feat: 全自动安装 — 探测数据网卡并绑定出口

- 驱动/名称/次默认路由/非默认口 评分探测
- install.sh 无参数：探测→写配置→装内核→启动→验证
- cpxy rebind 重插卡后重新绑定
- 自动生成 PANEL_SECRET；可选 apt 装依赖

scripts/verify.sh

@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+set -euo pipefail
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+# shellcheck source=lib.sh
+source "$ROOT_DIR/scripts/lib.sh"
+
+if [[ -f "${CONFIG_FILE:-$ROOT_DIR/config/settings.conf}" ]]; then
+  load_config
+elif [[ -f "$ROOT_DIR/generated/runtime.env" ]]; then
+  set -a
+  # shellcheck disable=SC1091
+  source "$ROOT_DIR/generated/runtime.env"
+  set +a
+else
+  load_config
+fi
+
+URL="${EGRESS_CHECK_URL:-https://ifconfig.me}"
+HOST="$PROXY_LISTEN_HOST"
+if [[ "$HOST" == "0.0.0.0" || "$HOST" == "::" || -z "$HOST" ]]; then
+  HOST="127.0.0.1"
+fi
+PORT="${PROXY_MIXED_PORT:-7890}"
+
+echo "========== 接口 =========="
+"$ROOT_DIR/scripts/detect.sh" || true
+echo
+
+echo "========== 默认出口（不走代理，通常是 WiFi） =========="
+direct_ip="$(curl -fsS --max-time 15 "$URL" || echo FAIL)"
+echo "direct: $direct_ip"
+echo
+
+echo "========== 代理出口（应是数据流量公网 IP） =========="
+auth=()
+if [[ -n "${PROXY_USER:-}" ]]; then
+  auth=(--proxy-user "${PROXY_USER}:${PROXY_PASS}")
+fi
+socks_ip="$(curl -fsS --max-time 20 "${auth[@]}" --socks5-hostname "${HOST}:${PORT}" "$URL" || echo FAIL)"
+echo "socks : $socks_ip"
+http_ip="$(curl -fsS --max-time 20 "${auth[@]}" -x "http://${HOST}:${PORT}" "$URL" || echo FAIL)"
+echo "http  : $http_ip"
+echo
+
+if [[ "$direct_ip" == "FAIL" || "$socks_ip" == "FAIL" ]]; then
+  err "探测失败（服务/数据网是否在线？ journalctl -u cellular-proxy -e）"
+  exit 1
+fi
+
+if [[ "$direct_ip" == "$socks_ip" ]]; then
+  warn "代理与直连公网 IP 相同 — 可能未绑到数据网卡，或数据与 WiFi 同出口"
+  warn "请检查 CELLULAR_IFACE / 数据网是否 up / bind_interface"
+  exit 2
+fi
+
+if [[ -n "${EXPECTED_CELLULAR_PUBLIC_IP:-}" && "$socks_ip" != "$EXPECTED_CELLULAR_PUBLIC_IP" ]]; then
+  err "代理出口 $socks_ip 与 EXPECTED_CELLULAR_PUBLIC_IP=$EXPECTED_CELLULAR_PUBLIC_IP 不一致"
+  exit 3
+fi
+
+info "OK: 直连(WiFi)=$direct_ip  代理(数据)=$socks_ip"
+echo
+echo "局域网: curl --socks5-hostname <LAN-IP>:${PORT} $URL"
+echo "面板:   http://<LAN-IP>:${PANEL_PORT}/"