mirror of
https://github.com/Dichgrem/singbox-example.git
synced 2025-08-01 17:49:30 -04:00
117 lines
3.5 KiB
Bash
117 lines
3.5 KiB
Bash
#!/usr/bin/env bash
|
||
# install_singbox.sh
|
||
# 一键安装 Sing-box 并配置为 systemd 服务，自动生成 VLESS Reality 所需字段，用户自定义 name 字段，并输出完整链接
|
||
|
||
set -euo pipefail
|
||
|
||
# —— 0. 用户输入 —— #
|
||
read -rp "请输入用户名称 (name 字段，例如 AK-JP-100G)：" NAME
|
||
if [[ -z "$NAME" ]]; then
|
||
echo "名称不能为空，退出。" >&2
|
||
exit 1
|
||
fi
|
||
|
||
echo "使用的名称：${NAME}"
|
||
|
||
# —— 1. 安装 Sing-box 内核 —— #
|
||
if command -v apt-get &>/dev/null; then
|
||
echo "检测到 Debian/Ubuntu，使用官方 deb 安装脚本..."
|
||
bash <(curl -fsSL https://sing-box.app/deb-install.sh)
|
||
elif command -v dnf &>/dev/null || command -v yum &>/dev/null; then
|
||
echo "检测到 RHEL/CentOS，使用官方 rpm 安装脚本..."
|
||
bash <(curl -fsSL https://sing-box.app/rpm-install.sh)
|
||
elif command -v pacman &>/dev/null; then
|
||
echo "检测到 Arch Linux，使用官方 arch 安装脚本..."
|
||
bash <(curl -fsSL https://sing-box.app/arch-install.sh)
|
||
else
|
||
echo "无法识别发行版，请手动安装 Sing-box 内核" >&2
|
||
exit 1
|
||
fi
|
||
|
||
# 确认路径
|
||
BIN_PATH=$(command -v sing-box || true)
|
||
if [[ -z "$BIN_PATH" ]]; then
|
||
echo "未找到 sing-box 可执行文件，请检查安装" >&2
|
||
exit 1
|
||
fi
|
||
echo "Sing-box 安装完成：$($BIN_PATH version | head -n1)"
|
||
|
||
# —— 2. 生成字段 —— #
|
||
UUID=$($BIN_PATH generate uuid)
|
||
KEY_OUTPUT=$($BIN_PATH generate reality-keypair)
|
||
PRIVATE_KEY=$(echo "$KEY_OUTPUT" | awk -F": " '/PrivateKey/ {print $2}')
|
||
PUB_KEY=$(echo "$KEY_OUTPUT" | awk -F": " '/PublicKey/ {print $2}')
|
||
# Short ID 随机生成 8 字节
|
||
SHORT_ID=$(openssl rand -hex 8)
|
||
# uTLS 浏览器指纹，可按需修改
|
||
FP="chrome"
|
||
|
||
# —— 3. 写入配置文件 —— #
|
||
CONFIG_DIR=/etc/singbox
|
||
mkdir -p "$CONFIG_DIR"
|
||
cat > "$CONFIG_DIR/config.json" << EOF
|
||
{
|
||
"log": { "level": "info" },
|
||
"dns": { "servers": [{ "address": "tls://8.8.8.8" }] },
|
||
"inbounds": [
|
||
{
|
||
"type": "vless",
|
||
"tag": "VLESSReality",
|
||
"listen": "::",
|
||
"listen_port": 443,
|
||
"users": [
|
||
{ "name": "${NAME}", "uuid": "${UUID}", "flow": "xtls-rprx-vision" }
|
||
],
|
||
"tls": {
|
||
"enabled": true,
|
||
"server_name": "s0.awsstatic.com",
|
||
"reality": {
|
||
"enabled": true,
|
||
"handshake": { "server": "s0.awsstatic.com", "server_port": 443 },
|
||
"private_key": "${PRIVATE_KEY}",
|
||
"short_id": ["${SHORT_ID}"]
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"outbounds": [ { "type": "direct" }, { "type": "dns", "tag": "dns-out" } ],
|
||
"route": { "rules": [ { "protocol": "dns", "outbound": "dns-out" } ] }
|
||
}
|
||
EOF
|
||
|
||
echo "配置已写入 ${CONFIG_DIR}/config.json"
|
||
|
||
# —— 4. 配置 systemd 服务 —— #
|
||
SERVICE_FILE=/etc/systemd/system/sing-box.service
|
||
cat > "$SERVICE_FILE" << 'EOL'
|
||
[Unit]
|
||
Description=sing-box service
|
||
After=network.target
|
||
|
||
[Service]
|
||
Type=simple
|
||
ExecStart='$(command -v sing-box)' run -c /etc/singbox/config.json
|
||
Restart=on-failure
|
||
LimitNOFILE=65536
|
||
|
||
[Install]
|
||
WantedBy=multi-user.target
|
||
EOL
|
||
|
||
# 重载并启动
|
||
systemctl daemon-reload
|
||
systemctl enable sing-box.service
|
||
systemctl restart sing-box.service
|
||
|
||
echo "服务已启动："
|
||
systemctl status sing-box.service --no-pager
|
||
|
||
# —— 5. 输出 VLESS Reality 链接 —— #
|
||
SERVER_IP=$(curl -s https://ifconfig.me)
|
||
PORT=443
|
||
SNI="s0.awsstatic.com"
|
||
SPX="/"
|
||
LINK="vless://${UUID}@${SERVER_IP}:${PORT}?security=reality&sni=${SNI}&fp=${FP}&pbk=${PUB_KEY}&sid=${SHORT_ID}&spx=${SPX}&type=tcp&flow=xtls-rprx-vision&encryption=none#${NAME}"
|
||
|
||
echo -e "\n====== 您的 VLESS Reality 链接 ======\n$LINK"
|