|
echo "1. 重新安装"
|
||||||
|
echo "2. 修改配置"
|
||||||
|
echo "3. 显示客户端配置"
|
||||||
|
echo "4. 卸载"
|
||||||
|
echo "5. 更新sing-box内核"
|
||||||
|
echo "6. 手动重启cloudflared（vps重启之后需要执行一次这个来更新vmess）"
|
||||||
|
echo ""
|
||||||
|
read -p "Enter your choice (1-6): " choice
|
||||||
|
|
||||||
|
case $choice in
|
||||||
|
1)
|
||||||
|
show_notice "Reinstalling..."
|
||||||
|
# Uninstall previous installation
|
||||||
|
systemctl stop sing-box
|
||||||
|
systemctl disable sing-box > /dev/null 2>&1
|
||||||
|
rm /etc/systemd/system/sing-box.service
|
||||||
|
rm /root/sbox/sbconfig_server.json
|
||||||
|
rm /root/sbox/sing-box
|
||||||
|
rm /root/sbox/cloudflared-linux
|
||||||
|
rm /root/sbox/argo.txt.b64
|
||||||
|
rm /root/sbox/public.key.b64
|
||||||
|
rm /root/self-cert/private.key
|
||||||
|
rm /root/self-cert/cert.pem
|
||||||
|
rm -rf /root/self-cert/
|
||||||
|
rm -rf /root/sbox/
|
||||||
|
|
||||||
|
# Proceed with installation
|
||||||
|
;;
|
||||||
|
2)
|
||||||
|
#Reality modify
|
||||||
|
show_notice "开始修改reality端口号和域名"
|
||||||
|
# Get current listen port
|
||||||
|
current_listen_port=$(jq -r '.inbounds[0].listen_port' /root/sbox/sbconfig_server.json)
|
||||||
|
|
||||||
|
# Ask for listen port
|
||||||
|
read -p "请输入想要修改的端口号 (当前端口号为 $current_listen_port): " listen_port
|
||||||
|
listen_port=${listen_port:-$current_listen_port}
|
||||||
|
|
||||||
|
# Get current server name
|
||||||
|
current_server_name=$(jq -r '.inbounds[0].tls.server_name' /root/sbox/sbconfig_server.json)
|
||||||
|
|
||||||
|
# Ask for server name (sni)
|
||||||
|
read -p "请输入想要偷取的域名 (当前域名为 $current_server_name): " server_name
|
||||||
|
server_name=${server_name:-$current_server_name}
|
||||||
|
echo ""
|
||||||
|
# modifying hysteria2 configuration
|
||||||
|
show_notice "开始修改hysteria2端口号"
|
||||||
|
echo ""
|
||||||
|
# Get current listen port
|
||||||
|
hy_current_listen_port=$(jq -r '.inbounds[1].listen_port' /root/sbox/sbconfig_server.json)
|
||||||
|
|
||||||
|
# Ask for listen port
|
||||||
|
read -p "请属于想要修改的端口号 (当前端口号为 $hy_current_listen_port): " hy_listen_port
|
||||||
|
hy_listen_port=${hy_listen_port:-$hy_current_listen_port}
|
||||||
|
|
||||||
|
# Modify reality.json with new settings
|
||||||
|
jq --arg listen_port "$listen_port" --arg server_name "$server_name" --arg hy_listen_port "$hy_listen_port" '.inbounds[1].listen_port = ($hy_listen_port | tonumber) | .inbounds[0].listen_port = ($listen_port | tonumber) | .inbounds[0].tls.server_name = $server_name | .inbounds[0].tls.reality.handshake.server = $server_name' /root/sbox/sbconfig_server.json > /root/sb_modified.json
|
||||||
|
mv /root/sb_modified.json /root/sbox/sbconfig_server.json
|
||||||
|
|
||||||
|
# Restart sing-box service
|
||||||
|
systemctl restart sing-box
|
||||||
|
# show client configuration
|
||||||
|
show_client_configuration
|
||||||
|
exit 0
|
||||||
|
;;
|
||||||
|
3)
|
||||||
|
# show client configuration
|
||||||
|
show_client_configuration
|
||||||
|
exit 0
|
||||||
|
;;
|
||||||
|
4)
|
||||||
|
uninstall_singbox
|
||||||
|
exit 0
|
||||||
|
;;
|
||||||
|
5)
|
||||||
|
show_notice "Update Sing-box..."
|
||||||
|
download_singbox
|
||||||
|
# Check configuration and start the service
|
||||||
|
if /root/sbox/sing-box check -c /root/sbox/sbconfig_server.json; then
|
||||||
|
echo "Configuration checked successfully. Starting sing-box service..."
|
||||||
|
systemctl daemon-reload
|
||||||
|
systemctl enable sing-box > /dev/null 2>&1
|
||||||
|
systemctl start sing-box
|
||||||
|
systemctl restart sing-box
|
||||||
|
fi
|
||||||
|
echo ""
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
6)
|
||||||
|
regenarte_cloudflared_argo
|
||||||
|
echo "重新启动完成，查看新的vmess客户端信息"
|
||||||
|
show_client_configuration
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "Invalid choice. Exiting."
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
fi
|
||||||
|
|
||||||
|
mkdir -p "/root/sbox/"
|
||||||
|
|
||||||
|
download_singbox
|
||||||
|
|
||||||
|
download_cloudflared
|
||||||
|
|
||||||
|
# reality
|
||||||
|
echo "开始配置Reality"
|
||||||
|
echo ""
|
||||||
|
# Generate key pair
|
||||||
|
echo "自动生成基本参数"
|
||||||
|
echo ""
|
||||||
|
key_pair=$(/root/sbox/sing-box generate reality-keypair)
|
||||||
|
echo "Key pair生成完成"
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
# Extract private key and public key
|
||||||
|
private_key=$(echo "$key_pair" | awk '/PrivateKey/ {print $2}' | tr -d '"')
|
||||||
|
public_key=$(echo "$key_pair" | awk '/PublicKey/ {print $2}' | tr -d '"')
|
||||||
|
|
||||||
|
# Save the public key in a file using base64 encoding
|
||||||
|
echo "$public_key" | base64 > /root/sbox/public.key.b64
|
||||||
|
|
||||||
|
# Generate necessary values
|
||||||
|
uuid=$(/root/sbox/sing-box generate uuid)
|
||||||
|
short_id=$(/root/sbox/sing-box generate rand --hex 8)
|
||||||
|
echo "uuid和短id 生成完成"
|
||||||
|
echo ""
|
||||||
|
# Ask for listen port
|
||||||
|
read -p "请输入Reality端口号 (default: 443): " listen_port
|
||||||
|
listen_port=${listen_port:-443}
|
||||||
|
echo ""
|
||||||
|
# Ask for server name (sni)
|
||||||
|
read -p "请输入想要偷取的域名 (default: itunes.apple.com): " server_name
|
||||||
|
server_name=${server_name:-itunes.apple.com}
|
||||||
|
echo ""
|
||||||
|
# hysteria2
|
||||||
|
echo "开始配置hysteria2"
|
||||||
|
echo ""
|
||||||
|
# Generate hysteria necessary values
|
||||||
|
hy_password=$(/root/sbox/sing-box generate rand --hex 8)
|
||||||
|
|
||||||
|
# Ask for listen port
|
||||||
|
read -p "请输入hysteria2监听端口 (default: 8443): " hy_listen_port
|
||||||
|
hy_listen_port=${hy_listen_port:-8443}
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
# Ask for self-signed certificate domain
|
||||||
|
read -p "输入自签证书域名 (default: bing.com): " hy_server_name
|
||||||
|
hy_server_name=${hy_server_name:-bing.com}
|
||||||
|
mkdir -p /root/self-cert/ && openssl ecparam -genkey -name prime256v1 -out /root/self-cert/private.key && openssl req -new -x509 -days 36500 -key /root/self-cert/private.key -out /root/self-cert/cert.pem -subj "/CN=${hy_server_name}"
|
||||||
|
echo ""
|
||||||
|
echo "自签证书生成完成"
|
||||||
|
echo ""
|
||||||
|
# vmess ws
|
||||||
|
echo "开始配置vmess"
|
||||||
|
echo ""
|
||||||
|
# Generate hysteria necessary values
|
||||||
|
vmess_uuid=$(/root/sbox/sing-box generate uuid)
|
||||||
|
read -p "请输入vmess端口，默认为18443(和tunnel通信用不会暴露在外): " vmess_port
|
||||||
|
vmess_port=${vmess_port:-18443}
|
||||||
|
echo ""
|
||||||
|
read -p "ws路径 (无需加斜杠,默认随机生成): " ws_path
|
||||||
|
ws_path=${ws_path:-$(/root/sbox/sing-box generate rand --hex 6)}
|
||||||
|
|
||||||
|
pid=$(pgrep -f cloudflared)
|
||||||
|
if [ -n "$pid" ]; then
|
||||||
|
# 终止进程
|
||||||
|
kill "$pid"
|
||||||
|
fi
|
||||||
|
|
||||||
|
#生成地址
|
||||||
|
/root/sbox/cloudflared-linux tunnel --url http://localhost:$vmess_port --no-autoupdate --edge-ip-version auto --protocol h2mux>argo.log 2>&1 &
|
||||||
|
sleep 2
|
||||||
|
clear
|
||||||
|
echo 等待cloudflare argo生成地址
|
||||||
|
sleep 5
|
||||||
|
#连接到域名
|
||||||
|
argo=$(cat argo.log | grep trycloudflare.com | awk 'NR==2{print}' | awk -F// '{print $2}' | awk '{print $1}')
|
||||||
|
echo "$argo" | base64 > /root/sbox/argo.txt.b64
|
||||||
|
rm -rf argo.log
|
||||||
|
|
||||||
|
|
||||||
|
# Retrieve the server IP address
|
||||||
|
server_ip=$(curl -s4m8 ip.sb -k) || server_ip=$(curl -s6m8 ip.sb -k)
|
||||||
|
|
||||||
|
# Create reality.json using jq
|
||||||
|
jq -n --arg listen_port "$listen_port" --arg vmess_port "$vmess_port" --arg vmess_uuid "$vmess_uuid" --arg ws_path "$ws_path" --arg server_name "$server_name" --arg private_key "$private_key" --arg short_id "$short_id" --arg uuid "$uuid" --arg hy_listen_port "$hy_listen_port" --arg hy_password "$hy_password" --arg server_ip "$server_ip" '{
|
||||||
|
"log": {
|
||||||
|
"disabled": false,
|
||||||
|
"level": "info",
|
||||||
|
"timestamp": true
|
||||||
|
},
|
||||||
|
"inbounds": [
|
||||||
|
{
|
||||||
|
"type": "vless",
|
||||||
|
"tag": "vless-in",
|
||||||
|
"listen": "::",
|
||||||
|
"listen_port": ($listen_port | tonumber),
|
||||||
|
"users": [
|
||||||
|
{
|
||||||
|
"uuid": $uuid,
|
||||||
|
"flow": "xtls-rprx-vision"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"tls": {
|
||||||
|
"enabled": true,
|
||||||
|
"server_name": $server_name,
|
||||||
|
"reality": {
|
||||||
|
"enabled": true,
|
||||||
|
"handshake": {
|
||||||
|
"server": $server_name,
|
||||||
|
"server_port": 443
|
||||||
|
},
|
||||||
|
"private_key": $private_key,
|
||||||
|
"short_id": [$short_id]
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "hysteria2",
|
||||||
|
"tag": "hy2-in",
|
||||||
|
"listen": "::",
|
||||||
|
"listen_port": ($hy_listen_port | tonumber),
|
||||||
|
"users": [
|
||||||
|
{
|
||||||
|
"password": $hy_password
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"tls": {
|
||||||
|
"enabled": true,
|
||||||
|
"alpn": [
|
||||||
|
"h3"
|
||||||
|
],
|
||||||
|
"certificate_path": "/root/self-cert/cert.pem",
|
||||||
|
"key_path": "/root/self-cert/private.key"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "vmess",
|
||||||
|
"tag": "vmess-in",
|
||||||
|
"listen": "::",
|
||||||
|
"listen_port": ($vmess_port | tonumber),
|
||||||
|
"users": [
|
||||||
|
{
|
||||||
|
"uuid": $vmess_uuid,
|
||||||
|
"alterId": 0
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"transport": {
|
||||||
|
"type": "ws",
|
||||||
|
"path": $ws_path
|
||||||
|
}
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"outbounds": [
|
||||||
|
{
|
||||||
|
"type": "direct",
|
||||||
|
"tag": "direct"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "block",
|
||||||
|
"tag": "block"
|
||||||
|
}
|
||||||
|
]
|
||||||
|
}' > /root/sbox/sbconfig_server.json
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
# Create sing-box.service
|
||||||
|
cat > /etc/systemd/system/sing-box.service <<EOF
|
||||||
|
[Unit]
|
||||||
|
After=network.target nss-lookup.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
User=root
|
||||||
|
WorkingDirectory=/root
|
||||||
|
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
|
||||||
|
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
|
||||||
|
ExecStart=/root/sbox/sing-box run -c /root/sbox/sbconfig_server.json
|
||||||
|
ExecReload=/bin/kill -HUP \$MAINPID
|
||||||
|
Restart=on-failure
|
||||||
|
RestartSec=10
|
||||||
|
LimitNOFILE=infinity
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
EOF
|
||||||
|
|
||||||
|
|
||||||
|
# Check configuration and start the service
|
||||||
|
if /root/sbox/sing-box check -c /root/sbox/sbconfig_server.json; then
|
||||||
|
echo "Configuration checked successfully. Starting sing-box service..."
|
||||||
|
systemctl daemon-reload
|
||||||
|
systemctl enable sing-box > /dev/null 2>&1
|
||||||
|
systemctl start sing-box
|
||||||
|
systemctl restart sing-box
|
||||||
|
|
||||||
|
show_client_configuration
|
||||||
|
|
||||||
|
|
||||||
|
else
|
||||||
|
echo "Error in configuration. Aborting"
|
||||||
|
fi
|
||||||
Loading…
Reference in New Issue
Block a user