############### silent() { "$@" >/dev/null 2>&1 || { echo "Error running: $*"; echo "sth error"; exit 1; }; } debmirror=${1:-http://deb.debian.org/debian} echo -e "deb ${debmirror} bullseye main\ndeb ${debmirror} bullseye-updates main\ndeb ${debmirror}-security bullseye-security main" > /etc/apt/sources.list echo "Installing Dependencies" silent apt-get update -y silent apt-get install -y curl sudo mc qrencode echo "Installed Dependencies" cd /root arch=$([[ "$(arch)" == "aarch64" ]] && echo _arm64) rlsmirror=${2:-https://github.com/minlearn/inst/releases/download/inital} mkdir -p download [[ ! -f download/tmp.tar.gz ]] && wget --no-check-certificate $rlsmirror/xray$arch.tar.gz -O download/tmp.tar.gz mkdir -p app/xray tar -xzvf download/tmp.tar.gz -C app/xray xray --strip-components=1 cat > /lib/systemd/system/xray.service << 'EOL' [Unit] Description=this is xray service,please change the token then daemon-reload it After=network.target nss-lookup.target Wants=network.target nss-lookup.target Requires=network.target nss-lookup.target [Service] Type=simple ExecStartPre=/bin/bash -c "date=$$(echo -n $$(ip addr |grep $$(ip route show |grep -o 'default via [0-9]\\{1,3\\}.[0-9]\\{1,3\\}.[0-9]\\{1,3\\}.[0-9]\\{1,3\\}.*' |head -n1 |sed 's/proto.*\\|onlink.*//g' |awk '{print $$NF}') |grep 'global' |grep 'brd' |head -n1 |grep -o '[0-9]\\{1,3\\}.[0-9]\\{1,3\\}.[0-9]\\{1,3\\}.[0-9]\\{1,3\\}/[0-9]\\{1,2\\}') |cut -d'/' -f1);PATH=/usr/local/bin:$PATH exec sed -i s/xxx.xxxxxx.com/$${date}/g /root/app/xray/config.yaml" ExecStart=/root/app/xray/xray -c /root/app/xray/config.yaml Restart=on-failure RestartPreventExitStatus=23 [Install] WantedBy=multi-user.target EOL cat > /root/app/xray/config.yaml << 'EOL' { "log": null, "routing": { "domainStrategy": "AsIs", "rules": [ { "inboundTag": [ "api" ], "outboundTag": "api", "type": "field" }, { "type": "field", "port": "443", "network": "udp", "outboundTag": "blocked" }, { "type": "field", "domain": [ "www.gstatic.com" ], "outboundTag": "direct" }, { "ip": [ "geoip:cn" ], "outboundTag": "blocked", "type": "field" }, { "outboundTag": "blocked", "protocol": [ "bittorrent" ], "type": "field" }, { "type": "field", "outboundTag": "vps-outbound-v4", "domain": [ "api.myip.com" ] }, { "type": "field", "outboundTag": "vps-outbound-v6", "domain": [ "api64.ipify.org" ] }, { "type": "field", "outboundTag": "direct", "network": "udp,tcp" } ] }, "dns": null, "inbounds": [ { "listen": "127.0.0.1", "port": 62789, "protocol": "dokodemo-door", "settings": { "address": "127.0.0.1" }, "streamSettings": null, "tag": "api", "sniffing": null }, { "listen": null, "port": 443, "protocol": "vless", "settings": { "clients": [ { "id": "xxxxxxxxxxxxxxxxx", "flow": "" } ], "decryption": "none", "fallbacks": [] }, "streamSettings": { "network": "ws", "security": "tls", "tlsSettings": { "serverName": "localhost", "rejectUnknownSni": false, "minVersion": "1.2", "maxVersion": "1.3", "cipherSuites": "", "certificates": [ { "ocspStapling": 3600, "certificateFile": "/root/app/xray/certs/localhost.crt", "keyFile": "/root/app/xray/certs/localhost.key" } ], "alpn": [ "http/1.1", "h2" ], "settings": [ { "allowInsecure": false, "fingerprint": "", "serverName": "" } ] }, "wsSettings": { "path": "/mywebsocket", "headers": { "Host": "xxx.xxxxxx.com" } } }, "tag": "inbound-443", "sniffing": { "enabled": true, "destOverride": [ "http", "tls", "quic" ] } } ], "outbounds": [ { "protocol": "blackhole", "tag": "blocked" }, { "tag": "direct", "protocol": "freedom", "settings": { "domainStrategy": "UseIPv4v6" } }, { "tag": "vps-outbound-v4", "protocol": "freedom", "settings": { "domainStrategy": "UseIPv4v6" } }, { "tag": "vps-outbound-v6", "protocol": "freedom", "settings": { "domainStrategy": "UseIPv6v4" } } ], "transport": null, "policy": { "system": { "statsInboundDownlink": true, "statsInboundUplink": true }, "levels": { "0": { "handshake": 10, "connIdle": 100, "uplinkOnly": 2, "downlinkOnly": 3, "bufferSize": 10240 } } }, "api": { "services": [ "HandlerService", "LoggerService", "StatsService" ], "tag": "api" }, "stats": {}, "reverse": null, "fakeDns": null } EOL cat > /root/token.sh << 'EOL' read -p "give a uuid:" token /root/ip.sh << 'EOL' read -p "give a ip:" ip /root/client.txt << 'EOL' mixed-port: 7891 allow-lan: true mode: rule log-level: info external-controller: :9090 dns: enabled: false enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 nameserver: - 119.29.29.29 - 223.5.5.5 fallback: - 8.8.8.8 - 8.8.4.4 - tls://1.0.0.1:853 - tls://dns.google:853 tun: enable: false stack: gvisor dns-hijack: - any:53 auto-route: true auto-detect-interface: true proxies: - {name: yourip, server: yourip, port: 443, client-fingerprint: chrome, type: vless, uuid: youruuid, tls: true, tfo: false, skip-cert-verify: true, network: ws, ws-opts: {path: /mywebsocket, headers: {Host: yourip}}} proxy-groups: - name: 代理 type: select proxies: - yourip - name: 规则外路由选择 type: select proxies: - 代理 - DIRECT rules: - DOMAIN-SUFFIX,local,DIRECT - IP-CIDR,192.168.0.0/16,DIRECT,no-resolve - IP-CIDR,10.0.0.0/8,DIRECT,no-resolve - IP-CIDR,172.16.0.0/12,DIRECT,no-resolve - IP-CIDR,127.0.0.0/8,DIRECT,no-resolve - IP-CIDR,100.64.0.0/10,DIRECT,no-resolve - IP-CIDR6,::1/128,DIRECT,no-resolve - IP-CIDR6,fc00::/7,DIRECT,no-resolve - IP-CIDR6,fe80::/10,DIRECT,no-resolve - IP-CIDR6,fd00::/8,DIRECT,no-resolve - PROCESS-NAME,aria2c,DIRECT - PROCESS-NAME,fdm,DIRECT - PROCESS-NAME,Folx,DIRECT - PROCESS-NAME,NetTransport,DIRECT - PROCESS-NAME,Thunder,DIRECT - PROCESS-NAME,Transmission,DIRECT - PROCESS-NAME,uTorrent,DIRECT - PROCESS-NAME,WebTorrent,DIRECT - PROCESS-NAME,WebTorrent Helper,DIRECT - PROCESS-NAME,DownloadService,DIRECT - PROCESS-NAME,Weiyun,DIRECT - DOMAIN-KEYWORD,aria2,DIRECT - DOMAIN-KEYWORD,xunlei,DIRECT - DOMAIN-KEYWORD,yunpan,DIRECT - DOMAIN-KEYWORD,Thunder,DIRECT - DOMAIN-KEYWORD,XLLiveUD,DIRECT - GEOIP,CN,DIRECT - MATCH,规则外路由选择 EOL cat > /root/client.sh << 'EOL' qrencode -m 2 -t ANSI $(cat /root/client.txt | base64) EOL chmod +x /root/client.sh systemctl enable -q --now xray echo "Cleaning up" silent apt-get -y autoremove silent apt-get -y autoclean echo "Cleaned" ##############