923 lines
26 KiB
Bash
923 lines
26 KiB
Bash
#!/bin/bash
|
||
|
||
# Function to print characters with delay
|
||
print_with_delay() {
|
||
text="$1"
|
||
delay="$2"
|
||
for ((i = 0; i < ${#text}; i++)); do
|
||
echo -n "${text:$i:1}"
|
||
sleep $delay
|
||
done
|
||
echo
|
||
}
|
||
#notice
|
||
show_notice() {
|
||
local message="$1"
|
||
|
||
echo "#######################################################################################################################"
|
||
echo " "
|
||
echo " ${message} "
|
||
echo " "
|
||
echo "#######################################################################################################################"
|
||
}
|
||
# Introduction animation
|
||
print_with_delay "sing-reality-hy2-wss-box by 绵阿羊" 0.05
|
||
echo ""
|
||
echo ""
|
||
# install base
|
||
install_base(){
|
||
# Check if jq is installed, and install it if not
|
||
if ! command -v jq &> /dev/null; then
|
||
echo "jq is not installed. Installing..."
|
||
if [ -n "$(command -v apt)" ]; then
|
||
apt update > /dev/null 2>&1
|
||
apt install -y jq > /dev/null 2>&1
|
||
elif [ -n "$(command -v yum)" ]; then
|
||
yum install -y epel-release
|
||
yum install -y jq
|
||
elif [ -n "$(command -v dnf)" ]; then
|
||
dnf install -y jq
|
||
else
|
||
echo "Cannot install jq. Please install jq manually and rerun the script."
|
||
exit 1
|
||
fi
|
||
fi
|
||
}
|
||
# regenrate cloudflared argo
|
||
regenarte_cloudflared_argo(){
|
||
pid=$(pgrep -f cloudflared)
|
||
if [ -n "$pid" ]; then
|
||
# 终止进程
|
||
kill "$pid"
|
||
fi
|
||
|
||
vmess_port=$(jq -r '.inbounds[2].listen_port' /root/sbox/sbconfig_server.json)
|
||
#生成地址
|
||
/root/sbox/cloudflared-linux tunnel --url http://localhost:$vmess_port --no-autoupdate --edge-ip-version auto --protocol h2mux>argo.log 2>&1 &
|
||
sleep 2
|
||
clear
|
||
echo 等待cloudflare argo生成地址
|
||
sleep 5
|
||
#连接到域名
|
||
argo=$(cat argo.log | grep trycloudflare.com | awk 'NR==2{print}' | awk -F// '{print $2}' | awk '{print $1}')
|
||
echo "$argo" | base64 > /root/sbox/argo.txt.b64
|
||
rm -rf argo.log
|
||
|
||
}
|
||
# download singbox and cloudflared
|
||
download_singbox(){
|
||
arch=$(uname -m)
|
||
echo "Architecture: $arch"
|
||
# Map architecture names
|
||
case ${arch} in
|
||
x86_64)
|
||
arch="amd64"
|
||
;;
|
||
aarch64)
|
||
arch="arm64"
|
||
;;
|
||
armv7l)
|
||
arch="armv7"
|
||
;;
|
||
esac
|
||
# Fetch the latest (including pre-releases) release version number from GitHub API
|
||
# 正式版
|
||
#latest_version_tag=$(curl -s "https://api.github.com/repos/SagerNet/sing-box/releases" | grep -Po '"tag_name": "\K.*?(?=")' | head -n 1)
|
||
#beta版本
|
||
latest_version_tag=$(curl -s "https://api.github.com/repos/SagerNet/sing-box/releases" | grep -Po '"tag_name": "\K.*?(?=")' | sort -V | tail -n 1)
|
||
latest_version=${latest_version_tag#v} # Remove 'v' prefix from version number
|
||
echo "Latest version: $latest_version"
|
||
# Detect server architecture
|
||
# Prepare package names
|
||
package_name="sing-box-${latest_version}-linux-${arch}"
|
||
# Prepare download URL
|
||
url="https://github.com/SagerNet/sing-box/releases/download/${latest_version_tag}/${package_name}.tar.gz"
|
||
# Download the latest release package (.tar.gz) from GitHub
|
||
curl -sLo "/root/${package_name}.tar.gz" "$url"
|
||
|
||
# Extract the package and move the binary to /root
|
||
tar -xzf "/root/${package_name}.tar.gz" -C /root
|
||
mv "/root/${package_name}/sing-box" /root/sbox
|
||
|
||
# Cleanup the package
|
||
rm -r "/root/${package_name}.tar.gz" "/root/${package_name}"
|
||
|
||
# Set the permissions
|
||
chown root:root /root/sbox/sing-box
|
||
chmod +x /root/sbox/sing-box
|
||
}
|
||
|
||
# download singbox and cloudflared
|
||
download_cloudflared(){
|
||
arch=$(uname -m)
|
||
# Map architecture names
|
||
case ${arch} in
|
||
x86_64)
|
||
cf_arch="amd64"
|
||
;;
|
||
aarch64)
|
||
cf_arch="arm64"
|
||
;;
|
||
armv7l)
|
||
cf_arch="arm"
|
||
;;
|
||
esac
|
||
|
||
# install cloudflared linux
|
||
cf_url="https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-${cf_arch}"
|
||
curl -sLo "/root/sbox/cloudflared-linux" "$cf_url"
|
||
chmod +x /root/sbox/cloudflared-linux
|
||
echo ""
|
||
}
|
||
|
||
|
||
# client configuration
|
||
show_client_configuration() {
|
||
# Get current listen port
|
||
current_listen_port=$(jq -r '.inbounds[0].listen_port' /root/sbox/sbconfig_server.json)
|
||
# Get current server name
|
||
current_server_name=$(jq -r '.inbounds[0].tls.server_name' /root/sbox/sbconfig_server.json)
|
||
# Get the UUID
|
||
uuid=$(jq -r '.inbounds[0].users[0].uuid' /root/sbox/sbconfig_server.json)
|
||
# Get the public key from the file, decoding it from base64
|
||
public_key=$(base64 --decode /root/sbox/public.key.b64)
|
||
# Get the short ID
|
||
short_id=$(jq -r '.inbounds[0].tls.reality.short_id[0]' /root/sbox/sbconfig_server.json)
|
||
# Retrieve the server IP address
|
||
server_ip=$(curl -s4m8 ip.sb -k) || server_ip=$(curl -s6m8 ip.sb -k)
|
||
echo ""
|
||
echo ""
|
||
show_notice "Reality 客户端通用链接"
|
||
echo ""
|
||
echo ""
|
||
server_link="vless://$uuid@$server_ip:$current_listen_port?encryption=none&flow=xtls-rprx-vision&security=reality&sni=$current_server_name&fp=chrome&pbk=$public_key&sid=$short_id&type=tcp&headerType=none#SING-BOX-Reality"
|
||
echo ""
|
||
echo ""
|
||
echo "$server_link"
|
||
echo ""
|
||
echo ""
|
||
# Print the server details
|
||
show_notice "Reality 客户端通用参数"
|
||
echo ""
|
||
echo ""
|
||
echo "服务器ip: $server_ip"
|
||
echo "监听端口: $current_listen_port"
|
||
echo "UUID: $uuid"
|
||
echo "域名SNI: $current_server_name"
|
||
echo "Public Key: $public_key"
|
||
echo "Short ID: $short_id"
|
||
echo ""
|
||
echo ""
|
||
# Get current listen port
|
||
hy_current_listen_port=$(jq -r '.inbounds[1].listen_port' /root/sbox/sbconfig_server.json)
|
||
# Get current server name
|
||
hy_current_server_name=$(openssl x509 -in /root/self-cert/cert.pem -noout -subject -nameopt RFC2253 | awk -F'=' '{print $NF}')
|
||
# Get the password
|
||
hy_password=$(jq -r '.inbounds[1].users[0].password' /root/sbox/sbconfig_server.json)
|
||
# Generate the link
|
||
|
||
hy2_server_link="hysteria2://$hy_password@$server_ip:$hy_current_listen_port?insecure=1&sni=$hy_current_server_name"
|
||
|
||
show_notice "Hysteria2 客户端通用链接"
|
||
echo ""
|
||
echo "官方 hysteria2通用链接格式"
|
||
echo ""
|
||
echo "$hy2_server_link"
|
||
echo ""
|
||
echo ""
|
||
# Print the server details
|
||
show_notice "Hysteria2 客户端通用参数"
|
||
echo ""
|
||
echo ""
|
||
echo "服务器ip: $server_ip"
|
||
echo "端口号: $hy_current_listen_port"
|
||
echo "password: $hy_password"
|
||
echo "域名SNI: $hy_current_server_name"
|
||
echo "跳过证书验证: True"
|
||
echo ""
|
||
echo ""
|
||
show_notice "Hysteria2 客户端yaml文件"
|
||
cat << EOF
|
||
|
||
server: $server_ip:$hy_current_listen_port
|
||
|
||
auth: $hy_password
|
||
|
||
tls:
|
||
sni: $hy_current_server_name
|
||
insecure: true
|
||
|
||
# 可自己修改对应带宽，不添加则默认为bbr，否则使用hy2的brutal拥塞控制
|
||
# bandwidth:
|
||
# up: 100 mbps
|
||
# down: 100 mbps
|
||
|
||
fastOpen: true
|
||
|
||
socks5:
|
||
listen: 127.0.0.1:50000
|
||
|
||
EOF
|
||
|
||
argo=$(base64 --decode /root/sbox/argo.txt.b64)
|
||
vmess_uuid=$(jq -r '.inbounds[2].users[0].uuid' /root/sbox/sbconfig_server.json)
|
||
ws_path=$(jq -r '.inbounds[2].transport.path' /root/sbox/sbconfig_server.json)
|
||
show_notice "vmess ws 通用链接参数"
|
||
echo ""
|
||
echo ""
|
||
echo "以下为vmess链接，替换speed.cloudflare.com为自己的优选ip可获得极致体验"
|
||
echo ""
|
||
echo ""
|
||
echo 'vmess://'$(echo '{"add":"speed.cloudflare.com","aid":"0","host":"'$argo'","id":"'$vmess_uuid'","net":"ws","path":"'$ws_path'","port":"443","ps":"sing-box-vmess-tls","tls":"tls","type":"none","v":"2"}' | base64 -w 0)
|
||
echo ""
|
||
echo ""
|
||
echo -e "端口 443 可改为 2053 2083 2087 2096 8443"
|
||
echo ""
|
||
echo ""
|
||
echo 'vmess://'$(echo '{"add":"speed.cloudflare.com","aid":"0","host":"'$argo'","id":"'$vmess_uuid'","net":"ws","path":"'$ws_path'","port":"80","ps":"sing-box-vmess","tls":"","type":"none","v":"2"}' | base64 -w 0)
|
||
echo ""
|
||
echo ""
|
||
echo -e "端口 80 可改为 8080 8880 2052 2082 2086 2095"
|
||
echo ""
|
||
echo ""
|
||
show_notice "clash-meta配置参数"
|
||
cat << EOF
|
||
|
||
port: 7890
|
||
allow-lan: true
|
||
mode: rule
|
||
log-level: info
|
||
unified-delay: true
|
||
global-client-fingerprint: chrome
|
||
ipv6: true
|
||
dns:
|
||
enable: true
|
||
listen: :53
|
||
ipv6: true
|
||
enhanced-mode: fake-ip
|
||
fake-ip-range: 198.18.0.1/16
|
||
default-nameserver:
|
||
- 223.5.5.5
|
||
- 8.8.8.8
|
||
nameserver:
|
||
- https://dns.alidns.com/dns-query
|
||
- https://doh.pub/dns-query
|
||
fallback:
|
||
- https://1.0.0.1/dns-query
|
||
- tls://dns.google
|
||
fallback-filter:
|
||
geoip: true
|
||
geoip-code: CN
|
||
ipcidr:
|
||
- 240.0.0.0/4
|
||
|
||
proxies:
|
||
- name: Reality
|
||
type: vless
|
||
server: $server_ip
|
||
port: $current_listen_port
|
||
uuid: $uuid
|
||
network: tcp
|
||
udp: true
|
||
tls: true
|
||
flow: xtls-rprx-vision
|
||
servername: $current_server_name
|
||
client-fingerprint: chrome
|
||
reality-opts:
|
||
public-key: $public_key
|
||
short-id: $short_id
|
||
|
||
- name: Hysteria2
|
||
type: hysteria2
|
||
server: $server_ip
|
||
port: $hy_current_listen_port
|
||
# up和down均不写或为0则使用BBR流控
|
||
# up: "30 Mbps" # 若不写单位，默认为 Mbps
|
||
# down: "200 Mbps" # 若不写单位，默认为 Mbps
|
||
password: $hy_password
|
||
sni: $hy_current_server_name
|
||
skip-cert-verify: true
|
||
alpn:
|
||
- h3
|
||
- name: Vmess
|
||
type: vmess
|
||
server: speed.cloudflare.com
|
||
port: 443
|
||
uuid: $vmess_uuid
|
||
alterId: 0
|
||
cipher: auto
|
||
udp: true
|
||
tls: true
|
||
client-fingerprint: chrome
|
||
skip-cert-verify: true
|
||
servername: $argo
|
||
network: ws
|
||
ws-opts:
|
||
path: $ws_path
|
||
headers:
|
||
Host: $argo
|
||
|
||
proxy-groups:
|
||
- name: 节点选择
|
||
type: select
|
||
proxies:
|
||
- 自动选择
|
||
- Reality
|
||
- Hysteria2
|
||
- Vmess
|
||
- DIRECT
|
||
|
||
- name: 自动选择
|
||
type: url-test #选出延迟最低的机场节点
|
||
proxies:
|
||
- Reality
|
||
- Hysteria2
|
||
- Vmess
|
||
url: "http://www.gstatic.com/generate_204"
|
||
interval: 300
|
||
tolerance: 50
|
||
|
||
|
||
rules:
|
||
- GEOIP,LAN,DIRECT
|
||
- GEOIP,CN,DIRECT
|
||
- MATCH,节点选择
|
||
|
||
EOF
|
||
|
||
show_notice "sing-box客户端配置参数"
|
||
cat << EOF
|
||
{
|
||
"dns": {
|
||
"servers": [
|
||
{
|
||
"tag": "remote",
|
||
"address": "https://1.1.1.1/dns-query",
|
||
"detour": "select"
|
||
},
|
||
{
|
||
"tag": "local",
|
||
"address": "https://223.5.5.5/dns-query",
|
||
"detour": "direct"
|
||
},
|
||
{
|
||
"address": "rcode://success",
|
||
"tag": "block"
|
||
}
|
||
],
|
||
"rules": [
|
||
{
|
||
"outbound": [
|
||
"any"
|
||
],
|
||
"server": "local"
|
||
},
|
||
{
|
||
"disable_cache": true,
|
||
"geosite": [
|
||
"category-ads-all"
|
||
],
|
||
"server": "block"
|
||
},
|
||
{
|
||
"clash_mode": "global",
|
||
"server": "remote"
|
||
},
|
||
{
|
||
"clash_mode": "direct",
|
||
"server": "local"
|
||
},
|
||
{
|
||
"geosite": "cn",
|
||
"server": "local"
|
||
}
|
||
],
|
||
"strategy": "prefer_ipv4"
|
||
},
|
||
"inbounds": [
|
||
{
|
||
"type": "tun",
|
||
"inet4_address": "172.19.0.1/30",
|
||
"inet6_address": "2001:0470:f9da:fdfa::1/64",
|
||
"sniff": true,
|
||
"sniff_override_destination": true,
|
||
"domain_strategy": "prefer_ipv4",
|
||
"stack": "mixed",
|
||
"strict_route": true,
|
||
"mtu": 9000,
|
||
"endpoint_independent_nat": true,
|
||
"auto_route": true
|
||
},
|
||
{
|
||
"type": "socks",
|
||
"tag": "socks-in",
|
||
"listen": "127.0.0.1",
|
||
"sniff": true,
|
||
"sniff_override_destination": true,
|
||
"domain_strategy": "prefer_ipv4",
|
||
"listen_port": 2333,
|
||
"users": []
|
||
},
|
||
{
|
||
"type": "mixed",
|
||
"tag": "mixed-in",
|
||
"sniff": true,
|
||
"sniff_override_destination": true,
|
||
"domain_strategy": "prefer_ipv4",
|
||
"listen": "127.0.0.1",
|
||
"listen_port": 2334,
|
||
"users": []
|
||
}
|
||
],
|
||
"experimental": {
|
||
"clash_api": {
|
||
"external_controller": "127.0.0.1:9090",
|
||
"secret": "",
|
||
"store_selected": true
|
||
}
|
||
},
|
||
"log": {
|
||
"disabled": false,
|
||
"level": "info",
|
||
"timestamp": true
|
||
},
|
||
"outbounds": [
|
||
{
|
||
"tag": "select",
|
||
"type": "selector",
|
||
"default": "urltest",
|
||
"outbounds": [
|
||
"urltest",
|
||
"sing-box-reality",
|
||
"sing-box-hysteria2",
|
||
"sing-box-vmess"
|
||
]
|
||
},
|
||
{
|
||
"type": "vless",
|
||
"tag": "sing-box-reality",
|
||
"uuid": "$uuid",
|
||
"flow": "xtls-rprx-vision",
|
||
"packet_encoding": "xudp",
|
||
"server": "$server_ip",
|
||
"server_port": $current_listen_port,
|
||
"tls": {
|
||
"enabled": true,
|
||
"server_name": "$current_server_name",
|
||
"utls": {
|
||
"enabled": true,
|
||
"fingerprint": "chrome"
|
||
},
|
||
"reality": {
|
||
"enabled": true,
|
||
"public_key": "$public_key",
|
||
"short_id": "$short_id"
|
||
}
|
||
}
|
||
},
|
||
{
|
||
"type": "hysteria2",
|
||
"server": "$server_ip",
|
||
"server_port": $hy_current_listen_port,
|
||
"tag": "sing-box-hysteria2",
|
||
|
||
"up_mbps": 100,
|
||
"down_mbps": 100,
|
||
"password": "$hy_password",
|
||
"tls": {
|
||
"enabled": true,
|
||
"server_name": "$hy_current_server_name",
|
||
"insecure": true,
|
||
"alpn": [
|
||
"h3"
|
||
]
|
||
}
|
||
},
|
||
{
|
||
"server": "speed.cloudflare.com",
|
||
"server_port": 443,
|
||
"tag": "sing-box-vmess",
|
||
"tls": {
|
||
"enabled": true,
|
||
"server_name": "$argo",
|
||
"insecure": true,
|
||
"utls": {
|
||
"enabled": true,
|
||
"fingerprint": "chrome"
|
||
}
|
||
},
|
||
"transport": {
|
||
"headers": {
|
||
"Host": [
|
||
"$argo"
|
||
]
|
||
},
|
||
"path": "$ws_path",
|
||
"type": "ws"
|
||
},
|
||
"type": "vmess",
|
||
"security": "auto",
|
||
"uuid": "$vmess_uuid"
|
||
},
|
||
{
|
||
"tag": "direct",
|
||
"type": "direct"
|
||
},
|
||
{
|
||
"tag": "block",
|
||
"type": "block"
|
||
},
|
||
{
|
||
"tag": "dns-out",
|
||
"type": "dns"
|
||
},
|
||
{
|
||
"tag": "urltest",
|
||
"type": "urltest",
|
||
"outbounds": [
|
||
"sing-box-reality",
|
||
"sing-box-hysteria2",
|
||
"sing-box-vmess"
|
||
]
|
||
}
|
||
],
|
||
"route": {
|
||
"auto_detect_interface": true,
|
||
"rules": [
|
||
{
|
||
"geosite": "category-ads-all",
|
||
"outbound": "block"
|
||
},
|
||
{
|
||
"outbound": "dns-out",
|
||
"protocol": "dns"
|
||
},
|
||
{
|
||
"clash_mode": "direct",
|
||
"outbound": "direct"
|
||
},
|
||
{
|
||
"clash_mode": "global",
|
||
"outbound": "select"
|
||
},
|
||
{
|
||
"geoip": [
|
||
"cn",
|
||
"private"
|
||
],
|
||
"outbound": "direct"
|
||
},
|
||
{
|
||
"geosite": "geolocation-!cn",
|
||
"outbound": "select"
|
||
},
|
||
{
|
||
"geosite": "cn",
|
||
"outbound": "direct"
|
||
}
|
||
],
|
||
"geoip": {
|
||
"download_detour": "select"
|
||
},
|
||
"geosite": {
|
||
"download_detour": "select"
|
||
}
|
||
}
|
||
}
|
||
EOF
|
||
|
||
}
|
||
uninstall_singbox() {
|
||
echo "Uninstalling..."
|
||
# Stop and disable sing-box service
|
||
systemctl stop sing-box
|
||
systemctl disable sing-box > /dev/null 2>&1
|
||
|
||
# Remove files
|
||
rm /etc/systemd/system/sing-box.service
|
||
rm /root/sbox/sbconfig_server.json
|
||
rm /root/sbox/sing-box
|
||
rm /root/sbox/cloudflared-linux
|
||
rm /root/sbox/argo.txt.b64
|
||
rm /root/sbox/public.key.b64
|
||
rm /root/self-cert/private.key
|
||
rm /root/self-cert/cert.pem
|
||
rm -rf /root/self-cert/
|
||
rm -rf /root/sbox/
|
||
echo "DONE!"
|
||
}
|
||
install_base
|
||
|
||
# Check if reality.json, sing-box, and sing-box.service already exist
|
||
if [ -f "/root/sbox/sbconfig_server.json" ] && [ -f "/root/sbox/sing-box" ] && [ -f "/root/sbox/public.key.b64" ] && [ -f "/root/sbox/argo.txt.b64" ] && [ -f "/etc/systemd/system/sing-box.service" ]; then
|
||
|
||
echo "sing-box-reality-hysteria2已经安装"
|
||
echo ""
|
||
echo "请选择选项:"
|
||
echo ""
|
||
echo "1. 重新安装"
|
||
echo "2. 修改配置"
|
||
echo "3. 显示客户端配置"
|
||
echo "4. 卸载"
|
||
echo "5. 更新sing-box内核"
|
||
echo "6. 手动重启cloudflared（vps重启之后需要执行一次这个来更新vmess）"
|
||
echo ""
|
||
read -p "Enter your choice (1-6): " choice
|
||
|
||
case $choice in
|
||
1)
|
||
show_notice "Reinstalling..."
|
||
# Uninstall previous installation
|
||
systemctl stop sing-box
|
||
systemctl disable sing-box > /dev/null 2>&1
|
||
rm /etc/systemd/system/sing-box.service
|
||
rm /root/sbox/sbconfig_server.json
|
||
rm /root/sbox/sing-box
|
||
rm /root/sbox/cloudflared-linux
|
||
rm /root/sbox/argo.txt.b64
|
||
rm /root/sbox/public.key.b64
|
||
rm /root/self-cert/private.key
|
||
rm /root/self-cert/cert.pem
|
||
rm -rf /root/self-cert/
|
||
rm -rf /root/sbox/
|
||
|
||
# Proceed with installation
|
||
;;
|
||
2)
|
||
#Reality modify
|
||
show_notice "开始修改reality端口号和域名"
|
||
# Get current listen port
|
||
current_listen_port=$(jq -r '.inbounds[0].listen_port' /root/sbox/sbconfig_server.json)
|
||
|
||
# Ask for listen port
|
||
read -p "请输入想要修改的端口号 (当前端口号为 $current_listen_port): " listen_port
|
||
listen_port=${listen_port:-$current_listen_port}
|
||
|
||
# Get current server name
|
||
current_server_name=$(jq -r '.inbounds[0].tls.server_name' /root/sbox/sbconfig_server.json)
|
||
|
||
# Ask for server name (sni)
|
||
read -p "请输入想要偷取的域名 (当前域名为 $current_server_name): " server_name
|
||
server_name=${server_name:-$current_server_name}
|
||
echo ""
|
||
# modifying hysteria2 configuration
|
||
show_notice "开始修改hysteria2端口号"
|
||
echo ""
|
||
# Get current listen port
|
||
hy_current_listen_port=$(jq -r '.inbounds[1].listen_port' /root/sbox/sbconfig_server.json)
|
||
|
||
# Ask for listen port
|
||
read -p "请属于想要修改的端口号 (当前端口号为 $hy_current_listen_port): " hy_listen_port
|
||
hy_listen_port=${hy_listen_port:-$hy_current_listen_port}
|
||
|
||
# Modify reality.json with new settings
|
||
jq --arg listen_port "$listen_port" --arg server_name "$server_name" --arg hy_listen_port "$hy_listen_port" '.inbounds[1].listen_port = ($hy_listen_port | tonumber) | .inbounds[0].listen_port = ($listen_port | tonumber) | .inbounds[0].tls.server_name = $server_name | .inbounds[0].tls.reality.handshake.server = $server_name' /root/sbox/sbconfig_server.json > /root/sb_modified.json
|
||
mv /root/sb_modified.json /root/sbox/sbconfig_server.json
|
||
|
||
# Restart sing-box service
|
||
systemctl restart sing-box
|
||
# show client configuration
|
||
show_client_configuration
|
||
exit 0
|
||
;;
|
||
3)
|
||
# show client configuration
|
||
show_client_configuration
|
||
exit 0
|
||
;;
|
||
4)
|
||
uninstall_singbox
|
||
exit 0
|
||
;;
|
||
5)
|
||
show_notice "Update Sing-box..."
|
||
download_singbox
|
||
# Check configuration and start the service
|
||
if /root/sbox/sing-box check -c /root/sbox/sbconfig_server.json; then
|
||
echo "Configuration checked successfully. Starting sing-box service..."
|
||
systemctl daemon-reload
|
||
systemctl enable sing-box > /dev/null 2>&1
|
||
systemctl start sing-box
|
||
systemctl restart sing-box
|
||
fi
|
||
echo ""
|
||
exit 1
|
||
;;
|
||
6)
|
||
regenarte_cloudflared_argo
|
||
echo "重新启动完成，查看新的vmess客户端信息"
|
||
show_client_configuration
|
||
exit 1
|
||
;;
|
||
*)
|
||
echo "Invalid choice. Exiting."
|
||
exit 1
|
||
;;
|
||
esac
|
||
fi
|
||
|
||
mkdir -p "/root/sbox/"
|
||
|
||
download_singbox
|
||
|
||
download_cloudflared
|
||
|
||
# reality
|
||
echo "开始配置Reality"
|
||
echo ""
|
||
# Generate key pair
|
||
echo "自动生成基本参数"
|
||
echo ""
|
||
key_pair=$(/root/sbox/sing-box generate reality-keypair)
|
||
echo "Key pair生成完成"
|
||
echo ""
|
||
|
||
# Extract private key and public key
|
||
private_key=$(echo "$key_pair" | awk '/PrivateKey/ {print $2}' | tr -d '"')
|
||
public_key=$(echo "$key_pair" | awk '/PublicKey/ {print $2}' | tr -d '"')
|
||
|
||
# Save the public key in a file using base64 encoding
|
||
echo "$public_key" | base64 > /root/sbox/public.key.b64
|
||
|
||
# Generate necessary values
|
||
uuid=$(/root/sbox/sing-box generate uuid)
|
||
short_id=$(/root/sbox/sing-box generate rand --hex 8)
|
||
echo "uuid和短id 生成完成"
|
||
echo ""
|
||
# Ask for listen port
|
||
read -p "请输入Reality端口号 (default: 443): " listen_port
|
||
listen_port=${listen_port:-443}
|
||
echo ""
|
||
# Ask for server name (sni)
|
||
read -p "请输入想要偷取的域名 (default: itunes.apple.com): " server_name
|
||
server_name=${server_name:-itunes.apple.com}
|
||
echo ""
|
||
# hysteria2
|
||
echo "开始配置hysteria2"
|
||
echo ""
|
||
# Generate hysteria necessary values
|
||
hy_password=$(/root/sbox/sing-box generate rand --hex 8)
|
||
|
||
# Ask for listen port
|
||
read -p "请输入hysteria2监听端口 (default: 8443): " hy_listen_port
|
||
hy_listen_port=${hy_listen_port:-8443}
|
||
echo ""
|
||
|
||
# Ask for self-signed certificate domain
|
||
read -p "输入自签证书域名 (default: bing.com): " hy_server_name
|
||
hy_server_name=${hy_server_name:-bing.com}
|
||
mkdir -p /root/self-cert/ && openssl ecparam -genkey -name prime256v1 -out /root/self-cert/private.key && openssl req -new -x509 -days 36500 -key /root/self-cert/private.key -out /root/self-cert/cert.pem -subj "/CN=${hy_server_name}"
|
||
echo ""
|
||
echo "自签证书生成完成"
|
||
echo ""
|
||
# vmess ws
|
||
echo "开始配置vmess"
|
||
echo ""
|
||
# Generate hysteria necessary values
|
||
vmess_uuid=$(/root/sbox/sing-box generate uuid)
|
||
read -p "请输入vmess端口，默认为18443(和tunnel通信用不会暴露在外): " vmess_port
|
||
vmess_port=${vmess_port:-18443}
|
||
echo ""
|
||
read -p "ws路径 (无需加斜杠,默认随机生成): " ws_path
|
||
ws_path=${ws_path:-$(/root/sbox/sing-box generate rand --hex 6)}
|
||
|
||
pid=$(pgrep -f cloudflared)
|
||
if [ -n "$pid" ]; then
|
||
# 终止进程
|
||
kill "$pid"
|
||
fi
|
||
|
||
#生成地址
|
||
/root/sbox/cloudflared-linux tunnel --url http://localhost:$vmess_port --no-autoupdate --edge-ip-version auto --protocol h2mux>argo.log 2>&1 &
|
||
sleep 2
|
||
clear
|
||
echo 等待cloudflare argo生成地址
|
||
sleep 5
|
||
#连接到域名
|
||
argo=$(cat argo.log | grep trycloudflare.com | awk 'NR==2{print}' | awk -F// '{print $2}' | awk '{print $1}')
|
||
echo "$argo" | base64 > /root/sbox/argo.txt.b64
|
||
rm -rf argo.log
|
||
|
||
|
||
# Retrieve the server IP address
|
||
server_ip=$(curl -s4m8 ip.sb -k) || server_ip=$(curl -s6m8 ip.sb -k)
|
||
|
||
# Create reality.json using jq
|
||
jq -n --arg listen_port "$listen_port" --arg vmess_port "$vmess_port" --arg vmess_uuid "$vmess_uuid" --arg ws_path "$ws_path" --arg server_name "$server_name" --arg private_key "$private_key" --arg short_id "$short_id" --arg uuid "$uuid" --arg hy_listen_port "$hy_listen_port" --arg hy_password "$hy_password" --arg server_ip "$server_ip" '{
|
||
"log": {
|
||
"disabled": false,
|
||
"level": "info",
|
||
"timestamp": true
|
||
},
|
||
"inbounds": [
|
||
{
|
||
"type": "vless",
|
||
"tag": "vless-in",
|
||
"listen": "::",
|
||
"listen_port": ($listen_port | tonumber),
|
||
"users": [
|
||
{
|
||
"uuid": $uuid,
|
||
"flow": "xtls-rprx-vision"
|
||
}
|
||
],
|
||
"tls": {
|
||
"enabled": true,
|
||
"server_name": $server_name,
|
||
"reality": {
|
||
"enabled": true,
|
||
"handshake": {
|
||
"server": $server_name,
|
||
"server_port": 443
|
||
},
|
||
"private_key": $private_key,
|
||
"short_id": [$short_id]
|
||
}
|
||
}
|
||
},
|
||
{
|
||
"type": "hysteria2",
|
||
"tag": "hy2-in",
|
||
"listen": "::",
|
||
"listen_port": ($hy_listen_port | tonumber),
|
||
"users": [
|
||
{
|
||
"password": $hy_password
|
||
}
|
||
],
|
||
"tls": {
|
||
"enabled": true,
|
||
"alpn": [
|
||
"h3"
|
||
],
|
||
"certificate_path": "/root/self-cert/cert.pem",
|
||
"key_path": "/root/self-cert/private.key"
|
||
}
|
||
},
|
||
{
|
||
"type": "vmess",
|
||
"tag": "vmess-in",
|
||
"listen": "::",
|
||
"listen_port": ($vmess_port | tonumber),
|
||
"users": [
|
||
{
|
||
"uuid": $vmess_uuid,
|
||
"alterId": 0
|
||
}
|
||
],
|
||
"transport": {
|
||
"type": "ws",
|
||
"path": $ws_path
|
||
}
|
||
}
|
||
],
|
||
"outbounds": [
|
||
{
|
||
"type": "direct",
|
||
"tag": "direct"
|
||
},
|
||
{
|
||
"type": "block",
|
||
"tag": "block"
|
||
}
|
||
]
|
||
}' > /root/sbox/sbconfig_server.json
|
||
|
||
|
||
|
||
# Create sing-box.service
|
||
cat > /etc/systemd/system/sing-box.service <<EOF
|
||
[Unit]
|
||
After=network.target nss-lookup.target
|
||
|
||
[Service]
|
||
User=root
|
||
WorkingDirectory=/root
|
||
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
|
||
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
|
||
ExecStart=/root/sbox/sing-box run -c /root/sbox/sbconfig_server.json
|
||
ExecReload=/bin/kill -HUP \$MAINPID
|
||
Restart=on-failure
|
||
RestartSec=10
|
||
LimitNOFILE=infinity
|
||
|
||
[Install]
|
||
WantedBy=multi-user.target
|
||
EOF
|
||
|
||
|
||
# Check configuration and start the service
|
||
if /root/sbox/sing-box check -c /root/sbox/sbconfig_server.json; then
|
||
echo "Configuration checked successfully. Starting sing-box service..."
|
||
systemctl daemon-reload
|
||
systemctl enable sing-box > /dev/null 2>&1
|
||
systemctl start sing-box
|
||
systemctl restart sing-box
|
||
|
||
show_client_configuration
|
||
|
||
|
||
else
|
||
echo "Error in configuration. Aborting"
|
||
fi
|