result=$(id | awk '{print $1}')

if [ $result != "uid=0(root)" ]; then

echo "请以root身份执行该脚本"

exit 1

fi

res=`lsb_release -d | grep -i ubuntu`

if [ "$?" != "0" ]; then

res=`which apt`

if [ "$?" != "0" ]; then

echo "系统不是Ubuntu"

exit 1

fi

res=`which systemctl`

if [ "$?" != "0" ]; then

echo "系统版本过低，请重装系统到高版本后再使用本脚本！"

exit 1

fi

else

result=`lsb_release -d | grep -oE "[0-9.]+"`

main=${result%%.*}

if [ $main -lt 16 ]; then

echo "不受支持的Ubuntu版本"

exit 1

fi

fi

clear

echo "#############################################################"

echo -e "# ${RED}Ubuntu LTS v2ray带伪装一键安装脚本${PLAIN} #"

echo -e "# ${GREEN}作者${PLAIN}: 网络跳越(hijk) #"

echo -e "# ${GREEN}网址${PLAIN}: https://hijk.art #"

echo -e "# ${GREEN}论坛${PLAIN}: https://hijk.club #"

echo -e "# ${GREEN}TG群${PLAIN}: https://t.me/hijkclub #"

echo -e "# ${GREEN}Youtube频道${PLAIN}: https://youtube.com/channel/UCYTB--VsObzepVJtc9yvUxQ #"

echo "#############################################################"

echo ""

echo " "

echo " 本脚本为带伪装的一键脚本，运行之前请确认如下条件已经具备："

colorEcho ${YELLOW} " 1. 一个伪装域名"

colorEcho ${YELLOW} " 2. 伪装域名DNS解析指向当前服务器ip（${IP}）"

colorEcho ${BLUE} " 3. 如果/root目录下有 v2ray.pem 和 v2ray.key 证书密钥文件，无需理会条件2"

echo " "

read -p " 确认满足按y，按其他退出脚本：" answer

[ "${answer}" != "y" ] && exit 0

echo ""

while true

do

read -p " 请输入伪装域名：" DOMAIN

if [ -z "${DOMAIN}" ]; then

colorEcho $RED " 域名输入错误，请重新输入！"

else

break

fi

done

DOMAIN=${DOMAIN,,}

colorEcho ${BLUE} " 伪装域名(host)：$DOMAIN"

echo ""

if [[ -f ~/v2ray.pem && -f ~/v2ray.key ]]; then

colorEcho ${BLUE} " 检测到自有证书，将使用其部署"

echo

CERT_FILE="/etc/v2ray/${DOMAIN}.pem"

KEY_FILE="/etc/v2ray/${DOMAIN}.key"

else

resolve=`curl -sL https://hijk.art/hostip.php?d=${DOMAIN}`

res=`echo -n ${resolve} | grep ${IP}`

if [[ -z "${res}" ]]; then

colorEcho ${BLUE} "${DOMAIN} 解析结果：${resolve}"

colorEcho ${RED} " 域名未解析到当前服务器IP(${IP})!"

exit 1

fi

fi

echo ""

while true

do

read -p " 请输入伪装路径，以/开头：" WSPATH

if [[ -z "${WSPATH}" ]]; then

len=`shuf -i5-12 -n1`

ws=`cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w $len | head -n 1`

WSPATH="/$ws"

break

elif [[ "${WSPATH:0:1}" != "/" ]]; then

colorEcho ${RED} " 伪装路径必须以/开头！"

elif [[ "${WSPATH}" = "/" ]]; then

colorEcho ${RED} " 不能使用根路径！"

else

break

fi

done

colorEcho ${BLUE} " 伪装路径：$WSPATH"

echo

read -p " 请输入Nginx端口[100-65535的一个数字，默认443]：" PORT

[ -z "${PORT}" ] && PORT=443

if [ "${PORT:0:1}" = "0" ]; then

echo -e "${RED}端口不能以0开头${PLAIN}"

exit 1

fi

colorEcho ${BLUE} " Nginx端口：$PORT"

echo ""

colorEcho $BLUE " 请选择伪装站类型:"

echo " 1) 静态网站(位于/usr/share/nginx/html)"

echo " 2) 小说站(随机选择)"

echo " 3) 美女站(https://imeizi.me)"

echo " 4) VPS优惠博客(https://vpsgongyi.com)"

echo " 5) 自定义反代站点(需以http或者https开头)"

read -p " 请选择伪装网站类型[默认:美女站]" answer

if [[ -z "$answer" ]]; then

PROXY_URL="https://imeizi.me"

else

case $answer in

1)

PROXY_URL=""

;;

2)

len=${#SITES[@]}

((len--))

while true

do

index=`shuf -i0-${len} -n1`

PROXY_URL=${SITES[$index]}

host=`echo ${PROXY_URL} | cut -d/ -f3`

ip=`curl -sL https://hijk.art/hostip.php?d=${host}`

res=`echo -n ${ip} | grep ${host}`

if [[ "${res}" = "" ]]; then

echo "$ip $host" >> /etc/hosts

break

fi

done

;;

3)

PROXY_URL="https://imeizi.me"

;;

4)

PROXY_URL="https://vpsgongyi.com"

;;

5)

read -p " 请输入反代站点(以http或者https开头)：" PROXY_URL

if [[ -z "$PROXY_URL" ]]; then

colorEcho $RED " 请输入反代网站！"

exit 1

elif [[ "${PROXY_URL:0:4}" != "http" ]]; then

colorEcho $RED " 反代网站必须以http或https开头！"

exit 1

fi

;;

*)

colorEcho $RED " 请输入正确的选项！"

exit 1

esac

fi

REMOTE_HOST=`echo ${PROXY_URL} | cut -d/ -f3`

echo ""

colorEcho $BLUE " 伪装网站：$PROXY_URL"

echo ""

colorEcho $BLUE " 是否允许搜索引擎爬取网站？[默认：不允许]"

echo " y)允许，会有更多ip请求网站，但会消耗一些流量，vps流量充足情况下推荐使用"

echo " n)不允许，爬虫不会访问网站，访问ip比较单一，但能节省vps流量"

read -p " 请选择：[y/n]" answer

if [[ -z "$answer" ]]; then

ALLOW_SPIDER="n"

elif [[ "${answer,,}" = "y" ]]; then

ALLOW_SPIDER="y"

else

ALLOW_SPIDER="n"

fi

echo ""

colorEcho $BLUE " 允许搜索引擎：$ALLOW_SPIDER"

echo ""

read -p " 是否安装BBR（安装请按y，不安装请输n，不输则默认安装）:" NEED_BBR

[ -z "$NEED_BBR" ] && NEED_BBR=y

[ "$NEED_BBR" = "Y" ] && NEED_BBR=y

colorEcho $BLUE " 安装BBR：$NEED_BBR"

colorEcho $BLUE " 更新系统..."

apt clean all

apt update

#apt -y upgrade

colorEcho $BLUE " 安装必要软件"

apt install -y telnet wget vim net-tools ntpdate unzip gcc g++

apt autoremove -y

res=`which wget`

[ "$?" != "0" ] && apt install -y wget

res=`which netstat`

[ "$?" != "0" ] && apt install -y net-tools

colorEcho $BLUE 安装v2ray...

bash <(curl -sL ${V6_PROXY}https://raw.githubusercontent.com/hijkpw/scripts/master/goV2.sh)

if [ ! -f $CONFIG_FILE ]; then

colorEcho $RED " $OS 安装V2ray失败，请到 https://hijk.art 网站反馈"

exit 1

fi

alterid=0

sed -i -e "s/alterId\":.*[0-9]*/alterId\": ${alterid}/" $CONFIG_FILE

uid=`grep id $CONFIG_FILE| cut -d: -f2 | tr -d \",' '`

V2PORT=`grep port $CONFIG_FILE| cut -d: -f2 | tr -d \",' '`

ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime

ntpdate -u time.nist.gov

res=`grep streamSettings $CONFIG_FILE`

if [ "$res" = "" ]; then

line=`grep -n '}]' $CONFIG_FILE | head -n1 | cut -d: -f1`

line=`expr ${line} - 1`

sed -i "${line}s/}/},/" $CONFIG_FILE

sed -i "${line}a\ \"streamSettings\": {\n \"network\": \"ws\",\n \"wsSettings\": {\n \"path\": \"${WSPATH}\",\n \"headers\": {\n \"Host\": \"${DOMAIN}\"\n }\n }\n },\n \"listen\": \"127.0.0.1\"" $CONFIG_FILE

else

sed -i -e "s/path\":.*/path\": \"\\${WSPATH}\",/" $CONFIG_FILE

fi

systemctl enable v2ray

systemctl restart v2ray

sleep 3

res=`netstat -ntlp| grep ${V2PORT} | grep v2ray`

if [ "${res}" = "" ]; then

echo " $OS 端口号：${PORT}，伪装路径：${WSPATH}， v2启动失败，请检查端口是否被占用或伪装路径是否有特殊字符！！"

exit 1

fi

colorEcho $BLUE " v2ray安装成功！"

mkdir -p /etc/v2ray

if [[ -z ${CERT_FILE+x} ]]; then

systemctl stop nginx

systemctl stop v2ray

res=`netstat -ntlp| grep -E ':80 |:443 '`

if [[ "${res}" != "" ]]; then

colorEcho ${RED} " 其他进程占用了80或443端口，请先关闭再运行一键脚本"

echo " 端口占用信息如下："

echo ${res}

exit 1

fi

apt install -y socat openssl cron

systemctl start cron

systemctl enable cron

curl -sL https://get.acme.sh | sh

source ~/.bashrc

~/.acme.sh/acme.sh --issue -d $DOMAIN --standalone

CERT_FILE="/etc/v2ray/${DOMAIN}.pem"

KEY_FILE="/etc/v2ray/${DOMAIN}.key"

~/.acme.sh/acme.sh --install-cert -d $DOMAIN \

--key-file $KEY_FILE \

--fullchain-file $CERT_FILE \

--reloadcmd "service nginx force-reload"

[[ -f $CERT_FILE && -f $KEY_FILE ]] || {

colorEcho $RED " 获取证书失败，请到 https://hijk.art 反馈"

exit 1

}

else

cp ~/v2ray.pem /etc/v2ray/${DOMAIN}.pem

cp ~/v2ray.key /etc/v2ray/${DOMAIN}.key

fi

apt install -y nginx

getCert

if [ ! -f /etc/nginx/nginx.conf.bak ]; then

mv /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak

fi

if [[ "$ALLOW_SPIDER" = "n" ]]; then

echo 'User-Agent: *' > /usr/share/nginx/html/robots.txt

echo 'Disallow: /' >> /usr/share/nginx/html/robots.txt

fi

if [[ "$PROXY_URL" = "" ]]; then

action=""

else

action="proxy_ssl_server_name on;

fi

cat > /etc/nginx/nginx.conf<<-EOF

mkdir -p /etc/nginx/conf.d;

cat > /etc/nginx/conf.d/${DOMAIN}.conf<<-EOF

sed -i '/certbot/d' /etc/crontab

certbotpath=`which certbot`

echo "0 3 1 */2 0 root systemctl stop nginx; ${certbotpath} renew; systemctl restart nginx" >> /etc/crontab

systemctl enable nginx && systemctl restart nginx

systemctl start v2ray

sleep 3

res=`netstat -nltp | grep ${PORT} | grep nginx`

if [ "${res}" = "" ]; then

echo -e " $OS nginx启动失败！ 请到 ${RED}https://hijk.art${PLAIN} 反馈"

exit 1

fi

res=`ufw status | grep -i inactive`

if [ "$res" = "" ];then

ufw allow http/tcp

ufw allow https/tcp

ufw allow ${PORT}/tcp

fi

if [ "$NEED_BBR" != "y" ]; then

INSTALL_BBR=false

return

fi

result=$(lsmod | grep bbr)

if [ "$result" != "" ]; then

colorEcho $YELLOW " BBR模块已安装"

INSTALL_BBR=false

echo "3" > /proc/sys/net/ipv4/tcp_fastopen

echo "net.ipv4.tcp_fastopen = 3" >> /etc/sysctl.conf

return;

fi

res=`hostnamectl | grep -i openvz`

if [ "$res" != "" ]; then

colorEcho $YELLOW " openvz机器，跳过安装"

INSTALL_BBR=false

return

fi

echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf

echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf

echo "net.ipv4.tcp_fastopen = 3" >> /etc/sysctl.conf

sysctl -p

result=$(lsmod | grep bbr)

if [[ "$result" != "" ]]; then

colorEcho $GREEN " BBR模块已启用"

INSTALL_BBR=false

return

fi

colorEcho $BLUE " 安装BBR模块..."

apt install -y --install-recommends linux-generic-hwe-16.04

grub-set-default 0

echo "tcp_bbr" >> /etc/modules-load.d/modules.conf

echo "3" > /proc/sys/net/ipv4/tcp_fastopen

INSTALL_BBR=true

if [ ! -f $CONFIG_FILE ]; then

colorEcho $RED " v2ray未安装"

exit 1

fi

res=`netstat -nltp | grep v2ray`

[ -z "$res" ] && v2status="${RED}已停止${PLAIN}" || v2status="${GREEN}正在运行${PLAIN}"

uid=`grep id $CONFIG_FILE| cut -d: -f2 | tr -d \",' '`

alterid=`grep alterId $CONFIG_FILE| cut -d: -f2 | tr -d \",' '`

network=`grep network $CONFIG_FILE| cut -d: -f2 | tr -d \",' '`

domain=`grep Host $CONFIG_FILE| cut -d: -f2 | tr -d \",' '`

if [ -z "$domain" ]; then

colorEcho $RED " 不是伪装版本的v2ray"

exit 1

fi

path=`grep path $CONFIG_FILE| cut -d: -f2 | tr -d \",' '`

port=`cat /etc/nginx/conf.d/${domain}.conf | grep -i ssl | head -n1 | awk '{print $2}'`

security="none"

res=`netstat -nltp | grep ${port} | grep nginx`

[ -z "$res" ] && ngstatus="${RED}已停止${PLAIN}" || ngstatus="${GREEN}正在运行${PLAIN}"

raw="{

link=`echo -n ${raw} | base64 -w 0`

link="vmess://${link}"

echo ============================================

echo -e " ${BLUE}v2ray运行状态：${PLAIN}${v2status}"

echo -e " ${BLUE}v2ray配置文件：${PLAIN}${RED}$CONFIG_FILE${PLAIN}"

echo -e " ${BLUE}nginx运行状态：${PLAIN}${ngstatus}"

echo -e " ${BLUE}nginx配置文件：${PLAIN}${RED}${confpath}${domain}.conf${PLAIN}"

echo ""

echo -e " ${RED}v2ray配置信息：${PLAIN} "

echo -e " ${BLUE}IP(address):${PLAIN} ${RED}${IP}${PLAIN}"

echo -e " ${BLUE}端口(port)：${PLAIN}${RED}${port}${PLAIN}"

echo -e " ${BLUE}id(uuid)：${PLAIN}${RED}${uid}${PLAIN}"

echo -e " ${BLUE}额外id(alterid)：${PLAIN} ${RED}${alterid}${PLAIN}"

echo -e " ${BLUE}加密方式(security)：${PLAIN} ${RED}$security${PLAIN}"

echo -e " ${BLUE}传输协议(network)：${PLAIN} ${RED}${network}${PLAIN}"

echo -e " ${BLUE}伪装类型(type)：${PLAIN}${RED}none${PLAIN}"

echo -e " ${BLUE}伪装域名/主机名(host)：${PLAIN}${RED}${domain}${PLAIN}"

echo -e " ${BLUE}路径(path)：${PLAIN}${RED}${path}${PLAIN}"

echo -e " ${BLUE}底层安全传输(tls)：${PLAIN}${RED}TLS${PLAIN}"

echo

echo -e " ${BLUE}vmess链接:${PLAIN} $link"

if [ "${INSTALL_BBR}" == "true" ]; then

echo

colorEcho $BLUE " 为使BBR模块生效，系统将在30秒后重启"

echo

echo -e " 您可以按 ctrl + c 取消重启，稍后输入 ${RED}reboot${PLAIN} 重启系统"

sleep 30

reboot

fi

checkSystem

getData

preinstall

installBBR

installV2ray

setFirewall

installNginx

info

bbrReboot

echo ""

read -p " 确定卸载v2ray吗？(y/n)" answer

[ -z ${answer} ] && answer="n"

if [ "${answer}" == "y" ] || [ "${answer}" == "Y" ]; then

systemctl stop v2ray

systemctl disable v2ray

domain=`grep Host $CONFIG_FILE| cut -d: -f2 | tr -d \",' '`

rm -rf /etc/v2ray/*

rm -rf /usr/bin/v2ray/*

rm -rf /var/log/v2ray/*

rm -rf /etc/systemd/system/v2ray.service

apt remove -y nginx

apt remove -y nginx-common

apt autoremove -y

if [ -d /usr/share/nginx/html.bak ]; then

rm -rf /usr/share/nginx/html

mv /usr/share/nginx/html.bak /usr/share/nginx/html

fi

rm -rf /etc/nginx/conf.d/${domain}.conf

~/.acme.sh/acme.sh --uninstall

echo -e " ${RED}卸载成功${PLAIN}"

fi