sindricn
1303 lines
36 KiB
Bash
1303 lines
36 KiB
Bash
#!/bin/bash
|
||
|
||
# Hysteria2 出站规则管理模块
|
||
# 用于配置和管理 Hysteria2 的出站规则
|
||
|
||
# 适度的错误处理
|
||
set -uo pipefail
|
||
|
||
# 加载公共库
|
||
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||
if [[ -f "$SCRIPT_DIR/common.sh" ]]; then
|
||
source "$SCRIPT_DIR/common.sh"
|
||
else
|
||
echo "错误: 无法加载公共库" >&2
|
||
exit 1
|
||
fi
|
||
|
||
# 配置路径 (防止重复定义)
|
||
if [[ -z "${HYSTERIA_CONFIG:-}" ]]; then
|
||
readonly HYSTERIA_CONFIG="/etc/hysteria/config.yaml"
|
||
fi
|
||
if [[ -z "${OUTBOUND_TEMPLATES_DIR:-}" ]]; then
|
||
readonly OUTBOUND_TEMPLATES_DIR="$SCRIPT_DIR/outbound-templates"
|
||
fi
|
||
if [[ -z "${BACKUP_DIR:-}" ]]; then
|
||
readonly BACKUP_DIR="/var/backups/s-hy2/outbound"
|
||
fi
|
||
|
||
# 初始化出站管理
|
||
init_outbound_manager() {
|
||
log_info "初始化出站规则管理器"
|
||
|
||
# 创建模板目录
|
||
mkdir -p "$OUTBOUND_TEMPLATES_DIR" "$BACKUP_DIR"
|
||
|
||
# 创建基础模板（如果不存在）
|
||
create_default_templates
|
||
}
|
||
|
||
# 创建默认模板
|
||
create_default_templates() {
|
||
# Direct 出站模板
|
||
if [[ ! -f "$OUTBOUND_TEMPLATES_DIR/direct.yaml" ]]; then
|
||
cat > "$OUTBOUND_TEMPLATES_DIR/direct.yaml" << 'EOF'
|
||
# Direct 直连出站配置模板
|
||
outbounds:
|
||
- name: direct_out
|
||
type: direct
|
||
direct:
|
||
mode: auto
|
||
# bindIPv4: "1.2.3.4" # 可选：绑定 IPv4 地址
|
||
# bindIPv6: "::1" # 可选：绑定 IPv6 地址
|
||
# bindDevice: "eth0" # 可选：绑定网卡
|
||
|
||
# 简单 ACL 规则 - 全部直连
|
||
acl: |
|
||
direct_out(all)
|
||
EOF
|
||
fi
|
||
|
||
# SOCKS5 出站模板
|
||
if [[ ! -f "$OUTBOUND_TEMPLATES_DIR/socks5.yaml" ]]; then
|
||
cat > "$OUTBOUND_TEMPLATES_DIR/socks5.yaml" << 'EOF'
|
||
# SOCKS5 代理出站配置模板
|
||
outbounds:
|
||
- name: direct_out
|
||
type: direct
|
||
- name: socks5_out
|
||
type: socks5
|
||
socks5:
|
||
addr: "proxy.example.com:1080"
|
||
username: "your_username" # 可选
|
||
password: "your_password" # 可选
|
||
|
||
# 简单 ACL 规则 - 国外走代理，国内直连
|
||
acl: |
|
||
# 国外 IP 走 SOCKS5 代理
|
||
socks5_out(geoip:!cn)
|
||
# 国内 IP 直连
|
||
direct_out(geoip:cn)
|
||
# 其他所有连接直连
|
||
direct_out(all)
|
||
EOF
|
||
fi
|
||
|
||
# HTTP 出站模板
|
||
if [[ ! -f "$OUTBOUND_TEMPLATES_DIR/http.yaml" ]]; then
|
||
cat > "$OUTBOUND_TEMPLATES_DIR/http.yaml" << 'EOF'
|
||
# HTTP/HTTPS 代理出站配置模板
|
||
outbounds:
|
||
- name: direct_out
|
||
type: direct
|
||
- name: http_out
|
||
type: http
|
||
http:
|
||
url: "http://username:password@proxy.example.com:8080"
|
||
# 或 HTTPS: "https://username:password@proxy.example.com:8080"
|
||
insecure: false # 是否跳过 TLS 验证
|
||
|
||
# 简单 ACL 规则 - 特定域名走代理
|
||
acl: |
|
||
# 特定网站走 HTTP 代理
|
||
http_out(suffix:google.com)
|
||
http_out(suffix:youtube.com)
|
||
http_out(suffix:facebook.com)
|
||
# 其他所有连接直连
|
||
direct_out(all)
|
||
EOF
|
||
fi
|
||
|
||
log_success "默认出站模板已创建"
|
||
}
|
||
|
||
# 显示出站管理菜单
|
||
show_outbound_menu() {
|
||
clear
|
||
echo -e "${CYAN}=== Hysteria2 出站规则配置 ===${NC}"
|
||
echo ""
|
||
echo -e "${GREEN}1.${NC} 查看当前出站配置"
|
||
echo -e "${GREEN}2.${NC} 添加新的出站规则"
|
||
echo -e "${GREEN}3.${NC} 使用模板配置"
|
||
echo -e "${GREEN}4.${NC} 修改现有配置"
|
||
echo -e "${GREEN}5.${NC} 测试出站连通性"
|
||
echo -e "${GREEN}6.${NC} 备份和恢复配置"
|
||
echo -e "${RED}0.${NC} 返回主菜单"
|
||
echo ""
|
||
}
|
||
|
||
# 查看当前出站配置
|
||
view_current_outbound() {
|
||
log_info "查看当前出站配置"
|
||
|
||
# 使用统一的检查函数
|
||
if ! check_hysteria2_ready "config"; then
|
||
return 0 # 友好返回，不退出脚本
|
||
fi
|
||
|
||
echo -e "${BLUE}=== 当前出站配置 ===${NC}"
|
||
echo ""
|
||
|
||
# 检查是否有出站配置 - 改进的匹配模式
|
||
if grep -q "^[[:space:]]*outbounds:" "$HYSTERIA_CONFIG"; then
|
||
echo -e "${GREEN}出站规则：${NC}"
|
||
# 使用更精确的sed匹配，支持缩进
|
||
sed -n '/^[[:space:]]*outbounds:/,/^[[:space:]]*[a-zA-Z]/p' "$HYSTERIA_CONFIG" | sed '$d'
|
||
echo ""
|
||
|
||
# 显示出站规则统计
|
||
local outbound_count
|
||
outbound_count=$(grep -c "^[[:space:]]*-[[:space:]]*name:" "$HYSTERIA_CONFIG" || echo "0")
|
||
echo -e "${CYAN}共找到 $outbound_count 个出站规则${NC}"
|
||
echo ""
|
||
else
|
||
echo -e "${YELLOW}当前配置中没有出站规则（使用默认直连）${NC}"
|
||
echo ""
|
||
fi
|
||
|
||
# 检查是否有 ACL 配置 - 改进的匹配模式
|
||
if grep -q "^[[:space:]]*acl:" "$HYSTERIA_CONFIG"; then
|
||
echo -e "${GREEN}ACL 规则：${NC}"
|
||
# 支持缩进的ACL配置显示
|
||
sed -n '/^[[:space:]]*acl:/,/^[[:space:]]*[a-zA-Z]/p' "$HYSTERIA_CONFIG" | sed '$d'
|
||
else
|
||
echo -e "${YELLOW}当前配置中没有 ACL 规则（使用默认路由）${NC}"
|
||
fi
|
||
|
||
echo ""
|
||
wait_for_user
|
||
}
|
||
|
||
# 添加新的出站规则
|
||
add_outbound_rule() {
|
||
log_info "添加新的出站规则"
|
||
|
||
echo -e "${BLUE}=== 添加出站规则 ===${NC}"
|
||
echo ""
|
||
echo "选择出站类型："
|
||
echo "1. Direct (直连)"
|
||
echo "2. SOCKS5 代理"
|
||
echo "3. HTTP/HTTPS 代理"
|
||
echo ""
|
||
|
||
local choice
|
||
read -p "请选择 [1-3]: " choice
|
||
|
||
case $choice in
|
||
1) add_direct_outbound ;;
|
||
2) add_socks5_outbound ;;
|
||
3) add_http_outbound ;;
|
||
*)
|
||
log_error "无效选择"
|
||
return 1
|
||
;;
|
||
esac
|
||
}
|
||
|
||
# 添加直连出站
|
||
add_direct_outbound() {
|
||
echo -e "${BLUE}=== 配置 Direct 直连出站 ===${NC}"
|
||
echo ""
|
||
|
||
local name interface ipv4 ipv6
|
||
|
||
# 获取出站名称
|
||
read -p "出站名称 (例: china_direct): " name
|
||
if [[ -z "$name" ]]; then
|
||
name="direct_out"
|
||
fi
|
||
|
||
# 是否绑定特定网卡
|
||
echo "是否绑定特定网卡？ [y/N]"
|
||
read -r bind_interface
|
||
|
||
if [[ $bind_interface =~ ^[Yy]$ ]]; then
|
||
echo "可用网卡："
|
||
# 优化：缓存网卡信息并使用更高效的命令
|
||
if [[ -z "${CACHED_INTERFACES:-}" ]]; then
|
||
# 使用更快的方法获取网卡列表
|
||
if command -v ip >/dev/null 2>&1; then
|
||
CACHED_INTERFACES=$(ip -o link show | awk -F': ' '{print $2}' | grep -v "lo")
|
||
else
|
||
# 降级方案
|
||
CACHED_INTERFACES=$(ls /sys/class/net/ | grep -v "lo")
|
||
fi
|
||
fi
|
||
echo "$CACHED_INTERFACES" | nl -w2 -s') '
|
||
read -p "请选择网卡名称 (例: eth0): " interface
|
||
fi
|
||
|
||
# 是否绑定特定 IP
|
||
echo "是否绑定特定 IP 地址？ [y/N]"
|
||
read -r bind_ip
|
||
|
||
if [[ $bind_ip =~ ^[Yy]$ ]]; then
|
||
read -p "IPv4 地址 (可选): " ipv4
|
||
read -p "IPv6 地址 (可选): " ipv6
|
||
fi
|
||
|
||
# 保存配置参数供后续使用
|
||
export DIRECT_INTERFACE="$interface"
|
||
export DIRECT_IPV4="$ipv4"
|
||
export DIRECT_IPV6="$ipv6"
|
||
|
||
# 生成配置
|
||
generate_direct_config "$name" "$interface" "$ipv4" "$ipv6"
|
||
}
|
||
|
||
# 添加 SOCKS5 出站
|
||
add_socks5_outbound() {
|
||
echo -e "${BLUE}=== 配置 SOCKS5 代理出站 ===${NC}"
|
||
echo ""
|
||
|
||
local name addr username password
|
||
|
||
read -p "出站名称 (例: socks5_proxy): " name
|
||
if [[ -z "$name" ]]; then
|
||
name="socks5_out"
|
||
fi
|
||
|
||
read -p "代理服务器地址:端口 (例: proxy.example.com:1080): " addr
|
||
if [[ -z "$addr" ]]; then
|
||
log_error "代理地址不能为空"
|
||
return 1
|
||
fi
|
||
|
||
echo "是否需要认证？ [y/N]"
|
||
read -r need_auth
|
||
|
||
if [[ $need_auth =~ ^[Yy]$ ]]; then
|
||
read -p "用户名: " username
|
||
read -s -p "密码: " password
|
||
echo ""
|
||
fi
|
||
|
||
# 保存配置参数供后续使用
|
||
export SOCKS5_ADDR="$addr"
|
||
export SOCKS5_USERNAME="$username"
|
||
export SOCKS5_PASSWORD="$password"
|
||
|
||
# 生成配置
|
||
generate_socks5_config "$name" "$addr" "$username" "$password"
|
||
}
|
||
|
||
# 添加 HTTP 出站
|
||
add_http_outbound() {
|
||
echo -e "${BLUE}=== 配置 HTTP/HTTPS 代理出站 ===${NC}"
|
||
echo ""
|
||
|
||
local name url insecure
|
||
|
||
read -p "出站名称 (例: http_proxy): " name
|
||
if [[ -z "$name" ]]; then
|
||
name="http_out"
|
||
fi
|
||
|
||
echo "代理类型："
|
||
echo "1. HTTP 代理"
|
||
echo "2. HTTPS 代理"
|
||
read -p "选择 [1-2]: " proxy_type
|
||
|
||
if [[ $proxy_type == "1" ]]; then
|
||
read -p "HTTP 代理 URL (例: http://user:pass@proxy.com:8080): " url
|
||
else
|
||
read -p "HTTPS 代理 URL (例: https://user:pass@proxy.com:8080): " url
|
||
echo "是否跳过 TLS 验证？ [y/N]"
|
||
read -r skip_tls
|
||
if [[ $skip_tls =~ ^[Yy]$ ]]; then
|
||
insecure="true"
|
||
else
|
||
insecure="false"
|
||
fi
|
||
fi
|
||
|
||
if [[ -z "$url" ]]; then
|
||
log_error "代理 URL 不能为空"
|
||
return 1
|
||
fi
|
||
|
||
# 保存配置参数供后续使用
|
||
export HTTP_URL="$url"
|
||
export HTTP_INSECURE="$insecure"
|
||
|
||
# 生成配置
|
||
generate_http_config "$name" "$url" "$insecure"
|
||
}
|
||
|
||
# 生成配置函数
|
||
generate_direct_config() {
|
||
local name="$1" interface="$2" ipv4="$3" ipv6="$4"
|
||
|
||
echo "生成的 Direct 出站配置："
|
||
echo "---"
|
||
echo "outbounds:"
|
||
echo " - name: $name"
|
||
echo " type: direct"
|
||
echo " direct:"
|
||
echo " mode: auto"
|
||
|
||
if [[ -n "$interface" ]]; then
|
||
echo " bindDevice: \"$interface\""
|
||
fi
|
||
if [[ -n "$ipv4" ]]; then
|
||
echo " bindIPv4: \"$ipv4\""
|
||
fi
|
||
if [[ -n "$ipv6" ]]; then
|
||
echo " bindIPv6: \"$ipv6\""
|
||
fi
|
||
echo "---"
|
||
echo ""
|
||
|
||
apply_outbound_config "$name" "direct"
|
||
}
|
||
|
||
generate_socks5_config() {
|
||
local name="$1" addr="$2" username="$3" password="$4"
|
||
|
||
echo "生成的 SOCKS5 出站配置："
|
||
echo "---"
|
||
echo "outbounds:"
|
||
echo " - name: $name"
|
||
echo " type: socks5"
|
||
echo " socks5:"
|
||
echo " addr: \"$addr\""
|
||
|
||
if [[ -n "$username" ]]; then
|
||
echo " username: \"$username\""
|
||
echo " password: \"$password\""
|
||
fi
|
||
echo "---"
|
||
echo ""
|
||
|
||
apply_outbound_config "$name" "socks5"
|
||
}
|
||
|
||
generate_http_config() {
|
||
local name="$1" url="$2" insecure="$3"
|
||
|
||
echo "生成的 HTTP 出站配置："
|
||
echo "---"
|
||
echo "outbounds:"
|
||
echo " - name: $name"
|
||
echo " type: http"
|
||
echo " http:"
|
||
echo " url: \"$url\""
|
||
|
||
if [[ -n "$insecure" ]]; then
|
||
echo " insecure: $insecure"
|
||
fi
|
||
echo "---"
|
||
echo ""
|
||
|
||
apply_outbound_config "$name" "http"
|
||
}
|
||
|
||
# 应用出站配置 - 极简稳定版本
|
||
apply_outbound_config() {
|
||
local name="$1" type="$2"
|
||
|
||
echo "是否将此配置应用到 Hysteria2？ [y/N]"
|
||
read -r apply_config
|
||
|
||
if [[ $apply_config =~ ^[Yy]$ ]]; then
|
||
echo -e "${BLUE}[INFO]${NC} 开始应用出站配置: $name ($type)"
|
||
|
||
# 使用极简稳定的方法
|
||
if apply_outbound_simple "$name" "$type"; then
|
||
echo -e "${GREEN}[SUCCESS]${NC} 出站配置已添加：$name ($type)"
|
||
|
||
# 询问是否重启服务
|
||
echo "是否重启 Hysteria2 服务以应用配置？ [y/N]"
|
||
read -r restart_service
|
||
|
||
if [[ $restart_service =~ ^[Yy]$ ]]; then
|
||
if systemctl restart hysteria-server 2>/dev/null; then
|
||
echo -e "${GREEN}[SUCCESS]${NC} 服务已重启"
|
||
else
|
||
echo -e "${RED}[ERROR]${NC} 服务重启失败"
|
||
fi
|
||
fi
|
||
else
|
||
echo -e "${RED}[ERROR]${NC} 配置应用失败"
|
||
fi
|
||
else
|
||
echo -e "${BLUE}[INFO]${NC} 操作已取消"
|
||
fi
|
||
}
|
||
|
||
# 极简稳定的配置应用函数
|
||
apply_outbound_simple() {
|
||
local name="$1" type="$2"
|
||
|
||
echo -e "${BLUE}[INFO]${NC} 检查配置文件: $HYSTERIA_CONFIG"
|
||
|
||
# 检查配置文件
|
||
if [[ ! -f "$HYSTERIA_CONFIG" ]]; then
|
||
echo -e "${RED}[ERROR]${NC} 配置文件不存在: $HYSTERIA_CONFIG"
|
||
return 1
|
||
fi
|
||
|
||
# 创建简单的备份
|
||
local backup_file="/tmp/hysteria_backup_$$_$(date +%s).yaml"
|
||
echo -e "${BLUE}[INFO]${NC} 创建配置备份: $backup_file"
|
||
|
||
if ! cp "$HYSTERIA_CONFIG" "$backup_file" 2>/dev/null; then
|
||
echo -e "${RED}[ERROR]${NC} 无法创建备份文件"
|
||
return 1
|
||
fi
|
||
|
||
# 创建临时文件
|
||
local temp_file="/tmp/hysteria_temp_$$_$(date +%s).yaml"
|
||
echo -e "${BLUE}[INFO]${NC} 创建临时文件: $temp_file"
|
||
|
||
if ! cp "$HYSTERIA_CONFIG" "$temp_file" 2>/dev/null; then
|
||
echo -e "${RED}[ERROR]${NC} 无法创建临时文件"
|
||
rm -f "$backup_file" 2>/dev/null
|
||
return 1
|
||
fi
|
||
|
||
# 添加出站配置
|
||
echo -e "${BLUE}[INFO]${NC} 添加出站配置到临时文件"
|
||
|
||
if grep -q "^[[:space:]]*outbounds:" "$temp_file" 2>/dev/null; then
|
||
echo -e "${BLUE}[INFO]${NC} 检测到现有outbounds配置，追加新规则"
|
||
cat >> "$temp_file" << EOF
|
||
|
||
# 新增出站规则 - $name ($type)
|
||
- name: $name
|
||
type: $type
|
||
EOF
|
||
case $type in
|
||
"direct")
|
||
cat >> "$temp_file" << EOF
|
||
direct:
|
||
mode: auto
|
||
EOF
|
||
;;
|
||
"socks5")
|
||
cat >> "$temp_file" << EOF
|
||
socks5:
|
||
addr: "${SOCKS5_ADDR:-proxy.example.com:1080}"
|
||
EOF
|
||
if [[ -n "${SOCKS5_USERNAME:-}" ]]; then
|
||
echo " username: \"$SOCKS5_USERNAME\"" >> "$temp_file"
|
||
echo " password: \"$SOCKS5_PASSWORD\"" >> "$temp_file"
|
||
fi
|
||
;;
|
||
"http")
|
||
cat >> "$temp_file" << EOF
|
||
http:
|
||
url: "${HTTP_URL:-http://proxy.example.com:8080}"
|
||
EOF
|
||
if [[ -n "${HTTP_INSECURE:-}" ]]; then
|
||
echo " insecure: $HTTP_INSECURE" >> "$temp_file"
|
||
fi
|
||
;;
|
||
esac
|
||
|
||
# 检查并添加ACL规则以使用新的出站规则
|
||
echo -e "${BLUE}[INFO]${NC} 检查ACL路由规则"
|
||
if ! grep -q "^[[:space:]]*acl:" "$temp_file" 2>/dev/null; then
|
||
echo -e "${BLUE}[INFO]${NC} 添加ACL规则以使用新的出站规则"
|
||
cat >> "$temp_file" << EOF
|
||
|
||
# ACL规则 - 路由配置
|
||
acl: |
|
||
# 使用新增的出站规则 $name
|
||
$name(geosite:cn)
|
||
# 其他流量直连
|
||
direct(all)
|
||
EOF
|
||
fi
|
||
|
||
else
|
||
echo -e "${BLUE}[INFO]${NC} 未检测到outbounds配置，创建新节点"
|
||
case $type in
|
||
"direct")
|
||
cat >> "$temp_file" << EOF
|
||
|
||
# 出站规则配置
|
||
outbounds:
|
||
- name: $name
|
||
type: direct
|
||
direct:
|
||
mode: auto
|
||
|
||
# ACL规则 - 路由配置
|
||
acl: |
|
||
# 使用 $name 进行直连
|
||
$name(all)
|
||
EOF
|
||
;;
|
||
"socks5")
|
||
cat >> "$temp_file" << EOF
|
||
|
||
# 出站规则配置
|
||
outbounds:
|
||
- name: $name
|
||
type: socks5
|
||
socks5:
|
||
addr: "${SOCKS5_ADDR:-127.0.0.1:1080}"
|
||
|
||
# ACL规则 - 路由配置
|
||
acl: |
|
||
# 使用 $name 代理流量
|
||
$name(all)
|
||
EOF
|
||
;;
|
||
esac
|
||
fi
|
||
|
||
# 验证配置语法（可选）
|
||
if command -v hysteria >/dev/null 2>&1; then
|
||
echo -e "${BLUE}[INFO]${NC} 验证配置语法"
|
||
if hysteria check-config -c "$temp_file" >/dev/null 2>&1; then
|
||
echo -e "${GREEN}[SUCCESS]${NC} 配置语法验证通过"
|
||
else
|
||
echo -e "${YELLOW}[WARN]${NC} 配置语法验证失败，但继续执行"
|
||
fi
|
||
else
|
||
echo -e "${YELLOW}[WARN]${NC} 未找到hysteria命令，跳过语法验证"
|
||
fi
|
||
|
||
# 应用配置
|
||
echo -e "${BLUE}[INFO]${NC} 应用新配置"
|
||
if mv "$temp_file" "$HYSTERIA_CONFIG" 2>/dev/null; then
|
||
echo -e "${GREEN}[SUCCESS]${NC} 配置已成功应用"
|
||
rm -f "$backup_file" 2>/dev/null
|
||
return 0
|
||
else
|
||
echo -e "${RED}[ERROR]${NC} 配置应用失败，恢复备份"
|
||
mv "$backup_file" "$HYSTERIA_CONFIG" 2>/dev/null
|
||
rm -f "$temp_file" 2>/dev/null
|
||
return 1
|
||
fi
|
||
}
|
||
|
||
# 创建安全的临时文件 - 兼容性改进版
|
||
create_temp_config() {
|
||
local temp_config
|
||
|
||
# 尝试不同的mktemp选项以确保兼容性
|
||
if command -v mktemp >/dev/null 2>&1; then
|
||
# 尝试标准方式
|
||
if temp_config=$(mktemp -t hysteria_config_XXXXXX.yaml 2>/dev/null); then
|
||
log_debug "使用mktemp -t创建临时文件: $temp_config"
|
||
# 备选方式1: 不使用-t选项
|
||
elif temp_config=$(mktemp /tmp/hysteria_config_XXXXXX.yaml 2>/dev/null); then
|
||
log_debug "使用mktemp备选方式创建临时文件: $temp_config"
|
||
# 备选方式2: 手动创建
|
||
else
|
||
temp_config="/tmp/hysteria_config_$$_$(date +%s).yaml"
|
||
if ! touch "$temp_config" 2>/dev/null; then
|
||
log_error "无法创建临时文件: $temp_config"
|
||
return 1
|
||
fi
|
||
log_debug "手动创建临时文件: $temp_config"
|
||
fi
|
||
else
|
||
# 如果没有mktemp命令，手动创建
|
||
temp_config="/tmp/hysteria_config_$$_$(date +%s).yaml"
|
||
if ! touch "$temp_config" 2>/dev/null; then
|
||
log_error "无法创建临时文件: $temp_config"
|
||
return 1
|
||
fi
|
||
log_debug "手动创建临时文件（无mktemp）: $temp_config"
|
||
fi
|
||
|
||
# 设置适当权限
|
||
if ! chmod 600 "$temp_config" 2>/dev/null; then
|
||
log_warn "无法设置临时文件权限，继续执行"
|
||
fi
|
||
|
||
echo "$temp_config"
|
||
}
|
||
|
||
# 智能合并outbounds配置
|
||
merge_outbound_config() {
|
||
local config_file="$1" name="$2" type="$3"
|
||
|
||
# 检查是否已存在outbounds节点
|
||
if grep -q "^[[:space:]]*outbounds:" "$config_file"; then
|
||
log_info "检测到现有outbounds配置，添加到现有列表"
|
||
add_to_existing_outbounds "$config_file" "$name" "$type"
|
||
else
|
||
log_info "未检测到outbounds配置，创建新的outbounds节点"
|
||
add_new_outbounds_section "$config_file" "$name" "$type"
|
||
fi
|
||
}
|
||
|
||
# 添加到现有outbounds列表
|
||
add_to_existing_outbounds() {
|
||
local config_file="$1" name="$2" type="$3"
|
||
|
||
case $type in
|
||
"direct")
|
||
# 在outbounds节点下添加新项
|
||
cat >> "$config_file" << EOF
|
||
|
||
# 新增出站规则 - $name (Direct)
|
||
- name: $name
|
||
type: direct
|
||
direct:
|
||
mode: auto
|
||
EOF
|
||
if [[ -n "${DIRECT_INTERFACE:-}" ]]; then
|
||
echo " bindDevice: \"$DIRECT_INTERFACE\"" >> "$config_file"
|
||
fi
|
||
if [[ -n "${DIRECT_IPV4:-}" ]]; then
|
||
echo " bindIPv4: \"$DIRECT_IPV4\"" >> "$config_file"
|
||
fi
|
||
if [[ -n "${DIRECT_IPV6:-}" ]]; then
|
||
echo " bindIPv6: \"$DIRECT_IPV6\"" >> "$config_file"
|
||
fi
|
||
;;
|
||
"socks5")
|
||
cat >> "$config_file" << EOF
|
||
|
||
# 新增出站规则 - $name (SOCKS5)
|
||
- name: $name
|
||
type: socks5
|
||
socks5:
|
||
addr: "${SOCKS5_ADDR:-proxy.example.com:1080}"
|
||
EOF
|
||
if [[ -n "${SOCKS5_USERNAME:-}" ]]; then
|
||
echo " username: \"$SOCKS5_USERNAME\"" >> "$config_file"
|
||
echo " password: \"$SOCKS5_PASSWORD\"" >> "$config_file"
|
||
fi
|
||
;;
|
||
"http")
|
||
cat >> "$config_file" << EOF
|
||
|
||
# 新增出站规则 - $name (HTTP)
|
||
- name: $name
|
||
type: http
|
||
http:
|
||
url: "${HTTP_URL:-http://proxy.example.com:8080}"
|
||
EOF
|
||
if [[ -n "${HTTP_INSECURE:-}" ]]; then
|
||
echo " insecure: $HTTP_INSECURE" >> "$config_file"
|
||
fi
|
||
;;
|
||
esac
|
||
}
|
||
|
||
# 创建新的outbounds节点
|
||
add_new_outbounds_section() {
|
||
local config_file="$1" name="$2" type="$3"
|
||
|
||
echo "" >> "$config_file"
|
||
echo "# 出站规则配置" >> "$config_file"
|
||
generate_direct_yaml_config "$name" >> "$config_file"
|
||
}
|
||
|
||
# 实际应用配置到文件的函数 - 改进版
|
||
apply_outbound_to_config() {
|
||
local name="$1" type="$2"
|
||
|
||
# 检查配置文件是否存在
|
||
if [[ ! -f "$HYSTERIA_CONFIG" ]]; then
|
||
log_error "Hysteria2 配置文件不存在: $HYSTERIA_CONFIG"
|
||
return 1
|
||
fi
|
||
|
||
# 创建安全的临时文件
|
||
local temp_config
|
||
log_info "开始创建临时文件..."
|
||
temp_config=$(create_temp_config)
|
||
if [[ $? -ne 0 ]] || [[ -z "$temp_config" ]]; then
|
||
log_error "创建临时文件失败"
|
||
return 1
|
||
fi
|
||
log_info "临时文件已创建: $temp_config"
|
||
|
||
# 复制原配置并检查结果
|
||
log_info "复制配置文件到临时位置..."
|
||
if ! cp "$HYSTERIA_CONFIG" "$temp_config"; then
|
||
log_error "无法复制配置文件到临时位置"
|
||
log_error "源文件: $HYSTERIA_CONFIG"
|
||
log_error "目标文件: $temp_config"
|
||
rm -f "$temp_config"
|
||
return 1
|
||
fi
|
||
log_info "配置文件复制成功"
|
||
|
||
# 创建配置备份
|
||
local backup_file
|
||
log_info "创建配置备份..."
|
||
backup_file="/tmp/hysteria_backup_$$_$(date +%s).yaml"
|
||
if ! cp "$HYSTERIA_CONFIG" "$backup_file"; then
|
||
log_error "无法创建配置备份"
|
||
rm -f "$temp_config"
|
||
return 1
|
||
fi
|
||
log_info "配置备份已创建: $backup_file"
|
||
|
||
# 智能合并配置
|
||
case $type in
|
||
"direct"|"socks5"|"http")
|
||
merge_outbound_config "$temp_config" "$name" "$type"
|
||
;;
|
||
*)
|
||
log_error "不支持的出站类型: $type"
|
||
rm -f "$temp_config" "$backup_file"
|
||
return 1
|
||
;;
|
||
esac
|
||
|
||
# 验证配置文件语法（如果hysteria可用）
|
||
if command -v hysteria >/dev/null 2>&1; then
|
||
local validation_output="/tmp/hysteria_validation_$$.log"
|
||
if ! hysteria check-config -c "$temp_config" 2>"$validation_output"; then
|
||
log_error "配置文件语法验证失败"
|
||
log_error "详细错误信息:"
|
||
while IFS= read -r line; do
|
||
log_error " $line"
|
||
done < "$validation_output"
|
||
rm -f "$temp_config" "$backup_file" "$validation_output"
|
||
return 1
|
||
fi
|
||
rm -f "$validation_output"
|
||
else
|
||
log_warn "Hysteria2 未安装，跳过配置语法验证"
|
||
fi
|
||
|
||
# 原子性替换配置文件
|
||
if mv "$temp_config" "$HYSTERIA_CONFIG"; then
|
||
log_success "配置已成功应用到: $HYSTERIA_CONFIG"
|
||
rm -f "$backup_file"
|
||
return 0
|
||
else
|
||
log_error "配置应用失败，正在恢复备份"
|
||
mv "$backup_file" "$HYSTERIA_CONFIG"
|
||
rm -f "$temp_config"
|
||
return 1
|
||
fi
|
||
}
|
||
|
||
# 生成 Direct 类型的 YAML 配置
|
||
generate_direct_yaml_config() {
|
||
local name="$1"
|
||
|
||
echo ""
|
||
echo "# 出站规则 - $name (Direct)"
|
||
echo "outbounds:"
|
||
echo " - name: $name"
|
||
echo " type: direct"
|
||
echo " direct:"
|
||
echo " mode: auto"
|
||
|
||
if [[ -n "${DIRECT_INTERFACE:-}" ]]; then
|
||
echo " bindDevice: \"$DIRECT_INTERFACE\""
|
||
fi
|
||
if [[ -n "${DIRECT_IPV4:-}" ]]; then
|
||
echo " bindIPv4: \"$DIRECT_IPV4\""
|
||
fi
|
||
if [[ -n "${DIRECT_IPV6:-}" ]]; then
|
||
echo " bindIPv6: \"$DIRECT_IPV6\""
|
||
fi
|
||
}
|
||
|
||
# 生成 SOCKS5 类型的 YAML 配置
|
||
generate_socks5_yaml_config() {
|
||
local name="$1"
|
||
|
||
echo ""
|
||
echo "# 出站规则 - $name (SOCKS5)"
|
||
echo "outbounds:"
|
||
echo " - name: $name"
|
||
echo " type: socks5"
|
||
echo " socks5:"
|
||
echo " addr: \"${SOCKS5_ADDR:-proxy.example.com:1080}\""
|
||
|
||
if [[ -n "${SOCKS5_USERNAME:-}" ]]; then
|
||
echo " username: \"$SOCKS5_USERNAME\""
|
||
echo " password: \"$SOCKS5_PASSWORD\""
|
||
fi
|
||
}
|
||
|
||
# 生成 HTTP 类型的 YAML 配置
|
||
generate_http_yaml_config() {
|
||
local name="$1"
|
||
|
||
echo ""
|
||
echo "# 出站规则 - $name (HTTP)"
|
||
echo "outbounds:"
|
||
echo " - name: $name"
|
||
echo " type: http"
|
||
echo " http:"
|
||
echo " url: \"${HTTP_URL:-http://proxy.example.com:8080}\""
|
||
|
||
if [[ -n "${HTTP_INSECURE:-}" ]]; then
|
||
echo " insecure: $HTTP_INSECURE"
|
||
fi
|
||
}
|
||
|
||
# 备份当前配置
|
||
backup_current_config() {
|
||
if [[ -f "$HYSTERIA_CONFIG" ]]; then
|
||
# 确保备份目录存在并且可写
|
||
if ! mkdir -p "$BACKUP_DIR" 2>/dev/null; then
|
||
# 如果无法创建备份目录，使用临时目录
|
||
BACKUP_DIR="/tmp/s-hy2-backup"
|
||
mkdir -p "$BACKUP_DIR" 2>/dev/null
|
||
fi
|
||
|
||
local backup_file="$BACKUP_DIR/config-$(date +%Y%m%d_%H%M%S).yaml"
|
||
if cp "$HYSTERIA_CONFIG" "$backup_file" 2>/dev/null; then
|
||
log_info "配置已备份到: $backup_file"
|
||
else
|
||
log_warn "备份失败，将使用简单备份方式"
|
||
backup_file="/tmp/hysteria_backup_$(date +%s).yaml"
|
||
cp "$HYSTERIA_CONFIG" "$backup_file" 2>/dev/null || log_error "备份失败"
|
||
fi
|
||
fi
|
||
}
|
||
|
||
# 使用模板配置
|
||
use_template_config() {
|
||
echo -e "${BLUE}=== 使用模板配置 ===${NC}"
|
||
echo ""
|
||
echo "可用模板："
|
||
echo "1. Direct 直连模板"
|
||
echo "2. SOCKS5 代理模板"
|
||
echo "3. HTTP 代理模板"
|
||
echo ""
|
||
|
||
local choice
|
||
read -p "请选择模板 [1-3]: " choice
|
||
|
||
case $choice in
|
||
1) apply_template "direct.yaml" ;;
|
||
2) apply_template "socks5.yaml" ;;
|
||
3) apply_template "http.yaml" ;;
|
||
*)
|
||
log_error "无效选择"
|
||
return 1
|
||
;;
|
||
esac
|
||
}
|
||
|
||
# 应用模板
|
||
apply_template() {
|
||
local template="$1"
|
||
local template_path="$OUTBOUND_TEMPLATES_DIR/$template"
|
||
|
||
if [[ ! -f "$template_path" ]]; then
|
||
log_error "模板文件不存在: $template"
|
||
return 1
|
||
fi
|
||
|
||
echo -e "${BLUE}模板内容预览：${NC}"
|
||
echo "---"
|
||
cat "$template_path"
|
||
echo "---"
|
||
echo ""
|
||
|
||
echo "是否使用此模板？ [y/N]"
|
||
read -r use_template
|
||
|
||
if [[ $use_template =~ ^[Yy]$ ]]; then
|
||
backup_current_config
|
||
|
||
# 这里需要实际的模板应用逻辑
|
||
log_success "模板配置已应用: $template"
|
||
|
||
echo "是否重启 Hysteria2 服务？ [y/N]"
|
||
read -r restart_service
|
||
|
||
if [[ $restart_service =~ ^[Yy]$ ]]; then
|
||
systemctl restart hysteria-server
|
||
log_success "服务已重启"
|
||
fi
|
||
fi
|
||
}
|
||
|
||
# 测试出站连通性
|
||
test_outbound_connectivity() {
|
||
log_info "测试出站连通性"
|
||
|
||
echo -e "${BLUE}=== 出站连通性测试 ===${NC}"
|
||
echo ""
|
||
|
||
# 检查是否有出站配置
|
||
if ! grep -q "^outbounds:" "$HYSTERIA_CONFIG"; then
|
||
echo -e "${YELLOW}当前没有配置出站规则，无法测试${NC}"
|
||
wait_for_user
|
||
return
|
||
fi
|
||
|
||
# 列出可用的出站规则
|
||
echo -e "${GREEN}当前出站规则：${NC}"
|
||
grep -A 2 "name:" "$HYSTERIA_CONFIG" | grep "name:" | sed 's/.*name: */- /' | nl
|
||
echo ""
|
||
|
||
echo "测试选项："
|
||
echo "1. 测试直连连通性"
|
||
echo "2. 测试域名解析"
|
||
echo "3. 测试网络延迟"
|
||
echo "4. 测试端口连通性"
|
||
echo ""
|
||
|
||
read -p "请选择测试类型 [1-4]: " test_choice
|
||
|
||
case $test_choice in
|
||
1) test_direct_connectivity ;;
|
||
2) test_dns_resolution ;;
|
||
3) test_network_latency ;;
|
||
4) test_port_connectivity ;;
|
||
*)
|
||
log_error "无效选择"
|
||
;;
|
||
esac
|
||
|
||
wait_for_user
|
||
}
|
||
|
||
# 测试直连连通性
|
||
test_direct_connectivity() {
|
||
echo -e "${CYAN}=== 直连连通性测试 ===${NC}"
|
||
echo ""
|
||
|
||
local test_urls=("8.8.8.8" "1.1.1.1" "google.com" "baidu.com")
|
||
|
||
for url in "${test_urls[@]}"; do
|
||
echo -n "测试连接到 $url... "
|
||
if ping -c 1 -W 5 "$url" >/dev/null 2>&1; then
|
||
echo -e "${GREEN}✓ 成功${NC}"
|
||
else
|
||
echo -e "${RED}✗ 失败${NC}"
|
||
fi
|
||
done
|
||
echo ""
|
||
}
|
||
|
||
# 测试域名解析
|
||
test_dns_resolution() {
|
||
echo -e "${CYAN}=== DNS 解析测试 ===${NC}"
|
||
echo ""
|
||
|
||
local test_domains=("google.com" "github.com" "baidu.com" "qq.com")
|
||
|
||
for domain in "${test_domains[@]}"; do
|
||
echo -n "解析域名 $domain... "
|
||
if nslookup "$domain" >/dev/null 2>&1; then
|
||
local ip=$(nslookup "$domain" 2>/dev/null | grep "Address:" | tail -n1 | awk '{print $2}')
|
||
echo -e "${GREEN}✓ $ip${NC}"
|
||
else
|
||
echo -e "${RED}✗ 解析失败${NC}"
|
||
fi
|
||
done
|
||
echo ""
|
||
}
|
||
|
||
# 测试网络延迟
|
||
test_network_latency() {
|
||
echo -e "${CYAN}=== 网络延迟测试 ===${NC}"
|
||
echo ""
|
||
|
||
local test_servers=("8.8.8.8" "1.1.1.1" "baidu.com")
|
||
|
||
for server in "${test_servers[@]}"; do
|
||
echo -n "测试到 $server 的延迟... "
|
||
local latency=$(ping -c 3 -W 5 "$server" 2>/dev/null | tail -1 | awk -F '/' '{print $5}' 2>/dev/null)
|
||
if [[ -n "$latency" ]]; then
|
||
echo -e "${GREEN}${latency}ms${NC}"
|
||
else
|
||
echo -e "${RED}✗ 超时${NC}"
|
||
fi
|
||
done
|
||
echo ""
|
||
}
|
||
|
||
# 测试端口连通性
|
||
test_port_connectivity() {
|
||
echo -e "${CYAN}=== 端口连通性测试 ===${NC}"
|
||
echo ""
|
||
|
||
read -p "请输入要测试的主机地址: " host
|
||
read -p "请输入端口号: " port
|
||
|
||
if [[ -z "$host" || -z "$port" ]]; then
|
||
log_error "主机地址和端口不能为空"
|
||
return
|
||
fi
|
||
|
||
echo -n "测试连接到 $host:$port... "
|
||
if timeout 10 bash -c "</dev/tcp/$host/$port" 2>/dev/null; then
|
||
echo -e "${GREEN}✓ 端口开放${NC}"
|
||
else
|
||
echo -e "${RED}✗ 端口关闭或无法访问${NC}"
|
||
fi
|
||
echo ""
|
||
}
|
||
|
||
# 修改现有出站配置
|
||
modify_outbound_config() {
|
||
log_info "修改现有出站配置"
|
||
|
||
echo -e "${BLUE}=== 修改出站配置 ===${NC}"
|
||
echo ""
|
||
|
||
# 检查是否有出站配置
|
||
if ! grep -q "^outbounds:" "$HYSTERIA_CONFIG"; then
|
||
echo -e "${YELLOW}当前没有出站配置可修改${NC}"
|
||
echo "请先添加出站规则"
|
||
wait_for_user
|
||
return
|
||
fi
|
||
|
||
# 列出现有的出站配置
|
||
echo -e "${GREEN}当前出站规则：${NC}"
|
||
local outbound_names=($(grep -A 2 "name:" "$HYSTERIA_CONFIG" | grep "name:" | sed 's/.*name: *//' | tr -d '"'))
|
||
|
||
if [[ ${#outbound_names[@]} -eq 0 ]]; then
|
||
echo -e "${YELLOW}没有找到出站规则名称${NC}"
|
||
wait_for_user
|
||
return
|
||
fi
|
||
|
||
for i in "${!outbound_names[@]}"; do
|
||
echo "$((i+1)). ${outbound_names[$i]}"
|
||
done
|
||
echo ""
|
||
|
||
read -p "请选择要修改的出站规则 [1-${#outbound_names[@]}]: " choice
|
||
|
||
if [[ ! "$choice" =~ ^[0-9]+$ ]] || [[ "$choice" -lt 1 ]] || [[ "$choice" -gt ${#outbound_names[@]} ]]; then
|
||
log_error "无效选择"
|
||
return
|
||
fi
|
||
|
||
local selected_outbound="${outbound_names[$((choice-1))]}"
|
||
|
||
echo -e "${BLUE}修改选项：${NC}"
|
||
echo "1. 删除此出站规则"
|
||
echo "2. 替换为新的出站规则"
|
||
echo "3. 查看详细配置"
|
||
echo ""
|
||
|
||
read -p "请选择操作 [1-3]: " modify_choice
|
||
|
||
case $modify_choice in
|
||
1) delete_outbound_rule "$selected_outbound" ;;
|
||
2) replace_outbound_rule "$selected_outbound" ;;
|
||
3) show_outbound_details "$selected_outbound" ;;
|
||
*)
|
||
log_error "无效选择"
|
||
;;
|
||
esac
|
||
}
|
||
|
||
# 删除出站规则
|
||
delete_outbound_rule() {
|
||
local rule_name="$1"
|
||
|
||
echo -e "${RED}[WARNING]${NC} 即将删除出站规则: $rule_name"
|
||
echo -e "${YELLOW}此操作不可逆，请确认操作${NC}"
|
||
echo -n "确认删除？ [y/N]: "
|
||
read -r confirm
|
||
|
||
if [[ ! $confirm =~ ^[Yy]$ ]]; then
|
||
echo -e "${BLUE}[INFO]${NC} 取消删除操作"
|
||
return
|
||
fi
|
||
|
||
echo -e "${BLUE}[INFO]${NC} 开始删除出站规则: $rule_name"
|
||
|
||
# 创建简单备份
|
||
local backup_file="/tmp/hysteria_delete_backup_$(date +%s).yaml"
|
||
if ! cp "$HYSTERIA_CONFIG" "$backup_file" 2>/dev/null; then
|
||
echo -e "${RED}[ERROR]${NC} 无法创建备份，删除操作取消"
|
||
return 1
|
||
fi
|
||
echo -e "${BLUE}[INFO]${NC} 配置已备份到: $backup_file"
|
||
|
||
# 创建临时文件
|
||
local temp_config="/tmp/hysteria_delete_temp_$(date +%s).yaml"
|
||
|
||
# 使用更简单的方法：逐行处理，跳过要删除的规则块
|
||
local in_target_rule=false
|
||
local line_num=0
|
||
|
||
while IFS= read -r line || [[ -n "$line" ]]; do
|
||
((line_num++))
|
||
|
||
# 检查是否是要删除的规则的开始
|
||
if [[ "$line" =~ ^[[:space:]]*-[[:space:]]*name:[[:space:]]*${rule_name}[[:space:]]*$ ]]; then
|
||
in_target_rule=true
|
||
echo -e "${BLUE}[INFO]${NC} 找到要删除的规则在第 $line_num 行"
|
||
continue
|
||
fi
|
||
|
||
# 检查是否是下一个规则的开始（结束当前删除块）
|
||
if [[ "$in_target_rule" == true ]] && [[ "$line" =~ ^[[:space:]]*-[[:space:]]*name: ]]; then
|
||
in_target_rule=false
|
||
fi
|
||
|
||
# 如果不在要删除的规则块中，则写入行
|
||
if [[ "$in_target_rule" == false ]]; then
|
||
echo "$line" >> "$temp_config"
|
||
fi
|
||
done < "$HYSTERIA_CONFIG"
|
||
|
||
# 检查删除是否成功
|
||
if grep -q "name: *$rule_name" "$temp_config" 2>/dev/null; then
|
||
echo -e "${RED}[ERROR]${NC} 删除失败，规则仍存在"
|
||
rm -f "$temp_config"
|
||
return 1
|
||
fi
|
||
|
||
# 应用修改
|
||
if mv "$temp_config" "$HYSTERIA_CONFIG" 2>/dev/null; then
|
||
echo -e "${GREEN}[SUCCESS]${NC} 出站规则 '$rule_name' 已删除"
|
||
|
||
# 询问是否重启服务
|
||
echo ""
|
||
echo "是否重启 Hysteria2 服务以应用配置？ [y/N]"
|
||
read -r restart_service
|
||
|
||
if [[ $restart_service =~ ^[Yy]$ ]]; then
|
||
if systemctl restart hysteria-server 2>/dev/null; then
|
||
echo -e "${GREEN}[SUCCESS]${NC} 服务已重启"
|
||
else
|
||
echo -e "${YELLOW}[WARN]${NC} 服务重启失败，请手动重启"
|
||
fi
|
||
fi
|
||
else
|
||
echo -e "${RED}[ERROR]${NC} 配置应用失败，恢复备份"
|
||
mv "$backup_file" "$HYSTERIA_CONFIG" 2>/dev/null
|
||
return 1
|
||
fi
|
||
|
||
echo ""
|
||
echo "按回车键继续..."
|
||
read -r
|
||
}
|
||
|
||
# 替换出站规则
|
||
replace_outbound_rule() {
|
||
local old_rule_name="$1"
|
||
|
||
echo -e "${BLUE}=== 替换出站规则 '$old_rule_name' ===${NC}"
|
||
echo ""
|
||
echo "将创建新的出站规则来替换现有的规则"
|
||
echo ""
|
||
|
||
# 先删除旧规则
|
||
delete_outbound_rule "$old_rule_name"
|
||
|
||
# 添加新规则
|
||
echo -e "${GREEN}现在添加新的出站规则：${NC}"
|
||
add_outbound_rule
|
||
}
|
||
|
||
# 显示出站规则详细信息
|
||
show_outbound_details() {
|
||
local rule_name="$1"
|
||
|
||
echo -e "${CYAN}=== 出站规则 '$rule_name' 详细信息 ===${NC}"
|
||
echo ""
|
||
|
||
# 提取并显示指定规则的配置
|
||
sed -n "/- name: $rule_name/,/^ - name:/p" "$HYSTERIA_CONFIG" | sed '$d'
|
||
|
||
echo ""
|
||
wait_for_user
|
||
}
|
||
|
||
# 备份和恢复配置
|
||
backup_restore_config() {
|
||
echo -e "${BLUE}=== 备份和恢复配置 ===${NC}"
|
||
echo ""
|
||
echo "1. 创建配置备份"
|
||
echo "2. 恢复配置备份"
|
||
echo "3. 查看备份列表"
|
||
echo ""
|
||
|
||
local choice
|
||
read -p "请选择操作 [1-3]: " choice
|
||
|
||
case $choice in
|
||
1) backup_current_config ;;
|
||
2) restore_config_backup ;;
|
||
3) list_config_backups ;;
|
||
*)
|
||
log_error "无效选择"
|
||
return 1
|
||
;;
|
||
esac
|
||
}
|
||
|
||
# 恢复配置备份
|
||
restore_config_backup() {
|
||
list_config_backups
|
||
echo ""
|
||
read -p "请输入要恢复的备份文件名: " backup_file
|
||
|
||
local backup_path="$BACKUP_DIR/$backup_file"
|
||
if [[ ! -f "$backup_path" ]]; then
|
||
log_error "备份文件不存在: $backup_file"
|
||
return 1
|
||
fi
|
||
|
||
echo "是否恢复此备份？这将覆盖当前配置。 [y/N]"
|
||
read -r restore_backup
|
||
|
||
if [[ $restore_backup =~ ^[Yy]$ ]]; then
|
||
cp "$backup_path" "$HYSTERIA_CONFIG"
|
||
log_success "配置已恢复"
|
||
|
||
echo "是否重启 Hysteria2 服务？ [y/N]"
|
||
read -r restart_service
|
||
|
||
if [[ $restart_service =~ ^[Yy]$ ]]; then
|
||
systemctl restart hysteria-server
|
||
log_success "服务已重启"
|
||
fi
|
||
fi
|
||
}
|
||
|
||
# 列出配置备份
|
||
list_config_backups() {
|
||
echo -e "${GREEN}可用的配置备份：${NC}"
|
||
if [[ -d "$BACKUP_DIR" ]]; then
|
||
ls -la "$BACKUP_DIR"/*.yaml 2>/dev/null || echo "没有找到备份文件"
|
||
else
|
||
echo "备份目录不存在"
|
||
fi
|
||
}
|
||
|
||
# 主出站管理函数
|
||
manage_outbound() {
|
||
init_outbound_manager
|
||
|
||
while true; do
|
||
show_outbound_menu
|
||
|
||
local choice
|
||
read -p "请选择操作 [0-6]: " choice
|
||
|
||
case $choice in
|
||
1) view_current_outbound ;;
|
||
2) add_outbound_rule ;;
|
||
3) use_template_config ;;
|
||
4) modify_outbound_config ;;
|
||
5) test_outbound_connectivity ;;
|
||
6) backup_restore_config ;;
|
||
0)
|
||
log_info "返回主菜单"
|
||
break
|
||
;;
|
||
*)
|
||
log_error "无效选择，请重新输入"
|
||
wait_for_user
|
||
;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
# 如果脚本被直接执行
|
||
if [[ "${BASH_SOURCE[0]}" == "${0}" ]]; then
|
||
manage_outbound
|
||
fi |