diff --git a/sh/reality_hy2_ws.sh b/sh/reality_hy2_ws.sh
new file mode 100644
index 0000000..b89b729
--- /dev/null
+++ b/sh/reality_hy2_ws.sh
@@ -0,0 +1,923 @@
+#!/bin/bash
+# https://github.com/zsh15953/sing-box-reality-hysteria2
+# reality和hysteria2 wss三合一脚本
+# Function to print characters with delay
+print_with_delay() {
+    text="$1"
+    delay="$2"
+    for ((i = 0; i < ${#text}; i++)); do
+        echo -n "${text:$i:1}"
+        sleep $delay
+    done
+    echo
+}
+#notice
+show_notice() {
+    local message="$1"
+
+    echo "#######################################################################################################################"
+    echo "                                                                                                                       "
+    echo "                                ${message}                                                                             "
+    echo "                                                                                                                       "
+    echo "#######################################################################################################################"
+}
+# Introduction animation
+print_with_delay "sing-reality-hy2-wss-box by 绵阿羊" 0.05
+echo ""
+echo ""
+# install base
+install_base(){
+  # Check if jq is installed, and install it if not
+  if ! command -v jq &> /dev/null; then
+      echo "jq is not installed. Installing..."
+      if [ -n "$(command -v apt)" ]; then
+          apt update > /dev/null 2>&1
+          apt install -y jq > /dev/null 2>&1
+      elif [ -n "$(command -v yum)" ]; then
+          yum install -y epel-release
+          yum install -y jq
+      elif [ -n "$(command -v dnf)" ]; then
+          dnf install -y jq
+      else
+          echo "Cannot install jq. Please install jq manually and rerun the script."
+          exit 1
+      fi
+  fi
+}
+# regenrate cloudflared argo
+regenarte_cloudflared_argo(){
+  pid=$(pgrep -f cloudflared)
+  if [ -n "$pid" ]; then
+    # 终止进程
+    kill "$pid"
+  fi
+
+  vmess_port=$(jq -r '.inbounds[2].listen_port' /root/sbox/sbconfig_server.json)
+  #生成地址
+  /root/sbox/cloudflared-linux tunnel --url http://localhost:$vmess_port --no-autoupdate --edge-ip-version auto --protocol h2mux>argo.log 2>&1 &
+  sleep 2
+  clear
+  echo 等待cloudflare argo生成地址
+  sleep 5
+  #连接到域名
+  argo=$(cat argo.log | grep trycloudflare.com | awk 'NR==2{print}' | awk -F// '{print $2}' | awk '{print $1}')
+  echo "$argo" | base64 > /root/sbox/argo.txt.b64
+  rm -rf argo.log
+
+  }
+# download singbox and cloudflared
+download_singbox(){
+  arch=$(uname -m)
+  echo "Architecture: $arch"
+  # Map architecture names
+  case ${arch} in
+      x86_64)
+          arch="amd64"
+          ;;
+      aarch64)
+          arch="arm64"
+          ;;
+      armv7l)
+          arch="armv7"
+          ;;
+  esac
+  # Fetch the latest (including pre-releases) release version number from GitHub API
+  # 正式版
+  #latest_version_tag=$(curl -s "https://gitee.com/api/v5/repos/peace-talent/s-box/releases" | grep -Po '"tag_name": "\K.*?(?=")' | head -n 1)
+  #beta版本
+  latest_version_tag=$(curl -s "https://gitee.com/api/v5/repos/peace-talent/s-box/releases" | grep -Po '"tag_name": "\K.*?(?=")' | sort -V | tail -n 1)
+  latest_version=${latest_version_tag#v}  # Remove 'v' prefix from version number
+  echo "Latest version: $latest_version"
+  # Detect server architecture
+  # Prepare package names
+  package_name="sing-box-${latest_version}-linux-${arch}"
+  # Prepare download URL
+  url="https://gitee.com/peace-talent/s-box/releases/download/${latest_version_tag}/${package_name}.tar.gz"
+  # Download the latest release package (.tar.gz) from GitHub
+  curl -sLo "/root/${package_name}.tar.gz" "$url"
+
+  # Extract the package and move the binary to /root
+  tar -xzf "/root/${package_name}.tar.gz" -C /root
+  mv "/root/${package_name}/sing-box" /root/sbox
+
+  # Cleanup the package
+  rm -r "/root/${package_name}.tar.gz" "/root/${package_name}"
+
+  # Set the permissions
+  chown root:root /root/sbox/sing-box
+  chmod +x /root/sbox/sing-box
+}
+
+# download singbox and cloudflared
+download_cloudflared(){
+  arch=$(uname -m)
+  # Map architecture names
+  case ${arch} in
+      x86_64)
+          cf_arch="amd64"
+          ;;
+      aarch64)
+          cf_arch="arm64"
+          ;;
+      armv7l)
+          cf_arch="arm"
+          ;;
+  esac
+
+  # install cloudflared linux
+  cf_url="https://ghproxy.lvedong.eu.org/https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-${cf_arch}"
+  curl -sLo "/root/sbox/cloudflared-linux" "$cf_url"
+  chmod +x /root/sbox/cloudflared-linux
+  echo ""
+}
+
+
+# client configuration
+show_client_configuration() {
+  # Get current listen port
+  current_listen_port=$(jq -r '.inbounds[0].listen_port' /root/sbox/sbconfig_server.json)
+  # Get current server name
+  current_server_name=$(jq -r '.inbounds[0].tls.server_name' /root/sbox/sbconfig_server.json)
+  # Get the UUID
+  uuid=$(jq -r '.inbounds[0].users[0].uuid' /root/sbox/sbconfig_server.json)
+  # Get the public key from the file, decoding it from base64
+  public_key=$(base64 --decode /root/sbox/public.key.b64)
+  # Get the short ID
+  short_id=$(jq -r '.inbounds[0].tls.reality.short_id[0]' /root/sbox/sbconfig_server.json)
+  # Retrieve the server IP address
+  server_ip=$(curl -s4m8 ip.sb -k) || server_ip=$(curl -s6m8 ip.sb -k)
+  echo ""
+  echo ""
+  show_notice "Reality 客户端通用链接" 
+  echo ""
+  echo ""
+  server_link="vless://$uuid@$server_ip:$current_listen_port?encryption=none&flow=xtls-rprx-vision&security=reality&sni=$current_server_name&fp=chrome&pbk=$public_key&sid=$short_id&type=tcp&headerType=none#SING-BOX-Reality"
+  echo ""
+  echo ""
+  echo "$server_link"
+  echo ""
+  echo ""
+  # Print the server details
+  show_notice "Reality 客户端通用参数" 
+  echo ""
+  echo ""
+  echo "服务器ip: $server_ip"
+  echo "监听端口: $current_listen_port"
+  echo "UUID: $uuid"
+  echo "域名SNI: $current_server_name"
+  echo "Public Key: $public_key"
+  echo "Short ID: $short_id"
+  echo ""
+  echo ""
+  # Get current listen port
+  hy_current_listen_port=$(jq -r '.inbounds[1].listen_port' /root/sbox/sbconfig_server.json)
+  # Get current server name
+  hy_current_server_name=$(openssl x509 -in /root/self-cert/cert.pem -noout -subject -nameopt RFC2253 | awk -F'=' '{print $NF}')
+  # Get the password
+  hy_password=$(jq -r '.inbounds[1].users[0].password' /root/sbox/sbconfig_server.json)
+  # Generate the link
+  
+  hy2_server_link="hysteria2://$hy_password@$server_ip:$hy_current_listen_port?insecure=1&sni=$hy_current_server_name"
+
+  show_notice "Hysteria2 客户端通用链接" 
+  echo ""
+  echo "官方 hysteria2通用链接格式"
+  echo ""
+  echo "$hy2_server_link"
+  echo ""
+  echo ""   
+  # Print the server details
+  show_notice "Hysteria2 客户端通用参数" 
+  echo ""
+  echo ""  
+  echo "服务器ip: $server_ip"
+  echo "端口号: $hy_current_listen_port"
+  echo "password: $hy_password"
+  echo "域名SNI: $hy_current_server_name"
+  echo "跳过证书验证: True"
+  echo ""
+  echo ""
+  show_notice "Hysteria2 客户端yaml文件" 
+cat << EOF
+
+server: $server_ip:$hy_current_listen_port
+
+auth: $hy_password
+
+tls:
+  sni: $hy_current_server_name
+  insecure: true
+
+# 可自己修改对应带宽，不添加则默认为bbr，否则使用hy2的brutal拥塞控制
+# bandwidth:
+#   up: 100 mbps
+#   down: 100 mbps
+
+fastOpen: true
+
+socks5:
+  listen: 127.0.0.1:50000
+
+EOF
+
+  argo=$(base64 --decode /root/sbox/argo.txt.b64)
+  vmess_uuid=$(jq -r '.inbounds[2].users[0].uuid' /root/sbox/sbconfig_server.json)
+  ws_path=$(jq -r '.inbounds[2].transport.path' /root/sbox/sbconfig_server.json)
+  show_notice "vmess ws 通用链接参数" 
+  echo ""
+  echo ""
+  echo "以下为vmess链接，替换speed.cloudflare.com为自己的优选ip可获得极致体验"
+  echo ""
+  echo ""
+  echo 'vmess://'$(echo '{"add":"speed.cloudflare.com","aid":"0","host":"'$argo'","id":"'$vmess_uuid'","net":"ws","path":"'$ws_path'","port":"443","ps":"sing-box-vmess-tls","tls":"tls","type":"none","v":"2"}' | base64 -w 0)
+  echo ""
+  echo ""
+  echo -e "端口 443 可改为 2053 2083 2087 2096 8443"
+  echo ""
+  echo ""
+  echo 'vmess://'$(echo '{"add":"speed.cloudflare.com","aid":"0","host":"'$argo'","id":"'$vmess_uuid'","net":"ws","path":"'$ws_path'","port":"80","ps":"sing-box-vmess","tls":"","type":"none","v":"2"}' | base64 -w 0)
+  echo ""
+  echo ""
+  echo -e "端口 80 可改为 8080 8880 2052 2082 2086 2095" 
+  echo ""
+  echo ""
+  show_notice "clash-meta配置参数"
+cat << EOF
+
+port: 7890
+allow-lan: true
+mode: rule
+log-level: info
+unified-delay: true
+global-client-fingerprint: chrome
+ipv6: true
+dns:
+  enable: true
+  listen: :53
+  ipv6: true
+  enhanced-mode: fake-ip
+  fake-ip-range: 198.18.0.1/16
+  default-nameserver: 
+    - 223.5.5.5
+    - 8.8.8.8
+  nameserver:
+    - https://dns.alidns.com/dns-query
+    - https://doh.pub/dns-query
+  fallback:
+    - https://1.0.0.1/dns-query
+    - tls://dns.google
+  fallback-filter:
+    geoip: true
+    geoip-code: CN
+    ipcidr:
+      - 240.0.0.0/4
+
+proxies:        
+  - name: Reality
+    type: vless
+    server: $server_ip
+    port: $current_listen_port
+    uuid: $uuid
+    network: tcp
+    udp: true
+    tls: true
+    flow: xtls-rprx-vision
+    servername: $current_server_name
+    client-fingerprint: chrome
+    reality-opts:
+      public-key: $public_key
+      short-id: $short_id
+
+  - name: Hysteria2
+    type: hysteria2
+    server: $server_ip
+    port: $hy_current_listen_port
+    #  up和down均不写或为0则使用BBR流控
+    # up: "30 Mbps" # 若不写单位，默认为 Mbps
+    # down: "200 Mbps" # 若不写单位，默认为 Mbps
+    password: $hy_password
+    sni: $hy_current_server_name
+    skip-cert-verify: true
+    alpn:
+      - h3
+  - name: Vmess
+    type: vmess
+    server: speed.cloudflare.com
+    port: 443
+    uuid: $vmess_uuid
+    alterId: 0
+    cipher: auto
+    udp: true
+    tls: true
+    client-fingerprint: chrome  
+    skip-cert-verify: true
+    servername: $argo
+    network: ws
+    ws-opts:
+      path: $ws_path
+      headers:
+        Host: $argo
+
+proxy-groups:
+  - name: 节点选择
+    type: select
+    proxies:
+      - 自动选择
+      - Reality
+      - Hysteria2
+      - Vmess
+      - DIRECT
+
+  - name: 自动选择
+    type: url-test #选出延迟最低的机场节点
+    proxies:
+      - Reality
+      - Hysteria2
+      - Vmess
+    url: "http://www.gstatic.com/generate_204"
+    interval: 300
+    tolerance: 50
+
+
+rules:
+    - GEOIP,LAN,DIRECT
+    - GEOIP,CN,DIRECT
+    - MATCH,节点选择
+
+EOF
+
+show_notice "sing-box客户端配置参数"
+cat << EOF
+{
+    "dns": {
+        "servers": [
+            {
+                "tag": "remote",
+                "address": "https://1.1.1.1/dns-query",
+                "detour": "select"
+            },
+            {
+                "tag": "local",
+                "address": "https://223.5.5.5/dns-query",
+                "detour": "direct"
+            },
+            {
+                "address": "rcode://success",
+                "tag": "block"
+            }
+        ],
+        "rules": [
+            {
+                "outbound": [
+                    "any"
+                ],
+                "server": "local"
+            },
+            {
+                "disable_cache": true,
+                "geosite": [
+                    "category-ads-all"
+                ],
+                "server": "block"
+            },
+            {
+                "clash_mode": "global",
+                "server": "remote"
+            },
+            {
+                "clash_mode": "direct",
+                "server": "local"
+            },
+            {
+                "geosite": "cn",
+                "server": "local"
+            }
+        ],
+        "strategy": "prefer_ipv4"
+    },
+    "inbounds": [
+        {
+            "type": "tun",
+            "inet4_address": "172.19.0.1/30",
+            "inet6_address": "2001:0470:f9da:fdfa::1/64",
+            "sniff": true,
+            "sniff_override_destination": true,
+            "domain_strategy": "prefer_ipv4",
+            "stack": "mixed",
+            "strict_route": true,
+            "mtu": 9000,
+            "endpoint_independent_nat": true,
+            "auto_route": true
+        },
+        {
+            "type": "socks",
+            "tag": "socks-in",
+            "listen": "127.0.0.1",
+            "sniff": true,
+            "sniff_override_destination": true,
+            "domain_strategy": "prefer_ipv4",
+            "listen_port": 2333,
+            "users": []
+        },
+        {
+            "type": "mixed",
+            "tag": "mixed-in",
+            "sniff": true,
+            "sniff_override_destination": true,
+            "domain_strategy": "prefer_ipv4",
+            "listen": "127.0.0.1",
+            "listen_port": 2334,
+            "users": []
+        }
+    ],
+  "experimental": {
+    "clash_api": {
+      "external_controller": "127.0.0.1:9090",
+      "secret": "",
+      "store_selected": true
+    }
+  },
+  "log": {
+    "disabled": false,
+    "level": "info",
+    "timestamp": true
+  },
+  "outbounds": [
+    {
+      "tag": "select",
+      "type": "selector",
+      "default": "urltest",
+      "outbounds": [
+        "urltest",
+        "sing-box-reality",
+        "sing-box-hysteria2",
+        "sing-box-vmess"
+      ]
+    },
+    {
+      "type": "vless",
+      "tag": "sing-box-reality",
+      "uuid": "$uuid",
+      "flow": "xtls-rprx-vision",
+      "packet_encoding": "xudp",
+      "server": "$server_ip",
+      "server_port": $current_listen_port,
+      "tls": {
+        "enabled": true,
+        "server_name": "$current_server_name",
+        "utls": {
+          "enabled": true,
+          "fingerprint": "chrome"
+        },
+        "reality": {
+          "enabled": true,
+          "public_key": "$public_key",
+          "short_id": "$short_id"
+        }
+      }
+    },
+    {
+            "type": "hysteria2",
+            "server": "$server_ip",
+            "server_port": $hy_current_listen_port,
+            "tag": "sing-box-hysteria2",
+            
+            "up_mbps": 100,
+            "down_mbps": 100,
+            "password": "$hy_password",
+            "tls": {
+                "enabled": true,
+                "server_name": "$hy_current_server_name",
+                "insecure": true,
+                "alpn": [
+                    "h3"
+                ]
+            }
+        },
+        {
+            "server": "speed.cloudflare.com",
+            "server_port": 443,
+            "tag": "sing-box-vmess",
+            "tls": {
+                "enabled": true,
+                "server_name": "$argo",
+                "insecure": true,
+                "utls": {
+                    "enabled": true,
+                    "fingerprint": "chrome"
+                }
+            },
+            "transport": {
+                "headers": {
+                    "Host": [
+                        "$argo"
+                    ]
+                },
+                "path": "$ws_path",
+                "type": "ws"
+            },
+            "type": "vmess",
+            "security": "auto",
+            "uuid": "$vmess_uuid"
+        },
+    {
+      "tag": "direct",
+      "type": "direct"
+    },
+    {
+      "tag": "block",
+      "type": "block"
+    },
+    {
+      "tag": "dns-out",
+      "type": "dns"
+    },
+    {
+      "tag": "urltest",
+      "type": "urltest",
+      "outbounds": [
+        "sing-box-reality",
+        "sing-box-hysteria2",
+        "sing-box-vmess"
+      ]
+    }
+  ],
+  "route": {
+    "auto_detect_interface": true,
+    "rules": [
+      {
+        "geosite": "category-ads-all",
+        "outbound": "block"
+      },
+      {
+        "outbound": "dns-out",
+        "protocol": "dns"
+      },
+      {
+        "clash_mode": "direct",
+        "outbound": "direct"
+      },
+      {
+        "clash_mode": "global",
+        "outbound": "select"
+      },
+      {
+        "geoip": [
+          "cn",
+          "private"
+        ],
+        "outbound": "direct"
+      },
+      {
+        "geosite": "geolocation-!cn",
+        "outbound": "select"
+      },
+      {
+        "geosite": "cn",
+        "outbound": "direct"
+      }
+    ],
+    "geoip": {
+            "download_detour": "select"
+        },
+    "geosite": {
+            "download_detour": "select"
+        }
+  }
+}
+EOF
+
+}
+uninstall_singbox() {
+            echo "Uninstalling..."
+          # Stop and disable sing-box service
+          systemctl stop sing-box
+          systemctl disable sing-box > /dev/null 2>&1
+
+          # Remove files
+          rm /etc/systemd/system/sing-box.service
+          rm /root/sbox/sbconfig_server.json
+          rm /root/sbox/sing-box
+          rm /root/sbox/cloudflared-linux
+          rm /root/sbox/argo.txt.b64
+          rm /root/sbox/public.key.b64
+          rm /root/self-cert/private.key
+          rm /root/self-cert/cert.pem
+          rm -rf /root/self-cert/
+          rm -rf /root/sbox/
+          echo "DONE!"
+}
+install_base
+
+# Check if reality.json, sing-box, and sing-box.service already exist
+if [ -f "/root/sbox/sbconfig_server.json" ] && [ -f "/root/sbox/sing-box" ] && [ -f "/root/sbox/public.key.b64" ] && [ -f "/root/sbox/argo.txt.b64" ] && [ -f "/etc/systemd/system/sing-box.service" ]; then
+
+    echo "sing-box-reality-hysteria2已经安装"
+    echo ""
+    echo "请选择选项:"
+    echo ""
+    echo "1. 重新安装"
+    echo "2. 修改配置"
+    echo "3. 显示客户端配置"
+    echo "4. 卸载"
+    echo "5. 更新sing-box内核"
+    echo "6. 手动重启cloudflared（vps重启之后需要执行一次这个来更新vmess）"
+    echo ""
+    read -p "Enter your choice (1-6): " choice
+
+    case $choice in
+        1)
+          show_notice "Reinstalling..."
+          # Uninstall previous installation
+          systemctl stop sing-box
+          systemctl disable sing-box > /dev/null 2>&1
+          rm /etc/systemd/system/sing-box.service
+          rm /root/sbox/sbconfig_server.json
+          rm /root/sbox/sing-box
+          rm /root/sbox/cloudflared-linux
+          rm /root/sbox/argo.txt.b64
+          rm /root/sbox/public.key.b64
+          rm /root/self-cert/private.key
+          rm /root/self-cert/cert.pem
+          rm -rf /root/self-cert/
+          rm -rf /root/sbox/
+          
+          # Proceed with installation
+        ;;
+        2)
+          #Reality modify
+          show_notice "开始修改reality端口号和域名"
+          # Get current listen port
+          current_listen_port=$(jq -r '.inbounds[0].listen_port' /root/sbox/sbconfig_server.json)
+
+          # Ask for listen port
+          read -p "请输入想要修改的端口号 (当前端口号为 $current_listen_port): " listen_port
+          listen_port=${listen_port:-$current_listen_port}
+
+          # Get current server name
+          current_server_name=$(jq -r '.inbounds[0].tls.server_name' /root/sbox/sbconfig_server.json)
+
+          # Ask for server name (sni)
+          read -p "请输入想要偷取的域名 (当前域名为 $current_server_name): " server_name
+          server_name=${server_name:-$current_server_name}
+          echo ""
+          # modifying hysteria2 configuration
+          show_notice "开始修改hysteria2端口号"
+          echo ""
+          # Get current listen port
+          hy_current_listen_port=$(jq -r '.inbounds[1].listen_port' /root/sbox/sbconfig_server.json)
+          
+          # Ask for listen port
+          read -p "请属于想要修改的端口号 (当前端口号为 $hy_current_listen_port): " hy_listen_port
+          hy_listen_port=${hy_listen_port:-$hy_current_listen_port}
+
+          # Modify reality.json with new settings
+          jq --arg listen_port "$listen_port" --arg server_name "$server_name" --arg hy_listen_port "$hy_listen_port" '.inbounds[1].listen_port = ($hy_listen_port | tonumber) | .inbounds[0].listen_port = ($listen_port | tonumber) | .inbounds[0].tls.server_name = $server_name | .inbounds[0].tls.reality.handshake.server = $server_name' /root/sbox/sbconfig_server.json > /root/sb_modified.json
+          mv /root/sb_modified.json /root/sbox/sbconfig_server.json
+
+          # Restart sing-box service
+          systemctl restart sing-box
+          # show client configuration
+          show_client_configuration
+          exit 0
+        ;;
+      3)  
+          # show client configuration
+          show_client_configuration
+          exit 0
+      ;;	
+      4)
+          uninstall_singbox
+          exit 0
+          ;;
+      5)
+          show_notice "Update Sing-box..."
+          download_singbox
+          # Check configuration and start the service
+          if /root/sbox/sing-box check -c /root/sbox/sbconfig_server.json; then
+              echo "Configuration checked successfully. Starting sing-box service..."
+              systemctl daemon-reload
+              systemctl enable sing-box > /dev/null 2>&1
+              systemctl start sing-box
+              systemctl restart sing-box
+          fi
+          echo ""  
+          exit 1
+          ;;
+      6)
+          regenarte_cloudflared_argo
+          echo "重新启动完成，查看新的vmess客户端信息"
+          show_client_configuration
+          exit 1
+          ;;
+      *)
+          echo "Invalid choice. Exiting."
+          exit 1
+          ;;
+	esac
+	fi
+
+mkdir -p "/root/sbox/"
+
+download_singbox
+
+download_cloudflared
+
+# reality
+echo "开始配置Reality"
+echo ""
+# Generate key pair
+echo "自动生成基本参数"
+echo ""
+key_pair=$(/root/sbox/sing-box generate reality-keypair)
+echo "Key pair生成完成"
+echo ""
+
+# Extract private key and public key
+private_key=$(echo "$key_pair" | awk '/PrivateKey/ {print $2}' | tr -d '"')
+public_key=$(echo "$key_pair" | awk '/PublicKey/ {print $2}' | tr -d '"')
+
+# Save the public key in a file using base64 encoding
+echo "$public_key" | base64 > /root/sbox/public.key.b64
+
+# Generate necessary values
+uuid=$(/root/sbox/sing-box generate uuid)
+short_id=$(/root/sbox/sing-box generate rand --hex 8)
+echo "uuid和短id 生成完成"
+echo ""
+# Ask for listen port
+read -p "请输入Reality端口号 (default: 443): " listen_port
+listen_port=${listen_port:-443}
+echo ""
+# Ask for server name (sni)
+read -p "请输入想要偷取的域名 (default: itunes.apple.com): " server_name
+server_name=${server_name:-itunes.apple.com}
+echo ""
+# hysteria2
+echo "开始配置hysteria2"
+echo ""
+# Generate hysteria necessary values
+hy_password=$(/root/sbox/sing-box generate rand --hex 8)
+
+# Ask for listen port
+read -p "请输入hysteria2监听端口 (default: 8443): " hy_listen_port
+hy_listen_port=${hy_listen_port:-8443}
+echo ""
+
+# Ask for self-signed certificate domain
+read -p "输入自签证书域名 (default: bing.com): " hy_server_name
+hy_server_name=${hy_server_name:-bing.com}
+mkdir -p /root/self-cert/ && openssl ecparam -genkey -name prime256v1 -out /root/self-cert/private.key && openssl req -new -x509 -days 36500 -key /root/self-cert/private.key -out /root/self-cert/cert.pem -subj "/CN=${hy_server_name}"
+echo ""
+echo "自签证书生成完成"
+echo ""
+# vmess ws
+echo "开始配置vmess"
+echo ""
+# Generate hysteria necessary values
+vmess_uuid=$(/root/sbox/sing-box generate uuid)
+read -p "请输入vmess端口，默认为18443(和tunnel通信用不会暴露在外): " vmess_port
+vmess_port=${vmess_port:-18443}
+echo ""
+read -p "ws路径 (无需加斜杠,默认随机生成): " ws_path
+ws_path=${ws_path:-$(/root/sbox/sing-box generate rand --hex 6)}
+
+pid=$(pgrep -f cloudflared)
+if [ -n "$pid" ]; then
+  # 终止进程
+  kill "$pid"
+fi
+
+#生成地址
+/root/sbox/cloudflared-linux tunnel --url http://localhost:$vmess_port --no-autoupdate --edge-ip-version auto --protocol h2mux>argo.log 2>&1 &
+sleep 2
+clear
+echo 等待cloudflare argo生成地址
+sleep 5
+#连接到域名
+argo=$(cat argo.log | grep trycloudflare.com | awk 'NR==2{print}' | awk -F// '{print $2}' | awk '{print $1}')
+echo "$argo" | base64 > /root/sbox/argo.txt.b64
+rm -rf argo.log
+
+
+# Retrieve the server IP address
+server_ip=$(curl -s4m8 ip.sb -k) || server_ip=$(curl -s6m8 ip.sb -k)
+
+# Create reality.json using jq
+jq -n --arg listen_port "$listen_port" --arg vmess_port "$vmess_port" --arg vmess_uuid "$vmess_uuid"  --arg ws_path "$ws_path" --arg server_name "$server_name" --arg private_key "$private_key" --arg short_id "$short_id" --arg uuid "$uuid" --arg hy_listen_port "$hy_listen_port" --arg hy_password "$hy_password" --arg server_ip "$server_ip" '{
+  "log": {
+    "disabled": false,
+    "level": "info",
+    "timestamp": true
+  },
+  "inbounds": [
+    {
+      "type": "vless",
+      "tag": "vless-in",
+      "listen": "::",
+      "listen_port": ($listen_port | tonumber),
+      "users": [
+        {
+          "uuid": $uuid,
+          "flow": "xtls-rprx-vision"
+        }
+      ],
+      "tls": {
+        "enabled": true,
+        "server_name": $server_name,
+          "reality": {
+          "enabled": true,
+          "handshake": {
+            "server": $server_name,
+            "server_port": 443
+          },
+          "private_key": $private_key,
+          "short_id": [$short_id]
+        }
+      }
+    },
+    {
+        "type": "hysteria2",
+        "tag": "hy2-in",
+        "listen": "::",
+        "listen_port": ($hy_listen_port | tonumber),
+        "users": [
+            {
+                "password": $hy_password
+            }
+        ],
+        "tls": {
+            "enabled": true,
+            "alpn": [
+                "h3"
+            ],
+            "certificate_path": "/root/self-cert/cert.pem",
+            "key_path": "/root/self-cert/private.key"
+        }
+    },
+    {
+        "type": "vmess",
+        "tag": "vmess-in",
+        "listen": "::",
+        "listen_port": ($vmess_port | tonumber),
+        "users": [
+            {
+                "uuid": $vmess_uuid,
+                "alterId": 0
+            }
+        ],
+        "transport": {
+            "type": "ws",
+            "path": $ws_path
+        }
+    }
+  ],
+  "outbounds": [
+    {
+      "type": "direct",
+      "tag": "direct"
+    },
+    {
+      "type": "block",
+      "tag": "block"
+    }
+  ]
+}' > /root/sbox/sbconfig_server.json
+
+
+
+# Create sing-box.service
+cat > /etc/systemd/system/sing-box.service <<EOF
+[Unit]
+After=network.target nss-lookup.target
+
+[Service]
+User=root
+WorkingDirectory=/root
+CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
+AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
+ExecStart=/root/sbox/sing-box run -c /root/sbox/sbconfig_server.json
+ExecReload=/bin/kill -HUP \$MAINPID
+Restart=on-failure
+RestartSec=10
+LimitNOFILE=infinity
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+
+# Check configuration and start the service
+if /root/sbox/sing-box check -c /root/sbox/sbconfig_server.json; then
+    echo "Configuration checked successfully. Starting sing-box service..."
+    systemctl daemon-reload
+    systemctl enable sing-box > /dev/null 2>&1
+    systemctl start sing-box
+    systemctl restart sing-box
+
+    show_client_configuration
+
+
+else
+    echo "Error in configuration. Aborting"
+fi