proxmox-utils/shadow/templates/root/update-shadowsocks.sh
Alex A. Naanou 9f6c660cf2 minor tweak...
Signed-off-by: Alex A. Naanou <alex.nanou@gmail.com>
2024-03-31 15:17:09 +03:00

129 lines
2.2 KiB
Bash

#!/usr/bin/bash
#
# NOTE: re-run this if the IP/PORT change...
#
# XXX should this be a makefile???
ENDPOINT=${ENDPOINT}
ENDPOINT_PORT=${ENDPOINT_PORT}
ENCRYPTION=aes-256-gcm
# get the current IP...
HOST_IP=$(ip addr show dev lan \
| grep 'inet ' \
| cut -d ' ' -f 6 \
| cut -d '/' -f 1)
USER=shadowsocks
SCRIPT=shadowsocks
SERVER_CONFIG=shadowsocks-server.config
CLIENT_CONFIG=shadowsocks-client.config
# System and dependencies...
if ! which ssserver > /dev/null ; then
#setup-apkrepos -cf
# add edge repos...
sed \
-e '/v3\.\d*/{p;s|v3\.\d*|edge|}' \
-i /etc/apk/repositories
apk update
apk add shadowsocks-rust libqrencode
fi
# user...
if ! [ -e /home/$USER ] ; then
adduser -D -s /sbin/nologin $USER
fi
# Configuration/scripts...
cd /home/$USER
# get/generate password...
if [ -e /home/$USER/$SERVER_CONFIG ] ; then
PASSWD=$(cat /home/$USER/$SERVER_CONFIG \
| grep password \
| cut -d '"' -f 4)
else
PASSWD=$(ssservice genkey -m "$ENCRYPTION")
fi
# /home/$USER/$SERVER_CONFIG
cat > $SERVER_CONFIG << EOF
{
"server": "${HOST_IP}",
"server_port": 8388,
"password": "${PASSWD}",
"method": "${ENCRYPTION}"
}
EOF
chown $USER:$USER $SERVER_CONFIG
chmod 600 $SERVER_CONFIG
# /home/$USER/$CLIENT_CONFIG
cat > $CLIENT_CONFIG << EOF
{
"server": "$ENDPOINT",
"server_port": $ENDPOINT_PORT,
"password": "${PASSWD}",
"method": "${ENCRYPTION}"
"local_address": "127.0.0.1",
"local_port": 1080
}
EOF
chown $USER:$USER $SERVER_CONFIG
chmod 600 $SERVER_CONFIG
# Print profile QRCode...
PROFILE="ss://$PASSWD@$ENDPOINT:$ENDPOINT_PORT#shadow @ $ENDPOINT"
echo "# Profile:"
qrencode -t UTF8 "$PROFILE"
echo "$PROFILE"
echo
# /home/$USER/$SCRIPT
cat > $SCRIPT << EOF
#!/sbin/openrc-run
command="ssserver"
command_args="-c /home/$USER/$SERVER_CONFIG"
command_user=$USER
pidfile="/run/\$SVCNAME.pid"
command_background=true
# Debug
#output_log="/home/$USER/\$SVCNAME.log"
#error_log="/home/$USER/\$SVCNAME.err"
depend() {
need net
}
EOF
chown $USER:$USER $SCRIPT
chmod +x $SCRIPT
# Setup the service...
ln -s /home/$USER/$SCRIPT /etc/init.d/$SCRIPT
if ! [ -e /etc/runlevels/default/$SCRIPT ] ; then
rc-update add $SCRIPT default
fi
rc-service $SCRIPT restart
# vim:set ts=4 sw=4 :