#!/bin/bash #安装选项 nginx_version="nginx-1.19.6" openssl_version="openssl-openssl-3.0.0-alpha9" v2ray_config="/usr/local/etc/v2ray/config.json" nginx_prefix="/etc/nginx" nginx_config="${nginx_prefix}/conf.d/v2ray.conf" nginx_service="/etc/systemd/system/nginx.service" temp_dir="/temp_install_update_v2ray_tls_web" v2ray_is_installed="" nginx_is_installed="" is_installed="" update="" #配置信息 unset domain_list unset domainconfig_list unset pretend_list #V2Ray-TCP-TLS使用的协议，0代表禁用，1代表VLESS protocol_1="" #V2Ray-WS-TLS使用的协议，0代表禁用，1代表VLESS，2代表VMess protocol_2="" path="" v2id_1="" v2id_2="" #系统信息 release="" systemVersion="" redhat_package_manager="" redhat_version="" mem_ok="" #定义几个颜色 purple() #基佬紫 { echo -e "\033[35;1m${@}\033[0m" } tyblue() #天依蓝 { echo -e "\033[36;1m${@}\033[0m" } green() #水鸭青 { echo -e "\033[32;1m${@}\033[0m" } yellow() #鸭屎黄 { echo -e "\033[33;1m${@}\033[0m" } red() #姨妈红 { echo -e "\033[31;1m${@}\033[0m" } if [ "$EUID" != "0" ]; then red "请用root用户运行此脚本！！" exit 1 fi if [[ ! -f '/etc/os-release' ]]; then red "系统版本太老，V2Ray官方脚本不支持" exit 1 fi if [[ -f /.dockerenv ]] || grep -q 'docker\|lxc' /proc/1/cgroup && [[ "$(type -P systemctl)" ]]; then true elif [[ -d /run/systemd/system ]] || grep -q systemd <(ls -l /sbin/init); then true else red "仅支持使用systemd的系统！" exit 1 fi if [[ ! -d /dev/shm ]]; then red "/dev/shm不存在，不支持的系统" exit 1 fi if [ "$(cat /proc/meminfo | grep 'MemTotal' | awk '{print $3}' | tr [:upper:] [:lower:])" == "kb" ]; then if [ "$(cat /proc/meminfo | grep 'MemTotal' | awk '{print $2}')" -le 400000 ]; then mem_ok=0 else mem_ok=1 fi else mem_ok=2 fi if [ -e /usr/local/bin/v2ray ]; then v2ray_is_installed=1 else v2ray_is_installed=0 fi if [ -e $nginx_config ] || [ -e $nginx_prefix/conf.d/xray.conf ]; then nginx_is_installed=1 else nginx_is_installed=0 fi if [ $v2ray_is_installed -eq 1 ] && [ $nginx_is_installed -eq 1 ]; then is_installed=1 else is_installed=0 fi if [ -e /usr/bin/v2ray ] && [ -e /etc/nginx ]; then yellow "当前安装的V2Ray版本过旧，脚本已不再支持！" yellow "请选择1选项重新安装" sleep 3s fi check_important_dependence_installed() { if [ $release == "ubuntu" ] || [ $release == "other-debian" ]; then if ! dpkg -s $1 > /dev/null 2>&1; then if ! apt -y --no-install-recommends install $1; then apt update if ! apt -y --no-install-recommends install $1; then yellow "重要组件安装失败！！" red "不支持的系统！！" exit 1 fi fi fi else if ! rpm -q $2 > /dev/null 2>&1; then if ! $redhat_package_manager -y install $2; then yellow "重要组件安装失败！！" red "不支持的系统！！" exit 1 fi fi fi } version_ge() { test "$(echo "$@" | tr " " "\n" | sort -rV | head -n 1)" == "$1" } #获取系统信息 get_system_info() { if [[ "$(type -P apt)" ]]; then if [[ "$(type -P dnf)" ]] || [[ "$(type -P yum)" ]]; then red "同时存在apt和yum/dnf" red "不支持的系统！" exit 1 fi release="other-debian" redhat_package_manager="true" elif [[ "$(type -P dnf)" ]]; then release="other-redhat" redhat_package_manager="dnf" elif [[ "$(type -P yum)" ]]; then release="other-redhat" redhat_package_manager="yum" else red "不支持的系统或apt/yum/dnf缺失" exit 1 fi check_important_dependence_installed lsb-release redhat-lsb-core if lsb_release -a 2>/dev/null | grep -qi "ubuntu"; then release="ubuntu" elif lsb_release -a 2>/dev/null | grep -qi "centos"; then release="centos" elif lsb_release -a 2>/dev/null | grep -qi "fedora"; then release="fedora" fi systemVersion=$(lsb_release -r -s) if [ $release == "fedora" ]; then if version_ge $systemVersion 28; then redhat_version=8 elif version_ge $systemVersion 19; then redhat_version=7 elif version_ge $systemVersion 12; then redhat_version=6 else redhat_version=5 fi else redhat_version=$systemVersion fi } #检查Nginx是否已通过apt/dnf/yum安装 check_nginx() { if [[ ! -f /usr/lib/systemd/system/nginx.service ]] && [[ ! -f /lib/systemd/system/nginx.service ]]; then return 0 fi red "------------检测到Nginx已安装，并且会与此脚本冲突------------" yellow " 如果您不记得之前有安装过Nginx，那么可能是使用别的一键脚本时安装的" yellow " 建议使用纯净的系统运行此脚本" echo local choice="" while [ "$choice" != "y" -a "$choice" != "n" ] do tyblue "是否尝试卸载？(y/n)" read choice done if [ $choice == "n" ]; then exit 0 fi apt -y purge nginx $redhat_package_manager -y remove nginx if [[ ! -f /usr/lib/systemd/system/nginx.service ]] && [[ ! -f /lib/systemd/system/nginx.service ]]; then return 0 fi red "卸载失败！" yellow "请尝试更换系统，建议使用Ubuntu最新版系统" green "欢迎进行Bug report(https://github.com/kirin10000/V2Ray-TLS-Web-setup-script/issues)，感谢您的支持" exit 1 } #检查SELinux check_SELinux() { turn_off_selinux() { check_important_dependence_installed selinux-utils libselinux-utils setenforce 0 sed -i 's/^[ \t]*SELINUX[ \t]*=[ \t]*enforcing[ \t]*$/SELINUX=disabled/g' /etc/sysconfig/selinux $redhat_package_manager -y remove libselinux-utils apt -y purge selinux-utils } if getenforce 2>/dev/null | grep -wqi Enforcing || grep -Eq '^[ '$'\t]*SELINUX[ '$'\t]*=[ '$'\t]*enforcing[ '$'\t]*$' /etc/sysconfig/selinux 2>/dev/null; then yellow "检测到SELinux开启，脚本可能无法正常运行" choice="" while [[ "$choice" != "y" && "$choice" != "n" ]] do tyblue "尝试关闭SELinux?(y/n)" read choice done if [ $choice == y ]; then turn_off_selinux else exit 0 fi fi } #检查80端口和443端口是否被占用 check_port() { local i=2 local temp_port=443 while ((i!=0)) do ((i--)) if netstat -tuln | tail -n +3 | awk '{print $4}' | awk -F : '{print $NF}' | grep -wq "$temp_port"; then red "$temp_port端口被占用！" yellow "请用 lsof -i:$temp_port 命令检查" exit 1 fi temp_port=80 done } #将域名列表转化为一个数组 get_all_domains() { unset all_domains for ((i=0;i<${#domain_list[@]};i++)) do if [ ${domainconfig_list[i]} -eq 1 ]; then all_domains+=("www.${domain_list[i]}") all_domains+=("${domain_list[i]}") else all_domains+=("${domain_list[i]}") fi done } #配置sshd check_ssh_timeout() { if grep -q "#This file has been edited by v2ray-WebSocket-TLS-Web-setup-script" /etc/ssh/sshd_config; then return 0 fi echo -e "\n\n\n" tyblue "------------------------------------------" tyblue " 安装可能需要比较长的时间(5-40分钟)" tyblue " 如果中途断开连接将会很麻烦" tyblue " 设置ssh连接超时时间将有效降低断连可能性" tyblue "------------------------------------------" choice="" while [ "$choice" != "y" -a "$choice" != "n" ] do tyblue "是否设置ssh连接超时时间？(y/n)" read choice done if [ $choice == y ]; then sed -i '/^[ \t]*ClientAliveInterval[ \t]/d' /etc/ssh/sshd_config sed -i '/^[ \t]*ClientAliveCountMax[ \t]/d' /etc/ssh/sshd_config echo >> /etc/ssh/sshd_config echo "ClientAliveInterval 30" >> /etc/ssh/sshd_config echo "ClientAliveCountMax 60" >> /etc/ssh/sshd_config echo "#This file has been edited by v2ray-WebSocket-TLS-Web-setup-script" >> /etc/ssh/sshd_config service sshd restart green "----------------------配置完成----------------------" tyblue " 请重新进行ssh连接(即重新登陆服务器)，并再次运行此脚本" yellow " 按回车键退出。。。。" read -s exit 0 fi } #删除防火墙和阿里云盾 uninstall_firewall() { green "正在删除防火墙。。。" ufw disable apt -y purge firewalld apt -y purge ufw systemctl stop firewalld systemctl disable firewalld $redhat_package_manager -y remove firewalld green "正在删除阿里云盾和腾讯云盾 (仅对阿里云和腾讯云服务器有效)。。。" #阿里云盾 if [ $release == "ubuntu" ] || [ $release == "other-debian" ]; then systemctl stop CmsGoAgent systemctl disable CmsGoAgent rm -rf /usr/local/cloudmonitor rm -rf /etc/systemd/system/CmsGoAgent.service systemctl daemon-reload else systemctl stop cloudmonitor /etc/rc.d/init.d/cloudmonitor remove rm -rf /usr/local/cloudmonitor systemctl daemon-reload fi systemctl stop aliyun systemctl disable aliyun rm -rf /etc/systemd/system/aliyun.service systemctl daemon-reload apt -y purge aliyun-assist $redhat_package_manager -y remove aliyun_assist rm -rf /usr/local/share/aliyun-assist rm -rf /usr/sbin/aliyun_installer rm -rf /usr/sbin/aliyun-service rm -rf /usr/sbin/aliyun-service.backup pkill -9 AliYunDun pkill -9 AliHids /etc/init.d/aegis uninstall rm -rf /usr/local/aegis rm -rf /etc/init.d/aegis rm -rf /etc/rc2.d/S80aegis rm -rf /etc/rc3.d/S80aegis rm -rf /etc/rc4.d/S80aegis rm -rf /etc/rc5.d/S80aegis #腾讯云盾 /usr/local/qcloud/stargate/admin/uninstall.sh /usr/local/qcloud/YunJing/uninst.sh /usr/local/qcloud/monitor/barad/admin/uninstall.sh systemctl daemon-reload systemctl stop YDService systemctl disable YDService rm -rf /lib/systemd/system/YDService.service systemctl daemon-reload sed -i 's#/usr/local/qcloud#rcvtevyy4f5d#g' /etc/rc.local sed -i '/rcvtevyy4f5d/d' /etc/rc.local rm -rf $(find /etc/udev/rules.d -iname *qcloud* 2>/dev/null) pkill -9 YDService pkill -9 YDLive pkill -9 sgagent pkill -9 /usr/local/qcloud pkill -9 barad_agent rm -rf /usr/local/qcloud rm -rf /usr/local/yd.socket.client rm -rf /usr/local/yd.socket.server mkdir /usr/local/qcloud mkdir /usr/local/qcloud/action mkdir /usr/local/qcloud/action/login_banner.sh mkdir /usr/local/qcloud/action/action.sh } #升级系统组件 doupdate() { updateSystem() { if ! [[ "$(type -P do-release-upgrade)" ]]; then if ! apt -y --no-install-recommends install ubuntu-release-upgrader-core; then apt update if ! apt -y --no-install-recommends install ubuntu-release-upgrader-core; then red "脚本出错！" yellow "按回车键继续或者Ctrl+c退出" read -s fi fi fi echo -e "\n\n\n" tyblue "------------------请选择升级系统版本--------------------" tyblue " 1.最新beta版(现在是21.04)(2020.11)" tyblue " 2.最新发行版(现在是20.10)(2020.11)" tyblue " 3.最新LTS版(现在是20.04)(2020.11)" tyblue "-------------------------版本说明-------------------------" tyblue " beta版：即测试版" tyblue " 发行版：即稳定版" tyblue " LTS版：长期支持版本，可以理解为超级稳定版" tyblue "-------------------------注意事项-------------------------" yellow " 1.升级过程中遇到问话/对话框，如果不明白，选择yes/y/第一个选项" yellow " 2.升级系统完成后将会重启，重启后，请再次运行此脚本完成剩余安装" yellow " 3.升级系统可能需要15分钟或更久" yellow " 4.有的时候不能一次性更新到所选择的版本，可能要更新多次" yellow " 5.升级系统后以下配置可能会恢复系统默认配置：" yellow " ssh端口 ssh超时时间 bbr加速(恢复到关闭状态)" tyblue "----------------------------------------------------------" green " 您现在的系统版本是$systemVersion" tyblue "----------------------------------------------------------" echo choice="" while [ "$choice" != "1" -a "$choice" != "2" -a "$choice" != "3" ] do read -p "您的选择是：" choice done if ! [[ "$(cat /etc/ssh/sshd_config | grep -i '^[ '$'\t]*port ' | awk '{print $2}')" =~ ^("22"|"")$ ]]; then red "检测到ssh端口号被修改" red "升级系统后ssh端口号可能恢复默认值(22)" yellow "按回车键继续。。。" read -s fi local i for ((i=0;i<2;i++)) do sed -i '/^[ \t]*Prompt[ \t]*=/d' /etc/update-manager/release-upgrades echo 'Prompt=normal' >> /etc/update-manager/release-upgrades case "$choice" in 1) do-release-upgrade -d do-release-upgrade -d sed -i 's/Prompt=normal/Prompt=lts/' /etc/update-manager/release-upgrades do-release-upgrade -d do-release-upgrade -d sed -i 's/Prompt=lts/Prompt=normal/' /etc/update-manager/release-upgrades do-release-upgrade do-release-upgrade sed -i 's/Prompt=normal/Prompt=lts/' /etc/update-manager/release-upgrades do-release-upgrade do-release-upgrade ;; 2) do-release-upgrade do-release-upgrade ;; 3) sed -i 's/Prompt=normal/Prompt=lts/' /etc/update-manager/release-upgrades do-release-upgrade do-release-upgrade ;; esac if ! version_ge $systemVersion 20.04; then sed -i 's/Prompt=lts/Prompt=normal/' /etc/update-manager/release-upgrades do-release-upgrade do-release-upgrade fi apt update apt -y --auto-remove --purge full-upgrade done } while ((1)) do echo -e "\n\n\n" tyblue "-----------------------是否更新系统组件？-----------------------" green " 1. 更新已安装软件，并升级系统 (Ubuntu专享)" green " 2. 仅更新已安装软件" red " 3. 不更新" if [ "$release" == "ubuntu" ]; then if [ $mem_ok == 2 ]; then echo yellow "如果要升级系统，请确保服务器的内存>=512MB" yellow "否则可能无法开机" elif [ $mem_ok == 0 ]; then echo red "检测到内存过小，升级系统可能导致无法开机，请谨慎选择" fi fi echo choice="" while [ "$choice" != "1" -a "$choice" != "2" -a "$choice" != "3" ] do read -p "您的选择是：" choice done if [ "$release" == "ubuntu" ] || [ $choice -ne 1 ]; then break fi echo yellow " 更新系统仅支持Ubuntu！" sleep 3s done if [ $choice -eq 1 ]; then updateSystem apt -y --purge autoremove apt clean elif [ $choice -eq 2 ]; then tyblue "-----------------------即将开始更新-----------------------" yellow " 更新过程中遇到问话/对话框，如果不明白，选择yes/y/第一个选项" yellow " 按回车键继续。。。" read -s $redhat_package_manager -y autoremove $redhat_package_manager -y update apt update apt -y --auto-remove --purge full-upgrade apt -y --purge autoremove apt clean $redhat_package_manager -y autoremove $redhat_package_manager clean all fi } #进入工作目录 enter_temp_dir() { rm -rf "$temp_dir" mkdir "$temp_dir" cd "$temp_dir" } #安装bbr install_bbr() { #输出：latest_kernel_version 和 your_kernel_version get_kernel_info() { green "正在获取最新版本内核版本号。。。。(60内秒未获取成功自动跳过)" local kernel_list local kernel_list_temp=($(timeout 60 wget -qO- https://kernel.ubuntu.com/~kernel-ppa/mainline/ | awk -F'\"v' '/v[0-9]/{print $2}' | cut -d '"' -f1 | cut -d '/' -f1 | sort -rV)) if [ ${#kernel_list_temp[@]} -le 1 ]; then latest_kernel_version="error" your_kernel_version=$(uname -r | cut -d - -f 1) return 1 fi local i=0 local i2=0 local i3=0 local kernel_rc="" local kernel_list_temp2 while ((i2<${#kernel_list_temp[@]})) do if [[ "${kernel_list_temp[i2]}" =~ "rc" ]] && [ "$kernel_rc" == "" ]; then kernel_list_temp2[i3]="${kernel_list_temp[i2]}" kernel_rc="${kernel_list_temp[i2]%%-*}" ((i3++)) ((i2++)) elif [[ "${kernel_list_temp[i2]}" =~ "rc" ]] && [ "${kernel_list_temp[i2]%%-*}" == "$kernel_rc" ]; then kernel_list_temp2[i3]=${kernel_list_temp[i2]} ((i3++)) ((i2++)) elif [[ "${kernel_list_temp[i2]}" =~ "rc" ]] && [ "${kernel_list_temp[i2]%%-*}" != "$kernel_rc" ]; then for((i3=0;i3<${#kernel_list_temp2[@]};i3++)) do kernel_list[i]=${kernel_list_temp2[i3]} ((i++)) done kernel_rc="" i3=0 unset kernel_list_temp2 elif version_ge "$kernel_rc" "${kernel_list_temp[i2]}"; then if [ "$kernel_rc" == "${kernel_list_temp[i2]}" ]; then kernel_list[i]=${kernel_list_temp[i2]} ((i++)) ((i2++)) fi for((i3=0;i3<${#kernel_list_temp2[@]};i3++)) do kernel_list[i]=${kernel_list_temp2[i3]} ((i++)) done kernel_rc="" i3=0 unset kernel_list_temp2 else kernel_list[i]=${kernel_list_temp[i2]} ((i++)) ((i2++)) fi done if [ "$kernel_rc" != "" ]; then for((i3=0;i3<${#kernel_list_temp2[@]};i3++)) do kernel_list[i]=${kernel_list_temp2[i3]} ((i++)) done fi latest_kernel_version=${kernel_list[0]} your_kernel_version=$(uname -r | cut -d - -f 1) check_fake_version() { local temp=${1##*.} if [ ${temp} -eq 0 ]; then return 0 else return 1 fi } while check_fake_version ${your_kernel_version} do your_kernel_version=${your_kernel_version%.*} done if [ $release == "ubuntu" ] || [ $release == "other-debian" ]; then local rc_version=$(uname -r | cut -d - -f 2) if [[ $rc_version =~ "rc" ]]; then rc_version=${rc_version##*'rc'} your_kernel_version=${your_kernel_version}-rc${rc_version} fi else latest_kernel_version=${latest_kernel_version%%-*} fi } #卸载多余内核 remove_other_kernel() { if [ $release == "ubuntu" ] || [ $release == "other-debian" ]; then local kernel_list_image=($(dpkg --list | grep 'linux-image' | awk '{print $2}')) local kernel_list_modules=($(dpkg --list | grep 'linux-modules' | awk '{print $2}')) local kernel_now=$(uname -r) local ok_install=0 for ((i=${#kernel_list_image[@]}-1;i>=0;i--)) do if [[ "${kernel_list_image[$i]}" =~ "$kernel_now" ]]; then unset kernel_list_image[$i] ((ok_install++)) fi done if [ $ok_install -lt 1 ]; then red "未发现正在使用的内核，可能已经被卸载" yellow "按回车键继续。。。" read -s return 1 fi ok_install=0 for ((i=${#kernel_list_modules[@]}-1;i>=0;i--)) do if [[ "${kernel_list_modules[$i]}" =~ "$kernel_now" ]]; then unset kernel_list_modules[$i] ((ok_install++)) fi done if [ $ok_install -lt 1 ]; then red "未发现正在使用的内核，可能已经被卸载" yellow "按回车键继续。。。" read -s return 1 fi if [ ${#kernel_list_modules[@]} -eq 0 ] && [ ${#kernel_list_image[@]} -eq 0 ]; then yellow "没有内核可卸载" return 0 fi apt -y purge ${kernel_list_image[@]} ${kernel_list_modules[@]} else local kernel_list=($(rpm -qa |grep '^kernel-[0-9]\|^kernel-ml-[0-9]')) local kernel_list_devel=($(rpm -qa | grep '^kernel-devel\|^kernel-ml-devel')) if version_ge $redhat_version 8; then local kernel_list_modules=($(rpm -qa |grep '^kernel-modules\|^kernel-ml-modules')) local kernel_list_core=($(rpm -qa | grep '^kernel-core\|^kernel-ml-core')) fi local kernel_now=$(uname -r) local ok_install=0 for ((i=${#kernel_list[@]}-1;i>=0;i--)) do if [[ "${kernel_list[$i]}" =~ "$kernel_now" ]]; then unset kernel_list[$i] ((ok_install++)) fi done if [ $ok_install -lt 1 ]; then red "未发现正在使用的内核，可能已经被卸载" yellow "按回车键继续。。。" read -s return 1 fi for ((i=${#kernel_list_devel[@]}-1;i>=0;i--)) do if [[ "${kernel_list_devel[$i]}" =~ "$kernel_now" ]]; then unset kernel_list_devel[$i] fi done if version_ge $redhat_version 8; then ok_install=0 for ((i=${#kernel_list_modules[@]}-1;i>=0;i--)) do if [[ "${kernel_list_modules[$i]}" =~ "$kernel_now" ]]; then unset kernel_list_modules[$i] ((ok_install++)) fi done if [ $ok_install -lt 1 ]; then red "未发现正在使用的内核，可能已经被卸载" yellow "按回车键继续。。。" read -s return 1 fi ok_install=0 for ((i=${#kernel_list_core[@]}-1;i>=0;i--)) do if [[ "${kernel_list_core[$i]}" =~ "$kernel_now" ]]; then unset kernel_list_core[$i] ((ok_install++)) fi done if [ $ok_install -lt 1 ]; then red "未发现正在使用的内核，可能已经被卸载" yellow "按回车键继续。。。" read -s return 1 fi fi if ([ ${#kernel_list[@]} -eq 0 ] && [ ${#kernel_list_devel[@]} -eq 0 ]) && (! version_ge $redhat_version 8 || ([ ${#kernel_list_modules[@]} -eq 0 ] && [ ${#kernel_list_core[@]} -eq 0 ])); then yellow "没有内核可卸载" return 0 fi if version_ge $redhat_version 8; then $redhat_package_manager -y remove ${kernel_list[@]} ${kernel_list_modules[@]} ${kernel_list_core[@]} ${kernel_list_devel[@]} else $redhat_package_manager -y remove ${kernel_list[@]} ${kernel_list_devel[@]} fi fi green "-------------------卸载完成-------------------" } local your_kernel_version local latest_kernel_version get_kernel_info if ! grep -q "#This file has been edited by v2ray-WebSocket-TLS-Web-setup-script" /etc/sysctl.conf; then echo >> /etc/sysctl.conf echo "#This file has been edited by v2ray-WebSocket-TLS-Web-setup-script" >> /etc/sysctl.conf fi while ((1)) do echo -e "\n\n\n" tyblue "------------------请选择要使用的bbr版本------------------" green " 1. 升级最新版内核并启用bbr(推荐)" if version_ge $your_kernel_version 4.9; then tyblue " 2. 启用bbr" else tyblue " 2. 升级内核启用bbr" fi tyblue " 3. 启用bbr2(需更换第三方内核)" tyblue " 4. 启用bbrplus/bbr魔改版/暴力bbr魔改版/锐速(需更换第三方内核)" tyblue " 5. 卸载多余内核" tyblue " 6. 退出bbr安装" tyblue "------------------关于安装bbr加速的说明------------------" green " bbr加速可以大幅提升网络速度，建议安装" yellow " 更换第三方内核可能造成系统不稳定，甚至无法开机" yellow " 更换/升级内核需重启，重启后，请再次运行此脚本完成剩余安装" tyblue "---------------------------------------------------------" tyblue " 当前内核版本：${your_kernel_version}" tyblue " 最新内核版本：${latest_kernel_version}" tyblue " 当前内核是否支持bbr：" if version_ge $your_kernel_version 4.9; then green " 是" else red " 否，需升级内核" fi tyblue " bbr启用状态：" if sysctl net.ipv4.tcp_congestion_control | grep -Eq "bbr|nanqinlang|tsunami"; then local bbr_info=$(sysctl net.ipv4.tcp_congestion_control) bbr_info=${bbr_info#*=} if [ $bbr_info == nanqinlang ]; then bbr_info="暴力bbr魔改版" elif [ $bbr_info == tsunami ]; then bbr_info="bbr魔改版" fi green " 正在使用：${bbr_info}" else red " bbr未启用" fi echo choice="" while [ "$choice" != "1" -a "$choice" != "2" -a "$choice" != "3" -a "$choice" != "4" -a "$choice" != "5" -a "$choice" != "6" ] do read -p "您的选择是：" choice done if [ $choice -eq 1 ]; then sed -i '/^[ \t]*net.core.default_qdisc[ \t]*=/d' /etc/sysctl.conf sed -i '/^[ \t]*net.ipv4.tcp_congestion_control[ \t]*=/d' /etc/sysctl.conf echo 'net.core.default_qdisc = fq' >> /etc/sysctl.conf echo 'net.ipv4.tcp_congestion_control = bbr' >> /etc/sysctl.conf sysctl -p if ! wget -O update-kernel.sh https://github.com/kirin10000/update-kernel/raw/master/update-kernel.sh; then red "获取内核升级脚本失败" yellow "按回车键继续或者按ctrl+c终止" read -s fi chmod +x update-kernel.sh ./update-kernel.sh if ! sysctl net.ipv4.tcp_congestion_control | grep -q "bbr"; then red "开启bbr失败" red "如果刚安装完内核，请先重启" red "如果重启仍然无效，请尝试选择2选项" else green "--------------------bbr已安装--------------------" fi elif [ $choice -eq 2 ]; then sed -i '/^[ \t]*net.core.default_qdisc[ \t]*=/d' /etc/sysctl.conf sed -i '/^[ \t]*net.ipv4.tcp_congestion_control[ \t]*=/d' /etc/sysctl.conf echo 'net.core.default_qdisc = fq' >> /etc/sysctl.conf echo 'net.ipv4.tcp_congestion_control = bbr' >> /etc/sysctl.conf sysctl -p sleep 1s if ! sysctl net.ipv4.tcp_congestion_control | grep -q "bbr"; then if ! wget -O bbr.sh https://github.com/teddysun/across/raw/master/bbr.sh; then red "获取bbr脚本失败" yellow "按回车键继续或者按ctrl+c终止" read -s fi chmod +x bbr.sh ./bbr.sh else green "--------------------bbr已安装--------------------" fi elif [ $choice -eq 3 ]; then tyblue "--------------------即将安装bbr2加速，安装完成后服务器将会重启--------------------" tyblue " 重启后，请再次选择这个选项完成bbr2剩余部分安装(开启bbr和ECN)" yellow " 按回车键以继续。。。。" read -s local temp_bbr2 if [ $release == "ubuntu" ] || [ $release == "other-debian" ]; then local temp_bbr2="https://github.com/yeyingorg/bbr2.sh/raw/master/bbr2.sh" else local temp_bbr2="https://github.com/jackjieYYY/bbr2/raw/master/bbr2.sh" fi if ! wget -O bbr2.sh $temp_bbr2; then red "获取bbr2脚本失败" yellow "按回车键继续或者按ctrl+c终止" read -s fi chmod +x bbr2.sh ./bbr2.sh elif [ $choice -eq 4 ]; then if ! wget -O tcp.sh "https://raw.githubusercontent.com/chiakge/Linux-NetSpeed/master/tcp.sh"; then red "获取脚本失败" yellow "按回车键继续或者按ctrl+c终止" read -s fi chmod +x tcp.sh ./tcp.sh elif [ $choice -eq 5 ]; then tyblue " 该操作将会卸载除现在正在使用的内核外的其余内核" tyblue " 您正在使用的内核是：$(uname -r)" choice="" while [[ "$choice" != "y" && "$choice" != "n" ]] do read -p "是否继续？(y/n)" choice done if [ $choice == y ]; then remove_other_kernel fi else break fi sleep 3s done } #读取域名 readDomain() { check_domain() { local temp=${1%%.*} if [ "$temp" == "www" ]; then red "域名前面不要带www！" return 0 elif [ "$1" == "" ]; then return 0 else return 1 fi } local domain="" local domainconfig="" local pretend="" echo -e "\n\n\n" tyblue "--------------------请选择域名解析情况--------------------" tyblue " 1. 一级域名 和 www.一级域名 都解析到此服务器上" green " 如：123.com 和 www.123.com 都解析到此服务器上" tyblue " 2. 仅某个域名解析到此服务器上" green " 如：123.com 或 www.123.com 或 xxx.123.com 中的某一个解析到此服务器上" echo while [ "$domainconfig" != "1" -a "$domainconfig" != "2" ] do read -p "您的选择是：" domainconfig done local queren="" while [ "$queren" != "y" ] do echo if [ $domainconfig -eq 1 ]; then tyblue '---------请输入一级域名(前面不带"www."、"http://"或"https://")---------' read -p "请输入域名：" domain while check_domain $domain do read -p "请输入域名：" domain done else tyblue '-------请输入解析到此服务器的域名(前面不带"http://"或"https://")-------' read -p "请输入域名：" domain fi echo queren="" while [ "$queren" != "y" -a "$queren" != "n" ] do tyblue "您输入的域名是\"$domain\"，确认吗？(y/n)" read queren done done echo -e "\n\n\n" tyblue "------------------------------请选择要伪装的网站页面------------------------------" tyblue " 1. 403页面 (模拟网站后台)" green " 说明：大型网站几乎都有使用网站后台，比如bilibili的每个视频都是由" green " 另外一个域名提供的，直接访问那个域名的根目录将返回403或其他错误页面" tyblue " 2. 镜像腾讯视频网站" green " 说明：是真镜像站，非链接跳转，默认为腾讯视频，搭建完成后可以自己修改，可能构成侵权" tyblue " 3. nextcloud登陆页面" green " 说明：nextclound是开源的私人网盘服务，假装你搭建了一个私人网盘(可以换成别的自定义网站)" echo while [[ x"$pretend" != x"1" && x"$pretend" != x"2" && x"$pretend" != x"3" ]] do read -p "您的选择是：" pretend done domain_list+=("$domain") domainconfig_list+=("$domainconfig") pretend_list+=("$pretend") } #读取v2ray_protocol配置 readProtocolConfig() { echo -e "\n\n\n" tyblue "---------------------请选择V2Ray要使用协议---------------------" tyblue " 1. (VLESS-TCP+TLS) + (VMess-WebSocket+TLS) + Web" green " 适合有时使用CDN，且CDN不可信任(如国内CDN)" tyblue " 2. (VLESS-TCP+TLS) + (VLESS-WebSocket+TLS) + Web" green " 适合有时使用CDN，且CDN可信任" tyblue " 3. VLESS-TCP+TLS+Web" green " 适合完全不用CDN" tyblue " 4. VMess-WebSocket+TLS+Web" green " 适合一直使用CDN，且CDN不可信任(如国内CDN)" tyblue " 5. VLESS-WebSocket+TLS+Web" green " 适合一直使用CDN，且CDN可信任" echo yellow " 注：" yellow " 1.各协议理论速度对比：https://github.com/badO1a5A90/v2ray-doc/blob/main/performance_test/Xray/speed_test_2020119.md" yellow " 2.WebSocket协议支持CDN，TCP不支持" yellow " 3.VLESS协议用于CDN，CDN可以看见传输的明文" yellow " 4.若不知CDN为何物，请选3" echo local mode="" while [[ "$mode" != "1" && "$mode" != "2" && "$mode" != "3" && "$mode" != "4" && "$mode" != "5" ]] do read -p "您的选择是：" mode done if [ $mode -eq 1 ]; then protocol_1=1 protocol_2=2 elif [ $mode -eq 2 ]; then protocol_1=1 protocol_2=1 elif [ $mode -eq 3 ]; then protocol_1=1 protocol_2=0 elif [ $mode -eq 4 ]; then protocol_1=0 protocol_2=2 elif [ $mode -eq 5 ]; then protocol_1=0 protocol_2=1 fi } #备份域名伪装网站 backup_domains_web() { local i mkdir "${temp_dir}/domain_backup" for i in ${!domain_list[@]} do if [ "$1" == "cp" ]; then cp -rf ${nginx_prefix}/html/${domain_list[i]} "${temp_dir}/domain_backup" 2>/dev/null else mv ${nginx_prefix}/html/${domain_list[i]} "${temp_dir}/domain_backup" 2>/dev/null fi done } #卸载v2ray和nginx remove_v2ray() { systemctl stop v2ray systemctl disable v2ray bash <(curl -L https://raw.githubusercontent.com/v2fly/fhs-install-v2ray/master/install-release.sh) --remove rm -rf /usr/bin/v2ray rm -rf /etc/v2ray rm -rf /usr/local/bin/v2ray rm -rf /usr/local/etc/v2ray rm -rf /etc/systemd/system/v2ray.service rm -rf /etc/systemd/system/v2ray@.service systemctl daemon-reload } remove_nginx() { systemctl stop nginx ${nginx_prefix}/sbin/nginx -s stop pkill -9 nginx systemctl disable nginx rm -rf $nginx_service systemctl daemon-reload rm -rf ${nginx_prefix} } #安装nignx install_nginx() { green "正在编译和安装nginx。。。。" if ! wget -O ${nginx_version}.tar.gz https://nginx.org/download/${nginx_version}.tar.gz; then red "获取nginx失败" yellow "按回车键继续或者按ctrl+c终止" read -s fi tar -zxf ${nginx_version}.tar.gz if ! wget -O ${openssl_version}.tar.gz https://github.com/openssl/openssl/archive/${openssl_version#*-}.tar.gz; then red "获取openssl失败" yellow "按回车键继续或者按ctrl+c终止" read -s fi tar -zxf ${openssl_version}.tar.gz cd ${nginx_version} sed -i "s/OPTIMIZE[ \t]*=>[ \t]*'-O'/OPTIMIZE => '-O3'/g" src/http/modules/perl/Makefile.PL ./configure --prefix=${nginx_prefix} --with-openssl=../$openssl_version --with-openssl-opt="enable-ec_nistp_64_gcc_128 shared threads zlib-dynamic sctp" --with-mail=dynamic --with-mail_ssl_module --with-stream=dynamic --with-stream_ssl_module --with-stream_realip_module --with-stream_geoip_module=dynamic --with-stream_ssl_preread_module --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_xslt_module=dynamic --with-http_image_filter_module=dynamic --with-http_geoip_module=dynamic --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_auth_request_module --with-http_random_index_module --with-http_secure_link_module --with-http_degradation_module --with-http_slice_module --with-http_stub_status_module --with-http_perl_module=dynamic --with-pcre --with-libatomic --with-compat --with-cpp_test_module --with-google_perftools_module --with-file-aio --with-threads --with-poll_module --with-select_module --with-cc-opt="-Wno-error -g0 -O3" if ! make; then red "nginx编译失败！" yellow "请尝试更换系统，建议使用Ubuntu最新版系统" green "欢迎进行Bug report(https://github.com/kirin10000/V2Ray-TLS-Web-setup-script/issues)，感谢您的支持" exit 1 fi if [ $update == 1 ]; then backup_domains_web fi remove_nginx make install cd .. } config_service_nginx() { systemctl disable nginx rm -rf $nginx_service cat > $nginx_service << EOF [Unit] Description=The NGINX HTTP and reverse proxy server After=syslog.target network-online.target remote-fs.target nss-lookup.target Wants=network-online.target [Service] Type=forking User=root ExecStartPre=/bin/rm -rf /dev/shm/nginx_unixsocket ExecStartPre=/bin/mkdir /dev/shm/nginx_unixsocket ExecStartPre=/bin/chmod 711 /dev/shm/nginx_unixsocket ExecStartPre=/bin/rm -rf /dev/shm/nginx_tcmalloc ExecStartPre=/bin/mkdir /dev/shm/nginx_tcmalloc ExecStartPre=/bin/chmod 0777 /dev/shm/nginx_tcmalloc ExecStart=${nginx_prefix}/sbin/nginx ExecStop=${nginx_prefix}/sbin/nginx -s stop ExecStopPost=/bin/rm -rf /dev/shm/nginx_tcmalloc ExecStopPost=/bin/rm -rf /dev/shm/nginx_unixsocket PrivateTmp=true [Install] WantedBy=multi-user.target EOF chmod 0644 $nginx_service systemctl daemon-reload systemctl enable nginx } #安装/更新V2Ray install_update_v2ray() { green "正在安装/更新V2Ray。。。。" if ! bash <(curl -L https://raw.githubusercontent.com/v2fly/fhs-install-v2ray/master/install-release.sh) && ! bash <(curl -L https://raw.githubusercontent.com/v2fly/fhs-install-v2ray/master/install-release.sh); then red "安装/更新V2Ray失败" yellow "按回车键继续或者按ctrl+c终止" read -s return 1 fi #解决透明代理 Too many files 问题 #https://guide.v2fly.org/app/tproxy.html#%E8%A7%A3%E5%86%B3-too-many-open-files-%E9%97%AE%E9%A2%98 if ! grep -qE 'LimitNPROC|LimitNOFILE' /etc/systemd/system/v2ray.service /etc/systemd/system/v2ray@.service; then echo >> /etc/systemd/system/v2ray.service echo "[Service]" >> /etc/systemd/system/v2ray.service echo "LimitNPROC=10000" >> /etc/systemd/system/v2ray.service echo "LimitNOFILE=1000000" >> /etc/systemd/system/v2ray.service echo >> /etc/systemd/system/v2ray@.service echo "[Service]" >> /etc/systemd/system/v2ray@.service echo "LimitNPROC=10000" >> /etc/systemd/system/v2ray@.service echo "LimitNOFILE=1000000" >> /etc/systemd/system/v2ray@.service systemctl daemon-reload sleep 1s if systemctl is-active v2ray > /dev/null 2>&1; then systemctl restart v2ray fi fi } #获取证书 参数: domain domainconfig get_cert() { mv $v2ray_config $v2ray_config.bak echo "{}" > $v2ray_config if [ $2 -eq 1 ]; then local temp="-d www.$1" else local temp="" fi if ! $HOME/.acme.sh/acme.sh --issue -d $1 $temp -w ${nginx_prefix}/html/issue_certs -k ec-256 -ak ec-256 --pre-hook "mv ${nginx_prefix}/conf/nginx.conf ${nginx_prefix}/conf/nginx.conf.bak && cp ${nginx_prefix}/conf/issue_certs.conf ${nginx_prefix}/conf/nginx.conf && sleep 2s && systemctl restart nginx" --post-hook "mv ${nginx_prefix}/conf/nginx.conf.bak ${nginx_prefix}/conf/nginx.conf && sleep 2s && systemctl restart nginx" --ocsp; then $HOME/.acme.sh/acme.sh --issue -d $1 $temp -w ${nginx_prefix}/html/issue_certs -k ec-256 -ak ec-256 --pre-hook "mv ${nginx_prefix}/conf/nginx.conf ${nginx_prefix}/conf/nginx.conf.bak && cp ${nginx_prefix}/conf/issue_certs.conf ${nginx_prefix}/conf/nginx.conf && sleep 2s && systemctl restart nginx" --post-hook "mv ${nginx_prefix}/conf/nginx.conf.bak ${nginx_prefix}/conf/nginx.conf && sleep 2s && systemctl restart nginx" --ocsp --debug fi if id nobody | grep -qw 'nogroup'; then temp="chown -R nobody:nogroup ${nginx_prefix}/certs" else temp="chown -R nobody:nobody ${nginx_prefix}/certs" fi if ! $HOME/.acme.sh/acme.sh --installcert -d $1 --key-file ${nginx_prefix}/certs/${1}.key --fullchain-file ${nginx_prefix}/certs/${1}.cer --reloadcmd "$temp && sleep 2s && systemctl restart v2ray" --ecc; then yellow "证书安装失败，请检查您的域名，确保80端口未打开并且未被占用。并在安装完成后，使用选项9修复" yellow "按回车键继续。。。" read -s fi mv $v2ray_config.bak $v2ray_config } get_all_certs() { local i for ((i=0;i<${#domain_list[@]};i++)) do get_cert ${domain_list[i]} ${domainconfig_list[i]} done } #配置nginx config_nginx_init() { cat > ${nginx_prefix}/conf/nginx.conf < $nginx_config<> $nginx_config<> $nginx_config else echo " server_name ${domain_list[i]};" >> $nginx_config fi echo ' add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload" always;' >> $nginx_config if [ ${pretend_list[i]} -eq 1 ]; then echo " return 403;" >> $nginx_config elif [ ${pretend_list[i]} -eq 2 ]; then cat >> $nginx_config<> $nginx_config fi echo "}" >> $nginx_config done } #配置v2ray config_v2ray() { local i cat > $v2ray_config <> $v2ray_config <> $v2ray_config echo ' "fallbacks": [' >> $v2ray_config if [ $protocol_2 -ne 0 ]; then cat >> $v2ray_config <> $v2ray_config <> $v2ray_config <> $v2ray_config else echo " }," >> $v2ray_config fi done cat >> $v2ray_config <> $v2ray_config echo ' {' >> $v2ray_config echo ' "listen": "@/dev/shm/v2ray/ws.sock",' >> $v2ray_config if [ $protocol_2 -eq 2 ]; then echo ' "protocol": "vmess",' >> $v2ray_config else echo ' "protocol": "vless",' >> $v2ray_config fi echo ' "settings": {' >> $v2ray_config echo ' "clients": [' >> $v2ray_config echo ' {' >> $v2ray_config echo " \"id\": \"$v2id_2\"" >> $v2ray_config echo ' }' >> $v2ray_config if [ $protocol_2 -eq 2 ]; then echo ' ]' >> $v2ray_config else echo ' ],' >> $v2ray_config echo ' "decryption": "none"' >> $v2ray_config fi cat >> $v2ray_config <> $v2ray_config <1 {print $NF}')) local line local i for i in ${!domain_list[@]} do line=$(grep -n "server_name www.${domain_list[i]} ${domain_list[i]};" $nginx_config | tail -n 1 | awk -F : '{print $1}') if [ "$line" == "" ]; then line=$(grep -n "server_name ${domain_list[i]};" $nginx_config | tail -n 1 | awk -F : '{print $1}') domainconfig_list[i]=2 else domainconfig_list[i]=1 fi if awk 'NR=='"$(($line+2))"' {print $0}' $nginx_config | grep -q "return 403"; then pretend_list[i]=1 elif awk 'NR=='"$(($line+2))"' {print $0}' $nginx_config | grep -q "location / {"; then pretend_list[i]=2 else pretend_list[i]=3 fi done } #安装v2ray_tls_web install_update_v2ray_tls_web() { install_dependence() { if [ $release == "ubuntu" ] || [ $release == "other-debian" ]; then if ! apt -y --no-install-recommends install $1; then apt update if ! apt -y --no-install-recommends install $1; then yellow "依赖安装失败！！" green "欢迎进行Bug report(https://github.com/kirin10000/V2Ray-TLS-Web-setup-script/issues)，感谢您的支持" yellow "按回车键继续或者ctrl+c退出" read -s fi fi else if $redhat_package_manager --help | grep -q "\-\-enablerepo="; then local temp_redhat_install="$redhat_package_manager -y --enablerepo=" else local temp_redhat_install="$redhat_package_manager -y --enablerepo " fi if ! $redhat_package_manager -y install $1; then if [ "$release" == "centos" ] && version_ge $systemVersion 8 && $temp_redhat_install"epel,PowerTools" install $1;then return 0 fi if $temp_redhat_install'*' install $1; then return 0 fi yellow "依赖安装失败！！" green "欢迎进行Bug report(https://github.com/kirin10000/V2Ray-TLS-Web-setup-script/issues)，感谢您的支持" yellow "按回车键继续或者ctrl+c退出" read -s fi fi } systemctl stop nginx systemctl stop v2ray check_port apt -y -f install get_system_info check_important_dependence_installed ca-certificates ca-certificates check_nginx check_SELinux check_ssh_timeout uninstall_firewall doupdate enter_temp_dir install_bbr apt -y -f install #读取信息 if [ $update == 0 ]; then readDomain readProtocolConfig else get_base_information get_domainlist fi green "正在安装依赖。。。。" if [ $release == "centos" ] || [ $release == "fedora" ] || [ $release == "other-redhat" ]; then install_dependence "gperftools-devel libatomic_ops-devel pcre-devel zlib-devel libxslt-devel gd-devel perl-ExtUtils-Embed perl-Data-Dumper perl-IPC-Cmd geoip-devel lksctp-tools-devel libxml2-devel gcc gcc-c++ wget unzip curl make openssl crontabs" ##libxml2-devel非必须 else if [ "$release" == "ubuntu" ] && [ "$systemVersion" == "20.04" ] && [ "$(uname -m)" == "x86_64" ]; then install_dependence "gcc-10 g++-10" apt -y purge gcc g++ gcc-9 g++-9 gcc-8 g++-8 gcc-7 g++-7 apt -y autopurge install_dependence "gcc-10 g++-10 libgoogle-perftools-dev libatomic-ops-dev libperl-dev libxslt-dev zlib1g-dev libpcre3-dev libgeoip-dev libgd-dev libxml2-dev libsctp-dev wget unzip curl make openssl cron" ln -s -f /usr/bin/gcc-10 /usr/bin/gcc ln -s -f /usr/bin/gcc-10 /usr/bin/cc ln -s -f /usr/bin/x86_64-linux-gnu-gcc-10 /usr/bin/x86_64-linux-gnu-gcc ln -s -f /usr/bin/g++-10 /usr/bin/g++ ln -s -f /usr/bin/g++-10 /usr/bin/c++ ln -s -f /usr/bin/x86_64-linux-gnu-g++-10 /usr/bin/x86_64-linux-gnu-g++ ln -s -f /usr/bin/gcc-ar-10 /usr/bin/gcc-ar ln -s -f /usr/bin/x86_64-linux-gnu-gcc-ar-10 /usr/bin/x86_64-linux-gnu-gcc-ar ln -s -f /usr/bin/gcc-nm-10 /usr/bin/gcc-nm ln -s -f /usr/bin/x86_64-linux-gnu-gcc-nm-10 /usr/bin/x86_64-linux-gnu-gcc-nm ln -s -f /usr/bin/gcc-ranlib-10 /usr/bin/gcc-ranlib ln -s -f /usr/bin/x86_64-linux-gnu-gcc-ranlib-10 /usr/bin/x86_64-linux-gnu-gcc-ranlib ln -s -f /usr/bin/cpp-10 /usr/bin/cpp ln -s -f /usr/bin/x86_64-linux-gnu-cpp-10 /usr/bin/x86_64-linux-gnu-cpp ln -s -f /usr/bin/gcov-10 /usr/bin/gcov ln -s -f /usr/bin/gcov-dump-10 /usr/bin/gcov-dump ln -s -f /usr/bin/gcov-tool-10 /usr/bin/gcov-tool ln -s -f /usr/bin/x86_64-linux-gnu-gcov-10 /usr/bin/x86_64-linux-gnu-gcov ln -s -f /usr/bin/x86_64-linux-gnu-gcov-dump-10 /usr/bin/x86_64-linux-gnu-gcov-dump ln -s -f /usr/bin/x86_64-linux-gnu-gcov-tool-10 /usr/bin/x86_64-linux-gnu-gcov-tool else install_dependence "gcc g++ libgoogle-perftools-dev libatomic-ops-dev libperl-dev libxslt-dev zlib1g-dev libpcre3-dev libgeoip-dev libgd-dev libxml2-dev libsctp-dev wget unzip curl make openssl cron" ##libxml2-dev非必须 fi fi apt clean $redhat_package_manager clean all ##安装nginx if [ $nginx_is_installed -eq 0 ]; then install_nginx else choice="" if [ $update -eq 1 ]; then while [ "$choice" != "y" ] && [ "$choice" != "n" ] do tyblue "是否更新Nginx?(y/n)" read choice done else tyblue "---------------检测到nginx已存在---------------" tyblue " 1. 尝试使用现有nginx" tyblue " 2. 卸载现有nginx并重新编译安装" echo yellow " 若安装完成后Nginx无法启动，请卸载并重新安装" echo while [ "$choice" != "1" ] && [ "$choice" != "2" ] do read -p "您的选择是：" choice done fi if [ "$choice" == "y" ] || [ "$choice" == "2" ]; then install_nginx else [ $update -eq 1 ] && backup_domains_web local temp_domain_bak=("${domain_list[@]}") local temp_domainconfig_bak=("${domainconfig_list[@]}") local temp_pretend_bak=("${pretend_list[@]}") get_domainlist remove_all_domains domain_list=("${temp_domain_bak[@]}") domainconfig_list=("${temp_domainconfig_bak[@]}") pretend_list=("${temp_pretend_bak[@]}") rm -rf ${nginx_prefix}/conf.d rm -rf ${nginx_prefix}/certs rm -rf ${nginx_prefix}/html/issue_certs rm -rf ${nginx_prefix}/conf/issue_certs.conf cp ${nginx_prefix}/conf/nginx.conf.default ${nginx_prefix}/conf/nginx.conf fi fi mkdir ${nginx_prefix}/conf.d mkdir ${nginx_prefix}/certs mkdir ${nginx_prefix}/html/issue_certs cat > ${nginx_prefix}/conf/issue_certs.conf << EOF events { worker_connections 1024; } http { server { listen [::]:80 ipv6only=off; root ${nginx_prefix}/html/issue_certs; } } EOF config_service_nginx #安装V2Ray remove_v2ray install_update_v2ray systemctl enable v2ray green "正在获取证书。。。。" if [ $update -eq 0 ]; then [ -e $HOME/.acme.sh/acme.sh ] && $HOME/.acme.sh/acme.sh --uninstall rm -rf $HOME/.acme.sh curl https://get.acme.sh | sh fi $HOME/.acme.sh/acme.sh --upgrade --auto-upgrade get_all_certs if [ $update == 0 ]; then path=$(cat /dev/urandom | head -c 8 | md5sum | head -c 7) path="/$path" v2id_1=$(cat /proc/sys/kernel/random/uuid) v2id_2=$(cat /proc/sys/kernel/random/uuid) fi config_nginx config_v2ray if [ $update == 1 ]; then mv "${temp_dir}/domain_backup/"* ${nginx_prefix}/html 2>/dev/null else get_all_webs fi sleep 2s systemctl restart nginx systemctl restart v2ray if [ $update == 1 ]; then green "-------------------升级完成-------------------" else green "-------------------安装完成-------------------" fi echo_end rm -rf "$temp_dir" } #开始菜单 start_menu() { change_protocol() { get_base_information local protocol_1_old=$protocol_1 local protocol_2_old=$protocol_2 readProtocolConfig if [ $protocol_1_old -eq $protocol_1 ] && [ $protocol_2_old -eq $protocol_2 ]; then red "传输协议未更换" return 0 fi [ $protocol_1_old -eq 0 ] && [ $protocol_1 -ne 0 ] && v2id_1=$(cat /proc/sys/kernel/random/uuid) if [ $protocol_2_old -eq 0 ] && [ $protocol_2 -ne 0 ]; then path=$(cat /dev/urandom | head -c 8 | md5sum | head -c 7) path="/$path" v2id_2=$(cat /proc/sys/kernel/random/uuid) fi get_domainlist config_v2ray systemctl restart v2ray green "更换成功！！" echo_end } change_dns() { red "注意！！" red "1.部分云服务商(如阿里云)使用本地服务器作为软件包源，修改dns后需要换源！！" red " 如果不明白，那么请在安装完成后再修改dns，并且修改完后不要重新安装" red "2.Ubuntu系统重启后可能会恢复原dns" tyblue "此操作将修改dns服务器为1.1.1.1和1.0.0.1(cloudflare公共dns)" choice="" while [ "$choice" != "y" -a "$choice" != "n" ] do tyblue "是否要继续?(y/n)" read choice done if [ $choice == y ]; then if ! grep -q "#This file has been edited by v2ray-WebSocket-TLS-Web-setup-script" /etc/resolv.conf; then sed -i 's/^[ \t]*nameserver[ \t][ \t]*/#&/' /etc/resolv.conf echo >> /etc/resolv.conf echo 'nameserver 1.1.1.1' >> /etc/resolv.conf echo 'nameserver 1.0.0.1' >> /etc/resolv.conf echo '#This file has been edited by v2ray-WebSocket-TLS-Web-setup-script' >> /etc/resolv.conf fi green "修改完成！！" fi } if [ $v2ray_is_installed -eq 1 ]; then local v2ray_status="\033[32m已安装" else local v2ray_status="\033[31m未安装" fi if systemctl is-active v2ray > /dev/null 2>&1; then v2ray_status="${v2ray_status} \033[32m运行中" else v2ray_status="${v2ray_status} \033[31m未运行" fi if [ $nginx_is_installed -eq 1 ]; then local nginx_status="\033[32m已安装" else local nginx_status="\033[31m未安装" fi if systemctl is-active nginx > /dev/null 2>&1; then nginx_status="${nginx_status} \033[32m运行中" else nginx_status="${nginx_status} \033[31m未运行" fi tyblue "--------------------- V2Ray-TLS(1.3)+Web 搭建/管理脚本 ---------------------" echo tyblue " V2Ray： ${v2ray_status}" echo tyblue " Nginx： ${nginx_status}" echo tyblue " 官网：https://github.com/kirin10000/V2Ray-TLS-Web-setup-script" echo tyblue "----------------------------------注意事项----------------------------------" yellow " 1. 此脚本需要一个解析到本服务器的域名" tyblue " 2. 此脚本安装时间较长，详细原因见：" tyblue " https://github.com/kirin10000/V2Ray-TLS-Web-setup-script#安装时长说明" green " 3. 建议使用纯净的系统 (VPS控制台-重置系统)" green " 4. 推荐使用Ubuntu最新版系统" tyblue "----------------------------------------------------------------------------" echo echo tyblue " -----------安装/升级/卸载-----------" if [ $is_installed -eq 0 ]; then green " 1. 安装V2Ray-TLS+Web" else green " 1. 重新安装V2Ray-TLS+Web" fi green " 2. 升级V2Ray-TLS+Web" tyblue " 3. 仅安装bbr(包含bbr2/bbrplus/bbr魔改版/暴力bbr魔改版/锐速)" tyblue " 4. 仅升级V2Ray" red " 5. 卸载V2Ray-TLS+Web" echo tyblue " --------------启动/停止-------------" if systemctl is-active v2ray > /dev/null 2>&1 && systemctl is-active nginx > /dev/null 2>&1; then tyblue " 6. 重新启动V2Ray-TLS+Web" else tyblue " 6. 启动V2Ray-TLS+Web" fi tyblue " 7. 停止V2Ray-TLS+Web" echo tyblue " ----------------管理----------------" tyblue " 8. 查看配置信息" tyblue " 9. 重置域名" tyblue " (会覆盖原有域名配置，安装过程中域名输错了造成V2Ray无法启动可以用此选项修复)" tyblue " 10. 添加域名" tyblue " 11. 删除域名" tyblue " 12. 修改id(用户ID/UUID)" tyblue " 13. 修改path(路径)" tyblue " 14. 修改V2Ray传输协议(TCP/WebSocket)" echo tyblue " ----------------其它----------------" tyblue " 15. 尝试修复退格键无法使用的问题" tyblue " 16. 修改dns" yellow " 17. 退出脚本" echo echo choice="" while [[ "$choice" != "1" && "$choice" != "2" && "$choice" != "3" && "$choice" != "4" && "$choice" != "5" && "$choice" != "6" && "$choice" != "7" && "$choice" != "8" && "$choice" != "9" && "$choice" != "10" && "$choice" != "11" && "$choice" != "12" && "$choice" != "13" && "$choice" != "14" && "$choice" != "15" && "$choice" != "16" && "$choice" != "17" ]] do read -p "您的选择是：" choice done if [ $choice -eq 1 ]; then install_update_v2ray_tls_web elif [ $choice -eq 2 ]; then if [ $is_installed == 0 ]; then red "请先安装V2Ray-TLS+Web！！" exit 1 fi yellow "升级bbr/系统可能需要重启，重启后请再次选择'升级V2Ray-TLS+Web'" yellow "按回车键继续，或者ctrl+c中止" read -s rm -rf "$0" if ! wget -O "$0" "https://github.com/kirin10000/V2Ray-TLS-Web-setup-script/raw/master/V2Ray-TLS+Web-setup.sh" && ! wget -O "$0" "https://github.com/kirin10000/V2Ray-TLS-Web-setup-script/raw/master/V2Ray-TLS+Web-setup.sh"; then red "获取最新脚本失败！" exit 1 fi chmod +x "$0" "$0" --update elif [ $choice -eq 3 ]; then apt -y -f install get_system_info check_important_dependence_installed ca-certificates ca-certificates enter_temp_dir install_bbr apt -y -f install rm -rf "$temp_dir" elif [ $choice -eq 4 ]; then if install_update_v2ray; then green "V2Ray升级完成！" else red "V2Ray升级失败！" fi elif [ $choice -eq 5 ]; then choice="" while [ "$choice" != "y" -a "$choice" != "n" ] do yellow "确定要删除吗?(y/n)" read choice done if [ "$choice" == "n" ]; then exit 0 fi remove_v2ray remove_nginx $HOME/.acme.sh/acme.sh --uninstall rm -rf $HOME/.acme.sh green "删除完成！" elif [ $choice -eq 6 ]; then if systemctl is-active v2ray > /dev/null 2>&1 && systemctl is-active nginx > /dev/null 2>&1; then local temp_is_active=1 else local temp_is_active=0 fi systemctl restart nginx systemctl restart v2ray sleep 1s if ! systemctl is-active v2ray > /dev/null 2>&1; then red "V2Ray启动失败！！" elif ! systemctl is-active nginx > /dev/null 2>&1; then red "nginx启动失败！！" else if [ $temp_is_active -eq 1 ]; then green "重启成功！！" else green "启动成功！！" fi fi elif [ $choice -eq 7 ]; then systemctl stop nginx systemctl stop v2ray green "已停止！" elif [ $choice -eq 8 ]; then get_base_information get_domainlist echo_end elif [ $choice -eq 9 ]; then if [ $is_installed == 0 ]; then red "请先安装V2Ray-TLS+Web！！" exit 1 fi yellow "重置域名将删除所有现有域名(包括域名证书、伪装网站等)" choice="" while [[ "$choice" != "y" && "$choice" != "n" ]] do tyblue "是否继续？(y/n)" read choice done if [ $choice == n ]; then return 0 fi green "重置域名中。。。" $HOME/.acme.sh/acme.sh --uninstall rm -rf $HOME/.acme.sh curl https://get.acme.sh | sh $HOME/.acme.sh/acme.sh --upgrade --auto-upgrade get_base_information get_domainlist remove_all_domains readDomain get_all_certs get_all_webs config_nginx config_v2ray sleep 2s systemctl restart nginx systemctl restart v2ray green "域名重置完成！！" echo_end elif [ $choice -eq 10 ]; then if [ $is_installed == 0 ]; then red "请先安装V2Ray-TLS+Web！！" exit 1 fi get_base_information get_domainlist readDomain get_cert ${domain_list[-1]} ${domainconfig_list[-1]} get_web ${domain_list[-1]} ${pretend_list[-1]} config_nginx config_v2ray sleep 2s systemctl restart nginx systemctl restart v2ray green "域名添加完成！！" echo_end elif [ $choice -eq 11 ]; then if [ $is_installed == 0 ]; then red "请先安装V2Ray-TLS+Web！！" exit 1 fi get_base_information get_domainlist if [ ${#domain_list[@]} -le 1 ]; then red "只有一个域名" exit 1 fi tyblue "-----------------------请选择要删除的域名-----------------------" for i in ${!domain_list[@]} do if [ ${domainconfig_list[i]} -eq 1 ]; then tyblue " ${i}. www.${domain_list[i]} ${domain_list[i]}" else tyblue " ${i}. ${domain_list[i]}" fi done yellow " ${#domain_list[@]}. 不删除" local delete="" while ! [[ "$delete" =~ ^([1-9][0-9]*|0)$ ]] || [ $delete -gt ${#domain_list[@]} ] do read -p "你的选择是：" delete done if [ $delete -eq ${#domain_list[@]} ]; then exit 0 fi $HOME/.acme.sh/acme.sh --remove --domain ${domain_list[$delete]} --ecc rm -rf $HOME/.acme.sh/${domain_list[$delete]}_ecc rm -rf ${nginx_prefix}/html/${domain_list[$delete]} unset domain_list[$delete] unset domainconfig_list[$delete] unset pretend_list[$delete] domain_list=(${domain_list[@]}) domainconfig_list=(${domainconfig_list[@]}) pretend_list=(${pretend_list[@]}) config_nginx config_v2ray systemctl restart nginx systemctl restart v2ray green "域名删除完成！！" echo_end elif [ $choice -eq 12 ]; then if [ $is_installed == 0 ]; then red "请先安装V2Ray-TLS+Web！！" exit 1 fi get_base_information if [ $protocol_1 -ne 0 ] && [ $protocol_2 -ne 0 ]; then tyblue "-------------请输入你要修改的id-------------" tyblue " 1. V2Ray-TCP+TLS 的id" tyblue " 2. V2Ray-WebSocket+TLS 的id" echo local flag="" while [ "$flag" != "1" -a "$flag" != "2" ] do read -p "您的选择是：" flag done elif [ $protocol_1 -ne 0 ]; then local flag=1 else local flag=2 fi local v2id="v2id_$flag" tyblue "您现在的id是：${!v2id}" choice="" while [ "$choice" != "y" -a "$choice" != "n" ] do tyblue "是否要继续?(y/n)" read choice done if [ $choice == "n" ]; then exit 0 fi tyblue "-------------请输入新的id-------------" read v2id [ $flag -eq 1 ] && v2id_1="$v2id" || v2id_2="$v2id" get_domainlist config_v2ray systemctl restart v2ray green "更换成功！！" echo_end elif [ $choice -eq 13 ]; then if [ $is_installed == 0 ]; then red "请先安装V2Ray-TLS+Web！！" exit 1 fi get_base_information if [ $protocol_2 -eq 0 ]; then red "V2Ray-TCP+TLS+Web模式没有path!!" exit 0 fi tyblue "您现在的path是：$path" choice="" while [ "$choice" != "y" -a "$choice" != "n" ] do tyblue "是否要继续?(y/n)" read choice done if [ $choice == "n" ]; then exit 0 fi local temp_old_path="$path" tyblue "---------------请输入新的path(带\"/\")---------------" read path get_domainlist config_v2ray systemctl restart v2ray green "更换成功！！" echo_end elif [ $choice -eq 14 ]; then if [ $is_installed == 0 ]; then red "请先安装V2Ray-TLS+Web！！" exit 1 fi change_protocol elif [ $choice -eq 15 ]; then echo yellow "尝试修复退格键异常问题，退格键正常请不要修复" yellow "按回车键继续或按Ctrl+c退出" read -s if stty -a | grep -q 'erase = ^?'; then stty erase '^H' elif stty -a | grep -q 'erase = ^H'; then stty erase '^?' fi green "修复完成！！" sleep 3s start_menu elif [ $choice -eq 16 ]; then change_dns fi } if ! [ "$1" == "--update" ]; then update=0 start_menu else update=1 install_update_v2ray_tls_web fi