sindricn
2103 lines
66 KiB
Bash
2103 lines
66 KiB
Bash
#!/bin/bash
|
||
|
||
# Hysteria2 出站规则管理模块
|
||
# 功能: 配置和管理 Hysteria2 的出站规则
|
||
# 支持: Direct、SOCKS5、HTTP 代理类型
|
||
# 特性: 类型唯一性强制、具体参数修改、智能冲突检测
|
||
|
||
# 适度的错误处理
|
||
set -uo pipefail
|
||
|
||
# 加载公共库
|
||
readonly SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||
if [[ -f "$SCRIPT_DIR/common.sh" ]]; then
|
||
source "$SCRIPT_DIR/common.sh"
|
||
else
|
||
echo "错误: 无法加载公共库" >&2
|
||
exit 1
|
||
fi
|
||
|
||
# 配置路径 (防止重复定义)
|
||
if [[ -z "${HYSTERIA_CONFIG:-}" ]]; then
|
||
readonly HYSTERIA_CONFIG="/etc/hysteria/config.yaml"
|
||
fi
|
||
# 备份功能已移除
|
||
|
||
# 初始化出站管理
|
||
init_outbound_manager() {
|
||
log_info "初始化出站规则管理器"
|
||
|
||
# 模板功能已移除
|
||
}
|
||
|
||
# 显示出站管理菜单
|
||
show_outbound_menu() {
|
||
clear
|
||
echo -e "${CYAN}=== Hysteria2 出站规则管理 ===${NC}"
|
||
echo ""
|
||
echo -e "${GREEN}1.${NC} 查看出站规则"
|
||
echo -e "${GREEN}2.${NC} 新增出站规则"
|
||
echo -e "${GREEN}3.${NC} 应用规则到配置"
|
||
echo -e "${GREEN}4.${NC} 修改出站规则"
|
||
echo -e "${GREEN}5.${NC} 删除出站规则"
|
||
echo ""
|
||
echo -e "${RED}0.${NC} 返回主菜单"
|
||
echo ""
|
||
}
|
||
|
||
# 查看当前出站配置
|
||
view_current_outbound() {
|
||
log_info "查看当前出站配置"
|
||
|
||
# 使用统一的检查函数
|
||
if ! check_hysteria2_ready "config"; then
|
||
return 0 # 友好返回，不退出脚本
|
||
fi
|
||
|
||
echo -e "${BLUE}=== 当前出站配置 ===${NC}"
|
||
echo ""
|
||
|
||
# 检查是否有出站配置 - 改进的匹配模式
|
||
if grep -q "^[[:space:]]*outbounds:" "$HYSTERIA_CONFIG"; then
|
||
echo -e "${GREEN}出站规则：${NC}"
|
||
# 使用更精确的sed匹配，支持缩进
|
||
sed -n '/^[[:space:]]*outbounds:/,/^[[:space:]]*[a-zA-Z]/p' "$HYSTERIA_CONFIG" | sed '$d'
|
||
echo ""
|
||
|
||
# 显示出站规则统计
|
||
local outbound_count
|
||
outbound_count=$(grep -c "^[[:space:]]*-[[:space:]]*name:" "$HYSTERIA_CONFIG" || echo "0")
|
||
echo -e "${CYAN}共找到 $outbound_count 个出站规则${NC}"
|
||
echo ""
|
||
else
|
||
echo -e "${YELLOW}当前配置中没有出站规则（使用默认直连）${NC}"
|
||
echo ""
|
||
fi
|
||
|
||
# 检查是否有 ACL 配置 - 改进的匹配和显示
|
||
if grep -q "^[[:space:]]*acl:" "$HYSTERIA_CONFIG"; then
|
||
echo -e "${GREEN}ACL 规则：${NC}"
|
||
# 改进的ACL显示逻辑，完整显示inline内容
|
||
local in_acl=false
|
||
local acl_indent=""
|
||
while IFS= read -r line; do
|
||
if [[ "$line" =~ ^[[:space:]]*acl: ]]; then
|
||
in_acl=true
|
||
echo "$line"
|
||
# 记录ACL节点的缩进级别
|
||
acl_indent=$(echo "$line" | sed 's/acl:.*//')
|
||
elif [[ "$in_acl" == true ]]; then
|
||
# 检查是否是同级或更高级的配置节点（结束ACL显示）
|
||
if [[ "$line" =~ ^[[:space:]]*[a-zA-Z]+:[[:space:]]*$ ]] && [[ ! "$line" =~ ^[[:space:]]*(inline|file): ]]; then
|
||
local line_indent=$(echo "$line" | sed 's/[a-zA-Z].*//')
|
||
# 如果缩进级别等于或小于ACL节点，说明ACL节点结束
|
||
if [[ ${#line_indent} -le ${#acl_indent} ]]; then
|
||
break
|
||
fi
|
||
fi
|
||
echo "$line"
|
||
fi
|
||
done < "$HYSTERIA_CONFIG"
|
||
else
|
||
echo -e "${YELLOW}当前配置中没有 ACL 规则（使用默认路由）${NC}"
|
||
fi
|
||
|
||
echo ""
|
||
wait_for_user
|
||
}
|
||
|
||
# 添加新的出站规则
|
||
add_outbound_rule() {
|
||
log_info "添加新的出站规则"
|
||
|
||
echo -e "${BLUE}=== 添加出站规则 ===${NC}"
|
||
echo ""
|
||
echo -e "${YELLOW}注意: 每种类型只能有一个出站规则，添加同类型规则将覆盖现有规则${NC}"
|
||
echo ""
|
||
echo "选择出站类型："
|
||
echo "1. Direct (直连)"
|
||
echo "2. SOCKS5 代理"
|
||
echo "3. HTTP/HTTPS 代理"
|
||
echo ""
|
||
|
||
local choice
|
||
read -p "请选择 [1-3]: " choice
|
||
|
||
# 确定选择的类型
|
||
local selected_type
|
||
case $choice in
|
||
1) selected_type="direct" ;;
|
||
2) selected_type="socks5" ;;
|
||
3) selected_type="http" ;;
|
||
*)
|
||
log_error "无效选择"
|
||
return 1
|
||
;;
|
||
esac
|
||
|
||
# 立即进行类型冲突检测
|
||
local existing_rule=""
|
||
if existing_rule=$(check_existing_outbound_type "$selected_type"); then
|
||
echo ""
|
||
echo -e "${YELLOW}⚠️ 类型冲突检测 ⚠️${NC}"
|
||
echo -e "${YELLOW}检测到现有的 ${selected_type} 类型规则: ${CYAN}$existing_rule${NC}"
|
||
echo -e "${YELLOW}根据系统设计，每种类型只能有一个出站规则${NC}"
|
||
echo ""
|
||
echo -e "${BLUE}选择操作：${NC}"
|
||
echo -e "${GREEN}1.${NC} 继续添加并覆盖现有规则 ${CYAN}$existing_rule${NC}"
|
||
echo -e "${RED}2.${NC} 取消添加操作"
|
||
echo ""
|
||
read -p "请选择 [1-2]: " conflict_choice
|
||
|
||
case $conflict_choice in
|
||
1)
|
||
echo -e "${BLUE}[INFO]${NC} 将覆盖现有的 $selected_type 规则: $existing_rule"
|
||
echo -e "${BLUE}[INFO]${NC} 继续配置新规则..."
|
||
echo ""
|
||
;;
|
||
2)
|
||
echo -e "${BLUE}[INFO]${NC} 已取消添加操作"
|
||
return 0
|
||
;;
|
||
*)
|
||
echo -e "${RED}[ERROR]${NC} 无效选择，取消操作"
|
||
return 1
|
||
;;
|
||
esac
|
||
fi
|
||
|
||
# 执行对应的配置函数，传入要覆盖的规则名称
|
||
case $choice in
|
||
1) add_direct_outbound "$existing_rule" ;;
|
||
2) add_socks5_outbound "$existing_rule" ;;
|
||
3) add_http_outbound "$existing_rule" ;;
|
||
esac
|
||
}
|
||
|
||
# 添加直连出站
|
||
add_direct_outbound() {
|
||
local existing_rule="${1:-}"
|
||
echo -e "${BLUE}=== 配置 Direct 直连出站 ===${NC}"
|
||
echo ""
|
||
|
||
local name interface ipv4 ipv6
|
||
|
||
# 获取出站名称
|
||
read -p "出站名称 (例: china_direct): " name
|
||
if [[ -z "$name" ]]; then
|
||
name="direct_out"
|
||
fi
|
||
|
||
# 是否绑定特定网卡
|
||
read -p "是否绑定特定网卡？ [y/N]: " bind_interface
|
||
|
||
if [[ $bind_interface =~ ^[Yy]$ ]]; then
|
||
echo "可用网卡："
|
||
# 优化：缓存网卡信息并使用更高效的命令
|
||
if [[ -z "${CACHED_INTERFACES:-}" ]]; then
|
||
# 使用更快的方法获取网卡列表
|
||
if command -v ip >/dev/null 2>&1; then
|
||
CACHED_INTERFACES=$(ip -o link show | awk -F': ' '{print $2}' | grep -v "lo")
|
||
else
|
||
# 降级方案
|
||
CACHED_INTERFACES=$(ls /sys/class/net/ | grep -v "lo")
|
||
fi
|
||
fi
|
||
echo "$CACHED_INTERFACES" | nl -w2 -s') '
|
||
read -p "请选择网卡名称 (例: eth0): " interface
|
||
fi
|
||
|
||
# 是否绑定特定 IP
|
||
read -p "是否绑定特定 IP 地址？ [y/N]: " bind_ip
|
||
|
||
if [[ $bind_ip =~ ^[Yy]$ ]]; then
|
||
read -p "IPv4 地址 (可选): " ipv4
|
||
read -p "IPv6 地址 (可选): " ipv6
|
||
fi
|
||
|
||
# 保存配置参数供后续使用
|
||
export DIRECT_INTERFACE="$interface"
|
||
export DIRECT_IPV4="$ipv4"
|
||
export DIRECT_IPV6="$ipv6"
|
||
|
||
# 生成配置
|
||
generate_direct_config "$name" "$interface" "$ipv4" "$ipv6"
|
||
}
|
||
|
||
# 添加 SOCKS5 出站
|
||
add_socks5_outbound() {
|
||
local existing_rule="${1:-}"
|
||
echo -e "${BLUE}=== 配置 SOCKS5 代理出站 ===${NC}"
|
||
echo ""
|
||
|
||
local name addr username password
|
||
|
||
read -p "出站名称 (例: socks5_proxy): " name
|
||
if [[ -z "$name" ]]; then
|
||
name="socks5_out"
|
||
fi
|
||
|
||
read -p "代理服务器地址:端口 (例: proxy.example.com:1080): " addr
|
||
if [[ -z "$addr" ]]; then
|
||
log_error "代理地址不能为空"
|
||
return 1
|
||
fi
|
||
|
||
read -p "是否需要认证？ [y/N]: " need_auth
|
||
|
||
if [[ $need_auth =~ ^[Yy]$ ]]; then
|
||
read -p "用户名: " username
|
||
read -s -p "密码: " password
|
||
echo ""
|
||
fi
|
||
|
||
# 保存配置参数供后续使用
|
||
export SOCKS5_ADDR="$addr"
|
||
export SOCKS5_USERNAME="$username"
|
||
export SOCKS5_PASSWORD="$password"
|
||
|
||
# 生成配置
|
||
generate_socks5_config "$name" "$addr" "$username" "$password"
|
||
}
|
||
|
||
# 添加 HTTP 出站
|
||
add_http_outbound() {
|
||
local existing_rule="${1:-}"
|
||
echo -e "${BLUE}=== 配置 HTTP/HTTPS 代理出站 ===${NC}"
|
||
echo ""
|
||
|
||
local name url insecure
|
||
|
||
read -p "出站名称 (例: http_proxy): " name
|
||
if [[ -z "$name" ]]; then
|
||
name="http_out"
|
||
fi
|
||
|
||
echo "代理类型："
|
||
echo "1. HTTP 代理"
|
||
echo "2. HTTPS 代理"
|
||
read -p "选择 [1-2]: " proxy_type
|
||
|
||
if [[ $proxy_type == "1" ]]; then
|
||
read -p "HTTP 代理 URL (例: http://user:pass@proxy.com:8080): " url
|
||
else
|
||
read -p "HTTPS 代理 URL (例: https://user:pass@proxy.com:8080): " url
|
||
read -p "是否跳过 TLS 验证？ [y/N]: " skip_tls
|
||
if [[ $skip_tls =~ ^[Yy]$ ]]; then
|
||
insecure="true"
|
||
else
|
||
insecure="false"
|
||
fi
|
||
fi
|
||
|
||
if [[ -z "$url" ]]; then
|
||
log_error "代理 URL 不能为空"
|
||
return 1
|
||
fi
|
||
|
||
# 保存配置参数供后续使用
|
||
export HTTP_URL="$url"
|
||
export HTTP_INSECURE="$insecure"
|
||
|
||
# 生成配置
|
||
generate_http_config "$name" "$url" "$insecure"
|
||
}
|
||
|
||
# 生成配置函数
|
||
generate_direct_config() {
|
||
local name="$1" interface="$2" ipv4="$3" ipv6="$4"
|
||
|
||
echo "生成的 Direct 出站配置："
|
||
echo "---"
|
||
echo "outbounds:"
|
||
echo " - name: $name"
|
||
echo " type: direct"
|
||
echo " direct:"
|
||
echo " mode: auto"
|
||
|
||
if [[ -n "$interface" ]]; then
|
||
echo " bindDevice: \"$interface\""
|
||
fi
|
||
if [[ -n "$ipv4" ]]; then
|
||
echo " bindIPv4: \"$ipv4\""
|
||
fi
|
||
if [[ -n "$ipv6" ]]; then
|
||
echo " bindIPv6: \"$ipv6\""
|
||
fi
|
||
echo "---"
|
||
echo ""
|
||
|
||
apply_outbound_config "$name" "direct" "$existing_rule"
|
||
}
|
||
|
||
generate_socks5_config() {
|
||
local name="$1" addr="$2" username="$3" password="$4"
|
||
|
||
echo "生成的 SOCKS5 出站配置："
|
||
echo "---"
|
||
echo "outbounds:"
|
||
echo " - name: $name"
|
||
echo " type: socks5"
|
||
echo " socks5:"
|
||
echo " addr: \"$addr\""
|
||
|
||
if [[ -n "$username" ]]; then
|
||
echo " username: \"$username\""
|
||
echo " password: \"$password\""
|
||
fi
|
||
echo "---"
|
||
echo ""
|
||
|
||
apply_outbound_config "$name" "socks5" "$existing_rule"
|
||
}
|
||
|
||
generate_http_config() {
|
||
local name="$1" url="$2" insecure="$3"
|
||
|
||
echo "生成的 HTTP 出站配置："
|
||
echo "---"
|
||
echo "outbounds:"
|
||
echo " - name: $name"
|
||
echo " type: http"
|
||
echo " http:"
|
||
echo " url: \"$url\""
|
||
|
||
if [[ -n "$insecure" ]]; then
|
||
echo " insecure: $insecure"
|
||
fi
|
||
echo "---"
|
||
echo ""
|
||
|
||
apply_outbound_config "$name" "http" "$existing_rule"
|
||
}
|
||
|
||
# 应用出站配置 - 极简稳定版本
|
||
apply_outbound_config() {
|
||
local name="$1" type="$2" existing_rule="${3:-}"
|
||
|
||
read -p "是否将此配置应用到 Hysteria2？ [y/N]: " apply_config
|
||
|
||
if [[ $apply_config =~ ^[Yy]$ ]]; then
|
||
echo -e "${BLUE}[INFO]${NC} 开始应用出站配置: $name ($type)"
|
||
|
||
# 使用极简稳定的方法
|
||
if apply_outbound_simple "$name" "$type" "$existing_rule"; then
|
||
echo -e "${GREEN}[SUCCESS]${NC} 出站配置已添加：$name ($type)"
|
||
|
||
# 询问是否重启服务
|
||
read -p "是否重启 Hysteria2 服务以应用配置？ [y/N]: " restart_service
|
||
|
||
if [[ $restart_service =~ ^[Yy]$ ]]; then
|
||
if systemctl restart hysteria-server 2>/dev/null; then
|
||
echo -e "${GREEN}[SUCCESS]${NC} 服务已重启"
|
||
else
|
||
echo -e "${RED}[ERROR]${NC} 服务重启失败"
|
||
fi
|
||
fi
|
||
else
|
||
echo -e "${RED}[ERROR]${NC} 配置应用失败"
|
||
fi
|
||
else
|
||
echo -e "${BLUE}[INFO]${NC} 操作已取消"
|
||
fi
|
||
}
|
||
|
||
# 检查现有同类型出站规则
|
||
check_existing_outbound_type() {
|
||
local target_type="$1"
|
||
local config_file="${2:-$HYSTERIA_CONFIG}"
|
||
|
||
if [[ ! -f "$config_file" ]]; then
|
||
return 1 # 文件不存在，没有冲突
|
||
fi
|
||
|
||
# 查找同类型的规则
|
||
local in_outbounds=false
|
||
local current_rule_type=""
|
||
local current_rule_name=""
|
||
|
||
while IFS= read -r line; do
|
||
# 检测outbounds节点
|
||
if [[ "$line" =~ ^[[:space:]]*outbounds: ]]; then
|
||
in_outbounds=true
|
||
continue
|
||
fi
|
||
|
||
# 离开outbounds节点
|
||
if [[ "$in_outbounds" == true ]] && [[ "$line" =~ ^[[:space:]]*[a-zA-Z]+:[[:space:]]*$ ]] && [[ ! "$line" =~ ^[[:space:]]*- ]]; then
|
||
in_outbounds=false
|
||
fi
|
||
|
||
# 在outbounds节点中
|
||
if [[ "$in_outbounds" == true ]]; then
|
||
# 检测规则名
|
||
if [[ "$line" =~ ^[[:space:]]*-[[:space:]]*name:[[:space:]]*(.+)$ ]]; then
|
||
current_rule_name="${BASH_REMATCH[1]}"
|
||
current_rule_name=$(echo "$current_rule_name" | xargs) # 去除前后空格
|
||
fi
|
||
|
||
# 检测规则类型
|
||
if [[ "$line" =~ ^[[:space:]]*type:[[:space:]]*(.+)$ ]]; then
|
||
current_rule_type="${BASH_REMATCH[1]}"
|
||
current_rule_type=$(echo "$current_rule_type" | xargs) # 去除前后空格
|
||
|
||
# 检查是否与目标类型匹配
|
||
if [[ "$current_rule_type" == "$target_type" ]]; then
|
||
echo "$current_rule_name" # 返回现有同类型规则的名称
|
||
return 0
|
||
fi
|
||
fi
|
||
fi
|
||
done < "$config_file"
|
||
|
||
return 1 # 未找到同类型规则
|
||
}
|
||
|
||
# 静默删除指定规则（用于类型覆盖，无用户确认）
|
||
delete_existing_rule_silent() {
|
||
local rule_name="$1"
|
||
|
||
echo -e "${BLUE}[INFO]${NC} 正在删除现有规则: $rule_name"
|
||
|
||
# 创建临时文件
|
||
local temp_config="/tmp/hysteria_delete_temp_$(date +%s).yaml"
|
||
|
||
# 智能删除逻辑：完整删除outbound规则和相关ACL条目
|
||
local in_outbound_rule=false
|
||
local in_acl_section=false
|
||
local acl_base_indent=""
|
||
|
||
while IFS= read -r line || [[ -n "$line" ]]; do
|
||
local should_keep=true
|
||
|
||
# 1. 删除包含规则名的注释
|
||
if [[ "$line" =~ ^[[:space:]]*#.*${rule_name} ]]; then
|
||
should_keep=false
|
||
fi
|
||
|
||
# 2. 检测outbound规则块
|
||
if [[ "$line" =~ ^[[:space:]]*-[[:space:]]*name:[[:space:]]*${rule_name}[[:space:]]*$ ]]; then
|
||
in_outbound_rule=true
|
||
should_keep=false
|
||
elif [[ "$in_outbound_rule" == true ]]; then
|
||
# 在outbound规则块中，检查是否结束
|
||
if [[ "$line" =~ ^[[:space:]]*-[[:space:]]*name: ]] || [[ "$line" =~ ^[[:space:]]*[a-zA-Z]+:[[:space:]]*$ ]] && [[ ! "$line" =~ ^[[:space:]]*(type|direct|socks5|http|addr|url|mode|username|password|insecure): ]]; then
|
||
in_outbound_rule=false
|
||
should_keep=true
|
||
else
|
||
should_keep=false # 删除outbound规则块内的所有行
|
||
fi
|
||
fi
|
||
|
||
# 3. 检测ACL节点
|
||
if [[ "$line" =~ ^[[:space:]]*acl: ]]; then
|
||
in_acl_section=true
|
||
acl_base_indent=$(echo "$line" | sed 's/acl:.*//')
|
||
should_keep=true
|
||
elif [[ "$in_acl_section" == true ]]; then
|
||
# 检查是否离开ACL节点
|
||
if [[ "$line" =~ ^[[:space:]]*[a-zA-Z]+:[[:space:]]*$ ]] && [[ ! "$line" =~ ^[[:space:]]*(inline|file): ]]; then
|
||
local line_indent=$(echo "$line" | sed 's/[a-zA-Z].*//')
|
||
if [[ ${#line_indent} -le ${#acl_base_indent} ]]; then
|
||
in_acl_section=false
|
||
should_keep=true
|
||
fi
|
||
fi
|
||
|
||
# 在ACL节点中处理 - 删除包含目标规则名的行
|
||
if [[ "$in_acl_section" == true ]] && [[ "$line" =~ ${rule_name} ]]; then
|
||
should_keep=false # 删除ACL中包含目标规则名的条目
|
||
fi
|
||
fi
|
||
|
||
# 写入保留的行
|
||
if [[ "$should_keep" == true ]]; then
|
||
echo "$line" >> "$temp_config"
|
||
fi
|
||
done < "$HYSTERIA_CONFIG"
|
||
|
||
# 检查删除是否成功
|
||
if grep -q "name: *$rule_name" "$temp_config" 2>/dev/null; then
|
||
echo -e "${RED}[ERROR]${NC} 删除失败，规则仍存在"
|
||
rm -f "$temp_config"
|
||
return 1
|
||
fi
|
||
|
||
# 应用修改
|
||
if mv "$temp_config" "$HYSTERIA_CONFIG" 2>/dev/null; then
|
||
echo -e "${GREEN}[SUCCESS]${NC} 现有规则 '$rule_name' 已删除"
|
||
return 0
|
||
else
|
||
echo -e "${RED}[ERROR]${NC} 删除失败，文件操作错误"
|
||
rm -f "$temp_config"
|
||
return 1
|
||
fi
|
||
}
|
||
|
||
# 极简稳定的配置应用函数
|
||
apply_outbound_simple() {
|
||
local name="$1" type="$2" existing_rule="${3:-}"
|
||
|
||
echo -e "${BLUE}[INFO]${NC} 检查配置文件: $HYSTERIA_CONFIG"
|
||
|
||
# 检查配置文件
|
||
if [[ ! -f "$HYSTERIA_CONFIG" ]]; then
|
||
echo -e "${RED}[ERROR]${NC} 配置文件不存在: $HYSTERIA_CONFIG"
|
||
return 1
|
||
fi
|
||
|
||
# 如果有要覆盖的规则，先删除它
|
||
if [[ -n "$existing_rule" ]]; then
|
||
echo -e "${BLUE}[INFO]${NC} 删除现有规则: $existing_rule"
|
||
if ! delete_existing_rule_silent "$existing_rule"; then
|
||
echo -e "${RED}[ERROR]${NC} 删除现有规则失败"
|
||
return 1
|
||
fi
|
||
fi
|
||
|
||
# 直接操作，不创建不必要的备份
|
||
|
||
# 创建临时文件
|
||
local temp_file="/tmp/hysteria_temp_$$_$(date +%s).yaml"
|
||
echo -e "${BLUE}[INFO]${NC} 创建临时文件: $temp_file"
|
||
|
||
if ! cp "$HYSTERIA_CONFIG" "$temp_file" 2>/dev/null; then
|
||
echo -e "${RED}[ERROR]${NC} 无法创建临时文件"
|
||
return 1
|
||
fi
|
||
|
||
# 添加出站配置
|
||
echo -e "${BLUE}[INFO]${NC} 添加出站配置到临时文件"
|
||
|
||
if grep -q "^[[:space:]]*outbounds:" "$temp_file" 2>/dev/null; then
|
||
echo -e "${BLUE}[INFO]${NC} 检测到现有outbounds配置，插入新规则"
|
||
|
||
# 创建新的临时文件用于正确插入
|
||
local temp_file2="/tmp/hysteria_merge_$$_$(date +%s).yaml"
|
||
local in_outbounds=false
|
||
local inserted=false
|
||
|
||
while IFS= read -r line || [[ -n "$line" ]]; do
|
||
# 检测outbounds节点开始
|
||
if [[ "$line" =~ ^[[:space:]]*outbounds: ]]; then
|
||
in_outbounds=true
|
||
echo "$line" >> "$temp_file2"
|
||
continue
|
||
fi
|
||
|
||
# 在outbounds节点中，找到合适位置插入
|
||
if [[ "$in_outbounds" == true ]] && [[ "$inserted" == false ]]; then
|
||
# 如果遇到其他顶级节点，在此之前插入新规则
|
||
if [[ "$line" =~ ^[[:space:]]*[a-zA-Z]+:[[:space:]]*$ ]] && [[ ! "$line" =~ ^[[:space:]]*- ]]; then
|
||
# 插入新规则
|
||
cat >> "$temp_file2" << EOF
|
||
|
||
# 新增出站规则 - $name ($type)
|
||
- name: $name
|
||
type: $type
|
||
EOF
|
||
case $type in
|
||
"direct")
|
||
echo " direct:" >> "$temp_file2"
|
||
echo " mode: auto" >> "$temp_file2"
|
||
;;
|
||
"socks5")
|
||
echo " socks5:" >> "$temp_file2"
|
||
echo " addr: \"${SOCKS5_ADDR:-127.0.0.1:1080}\"" >> "$temp_file2"
|
||
if [[ -n "${SOCKS5_USERNAME:-}" ]]; then
|
||
echo " username: \"$SOCKS5_USERNAME\"" >> "$temp_file2"
|
||
echo " password: \"$SOCKS5_PASSWORD\"" >> "$temp_file2"
|
||
fi
|
||
;;
|
||
"http")
|
||
echo " http:" >> "$temp_file2"
|
||
echo " url: \"${HTTP_URL:-http://127.0.0.1:8080}\"" >> "$temp_file2"
|
||
if [[ -n "${HTTP_INSECURE:-}" ]]; then
|
||
echo " insecure: $HTTP_INSECURE" >> "$temp_file2"
|
||
fi
|
||
;;
|
||
esac
|
||
echo "" >> "$temp_file2"
|
||
inserted=true
|
||
in_outbounds=false
|
||
fi
|
||
fi
|
||
|
||
echo "$line" >> "$temp_file2"
|
||
done < "$temp_file"
|
||
|
||
# 如果在文件末尾仍未插入，在outbounds节点末尾添加
|
||
if [[ "$inserted" == false ]] && [[ "$in_outbounds" == true ]]; then
|
||
cat >> "$temp_file2" << EOF
|
||
|
||
# 新增出站规则 - $name ($type)
|
||
- name: $name
|
||
type: $type
|
||
EOF
|
||
case $type in
|
||
"direct")
|
||
echo " direct:" >> "$temp_file2"
|
||
echo " mode: auto" >> "$temp_file2"
|
||
;;
|
||
"socks5")
|
||
echo " socks5:" >> "$temp_file2"
|
||
echo " addr: \"${SOCKS5_ADDR:-127.0.0.1:1080}\"" >> "$temp_file2"
|
||
;;
|
||
"http")
|
||
echo " http:" >> "$temp_file2"
|
||
echo " url: \"${HTTP_URL:-http://127.0.0.1:8080}\"" >> "$temp_file2"
|
||
;;
|
||
esac
|
||
fi
|
||
|
||
# 替换原文件
|
||
mv "$temp_file2" "$temp_file"
|
||
|
||
# 智能ACL规则同步
|
||
echo -e "${BLUE}[INFO]${NC} 同步ACL路由规则"
|
||
if grep -q "^[[:space:]]*acl:" "$temp_file" 2>/dev/null; then
|
||
echo -e "${BLUE}[INFO]${NC} 检测到现有ACL规则，智能添加路由条目"
|
||
|
||
# 创建ACL添加的临时文件
|
||
local temp_acl="/tmp/hysteria_acl_add_$$_$(date +%s).yaml"
|
||
local in_acl_section=false
|
||
local in_inline_section=false
|
||
local acl_base_indent=""
|
||
local added_acl_rule=false
|
||
|
||
while IFS= read -r line || [[ -n "$line" ]]; do
|
||
# 检测ACL节点
|
||
if [[ "$line" =~ ^[[:space:]]*acl: ]]; then
|
||
in_acl_section=true
|
||
acl_base_indent=$(echo "$line" | sed 's/acl:.*//')
|
||
echo "$line" >> "$temp_acl"
|
||
continue
|
||
fi
|
||
|
||
# 在ACL节点中
|
||
if [[ "$in_acl_section" == true ]]; then
|
||
# 检查是否离开ACL节点
|
||
if [[ "$line" =~ ^[[:space:]]*[a-zA-Z]+:[[:space:]]*$ ]] && [[ ! "$line" =~ ^[[:space:]]*(inline|file): ]]; then
|
||
local line_indent=$(echo "$line" | sed 's/[a-zA-Z].*//')
|
||
if [[ ${#line_indent} -le ${#acl_base_indent} ]]; then
|
||
# 离开ACL节点前，如果还没添加规则，则添加
|
||
if [[ "$added_acl_rule" == false ]]; then
|
||
echo " - ${name}(all) # 新增出站规则" >> "$temp_acl"
|
||
added_acl_rule=true
|
||
fi
|
||
in_acl_section=false
|
||
in_inline_section=false
|
||
fi
|
||
fi
|
||
|
||
# 检测inline节点
|
||
if [[ "$line" =~ ^[[:space:]]*inline:[[:space:]]*$ ]]; then
|
||
in_inline_section=true
|
||
echo "$line" >> "$temp_acl"
|
||
continue
|
||
fi
|
||
|
||
# 在inline节点中，添加新规则（在第一个条目后）
|
||
if [[ "$in_inline_section" == true ]] && [[ "$added_acl_rule" == false ]] && [[ "$line" =~ ^[[:space:]]*-[[:space:]] ]]; then
|
||
echo "$line" >> "$temp_acl"
|
||
echo " - ${name}(all) # 新增出站规则" >> "$temp_acl"
|
||
added_acl_rule=true
|
||
continue
|
||
fi
|
||
fi
|
||
|
||
echo "$line" >> "$temp_acl"
|
||
done < "$temp_file"
|
||
|
||
# 如果文件末尾仍在ACL中且未添加规则
|
||
if [[ "$in_acl_section" == true ]] && [[ "$added_acl_rule" == false ]]; then
|
||
echo " - ${name}(all) # 新增出站规则" >> "$temp_acl"
|
||
fi
|
||
|
||
# 替换原文件
|
||
mv "$temp_acl" "$temp_file"
|
||
else
|
||
echo -e "${BLUE}[INFO]${NC} 创建新的ACL规则配置"
|
||
cat >> "$temp_file" << EOF
|
||
|
||
# ACL规则 - 路由配置
|
||
acl:
|
||
inline:
|
||
- ${name}(all) # 新增出站规则路由
|
||
EOF
|
||
fi
|
||
|
||
else
|
||
echo -e "${BLUE}[INFO]${NC} 未检测到outbounds配置，创建新节点"
|
||
case $type in
|
||
"direct")
|
||
cat >> "$temp_file" << EOF
|
||
|
||
# 出站规则配置
|
||
outbounds:
|
||
- name: $name
|
||
type: direct
|
||
direct:
|
||
mode: auto
|
||
|
||
# ACL规则 - 路由配置
|
||
acl:
|
||
inline:
|
||
- $name(all) # 所有流量通过此规则直连
|
||
EOF
|
||
;;
|
||
"socks5")
|
||
cat >> "$temp_file" << EOF
|
||
|
||
# 出站规则配置
|
||
outbounds:
|
||
- name: $name
|
||
type: socks5
|
||
socks5:
|
||
addr: "${SOCKS5_ADDR:-127.0.0.1:1080}"
|
||
|
||
# ACL规则 - 路由配置
|
||
acl:
|
||
inline:
|
||
- $name(all) # 所有流量通过此规则代理
|
||
EOF
|
||
;;
|
||
esac
|
||
fi
|
||
|
||
# 语法验证功能已移除 - 验证结果不准确且没有实际作用
|
||
|
||
# 应用配置
|
||
echo -e "${BLUE}[INFO]${NC} 应用新配置"
|
||
if mv "$temp_file" "$HYSTERIA_CONFIG" 2>/dev/null; then
|
||
echo -e "${GREEN}[SUCCESS]${NC} 配置已成功应用"
|
||
return 0
|
||
else
|
||
echo -e "${RED}[ERROR]${NC} 配置应用失败"
|
||
rm -f "$temp_file" 2>/dev/null
|
||
return 1
|
||
fi
|
||
}
|
||
|
||
# 创建安全的临时文件 - 兼容性改进版
|
||
create_temp_config() {
|
||
local temp_config
|
||
|
||
# 尝试不同的mktemp选项以确保兼容性
|
||
if command -v mktemp >/dev/null 2>&1; then
|
||
# 尝试标准方式
|
||
if temp_config=$(mktemp -t hysteria_config_XXXXXX.yaml 2>/dev/null); then
|
||
log_debug "使用mktemp -t创建临时文件: $temp_config"
|
||
# 备选方式1: 不使用-t选项
|
||
elif temp_config=$(mktemp /tmp/hysteria_config_XXXXXX.yaml 2>/dev/null); then
|
||
log_debug "使用mktemp备选方式创建临时文件: $temp_config"
|
||
# 备选方式2: 手动创建
|
||
else
|
||
temp_config="/tmp/hysteria_config_$$_$(date +%s).yaml"
|
||
if ! touch "$temp_config" 2>/dev/null; then
|
||
log_error "无法创建临时文件: $temp_config"
|
||
return 1
|
||
fi
|
||
log_debug "手动创建临时文件: $temp_config"
|
||
fi
|
||
else
|
||
# 如果没有mktemp命令，手动创建
|
||
temp_config="/tmp/hysteria_config_$$_$(date +%s).yaml"
|
||
if ! touch "$temp_config" 2>/dev/null; then
|
||
log_error "无法创建临时文件: $temp_config"
|
||
return 1
|
||
fi
|
||
log_debug "手动创建临时文件（无mktemp）: $temp_config"
|
||
fi
|
||
|
||
# 设置适当权限
|
||
if ! chmod 600 "$temp_config" 2>/dev/null; then
|
||
log_warn "无法设置临时文件权限，继续执行"
|
||
fi
|
||
|
||
echo "$temp_config"
|
||
}
|
||
|
||
# 智能合并outbounds配置
|
||
merge_outbound_config() {
|
||
local config_file="$1" name="$2" type="$3"
|
||
|
||
# 检查是否已存在outbounds节点
|
||
if grep -q "^[[:space:]]*outbounds:" "$config_file"; then
|
||
log_info "检测到现有outbounds配置，添加到现有列表"
|
||
add_to_existing_outbounds "$config_file" "$name" "$type"
|
||
else
|
||
log_info "未检测到outbounds配置，创建新的outbounds节点"
|
||
add_new_outbounds_section "$config_file" "$name" "$type"
|
||
fi
|
||
}
|
||
|
||
# 添加到现有outbounds列表
|
||
add_to_existing_outbounds() {
|
||
local config_file="$1" name="$2" type="$3"
|
||
|
||
case $type in
|
||
"direct")
|
||
# 在outbounds节点下添加新项
|
||
cat >> "$config_file" << EOF
|
||
|
||
# 新增出站规则 - $name (Direct)
|
||
- name: $name
|
||
type: direct
|
||
direct:
|
||
mode: auto
|
||
EOF
|
||
if [[ -n "${DIRECT_INTERFACE:-}" ]]; then
|
||
echo " bindDevice: \"$DIRECT_INTERFACE\"" >> "$config_file"
|
||
fi
|
||
if [[ -n "${DIRECT_IPV4:-}" ]]; then
|
||
echo " bindIPv4: \"$DIRECT_IPV4\"" >> "$config_file"
|
||
fi
|
||
if [[ -n "${DIRECT_IPV6:-}" ]]; then
|
||
echo " bindIPv6: \"$DIRECT_IPV6\"" >> "$config_file"
|
||
fi
|
||
;;
|
||
"socks5")
|
||
cat >> "$config_file" << EOF
|
||
|
||
# 新增出站规则 - $name (SOCKS5)
|
||
- name: $name
|
||
type: socks5
|
||
socks5:
|
||
addr: "${SOCKS5_ADDR:-proxy.example.com:1080}"
|
||
EOF
|
||
if [[ -n "${SOCKS5_USERNAME:-}" ]]; then
|
||
echo " username: \"$SOCKS5_USERNAME\"" >> "$config_file"
|
||
echo " password: \"$SOCKS5_PASSWORD\"" >> "$config_file"
|
||
fi
|
||
;;
|
||
"http")
|
||
cat >> "$config_file" << EOF
|
||
|
||
# 新增出站规则 - $name (HTTP)
|
||
- name: $name
|
||
type: http
|
||
http:
|
||
url: "${HTTP_URL:-http://proxy.example.com:8080}"
|
||
EOF
|
||
if [[ -n "${HTTP_INSECURE:-}" ]]; then
|
||
echo " insecure: $HTTP_INSECURE" >> "$config_file"
|
||
fi
|
||
;;
|
||
esac
|
||
}
|
||
|
||
# 创建新的outbounds节点
|
||
add_new_outbounds_section() {
|
||
local config_file="$1" name="$2" type="$3"
|
||
|
||
echo "" >> "$config_file"
|
||
echo "# 出站规则配置" >> "$config_file"
|
||
generate_direct_yaml_config "$name" >> "$config_file"
|
||
}
|
||
|
||
# 实际应用配置到文件的函数 - 改进版
|
||
apply_outbound_to_config() {
|
||
local name="$1" type="$2"
|
||
|
||
# 检查配置文件是否存在
|
||
if [[ ! -f "$HYSTERIA_CONFIG" ]]; then
|
||
log_error "Hysteria2 配置文件不存在: $HYSTERIA_CONFIG"
|
||
return 1
|
||
fi
|
||
|
||
# 创建安全的临时文件
|
||
local temp_config
|
||
log_info "开始创建临时文件..."
|
||
temp_config=$(create_temp_config)
|
||
if [[ $? -ne 0 ]] || [[ -z "$temp_config" ]]; then
|
||
log_error "创建临时文件失败"
|
||
return 1
|
||
fi
|
||
log_info "临时文件已创建: $temp_config"
|
||
|
||
# 复制原配置并检查结果
|
||
log_info "复制配置文件到临时位置..."
|
||
if ! cp "$HYSTERIA_CONFIG" "$temp_config"; then
|
||
log_error "无法复制配置文件到临时位置"
|
||
log_error "源文件: $HYSTERIA_CONFIG"
|
||
log_error "目标文件: $temp_config"
|
||
rm -f "$temp_config"
|
||
return 1
|
||
fi
|
||
log_info "配置文件复制成功"
|
||
|
||
# 备份功能已移除，直接应用配置
|
||
|
||
# 智能合并配置
|
||
case $type in
|
||
"direct"|"socks5"|"http")
|
||
merge_outbound_config "$temp_config" "$name" "$type"
|
||
;;
|
||
*)
|
||
log_error "不支持的出站类型: $type"
|
||
rm -f "$temp_config"
|
||
return 1
|
||
;;
|
||
esac
|
||
|
||
# 语法验证功能已移除 - 验证结果不准确且没有实际作用
|
||
|
||
# 原子性替换配置文件
|
||
if mv "$temp_config" "$HYSTERIA_CONFIG"; then
|
||
log_success "配置已成功应用到: $HYSTERIA_CONFIG"
|
||
return 0
|
||
else
|
||
log_error "配置应用失败，请检查文件权限和磁盘空间"
|
||
rm -f "$temp_config"
|
||
return 1
|
||
fi
|
||
}
|
||
|
||
# 生成 Direct 类型的 YAML 配置
|
||
generate_direct_yaml_config() {
|
||
local name="$1"
|
||
|
||
echo ""
|
||
echo "# 出站规则 - $name (Direct)"
|
||
echo "outbounds:"
|
||
echo " - name: $name"
|
||
echo " type: direct"
|
||
echo " direct:"
|
||
echo " mode: auto"
|
||
|
||
if [[ -n "${DIRECT_INTERFACE:-}" ]]; then
|
||
echo " bindDevice: \"$DIRECT_INTERFACE\""
|
||
fi
|
||
if [[ -n "${DIRECT_IPV4:-}" ]]; then
|
||
echo " bindIPv4: \"$DIRECT_IPV4\""
|
||
fi
|
||
if [[ -n "${DIRECT_IPV6:-}" ]]; then
|
||
echo " bindIPv6: \"$DIRECT_IPV6\""
|
||
fi
|
||
}
|
||
|
||
# 生成 SOCKS5 类型的 YAML 配置
|
||
generate_socks5_yaml_config() {
|
||
local name="$1"
|
||
|
||
echo ""
|
||
echo "# 出站规则 - $name (SOCKS5)"
|
||
echo "outbounds:"
|
||
echo " - name: $name"
|
||
echo " type: socks5"
|
||
echo " socks5:"
|
||
echo " addr: \"${SOCKS5_ADDR:-proxy.example.com:1080}\""
|
||
|
||
if [[ -n "${SOCKS5_USERNAME:-}" ]]; then
|
||
echo " username: \"$SOCKS5_USERNAME\""
|
||
echo " password: \"$SOCKS5_PASSWORD\""
|
||
fi
|
||
}
|
||
|
||
# 生成 HTTP 类型的 YAML 配置
|
||
generate_http_yaml_config() {
|
||
local name="$1"
|
||
|
||
echo ""
|
||
echo "# 出站规则 - $name (HTTP)"
|
||
echo "outbounds:"
|
||
echo " - name: $name"
|
||
echo " type: http"
|
||
echo " http:"
|
||
echo " url: \"${HTTP_URL:-http://proxy.example.com:8080}\""
|
||
|
||
if [[ -n "${HTTP_INSECURE:-}" ]]; then
|
||
echo " insecure: $HTTP_INSECURE"
|
||
fi
|
||
}
|
||
|
||
# 备份当前配置
|
||
# 备份功能已移除
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
# 修改现有出站配置
|
||
modify_outbound_config() {
|
||
log_info "修改现有出站配置"
|
||
|
||
echo -e "${BLUE}=== 修改出站配置 ===${NC}"
|
||
echo ""
|
||
|
||
# 检查是否有出站配置
|
||
if ! grep -q "^outbounds:" "$HYSTERIA_CONFIG"; then
|
||
echo -e "${YELLOW}当前没有出站配置可修改${NC}"
|
||
echo "请先添加出站规则"
|
||
wait_for_user
|
||
return
|
||
fi
|
||
|
||
# 列出现有的出站配置
|
||
echo -e "${GREEN}当前出站规则：${NC}"
|
||
local outbound_names=($(grep -A 1 "^[[:space:]]*-[[:space:]]*name:" "$HYSTERIA_CONFIG" | grep "name:" | sed 's/.*name:[[:space:]]*//' | tr -d '"'))
|
||
|
||
if [[ ${#outbound_names[@]} -eq 0 ]]; then
|
||
echo -e "${YELLOW}没有找到出站规则名称${NC}"
|
||
wait_for_user
|
||
return
|
||
fi
|
||
|
||
for i in "${!outbound_names[@]}"; do
|
||
echo "$((i+1)). ${outbound_names[$i]}"
|
||
done
|
||
echo ""
|
||
|
||
read -p "请选择要修改的出站规则 [1-${#outbound_names[@]}]: " choice
|
||
|
||
if [[ ! "$choice" =~ ^[0-9]+$ ]] || [[ "$choice" -lt 1 ]] || [[ "$choice" -gt ${#outbound_names[@]} ]]; then
|
||
log_error "无效选择"
|
||
return
|
||
fi
|
||
|
||
local selected_outbound="${outbound_names[$((choice-1))]}"
|
||
|
||
echo -e "${BLUE}修改选项：${NC}"
|
||
echo "1. 修改规则名称"
|
||
echo "2. 修改服务器地址"
|
||
echo "3. 修改用户名"
|
||
echo "4. 修改密码"
|
||
echo "5. 删除此出站规则"
|
||
echo ""
|
||
|
||
read -p "请选择操作 [1-5]: " modify_choice
|
||
|
||
case $modify_choice in
|
||
1) modify_rule_name "$selected_outbound" ;;
|
||
2) modify_server_address "$selected_outbound" ;;
|
||
3) modify_username "$selected_outbound" ;;
|
||
4) modify_password "$selected_outbound" ;;
|
||
5) delete_outbound_rule "$selected_outbound" ;;
|
||
*)
|
||
log_error "无效选择"
|
||
;;
|
||
esac
|
||
}
|
||
|
||
# 删除出站规则
|
||
delete_outbound_rule() {
|
||
local rule_name="$1"
|
||
|
||
echo -e "${RED}[WARNING]${NC} 即将删除出站规则: $rule_name"
|
||
echo -e "${YELLOW}此操作不可逆，请确认操作${NC}"
|
||
echo -n "确认删除？ [y/N]: "
|
||
local confirm
|
||
read -r confirm
|
||
|
||
if [[ ! $confirm =~ ^[Yy]$ ]]; then
|
||
echo -e "${BLUE}[INFO]${NC} 取消删除操作"
|
||
return
|
||
fi
|
||
|
||
echo -e "${BLUE}[INFO]${NC} 开始删除出站规则: $rule_name"
|
||
|
||
# 直接删除，不创建不必要的备份
|
||
|
||
# 创建临时文件
|
||
local temp_config="/tmp/hysteria_delete_temp_$(date +%s).yaml"
|
||
|
||
# 智能删除逻辑：完整删除outbound规则和相关ACL条目
|
||
local in_outbound_rule=false
|
||
local in_acl_section=false
|
||
local acl_base_indent=""
|
||
local delete_acl_inline=false
|
||
|
||
while IFS= read -r line || [[ -n "$line" ]]; do
|
||
local should_keep=true
|
||
|
||
# 1. 删除包含规则名的注释
|
||
if [[ "$line" =~ ^[[:space:]]*#.*${rule_name} ]]; then
|
||
should_keep=false
|
||
fi
|
||
|
||
# 2. 检测outbound规则块
|
||
if [[ "$line" =~ ^[[:space:]]*-[[:space:]]*name:[[:space:]]*${rule_name}[[:space:]]*$ ]]; then
|
||
in_outbound_rule=true
|
||
should_keep=false
|
||
elif [[ "$in_outbound_rule" == true ]]; then
|
||
# 在outbound规则块中，检查是否结束
|
||
if [[ "$line" =~ ^[[:space:]]*-[[:space:]]*name: ]] || [[ "$line" =~ ^[[:space:]]*[a-zA-Z]+:[[:space:]]*$ ]] && [[ ! "$line" =~ ^[[:space:]]*(type|direct|socks5|http|addr|url|mode|username|password|insecure): ]]; then
|
||
in_outbound_rule=false
|
||
should_keep=true
|
||
else
|
||
should_keep=false # 删除outbound规则块内的所有行
|
||
fi
|
||
fi
|
||
|
||
# 3. 检测ACL节点
|
||
if [[ "$line" =~ ^[[:space:]]*acl:[[:space:]]*$ ]]; then
|
||
in_acl_section=true
|
||
acl_base_indent=$(echo "$line" | sed 's/acl:.*//')
|
||
should_keep=true
|
||
elif [[ "$line" =~ ^[[:space:]]*acl: ]]; then
|
||
in_acl_section=true
|
||
acl_base_indent=$(echo "$line" | sed 's/acl:.*//')
|
||
should_keep=true
|
||
elif [[ "$in_acl_section" == true ]]; then
|
||
# 检查是否离开ACL节点
|
||
if [[ "$line" =~ ^[[:space:]]*[a-zA-Z]+:[[:space:]]*$ ]] && [[ ! "$line" =~ ^[[:space:]]*(inline|file): ]]; then
|
||
local line_indent=$(echo "$line" | sed 's/[a-zA-Z].*//')
|
||
if [[ ${#line_indent} -le ${#acl_base_indent} ]]; then
|
||
in_acl_section=false
|
||
should_keep=true
|
||
fi
|
||
fi
|
||
|
||
# 在ACL节点中处理
|
||
if [[ "$in_acl_section" == true ]]; then
|
||
# 检测inline节点开始
|
||
if [[ "$line" =~ ^[[:space:]]*inline:[[:space:]]*$ ]]; then
|
||
delete_acl_inline=false
|
||
should_keep=true
|
||
# 在inline节点中检查包含目标规则名的行
|
||
elif [[ "$line" =~ ${rule_name} ]]; then
|
||
should_keep=false # 删除ACL中包含目标规则名的条目
|
||
elif [[ "$line" =~ ^[[:space:]]*-[[:space:]]*${rule_name}[[:space:]]*$ ]]; then
|
||
should_keep=false # 删除单独的规则名条目
|
||
else
|
||
should_keep=true
|
||
fi
|
||
fi
|
||
fi
|
||
|
||
# 写入保留的行
|
||
if [[ "$should_keep" == true ]]; then
|
||
echo "$line" >> "$temp_config"
|
||
fi
|
||
done < "$HYSTERIA_CONFIG"
|
||
|
||
# 检查删除是否成功
|
||
if grep -q "name: *$rule_name" "$temp_config" 2>/dev/null; then
|
||
echo -e "${RED}[ERROR]${NC} 删除失败，规则仍存在"
|
||
rm -f "$temp_config"
|
||
return 1
|
||
fi
|
||
|
||
# 应用修改
|
||
if mv "$temp_config" "$HYSTERIA_CONFIG" 2>/dev/null; then
|
||
echo -e "${GREEN}[SUCCESS]${NC} 出站规则 '$rule_name' 已删除"
|
||
|
||
# 询问是否重启服务
|
||
echo ""
|
||
read -p "是否重启 Hysteria2 服务以应用配置？ [y/N]: " restart_service
|
||
|
||
if [[ $restart_service =~ ^[Yy]$ ]]; then
|
||
if systemctl restart hysteria-server 2>/dev/null; then
|
||
echo -e "${GREEN}[SUCCESS]${NC} 服务已重启"
|
||
else
|
||
echo -e "${YELLOW}[WARN]${NC} 服务重启失败，请手动重启"
|
||
fi
|
||
fi
|
||
else
|
||
echo -e "${RED}[ERROR]${NC} 配置应用失败"
|
||
return 1
|
||
fi
|
||
|
||
echo ""
|
||
wait_for_user
|
||
}
|
||
|
||
|
||
|
||
# 备份和恢复配置
|
||
# 备份功能已移除
|
||
|
||
# 恢复配置备份
|
||
# 备份功能已移除
|
||
|
||
# 列出配置备份
|
||
# 备份功能已移除
|
||
|
||
# 主出站管理函数
|
||
manage_outbound() {
|
||
init_outbound_manager
|
||
|
||
while true; do
|
||
show_outbound_menu
|
||
|
||
local choice
|
||
read -p "请选择操作 [0-5]: " choice
|
||
|
||
case $choice in
|
||
1) view_outbound_rules ;;
|
||
2) add_outbound_rule_new ;;
|
||
3) apply_outbound_rule ;;
|
||
4) modify_outbound_rule ;;
|
||
5) delete_outbound_rule_new ;;
|
||
0)
|
||
log_info "返回主菜单"
|
||
break
|
||
;;
|
||
*)
|
||
log_error "无效选择，请重新输入"
|
||
wait_for_user
|
||
;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
# 修改规则名称
|
||
modify_rule_name() {
|
||
local old_name="$1"
|
||
|
||
echo -e "${BLUE}=== 修改规则名称 ===${NC}"
|
||
echo "当前规则名称: ${CYAN}$old_name${NC}"
|
||
echo ""
|
||
|
||
read -p "请输入新的规则名称: " new_name
|
||
|
||
if [[ -z "$new_name" ]]; then
|
||
log_error "规则名称不能为空"
|
||
return
|
||
fi
|
||
|
||
# 检查新名称是否已存在
|
||
if grep -q "name: *$new_name" "$HYSTERIA_CONFIG" 2>/dev/null; then
|
||
log_error "规则名称 '$new_name' 已存在"
|
||
return
|
||
fi
|
||
|
||
# 执行替换
|
||
if sed -i.bak "s/name: *$old_name/name: $new_name/g" "$HYSTERIA_CONFIG" 2>/dev/null; then
|
||
# 同时更新ACL中的引用
|
||
sed -i.bak "s/- $old_name/- $new_name/g" "$HYSTERIA_CONFIG" 2>/dev/null
|
||
rm -f "$HYSTERIA_CONFIG.bak"
|
||
|
||
log_success "规则名称已更新: $old_name → $new_name"
|
||
ask_restart_service
|
||
else
|
||
log_error "修改失败"
|
||
fi
|
||
}
|
||
|
||
# 修改服务器地址
|
||
modify_server_address() {
|
||
local rule_name="$1"
|
||
|
||
echo -e "${BLUE}=== 修改服务器地址 ===${NC}"
|
||
echo "规则名称: ${CYAN}$rule_name${NC}"
|
||
echo ""
|
||
|
||
# 获取当前地址
|
||
local current_addr=$(sed -n "/- name: $rule_name/,/^ - name:/p" "$HYSTERIA_CONFIG" | grep -E "(addr|url):" | head -1 | sed 's/.*: *//')
|
||
if [[ -n "$current_addr" ]]; then
|
||
echo "当前地址: ${YELLOW}$current_addr${NC}"
|
||
fi
|
||
|
||
read -p "请输入新的服务器地址: " new_addr
|
||
|
||
if [[ -z "$new_addr" ]]; then
|
||
log_error "服务器地址不能为空"
|
||
return
|
||
fi
|
||
|
||
# 创建临时文件进行修改
|
||
local temp_config="/tmp/hysteria_modify_addr_$(date +%s).yaml"
|
||
local in_target_rule=false
|
||
|
||
while IFS= read -r line || [[ -n "$line" ]]; do
|
||
if [[ "$line" =~ ^[[:space:]]*-[[:space:]]*name:[[:space:]]*${rule_name}[[:space:]]*$ ]]; then
|
||
in_target_rule=true
|
||
echo "$line" >> "$temp_config"
|
||
elif [[ "$in_target_rule" == true ]]; then
|
||
if [[ "$line" =~ ^[[:space:]]*-[[:space:]]*name: ]] || [[ "$line" =~ ^[[:space:]]*[a-zA-Z]+:[[:space:]]*$ ]] && [[ ! "$line" =~ ^[[:space:]]*(type|direct|socks5|http|addr|url|mode|username|password|insecure): ]]; then
|
||
in_target_rule=false
|
||
echo "$line" >> "$temp_config"
|
||
elif [[ "$line" =~ ^[[:space:]]*(addr|url):[[:space:]]* ]]; then
|
||
local indent=$(echo "$line" | sed 's/[a-zA-Z].*//')
|
||
if [[ "$line" =~ addr: ]]; then
|
||
echo "${indent}addr: $new_addr" >> "$temp_config"
|
||
else
|
||
echo "${indent}url: $new_addr" >> "$temp_config"
|
||
fi
|
||
else
|
||
echo "$line" >> "$temp_config"
|
||
fi
|
||
else
|
||
echo "$line" >> "$temp_config"
|
||
fi
|
||
done < "$HYSTERIA_CONFIG"
|
||
|
||
if mv "$temp_config" "$HYSTERIA_CONFIG" 2>/dev/null; then
|
||
log_success "服务器地址已更新"
|
||
ask_restart_service
|
||
else
|
||
log_error "修改失败"
|
||
rm -f "$temp_config"
|
||
fi
|
||
}
|
||
|
||
# 修改用户名
|
||
modify_username() {
|
||
local rule_name="$1"
|
||
|
||
echo -e "${BLUE}=== 修改用户名 ===${NC}"
|
||
echo "规则名称: ${CYAN}$rule_name${NC}"
|
||
echo ""
|
||
|
||
# 获取当前用户名
|
||
local current_username=$(sed -n "/- name: $rule_name/,/^ - name:/p" "$HYSTERIA_CONFIG" | grep "username:" | sed 's/.*username: *//' | tr -d '"')
|
||
if [[ -n "$current_username" ]]; then
|
||
echo "当前用户名: ${YELLOW}$current_username${NC}"
|
||
fi
|
||
|
||
read -p "请输入新的用户名 (留空则删除): " new_username
|
||
|
||
# 修改用户名
|
||
modify_config_field "$rule_name" "username" "$new_username"
|
||
}
|
||
|
||
# 修改密码
|
||
modify_password() {
|
||
local rule_name="$1"
|
||
|
||
echo -e "${BLUE}=== 修改密码 ===${NC}"
|
||
echo "规则名称: ${CYAN}$rule_name${NC}"
|
||
echo ""
|
||
|
||
read -s -p "请输入新密码 (留空则删除): " new_password
|
||
echo ""
|
||
|
||
# 修改密码
|
||
modify_config_field "$rule_name" "password" "$new_password"
|
||
}
|
||
|
||
# 通用配置字段修改函数
|
||
modify_config_field() {
|
||
local rule_name="$1"
|
||
local field_name="$2"
|
||
local new_value="$3"
|
||
|
||
local temp_config="/tmp/hysteria_modify_${field_name}_$(date +%s).yaml"
|
||
local in_target_rule=false
|
||
local field_found=false
|
||
|
||
while IFS= read -r line || [[ -n "$line" ]]; do
|
||
if [[ "$line" =~ ^[[:space:]]*-[[:space:]]*name:[[:space:]]*${rule_name}[[:space:]]*$ ]]; then
|
||
in_target_rule=true
|
||
echo "$line" >> "$temp_config"
|
||
elif [[ "$in_target_rule" == true ]]; then
|
||
if [[ "$line" =~ ^[[:space:]]*-[[:space:]]*name: ]] || [[ "$line" =~ ^[[:space:]]*[a-zA-Z]+:[[:space:]]*$ ]] && [[ ! "$line" =~ ^[[:space:]]*(type|direct|socks5|http|addr|url|mode|username|password|insecure): ]]; then
|
||
# 如果没找到字段且有新值，在规则结束前插入
|
||
if [[ "$field_found" == false && -n "$new_value" ]]; then
|
||
local base_indent=" " # 假设基础缩进
|
||
echo "${base_indent}${field_name}: $new_value" >> "$temp_config"
|
||
fi
|
||
in_target_rule=false
|
||
echo "$line" >> "$temp_config"
|
||
elif [[ "$line" =~ ^[[:space:]]*${field_name}:[[:space:]]* ]]; then
|
||
field_found=true
|
||
if [[ -n "$new_value" ]]; then
|
||
local indent=$(echo "$line" | sed 's/[a-zA-Z].*//')
|
||
echo "${indent}${field_name}: $new_value" >> "$temp_config"
|
||
fi
|
||
# 如果新值为空，则跳过此行（删除字段）
|
||
else
|
||
echo "$line" >> "$temp_config"
|
||
fi
|
||
else
|
||
echo "$line" >> "$temp_config"
|
||
fi
|
||
done < "$HYSTERIA_CONFIG"
|
||
|
||
if mv "$temp_config" "$HYSTERIA_CONFIG" 2>/dev/null; then
|
||
if [[ -n "$new_value" ]]; then
|
||
log_success "${field_name} 已更新"
|
||
else
|
||
log_success "${field_name} 已删除"
|
||
fi
|
||
ask_restart_service
|
||
else
|
||
log_error "修改失败"
|
||
rm -f "$temp_config"
|
||
fi
|
||
}
|
||
|
||
# 询问是否重启服务
|
||
ask_restart_service() {
|
||
echo ""
|
||
read -p "是否重启 Hysteria2 服务以应用配置？ [y/N]: " restart_choice
|
||
|
||
if [[ $restart_choice =~ ^[Yy]$ ]]; then
|
||
if systemctl restart hysteria-server 2>/dev/null; then
|
||
log_success "服务已重启"
|
||
else
|
||
log_error "服务重启失败，请手动重启"
|
||
fi
|
||
fi
|
||
}
|
||
|
||
# ===== 新的核心功能实现 =====
|
||
|
||
# 规则库文件路径
|
||
readonly RULES_DIR="/etc/hysteria/outbound-rules"
|
||
readonly RULES_LIBRARY="$RULES_DIR/rules-library.yaml"
|
||
readonly RULES_STATE="$RULES_DIR/rules-state.yaml"
|
||
|
||
# 初始化规则库
|
||
init_rules_library() {
|
||
if [[ ! -d "$RULES_DIR" ]]; then
|
||
mkdir -p "$RULES_DIR" 2>/dev/null || {
|
||
log_error "无法创建规则库目录，将使用临时目录"
|
||
RULES_DIR="/tmp/hysteria-rules"
|
||
RULES_LIBRARY="$RULES_DIR/rules-library.yaml"
|
||
RULES_STATE="$RULES_DIR/rules-state.yaml"
|
||
mkdir -p "$RULES_DIR"
|
||
}
|
||
fi
|
||
|
||
if [[ ! -f "$RULES_LIBRARY" ]]; then
|
||
cat > "$RULES_LIBRARY" << 'EOF'
|
||
# Hysteria2 出站规则库
|
||
rules: {}
|
||
version: "1.0"
|
||
last_modified: ""
|
||
EOF
|
||
fi
|
||
|
||
if [[ ! -f "$RULES_STATE" ]]; then
|
||
cat > "$RULES_STATE" << 'EOF'
|
||
# Hysteria2 出站规则状态
|
||
applied_rules: []
|
||
last_sync: ""
|
||
EOF
|
||
fi
|
||
}
|
||
|
||
# 1. 查看出站规则
|
||
view_outbound_rules() {
|
||
init_rules_library
|
||
|
||
echo -e "${BLUE}=== 出站规则总览 ===${NC}"
|
||
echo ""
|
||
|
||
# 显示配置文件中的规则
|
||
echo -e "${GREEN}📄 配置文件中的规则：${NC}"
|
||
if [[ -f "$HYSTERIA_CONFIG" ]] && grep -q "^[[:space:]]*outbounds:" "$HYSTERIA_CONFIG"; then
|
||
local rule_count=0
|
||
while IFS= read -r line; do
|
||
if [[ "$line" =~ ^[[:space:]]*-[[:space:]]*name:[[:space:]]*(.+)$ ]]; then
|
||
local rule_name="${BASH_REMATCH[1]}"
|
||
rule_name=$(echo "$rule_name" | tr -d '"' | xargs)
|
||
((rule_count++))
|
||
echo " $rule_count. $rule_name ✅"
|
||
fi
|
||
done < <(sed -n '/^[[:space:]]*outbounds:/,/^[[:space:]]*[a-zA-Z]/p' "$HYSTERIA_CONFIG" | head -n -1)
|
||
|
||
if [[ $rule_count -eq 0 ]]; then
|
||
echo " (无规则)"
|
||
fi
|
||
else
|
||
echo " (无规则)"
|
||
fi
|
||
|
||
echo ""
|
||
|
||
# 显示规则库中的规则
|
||
echo -e "${CYAN}📚 规则库中的规则：${NC}"
|
||
if [[ -f "$RULES_LIBRARY" ]] && grep -q "rules:" "$RULES_LIBRARY"; then
|
||
local lib_count=0
|
||
# 简单解析YAML中的规则
|
||
while IFS= read -r line; do
|
||
if [[ "$line" =~ ^[[:space:]]*([a-zA-Z_][a-zA-Z0-9_]*):[[:space:]]*$ ]]; then
|
||
local rule_name="${BASH_REMATCH[1]}"
|
||
if [[ "$rule_name" != "rules" && "$rule_name" != "version" && "$rule_name" != "last_modified" ]]; then
|
||
((lib_count++))
|
||
# 检查是否已应用
|
||
local status="❌ 未应用"
|
||
if grep -q "- $rule_name" "$RULES_STATE" 2>/dev/null; then
|
||
status="✅ 已应用"
|
||
fi
|
||
echo " $lib_count. $rule_name $status"
|
||
fi
|
||
fi
|
||
done < "$RULES_LIBRARY"
|
||
|
||
if [[ $lib_count -eq 0 ]]; then
|
||
echo " (无规则)"
|
||
fi
|
||
else
|
||
echo " (无规则)"
|
||
fi
|
||
|
||
echo ""
|
||
wait_for_user
|
||
}
|
||
|
||
# 2. 新增出站规则
|
||
add_outbound_rule_new() {
|
||
init_rules_library
|
||
|
||
echo -e "${BLUE}=== 新增出站规则 ===${NC}"
|
||
echo ""
|
||
|
||
# 获取规则名称
|
||
local rule_name
|
||
while true; do
|
||
read -p "规则名称 (字母、数字、下划线): " rule_name
|
||
|
||
if [[ -z "$rule_name" ]]; then
|
||
echo -e "${RED}规则名称不能为空${NC}"
|
||
continue
|
||
fi
|
||
|
||
if [[ ! "$rule_name" =~ ^[a-zA-Z_][a-zA-Z0-9_]*$ ]]; then
|
||
echo -e "${RED}规则名称只能包含字母、数字和下划线${NC}"
|
||
continue
|
||
fi
|
||
|
||
# 检查是否已存在
|
||
if grep -q "^[[:space:]]*$rule_name:[[:space:]]*$" "$RULES_LIBRARY" 2>/dev/null; then
|
||
echo -e "${RED}规则名称已存在${NC}"
|
||
continue
|
||
fi
|
||
|
||
break
|
||
done
|
||
|
||
# 获取规则描述
|
||
read -p "规则描述: " rule_desc
|
||
if [[ -z "$rule_desc" ]]; then
|
||
rule_desc="$rule_name 出站规则"
|
||
fi
|
||
|
||
# 选择规则类型
|
||
echo ""
|
||
echo "选择规则类型："
|
||
echo "1. Direct (直连)"
|
||
echo "2. SOCKS5 代理"
|
||
echo "3. HTTP/HTTPS 代理"
|
||
echo ""
|
||
|
||
local rule_type=""
|
||
local type_choice
|
||
read -p "请选择 [1-3]: " type_choice
|
||
|
||
case $type_choice in
|
||
1) rule_type="direct" ;;
|
||
2) rule_type="socks5" ;;
|
||
3) rule_type="http" ;;
|
||
*)
|
||
log_error "无效选择"
|
||
return 1
|
||
;;
|
||
esac
|
||
|
||
# 收集配置
|
||
local config_data=""
|
||
case $rule_type in
|
||
"direct")
|
||
echo ""
|
||
echo -e "${BLUE}配置 Direct 直连参数${NC}"
|
||
read -p "绑定网卡 (可选): " interface
|
||
read -p "绑定IPv4 (可选): " ipv4
|
||
read -p "绑定IPv6 (可选): " ipv6
|
||
|
||
config_data="mode: auto"
|
||
if [[ -n "$interface" ]]; then
|
||
config_data+="\nbindDevice: \"$interface\""
|
||
fi
|
||
if [[ -n "$ipv4" ]]; then
|
||
config_data+="\nbindIPv4: \"$ipv4\""
|
||
fi
|
||
if [[ -n "$ipv6" ]]; then
|
||
config_data+="\nbindIPv6: \"$ipv6\""
|
||
fi
|
||
;;
|
||
"socks5")
|
||
echo ""
|
||
echo -e "${BLUE}配置 SOCKS5 代理参数${NC}"
|
||
read -p "代理地址:端口: " addr
|
||
if [[ -z "$addr" ]]; then
|
||
log_error "代理地址不能为空"
|
||
return 1
|
||
fi
|
||
|
||
config_data="addr: \"$addr\""
|
||
|
||
read -p "需要认证？ [y/N]: " need_auth
|
||
if [[ $need_auth =~ ^[Yy]$ ]]; then
|
||
read -p "用户名: " username
|
||
read -s -p "密码: " password
|
||
echo ""
|
||
if [[ -n "$username" ]]; then
|
||
config_data+="\nusername: \"$username\""
|
||
config_data+="\npassword: \"$password\""
|
||
fi
|
||
fi
|
||
;;
|
||
"http")
|
||
echo ""
|
||
echo -e "${BLUE}配置 HTTP/HTTPS 代理参数${NC}"
|
||
read -p "代理URL: " url
|
||
if [[ -z "$url" ]]; then
|
||
log_error "代理URL不能为空"
|
||
return 1
|
||
fi
|
||
|
||
config_data="url: \"$url\""
|
||
|
||
if [[ "$url" =~ ^https:// ]]; then
|
||
read -p "跳过TLS验证？ [y/N]: " skip_tls
|
||
if [[ $skip_tls =~ ^[Yy]$ ]]; then
|
||
config_data+="\ninsecure: true"
|
||
fi
|
||
fi
|
||
;;
|
||
esac
|
||
|
||
# 保存到规则库
|
||
local temp_file="/tmp/rules_add_$$_$(date +%s).yaml"
|
||
|
||
# 在rules节点下添加新规则
|
||
awk -v rule="$rule_name" -v type="$rule_type" -v desc="$rule_desc" -v config="$config_data" '
|
||
/^rules:/ {
|
||
print $0
|
||
print " " rule ":"
|
||
print " type: " type
|
||
print " description: \"" desc "\""
|
||
print " config:"
|
||
# 处理配置数据，添加正确的缩进
|
||
n = split(config, lines, "\\n")
|
||
for (i = 1; i <= n; i++) {
|
||
if (lines[i] != "") {
|
||
print " " lines[i]
|
||
}
|
||
}
|
||
print " created_at: \"" strftime("%Y-%m-%dT%H:%M:%SZ") "\""
|
||
print " updated_at: \"" strftime("%Y-%m-%dT%H:%M:%SZ") "\""
|
||
next
|
||
}
|
||
/^last_modified:/ {
|
||
print "last_modified: \"" strftime("%Y-%m-%dT%H:%M:%SZ") "\""
|
||
next
|
||
}
|
||
{ print }
|
||
' "$RULES_LIBRARY" > "$temp_file"
|
||
|
||
if mv "$temp_file" "$RULES_LIBRARY"; then
|
||
log_success "规则 '$rule_name' 已添加到规则库"
|
||
|
||
echo ""
|
||
read -p "是否立即应用此规则？ [y/N]: " apply_now
|
||
if [[ $apply_now =~ ^[Yy]$ ]]; then
|
||
apply_rule_to_config_simple "$rule_name"
|
||
fi
|
||
else
|
||
log_error "规则保存失败"
|
||
rm -f "$temp_file"
|
||
return 1
|
||
fi
|
||
|
||
wait_for_user
|
||
}
|
||
|
||
# 3. 应用规则到配置
|
||
apply_outbound_rule() {
|
||
init_rules_library
|
||
|
||
echo -e "${BLUE}=== 应用规则到配置 ===${NC}"
|
||
echo ""
|
||
|
||
# 列出规则库中未应用的规则
|
||
local unapplied_rules=()
|
||
local rule_count=0
|
||
|
||
while IFS= read -r line; do
|
||
if [[ "$line" =~ ^[[:space:]]*([a-zA-Z_][a-zA-Z0-9_]*):[[:space:]]*$ ]]; then
|
||
local rule_name="${BASH_REMATCH[1]}"
|
||
if [[ "$rule_name" != "rules" && "$rule_name" != "version" && "$rule_name" != "last_modified" ]]; then
|
||
# 检查是否已应用
|
||
if ! grep -q "- $rule_name" "$RULES_STATE" 2>/dev/null; then
|
||
unapplied_rules+=("$rule_name")
|
||
((rule_count++))
|
||
echo "$rule_count. $rule_name"
|
||
fi
|
||
fi
|
||
fi
|
||
done < "$RULES_LIBRARY"
|
||
|
||
if [[ ${#unapplied_rules[@]} -eq 0 ]]; then
|
||
echo -e "${YELLOW}没有可应用的规则${NC}"
|
||
wait_for_user
|
||
return
|
||
fi
|
||
|
||
echo ""
|
||
read -p "请选择要应用的规则 [1-$rule_count]: " choice
|
||
|
||
if [[ ! "$choice" =~ ^[0-9]+$ ]] || [[ "$choice" -lt 1 ]] || [[ "$choice" -gt $rule_count ]]; then
|
||
log_error "无效选择"
|
||
return 1
|
||
fi
|
||
|
||
local selected_rule="${unapplied_rules[$((choice-1))]}"
|
||
apply_rule_to_config_simple "$selected_rule"
|
||
|
||
wait_for_user
|
||
}
|
||
|
||
# 应用规则到配置的简化实现
|
||
apply_rule_to_config_simple() {
|
||
local rule_name="$1"
|
||
|
||
# 从规则库提取规则信息
|
||
local rule_type=$(awk -v rule="$rule_name" '
|
||
BEGIN { in_rule = 0 }
|
||
$0 ~ "^[[:space:]]*" rule ":[[:space:]]*$" { in_rule = 1; next }
|
||
in_rule && /^[[:space:]]*type:/ { gsub(/^[[:space:]]*type:[[:space:]]*/, ""); print $0; exit }
|
||
in_rule && /^[[:space:]]*[a-zA-Z_][a-zA-Z0-9_]*:[[:space:]]*$/ { in_rule = 0 }
|
||
' "$RULES_LIBRARY")
|
||
|
||
if [[ -z "$rule_type" ]]; then
|
||
log_error "无法获取规则类型"
|
||
return 1
|
||
fi
|
||
|
||
# 提取配置
|
||
local config_section=$(awk -v rule="$rule_name" '
|
||
BEGIN { in_rule = 0; in_config = 0 }
|
||
$0 ~ "^[[:space:]]*" rule ":[[:space:]]*$" { in_rule = 1; next }
|
||
in_rule && /^[[:space:]]*config:[[:space:]]*$/ { in_config = 1; next }
|
||
in_rule && in_config && /^[[:space:]]*[a-zA-Z_][a-zA-Z0-9_]*:[[:space:]]*$/ { in_config = 0; in_rule = 0 }
|
||
in_rule && /^[[:space:]]*[a-zA-Z_][a-zA-Z0-9_]*:[[:space:]]*$/ { in_rule = 0 }
|
||
in_config { print $0 }
|
||
' "$RULES_LIBRARY")
|
||
|
||
# 备份配置
|
||
if [[ -f "$HYSTERIA_CONFIG" ]]; then
|
||
cp "$HYSTERIA_CONFIG" "${HYSTERIA_CONFIG}.bak.$(date +%s)" 2>/dev/null
|
||
fi
|
||
|
||
# 应用到配置文件
|
||
local temp_config="/tmp/hysteria_apply_$$_$(date +%s).yaml"
|
||
|
||
if [[ -f "$HYSTERIA_CONFIG" ]] && grep -q "^[[:space:]]*outbounds:" "$HYSTERIA_CONFIG"; then
|
||
# 插入到现有outbounds
|
||
awk -v rule="$rule_name" -v type="$rule_type" -v config="$config_section" '
|
||
/^[[:space:]]*outbounds:/ {
|
||
print $0
|
||
print ""
|
||
print " # 规则: " rule
|
||
print " - name: " rule
|
||
print " type: " type
|
||
print " " type ":"
|
||
# 处理配置行
|
||
n = split(config, lines, "\n")
|
||
for (i = 1; i <= n; i++) {
|
||
if (lines[i] != "") {
|
||
print " " lines[i]
|
||
}
|
||
}
|
||
in_outbounds = 1
|
||
next
|
||
}
|
||
in_outbounds && /^[[:space:]]*[a-zA-Z]+:[[:space:]]*$/ && !/^[[:space:]]*-/ {
|
||
in_outbounds = 0
|
||
}
|
||
{ print }
|
||
' "$HYSTERIA_CONFIG" > "$temp_config"
|
||
else
|
||
# 创建新的outbounds节点
|
||
if [[ -f "$HYSTERIA_CONFIG" ]]; then
|
||
cp "$HYSTERIA_CONFIG" "$temp_config"
|
||
else
|
||
echo "# Hysteria2 配置文件" > "$temp_config"
|
||
fi
|
||
|
||
cat >> "$temp_config" << EOF
|
||
|
||
# 出站规则配置
|
||
outbounds:
|
||
# 规则: $rule_name
|
||
- name: $rule_name
|
||
type: $rule_type
|
||
$rule_type:
|
||
$(echo "$config_section" | sed 's/^/ /')
|
||
EOF
|
||
fi
|
||
|
||
# 应用配置
|
||
if mv "$temp_config" "$HYSTERIA_CONFIG"; then
|
||
# 更新状态
|
||
if ! grep -q "- $rule_name" "$RULES_STATE" 2>/dev/null; then
|
||
awk -v rule="$rule_name" '
|
||
/^applied_rules:/ {
|
||
print $0
|
||
print " - " rule
|
||
next
|
||
}
|
||
/^last_sync:/ {
|
||
print "last_sync: \"" strftime("%Y-%m-%dT%H:%M:%SZ") "\""
|
||
next
|
||
}
|
||
{ print }
|
||
' "$RULES_STATE" > "${RULES_STATE}.tmp" && mv "${RULES_STATE}.tmp" "$RULES_STATE"
|
||
fi
|
||
|
||
log_success "规则 '$rule_name' 已应用到配置"
|
||
|
||
read -p "是否重启 Hysteria2 服务？ [y/N]: " restart_service
|
||
if [[ $restart_service =~ ^[Yy]$ ]]; then
|
||
if systemctl restart hysteria-server 2>/dev/null; then
|
||
log_success "服务已重启"
|
||
else
|
||
log_warn "服务重启失败，请手动重启"
|
||
fi
|
||
fi
|
||
else
|
||
log_error "配置应用失败"
|
||
rm -f "$temp_config"
|
||
return 1
|
||
fi
|
||
}
|
||
|
||
# 4. 修改出站规则
|
||
modify_outbound_rule() {
|
||
init_rules_library
|
||
|
||
echo -e "${BLUE}=== 修改出站规则 ===${NC}"
|
||
echo ""
|
||
|
||
# 列出规则库中的规则
|
||
local rules=()
|
||
local rule_count=0
|
||
|
||
while IFS= read -r line; do
|
||
if [[ "$line" =~ ^[[:space:]]*([a-zA-Z_][a-zA-Z0-9_]*):[[:space:]]*$ ]]; then
|
||
local rule_name="${BASH_REMATCH[1]}"
|
||
if [[ "$rule_name" != "rules" && "$rule_name" != "version" && "$rule_name" != "last_modified" ]]; then
|
||
rules+=("$rule_name")
|
||
((rule_count++))
|
||
echo "$rule_count. $rule_name"
|
||
fi
|
||
fi
|
||
done < "$RULES_LIBRARY"
|
||
|
||
if [[ ${#rules[@]} -eq 0 ]]; then
|
||
echo -e "${YELLOW}没有可修改的规则${NC}"
|
||
wait_for_user
|
||
return
|
||
fi
|
||
|
||
echo ""
|
||
read -p "请选择要修改的规则 [1-$rule_count]: " choice
|
||
|
||
if [[ ! "$choice" =~ ^[0-9]+$ ]] || [[ "$choice" -lt 1 ]] || [[ "$choice" -gt $rule_count ]]; then
|
||
log_error "无效选择"
|
||
return 1
|
||
fi
|
||
|
||
local selected_rule="${rules[$((choice-1))]}"
|
||
|
||
echo ""
|
||
echo "修改选项："
|
||
echo "1. 修改描述"
|
||
echo "2. 修改配置参数"
|
||
echo ""
|
||
|
||
read -p "请选择操作 [1-2]: " modify_choice
|
||
|
||
case $modify_choice in
|
||
1)
|
||
# 获取当前描述
|
||
local current_desc=$(awk -v rule="$selected_rule" '
|
||
BEGIN { in_rule = 0 }
|
||
$0 ~ "^[[:space:]]*" rule ":[[:space:]]*$" { in_rule = 1; next }
|
||
in_rule && /^[[:space:]]*description:/ {
|
||
gsub(/^[[:space:]]*description:[[:space:]]*"?/, "");
|
||
gsub(/"?[[:space:]]*$/, "");
|
||
print $0;
|
||
exit
|
||
}
|
||
in_rule && /^[[:space:]]*[a-zA-Z_][a-zA-Z0-9_]*:[[:space:]]*$/ { in_rule = 0 }
|
||
' "$RULES_LIBRARY")
|
||
|
||
echo "当前描述: $current_desc"
|
||
read -p "新的描述: " new_desc
|
||
|
||
if [[ -n "$new_desc" ]]; then
|
||
# 更新描述
|
||
awk -v rule="$selected_rule" -v desc="$new_desc" '
|
||
BEGIN { in_rule = 0 }
|
||
$0 ~ "^[[:space:]]*" rule ":[[:space:]]*$" { in_rule = 1; print; next }
|
||
in_rule && /^[[:space:]]*description:/ {
|
||
gsub(/^[[:space:]]*/, "")
|
||
indent = substr($0, 1, match($0, /[^ ]/) - 1)
|
||
print indent "description: \"" desc "\""
|
||
next
|
||
}
|
||
in_rule && /^[[:space:]]*[a-zA-Z_][a-zA-Z0-9_]*:[[:space:]]*$/ { in_rule = 0 }
|
||
{ print }
|
||
' "$RULES_LIBRARY" > "${RULES_LIBRARY}.tmp" && mv "${RULES_LIBRARY}.tmp" "$RULES_LIBRARY"
|
||
|
||
log_success "描述已更新"
|
||
fi
|
||
;;
|
||
2)
|
||
echo -e "${YELLOW}配置参数修改功能开发中...${NC}"
|
||
echo "请使用删除规则后重新创建的方式进行修改"
|
||
;;
|
||
*)
|
||
log_error "无效选择"
|
||
;;
|
||
esac
|
||
|
||
wait_for_user
|
||
}
|
||
|
||
# 5. 删除出站规则
|
||
delete_outbound_rule_new() {
|
||
init_rules_library
|
||
|
||
echo -e "${BLUE}=== 删除出站规则 ===${NC}"
|
||
echo ""
|
||
|
||
# 列出规则库中的规则
|
||
local rules=()
|
||
local rule_count=0
|
||
|
||
while IFS= read -r line; do
|
||
if [[ "$line" =~ ^[[:space:]]*([a-zA-Z_][a-zA-Z0-9_]*):[[:space:]]*$ ]]; then
|
||
local rule_name="${BASH_REMATCH[1]}"
|
||
if [[ "$rule_name" != "rules" && "$rule_name" != "version" && "$rule_name" != "last_modified" ]]; then
|
||
rules+=("$rule_name")
|
||
((rule_count++))
|
||
|
||
# 检查是否已应用
|
||
local status="❌ 未应用"
|
||
if grep -q "- $rule_name" "$RULES_STATE" 2>/dev/null; then
|
||
status="✅ 已应用"
|
||
fi
|
||
echo "$rule_count. $rule_name $status"
|
||
fi
|
||
fi
|
||
done < "$RULES_LIBRARY"
|
||
|
||
if [[ ${#rules[@]} -eq 0 ]]; then
|
||
echo -e "${YELLOW}没有可删除的规则${NC}"
|
||
wait_for_user
|
||
return
|
||
fi
|
||
|
||
echo ""
|
||
read -p "请选择要删除的规则 [1-$rule_count]: " choice
|
||
|
||
if [[ ! "$choice" =~ ^[0-9]+$ ]] || [[ "$choice" -lt 1 ]] || [[ "$choice" -gt $rule_count ]]; then
|
||
log_error "无效选择"
|
||
return 1
|
||
fi
|
||
|
||
local selected_rule="${rules[$((choice-1))]}"
|
||
|
||
echo ""
|
||
echo -e "${RED}⚠️ 警告: 即将删除规则 '$selected_rule'${NC}"
|
||
|
||
# 检查是否已应用
|
||
if grep -q "- $selected_rule" "$RULES_STATE" 2>/dev/null; then
|
||
echo -e "${YELLOW}此规则当前已应用，删除将同时从配置文件中移除${NC}"
|
||
fi
|
||
|
||
echo ""
|
||
read -p "确认删除？ [y/N]: " confirm
|
||
|
||
if [[ ! $confirm =~ ^[Yy]$ ]]; then
|
||
echo -e "${BLUE}已取消删除操作${NC}"
|
||
return 0
|
||
fi
|
||
|
||
# 如果已应用，先从配置中移除
|
||
if grep -q "- $selected_rule" "$RULES_STATE" 2>/dev/null; then
|
||
echo "正在从配置文件中移除..."
|
||
|
||
# 从配置文件中删除
|
||
if [[ -f "$HYSTERIA_CONFIG" ]]; then
|
||
local temp_config="/tmp/hysteria_delete_$$_$(date +%s).yaml"
|
||
local in_target_rule=false
|
||
|
||
while IFS= read -r line || [[ -n "$line" ]]; do
|
||
if [[ "$line" =~ ^[[:space:]]*-[[:space:]]*name:[[:space:]]*${selected_rule}[[:space:]]*$ ]]; then
|
||
in_target_rule=true
|
||
continue
|
||
elif [[ "$in_target_rule" == true ]]; then
|
||
if [[ "$line" =~ ^[[:space:]]*-[[:space:]]*name: ]] || [[ "$line" =~ ^[[:space:]]*[a-zA-Z]+:[[:space:]]*$ ]] && [[ ! "$line" =~ ^[[:space:]]*(type|direct|socks5|http|addr|url|mode|username|password|insecure): ]]; then
|
||
in_target_rule=false
|
||
echo "$line" >> "$temp_config"
|
||
fi
|
||
# 在规则中的行都跳过
|
||
else
|
||
echo "$line" >> "$temp_config"
|
||
fi
|
||
done < "$HYSTERIA_CONFIG"
|
||
|
||
mv "$temp_config" "$HYSTERIA_CONFIG"
|
||
fi
|
||
|
||
# 从状态文件中移除
|
||
awk -v rule="$selected_rule" '
|
||
$0 == " - " rule { next }
|
||
{ print }
|
||
' "$RULES_STATE" > "${RULES_STATE}.tmp" && mv "${RULES_STATE}.tmp" "$RULES_STATE"
|
||
fi
|
||
|
||
# 从规则库中删除
|
||
local temp_library="/tmp/rules_delete_$$_$(date +%s).yaml"
|
||
local in_target_rule=false
|
||
local rule_indent=""
|
||
|
||
while IFS= read -r line || [[ -n "$line" ]]; do
|
||
if [[ "$line" =~ ^[[:space:]]*${selected_rule}:[[:space:]]*$ ]]; then
|
||
in_target_rule=true
|
||
rule_indent=$(echo "$line" | sed 's/[a-zA-Z].*//')
|
||
continue
|
||
elif [[ "$in_target_rule" == true ]]; then
|
||
# 检查是否离开规则
|
||
if [[ "$line" =~ ^[[:space:]]*[a-zA-Z_][a-zA-Z0-9_]*:[[:space:]]*$ ]]; then
|
||
local line_indent=$(echo "$line" | sed 's/[a-zA-Z].*//')
|
||
if [[ ${#line_indent} -le ${#rule_indent} ]]; then
|
||
in_target_rule=false
|
||
echo "$line" >> "$temp_library"
|
||
fi
|
||
elif [[ "$line" =~ ^[[:space:]]*[a-zA-Z]+:[[:space:]]*$ ]] && [[ ! "$line" =~ ^[[:space:]]*(type|description|config|created_at|updated_at): ]]; then
|
||
in_target_rule=false
|
||
echo "$line" >> "$temp_library"
|
||
fi
|
||
# 在规则中的行都跳过
|
||
else
|
||
echo "$line" >> "$temp_library"
|
||
fi
|
||
done < "$RULES_LIBRARY"
|
||
|
||
if mv "$temp_library" "$RULES_LIBRARY"; then
|
||
log_success "规则 '$selected_rule' 已删除"
|
||
|
||
read -p "是否重启 Hysteria2 服务？ [y/N]: " restart_service
|
||
if [[ $restart_service =~ ^[Yy]$ ]]; then
|
||
if systemctl restart hysteria-server 2>/dev/null; then
|
||
log_success "服务已重启"
|
||
else
|
||
log_warn "服务重启失败，请手动重启"
|
||
fi
|
||
fi
|
||
else
|
||
log_error "规则删除失败"
|
||
rm -f "$temp_library"
|
||
return 1
|
||
fi
|
||
|
||
wait_for_user
|
||
}
|
||
|
||
# 如果脚本被直接执行
|
||
if [[ "${BASH_SOURCE[0]}" == "${0}" ]]; then
|
||
manage_outbound
|
||
fi |