mirror of
https://github.com/Dichgrem/singbox-example.git
synced 2025-07-31 17:19:31 -04:00
501 lines
13 KiB
Bash
501 lines
13 KiB
Bash
#!/bin/bash
|
||
|
||
# Hysteria 2 自动安装配置脚本
|
||
# 支持安装、卸载和重新配置
|
||
|
||
set -e
|
||
|
||
# 颜色定义
|
||
RED='\033[0;31m'
|
||
GREEN='\033[0;32m'
|
||
YELLOW='\033[1;33m'
|
||
BLUE='\033[0;34m'
|
||
NC='\033[0m' # No Color
|
||
|
||
# 默认配置
|
||
DEFAULT_PORT=443
|
||
DEFAULT_MASQUERADE_URL="https://cn.bing.com/"
|
||
CONFIG_FILE="/etc/hysteria/config.yaml"
|
||
SERVICE_NAME="hysteria-server"
|
||
|
||
# 打印彩色消息
|
||
print_message() {
|
||
local color=$1
|
||
local message=$2
|
||
echo -e "${color}${message}${NC}"
|
||
}
|
||
|
||
# 检查是否为root用户
|
||
check_root() {
|
||
if [[ $EUID -ne 0 ]]; then
|
||
print_message $RED "错误: 此脚本需要root权限运行"
|
||
print_message $YELLOW "请使用: sudo $0"
|
||
exit 1
|
||
fi
|
||
}
|
||
|
||
# 检查系统要求
|
||
check_system() {
|
||
if ! command -v curl &>/dev/null; then
|
||
print_message $YELLOW "正在安装 curl..."
|
||
apt update && apt install -y curl
|
||
fi
|
||
|
||
if ! command -v openssl &>/dev/null; then
|
||
print_message $YELLOW "正在安装 openssl..."
|
||
apt update && apt install -y openssl
|
||
fi
|
||
}
|
||
|
||
# 生成随机密码
|
||
generate_password() {
|
||
openssl rand -base64 16 | tr -d "=+/" | cut -c1-16
|
||
}
|
||
|
||
# 安装 Hysteria 2
|
||
install_hysteria() {
|
||
print_message $BLUE "开始安装 Hysteria 2..."
|
||
|
||
# 下载并执行官方安装脚本
|
||
if bash <(curl -fsSL https://get.hy2.sh/); then
|
||
print_message $GREEN "Hysteria 2 安装成功"
|
||
else
|
||
print_message $RED "Hysteria 2 安装失败"
|
||
exit 1
|
||
fi
|
||
|
||
# 设置开机自启
|
||
systemctl enable hysteria-server.service
|
||
print_message $GREEN "已设置 Hysteria 2 开机自启"
|
||
}
|
||
|
||
# 生成自签名证书
|
||
generate_self_signed_cert() {
|
||
print_message $BLUE "正在生成自签名证书..."
|
||
|
||
# 创建配置目录
|
||
mkdir -p /etc/hysteria
|
||
|
||
# 生成自签名证书
|
||
openssl req -x509 -nodes -newkey ec:<(openssl ecparam -name prime256v1) \
|
||
-keyout /etc/hysteria/server.key \
|
||
-out /etc/hysteria/server.crt \
|
||
-subj "/CN=bing.com" \
|
||
-days 3650
|
||
|
||
# 设置文件权限
|
||
chown hysteria:hysteria /etc/hysteria/server.key /etc/hysteria/server.crt 2>/dev/null || {
|
||
print_message $YELLOW "警告: 无法设置证书文件权限，稍后将切换到root运行模式"
|
||
NEED_ROOT_MODE=true
|
||
}
|
||
|
||
print_message $GREEN "自签名证书生成完成"
|
||
}
|
||
|
||
# 创建配置文件
|
||
create_config() {
|
||
local password=$1
|
||
local port=$2
|
||
local masquerade_url=$3
|
||
|
||
print_message $BLUE "正在创建配置文件..."
|
||
|
||
cat >$CONFIG_FILE <<EOF
|
||
listen: :${port}
|
||
|
||
# 使用自签证书
|
||
tls:
|
||
cert: /etc/hysteria/server.crt
|
||
key: /etc/hysteria/server.key
|
||
|
||
auth:
|
||
type: password
|
||
password: ${password}
|
||
|
||
resolver:
|
||
type: udp
|
||
tcp:
|
||
addr: 8.8.8.8:53
|
||
timeout: 4s
|
||
udp:
|
||
addr: 8.8.4.4:53
|
||
timeout: 4s
|
||
tls:
|
||
addr: 1.1.1.1:853
|
||
timeout: 10s
|
||
sni: cloudflare-dns.com
|
||
insecure: false
|
||
https:
|
||
addr: 1.1.1.1:443
|
||
timeout: 10s
|
||
sni: cloudflare-dns.com
|
||
insecure: false
|
||
|
||
masquerade:
|
||
type: proxy
|
||
proxy:
|
||
url: ${masquerade_url}
|
||
rewriteHost: true
|
||
EOF
|
||
|
||
print_message $GREEN "配置文件创建完成"
|
||
}
|
||
|
||
# 修复权限问题
|
||
fix_permissions() {
|
||
if [[ "$NEED_ROOT_MODE" == "true" ]]; then
|
||
print_message $YELLOW "正在修复权限问题，切换到root运行模式..."
|
||
|
||
sed -i '/User=/d' /etc/systemd/system/hysteria-server.service 2>/dev/null || true
|
||
sed -i '/User=/d' /etc/systemd/system/hysteria-server@.service 2>/dev/null || true
|
||
|
||
systemctl daemon-reload
|
||
print_message $GREEN "权限问题已修复"
|
||
fi
|
||
}
|
||
|
||
# 配置防火墙
|
||
configure_firewall() {
|
||
if command -v ufw &>/dev/null; then
|
||
print_message $BLUE "正在配置UFW防火墙..."
|
||
|
||
# 检查防火墙状态
|
||
local ufw_status=$(ufw status | head -1)
|
||
if [[ $ufw_status == *"inactive"* ]]; then
|
||
print_message $YELLOW "UFW防火墙未启用，跳过防火墙配置"
|
||
return
|
||
fi
|
||
|
||
# 开放端口
|
||
ufw allow http >/dev/null 2>&1
|
||
ufw allow https >/dev/null 2>&1
|
||
ufw allow $1 >/dev/null 2>&1
|
||
|
||
print_message $GREEN "防火墙配置完成"
|
||
else
|
||
print_message $YELLOW "未检测到UFW防火墙，跳过防火墙配置"
|
||
fi
|
||
}
|
||
|
||
# 性能优化
|
||
optimize_performance() {
|
||
print_message $BLUE "正在进行性能优化..."
|
||
|
||
# 设置网络缓冲区
|
||
sysctl -w net.core.rmem_max=16777216 >/dev/null
|
||
sysctl -w net.core.wmem_max=16777216 >/dev/null
|
||
|
||
# 写入系统配置文件持久化
|
||
cat >>/etc/sysctl.conf <<EOF
|
||
|
||
# Hysteria 2 性能优化
|
||
net.core.rmem_max=16777216
|
||
net.core.wmem_max=16777216
|
||
EOF
|
||
|
||
print_message $GREEN "性能优化完成"
|
||
}
|
||
|
||
# 启动服务
|
||
start_service() {
|
||
print_message $BLUE "正在启动 Hysteria 2 服务..."
|
||
|
||
systemctl start hysteria-server.service
|
||
|
||
sleep 2
|
||
|
||
if systemctl is-active --quiet hysteria-server.service; then
|
||
print_message $GREEN "Hysteria 2 服务启动成功"
|
||
else
|
||
print_message $RED "Hysteria 2 服务启动失败"
|
||
print_message $YELLOW "查看服务状态: systemctl status hysteria-server.service"
|
||
print_message $YELLOW "查看日志: journalctl -u hysteria-server.service -f"
|
||
return 1
|
||
fi
|
||
}
|
||
|
||
# URL编码函数
|
||
url_encode() {
|
||
local string="$1"
|
||
# 尝试使用Python进行URL编码
|
||
if command -v python3 &>/dev/null; then
|
||
python3 -c "import urllib.parse; print(urllib.parse.quote('$string'))" 2>/dev/null
|
||
elif command -v python &>/dev/null; then
|
||
python -c "import urllib; print urllib.quote('$string')" 2>/dev/null
|
||
else
|
||
# 如果没有Python，进行简单的字符替换
|
||
echo "$string" | sed 's/ /%20/g; s/!/%21/g; s/"/%22/g; s/#/%23/g; s/\$/%24/g; s/&/%26/g; s/'\''/%27/g; s/(/%28/g; s/)/%29/g; s/\*/%2A/g; s/+/%2B/g; s/,/%2C/g; s/-/%2D/g; s/\./%2E/g; s/\//%2F/g; s/:/%3A/g; s/;/%3B/g; s/</%3C/g; s/=/%3D/g; s/>/%3E/g; s/?/%3F/g; s/@/%40/g; s/\[/%5B/g; s/\\/%5C/g; s/\]/%5D/g; s/\^/%5E/g; s/_/%5F/g; s/`/%60/g; s/{/%7B/g; s/|/%7C/g; s/}/%7D/g; s/~/%7E/g'
|
||
fi
|
||
}
|
||
|
||
# 显示连接信息
|
||
show_connection_info() {
|
||
local password=$1
|
||
local port=$2
|
||
local server_ip=$(curl -s ifconfig.me 2>/dev/null || curl -s ipinfo.io/ip 2>/dev/null || echo "YOUR_SERVER_IP")
|
||
|
||
# 生成节点名称（URL编码）
|
||
local node_name="Hysteria2-${server_ip}"
|
||
local encoded_node_name=$(url_encode "$node_name")
|
||
|
||
# 生成 Hysteria2 标准链接
|
||
local hysteria2_url="hysteria2://${password}@${server_ip}:${port}?insecure=1#${encoded_node_name}"
|
||
|
||
print_message $GREEN "=============================================="
|
||
print_message $GREEN "Hysteria 2 安装配置完成！"
|
||
print_message $GREEN "=============================================="
|
||
echo
|
||
print_message $BLUE "服务器信息:"
|
||
echo " 服务器地址: $server_ip"
|
||
echo " 端口: $port"
|
||
echo " 密码: $password"
|
||
echo " 协议: hysteria2"
|
||
echo " TLS: 自签名证书"
|
||
echo
|
||
print_message $BLUE "标准连接链接:"
|
||
print_message $GREEN "$hysteria2_url"
|
||
echo
|
||
print_message $BLUE "客户端配置示例:"
|
||
echo " server: $server_ip:$port"
|
||
echo " auth: $password"
|
||
echo " tls:"
|
||
echo " insecure: true"
|
||
echo
|
||
print_message $YELLOW "重要提示:"
|
||
echo " - 请妥善保存上述连接信息"
|
||
echo " - 客户端需要设置 insecure: true（因为使用自签名证书）"
|
||
echo " - 配置文件位置: $CONFIG_FILE"
|
||
echo " - 复制标准连接链接可直接导入支持的客户端"
|
||
print_message $GREEN "=============================================="
|
||
}
|
||
|
||
# 卸载 Hysteria 2
|
||
uninstall_hysteria() {
|
||
print_message $YELLOW "正在卸载 Hysteria 2..."
|
||
|
||
# 停止服务
|
||
systemctl stop hysteria-server.service 2>/dev/null || true
|
||
systemctl disable hysteria-server.service 2>/dev/null || true
|
||
|
||
# 删除服务文件
|
||
rm -f /etc/systemd/system/hysteria-server.service
|
||
rm -f /etc/systemd/system/hysteria-server@.service
|
||
systemctl daemon-reload
|
||
|
||
# 删除二进制文件
|
||
rm -f /usr/local/bin/hysteria
|
||
|
||
# 删除配置目录
|
||
rm -rf /etc/hysteria
|
||
|
||
# 删除用户
|
||
userdel hysteria 2>/dev/null || true
|
||
|
||
print_message $GREEN "Hysteria 2 卸载完成"
|
||
}
|
||
|
||
# 检查安装状态
|
||
check_installation() {
|
||
if command -v hysteria &>/dev/null && systemctl list-unit-files | grep -q hysteria-server; then
|
||
return 0
|
||
else
|
||
return 1
|
||
fi
|
||
}
|
||
|
||
# 主菜单
|
||
show_menu() {
|
||
clear
|
||
print_message $BLUE "=============================================="
|
||
print_message $BLUE " Dich's Hysteria 2 管理脚本"
|
||
print_message $BLUE "=============================================="
|
||
echo
|
||
|
||
if check_installation; then
|
||
echo "1. 重新配置 Hysteria 2"
|
||
echo "2. 重启 Hysteria 2 服务"
|
||
echo "3. 查看服务状态"
|
||
echo "4. 查看配置信息"
|
||
echo "5. 卸载 Hysteria 2"
|
||
echo "0. 退出"
|
||
else
|
||
echo "1. 安装 Hysteria 2"
|
||
echo "0. 退出"
|
||
fi
|
||
|
||
echo
|
||
}
|
||
|
||
# 获取用户输入
|
||
get_user_input() {
|
||
# 获取密码
|
||
while true; do
|
||
read -p "请输入认证密码 (留空使用随机密码): " user_password
|
||
if [[ -z "$user_password" ]]; then
|
||
PASSWORD=$(generate_password)
|
||
print_message $GREEN "已生成随机密码: $PASSWORD"
|
||
break
|
||
elif [[ ${#user_password} -ge 6 ]]; then
|
||
PASSWORD="$user_password"
|
||
break
|
||
else
|
||
print_message $RED "密码长度至少6位，请重新输入"
|
||
fi
|
||
done
|
||
|
||
# 获取端口
|
||
while true; do
|
||
read -p "请输入监听端口 (默认443): " user_port
|
||
if [[ -z "$user_port" ]]; then
|
||
PORT=$DEFAULT_PORT
|
||
break
|
||
elif [[ "$user_port" =~ ^[0-9]+$ ]] && [ "$user_port" -ge 1 ] && [ "$user_port" -le 65535 ]; then
|
||
PORT="$user_port"
|
||
break
|
||
else
|
||
print_message $RED "请输入有效的端口号 (1-65535)"
|
||
fi
|
||
done
|
||
|
||
# 获取伪装网址
|
||
read -p "请输入伪装网址 (默认: $DEFAULT_MASQUERADE_URL): " user_masquerade
|
||
if [[ -z "$user_masquerade" ]]; then
|
||
MASQUERADE_URL="$DEFAULT_MASQUERADE_URL"
|
||
else
|
||
MASQUERADE_URL="$user_masquerade"
|
||
fi
|
||
}
|
||
|
||
# 完整安装流程
|
||
install_process() {
|
||
print_message $BLUE "开始 Hysteria 2 安装流程..."
|
||
|
||
get_user_input
|
||
|
||
check_system
|
||
install_hysteria
|
||
generate_self_signed_cert
|
||
create_config "$PASSWORD" "$PORT" "$MASQUERADE_URL"
|
||
fix_permissions
|
||
configure_firewall "$PORT"
|
||
optimize_performance
|
||
|
||
if start_service; then
|
||
show_connection_info "$PASSWORD" "$PORT"
|
||
else
|
||
print_message $RED "安装过程中出现错误，请检查日志"
|
||
exit 1
|
||
fi
|
||
}
|
||
|
||
# 重新配置流程
|
||
reconfigure_process() {
|
||
print_message $BLUE "开始重新配置 Hysteria 2..."
|
||
|
||
get_user_input
|
||
|
||
systemctl stop hysteria-server.service
|
||
create_config "$PASSWORD" "$PORT" "$MASQUERADE_URL"
|
||
configure_firewall "$PORT"
|
||
|
||
if start_service; then
|
||
show_connection_info "$PASSWORD" "$PORT"
|
||
else
|
||
print_message $RED "重新配置过程中出现错误，请检查日志"
|
||
exit 1
|
||
fi
|
||
}
|
||
|
||
# 查看当前配置
|
||
show_current_config() {
|
||
if [[ -f "$CONFIG_FILE" ]]; then
|
||
print_message $BLUE "当前配置文件内容:"
|
||
print_message $GREEN "=============================================="
|
||
cat "$CONFIG_FILE"
|
||
print_message $GREEN "=============================================="
|
||
else
|
||
print_message $RED "配置文件不存在"
|
||
fi
|
||
}
|
||
|
||
# 主程序
|
||
main() {
|
||
check_root
|
||
|
||
while true; do
|
||
show_menu
|
||
read -p "请选择操作 [0-5]: " choice
|
||
|
||
case $choice in
|
||
1)
|
||
if check_installation; then
|
||
reconfigure_process
|
||
else
|
||
install_process
|
||
fi
|
||
read -p "按回车键继续..."
|
||
;;
|
||
2)
|
||
if check_installation; then
|
||
print_message $BLUE "正在重启 Hysteria 2 服务..."
|
||
systemctl restart hysteria-server.service
|
||
sleep 2
|
||
if systemctl is-active --quiet hysteria-server.service; then
|
||
print_message $GREEN "服务重启成功"
|
||
else
|
||
print_message $RED "服务重启失败"
|
||
fi
|
||
read -p "按回车键继续..."
|
||
else
|
||
print_message $RED "Hysteria 2 未安装"
|
||
read -p "按回车键继续..."
|
||
fi
|
||
;;
|
||
3)
|
||
if check_installation; then
|
||
print_message $BLUE "Hysteria 2 服务状态:"
|
||
systemctl status hysteria-server.service
|
||
read -p "按回车键继续..."
|
||
else
|
||
print_message $RED "Hysteria 2 未安装"
|
||
read -p "按回车键继续..."
|
||
fi
|
||
;;
|
||
4)
|
||
if check_installation; then
|
||
show_current_config
|
||
read -p "按回车键继续..."
|
||
else
|
||
print_message $RED "Hysteria 2 未安装"
|
||
read -p "按回车键继续..."
|
||
fi
|
||
;;
|
||
5)
|
||
if check_installation; then
|
||
read -p "确定要卸载 Hysteria 2 吗？[y/N]: " confirm
|
||
if [[ "$confirm" == "y" || "$confirm" == "Y" ]]; then
|
||
uninstall_hysteria
|
||
else
|
||
print_message $YELLOW "已取消卸载"
|
||
fi
|
||
read -p "按回车键继续..."
|
||
else
|
||
print_message $RED "Hysteria 2 未安装"
|
||
read -p "按回车键继续..."
|
||
fi
|
||
;;
|
||
0)
|
||
print_message $GREEN "退出程序"
|
||
exit 0
|
||
;;
|
||
*)
|
||
print_message $RED "无效选择，请重新输入"
|
||
read -p "按回车键继续..."
|
||
;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
# 运行主程序
|
||
main "$@"
|