|
|
@@ -0,0 +1,1867 @@
|
|
|
+#!/usr/bin/env bash
|
|
|
+PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin
|
|
|
+export PATH
|
|
|
+
|
|
|
+#=================================================
|
|
|
+# System Required: CentOS/Debian/Ubuntu
|
|
|
+# Description: Shadowsocks Rust 管理脚本
|
|
|
+# Author: 翠花
|
|
|
+# WebSite: https://about.nange.cn
|
|
|
+#=================================================
|
|
|
+
|
|
|
+# 当前脚本版本号
|
|
|
+sh_ver="1.5.3"
|
|
|
+
|
|
|
+# Shadowsocks Rust 相关路径
|
|
|
+SS_Folder="/etc/ss-rust"
|
|
|
+SS_File="/usr/local/bin/ss-rust"
|
|
|
+SS_Conf="/etc/ss-rust/config.json"
|
|
|
+SS_Now_ver_File="/etc/ss-rust/ver.txt"
|
|
|
+
|
|
|
+# BBR 配置文件
|
|
|
+BBR_Local="/etc/sysctl.d/local.conf"
|
|
|
+
|
|
|
+# Shadow TLS 相关路径
|
|
|
+STLS_Folder="/etc/shadowtls"
|
|
|
+STLS_File="/usr/local/bin/shadow-tls"
|
|
|
+STLS_Conf="/etc/shadowtls/config.json"
|
|
|
+STLS_Now_ver_File="/etc/shadowtls/ver.txt"
|
|
|
+
|
|
|
+Green_font_prefix="\033[32m" && Red_font_prefix="\033[31m" && Green_background_prefix="\033[42;37m" && Red_background_prefix="\033[41;37m" && Font_color_suffix="\033[0m" && Yellow_font_prefix="\033[0;33m"
|
|
|
+Info="${Green_font_prefix}[信息]${Font_color_suffix}"
|
|
|
+Error="${Red_font_prefix}[错误]${Font_color_suffix}"
|
|
|
+Tip="${Yellow_font_prefix}[注意]${Font_color_suffix}"
|
|
|
+
|
|
|
+check_root(){
|
|
|
+ if [[ $EUID != 0 ]]; then
|
|
|
+ echo -e "${Error} 当前非ROOT账号(或没有ROOT权限)，无法继续操作，请更换ROOT账号或使用 ${Green_background_prefix}sudo su${Font_color_suffix} 命令获取临时ROOT权限（执行后可能会提示输入当前账号的密码）。"
|
|
|
+ exit 1
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+check_sys(){
|
|
|
+ if [[ -f /etc/redhat-release ]]; then
|
|
|
+ release="centos"
|
|
|
+ elif cat /etc/issue | grep -q -E -i "debian"; then
|
|
|
+ release="debian"
|
|
|
+ elif cat /etc/issue | grep -q -E -i "ubuntu"; then
|
|
|
+ release="ubuntu"
|
|
|
+ elif cat /etc/issue | grep -q -E -i "centos|red hat|redhat"; then
|
|
|
+ release="centos"
|
|
|
+ elif cat /proc/version | grep -q -E -i "debian"; then
|
|
|
+ release="debian"
|
|
|
+ elif cat /proc/version | grep -q -E -i "ubuntu"; then
|
|
|
+ release="ubuntu"
|
|
|
+ elif cat /proc/version | grep -q -E -i "centos|red hat|redhat"; then
|
|
|
+ release="centos"
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+sys_arch() {
|
|
|
+ uname=$(uname -m)
|
|
|
+ if [[ "$uname" == "i686" ]] || [[ "$uname" == "i386" ]]; then
|
|
|
+ arch="i686"
|
|
|
+ elif [[ "$uname" == *"armv7"* ]] || [[ "$uname" == "armv6l" ]]; then
|
|
|
+ arch="arm"
|
|
|
+ elif [[ "$uname" == *"armv8"* ]] || [[ "$uname" == "aarch64" ]]; then
|
|
|
+ arch="aarch64"
|
|
|
+ else
|
|
|
+ arch="x86_64"
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+#开启系统 TCP Fast Open
|
|
|
+enable_systfo() {
|
|
|
+ kernel=$(uname -r | awk -F . '{print $1}')
|
|
|
+ if [ "$kernel" -ge 3 ]; then
|
|
|
+ echo 3 >/proc/sys/net/ipv4/tcp_fastopen
|
|
|
+ [[ ! -e $BBR_Local ]] && echo "fs.file-max = 51200
|
|
|
+net.core.rmem_max = 67108864
|
|
|
+net.core.wmem_max = 67108864
|
|
|
+net.core.rmem_default = 65536
|
|
|
+net.core.wmem_default = 65536
|
|
|
+net.core.netdev_max_backlog = 4096
|
|
|
+net.core.somaxconn = 4096
|
|
|
+net.ipv4.tcp_syncookies = 1
|
|
|
+net.ipv4.tcp_tw_reuse = 1
|
|
|
+net.ipv4.tcp_tw_recycle = 0
|
|
|
+net.ipv4.tcp_fin_timeout = 30
|
|
|
+net.ipv4.tcp_keepalive_time = 1200
|
|
|
+net.ipv4.ip_local_port_range = 10000 65000
|
|
|
+net.ipv4.tcp_max_syn_backlog = 4096
|
|
|
+net.ipv4.tcp_max_tw_buckets = 5000
|
|
|
+net.ipv4.tcp_fastopen = 3
|
|
|
+net.ipv4.tcp_rmem = 4096 87380 67108864
|
|
|
+net.ipv4.tcp_wmem = 4096 65536 67108864
|
|
|
+net.ipv4.tcp_mtu_probing = 1
|
|
|
+net.ipv4.tcp_ecn=1
|
|
|
+net.core.default_qdisc=fq
|
|
|
+net.ipv4.tcp_congestion_control = bbr" >>/etc/sysctl.d/local.conf && sysctl --system >/dev/null 2>&1
|
|
|
+ else
|
|
|
+ echo -e "$Error系统内核版本过低，无法支持 TCP Fast Open ！"
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+check_installed_status(){
|
|
|
+ [[ ! -e ${SS_File} ]] && echo -e "${Error} Shadowsocks Rust 没有安装，请检查！" && exit 1
|
|
|
+}
|
|
|
+
|
|
|
+check_status(){
|
|
|
+ status=`systemctl status ss-rust | grep Active | awk '{print $3}' | cut -d "(" -f2 | cut -d ")" -f1`
|
|
|
+}
|
|
|
+
|
|
|
+check_new_ver(){
|
|
|
+ new_ver=$(wget -qO- https://api.github.com/repos/shadowsocks/shadowsocks-rust/releases| jq -r '[.[] | select(.prerelease == false) | select(.draft == false) | .tag_name] | .[0]')
|
|
|
+ [[ -z ${new_ver} ]] && echo -e "${Error} Shadowsocks Rust 最新版本获取失败！" && exit 1
|
|
|
+ echo -e "${Info} 检测到 Shadowsocks Rust 最新版本为 [ ${new_ver} ]"
|
|
|
+}
|
|
|
+
|
|
|
+check_ver_comparison(){
|
|
|
+ now_ver=$(cat ${SS_Now_ver_File})
|
|
|
+ if [[ "${now_ver}" != "${new_ver}" ]]; then
|
|
|
+ echo -e "${Info} 发现 Shadowsocks Rust 已有新版本 [ ${new_ver} ]，旧版本 [ ${now_ver} ]"
|
|
|
+ read -e -p "是否更新 ？ [Y/n]：" yn
|
|
|
+ [[ -z "${yn}" ]] && yn="y"
|
|
|
+ if [[ $yn == [Yy] ]]; then
|
|
|
+ check_status
|
|
|
+ # [[ "$status" == "running" ]] && systemctl stop ss-rust
|
|
|
+ \cp "${SS_Conf}" "/tmp/config.json"
|
|
|
+ # rm -rf ${SS_Folder}
|
|
|
+ download
|
|
|
+ mv -f "/tmp/config.json" "${SS_Conf}"
|
|
|
+ restart
|
|
|
+ fi
|
|
|
+ else
|
|
|
+ echo -e "${Info} 当前 Shadowsocks Rust 已是最新版本 [ ${new_ver} ] ！" && exit 1
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+# 官方源
|
|
|
+stable_download() {
|
|
|
+ echo -e "${Info} 默认开始下载官方源 Shadowsocks Rust ……"
|
|
|
+ wget --no-check-certificate -N "https://github.com/shadowsocks/shadowsocks-rust/releases/download/${new_ver}/shadowsocks-${new_ver}.${arch}-unknown-linux-gnu.tar.xz"
|
|
|
+ if [[ ! -e "shadowsocks-${new_ver}.${arch}-unknown-linux-gnu.tar.xz" ]]; then
|
|
|
+ echo -e "${Error} Shadowsocks Rust 官方源下载失败！"
|
|
|
+ return 1 && exit 1
|
|
|
+ else
|
|
|
+ tar -xvf "shadowsocks-${new_ver}.${arch}-unknown-linux-gnu.tar.xz"
|
|
|
+ fi
|
|
|
+ if [[ ! -e "ssserver" ]]; then
|
|
|
+ echo -e "${Error} Shadowsocks Rust 解压失败！"
|
|
|
+ echo -e "${Error} Shadowsocks Rust 安装失败 !"
|
|
|
+ return 1 && exit 1
|
|
|
+ else
|
|
|
+ rm -rf "shadowsocks-${new_ver}.${arch}-unknown-linux-gnu.tar.xz"
|
|
|
+ chmod +x ssserver
|
|
|
+ mv -f ssserver "${SS_File}"
|
|
|
+ rm sslocal ssmanager ssservice ssurl
|
|
|
+ echo "${new_ver}" > ${SS_Now_ver_File}
|
|
|
+
|
|
|
+ echo -e "${Info} Shadowsocks Rust 主程序下载安装完毕！"
|
|
|
+ return 0
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+# 备用源
|
|
|
+backup_download() {
|
|
|
+ echo -e "${Info} 试图请求 备份源(旧版本) Shadowsocks Rust ……"
|
|
|
+ wget --no-check-certificate -N "https://raw.githubusercontent.com/xOS/Others/master/shadowsocks-rust/v1.14.1/shadowsocks-v1.14.1.${arch}-unknown-linux-gnu.tar.xz"
|
|
|
+ if [[ ! -e "shadowsocks-v1.14.1.${arch}-unknown-linux-gnu.tar.xz" ]]; then
|
|
|
+ echo -e "${Error} Shadowsocks Rust 备份源(旧版本) 下载失败！"
|
|
|
+ return 1 && exit 1
|
|
|
+ else
|
|
|
+ tar -xvf "shadowsocks-v1.14.1.${arch}-unknown-linux-gnu.tar.xz"
|
|
|
+ fi
|
|
|
+ if [[ ! -e "ssserver" ]]; then
|
|
|
+ echo -e "${Error} Shadowsocks Rust 备份源(旧版本) 解压失败 !"
|
|
|
+ echo -e "${Error} Shadowsocks Rust 备份源(旧版本) 安装失败 !"
|
|
|
+ return 1 && exit 1
|
|
|
+ else
|
|
|
+ rm -rf "shadowsocks-v1.14.1.${arch}-unknown-linux-gnu.tar.xz"
|
|
|
+ chmod +x ssserver
|
|
|
+ mv -f ssserver "${SS_File}"
|
|
|
+ rm sslocal ssmanager ssservice ssurl
|
|
|
+ echo "v1.14.1" > ${SS_Now_ver_File}
|
|
|
+ echo -e "${Info} Shadowsocks Rust 备份源(旧版本) 主程序下载安装完毕！"
|
|
|
+ return 0
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+download() {
|
|
|
+ if [[ ! -e "${SS_Folder}" ]]; then
|
|
|
+ mkdir "${SS_Folder}"
|
|
|
+ # else
|
|
|
+ # [[ -e "${SS_File}" ]] && rm -rf "${SS_File}"
|
|
|
+ fi
|
|
|
+ stable_download
|
|
|
+ if [[ $? != 0 ]]; then
|
|
|
+ backup_download
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+# Shadow TLS 官方源下载
|
|
|
+stable_download_stls() {
|
|
|
+ echo -e "${Info} 默认开始下载官方源 Shadow TLS ……"
|
|
|
+ wget --no-check-certificate -N "https://github.com/ihciah/shadow-tls/releases/download/${stls_new_ver}/shadow-tls-${arch}-unknown-linux-musl"
|
|
|
+ if [[ ! -e "shadow-tls-${arch}-unknown-linux-musl" ]]; then
|
|
|
+ echo -e "${Error} Shadow TLS 官方源下载失败！"
|
|
|
+ return 1 && exit 1
|
|
|
+ else
|
|
|
+ chmod +x "shadow-tls-${arch}-unknown-linux-musl"
|
|
|
+ mv -f "shadow-tls-${arch}-unknown-linux-musl" "${STLS_File}"
|
|
|
+ echo "${stls_new_ver}" > ${STLS_Now_ver_File}
|
|
|
+ echo -e "${Info} Shadow TLS 主程序下载安装完毕！"
|
|
|
+ return 0
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+download_stls() {
|
|
|
+ if [[ ! -e "${STLS_Folder}" ]]; then
|
|
|
+ mkdir "${STLS_Folder}"
|
|
|
+ fi
|
|
|
+ stable_download_stls
|
|
|
+}
|
|
|
+
|
|
|
+# Shadow TLS 配置相关函数
|
|
|
+set_stls_port(){
|
|
|
+ while true
|
|
|
+ do
|
|
|
+ echo -e "${Tip} Shadow TLS 端口需与防火墙端口一致！"
|
|
|
+ echo -e "请输入 Shadow TLS 端口 [1-65535]"
|
|
|
+ read -e -p "(默认：8443)：" stls_port
|
|
|
+ [[ -z "${stls_port}" ]] && stls_port="8443"
|
|
|
+ echo $((${stls_port}+0)) &>/dev/null
|
|
|
+ if [[ $? -eq 0 ]]; then
|
|
|
+ if [[ ${stls_port} -ge 1 ]] && [[ ${stls_port} -le 65535 ]]; then
|
|
|
+ echo && echo "========================================"
|
|
|
+ echo -e "Shadow TLS 端口：${Red_background_prefix} ${stls_port} ${Font_color_suffix}"
|
|
|
+ echo "========================================" && echo
|
|
|
+ break
|
|
|
+ else
|
|
|
+ echo "输入错误, 请输入正确的端口。"
|
|
|
+ fi
|
|
|
+ else
|
|
|
+ echo "输入错误, 请输入正确的端口。"
|
|
|
+ fi
|
|
|
+ done
|
|
|
+}
|
|
|
+
|
|
|
+set_stls_password(){
|
|
|
+ echo "请输入 Shadow TLS 密码 [0-9][a-z][A-Z]"
|
|
|
+ read -e -p "(默认：随机生成)：" stls_password
|
|
|
+ [[ -z "${stls_password}" ]] && stls_password=$(< /dev/urandom tr -dc 'a-zA-Z0-9' | head -c 16)
|
|
|
+ echo && echo "========================================"
|
|
|
+ echo -e "Shadow TLS 密码：${Red_background_prefix} ${stls_password} ${Font_color_suffix}"
|
|
|
+ echo "========================================" && echo
|
|
|
+}
|
|
|
+
|
|
|
+set_stls_sni(){
|
|
|
+ echo "请输入 Shadow TLS SNI 域名"
|
|
|
+ read -e -p "(默认：cloudflare.com)：" stls_sni
|
|
|
+ [[ -z "${stls_sni}" ]] && stls_sni="cloudflare.com"
|
|
|
+ echo && echo "========================================"
|
|
|
+ echo -e "Shadow TLS SNI：${Red_background_prefix} ${stls_sni} ${Font_color_suffix}"
|
|
|
+ echo "========================================" && echo
|
|
|
+}
|
|
|
+
|
|
|
+set_stls_fastopen(){
|
|
|
+ echo -e "是否开启 Shadow TLS TCP Fast Open ？
|
|
|
+========================================
|
|
|
+${Green_font_prefix} 1.${Font_color_suffix} 开启 ${Green_font_prefix} 2.${Font_color_suffix} 关闭
|
|
|
+========================================"
|
|
|
+ read -e -p "(默认：1.开启)：" stls_fastopen_choice
|
|
|
+ [[ -z "${stls_fastopen_choice}" ]] && stls_fastopen_choice="1"
|
|
|
+ if [[ ${stls_fastopen_choice} == "1" ]]; then
|
|
|
+ stls_fastopen="true"
|
|
|
+ else
|
|
|
+ stls_fastopen="false"
|
|
|
+ fi
|
|
|
+ echo && echo "========================================"
|
|
|
+ echo -e "Shadow TLS FastOpen：${Red_background_prefix} ${stls_fastopen} ${Font_color_suffix}"
|
|
|
+ echo "========================================" && echo
|
|
|
+}
|
|
|
+
|
|
|
+set_stls_strict(){
|
|
|
+ echo -e "是否开启 Shadow TLS Strict 模式 ？
|
|
|
+========================================
|
|
|
+${Green_font_prefix} 1.${Font_color_suffix} 开启 ${Green_font_prefix} 2.${Font_color_suffix} 关闭
|
|
|
+========================================"
|
|
|
+ read -e -p "(默认：1.开启)：" stls_strict_choice
|
|
|
+ [[ -z "${stls_strict_choice}" ]] && stls_strict_choice="1"
|
|
|
+ if [[ ${stls_strict_choice} == "1" ]]; then
|
|
|
+ stls_strict="true"
|
|
|
+ else
|
|
|
+ stls_strict="false"
|
|
|
+ fi
|
|
|
+ echo && echo "========================================"
|
|
|
+ echo -e "Shadow TLS Strict：${Red_background_prefix} ${stls_strict} ${Font_color_suffix}"
|
|
|
+ echo "========================================" && echo
|
|
|
+}
|
|
|
+
|
|
|
+set_stls_tls_wildcard_sni(){
|
|
|
+ echo -e "请选择 Shadow TLS Wildcard SNI 模式：
|
|
|
+========================================
|
|
|
+${Green_font_prefix} 1.${Font_color_suffix} authed (默认)
|
|
|
+${Green_font_prefix} 2.${Font_color_suffix} off
|
|
|
+${Green_font_prefix} 3.${Font_color_suffix} all
|
|
|
+========================================"
|
|
|
+ read -e -p "(默认：1.authed)：" stls_tls_wildcard_sni_choice
|
|
|
+ [[ -z "${stls_tls_wildcard_sni_choice}" ]] && stls_tls_wildcard_sni_choice="1"
|
|
|
+ case "${stls_tls_wildcard_sni_choice}" in
|
|
|
+ 1) stls_tls_wildcard_sni="authed" ;;
|
|
|
+ 2) stls_tls_wildcard_sni="off" ;;
|
|
|
+ 3) stls_tls_wildcard_sni="all" ;;
|
|
|
+ *) stls_tls_wildcard_sni="authed" ;;
|
|
|
+ esac
|
|
|
+ echo && echo "========================================"
|
|
|
+ echo -e "TLS Wildcard SNI：${Red_background_prefix} ${stls_tls_wildcard_sni} ${Font_color_suffix}"
|
|
|
+ echo "========================================" && echo
|
|
|
+}
|
|
|
+
|
|
|
+set_stls_fallback(){
|
|
|
+ echo "请输入 Shadow TLS 回退域名"
|
|
|
+ read -e -p "(默认：cloud.tencent.com:443)：" stls_fallback
|
|
|
+ [[ -z "${stls_fallback}" ]] && stls_fallback="cloud.tencent.com:443"
|
|
|
+ echo && echo "========================================"
|
|
|
+ echo -e "Shadow TLS 回退域名：${Red_background_prefix} ${stls_fallback} ${Font_color_suffix}"
|
|
|
+ echo "========================================" && echo
|
|
|
+}
|
|
|
+
|
|
|
+service(){
|
|
|
+ echo "
|
|
|
+[Unit]
|
|
|
+Description= Shadowsocks Rust Service
|
|
|
+After=network-online.target
|
|
|
+Wants=network-online.target systemd-networkd-wait-online.service
|
|
|
+[Service]
|
|
|
+LimitNOFILE=32767
|
|
|
+Type=simple
|
|
|
+User=root
|
|
|
+Restart=on-failure
|
|
|
+RestartSec=5s
|
|
|
+DynamicUser=true
|
|
|
+ExecStartPre=/bin/sh -c 'ulimit -n 51200'
|
|
|
+ExecStart=${SS_File} -c ${SS_Conf}
|
|
|
+[Install]
|
|
|
+WantedBy=multi-user.target" > /etc/systemd/system/ss-rust.service
|
|
|
+systemctl enable --now ss-rust
|
|
|
+ echo -e "${Info} Shadowsocks Rust 服务配置完成！"
|
|
|
+}
|
|
|
+
|
|
|
+service_stls(){
|
|
|
+ cat > /etc/systemd/system/shadowtls.service<<-EOF
|
|
|
+[Unit]
|
|
|
+Description=Shadow TLS Service
|
|
|
+After=network-online.target
|
|
|
+Wants=network-online.target systemd-networkd-wait-online.service
|
|
|
+
|
|
|
+[Service]
|
|
|
+LimitNOFILE=32767
|
|
|
+Type=simple
|
|
|
+User=root
|
|
|
+Restart=on-failure
|
|
|
+RestartSec=5s
|
|
|
+Environment=MONOIO_FORCE_LEGACY_DRIVER=1
|
|
|
+ExecStartPre=/bin/sh -c 'ulimit -n 51200'
|
|
|
+ExecStart=${STLS_File} config --config ${STLS_Conf}
|
|
|
+
|
|
|
+[Install]
|
|
|
+WantedBy=multi-user.target
|
|
|
+EOF
|
|
|
+ systemctl enable --now shadowtls
|
|
|
+ echo -e "${Info} Shadow TLS 服务配置完成！"
|
|
|
+}
|
|
|
+
|
|
|
+installation_dependency(){
|
|
|
+ if [[ ${release} == "centos" ]]; then
|
|
|
+ yum update
|
|
|
+ yum install jq gzip wget curl unzip xz openssl -y
|
|
|
+ else
|
|
|
+ apt-get update
|
|
|
+ apt-get install jq gzip wget curl unzip xz-utils openssl -y
|
|
|
+ fi
|
|
|
+ \cp -f /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
|
|
|
+}
|
|
|
+
|
|
|
+write_config(){
|
|
|
+ cat > ${SS_Conf}<<-EOF
|
|
|
+{
|
|
|
+ "server": "::",
|
|
|
+ "server_port": ${port},
|
|
|
+ "password": "${password}",
|
|
|
+ "method": "${cipher}",
|
|
|
+ "fast_open": ${tfo},
|
|
|
+ "mode": "tcp_and_udp",
|
|
|
+ "user":"nobody",
|
|
|
+ "timeout":300,
|
|
|
+ "nameserver":"1.1.1.1"
|
|
|
+}
|
|
|
+EOF
|
|
|
+}
|
|
|
+
|
|
|
+write_stls_config(){
|
|
|
+ # 设置默认值
|
|
|
+ [[ -z "${stls_fastopen}" ]] && stls_fastopen="true"
|
|
|
+ [[ -z "${stls_strict}" ]] && stls_strict="true"
|
|
|
+ [[ -z "${stls_tls_wildcard_sni}" ]] && stls_tls_wildcard_sni="authed"
|
|
|
+ [[ -z "${stls_fallback}" ]] && stls_fallback="cloud.tencent.com:443"
|
|
|
+
|
|
|
+ # 构建 dispatch 配置
|
|
|
+ if [[ -z "${stls_dispatch}" ]]; then
|
|
|
+ # 没有现有配置，使用默认配置
|
|
|
+ # SNI 域名对应的目标地址也使用相同的域名:443
|
|
|
+ stls_dispatch_config="\"${stls_sni}\": \"${stls_sni}:443\",
|
|
|
+ \"captive.apple.com\": \"captive.apple.com:443\""
|
|
|
+ else
|
|
|
+ # 有现有配置，需要智能更新 SNI
|
|
|
+ if [[ ! -z "${stls_sni}" && -e ${STLS_Conf} ]]; then
|
|
|
+ # 查找需要更新的 SNI（排除 captive.apple.com）
|
|
|
+ old_sni=$(cat ${STLS_Conf}|jq -r '.server.tls_addr.dispatch | keys[] | select(. != "captive.apple.com")' 2>/dev/null | head -1)
|
|
|
+ if [[ ! -z "${old_sni}" && "${old_sni}" != "null" && "${old_sni}" != "${stls_sni}" ]]; then
|
|
|
+ # 需要替换旧的 SNI 为新的 SNI，同时更新键和值
|
|
|
+ echo -e "${Info} 更新主要 SNI 从 ${old_sni} 到 ${stls_sni}"
|
|
|
+
|
|
|
+ # 使用 jq 来精确替换键和值
|
|
|
+ stls_dispatch_config=$(cat ${STLS_Conf} | jq -r --arg old_sni "${old_sni}" --arg new_sni "${stls_sni}" '
|
|
|
+ .server.tls_addr.dispatch |
|
|
|
+ to_entries |
|
|
|
+ map(if .key == $old_sni then (.key = $new_sni | .value = ($new_sni + ":443")) else . end) |
|
|
|
+ map("\"\(.key)\": \"\(.value)\"") |
|
|
|
+ join(",\n ")
|
|
|
+ ' 2>/dev/null)
|
|
|
+
|
|
|
+ # 如果 jq 处理失败，回退到字符串替换
|
|
|
+ if [[ -z "${stls_dispatch_config}" || "${stls_dispatch_config}" == "null" ]]; then
|
|
|
+ echo -e "${Info} jq 处理失败，使用字符串替换"
|
|
|
+ # 先替换键，再替换对应的值
|
|
|
+ stls_dispatch_config=$(echo "${stls_dispatch}" | sed "s/\"${old_sni}\": \"[^\"]*\"/\"${stls_sni}\": \"${stls_sni}:443\"/g")
|
|
|
+ fi
|
|
|
+ else
|
|
|
+ # 如果没有找到需要更新的 SNI，或者 SNI 已经是正确的，直接使用现有配置
|
|
|
+ stls_dispatch_config="${stls_dispatch}"
|
|
|
+ fi
|
|
|
+ else
|
|
|
+ stls_dispatch_config="${stls_dispatch}"
|
|
|
+ fi
|
|
|
+ fi
|
|
|
+
|
|
|
+ # 调试信息（可选，用于排查问题）
|
|
|
+ # echo -e "${Info} 调试信息："
|
|
|
+ # echo -e " stls_sni: ${stls_sni}"
|
|
|
+ # echo -e " stls_dispatch_config: ${stls_dispatch_config}"
|
|
|
+
|
|
|
+ cat > ${STLS_Conf}<<-EOF
|
|
|
+{
|
|
|
+ "disable_nodelay": false,
|
|
|
+ "fastopen": ${stls_fastopen},
|
|
|
+ "v3": true,
|
|
|
+ "strict": ${stls_strict},
|
|
|
+ "server": {
|
|
|
+ "listen": "0.0.0.0:${stls_port}",
|
|
|
+ "server_addr": "127.0.0.1:${port}",
|
|
|
+ "tls_addr": {
|
|
|
+ "wildcard_sni": "${stls_tls_wildcard_sni}",
|
|
|
+ "dispatch": {
|
|
|
+ ${stls_dispatch_config}
|
|
|
+ },
|
|
|
+ "fallback": "${stls_fallback}"
|
|
|
+ },
|
|
|
+ "password": "${stls_password}",
|
|
|
+ "wildcard_sni": "authed"
|
|
|
+ }
|
|
|
+}
|
|
|
+EOF
|
|
|
+
|
|
|
+ # 验证配置文件是否正确生成
|
|
|
+ if [[ -e ${STLS_Conf} ]]; then
|
|
|
+ # 检查配置文件是否为有效的 JSON
|
|
|
+ if ! jq . ${STLS_Conf} >/dev/null 2>&1; then
|
|
|
+ echo -e "${Error} Shadow TLS 配置文件格式错误！"
|
|
|
+ return 1
|
|
|
+ fi
|
|
|
+ echo -e "${Info} Shadow TLS 配置文件写入成功"
|
|
|
+
|
|
|
+ # 显示当前配置的 SNI
|
|
|
+ current_sni=$(cat ${STLS_Conf}|jq -r '.server.tls_addr.dispatch | keys[0]' 2>/dev/null)
|
|
|
+ if [[ ! -z "${current_sni}" && "${current_sni}" != "null" ]]; then
|
|
|
+ echo -e "${Info} 当前配置的 SNI: ${Green_font_prefix}${current_sni}${Font_color_suffix}"
|
|
|
+ fi
|
|
|
+ else
|
|
|
+ echo -e "${Error} Shadow TLS 配置文件写入失败！"
|
|
|
+ return 1
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+read_config(){
|
|
|
+ [[ ! -e ${SS_Conf} ]] && echo -e "${Error} Shadowsocks Rust 配置文件不存在！" && exit 1
|
|
|
+ port=$(cat ${SS_Conf}|jq -r '.server_port')
|
|
|
+ password=$(cat ${SS_Conf}|jq -r '.password')
|
|
|
+ cipher=$(cat ${SS_Conf}|jq -r '.method')
|
|
|
+ tfo=$(cat ${SS_Conf}|jq -r '.fast_open')
|
|
|
+}
|
|
|
+
|
|
|
+read_stls_config(){
|
|
|
+ [[ ! -e ${STLS_Conf} ]] && echo -e "${Error} Shadow TLS 配置文件不存在！" && exit 1
|
|
|
+ stls_port=$(cat ${STLS_Conf}|jq -r '.server.listen' | grep -oE '[0-9]+$')
|
|
|
+ stls_password=$(cat ${STLS_Conf}|jq -r '.server.password')
|
|
|
+ stls_sni=$(cat ${STLS_Conf}|jq -r '.server.tls_addr.dispatch | keys[0]')
|
|
|
+ stls_fastopen=$(cat ${STLS_Conf}|jq -r '.fastopen')
|
|
|
+ stls_strict=$(cat ${STLS_Conf}|jq -r '.strict')
|
|
|
+ stls_tls_wildcard_sni=$(cat ${STLS_Conf}|jq -r '.server.tls_addr.wildcard_sni')
|
|
|
+ stls_fallback=$(cat ${STLS_Conf}|jq -r '.server.tls_addr.fallback')
|
|
|
+ # 读取完整的 dispatch 配置
|
|
|
+ stls_dispatch=$(cat ${STLS_Conf}|jq -r '.server.tls_addr.dispatch | to_entries | map("\"\(.key)\": \"\(.value)\"") | join(",\n ")')
|
|
|
+}
|
|
|
+
|
|
|
+set_port(){
|
|
|
+ while true
|
|
|
+ do
|
|
|
+ echo -e "${Tip} 本步骤不涉及系统防火墙端口操作，请手动放行相应端口！"
|
|
|
+ echo -e "请输入 Shadowsocks Rust 端口 [1-65535]"
|
|
|
+ read -e -p "(默认：2525)：" port
|
|
|
+ [[ -z "${port}" ]] && port="2525"
|
|
|
+ echo $((${port}+0)) &>/dev/null
|
|
|
+ if [[ $? -eq 0 ]]; then
|
|
|
+ if [[ ${port} -ge 1 ]] && [[ ${port} -le 65535 ]]; then
|
|
|
+ echo && echo "========================================"
|
|
|
+ echo -e "端口：${Red_background_prefix} ${port} ${Font_color_suffix}"
|
|
|
+ echo "========================================" && echo
|
|
|
+ break
|
|
|
+ else
|
|
|
+ echo "输入错误, 请输入正确的端口。"
|
|
|
+ fi
|
|
|
+ else
|
|
|
+ echo "输入错误, 请输入正确的端口。"
|
|
|
+ fi
|
|
|
+ done
|
|
|
+}
|
|
|
+
|
|
|
+set_tfo(){
|
|
|
+ echo -e "是否开启 TCP Fast Open ？
|
|
|
+========================================
|
|
|
+${Green_font_prefix} 1.${Font_color_suffix} 开启 ${Green_font_prefix} 2.${Font_color_suffix} 关闭
|
|
|
+========================================"
|
|
|
+ read -e -p "(默认：1.开启)：" tfo
|
|
|
+ [[ -z "${tfo}" ]] && tfo="1"
|
|
|
+ if [[ ${tfo} == "1" ]]; then
|
|
|
+ tfo=true
|
|
|
+ enable_systfo
|
|
|
+ else
|
|
|
+ tfo=false
|
|
|
+ fi
|
|
|
+ echo && echo "=================================="
|
|
|
+ echo -e "TCP Fast Open 开启状态：${Red_background_prefix} ${tfo} ${Font_color_suffix}"
|
|
|
+ echo "==================================" && echo
|
|
|
+}
|
|
|
+
|
|
|
+set_password(){
|
|
|
+ echo "请输入 Shadowsocks Rust 密码 [0-9][a-z][A-Z]"
|
|
|
+ read -e -p "(默认：随机生成)：" password
|
|
|
+ # 当用户未输入密码时，执行默认生成逻辑
|
|
|
+ if [[ -z "${password}" ]]; then
|
|
|
+ # 判断是否为2022系列加密
|
|
|
+ if [[ ${cipher} == "2022-blake3-aes-256-gcm" || ${cipher} == "2022-blake3-chacha20-poly1305" ]]; then
|
|
|
+ # 2022系列必须使用指定长度的Base64密钥
|
|
|
+ echo -e "${Tip} 为 ${cipher} 生成 32 字节 Base64 密钥..."
|
|
|
+ password=$(openssl rand -base64 32)
|
|
|
+ elif [[ ${cipher} == "2022-blake3-aes-128-gcm" ]]; then
|
|
|
+ # 2022系列必须使用指定长度的Base64密钥
|
|
|
+ echo -e "${Tip} 为 ${cipher} 生成 16 字节 Base64 密钥..."
|
|
|
+ password=$(openssl rand -base64 16)
|
|
|
+ else
|
|
|
+ # 其他加密方式，生成一个普通的16位字母和数字的随机密码
|
|
|
+ echo -e "${Tip} 为 ${cipher} 生成 16 位随机密码 (非Base64)..."
|
|
|
+ password=$(< /dev/urandom tr -dc 'a-zA-Z0-9' | head -c 16)
|
|
|
+ fi
|
|
|
+ fi
|
|
|
+ echo && echo "========================================"
|
|
|
+ echo -e "密码：${Red_font_prefix} ${password} ${Font_color_suffix}"
|
|
|
+ echo "========================================" && echo
|
|
|
+}
|
|
|
+
|
|
|
+set_cipher(){
|
|
|
+ echo -e "请选择 Shadowsocks Rust 加密方式
|
|
|
+========================================
|
|
|
+ ${Green_font_prefix} 1.${Font_color_suffix} aes-128-gcm ${Green_font_prefix}(默认)${Font_color_suffix}
|
|
|
+ ${Green_font_prefix} 2.${Font_color_suffix} aes-256-gcm ${Green_font_prefix}(推荐)${Font_color_suffix}
|
|
|
+ ${Green_font_prefix} 3.${Font_color_suffix} chacha20-ietf-poly1305 ${Green_font_prefix}${Font_color_suffix}
|
|
|
+ ${Green_font_prefix} 4.${Font_color_suffix} plain ${Red_font_prefix}(不推荐)${Font_color_suffix}
|
|
|
+ ${Green_font_prefix} 5.${Font_color_suffix} none ${Red_font_prefix}(不推荐)${Font_color_suffix}
|
|
|
+ ${Green_font_prefix} 6.${Font_color_suffix} table
|
|
|
+ ${Green_font_prefix} 7.${Font_color_suffix} aes-128-cfb
|
|
|
+ ${Green_font_prefix} 8.${Font_color_suffix} aes-256-cfb
|
|
|
+ ${Green_font_prefix} 9.${Font_color_suffix} aes-256-ctr
|
|
|
+ ${Green_font_prefix}10.${Font_color_suffix} camellia-256-cfb
|
|
|
+ ${Green_font_prefix}11.${Font_color_suffix} rc4-md5
|
|
|
+ ${Green_font_prefix}12.${Font_color_suffix} chacha20-ietf
|
|
|
+========================================
|
|
|
+ ${Tip} AEAD 2022 加密（须v1.15.0及以上版本且密码须经过Base64加密）
|
|
|
+========================================
|
|
|
+ ${Green_font_prefix}13.${Font_color_suffix} 2022-blake3-aes-128-gcm ${Green_font_prefix}(推荐)${Font_color_suffix}
|
|
|
+ ${Green_font_prefix}14.${Font_color_suffix} 2022-blake3-aes-256-gcm ${Green_font_prefix}(推荐)${Font_color_suffix}
|
|
|
+ ${Green_font_prefix}15.${Font_color_suffix} 2022-blake3-chacha20-poly1305
|
|
|
+ ========================================
|
|
|
+ ${Tip} 如需其它加密方式请手动修改配置文件 !" && echo
|
|
|
+ read -e -p "(默认: 1. aes-128-gcm)：" cipher
|
|
|
+ [[ -z "${cipher}" ]] && cipher="1"
|
|
|
+ if [[ ${cipher} == "1" ]]; then
|
|
|
+ cipher="aes-128-gcm"
|
|
|
+ elif [[ ${cipher} == "2" ]]; then
|
|
|
+ cipher="aes-256-gcm"
|
|
|
+ elif [[ ${cipher} == "3" ]]; then
|
|
|
+ cipher="chacha20-ietf-poly1305"
|
|
|
+ elif [[ ${cipher} == "4" ]]; then
|
|
|
+ cipher="plain"
|
|
|
+ elif [[ ${cipher} == "5" ]]; then
|
|
|
+ cipher="none"
|
|
|
+ elif [[ ${cipher} == "6" ]]; then
|
|
|
+ cipher="table"
|
|
|
+ elif [[ ${cipher} == "7" ]]; then
|
|
|
+ cipher="aes-128-cfb"
|
|
|
+ elif [[ ${cipher} == "8" ]]; then
|
|
|
+ cipher="aes-256-cfb"
|
|
|
+ elif [[ ${cipher} == "9" ]]; then
|
|
|
+ cipher="aes-256-ctr"
|
|
|
+ elif [[ ${cipher} == "10" ]]; then
|
|
|
+ cipher="camellia-256-cfb"
|
|
|
+ elif [[ ${cipher} == "11" ]]; then
|
|
|
+ cipher="arc4-md5"
|
|
|
+ elif [[ ${cipher} == "12" ]]; then
|
|
|
+ cipher="chacha20-ietf"
|
|
|
+ elif [[ ${cipher} == "13" ]]; then
|
|
|
+ cipher="2022-blake3-aes-128-gcm"
|
|
|
+ elif [[ ${cipher} == "14" ]]; then
|
|
|
+ cipher="2022-blake3-aes-256-gcm"
|
|
|
+ elif [[ ${cipher} == "15" ]]; then
|
|
|
+ cipher="2022-blake3-chacha20-poly1305"
|
|
|
+ else
|
|
|
+ cipher="aes-128-gcm"
|
|
|
+ fi
|
|
|
+ echo && echo "========================================"
|
|
|
+ echo -e "加密：${Red_background_prefix} ${cipher} ${Font_color_suffix}"
|
|
|
+ echo "========================================" && echo
|
|
|
+}
|
|
|
+
|
|
|
+set_config(){
|
|
|
+ check_installed_status
|
|
|
+ echo && echo -e "你要做什么？
|
|
|
+========================================
|
|
|
+ ${Green_font_prefix}1.${Font_color_suffix} 修改 端口配置
|
|
|
+ ${Green_font_prefix}2.${Font_color_suffix} 修改 加密配置
|
|
|
+ ${Green_font_prefix}3.${Font_color_suffix} 修改 密码配置
|
|
|
+ ${Green_font_prefix}4.${Font_color_suffix} 修改 TFO 配置
|
|
|
+========================================
|
|
|
+ ${Green_font_prefix}5.${Font_color_suffix} 修改 全部配置" && echo
|
|
|
+ read -e -p "(默认：取消)：" modify
|
|
|
+ [[ -z "${modify}" ]] && echo "已取消..." && exit 1
|
|
|
+ if [[ "${modify}" == "1" ]]; then
|
|
|
+ read_config
|
|
|
+ set_port
|
|
|
+ cipher=${cipher}
|
|
|
+ password=${password}
|
|
|
+ tfo=${tfo}
|
|
|
+ write_config
|
|
|
+ restart
|
|
|
+ elif [[ "${modify}" == "2" ]]; then
|
|
|
+ read_config
|
|
|
+ set_cipher
|
|
|
+ port=${port}
|
|
|
+ password=${password}
|
|
|
+ tfo=${tfo}
|
|
|
+ write_config
|
|
|
+ restart
|
|
|
+ elif [[ "${modify}" == "3" ]]; then
|
|
|
+ read_config
|
|
|
+ cipher=${cipher}
|
|
|
+ set_password
|
|
|
+ port=${port}
|
|
|
+ tfo=${tfo}
|
|
|
+ write_config
|
|
|
+ restart
|
|
|
+ elif [[ "${modify}" == "4" ]]; then
|
|
|
+ read_config
|
|
|
+ set_tfo
|
|
|
+ cipher=${cipher}
|
|
|
+ port=${port}
|
|
|
+ password=${password}
|
|
|
+ write_config
|
|
|
+ restart
|
|
|
+ elif [[ "${modify}" == "5" ]]; then
|
|
|
+ read_config
|
|
|
+ set_port
|
|
|
+ set_cipher
|
|
|
+ set_password
|
|
|
+ set_tfo
|
|
|
+ write_config
|
|
|
+ restart
|
|
|
+ else
|
|
|
+ echo -e "${Error} 请输入正确的数字(1-5)" && exit 1
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+install(){
|
|
|
+ [[ -e ${SS_File} ]] && echo -e "${Error} 检测到 Shadowsocks Rust 已安装！" && exit 1
|
|
|
+ echo -e "${Info} 开始设置 配置..."
|
|
|
+ set_port
|
|
|
+ set_cipher
|
|
|
+ set_password
|
|
|
+ set_tfo
|
|
|
+ echo -e "${Info} 开始安装/配置 依赖..."
|
|
|
+ installation_dependency
|
|
|
+ echo -e "${Info} 开始下载/安装..."
|
|
|
+ check_new_ver
|
|
|
+ download
|
|
|
+ echo -e "${Info} 开始安装系统服务脚本..."
|
|
|
+ service
|
|
|
+ echo -e "${Info} 开始写入 配置文件..."
|
|
|
+ write_config
|
|
|
+ echo -e "${Info} 所有步骤 安装完毕，开始启动..."
|
|
|
+ start
|
|
|
+ echo -e "${Info} Shadowsocks Rust 安装完成！"
|
|
|
+
|
|
|
+ # 询问是否继续安装 Shadow TLS
|
|
|
+ echo && echo -e "${Tip} 是否继续安装 Shadow TLS 流量伪装？"
|
|
|
+ read -e -p "(默认: N 不安装) [y/N]: " install_stls_choice
|
|
|
+ [[ -z "${install_stls_choice}" ]] && install_stls_choice="n"
|
|
|
+
|
|
|
+ if [[ ${install_stls_choice} == [Yy] ]]; then
|
|
|
+ echo -e "${Info} 开始安装 Shadow TLS..."
|
|
|
+ install_stls_after_ss
|
|
|
+ else
|
|
|
+ echo -e "${Info} 跳过 Shadow TLS 安装，显示 Shadowsocks Rust 配置..."
|
|
|
+ view_ss_only
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+install_stls(){
|
|
|
+ [[ -e ${STLS_File} ]] && echo -e "${Error} 检测到 Shadow TLS 已安装！" && exit 1
|
|
|
+
|
|
|
+ # 检查 Shadowsocks Rust 是否已安装
|
|
|
+ if [[ ! -e ${SS_File} ]]; then
|
|
|
+ echo -e "${Error} 检测到 Shadowsocks Rust 尚未安装！"
|
|
|
+ echo -e "${Info} Shadow TLS 需要配合 Shadowsocks Rust 使用。"
|
|
|
+ echo -e "${Info} 建议先安装 Shadowsocks Rust，再安装 Shadow TLS。"
|
|
|
+ echo && read -e -p "是否现在安装 Shadowsocks Rust？[Y/n]：" install_ss_choice
|
|
|
+ [[ -z "${install_ss_choice}" ]] && install_ss_choice="Y"
|
|
|
+ if [[ ${install_ss_choice} == [Yy] ]]; then
|
|
|
+ echo -e "${Info} 开始安装 Shadowsocks Rust..."
|
|
|
+ install
|
|
|
+ echo -e "${Info} Shadowsocks Rust 安装完成，现在开始安装 Shadow TLS..."
|
|
|
+ else
|
|
|
+ echo -e "${Info} 已取消安装，返回上级菜单..."
|
|
|
+ shadowtls_menu
|
|
|
+ return
|
|
|
+ fi
|
|
|
+ fi
|
|
|
+
|
|
|
+ echo -e "${Info} 开始设置 Shadow TLS 配置..."
|
|
|
+ read_config # 读取现有 SS 配置
|
|
|
+
|
|
|
+ # 使用交互式配置，每项都有默认值
|
|
|
+ echo -e "${Info} 请配置 Shadow TLS 参数（可直接回车使用默认值）："
|
|
|
+
|
|
|
+ set_stls_port
|
|
|
+ set_stls_password
|
|
|
+ set_stls_sni
|
|
|
+ set_stls_fastopen
|
|
|
+ set_stls_strict
|
|
|
+ set_stls_tls_wildcard_sni
|
|
|
+ set_stls_fallback
|
|
|
+ manage_stls_dispatch
|
|
|
+
|
|
|
+ echo -e "${Info} 开始下载/安装 Shadow TLS..."
|
|
|
+ check_stls_new_ver
|
|
|
+ download_stls
|
|
|
+ echo -e "${Info} 开始安装 Shadow TLS 服务脚本..."
|
|
|
+ service_stls
|
|
|
+ echo -e "${Info} 开始写入 Shadow TLS 配置文件..."
|
|
|
+ write_stls_config
|
|
|
+ echo -e "${Info} Shadow TLS 安装完毕，开始启动..."
|
|
|
+ start_stls
|
|
|
+ echo -e "${Info} Shadow TLS 安装完成！显示完整配置信息..."
|
|
|
+ view_combined_config_with_return
|
|
|
+}
|
|
|
+
|
|
|
+install_stls_after_ss(){
|
|
|
+ echo -e "${Info} 开始设置 Shadow TLS 配置..."
|
|
|
+ read_config # 读取现有 SS 配置
|
|
|
+
|
|
|
+ # 使用交互式配置，每项都有默认值
|
|
|
+ echo -e "${Info} 请配置 Shadow TLS 参数（可直接回车使用默认值）："
|
|
|
+
|
|
|
+ set_stls_port
|
|
|
+ set_stls_password
|
|
|
+ set_stls_sni
|
|
|
+ set_stls_fastopen
|
|
|
+ set_stls_strict
|
|
|
+ set_stls_tls_wildcard_sni
|
|
|
+ set_stls_fallback
|
|
|
+ manage_stls_dispatch
|
|
|
+
|
|
|
+ echo -e "${Info} 开始下载/安装 Shadow TLS..."
|
|
|
+ check_stls_new_ver
|
|
|
+ download_stls
|
|
|
+ echo -e "${Info} 开始安装 Shadow TLS 服务脚本..."
|
|
|
+ service_stls
|
|
|
+ echo -e "${Info} 开始写入 Shadow TLS 配置文件..."
|
|
|
+ write_stls_config
|
|
|
+ echo -e "${Info} Shadow TLS 安装完毕，开始启动..."
|
|
|
+ start_stls
|
|
|
+ echo -e "${Info} Shadow TLS 安装完成！显示完整配置信息..."
|
|
|
+ view_combined_config_with_return
|
|
|
+}
|
|
|
+
|
|
|
+view(){
|
|
|
+ check_installed_status
|
|
|
+ read_config
|
|
|
+ getipv4
|
|
|
+ getipv6
|
|
|
+ link_qr
|
|
|
+ clear && echo
|
|
|
+ echo -e "Shadowsocks Rust 配置："
|
|
|
+ echo -e "————————————————————————————————————————"
|
|
|
+ [[ "${ipv4}" != "IPv4_Error" ]] && echo -e " 地址：${Green_font_prefix}${ipv4}${Font_color_suffix}"
|
|
|
+ [[ "${ipv6}" != "IPv6_Error" ]] && echo -e " 地址：${Green_font_prefix}${ipv6}${Font_color_suffix}"
|
|
|
+ echo -e " 端口：${Green_font_prefix}${port}${Font_color_suffix}"
|
|
|
+ echo -e " 密码：${Green_font_prefix}${password}${Font_color_suffix}"
|
|
|
+ echo -e " 加密：${Green_font_prefix}${cipher}${Font_color_suffix}"
|
|
|
+ echo -e " TFO ：${Green_font_prefix}${tfo}${Font_color_suffix}"
|
|
|
+ echo -e "————————————————————————————————————————"
|
|
|
+ [[ ! -z "${link_ipv4}" ]] && echo -e "${link_ipv4}"
|
|
|
+ [[ ! -z "${link_ipv6}" ]] && echo -e "${link_ipv6}"
|
|
|
+ echo -e "—————————————————————————"
|
|
|
+ echo -e "${Info} Surge 配置："
|
|
|
+ if [[ "${ipv4}" != "IPv4_Error" ]]; then
|
|
|
+ echo -e "$(uname -n) = ss, ${ipv4},${port}, encrypt-method=${cipher}, password=${password}, tfo=${tfo}, udp-relay=true, ecn=true"
|
|
|
+ else
|
|
|
+ echo -e "$(uname -n) = ss, ${ipv6},${port}, encrypt-method=${cipher}, password=${password}, tfo=${tfo}, udp-relay=true, ecn=true"
|
|
|
+ fi
|
|
|
+ echo -e "—————————————————————————"
|
|
|
+ echo && echo -n " 按回车键返回主菜单..." && read
|
|
|
+ start_menu
|
|
|
+}
|
|
|
+
|
|
|
+view_ss_only(){
|
|
|
+ check_installed_status
|
|
|
+ read_config
|
|
|
+ getipv4
|
|
|
+ getipv6
|
|
|
+ link_qr
|
|
|
+ clear && echo
|
|
|
+ echo -e "Shadowsocks Rust 配置："
|
|
|
+ echo -e "————————————————————————————————————————"
|
|
|
+ [[ "${ipv4}" != "IPv4_Error" ]] && echo -e " 地址：${Green_font_prefix}${ipv4}${Font_color_suffix}"
|
|
|
+ [[ "${ipv6}" != "IPv6_Error" ]] && echo -e " 地址：${Green_font_prefix}${ipv6}${Font_color_suffix}"
|
|
|
+ echo -e " 端口：${Green_font_prefix}${port}${Font_color_suffix}"
|
|
|
+ echo -e " 密码：${Green_font_prefix}${password}${Font_color_suffix}"
|
|
|
+ echo -e " 加密：${Green_font_prefix}${cipher}${Font_color_suffix}"
|
|
|
+ echo -e " TFO ：${Green_font_prefix}${tfo}${Font_color_suffix}"
|
|
|
+ echo -e "————————————————————————————————————————"
|
|
|
+ [[ ! -z "${link_ipv4}" ]] && echo -e "${link_ipv4}"
|
|
|
+ [[ ! -z "${link_ipv6}" ]] && echo -e "${link_ipv6}"
|
|
|
+ echo -e "—————————————————————————"
|
|
|
+ echo -e "${Info} Surge 配置："
|
|
|
+ if [[ "${ipv4}" != "IPv4_Error" ]]; then
|
|
|
+ echo -e "$(uname -n) = ss, ${ipv4},${port}, encrypt-method=${cipher}, password=${password}, tfo=${tfo}, udp-relay=true, ecn=true"
|
|
|
+ else
|
|
|
+ echo -e "$(uname -n) = ss, ${ipv6},${port}, encrypt-method=${cipher}, password=${password}, tfo=${tfo}, udp-relay=true, ecn=true"
|
|
|
+ fi
|
|
|
+ echo -e "—————————————————————————"
|
|
|
+ echo && echo -n " 按回车键返回主菜单..." && read
|
|
|
+ start_menu
|
|
|
+}
|
|
|
+
|
|
|
+view_combined_config(){
|
|
|
+ local menu_source="$1" # 接收调用来源参数
|
|
|
+ check_installed_status
|
|
|
+ read_config
|
|
|
+ getipv4
|
|
|
+ getipv6
|
|
|
+ link_qr
|
|
|
+ clear && echo
|
|
|
+
|
|
|
+ echo -e "完整配置信息："
|
|
|
+ echo -e "========================================"
|
|
|
+
|
|
|
+ # 显示 Shadow TLS + SS 配置
|
|
|
+ if [[ -e ${STLS_File} ]]; then
|
|
|
+ read_stls_config
|
|
|
+ echo -e "${Info} Shadow TLS + Shadowsocks Rust 配置："
|
|
|
+ echo -e "————————————————————————————————————————"
|
|
|
+ [[ "${ipv4}" != "IPv4_Error" ]] && echo -e " 服务器：${Green_font_prefix}${ipv4}${Font_color_suffix}"
|
|
|
+ [[ "${ipv6}" != "IPv6_Error" ]] && echo -e " 服务器：${Green_font_prefix}${ipv6}${Font_color_suffix}"
|
|
|
+ echo -e " Shadow TLS 端口：${Green_font_prefix}${stls_port}${Font_color_suffix}"
|
|
|
+ echo -e " Shadow TLS 密码：${Green_font_prefix}${stls_password}${Font_color_suffix}"
|
|
|
+ echo -e " Shadow TLS SNI：${Green_font_prefix}${stls_sni}${Font_color_suffix}"
|
|
|
+ echo -e " SS 本地端口：${Green_font_prefix}${port}${Font_color_suffix}"
|
|
|
+ echo -e " SS 密码：${Green_font_prefix}${password}${Font_color_suffix}"
|
|
|
+ echo -e " SS 加密：${Green_font_prefix}${cipher}${Font_color_suffix}"
|
|
|
+ echo -e "————————————————————————————————————————"
|
|
|
+ echo -e "${Info} Shadow TLS + SS Surge 配置："
|
|
|
+ if [[ "${ipv4}" != "IPv4_Error" ]]; then
|
|
|
+ echo -e "$(uname -n) = ss, ${ipv4}, ${stls_port}, encrypt-method=${cipher}, password=${password}, shadow-tls-password=${stls_password}, shadow-tls-sni=${stls_sni}, shadow-tls-version=3, tfo=${tfo}, udp-relay=true, ecn=true, udp-port=${port}"
|
|
|
+ else
|
|
|
+ echo -e "$(uname -n) = ss, ${ipv6}, ${stls_port}, encrypt-method=${cipher}, password=${password}, shadow-tls-password=${stls_password}, shadow-tls-sni=${stls_sni}, shadow-tls-version=3, tfo=${tfo}, udp-relay=true, ecn=true, udp-port=${port}"
|
|
|
+ fi
|
|
|
+ echo && echo -e "========================================"
|
|
|
+ fi
|
|
|
+
|
|
|
+ # 显示纯 SS 配置
|
|
|
+ echo -e "${Info} 原始 Shadowsocks Rust 配置："
|
|
|
+ echo -e "————————————————————————————————————————"
|
|
|
+ [[ "${ipv4}" != "IPv4_Error" ]] && echo -e " 地址：${Green_font_prefix}${ipv4}${Font_color_suffix}"
|
|
|
+ [[ "${ipv6}" != "IPv6_Error" ]] && echo -e " 地址：${Green_font_prefix}${ipv6}${Font_color_suffix}"
|
|
|
+ echo -e " 端口：${Green_font_prefix}${port}${Font_color_suffix}"
|
|
|
+ echo -e " 密码：${Green_font_prefix}${password}${Font_color_suffix}"
|
|
|
+ echo -e " 加密：${Green_font_prefix}${cipher}${Font_color_suffix}"
|
|
|
+ echo -e "————————————————————————————————————————"
|
|
|
+ [[ ! -z "${link_ipv4}" ]] && echo -e "${link_ipv4}"
|
|
|
+ [[ ! -z "${link_ipv6}" ]] && echo -e "${link_ipv6}"
|
|
|
+ echo -e "—————————————————————————"
|
|
|
+ echo -e "${Info} 原始 SS Surge 配置："
|
|
|
+ if [[ "${ipv4}" != "IPv4_Error" ]]; then
|
|
|
+ echo -e "$(uname -n) = ss, ${ipv4}, ${port}, encrypt-method=${cipher}, password=${password}, tfo=${tfo}, udp-relay=true, ecn=true"
|
|
|
+ fi
|
|
|
+ echo -e "========================================"
|
|
|
+
|
|
|
+ # 根据调用来源返回到相应菜单
|
|
|
+ if [[ "$menu_source" == "shadowtls" ]]; then
|
|
|
+ echo && echo -n " 按回车键返回 Shadow TLS 菜单..." && read
|
|
|
+ shadowtls_menu
|
|
|
+ else
|
|
|
+ echo && echo -n " 按回车键返回主菜单..." && read
|
|
|
+ start_menu
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+view_combined_config_with_return(){
|
|
|
+ check_installed_status
|
|
|
+ read_config
|
|
|
+ getipv4
|
|
|
+ getipv6
|
|
|
+ link_qr
|
|
|
+ clear && echo
|
|
|
+
|
|
|
+ echo -e "完整配置信息："
|
|
|
+ echo -e "========================================"
|
|
|
+
|
|
|
+ # 显示 Shadow TLS + SS 配置
|
|
|
+ if [[ -e ${STLS_File} ]]; then
|
|
|
+ read_stls_config
|
|
|
+ echo -e "${Info} Shadow TLS + Shadowsocks Rust 配置："
|
|
|
+ echo -e "————————————————————————————————————————"
|
|
|
+ [[ "${ipv4}" != "IPv4_Error" ]] && echo -e " 服务器：${Green_font_prefix}${ipv4}${Font_color_suffix}"
|
|
|
+ [[ "${ipv6}" != "IPv6_Error" ]] && echo -e " 服务器：${Green_font_prefix}${ipv6}${Font_color_suffix}"
|
|
|
+ echo -e " Shadow TLS 端口：${Green_font_prefix}${stls_port}${Font_color_suffix}"
|
|
|
+ echo -e " Shadow TLS 密码：${Green_font_prefix}${stls_password}${Font_color_suffix}"
|
|
|
+ echo -e " Shadow TLS SNI：${Green_font_prefix}${stls_sni}${Font_color_suffix}"
|
|
|
+ echo -e " SS 本地端口：${Green_font_prefix}${port}${Font_color_suffix}"
|
|
|
+ echo -e " SS 密码：${Green_font_prefix}${password}${Font_color_suffix}"
|
|
|
+ echo -e " SS 加密：${Green_font_prefix}${cipher}${Font_color_suffix}"
|
|
|
+ echo -e "————————————————————————————————————————"
|
|
|
+ echo -e "${Info} Shadow TLS + SS Surge 配置："
|
|
|
+ if [[ "${ipv4}" != "IPv4_Error" ]]; then
|
|
|
+ echo -e "$(uname -n) = ss, ${ipv4}, ${stls_port}, encrypt-method=${cipher}, password=${password}, shadow-tls-password=${stls_password}, shadow-tls-sni=${stls_sni}, shadow-tls-version=3, tfo=${tfo}, ecn=true, udp-relay=true, udp-port=${port}"
|
|
|
+ else
|
|
|
+ echo -e "$(uname -n) = ss, ${ipv6}, ${stls_port}, encrypt-method=${cipher}, password=${password}, shadow-tls-password=${stls_password}, shadow-tls-sni=${stls_sni}, shadow-tls-version=3, tfo=${tfo}, ecn=true, udp-relay=true, udp-port=${port}"
|
|
|
+ fi
|
|
|
+ echo && echo -e "========================================"
|
|
|
+ fi
|
|
|
+
|
|
|
+ # 显示纯 SS 配置
|
|
|
+ echo -e "${Info} 原始 Shadowsocks Rust 配置："
|
|
|
+ echo -e "————————————————————————————————————————"
|
|
|
+ [[ "${ipv4}" != "IPv4_Error" ]] && echo -e " 地址：${Green_font_prefix}${ipv4}${Font_color_suffix}"
|
|
|
+ [[ "${ipv6}" != "IPv6_Error" ]] && echo -e " 地址：${Green_font_prefix}${ipv6}${Font_color_suffix}"
|
|
|
+ echo -e " 端口：${Green_font_prefix}${port}${Font_color_suffix}"
|
|
|
+ echo -e " 密码：${Green_font_prefix}${password}${Font_color_suffix}"
|
|
|
+ echo -e " 加密：${Green_font_prefix}${cipher}${Font_color_suffix}"
|
|
|
+ echo -e "————————————————————————————————————————"
|
|
|
+ [[ ! -z "${link_ipv4}" ]] && echo -e "${link_ipv4}"
|
|
|
+ [[ ! -z "${link_ipv6}" ]] && echo -e "${link_ipv6}"
|
|
|
+ echo -e "—————————————————————————"
|
|
|
+ echo -e "${Info} SS Surge 配置："
|
|
|
+ if [[ "${ipv4}" != "IPv4_Error" ]]; then
|
|
|
+ echo -e "$(uname -n) = ss, ${ipv4}, ${port}, encrypt-method=${cipher}, password=${password}, tfo=${tfo}, udp-relay=true, ecn=true"
|
|
|
+ fi
|
|
|
+ echo -e "========================================"
|
|
|
+ echo && echo -n " 按回车键继续..." && read
|
|
|
+}
|
|
|
+
|
|
|
+# 综合 Shadow TLS 配置函数
|
|
|
+set_stls_config(){
|
|
|
+ check_stls_installed_status
|
|
|
+ read_config
|
|
|
+ read_stls_config
|
|
|
+
|
|
|
+ echo && echo -e "你要修改哪项 Shadow TLS 配置？
|
|
|
+========================================
|
|
|
+ ${Green_font_prefix}1.${Font_color_suffix} 修改 端口配置
|
|
|
+ ${Green_font_prefix}2.${Font_color_suffix} 修改 密码配置
|
|
|
+ ${Green_font_prefix}3.${Font_color_suffix} 修改 Shadow TLS SNI 域名
|
|
|
+ ${Green_font_prefix}4.${Font_color_suffix} 修改 FastOpen 配置
|
|
|
+ ${Green_font_prefix}5.${Font_color_suffix} 修改 Strict 模式配置
|
|
|
+ ${Green_font_prefix}6.${Font_color_suffix} 修改 TLS Wildcard SNI 配置
|
|
|
+ ${Green_font_prefix}7.${Font_color_suffix} 修改 回退域名配置
|
|
|
+ ${Green_font_prefix}8.${Font_color_suffix} 管理 Dispatch 分发配置
|
|
|
+========================================
|
|
|
+ ${Green_font_prefix}9.${Font_color_suffix} 修改 全部配置" && echo
|
|
|
+ read -e -p "(默认：取消)：" modify
|
|
|
+ [[ -z "${modify}" ]] && echo "已取消..." && return
|
|
|
+
|
|
|
+ case "${modify}" in
|
|
|
+ 1)
|
|
|
+ set_stls_port
|
|
|
+ write_stls_config
|
|
|
+ restart_stls
|
|
|
+ ;;
|
|
|
+ 2)
|
|
|
+ set_stls_password
|
|
|
+ write_stls_config
|
|
|
+ restart_stls
|
|
|
+ ;;
|
|
|
+ 3)
|
|
|
+ set_stls_sni
|
|
|
+ write_stls_config
|
|
|
+ restart_stls
|
|
|
+ ;;
|
|
|
+ 4)
|
|
|
+ set_stls_fastopen
|
|
|
+ write_stls_config
|
|
|
+ restart_stls
|
|
|
+ ;;
|
|
|
+ 5)
|
|
|
+ set_stls_strict
|
|
|
+ write_stls_config
|
|
|
+ restart_stls
|
|
|
+ ;;
|
|
|
+ 6)
|
|
|
+ set_stls_tls_wildcard_sni
|
|
|
+ write_stls_config
|
|
|
+ restart_stls
|
|
|
+ ;;
|
|
|
+ 7)
|
|
|
+ set_stls_fallback
|
|
|
+ write_stls_config
|
|
|
+ restart_stls
|
|
|
+ ;;
|
|
|
+ 8)
|
|
|
+ manage_stls_dispatch
|
|
|
+ if [[ ! -z "${stls_dispatch}" ]]; then
|
|
|
+ write_stls_config
|
|
|
+ restart_stls
|
|
|
+ fi
|
|
|
+ ;;
|
|
|
+ 9)
|
|
|
+ set_stls_port
|
|
|
+ set_stls_password
|
|
|
+ set_stls_sni
|
|
|
+ set_stls_fastopen
|
|
|
+ set_stls_strict
|
|
|
+ set_stls_tls_wildcard_sni
|
|
|
+ set_stls_fallback
|
|
|
+ manage_stls_dispatch
|
|
|
+ write_stls_config
|
|
|
+ restart_stls
|
|
|
+ ;;
|
|
|
+ *)
|
|
|
+ echo -e "${Error} 请输入正确的数字(1-9)"
|
|
|
+ set_stls_config
|
|
|
+ ;;
|
|
|
+ esac
|
|
|
+}
|
|
|
+
|
|
|
+# Dispatch 管理的简化版本
|
|
|
+manage_stls_dispatch(){
|
|
|
+ echo -e "${Info} 当前 dispatch 配置："
|
|
|
+ if [[ -e ${STLS_Conf} ]]; then
|
|
|
+ echo -e "${Green_font_prefix}$(cat ${STLS_Conf}|jq -r '.server.tls_addr.dispatch | to_entries | map(" \(.key) -> \(.value)") | join("\n")')${Font_color_suffix}"
|
|
|
+ else
|
|
|
+ echo -e " ${stls_sni} -> 1.1.1.1:443"
|
|
|
+ echo -e " captive.apple.com -> captive.apple.com:443"
|
|
|
+ fi
|
|
|
+
|
|
|
+ echo && echo -e "是否需要修改 dispatch 配置？
|
|
|
+========================================
|
|
|
+${Green_font_prefix} 1.${Font_color_suffix} 使用默认配置（推荐）
|
|
|
+${Green_font_prefix} 2.${Font_color_suffix} 自定义配置所有条目
|
|
|
+========================================"
|
|
|
+ read -e -p "(默认：1.使用默认)：" dispatch_choice
|
|
|
+ [[ -z "${dispatch_choice}" ]] && dispatch_choice="1"
|
|
|
+
|
|
|
+ if [[ "${dispatch_choice}" == "1" ]]; then
|
|
|
+ # 使用默认配置，确保使用当前设置的 SNI
|
|
|
+ echo -e "${Info} 使用默认 dispatch 配置，SNI: ${stls_sni}"
|
|
|
+ # 不设置 stls_dispatch，让 write_stls_config 使用默认逻辑
|
|
|
+ stls_dispatch=""
|
|
|
+ elif [[ "${dispatch_choice}" == "2" ]]; then
|
|
|
+ echo -e "${Info} 重新配置 dispatch 条目"
|
|
|
+ echo "请输入 dispatch 配置 (每行格式: 域名:目标地址，回车结束)："
|
|
|
+ echo "示例: cloudflare.com:1.1.1.1:443"
|
|
|
+
|
|
|
+ local dispatch_entries=""
|
|
|
+ local line_count=0
|
|
|
+ while true; do
|
|
|
+ read -e -p "条目 $((line_count+1)) (直接回车结束)：" dispatch_entry
|
|
|
+ if [[ -z "${dispatch_entry}" ]]; then
|
|
|
+ break
|
|
|
+ fi
|
|
|
+
|
|
|
+ if [[ "${dispatch_entry}" =~ ^([^:]+):(.+)$ ]]; then
|
|
|
+ local sni="${BASH_REMATCH[1]}"
|
|
|
+ local target="${BASH_REMATCH[2]}"
|
|
|
+
|
|
|
+ if [[ ${line_count} -gt 0 ]]; then
|
|
|
+ dispatch_entries="${dispatch_entries},
|
|
|
+ "
|
|
|
+ fi
|
|
|
+ dispatch_entries="${dispatch_entries}\"${sni}\": \"${target}\""
|
|
|
+ line_count=$((line_count+1))
|
|
|
+ else
|
|
|
+ echo -e "${Error} 格式错误，请使用格式: 域名:目标地址"
|
|
|
+ fi
|
|
|
+ done
|
|
|
+
|
|
|
+ if [[ ${line_count} -gt 0 ]]; then
|
|
|
+ stls_dispatch="${dispatch_entries}"
|
|
|
+ echo -e "${Info} 已配置 ${line_count} 个 dispatch 条目"
|
|
|
+ else
|
|
|
+ echo -e "${Info} 没有输入条目，使用默认 dispatch 配置"
|
|
|
+ # 不设置 stls_dispatch，让 write_stls_config 使用默认逻辑
|
|
|
+ stls_dispatch=""
|
|
|
+ fi
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+# 增强版 Dispatch 管理（支持单条增删改）
|
|
|
+manage_stls_dispatch_advanced(){
|
|
|
+ echo -e "${Info} 当前 dispatch 配置："
|
|
|
+ if [[ -e ${STLS_Conf} ]]; then
|
|
|
+ echo -e "${Green_font_prefix}$(cat ${STLS_Conf}|jq -r '.server.tls_addr.dispatch | to_entries | map(" \(.key) -> \(.value)") | join("\n")')${Font_color_suffix}"
|
|
|
+ else
|
|
|
+ echo -e " ${stls_sni} -> 1.1.1.1:443"
|
|
|
+ echo -e " captive.apple.com -> captive.apple.com:443"
|
|
|
+ fi
|
|
|
+
|
|
|
+ echo && echo -e "请选择 dispatch 管理操作：
|
|
|
+========================================
|
|
|
+${Green_font_prefix} 1.${Font_color_suffix} 保持当前配置
|
|
|
+${Green_font_prefix} 2.${Font_color_suffix} 添加新条目
|
|
|
+${Green_font_prefix} 3.${Font_color_suffix} 删除指定条目
|
|
|
+${Green_font_prefix} 4.${Font_color_suffix} 修改指定条目
|
|
|
+${Green_font_prefix} 5.${Font_color_suffix} 重新配置所有条目
|
|
|
+========================================"
|
|
|
+ read -e -p "(默认：1.保持当前)：" dispatch_choice
|
|
|
+ [[ -z "${dispatch_choice}" ]] && dispatch_choice="1"
|
|
|
+
|
|
|
+ case "${dispatch_choice}" in
|
|
|
+ 1)
|
|
|
+ echo -e "${Info} 保持当前配置"
|
|
|
+ ;;
|
|
|
+ 2)
|
|
|
+ add_dispatch_entry
|
|
|
+ ;;
|
|
|
+ 3)
|
|
|
+ delete_dispatch_entry
|
|
|
+ ;;
|
|
|
+ 4)
|
|
|
+ modify_dispatch_entry
|
|
|
+ ;;
|
|
|
+ 5)
|
|
|
+ reconfigure_all_dispatch
|
|
|
+ ;;
|
|
|
+ *)
|
|
|
+ echo -e "${Error} 输入错误，保持当前配置"
|
|
|
+ ;;
|
|
|
+ esac
|
|
|
+}
|
|
|
+
|
|
|
+# 添加 dispatch 条目
|
|
|
+add_dispatch_entry(){
|
|
|
+ echo -e "${Info} 添加新的 dispatch 条目"
|
|
|
+ read -e -p "请输入域名 (如: example.com)：" new_sni
|
|
|
+ if [[ -z "${new_sni}" ]]; then
|
|
|
+ echo -e "${Error} 域名不能为空"
|
|
|
+ return
|
|
|
+ fi
|
|
|
+
|
|
|
+ read -e -p "请输入目标地址 (如: 1.1.1.1:443)：" new_target
|
|
|
+ if [[ -z "${new_target}" ]]; then
|
|
|
+ echo -e "${Error} 目标地址不能为空"
|
|
|
+ return
|
|
|
+ fi
|
|
|
+
|
|
|
+ # 获取当前 dispatch 配置
|
|
|
+ if [[ -e ${STLS_Conf} ]]; then
|
|
|
+ current_dispatch=$(cat ${STLS_Conf}|jq -r '.server.tls_addr.dispatch | to_entries | map("\"\(.key)\": \"\(.value)\"") | join(",\n ")')
|
|
|
+ stls_dispatch="${current_dispatch},
|
|
|
+ \"${new_sni}\": \"${new_target}\""
|
|
|
+ else
|
|
|
+ stls_dispatch="\"${stls_sni}\": \"1.1.1.1:443\",
|
|
|
+ \"captive.apple.com\": \"captive.apple.com:443\",
|
|
|
+ \"${new_sni}\": \"${new_target}\""
|
|
|
+ fi
|
|
|
+
|
|
|
+ echo -e "${Info} 已添加条目: ${new_sni} -> ${new_target}"
|
|
|
+}
|
|
|
+
|
|
|
+# 删除 dispatch 条目
|
|
|
+delete_dispatch_entry(){
|
|
|
+ if [[ ! -e ${STLS_Conf} ]]; then
|
|
|
+ echo -e "${Error} 配置文件不存在"
|
|
|
+ return
|
|
|
+ fi
|
|
|
+
|
|
|
+ echo -e "${Info} 当前 dispatch 条目："
|
|
|
+ # 显示带编号的列表
|
|
|
+ local domains=($(cat ${STLS_Conf}|jq -r '.server.tls_addr.dispatch | keys[]'))
|
|
|
+ local targets=($(cat ${STLS_Conf}|jq -r '.server.tls_addr.dispatch | to_entries | map(.value) | .[]'))
|
|
|
+
|
|
|
+ if [[ ${#domains[@]} -eq 0 ]]; then
|
|
|
+ echo -e "${Error} 没有可删除的条目"
|
|
|
+ return
|
|
|
+ fi
|
|
|
+
|
|
|
+ for i in "${!domains[@]}"; do
|
|
|
+ echo -e " ${Green_font_prefix}$((i+1)).${Font_color_suffix} ${domains[i]} -> ${targets[i]}"
|
|
|
+ done
|
|
|
+
|
|
|
+ read -e -p "请输入要删除的条目编号 (1-${#domains[@]})：" del_num
|
|
|
+ if [[ -z "${del_num}" ]] || [[ ${del_num} -lt 1 ]] || [[ ${del_num} -gt ${#domains[@]} ]]; then
|
|
|
+ echo -e "${Error} 输入的编号无效"
|
|
|
+ return
|
|
|
+ fi
|
|
|
+
|
|
|
+ # 重新构建 dispatch 配置，排除删除的条目
|
|
|
+ local del_domain="${domains[$((del_num-1))]}"
|
|
|
+ local new_entries=""
|
|
|
+ local count=0
|
|
|
+
|
|
|
+ for i in "${!domains[@]}"; do
|
|
|
+ if [[ "${domains[i]}" != "${del_domain}" ]]; then
|
|
|
+ if [[ ${count} -gt 0 ]]; then
|
|
|
+ new_entries="${new_entries},
|
|
|
+ "
|
|
|
+ fi
|
|
|
+ new_entries="${new_entries}\"${domains[i]}\": \"${targets[i]}\""
|
|
|
+ count=$((count+1))
|
|
|
+ fi
|
|
|
+ done
|
|
|
+
|
|
|
+ if [[ ${count} -eq 0 ]]; then
|
|
|
+ # 如果删除后没有条目，使用默认配置
|
|
|
+ stls_dispatch="\"${stls_sni}\": \"1.1.1.1:443\",
|
|
|
+ \"captive.apple.com\": \"captive.apple.com:443\""
|
|
|
+ else
|
|
|
+ stls_dispatch="${new_entries}"
|
|
|
+ fi
|
|
|
+
|
|
|
+ echo -e "${Info} 已删除条目: ${del_domain}"
|
|
|
+}
|
|
|
+
|
|
|
+# 修改 dispatch 条目
|
|
|
+modify_dispatch_entry(){
|
|
|
+ if [[ ! -e ${STLS_Conf} ]]; then
|
|
|
+ echo -e "${Error} 配置文件不存在"
|
|
|
+ return
|
|
|
+ fi
|
|
|
+
|
|
|
+ echo -e "${Info} 当前 dispatch 条目："
|
|
|
+ # 显示带编号的列表
|
|
|
+ local domains=($(cat ${STLS_Conf}|jq -r '.server.tls_addr.dispatch | keys[]'))
|
|
|
+ local targets=($(cat ${STLS_Conf}|jq -r '.server.tls_addr.dispatch | to_entries | map(.value) | .[]'))
|
|
|
+
|
|
|
+ if [[ ${#domains[@]} -eq 0 ]]; then
|
|
|
+ echo -e "${Error} 没有可修改的条目"
|
|
|
+ return
|
|
|
+ fi
|
|
|
+
|
|
|
+ for i in "${!domains[@]}"; do
|
|
|
+ echo -e " ${Green_font_prefix}$((i+1)).${Font_color_suffix} ${domains[i]} -> ${targets[i]}"
|
|
|
+ done
|
|
|
+
|
|
|
+ read -e -p "请输入要修改的条目编号 (1-${#domains[@]})：" mod_num
|
|
|
+ if [[ -z "${mod_num}" ]] || [[ ${mod_num} -lt 1 ]] || [[ ${mod_num} -gt ${#domains[@]} ]]; then
|
|
|
+ echo -e "${Error} 输入的编号无效"
|
|
|
+ return
|
|
|
+ fi
|
|
|
+
|
|
|
+ local mod_domain="${domains[$((mod_num-1))]}"
|
|
|
+ local mod_target="${targets[$((mod_num-1))]}"
|
|
|
+
|
|
|
+ echo -e "${Info} 当前条目: ${mod_domain} -> ${mod_target}"
|
|
|
+ read -e -p "请输入新的域名 (直接回车保持不变)：" new_domain
|
|
|
+ read -e -p "请输入新的目标地址 (直接回车保持不变)：" new_target
|
|
|
+
|
|
|
+ [[ -z "${new_domain}" ]] && new_domain="${mod_domain}"
|
|
|
+ [[ -z "${new_target}" ]] && new_target="${mod_target}"
|
|
|
+
|
|
|
+ # 重新构建 dispatch 配置
|
|
|
+ local new_entries=""
|
|
|
+ for i in "${!domains[@]}"; do
|
|
|
+ if [[ ${i} -gt 0 ]]; then
|
|
|
+ new_entries="${new_entries},
|
|
|
+ "
|
|
|
+ fi
|
|
|
+
|
|
|
+ if [[ ${i} -eq $((mod_num-1)) ]]; then
|
|
|
+ new_entries="${new_entries}\"${new_domain}\": \"${new_target}\""
|
|
|
+ else
|
|
|
+ new_entries="${new_entries}\"${domains[i]}\": \"${targets[i]}\""
|
|
|
+ fi
|
|
|
+ done
|
|
|
+
|
|
|
+ stls_dispatch="${new_entries}"
|
|
|
+ echo -e "${Info} 已修改条目: ${mod_domain} -> ${mod_target} => ${new_domain} -> ${new_target}"
|
|
|
+}
|
|
|
+
|
|
|
+# 重新配置所有 dispatch 条目
|
|
|
+reconfigure_all_dispatch(){
|
|
|
+ echo -e "${Info} 重新配置所有 dispatch 条目"
|
|
|
+ echo "请输入 dispatch 配置 (每行格式: 域名:目标地址，回车结束)："
|
|
|
+ echo "示例: cloudflare.com:1.1.1.1:443"
|
|
|
+
|
|
|
+ local dispatch_entries=""
|
|
|
+ local line_count=0
|
|
|
+ while true; do
|
|
|
+ read -e -p "条目 $((line_count+1)) (直接回车结束)：" dispatch_entry
|
|
|
+ if [[ -z "${dispatch_entry}" ]]; then
|
|
|
+ break
|
|
|
+ fi
|
|
|
+
|
|
|
+ if [[ "${dispatch_entry}" =~ ^([^:]+):(.+)$ ]]; then
|
|
|
+ local sni="${BASH_REMATCH[1]}"
|
|
|
+ local target="${BASH_REMATCH[2]}"
|
|
|
+
|
|
|
+ if [[ ${line_count} -gt 0 ]]; then
|
|
|
+ dispatch_entries="${dispatch_entries},
|
|
|
+ "
|
|
|
+ fi
|
|
|
+ dispatch_entries="${dispatch_entries}\"${sni}\": \"${target}\""
|
|
|
+ line_count=$((line_count+1))
|
|
|
+ else
|
|
|
+ echo -e "${Error} 格式错误，请使用格式: 域名:目标地址"
|
|
|
+ fi
|
|
|
+ done
|
|
|
+
|
|
|
+ if [[ ${line_count} -gt 0 ]]; then
|
|
|
+ stls_dispatch="${dispatch_entries}"
|
|
|
+ echo -e "${Info} 已配置 ${line_count} 个 dispatch 条目"
|
|
|
+ else
|
|
|
+ echo -e "${Info} 使用默认 dispatch 配置"
|
|
|
+ stls_dispatch="\"${stls_sni}\": \"1.1.1.1:443\",
|
|
|
+ \"captive.apple.com\": \"captive.apple.com:443\""
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+start(){
|
|
|
+ check_installed_status
|
|
|
+ check_status
|
|
|
+ if [[ "$status" == "running" ]]; then
|
|
|
+ echo -e "${Info} Shadowsocks Rust 已在运行！"
|
|
|
+ else
|
|
|
+ systemctl start ss-rust
|
|
|
+ check_status
|
|
|
+ if [[ "$status" == "running" ]]; then
|
|
|
+ echo -e "${Info} Shadowsocks Rust 启动成功！"
|
|
|
+ else
|
|
|
+ echo -e "${Error} Shadowsocks Rust 启动失败！"
|
|
|
+ exit 1
|
|
|
+ fi
|
|
|
+ fi
|
|
|
+ sleep 3s
|
|
|
+}
|
|
|
+
|
|
|
+start_stls(){
|
|
|
+ check_stls_installed_status
|
|
|
+ check_stls_status
|
|
|
+ if [[ "$stls_status" == "running" ]]; then
|
|
|
+ echo -e "${Info} Shadow TLS 已在运行！"
|
|
|
+ else
|
|
|
+ systemctl start shadowtls
|
|
|
+ check_stls_status
|
|
|
+ if [[ "$stls_status" == "running" ]]; then
|
|
|
+ echo -e "${Info} Shadow TLS 启动成功！"
|
|
|
+ else
|
|
|
+ echo -e "${Error} Shadow TLS 启动失败！"
|
|
|
+ exit 1
|
|
|
+ fi
|
|
|
+ fi
|
|
|
+ sleep 3s
|
|
|
+}
|
|
|
+
|
|
|
+stop(){
|
|
|
+ check_installed_status
|
|
|
+ check_status
|
|
|
+ [[ !"$status" == "running" ]] && echo -e "${Error} Shadowsocks Rust 没有运行，请检查！" && exit 1
|
|
|
+ systemctl stop ss-rust
|
|
|
+ sleep 3s
|
|
|
+ start_menu
|
|
|
+}
|
|
|
+
|
|
|
+stop_stls(){
|
|
|
+ check_stls_installed_status
|
|
|
+ check_stls_status
|
|
|
+ [[ !"$stls_status" == "running" ]] && echo -e "${Error} Shadow TLS 没有运行，请检查！" && exit 1
|
|
|
+ systemctl stop shadowtls
|
|
|
+ sleep 3s
|
|
|
+}
|
|
|
+
|
|
|
+restart(){
|
|
|
+ check_installed_status
|
|
|
+ systemctl restart ss-rust
|
|
|
+ echo -e "${Info} Shadowsocks Rust 重启完毕 ！"
|
|
|
+ sleep 3s
|
|
|
+ start_menu
|
|
|
+}
|
|
|
+
|
|
|
+restart_stls(){
|
|
|
+ check_stls_installed_status
|
|
|
+ systemctl restart shadowtls
|
|
|
+ echo -e "${Info} Shadow TLS 重启完毕 ！"
|
|
|
+ sleep 3s
|
|
|
+}
|
|
|
+
|
|
|
+update(){
|
|
|
+ check_installed_status
|
|
|
+ check_new_ver
|
|
|
+ check_ver_comparison
|
|
|
+ echo -e "${Info} Shadowsocks Rust 更新完毕！"
|
|
|
+ sleep 3s
|
|
|
+ start_menu
|
|
|
+}
|
|
|
+
|
|
|
+update_stls(){
|
|
|
+ check_stls_installed_status
|
|
|
+ check_stls_new_ver
|
|
|
+ check_stls_ver_comparison
|
|
|
+ echo -e "${Info} Shadow TLS 更新完毕！"
|
|
|
+ sleep 3s
|
|
|
+}
|
|
|
+
|
|
|
+# 脚本更新函数
|
|
|
+update_sh(){
|
|
|
+ echo -e "当前版本为 [ ${sh_ver} ]，开始检测最新版本..."
|
|
|
+ sh_new_ver=$(wget --no-check-certificate -qO- "https://raw.githubusercontent.com/xOS/Shadowsocks-Rust/master/ss-rust.sh"|grep 'sh_ver="'|awk -F "=" '{print $NF}'|sed 's/\"//g'|head -1)
|
|
|
+ [[ -z ${sh_new_ver} ]] && echo -e "${Error} 检测最新版本失败 !" && start_menu
|
|
|
+ if [[ ${sh_new_ver} != ${sh_ver} ]]; then
|
|
|
+ echo -e "发现新版本[ ${sh_new_ver} ]，是否更新？[Y/n]"
|
|
|
+ read -p "(默认：y)：" yn
|
|
|
+ [[ -z "${yn}" ]] && yn="y"
|
|
|
+ if [[ ${yn} == [Yy] ]]; then
|
|
|
+ wget -O ss-rust.sh --no-check-certificate https://raw.githubusercontent.com/xOS/Shadowsocks-Rust/master/ss-rust.sh && chmod +x ss-rust.sh
|
|
|
+ echo -e "脚本已更新为最新版本[ ${sh_new_ver} ]！"
|
|
|
+ echo -e "3s后执行新脚本"
|
|
|
+ sleep 3s
|
|
|
+ bash ss-rust.sh
|
|
|
+ else
|
|
|
+ echo && echo " 已取消..." && echo
|
|
|
+ sleep 3s
|
|
|
+ start_menu
|
|
|
+ fi
|
|
|
+ else
|
|
|
+ echo -e "当前已是最新版本[ ${sh_new_ver} ] ！"
|
|
|
+ sleep 3s
|
|
|
+ start_menu
|
|
|
+ fi
|
|
|
+ sleep 3s
|
|
|
+ bash ss-rust.sh
|
|
|
+}
|
|
|
+
|
|
|
+uninstall(){
|
|
|
+ check_installed_status
|
|
|
+ echo "确定要卸载 Shadowsocks Rust ? (y/N)"
|
|
|
+ echo
|
|
|
+ read -e -p "(默认：n)：" unyn
|
|
|
+ [[ -z ${unyn} ]] && unyn="n"
|
|
|
+ if [[ ${unyn} == [Yy] ]]; then
|
|
|
+ check_status
|
|
|
+ [[ "$status" == "running" ]] && systemctl stop ss-rust
|
|
|
+ systemctl disable ss-rust
|
|
|
+ rm -rf "${SS_Folder}"
|
|
|
+ rm -rf "${SS_File}"
|
|
|
+ echo && echo "Shadowsocks Rust 卸载完成！" && echo
|
|
|
+ else
|
|
|
+ echo && echo "卸载已取消..." && echo
|
|
|
+ fi
|
|
|
+ sleep 3s
|
|
|
+ start_menu
|
|
|
+}
|
|
|
+
|
|
|
+uninstall_stls(){
|
|
|
+ check_stls_installed_status
|
|
|
+ echo "确定要卸载 Shadow TLS ? (y/N)"
|
|
|
+ echo
|
|
|
+ read -e -p "(默认：n)：" unyn
|
|
|
+ [[ -z ${unyn} ]] && unyn="n"
|
|
|
+ if [[ ${unyn} == [Yy] ]]; then
|
|
|
+ check_stls_status
|
|
|
+ [[ "$stls_status" == "running" ]] && systemctl stop shadowtls
|
|
|
+ systemctl disable shadowtls
|
|
|
+ rm -rf "${STLS_Folder}"
|
|
|
+ rm -rf "${STLS_File}"
|
|
|
+ rm -f "/etc/systemd/system/shadowtls.service"
|
|
|
+ systemctl daemon-reload
|
|
|
+ echo && echo "Shadow TLS 卸载完成！" && echo
|
|
|
+ else
|
|
|
+ echo && echo "卸载已取消..." && echo
|
|
|
+ fi
|
|
|
+ sleep 3s
|
|
|
+}
|
|
|
+
|
|
|
+getipv4(){
|
|
|
+ ipv4=$(wget -qO- -4 -t1 -T2 ipinfo.io/ip)
|
|
|
+ if [[ -z "${ipv4}" ]]; then
|
|
|
+ ipv4=$(wget -qO- -4 -t1 -T2 api.ip.sb/ip)
|
|
|
+ if [[ -z "${ipv4}" ]]; then
|
|
|
+ ipv4=$(wget -qO- -4 -t1 -T2 members.3322.org/dyndns/getip)
|
|
|
+ if [[ -z "${ipv4}" ]]; then
|
|
|
+ ipv4="IPv4_Error"
|
|
|
+ fi
|
|
|
+ fi
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+getipv6(){
|
|
|
+ ipv6=$(wget -qO- -6 -t1 -T2 ifconfig.co)
|
|
|
+ if [[ -z "${ipv6}" ]]; then
|
|
|
+ ipv6="IPv6_Error"
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+urlsafe_base64(){
|
|
|
+ date=$(echo -n "$1"|base64|sed ':a;N;s/\n/ /g;ta'|sed 's/ //g;s/=//g;s/+/-/g;s/\//_/g')
|
|
|
+ echo -e "${date}"
|
|
|
+}
|
|
|
+
|
|
|
+link_qr(){
|
|
|
+ if [[ "${ipv4}" != "IPv4_Error" ]]; then
|
|
|
+ SSbase64=$(urlsafe_base64 "${cipher}:${password}@${ipv4}:${port}")
|
|
|
+ SSurl="ss://${SSbase64}"
|
|
|
+ SSQRcode="https://cli.im/api/qrcode/code?text=${SSurl}"
|
|
|
+ link_ipv4=" 链接 [IPv4]：${Red_font_prefix}${SSurl}${Font_color_suffix} \n 二维码[IPv4]：${Red_font_prefix}${SSQRcode}${Font_color_suffix}"
|
|
|
+ fi
|
|
|
+ if [[ "${ipv6}" != "IPv6_Error" ]]; then
|
|
|
+ SSbase64=$(urlsafe_base64 "${cipher}:${password}@${ipv6}:${port}")
|
|
|
+ SSurl="ss://${SSbase64}"
|
|
|
+ SSQRcode="https://cli.im/api/qrcode/code?text=${SSurl}"
|
|
|
+ link_ipv6=" 链接 [IPv6]：${Red_font_prefix}${SSurl}${Font_color_suffix} \n 二维码[IPv6]：${Red_font_prefix}${SSQRcode}${Font_color_suffix}"
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+before_start_menu(){
|
|
|
+ echo && echo -n " 任意键继续..." && read
|
|
|
+ start_menu
|
|
|
+}
|
|
|
+
|
|
|
+before_shadowtls_menu(){
|
|
|
+ echo && echo -n " 任意键继续..." && read
|
|
|
+ shadowtls_menu
|
|
|
+}
|
|
|
+
|
|
|
+# Shadow TLS 状态和版本检查函数
|
|
|
+check_stls_installed_status(){
|
|
|
+ [[ ! -e ${STLS_File} ]] && echo -e "${Error} Shadow TLS 没有安装，请检查！" && exit 1
|
|
|
+}
|
|
|
+
|
|
|
+check_stls_status(){
|
|
|
+ stls_status=`systemctl status shadowtls | grep Active | awk '{print $3}' | cut -d "(" -f2 | cut -d ")" -f1`
|
|
|
+}
|
|
|
+
|
|
|
+check_stls_new_ver(){
|
|
|
+ stls_new_ver=$(wget -qO- https://api.github.com/repos/ihciah/shadow-tls/releases| jq -r '[.[] | select(.prerelease == false) | select(.draft == false) | .tag_name] | .[0]')
|
|
|
+ [[ -z ${stls_new_ver} ]] && echo -e "${Error} Shadow TLS 最新版本获取失败！" && exit 1
|
|
|
+ echo -e "${Info} 检测到 Shadow TLS 最新版本为 [ ${stls_new_ver} ]"
|
|
|
+}
|
|
|
+
|
|
|
+check_stls_ver_comparison(){
|
|
|
+ stls_now_ver=$(cat ${STLS_Now_ver_File})
|
|
|
+ if [[ "${stls_now_ver}" != "${stls_new_ver}" ]]; then
|
|
|
+ echo -e "${Info} 发现 Shadow TLS 已有新版本 [ ${stls_new_ver} ]，旧版本 [ ${stls_now_ver} ]"
|
|
|
+ read -e -p "是否更新 ？ [Y/n]：" yn
|
|
|
+ [[ -z "${yn}" ]] && yn="y"
|
|
|
+ if [[ $yn == [Yy] ]]; then
|
|
|
+ check_stls_status
|
|
|
+ \cp "${STLS_Conf}" "/tmp/stls_config.json"
|
|
|
+ download_stls
|
|
|
+ mv -f "/tmp/stls_config.json" "${STLS_Conf}"
|
|
|
+ restart_stls
|
|
|
+ fi
|
|
|
+ else
|
|
|
+ echo -e "${Info} 当前 Shadow TLS 已是最新版本 [ ${stls_new_ver} ] ！" && exit 1
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
+# Shadow TLS 专用菜单
|
|
|
+shadowtls_menu(){
|
|
|
+ check_root
|
|
|
+ check_sys
|
|
|
+ sys_arch
|
|
|
+
|
|
|
+ # 检查 Shadow TLS 安装状态
|
|
|
+ if [[ -e ${STLS_File} ]]; then
|
|
|
+ check_stls_status
|
|
|
+ if [[ "$stls_status" == "running" ]]; then
|
|
|
+ stls_status_show="${Green_font_prefix}已安装${Font_color_suffix} 且 ${Green_font_prefix}运行中${Font_color_suffix}"
|
|
|
+ else
|
|
|
+ stls_status_show="${Green_font_prefix}已安装${Font_color_suffix} 但 ${Yellow_font_prefix}未运行${Font_color_suffix}"
|
|
|
+ fi
|
|
|
+ else
|
|
|
+ stls_status_show="${Red_font_prefix}未安装${Font_color_suffix}"
|
|
|
+ fi
|
|
|
+
|
|
|
+ clear
|
|
|
+ echo -e "Shadow TLS 管理菜单 ${Red_font_prefix}[v${sh_ver}]${Font_color_suffix}
|
|
|
+
|
|
|
+==================状态==================
|
|
|
+ Shadow TLS : [${stls_status_show}]
|
|
|
+========================================
|
|
|
+ ${Green_font_prefix}0.${Font_color_suffix} 更新脚本
|
|
|
+==================菜单==================
|
|
|
+ ${Green_font_prefix}1.${Font_color_suffix} 安装 Shadow TLS
|
|
|
+ ${Green_font_prefix}2.${Font_color_suffix} 更新 Shadow TLS
|
|
|
+ ${Green_font_prefix}3.${Font_color_suffix} 卸载 Shadow TLS
|
|
|
+————————————————————————————————————————
|
|
|
+ ${Green_font_prefix}4.${Font_color_suffix} 启动 Shadow TLS
|
|
|
+ ${Green_font_prefix}5.${Font_color_suffix} 停止 Shadow TLS
|
|
|
+ ${Green_font_prefix}6.${Font_color_suffix} 重启 Shadow TLS
|
|
|
+————————————————————————————————————————
|
|
|
+ ${Green_font_prefix}7.${Font_color_suffix} 修改 Shadow TLS 配置
|
|
|
+ ${Green_font_prefix}8.${Font_color_suffix} 查看 Shadow TLS 配置
|
|
|
+ ${Green_font_prefix}9.${Font_color_suffix} 查看 Shadow TLS 状态
|
|
|
+————————————————————————————————————————
|
|
|
+ ${Green_font_prefix}10.${Font_color_suffix} 查看完整配置信息
|
|
|
+ ${Green_font_prefix}11.${Font_color_suffix} 返回主菜单
|
|
|
+————————————————————————————————————————
|
|
|
+ ${Green_font_prefix}00.${Font_color_suffix} 退出脚本
|
|
|
+========================================" && echo
|
|
|
+
|
|
|
+ read -e -p " 请输入数字 [0-11]：" stls_num
|
|
|
+ case "$stls_num" in
|
|
|
+ 1)
|
|
|
+ install_stls
|
|
|
+ shadowtls_menu
|
|
|
+ ;;
|
|
|
+ 2)
|
|
|
+ update_stls
|
|
|
+ shadowtls_menu
|
|
|
+ ;;
|
|
|
+ 3)
|
|
|
+ uninstall_stls
|
|
|
+ shadowtls_menu
|
|
|
+ ;;
|
|
|
+ 4)
|
|
|
+ start_stls
|
|
|
+ shadowtls_menu
|
|
|
+ ;;
|
|
|
+ 5)
|
|
|
+ stop_stls
|
|
|
+ shadowtls_menu
|
|
|
+ ;;
|
|
|
+ 6)
|
|
|
+ restart_stls
|
|
|
+ shadowtls_menu
|
|
|
+ ;;
|
|
|
+ 7)
|
|
|
+ set_stls_config
|
|
|
+ shadowtls_menu
|
|
|
+ ;;
|
|
|
+ 8)
|
|
|
+ view_stls_only
|
|
|
+ ;;
|
|
|
+ 9)
|
|
|
+ view_stls_status
|
|
|
+ ;;
|
|
|
+ 10)
|
|
|
+ view_combined_config shadowtls
|
|
|
+ ;;
|
|
|
+ 11)
|
|
|
+ start_menu
|
|
|
+ ;;
|
|
|
+ 0)
|
|
|
+ update_sh
|
|
|
+ ;;
|
|
|
+ 00)
|
|
|
+ exit 1
|
|
|
+ ;;
|
|
|
+ *)
|
|
|
+ echo -e "${Error} 请输入正确数字 [0-11] (退出输入00)"
|
|
|
+ sleep 5s
|
|
|
+ shadowtls_menu
|
|
|
+ ;;
|
|
|
+ esac
|
|
|
+}
|
|
|
+
|
|
|
+# 查看 Shadowsocks Rust 状态函数
|
|
|
+view_ss_status(){
|
|
|
+ check_installed_status
|
|
|
+
|
|
|
+ echo -e "${Info} 正在获取 Shadowsocks Rust 状态信息..."
|
|
|
+ echo
|
|
|
+ echo "=================================="
|
|
|
+ echo -e " Shadowsocks Rust 服务状态"
|
|
|
+ echo "=================================="
|
|
|
+
|
|
|
+ systemctl status ss-rust
|
|
|
+
|
|
|
+ echo "=================================="
|
|
|
+ echo
|
|
|
+ read -e -p "按回车键返回主菜单..."
|
|
|
+ start_menu
|
|
|
+}
|
|
|
+
|
|
|
+# 查看 Shadow TLS 状态函数
|
|
|
+view_stls_status(){
|
|
|
+ check_stls_installed_status
|
|
|
+
|
|
|
+ echo -e "${Info} 正在获取 Shadow TLS 状态信息..."
|
|
|
+ echo
|
|
|
+ echo "=================================="
|
|
|
+ echo -e " Shadow TLS 服务状态"
|
|
|
+ echo "=================================="
|
|
|
+
|
|
|
+ systemctl status shadowtls
|
|
|
+
|
|
|
+ echo "=================================="
|
|
|
+ echo
|
|
|
+ read -e -p "按回车键返回 Shadow TLS 菜单..."
|
|
|
+ shadowtls_menu
|
|
|
+}
|
|
|
+
|
|
|
+# 查看 Shadow TLS 配置函数
|
|
|
+view_stls_only(){
|
|
|
+ check_stls_installed_status
|
|
|
+ echo -e "${Info} 正在获取 Shadow TLS 配置信息..."
|
|
|
+ echo
|
|
|
+ echo "=================================="
|
|
|
+ echo -e " Shadow TLS 配置信息"
|
|
|
+ echo "=================================="
|
|
|
+
|
|
|
+ if [[ -f "$STLS_Conf" ]]; then
|
|
|
+ cat "$STLS_Conf"
|
|
|
+ else
|
|
|
+ echo -e "${Error} Shadow TLS 配置文件不存在！"
|
|
|
+ fi
|
|
|
+
|
|
|
+ echo "=================================="
|
|
|
+ echo
|
|
|
+ read -e -p "按回车键返回 Shadow TLS 菜单..."
|
|
|
+ shadowtls_menu
|
|
|
+}
|
|
|
+
|
|
|
+# 主菜单函数
|
|
|
+start_menu(){
|
|
|
+ echo -e "${Info} 正在启动 Shadowsocks Rust 管理脚本..."
|
|
|
+ check_root
|
|
|
+ echo -e "${Info} 权限检查完成，正在检测系统..."
|
|
|
+ check_sys
|
|
|
+ echo -e "${Info} 系统检测完成，正在检测架构..."
|
|
|
+ sys_arch
|
|
|
+ echo -e "${Info} 架构检测完成，正在检查服务状态..."
|
|
|
+
|
|
|
+ # 检查安装状态
|
|
|
+ if [[ -e ${SS_File} ]]; then
|
|
|
+ check_status
|
|
|
+ if [[ "$status" == "running" ]]; then
|
|
|
+ ss_status_show="${Green_font_prefix}已安装${Font_color_suffix} 且 ${Green_font_prefix}运行中${Font_color_suffix}"
|
|
|
+ else
|
|
|
+ ss_status_show="${Green_font_prefix}已安装${Font_color_suffix} 但 ${Yellow_font_prefix}未运行${Font_color_suffix}"
|
|
|
+ fi
|
|
|
+ else
|
|
|
+ ss_status_show="${Red_font_prefix}未安装${Font_color_suffix}"
|
|
|
+ fi
|
|
|
+
|
|
|
+ # 检查 Shadow TLS 安装状态
|
|
|
+ if [[ -e ${STLS_File} ]]; then
|
|
|
+ check_stls_status
|
|
|
+ if [[ "$stls_status" == "running" ]]; then
|
|
|
+ stls_status_show="${Green_font_prefix}已安装${Font_color_suffix} 且 ${Green_font_prefix}运行中${Font_color_suffix}"
|
|
|
+ else
|
|
|
+ stls_status_show="${Green_font_prefix}已安装${Font_color_suffix} 但 ${Yellow_font_prefix}未运行${Font_color_suffix}"
|
|
|
+ fi
|
|
|
+ else
|
|
|
+ stls_status_show="${Red_font_prefix}未安装${Font_color_suffix}"
|
|
|
+ fi
|
|
|
+
|
|
|
+ clear
|
|
|
+ echo -e "Shadowsocks Rust 管理脚本 ${Red_font_prefix}[v${sh_ver}]${Font_color_suffix}
|
|
|
+
|
|
|
+==================状态==================
|
|
|
+ Shadowsocks Rust : [${ss_status_show}]
|
|
|
+ Shadow TLS : [${stls_status_show}]
|
|
|
+========================================
|
|
|
+ ${Green_font_prefix}0.${Font_color_suffix} 更新脚本
|
|
|
+==================菜单==================
|
|
|
+ ${Green_font_prefix}1.${Font_color_suffix} 安装 Shadowsocks Rust
|
|
|
+ ${Green_font_prefix}2.${Font_color_suffix} 更新 Shadowsocks Rust
|
|
|
+ ${Green_font_prefix}3.${Font_color_suffix} 卸载 Shadowsocks Rust
|
|
|
+————————————————————————————————————————
|
|
|
+ ${Green_font_prefix}4.${Font_color_suffix} 启动 Shadowsocks Rust
|
|
|
+ ${Green_font_prefix}5.${Font_color_suffix} 停止 Shadowsocks Rust
|
|
|
+ ${Green_font_prefix}6.${Font_color_suffix} 重启 Shadowsocks Rust
|
|
|
+————————————————————————————————————————
|
|
|
+ ${Green_font_prefix}7.${Font_color_suffix} 配置 Shadowsocks Rust 相关
|
|
|
+ ${Green_font_prefix}8.${Font_color_suffix} 查看 Shadowsocks Rust 配置
|
|
|
+ ${Green_font_prefix}9.${Font_color_suffix} 查看 Shadowsocks Rust 状态
|
|
|
+========================================
|
|
|
+ ${Green_font_prefix}10.${Font_color_suffix} 配置 Shadow TLS 相关
|
|
|
+ ${Green_font_prefix}11.${Font_color_suffix} 查看完整配置信息
|
|
|
+————————————————————————————————————————
|
|
|
+ ${Green_font_prefix}00.${Font_color_suffix} 退出脚本
|
|
|
+========================================" && echo
|
|
|
+ read -e -p " 请输入数字 [0-11]：" num
|
|
|
+ case "$num" in
|
|
|
+ 1)
|
|
|
+ install
|
|
|
+ ;;
|
|
|
+ 2)
|
|
|
+ update
|
|
|
+ start_menu
|
|
|
+ ;;
|
|
|
+ 3)
|
|
|
+ uninstall
|
|
|
+ start_menu
|
|
|
+ ;;
|
|
|
+ 4)
|
|
|
+ start
|
|
|
+ start_menu
|
|
|
+ ;;
|
|
|
+ 5)
|
|
|
+ stop
|
|
|
+ start_menu
|
|
|
+ ;;
|
|
|
+ 6)
|
|
|
+ restart
|
|
|
+ start_menu
|
|
|
+ ;;
|
|
|
+ 7)
|
|
|
+ set_config
|
|
|
+ ;;
|
|
|
+ 8)
|
|
|
+ view
|
|
|
+ ;;
|
|
|
+ 9)
|
|
|
+ view_ss_status
|
|
|
+ ;;
|
|
|
+ 10)
|
|
|
+ shadowtls_menu
|
|
|
+ ;;
|
|
|
+ 11)
|
|
|
+ view_combined_config
|
|
|
+ ;;
|
|
|
+ 0)
|
|
|
+ update_sh
|
|
|
+ ;;
|
|
|
+ 00)
|
|
|
+ exit 1
|
|
|
+ ;;
|
|
|
+ *)
|
|
|
+ echo -e "${Error} 请输入正确数字 [0-11] (退出输入00)"
|
|
|
+ sleep 5s
|
|
|
+ start_menu
|
|
|
+ ;;
|
|
|
+ esac
|
|
|
+}
|
|
|
+
|
|
|
+# 脚本执行入口
|
|
|
+start_menu
|
Gogs