From a945650c804e46cb37792f1f495180012b98b911 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=BD=98=E7=BE=BF?= <33997505+paniy@users.noreply.github.com> Date: Mon, 28 Dec 2020 13:48:27 +0800 Subject: [PATCH] FOR Xray --- README.md | 94 +++ VLESS_tls/config.json | 56 ++ VLESS_xtls/config.json | 41 ++ install.sh | 1333 ++++++++++++++++++++++++++++++++++++++++ ssl_update.sh | 18 + 5 files changed, 1542 insertions(+) create mode 100644 README.md create mode 100644 VLESS_tls/config.json create mode 100644 VLESS_xtls/config.json create mode 100644 install.sh create mode 100644 ssl_update.sh diff --git a/README.md b/README.md new file mode 100644 index 0000000..838617d --- /dev/null +++ b/README.md @@ -0,0 +1,94 @@ +## Xray 基于 Nginx 的 vless+ws+tls 一键安装脚本 +[![GitHub issues](https://img.shields.io/github/issues/paniy/Xray_bash_onekey)](https://github.com/paniy/Xray_bash_onekey/issues) [![GitHub forks](https://img.shields.io/github/forks/paniy/Xray_bash_onekey?color=%230885ce)](https://github.com/paniy/Xray_bash_onekey/network) [![GitHub stars](https://img.shields.io/github/stars/paniy/Xray_bash_onekey?color=%230885ce)](https://github.com/paniy/Xray_bash_onekey/stargazers) + +> 感谢 JetBrains 提供的非商业开源软件开发授权 + +> Thanks for non-commercial open source development authorization by JetBrains + +>本脚本来源于 https://github.com/wulabing/V2Ray_ws-tls_bash_onekey 特此感谢 + +### 优化修改版说明 +* 可以直接输入命令：`idleleo`管理脚本 +* 减少直接访问，隐藏代理域名，302跳转至www.idleleo.com（了解配置过程可自行修改） +* 阻止HTTP直接访问服务器IP，更安全 +* 优化tls 1.3加密配置 +* 减少无关元素 + +### Telegram 群组 +* telegram 交流群:https://t.me/idleleo_chat + +### 准备工作 +* 准备一个域名，并将A记录添加好。 +* [Xray官方说明](https://github.com/XTLS)，了解 TLS WebSocket 及 Xray 相关信息 +* 安装好 wget + +### 安装/更新方式（此为Xray版） +VLess+websocket+TLS+Nginx+Website或xtls直连 +``` +wget -N --no-check-certificate -q -O install.sh "https://raw.githubusercontent.com/paniy/Xray_bash_onekey/main/install.sh" && chmod +x install.sh && bash install.sh +``` + +### 注意事项 +* 如果你不了解脚本中各项设置的具体含义，除域名外，请使用脚本提供的默认值 +* 使用本脚本需要你拥有 Linux 基础及使用经验，了解计算机网络部分知识，计算机基础操作 +* 目前支持Debian 9+ / Ubuntu 18.04+ / Centos7+ ，部分Centos模板可能存在难以处理的编译问题，建议遇到编译问题时，请更换至其他系统模板 +* 群主仅提供极其有限的支持，如有问题可以询问群友 +* 每周日的凌晨3点，Nginx 会自动重启以配合证书的签发定时任务进行，在此期间，节点无法正常连接，预计持续时间为若干秒至两分钟 + +### 更新日志 +> 更新内容请查看 CHANGELOG.md + +### 鸣谢 +* ~~本脚本的另一个分支版本（Use Host）地址： https://github.com/dylanbai8/V2Ray_ws-tls_Website_onekey 请根据需求进行选择~~ 该作者可能已停止维护 +* 本脚本中 MTProxy-go TLS 版本项目引用 https://github.com/whunt1/onekeymakemtg 在此感谢 whunt1 +* 本脚本中 锐速4合1脚本原项目引用 https://www.94ish.me/1635.html 在此感谢 +* 本脚本中 锐速4合1脚本修改版项目引用 https://github.com/ylx2016/Linux-NetSpeed 在此感谢 ylx2016 + +### 证书 +> 如果你已经拥有了你所使用域名的证书文件，可以将 crt 和 key 文件命名为 xray.crt xray.key 放在 /data 目录下（若目录不存在请先建目录），请注意证书文件权限及证书有效期，自定义证书有效期过期后请自行续签 + +脚本支持自动生成 let's encrypted 证书，有效期3个月，理论上自动生成的证书支持自动续签 + +### 查看客户端配置 +`cat ~/xray_info.txt` + +### xray 简介 + +* xray是一个优秀的开源网络代理工具，可以帮助你畅爽体验互联网，目前已经全平台支持Windows、Mac、Android、IOS、Linux等操作系统的使用。 +* 本脚本为一键完全配置脚本，在所有流程正常运行完毕后，直接按照输出结果设置客户端即可使用 +* 请注意：我们依然强烈建议你全方面的了解整个程序的工作流程及原理 + +### 建议单服务器仅搭建单个代理 +* 本脚本默认安装最新版本的Xray core +* 建议使用默认的443端口作为连接端口 +* 伪装内容可自行替换。 + +### 注意事项 +* 推荐在纯净环境下使用本脚本，如果你是新手，请不要使用Centos系统。 +* 在尝试本脚本确实可用之前，请不要将本程序应用于生产环境中。 +* 该程序依赖 Nginx 实现相关功能，请使用 [LNMP](https://lnmp.org) 或其他类似携带 Nginx 脚本安装过 Nginx 的用户特别留意，使用本脚本可能会导致无法预知的错误（未测试，若存在，后续版本可能会处理本问题）。 +* xray 的部分功能依赖于系统时间，请确保您使用xray程序的系统 UTC 时间误差在三分钟之内，时区无关。 +* Centos 系统用户请预先在防火墙中放行程序相关端口（默认：80，443） + + +### 启动方式 + +启动 Xray：`systemctl start xray` + +停止 Xray：`systemctl stop xray` + +启动 Nginx：`systemctl start nginx` + +停止 Nginx：`systemctl stop nginx` + +### 相关目录 + +Web 目录：`/home/wwwroot/3DCEList` + +xray 服务端配置：`/etc/xray/config.json` + +xray 客户端配置: `~/xray_info.txt` + +Nginx 目录： `/etc/nginx` + +证书文件: `/data/xray.key 和 /data/xray.crt` 请注意证书权限设置 diff --git a/VLESS_tls/config.json b/VLESS_tls/config.json new file mode 100644 index 0000000..843b3f1 --- /dev/null +++ b/VLESS_tls/config.json @@ -0,0 +1,56 @@ +{ + "log": { + "access": "/var/log/xray/access.log", + "error": "/var/log/xray/error.log", + "loglevel": "warning" + }, + "inbounds": [{ + "port": 10086, + "listen": "127.0.0.1", + "tag": "VLESS-in", + "protocol": "vless", + "settings": { + "clients": [{ + "id": "UUID", + "alterId": 0 + }], + "decryption": "none" + }, + "streamSettings": { + "network": "ws", + "security": "none", + "wsSettings": { + "path": "/ray/" + } + } + }], + "outbounds": [{ + "protocol": "freedom", + "tag": "direct" + }, + { + "protocol": "blackhole", + "tag": "blocked" + } + ], + "dns": { + "servers": [ + "https+local://1.1.1.1/dns-query", + "1.1.1.1", + "1.0.0.1", + "8.8.8.8", + "8.8.4.4", + "localhost" + ] + }, + "routing": { + "domainStrategy": "AsIs", + "rules": [{ + "type": "field", + "inboundTag": [ + "VLESS-in" + ], + "outboundTag": "direct" + }] + } +} \ No newline at end of file diff --git a/VLESS_xtls/config.json b/VLESS_xtls/config.json new file mode 100644 index 0000000..8e5b4ec --- /dev/null +++ b/VLESS_xtls/config.json @@ -0,0 +1,41 @@ +{ + "log": { + "access": "/var/log/xray/access.log", + "error": "/var/log/xray/error.log", + "loglevel": "warning" + }, + "inbounds": [{ + "port": 443, + "protocol": "vless", + "settings": { + "clients": [{ + "id": "UUID", + "flow": "xtls-rprx-direct", + "level": 0, + "email": "me@idleleo.com" + }], + "decryption": "none", + "fallbacks": [{ + "dest": 8080, + "xver": 1 + }] + }, + "streamSettings": { + "network": "tcp", + "security": "xtls", + "xtlsSettings": { + "minVersion": "1.2", + "alpn": [ + "http/1.1" + ], + "certificates": [{ + "certificateFile": "/data/xray.crt", + "keyFile": "/data/xray.key" + }] + } + } + }], + "outbounds": [{ + "protocol": "freedom" + }] +} \ No newline at end of file diff --git a/install.sh b/install.sh new file mode 100644 index 0000000..e7fd5fb --- /dev/null +++ b/install.sh @@ -0,0 +1,1333 @@ +#!/bin/bash +PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin +export PATH + +cd "$( + cd "$(dirname "$0")" || exit + pwd +)" || exit +#==================================================== +# System Request:Debian 9+/Ubuntu 18.04+/Centos 7+ +# Author: paniy +# Dscription: Xray ws+tls onekey Management +# Version: 2.0 +# email:admin@idleleo.com +# Official document: www.xray.com +#==================================================== + +#fonts color +Green="\033[32m" +Red="\033[31m" +#Yellow="\033[33m" +GreenBG="\033[42;37m" +RedBG="\033[41;37m" +YellowBG="\033[43;37m" +Font="\033[0m" + +#notification information +# Info="${Green}[信息]${Font}" +OK="${Green}[OK]${Font}" +Error="${Red}[错误]${Font}" +Warning="${Red}[警告]${Font}" + +# 版本 +shell_version="1.2.3.8" +shell_mode="None" +version_cmp="/tmp/version_cmp.tmp" +xray_conf_dir="/usr/local/etc/xray" +nginx_conf_dir="/etc/nginx/conf/conf.d" +xray_conf="${xray_conf_dir}/config.json" +nginx_conf="${nginx_conf_dir}/xray.conf" +nginx_dir="/etc/nginx" +web_dir="/home/wwwroot" +nginx_openssl_src="/usr/local/src" +xray_bin_dir="/usr/local/bin/xray" +idleleo_xray_dir="/usr/bin/idleleo-xray" +xray_info_file="$HOME/xray_info.inf" +xray_qr_config_file="/usr/local/vmess_qr.json" +nginx_systemd_file="/etc/systemd/system/nginx.service" +xray_systemd_file="/etc/systemd/system/xray.service" +xray_systemd_file2="/etc/systemd/system/xray@.service" +xray_systemd_filed="/etc/systemd/system/xray.service.d" +xray_systemd_filed2="/etc/systemd/system/xray@.service.d" +xray_access_log="/var/log/xray/access.log" +xray_error_log="/var/log/xray/error.log" +amce_sh_file="/root/.acme.sh/acme.sh" +ssl_update_file="${idleleo_xray_dir}/ssl_update.sh" +idleleo_commend_file="/usr/bin/idleleo" +nginx_version="1.18.0" +openssl_version="1.1.1i" +jemalloc_version="5.2.1" +old_config_status="off" +# v2ray_plugin_version="$(wget -qO- "https://github.com/shadowsocks/v2ray-plugin/tags" | grep -E "/shadowsocks/v2ray-plugin/releases/tag/" | head -1 | sed -r 's/.*tag\/v(.+)\">.*/\1/')" + +#移动旧版本配置信息 对小于 1.1.0 版本适配 +[[ -f "/etc/xray/vmess_qr.json" ]] && mv /etc/xray/vmess_qr.json $xray_qr_config_file + +#简易随机数 +random_num=$((RANDOM % 12 + 4)) +#生成伪装路径 +camouflage="/$(head -n 10 /dev/urandom | md5sum | head -c ${random_num})/" + +THREAD=$(grep 'processor' /proc/cpuinfo | sort -u | wc -l) + +source '/etc/os-release' + +#从VERSION中提取发行版系统的英文名称，为了在debian/ubuntu下添加相对应的Nginx apt源 +VERSION=$(echo "${VERSION}" | awk -F "[()]" '{print $2}') + +check_system() { + if [[ "${ID}" == "centos" && ${VERSION_ID} -ge 7 ]]; then + echo -e "${OK} ${GreenBG} 当前系统为 Centos ${VERSION_ID} ${VERSION} ${Font}" + INS="yum" + elif [[ "${ID}" == "debian" && ${VERSION_ID} -ge 8 ]]; then + echo -e "${OK} ${GreenBG} 当前系统为 Debian ${VERSION_ID} ${VERSION} ${Font}" + INS="apt" + $INS update + ## 添加 Nginx apt源 + elif [[ "${ID}" == "ubuntu" && $(echo "${VERSION_ID}" | cut -d '.' -f1) -ge 16 ]]; then + echo -e "${OK} ${GreenBG} 当前系统为 Ubuntu ${VERSION_ID} ${UBUNTU_CODENAME} ${Font}" + INS="apt" + rm /var/lib/dpkg/lock + dpkg --configure -a + rm /var/lib/apt/lists/lock + rm /var/cache/apt/archives/lock + $INS update + else + echo -e "${Error} ${RedBG} 当前系统为 ${ID} ${VERSION_ID} 不在支持的系统列表内，安装中断 ${Font}" + exit 1 + fi + + $INS install dbus + + systemctl stop firewalld + systemctl disable firewalld + echo -e "${OK} ${GreenBG} firewalld 已关闭 ${Font}" + + systemctl stop ufw + systemctl disable ufw + echo -e "${OK} ${GreenBG} ufw 已关闭 ${Font}" +} + +is_root() { + if [ 0 == $UID ]; then + echo -e "${OK} ${GreenBG} 当前用户是root用户，进入安装流程 ${Font}" + sleep 3 + else + echo -e "${Error} ${RedBG} 当前用户不是root用户，请切换到root用户后重新执行脚本 ${Font}" + exit 1 + fi +} + +judge() { + if [[ 0 -eq $? ]]; then + echo -e "${OK} ${GreenBG} $1 完成 ${Font}" + sleep 1 + else + echo -e "${Error} ${RedBG} $1 失败${Font}" + exit 1 + fi +} + +chrony_install() { + ${INS} -y install chrony + judge "安装 chrony 时间同步服务 " + + timedatectl set-ntp true + + if [[ "${ID}" == "centos" ]]; then + systemctl enable chronyd && systemctl restart chronyd + else + systemctl enable chrony && systemctl restart chrony + fi + + judge "chronyd 启动 " + + timedatectl set-timezone Asia/Shanghai + + echo -e "${OK} ${GreenBG} 等待时间同步 ${Font}" + sleep 10 + + chronyc sourcestats -v + chronyc tracking -v + date + read -rp "请确认时间是否准确,误差范围±3分钟(Y/N): " chrony_install + [[ -z ${chrony_install} ]] && chrony_install="Y" + case $chrony_install in + [yY][eE][sS] | [yY]) + echo -e "${GreenBG} 继续安装 ${Font}" + sleep 2 + ;; + *) + echo -e "${RedBG} 安装终止 ${Font}" + exit 2 + ;; + esac +} + +dependency_install() { + ${INS} install wget git lsof -y + + if [[ "${ID}" == "centos" ]]; then + ${INS} -y install iputils + else + ${INS} -y install iputils-ping + fi + judge "安装 iputils-ping" + + if [[ "${ID}" == "centos" ]]; then + ${INS} -y install crontabs + else + ${INS} -y install cron + fi + judge "安装 crontab" + + if [[ "${ID}" == "centos" ]]; then + touch /var/spool/cron/root && chmod 600 /var/spool/cron/root + systemctl start crond && systemctl enable crond + else + touch /var/spool/cron/crontabs/root && chmod 600 /var/spool/cron/crontabs/root + systemctl start cron && systemctl enable cron + + fi + judge "crontab 自启动配置 " + + ${INS} -y install bc + judge "安装 bc" + + ${INS} -y install unzip + judge "安装 unzip" + + ${INS} -y install qrencode + judge "安装 qrencode" + + ${INS} -y install curl + judge "安装 curl" + + if [[ "${ID}" == "centos" ]]; then + ${INS} -y groupinstall "Development tools" + else + ${INS} -y install build-essential + fi + judge "编译工具包 安装" + + if [[ "${ID}" == "centos" ]]; then + ${INS} -y install pcre pcre-devel zlib-devel epel-release + else + ${INS} -y install libpcre3 libpcre3-dev zlib1g-dev dbus + fi + + # ${INS} -y install rng-tools + # judge "rng-tools 安装" + + ${INS} -y install haveged + # judge "haveged 安装" + + # sed -i -r '/^HRNGDEVICE/d;/#HRNGDEVICE=\/dev\/null/a HRNGDEVICE=/dev/urandom' /etc/default/rng-tools + + if [[ "${ID}" == "centos" ]]; then + # systemctl start rngd && systemctl enable rngd + # judge "rng-tools 启动" + systemctl start haveged && systemctl enable haveged + # judge "haveged 启动" + else + # systemctl start rng-tools && systemctl enable rng-tools + # judge "rng-tools 启动" + systemctl start haveged && systemctl enable haveged + # judge "haveged 启动" + fi +} + +basic_optimization() { + # 最大文件打开数 + sed -i '/^\*\ *soft\ *nofile\ *[[:digit:]]*/d' /etc/security/limits.conf + sed -i '/^\*\ *hard\ *nofile\ *[[:digit:]]*/d' /etc/security/limits.conf + echo '* soft nofile 65536' >>/etc/security/limits.conf + echo '* hard nofile 65536' >>/etc/security/limits.conf + + # 关闭 Selinux + if [[ "${ID}" == "centos" ]]; then + sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config + setenforce 0 + fi + +} + +port_alterid_set() { + if [[ "on" != "$old_config_status" ]]; then + read -rp "请输入连接端口（default:443）:" port + [[ -z ${port} ]] && port="443" + read -rp "请输入alterID（default:0 仅允许填数字）:" alterID + [[ -z ${alterID} ]] && alterID="0" + fi +} + +port_set() { + if [[ "on" != "$old_config_status" ]]; then + read -rp "请输入连接端口（default:443）:" port + [[ -z ${port} ]] && port="443" + fi +} + +stop_service() { + systemctl stop nginx + systemctl stop xray + echo -e "${OK} ${GreenBG} 停止已有服务 ${Font}" +} + +alterid_set() { + if [[ "on" != "$old_config_status" ]]; then + read -rp "请输入alterID（default:0 仅允许填数字）:" alterID + [[ -z ${alterID} ]] && alterID="0" + fi +} + +modify_path() { + if [[ "on" == "$old_config_status" ]]; then + camouflage="$(grep '\"path\"' $xray_qr_config_file | awk -F '"' '{print $4}')" + fi + if [[ "$shell_mode" != "xtls" ]]; then + sed -i "/\"path\"/c \\\t\\t\"path\":\"${camouflage}\"" ${xray_conf} + else + echo -e "${Warning} ${YellowBG} xtls 不支持 path ${Font}" + fi + judge "Xray 伪装路径 修改" +} + +modify_alterid() { + if [[ $(grep -ic 'VLESS' ${xray_conf}) == 0 ]]; then + if [[ "on" == "$old_config_status" ]]; then + alterID="$(grep '\"aid\"' $xray_qr_config_file | awk -F '"' '{print $4}')" + fi + sed -i "/\"alterId\"/c \\\t\\t\\t\\t\"alterId\":${alterID}" ${xray_conf} + judge "Xray alterid 修改" + [ -f ${xray_qr_config_file} ] && sed -i "/\"aid\"/c \\ \"aid\": \"${alterID}\"," ${xray_qr_config_file} + echo -e "${OK} ${GreenBG} alterID:${alterID} ${Font}" + else + echo -e "${Warning} ${YellowBG} VLESS 不支持修改 alterid ${Font}" + fi +} +modify_inbound_port() { + if [[ "on" == "$old_config_status" ]]; then + port="$(info_extraction '\"port\"')" + fi + if [[ "$shell_mode" != "xtls" ]]; then + PORT=$((RANDOM + 10000)) + # sed -i "/\"port\"/c \ \"port\":${PORT}," ${xray_conf} + sed -i "8c\\\t\\t\"port\":${PORT}," ${xray_conf} + else + # sed -i "/\"port\"/c \ \"port\":${port}," ${xray_conf} + sed -i "8c\\\t\\t\"port\":${port}," ${xray_conf} + fi + judge "Xray inbound_port 修改" +} + +modify_UUID() { + [ -z "$UUID" ] && UUID=$(cat /proc/sys/kernel/random/uuid) + if [[ "on" == "$old_config_status" ]]; then + UUID="$(info_extraction '\"id\"')" + fi + sed -i "/\"id\"/c \\\t\\t\\t\\t\"id\":\"${UUID}\"," ${xray_conf} + judge "Xray UUID 修改" + [ -f ${xray_qr_config_file} ] && sed -i "/\"id\"/c \\ \"id\": \"${UUID}\"," ${xray_qr_config_file} + echo -e "${OK} ${GreenBG} UUID:${UUID} ${Font}" +} + +modify_nginx_port() { + if [[ "on" == "$old_config_status" ]]; then + port="$(info_extraction '\"port\"')" + fi + sed -i "/ssl http2;$/c \\\tlisten ${port} ssl http2;" ${nginx_conf} + sed -i "4c \\\t\\tlisten [::]:${port} ssl http2;" ${nginx_conf} + judge "Xray port 修改" + [ -f ${xray_qr_config_file} ] && sed -i "/\"port\"/c \\ \"port\": \"${port}\"," ${xray_qr_config_file} + echo -e "${OK} ${GreenBG} 端口号:${port} ${Font}" +} + +modify_nginx_other() { + sed -i "/server_name/c \\\t\\tserver_name ${domain};" ${nginx_conf} + if [[ "$shell_mode" != "xtls" ]]; then + sed -i "/location/c \\\tlocation ${camouflage}" ${nginx_conf} + sed -i "/proxy_pass/c \\\tproxy_pass http://127.0.0.1:${PORT};" ${nginx_conf} + fi + sed -i "/return/c \\\t\\treturn 301 https://${domain}\$request_uri;" ${nginx_conf} + sed -i "/returc/c \\\t\\treturn 302 https://www.idleleo.com/helloworld;" ${nginx_conf} + sed -i "/locatioc/c \\\t\\tlocation \/" ${nginx_conf} + #sed -i "/#gzip on;/c \\\t#gzip on;\\n\\tserver_tokens off;" ${nginx_dir}/conf/nginx.conf + #sed -i "/\\tserver_tokens off;\\n\\tserver_tokens off;/c \\\tserver_tokens off;" ${nginx_dir}/conf/nginx.conf + sed -i "s/ server_name localhost;/\t\tserver_name localhost;\n\n\t\tif (\$host = '${local_ip}'){\n\t\t\treturn 302 https:\/\/www.idleleo.com\/helloworld;\n\t\t}\n/" ${nginx_dir}/conf/nginx.conf + #sed -i "27i \\\tproxy_intercept_errors on;" ${nginx_dir}/conf/nginx.conf +} + +web_camouflage() { + ##请注意 这里和LNMP脚本的默认路径冲突，千万不要在安装了LNMP的环境下使用本脚本，否则后果自负 + rm -rf /home/wwwroot + mkdir -p /home/wwwroot + cd /home/wwwroot || exit + #git clone https://github.com/wulabing/3DCEList.git + judge "web 站点伪装" +} +xray_privilege_escalation() { + if [[ -n "$(grep "User=nobody" ${xray_systemd_file})" ]]; then + #echo -e "${OK} ${GreenBG} 检测到Xray权限不足，将提高Xray权限至root ${Font}" + echo -e "${OK} ${GreenBG} 检测到Xray的权限控制，启动擦屁股程序 ${Font}" + systemctl stop xray + #sed -i "s/User=nobody/User=root/" ${xray_systemd_file} + chmod -fR a+rw /var/log/xray/ + chown -fR nobody:nobody /var/log/xray/ + chown -f nobody:nobody /data/xray.crt + chown -f nobody:nobody /data/xray.key + systemctl daemon-reload + systemctl start xray + sleep 1 + fi +} + +xray_install() { + if [[ -d /root/xray ]]; then + rm -rf /root/xray + fi + if [[ -d /usr/local/etc/xray ]]; then + rm -rf /usr/local/etc/xray + fi + if [[ -d /usr/local/share/xray ]]; then + rm -rf /usr/local/share/xray + fi + mkdir -p /root/xray + cd /root/xray || exit + wget -N --no-check-certificate https://raw.githubusercontent.com/XTLS/Xray-install/main/install-release.sh + #wget -N --no-check-certificate https://raw.githubusercontent.com/XTLS/Xray-install/main/install-dat-release.sh + + ## wget http://install.direct/go.sh + + ##if [[ -f install-release.sh ]] && [[ -f install-dat-release.sh ]]; then + if [[ -f install-release.sh ]]; then + rm -rf ${xray_systemd_file} + rm -rf ${xray_systemd_file2} + rm -rf ${xray_systemd_filed} + rm -rf ${xray_systemd_filed2} + systemctl daemon-reload + bash install-release.sh --force + #bash install-dat-release.sh --force + judge "安装 Xray" + sleep 1 + xray_privilege_escalation + else + echo -e "${Error} ${RedBG} Xray 安装文件下载失败，请检查下载地址是否可用 ${Font}" + exit 4 + fi + # 清除临时文件 + rm -rf /root/xray +} + +xray_update() { + #mkdir -p /root/xray + #cd /root/xray || exit + #wget -N --no-check-certificate https://raw.githubusercontent.com/XTLS/Xray-install/main/install-release.sh + #wget -N --no-check-certificate https://raw.githubusercontent.com/XTLS/Xray-install/main/install-dat-release.sh + if [[ -d /usr/local/etc/xray ]]; then + #echo -e "${OK} ${GreenBG} 恢复xray原权限 ${Font}" + systemctl stop xray + #sed -i "s/User=root/User=nobody/" ${xray_systemd_file} + #systemctl daemon-reload + #systemctl start xray + sleep 1 + bash <(curl -L -s https://raw.githubusercontent.com/XTLS/Xray-install/main/install-release.sh) + sleep 1 + xray_privilege_escalation + else + echo -e "${GreenBG} 若更新无效，建议直接卸载再安装！ ${Font}" + systemctl stop xray + #systemctl disable xray.service --now + #mv -f /etc/xray/ /usr/local/etc/ + #rm -rf /usr/bin/xray/ + #rm -rf /etc/systemd/system/xray.service + #rm -rf /lib/systemd/system/xray@.service + #rm -rf /etc/init.d/xray + #systemctl daemon-reload + sleep 1 + bash <(curl -L -s https://raw.githubusercontent.com/XTLS/Xray-install/main/install-release.sh) + sleep 1 + xray_privilege_escalation + fi + # 清除临时文件 + ##rm -rf /root/xray +} + +nginx_exist_check() { + if [[ -f "/etc/nginx/sbin/nginx" ]]; then + if [[ -d ${nginx_dir}/conf/conf.d ]]; then + rm -rf ${nginx_dir}/conf/conf.d/* + else + mkdir ${nginx_dir}/conf/conf.d + fi + echo -e "${OK} ${GreenBG} Nginx已存在，跳过编译安装过程 ${Font}" + sleep 2 + elif [[ -d "/usr/local/nginx/" ]]; then + echo -e "${OK} ${GreenBG} 检测到其他套件安装的Nginx，继续安装会造成冲突，请处理后安装 ${Font}" + exit 1 + else + nginx_install + fi +} + +nginx_install() { + # if [[ -d "/etc/nginx" ]];then + # rm -rf /etc/nginx + # fi + + wget -nc --no-check-certificate http://nginx.org/download/nginx-${nginx_version}.tar.gz -P ${nginx_openssl_src} + judge "Nginx 下载" + wget -nc --no-check-certificate https://www.openssl.org/source/openssl-${openssl_version}.tar.gz -P ${nginx_openssl_src} + judge "openssl 下载" + wget -nc --no-check-certificate https://github.com/jemalloc/jemalloc/releases/download/${jemalloc_version}/jemalloc-${jemalloc_version}.tar.bz2 -P ${nginx_openssl_src} + judge "jemalloc 下载" + + cd ${nginx_openssl_src} || exit + + [[ -d nginx-"$nginx_version" ]] && rm -rf nginx-"$nginx_version" + tar -zxvf nginx-"$nginx_version".tar.gz + + [[ -d openssl-"$openssl_version" ]] && rm -rf openssl-"$openssl_version" + tar -zxvf openssl-"$openssl_version".tar.gz + + [[ -d jemalloc-"${jemalloc_version}" ]] && rm -rf jemalloc-"${jemalloc_version}" + tar -xvf jemalloc-"${jemalloc_version}".tar.bz2 + + [[ -d "$nginx_dir" ]] && rm -rf ${nginx_dir} + + echo -e "${OK} ${GreenBG} 即将开始编译安装 jemalloc ${Font}" + sleep 2 + + cd jemalloc-${jemalloc_version} || exit + ./configure + judge "编译检查" + make -j "${THREAD}" && make install + judge "jemalloc 编译安装" + echo '/usr/local/lib' >/etc/ld.so.conf.d/local.conf + ldconfig + + echo -e "${OK} ${GreenBG} 即将开始编译安装 Nginx, 过程稍久，请耐心等待 ${Font}" + sleep 4 + + cd ../nginx-${nginx_version} || exit + + #增加http_sub_module用于反向代理替换关键词 + ./configure --prefix="${nginx_dir}" \ + --with-http_ssl_module \ + --with-http_gzip_static_module \ + --with-http_stub_status_module \ + --with-pcre \ + --with-http_realip_module \ + --with-http_flv_module \ + --with-http_mp4_module \ + --with-http_realip_module \ + --with-http_secure_link_module \ + --with-http_sub_module \ + --with-http_v2_module \ + --with-cc-opt='-O3' \ + --with-ld-opt="-ljemalloc" \ + --with-openssl=../openssl-"$openssl_version" + judge "编译检查" + make -j "${THREAD}" && make install + judge "Nginx 编译安装" + + # 修改基本配置 + sed -i 's/#user nobody;/user root;/' ${nginx_dir}/conf/nginx.conf + sed -i 's/worker_processes 1;/worker_processes 4;/' ${nginx_dir}/conf/nginx.conf + sed -i 's/ worker_connections 1024;/ worker_connections 4096;/' ${nginx_dir}/conf/nginx.conf + sed -i '$i include conf.d/*.conf;' ${nginx_dir}/conf/nginx.conf + + # 删除临时文件 + rm -rf ../nginx-"${nginx_version}" + rm -rf ../openssl-"${openssl_version}" + rm -rf ../nginx-"${nginx_version}".tar.gz + rm -rf ../openssl-"${openssl_version}".tar.gz + + # 添加配置文件夹，适配旧版脚本 + mkdir ${nginx_dir}/conf/conf.d +} + +ssl_install() { + if [[ "${ID}" == "centos" ]]; then + ${INS} install socat nc -y + else + ${INS} install socat netcat -y + fi + judge "安装 SSL 证书生成脚本依赖" + + curl https://get.acme.sh | sh + judge "安装 SSL 证书生成脚本" +} + +domain_check() { + read -rp "请输入你的域名信息(eg:www.idleleo.com):" domain + echo "请选择 公网IP 为IPv4或IPv6" + echo "1: IPv4 (默认)" + echo "2: IPv6 (不推荐)" + read -rp "请输入：" ip_version + [[ -z ${ip_version} ]] && ip_version=1 + echo -e "${OK} ${GreenBG} 正在获取 公网IP 信息，请耐心等待 ${Font}" + if [[ $ip_version == 1 ]]; then + local_ip=$(curl https://api-ipv4.ip.sb/ip) + domain_ip=$(ping -4 "${domain}" -c 1 | sed '1{s/[^(]*(//;s/).*//;q}') + elif [[ $ip_version == 2 ]]; then + local_ip=$(curl https://api-ipv6.ip.sb/ip) + domain_ip=$(ping -6 "${domain}" -c 1 | sed '1{s/[^(]*(//;s/).*//;q}') + else + local_ip=$(curl https://api-ipv4.ip.sb/ip) + domain_ip=$(ping -4 "${domain}" -c 1 | sed '1{s/[^(]*(//;s/).*//;q}') + fi + echo -e "域名dns解析IP：${domain_ip}" + echo -e "本机IP: ${local_ip}" + sleep 2 + if [[ ${local_ip} == ${domain_ip} ]]; then + echo -e "${OK} ${GreenBG} 域名dns解析IP 与 本机IP 匹配 ${Font}" + sleep 2 + else + echo -e "${Error} ${RedBG} 请确保域名添加了正确的 A/AAAA 记录，否则将无法正常使用 Xray ${Font}" + echo -e "${Error} ${RedBG} 域名dns解析IP 与 本机IP 不匹配 是否继续安装？（y/n）${Font}" && read -r install + case $install in + [yY][eE][sS] | [yY]) + echo -e "${GreenBG} 继续安装 ${Font}" + sleep 2 + ;; + *) + echo -e "${RedBG} 安装终止 ${Font}" + exit 2 + ;; + esac + fi +} + +port_exist_check() { + if [[ 0 -eq $(lsof -i:"$1" | grep -i -c "listen") ]]; then + echo -e "${OK} ${GreenBG} $1 端口未被占用 ${Font}" + sleep 1 + else + echo -e "${Error} ${RedBG} 检测到 $1 端口被占用，以下为 $1 端口占用信息 ${Font}" + lsof -i:"$1" + echo -e "${OK} ${GreenBG} 5s 后将尝试自动 kill 占用进程 ${Font}" + sleep 5 + lsof -i:"$1" | awk '{print $2}' | grep -v "PID" | xargs kill -9 + echo -e "${OK} ${GreenBG} kill 完成 ${Font}" + sleep 1 + fi +} + +acme() { + if "$HOME"/.acme.sh/acme.sh --issue -d "${domain}" --standalone -k ec-256 --force --test; then + echo -e "${OK} ${GreenBG} SSL 证书测试签发成功，开始正式签发 ${Font}" + rm -rf "$HOME/.acme.sh/${domain}_ecc" + sleep 2 + else + echo -e "${Error} ${RedBG} SSL 证书测试签发失败 ${Font}" + rm -rf "$HOME/.acme.sh/${domain}_ecc" + exit 1 + fi + + if "$HOME"/.acme.sh/acme.sh --issue -d "${domain}" --standalone -k ec-256 --force; then + echo -e "${OK} ${GreenBG} SSL 证书生成成功 ${Font}" + sleep 2 + mkdir /data + if "$HOME"/.acme.sh/acme.sh --installcert -d "${domain}" --fullchainpath /data/xray.crt --keypath /data/xray.key --ecc --force; then + chmod -f a+rw /data/xray.crt + chmod -f a+rw /data/xray.key + chown -f nobody:nobody /data/xray.crt + chown -f nobody:nobody /data/xray.key + echo -e "${OK} ${GreenBG} 证书配置成功 ${Font}" + sleep 2 + fi + else + echo -e "${Error} ${RedBG} SSL 证书生成失败 ${Font}" + rm -rf "$HOME/.acme.sh/${domain}_ecc" + exit 1 + fi +} + +xray_conf_add_tls() { + cd ${xray_conf_dir} || exit + wget --no-check-certificate https://raw.githubusercontent.com/paniy/Xray_bash_onekey/main/VLESS_tls/config.json -O config.json + modify_path + modify_alterid + modify_inbound_port + modify_UUID +} + +xray_conf_add_xtls() { + cd ${xray_conf_dir} || exit + wget --no-check-certificate https://raw.githubusercontent.com/paniy/Xray_bash_onekey/main/VLESS_xtls/config.json -O config.json + modify_path + modify_alterid + modify_inbound_port + modify_UUID +} + +old_config_exist_check() { + if [[ -f $xray_qr_config_file ]]; then + echo -e "${OK} ${GreenBG} 检测到旧配置文件，是否读取旧文件配置 [Y/N]? ${Font}" + read -r ssl_delete + case $ssl_delete in + [yY][eE][sS] | [yY]) + echo -e "${OK} ${GreenBG} 已保留旧配置 ${Font}" + old_config_status="on" + port=$(info_extraction '\"port\"') + ;; + *) + rm -rf $xray_qr_config_file + echo -e "${OK} ${GreenBG} 已删除旧配置 ${Font}" + ;; + esac + fi +} + +nginx_conf_add() { + touch ${nginx_conf_dir}/xray.conf + cat >${nginx_conf_dir}/xray.conf <${nginx_conf_dir}/xray.conf <> /etc/rc.local +# systemctl start rc-local +# fi +# +# judge "rc.local 配置" +#} + +acme_cron_update() { + wget -N -P /usr/bin/idleleo-xray --no-check-certificate "https://raw.githubusercontent.com/paniy/Xray_bash_onekey/main/ssl_update.sh" + if [[ $(crontab -l | grep -c "ssl_update.sh") -lt 1 ]]; then + if [[ "${ID}" == "centos" ]]; then + # sed -i "/acme.sh/c 0 3 * * 0 \"/root/.acme.sh\"/acme.sh --cron --home \"/root/.acme.sh\" \ + # &> /dev/null" /var/spool/cron/root + sed -i "/acme.sh/c 0 3 * * 0 bash ${ssl_update_file}" /var/spool/cron/root + else + # sed -i "/acme.sh/c 0 3 * * 0 \"/root/.acme.sh\"/acme.sh --cron --home \"/root/.acme.sh\" \ + # &> /dev/null" /var/spool/cron/crontabs/root + sed -i "/acme.sh/c 0 3 * * 0 bash ${ssl_update_file}" /var/spool/cron/crontabs/root + fi + fi + judge "cron 计划任务更新" +} + +vmess_qr_config_tls_ws() { + cat >$xray_qr_config_file <<-EOF +{ + "v": "2", + "ps": "${domain}", + "add": "${domain}", + "port": "${port}", + "id": "${UUID}", + "aid": "${alterID}", + "net": "ws", + "type": "none", + "host": "${domain}", + "path": "${camouflage}", + "tls": "tls" +} +EOF +} + +vmess_qr_config_xtls() { + cat >$xray_qr_config_file <<-EOF +{ + "v": "2", + "ps": "${domain}", + "add": "${domain}", + "port": "${port}", + "id": "${UUID}", + "aid": "${alterID}", + "net": "tcp", + "type": "none", + "host": "${domain}", + "tls": "xtls" +} +EOF +} + +vmess_qr_link_image() { + vmess_link="vmess://$(base64 -w 0 $xray_qr_config_file)" + echo -e "${OK} ${GreenBG} VLESS 目前无分享链接规范 请手动复制粘贴配置信息至客户端 ${Font}" + # { + # echo -e "$Red 二维码: $Font" + # echo -n "${vmess_link}" | qrencode -o - -t utf8 + # echo -e "${Red} URL导入链接:${vmess_link} ${Font}" + # } >>"${xray_info_file}" +} + +vmess_quan_link_image() { + echo "$(info_extraction '\"ps\"') = vmess, $(info_extraction '\"add\"'), \ + $(info_extraction '\"port\"'), chacha20-ietf-poly1305, "\"$(info_extraction '\"id\"')\"", over-tls=true, \ + certificate=1, obfs=ws, obfs-path="\"$(info_extraction '\"path\"')\"", " >/tmp/vmess_quan.tmp + vmess_link="vmess://$(base64 -w 0 /tmp/vmess_quan.tmp)" + echo -e "${OK} ${GreenBG} VLESS 目前无分享链接规范 请手动复制粘贴配置信息至客户端 ${Font}" + # { + # echo -e "$Red 二维码: $Font" + # echo -n "${vmess_link}" | qrencode -o - -t utf8 + # echo -e "${Red} URL导入链接:${vmess_link} ${Font}" + # } >>"${xray_info_file}" +} + +vmess_link_image_choice() { + echo "请选择生成的链接种类" + echo "1: V2RayNG/V2RayN" + #echo "2: quantumult" + read -rp "请输入：" link_version + [[ -z ${link_version} ]] && link_version=1 + if [[ $link_version == 1 ]]; then + vmess_qr_link_image + #elif [[ $link_version == 2 ]]; then + # vmess_quan_link_image + else + vmess_qr_link_image + fi +} + +info_extraction() { + grep "$1" $xray_qr_config_file | awk -F '"' '{print $4}' +} + +basic_information() { + { + if [[ "$shell_mode" != "xtls" ]]; then + echo -e "${OK} ${GreenBG} Xray+ws+tls 安装成功 ${Font}" + else + echo -e "${OK} ${GreenBG} Xray+Nginx 安装成功 ${Font}" + fi + echo -e "${Red} Xray 配置信息 ${Font}" + echo -e "${Red} 地址（address）:${Font} $(info_extraction '\"add\"') " + echo -e "${Red} 端口（port）：${Font} $(info_extraction '\"port\"') " + echo -e "${Red} 用户id（UUID）：${Font} $(info_extraction '\"id\"')" + + if [[ $(grep -ic 'VLESS' ${xray_conf}) == 0 ]]; then + echo -e "${Red} 额外id（alterId）：${Font} $(info_extraction '\"aid\"')" + fi + + echo -e "${Red} 加密（encryption）：${Font} none " + echo -e "${Red} 传输协议（network）：${Font} $(info_extraction '\"net\"') " + echo -e "${Red} 伪装类型（type）：${Font} none " + if [[ "$shell_mode" != "xtls" ]]; then + echo -e "${Red} 路径（不要落下/）：${Font} $(info_extraction '\"path\"') " + echo -e "${Red} 底层传输安全：${Font} tls " + else + echo -e "${Red} 流控（flow）：${Font} xtls-rprx-direct " + echo -e "${Red} 底层传输安全：${Font} xtls " + fi + } >"${xray_info_file}" +} + +show_information() { + cat "${xray_info_file}" +} + +ssl_judge_and_install() { + if [[ -f "/data/xray.key" || -f "/data/xray.crt" ]]; then + echo "/data 目录下证书文件已存在" + echo -e "${OK} ${GreenBG} 是否删除 [Y/N]? ${Font}" + read -r ssl_delete + case $ssl_delete in + [yY][eE][sS] | [yY]) + delete_tls_key_and_crt + rm -rf /data/* + echo -e "${OK} ${GreenBG} 已删除 ${Font}" + ;; + *) ;; + + esac + fi + + if [[ -f "/data/xray.key" || -f "/data/xray.crt" ]]; then + echo "证书文件已存在" + elif [[ -f "$HOME/.acme.sh/${domain}_ecc/${domain}.key" && -f "$HOME/.acme.sh/${domain}_ecc/${domain}.cer" ]]; then + echo "证书文件已存在" + "$HOME"/.acme.sh/acme.sh --installcert -d "${domain}" --fullchainpath /data/xray.crt --keypath /data/xray.key --ecc + judge "证书应用" + else + ssl_install + acme + fi +} + +nginx_systemd() { + cat >$nginx_systemd_file </dev/null 2>&1 + [[ -d $HOME/.acme.sh ]] && rm -rf "$HOME/.acme.sh" + echo -e "${OK} ${GreenBG} 已清空证书遗留文件 ${Font}" +} + +judge_mode() { + if [ -f $xray_bin_dir ]; then + if grep -q "ws" $xray_qr_config_file; then + shell_mode="ws" + elif grep -q "xtls" $xray_qr_config_file; then + shell_mode="xtls" + fi + fi +} + +install_xray_ws_tls() { + is_root + check_system + # chrony_install + dependency_install + basic_optimization + domain_check + old_config_exist_check + port_set + stop_service + xray_install + port_exist_check 80 + port_exist_check "${port}" + nginx_exist_check + xray_conf_add_tls + nginx_conf_add + web_camouflage + ssl_judge_and_install + nginx_systemd + vmess_qr_config_tls_ws + basic_information + vmess_link_image_choice + tls_type + show_information + start_process_systemd + enable_process_systemd + acme_cron_update +} + +install_v2_xtls() { + is_root + check_system + # chrony_install + dependency_install + basic_optimization + domain_check + old_config_exist_check + port_set + stop_service + xray_install + port_exist_check 80 + port_exist_check "${port}" + nginx_exist_check + nginx_conf_add_xtls + xray_conf_add_xtls + ssl_judge_and_install + nginx_systemd + vmess_qr_config_xtls + basic_information + vmess_qr_link_image + show_information + start_process_systemd + enable_process_systemd + acme_cron_update +} + +update_sh() { + ol_version=$(curl -L -s https://raw.githubusercontent.com/paniy/Xray_bash_onekey/main/install.sh | grep "shell_version=" | head -1 | awk -F '=|"' '{print $3}') + echo "$ol_version" >$version_cmp + echo "$shell_version" >>$version_cmp + if [[ "$shell_version" < "$(sort -rV $version_cmp | head -1)" ]]; then + echo -e "${OK} ${GreenBG} 存在新版本，是否更新 [Y/N]? ${Font}" + read -r update_confirm + case $update_confirm in + [yY][eE][sS] | [yY]) + rm -f ${idleleo_commend_file} + wget -N --no-check-certificate -P ${idleleo_xray_dir} https://raw.githubusercontent.com/paniy/Xray_bash_onekey/main/install.sh && chmod +x ${idleleo_xray_dir}/install.sh + ln -s ${idleleo_xray_dir}/install.sh ${idleleo_commend_file} + echo -e "${OK} ${GreenBG} 更新完成 ${Font}" + exit 0 + ;; + *) ;; + + esac + else + echo -e "${OK} ${GreenBG} 当前版本为最新版本 ${Font}" + fi + +} + +maintain() { + echo -e "${RedBG}该选项暂时无法使用${Font}" + echo -e "${RedBG}$1${Font}" + exit 0 +} + +list() { + case $1 in + tls_modify) + tls_type + ;; + uninstall) + uninstall_all + ;; + crontab_modify) + acme_cron_update + ;; + boost) + bbr_boost_sh + ;; + *) + menu + ;; + esac +} + +idleleo_commend() { + #增加管理命令 + if [ -L "${idleleo_commend_file}" ]; then + echo -e "${Green}可以使用${Red}idleleo${Font}命令管理脚本\n${Font}" + else + if [ -L "/usr/local/bin/idleleo" ]; then + rm -f /usr/local/bin/idleleo + fi + ln -s $( + cd "$(dirname "$0")" + pwd + )/install.sh ${idleleo_commend_file} + echo -e "${Green}可以使用${Red}idleleo${Font}命令管理脚本\n${Font}" + fi +} + +menu() { + update_sh + echo -e "\t Xray 安装管理脚本 ${Red}[${shell_version}]${Font}" + echo -e "\t---authored by paniy---" + echo -e "\t---changed by www.idleleo.com---" + echo -e "\thttps://github.com/paniy\n" + echo -e "当前已安装版本:${shell_mode}\n" + + idleleo_commend + + echo -e "—————————————— 安装向导 ——————————————""" + echo -e "${Green}0.${Font} 升级 脚本" + echo -e "${Green}1.${Font} 安装 Xray (Nginx+ws+tls)" + echo -e "${Green}2.${Font} 安装 Xray (xtls+Nginx)" + echo -e "${Green}3.${Font} 升级 Xray" + echo -e "—————————————— 配置变更 ——————————————" + echo -e "${Green}4.${Font} 变更 UUID" + echo -e "${Green}5.${Font} 变更 alterid" + echo -e "${Green}6.${Font} 变更 port" + echo -e "${Green}7.${Font} 变更 TLS 版本(仅ws+tls有效)" + echo -e "—————————————— 查看信息 ——————————————" + echo -e "${Green}8.${Font} 查看 实时访问日志" + echo -e "${Green}9.${Font} 查看 实时错误日志" + echo -e "${Green}10.${Font} 查看 Xray 配置信息" + echo -e "—————————————— 其他选项 ——————————————" + echo -e "${Green}11.${Font} 安装 4合1 bbr 锐速安装脚本" + echo -e "${Green}12.${Font} 安装 MTproxy(支持TLS混淆)" + echo -e "${Green}13.${Font} 证书 有效期更新" + echo -e "${Green}14.${Font} 卸载 Xray" + echo -e "${Green}15.${Font} 更新 证书crontab计划任务" + echo -e "${Green}16.${Font} 清空 证书遗留文件" + echo -e "${Green}17.${Font} 退出 \n" + + read -rp "请输入数字：" menu_num + case $menu_num in + 0) + update_sh + bash idleleo + ;; + 1) + shell_mode="ws" + install_xray_ws_tls + bash idleleo + ;; + 2) + shell_mode="xtls" + install_v2_xtls + bash idleleo + ;; + 3) + xray_update + bash idleleo + ;; + 4) + read -rp "请输入UUID:" UUID + modify_UUID + start_process_systemd + bash idleleo + ;; + 5) + read -rp "请输入alterID:" alterID + modify_alterid + start_process_systemd + bash idleleo + ;; + 6) + read -rp "请输入连接端口:" port + if grep -q "ws" $xray_qr_config_file; then + modify_nginx_port + elif grep -q "xtls" $xray_qr_config_file; then + modify_inbound_port + fi + start_process_systemd + bash idleleo + ;; + 7) + tls_type + bash idleleo + ;; + 8) + show_access_log + bash idleleo + ;; + 9) + show_error_log + bash idleleo + ;; + 10) + basic_information + if [[ $shell_mode == "ws" ]]; then + vmess_link_image_choice + else + vmess_qr_link_image + fi + show_information + bash idleleo + ;; + 11) + bbr_boost_sh + bash idleleo + ;; + 12) + mtproxy_sh + bash idleleo + ;; + 13) + stop_process_systemd + ssl_update_manuel + start_process_systemd + bash idleleo + ;; + 14) + uninstall_all + bash idleleo + ;; + 15) + acme_cron_update + bash idleleo + ;; + 16) + delete_tls_key_and_crt + bash idleleo + ;; + 17) + exit 0 + ;; + *) + echo -e "${RedBG}请输入正确的数字${Font}" + bash idleleo + ;; + esac +} + +judge_mode +list "$1" diff --git a/ssl_update.sh b/ssl_update.sh new file mode 100644 index 0000000..6a99c90 --- /dev/null +++ b/ssl_update.sh @@ -0,0 +1,18 @@ +#!/usr/bin/env bash +PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin +export PATH + +xray_qr_config_file="/usr/local/vmess_qr.json" +domain=$(grep '\"add\"' $xray_qr_config_file | awk -F '"' '{print $4}') + +systemctl stop nginx &> /dev/null +sleep 1 +"/root/.acme.sh"/acme.sh --cron --home "/root/.acme.sh" &> /dev/null +"/root/.acme.sh"/acme.sh --installcert -d ${domain} --fullchainpath /data/xray.crt --keypath /data/xray.key --ecc +sleep 1 +chmod -f a+rw /data/xray.crt +chmod -f a+rw /data/xray.key +chown -f nobody:nobody /data/xray.crt +chown -f nobody:nobody /data/xray.key +sleep 1 +systemctl start nginx &> /dev/null