From d261d979fab18178c38a08581f1afa67c1bc22b2 Mon Sep 17 00:00:00 2001
From: starry <115192496+sky22333@users.noreply.github.com>
Date: Sun, 14 Sep 2025 07:30:14 +0800
Subject: [PATCH] add
---
3x-ui/README.md | 7 +
3x-ui/install.sh | 232 ++++++
3x-ui/x-ui.sh | 1928 ++++++++++++++++++++++++++++++++++++++++++++++
s-ui/README.md | 2 +-
4 files changed, 2168 insertions(+), 1 deletion(-)
create mode 100644 3x-ui/README.md
create mode 100644 3x-ui/install.sh
create mode 100644 3x-ui/x-ui.sh
diff --git a/3x-ui/README.md b/3x-ui/README.md
new file mode 100644
index 0000000..ad9ab20
--- /dev/null
+++ b/3x-ui/README.md
@@ -0,0 +1,7 @@
+### 3x-ui中文安装脚本
+```
+bash <(curl -sSL https://raw.githubusercontent.com/sky22333/shell/main/3x-ui/install.sh)
+```
+
+
+[项目地址](https://github.com/MHSanaei/3x-ui)
diff --git a/3x-ui/install.sh b/3x-ui/install.sh
new file mode 100644
index 0000000..552fd2a
--- /dev/null
+++ b/3x-ui/install.sh
@@ -0,0 +1,232 @@
+#!/bin/bash
+
+red='\033[0;31m'
+green='\033[0;32m'
+blue='\033[0;34m'
+yellow='\033[0;33m'
+plain='\033[0m'
+
+cur_dir=$(pwd)
+
+# 检查root权限
+[[ $EUID -ne 0 ]] && echo -e "${red}致命错误: ${plain} 请使用root权限运行此脚本 \n " && exit 1
+
+# 检查操作系统并设置发行版变量
+if [[ -f /etc/os-release ]]; then
+ source /etc/os-release
+ release=$ID
+elif [[ -f /usr/lib/os-release ]]; then
+ source /usr/lib/os-release
+ release=$ID
+else
+ echo "检查系统操作系统失败，请联系作者！" >&2
+ exit 1
+fi
+echo "操作系统发行版是: $release"
+
+arch() {
+ case "$(uname -m)" in
+ x86_64 | x64 | amd64) echo 'amd64' ;;
+ i*86 | x86) echo '386' ;;
+ armv8* | armv8 | arm64 | aarch64) echo 'arm64' ;;
+ armv7* | armv7 | arm) echo 'armv7' ;;
+ armv6* | armv6) echo 'armv6' ;;
+ armv5* | armv5) echo 'armv5' ;;
+ s390x) echo 's390x' ;;
+ *) echo -e "${green}不支持的CPU架构! ${plain}" && rm -f install.sh && exit 1 ;;
+ esac
+}
+
+echo "Arch: $(arch)"
+
+install_base() {
+ case "${release}" in
+ ubuntu | debian | armbian)
+ apt-get update && apt-get install -y -q wget curl tar tzdata
+ ;;
+ centos | rhel | almalinux | rocky | ol)
+ yum -y update && yum install -y -q wget curl tar tzdata
+ ;;
+ fedora | amzn | virtuozzo)
+ dnf -y update && dnf install -y -q wget curl tar tzdata
+ ;;
+ arch | manjaro | parch)
+ pacman -Syu && pacman -Syu --noconfirm wget curl tar tzdata
+ ;;
+ opensuse-tumbleweed)
+ zypper refresh && zypper -q install -y wget curl tar timezone
+ ;;
+ *)
+ apt-get update && apt-get install -y -q wget curl tar tzdata
+ ;;
+ esac
+}
+
+gen_random_string() {
+ local length="$1"
+ local random_string=$(LC_ALL=C tr -dc 'a-zA-Z0-9' /dev/null | tr -d '[:space:]')
+ if [[ -n "${server_ip}" ]]; then
+ break
+ fi
+ done
+
+ if [[ ${#existing_webBasePath} -lt 4 ]]; then
+ if [[ "$existing_hasDefaultCredential" == "true" ]]; then
+ local config_webBasePath=$(gen_random_string 18)
+ local config_username=$(gen_random_string 10)
+ local config_password=$(gen_random_string 10)
+
+ read -rp "您是否要自定义面板端口设置？（如果不设置，将应用随机端口）[y/n]: " config_confirm
+ if [[ "${config_confirm}" == "y" || "${config_confirm}" == "Y" ]]; then
+ read -rp "请设置面板端口: " config_port
+ echo -e "${yellow}您的面板端口是: ${config_port}${plain}"
+ else
+ local config_port=$(shuf -i 1024-62000 -n 1)
+ echo -e "${yellow}生成的随机端口: ${config_port}${plain}"
+ fi
+
+ /usr/local/x-ui/x-ui setting -username "${config_username}" -password "${config_password}" -port "${config_port}" -webBasePath "${config_webBasePath}"
+ echo -e "这是全新安装，出于安全考虑生成随机登录信息:"
+ echo -e "###############################################"
+ echo -e "${green}用户名: ${config_username}${plain}"
+ echo -e "${green}密码: ${config_password}${plain}"
+ echo -e "${green}端口: ${config_port}${plain}"
+ echo -e "${green}网页基础路径: ${config_webBasePath}${plain}"
+ echo -e "${green}访问地址: http://${server_ip}:${config_port}/${config_webBasePath}${plain}"
+ echo -e "###############################################"
+ else
+ local config_webBasePath=$(gen_random_string 18)
+ echo -e "${yellow}网页基础路径缺失或过短。正在生成新的路径...${plain}"
+ /usr/local/x-ui/x-ui setting -webBasePath "${config_webBasePath}"
+ echo -e "${green}新的网页基础路径: ${config_webBasePath}${plain}"
+ echo -e "${green}访问地址: http://${server_ip}:${existing_port}/${config_webBasePath}${plain}"
+ fi
+ else
+ if [[ "$existing_hasDefaultCredential" == "true" ]]; then
+ local config_username=$(gen_random_string 10)
+ local config_password=$(gen_random_string 10)
+
+ echo -e "${yellow}检测到默认凭据。需要安全更新...${plain}"
+ /usr/local/x-ui/x-ui setting -username "${config_username}" -password "${config_password}"
+ echo -e "生成新的随机登录凭据:"
+ echo -e "###############################################"
+ echo -e "${green}用户名: ${config_username}${plain}"
+ echo -e "${green}密码: ${config_password}${plain}"
+ echo -e "###############################################"
+ else
+ echo -e "${green}用户名、密码和网页基础路径已正确设置。退出中...${plain}"
+ fi
+ fi
+
+ /usr/local/x-ui/x-ui migrate
+}
+
+install_x-ui() {
+ cd /usr/local/
+
+ # 下载资源
+ if [ $# == 0 ]; then
+ tag_version=$(curl -Ls "https://api.github.com/repos/MHSanaei/3x-ui/releases/latest" | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/')
+ if [[ ! -n "$tag_version" ]]; then
+ echo -e "${red}获取x-ui版本失败，可能是由于GitHub API限制，请稍后重试${plain}"
+ exit 1
+ fi
+ echo -e "获取到x-ui最新版本: ${tag_version}，开始安装..."
+ wget -N -O /usr/local/x-ui-linux-$(arch).tar.gz https://github.com/MHSanaei/3x-ui/releases/download/${tag_version}/x-ui-linux-$(arch).tar.gz
+ if [[ $? -ne 0 ]]; then
+ echo -e "${red}下载x-ui失败，请确保您的服务器可以访问GitHub ${plain}"
+ exit 1
+ fi
+ else
+ tag_version=$1
+ tag_version_numeric=${tag_version#v}
+ min_version="2.3.5"
+
+ if [[ "$(printf '%s\n' "$min_version" "$tag_version_numeric" | sort -V | head -n1)" != "$min_version" ]]; then
+ echo -e "${red}请使用更新的版本（至少v2.3.5）。退出安装。${plain}"
+ exit 1
+ fi
+
+ url="https://github.com/MHSanaei/3x-ui/releases/download/${tag_version}/x-ui-linux-$(arch).tar.gz"
+ echo -e "开始安装x-ui $1"
+ wget -N -O /usr/local/x-ui-linux-$(arch).tar.gz ${url}
+ if [[ $? -ne 0 ]]; then
+ echo -e "${red}下载x-ui $1失败，请检查版本是否存在 ${plain}"
+ exit 1
+ fi
+ fi
+ wget -O /usr/bin/x-ui-temp https://raw.githubusercontent.com/sky22333/shell/main/3x-ui/x-ui.sh
+
+ # 停止x-ui服务并删除旧资源
+ if [[ -e /usr/local/x-ui/ ]]; then
+ systemctl stop x-ui
+ rm /usr/local/x-ui/ -rf
+ fi
+
+ # 解压资源并设置权限
+ tar zxvf x-ui-linux-$(arch).tar.gz
+ rm x-ui-linux-$(arch).tar.gz -f
+
+ cd x-ui
+ chmod +x x-ui
+ chmod +x x-ui.sh
+
+ # 检查系统架构并相应地重命名文件
+ if [[ $(arch) == "armv5" || $(arch) == "armv6" || $(arch) == "armv7" ]]; then
+ mv bin/xray-linux-$(arch) bin/xray-linux-arm
+ chmod +x bin/xray-linux-arm
+ fi
+ chmod +x x-ui bin/xray-linux-$(arch)
+
+ # 更新x-ui命令行工具并设置权限
+ mv -f /usr/bin/x-ui-temp /usr/bin/x-ui
+ chmod +x /usr/bin/x-ui
+ config_after_install
+
+ cp -f x-ui.service /etc/systemd/system/
+ systemctl daemon-reload
+ systemctl enable x-ui
+ systemctl start x-ui
+ echo -e "${green}x-ui ${tag_version}${plain} 安装完成，现在正在运行..."
+ echo -e ""
+ echo -e "┌───────────────────────────────────────────────────────┐
+│ ${blue}x-ui 控制菜单使用方法 (子命令):${plain} │
+│ │
+│ ${blue}x-ui${plain} - 管理脚本 │
+│ ${blue}x-ui start${plain} - 启动 │
+│ ${blue}x-ui stop${plain} - 停止 │
+│ ${blue}x-ui restart${plain} - 重启 │
+│ ${blue}x-ui status${plain} - 当前状态 │
+│ ${blue}x-ui settings${plain} - 当前设置 │
+│ ${blue}x-ui enable${plain} - 启用开机自启 │
+│ ${blue}x-ui disable${plain} - 禁用开机自启 │
+│ ${blue}x-ui log${plain} - 查看日志 │
+│ ${blue}x-ui banlog${plain} - 查看Fail2ban封禁日志 │
+│ ${blue}x-ui update${plain} - 更新 │
+│ ${blue}x-ui legacy${plain} - 旧版本 │
+│ ${blue}x-ui install${plain} - 安装 │
+│ ${blue}x-ui uninstall${plain} - 卸载 │
+└───────────────────────────────────────────────────────┘"
+}
+
+echo -e "${green}运行中...${plain}"
+install_base
+install_x-ui $1
\ No newline at end of file
diff --git a/3x-ui/x-ui.sh b/3x-ui/x-ui.sh
new file mode 100644
index 0000000..6f74b09
--- /dev/null
+++ b/3x-ui/x-ui.sh
@@ -0,0 +1,1928 @@
+#!/bin/bash
+
+red='\033[0;31m'
+green='\033[0;32m'
+blue='\033[0;34m'
+yellow='\033[0;33m'
+plain='\033[0m'
+
+#在此添加一些基本函数
+function LOGD() {
+ echo -e "${yellow}[DEG] $* ${plain}"
+}
+
+function LOGE() {
+ echo -e "${red}[ERR] $* ${plain}"
+}
+
+function LOGI() {
+ echo -e "${green}[INF] $* ${plain}"
+}
+
+# 检查root权限
+[[ $EUID -ne 0 ]] && LOGE "错误: 您必须以root身份运行此脚本! \n" && exit 1
+
+# 检查操作系统并设置发行版变量
+if [[ -f /etc/os-release ]]; then
+ source /etc/os-release
+ release=$ID
+elif [[ -f /usr/lib/os-release ]]; then
+ source /usr/lib/os-release
+ release=$ID
+else
+ echo "检查系统操作系统失败，请联系作者！" >&2
+ exit 1
+fi
+echo "操作系统发行版是: $release"
+
+os_version=""
+os_version=$(grep "^VERSION_ID" /etc/os-release | cut -d '=' -f2 | tr -d '"' | tr -d '.')
+
+# 声明变量
+log_folder="${XUI_LOG_FOLDER:=/var/log}"
+iplimit_log_path="${log_folder}/3xipl.log"
+iplimit_banned_log_path="${log_folder}/3xipl-banned.log"
+
+confirm() {
+ if [[ $# > 1 ]]; then
+ echo && read -rp "$1 [Default $2]: " temp
+ if [[ "${temp}" == "" ]]; then
+ temp=$2
+ fi
+ else
+ read -rp "$1 [y/n]: " temp
+ fi
+ if [[ "${temp}" == "y" || "${temp}" == "Y" ]]; then
+ return 0
+ else
+ return 1
+ fi
+}
+
+confirm_restart() {
+ confirm "重启面板，注意：重启面板也会重启xray" "y"
+ if [[ $? == 0 ]]; then
+ restart
+ else
+ show_menu
+ fi
+}
+
+before_show_menu() {
+ echo && echo -n -e "${yellow}按回车键返回主菜单: ${plain}" && read -r temp
+ show_menu
+}
+
+install() {
+ bash <(curl -Ls https://raw.githubusercontent.com/sky22333/shell/main/3x-ui/install.sh)
+ if [[ $? == 0 ]]; then
+ if [[ $# == 0 ]]; then
+ start
+ else
+ start 0
+ fi
+ fi
+}
+
+update() {
+ confirm "此功能将强制重新安装最新版本，数据不会丢失。您要继续吗？" "y"
+ if [[ $? != 0 ]]; then
+ LOGE "已取消"
+ if [[ $# == 0 ]]; then
+ before_show_menu
+ fi
+ return 0
+ fi
+ bash <(curl -Ls https://raw.githubusercontent.com/sky22333/shell/main/3x-ui/install.sh)
+ if [[ $? == 0 ]]; then
+ LOGI "更新完成，面板已自动重启 "
+ before_show_menu
+ fi
+}
+
+update_menu() {
+ echo -e "${yellow}更新菜单${plain}"
+ confirm "此功能将更新菜单到最新版本。" "y"
+ if [[ $? != 0 ]]; then
+ LOGE "已取消"
+ if [[ $# == 0 ]]; then
+ before_show_menu
+ fi
+ return 0
+ fi
+
+ wget -O /usr/bin/x-ui https://raw.githubusercontent.com/sky22333/shell/main/3x-ui/x-ui.sh
+ chmod +x /usr/local/x-ui/x-ui.sh
+ chmod +x /usr/bin/x-ui
+
+ if [[ $? == 0 ]]; then
+ echo -e "${green}更新成功。面板已自动重启。${plain}"
+ exit 0
+ else
+ echo -e "${red}更新菜单失败。${plain}"
+ return 1
+ fi
+}
+
+legacy_version() {
+ echo -n "输入面板版本 (如 2.4.0):"
+ read -r tag_version
+
+ if [ -z "$tag_version" ]; then
+ echo "面板版本不能为空。退出。"
+ exit 1
+ fi
+ # 在下载链接中使用输入的面板版本
+ install_command="bash <(curl -Ls "https://raw.githubusercontent.com/sky22333/shell/main/3x-ui/install.sh") v$tag_version"
+
+ echo "正在下载并安装面板版本 $tag_version..."
+ eval $install_command
+}
+
+# 处理脚本文件删除的函数
+delete_script() {
+ rm "$0" # 删除脚本文件本身
+ exit 1
+}
+
+uninstall() {
+ confirm "您确定要卸载面板吗？xray也将被卸载！" "n"
+ if [[ $? != 0 ]]; then
+ if [[ $# == 0 ]]; then
+ show_menu
+ fi
+ return 0
+ fi
+ systemctl stop x-ui
+ systemctl disable x-ui
+ rm /etc/systemd/system/x-ui.service -f
+ systemctl daemon-reload
+ systemctl reset-failed
+ rm /etc/x-ui/ -rf
+ rm /usr/local/x-ui/ -rf
+
+ echo ""
+ echo -e "卸载成功。\n"
+ echo "如果您需要再次安装此面板，可以使用以下命令:"
+ echo -e "${green}bash <(curl -Ls https://raw.githubusercontent.com/sky22333/shell/main/3x-ui/install.sh)${plain}"
+ echo ""
+ # 捕获SIGTERM信号
+ trap delete_script SIGTERM
+ delete_script
+}
+
+reset_user() {
+ confirm "您确定要重置面板的用户名和密码吗？" "n"
+ if [[ $? != 0 ]]; then
+ if [[ $# == 0 ]]; then
+ show_menu
+ fi
+ return 0
+ fi
+
+ read -rp "请设置登录用户名 [默认为随机用户名]: " config_account
+ [[ -z $config_account ]] && config_account=$(date +%s%N | md5sum | cut -c 1-8)
+ read -rp "请设置登录密码 [默认为随机密码]: " config_password
+ [[ -z $config_password ]] && config_password=$(date +%s%N | md5sum | cut -c 1-8)
+
+ read -rp "您要禁用当前配置的双因素认证吗？ (y/n): " twoFactorConfirm
+ if [[ $twoFactorConfirm != "y" && $twoFactorConfirm != "Y" ]]; then
+ /usr/local/x-ui/x-ui setting -username ${config_account} -password ${config_password} -resetTwoFactor false >/dev/null 2>&1
+ else
+ /usr/local/x-ui/x-ui setting -username ${config_account} -password ${config_password} -resetTwoFactor true >/dev/null 2>&1
+ echo -e "双因素认证已被禁用。"
+ fi
+
+ echo -e "面板登录用户名已重置为: ${green} ${config_account} ${plain}"
+ echo -e "面板登录密码已重置为: ${green} ${config_password} ${plain}"
+ echo -e "${green} 请使用新的登录用户名和密码访问X-UI面板。请记住它们！ ${plain}"
+ confirm_restart
+}
+
+gen_random_string() {
+ local length="$1"
+ local random_string=$(LC_ALL=C tr -dc 'a-zA-Z0-9' /dev/null 2>&1
+
+ echo -e "网页基础路径已重置为: ${green}${config_webBasePath}${plain}"
+ echo -e "${green}请使用新的网页基础路径访问面板。${plain}"
+ restart
+}
+
+reset_config() {
+ confirm "您确定要重置所有面板设置吗？账户数据不会丢失，用户名和密码不会改变" "n"
+ if [[ $? != 0 ]]; then
+ if [[ $# == 0 ]]; then
+ show_menu
+ fi
+ return 0
+ fi
+ /usr/local/x-ui/x-ui setting -reset
+ echo -e "所有面板设置已重置为默认值。"
+ restart
+}
+
+check_config() {
+ local info=$(/usr/local/x-ui/x-ui setting -show true)
+ if [[ $? != 0 ]]; then
+ LOGE "获取当前设置错误，请检查日志"
+ show_menu
+ return
+ fi
+ LOGI "${info}"
+
+ local existing_webBasePath=$(echo "$info" | grep -Eo 'webBasePath: .+' | awk '{print $2}')
+ local existing_port=$(echo "$info" | grep -Eo 'port: .+' | awk '{print $2}')
+ local existing_cert=$(/usr/local/x-ui/x-ui setting -getCert true | grep -Eo 'cert: .+' | awk '{print $2}')
+ local server_ip=$(curl -s --max-time 3 https://api.ipify.org)
+ if [ -z "$server_ip" ]; then
+ server_ip=$(curl -s --max-time 3 https://4.ident.me)
+ fi
+
+ if [[ -n "$existing_cert" ]]; then
+ local domain=$(basename "$(dirname "$existing_cert")")
+
+ if [[ "$domain" =~ ^[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$ ]]; then
+ echo -e "${green}访问地址: https://${domain}:${existing_port}${existing_webBasePath}${plain}"
+ else
+ echo -e "${green}访问地址: https://${server_ip}:${existing_port}${existing_webBasePath}${plain}"
+ fi
+ else
+ echo -e "${green}访问地址: http://${server_ip}:${existing_port}${existing_webBasePath}${plain}"
+ fi
+}
+
+set_port() {
+ echo -n "输入端口号[1-65535]: "
+ read -r port
+ if [[ -z "${port}" ]]; then
+ LOGD "已取消"
+ before_show_menu
+ else
+ /usr/local/x-ui/x-ui setting -port ${port}
+ echo -e "端口已设置，请立即重启面板，并使用新端口 ${green}${port}${plain} 访问网页面板"
+ confirm_restart
+ fi
+}
+
+start() {
+ check_status
+ if [[ $? == 0 ]]; then
+ echo ""
+ LOGI "面板正在运行，无需再次启动，如需重启，请选择重启"
+ else
+ systemctl start x-ui
+ sleep 2
+ check_status
+ if [[ $? == 0 ]]; then
+ LOGI "x-ui启动成功"
+ else
+ LOGE "面板启动失败，可能是因为启动时间超过两秒，请稍后检查日志信息"
+ fi
+ fi
+
+ if [[ $# == 0 ]]; then
+ before_show_menu
+ fi
+}
+
+stop() {
+ check_status
+ if [[ $? == 1 ]]; then
+ echo ""
+ LOGI "面板已停止，无需再次停止！"
+ else
+ systemctl stop x-ui
+ sleep 2
+ check_status
+ if [[ $? == 1 ]]; then
+ LOGI "x-ui和xray停止成功"
+ else
+ LOGE "面板停止失败，可能是因为停止时间超过两秒，请稍后检查日志信息"
+ fi
+ fi
+
+ if [[ $# == 0 ]]; then
+ before_show_menu
+ fi
+}
+
+restart() {
+ systemctl restart x-ui
+ sleep 2
+ check_status
+ if [[ $? == 0 ]]; then
+ LOGI "x-ui和xray重启成功"
+ else
+ LOGE "面板重启失败，可能是因为启动时间超过两秒，请稍后检查日志信息"
+ fi
+ if [[ $# == 0 ]]; then
+ before_show_menu
+ fi
+}
+
+status() {
+ systemctl status x-ui -l
+ if [[ $# == 0 ]]; then
+ before_show_menu
+ fi
+}
+
+enable() {
+ systemctl enable x-ui
+ if [[ $? == 0 ]]; then
+ LOGI "x-ui设置开机自启成功"
+ else
+ LOGE "x-ui设置自启失败"
+ fi
+
+ if [[ $# == 0 ]]; then
+ before_show_menu
+ fi
+}
+
+disable() {
+ systemctl disable x-ui
+ if [[ $? == 0 ]]; then
+ LOGI "x-ui取消自启成功"
+ else
+ LOGE "x-ui取消自启失败"
+ fi
+
+ if [[ $# == 0 ]]; then
+ before_show_menu
+ fi
+}
+
+show_log() {
+ echo -e "${green}\t1.${plain} 调试日志"
+ echo -e "${green}\t2.${plain} 清除所有日志"
+ echo -e "${green}\t0.${plain} 返回主菜单"
+ read -rp "选择一个选项: " choice
+
+ case "$choice" in
+ 0)
+ show_menu
+ ;;
+ 1)
+ journalctl -u x-ui -e --no-pager -f -p debug
+ if [[ $# == 0 ]]; then
+ before_show_menu
+ fi
+ ;;
+ 2)
+ sudo journalctl --rotate
+ sudo journalctl --vacuum-time=1s
+ echo "所有日志已清除。"
+ restart
+ ;;
+ *)
+ echo -e "${red}无效选项。请选择一个有效数字。${plain}\n"
+ show_log
+ ;;
+ esac
+}
+
+bbr_menu() {
+ echo -e "${green}\t1.${plain} 启用BBR"
+ echo -e "${green}\t2.${plain} 禁用BBR"
+ echo -e "${green}\t0.${plain} 返回主菜单"
+ read -rp "选择一个选项: " choice
+ case "$choice" in
+ 0)
+ show_menu
+ ;;
+ 1)
+ enable_bbr
+ bbr_menu
+ ;;
+ 2)
+ disable_bbr
+ bbr_menu
+ ;;
+ *)
+ echo -e "${red}无效选项。请选择一个有效数字。${plain}\n"
+ bbr_menu
+ ;;
+ esac
+}
+
+disable_bbr() {
+
+ if ! grep -q "net.core.default_qdisc=fq" /etc/sysctl.conf || ! grep -q "net.ipv4.tcp_congestion_control=bbr" /etc/sysctl.conf; then
+ echo -e "${yellow}BBR当前未启用。${plain}"
+ before_show_menu
+ fi
+
+ # Replace BBR with CUBIC configurations
+ sed -i 's/net.core.default_qdisc=fq/net.core.default_qdisc=pfifo_fast/' /etc/sysctl.conf
+ sed -i 's/net.ipv4.tcp_congestion_control=bbr/net.ipv4.tcp_congestion_control=cubic/' /etc/sysctl.conf
+
+ # 应用更改
+ sysctl -p
+
+ # Verify that BBR is replaced with CUBIC
+ if [[ $(sysctl net.ipv4.tcp_congestion_control | awk '{print $3}') == "cubic" ]]; then
+ echo -e "${green}BBR已成功替换为CUBIC。${plain}"
+ else
+ echo -e "${red}替换BBR为CUBIC失败。请检查您的系统配置。${plain}"
+ fi
+}
+
+enable_bbr() {
+ if grep -q "net.core.default_qdisc=fq" /etc/sysctl.conf && grep -q "net.ipv4.tcp_congestion_control=bbr" /etc/sysctl.conf; then
+ echo -e "${green}BBR已经启用！${plain}"
+ before_show_menu
+ fi
+
+ # 检查操作系统并安装必要的软件包
+ case "${release}" in
+ ubuntu | debian | armbian)
+ apt-get update && apt-get install -yqq --no-install-recommends ca-certificates
+ ;;
+ centos | rhel | almalinux | rocky | ol)
+ yum -y update && yum -y install ca-certificates
+ ;;
+ fedora | amzn | virtuozzo)
+ dnf -y update && dnf -y install ca-certificates
+ ;;
+ arch | manjaro | parch)
+ pacman -Sy --noconfirm ca-certificates
+ ;;
+ *)
+ echo -e "${red}不支持的操作系统。请检查脚本并手动安装必要的软件包。${plain}\n"
+ exit 1
+ ;;
+ esac
+
+ # 启用BBR
+ echo "net.core.default_qdisc=fq" | tee -a /etc/sysctl.conf
+ echo "net.ipv4.tcp_congestion_control=bbr" | tee -a /etc/sysctl.conf
+
+ # Apply changes
+ sysctl -p
+
+ # 验证BBR是否已启用
+ if [[ $(sysctl net.ipv4.tcp_congestion_control | awk '{print $3}') == "bbr" ]]; then
+ echo -e "${green}BBR已成功启用。${plain}"
+ else
+ echo -e "${red}启用BBR失败。请检查您的系统配置。${plain}"
+ fi
+}
+
+update_shell() {
+ wget -O /usr/bin/x-ui -N https://raw.githubusercontent.com/sky22333/shell/main/3x-ui/x-ui.sh
+ if [[ $? != 0 ]]; then
+ echo ""
+ LOGE "下载脚本失败，请检查机器是否能连接Github"
+ before_show_menu
+ else
+ chmod +x /usr/bin/x-ui
+ LOGI "升级脚本成功，请重新运行脚本"
+ before_show_menu
+ fi
+}
+
+# 0: 运行中, 1: 未运行, 2: 未安装
+check_status() {
+ if [[ ! -f /etc/systemd/system/x-ui.service ]]; then
+ return 2
+ fi
+ temp=$(systemctl status x-ui | grep Active | awk '{print $3}' | cut -d "(" -f2 | cut -d ")" -f1)
+ if [[ "${temp}" == "running" ]]; then
+ return 0
+ else
+ return 1
+ fi
+}
+
+check_enabled() {
+ temp=$(systemctl is-enabled x-ui)
+ if [[ "${temp}" == "enabled" ]]; then
+ return 0
+ else
+ return 1
+ fi
+}
+
+check_uninstall() {
+ check_status
+ if [[ $? != 2 ]]; then
+ echo ""
+ LOGE "面板已安装，请勿重复安装"
+ if [[ $# == 0 ]]; then
+ before_show_menu
+ fi
+ return 1
+ else
+ return 0
+ fi
+}
+
+check_install() {
+ check_status
+ if [[ $? == 2 ]]; then
+ echo ""
+ LOGE "请先安装面板"
+ if [[ $# == 0 ]]; then
+ before_show_menu
+ fi
+ return 1
+ else
+ return 0
+ fi
+}
+
+show_status() {
+ check_status
+ case $? in
+ 0)
+ echo -e "面板状态: ${green}运行中${plain}"
+ show_enable_status
+ ;;
+ 1)
+ echo -e "面板状态: ${yellow}未运行${plain}"
+ show_enable_status
+ ;;
+ 2)
+ echo -e "面板状态: ${red}未安装${plain}"
+ ;;
+ esac
+ show_xray_status
+}
+
+show_enable_status() {
+ check_enabled
+ if [[ $? == 0 ]]; then
+ echo -e "开机自启: ${green}是${plain}"
+ else
+ echo -e "开机自启: ${red}否${plain}"
+ fi
+}
+
+check_xray_status() {
+ count=$(ps -ef | grep "xray-linux" | grep -v "grep" | wc -l)
+ if [[ count -ne 0 ]]; then
+ return 0
+ else
+ return 1
+ fi
+}
+
+show_xray_status() {
+ check_xray_status
+ if [[ $? == 0 ]]; then
+ echo -e "xray状态: ${green}运行中${plain}"
+ else
+ echo -e "xray状态: ${red}未运行${plain}"
+ fi
+}
+
+firewall_menu() {
+ echo -e "${green}\t1.${plain} ${green}安装${plain} 防火墙"
+ echo -e "${green}\t2.${plain} 端口列表 [编号]"
+ echo -e "${green}\t3.${plain} ${green}开放${plain} 端口"
+ echo -e "${green}\t4.${plain} ${red}删除${plain} 端口"
+ echo -e "${green}\t5.${plain} ${green}启用${plain} 防火墙"
+ echo -e "${green}\t6.${plain} ${red}禁用${plain} 防火墙"
+ echo -e "${green}\t7.${plain} 防火墙状态"
+ echo -e "${green}\t0.${plain} 返回主菜单"
+ read -rp "选择一个选项: " choice
+ case "$choice" in
+ 0)
+ show_menu
+ ;;
+ 1)
+ install_firewall
+ firewall_menu
+ ;;
+ 2)
+ ufw status numbered
+ firewall_menu
+ ;;
+ 3)
+ open_ports
+ firewall_menu
+ ;;
+ 4)
+ delete_ports
+ firewall_menu
+ ;;
+ 5)
+ ufw enable
+ firewall_menu
+ ;;
+ 6)
+ ufw disable
+ firewall_menu
+ ;;
+ 7)
+ ufw status verbose
+ firewall_menu
+ ;;
+ *)
+ echo -e "${red}无效选项。请选择有效数字.${plain}\n"
+ firewall_menu
+ ;;
+ esac
+}
+
+install_firewall() {
+ if ! command -v ufw &>/dev/null; then
+ echo "ufw防火墙未安装，正在安装..."
+ apt-get update
+ apt-get install -y ufw
+ else
+ echo "ufw防火墙已安装"
+ fi
+
+ # Check if the firewall is inactive
+ if ufw status | grep -q "Status: active"; then
+ echo "防火墙已激活"
+ else
+ echo "正在激活防火墙..."
+ # Open the necessary ports
+ ufw allow ssh
+ ufw allow http
+ ufw allow https
+ ufw allow 2053/tcp #webPort
+ ufw allow 2096/tcp #subport
+
+ # Enable the firewall
+ ufw --force enable
+ fi
+}
+
+open_ports() {
+ # Prompt the user to enter the ports they want to open
+ read -rp "输入要开放的端口 (例如 80,443,2053 或范围 400-500): " ports
+
+ # Check if the input is valid
+ if ! [[ $ports =~ ^([0-9]+|[0-9]+-[0-9]+)(,([0-9]+|[0-9]+-[0-9]+))*$ ]]; then
+ echo "错误: 输入无效。请输入逗号分隔的端口列表或端口范围 (例如 80,443,2053 或 400-500)。" >&2
+ exit 1
+ fi
+
+ # Open the specified ports using ufw
+ IFS=',' read -ra PORT_LIST <<<"$ports"
+ for port in "${PORT_LIST[@]}"; do
+ if [[ $port == *-* ]]; then
+ # Split the range into start and end ports
+ start_port=$(echo $port | cut -d'-' -f1)
+ end_port=$(echo $port | cut -d'-' -f2)
+ # Open the port range
+ ufw allow $start_port:$end_port/tcp
+ ufw allow $start_port:$end_port/udp
+ else
+ # Open the single port
+ ufw allow "$port"
+ fi
+ done
+
+ # Confirm that the ports are opened
+ echo "已开放指定端口:"
+ for port in "${PORT_LIST[@]}"; do
+ if [[ $port == *-* ]]; then
+ start_port=$(echo $port | cut -d'-' -f1)
+ end_port=$(echo $port | cut -d'-' -f2)
+ # Check if the port range has been successfully opened
+ (ufw status | grep -q "$start_port:$end_port") && echo "$start_port-$end_port"
+ else
+ # Check if the individual port has been successfully opened
+ (ufw status | grep -q "$port") && echo "$port"
+ fi
+ done
+}
+
+delete_ports() {
+ # Display current rules with numbers
+ echo "当前UFW规则:"
+ ufw status numbered
+
+ # Ask the user how they want to delete rules
+ echo "您想要通过以下方式删除规则:"
+ echo "1) 规则编号"
+ echo "2) 端口"
+ read -rp "输入您的选择 (1 或 2): " choice
+
+ if [[ $choice -eq 1 ]]; then
+ # Deleting by rule numbers
+ read -rp "输入要删除的规则编号 (1, 2, 等): " rule_numbers
+
+ # Validate the input
+ if ! [[ $rule_numbers =~ ^([0-9]+)(,[0-9]+)*$ ]]; then
+ echo "错误: 输入无效。请输入逗号分隔的规则编号列表。" >&2
+ exit 1
+ fi
+
+ # Split numbers into an array
+ IFS=',' read -ra RULE_NUMBERS <<<"$rule_numbers"
+ for rule_number in "${RULE_NUMBERS[@]}"; do
+ # Delete the rule by number
+ ufw delete "$rule_number" || echo "删除规则编号 $rule_number 失败"
+ done
+
+ echo "选定的规则已被删除。"
+
+ elif [[ $choice -eq 2 ]]; then
+ # Deleting by ports
+ read -rp "输入要删除的端口 (例如 80,443,2053 或范围 400-500): " ports
+
+ # Validate the input
+ if ! [[ $ports =~ ^([0-9]+|[0-9]+-[0-9]+)(,([0-9]+|[0-9]+-[0-9]+))*$ ]]; then
+ echo "错误: 输入无效。请输入逗号分隔的端口列表或端口范围 (例如 80,443,2053 或 400-500)。" >&2
+ exit 1
+ fi
+
+ # Split ports into an array
+ IFS=',' read -ra PORT_LIST <<<"$ports"
+ for port in "${PORT_LIST[@]}"; do
+ if [[ $port == *-* ]]; then
+ # Split the port range
+ start_port=$(echo $port | cut -d'-' -f1)
+ end_port=$(echo $port | cut -d'-' -f2)
+ # Delete the port range
+ ufw delete allow $start_port:$end_port/tcp
+ ufw delete allow $start_port:$end_port/udp
+ else
+ # Delete a single port
+ ufw delete allow "$port"
+ fi
+ done
+
+ # Confirmation of deletion
+ echo "已删除指定端口:"
+ for port in "${PORT_LIST[@]}"; do
+ if [[ $port == *-* ]]; then
+ start_port=$(echo $port | cut -d'-' -f1)
+ end_port=$(echo $port | cut -d'-' -f2)
+ # Check if the port range has been deleted
+ (ufw status | grep -q "$start_port:$end_port") || echo "$start_port-$end_port"
+ else
+ # Check if the individual port has been deleted
+ (ufw status | grep -q "$port") || echo "$port"
+ fi
+ done
+ else
+ echo "${red}Error:${plain} Invalid choice. Please enter 1 or 2." >&2
+ exit 1
+ fi
+}
+
+update_geo() {
+ echo -e "${green}\t1.${plain} Loyalsoldier (geoip.dat, geosite.dat)"
+ echo -e "${green}\t2.${plain} chocolate4u (geoip_IR.dat, geosite_IR.dat)"
+ echo -e "${green}\t3.${plain} runetfreedom (geoip_RU.dat, geosite_RU.dat)"
+ echo -e "${green}\t0.${plain} 返回主菜单"
+ read -rp "选择一个选项: " choice
+
+ cd /usr/local/x-ui/bin
+
+ case "$choice" in
+ 0)
+ show_menu
+ ;;
+ 1)
+ systemctl stop x-ui
+ rm -f geoip.dat geosite.dat
+ wget -N https://github.com/Loyalsoldier/v2ray-rules-dat/releases/latest/download/geoip.dat
+ wget -N https://github.com/Loyalsoldier/v2ray-rules-dat/releases/latest/download/geosite.dat
+ echo -e "${green}Loyalsoldier 数据集已成功更新!${plain}"
+ restart
+ ;;
+ 2)
+ systemctl stop x-ui
+ rm -f geoip_IR.dat geosite_IR.dat
+ wget -O geoip_IR.dat -N https://github.com/chocolate4u/Iran-v2ray-rules/releases/latest/download/geoip.dat
+ wget -O geosite_IR.dat -N https://github.com/chocolate4u/Iran-v2ray-rules/releases/latest/download/geosite.dat
+ echo -e "${green}chocolate4u 数据集已成功更新!${plain}"
+ restart
+ ;;
+ 3)
+ systemctl stop x-ui
+ rm -f geoip_RU.dat geosite_RU.dat
+ wget -O geoip_RU.dat -N https://github.com/runetfreedom/russia-v2ray-rules-dat/releases/latest/download/geoip.dat
+ wget -O geosite_RU.dat -N https://github.com/runetfreedom/russia-v2ray-rules-dat/releases/latest/download/geosite.dat
+ echo -e "${green}runetfreedom 数据集已成功更新!${plain}"
+ restart
+ ;;
+ *)
+ echo -e "${red}无效选项。请选择有效数字.${plain}\n"
+ update_geo
+ ;;
+ esac
+
+ before_show_menu
+}
+
+install_acme() {
+ # Check if acme.sh is already installed
+ if command -v ~/.acme.sh/acme.sh &>/dev/null; then
+ LOGI "acme.sh 已安装。"
+ return 0
+ fi
+
+ LOGI "正在安装 acme.sh..."
+ cd ~ || return 1 # Ensure you can change to the home directory
+
+ curl -s https://get.acme.sh | sh
+ if [ $? -ne 0 ]; then
+ LOGE "acme.sh 安装失败。"
+ return 1
+ else
+ LOGI "acme.sh 安装成功。"
+ fi
+
+ return 0
+}
+
+ssl_cert_issue_main() {
+ echo -e "${green}\t1.${plain} 获取 SSL"
+ echo -e "${green}\t2.${plain} 撤销"
+ echo -e "${green}\t3.${plain} 强制续期"
+ echo -e "${green}\t4.${plain} 显示现有域名"
+ echo -e "${green}\t5.${plain} 为面板设置证书路径"
+ echo -e "${green}\t0.${plain} 返回主菜单"
+
+ read -rp "选择一个选项: " choice
+ case "$choice" in
+ 0)
+ show_menu
+ ;;
+ 1)
+ ssl_cert_issue
+ ssl_cert_issue_main
+ ;;
+ 2)
+ local domains=$(find /root/cert/ -mindepth 1 -maxdepth 1 -type d -exec basename {} \;)
+ if [ -z "$domains" ]; then
+ echo "未找到可撤销的证书。"
+ else
+ echo "现有域名:"
+ echo "$domains"
+ read -rp "请从列表中输入要撤销证书的域名: " domain
+ if echo "$domains" | grep -qw "$domain"; then
+ ~/.acme.sh/acme.sh --revoke -d ${domain}
+ LOGI "域名 $domain 的证书已撤销"
+ else
+ echo "输入的域名无效。"
+ fi
+ fi
+ ssl_cert_issue_main
+ ;;
+ 3)
+ local domains=$(find /root/cert/ -mindepth 1 -maxdepth 1 -type d -exec basename {} \;)
+ if [ -z "$domains" ]; then
+ echo "未找到可续期的证书。"
+ else
+ echo "现有域名:"
+ echo "$domains"
+ read -rp "请从列表中输入要续期SSL证书的域名: " domain
+ if echo "$domains" | grep -qw "$domain"; then
+ ~/.acme.sh/acme.sh --renew -d ${domain} --force
+ LOGI "域名 $domain 的证书已强制续期"
+ else
+ echo "输入的域名无效。"
+ fi
+ fi
+ ssl_cert_issue_main
+ ;;
+ 4)
+ local domains=$(find /root/cert/ -mindepth 1 -maxdepth 1 -type d -exec basename {} \;)
+ if [ -z "$domains" ]; then
+ echo "未找到证书。"
+ else
+ echo "现有域名及其路径:"
+ for domain in $domains; do
+ local cert_path="/root/cert/${domain}/fullchain.pem"
+ local key_path="/root/cert/${domain}/privkey.pem"
+ if [[ -f "${cert_path}" && -f "${key_path}" ]]; then
+ echo -e "域名: ${domain}"
+ echo -e "\t证书路径: ${cert_path}"
+ echo -e "\t私钥路径: ${key_path}"
+ else
+ echo -e "域名: ${domain} - 证书或密钥缺失。"
+ fi
+ done
+ fi
+ ssl_cert_issue_main
+ ;;
+ 5)
+ local domains=$(find /root/cert/ -mindepth 1 -maxdepth 1 -type d -exec basename {} \;)
+ if [ -z "$domains" ]; then
+ echo "未找到证书。"
+ else
+ echo "可用域名:"
+ echo "$domains"
+ read -rp "请选择要设置面板路径的域名: " domain
+
+ if echo "$domains" | grep -qw "$domain"; then
+ local webCertFile="/root/cert/${domain}/fullchain.pem"
+ local webKeyFile="/root/cert/${domain}/privkey.pem"
+
+ if [[ -f "${webCertFile}" && -f "${webKeyFile}" ]]; then
+ /usr/local/x-ui/x-ui cert -webCert "$webCertFile" -webCertKey "$webKeyFile"
+ echo "域名 $domain 的面板路径已设置"
+ echo " - 证书文件: $webCertFile"
+ echo " - 私钥文件: $webKeyFile"
+ restart
+ else
+ echo "未找到域名 $domain 的证书或私钥。"
+ fi
+ else
+ echo "输入的域名无效。"
+ fi
+ fi
+ ssl_cert_issue_main
+ ;;
+
+ *)
+ echo -e "${red}无效选项。请选择有效数字.${plain}\n"
+ ssl_cert_issue_main
+ ;;
+ esac
+}
+
+ssl_cert_issue() {
+ local existing_webBasePath=$(/usr/local/x-ui/x-ui setting -show true | grep -Eo 'webBasePath: .+' | awk '{print $2}')
+ local existing_port=$(/usr/local/x-ui/x-ui setting -show true | grep -Eo 'port: .+' | awk '{print $2}')
+ # check for acme.sh first
+ if ! command -v ~/.acme.sh/acme.sh &>/dev/null; then
+ echo "未找到 acme.sh，我们将安装它"
+ install_acme
+ if [ $? -ne 0 ]; then
+ LOGE "安装 acme 失败，请检查日志"
+ exit 1
+ fi
+ fi
+
+ # install socat second
+ case "${release}" in
+ ubuntu | debian | armbian)
+ apt-get update && apt-get install socat -y
+ ;;
+ centos | rhel | almalinux | rocky | ol)
+ yum -y update && yum -y install socat
+ ;;
+ fedora | amzn | virtuozzo)
+ dnf -y update && dnf -y install socat
+ ;;
+ arch | manjaro | parch)
+ pacman -Sy --noconfirm socat
+ ;;
+ *)
+ echo -e "${red}Unsupported operating system. Please check the script and install the necessary packages manually.${plain}\n"
+ exit 1
+ ;;
+ esac
+ if [ $? -ne 0 ]; then
+ LOGE "安装 socat 失败，请检查日志"
+ exit 1
+ else
+ LOGI "安装 socat 成功..."
+ fi
+
+ # get the domain here, and we need to verify it
+ local domain=""
+ read -rp "请输入您的域名: " domain
+ LOGD "您的域名是: ${domain}，正在检查..."
+
+ # check if there already exists a certificate
+ local currentCert=$(~/.acme.sh/acme.sh --list | tail -1 | awk '{print $1}')
+ if [ "${currentCert}" == "${domain}" ]; then
+ local certInfo=$(~/.acme.sh/acme.sh --list)
+ LOGE "系统已有此域名的证书。无法重复申请。当前证书详情:"
+ LOGI "$certInfo"
+ exit 1
+ else
+ LOGI "您的域名现在可以申请证书了..."
+ fi
+
+ # create a directory for the certificate
+ certPath="/root/cert/${domain}"
+ if [ ! -d "$certPath" ]; then
+ mkdir -p "$certPath"
+ else
+ rm -rf "$certPath"
+ mkdir -p "$certPath"
+ fi
+
+ # get the port number for the standalone server
+ local WebPort=80
+ read -rp "请选择使用的端口 (默认为 80): " WebPort
+ if [[ ${WebPort} -gt 65535 || ${WebPort} -lt 1 ]]; then
+ LOGE "您输入的 ${WebPort} 无效，将使用默认端口 80。"
+ WebPort=80
+ fi
+ LOGI "将使用端口: ${WebPort} 申请证书。请确保此端口已开放。"
+
+ # issue the certificate
+ ~/.acme.sh/acme.sh --set-default-ca --server letsencrypt
+ ~/.acme.sh/acme.sh --issue -d ${domain} --listen-v6 --standalone --httpport ${WebPort} --force
+ if [ $? -ne 0 ]; then
+ LOGE "申请证书失败，请检查日志。"
+ rm -rf ~/.acme.sh/${domain}
+ exit 1
+ else
+ LOGE "申请证书成功，正在安装证书..."
+ fi
+
+ reloadCmd="x-ui restart"
+
+ LOGI "ACME 的默认 --reloadcmd 是: ${yellow}x-ui restart"
+ LOGI "此命令将在每次证书申请和续期时运行。"
+ read -rp "您想要修改 ACME 的 --reloadcmd 吗? (y/n): " setReloadcmd
+ if [[ "$setReloadcmd" == "y" || "$setReloadcmd" == "Y" ]]; then
+ echo -e "\n${green}\t1.${plain} 预设: systemctl reload nginx ; x-ui restart"
+ echo -e "${green}\t2.${plain} 输入您自己的命令"
+ echo -e "${green}\t0.${plain} 保持默认重载命令"
+ read -rp "选择一个选项: " choice
+ case "$choice" in
+ 1)
+ LOGI "重载命令是: systemctl reload nginx ; x-ui restart"
+ reloadCmd="systemctl reload nginx ; x-ui restart"
+ ;;
+ 2)
+ LOGD "建议将 x-ui restart 放在最后，这样即使其他服务失败也不会出错"
+ read -rp "请输入您的重载命令 (例如: systemctl reload nginx ; x-ui restart): " reloadCmd
+ LOGI "您的重载命令是: ${reloadCmd}"
+ ;;
+ *)
+ LOGI "保持默认重载命令"
+ ;;
+ esac
+ fi
+
+ # install the certificate
+ ~/.acme.sh/acme.sh --installcert -d ${domain} \
+ --key-file /root/cert/${domain}/privkey.pem \
+ --fullchain-file /root/cert/${domain}/fullchain.pem --reloadcmd "${reloadCmd}"
+
+ if [ $? -ne 0 ]; then
+ LOGE "安装证书失败，退出。"
+ rm -rf ~/.acme.sh/${domain}
+ exit 1
+ else
+ LOGI "安装证书成功，启用自动续期..."
+ fi
+
+ # enable auto-renew
+ ~/.acme.sh/acme.sh --upgrade --auto-upgrade
+ if [ $? -ne 0 ]; then
+ LOGE "自动续期失败，证书详情:"
+ ls -lah cert/*
+ chmod 755 $certPath/*
+ exit 1
+ else
+ LOGI "自动续期成功，证书详情:"
+ ls -lah cert/*
+ chmod 755 $certPath/*
+ fi
+
+ # Prompt user to set panel paths after successful certificate installation
+ read -rp "您想要为面板设置此证书吗? (y/n): " setPanel
+ if [[ "$setPanel" == "y" || "$setPanel" == "Y" ]]; then
+ local webCertFile="/root/cert/${domain}/fullchain.pem"
+ local webKeyFile="/root/cert/${domain}/privkey.pem"
+
+ if [[ -f "$webCertFile" && -f "$webKeyFile" ]]; then
+ /usr/local/x-ui/x-ui cert -webCert "$webCertFile" -webCertKey "$webKeyFile"
+ LOGI "域名 $domain 的面板路径已设置"
+ LOGI " - Certificate File: $webCertFile"
+ LOGI " - Private Key File: $webKeyFile"
+ echo -e "${green}Access URL: https://${domain}:${existing_port}${existing_webBasePath}${plain}"
+ restart
+ else
+ LOGE "错误: 未找到域名 $domain 的证书或私钥文件。"
+ fi
+ else
+ LOGI "跳过面板路径设置。"
+ fi
+}
+
+ssl_cert_issue_CF() {
+ local existing_webBasePath=$(/usr/local/x-ui/x-ui setting -show true | grep -Eo 'webBasePath: .+' | awk '{print $2}')
+ local existing_port=$(/usr/local/x-ui/x-ui setting -show true | grep -Eo 'port: .+' | awk '{print $2}')
+ LOGI "****** 使用说明 ******"
+ LOGI "请按照以下步骤完成流程:"
+ LOGI "1. Cloudflare 注册邮箱."
+ LOGI "2. Cloudflare 全局 API 密钥."
+ LOGI "3. 域名."
+ LOGI "4. 证书颁发后，您将被提示为面板设置证书（可选）."
+ LOGI "5. 脚本还支持安装后自动续期 SSL 证书."
+
+ confirm "您确认信息并希望继续吗? [y/n]" "y"
+
+ if [ $? -eq 0 ]; then
+ # Check for acme.sh first
+ if ! command -v ~/.acme.sh/acme.sh &>/dev/null; then
+ echo "未找到 acme.sh。我们将安装它。"
+ install_acme
+ if [ $? -ne 0 ]; then
+ LOGE "安装 acme 失败，请检查日志。"
+ exit 1
+ fi
+ fi
+
+ CF_Domain=""
+
+ LOGD "请设置域名:"
+ read -rp "在此输入您的域名: " CF_Domain
+ LOGD "您的域名设置为: ${CF_Domain}"
+
+ # Set up Cloudflare API details
+ CF_GlobalKey=""
+ CF_AccountEmail=""
+ LOGD "请设置 API 密钥:"
+ read -rp "在此输入您的密钥: " CF_GlobalKey
+ LOGD "您的 API 密钥是: ${CF_GlobalKey}"
+
+ LOGD "请设置注册邮箱:"
+ read -rp "在此输入您的邮箱: " CF_AccountEmail
+ LOGD "您的注册邮箱地址是: ${CF_AccountEmail}"
+
+ # Set the default CA to Let's Encrypt
+ ~/.acme.sh/acme.sh --set-default-ca --server letsencrypt
+ if [ $? -ne 0 ]; then
+ LOGE "默认CA Let'sEncrypt 失败，脚本退出..."
+ exit 1
+ fi
+
+ export CF_Key="${CF_GlobalKey}"
+ export CF_Email="${CF_AccountEmail}"
+
+ # Issue the certificate using Cloudflare DNS
+ ~/.acme.sh/acme.sh --issue --dns dns_cf -d ${CF_Domain} -d *.${CF_Domain} --log --force
+ if [ $? -ne 0 ]; then
+ LOGE "证书申请失败，脚本退出..."
+ exit 1
+ else
+ LOGI "证书申请成功，正在安装..."
+ fi
+
+ # Install the certificate
+ certPath="/root/cert/${CF_Domain}"
+ if [ -d "$certPath" ]; then
+ rm -rf ${certPath}
+ fi
+
+ mkdir -p ${certPath}
+ if [ $? -ne 0 ]; then
+ LOGE "创建目录失败: ${certPath}"
+ exit 1
+ fi
+
+ reloadCmd="x-ui restart"
+
+ LOGI "ACME 的默认 --reloadcmd 是: ${yellow}x-ui restart"
+ LOGI "此命令将在每次证书申请和续期时运行。"
+ read -rp "您想要修改 ACME 的 --reloadcmd 吗? (y/n): " setReloadcmd
+ if [[ "$setReloadcmd" == "y" || "$setReloadcmd" == "Y" ]]; then
+ echo -e "\n${green}\t1.${plain} 预设: systemctl reload nginx ; x-ui restart"
+ echo -e "${green}\t2.${plain} 输入您自己的命令"
+ echo -e "${green}\t0.${plain} 保持默认重载命令"
+ read -rp "选择一个选项: " choice
+ case "$choice" in
+ 1)
+ LOGI "重载命令是: systemctl reload nginx ; x-ui restart"
+ reloadCmd="systemctl reload nginx ; x-ui restart"
+ ;;
+ 2)
+ LOGD "建议将 x-ui restart 放在最后，这样即使其他服务失败也不会出错"
+ read -rp "请输入您的重载命令 (例如: systemctl reload nginx ; x-ui restart): " reloadCmd
+ LOGI "您的重载命令是: ${reloadCmd}"
+ ;;
+ *)
+ LOGI "保持默认重载命令"
+ ;;
+ esac
+ fi
+ ~/.acme.sh/acme.sh --installcert -d ${CF_Domain} -d *.${CF_Domain} \
+ --key-file ${certPath}/privkey.pem \
+ --fullchain-file ${certPath}/fullchain.pem --reloadcmd "${reloadCmd}"
+
+ if [ $? -ne 0 ]; then
+ LOGE "证书安装失败，脚本退出..."
+ exit 1
+ else
+ LOGI "证书安装成功，开启自动更新..."
+ fi
+
+ # Enable auto-update
+ ~/.acme.sh/acme.sh --upgrade --auto-upgrade
+ if [ $? -ne 0 ]; then
+ LOGE "自动更新设置失败，脚本退出..."
+ exit 1
+ else
+ LOGI "证书已安装并开启自动续期。具体信息如下:"
+ ls -lah ${certPath}/*
+ chmod 755 ${certPath}/*
+ fi
+
+ # Prompt user to set panel paths after successful certificate installation
+ read -rp "您想要为面板设置此证书吗? (y/n): " setPanel
+ if [[ "$setPanel" == "y" || "$setPanel" == "Y" ]]; then
+ local webCertFile="${certPath}/fullchain.pem"
+ local webKeyFile="${certPath}/privkey.pem"
+
+ if [[ -f "$webCertFile" && -f "$webKeyFile" ]]; then
+ /usr/local/x-ui/x-ui cert -webCert "$webCertFile" -webCertKey "$webKeyFile"
+ LOGI "域名 $CF_Domain 的面板路径已设置"
+ LOGI " - Certificate File: $webCertFile"
+ LOGI " - Private Key File: $webKeyFile"
+ echo -e "${green}Access URL: https://${CF_Domain}:${existing_port}${existing_webBasePath}${plain}"
+ restart
+ else
+ LOGE "错误: 未找到域名 $CF_Domain 的证书或私钥文件。"
+ fi
+ else
+ LOGI "跳过面板路径设置。"
+ fi
+ else
+ show_menu
+ fi
+}
+
+run_speedtest() {
+ # Check if Speedtest is already installed
+ if ! command -v speedtest &>/dev/null; then
+ # If not installed, determine installation method
+ if command -v snap &>/dev/null; then
+ # Use snap to install Speedtest
+ echo "使用 snap 安装测速工具..."
+ snap install speedtest
+ else
+ # Fallback to using package managers
+ local pkg_manager=""
+ local speedtest_install_script=""
+
+ if command -v dnf &>/dev/null; then
+ pkg_manager="dnf"
+ speedtest_install_script="https://packagecloud.io/install/repositories/ookla/speedtest-cli/script.rpm.sh"
+ elif command -v yum &>/dev/null; then
+ pkg_manager="yum"
+ speedtest_install_script="https://packagecloud.io/install/repositories/ookla/speedtest-cli/script.rpm.sh"
+ elif command -v apt-get &>/dev/null; then
+ pkg_manager="apt-get"
+ speedtest_install_script="https://packagecloud.io/install/repositories/ookla/speedtest-cli/script.deb.sh"
+ elif command -v apt &>/dev/null; then
+ pkg_manager="apt"
+ speedtest_install_script="https://packagecloud.io/install/repositories/ookla/speedtest-cli/script.deb.sh"
+ fi
+
+ if [[ -z $pkg_manager ]]; then
+ echo "错误: 未找到包管理器。您可能需要手动安装测速工具。"
+ return 1
+ else
+ echo "使用 $pkg_manager 安装测速工具..."
+ curl -s $speedtest_install_script | bash
+ $pkg_manager install -y speedtest
+ fi
+ fi
+ fi
+
+ speedtest
+}
+
+
+
+ip_validation() {
+ ipv6_regex="^(([0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))$"
+ ipv4_regex="^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]?|0)\.){3}(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]?|0)$"
+}
+
+iplimit_main() {
+ echo -e "\n${green}\t1.${plain} 安装 Fail2ban 并配置 IP 限制"
+ echo -e "${green}\t2.${plain} 更改封禁时长"
+ echo -e "${green}\t3.${plain} 解封所有用户"
+ echo -e "${green}\t4.${plain} 封禁日志"
+ echo -e "${green}\t5.${plain} 封禁 IP 地址"
+ echo -e "${green}\t6.${plain} 解封 IP 地址"
+ echo -e "${green}\t7.${plain} 实时日志"
+ echo -e "${green}\t8.${plain} 服务状态"
+ echo -e "${green}\t9.${plain} 重启服务"
+ echo -e "${green}\t10.${plain} 卸载 Fail2ban 和 IP 限制"
+ echo -e "${green}\t0.${plain} 返回主菜单"
+ read -rp "选择一个选项: " choice
+ case "$choice" in
+ 0)
+ show_menu
+ ;;
+ 1)
+ confirm "继续安装 Fail2ban 和 IP 限制?" "y"
+ if [[ $? == 0 ]]; then
+ install_iplimit
+ else
+ iplimit_main
+ fi
+ ;;
+ 2)
+ read -rp "请输入新的封禁时长（分钟）[默认 30]: " NUM
+ if [[ $NUM =~ ^[0-9]+$ ]]; then
+ create_iplimit_jails ${NUM}
+ systemctl restart fail2ban
+ else
+ echo -e "${red}${NUM} 不是数字! 请重试.${plain}"
+ fi
+ iplimit_main
+ ;;
+ 3)
+ confirm "继续从 IP 限制监狱中解封所有用户?" "y"
+ if [[ $? == 0 ]]; then
+ fail2ban-client reload --restart --unban 3x-ipl
+ truncate -s 0 "${iplimit_banned_log_path}"
+ echo -e "${green}所有用户解封成功.${plain}"
+ iplimit_main
+ else
+ echo -e "${yellow}已取消.${plain}"
+ fi
+ iplimit_main
+ ;;
+ 4)
+ show_banlog
+ iplimit_main
+ ;;
+ 5)
+ read -rp "输入要封禁的IP地址: " ban_ip
+ ip_validation
+ if [[ $ban_ip =~ $ipv4_regex || $ban_ip =~ $ipv6_regex ]]; then
+ fail2ban-client set 3x-ipl banip "$ban_ip"
+ echo -e "${green}IP 地址 ${ban_ip} 已成功封禁.${plain}"
+ else
+ echo -e "${red}无效的 IP 地址格式! 请重试.${plain}"
+ fi
+ iplimit_main
+ ;;
+ 6)
+ read -rp "输入要解封的IP地址: " unban_ip
+ ip_validation
+ if [[ $unban_ip =~ $ipv4_regex || $unban_ip =~ $ipv6_regex ]]; then
+ fail2ban-client set 3x-ipl unbanip "$unban_ip"
+ echo -e "${green}IP 地址 ${unban_ip} 已成功解封.${plain}"
+ else
+ echo -e "${red}无效的 IP 地址格式! 请重试.${plain}"
+ fi
+ iplimit_main
+ ;;
+ 7)
+ tail -f /var/log/fail2ban.log
+ iplimit_main
+ ;;
+ 8)
+ service fail2ban status
+ iplimit_main
+ ;;
+ 9)
+ systemctl restart fail2ban
+ iplimit_main
+ ;;
+ 10)
+ remove_iplimit
+ iplimit_main
+ ;;
+ *)
+ echo -e "${red}无效选项。请选择有效数字.${plain}\n"
+ iplimit_main
+ ;;
+ esac
+}
+
+install_iplimit() {
+ if ! command -v fail2ban-client &>/dev/null; then
+ echo -e "${green}Fail2ban 未安装。正在安装...!${plain}\n"
+
+ # Check the OS and install necessary packages
+ case "${release}" in
+ ubuntu)
+ apt-get update
+ if [[ "${os_version}" -ge 24 ]]; then
+ apt-get install python3-pip -y
+ python3 -m pip install pyasynchat --break-system-packages
+ fi
+ apt-get install fail2ban -y
+ ;;
+ debian)
+ apt-get update
+ if [ "$os_version" -ge 12 ]; then
+ apt-get install -y python3-systemd
+ fi
+ apt-get install -y fail2ban
+ ;;
+ armbian)
+ apt-get update && apt-get install fail2ban -y
+ ;;
+ centos | rhel | almalinux | rocky | ol)
+ yum update -y && yum install epel-release -y
+ yum -y install fail2ban
+ ;;
+ fedora | amzn | virtuozzo)
+ dnf -y update && dnf -y install fail2ban
+ ;;
+ arch | manjaro | parch)
+ pacman -Syu --noconfirm fail2ban
+ ;;
+ *)
+ echo -e "${red}不支持的操作系统。请检查脚本并手动安装必要的软件包。${plain}\n"
+ exit 1
+ ;;
+ esac
+
+ if ! command -v fail2ban-client &>/dev/null; then
+ echo -e "${red}Fail2ban 安装失败。${plain}\n"
+ exit 1
+ fi
+
+ echo -e "${green}Fail2ban 安装成功!${plain}\n"
+ else
+ echo -e "${yellow}Fail2ban 已安装。${plain}\n"
+ fi
+
+ echo -e "${green}正在配置 IP 限制...${plain}\n"
+
+ # make sure there's no conflict for jail files
+ iplimit_remove_conflicts
+
+ # Check if log file exists
+ if ! test -f "${iplimit_banned_log_path}"; then
+ touch ${iplimit_banned_log_path}
+ fi
+
+ # Check if service log file exists so fail2ban won't return error
+ if ! test -f "${iplimit_log_path}"; then
+ touch ${iplimit_log_path}
+ fi
+
+ # Create the iplimit jail files
+ # we didn't pass the bantime here to use the default value
+ create_iplimit_jails
+
+ # Launching fail2ban
+ if ! systemctl is-active --quiet fail2ban; then
+ systemctl start fail2ban
+ else
+ systemctl restart fail2ban
+ fi
+ systemctl enable fail2ban
+
+ echo -e "${green}IP 限制安装和配置成功!${plain}\n"
+ before_show_menu
+}
+
+remove_iplimit() {
+ echo -e "${green}\t1.${plain} 仅移除 IP 限制配置"
+ echo -e "${green}\t2.${plain} 卸载 Fail2ban 和 IP 限制"
+ echo -e "${green}\t0.${plain} 返回主菜单"
+ read -rp "选择一个选项: " num
+ case "$num" in
+ 1)
+ rm -f /etc/fail2ban/filter.d/3x-ipl.conf
+ rm -f /etc/fail2ban/action.d/3x-ipl.conf
+ rm -f /etc/fail2ban/jail.d/3x-ipl.conf
+ systemctl restart fail2ban
+ echo -e "${green}IP 限制移除成功!${plain}\n"
+ before_show_menu
+ ;;
+ 2)
+ rm -rf /etc/fail2ban
+ systemctl stop fail2ban
+ case "${release}" in
+ ubuntu | debian | armbian)
+ apt-get remove -y fail2ban
+ apt-get purge -y fail2ban -y
+ apt-get autoremove -y
+ ;;
+ centos | rhel | almalinux | rocky | ol)
+ yum remove fail2ban -y
+ yum autoremove -y
+ ;;
+ fedora | amzn | virtuozzo)
+ dnf remove fail2ban -y
+ dnf autoremove -y
+ ;;
+ arch | manjaro | parch)
+ pacman -Rns --noconfirm fail2ban
+ ;;
+ *)
+ echo -e "${red}不支持的操作系统。请手动卸载 Fail2ban。${plain}\n"
+ exit 1
+ ;;
+ esac
+ echo -e "${green}Fail2ban 和 IP 限制移除成功!${plain}\n"
+ before_show_menu
+ ;;
+ 0)
+ show_menu
+ ;;
+ *)
+ echo -e "${red}Invalid option. Please select a valid number.${plain}\n"
+ remove_iplimit
+ ;;
+ esac
+}
+
+show_banlog() {
+ local system_log="/var/log/fail2ban.log"
+
+ echo -e "${green}正在检查封禁日志...${plain}\n"
+
+ if ! systemctl is-active --quiet fail2ban; then
+ echo -e "${red}Fail2ban 服务未运行!${plain}\n"
+ return 1
+ fi
+
+ if [[ -f "$system_log" ]]; then
+ echo -e "${green}来自 fail2ban.log 的最近系统封禁活动:${plain}"
+ grep "3x-ipl" "$system_log" | grep -E "Ban|Unban" | tail -n 10 || echo -e "${yellow}未找到最近的系统封禁活动${plain}"
+ echo ""
+ fi
+
+ if [[ -f "${iplimit_banned_log_path}" ]]; then
+ echo -e "${green}3X-IPL 封禁日志条目:${plain}"
+ if [[ -s "${iplimit_banned_log_path}" ]]; then
+ grep -v "INIT" "${iplimit_banned_log_path}" | tail -n 10 || echo -e "${yellow}未找到封禁条目${plain}"
+ else
+ echo -e "${yellow}封禁日志文件为空${plain}"
+ fi
+ else
+ echo -e "${red}未找到封禁日志文件: ${iplimit_banned_log_path}${plain}"
+ fi
+
+ echo -e "\n${green}当前监狱状态:${plain}"
+ fail2ban-client status 3x-ipl || echo -e "${yellow}无法获取监狱状态${plain}"
+}
+
+create_iplimit_jails() {
+ # Use default bantime if not passed => 30 minutes
+ local bantime="${1:-30}"
+
+ # Uncomment 'allowipv6 = auto' in fail2ban.conf
+ sed -i 's/#allowipv6 = auto/allowipv6 = auto/g' /etc/fail2ban/fail2ban.conf
+
+ # On Debian 12+ fail2ban's default backend should be changed to systemd
+ if [[ "${release}" == "debian" && ${os_version} -ge 12 ]]; then
+ sed -i '0,/action =/s/backend = auto/backend = systemd/' /etc/fail2ban/jail.conf
+ fi
+
+ cat << EOF > /etc/fail2ban/jail.d/3x-ipl.conf
+[3x-ipl]
+enabled=true
+backend=auto
+filter=3x-ipl
+action=3x-ipl
+logpath=${iplimit_log_path}
+maxretry=2
+findtime=32
+bantime=${bantime}m
+EOF
+
+ cat << EOF > /etc/fail2ban/filter.d/3x-ipl.conf
+[Definition]
+datepattern = ^%%Y/%%m/%%d %%H:%%M:%%S
+failregex = \[LIMIT_IP\]\s*Email\s*=\s*.+\s*\|\|\s*SRC\s*=\s*
+ignoreregex =
+EOF
+
+ cat << EOF > /etc/fail2ban/action.d/3x-ipl.conf
+[INCLUDES]
+before = iptables-allports.conf
+
+[Definition]
+actionstart = -N f2b-
+ -A f2b- -j
+ -I -p -j f2b-
+
+actionstop = -D -p -j f2b-
+
+ -X f2b-
+
+actioncheck = -n -L | grep -q 'f2b-[ \t]'
+
+actionban = -I f2b- 1 -s -j
+ echo "\$(date +"%%Y/%%m/%%d %%H:%%M:%%S") BAN [Email] = [IP] = banned for seconds." >> ${iplimit_banned_log_path}
+
+actionunban = -D f2b- -s -j
+ echo "\$(date +"%%Y/%%m/%%d %%H:%%M:%%S") UNBAN [Email] = [IP] = unbanned." >> ${iplimit_banned_log_path}
+
+[Init]
+name = default
+protocol = tcp
+chain = INPUT
+EOF
+
+ echo -e "${green}IP限制监狱文件已创建，封禁时间为 ${bantime} 分钟。${plain}"
+}
+
+iplimit_remove_conflicts() {
+ local jail_files=(
+ /etc/fail2ban/jail.conf
+ /etc/fail2ban/jail.local
+ )
+
+ for file in "${jail_files[@]}"; do
+ # Check for [3x-ipl] config in jail file then remove it
+ if test -f "${file}" && grep -qw '3x-ipl' ${file}; then
+ sed -i "/\[3x-ipl\]/,/^$/d" ${file}
+ echo -e "${yellow}正在移除监狱文件 (${file}) 中的 [3x-ipl] 冲突！${plain}\n"
+ fi
+ done
+}
+
+SSH_port_forwarding() {
+ local URL_lists=(
+ "https://api4.ipify.org"
+ "https://ipv4.icanhazip.com"
+ "https://v4.api.ipinfo.io/ip"
+ "https://ipv4.myexternalip.com/raw"
+ "https://4.ident.me"
+ "https://check-host.net/ip"
+ )
+ local server_ip=""
+ for ip_address in "${URL_lists[@]}"; do
+ server_ip=$(curl -s --max-time 3 "${ip_address}" 2>/dev/null | tr -d '[:space:]')
+ if [[ -n "${server_ip}" ]]; then
+ break
+ fi
+ done
+ local existing_webBasePath=$(/usr/local/x-ui/x-ui setting -show true | grep -Eo 'webBasePath: .+' | awk '{print $2}')
+ local existing_port=$(/usr/local/x-ui/x-ui setting -show true | grep -Eo 'port: .+' | awk '{print $2}')
+ local existing_listenIP=$(/usr/local/x-ui/x-ui setting -getListen true | grep -Eo 'listenIP: .+' | awk '{print $2}')
+ local existing_cert=$(/usr/local/x-ui/x-ui setting -getCert true | grep -Eo 'cert: .+' | awk '{print $2}')
+ local existing_key=$(/usr/local/x-ui/x-ui setting -getCert true | grep -Eo 'key: .+' | awk '{print $2}')
+
+ local config_listenIP=""
+ local listen_choice=""
+
+ if [[ -n "$existing_cert" && -n "$existing_key" ]]; then
+ echo -e "${green}面板已通过SSL保护。${plain}"
+ before_show_menu
+ fi
+ if [[ -z "$existing_cert" && -z "$existing_key" && (-z "$existing_listenIP" || "$existing_listenIP" == "0.0.0.0") ]]; then
+ echo -e "\n${red}警告：未找到证书和密钥！面板不安全。${plain}"
+ echo "请获取证书或设置SSH端口转发。"
+ fi
+
+ if [[ -n "$existing_listenIP" && "$existing_listenIP" != "0.0.0.0" && (-z "$existing_cert" && -z "$existing_key") ]]; then
+ echo -e "\n${green}当前SSH端口转发配置：${plain}"
+ echo -e "标准SSH命令："
+ echo -e "${yellow}ssh -L 2222:${existing_listenIP}:${existing_port} root@${server_ip}${plain}"
+ echo -e "\n如果使用SSH密钥："
+ echo -e "${yellow}ssh -i -L 2222:${existing_listenIP}:${existing_port} root@${server_ip}${plain}"
+ echo -e "\n连接后，在以下地址访问面板："
+ echo -e "${yellow}http://localhost:2222${existing_webBasePath}${plain}"
+ fi
+
+ echo -e "\n选择一个选项:"
+ echo -e "${green}1.${plain} 设置监听IP"
+ echo -e "${green}2.${plain} 清除监听IP"
+ echo -e "${green}0.${plain} 返回主菜单"
+ read -rp "选择一个选项: " num
+
+ case "$num" in
+ 1)
+ if [[ -z "$existing_listenIP" || "$existing_listenIP" == "0.0.0.0" ]]; then
+ echo -e "\n未配置监听IP。选择一个选项:"
+ echo -e "1. 使用默认IP (127.0.0.1)"
+ echo -e "2. 设置自定义IP"
+ read -rp "选择一个选项 (1 或 2): " listen_choice
+
+ config_listenIP="127.0.0.1"
+ [[ "$listen_choice" == "2" ]] && read -rp "输入要监听的自定义IP: " config_listenIP
+
+ /usr/local/x-ui/x-ui setting -listenIP "${config_listenIP}" >/dev/null 2>&1
+ echo -e "${green}监听IP已设置为 ${config_listenIP}.${plain}"
+ echo -e "\n${green}SSH端口转发配置:${plain}"
+ echo -e "标准SSH命令:"
+ echo -e "${yellow}ssh -L 2222:${config_listenIP}:${existing_port} root@${server_ip}${plain}"
+ echo -e "\n如果使用SSH密钥:"
+ echo -e "${yellow}ssh -i -L 2222:${config_listenIP}:${existing_port} root@${server_ip}${plain}"
+ echo -e "\n连接后，在以下地址访问面板:"
+ echo -e "${yellow}http://localhost:2222${existing_webBasePath}${plain}"
+ restart
+ else
+ config_listenIP="${existing_listenIP}"
+ echo -e "${green}当前监听IP已设置为 ${config_listenIP}.${plain}"
+ fi
+ ;;
+ 2)
+ /usr/local/x-ui/x-ui setting -listenIP 0.0.0.0 >/dev/null 2>&1
+ echo -e "${green}监听IP已清除.${plain}"
+ restart
+ ;;
+ 0)
+ show_menu
+ ;;
+ *)
+ echo -e "${red}无效选项。请选择有效数字.${plain}\n"
+ SSH_port_forwarding
+ ;;
+ esac
+}
+
+show_usage() {
+ echo -e "┌───────────────────────────────────────────────────────┐
+│ ${blue}x-ui 控制菜单用法 (子命令):${plain} │
+│ │
+│ ${blue}x-ui${plain} - 管理脚本 │
+│ ${blue}x-ui start${plain} - 启动 │
+│ ${blue}x-ui stop${plain} - 停止 │
+│ ${blue}x-ui restart${plain} - 重启 │
+│ ${blue}x-ui status${plain} - 当前状态 │
+│ ${blue}x-ui settings${plain} - 当前设置 │
+│ ${blue}x-ui enable${plain} - 启用开机自启 │
+│ ${blue}x-ui disable${plain} - 禁用开机自启 │
+│ ${blue}x-ui log${plain} - 查看日志 │
+│ ${blue}x-ui banlog${plain} - 查看Fail2ban封禁日志 │
+│ ${blue}x-ui update${plain} - 更新 │
+│ ${blue}x-ui legacy${plain} - 旧版本 │
+│ ${blue}x-ui install${plain} - 安装 │
+│ ${blue}x-ui uninstall${plain} - 卸载 │
+└───────────────────────────────────────────────────────┘"
+}
+
+show_menu() {
+ echo -e "
+╔────────────────────────────────────────────────╗
+│ ${green}3X-UI 面板管理脚本${plain} │
+│ ${green}0.${plain} 退出脚本 │
+│────────────────────────────────────────────────│
+│ ${green}1.${plain} 安装 │
+│ ${green}2.${plain} 更新 │
+│ ${green}3.${plain} 更新菜单 │
+│ ${green}4.${plain} 旧版本 │
+│ ${green}5.${plain} 卸载 │
+│────────────────────────────────────────────────│
+│ ${green}6.${plain} 重置用户名和密码 │
+│ ${green}7.${plain} 重置网页基础路径 │
+│ ${green}8.${plain} 重置设置 │
+│ ${green}9.${plain} 更改端口 │
+│ ${green}10.${plain} 查看当前设置 │
+│────────────────────────────────────────────────│
+│ ${green}11.${plain} 启动 │
+│ ${green}12.${plain} 停止 │
+│ ${green}13.${plain} 重启 │
+│ ${green}14.${plain} 检查状态 │
+│ ${green}15.${plain} 日志管理 │
+│────────────────────────────────────────────────│
+│ ${green}16.${plain} 启用自启 │
+│ ${green}17.${plain} 禁用自启 │
+│────────────────────────────────────────────────│
+│ ${green}18.${plain} SSL证书管理 │
+│ ${green}19.${plain} Cloudflare SSL证书 │
+│ ${green}20.${plain} IP限制管理 │
+│ ${green}21.${plain} 防火墙管理 │
+│ ${green}22.${plain} SSH端口转发管理 │
+│────────────────────────────────────────────────│
+│ ${green}23.${plain} 启用BBR │
+│ ${green}24.${plain} 更新Geo文件 │
+│ ${green}25.${plain} Ookla测速 │
+╚────────────────────────────────────────────────╝
+"
+ show_status
+ echo && read -rp "请输入您的选择 [0-25]: " num
+
+ case "${num}" in
+ 0)
+ exit 0
+ ;;
+ 1)
+ check_uninstall && install
+ ;;
+ 2)
+ check_install && update
+ ;;
+ 3)
+ check_install && update_menu
+ ;;
+ 4)
+ check_install && legacy_version
+ ;;
+ 5)
+ check_install && uninstall
+ ;;
+ 6)
+ check_install && reset_user
+ ;;
+ 7)
+ check_install && reset_webbasepath
+ ;;
+ 8)
+ check_install && reset_config
+ ;;
+ 9)
+ check_install && set_port
+ ;;
+ 10)
+ check_install && check_config
+ ;;
+ 11)
+ check_install && start
+ ;;
+ 12)
+ check_install && stop
+ ;;
+ 13)
+ check_install && restart
+ ;;
+ 14)
+ check_install && status
+ ;;
+ 15)
+ check_install && show_log
+ ;;
+ 16)
+ check_install && enable
+ ;;
+ 17)
+ check_install && disable
+ ;;
+ 18)
+ ssl_cert_issue_main
+ ;;
+ 19)
+ ssl_cert_issue_CF
+ ;;
+ 20)
+ iplimit_main
+ ;;
+ 21)
+ firewall_menu
+ ;;
+ 22)
+ SSH_port_forwarding
+ ;;
+ 23)
+ bbr_menu
+ ;;
+ 24)
+ update_geo
+ ;;
+ 25)
+ run_speedtest
+ ;;
+ *)
+ LOGE "请输入正确的数字 [0-25]"
+ ;;
+ esac
+}
+
+if [[ $# > 0 ]]; then
+ case $1 in
+ "start")
+ check_install 0 && start 0
+ ;;
+ "stop")
+ check_install 0 && stop 0
+ ;;
+ "restart")
+ check_install 0 && restart 0
+ ;;
+ "status")
+ check_install 0 && status 0
+ ;;
+ "settings")
+ check_install 0 && check_config 0
+ ;;
+ "enable")
+ check_install 0 && enable 0
+ ;;
+ "disable")
+ check_install 0 && disable 0
+ ;;
+ "log")
+ check_install 0 && show_log 0
+ ;;
+ "banlog")
+ check_install 0 && show_banlog 0
+ ;;
+ "update")
+ check_install 0 && update 0
+ ;;
+ "legacy")
+ check_install 0 && legacy_version 0
+ ;;
+ "install")
+ check_uninstall 0 && install 0
+ ;;
+ "uninstall")
+ check_install 0 && uninstall 0
+ ;;
+ *) show_usage ;;
+ esac
+else
+ show_menu
+fi
\ No newline at end of file
diff --git a/s-ui/README.md b/s-ui/README.md
index 3692088..4074db0 100644
--- a/s-ui/README.md
+++ b/s-ui/README.md
@@ -1,4 +1,4 @@
-### s-ui中文脚本安装
+### s-ui中文安装脚本
```
bash <(curl -sSL https://raw.githubusercontent.com/sky22333/shell/main/s-ui/install.sh)
```