mirror of
				https://github.com/flynx/proxmox-utils.git
				synced 2025-11-03 21:50:10 +00:00 
			
		
		
		
	
		
			
				
	
	
		
			129 lines
		
	
	
		
			2.2 KiB
		
	
	
	
		
			Bash
		
	
	
	
	
	
			
		
		
	
	
			129 lines
		
	
	
		
			2.2 KiB
		
	
	
	
		
			Bash
		
	
	
	
	
	
#!/usr/bin/bash
 | 
						|
#
 | 
						|
# NOTE: re-run this if the IP/PORT change...
 | 
						|
#
 | 
						|
# XXX should this be a makefile???
 | 
						|
 | 
						|
ENDPOINT=${ENDPOINT}
 | 
						|
ENDPOINT_PORT=${ENDPOINT_PORT}
 | 
						|
ENCRYPTION=aes-256-gcm
 | 
						|
 | 
						|
 | 
						|
# get the current IP...
 | 
						|
HOST_IP=$(ip addr show dev lan \
 | 
						|
	| grep 'inet ' \
 | 
						|
	| cut -d ' ' -f 6 \
 | 
						|
	| cut -d '/' -f 1)
 | 
						|
 | 
						|
 | 
						|
USER=shadowsocks
 | 
						|
SCRIPT=shadowsocks
 | 
						|
SERVER_CONFIG=shadowsocks-server.config
 | 
						|
CLIENT_CONFIG=shadowsocks-client.config
 | 
						|
 | 
						|
 | 
						|
# System and dependencies...
 | 
						|
 | 
						|
if ! which ssserver > /dev/null ; then
 | 
						|
	#setup-apkrepos -cf
 | 
						|
	# add edge repos...
 | 
						|
	sed \
 | 
						|
		-e '/v3\.\d*/{p;s|v3\.\d*|edge|}' \
 | 
						|
		-i /etc/apk/repositories
 | 
						|
	apk update
 | 
						|
	apk add shadowsocks-rust libqrencode
 | 
						|
fi
 | 
						|
 | 
						|
# user...
 | 
						|
if ! [ -e /home/$USER ] ; then
 | 
						|
	adduser -D -s /sbin/nologin $USER
 | 
						|
fi
 | 
						|
 | 
						|
 | 
						|
 | 
						|
# Configuration/scripts...
 | 
						|
 | 
						|
cd /home/$USER
 | 
						|
 | 
						|
 | 
						|
# get/generate password...
 | 
						|
if [ -e /home/$USER/$SERVER_CONFIG ] ; then
 | 
						|
	PASSWD=$(cat /home/$USER/$SERVER_CONFIG \
 | 
						|
		| grep password \
 | 
						|
		| cut -d '"' -f 4)
 | 
						|
else
 | 
						|
	PASSWD=$(ssservice genkey -m "$ENCRYPTION")
 | 
						|
fi
 | 
						|
 | 
						|
 | 
						|
# /home/$USER/$SERVER_CONFIG
 | 
						|
cat > $SERVER_CONFIG << EOF
 | 
						|
{
 | 
						|
	"server": "${HOST_IP}",
 | 
						|
	"server_port": 8388,
 | 
						|
	"password": "${PASSWD}",
 | 
						|
	"method": "${ENCRYPTION}"
 | 
						|
}
 | 
						|
EOF
 | 
						|
chown $USER:$USER $SERVER_CONFIG
 | 
						|
chmod 600 $SERVER_CONFIG
 | 
						|
 | 
						|
 | 
						|
# /home/$USER/$CLIENT_CONFIG
 | 
						|
cat > $CLIENT_CONFIG << EOF
 | 
						|
{
 | 
						|
	"server": "$ENDPOINT",
 | 
						|
	"server_port": $ENDPOINT_PORT,
 | 
						|
	"password": "${PASSWD}",
 | 
						|
	"method": "${ENCRYPTION}"
 | 
						|
	"local_address": "127.0.0.1",
 | 
						|
    "local_port": 1080
 | 
						|
}
 | 
						|
EOF
 | 
						|
chown $USER:$USER $SERVER_CONFIG
 | 
						|
chmod 600 $SERVER_CONFIG
 | 
						|
 | 
						|
# Print profile QRCode...
 | 
						|
PROFILE="ss://$PASSWD@$ENDPOINT:$ENDPOINT_PORT#shadow @ $ENDPOINT"
 | 
						|
echo "# Profile:"
 | 
						|
qrencode -t UTF8 "$PROFILE"
 | 
						|
echo "$PROFILE"
 | 
						|
echo
 | 
						|
 | 
						|
 | 
						|
# /home/$USER/$SCRIPT
 | 
						|
cat > $SCRIPT << EOF
 | 
						|
#!/sbin/openrc-run
 | 
						|
 | 
						|
command="ssserver"
 | 
						|
command_args="-c /home/$USER/$SERVER_CONFIG"
 | 
						|
command_user=$USER
 | 
						|
 | 
						|
pidfile="/run/\$SVCNAME.pid"
 | 
						|
command_background=true
 | 
						|
 | 
						|
# Debug
 | 
						|
#output_log="/home/$USER/\$SVCNAME.log"
 | 
						|
#error_log="/home/$USER/\$SVCNAME.err"
 | 
						|
 | 
						|
depend() {
 | 
						|
	need net
 | 
						|
}
 | 
						|
EOF
 | 
						|
chown $USER:$USER $SCRIPT
 | 
						|
chmod +x $SCRIPT
 | 
						|
 | 
						|
 | 
						|
 | 
						|
# Setup the service...
 | 
						|
 | 
						|
ln -s /home/$USER/$SCRIPT /etc/init.d/$SCRIPT
 | 
						|
if ! [ -e /etc/runlevels/default/$SCRIPT ] ; then
 | 
						|
	rc-update add $SCRIPT default
 | 
						|
fi
 | 
						|
rc-service $SCRIPT restart
 | 
						|
 | 
						|
 | 
						|
 | 
						|
# vim:set ts=4 sw=4 :
 |