Hermes
d1a3dc00d5
- 奶油纸背景、薄荷主色、pill 输入/按钮、3D 按压阴影 - 焦点黄高亮、Title 飘带、圆角卡片表 - 仍为单文件静态 HTML，无 React/npm，适合 512MB
99 lines
3.0 KiB
Bash
Executable File
99 lines
3.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
||
set -euo pipefail
|
||
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
||
# shellcheck source=lib.sh
|
||
source "$ROOT_DIR/scripts/lib.sh"
|
||
|
||
if [[ -f "${CONFIG_FILE:-$ROOT_DIR/config/settings.conf}" ]]; then
|
||
load_config
|
||
elif [[ -f "$INSTALL_DIR/etc/settings.conf" ]]; then
|
||
CONFIG_FILE="$INSTALL_DIR/etc/settings.conf"
|
||
load_config
|
||
elif [[ -f "$ROOT_DIR/generated/runtime.env" ]]; then
|
||
set -a
|
||
# shellcheck disable=SC1091
|
||
source "$ROOT_DIR/generated/runtime.env"
|
||
set +a
|
||
else
|
||
# 尝试已安装路径
|
||
if [[ -f /opt/cellular-proxy/etc/settings.conf ]]; then
|
||
CONFIG_FILE=/opt/cellular-proxy/etc/settings.conf
|
||
load_config
|
||
else
|
||
load_config
|
||
fi
|
||
fi
|
||
|
||
URL="${EGRESS_CHECK_URL:-https://ifconfig.me}"
|
||
# 安装阶段可用 EGRESS_TIMEOUT=8 缩短；手动 verify 默认 12
|
||
TIMEOUT="${EGRESS_TIMEOUT:-12}"
|
||
HOST="$PROXY_LISTEN_HOST"
|
||
if [[ "$HOST" == "0.0.0.0" || "$HOST" == "::" || -z "$HOST" ]]; then
|
||
HOST="127.0.0.1"
|
||
fi
|
||
PORT="${PROXY_MIXED_PORT:-7890}"
|
||
QUICK="${VERIFY_QUICK:-false}"
|
||
case "${QUICK,,}" in
|
||
1|true|yes|on) QUICK=true ;;
|
||
*) QUICK=false ;;
|
||
esac
|
||
|
||
curl_ip() {
|
||
# 单次探测，严格超时，绝不无限挂起
|
||
local extra=("$@")
|
||
# --max-time 总时长；--connect-timeout 连接
|
||
curl -fsS --connect-timeout 3 --max-time "$TIMEOUT" "${extra[@]}" "$URL" 2>/dev/null \
|
||
| tr -d '\r\n' \
|
||
| head -c 64
|
||
}
|
||
|
||
if [[ "$QUICK" != "true" ]]; then
|
||
echo "========== 接口 =========="
|
||
"$ROOT_DIR/scripts/detect.sh" || true
|
||
echo
|
||
fi
|
||
|
||
echo "========== 默认出口（不走代理，通常是 WiFi） =========="
|
||
info "探测中（最多 ${TIMEOUT}s）: $URL"
|
||
direct_ip="$(curl_ip || true)"
|
||
[[ -n "$direct_ip" ]] || direct_ip=FAIL
|
||
echo "direct: $direct_ip"
|
||
echo
|
||
|
||
echo "========== 代理出口（应是数据流量公网 IP） =========="
|
||
auth=()
|
||
if [[ -n "${PROXY_USER:-}" ]]; then
|
||
auth=(--proxy-user "${PROXY_USER}:${PROXY_PASS}")
|
||
fi
|
||
info "SOCKS 探测中（最多 ${TIMEOUT}s）: ${HOST}:${PORT}"
|
||
socks_ip="$(curl_ip "${auth[@]}" --socks5-hostname "${HOST}:${PORT}" || true)"
|
||
[[ -n "$socks_ip" ]] || socks_ip=FAIL
|
||
echo "socks : $socks_ip"
|
||
|
||
info "HTTP 探测中（最多 ${TIMEOUT}s）: ${HOST}:${PORT}"
|
||
http_ip="$(curl_ip "${auth[@]}" -x "http://${HOST}:${PORT}" || true)"
|
||
[[ -n "$http_ip" ]] || http_ip=FAIL
|
||
echo "http : $http_ip"
|
||
echo
|
||
|
||
if [[ "$direct_ip" == "FAIL" || "$socks_ip" == "FAIL" ]]; then
|
||
err "探测失败（服务/数据网是否在线？ journalctl -u cellular-proxy -e）"
|
||
exit 1
|
||
fi
|
||
|
||
if [[ "$direct_ip" == "$socks_ip" ]]; then
|
||
warn "代理与直连公网 IP 相同 — 可能未绑到数据网卡，或数据与 WiFi 同出口"
|
||
warn "请检查 CELLULAR_IFACE / 数据网是否 up / bind_interface"
|
||
exit 2
|
||
fi
|
||
|
||
if [[ -n "${EXPECTED_CELLULAR_PUBLIC_IP:-}" && "$socks_ip" != "$EXPECTED_CELLULAR_PUBLIC_IP" ]]; then
|
||
err "代理出口 $socks_ip 与 EXPECTED_CELLULAR_PUBLIC_IP=$EXPECTED_CELLULAR_PUBLIC_IP 不一致"
|
||
exit 3
|
||
fi
|
||
|
||
info "OK: 直连(WiFi)=$direct_ip 代理(数据)=$socks_ip"
|
||
echo
|
||
echo "局域网: curl --socks5-hostname <LAN-IP>:${PORT} $URL"
|
||
echo "面板: http://<LAN-IP>:${PANEL_PORT}/"
|