mirror of
https://github.com/fscarmen/sing-box.git
synced 2026-08-10 17:55:16 +08:00
fscarmen
8ebd2d54f6
s6-overlay vs supervisord — Memory Footprint Comparison s6-overlay: Uses only 1–2 MB of RAM. Its service processes typically consume around 200 KB RSS each. Extremely lightweight, written in C, minimal overhead. supervisord: Consumes roughly 10–15 MB of RAM in real-world usage. Implemented in Python, so it naturally has a higher baseline memory footprint (≈8–10× s6-overlay).
1340 lines
57 KiB
Bash
1340 lines
57 KiB
Bash
#!/usr/bin/env bash
|
||
|
||
# 脚本更新日期 2025.11.05
|
||
WORK_DIR=/sing-box
|
||
PORT=$START_PORT
|
||
SUBSCRIBE_TEMPLATE="https://raw.githubusercontent.com/fscarmen/client_template/main"
|
||
|
||
# 自定义字体彩色，read 函数
|
||
warning() { echo -e "\033[31m\033[01m$*\033[0m"; } # 红色
|
||
info() { echo -e "\033[32m\033[01m$*\033[0m"; } # 绿色
|
||
hint() { echo -e "\033[33m\033[01m$*\033[0m"; } # 黄色
|
||
|
||
# 判断系统架构，以下载相应的应用
|
||
case "$ARCH" in
|
||
arm64 )
|
||
SING_BOX_ARCH=arm64; JQ_ARCH=arm64; QRENCODE_ARCH=arm64; ARGO_ARCH=arm64
|
||
;;
|
||
amd64 )
|
||
SING_BOX_ARCH=amd64
|
||
JQ_ARCH=amd64; QRENCODE_ARCH=amd64; ARGO_ARCH=amd64
|
||
;;
|
||
armv7 )
|
||
SING_BOX_ARCH=armv7; JQ_ARCH=armhf; QRENCODE_ARCH=arm; ARGO_ARCH=arm
|
||
;;
|
||
esac
|
||
|
||
# 检查 sing-box 最新版本
|
||
check_latest_sing-box() {
|
||
# 检查是否强制指定版本
|
||
local FORCE_VERSION=$(wget --no-check-certificate --tries=2 --timeout=3 -qO- https://raw.githubusercontent.com/fscarmen/sing-box/refs/heads/main/force_version | sed 's/^[vV]//g')
|
||
|
||
# 没有强制指定版本时，获取最新版本
|
||
grep -q '.' <<< "$FORCE_VERSION" || local FORCE_VERSION=$(wget --no-check-certificate --tries=2 --timeout=3 -qO- https://api.github.com/repos/SagerNet/sing-box/releases | awk -F '["v-]' '/tag_name/{print $5}' | sort -Vr | sed -n '1p')
|
||
|
||
# 获取最终版本号
|
||
local VERSION=$(wget --no-check-certificate --tries=2 --timeout=3 -qO- https://api.github.com/repos/SagerNet/sing-box/releases | awk -F '["v]' -v var="tag_name.*$FORCE_VERSION" '$0 ~ var {print $5; exit}')
|
||
VERSION=${VERSION:-'1.13.0-alpha.27'}
|
||
|
||
echo "$VERSION"
|
||
}
|
||
|
||
# 安装 sing-box 容器
|
||
install() {
|
||
# 下载 sing-box
|
||
echo "正在下载 sing-box ..."
|
||
local ONLINE=$(check_latest_sing-box)
|
||
wget https://github.com/SagerNet/sing-box/releases/download/v$ONLINE/sing-box-$ONLINE-linux-$SING_BOX_ARCH.tar.gz -O- | tar xz -C ${WORK_DIR} sing-box-$ONLINE-linux-$SING_BOX_ARCH/sing-box && mv ${WORK_DIR}/sing-box-$ONLINE-linux-$SING_BOX_ARCH/sing-box ${WORK_DIR}/sing-box && rm -rf ${WORK_DIR}/sing-box-$ONLINE-linux-$SING_BOX_ARCH
|
||
|
||
# 下载 jq
|
||
echo "正在下载 jq ..."
|
||
wget -O ${WORK_DIR}/jq https://github.com/jqlang/jq/releases/download/jq-1.7.1/jq-linux-$JQ_ARCH && chmod +x ${WORK_DIR}/jq
|
||
|
||
# 下载 qrencode
|
||
echo "正在下载 qrencode ..."
|
||
wget -O ${WORK_DIR}/qrencode https://github.com/fscarmen/client_template/raw/main/qrencode-go/qrencode-go-linux-$QRENCODE_ARCH && chmod +x ${WORK_DIR}/qrencode
|
||
|
||
# 下载 cloudflared
|
||
echo "正在下载 cloudflared ..."
|
||
wget -O ${WORK_DIR}/cloudflared https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-$ARGO_ARCH && chmod +x ${WORK_DIR}/cloudflared
|
||
|
||
# 生成100年的自签证书，区分使用 IPv4 / IPv6 / 域名
|
||
echo "生成自签证书 ..."
|
||
[[ $SERVER_IP =~ ^([0-9]{1,3}\.){3}[0-9]{1,3}$|^([0-9a-fA-F:]+)$ ]] && SAN_TYPE="IP" || SAN_TYPE="DNS"
|
||
openssl ecparam -genkey -name prime256v1 -out ${WORK_DIR}/cert/private.key
|
||
openssl req -new -x509 -days 36500 -key ${WORK_DIR}/cert/private.key -out ${WORK_DIR}/cert/cert.pem -subj "/CN=mozilla.org" -addext "subjectAltName = ${SAN_TYPE}:${SERVER_IP}"
|
||
|
||
# 检查系统是否已经安装 tcp-brutal
|
||
IS_BRUTAL=false && [ -x "$(type -p lsmod)" ] && lsmod | grep -q brutal && IS_BRUTAL=true
|
||
[ "$IS_BRUTAL" = 'false' ] && [ -x "$(type -p modprobe)" ] && modprobe brutal 2>/dev/null && IS_BRUTAL=true
|
||
|
||
# 生成 sing-box 配置文件
|
||
for i in {1..3}; do
|
||
ping -c 1 -W 1 "151.101.1.91" &>/dev/null && local IS_IPV4=is_ipv4 && break
|
||
done
|
||
|
||
for i in {1..3}; do
|
||
ping -c 1 -W 1 "2a04:4e42:200::347" &>/dev/null && local IS_IPV6=is_ipv6 && break
|
||
done
|
||
|
||
case "${IS_IPV4}@${IS_IPV6}" in
|
||
is_ipv4@is_ipv6)
|
||
local STRATEGY=prefer_ipv4
|
||
;;
|
||
@is_ipv6)
|
||
local STRATEGY=ipv6_only
|
||
;;
|
||
*)
|
||
local STRATEGY=ipv4_only
|
||
;;
|
||
esac
|
||
|
||
if [[ "$REALITY_PRIVATE" =~ ^[A-Za-z0-9_-]{43}$ ]]; then
|
||
# convert base64url -> base64 (standard), add padding
|
||
local B64=$(printf '%s' "$REALITY_PRIVATE" | tr '_-' '/+')
|
||
local MOD=$(( ${#B64} % 4 ))
|
||
if [ $MOD -eq 2 ]; then
|
||
B64="${B64}=="
|
||
elif [ $MOD -eq 3 ]; then
|
||
B64="${B64}="
|
||
elif [ $MOD -eq 1 ]; then
|
||
echo "Invalid base64url length" >&2
|
||
exit 1
|
||
fi
|
||
|
||
# decode to raw 32 bytes
|
||
echo "$B64" | base64 -d > /tmp/_x25519_priv_raw
|
||
|
||
local PRIV_LEN=$(stat -c%s /tmp/_x25519_priv_raw 2>/dev/null || stat -f%z /tmp/_x25519_priv_raw)
|
||
[ "$PRIV_LEN" -ne 32 ] && echo "Decoded private key is ${PRIV_LEN} bytes (expected 32)." >&2 && echo "Make sure you passed a 32-byte X25519 private scalar (base64url, no padding)." >&2 && rm -f /tmp/_x25519_* && exit 1
|
||
|
||
# DER prefix for PKCS#8 private key with OID 1.3.101.110 (X25519)
|
||
# Hex: 30 2e 02 01 00 30 05 06 03 2b 65 6e 04 22 04 20
|
||
local PREFIX_HEX="302e020100300506032b656e04220420"
|
||
|
||
# append raw private key hex and create DER
|
||
local PRIV_HEX=$(xxd -p -c 256 /tmp/_x25519_priv_raw | tr -d '\n')
|
||
printf "%s%s" "$PREFIX_HEX" "$PRIV_HEX" | xxd -r -p > /tmp/_x25519_priv_der
|
||
|
||
# convert DER PKCS8 -> PEM private key
|
||
openssl pkcs8 -inform DER -in /tmp/_x25519_priv_der -nocrypt -out /tmp/_x25519_priv_pem 2>/dev/null
|
||
|
||
# extract public key in DER
|
||
openssl pkey -in /tmp/_x25519_priv_pem -pubout -outform DER > /tmp/_x25519_pub_der 2>/dev/null
|
||
|
||
# last 32 bytes are the raw public key
|
||
tail -c 32 /tmp/_x25519_pub_der > /tmp/_x25519_pub_raw
|
||
|
||
# encode to base64url (no padding)
|
||
local REALITY_PUBLIC=$(base64 -w0 /tmp/_x25519_pub_raw | tr '+/' '-_' | sed -E 's/=+$//')
|
||
|
||
rm -f /tmp/_x25519_*
|
||
else
|
||
local REALITY_KEYPAIR=$(${WORK_DIR}/sing-box generate reality-keypair) && REALITY_PRIVATE=$(awk '/PrivateKey/{print $NF}' <<< "$REALITY_KEYPAIR") && REALITY_PUBLIC=$(awk '/PublicKey/{print $NF}' <<< "$REALITY_KEYPAIR")
|
||
fi
|
||
|
||
local SHADOWTLS_PASSWORD=$(${WORK_DIR}/sing-box generate rand --base64 16)
|
||
local UUID=${UUID:-"$(${WORK_DIR}/sing-box generate uuid)"}
|
||
local NODE_NAME=${NODE_NAME:-"sing-box"}
|
||
local CDN=${CDN:-"skk.moe"}
|
||
|
||
# 检测是否解锁 chatGPT，首先检查API访问
|
||
local CHECK_RESULT1=$(wget --timeout=2 --tries=2 --retry-connrefused --waitretry=5 -qO- --content-on-error --header='authority: api.openai.com' --header='accept: */*' --header='accept-language: en-US,en;q=0.9' --header='authorization: Bearer null' --header='content-type: application/json' --header='origin: https://platform.openai.com' --header='referer: https://platform.openai.com/' --header='sec-ch-ua: "Google Chrome";v="125", "Chromium";v="125", "Not.A/Brand";v="24"' --header='sec-ch-ua-mobile: ?0' --header='sec-ch-ua-platform: "Windows"' --header='sec-fetch-dest: empty' --header='sec-fetch-mode: cors' --header='sec-fetch-site: same-site' --user-agent='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36' 'https://api.openai.com/compliance/cookie_requirements')
|
||
|
||
# 如果API检测失败或者检测到unsupported_country,直接返回ban
|
||
if [ -z "$CHECK_RESULT1" ] || grep -qi 'unsupported_country' <<< "$CHECK_RESULT1"; then
|
||
CHATGPT_OUT=warp-ep
|
||
fi
|
||
|
||
# API检测通过后,继续检查网页访问
|
||
local CHECK_RESULT2=$(wget --timeout=2 --tries=2 --retry-connrefused --waitretry=5 -qO- --content-on-error --header='authority: ios.chat.openai.com' --header='accept: */*;q=0.8,application/signed-exchange;v=b3;q=0.7' --header='accept-language: en-US,en;q=0.9' --header='sec-ch-ua: "Google Chrome";v="125", "Chromium";v="125", "Not.A/Brand";v="24"' --header='sec-ch-ua-mobile: ?0' --header='sec-ch-ua-platform: "Windows"' --header='sec-fetch-dest: document' --header='sec-fetch-mode: navigate' --header='sec-fetch-site: none' --header='sec-fetch-user: ?1' --header='upgrade-insecure-requests: 1' --user-agent='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36' https://ios.chat.openai.com/)
|
||
|
||
# 检查第二个结果
|
||
if [ -z "$CHECK_RESULT2" ] || grep -qi 'VPN' <<< "$CHECK_RESULT2"; then
|
||
CHATGPT_OUT=warp-ep
|
||
else
|
||
CHATGPT_OUT=direct
|
||
fi
|
||
|
||
# 生成 log 配置
|
||
cat > ${WORK_DIR}/conf/00_log.json << EOF
|
||
|
||
{
|
||
"log":{
|
||
"disabled":false,
|
||
"level":"error",
|
||
"output":"${WORK_DIR}/logs/box.log",
|
||
"timestamp":true
|
||
}
|
||
}
|
||
EOF
|
||
|
||
# 生成 outbound 配置
|
||
cat > ${WORK_DIR}/conf/01_outbounds.json << EOF
|
||
{
|
||
"outbounds":[
|
||
{
|
||
"type":"direct",
|
||
"tag":"direct"
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
|
||
# 生成 endpoint 配置
|
||
cat > ${WORK_DIR}/conf/02_endpoints.json << EOF
|
||
{
|
||
"endpoints":[
|
||
{
|
||
"type":"wireguard",
|
||
"tag":"warp-ep",
|
||
"mtu":1280,
|
||
"address":[
|
||
"172.16.0.2/32",
|
||
"2606:4700:110:8a36:df92:102a:9602:fa18/128"
|
||
],
|
||
"private_key":"YFYOAdbw1bKTHlNNi+aEjBM3BO7unuFC5rOkMRAz9XY=",
|
||
"peers": [
|
||
{
|
||
"address": "engage.cloudflareclient.com",
|
||
"port":2408,
|
||
"public_key":"bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=",
|
||
"allowed_ips": [
|
||
"0.0.0.0/0",
|
||
"::/0"
|
||
],
|
||
"reserved":[
|
||
78,
|
||
135,
|
||
76
|
||
]
|
||
}
|
||
]
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
|
||
# 生成 route 配置
|
||
cat > ${WORK_DIR}/conf/03_route.json << EOF
|
||
{
|
||
"route":{
|
||
"rule_set":[
|
||
{
|
||
"tag":"geosite-openai",
|
||
"type":"remote",
|
||
"format":"binary",
|
||
"url":"https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-openai.srs"
|
||
}
|
||
],
|
||
"rules":[
|
||
{
|
||
"action": "sniff"
|
||
},
|
||
{
|
||
"action": "resolve",
|
||
"domain":[
|
||
"api.openai.com"
|
||
],
|
||
"strategy": "prefer_ipv4"
|
||
},
|
||
{
|
||
"action": "resolve",
|
||
"rule_set":[
|
||
"geosite-openai"
|
||
],
|
||
"strategy": "prefer_ipv6"
|
||
},
|
||
{
|
||
"domain":[
|
||
"api.openai.com"
|
||
],
|
||
"rule_set":[
|
||
"geosite-openai"
|
||
],
|
||
"outbound":"${CHATGPT_OUT}"
|
||
}
|
||
]
|
||
}
|
||
}
|
||
EOF
|
||
|
||
# 生成缓存文件
|
||
cat > ${WORK_DIR}/conf/04_experimental.json << EOF
|
||
{
|
||
"experimental": {
|
||
"cache_file": {
|
||
"enabled": true,
|
||
"path": "${WORK_DIR}/cache.db"
|
||
}
|
||
}
|
||
}
|
||
EOF
|
||
|
||
# 生成 dns 配置文件
|
||
cat > ${WORK_DIR}/conf/05_dns.json << EOF
|
||
{
|
||
"dns":{
|
||
"servers":[
|
||
{
|
||
"type":"local"
|
||
}
|
||
],
|
||
"strategy": "${STRATEGY}"
|
||
}
|
||
}
|
||
EOF
|
||
|
||
# 内建的 NTP 客户端服务配置文件，这对于无法进行时间同步的环境很有用
|
||
cat > ${WORK_DIR}/conf/06_ntp.json << EOF
|
||
{
|
||
"ntp": {
|
||
"enabled": true,
|
||
"server": "time.apple.com",
|
||
"server_port": 123,
|
||
"interval": "60m"
|
||
}
|
||
}
|
||
EOF
|
||
|
||
# 生成 XTLS + Reality 配置
|
||
[ "${XTLS_REALITY}" = 'true' ] && ((PORT++)) && PORT_XTLS_REALITY=$PORT && cat > ${WORK_DIR}/conf/11_xtls-reality_inbounds.json << EOF
|
||
// "public_key":"${REALITY_PUBLIC}"
|
||
{
|
||
"inbounds":[
|
||
{
|
||
"type":"vless",
|
||
"tag":"${NODE_NAME} xtls-reality",
|
||
"listen":"::",
|
||
"listen_port":${PORT_XTLS_REALITY},
|
||
"users":[
|
||
{
|
||
"uuid":"${UUID}",
|
||
"flow":"xtls-rprx-vision"
|
||
}
|
||
],
|
||
"tls":{
|
||
"enabled":true,
|
||
"server_name":"addons.mozilla.org",
|
||
"reality":{
|
||
"enabled":true,
|
||
"handshake":{
|
||
"server":"addons.mozilla.org",
|
||
"server_port":443
|
||
},
|
||
"private_key":"${REALITY_PRIVATE}",
|
||
"short_id":[
|
||
""
|
||
]
|
||
}
|
||
},
|
||
"multiplex":{
|
||
"enabled":false,
|
||
"padding":false,
|
||
"brutal":{
|
||
"enabled":${IS_BRUTAL},
|
||
"up_mbps":1000,
|
||
"down_mbps":1000
|
||
}
|
||
}
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
|
||
# 生成 Hysteria2 配置
|
||
[ "${HYSTERIA2}" = 'true' ] && ((PORT++)) && PORT_HYSTERIA2=$PORT && cat > ${WORK_DIR}/conf/12_hysteria2_inbounds.json << EOF
|
||
{
|
||
"inbounds":[
|
||
{
|
||
"type":"hysteria2",
|
||
"tag":"${NODE_NAME} hysteria2",
|
||
"listen":"::",
|
||
"listen_port":${PORT_HYSTERIA2},
|
||
"users":[
|
||
{
|
||
"password":"${UUID}"
|
||
}
|
||
],
|
||
"ignore_client_bandwidth":false,
|
||
"tls":{
|
||
"enabled":true,
|
||
"server_name":"",
|
||
"alpn":[
|
||
"h3"
|
||
],
|
||
"min_version":"1.3",
|
||
"max_version":"1.3",
|
||
"certificate_path":"${WORK_DIR}/cert/cert.pem",
|
||
"key_path":"${WORK_DIR}/cert/private.key"
|
||
}
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
|
||
# 生成 Tuic V5 配置
|
||
[ "${TUIC}" = 'true' ] && ((PORT++)) && PORT_TUIC=$PORT && cat > ${WORK_DIR}/conf/13_tuic_inbounds.json << EOF
|
||
{
|
||
"inbounds":[
|
||
{
|
||
"type":"tuic",
|
||
"tag":"${NODE_NAME} tuic",
|
||
"listen":"::",
|
||
"listen_port":${PORT_TUIC},
|
||
"users":[
|
||
{
|
||
"uuid":"${UUID}",
|
||
"password":"${UUID}"
|
||
}
|
||
],
|
||
"congestion_control": "bbr",
|
||
"zero_rtt_handshake": false,
|
||
"tls":{
|
||
"enabled":true,
|
||
"alpn":[
|
||
"h3"
|
||
],
|
||
"certificate_path":"${WORK_DIR}/cert/cert.pem",
|
||
"key_path":"${WORK_DIR}/cert/private.key"
|
||
}
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
|
||
# 生成 ShadowTLS V5 配置
|
||
[ "${SHADOWTLS}" = 'true' ] && ((PORT++)) && PORT_SHADOWTLS=$PORT && cat > ${WORK_DIR}/conf/14_ShadowTLS_inbounds.json << EOF
|
||
{
|
||
"inbounds":[
|
||
{
|
||
"type":"shadowtls",
|
||
"tag":"${NODE_NAME} ShadowTLS",
|
||
"listen":"::",
|
||
"listen_port":${PORT_SHADOWTLS},
|
||
"detour":"shadowtls-in",
|
||
"version":3,
|
||
"users":[
|
||
{
|
||
"password":"${UUID}"
|
||
}
|
||
],
|
||
"handshake":{
|
||
"server":"addons.mozilla.org",
|
||
"server_port":443
|
||
},
|
||
"strict_mode":true
|
||
},
|
||
{
|
||
"type":"shadowsocks",
|
||
"tag":"shadowtls-in",
|
||
"listen":"127.0.0.1",
|
||
"network":"tcp",
|
||
"method":"2022-blake3-aes-128-gcm",
|
||
"password":"${SHADOWTLS_PASSWORD}",
|
||
"multiplex":{
|
||
"enabled":true,
|
||
"padding":true,
|
||
"brutal":{
|
||
"enabled":${IS_BRUTAL},
|
||
"up_mbps":1000,
|
||
"down_mbps":1000
|
||
}
|
||
}
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
|
||
# 生成 Shadowsocks 配置
|
||
[ "${SHADOWSOCKS}" = 'true' ] && ((PORT++)) && PORT_SHADOWSOCKS=$PORT && cat > ${WORK_DIR}/conf/15_shadowsocks_inbounds.json << EOF
|
||
{
|
||
"inbounds":[
|
||
{
|
||
"type":"shadowsocks",
|
||
"tag":"${NODE_NAME} shadowsocks",
|
||
"listen":"::",
|
||
"listen_port":${PORT_SHADOWSOCKS},
|
||
"method":"aes-128-gcm",
|
||
"password":"${UUID}",
|
||
"multiplex":{
|
||
"enabled":true,
|
||
"padding":true,
|
||
"brutal":{
|
||
"enabled":${IS_BRUTAL},
|
||
"up_mbps":1000,
|
||
"down_mbps":1000
|
||
}
|
||
}
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
|
||
# 生成 Trojan 配置
|
||
[ "${TROJAN}" = 'true' ] && ((PORT++)) && PORT_TROJAN=$PORT && cat > ${WORK_DIR}/conf/16_trojan_inbounds.json << EOF
|
||
{
|
||
"inbounds":[
|
||
{
|
||
"type":"trojan",
|
||
"tag":"${NODE_NAME} trojan",
|
||
"listen":"::",
|
||
"listen_port":${PORT_TROJAN},
|
||
"users":[
|
||
{
|
||
"password":"${UUID}"
|
||
}
|
||
],
|
||
"tls":{
|
||
"enabled":true,
|
||
"certificate_path":"${WORK_DIR}/cert/cert.pem",
|
||
"key_path":"${WORK_DIR}/cert/private.key"
|
||
},
|
||
"multiplex":{
|
||
"enabled":true,
|
||
"padding":true,
|
||
"brutal":{
|
||
"enabled":${IS_BRUTAL},
|
||
"up_mbps":1000,
|
||
"down_mbps":1000
|
||
}
|
||
}
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
|
||
# 生成 vmess + ws 配置
|
||
[ "${VMESS_WS}" = 'true' ] && ((PORT++)) && PORT_VMESS_WS=$PORT && cat > ${WORK_DIR}/conf/17_vmess-ws_inbounds.json << EOF
|
||
// "CDN": "${CDN}"
|
||
{
|
||
"inbounds":[
|
||
{
|
||
"type":"vmess",
|
||
"tag":"${NODE_NAME} vmess-ws",
|
||
"listen":"127.0.0.1",
|
||
"listen_port":${PORT_VMESS_WS},
|
||
"tcp_fast_open":false,
|
||
"proxy_protocol":false,
|
||
"users":[
|
||
{
|
||
"uuid":"${UUID}",
|
||
"alterId":0
|
||
}
|
||
],
|
||
"transport":{
|
||
"type":"ws",
|
||
"path":"/${UUID}-vmess",
|
||
"max_early_data":2560,
|
||
"early_data_header_name":"Sec-WebSocket-Protocol"
|
||
},
|
||
"multiplex":{
|
||
"enabled":true,
|
||
"padding":true,
|
||
"brutal":{
|
||
"enabled":${IS_BRUTAL},
|
||
"up_mbps":1000,
|
||
"down_mbps":1000
|
||
}
|
||
}
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
|
||
# 生成 vless + ws + tls 配置
|
||
[ "${VLESS_WS}" = 'true' ] && ((PORT++)) && PORT_VLESS_WS=$PORT && cat > ${WORK_DIR}/conf/18_vless-ws-tls_inbounds.json << EOF
|
||
// "CDN": "${CDN}"
|
||
{
|
||
"inbounds":[
|
||
{
|
||
"type":"vless",
|
||
"tag":"${NODE_NAME} vless-ws-tls",
|
||
"listen":"::",
|
||
"listen_port":${PORT_VLESS_WS},
|
||
"tcp_fast_open":false,
|
||
"proxy_protocol":false,
|
||
"users":[
|
||
{
|
||
"name":"sing-box",
|
||
"uuid":"${UUID}"
|
||
}
|
||
],
|
||
"transport":{
|
||
"type":"ws",
|
||
"path":"/${UUID}-vless",
|
||
"max_early_data":2560,
|
||
"early_data_header_name":"Sec-WebSocket-Protocol"
|
||
},
|
||
"multiplex":{
|
||
"enabled":true,
|
||
"padding":true,
|
||
"brutal":{
|
||
"enabled":${IS_BRUTAL},
|
||
"up_mbps":1000,
|
||
"down_mbps":1000
|
||
}
|
||
}
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
|
||
# 生成 H2 + Reality 配置
|
||
[ "${H2_REALITY}" = 'true' ] && ((PORT++)) && PORT_H2_REALITY=$PORT && cat > ${WORK_DIR}/conf/19_h2-reality_inbounds.json << EOF
|
||
// "public_key":"${REALITY_PUBLIC}"
|
||
{
|
||
"inbounds":[
|
||
{
|
||
"type":"vless",
|
||
"tag":"${NODE_NAME} h2-reality",
|
||
"listen":"::",
|
||
"listen_port":${PORT_H2_REALITY},
|
||
"users":[
|
||
{
|
||
"uuid":"${UUID}"
|
||
}
|
||
],
|
||
"tls":{
|
||
"enabled":true,
|
||
"server_name":"addons.mozilla.org",
|
||
"reality":{
|
||
"enabled":true,
|
||
"handshake":{
|
||
"server":"addons.mozilla.org",
|
||
"server_port":443
|
||
},
|
||
"private_key":"${REALITY_PRIVATE}",
|
||
"short_id":[
|
||
""
|
||
]
|
||
}
|
||
},
|
||
"transport": {
|
||
"type": "http"
|
||
},
|
||
"multiplex":{
|
||
"enabled":true,
|
||
"padding":true,
|
||
"brutal":{
|
||
"enabled":${IS_BRUTAL},
|
||
"up_mbps":1000,
|
||
"down_mbps":1000
|
||
}
|
||
}
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
|
||
# 生成 gRPC + Reality 配置
|
||
[ "${GRPC_REALITY}" = 'true' ] && ((PORT++)) && PORT_GRPC_REALITY=$PORT && cat > ${WORK_DIR}/conf/20_grpc-reality_inbounds.json << EOF
|
||
// "public_key":"${REALITY_PUBLIC}"
|
||
{
|
||
"inbounds":[
|
||
{
|
||
"type":"vless",
|
||
"sniff":true,
|
||
"sniff_override_destination":true,
|
||
"tag":"${NODE_NAME} grpc-reality",
|
||
"listen":"::",
|
||
"listen_port":${PORT_GRPC_REALITY},
|
||
"users":[
|
||
{
|
||
"uuid":"${UUID}"
|
||
}
|
||
],
|
||
"tls":{
|
||
"enabled":true,
|
||
"server_name":"addons.mozilla.org",
|
||
"reality":{
|
||
"enabled":true,
|
||
"handshake":{
|
||
"server":"addons.mozilla.org",
|
||
"server_port":443
|
||
},
|
||
"private_key":"${REALITY_PRIVATE}",
|
||
"short_id":[
|
||
""
|
||
]
|
||
}
|
||
},
|
||
"transport": {
|
||
"type": "grpc",
|
||
"service_name": "grpc"
|
||
},
|
||
"multiplex":{
|
||
"enabled":true,
|
||
"padding":true,
|
||
"brutal":{
|
||
"enabled":${IS_BRUTAL},
|
||
"up_mbps":1000,
|
||
"down_mbps":1000
|
||
}
|
||
}
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
|
||
# 生成 AnyTLS 配置
|
||
[ "${ANYTLS}" = 'true' ] && ((PORT++)) && PORT_ANYTLS=$PORT && cat > ${WORK_DIR}/conf/21_anytls_inbounds.json << EOF
|
||
{
|
||
"inbounds":[
|
||
{
|
||
"type":"anytls",
|
||
"tag":"${NODE_NAME} anytls",
|
||
"listen":"::",
|
||
"listen_port":$PORT_ANYTLS,
|
||
"users":[
|
||
{
|
||
"password":"${UUID}"
|
||
}
|
||
],
|
||
"padding_scheme":[],
|
||
"tls":{
|
||
"enabled":true,
|
||
"certificate_path":"${WORK_DIR}/cert/cert.pem",
|
||
"key_path":"${WORK_DIR}/cert/private.key"
|
||
}
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
|
||
# 判断 argo 隧道类型
|
||
if [[ -n "$ARGO_DOMAIN" && -n "$ARGO_AUTH" ]]; then
|
||
if [[ "$ARGO_AUTH" =~ TunnelSecret ]]; then
|
||
ARGO_JSON=${ARGO_AUTH//[ ]/}
|
||
ARGO_RUNS="cloudflared tunnel --edge-ip-version auto --config ${WORK_DIR}/tunnel.yml run"
|
||
echo $ARGO_JSON > ${WORK_DIR}/tunnel.json
|
||
cat > ${WORK_DIR}/tunnel.yml << EOF
|
||
tunnel: $(cut -d\" -f12 <<< $ARGO_JSON)
|
||
credentials-file: ${WORK_DIR}/tunnel.json
|
||
|
||
ingress:
|
||
- hostname: ${ARGO_DOMAIN}
|
||
service: https://localhost:${START_PORT}
|
||
originRequest:
|
||
noTLSVerify: true
|
||
- service: http_status:404
|
||
EOF
|
||
|
||
elif [[ "${ARGO_AUTH}" =~ [a-z0-9A-Z=]{120,250} ]]; then
|
||
[[ "{$ARGO_AUTH}" =~ cloudflared.*service ]] && ARGO_TOKEN=$(awk -F ' ' '{print $NF}' <<< "$ARGO_AUTH") || ARGO_TOKEN=$ARGO_AUTH
|
||
ARGO_RUNS="cloudflared tunnel --edge-ip-version auto run --token ${ARGO_TOKEN}"
|
||
fi
|
||
else
|
||
((PORT++))
|
||
METRICS_PORT=$PORT
|
||
ARGO_RUNS="cloudflared tunnel --edge-ip-version auto --no-autoupdate --no-tls-verify --metrics 0.0.0.0:$METRICS_PORT --url https://localhost:$START_PORT"
|
||
fi
|
||
|
||
# 生成 s6-overlay 服务脚本（替代 supervisord）
|
||
mkdir -p /etc/services.d/nginx /etc/services.d/sing-box
|
||
cat > /etc/services.d/nginx/run << 'EOF'
|
||
#!/usr/bin/env sh
|
||
exec /usr/sbin/nginx -g 'daemon off;'
|
||
EOF
|
||
cat > /etc/services.d/sing-box/run << EOF
|
||
#!/usr/bin/env sh
|
||
exec ${WORK_DIR}/sing-box run -C ${WORK_DIR}/conf/
|
||
EOF
|
||
chmod +x /etc/services.d/nginx/run /etc/services.d/sing-box/run
|
||
|
||
# 命名隧道模式时，argo 作为 s6 服务；Quick Tunnel 模式维持原先的前置后台拉起逻辑
|
||
if [ -z "$METRICS_PORT" ]; then
|
||
mkdir -p /etc/services.d/argo
|
||
cat > /etc/services.d/argo/run << EOF
|
||
#!/usr/bin/env sh
|
||
exec ${WORK_DIR}/${ARGO_RUNS} 2>/dev/null
|
||
EOF
|
||
chmod +x /etc/services.d/argo/run
|
||
|
||
else
|
||
# 如使用临时隧道，先运行 cloudflared 以获取临时隧道域名
|
||
nohup ${WORK_DIR}/${ARGO_RUNS} >/dev/null 2>&1 &
|
||
until grep -q 'trycloudflare\.com' <<< "$ARGO_DOMAIN" ; do
|
||
sleep 1
|
||
local ARGO_DOMAIN=$(wget -qO- http://localhost:$METRICS_PORT/quicktunnel | awk -F '"' '{print $4}')
|
||
done
|
||
fi
|
||
|
||
# 获取自签证书指纹。argo 回源的是由 Google Trust Services（谷歌信任服务）作为中间 CA（CN=WE1）签发，受信任的证书（非自签名）
|
||
local SELF_SIGNED_FINGERPRINT_SHA256=$(openssl x509 -fingerprint -noout -sha256 -in ${WORK_DIR}/cert/cert.pem | awk -F '=' '{print $NF}')
|
||
local SELF_SIGNED_FINGERPRINT_BASE64=$(openssl x509 -in ${WORK_DIR}/cert/cert.pem -pubkey -noout | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64)
|
||
|
||
# 生成 nginx 配置文件
|
||
local NGINX_CONF="user root;
|
||
|
||
worker_processes auto;
|
||
|
||
error_log /dev/null;
|
||
pid /var/run/nginx.pid;
|
||
|
||
events {
|
||
worker_connections 1024;
|
||
}
|
||
|
||
http {
|
||
map \$http_user_agent \$path {
|
||
default /; # 默认路径
|
||
~*v2rayN|Neko /base64; # 匹配 V2rayN / NekoBox 客户端
|
||
~*clash /clash; # 匹配 Clash 客户端
|
||
~*ShadowRocket /shadowrocket; # 匹配 ShadowRocket 客户端
|
||
~*SFM /sing-box-pc; # 匹配 Sing-box pc 客户端
|
||
~*SFI|SFA /sing-box-phone; # 匹配 Sing-box phone 客户端
|
||
# ~*Chrome|Firefox|Mozilla /; # 添加更多的分流规则
|
||
}
|
||
|
||
include /etc/nginx/mime.types;
|
||
default_type application/octet-stream;
|
||
|
||
log_format main '\$remote_addr - \$remote_user [\$time_local] "\$request" '
|
||
'\$status \$body_bytes_sent "\$http_referer" '
|
||
'"\$http_user_agent" "\$http_x_forwarded_for"';
|
||
|
||
access_log /dev/null;
|
||
|
||
sendfile on;
|
||
#tcp_nopush on;
|
||
|
||
keepalive_timeout 65;
|
||
|
||
#gzip on;
|
||
|
||
#include /etc/nginx/conf.d/*.conf;
|
||
|
||
server {
|
||
listen 127.0.0.1:$START_PORT ssl ; # sing-box backend
|
||
http2 on;
|
||
server_name addons.mozilla.org;
|
||
|
||
ssl_certificate ${WORK_DIR}/cert/cert.pem;
|
||
ssl_certificate_key ${WORK_DIR}/cert/private.key;
|
||
ssl_protocols TLSv1.3;
|
||
ssl_session_tickets on;
|
||
ssl_stapling off;
|
||
ssl_stapling_verify off;"
|
||
|
||
[ "${VLESS_WS}" = 'true' ] && NGINX_CONF+="
|
||
# 反代 sing-box vless websocket
|
||
location /${UUID}-vless {
|
||
if (\$http_upgrade != "websocket") {
|
||
return 404;
|
||
}
|
||
proxy_pass http://127.0.0.1:${PORT_VLESS_WS};
|
||
proxy_http_version 1.1;
|
||
proxy_set_header Upgrade \$http_upgrade;
|
||
proxy_set_header Connection "upgrade";
|
||
proxy_set_header X-Real-IP \$remote_addr;
|
||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||
proxy_set_header Host \$host;
|
||
proxy_redirect off;
|
||
}"
|
||
|
||
[ "${VMESS_WS}" = 'true' ] && NGINX_CONF+="
|
||
# 反代 sing-box websocket
|
||
location /${UUID}-vmess {
|
||
if (\$http_upgrade != "websocket") {
|
||
return 404;
|
||
}
|
||
proxy_pass http://127.0.0.1:${PORT_VMESS_WS};
|
||
proxy_http_version 1.1;
|
||
proxy_set_header Upgrade \$http_upgrade;
|
||
proxy_set_header Connection "upgrade";
|
||
proxy_set_header X-Real-IP \$remote_addr;
|
||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||
proxy_set_header Host \$host;
|
||
proxy_redirect off;
|
||
}"
|
||
|
||
NGINX_CONF+="
|
||
# 来自 /auto 的分流
|
||
location ~ ^/${UUID}/auto {
|
||
default_type 'text/plain; charset=utf-8';
|
||
alias ${WORK_DIR}/subscribe/\$path;
|
||
}
|
||
|
||
location ~ ^/${UUID}/(.*) {
|
||
autoindex on;
|
||
proxy_set_header X-Real-IP \$proxy_protocol_addr;
|
||
default_type 'text/plain; charset=utf-8';
|
||
alias ${WORK_DIR}/subscribe/\$1;
|
||
}
|
||
}
|
||
}"
|
||
|
||
echo "$NGINX_CONF" > /etc/nginx/nginx.conf
|
||
|
||
# IPv6 时的 IP 处理
|
||
if [[ "$SERVER_IP" =~ : ]]; then
|
||
SERVER_IP_1="[$SERVER_IP]"
|
||
SERVER_IP_2="[[$SERVER_IP]]"
|
||
else
|
||
SERVER_IP_1="$SERVER_IP"
|
||
SERVER_IP_2="$SERVER_IP"
|
||
fi
|
||
|
||
# 生成各订阅文件
|
||
# 生成 Clash proxy providers 订阅文件
|
||
local CLASH_SUBSCRIBE='proxies:'
|
||
|
||
[ "${XTLS_REALITY}" = 'true' ] && local CLASH_XTLS_REALITY="- {name: \"${NODE_NAME} xtls-reality\", type: vless, server: ${SERVER_IP}, port: ${PORT_XTLS_REALITY}, uuid: ${UUID}, network: tcp, udp: true, tls: true, flow: xtls-rprx-vision, servername: addons.mozilla.org, client-fingerprint: firefox, reality-opts: {public-key: ${REALITY_PUBLIC}, short-id: \"\"}, smux: { enabled: false, protocol: 'h2mux', padding: false, max-connections: '8', min-streams: '16', statistic: true, only-tcp: false }, brutal-opts: { enabled: false } }" &&
|
||
local CLASH_SUBSCRIBE+="
|
||
$CLASH_XTLS_REALITY
|
||
"
|
||
[ "${HYSTERIA2}" = 'true' ] && local CLASH_HYSTERIA2="- {name: \"${NODE_NAME} hysteria2\", type: hysteria2, server: ${SERVER_IP}, port: ${PORT_HYSTERIA2}, up: \"200 Mbps\", down: \"1000 Mbps\", password: ${UUID}, skip-cert-verify: false, fingerprint: ${SELF_SIGNED_FINGERPRINT_SHA256}}" &&
|
||
local CLASH_SUBSCRIBE+="
|
||
$CLASH_HYSTERIA2
|
||
"
|
||
[ "${TUIC}" = 'true' ] && local CLASH_TUIC="- {name: \"${NODE_NAME} tuic\", type: tuic, server: ${SERVER_IP}, port: ${PORT_TUIC}, uuid: ${UUID}, password: ${UUID}, alpn: [h3], disable-sni: true, reduce-rtt: true, request-timeout: 8000, udp-relay-mode: native, congestion-controller: bbr, skip-cert-verify: false, fingerprint: ${SELF_SIGNED_FINGERPRINT_SHA256}}" &&
|
||
local CLASH_SUBSCRIBE+="
|
||
$CLASH_TUIC
|
||
"
|
||
[ "${SHADOWTLS}" = 'true' ] && local CLASH_SHADOWTLS="- {name: \"${NODE_NAME} ShadowTLS\", type: ss, server: ${SERVER_IP}, port: ${PORT_SHADOWTLS}, cipher: 2022-blake3-aes-128-gcm, password: ${SHADOWTLS_PASSWORD}, plugin: shadow-tls, client-fingerprint: firefox, plugin-opts: {host: addons.mozilla.org, password: \"${UUID}\", version: 3}, smux: { enabled: true, protocol: 'h2mux', padding: true, max-connections: '8', min-streams: '16', statistic: true, only-tcp: false }, brutal-opts: { enabled: ${IS_BRUTAL}, up: '1000 Mbps', down: '1000 Mbps' } }" &&
|
||
local CLASH_SUBSCRIBE+="
|
||
$CLASH_SHADOWTLS
|
||
"
|
||
[ "${SHADOWSOCKS}" = 'true' ] && local CLASH_SHADOWSOCKS="- {name: \"${NODE_NAME} shadowsocks\", type: ss, server: ${SERVER_IP}, port: $PORT_SHADOWSOCKS, cipher: aes-128-gcm, password: ${UUID}, smux: { enabled: true, protocol: 'h2mux', padding: true, max-connections: '8', min-streams: '16', statistic: true, only-tcp: false }, brutal-opts: { enabled: ${IS_BRUTAL}, up: '1000 Mbps', down: '1000 Mbps' } }" &&
|
||
local CLASH_SUBSCRIBE+="
|
||
$CLASH_SHADOWSOCKS
|
||
"
|
||
[ "${TROJAN}" = 'true' ] && local CLASH_TROJAN="- {name: \"${NODE_NAME} trojan\", type: trojan, server: ${SERVER_IP}, port: $PORT_TROJAN, password: ${UUID}, client-fingerprint: firefox, skip-cert-verify: false, fingerprint: ${SELF_SIGNED_FINGERPRINT_SHA256}, smux: { enabled: true, protocol: 'h2mux', padding: true, max-connections: '8', min-streams: '16', statistic: true, only-tcp: false }, brutal-opts: { enabled: ${IS_BRUTAL}, up: '1000 Mbps', down: '1000 Mbps' } }" &&
|
||
local CLASH_SUBSCRIBE+="
|
||
$CLASH_TROJAN
|
||
"
|
||
[ "${VMESS_WS}" = 'true' ] && local CLASH_VMESS_WS="- {name: \"${NODE_NAME} vmess-ws\", type: vmess, server: ${CDN}, port: 80, uuid: ${UUID}, udp: true, tls: false, alterId: 0, cipher: auto, network: ws, ws-opts: { path: \"/${UUID}-vmess\", headers: {Host: ${ARGO_DOMAIN}} }, smux: { enabled: true, protocol: 'h2mux', padding: true, max-connections: '8', min-streams: '16', statistic: true, only-tcp: false }, brutal-opts: { enabled: ${IS_BRUTAL}, up: '1000 Mbps', down: '1000 Mbps' } }" &&
|
||
local CLASH_SUBSCRIBE+="
|
||
$CLASH_VMESS_WS
|
||
"
|
||
[ "${VLESS_WS}" = 'true' ] && local CLASH_VLESS_WS="- {name: \"${NODE_NAME} vless-ws-tls\", type: vless, server: ${CDN}, port: 443, uuid: ${UUID}, udp: true, tls: true, servername: ${ARGO_DOMAIN}, network: ws, skip-cert-verify: false, ws-opts: { path: \"/${UUID}-vless\", headers: {Host: ${ARGO_DOMAIN}}, max-early-data: 2560, early-data-header-name: Sec-WebSocket-Protocol }, smux: { enabled: true, protocol: 'h2mux', padding: true, max-connections: '8', min-streams: '16', statistic: true, only-tcp: false }, brutal-opts: { enabled: ${IS_BRUTAL}, up: '1000 Mbps', down: '1000 Mbps' } }" &&
|
||
local CLASH_SUBSCRIBE+="
|
||
$CLASH_VLESS_WS
|
||
"
|
||
|
||
[ "${H2_REALITY}" = 'true' ] && local CLASH_H2_REALITY="- {name: \"${NODE_NAME} h2-reality\", type: vless, server: ${SERVER_IP}, port: ${PORT_H2_REALITY}, uuid: ${UUID}, network: http, tls: true, servername: addons.mozilla.org, client-fingerprint: firefox, reality-opts: { public-key: ${REALITY_PUBLIC}, short-id: \"\" }, smux: { enabled: true, protocol: 'h2mux', padding: true, max-connections: '8', min-streams: '16', statistic: true, only-tcp: false }, brutal-opts: { enabled: ${IS_BRUTAL}, up: '1000 Mbps', down: '1000 Mbps' } }" &&
|
||
local CLASH_SUBSCRIBE+="
|
||
$CLASH_H2_REALITY
|
||
"
|
||
|
||
[ "${GRPC_REALITY}" = 'true' ] && local CLASH_GRPC_REALITY="- {name: \"${NODE_NAME} grpc-reality\", type: vless, server: ${SERVER_IP}, port: ${PORT_GRPC_REALITY}, uuid: ${UUID}, network: grpc, tls: true, udp: true, flow: , client-fingerprint: firefox, servername: addons.mozilla.org, grpc-opts: { grpc-service-name: \"grpc\" }, reality-opts: { public-key: ${REALITY_PUBLIC}, short-id: \"\" }, smux: { enabled: true, protocol: 'h2mux', padding: true, max-connections: '8', min-streams: '16', statistic: true, only-tcp: false }, brutal-opts: { enabled: ${IS_BRUTAL}, up: '1000 Mbps', down: '1000 Mbps' } }" &&
|
||
local CLASH_SUBSCRIBE+="
|
||
$CLASH_GRPC_REALITY
|
||
"
|
||
[ "${ANYTLS}" = 'true' ] && local CLASH_ANYTLS="- {name: \"${NODE_NAME} anytls\", type: anytls, server: ${SERVER_IP}, port: $PORT_ANYTLS, password: ${UUID}, client-fingerprint: firefox, udp: true, idle-session-check-interval: 30, idle-session-timeout: 30, skip-cert-verify: false, fingerprint: ${SELF_SIGNED_FINGERPRINT_SHA256} }" &&
|
||
local CLASH_SUBSCRIBE+="
|
||
$CLASH_ANYTLS
|
||
"
|
||
|
||
echo -n "${CLASH_SUBSCRIBE}" | sed -E '/^[ ]*#|^--/d' | sed '/^$/d' > ${WORK_DIR}/subscribe/proxies
|
||
|
||
# 生成 clash 订阅配置文件
|
||
# 模板: 使用 proxy providers
|
||
wget -qO- --tries=3 --timeout=2 ${SUBSCRIBE_TEMPLATE}/clash | sed "s#NODE_NAME#${NODE_NAME}#g; s#PROXY_PROVIDERS_URL#https://${ARGO_DOMAIN}/${UUID}/proxies#" > ${WORK_DIR}/subscribe/clash
|
||
|
||
# 生成 ShadowRocket 订阅配置文件
|
||
[ "${XTLS_REALITY}" = 'true' ] && local SHADOWROCKET_SUBSCRIBE+="
|
||
vless://$(echo -n "auto:${UUID}@${SERVER_IP_2}:${PORT_XTLS_REALITY}" | base64 -w0)?remarks=${NODE_NAME}%20xtls-reality&obfs=none&tls=1&peer=addons.mozilla.org&xtls=2&pbk=${REALITY_PUBLIC}
|
||
"
|
||
[ "${HYSTERIA2}" = 'true' ] && local SHADOWROCKET_SUBSCRIBE+="
|
||
hysteria2://${UUID}@${SERVER_IP_1}:${PORT_HYSTERIA2}?hpkp=${SELF_SIGNED_FINGERPRINT_SHA256}&obfs=none#${NODE_NAME}%20hysteria2
|
||
"
|
||
[ "${TUIC}" = 'true' ] && local SHADOWROCKET_SUBSCRIBE+="
|
||
tuic://${UUID}:${UUID}@${SERVER_IP_2}:${PORT_TUIC}?congestion_control=bbr&udp_relay_mode=native&alpn=h3&hpkp=${SELF_SIGNED_FINGERPRINT_SHA256}#${NODE_NAME}%20tuic
|
||
"
|
||
[ "${SHADOWTLS}" = 'true' ] && local SHADOWROCKET_SUBSCRIBE+="
|
||
ss://$(echo -n "2022-blake3-aes-128-gcm:${SHADOWTLS_PASSWORD}@${SERVER_IP_2}:${PORT_SHADOWTLS}" | base64 -w0)?shadow-tls=$(echo -n "{\"version\":\"3\",\"host\":\"addons.mozilla.org\",\"password\":\"${UUID}\"}" | base64 -w0)#${NODE_NAME}%20ShadowTLS
|
||
"
|
||
[ "${SHADOWSOCKS}" = 'true' ] && local SHADOWROCKET_SUBSCRIBE+="
|
||
ss://$(echo -n "aes-128-gcm:${UUID}@${SERVER_IP_2}:$PORT_SHADOWSOCKS" | base64 -w0)#${NODE_NAME}%20shadowsocks
|
||
"
|
||
[ "${TROJAN}" = 'true' ] && local SHADOWROCKET_SUBSCRIBE+="
|
||
trojan://${UUID}@${SERVER_IP_1}:$PORT_TROJAN?peer=addons.mozilla.org&hpkp=${SELF_SIGNED_FINGERPRINT_SHA256}#${NODE_NAME}%20trojan
|
||
"
|
||
[ "${VMESS_WS}" = 'true' ] && local SHADOWROCKET_SUBSCRIBE+="
|
||
----------------------------
|
||
vmess://$(echo -n "auto:${UUID}@${CDN}:80" | base64 -w0)?remarks=${NODE_NAME}%20vmess-ws&obfsParam=${ARGO_DOMAIN}&path=/${UUID}-vmess&obfs=websocket&alterId=0
|
||
"
|
||
[ "${VLESS_WS}" = 'true' ] && local SHADOWROCKET_SUBSCRIBE+="
|
||
----------------------------
|
||
vless://$(echo -n "auto:${UUID}@${CDN}:443" | base64 -w0)?remarks=${NODE_NAME}%20vless-ws-tls&obfsParam=${ARGO_DOMAIN}&path=/${UUID}-vless?ed=2560&obfs=websocket&tls=1&peer=${ARGO_DOMAIN}
|
||
"
|
||
[ "${H2_REALITY}" = 'true' ] && local SHADOWROCKET_SUBSCRIBE+="
|
||
----------------------------
|
||
vless://$(echo -n auto:${UUID}@${SERVER_IP_2}:${PORT_H2_REALITY} | base64 -w0)?remarks=${NODE_NAME}%20h2-reality&path=/&obfs=h2&tls=1&peer=addons.mozilla.org&alpn=h2&mux=1&pbk=${REALITY_PUBLIC}
|
||
"
|
||
[ "${GRPC_REALITY}" = 'true' ] && local SHADOWROCKET_SUBSCRIBE+="
|
||
vless://$(echo -n "auto:${UUID}@${SERVER_IP_2}:${PORT_GRPC_REALITY}" | base64 -w0)?remarks=${NODE_NAME}%20grpc-reality&path=grpc&obfs=grpc&tls=1&peer=addons.mozilla.org&pbk=${REALITY_PUBLIC}
|
||
"
|
||
[ "${ANYTLS}" = 'true' ] && local SHADOWROCKET_SUBSCRIBE+="
|
||
anytls://${UUID}@${SERVER_IP_1}:${PORT_ANYTLS}?hpkp=${SELF_SIGNED_FINGERPRINT_SHA256}&udp=1#${NODE_NAME}%20anytls
|
||
"
|
||
echo -n "$SHADOWROCKET_SUBSCRIBE" | sed -E '/^[ ]*#|^--/d' | sed '/^$/d' | base64 -w0 > ${WORK_DIR}/subscribe/shadowrocket
|
||
|
||
# 生成 V2rayN 订阅文件
|
||
[ "${XTLS_REALITY}" = 'true' ] && local V2RAYN_SUBSCRIBE+="
|
||
----------------------------
|
||
vless://${UUID}@${SERVER_IP_1}:${PORT_XTLS_REALITY}?encryption=none&flow=xtls-rprx-vision&security=reality&sni=addons.mozilla.org&fp=firefox&pbk=${REALITY_PUBLIC}&type=tcp&headerType=none#${NODE_NAME// /%20}%20xtls-reality"
|
||
|
||
[ "${HYSTERIA2}" = 'true' ] && local V2RAYN_SUBSCRIBE+="
|
||
----------------------------
|
||
hysteria2://${UUID}@${SERVER_IP_1}:${PORT_HYSTERIA2}/?alpn=h3&insecure=1#${NODE_NAME// /%20}%20hysteria2"
|
||
|
||
[ "${TUIC}" = 'true' ] && local V2RAYN_SUBSCRIBE+="
|
||
----------------------------
|
||
tuic://${UUID}:${UUID}@${SERVER_IP_1}:${PORT_TUIC}?alpn=h3&insecure=1&congestion_control=bbr#${NODE_NAME// /%20}%20tuic"
|
||
|
||
[ "${SHADOWTLS}" = 'true' ] && local V2RAYN_SUBSCRIBE+="
|
||
----------------------------
|
||
# $(echo -e "ShadowTLS 配置文件内容，需要更新 sing_box 内核")
|
||
|
||
{
|
||
\"log\":{
|
||
\"level\":\"warn\"
|
||
},
|
||
\"inbounds\":[
|
||
{
|
||
\"listen\":\"127.0.0.1\",
|
||
\"listen_port\":${PORT_SHADOWTLS},
|
||
\"sniff\":true,
|
||
\"sniff_override_destination\":false,
|
||
\"tag\": \"ShadowTLS\",
|
||
\"type\":\"mixed\"
|
||
}
|
||
],
|
||
\"outbounds\":[
|
||
{
|
||
\"detour\":\"shadowtls-out\",
|
||
\"method\":\"2022-blake3-aes-128-gcm\",
|
||
\"password\":\"${SHADOWTLS_PASSWORD}\",
|
||
\"type\":\"shadowsocks\",
|
||
\"udp_over_tcp\": false,
|
||
\"multiplex\": {
|
||
\"enabled\": true,
|
||
\"protocol\": \"h2mux\",
|
||
\"max_connections\": 8,
|
||
\"min_streams\": 16,
|
||
\"padding\": true
|
||
}
|
||
},
|
||
{
|
||
\"password\":\"${UUID}\",
|
||
\"server\":\"${SERVER_IP}\",
|
||
\"server_port\":${PORT_SHADOWTLS},
|
||
\"tag\": \"shadowtls-out\",
|
||
\"tls\":{
|
||
\"enabled\":true,
|
||
\"server_name\":\"addons.mozilla.org\",
|
||
\"utls\": {
|
||
\"enabled\": true,
|
||
\"fingerprint\": \"firefox\"
|
||
}
|
||
},
|
||
\"type\":\"shadowtls\",
|
||
\"version\":3
|
||
}
|
||
]
|
||
}"
|
||
[ "${SHADOWSOCKS}" = 'true' ] && local V2RAYN_SUBSCRIBE+="
|
||
----------------------------
|
||
ss://$(echo -n "aes-128-gcm:${UUID}@${SERVER_IP_1}:$PORT_SHADOWSOCKS" | base64 -w0)#${NODE_NAME// /%20}%20shadowsocks"
|
||
|
||
[ "${TROJAN}" = 'true' ] && local V2RAYN_SUBSCRIBE+="
|
||
----------------------------
|
||
trojan://${UUID}@${SERVER_IP_1}:$PORT_TROJAN?security=tls&insecure=1&type=tcp&headerType=none#${NODE_NAME// /%20}%20trojan"
|
||
|
||
[ "${VMESS_WS}" = 'true' ] && local V2RAYN_SUBSCRIBE+="
|
||
----------------------------
|
||
vmess://$(echo -n "{ \"v\": \"2\", \"ps\": \"${NODE_NAME} vmess-ws\", \"add\": \"${CDN}\", \"port\": \"80\", \"id\": \"${UUID}\", \"aid\": \"0\", \"scy\": \"auto\", \"net\": \"ws\", \"type\": \"none\", \"host\": \"${ARGO_DOMAIN}\", \"path\": \"/${UUID}-vmess\", \"tls\": \"\", \"sni\": \"\", \"alpn\": \"\" }" | base64 -w0)"
|
||
|
||
[ "${VLESS_WS}" = 'true' ] && local V2RAYN_SUBSCRIBE+="
|
||
----------------------------
|
||
vless://${UUID}@${CDN}:443?encryption=none&security=tls&sni=${ARGO_DOMAIN}&type=ws&host=${ARGO_DOMAIN}&path=%2F${UUID}-vless%3Fed%3D2560#${NODE_NAME// /%20}%20vless-ws-tls"
|
||
|
||
[ "${H2_REALITY}" = 'true' ] && local V2RAYN_SUBSCRIBE+="
|
||
----------------------------
|
||
vless://${UUID}@${SERVER_IP_1}:${PORT_H2_REALITY}?encryption=none&security=reality&sni=addons.mozilla.org&fp=firefox&pbk=${REALITY_PUBLIC}&type=http#${NODE_NAME// /%20}%20h2-reality"
|
||
|
||
[ "${GRPC_REALITY}" = 'true' ] && local V2RAYN_SUBSCRIBE+="
|
||
----------------------------
|
||
vless://${UUID}@${SERVER_IP_1}:${PORT_GRPC_REALITY}?encryption=none&security=reality&sni=addons.mozilla.org&fp=firefox&pbk=${REALITY_PUBLIC}&type=grpc&serviceName=grpc&mode=gun#${NODE_NAME// /%20}%20grpc-reality"
|
||
|
||
[ "${ANYTLS}" = 'true' ] && local V2RAYN_SUBSCRIBE+="
|
||
----------------------------
|
||
anytls://${UUID}@${SERVER_IP_1}:${PORT_ANYTLS}?security=tls&fp=firefox&insecure=1&type=tcp#${NODE_NAME// /%20}%20anytls"
|
||
|
||
echo -n "$V2RAYN_SUBSCRIBE" | sed -E '/^[ ]*#|^[ ]+|^--|^\{|^\}/d' | sed '/^$/d' | base64 -w0 > ${WORK_DIR}/subscribe/v2rayn
|
||
|
||
# 生成 NekoBox 订阅文件
|
||
[ "${XTLS_REALITY}" = 'true' ] && local NEKOBOX_SUBSCRIBE+="
|
||
----------------------------
|
||
vless://${UUID}@${SERVER_IP_1}:${PORT_XTLS_REALITY}?security=reality&sni=addons.mozilla.org&fp=firefox&pbk=${REALITY_PUBLIC}&type=tcp&flow=xtls-rprx-vision&encryption=none#${NODE_NAME}%20xtls-reality"
|
||
|
||
[ "${HYSTERIA2}" = 'true' ] && local NEKOBOX_SUBSCRIBE+="
|
||
----------------------------
|
||
hy2://${UUID}@${SERVER_IP_1}:${PORT_HYSTERIA2}?insecure=1#${NODE_NAME}%20hysteria2"
|
||
|
||
[ "${TUIC}" = 'true' ] && local NEKOBOX_SUBSCRIBE+="
|
||
----------------------------
|
||
tuic://${UUID}:${UUID}@${SERVER_IP_1}:${PORT_TUIC}?congestion_control=bbr&alpn=h3&udp_relay_mode=native&allow_insecure=1&disable_sni=1#${NODE_NAME}%20tuic"
|
||
|
||
[ "${SHADOWTLS}" = 'true' ] && local NEKOBOX_SUBSCRIBE+="
|
||
----------------------------
|
||
nekoray://custom#$(echo -n "{\"_v\":0,\"addr\":\"127.0.0.1\",\"cmd\":[\"\"],\"core\":\"internal\",\"cs\":\"{\n \\\"password\\\": \\\"${UUID}\\\",\n \\\"server\\\": \\\"${SERVER_IP_1}\\\",\n \\\"server_port\\\": ${PORT_SHADOWTLS},\n \\\"tag\\\": \\\"shadowtls-out\\\",\n \\\"tls\\\": {\n \\\"enabled\\\": true,\n \\\"server_name\\\": \\\"addons.mozilla.org\\\"\n },\n \\\"type\\\": \\\"shadowtls\\\",\n \\\"version\\\": 3\n}\n\",\"mapping_port\":0,\"name\":\"1-tls-not-use\",\"port\":1080,\"socks_port\":0}" | base64 -w0)
|
||
|
||
nekoray://shadowsocks#$(echo -n "{\"_v\":0,\"method\":\"2022-blake3-aes-128-gcm\",\"name\":\"2-ss-not-use\",\"pass\":\"${SHADOWTLS_PASSWORD}\",\"port\":0,\"stream\":{\"ed_len\":0,\"insecure\":false,\"mux_s\":0,\"net\":\"tcp\"},\"uot\":0}" | base64 -w0)"
|
||
|
||
[ "${SHADOWSOCKS}" = 'true' ] && local NEKOBOX_SUBSCRIBE+="
|
||
----------------------------
|
||
ss://$(echo -n "aes-128-gcm:${UUID}" | base64 -w0)@${SERVER_IP_1}:$PORT_SHADOWSOCKS#${NODE_NAME}%20shadowsocks"
|
||
|
||
[ "${TROJAN}" = 'true' ] && local NEKOBOX_SUBSCRIBE+="
|
||
----------------------------
|
||
trojan://${UUID}@${SERVER_IP_1}:$PORT_TROJAN?security=tls&allowInsecure=1&fp=firefox&type=tcp#${NODE_NAME}%20trojan"
|
||
|
||
[ "${VMESS_WS}" = 'true' ] && local NEKOBOX_SUBSCRIBE+="
|
||
----------------------------
|
||
vmess://$(echo -n "{\"add\":\"${CDN}\",\"aid\":\"0\",\"host\":\"${ARGO_DOMAIN}\",\"id\":\"${UUID}\",\"net\":\"ws\",\"path\":\"/${UUID}-vmess\",\"port\":\"80\",\"ps\":\"${NODE_NAME} vmess-ws\",\"scy\":\"auto\",\"sni\":\"\",\"tls\":\"\",\"type\":\"\",\"v\":\"2\"}" | base64 -w0)
|
||
"
|
||
|
||
[ "${VLESS_WS}" = 'true' ] && local NEKOBOX_SUBSCRIBE+="
|
||
----------------------------
|
||
vless://${UUID}@${CDN}:443?security=tls&sni=${ARGO_DOMAIN}&type=ws&path=/${UUID}-vless?ed%3D2560&host=${ARGO_DOMAIN}#${NODE_NAME}%20vless-ws-tls
|
||
"
|
||
|
||
[ "${H2_REALITY}" = 'true' ] && local NEKOBOX_SUBSCRIBE+="
|
||
----------------------------
|
||
vless://${UUID}@${SERVER_IP_1}:${PORT_H2_REALITY}?security=reality&sni=addons.mozilla.org&alpn=h2&fp=firefox&pbk=${REALITY_PUBLIC}&type=http&encryption=none#${NODE_NAME}%20h2-reality"
|
||
|
||
[ "${GRPC_REALITY}" = 'true' ] && local NEKOBOX_SUBSCRIBE+="
|
||
----------------------------
|
||
vless://${UUID}@${SERVER_IP_1}:${PORT_GRPC_REALITY}?security=reality&sni=addons.mozilla.org&fp=firefox&pbk=${REALITY_PUBLIC}&type=grpc&serviceName=grpc&encryption=none#${NODE_NAME}%20grpc-reality"
|
||
|
||
[ "${ANYTLS}" = 'true' ] && local NEKOBOX_SUBSCRIBE+="
|
||
----------------------------
|
||
anytls://${UUID}@${SERVER_IP_1}:${PORT_ANYTLS}/?insecure=1#${NODE_NAME}%20anytls"
|
||
|
||
echo -n "$NEKOBOX_SUBSCRIBE" | sed -E '/^[ ]*#|^--/d' | sed '/^$/d' | base64 -w0 > ${WORK_DIR}/subscribe/neko
|
||
|
||
# 生成 Sing-box 订阅文件
|
||
[ "${XTLS_REALITY}" = 'true' ] &&
|
||
local INBOUND_REPLACE+=" { \"type\": \"vless\", \"tag\": \"${NODE_NAME} xtls-reality\", \"server\":\"${SERVER_IP}\", \"server_port\":${PORT_XTLS_REALITY}, \"uuid\":\"${UUID}\", \"flow\":\"xtls-rprx-vision\", \"tls\":{ \"enabled\":true, \"server_name\":\"addons.mozilla.org\", \"utls\":{ \"enabled\":true, \"fingerprint\":\"firefox\" }, \"reality\":{ \"enabled\":true, \"public_key\":\"${REALITY_PUBLIC}\", \"short_id\":\"\" } }, \"multiplex\": { \"enabled\": false, \"protocol\": \"h2mux\", \"max_connections\": 8, \"min_streams\": 16, \"padding\": false, \"brutal\":{ \"enabled\":false } } }," &&
|
||
local NODE_REPLACE+="\"${NODE_NAME} xtls-reality\","
|
||
|
||
if [ "${HYSTERIA2}" = 'true' ]; then
|
||
local INBOUND_REPLACE+=" { \"type\": \"hysteria2\", \"tag\": \"${NODE_NAME} hysteria2\", \"server\": \"${SERVER_IP}\", \"server_port\": ${PORT_HYSTERIA2},"
|
||
[[ -n "${PORT_HOPPING_START}" && -n "${PORT_HOPPING_END}" ]] && local INBOUND_REPLACE+=" \"server_ports\": [ \"${PORT_HOPPING_START}:${PORT_HOPPING_END}\" ],"
|
||
local INBOUND_REPLACE+=" \"up_mbps\": 200, \"down_mbps\": 1000, \"password\": \"${UUID}\", \"tls\": { \"enabled\": true, \"certificate_public_key_sha256\": [\"$SELF_SIGNED_FINGERPRINT_BASE64\"], \"server_name\": \"\", \"alpn\": [ \"h3\" ] } },"
|
||
local NODE_REPLACE+="\"${NODE_NAME} hysteria2\","
|
||
fi
|
||
|
||
[ "${TUIC}" = 'true' ] &&
|
||
local INBOUND_REPLACE+=" { \"type\": \"tuic\", \"tag\": \"${NODE_NAME} tuic\", \"server\": \"${SERVER_IP}\", \"server_port\": ${PORT_TUIC}, \"uuid\": \"${UUID}\", \"password\": \"${UUID}\", \"congestion_control\": \"bbr\", \"udp_relay_mode\": \"native\", \"zero_rtt_handshake\": false, \"heartbeat\": \"10s\", \"tls\": { \"enabled\": true, \"certificate_public_key_sha256\": [\"$SELF_SIGNED_FINGERPRINT_BASE64\"], \"server_name\": \"\", \"alpn\": [ \"h3\" ] } }," &&
|
||
local NODE_REPLACE+="\"${NODE_NAME} tuic\","
|
||
|
||
[ "${SHADOWTLS}" = 'true' ] &&
|
||
local INBOUND_REPLACE+=" { \"type\": \"shadowsocks\", \"tag\": \"${NODE_NAME} ShadowTLS\", \"method\": \"2022-blake3-aes-128-gcm\", \"password\": \"${SHADOWTLS_PASSWORD}\", \"detour\": \"shadowtls-out\", \"udp_over_tcp\": false, \"multiplex\": { \"enabled\": true, \"protocol\": \"h2mux\", \"max_connections\": 8, \"min_streams\": 16, \"padding\": true, \"brutal\":{ \"enabled\":${IS_BRUTAL}, \"up_mbps\":1000, \"down_mbps\":1000 } } }, { \"type\": \"shadowtls\", \"tag\": \"shadowtls-out\", \"server\": \"${SERVER_IP}\", \"server_port\": ${PORT_SHADOWTLS}, \"version\": 3, \"password\": \"${UUID}\", \"tls\": { \"enabled\": true, \"server_name\": \"addons.mozilla.org\", \"utls\": { \"enabled\": true, \"fingerprint\": \"firefox\" } } }," &&
|
||
local NODE_REPLACE+="\"${NODE_NAME} ShadowTLS\","
|
||
|
||
[ "${SHADOWSOCKS}" = 'true' ] &&
|
||
local INBOUND_REPLACE+=" { \"type\": \"shadowsocks\", \"tag\": \"${NODE_NAME} shadowsocks\", \"server\": \"${SERVER_IP}\", \"server_port\": $PORT_SHADOWSOCKS, \"method\": \"aes-128-gcm\", \"password\": \"${UUID}\", \"multiplex\": { \"enabled\": true, \"protocol\": \"h2mux\", \"max_connections\": 8, \"min_streams\": 16, \"padding\": true, \"brutal\":{ \"enabled\":${IS_BRUTAL}, \"up_mbps\":1000, \"down_mbps\":1000 } } }," &&
|
||
local NODE_REPLACE+="\"${NODE_NAME} shadowsocks\","
|
||
|
||
[ "${TROJAN}" = 'true' ] &&
|
||
local INBOUND_REPLACE+=" { \"type\": \"trojan\", \"tag\": \"${NODE_NAME} trojan\", \"server\": \"${SERVER_IP}\", \"server_port\": $PORT_TROJAN, \"password\": \"${UUID}\", \"tls\": { \"enabled\":true, \"certificate_public_key_sha256\": [\"$SELF_SIGNED_FINGERPRINT_BASE64\"], \"server_name\":\"\", \"utls\": { \"enabled\":true, \"fingerprint\":\"firefox\" } }, \"multiplex\": { \"enabled\":true, \"protocol\":\"h2mux\", \"max_connections\": 8, \"min_streams\": 16, \"padding\": true, \"brutal\":{ \"enabled\":${IS_BRUTAL}, \"up_mbps\":1000, \"down_mbps\":1000 } } }," &&
|
||
local NODE_REPLACE+="\"${NODE_NAME} trojan\","
|
||
|
||
[ "${VMESS_WS}" = 'true' ] &&
|
||
local INBOUND_REPLACE+=" { \"type\": \"vmess\", \"tag\": \"${NODE_NAME} vmess-ws\", \"server\":\"${CDN}\", \"server_port\":80, \"uuid\": \"${UUID}\", \"security\": \"auto\", \"transport\": { \"type\":\"ws\", \"path\":\"/${UUID}-vmess\", \"headers\": { \"Host\": \"${ARGO_DOMAIN}\" } }, \"multiplex\": { \"enabled\":true, \"protocol\":\"h2mux\", \"max_streams\":16, \"padding\": true, \"brutal\":{ \"enabled\":${IS_BRUTAL}, \"up_mbps\":1000, \"down_mbps\":1000 } } }," && local NODE_REPLACE+="\"${NODE_NAME} vmess-ws\","
|
||
|
||
[ "${VLESS_WS}" = 'true' ] &&
|
||
local INBOUND_REPLACE+=" { \"type\": \"vless\", \"tag\": \"${NODE_NAME} vless-ws-tls\", \"server\":\"${CDN}\", \"server_port\":443, \"uuid\": \"${UUID}\", \"tls\": { \"enabled\":true, \"server_name\":\"${ARGO_DOMAIN}\", \"insecure\": false, \"utls\": { \"enabled\":true, \"fingerprint\":\"firefox\" } }, \"transport\": { \"type\":\"ws\", \"path\":\"/${UUID}-vless\", \"headers\": { \"Host\": \"${ARGO_DOMAIN}\" }, \"max_early_data\":2560, \"early_data_header_name\":\"Sec-WebSocket-Protocol\" }, \"multiplex\": { \"enabled\":true, \"protocol\":\"h2mux\", \"max_streams\":16, \"padding\": true, \"brutal\":{ \"enabled\":${IS_BRUTAL}, \"up_mbps\":1000, \"down_mbps\":1000 } } }," &&
|
||
local NODE_REPLACE+="\"${NODE_NAME} vless-ws-tls\","
|
||
|
||
[ "${H2_REALITY}" = 'true' ] &&
|
||
local INBOUND_REPLACE+=" { \"type\": \"vless\", \"tag\": \"${NODE_NAME} h2-reality\", \"server\": \"${SERVER_IP}\", \"server_port\": ${PORT_H2_REALITY}, \"uuid\":\"${UUID}\", \"tls\": { \"enabled\":true, \"server_name\":\"addons.mozilla.org\", \"utls\": { \"enabled\":true, \"fingerprint\":\"firefox\" }, \"reality\":{ \"enabled\":true, \"public_key\":\"${REALITY_PUBLIC}\", \"short_id\":\"\" } }, \"transport\": { \"type\": \"http\" } }," &&
|
||
local NODE_REPLACE+="\"${NODE_NAME} h2-reality\","
|
||
|
||
[ "${GRPC_REALITY}" = 'true' ] &&
|
||
local INBOUND_REPLACE+=" { \"type\": \"vless\", \"tag\": \"${NODE_NAME} grpc-reality\", \"server\": \"${SERVER_IP}\", \"server_port\": ${PORT_GRPC_REALITY}, \"uuid\":\"${UUID}\", \"tls\": { \"enabled\":true, \"server_name\":\"addons.mozilla.org\", \"utls\": { \"enabled\":true, \"fingerprint\":\"firefox\" }, \"reality\":{ \"enabled\":true, \"public_key\":\"${REALITY_PUBLIC}\", \"short_id\":\"\" } }, \"transport\": { \"type\": \"grpc\", \"service_name\": \"grpc\" } }," &&
|
||
local NODE_REPLACE+="\"${NODE_NAME} grpc-reality\","
|
||
|
||
[ "${ANYTLS}" = 'true' ] &&
|
||
local INBOUND_REPLACE+=" { \"type\": \"anytls\", \"tag\": \"${NODE_NAME} anytls\", \"server\": \"${SERVER_IP}\", \"server_port\": ${PORT_ANYTLS}, \"password\": \"${UUID}\", \"idle_session_check_interval\": \"30s\", \"idle_session_timeout\": \"30s\", \"min_idle_session\": 5, \"tls\": { \"enabled\": true, \"certificate_public_key_sha256\": [\"$SELF_SIGNED_FINGERPRINT_BASE64\"], \"server_name\": \"\" } }," &&
|
||
local NODE_REPLACE+="\"${NODE_NAME} anytls\","
|
||
|
||
# 模板
|
||
local SING_BOX_JSON1=$(wget -qO- --tries=3 --timeout=2 ${SUBSCRIBE_TEMPLATE}/sing-box1)
|
||
|
||
echo $SING_BOX_JSON1 | sed 's#, {[^}]\+"tun-in"[^}]\+}##' | sed "s#\"<INBOUND_REPLACE>\",#$INBOUND_REPLACE#; s#\"<NODE_REPLACE>\"#${NODE_REPLACE%,}#g" | ${WORK_DIR}/jq > ${WORK_DIR}/subscribe/sing-box-pc
|
||
|
||
echo $SING_BOX_JSON1 | sed 's# {[^}]\+"mixed"[^}]\+},##; s#, "auto_detect_interface": true##' | sed "s#\"<INBOUND_REPLACE>\",#$INBOUND_REPLACE#; s#\"<NODE_REPLACE>\"#${NODE_REPLACE%,}#g" | ${WORK_DIR}/jq > ${WORK_DIR}/subscribe/sing-box-phone
|
||
|
||
# 生成二维码 url 文件
|
||
cat > ${WORK_DIR}/subscribe/qr << EOF
|
||
自适应 Clash / V2rayN / NekoBox / ShadowRocket / SFI / SFA / SFM 客户端:
|
||
模版:
|
||
https://${ARGO_DOMAIN}/${UUID}/auto
|
||
|
||
订阅 QRcode:
|
||
模版:
|
||
https://api.qrserver.com/v1/create-qr-code/?size=200x200&data=https://${ARGO_DOMAIN}/${UUID}/auto
|
||
|
||
模版:
|
||
$(${WORK_DIR}/qrencode "https://${ARGO_DOMAIN}/${UUID}/auto")
|
||
EOF
|
||
|
||
# 生成配置文件
|
||
EXPORT_LIST_FILE="*******************************************
|
||
┌────────────────┐
|
||
│ │
|
||
│ $(warning "V2rayN") │
|
||
│ │
|
||
└────────────────┘
|
||
$(info "${V2RAYN_SUBSCRIBE}")
|
||
|
||
*******************************************
|
||
┌────────────────┐
|
||
│ │
|
||
│ $(warning "ShadowRocket") │
|
||
│ │
|
||
└────────────────┘
|
||
----------------------------
|
||
$(hint "${SHADOWROCKET_SUBSCRIBE}")
|
||
|
||
*******************************************
|
||
┌────────────────┐
|
||
│ │
|
||
│ $(warning "Clash Verge") │
|
||
│ │
|
||
└────────────────┘
|
||
----------------------------
|
||
|
||
$(info "$(sed '1d' <<< "${CLASH_SUBSCRIBE}")")
|
||
|
||
*******************************************
|
||
┌────────────────┐
|
||
│ │
|
||
│ $(warning "NekoBox") │
|
||
│ │
|
||
└────────────────┘
|
||
$(hint "${NEKOBOX_SUBSCRIBE}")
|
||
|
||
*******************************************
|
||
┌────────────────┐
|
||
│ │
|
||
│ $(warning "Sing-box") │
|
||
│ │
|
||
└────────────────┘
|
||
----------------------------
|
||
|
||
$(info "$(echo "{ \"outbounds\":[ ${INBOUND_REPLACE%,} ] }" | ${WORK_DIR}/jq)
|
||
|
||
各客户端配置文件路径: ${WORK_DIR}/subscribe/\n 完整模板可参照:\n https://github.com/chika0801/sing-box-examples/tree/main/Tun")
|
||
"
|
||
|
||
EXPORT_LIST_FILE+="
|
||
|
||
*******************************************
|
||
|
||
$(hint "Index:
|
||
https://${ARGO_DOMAIN}/${UUID}/
|
||
|
||
QR code:
|
||
https://${ARGO_DOMAIN}/${UUID}/qr
|
||
|
||
V2rayN 订阅:
|
||
https://${ARGO_DOMAIN}/${UUID}/v2rayn")
|
||
|
||
$(hint "NekoBox 订阅:
|
||
https://${ARGO_DOMAIN}/${UUID}/neko")
|
||
|
||
$(hint "Clash 订阅:
|
||
https://${ARGO_DOMAIN}/${UUID}/clash
|
||
|
||
sing-box for pc 订阅:
|
||
https://${ARGO_DOMAIN}/${UUID}/sing-box-pc
|
||
|
||
sing-box for cellphone 订阅:
|
||
https://${ARGO_DOMAIN}/${UUID}/sing-box-phone
|
||
|
||
ShadowRocket 订阅:
|
||
https://${ARGO_DOMAIN}/${UUID}/shadowrocket")
|
||
|
||
*******************************************
|
||
|
||
$(info " 自适应 Clash / V2rayN / NekoBox / ShadowRocket / SFI / SFA / SFM 客户端:
|
||
模版:
|
||
https://${ARGO_DOMAIN}/${UUID}/auto
|
||
|
||
订阅 QRcode:
|
||
模版:
|
||
https://api.qrserver.com/v1/create-qr-code/?size=200x200&data=https://${ARGO_DOMAIN}/${UUID}/auto")
|
||
|
||
$(hint "模版:")
|
||
$(${WORK_DIR}/qrencode https://${ARGO_DOMAIN}/${UUID}/auto)
|
||
"
|
||
|
||
# 生成并显示节点信息
|
||
echo "$EXPORT_LIST_FILE" > ${WORK_DIR}/list
|
||
cat ${WORK_DIR}/list
|
||
|
||
# 显示脚本使用情况数据
|
||
# hint "\n*******************************************\n"
|
||
# local STAT=$(wget --no-check-certificate -qO- --timeout=3 "https://stat.cloudflare.now.cc/api/updateStats?script=sing-box-docker.sh")
|
||
# [[ "$STAT" =~ \"todayCount\":([0-9]+),\"totalCount\":([0-9]+) ]] && local TODAY="${BASH_REMATCH[1]}" && local TOTAL="${BASH_REMATCH[2]}"
|
||
# hint "\n 脚本当天运行次数: $TODAY，累计运行次数: $TOTAL \n"
|
||
}
|
||
|
||
# Sing-box 的最新版本
|
||
update_sing-box() {
|
||
local ONLINE=$(check_latest_sing-box)
|
||
local LOCAL=$(${WORK_DIR}/sing-box version | awk '/version/{print $NF}')
|
||
if [ -n "$ONLINE" ]; then
|
||
if [[ "$ONLINE" != "$LOCAL" ]]; then
|
||
cp -f ${WORK_DIR}/sing-box /tmp/sing-box.bak
|
||
wget https://github.com/SagerNet/sing-box/releases/download/v$ONLINE/sing-box-$ONLINE-linux-$SING_BOX_ARCH.tar.gz -O- | tar xz -C /tmp sing-box-$ONLINE-linux-$SING_BOX_ARCH/sing-box
|
||
mv /tmp/sing-box-$ONLINE-linux-$SING_BOX_ARCH/sing-box ${WORK_DIR}/sing-box
|
||
local SING_BOX_PID_OLD=$(ps aux | grep '[s]ing-box run' | awk '{print $1}')
|
||
kill -9 ${SING_BOX_PID_OLD}
|
||
sleep 1
|
||
local SING_BOX_PID_NEW=$(ps aux | grep '[s]ing-box run' | awk '{print $1}')
|
||
until [[ "${SING_BOX_PID_NEW}" =~ ^[0-9]+$ ]]; do
|
||
(( i++ ))
|
||
[ "$i" -gt 5 ] && break
|
||
sleep 1
|
||
local SING_BOX_PID_NEW=$(ps aux | grep '[s]ing-box run' | awk '{print $1}')
|
||
done
|
||
if [[ "${SING_BOX_PID_NEW}" =~ ^[0-9]+$ ]]; then
|
||
info " Sing-box v${ONLINE} 更新成功！"
|
||
else
|
||
cp -f /tmp/sing-box.bak ${WORK_DIR}/sing-box
|
||
warning " Sing-box v${ONLINE} 运行不成功，使用回旧版本 v${LOCAL} 更新成功！"
|
||
fi
|
||
rm -rf ${WORK_DIR}/sing-box-$ONLINE-linux-$SING_BOX_ARCH /tmp/sing-box.bak
|
||
else
|
||
info " Sing-box v${ONLINE} 已是最新版本！"
|
||
fi
|
||
else
|
||
warning " 获取不了在线版本，请稍后再试！"
|
||
fi
|
||
}
|
||
|
||
# 传参
|
||
while getopts ":Vv" OPTNAME; do
|
||
case "${OPTNAME,,}" in
|
||
v ) ACTION=update
|
||
esac
|
||
done
|
||
|
||
# 主流程
|
||
case "$ACTION" in
|
||
update )
|
||
update_sing-box
|
||
;;
|
||
* )
|
||
install
|
||
# 用 s6-overlay 作为 PID 1 承载守护
|
||
exec /init
|
||
esac |