mirror of
https://github.com/juewuy/ShellCrash.git
synced 2026-07-24 15:47:11 +00:00
470 lines
16 KiB
Bash
470 lines
16 KiB
Bash
#!/bin/sh
|
||
# Copyright (C) Juewuy
|
||
|
||
#修饰singbox配置文件
|
||
parse_singbox_dns() { #dns转换
|
||
first_dns=$(echo "$1" | cut -d',' -f1 | cut -d' ' -f1)
|
||
type=""
|
||
server=""
|
||
port=""
|
||
case "$first_dns" in
|
||
*://*)
|
||
type="${first_dns%%://*}"
|
||
tmp="${first_dns#*://}"
|
||
;;
|
||
*)
|
||
type="udp"
|
||
tmp="$first_dns"
|
||
;;
|
||
esac
|
||
case "$tmp" in
|
||
\[*\]*)
|
||
server="${tmp%%]*}"
|
||
server="${server#[}"
|
||
port="${tmp#*\]}"
|
||
port="${port#:}"
|
||
;;
|
||
*)
|
||
server="${tmp%%[:/]*}"
|
||
port="${tmp#*:}"
|
||
[ "$port" = "$tmp" ] && port=""
|
||
;;
|
||
esac
|
||
if [ -z "$port" ]; then
|
||
case "$type" in
|
||
udp|tcp) port=53 ;;
|
||
doh|https) port=443 ;;
|
||
dot|tls) port=853 ;;
|
||
*) port=53 ;;
|
||
esac
|
||
fi
|
||
# 输出
|
||
echo '"type": "'"$type"'", "server": "'"$server"'", "server_port": '"$port"','
|
||
}
|
||
extract_base_jsons() {
|
||
#提取配置文件以获得outbounds.json,providers.json及route.json
|
||
"$TMPDIR"/CrashCore format -c $core_config >"$TMPDIR"/format.json
|
||
echo '{' >"$TMPDIR"/jsons/outbounds.json
|
||
echo '{' >"$TMPDIR"/jsons/route.json
|
||
cat "$TMPDIR"/format.json | sed -n '/"outbounds":/,/^ "[a-z]/p' | sed '$d' >>"$TMPDIR"/jsons/outbounds.json
|
||
[ "$crashcore" = "singboxr" ] && {
|
||
echo '{' >"$TMPDIR"/jsons/providers.json
|
||
cat "$TMPDIR"/format.json | sed -n '/^ "providers":/,/^ "[a-z]/p' | sed '$d' >>"$TMPDIR"/jsons/providers.json
|
||
}
|
||
cat "$TMPDIR"/format.json | sed -n '/"route":/,/^\( "[a-z]\|}\)/p' | sed '$d' >>"$TMPDIR"/jsons/route.json
|
||
}
|
||
|
||
generate_basic_jsons() {
|
||
#适配1.14+版本
|
||
if [ "$(printf '%s' "$core_v" | cut -d. -f2)" -lt 14 ];then
|
||
preferred='"ip_accept_any": true,'
|
||
detour_direct='"download_detour": "DIRECT"'
|
||
else
|
||
preferred='"preferred_by": [ "hosts" ],'
|
||
detour_direct='"http_client": "detour_direct"'
|
||
fi
|
||
#生成endpoints.json
|
||
[ "$ts_service" = ON ] || [ "$wg_service" = ON ] && [ "$zip_type" != upx ] && {
|
||
. "$CRASHDIR"/configs/gateway.cfg
|
||
. "$CRASHDIR"/libs/sb_endpoints.sh
|
||
}
|
||
#生成log.json
|
||
cat >"$TMPDIR"/jsons/log.json <<EOF
|
||
{ "log": { "level": "info", "timestamp": true } }
|
||
EOF
|
||
#生成add_hosts.json
|
||
if [ "$hosts_opt" != "OFF" ]; then #本机hosts
|
||
[ -s /data/etc/custom_hosts ] && custom_hosts='"/data/etc/custom_hosts",'
|
||
#NTP劫持
|
||
cat >"$TMPDIR"/jsons/add_hosts.json <<EOF
|
||
{
|
||
"dns": {
|
||
"servers": [
|
||
{
|
||
"type": "hosts",
|
||
"tag": "hosts",
|
||
"path": [
|
||
$custom_hosts
|
||
"$HOME/.hosts",
|
||
"/etc/hosts"
|
||
],
|
||
"predefined": {
|
||
"localhost": [
|
||
"127.0.0.1",
|
||
"::1"
|
||
],
|
||
"time.android.com": "203.107.6.88",
|
||
"time.facebook.com": "203.107.6.88"
|
||
}
|
||
}
|
||
],
|
||
"rules": [
|
||
{
|
||
$preferred
|
||
"server": "hosts"
|
||
}
|
||
]
|
||
}
|
||
}
|
||
EOF
|
||
fi
|
||
}
|
||
|
||
prepare_dns_config() {
|
||
#生成dns.json
|
||
[ "$ipv6_dns" != "OFF" ] && strategy='prefer_ipv4' || strategy='ipv4_only'
|
||
#获取detour出口
|
||
auto_detour=$(grep -E '"type": "urltest"' -A 1 "$TMPDIR"/jsons/outbounds.json | grep '自动' | head -n 1 | sed 's/^[[:space:]]*"tag": //;s/,$//')
|
||
[ -z "$auto_detour" ] && auto_detour=$(grep -E '"type": "urltest"' -A 1 "$TMPDIR"/jsons/outbounds.json | grep '"tag":' | head -n 1 | sed 's/^[[:space:]]*"tag": //;s/,$//')
|
||
[ -z "$auto_detour" ] && auto_detour=$(grep -E '"type": "selector"' -A 1 "$TMPDIR"/jsons/outbounds.json | grep '"tag":' | head -n 1 | sed 's/^[[:space:]]*"tag": //;s/,$//')
|
||
[ -z "$auto_detour" ] && auto_detour='"DIRECT"'
|
||
#ecs优化
|
||
[ "$ecs_subnet" = ON ] && {
|
||
. "$CRASHDIR"/libs/get_ecsip.sh
|
||
if [ -n "$ecs_address" ]; then
|
||
client_subnet='"client_subnet": "'"$ecs_address"'",'
|
||
else
|
||
logger "自动获取ecs网段失败！" 33
|
||
fi
|
||
}
|
||
#根据dns模式生成
|
||
[ "$dns_mod" = "redir_host" ] && {
|
||
global_dns=dns_proxy
|
||
direct_dns='{ "inbound": [ "dns-in" ], "server": "dns_direct" }'
|
||
}
|
||
[ "$dns_mod" = "fake-ip" ] || [ "$dns_mod" = "mix" ] && {
|
||
global_dns=dns_fakeip
|
||
fake_ip_filter_domain=$(cat ${CRASHDIR}/configs/fake_ip_filter ${CRASHDIR}/configs/fake_ip_filter.list 2>/dev/null | grep -Ev '#|\*|\+|Mijia' | sed '/^\s*$/d' | awk '{printf "\"%s\", ",$1}' | sed 's/, $//')
|
||
fake_ip_filter_suffix=$(cat ${CRASHDIR}/configs/fake_ip_filter ${CRASHDIR}/configs/fake_ip_filter.list 2>/dev/null | grep -v '.\*' | grep -E '\*|\+' | sed 's/^[*+]\.//' | awk '{printf "\"%s\", ",$1}' | sed 's/, $//')
|
||
fake_ip_filter_regex=$(cat ${CRASHDIR}/configs/fake_ip_filter ${CRASHDIR}/configs/fake_ip_filter.list 2>/dev/null | grep '.\*' | sed 's/\./\\\\./g' | sed 's/\*/.\*/' | sed 's/^+/.\+/' | awk '{printf "\"%s\", ",$1}' | sed 's/, $//')
|
||
[ -n "$fake_ip_filter_domain" ] && fake_ip_filter_domain="{ \"domain\": [$fake_ip_filter_domain], \"server\": \"dns_direct\" },"
|
||
[ -n "$fake_ip_filter_suffix" ] && fake_ip_filter_suffix="{ \"domain_suffix\": [$fake_ip_filter_suffix], \"server\": \"dns_direct\" },"
|
||
[ -n "$fake_ip_filter_regex" ] && fake_ip_filter_regex="{ \"domain_regex\": [$fake_ip_filter_regex], \"server\": \"dns_direct\" },"
|
||
proxy_dns='{ "query_type": ["A", "AAAA"], "server": "dns_fakeip", "strategy": "'"$strategy"'", "rewrite_ttl": 1 }'
|
||
#mix模式插入fakeip过滤规则
|
||
[ "$dns_mod" = "mix" ] && direct_dns='{ "rule_set": ["cn"], "server": "dns_direct" },'
|
||
}
|
||
[ "$dns_mod" = "route" ] && {
|
||
global_dns=dns_proxy
|
||
direct_dns='{ "rule_set": ["cn"], "server": "dns_direct" }'
|
||
}
|
||
#防泄露设置
|
||
[ "$dns_protect" = "OFF" ] && sed -i 's/"server": "dns_proxy"/"server": "dns_direct"/g' "$TMPDIR"/jsons/route.json
|
||
}
|
||
|
||
generate_dns_related_jsons() {
|
||
#生成add_rule_set.json
|
||
[ "$dns_mod" = "mix" ] || [ "$dns_mod" = "route" ] && ! grep -Eq '"tag" *:[[:space:]]*"cn"' "$CRASHDIR"/jsons/*.json && {
|
||
[ "$crashcore" = "singboxr" ] && srs_path='"path": "./ruleset/cn.srs",'
|
||
cat >"$TMPDIR"/jsons/add_rule_set.json <<EOF
|
||
{
|
||
"route": {
|
||
"rule_set": [
|
||
{
|
||
"tag": "cn",
|
||
"type": "remote",
|
||
"format": "binary",
|
||
$srs_path
|
||
"url": "https://testingcf.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs",
|
||
$detour_direct
|
||
}
|
||
]
|
||
}
|
||
}
|
||
EOF
|
||
}
|
||
cat >"$TMPDIR"/jsons/dns.json <<EOF
|
||
{
|
||
"dns": {
|
||
"servers": [
|
||
{
|
||
"tag": "dns_proxy",
|
||
$(parse_singbox_dns "$dns_fallback")
|
||
"routing_mark": $routing_mark,
|
||
"detour": $auto_detour,
|
||
"domain_resolver": "dns_resolver"
|
||
},
|
||
{
|
||
"tag": "dns_direct",
|
||
$(parse_singbox_dns "$dns_nameserver")
|
||
"routing_mark": $routing_mark,
|
||
"domain_resolver": "dns_resolver"
|
||
},
|
||
{
|
||
"tag": "dns_fakeip",
|
||
"type": "fakeip",
|
||
"inet4_range": "198.18.0.0/15",
|
||
"inet6_range": "fc00::/16"
|
||
},
|
||
{
|
||
"tag": "dns_resolver",
|
||
$(parse_singbox_dns "$dns_resolver")
|
||
"routing_mark": $routing_mark
|
||
},
|
||
{
|
||
"tag": "dns_proxy_server",
|
||
$(parse_singbox_dns "$dns_proxy_server")
|
||
"routing_mark": $routing_mark
|
||
}
|
||
],
|
||
"rules": [
|
||
{ "clash_mode": "Direct", "server": "dns_direct", "strategy": "$strategy" },
|
||
{ "domain_suffix": ["services.googleapis.cn"], "server": "dns_fakeip", "strategy": "$strategy", "rewrite_ttl": 1 },
|
||
$fake_ip_filter_domain
|
||
$fake_ip_filter_suffix
|
||
$fake_ip_filter_regex
|
||
{ "clash_mode": "Global", "query_type": ["A", "AAAA"], "server": "$global_dns", "strategy": "$strategy", "rewrite_ttl": 1 },
|
||
$direct_dns
|
||
$proxy_dns
|
||
],
|
||
"final": "dns_proxy",
|
||
"strategy": "$strategy",
|
||
"independent_cache": true,
|
||
$client_subnet
|
||
"reverse_mapping": true
|
||
}
|
||
}
|
||
EOF
|
||
}
|
||
|
||
generate_route_and_inbounds_jsons() {
|
||
#生成add_route.json
|
||
#域名嗅探配置
|
||
grep -q 'telegramip' "$TMPDIR"/jsons/route.json && telegramip_set=' "rule_set": [ "telegramip" ],'
|
||
[ "$sniffer" != OFF ] && sniffer_set='{ "domain_suffix": [ "push.apple.com" ],'"$telegramip_set"' "domain": [ "Mijia Cloud" ], "invert": true, "action": "sniff", "timeout": "500ms" },'
|
||
[ "$ts_service" = ON ] && tailscale_set='{ "inbound": [ "ts-ep" ], "port": 53, "action": "hijack-dns" },'
|
||
cat >"$TMPDIR"/jsons/add_route.json <<EOF
|
||
{
|
||
"route": {
|
||
"default_domain_resolver": "dns_resolver",
|
||
"default_mark": $routing_mark,
|
||
"rules": [
|
||
$tailscale_set
|
||
$sniffer_set
|
||
{ "inbound": [ "dns-in" ], "action": "hijack-dns" },
|
||
{ "clash_mode": "Direct" , "outbound": "DIRECT" },
|
||
{ "clash_mode": "Global" , "outbound": "GLOBAL" }
|
||
]
|
||
}
|
||
}
|
||
EOF
|
||
#生成certificate.json
|
||
cat >"$TMPDIR"/jsons/certificate.json <<EOF
|
||
{
|
||
"certificate": {
|
||
"store": "mozilla"
|
||
}
|
||
}
|
||
EOF
|
||
#生成inbounds.json
|
||
[ -n "$authentication" ] && {
|
||
username=$(echo $authentication | awk -F ':' '{print $1}') #混合端口账号密码
|
||
password=$(echo $authentication | awk -F ':' '{print $2}')
|
||
userpass='"users": [{ "username": "'$username'", "password": "'$password'" }], '
|
||
}
|
||
cat >"$TMPDIR"/jsons/inbounds.json <<EOF
|
||
{
|
||
"inbounds": [
|
||
{
|
||
"type": "mixed",
|
||
"tag": "mixed-in",
|
||
"listen": "::",
|
||
$userpass
|
||
"listen_port": $mix_port
|
||
},
|
||
{
|
||
"type": "direct",
|
||
"tag": "dns-in",
|
||
"listen": "::",
|
||
"listen_port": $dns_port
|
||
},
|
||
{
|
||
"type": "redirect",
|
||
"tag": "redirect-in",
|
||
"listen": "::",
|
||
"listen_port": $redir_port
|
||
},
|
||
{
|
||
"type": "tproxy",
|
||
"tag": "tproxy-in",
|
||
"listen": "::",
|
||
"listen_port": $tproxy_port
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
#inbounds.json添加自定义入站
|
||
[ "$vms_service" = ON ] || [ "$sss_service" = ON ] && {
|
||
. "$CRASHDIR"/configs/gateway.cfg
|
||
. "$CRASHDIR"/libs/sb_inbounds.sh
|
||
}
|
||
if [ "$redir_mod" = "Mix" ] || [ "$redir_mod" = "Tun" ]; then
|
||
[ "$ipv6_redir" = 'ON' ] && ipv6_address='"fd00:face:b00c::1/126",'
|
||
cat >>"$TMPDIR"/jsons/tun.json <<EOF
|
||
{
|
||
"inbounds": [
|
||
{
|
||
"type": "tun",
|
||
"tag": "tun-in",
|
||
"interface_name": "utun",
|
||
"address": [
|
||
$ipv6_address
|
||
"198.18.0.1/15"
|
||
],
|
||
"auto_route": false,
|
||
"stack": "system"
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
fi
|
||
}
|
||
|
||
generate_outbounds_and_experimental_jsons() {
|
||
#生成add_outbounds.json
|
||
grep -qE '"tag": "DIRECT"' "$TMPDIR"/jsons/outbounds.json || add_direct='{ "tag": "DIRECT", "type": "direct" }'
|
||
grep -qE '"tag": "REJECT"' "$TMPDIR"/jsons/outbounds.json || add_reject='{ "tag": "REJECT", "type": "block" }'
|
||
grep -qE '"tag": "GLOBAL"' "$TMPDIR"/jsons/outbounds.json || {
|
||
auto_proxies=$(grep -E '"type": "(selector|urltest)"' -A 1 "$TMPDIR"/jsons/outbounds.json | grep '"tag":' | sed 's/^[[:space:]]*"tag": //;$ s/,$//')
|
||
[ -n "$auto_proxies" ] && add_global='{ "tag": "GLOBAL", "type": "selector", "outbounds": ['"$auto_proxies"', "DIRECT"]}'
|
||
}
|
||
[ -n "$add_direct" -a -n "$add_reject" ] && add_direct="${add_direct},"
|
||
[ -n "$add_reject" -a -n "$add_global" ] && add_reject="${add_reject},"
|
||
[ -n "$add_direct$add_reject$add_global" ] && cat >"$TMPDIR"/jsons/add_outbounds.json <<EOF
|
||
{
|
||
"outbounds": [
|
||
$add_direct
|
||
$add_reject
|
||
$add_global
|
||
]
|
||
}
|
||
EOF
|
||
#生成http_clients.json
|
||
cat >"$TMPDIR"/jsons/http_clients.json <<EOF
|
||
{
|
||
"http_clients": [
|
||
{
|
||
"tag": "detour_proxy",
|
||
"detour": "GLOBAL"
|
||
},
|
||
{
|
||
"tag": "detour_direct",
|
||
"detour": "DIRECT"
|
||
}
|
||
]
|
||
}
|
||
EOF
|
||
#生成experimental.json
|
||
[ "$crashcore" = "singboxr" ] && urltest_unified_delay=',"urltest_unified_delay": true'
|
||
cat >"$TMPDIR"/jsons/experimental.json <<EOF
|
||
{
|
||
"experimental": {
|
||
"clash_api": {
|
||
"external_controller": "0.0.0.0:$db_port",
|
||
"external_ui": "ui",
|
||
"external_ui_download_url": "$external_ui_url",
|
||
"secret": "$secret",
|
||
"default_mode": "Rule"
|
||
}$urltest_unified_delay
|
||
}
|
||
}
|
||
EOF
|
||
}
|
||
|
||
generate_custom_rules_json() {
|
||
#生成自定义规则文件
|
||
[ -n "$(grep -Ev ^# "$CRASHDIR"/yamls/rules.yaml 2>/dev/null)" ] && {
|
||
cat "$CRASHDIR"/yamls/rules.yaml |
|
||
sed '/#.*/d' |
|
||
sed 's/,no-resolve//g' |
|
||
grep -oE '\-.*,.*,.*' |
|
||
sed 's/- DOMAIN-SUFFIX,/{ "domain_suffix": [ "/g' |
|
||
sed 's/- DOMAIN-KEYWORD,/{ "domain_keyword": [ "/g' |
|
||
sed 's/- IP-CIDR,/{ "ip_cidr": [ "/g' |
|
||
sed 's/- SRC-IP-CIDR,/{ "._ip_cidr": [ "/g' |
|
||
sed 's/- DST-PORT,/{ "port": [ "/g' |
|
||
sed 's/- SRC-PORT,/{ "._port": [ "/g' |
|
||
sed 's/- GEOIP,/{ "geoip": [ "/g' |
|
||
sed 's/- GEOSITE,/{ "geosite": [ "/g' |
|
||
sed 's/- IP-CIDR6,/{ "ip_cidr": [ "/g' |
|
||
sed 's/- DOMAIN,/{ "domain": [ "/g' |
|
||
sed 's/- PROCESS-NAME,/{ "process_name": [ "/g' |
|
||
sed 's/,/" ], "outbound": "/g' |
|
||
sed 's/$/" },/g' |
|
||
sed '1i\{ "route": { "rules": [ ' |
|
||
sed '$s/,$/ ] } }/' >"$TMPDIR"/jsons/cust_add_rules.json
|
||
[ ! -s "$TMPDIR"/jsons/cust_add_rules.json ] && rm -rf "$TMPDIR"/jsons/cust_add_rules.json
|
||
}
|
||
}
|
||
|
||
normalize_and_finalize_jsons() {
|
||
#清理route.json中的process_name规则以及"auto_detect_interface"
|
||
sed -i '/"process_name": \[/,/],$/d' "$TMPDIR"/jsons/route.json
|
||
sed -i '/"process_name": "[^"]*",/d' "$TMPDIR"/jsons/route.json
|
||
sed -i 's/"auto_detect_interface": true/"auto_detect_interface": false/g' "$TMPDIR"/jsons/route.json
|
||
#跳过本地tls证书验证
|
||
if [ "$skip_cert" != "OFF" ]; then
|
||
sed -i 's/"insecure": false/"insecure": true/' "$TMPDIR"/jsons/outbounds.json "$TMPDIR"/jsons/providers.json 2>/dev/null
|
||
else
|
||
sed -i 's/"insecure": true/"insecure": false/' "$TMPDIR"/jsons/outbounds.json "$TMPDIR"/jsons/providers.json 2>/dev/null
|
||
fi
|
||
#判断可用并修饰outbounds&providers&route.json结尾
|
||
for file in outbounds providers route; do
|
||
if [ -n "$(grep ${file} "$TMPDIR"/jsons/${file}.json 2>/dev/null)" ]; then
|
||
sed -i 's/^ },$/ }/; s/^ ],$/ ]/' "$TMPDIR"/jsons/${file}.json
|
||
echo '}' >>"$TMPDIR"/jsons/${file}.json
|
||
else
|
||
rm -rf "$TMPDIR"/jsons/${file}.json
|
||
fi
|
||
done
|
||
}
|
||
|
||
link_custom_jsons() {
|
||
#加载自定义配置文件
|
||
mkdir -p "$TMPDIR"/jsons_base
|
||
#以下为覆盖脚本的自定义文件
|
||
for char in log dns ntp certificate http_clients experimental; do
|
||
[ -s "$CRASHDIR"/jsons/${char}.json ] && {
|
||
ln -sf "$CRASHDIR"/jsons/${char}.json "$TMPDIR"/jsons/cust_${char}.json
|
||
mv -f "$TMPDIR"/jsons/${char}.json "$TMPDIR"/jsons_base #如果重复则临时备份
|
||
}
|
||
done
|
||
#以下为增量添加的自定义文件
|
||
for char in others endpoints inbounds outbounds providers route services; do
|
||
[ -s "$CRASHDIR"/jsons/${char}.json ] && {
|
||
ln -sf "$CRASHDIR"/jsons/${char}.json "$TMPDIR"/jsons/cust_${char}.json
|
||
}
|
||
done
|
||
}
|
||
|
||
validate_and_restore_custom_jsons() {
|
||
#测试自定义配置文件
|
||
if ! error=$("$TMPDIR"/CrashCore check -D "$BINDIR" -C "$TMPDIR"/jsons 2>&1); then
|
||
echo $error
|
||
error_file=$(echo $error | grep -Eo 'cust.*\.json' | sed 's/cust_//g')
|
||
[ "$error_file" = 'add_rules.json' ] && error_file="$CRASHDIR"/yamls/rules.yaml自定义规则 || error_file="$CRASHDIR"/jsons/$error_file
|
||
logger "自定义配置文件校验失败，请检查【${error_file}】文件！" 31
|
||
logger "尝试使用基础配置文件启动~" 33
|
||
#清理自定义配置文件并还原基础配置
|
||
rm -rf "$TMPDIR"/jsons/cust_*
|
||
mv -f "$TMPDIR"/jsons_base/* "$TMPDIR"/jsons 2>/dev/null
|
||
fi
|
||
}
|
||
|
||
modify_json() {
|
||
extract_base_jsons
|
||
generate_basic_jsons
|
||
prepare_dns_config
|
||
generate_dns_related_jsons
|
||
generate_route_and_inbounds_jsons
|
||
generate_outbounds_and_experimental_jsons
|
||
generate_custom_rules_json
|
||
normalize_and_finalize_jsons
|
||
link_custom_jsons
|
||
validate_and_restore_custom_jsons
|
||
#清理缓存
|
||
rm -rf "$TMPDIR"/*.json
|
||
rm -rf "$TMPDIR"/jsons_base
|
||
return 0
|
||
}
|