#!/bin/bash sh_v="4.5.2" gl_hui='\e[37m' gl_hong='\033[31m' gl_lv='\033[32m' gl_huang='\033[33m' gl_lan='\033[34m' gl_bai='\033[0m' gl_zi='\033[35m' gl_kjlan='\033[96m' canshu="default" permission_granted="false" ENABLE_STATS="true" quanju_canshu() { if [ "$canshu" = "CN" ]; then zhushi=0 gh_proxy="https://gh.kejilion.pro/" elif [ "$canshu" = "V6" ]; then zhushi=1 gh_proxy="https://gh.kejilion.pro/" else zhushi=1 # 0 表示执行，1 表示不执行 gh_proxy="https://" fi gh_https_url="https://" } quanju_canshu # 定义一个函数来执行命令 run_command() { if [ "$zhushi" -eq 0 ]; then "$@" fi } canshu_v6() { if grep -q '^canshu="V6"' /usr/local/bin/k > /dev/null 2>&1; then sed -i 's/^canshu="default"/canshu="V6"/' ~/kejilion.sh elif grep -q '^canshu="V6"' ~/kejilion.sh.bak > /dev/null 2>&1; then sed -i 's/^canshu="default"/canshu="V6"/' ~/kejilion.sh fi } CheckFirstRun_true() { if grep -q '^permission_granted="true"' /usr/local/bin/k > /dev/null 2>&1; then sed -i 's/^permission_granted="false"/permission_granted="true"/' ~/kejilion.sh elif grep -q '^permission_granted="true"' ~/kejilion.sh.bak > /dev/null 2>&1; then sed -i 's/^permission_granted="false"/permission_granted="true"/' ~/kejilion.sh fi } # 收集功能埋点信息的函数，记录当前脚本版本号，使用时间，系统版本，CPU架构，机器所在国家和用户使用的功能名称，绝对不涉及任何敏感信息，请放心！请相信我！ # 为什么要设计这个功能，目的更好的了解用户喜欢使用的功能，进一步优化功能推出更多符合用户需求的功能。 # 全文可搜搜 send_stats 函数调用位置，透明开源，如有顾虑可拒绝使用。 send_stats() { if [ "$ENABLE_STATS" == "false" ]; then return fi local country=$(curl -s ipinfo.io/country) local os_info=$(grep PRETTY_NAME /etc/os-release | cut -d '=' -f2 | tr -d '"') local cpu_arch=$(uname -m) ( curl -s -X POST "https://api.kejilion.pro/api/log" \ -H "Content-Type: application/json" \ -d "{\"action\":\"$1\",\"timestamp\":\"$(date -u '+%Y-%m-%d %H:%M:%S')\",\"country\":\"$country\",\"os_info\":\"$os_info\",\"cpu_arch\":\"$cpu_arch\",\"version\":\"$sh_v\"}" \ &>/dev/null ) & } yinsiyuanquan2() { if grep -q '^ENABLE_STATS="false"' /usr/local/bin/k > /dev/null 2>&1; then sed -i 's/^ENABLE_STATS="true"/ENABLE_STATS="false"/' ~/kejilion.sh elif grep -q '^ENABLE_STATS="false"' ~/kejilion.sh.bak > /dev/null 2>&1; then sed -i 's/^ENABLE_STATS="true"/ENABLE_STATS="false"/' ~/kejilion.sh fi } canshu_v6 CheckFirstRun_true yinsiyuanquan2 sed -i '/^alias k=/d' ~/.bashrc > /dev/null 2>&1 sed -i '/^alias k=/d' ~/.profile > /dev/null 2>&1 sed -i '/^alias k=/d' ~/.bash_profile > /dev/null 2>&1 cp -f ./kejilion.sh ~/kejilion.sh > /dev/null 2>&1 cp -f ~/kejilion.sh /usr/local/bin/k > /dev/null 2>&1 ln -sf /usr/local/bin/k /usr/bin/k > /dev/null 2>&1 CheckFirstRun_false() { if grep -q '^permission_granted="false"' /usr/local/bin/k > /dev/null 2>&1; then UserLicenseAgreement fi } # 提示用户同意条款 UserLicenseAgreement() { clear echo -e "${gl_kjlan}欢迎使用科技lion脚本工具箱${gl_bai}" echo "首次使用脚本，请先阅读并同意用户许可协议。" echo "用户许可协议: https://blog.kejilion.pro/user-license-agreement/" echo -e "----------------------" read -e -p "是否同意以上条款？(y/n): " user_input if [ "$user_input" = "y" ] || [ "$user_input" = "Y" ]; then send_stats "许可同意" sed -i 's/^permission_granted="false"/permission_granted="true"/' ~/kejilion.sh sed -i 's/^permission_granted="false"/permission_granted="true"/' /usr/local/bin/k else send_stats "许可拒绝" clear exit fi } CheckFirstRun_false ip_address() { get_public_ip() { curl -s https://ipinfo.io/ip && echo } get_local_ip() { ip route get 8.8.8.8 2>/dev/null | grep -oP 'src \K[^ ]+' || \ hostname -I 2>/dev/null | awk '{print $1}' || \ ifconfig 2>/dev/null | grep -E 'inet [0-9]' | grep -v '127.0.0.1' | awk '{print $2}' | head -n1 } public_ip=$(get_public_ip) isp_info=$(curl -s --max-time 3 http://ipinfo.io/org) if echo "$isp_info" | grep -Eiq 'CHINANET|mobile|unicom|telecom'; then ipv4_address=$(get_local_ip) else ipv4_address="$public_ip" fi # ipv4_address=$(curl -s https://ipinfo.io/ip && echo) ipv6_address=$(curl -s --max-time 1 https://v6.ipinfo.io/ip && echo) } install() { if [ $# -eq 0 ]; then echo "未提供软件包参数!" return 1 fi for package in "$@"; do if ! command -v "$package" &>/dev/null; then echo -e "${gl_kjlan}正在安装 $package...${gl_bai}" if command -v dnf &>/dev/null; then dnf -y update dnf install -y epel-release dnf install -y "$package" elif command -v yum &>/dev/null; then yum -y update yum install -y epel-release yum install -y "$package" elif command -v apt &>/dev/null; then apt update -y apt install -y "$package" elif command -v apk &>/dev/null; then apk update apk add "$package" elif command -v pacman &>/dev/null; then pacman -Syu --noconfirm pacman -S --noconfirm "$package" elif command -v zypper &>/dev/null; then zypper refresh zypper install -y "$package" elif command -v opkg &>/dev/null; then opkg update opkg install "$package" elif command -v pkg &>/dev/null; then pkg update pkg install -y "$package" else echo "未知的包管理器!" return 1 fi fi done } check_disk_space() { local required_gb=$1 local path=${2:-/} mkdir -p "$path" local required_space_mb=$((required_gb * 1024)) local available_space_mb=$(df -m "$path" | awk 'NR==2 {print $4}') if [ "$available_space_mb" -lt "$required_space_mb" ]; then echo -e "${gl_huang}提示: ${gl_bai}磁盘空间不足！" echo "当前可用空间: $((available_space_mb/1024))G" echo "最小需求空间: ${required_gb}G" echo "无法继续安装，请清理磁盘空间后重试。" send_stats "磁盘空间不足" break_end kejilion fi } install_dependency() { switch_mirror false false check_port check_swap prefer_ipv4 auto_optimize_dns install wget unzip tar jq grep } remove() { if [ $# -eq 0 ]; then echo "未提供软件包参数!" return 1 fi for package in "$@"; do echo -e "${gl_kjlan}正在卸载 $package...${gl_bai}" if command -v dnf &>/dev/null; then dnf remove -y "$package" elif command -v yum &>/dev/null; then yum remove -y "$package" elif command -v apt &>/dev/null; then apt purge -y "$package" elif command -v apk &>/dev/null; then apk del "$package" elif command -v pacman &>/dev/null; then pacman -Rns --noconfirm "$package" elif command -v zypper &>/dev/null; then zypper remove -y "$package" elif command -v opkg &>/dev/null; then opkg remove "$package" elif command -v pkg &>/dev/null; then pkg delete -y "$package" else echo "未知的包管理器!" return 1 fi done } # 通用 systemctl 函数，适用于各种发行版 systemctl() { local COMMAND="$1" local SERVICE_NAME="$2" if command -v apk &>/dev/null; then service "$SERVICE_NAME" "$COMMAND" else /bin/systemctl "$COMMAND" "$SERVICE_NAME" fi } # 重启服务 restart() { systemctl restart "$1" if [ $? -eq 0 ]; then echo "$1 服务已重启。" else echo "错误：重启 $1 服务失败。" fi } # 启动服务 start() { systemctl start "$1" if [ $? -eq 0 ]; then echo "$1 服务已启动。" else echo "错误：启动 $1 服务失败。" fi } # 停止服务 stop() { systemctl stop "$1" if [ $? -eq 0 ]; then echo "$1 服务已停止。" else echo "错误：停止 $1 服务失败。" fi } # 查看服务状态 status() { systemctl status "$1" if [ $? -eq 0 ]; then echo "$1 服务状态已显示。" else echo "错误：无法显示 $1 服务状态。" fi } enable() { local SERVICE_NAME="$1" if command -v apk &>/dev/null; then rc-update add "$SERVICE_NAME" default else /bin/systemctl enable "$SERVICE_NAME" fi echo "$SERVICE_NAME 已设置为开机自启。" } break_end() { echo -e "${gl_lv}操作完成${gl_bai}" echo "按任意键继续..." read -n 1 -s -r -p "" echo "" clear } kejilion() { cd ~ kejilion_sh } stop_containers_or_kill_process() { local port=$1 local containers=$(docker ps --filter "publish=$port" --format "{{.ID}}" 2>/dev/null) if [ -n "$containers" ]; then docker stop $containers else install lsof for pid in $(lsof -t -i:$port); do kill -9 $pid done fi } check_port() { stop_containers_or_kill_process 80 stop_containers_or_kill_process 443 } install_add_docker_cn() { local country=$(curl -s ipinfo.io/country) if [ "$country" = "CN" ]; then cat > /etc/docker/daemon.json << EOF { "registry-mirrors": [ "https://docker.1ms.run", "https://docker.m.ixdev.cn", "https://hub.rat.dev", "https://dockerproxy.net", "https://docker-registry.nmqu.com", "https://docker.amingg.com", "https://docker.hlmirror.com", "https://hub1.nat.tf", "https://hub2.nat.tf", "https://hub3.nat.tf", "https://docker.m.daocloud.io", "https://docker.kejilion.pro", "https://docker.367231.xyz", "https://hub.1panel.dev", "https://dockerproxy.cool", "https://docker.apiba.cn", "https://proxy.vvvv.ee" ] } EOF fi enable docker start docker restart docker } linuxmirrors_install_docker() { local country=$(curl -s ipinfo.io/country) if [ "$country" = "CN" ]; then bash <(curl -sSL https://linuxmirrors.cn/docker.sh) \ --source mirrors.huaweicloud.com/docker-ce \ --source-registry docker.1ms.run \ --protocol https \ --use-intranet-source false \ --install-latest true \ --close-firewall false \ --ignore-backup-tips else bash <(curl -sSL https://linuxmirrors.cn/docker.sh) \ --source download.docker.com \ --source-registry registry.hub.docker.com \ --protocol https \ --use-intranet-source false \ --install-latest true \ --close-firewall false \ --ignore-backup-tips fi install_add_docker_cn } install_add_docker() { echo -e "${gl_kjlan}正在安装docker环境...${gl_bai}" if command -v apt &>/dev/null || command -v yum &>/dev/null || command -v dnf &>/dev/null; then linuxmirrors_install_docker else install docker docker-compose install_add_docker_cn fi sleep 2 } install_docker() { if ! command -v docker &>/dev/null; then install_add_docker fi } docker_ps() { while true; do clear send_stats "Docker容器管理" echo "Docker容器列表" docker ps -a --format "table {{.ID}}\t{{.Names}}\t{{.Status}}\t{{.Ports}}" echo "" echo "容器操作" echo "------------------------" echo "1. 创建新的容器" echo "------------------------" echo "2. 启动指定容器 6. 启动所有容器" echo "3. 停止指定容器 7. 停止所有容器" echo "4. 删除指定容器 8. 删除所有容器" echo "5. 重启指定容器 9. 重启所有容器" echo "------------------------" echo "11. 进入指定容器 12. 查看容器日志" echo "13. 查看容器网络 14. 查看容器占用" echo "------------------------" echo "15. 开启容器端口访问 16. 关闭容器端口访问" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) send_stats "新建容器" read -e -p "请输入创建命令: " dockername $dockername ;; 2) send_stats "启动指定容器" read -e -p "请输入容器名（多个容器名请用空格分隔）: " dockername docker start $dockername ;; 3) send_stats "停止指定容器" read -e -p "请输入容器名（多个容器名请用空格分隔）: " dockername docker stop $dockername ;; 4) send_stats "删除指定容器" read -e -p "请输入容器名（多个容器名请用空格分隔）: " dockername docker rm -f $dockername ;; 5) send_stats "重启指定容器" read -e -p "请输入容器名（多个容器名请用空格分隔）: " dockername docker restart $dockername ;; 6) send_stats "启动所有容器" docker start $(docker ps -a -q) ;; 7) send_stats "停止所有容器" docker stop $(docker ps -q) ;; 8) send_stats "删除所有容器" read -e -p "$(echo -e "${gl_hong}注意: ${gl_bai}确定删除所有容器吗？(Y/N): ")" choice case "$choice" in [Yy]) docker rm -f $(docker ps -a -q) ;; [Nn]) ;; *) echo "无效的选择，请输入 Y 或 N。" ;; esac ;; 9) send_stats "重启所有容器" docker restart $(docker ps -q) ;; 11) send_stats "进入容器" read -e -p "请输入容器名: " dockername docker exec -it $dockername /bin/sh break_end ;; 12) send_stats "查看容器日志" read -e -p "请输入容器名: " dockername docker logs $dockername break_end ;; 13) send_stats "查看容器网络" echo "" container_ids=$(docker ps -q) echo "------------------------------------------------------------" printf "%-25s %-25s %-25s\n" "容器名称" "网络名称" "IP地址" for container_id in $container_ids; do local container_info=$(docker inspect --format '{{ .Name }}{{ range $network, $config := .NetworkSettings.Networks }} {{ $network }} {{ $config.IPAddress }}{{ end }}' "$container_id") local container_name=$(echo "$container_info" | awk '{print $1}') local network_info=$(echo "$container_info" | cut -d' ' -f2-) while IFS= read -r line; do local network_name=$(echo "$line" | awk '{print $1}') local ip_address=$(echo "$line" | awk '{print $2}') printf "%-20s %-20s %-15s\n" "$container_name" "$network_name" "$ip_address" done <<< "$network_info" done break_end ;; 14) send_stats "查看容器占用" docker stats --no-stream break_end ;; 15) send_stats "允许容器端口访问" read -e -p "请输入容器名: " docker_name ip_address clear_container_rules "$docker_name" "$ipv4_address" local docker_port=$(docker port $docker_name | awk -F'[:]' '/->/ {print $NF}' | uniq) check_docker_app_ip break_end ;; 16) send_stats "阻止容器端口访问" read -e -p "请输入容器名: " docker_name ip_address block_container_port "$docker_name" "$ipv4_address" local docker_port=$(docker port $docker_name | awk -F'[:]' '/->/ {print $NF}' | uniq) check_docker_app_ip break_end ;; *) break # 跳出循环，退出菜单 ;; esac done } docker_image() { while true; do clear send_stats "Docker镜像管理" echo "Docker镜像列表" docker image ls echo "" echo "镜像操作" echo "------------------------" echo "1. 获取指定镜像 3. 删除指定镜像" echo "2. 更新指定镜像 4. 删除所有镜像" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) send_stats "拉取镜像" read -e -p "请输入镜像名（多个镜像名请用空格分隔）: " imagenames for name in $imagenames; do echo -e "${gl_kjlan}正在获取镜像: $name${gl_bai}" docker pull $name done ;; 2) send_stats "更新镜像" read -e -p "请输入镜像名（多个镜像名请用空格分隔）: " imagenames for name in $imagenames; do echo -e "${gl_kjlan}正在更新镜像: $name${gl_bai}" docker pull $name done ;; 3) send_stats "删除镜像" read -e -p "请输入镜像名（多个镜像名请用空格分隔）: " imagenames for name in $imagenames; do docker rmi -f $name done ;; 4) send_stats "删除所有镜像" read -e -p "$(echo -e "${gl_hong}注意: ${gl_bai}确定删除所有镜像吗？(Y/N): ")" choice case "$choice" in [Yy]) docker rmi -f $(docker images -q) ;; [Nn]) ;; *) echo "无效的选择，请输入 Y 或 N。" ;; esac ;; *) break # 跳出循环，退出菜单 ;; esac done } check_crontab_installed() { if ! command -v crontab >/dev/null 2>&1; then install_crontab fi } install_crontab() { if [ -f /etc/os-release ]; then . /etc/os-release case "$ID" in ubuntu|debian|kali) apt update apt install -y cron systemctl enable cron systemctl start cron ;; centos|rhel|almalinux|rocky|fedora) yum install -y cronie systemctl enable crond systemctl start crond ;; alpine) apk add --no-cache cronie rc-update add crond rc-service crond start ;; arch|manjaro) pacman -S --noconfirm cronie systemctl enable cronie systemctl start cronie ;; opensuse|suse|opensuse-tumbleweed) zypper install -y cron systemctl enable cron systemctl start cron ;; iStoreOS|openwrt|ImmortalWrt|lede) opkg update opkg install cron /etc/init.d/cron enable /etc/init.d/cron start ;; FreeBSD) pkg install -y cronie sysrc cron_enable="YES" service cron start ;; *) echo "不支持的发行版: $ID" return ;; esac else echo "无法确定操作系统。" return fi echo -e "${gl_lv}crontab 已安装且 cron 服务正在运行。${gl_bai}" } docker_ipv6_on() { root_use install jq local CONFIG_FILE="/etc/docker/daemon.json" local REQUIRED_IPV6_CONFIG='{"ipv6": true, "fixed-cidr-v6": "2001:db8:1::/64"}' # 检查配置文件是否存在，如果不存在则创建文件并写入默认设置 if [ ! -f "$CONFIG_FILE" ]; then echo "$REQUIRED_IPV6_CONFIG" | jq . > "$CONFIG_FILE" restart docker else # 使用jq处理配置文件的更新 local ORIGINAL_CONFIG=$(<"$CONFIG_FILE") # 检查当前配置是否已经有 ipv6 设置 local CURRENT_IPV6=$(echo "$ORIGINAL_CONFIG" | jq '.ipv6 // false') # 更新配置，开启 IPv6 if [[ "$CURRENT_IPV6" == "false" ]]; then UPDATED_CONFIG=$(echo "$ORIGINAL_CONFIG" | jq '. + {ipv6: true, "fixed-cidr-v6": "2001:db8:1::/64"}') else UPDATED_CONFIG=$(echo "$ORIGINAL_CONFIG" | jq '. + {"fixed-cidr-v6": "2001:db8:1::/64"}') fi # 对比原始配置与新配置 if [[ "$ORIGINAL_CONFIG" == "$UPDATED_CONFIG" ]]; then echo -e "${gl_huang}当前已开启ipv6访问${gl_bai}" else echo "$UPDATED_CONFIG" | jq . > "$CONFIG_FILE" restart docker fi fi } docker_ipv6_off() { root_use install jq local CONFIG_FILE="/etc/docker/daemon.json" # 检查配置文件是否存在 if [ ! -f "$CONFIG_FILE" ]; then echo -e "${gl_hong}配置文件不存在${gl_bai}" return fi # 读取当前配置 local ORIGINAL_CONFIG=$(<"$CONFIG_FILE") # 使用jq处理配置文件的更新 local UPDATED_CONFIG=$(echo "$ORIGINAL_CONFIG" | jq 'del(.["fixed-cidr-v6"]) | .ipv6 = false') # 检查当前的 ipv6 状态 local CURRENT_IPV6=$(echo "$ORIGINAL_CONFIG" | jq -r '.ipv6 // false') # 对比原始配置与新配置 if [[ "$CURRENT_IPV6" == "false" ]]; then echo -e "${gl_huang}当前已关闭ipv6访问${gl_bai}" else echo "$UPDATED_CONFIG" | jq . > "$CONFIG_FILE" restart docker echo -e "${gl_huang}已成功关闭ipv6访问${gl_bai}" fi } save_iptables_rules() { mkdir -p /etc/iptables touch /etc/iptables/rules.v4 iptables-save > /etc/iptables/rules.v4 check_crontab_installed crontab -l | grep -v 'iptables-restore' | crontab - > /dev/null 2>&1 (crontab -l ; echo '@reboot iptables-restore < /etc/iptables/rules.v4') | crontab - > /dev/null 2>&1 } iptables_open() { install iptables save_iptables_rules iptables -P INPUT ACCEPT iptables -P FORWARD ACCEPT iptables -P OUTPUT ACCEPT iptables -F ip6tables -P INPUT ACCEPT ip6tables -P FORWARD ACCEPT ip6tables -P OUTPUT ACCEPT ip6tables -F } open_port() { local ports=($@) # 将传入的参数转换为数组 if [ ${#ports[@]} -eq 0 ]; then echo "请提供至少一个端口号" return 1 fi install iptables for port in "${ports[@]}"; do # 删除已存在的关闭规则 iptables -D INPUT -p tcp --dport $port -j DROP 2>/dev/null iptables -D INPUT -p udp --dport $port -j DROP 2>/dev/null # 添加打开规则 if ! iptables -C INPUT -p tcp --dport $port -j ACCEPT 2>/dev/null; then iptables -I INPUT 1 -p tcp --dport $port -j ACCEPT fi if ! iptables -C INPUT -p udp --dport $port -j ACCEPT 2>/dev/null; then iptables -I INPUT 1 -p udp --dport $port -j ACCEPT echo "已打开端口 $port" fi done save_iptables_rules send_stats "已打开端口" } close_port() { local ports=($@) # 将传入的参数转换为数组 if [ ${#ports[@]} -eq 0 ]; then echo "请提供至少一个端口号" return 1 fi install iptables for port in "${ports[@]}"; do # 删除已存在的打开规则 iptables -D INPUT -p tcp --dport $port -j ACCEPT 2>/dev/null iptables -D INPUT -p udp --dport $port -j ACCEPT 2>/dev/null # 添加关闭规则 if ! iptables -C INPUT -p tcp --dport $port -j DROP 2>/dev/null; then iptables -I INPUT 1 -p tcp --dport $port -j DROP fi if ! iptables -C INPUT -p udp --dport $port -j DROP 2>/dev/null; then iptables -I INPUT 1 -p udp --dport $port -j DROP echo "已关闭端口 $port" fi done # 删除已存在的规则（如果有） iptables -D INPUT -i lo -j ACCEPT 2>/dev/null iptables -D FORWARD -i lo -j ACCEPT 2>/dev/null # 插入新规则到第一条 iptables -I INPUT 1 -i lo -j ACCEPT iptables -I FORWARD 1 -i lo -j ACCEPT save_iptables_rules send_stats "已关闭端口" } allow_ip() { local ips=($@) # 将传入的参数转换为数组 if [ ${#ips[@]} -eq 0 ]; then echo "请提供至少一个IP地址或IP段" return 1 fi install iptables for ip in "${ips[@]}"; do # 删除已存在的阻止规则 iptables -D INPUT -s $ip -j DROP 2>/dev/null # 添加允许规则 if ! iptables -C INPUT -s $ip -j ACCEPT 2>/dev/null; then iptables -I INPUT 1 -s $ip -j ACCEPT echo "已放行IP $ip" fi done save_iptables_rules send_stats "已放行IP" } block_ip() { local ips=($@) # 将传入的参数转换为数组 if [ ${#ips[@]} -eq 0 ]; then echo "请提供至少一个IP地址或IP段" return 1 fi install iptables for ip in "${ips[@]}"; do # 删除已存在的允许规则 iptables -D INPUT -s $ip -j ACCEPT 2>/dev/null # 添加阻止规则 if ! iptables -C INPUT -s $ip -j DROP 2>/dev/null; then iptables -I INPUT 1 -s $ip -j DROP echo "已阻止IP $ip" fi done save_iptables_rules send_stats "已阻止IP" } enable_ddos_defense() { # 开启防御 DDoS iptables -A DOCKER-USER -p tcp --syn -m limit --limit 500/s --limit-burst 100 -j ACCEPT iptables -A DOCKER-USER -p tcp --syn -j DROP iptables -A DOCKER-USER -p udp -m limit --limit 3000/s -j ACCEPT iptables -A DOCKER-USER -p udp -j DROP iptables -A INPUT -p tcp --syn -m limit --limit 500/s --limit-burst 100 -j ACCEPT iptables -A INPUT -p tcp --syn -j DROP iptables -A INPUT -p udp -m limit --limit 3000/s -j ACCEPT iptables -A INPUT -p udp -j DROP send_stats "开启DDoS防御" } # 关闭DDoS防御 disable_ddos_defense() { # 关闭防御 DDoS iptables -D DOCKER-USER -p tcp --syn -m limit --limit 500/s --limit-burst 100 -j ACCEPT 2>/dev/null iptables -D DOCKER-USER -p tcp --syn -j DROP 2>/dev/null iptables -D DOCKER-USER -p udp -m limit --limit 3000/s -j ACCEPT 2>/dev/null iptables -D DOCKER-USER -p udp -j DROP 2>/dev/null iptables -D INPUT -p tcp --syn -m limit --limit 500/s --limit-burst 100 -j ACCEPT 2>/dev/null iptables -D INPUT -p tcp --syn -j DROP 2>/dev/null iptables -D INPUT -p udp -m limit --limit 3000/s -j ACCEPT 2>/dev/null iptables -D INPUT -p udp -j DROP 2>/dev/null send_stats "关闭DDoS防御" } # 管理国家IP规则的函数 manage_country_rules() { local action="$1" shift # 去掉第一个参数，剩下的全是国家代码 install ipset for country_code in "$@"; do local ipset_name="${country_code,,}_block" local download_url="http://www.ipdeny.com/ipblocks/data/countries/${country_code,,}.zone" case "$action" in block) if ! ipset list "$ipset_name" &> /dev/null; then ipset create "$ipset_name" hash:net fi if ! wget -q "$download_url" -O "${country_code,,}.zone"; then echo "错误：下载 $country_code 的 IP 区域文件失败" continue fi while IFS= read -r ip; do ipset add "$ipset_name" "$ip" 2>/dev/null done < "${country_code,,}.zone" iptables -I INPUT -m set --match-set "$ipset_name" src -j DROP echo "已成功阻止 $country_code 的 IP 地址" rm "${country_code,,}.zone" ;; allow) if ! ipset list "$ipset_name" &> /dev/null; then ipset create "$ipset_name" hash:net fi if ! wget -q "$download_url" -O "${country_code,,}.zone"; then echo "错误：下载 $country_code 的 IP 区域文件失败" continue fi ipset flush "$ipset_name" while IFS= read -r ip; do ipset add "$ipset_name" "$ip" 2>/dev/null done < "${country_code,,}.zone" iptables -P INPUT DROP iptables -A INPUT -m set --match-set "$ipset_name" src -j ACCEPT echo "已成功允许 $country_code 的 IP 地址" rm "${country_code,,}.zone" ;; unblock) iptables -D INPUT -m set --match-set "$ipset_name" src -j DROP 2>/dev/null if ipset list "$ipset_name" &> /dev/null; then ipset destroy "$ipset_name" fi echo "已成功解除 $country_code 的 IP 地址限制" ;; *) echo "用法: manage_country_rules {block|allow|unblock} " ;; esac done } iptables_panel() { root_use install iptables save_iptables_rules while true; do clear echo "高级防火墙管理" send_stats "高级防火墙管理" echo "------------------------" iptables -L INPUT echo "" echo "防火墙管理" echo "------------------------" echo "1. 开放指定端口 2. 关闭指定端口" echo "3. 开放所有端口 4. 关闭所有端口" echo "------------------------" echo "5. IP白名单 6. IP黑名单" echo "7. 清除指定IP" echo "------------------------" echo "11. 允许PING 12. 禁止PING" echo "------------------------" echo "13. 启动DDOS防御 14. 关闭DDOS防御" echo "------------------------" echo "15. 阻止指定国家IP 16. 仅允许指定国家IP" echo "17. 解除指定国家IP限制" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) read -e -p "请输入开放的端口号: " o_port open_port $o_port send_stats "开放指定端口" ;; 2) read -e -p "请输入关闭的端口号: " c_port close_port $c_port send_stats "关闭指定端口" ;; 3) # 开放所有端口 current_port=$(grep -E '^ *Port [0-9]+' /etc/ssh/sshd_config | awk '{print $2}') iptables -F iptables -X iptables -P INPUT ACCEPT iptables -P FORWARD ACCEPT iptables -P OUTPUT ACCEPT iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -i lo -j ACCEPT iptables -A FORWARD -i lo -j ACCEPT iptables -A INPUT -p tcp --dport $current_port -j ACCEPT iptables-save > /etc/iptables/rules.v4 send_stats "开放所有端口" ;; 4) # 关闭所有端口 current_port=$(grep -E '^ *Port [0-9]+' /etc/ssh/sshd_config | awk '{print $2}') iptables -F iptables -X iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT ACCEPT iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -i lo -j ACCEPT iptables -A FORWARD -i lo -j ACCEPT iptables -A INPUT -p tcp --dport $current_port -j ACCEPT iptables-save > /etc/iptables/rules.v4 send_stats "关闭所有端口" ;; 5) # IP 白名单 read -e -p "请输入放行的IP或IP段: " o_ip allow_ip $o_ip ;; 6) # IP 黑名单 read -e -p "请输入封锁的IP或IP段: " c_ip block_ip $c_ip ;; 7) # 清除指定 IP read -e -p "请输入清除的IP: " d_ip iptables -D INPUT -s $d_ip -j ACCEPT 2>/dev/null iptables -D INPUT -s $d_ip -j DROP 2>/dev/null iptables-save > /etc/iptables/rules.v4 send_stats "清除指定IP" ;; 11) # 允许 PING iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT iptables-save > /etc/iptables/rules.v4 send_stats "允许PING" ;; 12) # 禁用 PING iptables -D INPUT -p icmp --icmp-type echo-request -j ACCEPT 2>/dev/null iptables -D OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT 2>/dev/null iptables-save > /etc/iptables/rules.v4 send_stats "禁用PING" ;; 13) enable_ddos_defense ;; 14) disable_ddos_defense ;; 15) read -e -p "请输入阻止的国家代码（多个国家代码可用空格隔开如 CN US JP）: " country_code manage_country_rules block $country_code send_stats "允许国家 $country_code 的IP" ;; 16) read -e -p "请输入允许的国家代码（多个国家代码可用空格隔开如 CN US JP）: " country_code manage_country_rules allow $country_code send_stats "阻止国家 $country_code 的IP" ;; 17) read -e -p "请输入清除的国家代码（多个国家代码可用空格隔开如 CN US JP）: " country_code manage_country_rules unblock $country_code send_stats "清除国家 $country_code 的IP" ;; *) break # 跳出循环，退出菜单 ;; esac done } add_swap() { local new_swap=$1 # 获取传入的参数 # 获取当前系统中所有的 swap 分区 local swap_partitions=$(grep -E '^/dev/' /proc/swaps | awk '{print $1}') # 遍历并删除所有的 swap 分区 for partition in $swap_partitions; do swapoff "$partition" wipefs -a "$partition" mkswap -f "$partition" done # 确保 /swapfile 不再被使用 swapoff /swapfile # 删除旧的 /swapfile rm -f /swapfile # 创建新的 swap 分区 fallocate -l ${new_swap}M /swapfile chmod 600 /swapfile mkswap /swapfile swapon /swapfile sed -i '/\/swapfile/d' /etc/fstab echo "/swapfile swap swap defaults 0 0" >> /etc/fstab if [ -f /etc/alpine-release ]; then echo "nohup swapon /swapfile" > /etc/local.d/swap.start chmod +x /etc/local.d/swap.start rc-update add local fi echo -e "虚拟内存大小已调整为${gl_huang}${new_swap}${gl_bai}M" } check_swap() { local swap_total=$(free -m | awk 'NR==3{print $2}') # 判断是否需要创建虚拟内存 [ "$swap_total" -gt 0 ] || add_swap 1024 } ldnmp_v() { # 获取nginx版本 local nginx_version=$(docker exec nginx nginx -v 2>&1) local nginx_version=$(echo "$nginx_version" | grep -oP "nginx/\K[0-9]+\.[0-9]+\.[0-9]+") echo -n -e "nginx : ${gl_huang}v$nginx_version${gl_bai}" # 获取mysql版本 local dbrootpasswd=$(grep -oP 'MYSQL_ROOT_PASSWORD:\s*\K.*' /home/web/docker-compose.yml | tr -d '[:space:]') local mysql_version=$(docker exec mysql mysql -u root -p"$dbrootpasswd" -e "SELECT VERSION();" 2>/dev/null | tail -n 1) echo -n -e " mysql : ${gl_huang}v$mysql_version${gl_bai}" # 获取php版本 local php_version=$(docker exec php php -v 2>/dev/null | grep -oP "PHP \K[0-9]+\.[0-9]+\.[0-9]+") echo -n -e " php : ${gl_huang}v$php_version${gl_bai}" # 获取redis版本 local redis_version=$(docker exec redis redis-server -v 2>&1 | grep -oP "v=+\K[0-9]+\.[0-9]+") echo -e " redis : ${gl_huang}v$redis_version${gl_bai}" echo "------------------------" echo "" } install_ldnmp_conf() { # 创建必要的目录和文件 cd /home && mkdir -p web/html web/mysql web/certs web/conf.d web/stream.d web/redis web/log/nginx web/letsencrypt && touch web/docker-compose.yml wget -O /home/web/nginx.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/nginx10.conf wget -O /home/web/conf.d/default.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/default10.conf default_server_ssl # 下载 docker-compose.yml 文件并进行替换 wget -O /home/web/docker-compose.yml ${gh_proxy}raw.githubusercontent.com/kejilion/docker/main/LNMP-docker-compose-10.yml dbrootpasswd=$(openssl rand -base64 16) ; dbuse=$(openssl rand -hex 4) ; dbusepasswd=$(openssl rand -base64 8) # 在 docker-compose.yml 文件中进行替换 sed -i "s#webroot#$dbrootpasswd#g" /home/web/docker-compose.yml sed -i "s#kejilionYYDS#$dbusepasswd#g" /home/web/docker-compose.yml sed -i "s#kejilion#$dbuse#g" /home/web/docker-compose.yml } update_docker_compose_with_db_creds() { cp /home/web/docker-compose.yml /home/web/docker-compose1.yml if ! grep -q "letsencrypt" /home/web/docker-compose.yml; then wget -O /home/web/docker-compose.yml ${gh_proxy}raw.githubusercontent.com/kejilion/docker/main/LNMP-docker-compose-10.yml dbrootpasswd=$(grep -oP 'MYSQL_ROOT_PASSWORD:\s*\K.*' /home/web/docker-compose1.yml | tr -d '[:space:]') dbuse=$(grep -oP 'MYSQL_USER:\s*\K.*' /home/web/docker-compose1.yml | tr -d '[:space:]') dbusepasswd=$(grep -oP 'MYSQL_PASSWORD:\s*\K.*' /home/web/docker-compose1.yml | tr -d '[:space:]') sed -i "s#webroot#$dbrootpasswd#g" /home/web/docker-compose.yml sed -i "s#kejilionYYDS#$dbusepasswd#g" /home/web/docker-compose.yml sed -i "s#kejilion#$dbuse#g" /home/web/docker-compose.yml fi if grep -q "kjlion/nginx:alpine" /home/web/docker-compose1.yml; then sed -i 's|kjlion/nginx:alpine|nginx:alpine|g' /home/web/docker-compose.yml > /dev/null 2>&1 sed -i 's|nginx:alpine|kjlion/nginx:alpine|g' /home/web/docker-compose.yml > /dev/null 2>&1 fi } auto_optimize_dns() { # 获取国家代码（如 CN、US 等） local country=$(curl -s ipinfo.io/country) # 根据国家设置 DNS if [ "$country" = "CN" ]; then local dns1_ipv4="223.5.5.5" local dns2_ipv4="183.60.83.19" local dns1_ipv6="2400:3200::1" local dns2_ipv6="2400:da00::6666" else local dns1_ipv4="1.1.1.1" local dns2_ipv4="8.8.8.8" local dns1_ipv6="2606:4700:4700::1111" local dns2_ipv6="2001:4860:4860::8888" fi set_dns } prefer_ipv4() { grep -q '^precedence ::ffff:0:0/96 100' /etc/gai.conf 2>/dev/null \ || echo 'precedence ::ffff:0:0/96 100' >> /etc/gai.conf echo "已切换为 IPv4 优先" send_stats "已切换为 IPv4 优先" } install_ldnmp() { update_docker_compose_with_db_creds cd /home/web && docker compose up -d sleep 1 crontab -l 2>/dev/null | grep -v 'logrotate' | crontab - (crontab -l 2>/dev/null; echo '0 2 * * * docker exec nginx apk add logrotate && docker exec nginx logrotate -f /etc/logrotate.conf') | crontab - fix_phpfpm_conf php fix_phpfpm_conf php74 # mysql调优 wget -O /home/custom_mysql_config.cnf ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/custom_mysql_config-1.cnf docker cp /home/custom_mysql_config.cnf mysql:/etc/mysql/conf.d/ rm -rf /home/custom_mysql_config.cnf restart_ldnmp sleep 2 clear echo "LDNMP环境安装完毕" echo "------------------------" ldnmp_v } install_certbot() { cd ~ curl -sS -O ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/auto_cert_renewal.sh chmod +x auto_cert_renewal.sh check_crontab_installed local cron_job="0 0 * * * ~/auto_cert_renewal.sh" crontab -l 2>/dev/null | grep -vF "$cron_job" | crontab - (crontab -l 2>/dev/null; echo "$cron_job") | crontab - echo "续签任务已更新" } install_ssltls() { docker stop nginx > /dev/null 2>&1 cd ~ local file_path="/etc/letsencrypt/live/$yuming/fullchain.pem" if [ ! -f "$file_path" ]; then local ipv4_pattern='^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$' local ipv6_pattern='^(([0-9A-Fa-f]{1,4}:){1,7}:|([0-9A-Fa-f]{1,4}:){7,7}[0-9A-Fa-f]{1,4}|::1)$' if [[ ($yuming =~ $ipv4_pattern || $yuming =~ $ipv6_pattern) ]]; then mkdir -p /etc/letsencrypt/live/$yuming/ if command -v dnf &>/dev/null || command -v yum &>/dev/null; then openssl req -x509 -nodes -newkey ec -pkeyopt ec_paramgen_curve:prime256v1 -keyout /etc/letsencrypt/live/$yuming/privkey.pem -out /etc/letsencrypt/live/$yuming/fullchain.pem -days 5475 -subj "/C=US/ST=State/L=City/O=Organization/OU=Organizational Unit/CN=Common Name" else openssl genpkey -algorithm Ed25519 -out /etc/letsencrypt/live/$yuming/privkey.pem openssl req -x509 -key /etc/letsencrypt/live/$yuming/privkey.pem -out /etc/letsencrypt/live/$yuming/fullchain.pem -days 5475 -subj "/C=US/ST=State/L=City/O=Organization/OU=Organizational Unit/CN=Common Name" fi else docker run --rm -p 80:80 -v /etc/letsencrypt/:/etc/letsencrypt certbot/certbot certonly --standalone -d "$yuming" --email your@email.com --agree-tos --no-eff-email --force-renewal --key-type ecdsa fi fi mkdir -p /home/web/certs/ cp /etc/letsencrypt/live/$yuming/fullchain.pem /home/web/certs/${yuming}_cert.pem > /dev/null 2>&1 cp /etc/letsencrypt/live/$yuming/privkey.pem /home/web/certs/${yuming}_key.pem > /dev/null 2>&1 docker start nginx > /dev/null 2>&1 } install_ssltls_text() { echo -e "${gl_huang}$yuming 公钥信息${gl_bai}" cat /etc/letsencrypt/live/$yuming/fullchain.pem echo "" echo -e "${gl_huang}$yuming 私钥信息${gl_bai}" cat /etc/letsencrypt/live/$yuming/privkey.pem echo "" echo -e "${gl_huang}证书存放路径${gl_bai}" echo "公钥: /etc/letsencrypt/live/$yuming/fullchain.pem" echo "私钥: /etc/letsencrypt/live/$yuming/privkey.pem" echo "" } add_ssl() { echo -e "${gl_huang}快速申请SSL证书，过期前自动续签${gl_bai}" yuming="${1:-}" if [ -z "$yuming" ]; then add_yuming fi install_docker install_certbot docker run --rm -v /etc/letsencrypt/:/etc/letsencrypt certbot/certbot delete --cert-name "$yuming" -n 2>/dev/null install_ssltls certs_status install_ssltls_text ssl_ps } ssl_ps() { echo -e "${gl_huang}已申请的证书到期情况${gl_bai}" echo "站点信息 证书到期时间" echo "------------------------" for cert_dir in /etc/letsencrypt/live/*; do local cert_file="$cert_dir/fullchain.pem" if [ -f "$cert_file" ]; then local domain=$(basename "$cert_dir") local expire_date=$(openssl x509 -noout -enddate -in "$cert_file" | awk -F'=' '{print $2}') local formatted_date=$(date -d "$expire_date" '+%Y-%m-%d') printf "%-30s%s\n" "$domain" "$formatted_date" fi done echo "" } default_server_ssl() { install openssl if command -v dnf &>/dev/null || command -v yum &>/dev/null; then openssl req -x509 -nodes -newkey ec -pkeyopt ec_paramgen_curve:prime256v1 -keyout /home/web/certs/default_server.key -out /home/web/certs/default_server.crt -days 5475 -subj "/C=US/ST=State/L=City/O=Organization/OU=Organizational Unit/CN=Common Name" else openssl genpkey -algorithm Ed25519 -out /home/web/certs/default_server.key openssl req -x509 -key /home/web/certs/default_server.key -out /home/web/certs/default_server.crt -days 5475 -subj "/C=US/ST=State/L=City/O=Organization/OU=Organizational Unit/CN=Common Name" fi openssl rand -out /home/web/certs/ticket12.key 48 openssl rand -out /home/web/certs/ticket13.key 80 } certs_status() { sleep 1 local file_path="/etc/letsencrypt/live/$yuming/fullchain.pem" if [ -f "$file_path" ]; then send_stats "域名证书申请成功" else send_stats "域名证书申请失败" echo -e "${gl_hong}注意: ${gl_bai}证书申请失败，请检查以下可能原因并重试：" echo -e "1. 域名拼写错误 ➠ 请检查域名输入是否正确" echo -e "2. DNS解析问题 ➠ 确认域名已正确解析到本服务器IP" echo -e "3. 网络配置问题 ➠ 如使用Cloudflare Warp等虚拟网络请暂时关闭" echo -e "4. 防火墙限制 ➠ 检查80/443端口是否开放，确保验证可访问" echo -e "5. 申请次数超限 ➠ Let's Encrypt有每周限额(5次/域名/周)" echo -e "6. 国内备案限制 ➠ 中国大陆环境请确认域名是否备案" echo "------------------------" echo "1. 重新申请 2. 导入已有证书 0. 退出" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) send_stats "重新申请" echo "请再次尝试部署 $webname" add_yuming install_ssltls certs_status ;; 2) send_stats "导入已有证书" # 定义文件路径 local cert_file="/home/web/certs/${yuming}_cert.pem" local key_file="/home/web/certs/${yuming}_key.pem" mkdir -p /home/web/certs # 1. 输入证书 (ECC 和 RSA 证书开头都是 BEGIN CERTIFICATE) echo "请粘贴 证书 (CRT/PEM) 内容 (按两次回车结束)：" local cert_content="" while IFS= read -r line; do [[ -z "$line" && "$cert_content" == *"-----BEGIN"* ]] && break cert_content+="${line}"$'\n' done # 2. 输入私钥 (兼容 RSA, ECC, PKCS#8) echo "请粘贴 证书私钥 (Private Key) 内容 (按两次回车结束)：" local key_content="" while IFS= read -r line; do [[ -z "$line" && "$key_content" == *"-----BEGIN"* ]] && break key_content+="${line}"$'\n' done # 3. 智能校验 # 只要包含 "BEGIN CERTIFICATE" 和 "PRIVATE KEY" 即可通过 if [[ "$cert_content" == *"-----BEGIN CERTIFICATE-----"* && "$key_content" == *"PRIVATE KEY-----"* ]]; then echo -n "$cert_content" > "$cert_file" echo -n "$key_content" > "$key_file" chmod 644 "$cert_file" chmod 600 "$key_file" # 识别当前证书类型并显示 if [[ "$key_content" == *"EC PRIVATE KEY"* ]]; then echo "检测到 ECC 证书已成功保存。" else echo "检测到 RSA 证书已成功保存。" fi auth_method="ssl_imported" else echo "错误：无效的证书或私钥格式！" certs_status fi ;; *) exit ;; esac fi } repeat_add_yuming() { if [ -e /home/web/conf.d/$yuming.conf ]; then send_stats "域名重复使用" web_del "${yuming}" > /dev/null 2>&1 fi } add_yuming() { ip_address echo -e "先将域名解析到本机IP: ${gl_huang}$ipv4_address $ipv6_address${gl_bai}" read -e -p "请输入你的IP或者解析过的域名: " yuming } check_ip_and_get_access_port() { local yuming="$1" local ipv4_pattern='^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$' local ipv6_pattern='^(([0-9A-Fa-f]{1,4}:){1,7}:|([0-9A-Fa-f]{1,4}:){7,7}[0-9A-Fa-f]{1,4}|::1)$' if [[ "$yuming" =~ $ipv4_pattern || "$yuming" =~ $ipv6_pattern ]]; then read -e -p "请输入访问/监听端口，回车默认使用 80: " access_port access_port=${access_port:-80} fi } update_nginx_listen_port() { local yuming="$1" local access_port="$2" local conf="/home/web/conf.d/${yuming}.conf" # 如果 access_port 为空，则跳过 [ -z "$access_port" ] && return 0 # 删除所有 listen 行 sed -i '/^[[:space:]]*listen[[:space:]]\+/d' "$conf" # 在 server { 后插入新的 listen sed -i "/server {/a\\ listen ${access_port};\\ listen [::]:${access_port}; " "$conf" } add_db() { dbname=$(echo "$yuming" | sed -e 's/[^A-Za-z0-9]/_/g') dbname="${dbname}" dbrootpasswd=$(grep -oP 'MYSQL_ROOT_PASSWORD:\s*\K.*' /home/web/docker-compose.yml | tr -d '[:space:]') dbuse=$(grep -oP 'MYSQL_USER:\s*\K.*' /home/web/docker-compose.yml | tr -d '[:space:]') dbusepasswd=$(grep -oP 'MYSQL_PASSWORD:\s*\K.*' /home/web/docker-compose.yml | tr -d '[:space:]') docker exec mysql mysql -u root -p"$dbrootpasswd" -e "CREATE DATABASE $dbname; GRANT ALL PRIVILEGES ON $dbname.* TO \"$dbuse\"@\"%\";" } restart_ldnmp() { docker exec nginx chown -R nginx:nginx /var/www/html > /dev/null 2>&1 docker exec nginx mkdir -p /var/cache/nginx/proxy > /dev/null 2>&1 docker exec nginx mkdir -p /var/cache/nginx/fastcgi > /dev/null 2>&1 docker exec nginx chown -R nginx:nginx /var/cache/nginx/proxy > /dev/null 2>&1 docker exec nginx chown -R nginx:nginx /var/cache/nginx/fastcgi > /dev/null 2>&1 docker exec php chown -R www-data:www-data /var/www/html > /dev/null 2>&1 docker exec php74 chown -R www-data:www-data /var/www/html > /dev/null 2>&1 cd /home/web && docker compose restart } nginx_upgrade() { local ldnmp_pods="nginx" cd /home/web/ docker rm -f $ldnmp_pods > /dev/null 2>&1 docker images --filter=reference="kjlion/${ldnmp_pods}*" -q | xargs docker rmi > /dev/null 2>&1 docker images --filter=reference="${ldnmp_pods}*" -q | xargs docker rmi > /dev/null 2>&1 docker compose up -d --force-recreate $ldnmp_pods crontab -l 2>/dev/null | grep -v 'logrotate' | crontab - (crontab -l 2>/dev/null; echo '0 2 * * * docker exec nginx apk add logrotate && docker exec nginx logrotate -f /etc/logrotate.conf') | crontab - docker exec nginx chown -R nginx:nginx /var/www/html docker exec nginx mkdir -p /var/cache/nginx/proxy docker exec nginx mkdir -p /var/cache/nginx/fastcgi docker exec nginx chown -R nginx:nginx /var/cache/nginx/proxy docker exec nginx chown -R nginx:nginx /var/cache/nginx/fastcgi docker restart $ldnmp_pods > /dev/null 2>&1 send_stats "更新$ldnmp_pods" echo "更新${ldnmp_pods}完成" } phpmyadmin_upgrade() { local ldnmp_pods="phpmyadmin" local local docker_port=8877 local dbuse=$(grep -oP 'MYSQL_USER:\s*\K.*' /home/web/docker-compose.yml | tr -d '[:space:]') local dbusepasswd=$(grep -oP 'MYSQL_PASSWORD:\s*\K.*' /home/web/docker-compose.yml | tr -d '[:space:]') cd /home/web/ docker rm -f $ldnmp_pods > /dev/null 2>&1 docker images --filter=reference="$ldnmp_pods*" -q | xargs docker rmi > /dev/null 2>&1 curl -sS -O ${gh_proxy}raw.githubusercontent.com/kejilion/docker/refs/heads/main/docker-compose.phpmyadmin.yml docker compose -f docker-compose.phpmyadmin.yml up -d clear ip_address check_docker_app_ip echo "登录信息: " echo "用户名: $dbuse" echo "密码: $dbusepasswd" echo send_stats "启动$ldnmp_pods" } cf_purge_cache() { local CONFIG_FILE="/home/web/config/cf-purge-cache.txt" local API_TOKEN local EMAIL local ZONE_IDS # 检查配置文件是否存在 if [ -f "$CONFIG_FILE" ]; then # 从配置文件读取 API_TOKEN 和 zone_id read API_TOKEN EMAIL ZONE_IDS < "$CONFIG_FILE" # 将 ZONE_IDS 转换为数组 ZONE_IDS=($ZONE_IDS) else # 提示用户是否清理缓存 read -e -p "需要清理 Cloudflare 的缓存吗？（y/n）: " answer if [[ "$answer" == "y" ]]; then echo "CF信息保存在$CONFIG_FILE，可以后期修改CF信息" read -e -p "请输入你的 API_TOKEN: " API_TOKEN read -e -p "请输入你的CF用户名: " EMAIL read -e -p "请输入 zone_id（多个用空格分隔）: " -a ZONE_IDS mkdir -p /home/web/config/ echo "$API_TOKEN $EMAIL ${ZONE_IDS[*]}" > "$CONFIG_FILE" fi fi # 循环遍历每个 zone_id 并执行清除缓存命令 for ZONE_ID in "${ZONE_IDS[@]}"; do echo "正在清除缓存 for zone_id: $ZONE_ID" curl -X POST "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/purge_cache" \ -H "X-Auth-Email: $EMAIL" \ -H "X-Auth-Key: $API_TOKEN" \ -H "Content-Type: application/json" \ --data '{"purge_everything":true}' done echo "缓存清除请求已发送完毕。" } web_cache() { send_stats "清理站点缓存" cf_purge_cache cd /home/web && docker compose restart } web_del() { send_stats "删除站点数据" yuming_list="${1:-}" if [ -z "$yuming_list" ]; then read -e -p "删除站点数据，请输入你的域名（多个域名用空格隔开）: " yuming_list if [[ -z "$yuming_list" ]]; then return fi fi for yuming in $yuming_list; do echo "正在删除域名: $yuming" rm -r /home/web/html/$yuming > /dev/null 2>&1 rm /home/web/conf.d/$yuming.conf > /dev/null 2>&1 rm /home/web/certs/${yuming}_key.pem > /dev/null 2>&1 rm /home/web/certs/${yuming}_cert.pem > /dev/null 2>&1 # 将域名转换为数据库名 dbname=$(echo "$yuming" | sed -e 's/[^A-Za-z0-9]/_/g') dbrootpasswd=$(grep -oP 'MYSQL_ROOT_PASSWORD:\s*\K.*' /home/web/docker-compose.yml | tr -d '[:space:]') # 删除数据库前检查是否存在，避免报错 echo "正在删除数据库: $dbname" docker exec mysql mysql -u root -p"$dbrootpasswd" -e "DROP DATABASE ${dbname};" > /dev/null 2>&1 done docker exec nginx nginx -s reload } nginx_waf() { local mode=$1 if ! grep -q "kjlion/nginx:alpine" /home/web/docker-compose.yml; then wget -O /home/web/nginx.conf "${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/nginx10.conf" fi # 根据 mode 参数来决定开启或关闭 WAF if [ "$mode" == "on" ]; then # 开启 WAF：去掉注释 sed -i 's|# load_module /etc/nginx/modules/ngx_http_modsecurity_module.so;|load_module /etc/nginx/modules/ngx_http_modsecurity_module.so;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# modsecurity on;|\1modsecurity on;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# modsecurity_rules_file /etc/nginx/modsec/modsecurity.conf;|\1modsecurity_rules_file /etc/nginx/modsec/modsecurity.conf;|' /home/web/nginx.conf > /dev/null 2>&1 elif [ "$mode" == "off" ]; then # 关闭 WAF：加上注释 sed -i 's|^load_module /etc/nginx/modules/ngx_http_modsecurity_module.so;|# load_module /etc/nginx/modules/ngx_http_modsecurity_module.so;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)modsecurity on;|\1# modsecurity on;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)modsecurity_rules_file /etc/nginx/modsec/modsecurity.conf;|\1# modsecurity_rules_file /etc/nginx/modsec/modsecurity.conf;|' /home/web/nginx.conf > /dev/null 2>&1 else echo "无效的参数：使用 'on' 或 'off'" return 1 fi # 检查 nginx 镜像并根据情况处理 if grep -q "kjlion/nginx:alpine" /home/web/docker-compose.yml; then docker exec nginx nginx -s reload else sed -i 's|nginx:alpine|kjlion/nginx:alpine|g' /home/web/docker-compose.yml nginx_upgrade fi } check_waf_status() { if grep -q "^\s*#\s*modsecurity on;" /home/web/nginx.conf; then waf_status="" elif grep -q "modsecurity on;" /home/web/nginx.conf; then waf_status=" WAF已开启" else waf_status="" fi } check_cf_mode() { if [ -f "/etc/fail2ban/action.d/cloudflare-docker.conf" ]; then CFmessage=" cf模式已开启" else CFmessage="" fi } nginx_http_on() { local ipv4_pattern='^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$' local ipv6_pattern='^(([0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|(2[0-4][0-9]|[01]?[0-9][0-9]?))|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|(2[0-4][0-9]|[01]?[0-9][0-9]?))|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|(2[0-4][0-9]|[01]?[0-9][0-9]?))|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|(2[0-4][0-9]|[01]?[0-9][0-9]?))))$' if [[ ($yuming =~ $ipv4_pattern || $yuming =~ $ipv6_pattern) ]]; then sed -i '/if (\$scheme = http) {/,/}/s/^/#/' /home/web/conf.d/${yuming}.conf fi } patch_wp_memory_limit() { local MEMORY_LIMIT="${1:-256M}" # 第一个参数，默认256M local MAX_MEMORY_LIMIT="${2:-256M}" # 第二个参数，默认256M local TARGET_DIR="/home/web/html" # 路径写死 find "$TARGET_DIR" -type f -name "wp-config.php" | while read -r FILE; do # 删除旧定义 sed -i "/define(['\"]WP_MEMORY_LIMIT['\"].*/d" "$FILE" sed -i "/define(['\"]WP_MAX_MEMORY_LIMIT['\"].*/d" "$FILE" # 插入新定义，放在含 "Happy publishing" 的行前 awk -v insert="define('WP_MEMORY_LIMIT', '$MEMORY_LIMIT');\ndefine('WP_MAX_MEMORY_LIMIT', '$MAX_MEMORY_LIMIT');" \ ' /Happy publishing/ { print insert } { print } ' "$FILE" > "$FILE.tmp" && mv -f "$FILE.tmp" "$FILE" echo "[+] Replaced WP_MEMORY_LIMIT in $FILE" done } patch_wp_debug() { local DEBUG="${1:-false}" # 第一个参数，默认false local DEBUG_DISPLAY="${2:-false}" # 第二个参数，默认false local DEBUG_LOG="${3:-false}" # 第三个参数，默认false local TARGET_DIR="/home/web/html" # 路径写死 find "$TARGET_DIR" -type f -name "wp-config.php" | while read -r FILE; do # 删除旧定义 sed -i "/define(['\"]WP_DEBUG['\"].*/d" "$FILE" sed -i "/define(['\"]WP_DEBUG_DISPLAY['\"].*/d" "$FILE" sed -i "/define(['\"]WP_DEBUG_LOG['\"].*/d" "$FILE" # 插入新定义，放在含 "Happy publishing" 的行前 awk -v insert="define('WP_DEBUG_DISPLAY', $DEBUG_DISPLAY);\ndefine('WP_DEBUG_LOG', $DEBUG_LOG);" \ ' /Happy publishing/ { print insert } { print } ' "$FILE" > "$FILE.tmp" && mv -f "$FILE.tmp" "$FILE" echo "[+] Replaced WP_DEBUG settings in $FILE" done } patch_wp_url() { local HOME_URL="$1" local SITE_URL="$2" local TARGET_DIR="/home/web/html" find "$TARGET_DIR" -type f -name "wp-config-sample.php" | while read -r FILE; do # 删除旧定义 sed -i "/define(['\"]WP_HOME['\"].*/d" "$FILE" sed -i "/define(['\"]WP_SITEURL['\"].*/d" "$FILE" # 生成插入内容 INSERT=" define('WP_HOME', '$HOME_URL'); define('WP_SITEURL', '$SITE_URL'); " # 插入到 “Happy publishing” 之前 awk -v insert="$INSERT" ' /Happy publishing/ { print insert } { print } ' "$FILE" > "$FILE.tmp" && mv -f "$FILE.tmp" "$FILE" echo "[+] Updated WP_HOME and WP_SITEURL in $FILE" done } nginx_br() { local mode=$1 if ! grep -q "kjlion/nginx:alpine" /home/web/docker-compose.yml; then wget -O /home/web/nginx.conf "${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/nginx10.conf" fi if [ "$mode" == "on" ]; then # 开启 Brotli：去掉注释 sed -i 's|# load_module /etc/nginx/modules/ngx_http_brotli_filter_module.so;|load_module /etc/nginx/modules/ngx_http_brotli_filter_module.so;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|# load_module /etc/nginx/modules/ngx_http_brotli_static_module.so;|load_module /etc/nginx/modules/ngx_http_brotli_static_module.so;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# brotli on;|\1brotli on;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# brotli_static on;|\1brotli_static on;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# brotli_comp_level \(.*\);|\1brotli_comp_level \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# brotli_buffers \(.*\);|\1brotli_buffers \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# brotli_min_length \(.*\);|\1brotli_min_length \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# brotli_window \(.*\);|\1brotli_window \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# brotli_types \(.*\);|\1brotli_types \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i '/brotli_types/,+6 s/^\(\s*\)#\s*/\1/' /home/web/nginx.conf elif [ "$mode" == "off" ]; then # 关闭 Brotli：加上注释 sed -i 's|^load_module /etc/nginx/modules/ngx_http_brotli_filter_module.so;|# load_module /etc/nginx/modules/ngx_http_brotli_filter_module.so;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^load_module /etc/nginx/modules/ngx_http_brotli_static_module.so;|# load_module /etc/nginx/modules/ngx_http_brotli_static_module.so;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)brotli on;|\1# brotli on;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)brotli_static on;|\1# brotli_static on;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)brotli_comp_level \(.*\);|\1# brotli_comp_level \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)brotli_buffers \(.*\);|\1# brotli_buffers \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)brotli_min_length \(.*\);|\1# brotli_min_length \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)brotli_window \(.*\);|\1# brotli_window \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)brotli_types \(.*\);|\1# brotli_types \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i '/brotli_types/,+6 { /^[[:space:]]*[^#[:space:]]/ s/^\(\s*\)/\1# / }' /home/web/nginx.conf else echo "无效的参数：使用 'on' 或 'off'" return 1 fi # 检查 nginx 镜像并根据情况处理 if grep -q "kjlion/nginx:alpine" /home/web/docker-compose.yml; then docker exec nginx nginx -s reload else sed -i 's|nginx:alpine|kjlion/nginx:alpine|g' /home/web/docker-compose.yml nginx_upgrade fi } nginx_zstd() { local mode=$1 if ! grep -q "kjlion/nginx:alpine" /home/web/docker-compose.yml; then wget -O /home/web/nginx.conf "${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/nginx10.conf" fi if [ "$mode" == "on" ]; then # 开启 Zstd：去掉注释 sed -i 's|# load_module /etc/nginx/modules/ngx_http_zstd_filter_module.so;|load_module /etc/nginx/modules/ngx_http_zstd_filter_module.so;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|# load_module /etc/nginx/modules/ngx_http_zstd_static_module.so;|load_module /etc/nginx/modules/ngx_http_zstd_static_module.so;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# zstd on;|\1zstd on;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# zstd_static on;|\1zstd_static on;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# zstd_comp_level \(.*\);|\1zstd_comp_level \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# zstd_buffers \(.*\);|\1zstd_buffers \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# zstd_min_length \(.*\);|\1zstd_min_length \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)# zstd_types \(.*\);|\1zstd_types \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i '/zstd_types/,+6 s/^\(\s*\)#\s*/\1/' /home/web/nginx.conf elif [ "$mode" == "off" ]; then # 关闭 Zstd：加上注释 sed -i 's|^load_module /etc/nginx/modules/ngx_http_zstd_filter_module.so;|# load_module /etc/nginx/modules/ngx_http_zstd_filter_module.so;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^load_module /etc/nginx/modules/ngx_http_zstd_static_module.so;|# load_module /etc/nginx/modules/ngx_http_zstd_static_module.so;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)zstd on;|\1# zstd on;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)zstd_static on;|\1# zstd_static on;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)zstd_comp_level \(.*\);|\1# zstd_comp_level \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)zstd_buffers \(.*\);|\1# zstd_buffers \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)zstd_min_length \(.*\);|\1# zstd_min_length \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i 's|^\(\s*\)zstd_types \(.*\);|\1# zstd_types \2;|' /home/web/nginx.conf > /dev/null 2>&1 sed -i '/zstd_types/,+6 { /^[[:space:]]*[^#[:space:]]/ s/^\(\s*\)/\1# / }' /home/web/nginx.conf else echo "无效的参数：使用 'on' 或 'off'" return 1 fi # 检查 nginx 镜像并根据情况处理 if grep -q "kjlion/nginx:alpine" /home/web/docker-compose.yml; then docker exec nginx nginx -s reload else sed -i 's|nginx:alpine|kjlion/nginx:alpine|g' /home/web/docker-compose.yml nginx_upgrade fi } nginx_gzip() { local mode=$1 if [ "$mode" == "on" ]; then sed -i 's|^\(\s*\)# gzip on;|\1gzip on;|' /home/web/nginx.conf > /dev/null 2>&1 elif [ "$mode" == "off" ]; then sed -i 's|^\(\s*\)gzip on;|\1# gzip on;|' /home/web/nginx.conf > /dev/null 2>&1 else echo "无效的参数：使用 'on' 或 'off'" return 1 fi docker exec nginx nginx -s reload } web_security() { send_stats "LDNMP环境防御" while true; do check_f2b_status check_waf_status check_cf_mode clear echo -e "服务器网站防御程序 ${check_f2b_status}${gl_lv}${CFmessage}${waf_status}${gl_bai}" echo "------------------------" echo "1. 安装防御程序" echo "------------------------" echo "5. 查看SSH拦截记录 6. 查看网站拦截记录" echo "7. 查看防御规则列表 8. 查看日志实时监控" echo "------------------------" echo "11. 配置拦截参数 12. 清除所有拉黑的IP" echo "------------------------" echo "21. cloudflare模式 22. 高负载开启5秒盾" echo "------------------------" echo "31. 开启WAF 32. 关闭WAF" echo "33. 开启DDOS防御 34. 关闭DDOS防御" echo "------------------------" echo "9. 卸载防御程序" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) f2b_install_sshd cd /etc/fail2ban/filter.d curl -sS -O ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/fail2ban-nginx-cc.conf wget ${gh_proxy}raw.githubusercontent.com/linuxserver/fail2ban-confs/master/filter.d/nginx-418.conf wget ${gh_proxy}raw.githubusercontent.com/linuxserver/fail2ban-confs/master/filter.d/nginx-deny.conf wget ${gh_proxy}raw.githubusercontent.com/linuxserver/fail2ban-confs/master/filter.d/nginx-unauthorized.conf wget ${gh_proxy}raw.githubusercontent.com/linuxserver/fail2ban-confs/master/filter.d/nginx-bad-request.conf cd /etc/fail2ban/jail.d/ curl -sS -O ${gh_proxy}raw.githubusercontent.com/kejilion/config/main/fail2ban/nginx-docker-cc.conf sed -i "/cloudflare/d" /etc/fail2ban/jail.d/nginx-docker-cc.conf f2b_status ;; 5) echo "------------------------" f2b_sshd echo "------------------------" ;; 6) echo "------------------------" local xxx="fail2ban-nginx-cc" f2b_status_xxx echo "------------------------" local xxx="nginx-418" f2b_status_xxx echo "------------------------" local xxx="nginx-bad-request" f2b_status_xxx echo "------------------------" local xxx="nginx-badbots" f2b_status_xxx echo "------------------------" local xxx="nginx-botsearch" f2b_status_xxx echo "------------------------" local xxx="nginx-deny" f2b_status_xxx echo "------------------------" local xxx="nginx-http-auth" f2b_status_xxx echo "------------------------" local xxx="nginx-unauthorized" f2b_status_xxx echo "------------------------" local xxx="php-url-fopen" f2b_status_xxx echo "------------------------" ;; 7) fail2ban-client status ;; 8) tail -f /var/log/fail2ban.log ;; 9) remove fail2ban rm -rf /etc/fail2ban crontab -l | grep -v "CF-Under-Attack.sh" | crontab - 2>/dev/null echo "Fail2Ban防御程序已卸载" break ;; 11) install nano nano /etc/fail2ban/jail.d/nginx-docker-cc.conf f2b_status break ;; 12) fail2ban-client unban --all ;; 21) send_stats "cloudflare模式" echo "到cf后台右上角我的个人资料，选择左侧API令牌，获取Global API Key" echo "https://dash.cloudflare.com/login" read -e -p "输入CF的账号: " cfuser read -e -p "输入CF的Global API Key: " cftoken wget -O /home/web/conf.d/default.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/default11.conf docker exec nginx nginx -s reload cd /etc/fail2ban/jail.d/ curl -sS -O ${gh_proxy}raw.githubusercontent.com/kejilion/config/main/fail2ban/nginx-docker-cc.conf cd /etc/fail2ban/action.d curl -sS -O ${gh_proxy}raw.githubusercontent.com/kejilion/config/main/fail2ban/cloudflare-docker.conf sed -i "s/kejilion@outlook.com/$cfuser/g" /etc/fail2ban/action.d/cloudflare-docker.conf sed -i "s/APIKEY00000/$cftoken/g" /etc/fail2ban/action.d/cloudflare-docker.conf f2b_status echo "已配置cloudflare模式，可在cf后台，站点-安全性-事件中查看拦截记录" ;; 22) send_stats "高负载开启5秒盾" echo -e "${gl_huang}网站每5分钟自动检测，当达检测到高负载会自动开盾，低负载也会自动关闭5秒盾。${gl_bai}" echo "--------------" echo "获取CF参数: " echo -e "到cf后台右上角我的个人资料，选择左侧API令牌，获取${gl_huang}Global API Key${gl_bai}" echo -e "到cf后台域名概要页面右下方获取${gl_huang}区域ID${gl_bai}" echo "https://dash.cloudflare.com/login" echo "--------------" read -e -p "输入CF的账号: " cfuser read -e -p "输入CF的Global API Key: " cftoken read -e -p "输入CF中域名的区域ID: " cfzonID cd ~ install jq bc check_crontab_installed curl -sS -O ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/CF-Under-Attack.sh chmod +x CF-Under-Attack.sh sed -i "s/AAAA/$cfuser/g" ~/CF-Under-Attack.sh sed -i "s/BBBB/$cftoken/g" ~/CF-Under-Attack.sh sed -i "s/CCCC/$cfzonID/g" ~/CF-Under-Attack.sh local cron_job="*/5 * * * * ~/CF-Under-Attack.sh" local existing_cron=$(crontab -l 2>/dev/null | grep -F "$cron_job") if [ -z "$existing_cron" ]; then (crontab -l 2>/dev/null; echo "$cron_job") | crontab - echo "高负载自动开盾脚本已添加" else echo "自动开盾脚本已存在，无需添加" fi ;; 31) nginx_waf on echo "站点WAF已开启" send_stats "站点WAF已开启" ;; 32) nginx_waf off echo "站点WAF已关闭" send_stats "站点WAF已关闭" ;; 33) enable_ddos_defense ;; 34) disable_ddos_defense ;; *) break ;; esac break_end done } check_ldnmp_mode() { local MYSQL_CONTAINER="mysql" local MYSQL_CONF="/etc/mysql/conf.d/custom_mysql_config.cnf" # 检查 MySQL 配置文件中是否包含 4096M if docker exec "$MYSQL_CONTAINER" grep -q "4096M" "$MYSQL_CONF" 2>/dev/null; then mode_info=" 高性能模式" else mode_info=" 标准模式" fi } check_nginx_compression() { local CONFIG_FILE="/home/web/nginx.conf" # 检查 zstd 是否开启且未被注释（整行以 zstd on; 开头） if grep -qE '^\s*zstd\s+on;' "$CONFIG_FILE"; then zstd_status=" zstd压缩已开启" else zstd_status="" fi # 检查 brotli 是否开启且未被注释 if grep -qE '^\s*brotli\s+on;' "$CONFIG_FILE"; then br_status=" br压缩已开启" else br_status="" fi # 检查 gzip 是否开启且未被注释 if grep -qE '^\s*gzip\s+on;' "$CONFIG_FILE"; then gzip_status=" gzip压缩已开启" else gzip_status="" fi } web_optimization() { while true; do check_ldnmp_mode check_nginx_compression clear send_stats "优化LDNMP环境" echo -e "优化LDNMP环境${gl_lv}${mode_info}${gzip_status}${br_status}${zstd_status}${gl_bai}" echo "------------------------" echo "1. 标准模式 2. 高性能模式 (推荐2H4G以上)" echo "------------------------" echo "3. 开启gzip压缩 4. 关闭gzip压缩" echo "5. 开启br压缩 6. 关闭br压缩" echo "7. 开启zstd压缩 8. 关闭zstd压缩" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) send_stats "站点标准模式" local cpu_cores=$(nproc) local connections=$((1024 * ${cpu_cores})) sed -i "s/worker_processes.*/worker_processes ${cpu_cores};/" /home/web/nginx.conf sed -i "s/worker_connections.*/worker_connections ${connections};/" /home/web/nginx.conf # php调优 wget -O /home/optimized_php.ini ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/optimized_php.ini docker cp /home/optimized_php.ini php:/usr/local/etc/php/conf.d/optimized_php.ini docker cp /home/optimized_php.ini php74:/usr/local/etc/php/conf.d/optimized_php.ini rm -rf /home/optimized_php.ini # php调优 wget -O /home/www.conf ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/www-1.conf docker cp /home/www.conf php:/usr/local/etc/php-fpm.d/www.conf docker cp /home/www.conf php74:/usr/local/etc/php-fpm.d/www.conf rm -rf /home/www.conf patch_wp_memory_limit patch_wp_debug fix_phpfpm_conf php fix_phpfpm_conf php74 # mysql调优 wget -O /home/custom_mysql_config.cnf ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/custom_mysql_config-1.cnf docker cp /home/custom_mysql_config.cnf mysql:/etc/mysql/conf.d/ rm -rf /home/custom_mysql_config.cnf cd /home/web && docker compose restart optimize_balanced echo "LDNMP环境已设置成 标准模式" ;; 2) send_stats "站点高性能模式" # nginx调优 local cpu_cores=$(nproc) local connections=$((2048 * ${cpu_cores})) sed -i "s/worker_processes.*/worker_processes ${cpu_cores};/" /home/web/nginx.conf sed -i "s/worker_connections.*/worker_connections ${connections};/" /home/web/nginx.conf # php调优 wget -O /home/optimized_php.ini ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/optimized_php.ini docker cp /home/optimized_php.ini php:/usr/local/etc/php/conf.d/optimized_php.ini docker cp /home/optimized_php.ini php74:/usr/local/etc/php/conf.d/optimized_php.ini rm -rf /home/optimized_php.ini # php调优 wget -O /home/www.conf ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/www.conf docker cp /home/www.conf php:/usr/local/etc/php-fpm.d/www.conf docker cp /home/www.conf php74:/usr/local/etc/php-fpm.d/www.conf rm -rf /home/www.conf patch_wp_memory_limit 512M 512M patch_wp_debug fix_phpfpm_conf php fix_phpfpm_conf php74 # mysql调优 wget -O /home/custom_mysql_config.cnf ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/custom_mysql_config.cnf docker cp /home/custom_mysql_config.cnf mysql:/etc/mysql/conf.d/ rm -rf /home/custom_mysql_config.cnf cd /home/web && docker compose restart optimize_web_server echo "LDNMP环境已设置成 高性能模式" ;; 3) send_stats "nginx_gzip on" nginx_gzip on ;; 4) send_stats "nginx_gzip off" nginx_gzip off ;; 5) send_stats "nginx_br on" nginx_br on ;; 6) send_stats "nginx_br off" nginx_br off ;; 7) send_stats "nginx_zstd on" nginx_zstd on ;; 8) send_stats "nginx_zstd off" nginx_zstd off ;; *) break ;; esac break_end done } check_docker_app() { if docker ps -a --format '{{.Names}}' 2>/dev/null | grep -q "$docker_name" ; then check_docker="${gl_lv}已安装${gl_bai}" else check_docker="${gl_hui}未安装${gl_bai}" fi } # check_docker_app() { # if docker ps -a --format '{{.Names}}' 2>/dev/null | grep -q "$docker_name"; then # check_docker="${gl_lv}已安装${gl_bai}" # else # check_docker="${gl_hui}未安装${gl_bai}" # fi # } check_docker_app_ip() { echo "------------------------" echo "访问地址:" ip_address if [ -n "$ipv4_address" ]; then echo "http://$ipv4_address:${docker_port}" fi if [ -n "$ipv6_address" ]; then echo "http://[$ipv6_address]:${docker_port}" fi local search_pattern1="$ipv4_address:${docker_port}" local search_pattern2="127.0.0.1:${docker_port}" for file in /home/web/conf.d/*; do if [ -f "$file" ]; then if grep -q "$search_pattern1" "$file" 2>/dev/null || grep -q "$search_pattern2" "$file" 2>/dev/null; then echo "https://$(basename "$file" | sed 's/\.conf$//')" fi fi done } check_docker_image_update() { local container_name=$1 update_status="" # 1. 区域检查 local country=$(curl -s --max-time 2 ipinfo.io/country) [[ "$country" == "CN" ]] && return # 2. 获取本地镜像信息 local container_info=$(docker inspect --format='{{.Created}},{{.Config.Image}}' "$container_name" 2>/dev/null) [[ -z "$container_info" ]] && return local container_created=$(echo "$container_info" | cut -d',' -f1) local full_image_name=$(echo "$container_info" | cut -d',' -f2) local container_created_ts=$(date -d "$container_created" +%s 2>/dev/null) # 3. 智能路由判断 if [[ "$full_image_name" == ghcr.io* ]]; then # --- 场景 A: 镜像在 GitHub (ghcr.io) --- # 提取仓库路径，例如 ghcr.io/onexru/oneimg -> onexru/oneimg local repo_path=$(echo "$full_image_name" | sed 's/ghcr.io\///' | cut -d':' -f1) # 注意：ghcr.io 的 API 比较复杂，通常最快的方法是查 GitHub Repo 的 Release local api_url="https://api.github.com/repos/$repo_path/releases/latest" local remote_date=$(curl -s "$api_url" | jq -r '.published_at' 2>/dev/null) elif [[ "$full_image_name" == *"oneimg"* ]]; then # --- 场景 B: 特殊指定 (即便在 Docker Hub，也想通过 GitHub Release 判断) --- local api_url="https://api.github.com/repos/onexru/oneimg/releases/latest" local remote_date=$(curl -s "$api_url" | jq -r '.published_at' 2>/dev/null) else # --- 场景 C: 标准 Docker Hub --- local image_repo=${full_image_name%%:*} local image_tag=${full_image_name##*:} [[ "$image_repo" == "$image_tag" ]] && image_tag="latest" [[ "$image_repo" != */* ]] && image_repo="library/$image_repo" local api_url="https://hub.docker.com/v2/repositories/$image_repo/tags/$image_tag" local remote_date=$(curl -s "$api_url" | jq -r '.last_updated' 2>/dev/null) fi # 4. 时间戳对比 if [[ -n "$remote_date" && "$remote_date" != "null" ]]; then local remote_ts=$(date -d "$remote_date" +%s 2>/dev/null) if [[ $container_created_ts -lt $remote_ts ]]; then update_status="${gl_huang}发现新版本!${gl_bai}" fi fi } block_container_port() { local container_name_or_id=$1 local allowed_ip=$2 # 获取容器的 IP 地址 local container_ip=$(docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' "$container_name_or_id") if [ -z "$container_ip" ]; then return 1 fi install iptables # 检查并封禁其他所有 IP if ! iptables -C DOCKER-USER -p tcp -d "$container_ip" -j DROP &>/dev/null; then iptables -I DOCKER-USER -p tcp -d "$container_ip" -j DROP fi # 检查并放行指定 IP if ! iptables -C DOCKER-USER -p tcp -s "$allowed_ip" -d "$container_ip" -j ACCEPT &>/dev/null; then iptables -I DOCKER-USER -p tcp -s "$allowed_ip" -d "$container_ip" -j ACCEPT fi # 检查并放行本地网络 127.0.0.0/8 if ! iptables -C DOCKER-USER -p tcp -s 127.0.0.0/8 -d "$container_ip" -j ACCEPT &>/dev/null; then iptables -I DOCKER-USER -p tcp -s 127.0.0.0/8 -d "$container_ip" -j ACCEPT fi # 检查并封禁其他所有 IP if ! iptables -C DOCKER-USER -p udp -d "$container_ip" -j DROP &>/dev/null; then iptables -I DOCKER-USER -p udp -d "$container_ip" -j DROP fi # 检查并放行指定 IP if ! iptables -C DOCKER-USER -p udp -s "$allowed_ip" -d "$container_ip" -j ACCEPT &>/dev/null; then iptables -I DOCKER-USER -p udp -s "$allowed_ip" -d "$container_ip" -j ACCEPT fi # 检查并放行本地网络 127.0.0.0/8 if ! iptables -C DOCKER-USER -p udp -s 127.0.0.0/8 -d "$container_ip" -j ACCEPT &>/dev/null; then iptables -I DOCKER-USER -p udp -s 127.0.0.0/8 -d "$container_ip" -j ACCEPT fi if ! iptables -C DOCKER-USER -m state --state ESTABLISHED,RELATED -d "$container_ip" -j ACCEPT &>/dev/null; then iptables -I DOCKER-USER -m state --state ESTABLISHED,RELATED -d "$container_ip" -j ACCEPT fi echo "已阻止IP+端口访问该服务" save_iptables_rules } clear_container_rules() { local container_name_or_id=$1 local allowed_ip=$2 # 获取容器的 IP 地址 local container_ip=$(docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' "$container_name_or_id") if [ -z "$container_ip" ]; then return 1 fi install iptables # 清除封禁其他所有 IP 的规则 if iptables -C DOCKER-USER -p tcp -d "$container_ip" -j DROP &>/dev/null; then iptables -D DOCKER-USER -p tcp -d "$container_ip" -j DROP fi # 清除放行指定 IP 的规则 if iptables -C DOCKER-USER -p tcp -s "$allowed_ip" -d "$container_ip" -j ACCEPT &>/dev/null; then iptables -D DOCKER-USER -p tcp -s "$allowed_ip" -d "$container_ip" -j ACCEPT fi # 清除放行本地网络 127.0.0.0/8 的规则 if iptables -C DOCKER-USER -p tcp -s 127.0.0.0/8 -d "$container_ip" -j ACCEPT &>/dev/null; then iptables -D DOCKER-USER -p tcp -s 127.0.0.0/8 -d "$container_ip" -j ACCEPT fi # 清除封禁其他所有 IP 的规则 if iptables -C DOCKER-USER -p udp -d "$container_ip" -j DROP &>/dev/null; then iptables -D DOCKER-USER -p udp -d "$container_ip" -j DROP fi # 清除放行指定 IP 的规则 if iptables -C DOCKER-USER -p udp -s "$allowed_ip" -d "$container_ip" -j ACCEPT &>/dev/null; then iptables -D DOCKER-USER -p udp -s "$allowed_ip" -d "$container_ip" -j ACCEPT fi # 清除放行本地网络 127.0.0.0/8 的规则 if iptables -C DOCKER-USER -p udp -s 127.0.0.0/8 -d "$container_ip" -j ACCEPT &>/dev/null; then iptables -D DOCKER-USER -p udp -s 127.0.0.0/8 -d "$container_ip" -j ACCEPT fi if iptables -C DOCKER-USER -m state --state ESTABLISHED,RELATED -d "$container_ip" -j ACCEPT &>/dev/null; then iptables -D DOCKER-USER -m state --state ESTABLISHED,RELATED -d "$container_ip" -j ACCEPT fi echo "已允许IP+端口访问该服务" save_iptables_rules } block_host_port() { local port=$1 local allowed_ip=$2 if [[ -z "$port" || -z "$allowed_ip" ]]; then echo "错误：请提供端口号和允许访问的 IP。" echo "用法: block_host_port <端口号> <允许的IP>" return 1 fi install iptables # 拒绝其他所有 IP 访问 if ! iptables -C INPUT -p tcp --dport "$port" -j DROP &>/dev/null; then iptables -I INPUT -p tcp --dport "$port" -j DROP fi # 允许指定 IP 访问 if ! iptables -C INPUT -p tcp --dport "$port" -s "$allowed_ip" -j ACCEPT &>/dev/null; then iptables -I INPUT -p tcp --dport "$port" -s "$allowed_ip" -j ACCEPT fi # 允许本机访问 if ! iptables -C INPUT -p tcp --dport "$port" -s 127.0.0.0/8 -j ACCEPT &>/dev/null; then iptables -I INPUT -p tcp --dport "$port" -s 127.0.0.0/8 -j ACCEPT fi # 拒绝其他所有 IP 访问 if ! iptables -C INPUT -p udp --dport "$port" -j DROP &>/dev/null; then iptables -I INPUT -p udp --dport "$port" -j DROP fi # 允许指定 IP 访问 if ! iptables -C INPUT -p udp --dport "$port" -s "$allowed_ip" -j ACCEPT &>/dev/null; then iptables -I INPUT -p udp --dport "$port" -s "$allowed_ip" -j ACCEPT fi # 允许本机访问 if ! iptables -C INPUT -p udp --dport "$port" -s 127.0.0.0/8 -j ACCEPT &>/dev/null; then iptables -I INPUT -p udp --dport "$port" -s 127.0.0.0/8 -j ACCEPT fi # 允许已建立和相关连接的流量 if ! iptables -C INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT &>/dev/null; then iptables -I INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT fi echo "已阻止IP+端口访问该服务" save_iptables_rules } clear_host_port_rules() { local port=$1 local allowed_ip=$2 if [[ -z "$port" || -z "$allowed_ip" ]]; then echo "错误：请提供端口号和允许访问的 IP。" echo "用法: clear_host_port_rules <端口号> <允许的IP>" return 1 fi install iptables # 清除封禁所有其他 IP 访问的规则 if iptables -C INPUT -p tcp --dport "$port" -j DROP &>/dev/null; then iptables -D INPUT -p tcp --dport "$port" -j DROP fi # 清除允许本机访问的规则 if iptables -C INPUT -p tcp --dport "$port" -s 127.0.0.0/8 -j ACCEPT &>/dev/null; then iptables -D INPUT -p tcp --dport "$port" -s 127.0.0.0/8 -j ACCEPT fi # 清除允许指定 IP 访问的规则 if iptables -C INPUT -p tcp --dport "$port" -s "$allowed_ip" -j ACCEPT &>/dev/null; then iptables -D INPUT -p tcp --dport "$port" -s "$allowed_ip" -j ACCEPT fi # 清除封禁所有其他 IP 访问的规则 if iptables -C INPUT -p udp --dport "$port" -j DROP &>/dev/null; then iptables -D INPUT -p udp --dport "$port" -j DROP fi # 清除允许本机访问的规则 if iptables -C INPUT -p udp --dport "$port" -s 127.0.0.0/8 -j ACCEPT &>/dev/null; then iptables -D INPUT -p udp --dport "$port" -s 127.0.0.0/8 -j ACCEPT fi # 清除允许指定 IP 访问的规则 if iptables -C INPUT -p udp --dport "$port" -s "$allowed_ip" -j ACCEPT &>/dev/null; then iptables -D INPUT -p udp --dport "$port" -s "$allowed_ip" -j ACCEPT fi echo "已允许IP+端口访问该服务" save_iptables_rules } setup_docker_dir() { mkdir -p /home /home/docker 2>/dev/null if [ -d "/vol1/1000/" ] && [ ! -d "/vol1/1000/docker" ]; then cp -f /home/docker /home/docker1 2>/dev/null rm -rf /home/docker 2>/dev/null mkdir -p /vol1/1000/docker 2>/dev/null ln -s /vol1/1000/docker /home/docker 2>/dev/null fi if [ -d "/volume1/" ] && [ ! -d "/volume1/docker" ]; then cp -f /home/docker /home/docker1 2>/dev/null rm -rf /home/docker 2>/dev/null mkdir -p /volume1/docker 2>/dev/null ln -s /volume1/docker /home/docker 2>/dev/null fi } add_app_id() { mkdir -p /home/docker touch /home/docker/appno.txt grep -qxF "${app_id}" /home/docker/appno.txt || echo "${app_id}" >> /home/docker/appno.txt } docker_app() { send_stats "${docker_name}管理" while true; do clear check_docker_app check_docker_image_update "${docker_app_service:-$docker_name}" echo -e "$docker_name $check_docker $update_status" echo "$docker_describe" echo "$docker_url" if docker ps -a --format '{{.Names}}' 2>/dev/null | grep -q "$docker_name"; then if [ ! -f "/home/docker/${docker_name}_port.conf" ]; then local docker_port=$(docker port "$docker_name" | head -n1 | awk -F'[:]' '/->/ {print $NF; exit}') docker_port=${docker_port:-0000} echo "$docker_port" > "/home/docker/${docker_name}_port.conf" fi local docker_port=$(cat "/home/docker/${docker_name}_port.conf") check_docker_app_ip fi echo "" echo "------------------------" echo "1. 安装 2. 更新 3. 卸载" echo "------------------------" echo "5. 添加域名访问 6. 删除域名访问" echo "7. 允许IP+端口访问 8. 阻止IP+端口访问" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " choice case $choice in 1) setup_docker_dir check_disk_space $app_size /home/docker while true; do read -e -p "输入应用对外服务端口，回车默认使用${docker_port}端口: " app_port local app_port=${app_port:-${docker_port}} if ss -tuln | grep -q ":$app_port "; then echo -e "${gl_hong}错误: ${gl_bai}端口 $app_port 已被占用，请更换一个端口" send_stats "应用端口已被占用" else local docker_port=$app_port break fi done install jq install_docker docker_rum echo "$docker_port" > "/home/docker/${docker_name}_port.conf" add_app_id clear echo "$docker_name 已经安装完成" check_docker_app_ip echo "" $docker_use $docker_passwd send_stats "安装$docker_name" ;; 2) docker rm -f "$docker_name" docker rmi -f "$docker_img" docker_rum add_app_id clear echo "$docker_name 已经安装完成" check_docker_app_ip echo "" $docker_use $docker_passwd send_stats "更新$docker_name" ;; 3) docker rm -f "$docker_name" docker rmi -f "$docker_img" rm -rf "/home/docker/$docker_name" rm -f /home/docker/${docker_name}_port.conf sed -i "/\b${app_id}\b/d" /home/docker/appno.txt echo "应用已卸载" send_stats "卸载$docker_name" ;; 5) echo "${docker_name}域名访问设置" send_stats "${docker_name}域名访问设置" add_yuming ldnmp_Proxy ${yuming} 127.0.0.1 ${docker_port} block_container_port "$docker_name" "$ipv4_address" ;; 6) echo "域名格式 example.com 不带https://" web_del ;; 7) send_stats "允许IP访问 ${docker_name}" clear_container_rules "$docker_name" "$ipv4_address" ;; 8) send_stats "阻止IP访问 ${docker_name}" block_container_port "$docker_name" "$ipv4_address" ;; *) break ;; esac break_end done } docker_app_plus() { send_stats "$app_name" while true; do clear check_docker_app check_docker_image_update $docker_name echo -e "$app_name $check_docker $update_status" echo "$app_text" echo "$app_url" local docker_check_name="${docker_app_service:-$docker_name}" if docker ps -a --format '{{.Names}}' 2>/dev/null | grep -q "$docker_check_name"; then if [ ! -f "/home/docker/${docker_name}_port.conf" ]; then local docker_port=$(docker port "$docker_check_name" | head -n1 | awk -F'[:]' '/->/ {print $NF; exit}') docker_port=${docker_port:-0000} echo "$docker_port" > "/home/docker/${docker_name}_port.conf" fi local docker_port=$(cat "/home/docker/${docker_name}_port.conf") check_docker_app_ip fi echo "" echo "------------------------" echo "1. 安装 2. 更新 3. 卸载" echo "------------------------" echo "5. 添加域名访问 6. 删除域名访问" echo "7. 允许IP+端口访问 8. 阻止IP+端口访问" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "输入你的选择: " choice case $choice in 1) setup_docker_dir check_disk_space $app_size /home/docker while true; do read -e -p "输入应用对外服务端口，回车默认使用${docker_port}端口: " app_port local app_port=${app_port:-${docker_port}} if ss -tuln | grep -q ":$app_port "; then echo -e "${gl_hong}错误: ${gl_bai}端口 $app_port 已被占用，请更换一个端口" send_stats "应用端口已被占用" else local docker_port=$app_port break fi done install jq install_docker docker_app_install echo "$docker_port" > "/home/docker/${docker_name}_port.conf" add_app_id send_stats "$app_name 安装" ;; 2) docker_app_update add_app_id send_stats "$app_name 更新" ;; 3) docker_app_uninstall rm -f /home/docker/${docker_name}_port.conf sed -i "/\b${app_id}\b/d" /home/docker/appno.txt send_stats "$app_name 卸载" ;; 5) echo "${docker_name}域名访问设置" send_stats "${docker_name}域名访问设置" add_yuming ldnmp_Proxy ${yuming} 127.0.0.1 ${docker_port} local docker_check_name="${docker_app_service:-$docker_name}" block_container_port "$docker_check_name" "$ipv4_address" ;; 6) echo "域名格式 example.com 不带https://" web_del ;; 7) send_stats "允许IP访问 ${docker_name}" clear_container_rules "$docker_name" "$ipv4_address" ;; 8) send_stats "阻止IP访问 ${docker_name}" local docker_check_name="${docker_app_service:-$docker_name}" block_container_port "$docker_check_name" "$ipv4_address" ;; *) break ;; esac break_end done } prometheus_install() { local PROMETHEUS_DIR="/home/docker/monitoring/prometheus" local GRAFANA_DIR="/home/docker/monitoring/grafana" local NETWORK_NAME="monitoring" # Create necessary directories mkdir -p $PROMETHEUS_DIR mkdir -p $GRAFANA_DIR # Set correct ownership for Grafana directory chown -R 472:472 $GRAFANA_DIR if [ ! -f "$PROMETHEUS_DIR/prometheus.yml" ]; then curl -o "$PROMETHEUS_DIR/prometheus.yml" ${gh_proxy}raw.githubusercontent.com/kejilion/config/refs/heads/main/prometheus/prometheus.yml fi # Create Docker network for monitoring docker network create $NETWORK_NAME # Run Node Exporter container docker run -d \ --name=node-exporter \ --network $NETWORK_NAME \ --restart=always \ prom/node-exporter # Run Prometheus container docker run -d \ --name prometheus \ -v $PROMETHEUS_DIR/prometheus.yml:/etc/prometheus/prometheus.yml \ -v $PROMETHEUS_DIR/data:/prometheus \ --network $NETWORK_NAME \ --restart=always \ --user 0:0 \ prom/prometheus:latest # Run Grafana container docker run -d \ --name grafana \ -p ${docker_port}:3000 \ -v $GRAFANA_DIR:/var/lib/grafana \ --network $NETWORK_NAME \ --restart=always \ grafana/grafana:latest } tmux_run() { # Check if the session already exists tmux has-session -t $SESSION_NAME 2>/dev/null # $? is a special variable that holds the exit status of the last executed command if [ $? != 0 ]; then # Session doesn't exist, create a new one tmux new -s $SESSION_NAME else # Session exists, attach to it tmux attach-session -t $SESSION_NAME fi } tmux_run_d() { local base_name="tmuxd" local tmuxd_ID=1 # 检查会话是否存在的函数 session_exists() { tmux has-session -t $1 2>/dev/null } # 循环直到找到一个不存在的会话名称 while session_exists "$base_name-$tmuxd_ID"; do local tmuxd_ID=$((tmuxd_ID + 1)) done # 创建新的 tmux 会话 tmux new -d -s "$base_name-$tmuxd_ID" "$tmuxd" } f2b_status() { fail2ban-client reload sleep 3 fail2ban-client status } f2b_status_xxx() { fail2ban-client status $xxx } check_f2b_status() { if command -v fail2ban-client >/dev/null 2>&1; then check_f2b_status="${gl_lv}已安装${gl_bai}" else check_f2b_status="${gl_hui}未安装${gl_bai}" fi } f2b_install_sshd() { docker rm -f fail2ban >/dev/null 2>&1 install fail2ban start fail2ban enable fail2ban if command -v dnf &>/dev/null; then cd /etc/fail2ban/jail.d/ curl -sS -O ${gh_proxy}raw.githubusercontent.com/kejilion/config/main/fail2ban/centos-ssh.conf fi if command -v apt &>/dev/null; then install rsyslog systemctl start rsyslog systemctl enable rsyslog fi } f2b_sshd() { if grep -q 'Alpine' /etc/issue; then xxx=alpine-sshd f2b_status_xxx else xxx=sshd f2b_status_xxx fi } # 基础参数配置：封禁时长(bantime)、时间窗口(findtime)、重试次数(maxretry) # 说明： # - 优先写入 /etc/fail2ban/jail.d/sshd.local（覆盖默认 jail 配置，升级不易丢） # - 若是 Alpine 且 jail 名称不同，依然写 sshd.local；Fail2Ban 会按 jail 名称匹配 f2b_basic_config() { root_use install nano if ! command -v fail2ban-client >/dev/null 2>&1; then echo -e "${gl_hui}未检测到 fail2ban-client，请先安装 fail2ban。${gl_bai}" return fi local jail_name="sshd" if grep -qi 'Alpine' /etc/issue 2>/dev/null; then # Alpine 默认 jail 通常为 sshd；仅当检测到自定义 alpine-sshd 规则时才切换 if [ -f /etc/fail2ban/filter.d/alpine-sshd.conf ] || [ -f /etc/fail2ban/jail.d/alpine-ssh.conf ] || [ -f /etc/fail2ban/jail.d/alpine-sshd.local ]; then jail_name="alpine-sshd" fi fi echo "即将配置 SSH jail：$jail_name" read -e -p "封禁时长 bantime (秒/分钟/小时，如 3600 或 1h) [默认 1h]: " bantime read -e -p "时间窗口 findtime (秒/分钟/小时，如 600 或 10m) [默认 10m]: " findtime read -e -p "重试次数 maxretry (整数) [默认 5]: " maxretry bantime=${bantime:-1h} findtime=${findtime:-10m} maxretry=${maxretry:-5} mkdir -p /etc/fail2ban/jail.d cat > /etc/fail2ban/jail.d/sshd.local <> /etc/fail2ban/jail.d/sshd.local fi fi echo -e "${gl_lv}已写入配置${gl_bai}: /etc/fail2ban/jail.d/sshd.local" fail2ban-client reload >/dev/null 2>&1 || true sleep 2 fail2ban-client status $jail_name || true } # 直接打开主配置/覆盖配置编辑（nano） # 优先编辑 /etc/fail2ban/jail.d/sshd.local（更安全），若不存在则创建 f2b_edit_config() { root_use install nano if [ ! -d /etc/fail2ban ]; then echo -e "${gl_hui}/etc/fail2ban 不存在，请先安装 fail2ban。${gl_bai}" return fi mkdir -p /etc/fail2ban/jail.d local cfg="/etc/fail2ban/jail.d/sshd.local" [ -f "$cfg" ] || printf "[sshd]\n# bantime/findtime/maxretry\n" > "$cfg" nano "$cfg" echo -e "${gl_lv}已保存${gl_bai}，正在 reload fail2ban..." fail2ban-client reload >/dev/null 2>&1 || true } server_reboot() { read -e -p "$(echo -e "${gl_huang}提示: ${gl_bai}现在重启服务器吗？(Y/N): ")" rboot case "$rboot" in [Yy]) echo "已重启" reboot ;; *) echo "已取消" ;; esac } output_status() { output=$(awk 'BEGIN { rx_total = 0; tx_total = 0 } $1 ~ /^(eth|ens|enp|eno)[0-9]+/ { rx_total += $2 tx_total += $10 } END { rx_units = "Bytes"; tx_units = "Bytes"; if (rx_total > 1024) { rx_total /= 1024; rx_units = "K"; } if (rx_total > 1024) { rx_total /= 1024; rx_units = "M"; } if (rx_total > 1024) { rx_total /= 1024; rx_units = "G"; } if (tx_total > 1024) { tx_total /= 1024; tx_units = "K"; } if (tx_total > 1024) { tx_total /= 1024; tx_units = "M"; } if (tx_total > 1024) { tx_total /= 1024; tx_units = "G"; } printf("%.2f%s %.2f%s\n", rx_total, rx_units, tx_total, tx_units); }' /proc/net/dev) rx=$(echo "$output" | awk '{print $1}') tx=$(echo "$output" | awk '{print $2}') } ldnmp_install_status_one() { if docker inspect "php" &>/dev/null; then clear send_stats "无法再次安装LDNMP环境" echo -e "${gl_huang}提示: ${gl_bai}建站环境已安装。无需再次安装！" break_end linux_ldnmp fi } ldnmp_install_all() { cd ~ send_stats "安装LDNMP环境" root_use clear echo -e "${gl_huang}LDNMP环境未安装，开始安装LDNMP环境...${gl_bai}" check_disk_space 3 /home install_dependency install_docker install_certbot install_ldnmp_conf install_ldnmp } nginx_install_all() { cd ~ send_stats "安装nginx环境" root_use clear echo -e "${gl_huang}nginx未安装，开始安装nginx环境...${gl_bai}" install_dependency install_docker install_certbot install_ldnmp_conf nginx_upgrade clear local nginx_version=$(docker exec nginx nginx -v 2>&1) local nginx_version=$(echo "$nginx_version" | grep -oP "nginx/\K[0-9]+\.[0-9]+\.[0-9]+") echo "nginx已安装完成" echo -e "当前版本: ${gl_huang}v$nginx_version${gl_bai}" echo "" } ldnmp_install_status() { if ! docker inspect "php" &>/dev/null; then send_stats "请先安装LDNMP环境" ldnmp_install_all fi } nginx_install_status() { if ! docker inspect "nginx" &>/dev/null; then send_stats "请先安装nginx环境" nginx_install_all fi } ldnmp_web_on() { clear echo "您的 $webname 搭建好了！" echo "https://$yuming" echo "------------------------" echo "$webname 安装信息如下: " } nginx_web_on() { clear local ipv4_pattern='^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$' local ipv6_pattern='^(([0-9A-Fa-f]{1,4}:){1,7}:|([0-9A-Fa-f]{1,4}:){7,7}[0-9A-Fa-f]{1,4}|::1)$' echo "您的 $webname 搭建好了！" if [[ "$yuming" =~ $ipv4_pattern || "$yuming" =~ $ipv6_pattern ]]; then mv /home/web/conf.d/"$yuming".conf /home/web/conf.d/"${yuming}_${access_port}".conf echo "http://$yuming:$access_port" elif grep -q '^[[:space:]]*#.*if (\$scheme = http)' "/home/web/conf.d/"$yuming".conf"; then echo "http://$yuming" else echo "https://$yuming" fi } ldnmp_wp() { clear # wordpress webname="WordPress" yuming="${1:-}" send_stats "安装$webname" echo "开始部署 $webname" if [ -z "$yuming" ]; then add_yuming fi repeat_add_yuming ldnmp_install_status install_ssltls certs_status add_db wget -O /home/web/conf.d/map.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/map.conf wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/wordpress.com.conf sed -i "s/yuming.com/$yuming/g" /home/web/conf.d/$yuming.conf nginx_http_on cd /home/web/html mkdir $yuming cd $yuming wget -O latest.zip ${gh_proxy}github.com/kejilion/Website_source_code/raw/refs/heads/main/wp-latest.zip unzip latest.zip rm latest.zip echo "define('FS_METHOD', 'direct'); define('WP_REDIS_HOST', 'redis'); define('WP_REDIS_PORT', '6379'); define('WP_REDIS_MAXTTL', 86400); define('WP_CACHE_KEY_SALT', '${yuming}_');" >> /home/web/html/$yuming/wordpress/wp-config-sample.php sed -i "s|database_name_here|$dbname|g" /home/web/html/$yuming/wordpress/wp-config-sample.php sed -i "s|username_here|$dbuse|g" /home/web/html/$yuming/wordpress/wp-config-sample.php sed -i "s|password_here|$dbusepasswd|g" /home/web/html/$yuming/wordpress/wp-config-sample.php sed -i "s|localhost|mysql|g" /home/web/html/$yuming/wordpress/wp-config-sample.php patch_wp_url "https://$yuming" "https://$yuming" cp /home/web/html/$yuming/wordpress/wp-config-sample.php /home/web/html/$yuming/wordpress/wp-config.php restart_ldnmp nginx_web_on } ldnmp_Proxy() { clear webname="反向代理-IP+端口" yuming="${1:-}" reverseproxy="${2:-}" port="${3:-}" send_stats "安装$webname" echo "开始部署 $webname" if [ -z "$yuming" ]; then add_yuming fi check_ip_and_get_access_port "$yuming" if [ -z "$reverseproxy" ]; then read -e -p "请输入你的反代IP (回车默认本机IP 127.0.0.1): " reverseproxy reverseproxy=${reverseproxy:-127.0.0.1} fi if [ -z "$port" ]; then read -e -p "请输入你的反代端口: " port fi nginx_install_status install_ssltls certs_status wget -O /home/web/conf.d/map.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/map.conf wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/reverse-proxy-backend.conf backend=$(tr -dc 'A-Za-z' < /dev/urandom | head -c 8) sed -i "s/backend_yuming_com/backend_$backend/g" /home/web/conf.d/"$yuming".conf sed -i "s/yuming.com/$yuming/g" /home/web/conf.d/$yuming.conf reverseproxy_port="$reverseproxy:$port" upstream_servers="" for server in $reverseproxy_port; do upstream_servers="$upstream_servers server $server;\n" done sed -i "s/# 动态添加/$upstream_servers/g" /home/web/conf.d/$yuming.conf sed -i '/remote_addr/d' /home/web/conf.d/$yuming.conf update_nginx_listen_port "$yuming" "$access_port" nginx_http_on docker exec nginx nginx -s reload nginx_web_on } ldnmp_Proxy_backend() { clear webname="反向代理-负载均衡" send_stats "安装$webname" echo "开始部署 $webname" if [ -z "$yuming" ]; then add_yuming fi check_ip_and_get_access_port "$yuming" if [ -z "$reverseproxy_port" ]; then read -e -p "请输入你的多个反代IP+端口用空格隔开（例如 127.0.0.1:3000 127.0.0.1:3002）： " reverseproxy_port fi nginx_install_status install_ssltls certs_status wget -O /home/web/conf.d/map.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/map.conf wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/reverse-proxy-backend.conf backend=$(tr -dc 'A-Za-z' < /dev/urandom | head -c 8) sed -i "s/backend_yuming_com/backend_$backend/g" /home/web/conf.d/"$yuming".conf sed -i "s/yuming.com/$yuming/g" /home/web/conf.d/$yuming.conf upstream_servers="" for server in $reverseproxy_port; do upstream_servers="$upstream_servers server $server;\n" done sed -i "s/# 动态添加/$upstream_servers/g" /home/web/conf.d/$yuming.conf update_nginx_listen_port "$yuming" "$access_port" nginx_http_on docker exec nginx nginx -s reload nginx_web_on } list_stream_services() { STREAM_DIR="/home/web/stream.d" printf "%-25s %-18s %-25s %-20s\n" "服务名" "通信类型" "本机地址" "后端地址" if [ -z "$(ls -A "$STREAM_DIR")" ]; then return fi for conf in "$STREAM_DIR"/*; do # 服务名取文件名 service_name=$(basename "$conf" .conf) # 获取 upstream 块中的 server 后端 IP:端口 backend=$(grep -Po '(?<=server )[^;]+' "$conf" | head -n1) # 获取 listen 端口 listen_port=$(grep -Po '(?<=listen )[^;]+' "$conf" | head -n1) # 默认本地 IP ip_address local_ip="$ipv4_address" # 获取通信类型，优先从文件名后缀或内容判断 if grep -qi 'udp;' "$conf"; then proto="udp" else proto="tcp" fi # 拼接监听 IP:端口 local_addr="$local_ip:$listen_port" printf "%-22s %-14s %-21s %-20s\n" "$service_name" "$proto" "$local_addr" "$backend" done } stream_panel() { send_stats "Stream四层代理" local app_id="104" local docker_name="nginx" while true; do clear check_docker_app check_docker_image_update $docker_name echo -e "Stream四层代理转发工具 $check_docker $update_status" echo "NGINX Stream 是 NGINX 的 TCP/UDP 代理模块，用于实现高性能的 传输层流量转发和负载均衡。" echo "------------------------" if [ -d "/home/web/stream.d" ]; then list_stream_services fi echo "" echo "------------------------" echo "1. 安装 2. 更新 3. 卸载" echo "------------------------" echo "4. 添加转发服务 5. 修改转发服务 6. 删除转发服务" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "输入你的选择: " choice case $choice in 1) nginx_install_status add_app_id send_stats "安装Stream四层代理" ;; 2) update_docker_compose_with_db_creds nginx_upgrade add_app_id send_stats "更新Stream四层代理" ;; 3) read -e -p "确定要删除 nginx 容器吗？这可能会影响网站功能！(y/N): " confirm if [[ "$confirm" =~ ^[Yy]$ ]]; then docker rm -f nginx sed -i "/\b${app_id}\b/d" /home/docker/appno.txt send_stats "更新Stream四层代理" echo "nginx 容器已删除。" else echo "操作已取消。" fi ;; 4) ldnmp_Proxy_backend_stream add_app_id send_stats "添加四层代理" ;; 5) send_stats "编辑转发配置" read -e -p "请输入你要编辑的服务名: " stream_name install nano nano /home/web/stream.d/$stream_name.conf docker restart nginx send_stats "修改四层代理" ;; 6) send_stats "删除转发配置" read -e -p "请输入你要删除的服务名: " stream_name rm /home/web/stream.d/$stream_name.conf > /dev/null 2>&1 docker restart nginx send_stats "删除四层代理" ;; *) break ;; esac break_end done } ldnmp_Proxy_backend_stream() { clear webname="Stream四层代理-负载均衡" send_stats "安装$webname" echo "开始部署 $webname" # 获取代理名称 read -erp "请输入代理转发名称 (如 mysql_proxy): " proxy_name if [ -z "$proxy_name" ]; then echo "名称不能为空"; return 1 fi # 获取监听端口 read -erp "请输入本机监听端口 (如 3306): " listen_port if ! [[ "$listen_port" =~ ^[0-9]+$ ]]; then echo "端口必须是数字"; return 1 fi echo "请选择协议类型：" echo "1. TCP 2. UDP" read -erp "请输入序号 [1-2]: " proto_choice case "$proto_choice" in 1) proto="tcp"; listen_suffix="" ;; 2) proto="udp"; listen_suffix=" udp" ;; *) echo "无效选择"; return 1 ;; esac read -e -p "请输入你的一个或者多个后端IP+端口用空格隔开（例如 10.13.0.2:3306 10.13.0.3:3306）： " reverseproxy_port nginx_install_status cd /home && mkdir -p web/stream.d grep -q '^[[:space:]]*stream[[:space:]]*{' /home/web/nginx.conf || echo -e '\nstream {\n include /etc/nginx/stream.d/*.conf;\n}' | tee -a /home/web/nginx.conf wget -O /home/web/stream.d/$proxy_name.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/reverse-proxy-backend-stream.conf backend=$(tr -dc 'A-Za-z' < /dev/urandom | head -c 8) sed -i "s/backend_yuming_com/${proxy_name}_${backend}/g" /home/web/stream.d/"$proxy_name".conf sed -i "s|listen 80|listen $listen_port $listen_suffix|g" /home/web/stream.d/$proxy_name.conf sed -i "s|listen \[::\]:|listen [::]:${listen_port} ${listen_suffix}|g" "/home/web/stream.d/${proxy_name}.conf" upstream_servers="" for server in $reverseproxy_port; do upstream_servers="$upstream_servers server $server;\n" done sed -i "s/# 动态添加/$upstream_servers/g" /home/web/stream.d/$proxy_name.conf docker exec nginx nginx -s reload clear echo "您的 $webname 搭建好了！" echo "------------------------" echo "访问地址:" ip_address if [ -n "$ipv4_address" ]; then echo "$ipv4_address:${listen_port}" fi if [ -n "$ipv6_address" ]; then echo "$ipv6_address:${listen_port}" fi echo "" } find_container_by_host_port() { port="$1" docker_name=$(docker ps --format '{{.ID}} {{.Names}}' | while read id name; do if docker port "$id" | grep -q ":$port"; then echo "$name" break fi done) } ldnmp_web_status() { root_use while true; do local cert_count=$(ls /home/web/certs/*_cert.pem 2>/dev/null | wc -l) local output="${gl_lv}${cert_count}${gl_bai}" local dbrootpasswd=$(grep -oP 'MYSQL_ROOT_PASSWORD:\s*\K.*' /home/web/docker-compose.yml | tr -d '[:space:]') local db_count=$(docker exec mysql mysql -u root -p"$dbrootpasswd" -e "SHOW DATABASES;" 2> /dev/null | grep -Ev "Database|information_schema|mysql|performance_schema|sys" | wc -l) local db_output="${gl_lv}${db_count}${gl_bai}" clear send_stats "LDNMP站点管理" echo "LDNMP环境" echo "------------------------" ldnmp_v echo -e "站点: ${output} 证书到期时间" echo -e "------------------------" for cert_file in /home/web/certs/*_cert.pem; do local domain=$(basename "$cert_file" | sed 's/_cert.pem//') if [ -n "$domain" ]; then local expire_date=$(openssl x509 -noout -enddate -in "$cert_file" | awk -F'=' '{print $2}') local formatted_date=$(date -d "$expire_date" '+%Y-%m-%d') printf "%-30s%s\n" "$domain" "$formatted_date" fi done for conf_file in /home/web/conf.d/*_*.conf; do [ -e "$conf_file" ] || continue basename "$conf_file" .conf done for conf_file in /home/web/conf.d/*.conf; do [ -e "$conf_file" ] || continue filename=$(basename "$conf_file") if [ "$filename" = "map.conf" ] || [ "$filename" = "default.conf" ]; then continue fi if ! grep -q "ssl_certificate" "$conf_file"; then basename "$conf_file" .conf fi done echo "------------------------" echo "" echo -e "数据库: ${db_output}" echo -e "------------------------" local dbrootpasswd=$(grep -oP 'MYSQL_ROOT_PASSWORD:\s*\K.*' /home/web/docker-compose.yml | tr -d '[:space:]') docker exec mysql mysql -u root -p"$dbrootpasswd" -e "SHOW DATABASES;" 2> /dev/null | grep -Ev "Database|information_schema|mysql|performance_schema|sys" echo "------------------------" echo "" echo "站点目录" echo "------------------------" echo -e "数据 ${gl_hui}/home/web/html${gl_bai} 证书 ${gl_hui}/home/web/certs${gl_bai} 配置 ${gl_hui}/home/web/conf.d${gl_bai}" echo "------------------------" echo "" echo "操作" echo "------------------------" echo "1. 申请/更新域名证书 2. 克隆站点域名" echo "3. 清理站点缓存 4. 创建关联站点" echo "5. 查看访问日志 6. 查看错误日志" echo "7. 编辑全局配置 8. 编辑站点配置" echo "9. 管理站点数据库 10. 查看站点分析报告" echo "------------------------" echo "20. 删除指定站点数据" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) send_stats "申请域名证书" read -e -p "请输入你的域名: " yuming install_certbot docker run --rm -v /etc/letsencrypt/:/etc/letsencrypt certbot/certbot delete --cert-name "$yuming" -n 2>/dev/null install_ssltls certs_status ;; 2) send_stats "克隆站点域名" read -e -p "请输入旧域名: " oddyuming read -e -p "请输入新域名: " yuming install_certbot install_ssltls certs_status add_db local odd_dbname=$(echo "$oddyuming" | sed -e 's/[^A-Za-z0-9]/_/g') local odd_dbname="${odd_dbname}" docker exec mysql mysqldump -u root -p"$dbrootpasswd" $odd_dbname | docker exec -i mysql mysql -u root -p"$dbrootpasswd" $dbname local tables=$(docker exec mysql mysql -u root -p"$dbrootpasswd" -D $dbname -e "SHOW TABLES;" | awk '{ if (NR>1) print $1 }') for table in $tables; do columns=$(docker exec mysql mysql -u root -p"$dbrootpasswd" -D $dbname -e "SHOW COLUMNS FROM $table;" | awk '{ if (NR>1) print $1 }') for column in $columns; do docker exec mysql mysql -u root -p"$dbrootpasswd" -D $dbname -e "UPDATE $table SET $column = REPLACE($column, '$oddyuming', '$yuming') WHERE $column LIKE '%$oddyuming%';" done done # 网站目录替换 cp -r /home/web/html/$oddyuming /home/web/html/$yuming find /home/web/html/$yuming -type f -exec sed -i "s/$odd_dbname/$dbname/g" {} + find /home/web/html/$yuming -type f -exec sed -i "s/$oddyuming/$yuming/g" {} + cp /home/web/conf.d/$oddyuming.conf /home/web/conf.d/$yuming.conf sed -i "s/$oddyuming/$yuming/g" /home/web/conf.d/$yuming.conf cd /home/web && docker compose restart ;; 3) web_cache ;; 4) send_stats "创建关联站点" echo -e "为现有的站点再关联一个新域名用于访问" read -e -p "请输入现有的域名: " oddyuming read -e -p "请输入新域名: " yuming install_certbot install_ssltls certs_status cp /home/web/conf.d/$oddyuming.conf /home/web/conf.d/$yuming.conf sed -i "s|server_name $oddyuming|server_name $yuming|g" /home/web/conf.d/$yuming.conf sed -i "s|/etc/nginx/certs/${oddyuming}_cert.pem|/etc/nginx/certs/${yuming}_cert.pem|g" /home/web/conf.d/$yuming.conf sed -i "s|/etc/nginx/certs/${oddyuming}_key.pem|/etc/nginx/certs/${yuming}_key.pem|g" /home/web/conf.d/$yuming.conf docker exec nginx nginx -s reload ;; 5) send_stats "查看访问日志" tail -n 200 /home/web/log/nginx/access.log break_end ;; 6) send_stats "查看错误日志" tail -n 200 /home/web/log/nginx/error.log break_end ;; 7) send_stats "编辑全局配置" install nano nano /home/web/nginx.conf docker exec nginx nginx -s reload ;; 8) send_stats "编辑站点配置" read -e -p "编辑站点配置，请输入你要编辑的域名: " yuming install nano nano /home/web/conf.d/$yuming.conf docker exec nginx nginx -s reload ;; 9) phpmyadmin_upgrade break_end ;; 10) send_stats "查看站点数据" install goaccess goaccess --log-format=COMBINED /home/web/log/nginx/access.log ;; 20) web_del docker run --rm -v /etc/letsencrypt/:/etc/letsencrypt certbot/certbot delete --cert-name "$yuming" -n 2>/dev/null ;; *) break # 跳出循环，退出菜单 ;; esac done } check_panel_app() { if $lujing > /dev/null 2>&1; then check_panel="${gl_lv}已安装${gl_bai}" else check_panel="" fi } install_panel() { send_stats "${panelname}管理" while true; do clear check_panel_app echo -e "$panelname $check_panel" echo "${panelname}是一款时下流行且强大的运维管理面板。" echo "官网介绍: $panelurl " echo "" echo "------------------------" echo "1. 安装 2. 管理 3. 卸载" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " choice case $choice in 1) check_disk_space 1 install wget iptables_open panel_app_install add_app_id send_stats "${panelname}安装" ;; 2) panel_app_manage add_app_id send_stats "${panelname}控制" ;; 3) panel_app_uninstall sed -i "/\b${app_id}\b/d" /home/docker/appno.txt send_stats "${panelname}卸载" ;; *) break ;; esac break_end done } check_frp_app() { if [ -d "/home/frp/" ]; then check_frp="${gl_lv}已安装${gl_bai}" else check_frp="${gl_hui}未安装${gl_bai}" fi } donlond_frp() { role="$1" config_file="/home/frp/${role}.toml" docker run -d \ --name "$role" \ --restart=always \ --network host \ -v "$config_file":"/frp/${role}.toml" \ kjlion/frp:alpine \ "/frp/${role}" -c "/frp/${role}.toml" } generate_frps_config() { send_stats "安装frp服务端" # 生成随机端口和凭证 local bind_port=8055 local dashboard_port=8056 local token=$(openssl rand -hex 16) local dashboard_user="user_$(openssl rand -hex 4)" local dashboard_pwd=$(openssl rand -hex 8) mkdir -p /home/frp touch /home/frp/frps.toml cat < /home/frp/frps.toml [common] bind_port = $bind_port authentication_method = token token = $token dashboard_port = $dashboard_port dashboard_user = $dashboard_user dashboard_pwd = $dashboard_pwd EOF donlond_frp frps # 输出生成的信息 ip_address echo "------------------------" echo "客户端部署时需要用的参数" echo "服务IP: $ipv4_address" echo "token: $token" echo echo "FRP面板信息" echo "FRP面板地址: http://$ipv4_address:$dashboard_port" echo "FRP面板用户名: $dashboard_user" echo "FRP面板密码: $dashboard_pwd" echo open_port 8055 8056 } configure_frpc() { send_stats "安装frp客户端" read -e -p "请输入外网对接IP: " server_addr read -e -p "请输入外网对接token: " token echo mkdir -p /home/frp touch /home/frp/frpc.toml cat < /home/frp/frpc.toml [common] server_addr = ${server_addr} server_port = 8055 token = ${token} EOF donlond_frp frpc open_port 8055 } add_forwarding_service() { send_stats "添加frp内网服务" # 提示用户输入服务名称和转发信息 read -e -p "请输入服务名称: " service_name read -e -p "请输入转发类型 (tcp/udp) [回车默认tcp]: " service_type local service_type=${service_type:-tcp} read -e -p "请输入内网IP [回车默认127.0.0.1]: " local_ip local local_ip=${local_ip:-127.0.0.1} read -e -p "请输入内网端口: " local_port read -e -p "请输入外网端口: " remote_port # 将用户输入写入配置文件 cat <> /home/frp/frpc.toml [$service_name] type = ${service_type} local_ip = ${local_ip} local_port = ${local_port} remote_port = ${remote_port} EOF # 输出生成的信息 echo "服务 $service_name 已成功添加到 frpc.toml" docker restart frpc open_port $local_port } delete_forwarding_service() { send_stats "删除frp内网服务" # 提示用户输入需要删除的服务名称 read -e -p "请输入需要删除的服务名称: " service_name # 使用 sed 删除该服务及其相关配置 sed -i "/\[$service_name\]/,/^$/d" /home/frp/frpc.toml echo "服务 $service_name 已成功从 frpc.toml 删除" docker restart frpc } list_forwarding_services() { local config_file="$1" # 打印表头 printf "%-20s %-25s %-30s %-10s\n" "服务名称" "内网地址" "外网地址" "协议" awk ' BEGIN { server_addr="" server_port="" current_service="" } /^server_addr = / { gsub(/"|'"'"'/, "", $3) server_addr=$3 } /^server_port = / { gsub(/"|'"'"'/, "", $3) server_port=$3 } /^\[.*\]/ { # 如果已有服务信息，在处理新服务之前打印当前服务 if (current_service != "" && current_service != "common" && local_ip != "" && local_port != "") { printf "%-16s %-21s %-26s %-10s\n", \ current_service, \ local_ip ":" local_port, \ server_addr ":" remote_port, \ type } # 更新当前服务名称 if ($1 != "[common]") { gsub(/[\[\]]/, "", $1) current_service=$1 # 清除之前的值 local_ip="" local_port="" remote_port="" type="" } } /^local_ip = / { gsub(/"|'"'"'/, "", $3) local_ip=$3 } /^local_port = / { gsub(/"|'"'"'/, "", $3) local_port=$3 } /^remote_port = / { gsub(/"|'"'"'/, "", $3) remote_port=$3 } /^type = / { gsub(/"|'"'"'/, "", $3) type=$3 } END { # 打印最后一个服务的信息 if (current_service != "" && current_service != "common" && local_ip != "" && local_port != "") { printf "%-16s %-21s %-26s %-10s\n", \ current_service, \ local_ip ":" local_port, \ server_addr ":" remote_port, \ type } }' "$config_file" } # 获取 FRP 服务端端口 get_frp_ports() { mapfile -t ports < <(ss -tulnape | grep frps | awk '{print $5}' | awk -F':' '{print $NF}' | sort -u) } # 生成访问地址 generate_access_urls() { # 首先获取所有端口 get_frp_ports # 检查是否有非 8055/8056 的端口 local has_valid_ports=false for port in "${ports[@]}"; do if [[ $port != "8055" && $port != "8056" ]]; then has_valid_ports=true break fi done # 只在有有效端口时显示标题和内容 if [ "$has_valid_ports" = true ]; then echo "FRP服务对外访问地址:" # 处理 IPv4 地址 for port in "${ports[@]}"; do if [[ $port != "8055" && $port != "8056" ]]; then echo "http://${ipv4_address}:${port}" fi done # 处理 IPv6 地址（如果存在） if [ -n "$ipv6_address" ]; then for port in "${ports[@]}"; do if [[ $port != "8055" && $port != "8056" ]]; then echo "http://[${ipv6_address}]:${port}" fi done fi # 处理 HTTPS 配置 for port in "${ports[@]}"; do if [[ $port != "8055" && $port != "8056" ]]; then local frps_search_pattern="${ipv4_address}:${port}" local frps_search_pattern2="127.0.0.1:${port}" for file in /home/web/conf.d/*.conf; do if [ -f "$file" ]; then if grep -q "$frps_search_pattern" "$file" 2>/dev/null || grep -q "$frps_search_pattern2" "$file" 2>/dev/null; then echo "https://$(basename "$file" .conf)" fi fi done fi done fi } frps_main_ports() { ip_address generate_access_urls } frps_panel() { send_stats "FRP服务端" local app_id="55" local docker_name="frps" local docker_port=8056 while true; do clear check_frp_app check_docker_image_update $docker_name echo -e "FRP服务端 $check_frp $update_status" echo "构建FRP内网穿透服务环境，将无公网IP的设备暴露到互联网" echo "官网介绍: ${gh_https_url}github.com/fatedier/frp/" echo "视频教学: https://www.bilibili.com/video/BV1yMw6e2EwL?t=124.0" if [ -d "/home/frp/" ]; then check_docker_app_ip frps_main_ports fi echo "" echo "------------------------" echo "1. 安装 2. 更新 3. 卸载" echo "------------------------" echo "5. 内网服务域名访问 6. 删除域名访问" echo "------------------------" echo "7. 允许IP+端口访问 8. 阻止IP+端口访问" echo "------------------------" echo "00. 刷新服务状态 0. 返回上一级选单" echo "------------------------" read -e -p "输入你的选择: " choice case $choice in 1) install jq grep ss install_docker generate_frps_config add_app_id echo "FRP服务端已经安装完成" ;; 2) crontab -l | grep -v 'frps' | crontab - > /dev/null 2>&1 tmux kill-session -t frps >/dev/null 2>&1 docker rm -f frps && docker rmi kjlion/frp:alpine >/dev/null 2>&1 [ -f /home/frp/frps.toml ] || cp /home/frp/frp_0.61.0_linux_amd64/frps.toml /home/frp/frps.toml donlond_frp frps add_app_id echo "FRP服务端已经更新完成" ;; 3) crontab -l | grep -v 'frps' | crontab - > /dev/null 2>&1 tmux kill-session -t frps >/dev/null 2>&1 docker rm -f frps && docker rmi kjlion/frp:alpine rm -rf /home/frp close_port 8055 8056 sed -i "/\b${app_id}\b/d" /home/docker/appno.txt echo "应用已卸载" ;; 5) echo "将内网穿透服务反代成域名访问" send_stats "FRP对外域名访问" add_yuming read -e -p "请输入你的内网穿透服务端口: " frps_port ldnmp_Proxy ${yuming} 127.0.0.1 ${frps_port} block_host_port "$frps_port" "$ipv4_address" ;; 6) echo "域名格式 example.com 不带https://" web_del ;; 7) send_stats "允许IP访问" read -e -p "请输入需要放行的端口: " frps_port clear_host_port_rules "$frps_port" "$ipv4_address" ;; 8) send_stats "阻止IP访问" echo "如果你已经反代域名访问了，可用此功能阻止IP+端口访问，这样更安全。" read -e -p "请输入需要阻止的端口: " frps_port block_host_port "$frps_port" "$ipv4_address" ;; 00) send_stats "刷新FRP服务状态" echo "已经刷新FRP服务状态" ;; *) break ;; esac break_end done } frpc_panel() { send_stats "FRP客户端" local app_id="56" local docker_name="frpc" local docker_port=8055 while true; do clear check_frp_app check_docker_image_update $docker_name echo -e "FRP客户端 $check_frp $update_status" echo "与服务端对接，对接后可创建内网穿透服务到互联网访问" echo "官网介绍: ${gh_https_url}github.com/fatedier/frp/" echo "视频教学: https://www.bilibili.com/video/BV1yMw6e2EwL?t=173.9" echo "------------------------" if [ -d "/home/frp/" ]; then [ -f /home/frp/frpc.toml ] || cp /home/frp/frp_0.61.0_linux_amd64/frpc.toml /home/frp/frpc.toml list_forwarding_services "/home/frp/frpc.toml" fi echo "" echo "------------------------" echo "1. 安装 2. 更新 3. 卸载" echo "------------------------" echo "4. 添加对外服务 5. 删除对外服务 6. 手动配置服务" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "输入你的选择: " choice case $choice in 1) install jq grep ss install_docker configure_frpc add_app_id echo "FRP客户端已经安装完成" ;; 2) crontab -l | grep -v 'frpc' | crontab - > /dev/null 2>&1 tmux kill-session -t frpc >/dev/null 2>&1 docker rm -f frpc && docker rmi kjlion/frp:alpine >/dev/null 2>&1 [ -f /home/frp/frpc.toml ] || cp /home/frp/frp_0.61.0_linux_amd64/frpc.toml /home/frp/frpc.toml donlond_frp frpc add_app_id echo "FRP客户端已经更新完成" ;; 3) crontab -l | grep -v 'frpc' | crontab - > /dev/null 2>&1 tmux kill-session -t frpc >/dev/null 2>&1 docker rm -f frpc && docker rmi kjlion/frp:alpine rm -rf /home/frp close_port 8055 sed -i "/\b${app_id}\b/d" /home/docker/appno.txt echo "应用已卸载" ;; 4) add_forwarding_service ;; 5) delete_forwarding_service ;; 6) install nano nano /home/frp/frpc.toml docker restart frpc ;; *) break ;; esac break_end done } yt_menu_pro() { local app_id="66" local VIDEO_DIR="/home/yt-dlp" local URL_FILE="$VIDEO_DIR/urls.txt" local ARCHIVE_FILE="$VIDEO_DIR/archive.txt" mkdir -p "$VIDEO_DIR" while true; do if [ -x "/usr/local/bin/yt-dlp" ]; then local YTDLP_STATUS="${gl_lv}已安装${gl_bai}" else local YTDLP_STATUS="${gl_hui}未安装${gl_bai}" fi clear send_stats "yt-dlp 下载工具" echo -e "yt-dlp $YTDLP_STATUS" echo -e "yt-dlp 是一个功能强大的视频下载工具，支持 YouTube、Bilibili、Twitter 等数千站点。" echo -e "官网地址：${gh_https_url}github.com/yt-dlp/yt-dlp" echo "-------------------------" echo "已下载视频列表:" ls -td "$VIDEO_DIR"/*/ 2>/dev/null || echo "（暂无）" echo "-------------------------" echo "1. 安装 2. 更新 3. 卸载" echo "-------------------------" echo "5. 单个视频下载 6. 批量视频下载 7. 自定义参数下载" echo "8. 下载为MP3音频 9. 删除视频目录 10. Cookie管理（开发中）" echo "-------------------------" echo "0. 返回上一级选单" echo "-------------------------" read -e -p "请输入选项编号: " choice case $choice in 1) send_stats "正在安装 yt-dlp..." echo "正在安装 yt-dlp..." install ffmpeg curl -L ${gh_https_url}github.com/yt-dlp/yt-dlp/releases/latest/download/yt-dlp -o /usr/local/bin/yt-dlp chmod a+rx /usr/local/bin/yt-dlp add_app_id echo "安装完成。按任意键继续..." read ;; 2) send_stats "正在更新 yt-dlp..." echo "正在更新 yt-dlp..." yt-dlp -U add_app_id echo "更新完成。按任意键继续..." read ;; 3) send_stats "正在卸载 yt-dlp..." echo "正在卸载 yt-dlp..." rm -f /usr/local/bin/yt-dlp sed -i "/\b${app_id}\b/d" /home/docker/appno.txt echo "卸载完成。按任意键继续..." read ;; 5) send_stats "单个视频下载" read -e -p "请输入视频链接: " url yt-dlp -P "$VIDEO_DIR" -f "bv*+ba/b" --merge-output-format mp4 \ --write-subs --sub-langs all \ --write-thumbnail --embed-thumbnail \ --write-info-json \ -o "$VIDEO_DIR/%(title)s/%(title)s.%(ext)s" \ --no-overwrites --no-post-overwrites "$url" read -e -p "下载完成，按任意键继续..." ;; 6) send_stats "批量视频下载" install nano if [ ! -f "$URL_FILE" ]; then echo -e "# 输入多个视频链接地址\n# https://www.bilibili.com/bangumi/play/ep733316?spm_id_from=333.337.0.0&from_spmid=666.25.episode.0" > "$URL_FILE" fi nano $URL_FILE echo "现在开始批量下载..." yt-dlp -P "$VIDEO_DIR" -f "bv*+ba/b" --merge-output-format mp4 \ --write-subs --sub-langs all \ --write-thumbnail --embed-thumbnail \ --write-info-json \ -a "$URL_FILE" \ -o "$VIDEO_DIR/%(title)s/%(title)s.%(ext)s" \ --no-overwrites --no-post-overwrites read -e -p "批量下载完成，按任意键继续..." ;; 7) send_stats "自定义视频下载" read -e -p "请输入完整 yt-dlp 参数（不含 yt-dlp）: " custom yt-dlp -P "$VIDEO_DIR" $custom \ --write-subs --sub-langs all \ --write-thumbnail --embed-thumbnail \ --write-info-json \ -o "$VIDEO_DIR/%(title)s/%(title)s.%(ext)s" \ --no-overwrites --no-post-overwrites read -e -p "执行完成，按任意键继续..." ;; 8) send_stats "MP3下载" read -e -p "请输入视频链接: " url yt-dlp -P "$VIDEO_DIR" -x --audio-format mp3 \ --write-subs --sub-langs all \ --write-thumbnail --embed-thumbnail \ --write-info-json \ -o "$VIDEO_DIR/%(title)s/%(title)s.%(ext)s" \ --no-overwrites --no-post-overwrites "$url" read -e -p "音频下载完成，按任意键继续..." ;; 9) send_stats "删除视频" read -e -p "请输入删除视频名称: " rmdir rm -rf "$VIDEO_DIR/$rmdir" ;; *) break ;; esac done } current_timezone() { if grep -q 'Alpine' /etc/issue; then date +"%Z %z" else timedatectl | grep "Time zone" | awk '{print $3}' fi } set_timedate() { local shiqu="$1" if grep -q 'Alpine' /etc/issue; then install tzdata cp /usr/share/zoneinfo/${shiqu} /etc/localtime hwclock --systohc else timedatectl set-timezone ${shiqu} fi } # 修复dpkg中断问题 fix_dpkg() { pkill -9 -f 'apt|dpkg' rm -f /var/lib/dpkg/lock-frontend /var/lib/dpkg/lock DEBIAN_FRONTEND=noninteractive dpkg --configure -a } linux_update() { echo -e "${gl_kjlan}正在系统更新...${gl_bai}" if command -v dnf &>/dev/null; then dnf -y update elif command -v yum &>/dev/null; then yum -y update elif command -v apt &>/dev/null; then fix_dpkg DEBIAN_FRONTEND=noninteractive apt update -y DEBIAN_FRONTEND=noninteractive apt full-upgrade -y elif command -v apk &>/dev/null; then apk update && apk upgrade elif command -v pacman &>/dev/null; then pacman -Syu --noconfirm elif command -v zypper &>/dev/null; then zypper refresh zypper update elif command -v opkg &>/dev/null; then opkg update else echo "未知的包管理器!" return fi } linux_clean() { echo -e "${gl_kjlan}正在系统清理...${gl_bai}" if command -v dnf &>/dev/null; then rpm --rebuilddb dnf autoremove -y dnf clean all dnf makecache journalctl --rotate journalctl --vacuum-time=1s journalctl --vacuum-size=500M elif command -v yum &>/dev/null; then rpm --rebuilddb yum autoremove -y yum clean all yum makecache journalctl --rotate journalctl --vacuum-time=1s journalctl --vacuum-size=500M elif command -v apt &>/dev/null; then fix_dpkg apt autoremove --purge -y apt clean -y apt autoclean -y journalctl --rotate journalctl --vacuum-time=1s journalctl --vacuum-size=500M elif command -v apk &>/dev/null; then echo "清理包管理器缓存..." apk cache clean echo "删除系统日志..." rm -rf /var/log/* echo "删除APK缓存..." rm -rf /var/cache/apk/* echo "删除临时文件..." rm -rf /tmp/* elif command -v pacman &>/dev/null; then pacman -Rns $(pacman -Qdtq) --noconfirm pacman -Scc --noconfirm journalctl --rotate journalctl --vacuum-time=1s journalctl --vacuum-size=500M elif command -v zypper &>/dev/null; then zypper clean --all zypper refresh journalctl --rotate journalctl --vacuum-time=1s journalctl --vacuum-size=500M elif command -v opkg &>/dev/null; then echo "删除系统日志..." rm -rf /var/log/* echo "删除临时文件..." rm -rf /tmp/* elif command -v pkg &>/dev/null; then echo "清理未使用的依赖..." pkg autoremove -y echo "清理包管理器缓存..." pkg clean -y echo "删除系统日志..." rm -rf /var/log/* echo "删除临时文件..." rm -rf /tmp/* else echo "未知的包管理器!" return fi return } bbr_on() { # 统一写入到 sysctl.d 以防与内核调优模块打架 local CONF="/etc/sysctl.d/99-kejilion-bbr.conf" mkdir -p /etc/sysctl.d echo "net.core.default_qdisc=fq" > "$CONF" echo "net.ipv4.tcp_congestion_control=bbr" >> "$CONF" # 清理可能导致冲突的旧版 sysctl.conf 残留 sed -i '/net.ipv4.tcp_congestion_control/d' /etc/sysctl.conf 2>/dev/null sed -i '/net.core.default_qdisc/d' /etc/sysctl.conf 2>/dev/null sysctl -p "$CONF" >/dev/null 2>&1 || sysctl --system >/dev/null 2>&1 } set_dns() { ip_address chattr -i /etc/resolv.conf > /etc/resolv.conf if [ -n "$ipv4_address" ]; then echo "nameserver $dns1_ipv4" >> /etc/resolv.conf echo "nameserver $dns2_ipv4" >> /etc/resolv.conf fi if [ -n "$ipv6_address" ]; then echo "nameserver $dns1_ipv6" >> /etc/resolv.conf echo "nameserver $dns2_ipv6" >> /etc/resolv.conf fi if [ ! -s /etc/resolv.conf ]; then echo "nameserver 223.5.5.5" >> /etc/resolv.conf echo "nameserver 8.8.8.8" >> /etc/resolv.conf fi chattr +i /etc/resolv.conf } set_dns_ui() { root_use send_stats "优化DNS" while true; do clear echo "优化DNS地址" echo "------------------------" echo "当前DNS地址" cat /etc/resolv.conf echo "------------------------" echo "" echo "1. 国外DNS优化: " echo " v4: 1.1.1.1 8.8.8.8" echo " v6: 2606:4700:4700::1111 2001:4860:4860::8888" echo "2. 国内DNS优化: " echo " v4: 223.5.5.5 183.60.83.19" echo " v6: 2400:3200::1 2400:da00::6666" echo "3. 手动编辑DNS配置" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " Limiting case "$Limiting" in 1) local dns1_ipv4="1.1.1.1" local dns2_ipv4="8.8.8.8" local dns1_ipv6="2606:4700:4700::1111" local dns2_ipv6="2001:4860:4860::8888" set_dns send_stats "国外DNS优化" ;; 2) local dns1_ipv4="223.5.5.5" local dns2_ipv4="183.60.83.19" local dns1_ipv6="2400:3200::1" local dns2_ipv6="2400:da00::6666" set_dns send_stats "国内DNS优化" ;; 3) install nano chattr -i /etc/resolv.conf nano /etc/resolv.conf chattr +i /etc/resolv.conf send_stats "手动编辑DNS配置" ;; *) break ;; esac done } restart_ssh() { restart sshd ssh > /dev/null 2>&1 } correct_ssh_config() { local sshd_config="/etc/ssh/sshd_config" if grep -Eq "^\s*PasswordAuthentication\s+no" "$sshd_config"; then sed -i -e 's/^\s*#\?\s*PermitRootLogin .*/PermitRootLogin prohibit-password/' \ -e 's/^\s*#\?\s*PasswordAuthentication .*/PasswordAuthentication no/' \ -e 's/^\s*#\?\s*PubkeyAuthentication .*/PubkeyAuthentication yes/' \ -e 's/^\s*#\?\s*ChallengeResponseAuthentication .*/ChallengeResponseAuthentication no/' "$sshd_config" else sed -i -e 's/^\s*#\?\s*PermitRootLogin .*/PermitRootLogin yes/' \ -e 's/^\s*#\?\s*PasswordAuthentication .*/PasswordAuthentication yes/' \ -e 's/^\s*#\?\s*PubkeyAuthentication .*/PubkeyAuthentication yes/' "$sshd_config" fi rm -rf /etc/ssh/sshd_config.d/* /etc/ssh/ssh_config.d/* } new_ssh_port() { local new_port=$1 cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak sed -i '/^\s*#\?\s*Port\s\+/d' /etc/ssh/sshd_config sed -i "1i Port $new_port" /etc/ssh/sshd_config correct_ssh_config restart_ssh open_port $new_port remove iptables-persistent ufw firewalld iptables-services > /dev/null 2>&1 echo "SSH 端口已修改为: $new_port" sleep 1 } sshkey_on() { sed -i -e 's/^\s*#\?\s*PermitRootLogin .*/PermitRootLogin prohibit-password/' \ -e 's/^\s*#\?\s*PasswordAuthentication .*/PasswordAuthentication no/' \ -e 's/^\s*#\?\s*PubkeyAuthentication .*/PubkeyAuthentication yes/' \ -e 's/^\s*#\?\s*ChallengeResponseAuthentication .*/ChallengeResponseAuthentication no/' /etc/ssh/sshd_config rm -rf /etc/ssh/sshd_config.d/* /etc/ssh/ssh_config.d/* restart_ssh echo -e "${gl_lv}用户密钥登录模式已开启，已关闭密码登录模式，重连将会生效${gl_bai}" } add_sshkey() { chmod 700 "${HOME}" mkdir -p "${HOME}/.ssh" chmod 700 "${HOME}/.ssh" touch "${HOME}/.ssh/authorized_keys" ssh-keygen -t ed25519 -C "xxxx@gmail.com" -f "${HOME}/.ssh/sshkey" -N "" cat "${HOME}/.ssh/sshkey.pub" >> "${HOME}/.ssh/authorized_keys" chmod 600 "${HOME}/.ssh/authorized_keys" ip_address echo -e "私钥信息已生成，务必复制保存，可保存成 ${gl_huang}${ipv4_address}_ssh.key${gl_bai} 文件，用于以后的SSH登录" echo "--------------------------------" cat "${HOME}/.ssh/sshkey" echo "--------------------------------" sshkey_on } import_sshkey() { local public_key="$1" local base_dir="${2:-$HOME}" local ssh_dir="${base_dir}/.ssh" local auth_keys="${ssh_dir}/authorized_keys" if [[ -z "$public_key" ]]; then read -e -p "请输入您的SSH公钥内容（通常以 'ssh-rsa' 或 'ssh-ed25519' 开头）: " public_key fi if [[ -z "$public_key" ]]; then echo -e "${gl_hong}错误：未输入公钥内容。${gl_bai}" return 1 fi if [[ ! "$public_key" =~ ^ssh-(rsa|ed25519|ecdsa) ]]; then echo -e "${gl_hong}错误：看起来不像合法的 SSH 公钥。${gl_bai}" return 1 fi if grep -Fxq "$public_key" "$auth_keys" 2>/dev/null; then echo "该公钥已存在，无需重复添加" return 0 fi mkdir -p "$ssh_dir" chmod 700 "$ssh_dir" touch "$auth_keys" echo "$public_key" >> "$auth_keys" chmod 600 "$auth_keys" sshkey_on } fetch_remote_ssh_keys() { local keys_url="$1" local base_dir="${2:-$HOME}" local ssh_dir="${base_dir}/.ssh" local authorized_keys="${ssh_dir}/authorized_keys" local temp_file if [[ -z "${keys_url}" ]]; then read -e -p "请输入您的远端公钥URL： " keys_url fi echo "此脚本将从远程 URL 拉取 SSH 公钥，并添加到 ${authorized_keys}" echo "" echo "远程公钥地址：" echo " ${keys_url}" echo "" # 创建临时文件 temp_file=$(mktemp) # 下载公钥 if command -v curl >/dev/null 2>&1; then curl -fsSL --connect-timeout 10 "${keys_url}" -o "${temp_file}" || { echo "错误：无法从 URL 下载公钥（网络问题或地址无效）" >&2 rm -f "${temp_file}" return 1 } elif command -v wget >/dev/null 2>&1; then wget -q --timeout=10 -O "${temp_file}" "${keys_url}" || { echo "错误：无法从 URL 下载公钥（网络问题或地址无效）" >&2 rm -f "${temp_file}" return 1 } else echo "错误：系统中未找到 curl 或 wget，无法下载公钥" >&2 rm -f "${temp_file}" return 1 fi # 检查内容是否有效 if [[ ! -s "${temp_file}" ]]; then echo "错误：下载到的文件为空，URL 可能不包含任何公钥" >&2 rm -f "${temp_file}" return 1 fi mkdir -p "${ssh_dir}" chmod 700 "${ssh_dir}" touch "${authorized_keys}" chmod 600 "${authorized_keys}" # 备份原有 authorized_keys if [[ -f "${authorized_keys}" ]]; then cp "${authorized_keys}" "${authorized_keys}.bak.$(date +%Y%m%d-%H%M%S)" echo "已备份原有 authorized_keys 文件" fi # 追加公钥（避免重复） local added=0 while IFS= read -r line; do [[ -z "${line}" || "${line}" =~ ^# ]] && continue if ! grep -Fxq "${line}" "${authorized_keys}" 2>/dev/null; then echo "${line}" >> "${authorized_keys}" ((added++)) fi done < "${temp_file}" rm -f "${temp_file}" echo "" if (( added > 0 )); then echo "成功添加 ${added} 条新的公钥到 ${authorized_keys}" sshkey_on else echo "没有新的公钥需要添加（可能已全部存在）" fi echo "" } fetch_github_ssh_keys() { local username="$1" local base_dir="${2:-$HOME}" echo "操作前，请确保您已在 GitHub 账户中添加了 SSH 公钥：" echo " 1. 登录 ${gh_https_url}github.com/settings/keys" echo " 2. 点击 New SSH key 或 Add SSH key" echo " 3. Title 可随意填写（例如：Home Laptop 2026）" echo " 4. 将本地公钥内容（通常是 ~/.ssh/id_ed25519.pub 或 id_rsa.pub 的全部内容）粘贴到 Key 字段" echo " 5. 点击 Add SSH key 完成添加" echo "" echo "添加完成后，GitHub 会公开提供您的所有公钥，地址为：" echo " ${gh_https_url}github.com/您的用户名.keys" echo "" if [[ -z "${username}" ]]; then read -e -p "请输入您的 GitHub 用户名（username，不含 @）： " username fi if [[ -z "${username}" ]]; then echo "错误：GitHub 用户名不能为空" >&2 return 1 fi keys_url="${gh_https_url}github.com/${username}.keys" fetch_remote_ssh_keys "${keys_url}" "${base_dir}" } sshkey_panel() { root_use send_stats "用户密钥登录" while true; do clear local REAL_STATUS=$(grep -i "^PubkeyAuthentication" /etc/ssh/sshd_config | tr '[:upper:]' '[:lower:]') if [[ "$REAL_STATUS" =~ "yes" ]]; then IS_KEY_ENABLED="${gl_lv}已启用${gl_bai}" else IS_KEY_ENABLED="${gl_hui}未启用${gl_bai}" fi echo -e "用户密钥登录模式 ${IS_KEY_ENABLED}" echo "进阶玩法: https://blog.kejilion.pro/ssh-key" echo "------------------------------------------------" echo "将会生成密钥对，更安全的方式SSH登录" echo "------------------------" echo "1. 生成新密钥对 2. 手动输入已有公钥" echo "3. 从GitHub导入已有公钥 4. 从URL导入已有公钥" echo "5. 编辑公钥文件 6. 查看本机密钥" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " host_dns case $host_dns in 1) send_stats "生成新密钥" add_sshkey break_end ;; 2) send_stats "导入已有公钥" import_sshkey break_end ;; 3) send_stats "导入GitHub远端公钥" fetch_github_ssh_keys break_end ;; 4) send_stats "导入URL远端公钥" read -e -p "请输入您的远端公钥URL： " keys_url fetch_remote_ssh_keys "${keys_url}" break_end ;; 5) send_stats "编辑公钥文件" install nano nano ${HOME}/.ssh/authorized_keys break_end ;; 6) send_stats "查看本机密钥" echo "------------------------" echo "公钥信息" cat ${HOME}/.ssh/authorized_keys echo "------------------------" echo "私钥信息" cat ${HOME}/.ssh/sshkey echo "------------------------" break_end ;; *) break # 跳出循环，退出菜单 ;; esac done } add_sshpasswd() { root_use send_stats "设置密码登录模式" echo "设置密码登录模式" local target_user="$1" # 如果没有通过参数传入，则交互输入 if [[ -z "$target_user" ]]; then read -e -p "请输入要修改密码的用户名（默认 root）: " target_user fi # 回车不输入，默认 root target_user=${target_user:-root} # 校验用户是否存在 if ! id "$target_user" >/dev/null 2>&1; then echo "错误：用户 $target_user 不存在" return 1 fi passwd "$target_user" if [[ "$target_user" == "root" ]]; then sed -i 's/^\s*#\?\s*PermitRootLogin.*/PermitRootLogin yes/g' /etc/ssh/sshd_config fi sed -i 's/^\s*#\?\s*PasswordAuthentication.*/PasswordAuthentication yes/g' /etc/ssh/sshd_config rm -rf /etc/ssh/sshd_config.d/* /etc/ssh/ssh_config.d/* restart_ssh echo -e "${gl_lv}密码设置完毕，已更改为密码登录模式！${gl_bai}" } root_use() { clear [ "$EUID" -ne 0 ] && echo -e "${gl_huang}提示: ${gl_bai}该功能需要root用户才能运行！" && break_end && kejilion } dd_xitong() { send_stats "重装系统" dd_xitong_MollyLau() { wget --no-check-certificate -qO InstallNET.sh "${gh_proxy}raw.githubusercontent.com/leitbogioro/Tools/master/Linux_reinstall/InstallNET.sh" && chmod a+x InstallNET.sh } dd_xitong_bin456789() { curl -O ${gh_proxy}raw.githubusercontent.com/bin456789/reinstall/main/reinstall.sh } dd_xitong_1() { echo -e "重装后初始用户名: ${gl_huang}root${gl_bai} 初始密码: ${gl_huang}LeitboGi0ro${gl_bai} 初始端口: ${gl_huang}22${gl_bai}" echo -e "${gl_huang}重装后请及时修改初始密码，防止暴力入侵。命令行输入passwd修改密码${gl_bai}" echo -e "按任意键继续..." read -n 1 -s -r -p "" install wget dd_xitong_MollyLau } dd_xitong_2() { echo -e "重装后初始用户名: ${gl_huang}Administrator${gl_bai} 初始密码: ${gl_huang}Teddysun.com${gl_bai} 初始端口: ${gl_huang}3389${gl_bai}" echo -e "按任意键继续..." read -n 1 -s -r -p "" install wget dd_xitong_MollyLau } dd_xitong_3() { echo -e "重装后初始用户名: ${gl_huang}root${gl_bai} 初始密码: ${gl_huang}123@@@${gl_bai} 初始端口: ${gl_huang}22${gl_bai}" echo -e "按任意键继续..." read -n 1 -s -r -p "" dd_xitong_bin456789 } dd_xitong_4() { echo -e "重装后初始用户名: ${gl_huang}Administrator${gl_bai} 初始密码: ${gl_huang}123@@@${gl_bai} 初始端口: ${gl_huang}3389${gl_bai}" echo -e "按任意键继续..." read -n 1 -s -r -p "" dd_xitong_bin456789 } while true; do root_use echo "重装系统" echo "--------------------------------" echo -e "${gl_hong}注意: ${gl_bai}重装有风险失联，不放心者慎用。重装预计花费15分钟，请提前备份数据。" echo -e "${gl_hui}感谢bin456789大佬和leitbogioro大佬的脚本支持！${gl_bai} " echo -e "${gl_hui}bin456789项目地址: ${gh_https_url}github.com/bin456789/reinstall${gl_bai}" echo -e "${gl_hui}leitbogioro项目地址: ${gh_https_url}github.com/leitbogioro/Tools${gl_bai}" echo "------------------------" echo "1. Debian 13 2. Debian 12" echo "3. Debian 11 4. Debian 10" echo "------------------------" echo "11. Ubuntu 26.04 12. Ubuntu 24.04" echo "13. Ubuntu 22.04 14. Ubuntu 20.04" echo "------------------------" echo "21. Rocky Linux 10 22. Rocky Linux 9" echo "23. Alma Linux 10 24. Alma Linux 9" echo "25. oracle Linux 10 26. oracle Linux 9" echo "27. Fedora Linux 44 28. Fedora Linux 43" echo "29. CentOS 10 30. CentOS 9" echo "------------------------" echo "31. Alpine Linux 32. Arch Linux" echo "33. Kali Linux 34. openEuler" echo "35. openSUSE Tumbleweed 36. fnos飞牛公测版" echo "------------------------" echo "41. Windows 11 42. Windows 10" echo "43. Windows 7 44. Windows Server 2025" echo "45. Windows Server 2022 46. Windows Server 2019" echo "47. Windows 11 ARM" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请选择要重装的系统: " sys_choice case "$sys_choice" in 1) send_stats "重装debian 13" dd_xitong_3 bash reinstall.sh debian 13 reboot exit ;; 2) send_stats "重装debian 12" dd_xitong_3 bash reinstall.sh debian 12 reboot exit ;; 3) send_stats "重装debian 11" dd_xitong_3 bash reinstall.sh debian 11 reboot exit ;; 4) send_stats "重装debian 10" dd_xitong_3 bash reinstall.sh debian 10 reboot exit ;; 11) send_stats "重装ubuntu 26.04" dd_xitong_3 bash reinstall.sh ubuntu 26.04 reboot exit ;; 12) send_stats "重装ubuntu 24.04" dd_xitong_3 bash reinstall.sh ubuntu 24.04 reboot exit ;; 13) send_stats "重装ubuntu 22.04" dd_xitong_3 bash reinstall.sh ubuntu 22.04 reboot exit ;; 14) send_stats "重装ubuntu 20.04" dd_xitong_3 bash reinstall.sh ubuntu 20.04 reboot exit ;; 21) send_stats "重装rockylinux10" dd_xitong_3 bash reinstall.sh rocky reboot exit ;; 22) send_stats "重装rockylinux9" dd_xitong_3 bash reinstall.sh rocky 9 reboot exit ;; 23) send_stats "重装alma10" dd_xitong_3 bash reinstall.sh almalinux reboot exit ;; 24) send_stats "重装alma9" dd_xitong_3 bash reinstall.sh almalinux 9 reboot exit ;; 25) send_stats "重装oracle10" dd_xitong_3 bash reinstall.sh oracle reboot exit ;; 26) send_stats "重装oracle9" dd_xitong_3 bash reinstall.sh oracle 9 reboot exit ;; 27) send_stats "重装fedora44" dd_xitong_3 bash reinstall.sh fedora 44 reboot exit ;; 28) send_stats "重装fedora43" dd_xitong_3 bash reinstall.sh fedora 43 reboot exit ;; 29) send_stats "重装centos10" dd_xitong_3 bash reinstall.sh centos 10 reboot exit ;; 30) send_stats "重装centos9" dd_xitong_3 bash reinstall.sh centos 9 reboot exit ;; 31) send_stats "重装alpine" dd_xitong_1 bash InstallNET.sh -alpine reboot exit ;; 32) send_stats "重装arch" dd_xitong_3 bash reinstall.sh arch reboot exit ;; 33) send_stats "重装kali" dd_xitong_3 bash reinstall.sh kali reboot exit ;; 34) send_stats "重装openeuler" dd_xitong_3 bash reinstall.sh openeuler reboot exit ;; 35) send_stats "重装opensuse" dd_xitong_3 bash reinstall.sh opensuse reboot exit ;; 36) send_stats "重装飞牛" dd_xitong_3 bash reinstall.sh fnos reboot exit ;; 41) send_stats "重装windows11" dd_xitong_2 bash InstallNET.sh -windows 11 -lang "cn" reboot exit ;; 42) dd_xitong_2 send_stats "重装windows10" bash InstallNET.sh -windows 10 -lang "cn" reboot exit ;; 43) send_stats "重装windows7" dd_xitong_4 bash reinstall.sh windows --iso="https://archive.org/download/en_windows_7_professional_with_sp1_x64_dvd_u_676939_201906/en_windows_7_professional_with_sp1_x64_dvd_u_676939.iso" --image-name='windows 7 professional' reboot exit ;; 44) send_stats "重装windows server 25" dd_xitong_2 bash InstallNET.sh -windows 2025 -lang "cn" reboot exit ;; 45) send_stats "重装windows server 22" dd_xitong_2 bash InstallNET.sh -windows 2022 -lang "cn" reboot exit ;; 46) send_stats "重装windows server 19" dd_xitong_2 bash InstallNET.sh -windows 2019 -lang "cn" reboot exit ;; 47) send_stats "重装windows11 ARM" dd_xitong_4 bash reinstall.sh dd --img https://r2.hotdog.eu.org/win11-arm-with-pagefile-15g.xz reboot exit ;; *) break ;; esac done } bbrv3() { root_use send_stats "bbrv3管理" xanmod_add_repo() { local keyring="/usr/share/keyrings/xanmod-archive-keyring.gpg" local list_file="/etc/apt/sources.list.d/xanmod-release.list" local key_url="https://dl.xanmod.org/archive.key" local fallback_key_url="${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/archive.key" local os_codename="" if command -v lsb_release >/dev/null 2>&1; then os_codename=$(lsb_release -sc) elif [ -r /etc/os-release ]; then os_codename=$(. /etc/os-release && echo "$VERSION_CODENAME") fi # 兼容官方已移除的老系统代号（回退使用 releases 尝试旧包库） if ! echo "bookworm trixie forky sid noble plucky questing resolute faye gigi wilma xia zara zena" | grep -qw "$os_codename"; then os_codename="releases" fi # 官方已彻底移除对 jammy, focal, bullseye 等老系统的 apt 支持 if echo "jammy focal bullseye buster" | grep -qw "$os_codename" || [ "$os_codename" = "releases" ]; then echo -e "${gl_hong}XanMod 官方已停止对当前系统($os_codename)的 APT 源支持，请升级至 Debian12 / Ubuntu24 或更高版本。${gl_bai}" return 1 fi if [ -z "$os_codename" ]; then echo "无法获取系统代号，无法配置XanMod源" return 1 fi install wget gnupg ca-certificates mkdir -p /usr/share/keyrings /etc/apt/sources.list.d if ! wget -qO - "$key_url" | gpg --dearmor -o "$keyring" --yes; then echo "官方密钥下载失败，尝试备用下载源..." wget -qO - "$fallback_key_url" | gpg --dearmor -o "$keyring" --yes || return 1 fi chmod 644 "$keyring" echo "deb [signed-by=$keyring] http://deb.xanmod.org $os_codename main" > "$list_file" } xanmod_detect_psabi_level() { local psabi_output="" psabi_output=$(awk 'BEGIN { while (!/flags/) if (getline < "/proc/cpuinfo" != 1) exit 1 if (/lm/&&/cmov/&&/cx8/&&/fpu/&&/fxsr/&&/mmx/&&/syscall/&&/sse2/) level = 1 if (level == 1 && /cx16/&&/lahf/&&/popcnt/&&/sse4_1/&&/sse4_2/&&/ssse3/) level = 2 if (level == 2 && /avx/&&/avx2/&&/bmi1/&&/bmi2/&&/f16c/&&/fma/&&/abm/&&/movbe/&&/xsave/) level = 3 if (level == 3 && /avx512f/&&/avx512bw/&&/avx512cd/&&/avx512dq/&&/avx512vl/) level = 4 if (level > 0) { print level; exit } exit 1 }' /proc/cpuinfo 2>/dev/null) || return 1 printf '%s' "$psabi_output" | tr -dc '0-9' | head -c 1 } xanmod_package_available() { local package="$1" apt-cache policy "$package" 2>/dev/null | grep -q 'Candidate: [^ ]' } xanmod_detect_package() { local psabi_level="" local level="" local package="" local prefix_list="linux-xanmod linux-xanmod-lts" psabi_level=$(xanmod_detect_psabi_level) || return 1 [ -n "$psabi_level" ] || return 1 [ "$psabi_level" -gt 3 ] && psabi_level=3 apt update -y >/dev/null 2>&1 for prefix in $prefix_list; do level="$psabi_level" while [ "$level" -ge 1 ]; do package="${prefix}-x64v${level}" if xanmod_package_available "$package"; then if [ "$level" != "$psabi_level" ] || [ "$prefix" = "linux-xanmod-lts" ]; then echo "已自动匹配合适安装包: $package" >&2 fi printf '%s\n' "$package" return 0 fi level=$((level - 1)) done done echo "软件源中未找到适配此CPU的XanMod内核包" >&2 return 1 } xanmod_installed() { dpkg-query -W -f='${Package}\n' 'linux-*xanmod*' 2>/dev/null | grep -q '^linux-.*xanmod' } xanmod_install_or_update() { local action="$1" local package="" check_disk_space 3 check_swap xanmod_add_repo || { echo "XanMod官方仓库配置失败，请稍后重试" return 1 } package=$(xanmod_detect_package) || { echo "无法识别当前CPU或找不到匹配内核包，已取消安装" return 1 } apt update -y if [ "$action" = "update" ]; then apt install -y --only-upgrade "$package" || apt install -y "$package" || { echo "XanMod内核更新失败，请检查软件源或稍后重试" return 1 } else apt install -y "$package" || { echo "XanMod内核安装失败，请检查软件源或稍后重试" return 1 } fi bbr_on || { echo "BBR3参数写入失败，请检查系统配置" return 1 } echo "XanMod BBRv3内核处理完成。重启后生效" server_reboot } xanmod_uninstall() { apt purge -y 'linux-*xanmod*' apt autoremove -y update-grub 2>/dev/null || true rm -f /etc/apt/sources.list.d/xanmod-release.list rm -f /usr/share/keyrings/xanmod-archive-keyring.gpg echo "XanMod内核已卸载。重启后生效" server_reboot } local cpu_arch=$(uname -m) if [ "$cpu_arch" = "aarch64" ]; then bash <(curl -sL jhb.ovh/jb/bbrv3arm.sh) break_end linux_Settings fi if [ -r /etc/os-release ]; then . /etc/os-release if [ "$ID" != "debian" ] && [ "$ID" != "ubuntu" ]; then echo "当前环境不支持，仅支持Debian和Ubuntu系统" break_end linux_Settings fi else echo "无法确定操作系统类型" break_end linux_Settings fi if xanmod_installed; then while true; do clear local kernel_version=$(uname -r) echo "您已安装xanmod的BBRv3内核" echo "当前内核版本: $kernel_version" echo "" echo "内核管理" echo "------------------------" echo "1. 更新BBRv3内核 2. 卸载BBRv3内核" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) xanmod_install_or_update update ;; 2) xanmod_uninstall ;; *) break ;; esac done else clear echo "设置BBR3加速" echo "视频介绍: https://www.bilibili.com/video/BV14K421x7BS?t=0.1" echo "------------------------------------------------" echo "仅支持Debian/Ubuntu" echo "请备份数据，将为你升级Linux内核开启BBR3" echo "------------------------------------------------" read -e -p "确定继续吗？(Y/N): " choice case "$choice" in [Yy]) xanmod_install_or_update install ;; [Nn]) echo "已取消" ;; *) echo "无效的选择，请输入 Y 或 N。" ;; esac fi } elrepo_install() { # 导入 ELRepo GPG 公钥 echo "导入 ELRepo GPG 公钥..." rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org # 检测系统版本 local os_version=$(rpm -q --qf "%{VERSION}" $(rpm -qf /etc/os-release) 2>/dev/null | awk -F '.' '{print $1}') local os_name=$(awk -F= '/^NAME/{print $2}' /etc/os-release) # 确保我们在一个支持的操作系统上运行 if [[ "$os_name" != *"Red Hat"* && "$os_name" != *"AlmaLinux"* && "$os_name" != *"Rocky"* && "$os_name" != *"Oracle"* && "$os_name" != *"CentOS"* ]]; then echo "不支持的操作系统：$os_name" break_end linux_Settings fi # 打印检测到的操作系统信息 echo "检测到的操作系统: $os_name $os_version" # 根据系统版本安装对应的 ELRepo 仓库配置 if [[ "$os_version" == 8 ]]; then echo "安装 ELRepo 仓库配置 (版本 8)..." yum -y install https://www.elrepo.org/elrepo-release-8.el8.elrepo.noarch.rpm elif [[ "$os_version" == 9 ]]; then echo "安装 ELRepo 仓库配置 (版本 9)..." yum -y install https://www.elrepo.org/elrepo-release-9.el9.elrepo.noarch.rpm elif [[ "$os_version" == 10 ]]; then echo "安装 ELRepo 仓库配置 (版本 10)..." yum -y install https://www.elrepo.org/elrepo-release-10.el10.elrepo.noarch.rpm else echo "不支持的系统版本：$os_version" break_end linux_Settings fi # 启用 ELRepo 内核仓库并安装最新的主线内核 echo "启用 ELRepo 内核仓库并安装最新的主线内核..." # yum -y --enablerepo=elrepo-kernel install kernel-ml yum --nogpgcheck -y --enablerepo=elrepo-kernel install kernel-ml echo "已安装 ELRepo 仓库配置并更新到最新主线内核。" server_reboot } elrepo() { root_use send_stats "红帽内核管理" if uname -r | grep -q 'elrepo'; then while true; do clear kernel_version=$(uname -r) echo "您已安装elrepo内核" echo "当前内核版本: $kernel_version" echo "" echo "内核管理" echo "------------------------" echo "1. 更新elrepo内核 2. 卸载elrepo内核" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) dnf remove -y elrepo-release rpm -qa | grep elrepo | grep kernel | xargs rpm -e --nodeps elrepo_install send_stats "更新红帽内核" server_reboot ;; 2) dnf remove -y elrepo-release rpm -qa | grep elrepo | grep kernel | xargs rpm -e --nodeps echo "elrepo内核已卸载。重启后生效" send_stats "卸载红帽内核" server_reboot ;; *) break # 跳出循环，退出菜单 ;; esac done else clear echo "请备份数据，将为你升级Linux内核" echo "视频介绍: https://www.bilibili.com/video/BV1mH4y1w7qA?t=529.2" echo "------------------------------------------------" echo "仅支持红帽系列发行版 CentOS/RedHat/Alma/Rocky/oracle " echo "升级Linux内核可提升系统性能和安全，建议有条件的尝试，生产环境谨慎升级！" echo "------------------------------------------------" read -e -p "确定继续吗？(Y/N): " choice case "$choice" in [Yy]) check_swap elrepo_install send_stats "升级红帽内核" server_reboot ;; [Nn]) echo "已取消" ;; *) echo "无效的选择，请输入 Y 或 N。" ;; esac fi } clamav_freshclam() { echo -e "${gl_kjlan}正在更新病毒库...${gl_bai}" docker run --rm \ --name clamav \ --mount source=clam_db,target=/var/lib/clamav \ clamav/clamav-debian:latest \ freshclam } clamav_scan() { if [ $# -eq 0 ]; then echo "请指定要扫描的目录。" return fi echo -e "${gl_kjlan}正在扫描目录$@... ${gl_bai}" # 构建 mount 参数 local MOUNT_PARAMS="" for dir in "$@"; do MOUNT_PARAMS+="--mount type=bind,source=${dir},target=/mnt/host${dir} " done # 构建 clamscan 命令参数 local SCAN_PARAMS="" for dir in "$@"; do SCAN_PARAMS+="/mnt/host${dir} " done mkdir -p /home/docker/clamav/log/ > /dev/null 2>&1 > /home/docker/clamav/log/scan.log > /dev/null 2>&1 # 执行 Docker 命令 docker run --rm \ --name clamav \ --mount source=clam_db,target=/var/lib/clamav \ $MOUNT_PARAMS \ -v /home/docker/clamav/log/:/var/log/clamav/ \ clamav/clamav-debian:latest \ clamscan -r --log=/var/log/clamav/scan.log $SCAN_PARAMS echo -e "${gl_lv}$@ 扫描完成，病毒报告存放在${gl_huang}/home/docker/clamav/log/scan.log${gl_bai}" echo -e "${gl_lv}如果有病毒请在${gl_huang}scan.log${gl_lv}文件中搜索FOUND关键字确认病毒位置 ${gl_bai}" } clamav() { root_use send_stats "病毒扫描管理" while true; do clear echo "clamav病毒扫描工具" echo "视频介绍: https://www.bilibili.com/video/BV1TqvZe4EQm?t=0.1" echo "------------------------" echo "是一个开源的防病毒软件工具，主要用于检测和删除各种类型的恶意软件。" echo "包括病毒、特洛伊木马、间谍软件、恶意脚本和其他有害软件。" echo "------------------------" echo -e "${gl_lv}1. 全盘扫描 ${gl_bai} ${gl_huang}2. 重要目录扫描 ${gl_bai} ${gl_kjlan} 3. 自定义目录扫描 ${gl_bai}" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) send_stats "全盘扫描" install_docker docker volume create clam_db > /dev/null 2>&1 clamav_freshclam clamav_scan / break_end ;; 2) send_stats "重要目录扫描" install_docker docker volume create clam_db > /dev/null 2>&1 clamav_freshclam clamav_scan /etc /var /usr /home /root break_end ;; 3) send_stats "自定义目录扫描" read -e -p "请输入要扫描的目录，用空格分隔（例如：/etc /var /usr /home /root）: " directories install_docker clamav_freshclam clamav_scan $directories break_end ;; *) break # 跳出循环，退出菜单 ;; esac done } # ============================================================================ # Linux 内核调优模块（重构版） # 统一核心函数 + 场景差异化参数 + 持久化到配置文件 + 硬件自适应 # 替换原 optimize_high_performance / optimize_balanced / optimize_web_server / restore_defaults # ============================================================================ # 获取内存大小（MB） _get_mem_mb() { awk '/MemTotal/{printf "%d", $2/1024}' /proc/meminfo } # 统一内核调优核心函数 # 参数: $1 = 模式名称, $2 = 场景 (high/balanced/web/stream/game) _kernel_optimize_core() { local mode_name="$1" local scene="${2:-high}" local CONF="/etc/sysctl.d/99-kejilion-optimize.conf" local MEM_MB=$(_get_mem_mb) echo -e "${gl_lv}切换到${mode_name}...${gl_bai}" # ── 根据场景设定参数 ── local SWAPPINESS DIRTY_RATIO DIRTY_BG_RATIO OVERCOMMIT MIN_FREE_KB VFS_PRESSURE local RMEM_MAX WMEM_MAX TCP_RMEM TCP_WMEM local SOMAXCONN BACKLOG SYN_BACKLOG local PORT_RANGE SCHED_AUTOGROUP THP NUMA FIN_TIMEOUT local KEEPALIVE_TIME KEEPALIVE_INTVL KEEPALIVE_PROBES case "$scene" in high|stream|game) # 高性能/直播/游戏：激进参数 SWAPPINESS=10 DIRTY_RATIO=15 DIRTY_BG_RATIO=5 OVERCOMMIT=1 VFS_PRESSURE=50 RMEM_MAX=67108864 WMEM_MAX=67108864 TCP_RMEM="4096 262144 67108864" TCP_WMEM="4096 262144 67108864" SOMAXCONN=8192 BACKLOG=250000 SYN_BACKLOG=8192 PORT_RANGE="1024 65535" SCHED_AUTOGROUP=0 THP="never" NUMA=0 FIN_TIMEOUT=10 KEEPALIVE_TIME=300 KEEPALIVE_INTVL=30 KEEPALIVE_PROBES=5 ;; web) # 网站服务器：高并发优先 SWAPPINESS=10 DIRTY_RATIO=20 DIRTY_BG_RATIO=10 OVERCOMMIT=1 VFS_PRESSURE=50 RMEM_MAX=33554432 WMEM_MAX=33554432 TCP_RMEM="4096 131072 33554432" TCP_WMEM="4096 131072 33554432" SOMAXCONN=16384 BACKLOG=10000 SYN_BACKLOG=16384 PORT_RANGE="1024 65535" SCHED_AUTOGROUP=0 THP="never" NUMA=0 FIN_TIMEOUT=15 KEEPALIVE_TIME=600 KEEPALIVE_INTVL=60 KEEPALIVE_PROBES=5 ;; balanced) # 均衡模式：适度优化 SWAPPINESS=30 DIRTY_RATIO=20 DIRTY_BG_RATIO=10 OVERCOMMIT=0 VFS_PRESSURE=75 RMEM_MAX=16777216 WMEM_MAX=16777216 TCP_RMEM="4096 87380 16777216" TCP_WMEM="4096 65536 16777216" SOMAXCONN=4096 BACKLOG=5000 SYN_BACKLOG=4096 PORT_RANGE="1024 49151" SCHED_AUTOGROUP=1 THP="always" NUMA=1 FIN_TIMEOUT=30 KEEPALIVE_TIME=600 KEEPALIVE_INTVL=60 KEEPALIVE_PROBES=5 ;; esac # ── 根据内存大小自适应调整 ── if [ "$MEM_MB" -ge 16384 ]; then MIN_FREE_KB=131072 [ "$scene" != "balanced" ] && SWAPPINESS=5 elif [ "$MEM_MB" -ge 4096 ]; then MIN_FREE_KB=65536 elif [ "$MEM_MB" -ge 1024 ]; then MIN_FREE_KB=32768 # 小内存缩小缓冲区 if [ "$scene" != "balanced" ]; then RMEM_MAX=16777216 WMEM_MAX=16777216 TCP_RMEM="4096 87380 16777216" TCP_WMEM="4096 65536 16777216" fi else MIN_FREE_KB=16384 SWAPPINESS=30 OVERCOMMIT=0 RMEM_MAX=4194304 WMEM_MAX=4194304 TCP_RMEM="4096 32768 4194304" TCP_WMEM="4096 32768 4194304" SOMAXCONN=1024 BACKLOG=1000 fi # ── 直播场景额外：UDP 缓冲区加大 ── local STREAM_EXTRA="" if [ "$scene" = "stream" ]; then STREAM_EXTRA=" # 直播推流 UDP 优化 net.ipv4.udp_rmem_min = 16384 net.ipv4.udp_wmem_min = 16384 net.ipv4.tcp_notsent_lowat = 16384" fi # ── 游戏服场景额外：低延迟优先 ── local GAME_EXTRA="" if [ "$scene" = "game" ]; then GAME_EXTRA=" # 游戏服低延迟优化 net.ipv4.udp_rmem_min = 16384 net.ipv4.udp_wmem_min = 16384 net.ipv4.tcp_notsent_lowat = 16384 net.ipv4.tcp_slow_start_after_idle = 0" fi # ── 加载 BBR 模块 ── local CC="bbr" local QDISC="fq" local KVER KVER=$(uname -r | grep -oP '^\d+\.\d+') if printf '%s\n%s' "4.9" "$KVER" | sort -V -C; then if ! lsmod 2>/dev/null | grep -q tcp_bbr; then modprobe tcp_bbr 2>/dev/null fi if ! sysctl net.ipv4.tcp_available_congestion_control 2>/dev/null | grep -q bbr; then CC="cubic" QDISC="fq_codel" fi else CC="cubic" QDISC="fq_codel" fi # ── 备份已有配置 ── [ -f "$CONF" ] && cp "$CONF" "${CONF}.bak.$(date +%s)" # ── 写入配置文件（持久化） ── echo -e "${gl_lv}写入优化配置...${gl_bai}" cat > "$CONF" << SYSCTL # kejilion 内核调优配置 # 模式: $mode_name | 场景: $scene # 内存: ${MEM_MB}MB | 生成时间: $(date '+%Y-%m-%d %H:%M:%S') # ── TCP 拥塞控制 ── net.core.default_qdisc = $QDISC net.ipv4.tcp_congestion_control = $CC # ── TCP 缓冲区 ── net.core.rmem_max = $RMEM_MAX net.core.wmem_max = $WMEM_MAX net.core.rmem_default = $(echo "$TCP_RMEM" | awk '{print $2}') net.core.wmem_default = $(echo "$TCP_WMEM" | awk '{print $2}') net.ipv4.tcp_rmem = $TCP_RMEM net.ipv4.tcp_wmem = $TCP_WMEM # ── 连接队列 ── net.core.somaxconn = $SOMAXCONN net.core.netdev_max_backlog = $BACKLOG net.ipv4.tcp_max_syn_backlog = $SYN_BACKLOG # ── TCP 连接优化 ── net.ipv4.tcp_fastopen = 3 net.ipv4.tcp_tw_reuse = 1 net.ipv4.tcp_fin_timeout = $FIN_TIMEOUT net.ipv4.tcp_keepalive_time = $KEEPALIVE_TIME net.ipv4.tcp_keepalive_intvl = $KEEPALIVE_INTVL net.ipv4.tcp_keepalive_probes = $KEEPALIVE_PROBES net.ipv4.tcp_max_tw_buckets = 65536 net.ipv4.tcp_syncookies = 1 net.ipv4.tcp_synack_retries = 2 net.ipv4.tcp_syn_retries = 3 net.ipv4.tcp_mtu_probing = 1 net.ipv4.tcp_sack = 1 net.ipv4.tcp_timestamps = 1 net.ipv4.tcp_window_scaling = 1 # ── 端口与内存 ── net.ipv4.ip_local_port_range = $PORT_RANGE net.ipv4.tcp_mem = $((MEM_MB * 1024 / 8)) $((MEM_MB * 1024 / 4)) $((MEM_MB * 1024 / 2)) net.ipv4.tcp_max_orphans = 32768 # ── 虚拟内存 ── vm.swappiness = $SWAPPINESS vm.dirty_ratio = $DIRTY_RATIO vm.dirty_background_ratio = $DIRTY_BG_RATIO vm.overcommit_memory = $OVERCOMMIT vm.min_free_kbytes = $MIN_FREE_KB vm.vfs_cache_pressure = $VFS_PRESSURE # ── CPU/内核调度 ── kernel.sched_autogroup_enabled = $SCHED_AUTOGROUP $([ -f /proc/sys/kernel/numa_balancing ] && echo "kernel.numa_balancing = $NUMA" || echo "# numa_balancing 不支持") # ── 安全防护 ── net.ipv4.conf.all.rp_filter = 1 net.ipv4.conf.default.rp_filter = 1 net.ipv4.icmp_echo_ignore_broadcasts = 1 net.ipv4.icmp_ignore_bogus_error_responses = 1 net.ipv4.conf.all.accept_redirects = 0 net.ipv4.conf.default.accept_redirects = 0 net.ipv4.conf.all.send_redirects = 0 net.ipv4.conf.default.send_redirects = 0 net.ipv6.conf.all.accept_redirects = 0 net.ipv6.conf.default.accept_redirects = 0 # ── 文件描述符 ── fs.file-max = 1048576 fs.nr_open = 1048576 # ── 连接跟踪 ── $(if [ -f /proc/sys/net/netfilter/nf_conntrack_max ]; then echo "net.netfilter.nf_conntrack_max = $((SOMAXCONN * 32))" echo "net.netfilter.nf_conntrack_tcp_timeout_established = 7200" echo "net.netfilter.nf_conntrack_tcp_timeout_time_wait = 30" echo "net.netfilter.nf_conntrack_tcp_timeout_close_wait = 15" echo "net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 15" else echo "# conntrack 未启用" fi) $STREAM_EXTRA $GAME_EXTRA SYSCTL # ── 应用配置（逐行，跳过不支持的参数） ── echo -e "${gl_lv}应用优化参数...${gl_bai}" local applied=0 skipped=0 while IFS= read -r line; do # 跳过注释和空行 [[ "$line" =~ ^[[:space:]]*# ]] && continue [[ -z "${line// /}" ]] && continue if sysctl -w "$line" >/dev/null 2>&1; then applied=$((applied + 1)) else skipped=$((skipped + 1)) fi done < "$CONF" echo -e "${gl_lv}已应用 ${applied} 项参数${skipped:+，跳过 ${skipped} 项不支持的参数}${gl_bai}" # ── 透明大页面 ── if [ -f /sys/kernel/mm/transparent_hugepage/enabled ]; then echo "$THP" > /sys/kernel/mm/transparent_hugepage/enabled 2>/dev/null fi # ── 文件描述符限制 ── if ! grep -q "# kejilion-optimize" /etc/security/limits.conf 2>/dev/null; then cat >> /etc/security/limits.conf << 'LIMITS' # kejilion-optimize * soft nofile 1048576 * hard nofile 1048576 root soft nofile 1048576 root hard nofile 1048576 LIMITS fi # ── BBR 持久化 ── if [ "$CC" = "bbr" ]; then echo "tcp_bbr" > /etc/modules-load.d/bbr.conf 2>/dev/null # 清理旧的 sysctl.conf 里的 bbr 配置（避免冲突） sed -i '/net.ipv4.tcp_congestion_control/d' /etc/sysctl.conf 2>/dev/null fi echo -e "${gl_lv}${mode_name} 优化完成！配置已持久化到 ${CONF}${gl_bai}" echo -e "${gl_lv}内存: ${MEM_MB}MB | 拥塞算法: ${CC} | 队列: ${QDISC}${gl_bai}" } # ── 各模式入口函数（保持原有调用接口不变） ── optimize_high_performance() { _kernel_optimize_core "${tiaoyou_moshi:-高性能优化模式}" "high" } optimize_balanced() { _kernel_optimize_core "均衡优化模式" "balanced" } optimize_web_server() { _kernel_optimize_core "网站搭建优化模式" "web" } # ── 还原默认设置（完全清理） ── restore_defaults() { echo -e "${gl_lv}还原到默认设置...${gl_bai}" local CONF="/etc/sysctl.d/99-kejilion-optimize.conf" # 删除优化配置文件（含外链自动调优配置） rm -f "$CONF" rm -f /etc/sysctl.d/99-network-optimize.conf # 清理 sysctl.conf 里可能残留的 bbr 配置 sed -i '/net.ipv4.tcp_congestion_control/d' /etc/sysctl.conf 2>/dev/null # 重新加载系统默认配置 sysctl --system 2>/dev/null | tail -1 # 还原透明大页面 [ -f /sys/kernel/mm/transparent_hugepage/enabled ] && \ echo always > /sys/kernel/mm/transparent_hugepage/enabled 2>/dev/null # 清理文件描述符配置 if grep -q "# kejilion-optimize" /etc/security/limits.conf 2>/dev/null; then sed -i '/# kejilion-optimize/,+4d' /etc/security/limits.conf fi # 清理 BBR 持久化 rm -f /etc/modules-load.d/bbr.conf 2>/dev/null echo -e "${gl_lv}系统已还原到默认设置${gl_bai}" } Kernel_optimize() { root_use while true; do clear send_stats "Linux内核调优管理" local current_mode=$(grep "^# 模式:" /etc/sysctl.d/99-kejilion-optimize.conf 2>/dev/null | sed 's/# 模式: //' | awk -F'|' '{print $1}' | xargs) [ -z "$current_mode" ] && [ -f /etc/sysctl.d/99-network-optimize.conf ] && current_mode="自动调优模式" echo "Linux系统内核参数优化" if [ -n "$current_mode" ]; then echo -e "当前模式: ${gl_lv}${current_mode}${gl_bai}" else echo -e "当前模式: ${gl_hui}未优化${gl_bai}" fi echo "视频介绍: https://www.bilibili.com/video/BV1Kb421J7yg?t=0.1" echo "------------------------------------------------" echo "提供多种系统参数调优模式，用户可以根据自身使用场景进行选择切换。" echo -e "${gl_huang}提示: ${gl_bai}生产环境请谨慎使用！" echo -e "--------------------" echo -e "1. 高性能优化模式： 最大化系统性能，激进的内存和网络参数。" echo -e "2. 均衡优化模式： 在性能与资源消耗之间取得平衡，适合日常使用。" echo -e "3. 网站优化模式： 针对网站服务器优化，超高并发连接队列。" echo -e "4. 直播优化模式： 针对直播推流优化，UDP 缓冲区加大，减少延迟。" echo -e "5. 游戏服优化模式： 针对游戏服务器优化，低延迟优先。" echo -e "6. 还原默认设置： 将系统设置还原为默认配置。" echo -e "7. 自动调优： 根据测试数据自动调优内核参数。${gl_huang}★${gl_bai}" echo "--------------------" echo "0. 返回上一级选单" echo "--------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) cd ~ clear local tiaoyou_moshi="高性能优化模式" optimize_high_performance send_stats "高性能模式优化" ;; 2) cd ~ clear optimize_balanced send_stats "均衡模式优化" ;; 3) cd ~ clear optimize_web_server send_stats "网站优化模式" ;; 4) cd ~ clear _kernel_optimize_core "直播优化模式" "stream" send_stats "直播推流优化" ;; 5) cd ~ clear _kernel_optimize_core "游戏服优化模式" "game" send_stats "游戏服优化" ;; 6) cd ~ clear restore_defaults curl -sS ${gh_proxy}raw.githubusercontent.com/kejilion/sh/refs/heads/main/network-optimize.sh -o /tmp/network-optimize.sh && source /tmp/network-optimize.sh && restore_network_defaults send_stats "还原默认设置" ;; 7) cd ~ clear curl -sS ${gh_proxy}raw.githubusercontent.com/kejilion/sh/refs/heads/main/network-optimize.sh | bash send_stats "内核自动调优" ;; *) break ;; esac break_end done } update_locale() { local lang=$1 local locale_file=$2 if [ -f /etc/os-release ]; then . /etc/os-release case $ID in debian|ubuntu|kali) install locales sed -i "s/^\s*#\?\s*${locale_file}/${locale_file}/" /etc/locale.gen locale-gen echo "LANG=${lang}" > /etc/default/locale export LANG=${lang} echo -e "${gl_lv}系统语言已经修改为: $lang 重新连接SSH生效。${gl_bai}" hash -r break_end ;; centos|rhel|almalinux|rocky|fedora) install glibc-langpack-zh localectl set-locale LANG=${lang} echo "LANG=${lang}" | tee /etc/locale.conf echo -e "${gl_lv}系统语言已经修改为: $lang 重新连接SSH生效。${gl_bai}" hash -r break_end ;; *) echo "不支持的系统: $ID" break_end ;; esac else echo "不支持的系统，无法识别系统类型。" break_end fi } linux_language() { root_use send_stats "切换系统语言" while true; do clear echo "当前系统语言: $LANG" echo "------------------------" echo "1. 英文 2. 简体中文 3. 繁体中文" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "输入你的选择: " choice case $choice in 1) update_locale "en_US.UTF-8" "en_US.UTF-8" send_stats "切换到英文" ;; 2) update_locale "zh_CN.UTF-8" "zh_CN.UTF-8" send_stats "切换到简体中文" ;; 3) update_locale "zh_TW.UTF-8" "zh_TW.UTF-8" send_stats "切换到繁体中文" ;; *) break ;; esac done } shell_bianse_profile() { if command -v dnf &>/dev/null || command -v yum &>/dev/null; then sed -i '/^PS1=/d' ~/.bashrc echo "${bianse}" >> ~/.bashrc # source ~/.bashrc else sed -i '/^PS1=/d' ~/.profile echo "${bianse}" >> ~/.profile # source ~/.profile fi echo -e "${gl_lv}变更完成。重新连接SSH后可查看变化！${gl_bai}" hash -r break_end } shell_bianse() { root_use send_stats "命令行美化工具" while true; do clear echo "命令行美化工具" echo "------------------------" echo -e "1. \033[1;32mroot \033[1;34mlocalhost \033[1;31m~ \033[0m${gl_bai}#" echo -e "2. \033[1;35mroot \033[1;36mlocalhost \033[1;33m~ \033[0m${gl_bai}#" echo -e "3. \033[1;31mroot \033[1;32mlocalhost \033[1;34m~ \033[0m${gl_bai}#" echo -e "4. \033[1;36mroot \033[1;33mlocalhost \033[1;37m~ \033[0m${gl_bai}#" echo -e "5. \033[1;37mroot \033[1;31mlocalhost \033[1;32m~ \033[0m${gl_bai}#" echo -e "6. \033[1;33mroot \033[1;34mlocalhost \033[1;35m~ \033[0m${gl_bai}#" echo -e "7. root localhost ~ #" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "输入你的选择: " choice case $choice in 1) local bianse="PS1='\[\033[1;32m\]\u\[\033[0m\]@\[\033[1;34m\]\h\[\033[0m\] \[\033[1;31m\]\w\[\033[0m\] # '" shell_bianse_profile ;; 2) local bianse="PS1='\[\033[1;35m\]\u\[\033[0m\]@\[\033[1;36m\]\h\[\033[0m\] \[\033[1;33m\]\w\[\033[0m\] # '" shell_bianse_profile ;; 3) local bianse="PS1='\[\033[1;31m\]\u\[\033[0m\]@\[\033[1;32m\]\h\[\033[0m\] \[\033[1;34m\]\w\[\033[0m\] # '" shell_bianse_profile ;; 4) local bianse="PS1='\[\033[1;36m\]\u\[\033[0m\]@\[\033[1;33m\]\h\[\033[0m\] \[\033[1;37m\]\w\[\033[0m\] # '" shell_bianse_profile ;; 5) local bianse="PS1='\[\033[1;37m\]\u\[\033[0m\]@\[\033[1;31m\]\h\[\033[0m\] \[\033[1;32m\]\w\[\033[0m\] # '" shell_bianse_profile ;; 6) local bianse="PS1='\[\033[1;33m\]\u\[\033[0m\]@\[\033[1;34m\]\h\[\033[0m\] \[\033[1;35m\]\w\[\033[0m\] # '" shell_bianse_profile ;; 7) local bianse="" shell_bianse_profile ;; *) break ;; esac done } linux_trash() { root_use send_stats "系统回收站" local bashrc_profile="/root/.bashrc" local TRASH_DIR="$HOME/.local/share/Trash/files" while true; do local trash_status if ! grep -q "trash-put" "$bashrc_profile"; then trash_status="${gl_hui}未启用${gl_bai}" else trash_status="${gl_lv}已启用${gl_bai}" fi clear echo -e "当前回收站 ${trash_status}" echo -e "启用后rm删除的文件先进入回收站，防止误删重要文件！" echo "------------------------------------------------" ls -l --color=auto "$TRASH_DIR" 2>/dev/null || echo "回收站为空" echo "------------------------" echo "1. 启用回收站 2. 关闭回收站" echo "3. 还原内容 4. 清空回收站" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "输入你的选择: " choice case $choice in 1) install trash-cli sed -i '/alias rm/d' "$bashrc_profile" echo "alias rm='trash-put'" >> "$bashrc_profile" source "$bashrc_profile" echo "回收站已启用，删除的文件将移至回收站。" sleep 2 ;; 2) remove trash-cli sed -i '/alias rm/d' "$bashrc_profile" echo "alias rm='rm -i'" >> "$bashrc_profile" source "$bashrc_profile" echo "回收站已关闭，文件将直接删除。" sleep 2 ;; 3) read -e -p "输入要还原的文件名: " file_to_restore if [ -e "$TRASH_DIR/$file_to_restore" ]; then mv "$TRASH_DIR/$file_to_restore" "$HOME/" echo "$file_to_restore 已还原到主目录。" else echo "文件不存在。" fi ;; 4) read -e -p "确认清空回收站？[y/n]: " confirm if [[ "$confirm" == "y" ]]; then trash-empty echo "回收站已清空。" fi ;; *) break ;; esac done } linux_fav() { send_stats "命令收藏夹" bash <(curl -l -s ${gh_proxy}raw.githubusercontent.com/byJoey/cmdbox/refs/heads/main/install.sh) } # 创建备份 create_backup() { send_stats "创建备份" local TIMESTAMP=$(date +"%Y%m%d%H%M%S") # 提示用户输入备份目录 echo "创建备份示例：" echo " - 备份单个目录: /var/www" echo " - 备份多个目录: /etc /home /var/log" echo " - 直接回车将使用默认目录 (/etc /usr /home)" read -e -p "请输入要备份的目录（多个目录用空格分隔，直接回车则使用默认目录）：" input # 如果用户没有输入目录，则使用默认目录 if [ -z "$input" ]; then BACKUP_PATHS=( "/etc" # 配置文件和软件包配置 "/usr" # 已安装的软件文件 "/home" # 用户数据 ) else # 将用户输入的目录按空格分隔成数组 IFS=' ' read -r -a BACKUP_PATHS <<< "$input" fi # 生成备份文件前缀 local PREFIX="" for path in "${BACKUP_PATHS[@]}"; do # 提取目录名称并去除斜杠 dir_name=$(basename "$path") PREFIX+="${dir_name}_" done # 去除最后一个下划线 local PREFIX=${PREFIX%_} # 生成备份文件名 local BACKUP_NAME="${PREFIX}_$TIMESTAMP.tar.gz" # 打印用户选择的目录 echo "您选择的备份目录为：" for path in "${BACKUP_PATHS[@]}"; do echo "- $path" done # 创建备份 echo "正在创建备份 $BACKUP_NAME..." install tar tar -czvf "$BACKUP_DIR/$BACKUP_NAME" "${BACKUP_PATHS[@]}" # 检查命令是否成功 if [ $? -eq 0 ]; then echo "备份创建成功: $BACKUP_DIR/$BACKUP_NAME" else echo "备份创建失败！" exit 1 fi } # 恢复备份 restore_backup() { send_stats "恢复备份" # 选择要恢复的备份 read -e -p "请输入要恢复的备份文件名: " BACKUP_NAME # 检查备份文件是否存在 if [ ! -f "$BACKUP_DIR/$BACKUP_NAME" ]; then echo "备份文件不存在！" exit 1 fi echo "正在恢复备份 $BACKUP_NAME..." tar -xzvf "$BACKUP_DIR/$BACKUP_NAME" -C / if [ $? -eq 0 ]; then echo "备份恢复成功！" else echo "备份恢复失败！" exit 1 fi } # 列出备份 list_backups() { echo "可用的备份：" ls -1 "$BACKUP_DIR" } # 删除备份 delete_backup() { send_stats "删除备份" read -e -p "请输入要删除的备份文件名: " BACKUP_NAME # 检查备份文件是否存在 if [ ! -f "$BACKUP_DIR/$BACKUP_NAME" ]; then echo "备份文件不存在！" exit 1 fi # 删除备份 rm -f "$BACKUP_DIR/$BACKUP_NAME" if [ $? -eq 0 ]; then echo "备份删除成功！" else echo "备份删除失败！" exit 1 fi } # 备份主菜单 linux_backup() { BACKUP_DIR="/backups" mkdir -p "$BACKUP_DIR" while true; do clear send_stats "系统备份功能" echo "系统备份功能" echo "------------------------" list_backups echo "------------------------" echo "1. 创建备份 2. 恢复备份 3. 删除备份" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " choice case $choice in 1) create_backup ;; 2) restore_backup ;; 3) delete_backup ;; *) break ;; esac read -e -p "按回车键继续..." done } # SSH 输入标准化函数 kj_ssh_validate_host() { local host="$1" [[ -n "$host" && ! "$host" =~ [[:space:]] && "$host" =~ ^[A-Za-z0-9._:-]+$ ]] } kj_ssh_validate_port() { local port="$1" [[ "$port" =~ ^[0-9]+$ ]] && [ "$port" -ge 1 ] && [ "$port" -le 65535 ] } kj_ssh_validate_user() { local user="$1" [[ -n "$user" && "$user" =~ ^[A-Za-z_][A-Za-z0-9._-]*$ ]] } kj_ssh_read_host_port() { local host_prompt="$1" local port_prompt="$2" local default_port="${3:-22}" while true; do read -e -p "$host_prompt" KJ_SSH_HOST if kj_ssh_validate_host "$KJ_SSH_HOST"; then break fi echo "错误: 请输入有效的服务器地址。" done while true; do read -e -p "$port_prompt" KJ_SSH_PORT KJ_SSH_PORT=${KJ_SSH_PORT:-$default_port} if kj_ssh_validate_port "$KJ_SSH_PORT"; then break fi echo "错误: 端口必须是 1-65535 之间的数字。" done } kj_ssh_read_host_user_port() { local host_prompt="$1" local user_prompt="$2" local port_prompt="$3" local default_user="${4:-root}" local default_port="${5:-22}" kj_ssh_read_host_port "$host_prompt" "$port_prompt" "$default_port" while true; do read -e -p "$user_prompt" KJ_SSH_USER KJ_SSH_USER=${KJ_SSH_USER:-$default_user} if kj_ssh_validate_user "$KJ_SSH_USER"; then break fi echo "错误: 用户名格式不正确。" done } kj_ssh_parse_remote() { local remote_raw="$1" local default_user="${2:-root}" local remote_user remote_host if [[ "$remote_raw" == *@* ]]; then remote_user="${remote_raw%@*}" remote_host="${remote_raw#*@}" else remote_user="$default_user" remote_host="$remote_raw" fi if ! kj_ssh_validate_user "$remote_user"; then echo "错误: SSH 用户名格式不正确。" return 1 fi if ! kj_ssh_validate_host "$remote_host"; then echo "错误: SSH 主机地址格式不正确。" return 1 fi KJ_SSH_USER="$remote_user" KJ_SSH_HOST="$remote_host" KJ_SSH_REMOTE="$remote_user@$remote_host" } kj_ssh_read_auth() { local key_file="$1" local password_or_key="" echo "请选择身份验证方式:" echo "1. 密码" echo "2. 密钥" read -e -p "请输入选择 (1/2): " auth_choice case $auth_choice in 1) read -s -p "请输入密码: " password_or_key echo if [ -z "$password_or_key" ]; then echo "错误: 密码不能为空。" return 1 fi KJ_SSH_AUTH_METHOD="password" KJ_SSH_AUTH_SECRET="$password_or_key" ;; 2) echo "请粘贴密钥内容 (粘贴完成后按两次回车)：" while IFS= read -r line; do if [[ -z "$line" && "$password_or_key" == *"-----BEGIN"* ]]; then break fi if [[ -n "$line" || "$password_or_key" == *"-----BEGIN"* ]]; then password_or_key+="${line}"$'\n' fi done if [[ "$password_or_key" != *"-----BEGIN"* || "$password_or_key" != *"PRIVATE KEY-----"* ]]; then echo "无效的密钥内容！" return 1 fi mkdir -p "$(dirname "$key_file")" echo -n "$password_or_key" > "$key_file" chmod 600 "$key_file" KJ_SSH_AUTH_METHOD="key" KJ_SSH_AUTH_SECRET="$key_file" ;; *) echo "无效的选择！" return 1 ;; esac } kj_ssh_read_password() { local prompt="${1:-请输入密码: }" while true; do read -e -s -p "$prompt" KJ_SSH_PASSWORD echo [ -n "$KJ_SSH_PASSWORD" ] && break echo "错误: 密码不能为空。" done } kj_ssh_read_port() { local port_prompt="$1" local default_port="${2:-22}" while true; do read -e -p "$port_prompt" KJ_SSH_PORT KJ_SSH_PORT=${KJ_SSH_PORT:-$default_port} if kj_ssh_validate_port "$KJ_SSH_PORT"; then return 0 fi echo "错误: 端口必须是 1-65535 之间的数字。" done } # 显示连接列表 list_connections() { echo "已保存的连接:" echo "------------------------" cat "$CONFIG_FILE" | awk -F'|' '{print NR " - " $1 " (" $2 ")"}' echo "------------------------" } # 添加新连接 add_connection() { send_stats "添加新连接" echo "创建新连接示例：" echo " - 连接名称: my_server" echo " - IP地址: 192.168.1.100" echo " - 用户名: root" echo " - 端口: 22" echo "------------------------" read -e -p "请输入连接名称: " name kj_ssh_read_host_user_port "请输入IP地址: " "请输入用户名 (默认: root): " "请输入端口号 (默认: 22): " "root" "22" if ! kj_ssh_read_auth "$KEY_DIR/$name.key"; then return fi echo "$name|$KJ_SSH_HOST|$KJ_SSH_USER|$KJ_SSH_PORT|$KJ_SSH_AUTH_SECRET" >> "$CONFIG_FILE" echo "连接已保存!" } # 删除连接 delete_connection() { send_stats "删除连接" read -e -p "请输入要删除的连接编号: " num local connection=$(sed -n "${num}p" "$CONFIG_FILE") if [[ -z "$connection" ]]; then echo "错误：未找到对应的连接。" return fi IFS='|' read -r name ip user port password_or_key <<< "$connection" # 如果连接使用的是密钥文件，则删除该密钥文件 if [[ "$password_or_key" == "$KEY_DIR"* ]]; then rm -f "$password_or_key" fi sed -i "${num}d" "$CONFIG_FILE" echo "连接已删除!" } # 使用连接 use_connection() { send_stats "使用连接" read -e -p "请输入要使用的连接编号: " num local connection=$(sed -n "${num}p" "$CONFIG_FILE") if [[ -z "$connection" ]]; then echo "错误：未找到对应的连接。" return fi IFS='|' read -r name ip user port password_or_key <<< "$connection" echo "正在连接到 $name ($ip)..." if [[ -f "$password_or_key" ]]; then # 使用密钥连接 ssh -o StrictHostKeyChecking=no -i "$password_or_key" -p "$port" "$user@$ip" if [[ $? -ne 0 ]]; then echo "连接失败！请检查以下内容：" echo "1. 密钥文件路径是否正确：$password_or_key" echo "2. 密钥文件权限是否正确（应为 600）。" echo "3. 目标服务器是否允许使用密钥登录。" fi else # 使用密码连接 if ! command -v sshpass &> /dev/null; then echo "错误：未安装 sshpass，请先安装 sshpass。" echo "安装方法：" echo " - Ubuntu/Debian: apt install sshpass" echo " - CentOS/RHEL: yum install sshpass" return fi sshpass -p "$password_or_key" ssh -o StrictHostKeyChecking=no -p "$port" "$user@$ip" if [[ $? -ne 0 ]]; then echo "连接失败！请检查以下内容：" echo "1. 用户名和密码是否正确。" echo "2. 目标服务器是否允许密码登录。" echo "3. 目标服务器的 SSH 服务是否正常运行。" fi fi } ssh_manager() { send_stats "ssh远程连接工具" CONFIG_FILE="$HOME/.ssh_connections" KEY_DIR="$HOME/.ssh/ssh_manager_keys" # 检查配置文件和密钥目录是否存在，如果不存在则创建 if [[ ! -f "$CONFIG_FILE" ]]; then touch "$CONFIG_FILE" fi if [[ ! -d "$KEY_DIR" ]]; then mkdir -p "$KEY_DIR" chmod 700 "$KEY_DIR" fi while true; do clear echo "SSH 远程连接工具" echo "可以通过SSH连接到其他Linux系统上" echo "------------------------" list_connections echo "1. 创建新连接 2. 使用连接 3. 删除连接" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " choice case $choice in 1) add_connection ;; 2) use_connection ;; 3) delete_connection ;; 0) break ;; *) echo "无效的选择，请重试。" ;; esac done } # 列出可用的硬盘分区 list_partitions() { echo "可用的硬盘分区：" lsblk -o NAME,SIZE,FSTYPE,MOUNTPOINT | grep -v "sr\|loop" } # 持久化挂载分区 mount_partition() { send_stats "挂载分区" read -e -p "请输入要挂载的分区名称（例如 sda1）: " PARTITION DEVICE="/dev/$PARTITION" MOUNT_POINT="/mnt/$PARTITION" # 检查分区是否存在 if ! lsblk -no NAME | grep -qw "$PARTITION"; then echo "分区不存在！" return 1 fi # 检查是否已挂载 if mount | grep -qw "$DEVICE"; then echo "分区已经挂载！" return 1 fi # 获取 UUID UUID=$(blkid -s UUID -o value "$DEVICE") if [ -z "$UUID" ]; then echo "无法获取 UUID！" return 1 fi # 获取文件系统类型 FSTYPE=$(blkid -s TYPE -o value "$DEVICE") if [ -z "$FSTYPE" ]; then echo "无法获取文件系统类型！" return 1 fi # 创建挂载点 mkdir -p "$MOUNT_POINT" # 挂载 if ! mount "$DEVICE" "$MOUNT_POINT"; then echo "分区挂载失败！" rmdir "$MOUNT_POINT" return 1 fi echo "分区已成功挂载到 $MOUNT_POINT" # 检查 /etc/fstab 是否已经存在 UUID 或挂载点 if grep -qE "UUID=$UUID|[[:space:]]$MOUNT_POINT[[:space:]]" /etc/fstab; then echo "/etc/fstab 中已存在该分区记录，跳过写入" return 0 fi # 写入 /etc/fstab echo "UUID=$UUID $MOUNT_POINT $FSTYPE defaults,nofail 0 2" >> /etc/fstab echo "已写入 /etc/fstab，实现持久化挂载" } # 卸载分区 unmount_partition() { send_stats "卸载分区" read -e -p "请输入要卸载的分区名称（例如 sda1）: " PARTITION # 检查分区是否已经挂载 MOUNT_POINT=$(lsblk -o MOUNTPOINT | grep -w "$PARTITION") if [ -z "$MOUNT_POINT" ]; then echo "分区未挂载！" return fi # 卸载分区 umount "/dev/$PARTITION" if [ $? -eq 0 ]; then echo "分区卸载成功: $MOUNT_POINT" rmdir "$MOUNT_POINT" else echo "分区卸载失败！" fi } # 列出已挂载的分区 list_mounted_partitions() { echo "已挂载的分区：" df -h | grep -v "tmpfs\|udev\|overlay" } # 格式化分区 format_partition() { send_stats "格式化分区" read -e -p "请输入要格式化的分区名称（例如 sda1）: " PARTITION # 检查分区是否存在 if ! lsblk -o NAME | grep -w "$PARTITION" > /dev/null; then echo "分区不存在！" return fi # 检查分区是否已经挂载 if lsblk -o MOUNTPOINT | grep -w "$PARTITION" > /dev/null; then echo "分区已经挂载，请先卸载！" return fi # 选择文件系统类型 echo "请选择文件系统类型：" echo "1. ext4" echo "2. xfs" echo "3. ntfs" echo "4. vfat" read -e -p "请输入你的选择: " FS_CHOICE case $FS_CHOICE in 1) FS_TYPE="ext4" ;; 2) FS_TYPE="xfs" ;; 3) FS_TYPE="ntfs" ;; 4) FS_TYPE="vfat" ;; *) echo "无效的选择！"; return ;; esac # 确认格式化 read -e -p "确认格式化分区 /dev/$PARTITION 为 $FS_TYPE 吗？(y/n): " CONFIRM if [ "$CONFIRM" != "y" ]; then echo "操作已取消。" return fi # 格式化分区 echo "正在格式化分区 /dev/$PARTITION 为 $FS_TYPE ..." mkfs.$FS_TYPE "/dev/$PARTITION" if [ $? -eq 0 ]; then echo "分区格式化成功！" else echo "分区格式化失败！" fi } # 检查分区状态 check_partition() { send_stats "检查分区状态" read -e -p "请输入要检查的分区名称（例如 sda1）: " PARTITION # 检查分区是否存在 if ! lsblk -o NAME | grep -w "$PARTITION" > /dev/null; then echo "分区不存在！" return fi # 检查分区状态 echo "检查分区 /dev/$PARTITION 的状态：" fsck "/dev/$PARTITION" } # 主菜单 disk_manager() { send_stats "硬盘管理功能" while true; do clear echo "硬盘分区管理" echo -e "${gl_huang}该功能内部测试阶段，请勿在生产环境使用。${gl_bai}" echo "------------------------" list_partitions echo "------------------------" echo "1. 挂载分区 2. 卸载分区 3. 查看已挂载分区" echo "4. 格式化分区 5. 检查分区状态" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " choice case $choice in 1) mount_partition ;; 2) unmount_partition ;; 3) list_mounted_partitions ;; 4) format_partition ;; 5) check_partition ;; *) break ;; esac read -e -p "按回车键继续..." done } # 显示任务列表 list_tasks() { echo "已保存的同步任务:" echo "---------------------------------" awk -F'|' '{print NR " - " $1 " ( " $2 " -> " $3":"$4 " )"}' "$CONFIG_FILE" echo "---------------------------------" } # 添加新任务 add_task() { send_stats "添加新同步任务" echo "创建新同步任务示例：" echo " - 任务名称: backup_www" echo " - 本地目录: /var/www" echo " - 远程地址: user@192.168.1.100" echo " - 远程目录: /backup/www" echo " - 端口号 (默认 22)" echo "---------------------------------" read -e -p "请输入任务名称: " name read -e -p "请输入本地目录: " local_path read -e -p "请输入远程目录: " remote_path while true; do read -e -p "请输入远程用户@IP: " remote if kj_ssh_parse_remote "$remote" "root"; then remote="$KJ_SSH_REMOTE" break fi done kj_ssh_read_port "请输入 SSH 端口 (默认 22): " "22" port="$KJ_SSH_PORT" if ! kj_ssh_read_auth "$KEY_DIR/${name}_sync.key"; then return fi auth_method="$KJ_SSH_AUTH_METHOD" password_or_key="$KJ_SSH_AUTH_SECRET" echo "请选择同步模式:" echo "1. 标准模式 (-avz)" echo "2. 删除目标文件 (-avz --delete)" read -e -p "请选择 (1/2): " mode case $mode in 1) options="-avz" ;; 2) options="-avz --delete" ;; *) echo "无效选择，使用默认 -avz"; options="-avz" ;; esac echo "$name|$local_path|$remote|$remote_path|$port|$options|$auth_method|$password_or_key" >> "$CONFIG_FILE" install rsync rsync echo "任务已保存!" } # 删除任务 delete_task() { send_stats "删除同步任务" read -e -p "请输入要删除的任务编号: " num local task=$(sed -n "${num}p" "$CONFIG_FILE") if [[ -z "$task" ]]; then echo "错误：未找到对应的任务。" return fi IFS='|' read -r name local_path remote remote_path port options auth_method password_or_key <<< "$task" # 如果任务使用的是密钥文件，则删除该密钥文件 if [[ "$auth_method" == "key" && "$password_or_key" == "$KEY_DIR"* ]]; then rm -f "$password_or_key" fi sed -i "${num}d" "$CONFIG_FILE" echo "任务已删除!" } run_task() { send_stats "执行同步任务" CONFIG_FILE="$HOME/.rsync_tasks" CRON_FILE="$HOME/.rsync_cron" # 解析参数 local direction="push" # 默认是推送到远端 local num if [[ "$1" == "push" || "$1" == "pull" ]]; then direction="$1" num="$2" else num="$1" fi # 如果没有传入任务编号，提示用户输入 if [[ -z "$num" ]]; then read -e -p "请输入要执行的任务编号: " num fi local task=$(sed -n "${num}p" "$CONFIG_FILE") if [[ -z "$task" ]]; then echo "错误: 未找到该任务!" return fi IFS='|' read -r name local_path remote remote_path port options auth_method password_or_key <<< "$task" # 根据同步方向调整源和目标路径 if [[ "$direction" == "pull" ]]; then echo "正在拉取同步到本地: $remote:$local_path -> $remote_path" source="$remote:$local_path" destination="$remote_path" else echo "正在推送同步到远端: $local_path -> $remote:$remote_path" source="$local_path" destination="$remote:$remote_path" fi # 添加 SSH 连接通用参数 local ssh_options="-p $port -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null" if [[ "$auth_method" == "password" ]]; then if ! command -v sshpass &> /dev/null; then echo "错误：未安装 sshpass，请先安装 sshpass。" echo "安装方法：" echo " - Ubuntu/Debian: apt install sshpass" echo " - CentOS/RHEL: yum install sshpass" return fi sshpass -p "$password_or_key" rsync $options -e "ssh $ssh_options" "$source" "$destination" else # 检查密钥文件是否存在和权限是否正确 if [[ ! -f "$password_or_key" ]]; then echo "错误：密钥文件不存在：$password_or_key" return fi if [[ "$(stat -c %a "$password_or_key")" != "600" ]]; then echo "警告：密钥文件权限不正确，正在修复..." chmod 600 "$password_or_key" fi rsync $options -e "ssh -i $password_or_key $ssh_options" "$source" "$destination" fi if [[ $? -eq 0 ]]; then echo "同步完成!" else echo "同步失败! 请检查以下内容：" echo "1. 网络连接是否正常" echo "2. 远程主机是否可访问" echo "3. 认证信息是否正确" echo "4. 本地和远程目录是否有正确的访问权限" fi } # 创建定时任务 schedule_task() { send_stats "添加同步定时任务" read -e -p "请输入要定时同步的任务编号: " num if ! [[ "$num" =~ ^[0-9]+$ ]]; then echo "错误: 请输入有效的任务编号！" return fi echo "请选择定时执行间隔：" echo "1) 每小时执行一次" echo "2) 每天执行一次" echo "3) 每周执行一次" read -e -p "请输入选项 (1/2/3): " interval local random_minute=$(shuf -i 0-59 -n 1) # 生成 0-59 之间的随机分钟数 local cron_time="" case "$interval" in 1) cron_time="$random_minute * * * *" ;; # 每小时，随机分钟执行 2) cron_time="$random_minute 0 * * *" ;; # 每天，随机分钟执行 3) cron_time="$random_minute 0 * * 1" ;; # 每周，随机分钟执行 *) echo "错误: 请输入有效的选项！" ; return ;; esac local cron_job="$cron_time k rsync_run $num" local cron_job="$cron_time k rsync_run $num" # 检查是否已存在相同任务 if crontab -l | grep -q "k rsync_run $num"; then echo "错误: 该任务的定时同步已存在！" return fi # 创建到用户的 crontab (crontab -l 2>/dev/null; echo "$cron_job") | crontab - echo "定时任务已创建: $cron_job" } # 查看定时任务 view_tasks() { echo "当前的定时任务:" echo "---------------------------------" crontab -l | grep "k rsync_run" echo "---------------------------------" } # 删除定时任务 delete_task_schedule() { send_stats "删除同步定时任务" read -e -p "请输入要删除的任务编号: " num if ! [[ "$num" =~ ^[0-9]+$ ]]; then echo "错误: 请输入有效的任务编号！" return fi crontab -l | grep -v "k rsync_run $num" | crontab - echo "已删除任务编号 $num 的定时任务" } # 任务管理主菜单 rsync_manager() { CONFIG_FILE="$HOME/.rsync_tasks" CRON_FILE="$HOME/.rsync_cron" while true; do clear echo "Rsync 远程同步工具" echo "远程目录之间同步，支持增量同步，高效稳定。" echo "---------------------------------" list_tasks echo view_tasks echo echo "1. 创建新任务 2. 删除任务" echo "3. 执行本地同步到远端 4. 执行远端同步到本地" echo "5. 创建定时任务 6. 删除定时任务" echo "---------------------------------" echo "0. 返回上一级选单" echo "---------------------------------" read -e -p "请输入你的选择: " choice case $choice in 1) add_task ;; 2) delete_task ;; 3) run_task push;; 4) run_task pull;; 5) schedule_task ;; 6) delete_task_schedule ;; 0) break ;; *) echo "无效的选择，请重试。" ;; esac read -e -p "按回车键继续..." done } linux_info() { clear echo -e "${gl_kjlan}正在查询系统信息……${gl_bai}" send_stats "系统信息查询" ip_address local cpu_info=$(lscpu | awk -F': +' '/Model name:/ {print $2; exit}') local cpu_usage_percent=$(awk '{u=$2+$4; t=$2+$4+$5; if (NR==1){u1=u; t1=t;} else printf "%.0f\n", (($2+$4-u1) * 100 / (t-t1))}' \ <(grep 'cpu ' /proc/stat) <(sleep 1; grep 'cpu ' /proc/stat)) local cpu_cores=$(nproc) local cpu_freq=$(cat /proc/cpuinfo | grep "MHz" | head -n 1 | awk '{printf "%.1f GHz\n", $4/1000}') local mem_info=$(free -b | awk 'NR==2{printf "%.2f/%.2fM (%.2f%%)", $3/1024/1024, $2/1024/1024, $3*100/$2}') local disk_info=$(df -h | awk '$NF=="/"{printf "%s/%s (%s)", $3, $2, $5}') local ipinfo=$(curl -s ipinfo.io) local country=$(echo "$ipinfo" | grep 'country' | awk -F': ' '{print $2}' | tr -d '",') local city=$(echo "$ipinfo" | grep 'city' | awk -F': ' '{print $2}' | tr -d '",') local isp_info=$(echo "$ipinfo" | grep 'org' | awk -F': ' '{print $2}' | tr -d '",') local load=$(uptime | awk '{print $(NF-2), $(NF-1), $NF}') local dns_addresses=$(awk '/^nameserver/{printf "%s ", $2} END {print ""}' /etc/resolv.conf) local cpu_arch=$(uname -m) local hostname=$(uname -n) local kernel_version=$(uname -r) local congestion_algorithm=$(sysctl -n net.ipv4.tcp_congestion_control) local queue_algorithm=$(sysctl -n net.core.default_qdisc) local os_info=$(grep PRETTY_NAME /etc/os-release | cut -d '=' -f2 | tr -d '"') output_status local current_time=$(date "+%Y-%m-%d %I:%M %p") local swap_info=$(free -m | awk 'NR==3{used=$3; total=$2; if (total == 0) {percentage=0} else {percentage=used*100/total}; printf "%dM/%dM (%d%%)", used, total, percentage}') local runtime=$(cat /proc/uptime | awk -F. '{run_days=int($1 / 86400);run_hours=int(($1 % 86400) / 3600);run_minutes=int(($1 % 3600) / 60); if (run_days > 0) printf("%d天 ", run_days); if (run_hours > 0) printf("%d时 ", run_hours); printf("%d分\n", run_minutes)}') local timezone=$(current_timezone) local tcp_count=$(ss -t | wc -l) local udp_count=$(ss -u | wc -l) clear echo -e "系统信息查询" echo -e "${gl_kjlan}-------------" echo -e "${gl_kjlan}主机名: ${gl_bai}$hostname" echo -e "${gl_kjlan}系统版本: ${gl_bai}$os_info" echo -e "${gl_kjlan}Linux版本: ${gl_bai}$kernel_version" echo -e "${gl_kjlan}-------------" echo -e "${gl_kjlan}CPU架构: ${gl_bai}$cpu_arch" echo -e "${gl_kjlan}CPU型号: ${gl_bai}$cpu_info" echo -e "${gl_kjlan}CPU核心数: ${gl_bai}$cpu_cores" echo -e "${gl_kjlan}CPU频率: ${gl_bai}$cpu_freq" echo -e "${gl_kjlan}-------------" echo -e "${gl_kjlan}CPU占用: ${gl_bai}$cpu_usage_percent%" echo -e "${gl_kjlan}系统负载: ${gl_bai}$load" echo -e "${gl_kjlan}TCP|UDP连接数: ${gl_bai}$tcp_count|$udp_count" echo -e "${gl_kjlan}物理内存: ${gl_bai}$mem_info" echo -e "${gl_kjlan}虚拟内存: ${gl_bai}$swap_info" echo -e "${gl_kjlan}硬盘占用: ${gl_bai}$disk_info" echo -e "${gl_kjlan}-------------" echo -e "${gl_kjlan}总接收: ${gl_bai}$rx" echo -e "${gl_kjlan}总发送: ${gl_bai}$tx" echo -e "${gl_kjlan}-------------" echo -e "${gl_kjlan}网络算法: ${gl_bai}$congestion_algorithm $queue_algorithm" echo -e "${gl_kjlan}-------------" echo -e "${gl_kjlan}运营商: ${gl_bai}$isp_info" if [ -n "$ipv4_address" ]; then echo -e "${gl_kjlan}IPv4地址: ${gl_bai}$ipv4_address" fi if [ -n "$ipv6_address" ]; then echo -e "${gl_kjlan}IPv6地址: ${gl_bai}$ipv6_address" fi echo -e "${gl_kjlan}DNS地址: ${gl_bai}$dns_addresses" echo -e "${gl_kjlan}地理位置: ${gl_bai}$country $city" echo -e "${gl_kjlan}系统时间: ${gl_bai}$timezone $current_time" echo -e "${gl_kjlan}-------------" echo -e "${gl_kjlan}运行时长: ${gl_bai}$runtime" echo } linux_tools() { while true; do clear # send_stats "基础工具" echo -e "基础工具" tools=( curl wget sudo socat htop iftop unzip tar tmux ffmpeg btop ranger ncdu fzf cmatrix sl bastet nsnake ninvaders vim nano git ) if command -v apt >/dev/null 2>&1; then PM="apt" elif command -v dnf >/dev/null 2>&1; then PM="dnf" elif command -v yum >/dev/null 2>&1; then PM="yum" elif command -v pacman >/dev/null 2>&1; then PM="pacman" elif command -v apk >/dev/null 2>&1; then PM="apk" elif command -v zypper >/dev/null 2>&1; then PM="zypper" elif command -v opkg >/dev/null 2>&1; then PM="opkg" elif command -v pkg >/dev/null 2>&1; then PM="pkg" else echo "❌ 未识别的包管理器" exit 1 fi echo "📦 使用包管理器: $PM" echo -e "${gl_kjlan}------------------------${gl_bai}" for ((i=0; i<${#tools[@]}; i+=2)); do # 左列 if command -v "${tools[i]}" >/dev/null 2>&1; then left=$(printf "✅ %-12s 已安装" "${tools[i]}") else left=$(printf "❌ %-12s 未安装" "${tools[i]}") fi # 右列（防止数组越界） if [[ -n "${tools[i+1]}" ]]; then if command -v "${tools[i+1]}" >/dev/null 2>&1; then right=$(printf "✅ %-12s 已安装" "${tools[i+1]}") else right=$(printf "❌ %-12s 未安装" "${tools[i+1]}") fi printf "%-42s %s\n" "$left" "$right" else printf "%s\n" "$left" fi done echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}1. ${gl_bai}curl 下载工具 ${gl_huang}★${gl_bai} ${gl_kjlan}2. ${gl_bai}wget 下载工具 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}3. ${gl_bai}sudo 超级管理权限工具 ${gl_kjlan}4. ${gl_bai}socat 通信连接工具" echo -e "${gl_kjlan}5. ${gl_bai}htop 系统监控工具 ${gl_kjlan}6. ${gl_bai}iftop 网络流量监控工具" echo -e "${gl_kjlan}7. ${gl_bai}unzip ZIP压缩解压工具 ${gl_kjlan}8. ${gl_bai}tar GZ压缩解压工具" echo -e "${gl_kjlan}9. ${gl_bai}tmux 多路后台运行工具 ${gl_kjlan}10. ${gl_bai}ffmpeg 视频编码直播推流工具" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}11. ${gl_bai}btop 现代化监控工具 ${gl_huang}★${gl_bai} ${gl_kjlan}12. ${gl_bai}ranger 文件管理工具" echo -e "${gl_kjlan}13. ${gl_bai}ncdu 磁盘占用查看工具 ${gl_kjlan}14. ${gl_bai}fzf 全局搜索工具" echo -e "${gl_kjlan}15. ${gl_bai}vim 文本编辑器 ${gl_kjlan}16. ${gl_bai}nano 文本编辑器 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}17. ${gl_bai}git 版本控制系统 ${gl_kjlan}18. ${gl_bai}opencode AI编程助手 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}21. ${gl_bai}黑客帝国屏保 ${gl_kjlan}22. ${gl_bai}跑火车屏保" echo -e "${gl_kjlan}26. ${gl_bai}俄罗斯方块小游戏 ${gl_kjlan}27. ${gl_bai}贪吃蛇小游戏" echo -e "${gl_kjlan}28. ${gl_bai}太空入侵者小游戏" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}31. ${gl_bai}全部安装 ${gl_kjlan}32. ${gl_bai}全部安装（不含屏保和游戏）${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}33. ${gl_bai}全部卸载" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}41. ${gl_bai}安装指定工具 ${gl_kjlan}42. ${gl_bai}卸载指定工具" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}0. ${gl_bai}返回主菜单" echo -e "${gl_kjlan}------------------------${gl_bai}" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) clear install curl clear echo "工具已安装，使用方法如下：" curl --help send_stats "安装curl" ;; 2) clear install wget clear echo "工具已安装，使用方法如下：" wget --help send_stats "安装wget" ;; 3) clear install sudo clear echo "工具已安装，使用方法如下：" sudo --help send_stats "安装sudo" ;; 4) clear install socat clear echo "工具已安装，使用方法如下：" socat -h send_stats "安装socat" ;; 5) clear install htop clear htop send_stats "安装htop" ;; 6) clear install iftop clear iftop send_stats "安装iftop" ;; 7) clear install unzip clear echo "工具已安装，使用方法如下：" unzip send_stats "安装unzip" ;; 8) clear install tar clear echo "工具已安装，使用方法如下：" tar --help send_stats "安装tar" ;; 9) clear install tmux clear echo "工具已安装，使用方法如下：" tmux --help send_stats "安装tmux" ;; 10) clear install ffmpeg clear echo "工具已安装，使用方法如下：" ffmpeg --help send_stats "安装ffmpeg" ;; 11) clear install btop clear btop send_stats "安装btop" ;; 12) clear install ranger cd / clear ranger cd ~ send_stats "安装ranger" ;; 13) clear install ncdu cd / clear ncdu cd ~ send_stats "安装ncdu" ;; 14) clear install fzf cd / clear fzf cd ~ send_stats "安装fzf" ;; 15) clear install vim cd / clear vim -h cd ~ send_stats "安装vim" ;; 16) clear install nano cd / clear nano -h cd ~ send_stats "安装nano" ;; 17) clear install git cd / clear git --help cd ~ send_stats "安装git" ;; 18) clear cd ~ curl -fsSL https://opencode.ai/install | bash source ~/.bashrc source ~/.profile opencode send_stats "安装opencode" ;; 21) clear install cmatrix clear cmatrix send_stats "安装cmatrix" ;; 22) clear install sl clear sl send_stats "安装sl" ;; 26) clear install bastet clear bastet send_stats "安装bastet" ;; 27) clear install nsnake clear nsnake send_stats "安装nsnake" ;; 28) clear install ninvaders clear ninvaders send_stats "安装ninvaders" ;; 31) clear send_stats "全部安装" install curl wget sudo socat htop iftop unzip tar tmux ffmpeg btop ranger ncdu fzf cmatrix sl bastet nsnake ninvaders vim nano git ;; 32) clear send_stats "全部安装（不含游戏和屏保）" install curl wget sudo socat htop iftop unzip tar tmux ffmpeg btop ranger ncdu fzf vim nano git ;; 33) clear send_stats "全部卸载" remove htop iftop tmux ffmpeg btop ranger ncdu fzf cmatrix sl bastet nsnake ninvaders vim nano git opencode uninstall rm -rf ~/.opencode ;; 41) clear read -e -p "请输入安装的工具名（wget curl sudo htop）: " installname install $installname send_stats "安装指定软件" ;; 42) clear read -e -p "请输入卸载的工具名（htop ufw tmux cmatrix）: " removename remove $removename send_stats "卸载指定软件" ;; 0) kejilion ;; *) echo "无效的输入!" ;; esac break_end done } linux_bbr() { clear send_stats "bbr管理" if [ -f "/etc/alpine-release" ]; then while true; do clear local congestion_algorithm=$(sysctl -n net.ipv4.tcp_congestion_control) local queue_algorithm=$(sysctl -n net.core.default_qdisc) echo "当前TCP阻塞算法: $congestion_algorithm $queue_algorithm" echo "" echo "BBR管理" echo "------------------------" echo "1. 开启BBRv3 2. 关闭BBRv3（会重启）" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) bbr_on send_stats "alpine开启bbr3" ;; 2) sed -i '/net.ipv4.tcp_congestion_control=/d' /etc/sysctl.conf sysctl -p server_reboot ;; *) break # 跳出循环，退出菜单 ;; esac done else install wget wget --no-check-certificate -O tcpx.sh ${gh_proxy}raw.githubusercontent.com/ylx2016/Linux-NetSpeed/master/tcpx.sh chmod +x tcpx.sh ./tcpx.sh fi } docker_ssh_migration() { is_compose_container() { local container=$1 docker inspect "$container" | jq -e '.[0].Config.Labels["com.docker.compose.project"]' >/dev/null 2>&1 } list_backups() { local BACKUP_ROOT="/tmp" echo -e "${gl_kjlan}当前备份列表:${gl_bai}" ls -1dt ${BACKUP_ROOT}/docker_backup_* 2>/dev/null || echo "无备份" } # ---------------------------- # 备份 # ---------------------------- backup_docker() { send_stats "Docker备份" echo -e "${gl_kjlan}正在备份 Docker 容器...${gl_bai}" docker ps --format '{{.Names}}' read -e -p "请输入要备份的容器名（多个空格分隔，回车备份全部运行中容器）: " containers install tar jq gzip install_docker local BACKUP_ROOT="/tmp" local DATE_STR=$(date +%Y%m%d_%H%M%S) local TARGET_CONTAINERS=() if [ -z "$containers" ]; then mapfile -t TARGET_CONTAINERS < <(docker ps --format '{{.Names}}') else read -ra TARGET_CONTAINERS <<< "$containers" fi [[ ${#TARGET_CONTAINERS[@]} -eq 0 ]] && { echo -e "${gl_hong}没有找到容器${gl_bai}"; return; } local BACKUP_DIR="${BACKUP_ROOT}/docker_backup_${DATE_STR}" mkdir -p "$BACKUP_DIR" local RESTORE_SCRIPT="${BACKUP_DIR}/docker_restore.sh" echo "#!/bin/bash" > "$RESTORE_SCRIPT" echo "set -e" >> "$RESTORE_SCRIPT" echo "# 自动生成的还原脚本" >> "$RESTORE_SCRIPT" # 记录已打包过的 Compose 项目路径，避免重复打包 declare -A PACKED_COMPOSE_PATHS=() for c in "${TARGET_CONTAINERS[@]}"; do echo -e "${gl_lv}备份容器: $c${gl_bai}" local inspect_file="${BACKUP_DIR}/${c}_inspect.json" docker inspect "$c" > "$inspect_file" if is_compose_container "$c"; then echo -e "${gl_kjlan}检测到 $c 是 docker-compose 容器${gl_bai}" local project_dir=$(docker inspect "$c" | jq -r '.[0].Config.Labels["com.docker.compose.project.working_dir"] // empty') local project_name=$(docker inspect "$c" | jq -r '.[0].Config.Labels["com.docker.compose.project"] // empty') if [ -z "$project_dir" ]; then read -e -p "未检测到 compose 目录，请手动输入路径: " project_dir fi # 如果该 Compose 项目已经打包过，跳过 if [[ -n "${PACKED_COMPOSE_PATHS[$project_dir]}" ]]; then echo -e "${gl_huang}Compose 项目 [$project_name] 已备份过，跳过重复打包...${gl_bai}" continue fi if [ -f "$project_dir/docker-compose.yml" ]; then echo "compose" > "${BACKUP_DIR}/backup_type_${project_name}" echo "$project_dir" > "${BACKUP_DIR}/compose_path_${project_name}.txt" tar -czf "${BACKUP_DIR}/compose_project_${project_name}.tar.gz" -C "$project_dir" . echo "# docker-compose 恢复: $project_name" >> "$RESTORE_SCRIPT" echo "cd \"$project_dir\" && docker compose up -d" >> "$RESTORE_SCRIPT" PACKED_COMPOSE_PATHS["$project_dir"]=1 echo -e "${gl_lv}Compose 项目 [$project_name] 已打包: ${project_dir}${gl_bai}" else echo -e "${gl_hong}未找到 docker-compose.yml，跳过此容器...${gl_bai}" fi else # 普通容器备份卷 local VOL_PATHS VOL_PATHS=$(docker inspect "$c" --format '{{range .Mounts}}{{.Source}} {{end}}') for path in $VOL_PATHS; do echo "打包卷: $path" tar -czpf "${BACKUP_DIR}/${c}_$(basename $path).tar.gz" -C / "$(echo $path | sed 's/^\///')" done # 端口 local PORT_ARGS="" mapfile -t PORTS < <(jq -r '.[0].HostConfig.PortBindings | to_entries[] | "\(.value[0].HostPort):\(.key | split("/")[0])"' "$inspect_file" 2>/dev/null) for p in "${PORTS[@]}"; do PORT_ARGS+="-p $p "; done # 环境变量 local ENV_VARS="" mapfile -t ENVS < <(jq -r '.[0].Config.Env[] | @sh' "$inspect_file") for e in "${ENVS[@]}"; do ENV_VARS+="-e $e "; done # 卷映射 local VOL_ARGS="" for path in $VOL_PATHS; do VOL_ARGS+="-v $path:$path "; done # 镜像 local IMAGE IMAGE=$(jq -r '.[0].Config.Image' "$inspect_file") echo -e "\n# 还原容器: $c" >> "$RESTORE_SCRIPT" echo "docker run -d --name $c $PORT_ARGS $VOL_ARGS $ENV_VARS $IMAGE" >> "$RESTORE_SCRIPT" fi done # 备份 /home/docker 下的所有文件（不含子目录） if [ -d "/home/docker" ]; then echo -e "${gl_kjlan}备份 /home/docker 下的文件...${gl_bai}" find /home/docker -maxdepth 1 -type f | tar -czf "${BACKUP_DIR}/home_docker_files.tar.gz" -T - echo -e "${gl_lv}/home/docker 下的文件已打包到: ${BACKUP_DIR}/home_docker_files.tar.gz${gl_bai}" fi chmod +x "$RESTORE_SCRIPT" echo -e "${gl_lv}备份完成: ${BACKUP_DIR}${gl_bai}" echo -e "${gl_lv}可用还原脚本: ${RESTORE_SCRIPT}${gl_bai}" } # ---------------------------- # 还原 # ---------------------------- restore_docker() { send_stats "Docker还原" read -e -p "请输入要还原的备份目录: " BACKUP_DIR [[ ! -d "$BACKUP_DIR" ]] && { echo -e "${gl_hong}备份目录不存在${gl_bai}"; return; } echo -e "${gl_kjlan}开始执行还原操作...${gl_bai}" install tar jq gzip install_docker # --------- 优先还原 Compose 项目 --------- for f in "$BACKUP_DIR"/backup_type_*; do [[ ! -f "$f" ]] && continue if grep -q "compose" "$f"; then project_name=$(basename "$f" | sed 's/backup_type_//') path_file="$BACKUP_DIR/compose_path_${project_name}.txt" [[ -f "$path_file" ]] && original_path=$(cat "$path_file") || original_path="" [[ -z "$original_path" ]] && read -e -p "未找到原始路径，请输入还原目录路径: " original_path # 检查该 compose 项目的容器是否已经在运行 running_count=$(docker ps --filter "label=com.docker.compose.project=$project_name" --format '{{.Names}}' | wc -l) if [[ "$running_count" -gt 0 ]]; then echo -e "${gl_huang}Compose 项目 [$project_name] 已有容器在运行，跳过还原...${gl_bai}" continue fi read -e -p "确认还原 Compose 项目 [$project_name] 到路径 [$original_path] ? (y/n): " confirm [[ "$confirm" != "y" ]] && read -e -p "请输入新的还原路径: " original_path mkdir -p "$original_path" tar -xzf "$BACKUP_DIR/compose_project_${project_name}.tar.gz" -C "$original_path" echo -e "${gl_lv}Compose 项目 [$project_name] 已解压到: $original_path${gl_bai}" cd "$original_path" || return docker compose down || true docker compose up -d echo -e "${gl_lv}Compose 项目 [$project_name] 还原完成！${gl_bai}" fi done # --------- 继续还原普通容器 --------- echo -e "${gl_kjlan}检查并还原普通 Docker 容器...${gl_bai}" local has_container=false for json in "$BACKUP_DIR"/*_inspect.json; do [[ ! -f "$json" ]] && continue has_container=true container=$(basename "$json" | sed 's/_inspect.json//') echo -e "${gl_lv}处理容器: $container${gl_bai}" # 检查容器是否已经存在且正在运行 if docker ps --format '{{.Names}}' | grep -q "^${container}$"; then echo -e "${gl_huang}容器 [$container] 已在运行，跳过还原...${gl_bai}" continue fi IMAGE=$(jq -r '.[0].Config.Image' "$json") [[ -z "$IMAGE" || "$IMAGE" == "null" ]] && { echo -e "${gl_hong}未找到镜像信息，跳过: $container${gl_bai}"; continue; } # 端口映射 PORT_ARGS="" mapfile -t PORTS < <(jq -r '.[0].HostConfig.PortBindings | to_entries[]? | "\(.value[0].HostPort):\(.key | split("/")[0])"' "$json") for p in "${PORTS[@]}"; do [[ -n "$p" ]] && PORT_ARGS="$PORT_ARGS -p $p" done # 环境变量 ENV_ARGS="" mapfile -t ENVS < <(jq -r '.[0].Config.Env[]' "$json") for e in "${ENVS[@]}"; do ENV_ARGS="$ENV_ARGS -e \"$e\"" done # 卷映射 + 卷数据恢复 VOL_ARGS="" mapfile -t VOLS < <(jq -r '.[0].Mounts[] | "\(.Source):\(.Destination)"' "$json") for v in "${VOLS[@]}"; do VOL_SRC=$(echo "$v" | cut -d':' -f1) VOL_DST=$(echo "$v" | cut -d':' -f2) mkdir -p "$VOL_SRC" VOL_ARGS="$VOL_ARGS -v $VOL_SRC:$VOL_DST" VOL_FILE="$BACKUP_DIR/${container}_$(basename $VOL_SRC).tar.gz" if [[ -f "$VOL_FILE" ]]; then echo "恢复卷数据: $VOL_SRC" tar -xzf "$VOL_FILE" -C / fi done # 删除已存在但未运行的容器 if docker ps -a --format '{{.Names}}' | grep -q "^${container}$"; then echo -e "${gl_huang}容器 [$container] 存在但未运行，删除旧容器...${gl_bai}" docker rm -f "$container" fi # 启动容器 echo "执行还原命令: docker run -d --name \"$container\" $PORT_ARGS $VOL_ARGS $ENV_ARGS \"$IMAGE\"" eval "docker run -d --name \"$container\" $PORT_ARGS $VOL_ARGS $ENV_ARGS \"$IMAGE\"" done [[ "$has_container" == false ]] && echo -e "${gl_huang}未找到普通容器的备份信息${gl_bai}" # 还原 /home/docker 下的文件 if [ -f "$BACKUP_DIR/home_docker_files.tar.gz" ]; then echo -e "${gl_kjlan}正在还原 /home/docker 下的文件...${gl_bai}" mkdir -p /home/docker tar -xzf "$BACKUP_DIR/home_docker_files.tar.gz" -C / echo -e "${gl_lv}/home/docker 下的文件已还原完成${gl_bai}" else echo -e "${gl_huang}未找到 /home/docker 下文件的备份，跳过...${gl_bai}" fi } # ---------------------------- # 迁移 # ---------------------------- migrate_docker() { send_stats "Docker迁移" install jq read -e -p "请输入要迁移的备份目录: " BACKUP_DIR [[ ! -d "$BACKUP_DIR" ]] && { echo -e "${gl_hong}备份目录不存在${gl_bai}"; return; } kj_ssh_read_host_user_port "目标服务器IP: " "目标服务器SSH用户名 [默认root]: " "目标服务器SSH端口 [默认22]: " "root" "22" local TARGET_IP="$KJ_SSH_HOST" local TARGET_USER="$KJ_SSH_USER" local TARGET_PORT="$KJ_SSH_PORT" local LATEST_TAR="$BACKUP_DIR" echo -e "${gl_huang}传输备份中...${gl_bai}" if [[ -z "$TARGET_PASS" ]]; then # 使用密钥登录 scp -P "$TARGET_PORT" -o StrictHostKeyChecking=no -r "$LATEST_TAR" "$TARGET_USER@$TARGET_IP:/tmp/" fi } # ---------------------------- # 删除备份 # ---------------------------- delete_backup() { send_stats "Docker备份文件删除" read -e -p "请输入要删除的备份目录: " BACKUP_DIR [[ ! -d "$BACKUP_DIR" ]] && { echo -e "${gl_hong}备份目录不存在${gl_bai}"; return; } rm -rf "$BACKUP_DIR" echo -e "${gl_lv}已删除备份: ${BACKUP_DIR}${gl_bai}" } # ---------------------------- # 主菜单 # ---------------------------- main_menu() { send_stats "Docker备份迁移还原" while true; do clear echo "------------------------" echo -e "Docker备份/迁移/还原工具" echo "------------------------" list_backups echo -e "" echo "------------------------" echo -e "1. 备份docker项目" echo -e "2. 迁移docker项目" echo -e "3. 还原docker项目" echo -e "4. 删除docker项目的备份文件" echo "------------------------" echo -e "0. 返回上一级选单" echo "------------------------" read -e -p "请选择: " choice case $choice in 1) backup_docker ;; 2) migrate_docker ;; 3) restore_docker ;; 4) delete_backup ;; 0) return ;; *) echo -e "${gl_hong}无效选项${gl_bai}" ;; esac break_end done } main_menu } linux_docker() { while true; do clear # send_stats "docker管理" echo -e "Docker管理" docker_tato echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}1. ${gl_bai}安装更新Docker环境 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}2. ${gl_bai}查看Docker全局状态 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}3. ${gl_bai}Docker容器管理 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}4. ${gl_bai}Docker镜像管理" echo -e "${gl_kjlan}5. ${gl_bai}Docker网络管理" echo -e "${gl_kjlan}6. ${gl_bai}Docker卷管理" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}7. ${gl_bai}清理无用的docker容器和镜像网络数据卷" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}8. ${gl_bai}更换Docker源" echo -e "${gl_kjlan}9. ${gl_bai}编辑daemon.json文件" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}11. ${gl_bai}开启Docker-ipv6访问" echo -e "${gl_kjlan}12. ${gl_bai}关闭Docker-ipv6访问" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}19. ${gl_bai}备份/迁移/还原Docker环境" echo -e "${gl_kjlan}20. ${gl_bai}卸载Docker环境" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}0. ${gl_bai}返回主菜单" echo -e "${gl_kjlan}------------------------${gl_bai}" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) clear send_stats "安装docker环境" install_add_docker ;; 2) clear local container_count=$(docker ps -a -q 2>/dev/null | wc -l) local image_count=$(docker images -q 2>/dev/null | wc -l) local network_count=$(docker network ls -q 2>/dev/null | wc -l) local volume_count=$(docker volume ls -q 2>/dev/null | wc -l) send_stats "docker全局状态" echo "Docker版本" docker -v docker compose version echo "" echo -e "Docker镜像: ${gl_lv}$image_count${gl_bai} " docker image ls echo "" echo -e "Docker容器: ${gl_lv}$container_count${gl_bai}" docker ps -a echo "" echo -e "Docker卷: ${gl_lv}$volume_count${gl_bai}" docker volume ls echo "" echo -e "Docker网络: ${gl_lv}$network_count${gl_bai}" docker network ls echo "" ;; 3) docker_ps ;; 4) docker_image ;; 5) while true; do clear send_stats "Docker网络管理" echo "Docker网络列表" echo "------------------------------------------------------------" docker network ls echo "" echo "------------------------------------------------------------" container_ids=$(docker ps -q) printf "%-25s %-25s %-25s\n" "容器名称" "网络名称" "IP地址" for container_id in $container_ids; do local container_info=$(docker inspect --format '{{ .Name }}{{ range $network, $config := .NetworkSettings.Networks }} {{ $network }} {{ $config.IPAddress }}{{ end }}' "$container_id") local container_name=$(echo "$container_info" | awk '{print $1}') local network_info=$(echo "$container_info" | cut -d' ' -f2-) while IFS= read -r line; do local network_name=$(echo "$line" | awk '{print $1}') local ip_address=$(echo "$line" | awk '{print $2}') printf "%-20s %-20s %-15s\n" "$container_name" "$network_name" "$ip_address" done <<< "$network_info" done echo "" echo "网络操作" echo "------------------------" echo "1. 创建网络" echo "2. 加入网络" echo "3. 退出网络" echo "4. 删除网络" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) send_stats "创建网络" read -e -p "设置新网络名: " dockernetwork docker network create $dockernetwork ;; 2) send_stats "加入网络" read -e -p "加入网络名: " dockernetwork read -e -p "那些容器加入该网络（多个容器名请用空格分隔）: " dockernames for dockername in $dockernames; do docker network connect $dockernetwork $dockername done ;; 3) send_stats "加入网络" read -e -p "退出网络名: " dockernetwork read -e -p "那些容器退出该网络（多个容器名请用空格分隔）: " dockernames for dockername in $dockernames; do docker network disconnect $dockernetwork $dockername done ;; 4) send_stats "删除网络" read -e -p "请输入要删除的网络名: " dockernetwork docker network rm $dockernetwork ;; *) break # 跳出循环，退出菜单 ;; esac done ;; 6) while true; do clear send_stats "Docker卷管理" echo "Docker卷列表" docker volume ls echo "" echo "卷操作" echo "------------------------" echo "1. 创建新卷" echo "2. 删除指定卷" echo "3. 删除所有卷" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) send_stats "新建卷" read -e -p "设置新卷名: " dockerjuan docker volume create $dockerjuan ;; 2) read -e -p "输入删除卷名（多个卷名请用空格分隔）: " dockerjuans for dockerjuan in $dockerjuans; do docker volume rm $dockerjuan done ;; 3) send_stats "删除所有卷" read -e -p "$(echo -e "${gl_hong}注意: ${gl_bai}确定删除所有未使用的卷吗？(Y/N): ")" choice case "$choice" in [Yy]) docker volume prune -f ;; [Nn]) ;; *) echo "无效的选择，请输入 Y 或 N。" ;; esac ;; *) break # 跳出循环，退出菜单 ;; esac done ;; 7) clear send_stats "Docker清理" read -e -p "$(echo -e "${gl_huang}提示: ${gl_bai}将清理无用的镜像容器网络，包括停止的容器，确定清理吗？(Y/N): ")" choice case "$choice" in [Yy]) docker system prune -af --volumes ;; [Nn]) ;; *) echo "无效的选择，请输入 Y 或 N。" ;; esac ;; 8) clear send_stats "Docker源" bash <(curl -sSL https://linuxmirrors.cn/docker.sh) ;; 9) clear install nano mkdir -p /etc/docker && nano /etc/docker/daemon.json restart docker ;; 11) clear send_stats "Docker v6 开" docker_ipv6_on ;; 12) clear send_stats "Docker v6 关" docker_ipv6_off ;; 19) docker_ssh_migration ;; 20) clear send_stats "Docker卸载" read -e -p "$(echo -e "${gl_hong}注意: ${gl_bai}确定卸载docker环境吗？(Y/N): ")" choice case "$choice" in [Yy]) docker ps -a -q | xargs -r docker rm -f && docker images -q | xargs -r docker rmi && docker network prune -f && docker volume prune -f remove docker docker-compose docker-ce docker-ce-cli containerd.io rm -f /etc/docker/daemon.json hash -r ;; [Nn]) ;; *) echo "无效的选择，请输入 Y 或 N。" ;; esac ;; 0) kejilion ;; *) echo "无效的输入!" ;; esac break_end done } linux_test() { while true; do clear # send_stats "测试脚本合集" echo -e "测试脚本合集" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}IP及解锁状态检测" echo -e "${gl_kjlan}1. ${gl_bai}ChatGPT 解锁状态检测" echo -e "${gl_kjlan}2. ${gl_bai}Region 流媒体解锁测试" echo -e "${gl_kjlan}3. ${gl_bai}yeahwu 流媒体解锁检测" echo -e "${gl_kjlan}4. ${gl_bai}xykt IP质量体检脚本 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}网络线路测速" echo -e "${gl_kjlan}11. ${gl_bai}besttrace 三网回程延迟路由测试" echo -e "${gl_kjlan}12. ${gl_bai}mtr_trace 三网回程线路测试" echo -e "${gl_kjlan}13. ${gl_bai}Superspeed 三网测速" echo -e "${gl_kjlan}14. ${gl_bai}nxtrace 快速回程测试脚本" echo -e "${gl_kjlan}15. ${gl_bai}nxtrace 指定IP回程测试脚本" echo -e "${gl_kjlan}16. ${gl_bai}ludashi2020 三网线路测试" echo -e "${gl_kjlan}17. ${gl_bai}i-abc 多功能测速脚本" echo -e "${gl_kjlan}18. ${gl_bai}NetQuality 网络质量体检脚本 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}19. ${gl_bai}TcpQuality TCP重传探测脚本 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}硬件性能测试" echo -e "${gl_kjlan}21. ${gl_bai}yabs 性能测试" echo -e "${gl_kjlan}22. ${gl_bai}icu/gb5 CPU性能测试脚本" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}综合性测试" echo -e "${gl_kjlan}31. ${gl_bai}bench 性能测试" echo -e "${gl_kjlan}32. ${gl_bai}spiritysdx 融合怪测评 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}33. ${gl_bai}nodequality 融合怪测评 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}0. ${gl_bai}返回主菜单" echo -e "${gl_kjlan}------------------------${gl_bai}" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) clear send_stats "ChatGPT解锁状态检测" bash <(curl -Ls https://cdn.jsdelivr.net/gh/missuo/OpenAI-Checker/openai.sh) ;; 2) clear send_stats "Region流媒体解锁测试" bash <(curl -L -s check.unlock.media) ;; 3) clear send_stats "yeahwu流媒体解锁检测" install wget wget -qO- ${gh_proxy}github.com/yeahwu/check/raw/main/check.sh | bash ;; 4) clear send_stats "xykt_IP质量体检脚本" bash <(curl -Ls IP.Check.Place) ;; 11) clear send_stats "besttrace三网回程延迟路由测试" install wget wget -qO- git.io/besttrace | bash ;; 12) clear send_stats "mtr_trace三网回程线路测试" curl ${gh_proxy}raw.githubusercontent.com/zhucaidan/mtr_trace/main/mtr_trace.sh | bash ;; 13) clear send_stats "Superspeed三网测速" bash <(curl -Lso- https://git.io/superspeed_uxh) ;; 14) clear send_stats "nxtrace快速回程测试脚本" curl nxtrace.org/nt |bash nexttrace --fast-trace --tcp ;; 15) clear send_stats "nxtrace指定IP回程测试脚本" echo "可参考的IP列表" echo "------------------------" echo "北京电信: 219.141.136.12" echo "北京联通: 202.106.50.1" echo "北京移动: 221.179.155.161" echo "上海电信: 202.96.209.133" echo "上海联通: 210.22.97.1" echo "上海移动: 211.136.112.200" echo "广州电信: 58.60.188.222" echo "广州联通: 210.21.196.6" echo "广州移动: 120.196.165.24" echo "成都电信: 61.139.2.69" echo "成都联通: 119.6.6.6" echo "成都移动: 211.137.96.205" echo "湖南电信: 36.111.200.100" echo "湖南联通: 42.48.16.100" echo "湖南移动: 39.134.254.6" echo "------------------------" read -e -p "输入一个指定IP: " testip curl nxtrace.org/nt |bash nexttrace $testip ;; 16) clear send_stats "ludashi2020三网线路测试" curl ${gh_proxy}raw.githubusercontent.com/ludashi2020/backtrace/main/install.sh -sSf | sh ;; 17) clear send_stats "i-abc多功能测速脚本" bash <(curl -sL ${gh_proxy}raw.githubusercontent.com/i-abc/Speedtest/main/speedtest.sh) ;; 18) clear send_stats "网络质量测试脚本" bash <(curl -sL Net.Check.Place) ;; 19) clear send_stats "TcpQuality TCP重传探测脚本" bash <(curl -sL https://raw.githubusercontent.com/ibsgss/TcpQuality/main/runTcpQuality.sh) ;; 21) clear send_stats "yabs性能测试" check_swap curl -sL yabs.sh | bash -s -- -i -5 ;; 22) clear send_stats "icu/gb5 CPU性能测试脚本" check_swap bash <(curl -sL bash.icu/gb5) ;; 31) clear send_stats "bench性能测试" curl -Lso- bench.sh | bash ;; 32) send_stats "spiritysdx融合怪测评" clear curl -L ${gh_proxy}github.com/spiritLHLS/ecs/raw/main/ecs.sh -o ecs.sh && chmod +x ecs.sh && bash ecs.sh ;; 33) send_stats "nodequality融合怪测评" clear bash <(curl -sL https://run.NodeQuality.com) ;; 0) kejilion ;; *) echo "无效的输入!" ;; esac break_end done } linux_Oracle() { while true; do clear send_stats "甲骨文云脚本合集" echo -e "甲骨文云脚本合集" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}1. ${gl_bai}安装闲置机器活跃脚本" echo -e "${gl_kjlan}2. ${gl_bai}卸载闲置机器活跃脚本" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}3. ${gl_bai}DD重装系统脚本" echo -e "${gl_kjlan}4. ${gl_bai}R探长开机脚本" echo -e "${gl_kjlan}5. ${gl_bai}开启ROOT密码登录模式" echo -e "${gl_kjlan}6. ${gl_bai}IPV6恢复工具" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}0. ${gl_bai}返回主菜单" echo -e "${gl_kjlan}------------------------${gl_bai}" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) clear echo "活跃脚本: CPU占用10-20% 内存占用20% " read -e -p "确定安装吗？(Y/N): " choice case "$choice" in [Yy]) install_docker # 设置默认值 local DEFAULT_CPU_CORE=1 local DEFAULT_CPU_UTIL="10-20" local DEFAULT_MEM_UTIL=20 local DEFAULT_SPEEDTEST_INTERVAL=120 # 提示用户输入CPU核心数和占用百分比，如果回车则使用默认值 read -e -p "请输入CPU核心数 [默认: $DEFAULT_CPU_CORE]: " cpu_core local cpu_core=${cpu_core:-$DEFAULT_CPU_CORE} read -e -p "请输入CPU占用百分比范围（例如10-20） [默认: $DEFAULT_CPU_UTIL]: " cpu_util local cpu_util=${cpu_util:-$DEFAULT_CPU_UTIL} read -e -p "请输入内存占用百分比 [默认: $DEFAULT_MEM_UTIL]: " mem_util local mem_util=${mem_util:-$DEFAULT_MEM_UTIL} read -e -p "请输入Speedtest间隔时间（秒） [默认: $DEFAULT_SPEEDTEST_INTERVAL]: " speedtest_interval local speedtest_interval=${speedtest_interval:-$DEFAULT_SPEEDTEST_INTERVAL} # 运行Docker容器 docker run -d --name=lookbusy --restart=always \ -e TZ=Asia/Shanghai \ -e CPU_UTIL="$cpu_util" \ -e CPU_CORE="$cpu_core" \ -e MEM_UTIL="$mem_util" \ -e SPEEDTEST_INTERVAL="$speedtest_interval" \ fogforest/lookbusy send_stats "甲骨文云安装活跃脚本" ;; [Nn]) ;; *) echo "无效的选择，请输入 Y 或 N。" ;; esac ;; 2) clear docker rm -f lookbusy docker rmi fogforest/lookbusy send_stats "甲骨文云卸载活跃脚本" ;; 3) clear echo "重装系统" echo "--------------------------------" echo -e "${gl_hong}注意: ${gl_bai}重装有风险失联，不放心者慎用。重装预计花费15分钟，请提前备份数据。" read -e -p "确定继续吗？(Y/N): " choice case "$choice" in [Yy]) while true; do read -e -p "请选择要重装的系统: 1. Debian12 | 2. Ubuntu20.04 : " sys_choice case "$sys_choice" in 1) local xitong="-d 12" break # 结束循环 ;; 2) local xitong="-u 20.04" break # 结束循环 ;; *) echo "无效的选择，请重新输入。" ;; esac done read -e -p "请输入你重装后的密码: " vpspasswd install wget bash <(wget --no-check-certificate -qO- "${gh_proxy}raw.githubusercontent.com/MoeClub/Note/master/InstallNET.sh") $xitong -v 64 -p $vpspasswd -port 22 send_stats "甲骨文云重装系统脚本" ;; [Nn]) echo "已取消" ;; *) echo "无效的选择，请输入 Y 或 N。" ;; esac ;; 4) clear send_stats "R探长开机脚本" bash <(wget -qO- ${gh_proxy}github.com/Yohann0617/oci-helper/releases/latest/download/sh_oci-helper_install.sh) ;; 5) clear add_sshpasswd ;; 6) clear bash <(curl -L -s jhb.ovh/jb/v6.sh) echo "该功能由jhb大神提供，感谢他！" send_stats "ipv6修复" ;; 0) kejilion ;; *) echo "无效的输入!" ;; esac break_end done } docker_tato() { local container_count=$(docker ps -a -q 2>/dev/null | wc -l) local image_count=$(docker images -q 2>/dev/null | wc -l) local network_count=$(docker network ls -q 2>/dev/null | wc -l) local volume_count=$(docker volume ls -q 2>/dev/null | wc -l) if command -v docker &> /dev/null; then echo -e "${gl_kjlan}------------------------" echo -e "${gl_lv}环境已经安装${gl_bai} 容器: ${gl_lv}$container_count${gl_bai} 镜像: ${gl_lv}$image_count${gl_bai} 网络: ${gl_lv}$network_count${gl_bai} 卷: ${gl_lv}$volume_count${gl_bai}" fi } ldnmp_tato() { local cert_count=$(ls /home/web/certs/*_cert.pem 2>/dev/null | wc -l) local output="${gl_lv}${cert_count}${gl_bai}" local dbrootpasswd=$(grep -oP 'MYSQL_ROOT_PASSWORD:\s*\K.*' /home/web/docker-compose.yml 2>/dev/null | tr -d '[:space:]') if [ -n "$dbrootpasswd" ]; then local db_count=$(docker exec mysql mysql -u root -p"$dbrootpasswd" -e "SHOW DATABASES;" 2>/dev/null | grep -Ev "Database|information_schema|mysql|performance_schema|sys" | wc -l) fi local db_output="${gl_lv}${db_count}${gl_bai}" if command -v docker &>/dev/null; then if docker ps --filter "name=nginx" --filter "status=running" | grep -q nginx; then echo -e "${gl_huang}------------------------" echo -e "${gl_lv}环境已安装${gl_bai} 站点: $output 数据库: $db_output" fi fi } fix_phpfpm_conf() { local container_name=$1 docker exec "$container_name" sh -c "mkdir -p /run/$container_name && chmod 777 /run/$container_name" docker exec "$container_name" sh -c "sed -i '1i [global]\\ndaemonize = no' /usr/local/etc/php-fpm.d/www.conf" docker exec "$container_name" sh -c "sed -i '/^listen =/d' /usr/local/etc/php-fpm.d/www.conf" docker exec "$container_name" sh -c "echo -e '\nlisten = /run/$container_name/php-fpm.sock\nlisten.owner = www-data\nlisten.group = www-data\nlisten.mode = 0777' >> /usr/local/etc/php-fpm.d/www.conf" docker exec "$container_name" sh -c "rm -f /usr/local/etc/php-fpm.d/zz-docker.conf" find /home/web/conf.d/ -type f -name "*.conf" -exec sed -i "s#fastcgi_pass ${container_name}:9000;#fastcgi_pass unix:/run/${container_name}/php-fpm.sock;#g" {} \; } linux_ldnmp() { while true; do clear # send_stats "LDNMP建站" echo -e "${gl_huang}LDNMP建站" ldnmp_tato echo -e "${gl_huang}------------------------" echo -e "${gl_huang}1. ${gl_bai}安装LDNMP环境 ${gl_huang}★${gl_bai} ${gl_huang}2. ${gl_bai}安装WordPress ${gl_huang}★${gl_bai}" echo -e "${gl_huang}3. ${gl_bai}安装Discuz论坛 ${gl_huang}4. ${gl_bai}安装可道云桌面" echo -e "${gl_huang}5. ${gl_bai}安装苹果CMS影视站 ${gl_huang}6. ${gl_bai}安装独角数发卡网" echo -e "${gl_huang}7. ${gl_bai}安装flarum论坛网站 ${gl_huang}8. ${gl_bai}安装typecho轻量博客网站" echo -e "${gl_huang}9. ${gl_bai}安装LinkStack共享链接平台 ${gl_huang}20. ${gl_bai}自定义动态站点" echo -e "${gl_huang}------------------------" echo -e "${gl_huang}21. ${gl_bai}仅安装nginx ${gl_huang}★${gl_bai} ${gl_huang}22. ${gl_bai}站点重定向" echo -e "${gl_huang}23. ${gl_bai}站点反向代理-IP+端口 ${gl_huang}★${gl_bai} ${gl_huang}24. ${gl_bai}站点反向代理-域名" echo -e "${gl_huang}25. ${gl_bai}安装Bitwarden密码管理平台 ${gl_huang}26. ${gl_bai}安装Halo博客网站" echo -e "${gl_huang}27. ${gl_bai}安装AI绘画提示词生成器 ${gl_huang}28. ${gl_bai}站点反向代理-负载均衡" echo -e "${gl_huang}29. ${gl_bai}Stream四层代理转发 ${gl_huang}30. ${gl_bai}自定义静态站点" echo -e "${gl_huang}------------------------" echo -e "${gl_huang}31. ${gl_bai}站点数据管理 ${gl_huang}★${gl_bai} ${gl_huang}32. ${gl_bai}备份全站数据" echo -e "${gl_huang}33. ${gl_bai}定时远程备份 ${gl_huang}34. ${gl_bai}还原全站数据" echo -e "${gl_huang}------------------------" echo -e "${gl_huang}35. ${gl_bai}防护LDNMP环境 ${gl_huang}36. ${gl_bai}优化LDNMP环境" echo -e "${gl_huang}37. ${gl_bai}更新LDNMP环境 ${gl_huang}38. ${gl_bai}卸载LDNMP环境" echo -e "${gl_huang}------------------------" echo -e "${gl_huang}0. ${gl_bai}返回主菜单" echo -e "${gl_huang}------------------------${gl_bai}" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) ldnmp_install_status_one ldnmp_install_all ;; 2) ldnmp_wp ;; 3) clear # Discuz论坛 webname="Discuz论坛" send_stats "安装$webname" echo "开始部署 $webname" add_yuming repeat_add_yuming ldnmp_install_status install_ssltls certs_status add_db wget -O /home/web/conf.d/map.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/map.conf wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/discuz.com.conf sed -i "s/yuming.com/$yuming/g" /home/web/conf.d/$yuming.conf nginx_http_on cd /home/web/html mkdir $yuming cd $yuming LATEST_URL=$(curl -s https://api.gitee.com/api/v5/repos/Discuz/DiscuzX/releases/latest | grep -o 'https://[^"]*Discuz_X[^"]*SC_UTF8[^"]*\.zip' | head -n 1) wget -O latest.zip ${LATEST_URL} unzip -q latest.zip mv upload/* . rm -rf upload readme readme.html utility.html LICENSE qqqun.png rm latest.zip restart_ldnmp ldnmp_web_on echo "数据库地址: mysql" echo "数据库名: $dbname" echo "用户名: $dbuse" echo "密码: $dbusepasswd" echo "表前缀: discuz_" ;; 4) clear # 可道云桌面 webname="可道云桌面" send_stats "安装$webname" echo "开始部署 $webname" add_yuming repeat_add_yuming ldnmp_install_status install_ssltls certs_status add_db wget -O /home/web/conf.d/map.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/map.conf wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/kdy.com.conf sed -i "s/yuming.com/$yuming/g" /home/web/conf.d/$yuming.conf nginx_http_on cd /home/web/html mkdir $yuming cd $yuming LATEST_VERSION=$(curl -s https://api.github.com/repos/kalcaddle/kodbox/releases/latest | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/') wget -O latest.zip ${gh_proxy}github.com/kalcaddle/kodbox/archive/refs/tags/${LATEST_VERSION}.zip unzip -o latest.zip rm latest.zip mv /home/web/html/$yuming/kodbox* /home/web/html/$yuming/kodbox restart_ldnmp ldnmp_web_on echo "数据库地址: mysql" echo "用户名: $dbuse" echo "密码: $dbusepasswd" echo "数据库名: $dbname" echo "redis主机: redis" ;; 5) clear # 苹果CMS webname="苹果CMS" send_stats "安装$webname" echo "开始部署 $webname" add_yuming repeat_add_yuming ldnmp_install_status install_ssltls certs_status add_db wget -O /home/web/conf.d/map.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/map.conf wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/maccms.com.conf sed -i "s/yuming.com/$yuming/g" /home/web/conf.d/$yuming.conf nginx_http_on cd /home/web/html mkdir $yuming cd $yuming # wget ${gh_proxy}github.com/magicblack/maccms_down/raw/master/maccms10.zip && unzip maccms10.zip && rm maccms10.zip wget ${gh_proxy}github.com/magicblack/maccms_down/raw/master/maccms10.zip && unzip maccms10.zip && mv maccms10-*/* . && rm -r maccms10-* && rm maccms10.zip cd /home/web/html/$yuming/template/ && wget ${gh_proxy}github.com/kejilion/Website_source_code/raw/main/DYXS2.zip && unzip DYXS2.zip && rm /home/web/html/$yuming/template/DYXS2.zip cp /home/web/html/$yuming/template/DYXS2/asset/admin/Dyxs2.php /home/web/html/$yuming/application/admin/controller cp /home/web/html/$yuming/template/DYXS2/asset/admin/dycms.html /home/web/html/$yuming/application/admin/view/system mv /home/web/html/$yuming/admin.php /home/web/html/$yuming/vip.php && wget -O /home/web/html/$yuming/application/extra/maccms.php ${gh_proxy}raw.githubusercontent.com/kejilion/Website_source_code/main/maccms.php restart_ldnmp ldnmp_web_on echo "数据库地址: mysql" echo "数据库端口: 3306" echo "数据库名: $dbname" echo "用户名: $dbuse" echo "密码: $dbusepasswd" echo "数据库前缀: mac_" echo "------------------------" echo "安装成功后登录后台地址" echo "https://$yuming/vip.php" ;; 6) clear # 独脚数卡 webname="独脚数卡" send_stats "安装$webname" echo "开始部署 $webname" add_yuming repeat_add_yuming ldnmp_install_status install_ssltls certs_status add_db wget -O /home/web/conf.d/map.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/map.conf wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/dujiaoka.com.conf sed -i "s/yuming.com/$yuming/g" /home/web/conf.d/$yuming.conf nginx_http_on cd /home/web/html mkdir $yuming cd $yuming wget ${gh_proxy}github.com/assimon/dujiaoka/releases/download/2.0.6/2.0.6-antibody.tar.gz && tar -zxvf 2.0.6-antibody.tar.gz && rm 2.0.6-antibody.tar.gz restart_ldnmp ldnmp_web_on echo "数据库地址: mysql" echo "数据库端口: 3306" echo "数据库名: $dbname" echo "用户名: $dbuse" echo "密码: $dbusepasswd" echo "" echo "redis地址: redis" echo "redis密码: 默认不填写" echo "redis端口: 6379" echo "" echo "网站url: https://$yuming" echo "后台登录路径: /admin" echo "------------------------" echo "用户名: admin" echo "密码: admin" echo "------------------------" echo "登录时右上角如果出现红色error0请使用如下命令: " echo "我也很气愤独角数卡为啥这么麻烦，会有这样的问题！" echo "sed -i 's/ADMIN_HTTPS=false/ADMIN_HTTPS=true/g' /home/web/html/$yuming/dujiaoka/.env" ;; 7) clear # flarum论坛 webname="flarum论坛" send_stats "安装$webname" echo "开始部署 $webname" add_yuming repeat_add_yuming ldnmp_install_status install_ssltls certs_status add_db wget -O /home/web/conf.d/map.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/map.conf wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/flarum.com.conf sed -i "s/yuming.com/$yuming/g" /home/web/conf.d/$yuming.conf nginx_http_on docker exec php rm -f /usr/local/etc/php/conf.d/optimized_php.ini cd /home/web/html mkdir $yuming cd $yuming docker exec php sh -c "php -r \"copy('https://getcomposer.org/installer', 'composer-setup.php');\"" docker exec php sh -c "php composer-setup.php" docker exec php sh -c "php -r \"unlink('composer-setup.php');\"" docker exec php sh -c "mv composer.phar /usr/local/bin/composer" docker exec php composer create-project flarum/flarum /var/www/html/$yuming docker exec php sh -c "cd /var/www/html/$yuming && composer require flarum-lang/chinese-simplified" docker exec php sh -c "cd /var/www/html/$yuming && composer require flarum/extension-manager:*" docker exec php sh -c "cd /var/www/html/$yuming && composer require fof/polls" docker exec php sh -c "cd /var/www/html/$yuming && composer require fof/sitemap" docker exec php sh -c "cd /var/www/html/$yuming && composer require fof/oauth" docker exec php sh -c "cd /var/www/html/$yuming && composer require fof/best-answer:*" docker exec php sh -c "cd /var/www/html/$yuming && composer require fof/upload" docker exec php sh -c "cd /var/www/html/$yuming && composer require fof/gamification" docker exec php sh -c "cd /var/www/html/$yuming && composer require fof/byobu:*" docker exec php sh -c "cd /var/www/html/$yuming && composer require v17development/flarum-seo" docker exec php sh -c "cd /var/www/html/$yuming && composer require clarkwinkelmann/flarum-ext-emojionearea" restart_ldnmp ldnmp_web_on echo "数据库地址: mysql" echo "数据库名: $dbname" echo "用户名: $dbuse" echo "密码: $dbusepasswd" echo "表前缀: flarum_" echo "管理员信息自行设置" ;; 8) clear # typecho webname="typecho" send_stats "安装$webname" echo "开始部署 $webname" add_yuming repeat_add_yuming ldnmp_install_status install_ssltls certs_status add_db wget -O /home/web/conf.d/map.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/map.conf wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/typecho.com.conf sed -i "s/yuming.com/$yuming/g" /home/web/conf.d/$yuming.conf nginx_http_on cd /home/web/html mkdir $yuming cd $yuming wget -O latest.zip ${gh_proxy}github.com/typecho/typecho/releases/latest/download/typecho.zip unzip latest.zip rm latest.zip restart_ldnmp clear ldnmp_web_on echo "数据库前缀: typecho_" echo "数据库地址: mysql" echo "用户名: $dbuse" echo "密码: $dbusepasswd" echo "数据库名: $dbname" ;; 9) clear # LinkStack webname="LinkStack" send_stats "安装$webname" echo "开始部署 $webname" add_yuming repeat_add_yuming ldnmp_install_status install_ssltls certs_status add_db wget -O /home/web/conf.d/map.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/map.conf wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/refs/heads/main/index_php.conf sed -i "s|/var/www/html/yuming.com/|/var/www/html/yuming.com/linkstack|g" /home/web/conf.d/$yuming.conf sed -i "s|yuming.com|$yuming|g" /home/web/conf.d/$yuming.conf nginx_http_on cd /home/web/html mkdir $yuming cd $yuming wget -O latest.zip ${gh_proxy}github.com/linkstackorg/linkstack/releases/latest/download/linkstack.zip unzip latest.zip rm latest.zip restart_ldnmp clear ldnmp_web_on echo "数据库地址: mysql" echo "数据库端口: 3306" echo "数据库名: $dbname" echo "用户名: $dbuse" echo "密码: $dbusepasswd" ;; 20) clear webname="PHP动态站点" send_stats "安装$webname" echo "开始部署 $webname" add_yuming repeat_add_yuming ldnmp_install_status install_ssltls certs_status add_db wget -O /home/web/conf.d/map.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/map.conf wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/index_php.conf sed -i "s/yuming.com/$yuming/g" /home/web/conf.d/$yuming.conf nginx_http_on cd /home/web/html mkdir $yuming cd $yuming clear echo -e "[${gl_huang}1/6${gl_bai}] 上传PHP源码" echo "-------------" echo "目前只允许上传zip格式的源码包，请将源码包放到/home/web/html/${yuming}目录下" read -e -p "也可以输入下载链接，远程下载源码包，直接回车将跳过远程下载： " url_download if [ -n "$url_download" ]; then wget "$url_download" fi unzip $(ls -t *.zip | head -n 1) rm -f $(ls -t *.zip | head -n 1) clear echo -e "[${gl_huang}2/6${gl_bai}] index.php所在路径" echo "-------------" # find "$(realpath .)" -name "index.php" -print find "$(realpath .)" -name "index.php" -print | xargs -I {} dirname {} read -e -p "请输入index.php的路径，类似（/home/web/html/$yuming/wordpress/）： " index_lujing sed -i "s#root /var/www/html/$yuming/#root $index_lujing#g" /home/web/conf.d/$yuming.conf sed -i "s#/home/web/#/var/www/#g" /home/web/conf.d/$yuming.conf clear echo -e "[${gl_huang}3/6${gl_bai}] 请选择PHP版本" echo "-------------" read -e -p "1. php最新版 | 2. php7.4 : " pho_v case "$pho_v" in 1) sed -i "s#php:9000#php:9000#g" /home/web/conf.d/$yuming.conf local PHP_Version="php" ;; 2) sed -i "s#php:9000#php74:9000#g" /home/web/conf.d/$yuming.conf local PHP_Version="php74" ;; *) echo "无效的选择，请重新输入。" ;; esac clear echo -e "[${gl_huang}4/6${gl_bai}] 安装指定扩展" echo "-------------" echo "已经安装的扩展" docker exec php php -m read -e -p "$(echo -e "输入需要安装的扩展名称，如 ${gl_huang}SourceGuardian imap ftp${gl_bai} 等等。直接回车将跳过安装 ： ")" php_extensions if [ -n "$php_extensions" ]; then docker exec $PHP_Version install-php-extensions $php_extensions fi clear echo -e "[${gl_huang}5/6${gl_bai}] 编辑站点配置" echo "-------------" echo "按任意键继续，可以详细设置站点配置，如伪静态等内容" read -n 1 -s -r -p "" install nano nano /home/web/conf.d/$yuming.conf clear echo -e "[${gl_huang}6/6${gl_bai}] 数据库管理" echo "-------------" read -e -p "1. 我搭建新站 2. 我搭建老站有数据库备份： " use_db case $use_db in 1) echo ;; 2) echo "数据库备份必须是.gz结尾的压缩包。请放到/home/目录下，支持宝塔/1panel备份数据导入。" read -e -p "也可以输入下载链接，远程下载备份数据，直接回车将跳过远程下载： " url_download_db cd /home/ if [ -n "$url_download_db" ]; then wget "$url_download_db" fi gunzip $(ls -t *.gz | head -n 1) latest_sql=$(ls -t *.sql | head -n 1) dbrootpasswd=$(grep -oP 'MYSQL_ROOT_PASSWORD:\s*\K.*' /home/web/docker-compose.yml | tr -d '[:space:]') docker exec -i mysql mysql -u root -p"$dbrootpasswd" $dbname < "/home/$latest_sql" echo "数据库导入的表数据" docker exec -i mysql mysql -u root -p"$dbrootpasswd" -e "USE $dbname; SHOW TABLES;" rm -f *.sql echo "数据库导入完成" ;; *) echo ;; esac docker exec php rm -f /usr/local/etc/php/conf.d/optimized_php.ini restart_ldnmp ldnmp_web_on prefix="web$(shuf -i 10-99 -n 1)_" echo "数据库地址: mysql" echo "数据库名: $dbname" echo "用户名: $dbuse" echo "密码: $dbusepasswd" echo "表前缀: $prefix" echo "管理员登录信息自行设置" ;; 21) ldnmp_install_status_one nginx_install_all ;; 22) clear webname="站点重定向" send_stats "安装$webname" echo "开始部署 $webname" add_yuming read -e -p "请输入跳转域名: " reverseproxy nginx_install_status install_ssltls certs_status wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/rewrite.conf sed -i "s/yuming.com/$yuming/g" /home/web/conf.d/$yuming.conf sed -i "s/baidu.com/$reverseproxy/g" /home/web/conf.d/$yuming.conf nginx_http_on docker exec nginx nginx -s reload nginx_web_on ;; 23) ldnmp_Proxy find_container_by_host_port "$port" if [ -z "$docker_name" ]; then close_port "$port" echo "已阻止IP+端口访问该服务" else ip_address close_port "$port" block_container_port "$docker_name" "$ipv4_address" fi ;; 24) clear webname="反向代理-域名" send_stats "安装$webname" echo "开始部署 $webname" add_yuming echo -e "域名格式: ${gl_huang}google.com${gl_bai}" read -e -p "请输入你的反代域名: " fandai_yuming nginx_install_status install_ssltls certs_status wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/reverse-proxy-domain.conf sed -i "s/yuming.com/$yuming/g" /home/web/conf.d/$yuming.conf sed -i "s|fandaicom|$fandai_yuming|g" /home/web/conf.d/$yuming.conf nginx_http_on docker exec nginx nginx -s reload nginx_web_on ;; 25) clear webname="Bitwarden" send_stats "安装$webname" echo "开始部署 $webname" add_yuming docker run -d \ --name bitwarden \ --restart=always \ -p 3280:80 \ -v /home/web/html/$yuming/bitwarden/data:/data \ vaultwarden/server duankou=3280 ldnmp_Proxy ${yuming} 127.0.0.1 $duankou ;; 26) clear webname="halo" send_stats "安装$webname" echo "开始部署 $webname" add_yuming docker run -d --name halo --restart=always -p 8010:8090 -v /home/web/html/$yuming/.halo2:/root/.halo2 halohub/halo:2 duankou=8010 ldnmp_Proxy ${yuming} 127.0.0.1 $duankou ;; 27) clear webname="AI绘画提示词生成器" send_stats "安装$webname" echo "开始部署 $webname" add_yuming nginx_install_status install_ssltls certs_status wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/html.conf sed -i "s/yuming.com/$yuming/g" /home/web/conf.d/$yuming.conf nginx_http_on cd /home/web/html mkdir $yuming cd $yuming wget ${gh_proxy}github.com/kejilion/Website_source_code/raw/refs/heads/main/ai_prompt_generator.zip unzip $(ls -t *.zip | head -n 1) rm -f $(ls -t *.zip | head -n 1) docker exec nginx chmod -R nginx:nginx /var/www/html docker exec nginx nginx -s reload nginx_web_on ;; 28) ldnmp_Proxy_backend ;; 29) stream_panel ;; 30) clear webname="静态站点" send_stats "安装$webname" echo "开始部署 $webname" add_yuming repeat_add_yuming nginx_install_status install_ssltls certs_status wget -O /home/web/conf.d/$yuming.conf ${gh_proxy}raw.githubusercontent.com/kejilion/nginx/main/html.conf sed -i "s/yuming.com/$yuming/g" /home/web/conf.d/$yuming.conf nginx_http_on cd /home/web/html mkdir $yuming cd $yuming clear echo -e "[${gl_huang}1/2${gl_bai}] 上传静态源码" echo "-------------" echo "目前只允许上传zip格式的源码包，请将源码包放到/home/web/html/${yuming}目录下" read -e -p "也可以输入下载链接，远程下载源码包，直接回车将跳过远程下载： " url_download if [ -n "$url_download" ]; then wget "$url_download" fi unzip $(ls -t *.zip | head -n 1) rm -f $(ls -t *.zip | head -n 1) clear echo -e "[${gl_huang}2/2${gl_bai}] index.html所在路径" echo "-------------" # find "$(realpath .)" -name "index.html" -print find "$(realpath .)" -name "index.html" -print | xargs -I {} dirname {} read -e -p "请输入index.html的路径，类似（/home/web/html/$yuming/index/）： " index_lujing sed -i "s#root /var/www/html/$yuming/#root $index_lujing#g" /home/web/conf.d/$yuming.conf sed -i "s#/home/web/#/var/www/#g" /home/web/conf.d/$yuming.conf docker exec nginx chmod -R nginx:nginx /var/www/html docker exec nginx nginx -s reload nginx_web_on ;; 31) ldnmp_web_status ;; 32) clear send_stats "LDNMP环境备份" local backup_filename="web_$(date +"%Y%m%d%H%M%S").tar.gz" echo -e "${gl_kjlan}正在备份 $backup_filename ...${gl_bai}" cd /home/ && tar czvf "$backup_filename" web while true; do clear echo "备份文件已创建: /home/$backup_filename" read -e -p "要传送备份数据到远程服务器吗？(Y/N): " choice case "$choice" in [Yy]) kj_ssh_read_host_port "请输入远端服务器IP: " "目标服务器SSH端口 [默认22]: " "22" local remote_ip="$KJ_SSH_HOST" local TARGET_PORT="$KJ_SSH_PORT" local latest_tar=$(ls -t /home/*.tar.gz | head -1) if [ -n "$latest_tar" ]; then ssh-keygen -f "/root/.ssh/known_hosts" -R "$remote_ip" sleep 2 # 添加等待时间 scp -P "$TARGET_PORT" -o StrictHostKeyChecking=no "$latest_tar" "root@$remote_ip:/home/" echo "文件已传送至远程服务器home目录。" else echo "未找到要传送的文件。" fi break ;; [Nn]) break ;; *) echo "无效的选择，请输入 Y 或 N。" ;; esac done ;; 33) clear send_stats "定时远程备份" read -e -p "输入远程服务器IP: " useip read -e -p "输入远程服务器密码: " usepasswd cd ~ wget -O ${useip}_beifen.sh ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/beifen.sh > /dev/null 2>&1 chmod +x ${useip}_beifen.sh sed -i "s/0.0.0.0/$useip/g" ${useip}_beifen.sh sed -i "s/123456/$usepasswd/g" ${useip}_beifen.sh echo "------------------------" echo "1. 每周备份 2. 每天备份" read -e -p "请输入你的选择: " dingshi case $dingshi in 1) check_crontab_installed read -e -p "选择每周备份的星期几 (0-6，0代表星期日): " weekday (crontab -l ; echo "0 0 * * $weekday ./${useip}_beifen.sh") | crontab - > /dev/null 2>&1 ;; 2) check_crontab_installed read -e -p "选择每天备份的时间（小时，0-23）: " hour (crontab -l ; echo "0 $hour * * * ./${useip}_beifen.sh") | crontab - > /dev/null 2>&1 ;; *) break # 跳出 ;; esac install sshpass ;; 34) root_use send_stats "LDNMP环境还原" echo "可用的站点备份" echo "-------------------------" ls -lt /home/*.gz | awk '{print $NF}' echo "" read -e -p "回车键还原最新的备份，输入备份文件名还原指定的备份，输入0退出：" filename if [ "$filename" == "0" ]; then break_end linux_ldnmp fi # 如果用户没有输入文件名，使用最新的压缩包 if [ -z "$filename" ]; then local filename=$(ls -t /home/*.tar.gz | head -1) fi if [ -n "$filename" ]; then cd /home/web/ > /dev/null 2>&1 docker compose down > /dev/null 2>&1 rm -rf /home/web > /dev/null 2>&1 echo -e "${gl_kjlan}正在解压 $filename ...${gl_bai}" cd /home/ && tar -xzf "$filename" install_dependency install_docker install_certbot install_ldnmp else echo "没有找到压缩包。" fi ;; 35) web_security ;; 36) web_optimization ;; 37) root_use while true; do clear send_stats "更新LDNMP环境" echo "更新LDNMP环境" echo "------------------------" ldnmp_v echo "发现新版本的组件" echo "------------------------" check_docker_image_update nginx if [ -n "$update_status" ]; then echo -e "${gl_huang}nginx $update_status${gl_bai}" fi check_docker_image_update php if [ -n "$update_status" ]; then echo -e "${gl_huang}php $update_status${gl_bai}" fi check_docker_image_update mysql if [ -n "$update_status" ]; then echo -e "${gl_huang}mysql $update_status${gl_bai}" fi check_docker_image_update redis if [ -n "$update_status" ]; then echo -e "${gl_huang}redis $update_status${gl_bai}" fi echo "------------------------" echo echo "1. 更新nginx 2. 更新mysql 3. 更新php 4. 更新redis" echo "------------------------" echo "5. 更新完整环境" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) nginx_upgrade ;; 2) local ldnmp_pods="mysql" read -e -p "请输入${ldnmp_pods}版本号 （如: 8.0 8.3 8.4 9.0）（回车获取最新版）: " version local version=${version:-latest} cd /home/web/ cp /home/web/docker-compose.yml /home/web/docker-compose1.yml sed -i "s/image: mysql/image: mysql:${version}/" /home/web/docker-compose.yml docker rm -f $ldnmp_pods docker images --filter=reference="$ldnmp_pods*" -q | xargs docker rmi > /dev/null 2>&1 docker compose up -d --force-recreate $ldnmp_pods docker restart $ldnmp_pods cp /home/web/docker-compose1.yml /home/web/docker-compose.yml send_stats "更新$ldnmp_pods" echo "更新${ldnmp_pods}完成" ;; 3) local ldnmp_pods="php" read -e -p "请输入${ldnmp_pods}版本号 （如: 7.4 8.0 8.1 8.2 8.3）（回车获取最新版）: " version local version=${version:-8.3} cd /home/web/ cp /home/web/docker-compose.yml /home/web/docker-compose1.yml sed -i "s/kjlion\///g" /home/web/docker-compose.yml > /dev/null 2>&1 sed -i "s/image: php:fpm-alpine/image: php:${version}-fpm-alpine/" /home/web/docker-compose.yml docker rm -f $ldnmp_pods docker images --filter=reference="$ldnmp_pods*" -q | xargs docker rmi > /dev/null 2>&1 docker images --filter=reference="kjlion/${ldnmp_pods}*" -q | xargs docker rmi > /dev/null 2>&1 docker compose up -d --force-recreate $ldnmp_pods docker exec php chown -R www-data:www-data /var/www/html run_command docker exec php sed -i "s/dl-cdn.alpinelinux.org/mirrors.aliyun.com/g" /etc/apk/repositories > /dev/null 2>&1 docker exec php apk update curl -sL ${gh_proxy}github.com/mlocati/docker-php-extension-installer/releases/latest/download/install-php-extensions -o /usr/local/bin/install-php-extensions docker exec php mkdir -p /usr/local/bin/ docker cp /usr/local/bin/install-php-extensions php:/usr/local/bin/ docker exec php chmod +x /usr/local/bin/install-php-extensions docker exec php install-php-extensions mysqli pdo_mysql gd intl zip exif bcmath opcache redis imagick soap docker exec php sh -c 'echo "upload_max_filesize=50M " > /usr/local/etc/php/conf.d/uploads.ini' > /dev/null 2>&1 docker exec php sh -c 'echo "post_max_size=50M " > /usr/local/etc/php/conf.d/post.ini' > /dev/null 2>&1 docker exec php sh -c 'echo "memory_limit=512M" > /usr/local/etc/php/conf.d/memory.ini' > /dev/null 2>&1 docker exec php sh -c 'echo "max_execution_time=1200" > /usr/local/etc/php/conf.d/max_execution_time.ini' > /dev/null 2>&1 docker exec php sh -c 'echo "max_input_time=600" > /usr/local/etc/php/conf.d/max_input_time.ini' > /dev/null 2>&1 docker exec php sh -c 'echo "max_input_vars=5000" > /usr/local/etc/php/conf.d/max_input_vars.ini' > /dev/null 2>&1 fix_phpfpm_con $ldnmp_pods docker restart $ldnmp_pods > /dev/null 2>&1 cp /home/web/docker-compose1.yml /home/web/docker-compose.yml send_stats "更新$ldnmp_pods" echo "更新${ldnmp_pods}完成" ;; 4) local ldnmp_pods="redis" cd /home/web/ docker rm -f $ldnmp_pods docker images --filter=reference="$ldnmp_pods*" -q | xargs docker rmi > /dev/null 2>&1 docker compose up -d --force-recreate $ldnmp_pods docker restart $ldnmp_pods > /dev/null 2>&1 send_stats "更新$ldnmp_pods" echo "更新${ldnmp_pods}完成" ;; 5) read -e -p "$(echo -e "${gl_huang}提示: ${gl_bai}长时间不更新环境的用户，请慎重更新LDNMP环境，会有数据库更新失败的风险。确定更新LDNMP环境吗？(Y/N): ")" choice case "$choice" in [Yy]) send_stats "完整更新LDNMP环境" cd /home/web/ docker compose down --rmi all install_dependency install_docker install_certbot install_ldnmp ;; *) ;; esac ;; *) break ;; esac break_end done ;; 38) root_use send_stats "卸载LDNMP环境" read -e -p "$(echo -e "${gl_hong}强烈建议：${gl_bai}先备份全部网站数据，再卸载LDNMP环境。确定删除所有网站数据吗？(Y/N): ")" choice case "$choice" in [Yy]) cd /home/web/ docker compose down --rmi all docker compose -f docker-compose.phpmyadmin.yml down > /dev/null 2>&1 docker compose -f docker-compose.phpmyadmin.yml down --rmi all > /dev/null 2>&1 rm -rf /home/web ;; [Nn]) ;; *) echo "无效的选择，请输入 Y 或 N。" ;; esac ;; 0) kejilion ;; *) echo "无效的输入!" esac break_end done } moltbot_menu() { local app_id="114" send_stats "clawdbot/moltbot管理" check_openclaw_update() { if ! command -v npm >/dev/null 2>&1; then return 1 fi # 加上 --no-update-notifier，并确保错误重定向位置正确 local_version=$(npm list -g openclaw --depth=0 --no-update-notifier 2>/dev/null | grep openclaw | awk '{print $NF}' | sed 's/^.*@//') if [ -z "$local_version" ]; then return 1 fi remote_version=$(npm view openclaw version --no-update-notifier 2>/dev/null) if [ -z "$remote_version" ]; then return 1 fi if [ "$local_version" != "$remote_version" ]; then echo "${gl_huang}检测到新版本:$remote_version${gl_bai}" else echo "${gl_lv}当前版本已是最新:$local_version${gl_bai}" fi } get_install_status() { if command -v openclaw >/dev/null 2>&1; then echo "${gl_lv}已安装${gl_bai}" else echo "${gl_hui}未安装${gl_bai}" fi } get_running_status() { if pgrep -f "openclaw.*gateway" >/dev/null 2>&1; then echo "${gl_lv}运行中${gl_bai}" else echo "${gl_hui}未运行${gl_bai}" fi } show_menu() { clear local install_status=$(get_install_status) local running_status=$(get_running_status) local update_message=$(check_openclaw_update) echo "=======================================" echo -e "🦞 OPENCLAW 管理工具 by KEJILION 🦞" echo -e "💡 终端执行 \033[1;33mk claw\033[0m 快速进入菜单" echo -e "$install_status $running_status $update_message" echo "=======================================" echo "1. 安装" echo "2. 启动" echo "3. 停止" echo "--------------------" echo "4. 状态日志查看" echo "5. 换模型" echo "6. API管理" echo "7. 机器人连接对接" echo "8. 插件管理（安装/删除）" echo "9. 技能管理（安装/删除）" echo "10. 编辑主配置文件" echo "11. 配置向导" echo "12. 健康检测与修复" echo "13. WebUI访问与设置" echo "14. TUI命令行对话窗口" echo "15. 记忆/Memory" echo "16. 权限管理" echo "17. 多智能体管理" echo "--------------------" echo "18. 备份与还原" echo "19. 更新" echo "20. 卸载" echo "--------------------" echo "0. 返回上一级选单" echo "--------------------" printf "请输入选项并回车: " } start_gateway() { openclaw gateway stop openclaw gateway start sleep 3 } install_node_and_tools() { if command -v dnf &>/dev/null; then curl -fsSL https://rpm.nodesource.com/setup_24.x | sudo bash - dnf update -y dnf group install -y "Development Tools" "Development Libraries" dnf install -y cmake libatomic nodejs fi if command -v apt &>/dev/null; then curl -fsSL https://deb.nodesource.com/setup_24.x | bash - apt update -y apt install build-essential python3 libatomic1 nodejs -y fi } sync_openclaw_api_models() { local config_file config_file=$(openclaw_get_config_file) [ ! -f "$config_file" ] && return 0 install jq curl >/dev/null 2>&1 python3 - "$config_file" "$ENABLE_STATS" "$sh_v" <<'PY' import copy import json import os import platform import sys import time import urllib.request from datetime import datetime, timezone path = sys.argv[1] stats_enabled = (sys.argv[2].lower() == "true") if len(sys.argv) > 2 else True script_version = sys.argv[3] if len(sys.argv) > 3 else "" def send_stat(action): if not stats_enabled: return payload = { "action": action, "timestamp": datetime.now(timezone.utc).strftime("%Y-%m-%d %H:%M:%S"), "country": "", "os_info": platform.platform(), "cpu_arch": platform.machine(), "version": script_version, } try: req = urllib.request.Request( "https://api.kejilion.pro/api/log", data=json.dumps(payload).encode("utf-8"), headers={"Content-Type": "application/json"}, method="POST", ) with urllib.request.urlopen(req, timeout=3): pass except Exception: pass with open(path, 'r', encoding='utf-8') as f: obj = json.load(f) work = copy.deepcopy(obj) models_cfg = work.setdefault('models', {}) providers = models_cfg.get('providers', {}) if not isinstance(providers, dict) or not providers: print('ℹ️ 未检测到 API providers，跳过模型同步') raise SystemExit(0) agents = work.setdefault('agents', {}) defaults = agents.setdefault('defaults', {}) defaults_models_raw = defaults.get('models') if isinstance(defaults_models_raw, dict): defaults_models = defaults_models_raw elif isinstance(defaults_models_raw, list): defaults_models = {str(x): {} for x in defaults_models_raw if isinstance(x, str)} else: defaults_models = {} defaults['models'] = defaults_models SUPPORTED_APIS = {'openai-completions', 'openai-responses'} changed = False fatal_errors = [] summary = [] def model_ref(provider_name, model_id): return f"{provider_name}/{model_id}" def get_primary_ref(defaults_obj): model_obj = defaults_obj.get('model') if isinstance(model_obj, str): return model_obj if isinstance(model_obj, dict): primary = model_obj.get('primary') if isinstance(primary, str): return primary return None def set_primary_ref(defaults_obj, new_ref): model_obj = defaults_obj.get('model') if isinstance(model_obj, str): defaults_obj['model'] = new_ref elif isinstance(model_obj, dict): model_obj['primary'] = new_ref else: defaults_obj['model'] = {'primary': new_ref} def ref_provider(ref): if not isinstance(ref, str) or '/' not in ref: return None return ref.split('/', 1)[0] def collect_available_refs(exclude_provider=None): refs = [] if not isinstance(providers, dict): return refs for pname, p in providers.items(): if exclude_provider and pname == exclude_provider: continue if not isinstance(p, dict): continue for m in p.get('models', []) or []: if isinstance(m, dict) and m.get('id'): refs.append(model_ref(pname, str(m['id']))) return refs def prompt_delete_provider(name): prompt = f"⚠️ {name} /models 探测连续失败 3 次。是否删除该 API 供应商及其全部相关模型？[y/N]: " try: ans = input(prompt).strip().lower() except EOFError: return False return ans in ('y', 'yes') def rebind_defaults_before_delete(name): global changed replacement = None def get_replacement(): nonlocal replacement if replacement is None: candidates = collect_available_refs(exclude_provider=name) replacement = candidates[0] if candidates else None return replacement primary_ref = get_primary_ref(defaults) if ref_provider(primary_ref) == name: repl = get_replacement() if not repl: summary.append(f'❌ {name}: 默认主模型指向该 provider，但无可用替代模型，已中止删除') return False set_primary_ref(defaults, repl) changed = True summary.append(f'🔁 删除前已切换默认主模型: {primary_ref} -> {repl}') for fk in ('modelFallback', 'imageModelFallback'): val = defaults.get(fk) if ref_provider(val) == name: repl = get_replacement() if not repl: summary.append(f'❌ {name}: {fk} 指向该 provider，但无可用替代模型，已中止删除') return False defaults[fk] = repl changed = True summary.append(f'🔁 删除前已切换 {fk}: {val} -> {repl}') return True def delete_provider_and_refs(name): global changed if not rebind_defaults_before_delete(name): return False removed_refs = [r for r in list(defaults_models.keys()) if r.startswith(name + '/')] for r in removed_refs: defaults_models.pop(r, None) if removed_refs: changed = True if name in providers: providers.pop(name, None) changed = True summary.append(f'🗑️ 已删除 provider {name}，并移除 defaults.models 下 {len(removed_refs)} 个模型引用') return True def fetch_remote_models_with_retry(name, base_url, api_key, retries=3): last_error = None for attempt in range(1, retries + 1): req = urllib.request.Request( base_url.rstrip('/') + '/models', headers={ 'Authorization': f'Bearer {api_key}', 'User-Agent': 'Mozilla/5.0', }, ) try: with urllib.request.urlopen(req, timeout=12) as resp: payload = resp.read().decode('utf-8', 'ignore') data = json.loads(payload) return data, None, attempt except Exception as e: last_error = e if attempt < retries: time.sleep(1) return None, last_error, retries for name, provider in list(providers.items()): if not isinstance(provider, dict): summary.append(f'ℹ️ 跳过 {name}: provider 结构非法') continue api = provider.get('api', '') base_url = provider.get('baseUrl') api_key = provider.get('apiKey') model_list = provider.get('models', []) if not base_url or not api_key or not isinstance(model_list, list) or not model_list: summary.append(f'ℹ️ 跳过 {name}: 无 baseUrl/apiKey/models') continue if api not in SUPPORTED_APIS: summary.append(f'🔁 {name}: 发现非法协议 {api or "(unset)"}，将重新探测') provider['api'] = '' api = '' changed = True data, err, attempts = fetch_remote_models_with_retry(name, base_url, api_key, retries=3) if err is not None: summary.append(f'⚠️ {name}: /models 探测失败，已重试 {attempts} 次 ({type(err).__name__}: {err})') send_stat('OpenClaw API确认介入') if prompt_delete_provider(name): deleted = delete_provider_and_refs(name) if deleted: send_stat('OpenClaw API删失败Provider-确认') summary.append(f'✅ {name}: 用户已确认删除该 provider 及全部相关模型引用') else: send_stat('OpenClaw API删失败Provider-拒绝') summary.append(f'ℹ️ {name}: 用户未确认删除，保留现有 provider 配置') continue if attempts > 1: summary.append(f'🔁 {name}: /models 第 {attempts} 次重试后成功') if not (isinstance(data, dict) and isinstance(data.get('data'), list)): summary.append(f'⚠️ 跳过 {name}: /models 返回结构不可识别') continue remote_ids = [] for item in data['data']: if isinstance(item, dict) and item.get('id'): remote_ids.append(str(item['id'])) remote_set = set(remote_ids) if not remote_set: fatal_errors.append(f'❌ {name} 上游 /models 为空，无法为该 provider 提供兜底模型') continue local_models = [m for m in model_list if isinstance(m, dict) and m.get('id')] local_ids = [str(m['id']) for m in local_models] local_set = set(local_ids) template = None for m in local_models: template = copy.deepcopy(m) break if template is None: summary.append(f'⚠️ 跳过 {name}: 本地 models 无有效模板模型') continue removed_ids = [mid for mid in local_ids if mid not in remote_set] added_ids = [mid for mid in remote_ids if mid not in local_set] kept_models = [copy.deepcopy(m) for m in local_models if str(m['id']) in remote_set] new_models = kept_models[:] for mid in added_ids: nm = copy.deepcopy(template) nm['id'] = mid if isinstance(nm.get('name'), str): nm['name'] = f'{name} / {mid}' new_models.append(nm) if not new_models: fatal_errors.append(f'❌ {name} 同步后无可用模型，无法保障默认模型/回退模型兜底') continue expected_refs = {model_ref(name, str(m['id'])) for m in new_models if isinstance(m, dict) and m.get('id')} local_refs = {model_ref(name, mid) for mid in local_ids} first_ref = model_ref(name, str(new_models[0]['id'])) primary_ref = get_primary_ref(defaults) if isinstance(primary_ref, str) and primary_ref in (local_refs - expected_refs): set_primary_ref(defaults, first_ref) changed = True summary.append(f'🔁 默认模型已兜底替换: {primary_ref} -> {first_ref}') for fk in ('modelFallback', 'imageModelFallback'): val = defaults.get(fk) if isinstance(val, str) and val in (local_refs - expected_refs): defaults[fk] = first_ref changed = True summary.append(f'🔁 {fk} 已兜底替换: {val} -> {first_ref}') stale_refs = [r for r in list(defaults_models.keys()) if r.startswith(name + '/') and r not in expected_refs] for r in stale_refs: defaults_models.pop(r, None) changed = True for r in sorted(expected_refs): if r not in defaults_models: defaults_models[r] = {} changed = True if removed_ids or added_ids or len(local_models) != len(new_models): provider['models'] = new_models changed = True summary.append(f'✅ {name}: 新增 {len(added_ids)} 个，删除 {len(removed_ids)} 个，当前 {len(new_models)} 个') if added_ids: summary.append(f'➕ 新增模型({len(added_ids)}):') for mid in added_ids: summary.append(f' + {mid}') if removed_ids: summary.append(f'➖ 删除模型({len(removed_ids)}):') for mid in removed_ids: summary.append(f' - {mid}') if fatal_errors: for line in summary: print(line) for err in fatal_errors: print(err) print('❌ 模型同步失败：存在 provider 同步后无可用模型，已中止写入') raise SystemExit(2) if changed: with open(path, 'w', encoding='utf-8') as f: json.dump(work, f, ensure_ascii=False, indent=2) f.write('\n') for line in summary: print(line) print('✅ OpenClaw API 模型一致性同步完成并已写入配置') else: for line in summary: print(line) print('ℹ️ 无需同步：配置已与上游 /models 保持一致') PY } install_moltbot() { echo "开始安装 OpenClaw..." send_stats "开始安装 OpenClaw..." install git jq install_node_and_tools country=$(curl -s ipinfo.io/country) if [[ "$country" == "CN" || "$country" == "HK" ]]; then npm config set registry https://registry.npmmirror.com fi git config --global url."${gh_proxy}github.com/".insteadOf ssh://git@github.com/ git config --global url."${gh_proxy}github.com/".insteadOf git@github.com: npm install -g openclaw@latest openclaw onboard --install-daemon start_gateway add_app_id break_end } start_bot() { echo "启动 OpenClaw..." send_stats "启动 OpenClaw..." start_gateway break_end } stop_bot() { echo "停止 OpenClaw..." send_stats "停止 OpenClaw..." tmux kill-session -t gateway > /dev/null 2>&1 openclaw gateway stop break_end } view_logs() { echo "查看 OpenClaw 状态日志" send_stats "查看 OpenClaw 日志" openclaw status openclaw gateway status openclaw logs break_end } # OpenClaw API 协议探测逻辑已移除：不再自动探测/判定 API 类型。 # 说明：API 类型由用户显式配置（models.providers..api），脚本不再尝试调用 /responses 做推断。 # 构造模型配置 JSON build-openclaw-provider-models-json() { local provider_name="$1" local model_ids="$2" local models_array="[" local first=true while read -r model_id; do [ -z "$model_id" ] && continue [[ $first == false ]] && models_array+="," first=false local context_window=1048576 local max_tokens=128000 local input_cost=0.15 local output_cost=0.60 case "$model_id" in *opus*|*pro*|*preview*|*thinking*|*sonnet*) input_cost=2.00 output_cost=12.00 ;; *gpt-5*|*codex*) input_cost=1.25 output_cost=10.00 ;; *flash*|*lite*|*haiku*|*mini*|*nano*) input_cost=0.10 output_cost=0.40 ;; esac models_array+=$(cat < 0 then .["\($prov)/\($mid)"] //= {} else . end ) ) ' "$config_file" > "${config_file}.tmp" && mv "${config_file}.tmp" "$config_file" } # 核心函数：获取并添加所有模型 add-all-models-from-provider() { local provider_name="$1" local base_url="$2" local api_key="$3" echo "🔍 正在获取 $provider_name 的所有可用模型..." local models_json=$(curl -s -m 10 \ -H "Authorization: Bearer $api_key" \ "${base_url}/models") if [[ -z "$models_json" ]]; then echo "❌ 无法获取模型列表" return 1 fi local model_ids=$(echo "$models_json" | grep -oP '"id":\s*"\K[^"]+') if [[ -z "$model_ids" ]]; then echo "❌ 未找到任何模型" return 1 fi local model_count=$(echo "$model_ids" | wc -l) echo "✅ 发现 $model_count 个模型" local models_array models_array=$(build-openclaw-provider-models-json "$provider_name" "$model_ids") write-openclaw-provider-models "$provider_name" "$base_url" "$api_key" "$models_array" if [[ $? -eq 0 ]]; then echo "✅ 成功添加 $model_count 个模型到 $provider_name" echo "📦 模型引用格式: $provider_name/" return 0 else echo "❌ 配置注入失败" return 1 fi } # 仅添加默认模型并保留 provider add-default-model-only-to-provider() { local provider_name="$1" local base_url="$2" local api_key="$3" local default_model="$4" if [[ -z "$default_model" ]]; then echo "❌ 默认模型不能为空" return 1 fi local models_array models_array=$(build-openclaw-provider-models-json "$provider_name" "$default_model") write-openclaw-provider-models "$provider_name" "$base_url" "$api_key" "$models_array" if [[ $? -eq 0 ]]; then echo "✅ 已添加 provider：$provider_name" echo "✅ 仅写入默认模型：$default_model" return 0 else echo "❌ 配置注入失败" return 1 fi } add-openclaw-provider-interactive() { send_stats "OpenClaw API添加" echo "=== 交互式添加 OpenClaw Provider (全量模型) ===" # 1. Provider 名称 read -erp "请输入 Provider 名称 (如: deepseek): " provider_name while [[ -z "$provider_name" ]]; do echo "❌ Provider 名称不能为空" read -erp "请输入 Provider 名称: " provider_name done # 2. Base URL read -erp "请输入 Base URL (如: https://api.xxx.com/v1): " base_url while [[ -z "$base_url" ]]; do echo "❌ Base URL 不能为空" read -erp "请输入 Base URL: " base_url done base_url="${base_url%/}" # 3. API Key read -rsp "请输入 API Key (输入不显示): " api_key echo while [[ -z "$api_key" ]]; do echo "❌ API Key 不能为空" read -rsp "请输入 API Key: " api_key echo done # 4. 不再探测/判断 API 类型；协议由用户自行选择与维护 # 5. 获取模型列表 echo "🔍 正在获取可用模型列表..." models_json=$(curl -s -m 10 \ -H "Authorization: Bearer $api_key" \ "${base_url}/models") if [[ -n "$models_json" ]]; then available_models=$(echo "$models_json" | grep -oP '"id":\s*"\K[^"]+' | sort) if [[ -n "$available_models" ]]; then model_count=$(echo "$available_models" | wc -l) echo "✅ 发现 $model_count 个可用模型：" echo "--------------------------------" # 全部显示，带序号 i=1 model_list=() while read -r model; do echo "[$i] $model" model_list+=("$model") ((i++)) done <<< "$available_models" echo "--------------------------------" fi fi # 5. 选择默认模型 echo read -erp "请输入默认 Model ID (或序号，留空则使用第一个): " input_model if [[ -z "$input_model" && -n "$available_models" ]]; then default_model=$(echo "$available_models" | head -1) echo "🎯 使用第一个模型: $default_model" elif [[ "$input_model" =~ ^[0-9]+$ ]] && [ "${#model_list[@]}" -gt 0 ] && [ "$input_model" -ge 1 ] && [ "$input_model" -le "${#model_list[@]}" ]; then default_model="${model_list[$((input_model-1))]}" echo "🎯 已选择模型: $default_model" else default_model="$input_model" fi # 6. 确认信息 echo echo "====== 确认信息 ======" echo "Provider : $provider_name" echo "Base URL : $base_url" echo "API Key : ${api_key:0:8}****" echo "默认模型 : $default_model" echo "模型总数 : $model_count" echo "======================" read -erp "是否同时添加其他所有可用模型？(y/N): " confirm install jq if [[ "$confirm" =~ ^[Yy]$ ]]; then add-all-models-from-provider "$provider_name" "$base_url" "$api_key" add_result=$? finish_msg="✅ 完成！所有 $model_count 个模型已加载" else add-default-model-only-to-provider "$provider_name" "$base_url" "$api_key" "$default_model" add_result=$? finish_msg="✅ 完成！已保留 provider，并仅加载默认模型：$default_model" fi if [[ $add_result -eq 0 ]]; then echo echo "🔄 设置默认模型并重启网关..." openclaw models set "$provider_name/$default_model" openclaw_sync_sessions_model "$provider_name/$default_model" start_gateway echo "$finish_msg" echo "✅ 当前 API 协议类型: $DETECTED_API" fi break_end } openclaw_api_manage_list() { local config_file="${HOME}/.openclaw/openclaw.json" send_stats "OpenClaw API列表" while IFS=$'\t' read -r rec_type idx name base_url model_count api_type latency_txt latency_level; do case "$rec_type" in MSG) echo "$idx" ;; ROW) local latency_color="$gl_bai" case "$latency_level" in low) latency_color="$gl_lv" ;; medium) latency_color="$gl_huang" ;; high|unavailable) latency_color="$gl_hong" ;; unchecked) latency_color="$gl_bai" ;; esac printf '%b\n' "[$idx] ${name} | API: ${base_url} | 协议: ${api_type} | 模型数量: ${gl_huang}${model_count}${gl_bai} | 延迟/状态: ${latency_color}${latency_txt}${gl_bai}" ;; esac done < <(python3 - "$config_file" <<-'PY' import json import sys import time import urllib.request path = sys.argv[1] SUPPORTED_APIS = {'openai-completions', 'openai-responses'} def ping_models(base_url, api_key): req = urllib.request.Request( base_url.rstrip('/') + '/models', headers={ 'Authorization': f'Bearer {api_key}', 'User-Agent': 'OpenClaw-API-Manage/1.0', }, ) start = time.perf_counter() with urllib.request.urlopen(req, timeout=4) as resp: resp.read(2048) return int((time.perf_counter() - start) * 1000) def classify_latency(latency): if latency == '不可用': return '不可用', 'unavailable' if latency == '未检测': return '未检测', 'unchecked' if isinstance(latency, int): if latency <= 800: level = 'low' elif latency <= 2000: level = 'medium' else: level = 'high' return f'{latency}ms', level return str(latency), 'unchecked' try: with open(path, 'r', encoding='utf-8') as f: obj = json.load(f) except FileNotFoundError: print('MSG\tℹ️ 未找到 openclaw.json，请先完成安装/初始化。') raise SystemExit(0) except Exception as e: print(f'MSG\t❌ 读取配置失败: {type(e).__name__}: {e}') raise SystemExit(0) providers = ((obj.get('models') or {}).get('providers') or {}) if not isinstance(providers, dict) or not providers: print('MSG\tℹ️ 当前未配置任何 API provider。') raise SystemExit(0) print('MSG\t--- 已配置 API 列表 ---') for idx, name in enumerate(sorted(providers.keys()), start=1): provider = providers.get(name) if not isinstance(provider, dict): base_url = '-' model_count = 0 latency_raw = '不可用' else: base_url = provider.get('baseUrl') or provider.get('url') or provider.get('endpoint') or '-' models = provider.get('models') if isinstance(provider.get('models'), list) else [] model_count = sum(1 for m in models if isinstance(m, dict) and m.get('id')) api = provider.get('api', '') api_key = provider.get('apiKey') latency_raw = '未检测' if api in SUPPORTED_APIS: if isinstance(base_url, str) and base_url != '-' and isinstance(api_key, str) and api_key: try: latency_raw = ping_models(base_url, api_key) except Exception: latency_raw = '不可用' else: latency_raw = '不可用' latency_text, latency_level = classify_latency(latency_raw) api_label = api if api in SUPPORTED_APIS else '-' print( 'ROW\t' + '\t'.join([ str(idx), str(name), str(base_url), str(model_count), str(api_label), str(latency_text), str(latency_level), ]) ) PY ) } sync-openclaw-provider-interactive() { local config_file="${HOME}/.openclaw/openclaw.json" send_stats "OpenClaw API按Provider同步" if [ ! -f "$config_file" ]; then echo "❌ 未找到配置文件: $config_file" break_end return 1 fi read -erp "请输入要同步的 API 名称(provider)，直接回车同步全部: " provider_name if [ -z "$provider_name" ]; then if sync_openclaw_api_models; then start_gateway else echo "❌ API 模型同步失败，已中止重启网关。请检查 provider /models 返回后重试。" return 1 fi break_end return 0 fi install jq curl >/dev/null 2>&1 python3 - "$config_file" "$provider_name" <<'PY2' import copy import json import sys import time import urllib.request path = sys.argv[1] target = sys.argv[2] SUPPORTED_APIS = {'openai-completions', 'openai-responses'} with open(path, 'r', encoding='utf-8') as f: obj = json.load(f) work = copy.deepcopy(obj) models_cfg = work.setdefault('models', {}) providers = models_cfg.get('providers', {}) if not isinstance(providers, dict) or not providers: print('❌ 未检测到 API providers，无法同步') raise SystemExit(2) provider = providers.get(target) if not isinstance(provider, dict): print(f'❌ 未找到 provider: {target}') raise SystemExit(2) agents = work.setdefault('agents', {}) defaults = agents.setdefault('defaults', {}) defaults_models_raw = defaults.get('models') if isinstance(defaults_models_raw, dict): defaults_models = defaults_models_raw elif isinstance(defaults_models_raw, list): defaults_models = {str(x): {} for x in defaults_models_raw if isinstance(x, str)} else: defaults_models = {} defaults['models'] = defaults_models def model_ref(provider_name, model_id): return f"{provider_name}/{model_id}" def get_primary_ref(defaults_obj): model_obj = defaults_obj.get('model') if isinstance(model_obj, str): return model_obj if isinstance(model_obj, dict): primary = model_obj.get('primary') if isinstance(primary, str): return primary return None def set_primary_ref(defaults_obj, new_ref): model_obj = defaults_obj.get('model') if isinstance(model_obj, str): defaults_obj['model'] = new_ref elif isinstance(model_obj, dict): model_obj['primary'] = new_ref else: defaults_obj['model'] = {'primary': new_ref} def fetch_remote_models_with_retry(base_url, api_key, retries=3): last_error = None for attempt in range(1, retries + 1): req = urllib.request.Request( base_url.rstrip('/') + '/models', headers={ 'Authorization': f'Bearer {api_key}', 'User-Agent': 'Mozilla/5.0', }, ) try: with urllib.request.urlopen(req, timeout=12) as resp: payload = resp.read().decode('utf-8', 'ignore') return json.loads(payload), None, attempt except Exception as e: last_error = e if attempt < retries: time.sleep(1) return None, last_error, retries api = provider.get('api', '') base_url = provider.get('baseUrl') api_key = provider.get('apiKey') model_list = provider.get('models', []) if not base_url or not api_key or not isinstance(model_list, list) or not model_list: print(f'❌ provider {target} 缺少 baseUrl/apiKey/models，无法执行同步') raise SystemExit(3) if api not in SUPPORTED_APIS: print(f'ℹ️ provider {target} 当前 api={api}，但脚本已不再探测/纠正协议；请手动设置为 openai-completions 或 openai-responses') protocol_msg = None data, err, attempts = fetch_remote_models_with_retry(base_url, api_key, retries=3) if err is not None: print(f'❌ {target}: /models 探测失败，已重试 {attempts} 次 ({type(err).__name__}: {err})') raise SystemExit(4) if not (isinstance(data, dict) and isinstance(data.get('data'), list)): print(f'❌ {target}: /models 返回结构不可识别') raise SystemExit(4) remote_ids = [] for item in data['data']: if isinstance(item, dict) and item.get('id'): remote_ids.append(str(item['id'])) remote_set = set(remote_ids) if not remote_set: print(f'❌ {target}: 上游 /models 为空，已中止同步') raise SystemExit(5) local_models = [m for m in model_list if isinstance(m, dict) and m.get('id')] local_ids = [str(m['id']) for m in local_models] local_set = set(local_ids) template = copy.deepcopy(local_models[0]) if local_models else None if template is None: print(f'❌ {target}: 本地 models 无有效模板模型，无法补全新增模型') raise SystemExit(3) removed_ids = [mid for mid in local_ids if mid not in remote_set] added_ids = [mid for mid in remote_ids if mid not in local_set] kept_models = [copy.deepcopy(m) for m in local_models if str(m['id']) in remote_set] new_models = kept_models[:] for mid in added_ids: nm = copy.deepcopy(template) nm['id'] = mid if isinstance(nm.get('name'), str): nm['name'] = f'{target} / {mid}' new_models.append(nm) if not new_models: print(f'❌ {target}: 同步后无可用模型，已中止写入') raise SystemExit(5) expected_refs = {model_ref(target, str(m['id'])) for m in new_models if isinstance(m, dict) and m.get('id')} local_refs = {model_ref(target, mid) for mid in local_ids} removed_refs = local_refs - expected_refs first_ref = model_ref(target, str(new_models[0]['id'])) changed = False primary_ref = get_primary_ref(defaults) if isinstance(primary_ref, str) and primary_ref in removed_refs: set_primary_ref(defaults, first_ref) changed = True print(f'🔁 默认模型已兜底替换: {primary_ref} -> {first_ref}') for fk in ('modelFallback', 'imageModelFallback'): val = defaults.get(fk) if isinstance(val, str) and val in removed_refs: defaults[fk] = first_ref changed = True print(f'🔁 {fk} 已兜底替换: {val} -> {first_ref}') stale_refs = [r for r in list(defaults_models.keys()) if r.startswith(target + '/') and r not in expected_refs] for r in stale_refs: defaults_models.pop(r, None) changed = True for r in sorted(expected_refs): if r not in defaults_models: defaults_models[r] = {} changed = True if removed_ids or added_ids or len(local_models) != len(new_models): provider['models'] = new_models changed = True if changed: with open(path, 'w', encoding='utf-8') as f: json.dump(work, f, ensure_ascii=False, indent=2) f.write('\n') print(f'✅ {target}: 新增 {len(added_ids)} 个，删除 {len(removed_ids)} 个，当前 {len(new_models)} 个') if added_ids: print(f'➕ 新增模型({len(added_ids)}):') for mid in added_ids: print(f' + {mid}') if removed_ids: print(f'➖ 删除模型({len(removed_ids)}):') for mid in removed_ids: print(f' - {mid}') if changed: print('✅ 指定 provider 模型一致性同步完成并已写入配置') else: print('ℹ️ 无需同步：该 provider 配置已与上游 /models 保持一致') PY2 local rc=$? case "$rc" in 0) echo "✅ 同步执行完成" start_gateway ;; 2) echo "❌ 同步失败：provider 不存在或未配置" ;; 3) echo "❌ 同步失败：provider 配置不完整或类型不支持" ;; 4) echo "❌ 同步失败：上游 /models 请求失败" ;; 5) echo "❌ 同步失败：上游模型为空或同步后无可用模型" ;; *) echo "❌ 同步失败：请检查配置文件结构或日志输出" ;; esac break_end } openclaw_detect_api_protocol_by_provider() { # 协议探测逻辑已移除：脚本不再自动探测/判定 API 类型。 # 保留函数以兼容菜单调用，但不做任何改写。 echo "ℹ️ 已关闭协议探测：请手动在 ${HOME}/.openclaw/openclaw.json 中设置 provider.api 为 openai-completions 或 openai-responses" return 0 } fix-openclaw-provider-protocol-interactive() { local config_file="${HOME}/.openclaw/openclaw.json" send_stats "OpenClaw API协议切换" if [ ! -f "$config_file" ]; then echo "❌ 未找到配置文件: $config_file" break_end return 1 fi read -erp "请输入要切换协议的 API 名称(provider): " provider_name if [ -z "$provider_name" ]; then echo "❌ provider 名称不能为空" break_end return 1 fi echo "请选择要设置的 API 类型：" echo "1. openai-completions" echo "2. openai-responses" read -erp "请输入你的选择 (1/2): " proto_choice local new_api="" case "$proto_choice" in 1) new_api="openai-completions" ;; 2) new_api="openai-responses" ;; *) echo "❌ 无效选择" break_end return 1 ;; esac install python3 >/dev/null 2>&1 python3 - "$config_file" "$provider_name" "$new_api" <<'PY' import copy import json import sys path = sys.argv[1] name = sys.argv[2] new_api = sys.argv[3] SUPPORTED_APIS = {'openai-completions', 'openai-responses'} if new_api not in SUPPORTED_APIS: print('❌ 非法协议值') raise SystemExit(3) with open(path, 'r', encoding='utf-8') as f: obj = json.load(f) work = copy.deepcopy(obj) providers = ((work.get('models') or {}).get('providers') or {}) if not isinstance(providers, dict) or name not in providers or not isinstance(providers.get(name), dict): print(f'❌ 未找到 provider: {name}') raise SystemExit(2) providers[name]['api'] = new_api with open(path, 'w', encoding='utf-8') as f: json.dump(work, f, ensure_ascii=False, indent=2) f.write('\n') print(f'✅ 已更新 provider {name} 协议为: {new_api}') PY local rc=$? case "$rc" in 0) start_gateway ;; 2) echo "❌ 切换失败：provider 不存在或未配置" ;; 3) echo "❌ 切换失败：协议值非法" ;; *) echo "❌ 切换失败：请检查配置文件结构或日志输出" ;; esac break_end } delete-openclaw-provider-interactive() { local config_file config_file=$(openclaw_get_config_file) send_stats "OpenClaw API删除入口" if [ ! -f "$config_file" ]; then echo "❌ 未找到配置文件: $config_file" break_end return 1 fi read -erp "请输入要删除的 API 名称(provider): " provider_name if [ -z "$provider_name" ]; then send_stats "OpenClaw API删除取消" echo "❌ provider 名称不能为空" break_end return 1 fi python3 - "$config_file" "$provider_name" <<'PY' import copy import json import sys path = sys.argv[1] name = sys.argv[2] with open(path, 'r', encoding='utf-8') as f: obj = json.load(f) work = copy.deepcopy(obj) models_cfg = work.setdefault('models', {}) providers = models_cfg.get('providers', {}) if not isinstance(providers, dict) or name not in providers: print(f'❌ 未找到 provider: {name}') raise SystemExit(2) agents = work.setdefault('agents', {}) defaults = agents.setdefault('defaults', {}) defaults_models_raw = defaults.get('models') if isinstance(defaults_models_raw, dict): defaults_models = defaults_models_raw elif isinstance(defaults_models_raw, list): defaults_models = {str(x): {} for x in defaults_models_raw if isinstance(x, str)} else: defaults_models = {} defaults['models'] = defaults_models def model_ref(provider_name, model_id): return f"{provider_name}/{model_id}" def ref_provider(ref): if not isinstance(ref, str) or '/' not in ref: return None return ref.split('/', 1)[0] def get_primary_ref(defaults_obj): model_obj = defaults_obj.get('model') if isinstance(model_obj, str): return model_obj if isinstance(model_obj, dict): primary = model_obj.get('primary') if isinstance(primary, str): return primary return None def set_primary_ref(defaults_obj, new_ref): model_obj = defaults_obj.get('model') if isinstance(model_obj, str): defaults_obj['model'] = new_ref elif isinstance(model_obj, dict): model_obj['primary'] = new_ref else: defaults_obj['model'] = {'primary': new_ref} def collect_available_refs(exclude_provider=None): refs = [] if not isinstance(providers, dict): return refs for pname, p in providers.items(): if exclude_provider and pname == exclude_provider: continue if not isinstance(p, dict): continue for m in p.get('models', []) or []: if isinstance(m, dict) and m.get('id'): refs.append(model_ref(pname, str(m['id']))) return refs replacement_candidates = collect_available_refs(exclude_provider=name) replacement = replacement_candidates[0] if replacement_candidates else None primary_ref = get_primary_ref(defaults) if ref_provider(primary_ref) == name: if not replacement: print('❌ 删除中止：默认主模型指向该 provider，且无可用替代模型') raise SystemExit(3) set_primary_ref(defaults, replacement) print(f'🔁 默认主模型切换: {primary_ref} -> {replacement}') for fk in ('modelFallback', 'imageModelFallback'): val = defaults.get(fk) if ref_provider(val) == name: if not replacement: print(f'❌ 删除中止：{fk} 指向该 provider，且无可用替代模型') raise SystemExit(3) defaults[fk] = replacement print(f'🔁 {fk} 切换: {val} -> {replacement}') removed_refs = [r for r in list(defaults_models.keys()) if r.startswith(name + '/')] for r in removed_refs: defaults_models.pop(r, None) providers.pop(name, None) with open(path, 'w', encoding='utf-8') as f: json.dump(work, f, ensure_ascii=False, indent=2) f.write('\n') print(f'🗑️ 已删除 provider: {name}') print(f'🧹 已清理 defaults.models 中 {len(removed_refs)} 个关联模型引用') PY local rc=$? case "$rc" in 0) send_stats "OpenClaw API删除确认" echo "✅ 删除完成" start_gateway ;; 2) echo "❌ 删除失败：provider 不存在" ;; 3) send_stats "OpenClaw API删除取消" echo "❌ 删除失败：无可用替代模型，已保持原配置" ;; *) echo "❌ 删除失败：请检查配置文件结构或日志输出" ;; esac break_end } openclaw_api_providers_showcase() { send_stats "OpenClaw API厂商推荐" clear echo "" echo -e "${gl_kjlan}╔════════════════════════════════════════════════════════════╗${gl_bai}" echo -e "${gl_kjlan}║${gl_bai} ${gl_huang}🌟 API 厂商推荐列表${gl_bai} ${gl_kjlan}║${gl_bai}" echo -e "${gl_kjlan}║${gl_bai} ${gl_zi}部分入口含 AFF${gl_bai} ${gl_kjlan}║${gl_bai}" echo -e "${gl_kjlan}╚════════════════════════════════════════════════════════════╝${gl_bai}" echo "" echo -e " ${gl_lv}● DeepSeek${gl_bai}" echo -e " ${gl_kjlan}https://api-docs.deepseek.com/${gl_bai}" echo "" echo -e " ${gl_lv}● OpenRouter${gl_bai}" echo -e " ${gl_kjlan}https://openrouter.ai/${gl_bai}" echo "" echo -e " ${gl_lv}● Kimi${gl_bai}" echo -e " ${gl_kjlan}https://platform.moonshot.cn/docs/guide/start-using-kimi-api${gl_bai}" echo "" echo -e " ${gl_lv}● 超算互联网${gl_bai}" echo -e " ${gl_kjlan}https://www.scnet.cn/${gl_bai}" echo "" echo -e " ${gl_huang}● 优云智算${gl_bai} ${gl_zi}[AFF]${gl_bai}" echo -e " ${gl_kjlan}https://passport.compshare.cn/register?referral_code=4mscFZXfutfFi8swMVsPuf${gl_bai}" echo "" echo -e " ${gl_huang}● 硅基流动${gl_bai} ${gl_zi}[AFF]${gl_bai}" echo -e " ${gl_kjlan}https://cloud.siliconflow.cn/i/irWVdPic${gl_bai}" echo "" echo -e " ${gl_huang}● 智谱 GLM${gl_bai} ${gl_zi}[AFF]${gl_bai}" echo -e " ${gl_kjlan}https://www.bigmodel.cn/glm-coding?ic=HYOTDOAJMR${gl_bai}" echo "" echo -e " ${gl_huang}● PackyAPI${gl_bai} ${gl_zi}[AFF]${gl_bai}" echo -e " ${gl_kjlan}https://www.packyapi.com/register?aff=wHri${gl_bai}" echo "" echo -e " ${gl_huang}● 云雾 API${gl_bai} ${gl_zi}[AFF]${gl_bai}" echo -e " ${gl_kjlan}https://yunwu.ai/register?aff=ZuyK${gl_bai}" echo "" echo -e " ${gl_huang}● 柏拉图AI${gl_bai} ${gl_zi}[AFF]${gl_bai}" echo -e " ${gl_kjlan}https://api.bltcy.ai/register?aff=TBzb114019${gl_bai}" echo "" echo -e " ${gl_lv}● MiniMax${gl_bai}" echo -e " ${gl_kjlan}https://www.minimaxi.com/${gl_bai}" echo "" echo -e " ${gl_lv}● NVIDIA${gl_bai}" echo -e " ${gl_kjlan}https://build.nvidia.com/settings/api-keys${gl_bai}" echo "" echo -e " ${gl_lv}● Ollama${gl_bai}" echo -e " ${gl_kjlan}https://ollama.com/${gl_bai}" echo "" echo -e " ${gl_lv}● 白山云${gl_bai}" echo -e " ${gl_kjlan}https://ai.baishan.com/${gl_bai}" echo "" echo -e "${gl_kjlan}────────────────────────────────────────────────────────────${gl_bai}" echo -e " ${gl_zi}图例：${gl_lv}● 官方入口${gl_bai} ${gl_huang}● AFF 推荐入口${gl_bai}" echo "" echo -e "${gl_huang}提示：复制链接到浏览器打开即可访问${gl_bai}" echo "" read -erp "按回车键返回..." dummy } openclaw_api_manage_menu() { send_stats "OpenClaw API入口" while true; do clear echo "=======================================" echo "OpenClaw API 管理" echo "=======================================" openclaw_api_manage_list echo "---------------------------------------" echo "1. 添加API" echo "2. 同步API供应商模型列表" echo "3. 切换 API 类型（completions / responses）" echo "4. 删除API" echo "5. API 厂商推荐" echo "0. 退出" echo "---------------------------------------" read -erp "请输入你的选择: " api_choice case "$api_choice" in 1) add-openclaw-provider-interactive ;; 2) sync-openclaw-provider-interactive ;; 3) fix-openclaw-provider-protocol-interactive ;; 4) delete-openclaw-provider-interactive ;; 5) openclaw_api_providers_showcase ;; 0) return 0 ;; *) echo "无效的选择，请重试。" sleep 1 ;; esac done } install_gum() { if command -v gum >/dev/null 2>&1; then return 0 fi if command -v apt >/dev/null 2>&1; then mkdir -p /etc/apt/keyrings curl -fsSL https://repo.charm.sh/apt/gpg.key | gpg --dearmor -o /etc/apt/keyrings/charm.gpg echo "deb [signed-by=/etc/apt/keyrings/charm.gpg] https://repo.charm.sh/apt/ * *" | tee /etc/apt/sources.list.d/charm.list > /dev/null apt update && apt install -y gum elif command -v dnf >/dev/null 2>&1 || command -v yum >/dev/null 2>&1; then cat > /etc/yum.repos.d/charm.repo <<'REPO' [charm] name=Charm baseurl=https://repo.charm.sh/yum/ enabled=1 gpgcheck=1 gpgkey=https://repo.charm.sh/yum/gpg.key REPO rpm --import https://repo.charm.sh/yum/gpg.key if command -v dnf >/dev/null 2>&1; then dnf install -y gum else yum install -y gum fi elif command -v zypper >/dev/null 2>&1; then zypper --non-interactive refresh zypper --non-interactive install gum fi } change_model() { send_stats "换模型" local orange="#FF8C00" openclaw_probe_status_line() { local status_text="$1" local status_color_ok='' local status_color_fail='' local status_color_reset='' if [ "$status_text" = "可用" ]; then printf "%b最小检测结果：%s%b " "$status_color_ok" "$status_text" "$status_color_reset" else printf "%b最小检测结果：%s%b " "$status_color_fail" "$status_text" "$status_color_reset" fi } openclaw_model_probe() { local target_model="$1" local probe_timeout=25 local tmp_payload tmp_response probe_result probe_status reply_preview reply_trimmed local oc_config provider_name base_url api_key request_model local first_endpoint second_endpoint local first_exit first_http first_latency second_exit second_http second_latency local first_reply second_reply oc_config=$(openclaw_get_config_file) [ ! -f "$oc_config" ] && { OPENCLAW_PROBE_STATUS="ERROR" OPENCLAW_PROBE_MESSAGE="未找到 openclaw 配置文件" OPENCLAW_PROBE_LATENCY="-" OPENCLAW_PROBE_REPLY="-" return 1 } provider_name="${target_model%%/*}" request_model="${target_model#*/}" base_url=$(jq -r --arg provider "$provider_name" '.models.providers[$provider].baseUrl // empty' "$oc_config" 2>/dev/null) api_key=$(jq -r --arg provider "$provider_name" '.models.providers[$provider].apiKey // empty' "$oc_config" 2>/dev/null) if [ -z "$provider_name" ] || [ -z "$base_url" ] || [ -z "$api_key" ]; then OPENCLAW_PROBE_STATUS="ERROR" OPENCLAW_PROBE_MESSAGE="未读取到 provider/baseUrl/apiKey" OPENCLAW_PROBE_LATENCY="-" OPENCLAW_PROBE_REPLY="-" return 1 fi base_url="${base_url%/}" first_endpoint="/responses" second_endpoint="/chat/completions" openclaw_extract_probe_reply() { python3 - "$1" <<'PYTHON_EOF' import json import sys from pathlib import Path path = Path(sys.argv[1]) raw = path.read_text(encoding='utf-8', errors='replace').strip() reply = '' if raw: try: data = json.loads(raw) if isinstance(data, dict): choices = data.get('choices') or [] if choices and isinstance(choices[0], dict): message = choices[0].get('message') or {} if isinstance(message, dict): reply = message.get('content') or '' if not reply: output = data.get('output') or [] if isinstance(output, list): texts = [] for item in output: if not isinstance(item, dict): continue for content in item.get('content') or []: if not isinstance(content, dict): continue text = content.get('text') if isinstance(text, str) and text.strip(): texts.append(text.strip()) if texts: break if texts: reply = ' '.join(texts) if not reply: for key in ('error', 'message', 'detail'): value = data.get(key) if isinstance(value, str) and value.strip(): reply = value.strip() break if isinstance(value, dict): nested = value.get('message') if isinstance(nested, str) and nested.strip(): reply = nested.strip() break except Exception: reply = raw reply = ' '.join(str(reply).split()) print(reply) PYTHON_EOF } openclaw_run_probe() { local endpoint="$1" tmp_payload=$(mktemp) tmp_response=$(mktemp) if [ "$endpoint" = "/responses" ]; then printf '{"model":"%s","input":"hi","temperature":0,"max_output_tokens":16}' "$request_model" > "$tmp_payload" else printf '{"model":"%s","messages":[{"role":"user","content":"hi"}],"temperature":0,"max_tokens":16}' "$request_model" > "$tmp_payload" fi probe_result=$(python3 - "$base_url" "$api_key" "$tmp_payload" "$tmp_response" "$probe_timeout" "$endpoint" <<'PYTHON_EOF' import sys import time import urllib.error import urllib.request base_url, api_key, payload_path, response_path, timeout, endpoint = sys.argv[1:7] timeout = int(timeout) url = base_url + endpoint payload = open(payload_path, 'rb').read() req = urllib.request.Request( url, data=payload, headers={ 'Content-Type': 'application/json', 'Authorization': f'Bearer {api_key}', }, method='POST', ) start = time.time() body = b'' status = 0 exit_code = 0 try: with urllib.request.urlopen(req, timeout=timeout) as resp: status = getattr(resp, 'status', 200) body = resp.read() except urllib.error.HTTPError as e: status = getattr(e, 'code', 0) or 0 body = e.read() exit_code = 22 except Exception as e: body = str(e).encode('utf-8', errors='replace') exit_code = 1 elapsed = int((time.time() - start) * 1000) with open(response_path, 'wb') as f: f.write(body) print(f"{exit_code}|{status}|{elapsed}") PYTHON_EOF ) probe_status=$? reply_preview=$(openclaw_extract_probe_reply "$tmp_response") rm -f "$tmp_payload" "$tmp_response" return $probe_status } openclaw_run_probe "$first_endpoint" first_exit=${probe_result%%|*} first_http=${probe_result#*|} first_http=${first_http%%|*} first_latency=${probe_result##*|} first_reply="$reply_preview" reply_trimmed=$(printf '%s' "$first_reply" | cut -c1-120) [ -z "$reply_trimmed" ] && reply_trimmed="(空返回)" if [ "$first_exit" = "0" ] && [ "$first_http" -ge 200 ] && [ "$first_http" -lt 300 ]; then OPENCLAW_PROBE_STATUS="OK" OPENCLAW_PROBE_MESSAGE="${first_endpoint} -> HTTP ${first_http}" OPENCLAW_PROBE_LATENCY="${first_latency}ms" OPENCLAW_PROBE_REPLY="$reply_trimmed" return 0 fi openclaw_run_probe "$second_endpoint" second_exit=${probe_result%%|*} second_http=${probe_result#*|} second_http=${second_http%%|*} second_latency=${probe_result##*|} second_reply="$reply_preview" reply_trimmed=$(printf '%s' "$second_reply" | cut -c1-120) [ -z "$reply_trimmed" ] && reply_trimmed="(空返回)" if [ "$second_exit" = "0" ] && [ "$second_http" -ge 200 ] && [ "$second_http" -lt 300 ]; then OPENCLAW_PROBE_STATUS="OK" OPENCLAW_PROBE_MESSAGE="${first_endpoint} -> HTTP ${first_http:-0}，切换 ${second_endpoint} -> HTTP ${second_http}" OPENCLAW_PROBE_LATENCY="${second_latency}ms" OPENCLAW_PROBE_REPLY="$reply_trimmed" return 0 fi reply_trimmed=$(printf '%s' "$first_reply" | cut -c1-120) [ -z "$reply_trimmed" ] && reply_trimmed=$(printf '%s' "$second_reply" | cut -c1-120) [ -z "$reply_trimmed" ] && reply_trimmed="(空返回)" OPENCLAW_PROBE_STATUS="FAIL" OPENCLAW_PROBE_MESSAGE="${first_endpoint} -> HTTP ${first_http:-0} / exit ${first_exit:-1}；${second_endpoint} -> HTTP ${second_http:-0} / exit ${second_exit:-1}" OPENCLAW_PROBE_LATENCY="${first_latency:-?}ms -> ${second_latency:-?}ms" OPENCLAW_PROBE_REPLY="$reply_trimmed" return 1 } clear while true; do local models_raw models_list default_model model_count selected_model confirm_switch # 从配置文件读取模型键（不调用 openclaw models list） local oc_config oc_config=$(openclaw_get_config_file) models_raw=$(jq -r '.agents.defaults.models | if type == "object" then keys[] else .[] end' "$oc_config" 2>/dev/null | sed '/^\s*$/d') if [ -z "$models_raw" ]; then echo "获取模型列表失败：配置文件中未找到 agents.defaults.models。" break_end return 1 fi # 为每个模型加编号，便于快速定位（例如："(10) or-api/...:free"） models_list=$(echo "$models_raw" | awk '{print "(" NR ") " $0}') model_count=$(echo "$models_list" | sed '/^\s*$/d' | wc -l | tr -d ' ') # 从配置文件读取默认模型（更快）；失败再回退到 openclaw 命令 default_model=$(jq -r '.agents.defaults.model.primary // empty' "$oc_config" 2>/dev/null) [ -z "$default_model" ] && default_model="(unknown)" clear install_gum install gum # 若 gum 不存在，降级为原始手动输入流程 if ! command -v gum >/dev/null 2>&1 || ! gum --version >/dev/null 2>&1; then echo "--- 模型管理 ---" echo "当前可用模型:" jq -r '.agents.defaults.models | if type == "object" then keys[] else .[] end' "$oc_config" 2>/dev/null | sed '/^\s*$/d' echo "----------------" read -e -p "请输入要设置的模型名称 (例如 openrouter/openai/gpt-4o)（输入 0 退出）： " selected_model if [ "$selected_model" = "0" ]; then echo "操作已取消，正在退出..." break fi if [ -z "$selected_model" ]; then echo "错误：模型名称不能为空。请重试。" echo "" continue fi echo "正在切换模型为: $selected_model ..." if ! openclaw models set "$selected_model"; then echo "切换失败：openclaw models set 返回错误。" break_end return 1 fi openclaw_sync_sessions_model "$selected_model" start_gateway break_end return 0 else if ! command -v gum >/dev/null 2>&1 || ! gum --version >/dev/null 2>&1; then echo "gum 不可用，返回旧版输入模式。" sleep 1 continue fi gum style --foreground "$orange" --bold "模型管理" gum style --foreground "$orange" "可用模型（Auth=yes）：${model_count}" gum style --foreground "$orange" "当前默认：${default_model}" echo "" gum style --faint "↑↓ 选择 / Enter 测试 / Esc 退出" echo "" selected_model=$(echo "$models_list" | gum filter --placeholder "搜索模型（如 cli-api/gpt-5.2）" --prompt "选择模型 > " --indicator "➜ " --prompt.foreground "$orange" --indicator.foreground "$orange" --cursor-text.foreground "$orange" --match.foreground "$orange" --header "" --height 35) if [ -z "$selected_model" ] || echo "$selected_model" | head -n 1 | grep -iqE '^(error|usage|gum:)'; then echo "操作已取消，正在退出..." break fi fi selected_model=$(echo "$selected_model" | sed -E 's/^\([0-9]+\)[[:space:]]+//') echo "" echo "正在检测模型: $selected_model" if openclaw_model_probe "$selected_model"; then openclaw_probe_status_line "可用" else openclaw_probe_status_line "不可用" fi echo "状态：$OPENCLAW_PROBE_MESSAGE" echo "延迟：$OPENCLAW_PROBE_LATENCY" echo "摘要：$OPENCLAW_PROBE_REPLY" echo "" printf "是否切换到该模型？[y/N，Esc 返回列表]: " IFS= read -rsn1 confirm_switch echo "" if [ "$confirm_switch" = $'' ]; then confirm_switch="no" else case "$confirm_switch" in [yY]) IFS= read -rsn1 -t 5 _enter_key confirm_switch="yes" ;; [nN]|"") confirm_switch="no" ;; *) confirm_switch="no" ;; esac fi if [ "$confirm_switch" != "yes" ]; then echo "已返回模型选择列表。" sleep 1 continue fi echo "正在切换模型为: $selected_model ..." if ! openclaw models set "$selected_model"; then echo "切换失败：openclaw models set 返回错误。" break_end return 1 fi openclaw_sync_sessions_model "$selected_model" start_gateway break_end done } openclaw_get_config_file() { local user_config="${HOME}/.openclaw/openclaw.json" local root_config="/root/.openclaw/openclaw.json" if [ -f "$user_config" ]; then echo "$user_config" elif [ "$HOME" = "/root" ] && [ -f "$root_config" ]; then echo "$root_config" else echo "$user_config" fi } openclaw_get_agents_dir() { local user_agents="${HOME}/.openclaw/agents" local root_agents="/root/.openclaw/agents" if [ -d "$user_agents" ]; then echo "$user_agents" elif [ "$HOME" = "/root" ] && [ -d "$root_agents" ]; then echo "$root_agents" else echo "$user_agents" fi } openclaw_sync_sessions_model() { local model_ref="$1" [ -z "$model_ref" ] && return 1 local agents_dir agents_dir=$(openclaw_get_agents_dir) [ ! -d "$agents_dir" ] && return 0 local provider="${model_ref%%/*}" local model="${model_ref#*/}" [ "$provider" = "$model_ref" ] && { provider=""; model="$model_ref"; } local count=0 local agent_dir sessions_file backup_file for agent_dir in "$agents_dir"/*/; do [ ! -d "$agent_dir" ] && continue sessions_file="$agent_dir/sessions/sessions.json" [ ! -f "$sessions_file" ] && continue backup_file="${sessions_file}.bak" cp "$sessions_file" "$backup_file" 2>/dev/null || continue if command -v jq >/dev/null 2>&1; then local tmp_json tmp_json=$(mktemp) if [ -n "$provider" ]; then jq --arg model "$model" --arg provider "$provider" \ 'to_entries | map(.value.modelOverride = $model | .value.providerOverride = $provider) | from_entries' \ "$sessions_file" > "$tmp_json" 2>/dev/null && \ mv "$tmp_json" "$sessions_file" && \ count=$((count + 1)) else jq --arg model "$model" \ 'to_entries | map(.value.modelOverride = $model | del(.value.providerOverride)) | from_entries' \ "$sessions_file" > "$tmp_json" 2>/dev/null && \ mv "$tmp_json" "$sessions_file" && \ count=$((count + 1)) fi fi done [ "$count" -gt 0 ] && echo "✅ 已同步 $count 个 agent 的会话模型为 $model_ref" return 0 } resolve_openclaw_plugin_id() { local raw_input="$1" local plugin_id="$raw_input" plugin_id="${plugin_id#@openclaw/}" if [[ "$plugin_id" == @*/* ]]; then plugin_id="${plugin_id##*/}" fi plugin_id="${plugin_id%%@*}" echo "$plugin_id" } sync_openclaw_plugin_allowlist() { local plugin_id="$1" [ -z "$plugin_id" ] && return 1 local config_file config_file=$(openclaw_get_config_file) mkdir -p "$(dirname "$config_file")" if [ ! -s "$config_file" ]; then echo '{}' > "$config_file" fi if command -v jq >/dev/null 2>&1; then local tmp_json tmp_json=$(mktemp) if jq --arg pid "$plugin_id" ' .plugins = (if (.plugins | type) == "object" then .plugins else {} end) | .plugins.allow = (if (.plugins.allow | type) == "array" then .plugins.allow else [] end) | if (.plugins.allow | index($pid)) == null then .plugins.allow += [$pid] else . end ' "$config_file" > "$tmp_json" 2>/dev/null && mv "$tmp_json" "$config_file"; then echo "✅ 已同步 plugins.allow 白名单: $plugin_id" return 0 fi rm -f "$tmp_json" fi if command -v python3 >/dev/null 2>&1; then if python3 - "$config_file" "$plugin_id" <<'PYTHON_EOF' import json import sys from pathlib import Path config_file = Path(sys.argv[1]) plugin_id = sys.argv[2] try: data = json.loads(config_file.read_text(encoding='utf-8')) if config_file.exists() else {} if not isinstance(data, dict): data = {} except Exception: data = {} plugins = data.get('plugins') if not isinstance(plugins, dict): plugins = {} a = plugins.get('allow') if not isinstance(a, list): a = [] if plugin_id not in a: a.append(plugin_id) plugins['allow'] = a data['plugins'] = plugins config_file.write_text(json.dumps(data, ensure_ascii=False, indent=2) + "\n", encoding='utf-8') PYTHON_EOF then echo "✅ 已同步 plugins.allow 白名单: $plugin_id" return 0 fi fi echo "⚠️ 已安装插件，但同步 plugins.allow 失败，请手动检查: $config_file" return 1 } sync_openclaw_plugin_denylist() { local plugin_id="$1" [ -z "$plugin_id" ] && return 1 local config_file config_file=$(openclaw_get_config_file) mkdir -p "$(dirname "$config_file")" if [ ! -s "$config_file" ]; then echo '{}' > "$config_file" fi if command -v jq >/dev/null 2>&1; then local tmp_json tmp_json=$(mktemp) if jq --arg pid "$plugin_id" ' .plugins = (if (.plugins | type) == "object" then .plugins else {} end) | .plugins.allow = (if (.plugins.allow | type) == "array" then .plugins.allow else [] end) | .plugins.allow = (.plugins.allow | map(select(. != $pid))) ' "$config_file" > "$tmp_json" 2>/dev/null && mv "$tmp_json" "$config_file"; then echo "✅ 已从 plugins.allow 移除: $plugin_id" return 0 fi rm -f "$tmp_json" fi if command -v python3 >/dev/null 2>&1; then if python3 - "$config_file" "$plugin_id" <<'PYTHON_EOF' import json import sys from pathlib import Path config_file = Path(sys.argv[1]) plugin_id = sys.argv[2] try: data = json.loads(config_file.read_text(encoding='utf-8')) if config_file.exists() else {} if not isinstance(data, dict): data = {} except Exception: data = {} plugins = data.get('plugins') if not isinstance(plugins, dict): plugins = {} a = plugins.get('allow') if not isinstance(a, list): a = [] a = [x for x in a if x != plugin_id] plugins['allow'] = a data['plugins'] = plugins config_file.write_text(json.dumps(data, ensure_ascii=False, indent=2) + "\n", encoding='utf-8') PYTHON_EOF then echo "✅ 已从 plugins.allow 移除: $plugin_id" return 0 fi fi echo "⚠️ plugins.allow 移除失败，请手动检查: $config_file" return 1 } install_plugin() { send_stats "插件管理" while true; do clear echo "========================================" echo " 插件管理 (安装/删除) " echo "========================================" echo "当前插件列表:" openclaw plugins list echo "--------------------------------------------------------" echo "推荐的常用插件 ID (直接复制括号内的 ID 即可):" echo "--------------------------------------------------------" echo "📱 通讯渠道:" echo " - [feishu] # 飞书/Lark 集成" echo " - [telegram] # Telegram 机器人" echo " - [slack] # Slack 企业通讯" echo " - [msteams] # Microsoft Teams" echo " - [discord] # Discord 社区管理" echo " - [whatsapp] # WhatsApp 自动化" echo "" echo "🧠 记忆与 AI:" echo " - [memory-core] # 基础记忆 (文件检索)" echo " - [memory-lancedb] # 增强记忆 (向量数据库)" echo " - [copilot-proxy] # Copilot 接口转发" echo "" echo "⚙️ 功能扩展:" echo " - [lobster] # 审批流 (带人工确认)" echo " - [voice-call] # 语音通话能力" echo " - [nostr] # 加密隐私聊天" echo "--------------------------------------------------------" echo "1) 安装/启用插件" echo "2) 删除/禁用插件" echo "0) 返回" read -e -p "请选择操作：" plugin_action [ "$plugin_action" = "0" ] && break [ -z "$plugin_action" ] && continue read -e -p "请输入插件 ID（空格分隔，输入 0 退出）： " raw_input [ "$raw_input" = "0" ] && break [ -z "$raw_input" ] && continue local success_list="" local failed_list="" local skipped_list="" local changed=false local token for token in $raw_input; do local plugin_id local plugin_full plugin_id=$(resolve_openclaw_plugin_id "$token") plugin_full="$token" [ -z "$plugin_id" ] && continue if [ "$plugin_action" = "1" ]; then echo "🔍 正在检查插件状态: $plugin_id" local plugin_list plugin_list=$(openclaw plugins list 2>/dev/null) if echo "$plugin_list" | grep -qw "$plugin_id" && echo "$plugin_list" | grep "$plugin_id" | grep -q "disabled"; then echo "💡 插件 [$plugin_id] 已预装，正在激活..." if openclaw plugins enable "$plugin_id"; then sync_openclaw_plugin_allowlist "$plugin_id" success_list="$success_list $plugin_id" changed=true else failed_list="$failed_list $plugin_id" fi continue fi if [ -d "/usr/lib/node_modules/openclaw/extensions/$plugin_id" ]; then echo "💡 发现系统内置目录存在该插件，尝试直接启用..." if openclaw plugins enable "$plugin_id"; then sync_openclaw_plugin_allowlist "$plugin_id" success_list="$success_list $plugin_id" changed=true else failed_list="$failed_list $plugin_id" fi continue fi echo "📥 本地未发现，尝试下载安装: $plugin_full" rm -rf "${HOME}/.openclaw/extensions/$plugin_id" [ "$HOME" != "/root" ] && rm -rf "/root/.openclaw/extensions/$plugin_id" if openclaw plugins install "$plugin_full"; then echo "✅ 下载成功，正在启用..." if openclaw plugins enable "$plugin_id"; then sync_openclaw_plugin_allowlist "$plugin_id" success_list="$success_list $plugin_id" changed=true else failed_list="$failed_list $plugin_id" fi else echo "❌ 安装失败：$plugin_full" failed_list="$failed_list $plugin_id" fi else echo "🗑️ 正在删除/禁用插件: $plugin_id" openclaw plugins disable "$plugin_id" >/dev/null 2>&1 if openclaw plugins uninstall "$plugin_id"; then echo "✅ 已卸载: $plugin_id" else echo "⚠️ 卸载失败，可能为预装插件，仅禁用: $plugin_id" fi sync_openclaw_plugin_denylist "$plugin_id" >/dev/null 2>&1 success_list="$success_list $plugin_id" changed=true fi done echo "" echo "====== 操作汇总 ======" echo "✅ 成功:$success_list" [ -n "$failed_list" ] && echo "❌ 失败:$failed_list" [ -n "$skipped_list" ] && echo "⏭️ 跳过:$skipped_list" if [ "$changed" = true ]; then echo "🔄 正在重启 OpenClaw 服务以加载变更..." start_gateway fi break_end done } install_skill() { send_stats "技能管理" while true; do clear echo "========================================" echo " 技能管理 (安装/删除) " echo "========================================" echo "当前已安装技能:" openclaw skills list echo "----------------------------------------" # 输出推荐的实用技能列表 echo "推荐的实用技能（可直接复制名称输入）：" echo "github # 管理 GitHub Issues/PR/CI (gh CLI)" echo "notion # 操作 Notion 页面、数据库和块" echo "apple-notes # macOS 原生笔记管理 (创建/编辑/搜索)" echo "apple-reminders # macOS 提醒事项管理 (待办清单)" echo "1password # 自动化读取和注入 1Password 密钥" echo "gog # Google Workspace (Gmail/云盘/文档) 全能助手" echo "things-mac # 深度整合 Things 3 任务管理" echo "bluebubbles # 通过 BlueBubbles 完美收发 iMessage" echo "himalaya # 终端邮件管理 (IMAP/SMTP 强力工具)" echo "summarize # 网页/播客/YouTube 视频内容一键总结" echo "openhue # 控制 Philips Hue 智能灯光场景" echo "video-frames # 视频抽帧与短片剪辑 (ffmpeg 驱动)" echo "openai-whisper # 本地音频转文字 (离线隐私保护)" echo "coding-agent # 自动运行 Claude Code/Codex 等编程助手" echo "----------------------------------------" echo "1) 安装技能" echo "2) 删除技能" echo "0) 返回" read -e -p "请选择操作：" skill_action [ "$skill_action" = "0" ] && break [ -z "$skill_action" ] && continue read -e -p "请输入技能名称（空格分隔，输入 0 退出）： " skill_input [ "$skill_input" = "0" ] && break [ -z "$skill_input" ] && continue local success_list="" local failed_list="" local skipped_list="" local changed=false local token if [ "$skill_action" = "2" ]; then read -e -p "二次确认：删除仅影响用户目录 ~/.openclaw/workspace/skills，确认继续？(y/N): " confirm_del if [[ ! "$confirm_del" =~ ^[Yy]$ ]]; then echo "已取消删除。" break_end continue fi fi for token in $skill_input; do local skill_name skill_name="$token" [ -z "$skill_name" ] && continue if [ "$skill_action" = "1" ]; then local skill_found=false if [ -d "${HOME}/.openclaw/workspace/skills/${skill_name}" ]; then echo "💡 技能 [$skill_name] 已在用户目录安装。" skill_found=true elif [ -d "/usr/lib/node_modules/openclaw/skills/${skill_name}" ]; then echo "💡 技能 [$skill_name] 已在系统目录安装。" skill_found=true fi if [ "$skill_found" = true ]; then read -e -p "技能 [$skill_name] 已安装，是否重新安装？(y/N): " reinstall if [[ ! "$reinstall" =~ ^[Yy]$ ]]; then skipped_list="$skipped_list $skill_name" continue fi fi echo "正在安装技能：$skill_name ..." if npx clawhub install "$skill_name" --yes --no-input 2>/dev/null || npx clawhub install "$skill_name"; then echo "✅ 技能 $skill_name 安装成功。" success_list="$success_list $skill_name" changed=true else echo "❌ 安装失败：$skill_name" failed_list="$failed_list $skill_name" fi else echo "🗑️ 正在删除技能: $skill_name" npx clawhub uninstall "$skill_name" --yes --no-input 2>/dev/null || npx clawhub uninstall "$skill_name" >/dev/null 2>&1 if [ -d "${HOME}/.openclaw/workspace/skills/${skill_name}" ]; then rm -rf "${HOME}/.openclaw/workspace/skills/${skill_name}" echo "✅ 已删除用户技能目录: $skill_name" success_list="$success_list $skill_name" changed=true else echo "⏭️ 未发现用户技能目录: $skill_name" skipped_list="$skipped_list $skill_name" fi fi done echo "" echo "====== 操作汇总 ======" echo "✅ 成功:$success_list" [ -n "$failed_list" ] && echo "❌ 失败:$failed_list" [ -n "$skipped_list" ] && echo "⏭️ 跳过:$skipped_list" if [ "$changed" = true ]; then echo "🔄 正在重启 OpenClaw 服务以加载变更..." start_gateway fi break_end done } openclaw_json_get_bool() { local expr="$1" local config_file config_file=$(openclaw_get_config_file) if [ ! -s "$config_file" ]; then echo "false" return fi jq -r "$expr" "$config_file" 2>/dev/null || echo "false" } openclaw_channel_has_cfg() { local channel="$1" local config_file config_file=$(openclaw_get_config_file) if [ ! -s "$config_file" ]; then echo "false" return fi jq -r --arg c "$channel" ' (.channels[$c] // null) as $v | if ($v | type) != "object" then false else ([ $v | to_entries[] | select((.key == "enabled" or .key == "dmPolicy" or .key == "groupPolicy" or .key == "streaming") | not) | .value | select(. != null and . != "" and . != false) ] | length) > 0 end ' "$config_file" 2>/dev/null || echo "false" } openclaw_dir_has_files() { local dir="$1" [ -d "$dir" ] && find "$dir" -type f -print -quit 2>/dev/null | grep -q . } openclaw_plugin_local_installed() { local plugin="$1" local config_file config_file=$(openclaw_get_config_file) if [ -s "$config_file" ] && jq -e --arg p "$plugin" '.plugins.installs[$p]' "$config_file" >/dev/null 2>&1; then return 0 fi # 兼容两种常见目录命名： # - ~/.openclaw/extensions/qqbot # - ~/.openclaw/extensions/openclaw-qqbot # 避免无脑 substring，优先精确匹配与 openclaw- 前缀匹配。 [ -d "${HOME}/.openclaw/extensions/${plugin}" ] \ || [ -d "${HOME}/.openclaw/extensions/openclaw-${plugin}" ] \ || [ -d "/usr/lib/node_modules/openclaw/extensions/${plugin}" ] \ || [ -d "/usr/lib/node_modules/openclaw/extensions/openclaw-${plugin}" ] } openclaw_bot_status_text() { local enabled="$1" local configured="$2" local connected="$3" local abnormal="$4" if [ "$abnormal" = "true" ]; then echo "异常" elif [ "$enabled" != "true" ]; then echo "未启用" elif [ "$connected" = "true" ]; then echo "已连接" elif [ "$configured" = "true" ]; then echo "已配置" else echo "未配置" fi } openclaw_colorize_bot_status() { local status="$1" case "$status" in 已连接) echo -e "${gl_lv}${status}${gl_bai}" ;; 已配置) echo -e "${gl_huang}${status}${gl_bai}" ;; 异常) echo -e "${gl_hong}${status}${gl_bai}" ;; *) echo "$status" ;; esac } openclaw_print_bot_status_line() { local label="$1" local status="$2" echo -e "- ${label}: $(openclaw_colorize_bot_status "$status")" } openclaw_show_bot_local_status_block() { local config_file config_file=$(openclaw_get_config_file) local json_ok="false" if [ -s "$config_file" ] && jq empty "$config_file" >/dev/null 2>&1; then json_ok="true" fi local tg_enabled tg_cfg tg_connected tg_abnormal tg_status tg_enabled=$(openclaw_json_get_bool '.channels.telegram.enabled // .plugins.entries.telegram.enabled // false') tg_cfg=$(openclaw_channel_has_cfg "telegram") tg_connected="false" if openclaw_dir_has_files "${HOME}/.openclaw/telegram"; then tg_connected="true" fi tg_abnormal="false" if [ "$tg_enabled" = "true" ] && [ "$json_ok" != "true" ]; then tg_abnormal="true" fi tg_status=$(openclaw_bot_status_text "$tg_enabled" "$tg_cfg" "$tg_connected" "$tg_abnormal") local feishu_enabled feishu_cfg feishu_connected feishu_abnormal feishu_status feishu_enabled=$(openclaw_json_get_bool '.plugins.entries.feishu.enabled // .plugins.entries["openclaw-lark"].enabled // .channels.feishu.enabled // .channels.lark.enabled // false') feishu_cfg=$(openclaw_channel_has_cfg "feishu") if [ "$feishu_cfg" != "true" ]; then feishu_cfg=$(openclaw_channel_has_cfg "lark") fi feishu_connected="false" if openclaw_dir_has_files "${HOME}/.openclaw/feishu" || openclaw_dir_has_files "${HOME}/.openclaw/lark" || openclaw_dir_has_files "${HOME}/.openclaw/openclaw-lark"; then feishu_connected="true" fi feishu_abnormal="false" if [ "$feishu_enabled" = "true" ] && ! openclaw_plugin_local_installed "feishu" && ! openclaw_plugin_local_installed "lark" && ! openclaw_plugin_local_installed "openclaw-lark"; then feishu_abnormal="true" fi if [ "$feishu_enabled" = "true" ] && [ "$json_ok" != "true" ]; then feishu_abnormal="true" fi if [ "$feishu_connected" != "true" ] && [ "$feishu_enabled" = "true" ] && [ "$feishu_cfg" = "true" ] && { openclaw_plugin_local_installed "feishu" || openclaw_plugin_local_installed "lark" || openclaw_plugin_local_installed "openclaw-lark"; }; then feishu_connected="true" fi feishu_status=$(openclaw_bot_status_text "$feishu_enabled" "$feishu_cfg" "$feishu_connected" "$feishu_abnormal") local wa_enabled wa_cfg wa_connected wa_abnormal wa_status wa_enabled=$(openclaw_json_get_bool '.plugins.entries.whatsapp.enabled // .channels.whatsapp.enabled // false') wa_cfg=$(openclaw_channel_has_cfg "whatsapp") wa_connected="false" if openclaw_dir_has_files "${HOME}/.openclaw/whatsapp"; then wa_connected="true" fi wa_abnormal="false" if [ "$wa_enabled" = "true" ] && ! openclaw_plugin_local_installed "whatsapp"; then wa_abnormal="true" fi if [ "$wa_enabled" = "true" ] && [ "$json_ok" != "true" ]; then wa_abnormal="true" fi wa_status=$(openclaw_bot_status_text "$wa_enabled" "$wa_cfg" "$wa_connected" "$wa_abnormal") local dc_enabled dc_cfg dc_connected dc_abnormal dc_status dc_enabled=$(openclaw_json_get_bool '.channels.discord.enabled // .plugins.entries.discord.enabled // false') dc_cfg=$(openclaw_channel_has_cfg "discord") dc_connected="false" if openclaw_dir_has_files "${HOME}/.openclaw/discord"; then dc_connected="true" fi dc_abnormal="false" if [ "$dc_enabled" = "true" ] && [ "$json_ok" != "true" ]; then dc_abnormal="true" fi dc_status=$(openclaw_bot_status_text "$dc_enabled" "$dc_cfg" "$dc_connected" "$dc_abnormal") local slack_enabled slack_cfg slack_connected slack_abnormal slack_status slack_enabled=$(openclaw_json_get_bool '.plugins.entries.slack.enabled // .channels.slack.enabled // false') slack_cfg=$(openclaw_channel_has_cfg "slack") slack_connected="false" if openclaw_dir_has_files "${HOME}/.openclaw/slack"; then slack_connected="true" fi slack_abnormal="false" if [ "$slack_enabled" = "true" ] && ! openclaw_plugin_local_installed "slack"; then slack_abnormal="true" fi if [ "$slack_enabled" = "true" ] && [ "$json_ok" != "true" ]; then slack_abnormal="true" fi slack_status=$(openclaw_bot_status_text "$slack_enabled" "$slack_cfg" "$slack_connected" "$slack_abnormal") local qq_enabled qq_cfg qq_connected qq_abnormal qq_status qq_enabled=$(openclaw_json_get_bool '.plugins.entries.qqbot.enabled // .channels.qqbot.enabled // false') qq_cfg=$(openclaw_channel_has_cfg "qqbot") qq_connected="false" if openclaw_dir_has_files "${HOME}/.openclaw/qqbot/sessions" || openclaw_dir_has_files "${HOME}/.openclaw/qqbot/data"; then qq_connected="true" fi qq_abnormal="false" if [ "$qq_enabled" = "true" ] && ! openclaw_plugin_local_installed "qqbot"; then qq_abnormal="true" fi if [ "$qq_enabled" = "true" ] && [ "$json_ok" != "true" ]; then qq_abnormal="true" fi qq_status=$(openclaw_bot_status_text "$qq_enabled" "$qq_cfg" "$qq_connected" "$qq_abnormal") local wx_enabled wx_cfg wx_connected wx_abnormal wx_status wx_enabled=$(openclaw_json_get_bool '.plugins.entries.weixin.enabled // .plugins.entries["openclaw-weixin"].enabled // .channels.weixin.enabled // .channels["openclaw-weixin"].enabled // false') wx_cfg=$(openclaw_channel_has_cfg "weixin") if [ "$wx_cfg" != "true" ]; then wx_cfg=$(openclaw_channel_has_cfg "openclaw-weixin") fi wx_connected="false" if openclaw_dir_has_files "${HOME}/.openclaw/weixin" || openclaw_dir_has_files "${HOME}/.openclaw/openclaw-weixin"; then wx_connected="true" fi wx_abnormal="false" if [ "$wx_enabled" = "true" ] && ! openclaw_plugin_local_installed "weixin" && ! openclaw_plugin_local_installed "openclaw-weixin"; then wx_abnormal="true" fi if [ "$wx_enabled" = "true" ] && [ "$json_ok" != "true" ]; then wx_abnormal="true" fi wx_status=$(openclaw_bot_status_text "$wx_enabled" "$wx_cfg" "$wx_connected" "$wx_abnormal") echo "本地状态（仅本机配置/缓存，不做网络探测）：" openclaw_print_bot_status_line "Telegram" "$tg_status" openclaw_print_bot_status_line "飞书(Lark)" "$feishu_status" openclaw_print_bot_status_line "WhatsApp" "$wa_status" openclaw_print_bot_status_line "Discord" "$dc_status" openclaw_print_bot_status_line "Slack" "$slack_status" openclaw_print_bot_status_line "QQ Bot" "$qq_status" openclaw_print_bot_status_line "微信 (Weixin)" "$wx_status" } change_tg_bot_code() { send_stats "机器人对接" while true; do clear echo "========================================" echo " 机器人连接对接 " echo "========================================" openclaw_show_bot_local_status_block echo "----------------------------------------" echo "1. Telegram 机器人对接" echo "2. 飞书 (Lark) 机器人对接" echo "3. WhatsApp 机器人对接" echo "4. QQ 机器人对接" echo "5. 微信机器人对接" echo "----------------------------------------" echo "0. 返回上一级选单" echo "----------------------------------------" read -e -p "请输入你的选择: " bot_choice case $bot_choice in 1) read -e -p "请输入TG机器人收到的连接码 (例如 NYA99R2F)（输入 0 退出）： " code if [ "$code" = "0" ]; then continue; fi if [ -z "$code" ]; then echo "错误：连接码不能为空。"; sleep 1; continue; fi openclaw pairing approve telegram "$code" break_end ;; 2) npx -y @larksuite/openclaw-lark install openclaw config set channels.feishu.streaming true openclaw config set channels.feishu.requireMention true --json break_end ;; 3) read -e -p "请输入WhatsApp收到的连接码 (例如 NYA99R2F)（输入 0 退出）： " code if [ "$code" = "0" ]; then continue; fi if [ -z "$code" ]; then echo "错误：连接码不能为空。"; sleep 1; continue; fi openclaw pairing approve whatsapp "$code" break_end ;; 4) echo "QQ 官方对接地址：" echo "https://q.qq.com/qqbot/openclaw/login.html" break_end ;; 5) npx -y @tencent-weixin/openclaw-weixin-cli@latest install break_end ;; 0) return 0 ;; *) echo "无效的选择，请重试。" sleep 1 ;; esac done } openclaw_backup_root() { echo "${HOME}/.openclaw/backups" } openclaw_is_interactive_terminal() { [ -t 0 ] && [ -t 1 ] } openclaw_has_command() { command -v "$1" >/dev/null 2>&1 } openclaw_is_safe_relpath() { local rel="$1" [ -z "$rel" ] && return 1 [[ "$rel" = /* ]] && return 1 [[ "$rel" == *"//"* ]] && return 1 [[ "$rel" == *$'\n'* ]] && return 1 [[ "$rel" == *$'\r'* ]] && return 1 case "$rel" in ../*|*/../*|*/..|..) return 1 ;; esac return 0 } openclaw_restore_path_allowed() { local mode="$1" local rel="$2" case "$mode" in memory) case "$rel" in MEMORY.md|AGENTS.md|USER.md|SOUL.md|TOOLS.md|memory/*) return 0 ;; *) return 1 ;; esac ;; project) case "$rel" in openclaw.json|workspace/*|extensions/*|skills/*|prompts/*|tools/*|telegram/*|feishu/*|whatsapp/*|discord/*|slack/*|qqbot/*|logs/*) return 0 ;; *) return 1 ;; esac ;; *) return 1 ;; esac } openclaw_pack_backup_archive() { local backup_type="$1" local export_mode="$2" local payload_dir="$3" local output_file="$4" local tmp_root tmp_root=$(mktemp -d) || return 1 local pack_dir="$tmp_root/package" mkdir -p "$pack_dir" cp -a "$payload_dir" "$pack_dir/payload" ( cd "$pack_dir/payload" || exit 1 find . -type f | sed 's|^\./||' | sort > "$pack_dir/manifest.files" : > "$pack_dir/manifest.sha256" while IFS= read -r f; do [ -z "$f" ] && continue sha256sum "$f" >> "$pack_dir/manifest.sha256" done < "$pack_dir/manifest.files" ) || { rm -rf "$tmp_root"; return 1; } cat > "$pack_dir/backup.meta" </dev/null ) || { echo "❌ sha256 校验失败，拒绝还原"; return 1; } echo "$pkg_dir" return 0 } openclaw_get_all_agent_workspaces() { local config_file config_file=$(openclaw_get_config_file) if [ -f "$config_file" ]; then python3 - "$config_file" <<'PY' import json, sys, os try: with open(sys.argv[1]) as f: data = json.load(f) agents = data.get("agents", {}).get("list", []) results = [{"id": "main", "ws": os.path.expanduser("~/.openclaw/workspace")}] for a in agents: aid = a.get("id"); ws = a.get("workspace") if aid and ws and aid != "main": results.append({"id": aid, "ws": os.path.expanduser(ws)}) print(json.dumps(results)) except: print("[]") PY else echo '[{"id": "main", "ws": "'"${HOME}"'/.openclaw/workspace"}]' fi } openclaw_memory_backup_export() { send_stats "OpenClaw记忆全量备份" local backup_root=$(openclaw_backup_root) local ts=$(date +%Y%m%d-%H%M%S) local out_file="$backup_root/openclaw-memory-full-${ts}.tar.gz" mkdir -p "$backup_root" local tmp_payload=$(mktemp -d) || return 1 local workspaces_json=$(openclaw_get_all_agent_workspaces) python3 -c "import json, sys, os, shutil; workspaces = json.loads(sys.argv[1]); tmp_payload = sys.argv[2] for item in workspaces: aid = item['id']; ws = item['ws'] if not os.path.isdir(ws): continue target_dir = os.path.join(tmp_payload, 'agents', aid) os.makedirs(target_dir, exist_ok=True) for f in ['MEMORY.md', 'memory']: src = os.path.join(ws, f) if os.path.exists(src): if os.path.isfile(src): shutil.copy2(src, target_dir) else: shutil.copytree(src, os.path.join(target_dir, f), dirs_exist_ok=True) " "$workspaces_json" "$tmp_payload" if ! find "$tmp_payload" -mindepth 1 -print -quit | grep -q .; then echo "❌ 未找到可备份的记忆文件"; rm -rf "$tmp_payload"; break_end; return 1 fi if openclaw_pack_backup_archive "memory-full" "multi-agent" "$tmp_payload" "$out_file"; then echo "✅ 记忆全量备份完成 (含多智能体): $out_file"; openclaw_offer_transfer_hint "$out_file" else echo "❌ 记忆全量备份失败" fi rm -rf "$tmp_payload"; break_end } openclaw_memory_backup_import() { send_stats "OpenClaw记忆全量还原" local archive_path=$(openclaw_read_import_path "还原记忆全量 (支持多智能体)") [ -z "$archive_path" ] && { echo "❌ 未输入路径"; break_end; return 1; } local tmp_unpack=$(mktemp -d) || return 1 local pkg_dir=$(openclaw_prepare_import_archive "memory-full" "$archive_path" "$tmp_unpack") || { rm -rf "$tmp_unpack"; break_end; return 1; } local workspaces_json=$(openclaw_get_all_agent_workspaces) python3 -c 'import json, sys, os, shutil; workspaces = {item["id"]: item["ws"] for item in json.loads(sys.argv[1])}; payload_dir = sys.argv[2]; agents_root = os.path.join(payload_dir, "agents") if os.path.isdir(agents_root): for aid in os.listdir(agents_root): if aid in workspaces: src_agent_dir = os.path.join(agents_root, aid); dest_ws = workspaces[aid] os.makedirs(dest_ws, exist_ok=True) for f in os.listdir(src_agent_dir): src = os.path.join(src_agent_dir, f); dest = os.path.join(dest_ws, f) if os.path.isfile(src): shutil.copy2(src, dest) else: shutil.copytree(src, dest, dirs_exist_ok=True) print(f"✅ 已还原智能体记忆: {aid}")' "$workspaces_json" "$pkg_dir/payload" rm -rf "$tmp_unpack"; echo "✅ 记忆全量还原完成"; break_end } openclaw_project_backup_export() { send_stats "OpenClaw项目备份" local config_file config_file=$(openclaw_get_config_file) local openclaw_root openclaw_root=$(dirname "$config_file") if [ ! -d "$openclaw_root" ]; then echo "❌ 未找到 OpenClaw 根目录: $openclaw_root" break_end return 1 fi echo "备份模式：" echo "1. 安全模式（默认，推荐）：workspace + openclaw.json + extensions/skills/prompts/tools（如存在）" echo "2. 完整模式（含更多状态，敏感风险更高）" read -e -p "请选择备份模式（默认 1）: " export_mode [ -z "$export_mode" ] && export_mode="1" local mode_label="safe" local tmp_payload tmp_payload=$(mktemp -d) || return 1 if [ "$export_mode" = "2" ]; then mode_label="full" for d in workspace extensions skills prompts tools; do [ -e "$openclaw_root/$d" ] && cp -a "$openclaw_root/$d" "$tmp_payload/" done [ -f "$openclaw_root/openclaw.json" ] && cp -a "$openclaw_root/openclaw.json" "$tmp_payload/" for d in telegram feishu whatsapp discord slack qqbot logs; do [ -e "$openclaw_root/$d" ] && cp -a "$openclaw_root/$d" "$tmp_payload/" done else [ -d "$openclaw_root/workspace" ] && cp -a "$openclaw_root/workspace" "$tmp_payload/" [ -f "$openclaw_root/openclaw.json" ] && cp -a "$openclaw_root/openclaw.json" "$tmp_payload/" for d in extensions skills prompts tools; do [ -e "$openclaw_root/$d" ] && cp -a "$openclaw_root/$d" "$tmp_payload/" done fi if ! find "$tmp_payload" -mindepth 1 -print -quit | grep -q .; then echo "❌ 未找到可备份的 OpenClaw 项目内容" rm -rf "$tmp_payload" break_end return 1 fi local backup_root backup_root=$(openclaw_backup_root) mkdir -p "$backup_root" local out_file="$backup_root/openclaw-project-${mode_label}-$(date +%Y%m%d-%H%M%S).tar.gz" if openclaw_pack_backup_archive "openclaw-project" "$mode_label" "$tmp_payload" "$out_file"; then echo "✅ OpenClaw 项目备份完成 (${mode_label}): $out_file" openclaw_offer_transfer_hint "$out_file" else echo "❌ OpenClaw 项目备份失败" fi rm -rf "$tmp_payload" break_end } openclaw_project_backup_import() { send_stats "OpenClaw项目还原" local config_file config_file=$(openclaw_get_config_file) local openclaw_root openclaw_root=$(dirname "$config_file") mkdir -p "$openclaw_root" echo "⚠️ 高风险操作：项目还原会覆盖 OpenClaw 配置与工作区内容。" echo "⚠️ 还原前将执行 manifest/sha256 校验、白名单恢复、gateway 停启与健康检查。" read -e -p "请输入确认词【我已知晓高风险并继续还原】后继续: " confirm_text if [ "$confirm_text" != "我已知晓高风险并继续还原" ]; then echo "❌ 确认词不匹配，已取消还原" break_end return 1 fi local archive_path archive_path=$(openclaw_read_import_path "请输入 OpenClaw 项目备份包路径") [ -z "$archive_path" ] && { echo "❌ 未输入备份路径"; break_end; return 1; } local tmp_unpack tmp_unpack=$(mktemp -d) || return 1 local pkg_dir pkg_dir=$(openclaw_prepare_import_archive "openclaw-project" "$archive_path" "$tmp_unpack") || { rm -rf "$tmp_unpack"; break_end; return 1; } local invalid=0 local valid_list valid_list=$(mktemp) while IFS= read -r rel; do [ -z "$rel" ] && continue if ! openclaw_is_safe_relpath "$rel" || ! openclaw_restore_path_allowed project "$rel"; then echo "❌ 检测到非法或越权路径: $rel" invalid=1 break fi echo "$rel" >> "$valid_list" done < "$pkg_dir/manifest.files" if [ "$invalid" -ne 0 ]; then rm -f "$valid_list" rm -rf "$tmp_unpack" echo "❌ 还原中止：存在不安全路径" break_end return 1 fi if command -v openclaw >/dev/null 2>&1; then echo "⏸️ 还原前停止 OpenClaw gateway..." openclaw gateway stop >/dev/null 2>&1 fi while IFS= read -r rel; do mkdir -p "$openclaw_root/$(dirname "$rel")" cp -a "$pkg_dir/payload/$rel" "$openclaw_root/$rel" done < "$valid_list" if command -v openclaw >/dev/null 2>&1; then echo "▶️ 还原后启动 OpenClaw gateway..." openclaw gateway start >/dev/null 2>&1 sleep 2 echo "🩺 gateway 健康检查：" openclaw gateway status || true fi rm -f "$valid_list" rm -rf "$tmp_unpack" echo "✅ OpenClaw 项目还原完成" break_end } openclaw_backup_detect_type() { local file_name="$1" if [[ "$file_name" == openclaw-memory-full-*.tar.gz ]]; then echo "记忆备份文件" elif [[ "$file_name" == openclaw-project-*.tar.gz ]]; then echo "项目备份文件" else echo "其他备份文件" fi } openclaw_backup_collect_files() { local backup_root backup_root=$(openclaw_backup_root) mkdir -p "$backup_root" mapfile -t OPENCLAW_BACKUP_FILES < <(find "$backup_root" -maxdepth 1 -type f -name '*.tar.gz' -printf '%f\n' | sort -r) } openclaw_backup_render_file_list() { local backup_root i file_name file_path file_type file_size file_time local has_memory=0 has_project=0 has_other=0 backup_root=$(openclaw_backup_root) openclaw_backup_collect_files echo "备份目录: $backup_root" if [ ${#OPENCLAW_BACKUP_FILES[@]} -eq 0 ]; then echo "暂无备份文件" return 0 fi for i in "${!OPENCLAW_BACKUP_FILES[@]}"; do file_type=$(openclaw_backup_detect_type "${OPENCLAW_BACKUP_FILES[$i]}") case "$file_type" in "记忆备份文件") has_memory=1 ;; "项目备份文件") has_project=1 ;; "其他备份文件") has_other=1 ;; esac done if [ "$has_memory" -eq 1 ]; then echo "记忆备份文件" for i in "${!OPENCLAW_BACKUP_FILES[@]}"; do file_name="${OPENCLAW_BACKUP_FILES[$i]}" file_type=$(openclaw_backup_detect_type "$file_name") [ "$file_type" != "记忆备份文件" ] && continue file_path="$backup_root/$file_name" file_size=$(ls -lh "$file_path" | awk '{print $5}') file_time=$(date -d "$(stat -c %y "$file_path")" '+%Y-%m-%d %H:%M:%S' 2>/dev/null || stat -c %y "$file_path" | awk '{print $1" "$2}') printf "%s | %s | %s\n" "$file_name" "$file_size" "$file_time" done fi if [ "$has_project" -eq 1 ]; then echo "项目备份文件" for i in "${!OPENCLAW_BACKUP_FILES[@]}"; do file_name="${OPENCLAW_BACKUP_FILES[$i]}" file_type=$(openclaw_backup_detect_type "$file_name") [ "$file_type" != "项目备份文件" ] && continue file_path="$backup_root/$file_name" file_size=$(ls -lh "$file_path" | awk '{print $5}') file_time=$(date -d "$(stat -c %y "$file_path")" '+%Y-%m-%d %H:%M:%S' 2>/dev/null || stat -c %y "$file_path" | awk '{print $1" "$2}') printf "%s | %s | %s\n" "$file_name" "$file_size" "$file_time" done fi if [ "$has_other" -eq 1 ]; then echo "其他备份文件" for i in "${!OPENCLAW_BACKUP_FILES[@]}"; do file_name="${OPENCLAW_BACKUP_FILES[$i]}" file_type=$(openclaw_backup_detect_type "$file_name") [ "$file_type" != "其他备份文件" ] && continue file_path="$backup_root/$file_name" file_size=$(ls -lh "$file_path" | awk '{print $5}') file_time=$(date -d "$(stat -c %y "$file_path")" '+%Y-%m-%d %H:%M:%S' 2>/dev/null || stat -c %y "$file_path" | awk '{print $1" "$2}') printf "%s | %s | %s\n" "$file_name" "$file_size" "$file_time" done fi } openclaw_backup_file_exists_in_list() { local target_file="$1" local item for item in "${OPENCLAW_BACKUP_FILES[@]}"; do [ "$item" = "$target_file" ] && return 0 done return 1 } openclaw_backup_delete_file() { send_stats "OpenClaw删除备份文件" local backup_root backup_root_real user_input target_file target_path target_type backup_root=$(openclaw_backup_root) openclaw_backup_render_file_list if [ ${#OPENCLAW_BACKUP_FILES[@]} -eq 0 ]; then break_end return 0 fi read -e -p "请输入要删除的文件名或完整路径（0 取消）: " user_input if [ "$user_input" = "0" ]; then echo "已取消删除。" break_end return 0 fi if [ -z "$user_input" ]; then echo "❌ 输入不能为空。" break_end return 1 fi backup_root_real=$(realpath -m "$backup_root") if [[ "$user_input" == /* ]]; then target_path=$(realpath -m "$user_input") case "$target_path" in "$backup_root_real"/*) ;; *) echo "❌ 路径越界：仅允许删除备份根目录内的文件。" break_end return 1 ;; esac target_file=$(basename "$target_path") else target_file=$(basename -- "$user_input") target_path="$backup_root/$target_file" fi if [ ! -f "$target_path" ]; then echo "❌ 目标文件不存在: $target_path" break_end return 1 fi if ! openclaw_backup_file_exists_in_list "$target_file"; then echo "❌ 目标文件不在当前备份列表中。" break_end return 1 fi target_type=$(openclaw_backup_detect_type "$target_file") echo "即将删除: [$target_type] $target_path" read -e -p "第一次确认：输入 yes 确认继续: " confirm_step1 if [ "$confirm_step1" != "yes" ]; then echo "已取消删除。" break_end return 0 fi read -e -p "二次确认：输入 DELETE 执行删除: " confirm_step2 if [ "$confirm_step2" != "DELETE" ]; then echo "已取消删除。" break_end return 0 fi if rm -f -- "$target_path"; then echo "✅ 删除成功: $target_file" else echo "❌ 删除失败: $target_file" fi break_end } openclaw_backup_list_files() { openclaw_backup_render_file_list break_end } openclaw_memory_config_file() { local user_config="${HOME}/.openclaw/openclaw.json" local root_config="/root/.openclaw/openclaw.json" if [ -f "$user_config" ]; then echo "$user_config" elif [ "$HOME" = "/root" ] && [ -f "$root_config" ]; then echo "$root_config" else echo "$user_config" fi } openclaw_memory_config_get() { local key="$1" local default_value="${2:-}" local value value=$(openclaw config get "$key" 2>/dev/null | head -n 1 | sed -e 's/^"//' -e 's/"$//') if [ -z "$value" ] || [ "$value" = "null" ] || [ "$value" = "undefined" ]; then echo "$default_value" return 0 fi echo "$value" } openclaw_memory_config_set() { local key="$1" shift openclaw config set "$key" "$@" >/dev/null 2>&1 } openclaw_memory_config_unset() { local key="$1" openclaw config unset "$key" >/dev/null 2>&1 } openclaw_memory_cleanup_legacy_keys() { openclaw_memory_config_unset "memory.local" } openclaw_memory_list_agents() { if command -v openclaw >/dev/null 2>&1; then local agents_json agents_json=$(openclaw agents list --json 2>/dev/null || true) if [ -n "$agents_json" ]; then python3 - "$agents_json" <<'PY' import json, os, sys raw = sys.argv[1] try: data = json.loads(raw) except Exception: data = None seen = set() results = [] if isinstance(data, list): for item in data: if not isinstance(item, dict): continue aid = item.get('id') if not aid or aid in seen: continue ws = item.get('workspace') or ("~/.openclaw/workspace" if aid == 'main' else f"~/.openclaw/workspace-{aid}") results.append((aid, os.path.expanduser(ws))) seen.add(aid) if results: for aid, ws in results: print(f"{aid}\t{ws}") raise SystemExit(0) raise SystemExit(1) PY [ $? -eq 0 ] && return 0 fi fi local config_path config_path=$(openclaw_memory_config_file) python3 - "$config_path" <<'PY' import json, os, sys config_path = sys.argv[1] results = [("main", os.path.expanduser("~/.openclaw/workspace"))] seen = {"main"} try: if os.path.exists(config_path): with open(config_path, encoding='utf-8') as f: data = json.load(f) agents = data.get('agents', {}).get('list', []) if isinstance(agents, list): for item in agents: if not isinstance(item, dict): continue aid = item.get('id') ws = item.get('workspace') if not aid or aid in seen: continue if not ws: ws = f"~/.openclaw/workspace-{aid}" results.append((aid, os.path.expanduser(ws))) seen.add(aid) except Exception: pass for aid, ws in results: print(f"{aid}\t{ws}") PY } openclaw_memory_status_value() { local key="$1" local agent_id="${2:-}" if [ -n "$agent_id" ]; then openclaw memory status --agent "$agent_id" 2>/dev/null | awk -F': ' -v k="$key" '$1==k {print $2; exit}' else openclaw memory status 2>/dev/null | awk -F': ' -v k="$key" '$1==k {print $2; exit}' fi } openclaw_memory_expand_path() { local raw_path="$1" if [ -z "$raw_path" ]; then echo "" return 0 fi raw_path=$(echo "$raw_path" | sed 's/^[[:space:]]*//;s/[[:space:]]*$//') if [[ "$raw_path" == ~* ]]; then echo "${raw_path/#\~/$HOME}" else echo "$raw_path" fi } openclaw_memory_rebuild_index_single() { local agent_id="${1:-main}" local store_raw store_file ts backup_file store_raw=$(openclaw_memory_status_value "Store" "$agent_id") store_file=$(openclaw_memory_expand_path "$store_raw") if [ -z "$store_file" ] || [ ! -f "$store_file" ]; then echo "⚠️ [$agent_id] 未找到索引库文件，可能为空或不存在。" echo " Store 原始值: ${store_raw:-<空>}" echo " 仍将执行重建索引。" else ts=$(date +%Y%m%d_%H%M%S) backup_file="${store_file}.bak.${ts}" if mv "$store_file" "$backup_file"; then echo "✅ [$agent_id] 已备份索引: $backup_file" else echo "⚠️ [$agent_id] 索引备份失败，继续重建。" fi fi openclaw memory index --agent "$agent_id" --force } openclaw_memory_rebuild_index_safe() { local agent_id="${1:-main}" openclaw_memory_rebuild_index_single "$agent_id" openclaw gateway restart echo "✅ 索引已重建并自动重启网关" echo "" openclaw_memory_render_status } openclaw_memory_rebuild_index_all() { local count=0 local agent_lines agent_id workspace agent_lines=$(openclaw_memory_list_agents) while IFS=$'\t' read -r agent_id workspace; do [ -z "$agent_id" ] && continue openclaw_memory_rebuild_index_single "$agent_id" count=$((count+1)) done </dev/null) if [ -z "$json_output" ]; then echo "获取记忆状态失败（openclaw memory status --json 无输出）" return 1 fi python3 - "$json_output" <<'PY' import json, sys raw = sys.argv[1] try: data = json.loads(raw) except Exception: print("获取记忆状态失败（JSON 解析错误）") raise SystemExit(1) if not isinstance(data, list) or len(data) == 0: print("未检测到任何智能体记忆状态。") raise SystemExit(0) first = True for entry in data: if not isinstance(entry, dict): continue agent_id = entry.get("agentId", "?") s = entry.get("status", {}) if not isinstance(s, dict): s = {} if not first: print("") first = False print("Agent: %s" % agent_id) backend = s.get("backend") or s.get("provider") or "-" print(" 底层方案: %s" % backend) files = s.get("files", 0) chunks = s.get("chunks", 0) print(" 已收录: %s 文件 / %s 块" % (files, chunks)) dirty = s.get("dirty") dirty_str = "是" if dirty else "否" print(" 待刷新: %s" % dirty_str) vec = s.get("vector", {}) if isinstance(vec, dict) and vec.get("enabled"): vec_str = "就绪" if vec.get("available") else "已启用(不可用)" else: vec_str = "未启用" print(" 向量库: %s" % vec_str) ws = s.get("workspaceDir") or "-" print(" 工作区: %s" % ws) db = s.get("dbPath") or "-" print(" 索引库: %s" % db) scan = entry.get("scan", {}) if isinstance(scan, dict): issues = scan.get("issues", []) if issues: for issue in issues[:3]: print(" ⚠️ %s" % issue) PY } openclaw_memory_get_backend() { local backend backend=$(openclaw_memory_config_get "memory.backend") if [ "$backend" = "local" ]; then echo "builtin" else echo "$backend" fi } openclaw_memory_get_local_model_path() { openclaw_memory_config_get "agents.defaults.memorySearch.local.modelPath" } openclaw_memory_local_model_status() { local model_path="$1" if [ -z "$model_path" ]; then echo "missing" return fi if [[ "$model_path" == hf:* ]]; then echo "hf" return fi if [ -f "$model_path" ]; then echo "ok" else echo "missing" fi } openclaw_memory_qmd_available() { if command -v qmd >/dev/null 2>&1; then echo "true" return fi local backend backend=$(openclaw_memory_config_get "memory.backend") if [ "$backend" = "qmd" ]; then echo "true" return fi echo "false" } openclaw_memory_probe_url() { local url="$1" if ! command -v curl >/dev/null 2>&1; then echo "unknown" return fi if [ -z "$url" ]; then echo "unknown" return fi if curl -I -m 2 -s "$url" >/dev/null 2>&1; then echo "ok" else echo "fail" fi } openclaw_memory_recommend() { local qmd_ok model_path model_status hf_ok mirror_ok qmd_ok=$(openclaw_memory_qmd_available) model_path=$(openclaw_memory_get_local_model_path) model_status=$(openclaw_memory_local_model_status "$model_path") hf_ok=$(openclaw_memory_probe_url "https://huggingface.co") mirror_ok=$(openclaw_memory_probe_url "https://hf-mirror.com") OPENCLAW_MEMORY_RECOMMEND_REASON=() if [ "$qmd_ok" = "true" ]; then OPENCLAW_MEMORY_RECOMMEND_REASON+=("QMD 可用") else OPENCLAW_MEMORY_RECOMMEND_REASON+=("未检测到 QMD") fi if [ -n "$model_path" ]; then OPENCLAW_MEMORY_RECOMMEND_REASON+=("本地模型路径: $model_path") else OPENCLAW_MEMORY_RECOMMEND_REASON+=("未配置本地模型路径") fi case "$model_status" in ok) OPENCLAW_MEMORY_RECOMMEND_REASON+=("本地模型文件存在") ;; hf) OPENCLAW_MEMORY_RECOMMEND_REASON+=("模型来自 HF 下载源（国内可能慢/失败）") ;; *) OPENCLAW_MEMORY_RECOMMEND_REASON+=("本地模型文件不存在或不可用") ;; esac if [ "$hf_ok" = "ok" ]; then OPENCLAW_MEMORY_RECOMMEND_REASON+=("huggingface.co 可访问") elif [ "$mirror_ok" = "ok" ]; then OPENCLAW_MEMORY_RECOMMEND_REASON+=("hf-mirror.com 可访问") else OPENCLAW_MEMORY_RECOMMEND_REASON+=("huggingface.co / hf-mirror.com 可能不可达（疑似国内/受限网络）") fi if [ "$qmd_ok" = "true" ]; then if [ "$model_status" = "ok" ]; then OPENCLAW_MEMORY_RECOMMEND="local" elif [ "$model_status" = "hf" ] && { [ "$hf_ok" = "ok" ] || [ "$mirror_ok" = "ok" ]; }; then OPENCLAW_MEMORY_RECOMMEND="local" elif [ "$model_status" = "hf" ] && [ "$hf_ok" = "fail" ] && [ "$mirror_ok" = "fail" ]; then OPENCLAW_MEMORY_RECOMMEND="qmd" else OPENCLAW_MEMORY_RECOMMEND="qmd" fi else if [ "$model_status" = "ok" ]; then OPENCLAW_MEMORY_RECOMMEND="local" else OPENCLAW_MEMORY_RECOMMEND="qmd" fi fi } openclaw_memory_detect_region() { OPENCLAW_MEMORY_COUNTRY="unknown" OPENCLAW_MEMORY_USE_MIRROR="false" if command -v curl >/dev/null 2>&1; then OPENCLAW_MEMORY_COUNTRY=$(curl -s -m 2 ipinfo.io/country | tr -d ' ' | tr -d ' ') fi case "$OPENCLAW_MEMORY_COUNTRY" in CN|HK) OPENCLAW_MEMORY_USE_MIRROR="true" ;; esac } openclaw_memory_select_sources() { local hf_ok mirror_ok hf_ok=$(openclaw_memory_probe_url "https://huggingface.co") mirror_ok=$(openclaw_memory_probe_url "https://hf-mirror.com") OPENCLAW_MEMORY_HF_OK="$hf_ok" OPENCLAW_MEMORY_MIRROR_OK="$mirror_ok" if [ "$OPENCLAW_MEMORY_USE_MIRROR" = "true" ]; then if [ "$mirror_ok" = "ok" ]; then OPENCLAW_MEMORY_HF_BASE="https://hf-mirror.com" elif [ "$hf_ok" = "ok" ]; then OPENCLAW_MEMORY_HF_BASE="https://huggingface.co" else OPENCLAW_MEMORY_HF_BASE="https://hf-mirror.com" fi OPENCLAW_MEMORY_GH_PROXY="https://gh.kejilion.pro/" else if [ "$hf_ok" = "ok" ]; then OPENCLAW_MEMORY_HF_BASE="https://huggingface.co" elif [ "$mirror_ok" = "ok" ]; then OPENCLAW_MEMORY_HF_BASE="https://hf-mirror.com" else OPENCLAW_MEMORY_HF_BASE="https://huggingface.co" fi OPENCLAW_MEMORY_GH_PROXY="https://" fi } openclaw_memory_download_file() { local url="$1" local dest="$2" mkdir -p "$(dirname "$dest")" if command -v curl >/dev/null 2>&1; then curl -L --fail --retry 2 -o "$dest" "$url" return $? fi if command -v wget >/dev/null 2>&1; then wget -O "$dest" "$url" return $? fi echo "❌ 未检测到 curl 或 wget，无法下载。" return 1 } openclaw_memory_check_sqlite() { if ! command -v sqlite3 >/dev/null 2>&1; then echo "⚠️ 未检测到 sqlite3，QMD 可能无法正常运行。" return 1 fi local ver ver=$(sqlite3 --version 2>/dev/null | awk '{print $1}') echo "✅ sqlite3 可用: ${ver:-unknown}" echo "ℹ️ sqlite 扩展支持无法可靠检测，将继续。" return 0 } openclaw_memory_ensure_bun() { if [ -x "$HOME/.bun/bin/bun" ]; then export PATH="$HOME/.bun/bin:$PATH" fi if command -v bun >/dev/null 2>&1; then echo "✅ bun 已存在" return 0 fi echo "⬇️ 安装 bun..." if command -v curl >/dev/null 2>&1; then curl -fsSL https://bun.sh/install | bash elif command -v wget >/dev/null 2>&1; then wget -qO- https://bun.sh/install | bash else echo "❌ 未检测到 curl 或 wget，无法安装 bun。" return 1 fi if [ -d "$HOME/.bun/bin" ]; then export PATH="$HOME/.bun/bin:$PATH" fi if command -v bun >/dev/null 2>&1; then echo "✅ bun 安装完成" return 0 fi echo "❌ bun 安装失败" return 1 } openclaw_memory_ensure_qmd() { local qmd_path qmd_path=$(command -v qmd 2>/dev/null || true) if [ -n "$qmd_path" ]; then if qmd --version >/dev/null 2>&1; then echo "✅ qmd 已存在且可用: $qmd_path" OPENCLAW_MEMORY_QMD_PATH="$qmd_path" return 0 else echo "⚠️ qmd 命令存在但模块损坏，重新安装..." fi fi echo "⬇️ 通过 npm 安装 qmd: @tobilu/qmd" npm install -g @tobilu/qmd qmd_path=$(command -v qmd 2>/dev/null || true) if [ -z "$qmd_path" ]; then echo "❌ qmd 安装失败" return 1 fi if ! qmd --version >/dev/null 2>&1; then echo "❌ qmd 安装后仍无法运行" return 1 fi OPENCLAW_MEMORY_QMD_PATH="$qmd_path" echo "✅ qmd 安装完成: $qmd_path" return 0 } openclaw_memory_render_auto_summary() { echo "---------------------------------------" echo "✅ 环境就绪" echo "方案: ${OPENCLAW_MEMORY_AUTO_SCHEME:-unknown}" if [ "$OPENCLAW_MEMORY_CONFIG_ONLY" = "true" ]; then echo "模式: 仅写配置（未安装/未下载）" fi if [ "$OPENCLAW_MEMORY_PREHEAT" = "true" ]; then echo "索引: 已执行" else echo "索引: 已跳过" fi if [ "$OPENCLAW_MEMORY_RESTARTED" = "true" ]; then echo "重启: 已执行" else echo "重启: 已跳过" fi if [ -n "$OPENCLAW_MEMORY_QMD_PATH" ]; then echo "qmd: $OPENCLAW_MEMORY_QMD_PATH" fi if [ -n "$OPENCLAW_MEMORY_MODEL_PATH" ]; then echo "模型: $OPENCLAW_MEMORY_MODEL_PATH" fi if [ -n "$OPENCLAW_MEMORY_COUNTRY" ]; then echo "地区: $OPENCLAW_MEMORY_COUNTRY" fi if [ -n "$OPENCLAW_MEMORY_HF_BASE" ]; then echo "下载源: $OPENCLAW_MEMORY_HF_BASE" fi echo "最终状态:" openclaw_memory_render_status echo "---------------------------------------" } openclaw_memory_auto_confirm() { local scheme_label="$1" OPENCLAW_MEMORY_PREHEAT="true" OPENCLAW_MEMORY_RESTARTED="false" OPENCLAW_MEMORY_CONFIG_ONLY="false" echo "即将执行自动部署（详细模式）" echo "目标方案: $scheme_label" echo "地区: ${OPENCLAW_MEMORY_COUNTRY:-unknown}" echo "镜像源探测: huggingface.co=${OPENCLAW_MEMORY_HF_OK:-unknown} hf-mirror.com=${OPENCLAW_MEMORY_MIRROR_OK:-unknown}" echo "下载源: ${OPENCLAW_MEMORY_HF_BASE:-unknown}" if [ -n "$OPENCLAW_MEMORY_EXPECT_PATH" ]; then echo "预计下载路径: $OPENCLAW_MEMORY_EXPECT_PATH" fi if [ -n "$OPENCLAW_MEMORY_EXPECT_SIZE" ]; then echo "可能流量/磁盘占用: $OPENCLAW_MEMORY_EXPECT_SIZE" else echo "可能流量/磁盘占用: 视实际情况而定" fi echo "确认后将自动安装/下载、写入配置、构建索引并重启网关" echo "高级选项: 输入 config 仅写配置（不安装不下载、不索引、不重启）" read -e -p "输入 yes 确认继续（默认 N）: " confirm_step case "$confirm_step" in yes|YES) OPENCLAW_MEMORY_PREHEAT="true" ;; config|CONFIG) OPENCLAW_MEMORY_CONFIG_ONLY="true" OPENCLAW_MEMORY_PREHEAT="false" ;; *) echo "已取消自动部署。" return 1 ;; esac if [ "$OPENCLAW_MEMORY_CONFIG_ONLY" = "true" ]; then echo "⚠️ 已选择仅写配置，不安装不下载" else echo "✅ 将自动构建索引并重启网关" fi return 0 } openclaw_memory_auto_setup_qmd() { echo "🔍 检测 QMD 环境" openclaw_memory_cleanup_legacy_keys openclaw_memory_check_sqlite || true if [ "$OPENCLAW_MEMORY_CONFIG_ONLY" = "true" ]; then if command -v qmd >/dev/null 2>&1; then OPENCLAW_MEMORY_QMD_PATH=$(command -v qmd) else OPENCLAW_MEMORY_QMD_PATH="qmd" fi else openclaw_memory_ensure_qmd || return 1 fi local backend backend=$(openclaw_memory_get_backend) if [ "$backend" = "qmd" ]; then echo "✅ memory.backend 已是 qmd" else openclaw_memory_config_set "memory.backend" "qmd" echo "✅ 已设置 memory.backend=qmd" fi local qmd_cmd qmd_cmd=$(openclaw_memory_config_get "memory.qmd.command") if [ -z "$qmd_cmd" ] || [[ "$qmd_cmd" != /* ]] || [ "$qmd_cmd" != "$OPENCLAW_MEMORY_QMD_PATH" ]; then openclaw_memory_config_set "memory.qmd.command" "$OPENCLAW_MEMORY_QMD_PATH" echo "✅ 已写入 memory.qmd.command: $OPENCLAW_MEMORY_QMD_PATH" else echo "✅ memory.qmd.command 已正确" fi if [ "$OPENCLAW_MEMORY_PREHEAT" = "true" ]; then echo "🔥 预热索引（可能下载模型）" openclaw_memory_prepare_workspace_all local preh_agent_lines preh_agent_id preh_workspace preh_agent_lines=$(openclaw_memory_list_agents) while IFS=$'\t' read -r preh_agent_id preh_workspace; do [ -z "$preh_agent_id" ] && continue openclaw memory index --agent "$preh_agent_id" --force done </dev/null 2>&1; then start_gateway else openclaw gateway restart fi OPENCLAW_MEMORY_RESTARTED="true" openclaw_memory_render_auto_summary return 0 } openclaw_memory_auto_setup_menu() { while true; do clear echo "=======================================" echo "记忆方案自动部署" echo "=======================================" echo "1. QMD" echo "2. Local" echo "3. Auto（自动选择）" echo "0. 返回上一级" echo "---------------------------------------" read -e -p "请输入你的选择: " auto_choice case "$auto_choice" in 1) openclaw_memory_auto_setup_run "qmd" break_end ;; 2) openclaw_memory_auto_setup_run "local" break_end ;; 3) openclaw_memory_auto_setup_run "auto" break_end ;; 0) return 0 ;; *) echo "无效的选择，请重试。" sleep 1 ;; esac done } openclaw_memory_apply_scheme() { local scheme="$1" openclaw_memory_cleanup_legacy_keys case "$scheme" in qmd) openclaw_memory_config_set "memory.backend" "qmd" if [ $? -ne 0 ]; then echo "❌ 写入配置失败" return 1 fi openclaw_memory_config_set "memory.qmd.command" "qmd" >/dev/null 2>&1 ;; local) openclaw_memory_config_set "memory.backend" "builtin" if [ $? -ne 0 ]; then echo "❌ 写入配置失败" return 1 fi openclaw_memory_config_set "agents.defaults.memorySearch.provider" "local" >/dev/null 2>&1 ;; *) echo "❌ 未知方案: $scheme" return 1 esac echo "✅ 已更新记忆方案配置" return 0 } openclaw_memory_offer_restart() { echo "配置已写入，需要重启 OpenClaw 网关后生效。" read -e -p "是否立即重启 OpenClaw 网关？(Y/n): " restart_choice if [[ "$restart_choice" =~ ^[Nn]$ ]]; then echo "已跳过重启，可稍后执行: openclaw gateway restart" return 0 fi if declare -F start_gateway >/dev/null 2>&1; then start_gateway else openclaw gateway restart fi } openclaw_memory_fix_index() { local backend include_dm backend=$(openclaw_memory_get_backend) if [ "$backend" = "qmd" ] && ! command -v qmd >/dev/null 2>&1; then echo "⚠️ 检测到当前方案为 QMD，但未安装 qmd 命令。" echo " 可切换 Local，或安装 bun + qmd 后再试。" fi include_dm=$(openclaw config get memory.qmd.includeDefaultMemory 2>/dev/null) echo "=======================================" echo "索引修复诊断" echo "=======================================" echo "当前 includeDefaultMemory: ${include_dm:-未设置}" echo "" if [ "$include_dm" = "false" ]; then echo "⚠️ 检测到 includeDefaultMemory=false" echo " 这会导致默认记忆文件（MEMORY.md + memory/*.md）不被索引" echo " 所以 Indexed 会一直显示 0/N" echo "" read -e -p "是否恢复为 true 并重建索引？(Y/n): " fix_choice if [[ ! "$fix_choice" =~ ^[Nn]$ ]]; then openclaw_memory_config_set "memory.qmd.includeDefaultMemory" true if [ $? -ne 0 ]; then echo "❌ 写入配置失败" break_end return 1 fi echo "✅ 已恢复 includeDefaultMemory=true" openclaw_memory_rebuild_index_all else echo "已取消。" fi else echo "includeDefaultMemory 配置正常。" echo "将执行：清理旧索引 → 全量重建所有智能体索引" echo "" read -e -p "确认执行？(Y/n): " confirm_fix if [[ ! "$confirm_fix" =~ ^[Nn]$ ]]; then openclaw_memory_rebuild_index_all else echo "已取消。" fi fi break_end } openclaw_memory_scheme_menu() { while true; do clear echo "=======================================" echo "OpenClaw 记忆方案" echo "=======================================" local backend current_label backend=$(openclaw_memory_get_backend) case "$backend" in qmd) current_label="QMD" ;; builtin|local) current_label="Local" ;; *) current_label="未配置" ;; esac echo "当前方案: $current_label" echo "" echo "QMD : 轻量索引，依赖 qmd 命令（适合网络受限）" echo "Local: 本地向量检索，依赖 embedding 模型文件" echo "Auto : 自动推荐（基于可用性 + 网络探测）" echo "---------------------------------------" echo "1. 切换 QMD（自动部署/已装则跳过）" echo "2. 切换 Local（自动部署/已装则跳过）" echo "3. Auto（自动推荐并自动部署）" echo "0. 返回上一级" echo "---------------------------------------" read -e -p "请输入你的选择: " scheme_choice case "$scheme_choice" in 1) openclaw_memory_auto_setup_run "qmd" break_end ;; 2) openclaw_memory_auto_setup_run "local" break_end ;; 3) openclaw_memory_auto_setup_run "auto" break_end ;; 0) return 0 ;; *) echo "无效的选择，请重试。" sleep 1 ;; esac done } openclaw_memory_file_collect() { OPENCLAW_MEMORY_FILES=() OPENCLAW_MEMORY_FILE_LABELS=() local agent_lines agent_id base_dir memory_dir memory_file rel agent_lines=$(openclaw_memory_list_agents) while IFS=$'\t' read -r agent_id base_dir; do [ -z "$agent_id" ] && continue memory_dir="$base_dir/memory" memory_file="$base_dir/MEMORY.md" if [ -f "$memory_file" ]; then OPENCLAW_MEMORY_FILES+=("$memory_file") OPENCLAW_MEMORY_FILE_LABELS+=("$agent_id/MEMORY.md") fi if [ -d "$memory_dir" ]; then while IFS= read -r file; do [ -f "$file" ] || continue rel="${file#$base_dir/}" OPENCLAW_MEMORY_FILES+=("$file") OPENCLAW_MEMORY_FILE_LABELS+=("$agent_id/$rel") done < <(find "$memory_dir" -type f -name '*.md' | sort) fi done </dev/null || stat -c %y "$file" | awk '{print $1" "$2}') printf "%s | %s | %s | %s\\n" "$((i+1))" "$rel" "$size" "$mtime" done } openclaw_memory_view_file() { local file="$1" [ -f "$file" ] || { echo "❌ 文件不存在: $file" return 1 } local total_lines total_lines=$(wc -l < "$file" 2>/dev/null || echo 0) local default_lines=120 local start_line count echo "文件: $file" echo "总行数: $total_lines" read -e -p "请输入起始行（回车默认末尾 $default_lines 行）: " start_line read -e -p "请输入显示行数（回车默认 $default_lines）: " count [ -z "$count" ] && count=$default_lines if [ -z "$start_line" ]; then if [ "$total_lines" -le "$count" ]; then start_line=1 else start_line=$((total_lines - count + 1)) fi fi if ! [[ "$start_line" =~ ^[0-9]+$ ]] || ! [[ "$count" =~ ^[0-9]+$ ]]; then echo "❌ 请输入有效的数字。" return 1 fi if [ "$start_line" -lt 1 ]; then start_line=1 fi if [ "$count" -le 0 ]; then echo "❌ 行数必须大于 0。" return 1 fi local end_line=$((start_line + count - 1)) if [ "$end_line" -gt "$total_lines" ]; then end_line=$total_lines fi if [ "$total_lines" -eq 0 ]; then echo "(空文件)" return 0 fi echo "---------------------------------------" sed -n "${start_line},${end_line}p" "$file" echo "---------------------------------------" } openclaw_memory_files_menu() { while true; do clear echo "=======================================" echo "OpenClaw 记忆文件" echo "=======================================" openclaw_memory_file_render_list echo "---------------------------------------" read -e -p "请输入文件编号查看（0 返回）: " file_choice if [ "$file_choice" = "0" ]; then return 0 fi if ! [[ "$file_choice" =~ ^[0-9]+$ ]]; then echo "无效的选择，请重试。" sleep 1 continue fi openclaw_memory_file_collect if [ ${#OPENCLAW_MEMORY_FILES[@]} -eq 0 ]; then read -p "未找到记忆文件，按回车返回..." return 0 fi local idx=$((file_choice-1)) if [ "$idx" -lt 0 ] || [ "$idx" -ge ${#OPENCLAW_MEMORY_FILES[@]} ]; then echo "无效的编号，请重试。" sleep 1 continue fi openclaw_memory_view_file "${OPENCLAW_MEMORY_FILES[$idx]}" read -p "按回车返回列表..." done } openclaw_memory_search_test() { read -e -p "输入搜索关键词: " query if [ -z "$query" ]; then echo "关键词不能为空。" return 1 fi echo "正在搜索记忆..." openclaw memory search "$query" --max-results 5 } openclaw_memory_deep_status() { echo "正在探测嵌入模型就绪状态..." openclaw memory status --deep } openclaw_memory_menu() { send_stats "OpenClaw记忆管理" while true; do clear echo "=======================================" echo "OpenClaw 记忆管理" echo "=======================================" openclaw_memory_render_status echo "1. 更新记忆索引" echo "2. 查看记忆文件" echo "3. 索引修复（Indexed 异常）" echo "4. 记忆方案（QMD/Local/Auto）" echo "5. 搜索测试（验证索引是否工作）" echo "6. 深度状态探测（检查嵌入模型）" echo "0. 返回上一级" echo "---------------------------------------" read -e -p "请输入你的选择: " memory_choice case "$memory_choice" in 1) echo "即将更新记忆索引。" read -e -p "第一次确认：输入 yes 继续: " confirm_step1 if [ "$confirm_step1" != "yes" ]; then echo "已取消。" break_end continue fi openclaw_memory_prepare_workspace_all read -e -p "二次确认：输入 force 使用全量（留空为增量）: " confirm_step2 if [ "$confirm_step2" = "force" ]; then echo "⚠️ 全量重建更彻底，但耗时更长。" echo "推荐：输入 rebuild 进行安全重建（先备份索引库）。" read -e -p "第三次确认：输入 rebuild 执行安全重建；直接回车继续普通 force: " confirm_step3 if [ "$confirm_step3" = "rebuild" ]; then openclaw_memory_rebuild_index_all else local fl_agent_lines fl_agent_id fl_workspace fl_agent_lines=$(openclaw_memory_list_agents) while IFS=$'\t' read -r fl_agent_id fl_workspace; do [ -z "$fl_agent_id" ] && continue openclaw memory index --agent "$fl_agent_id" --force done </dev/null 2>&1 || { echo "⚠️ 权限备份失败：$backup_file" return 1 } echo "✅ 已备份当前权限配置: $backup_file" return 0 } openclaw_permission_restore_backup() { local config_file backup_file config_file=$(openclaw_permission_config_file) backup_file=$(openclaw_permission_backup_file) if [ ! -s "$backup_file" ]; then echo "❌ 未找到可恢复的权限备份文件。" return 1 fi cp -f "$backup_file" "$config_file" >/dev/null 2>&1 || { echo "❌ 权限恢复失败：$backup_file" return 1 } echo "✅ 已恢复切换前权限配置" openclaw_permission_restart_gateway || true return 0 } openclaw_permission_restart_gateway() { if ! openclaw_has_command openclaw; then echo "❌ 未检测到 openclaw，无法重启 OpenClaw Gateway。" return 1 fi echo "正在重启 OpenClaw Gateway..." openclaw gateway restart >/dev/null 2>&1 || { openclaw gateway stop >/dev/null 2>&1 openclaw gateway start >/dev/null 2>&1 } } openclaw_permission_get_value() { local path="$1" local config_file config_file=$(openclaw_permission_config_file) if openclaw_has_command openclaw; then local value value=$(openclaw config get "$path" 2>&1 | head -n 1) if [ -n "$value" ]; then if echo "$value" | grep -qi "config path not found"; then echo "(unset)" return 0 fi if [ "$value" = "null" ]; then echo "(unset)" else if echo "$value" | grep -q '^".*"$'; then value=$(echo "$value" | sed -e 's/^"//' -e 's/"$//') fi echo "$value" fi return 0 fi fi [ -f "$config_file" ] || { echo "(unset)"; return 0; } if openclaw_has_command jq; then local jq_value jq_value=$(jq -r --arg p "$path" 'getpath($p|split(".")) // "(unset)"' "$config_file" 2>/dev/null) || jq_value="(unset)" [ "$jq_value" = "null" ] && jq_value="(unset)" echo "$jq_value" return 0 fi if openclaw_has_command python3; then python3 - "$config_file" "$path" <<'PY' import json, sys path = sys.argv[2] with open(sys.argv[1], 'r', encoding='utf-8') as f: obj = json.load(f) cur = obj for part in path.split('.'): if isinstance(cur, dict) and part in cur: cur = cur[part] else: print('(unset)') raise SystemExit(0) if isinstance(cur, bool): print('true' if cur else 'false') elif cur is None: print('(unset)') else: print(json.dumps(cur, ensure_ascii=False) if isinstance(cur, (dict, list)) else str(cur)) PY return 0 fi echo "(unset)" return 0 } openclaw_permission_unset_optional() { local key="$1" local probe if ! openclaw_has_command openclaw; then return 1 fi if openclaw config unset "$key" >/dev/null 2>&1; then return 0 fi probe=$(openclaw config get "$key" 2>&1 | head -n 1) if [ -z "$probe" ] || [ "$probe" = "null" ] || [ "$probe" = "(unset)" ] || echo "$probe" | grep -qi "config path not found"; then return 0 fi return 1 } openclaw_permission_detect_mode() { local config_file config_file=$(openclaw_permission_config_file) [ ! -f "$config_file" ] && { echo "未知模式"; return; } python3 - "$config_file" <<'PY' import json, sys def get_v(o, p): for k in p.split('.'): if isinstance(o, dict) and k in o: o = o[k] else: return "(unset)" return str(o).lower() try: with open(sys.argv[1], 'r', encoding='utf-8') as f: d = json.load(f) p = get_v(d, "tools.profile") s = get_v(d, "tools.exec.security") a = get_v(d, "tools.exec.ask") e = get_v(d, "tools.elevated.enabled") b = get_v(d, "commands.bash") ap = get_v(d, "tools.exec.applyPatch.enabled") w = get_v(d, "tools.exec.applyPatch.workspaceOnly") if p == "coding" and s == "allowlist" and a == "on-miss" and e == "false" and b == "false" and ap == "false": print("标准安全模式") elif p == "coding" and s == "allowlist" and a == "on-miss" and e == "true" and b == "true" and ap == "true" and w == "true": print("开发增强模式") elif (p == "full" or p == "(unset)") and s == "full" and a == "off" and e == "true" and b == "true" and ap == "true": print("完全开放模式") else: print("自定义模式") except Exception: print("自定义模式") PY } openclaw_permission_update_exec_approvals() { local sec="$1" local ask="$2" local fallback="$3" local approvals_file="$HOME/.openclaw/exec-approvals.json" mkdir -p "$HOME/.openclaw" # 生成 JSON 并通过 openclaw approvals set --stdin 写入（优先） # 若 CLI 不支持则回退直接写文件 local json_payload json_payload=$(python3 -c ' import json, sys, os path = sys.argv[1] try: if os.path.exists(path): with open(path, "r") as f: data = json.load(f) else: data = {"version": 1, "defaults": {}} except Exception: data = {"version": 1, "defaults": {}} if "defaults" not in data: data["defaults"] = {} data["defaults"]["security"] = sys.argv[2] data["defaults"]["ask"] = sys.argv[3] data["defaults"]["askFallback"] = sys.argv[4] data["defaults"]["autoAllowSkills"] = True print(json.dumps(data, indent=2)) ' "$approvals_file" "$sec" "$ask" "$fallback") if openclaw_has_command openclaw && echo "$json_payload" | openclaw approvals set --stdin >/dev/null 2>&1; then return 0 fi # 回退：直接写文件 echo "$json_payload" > "$approvals_file" } openclaw_permission_render_status() { echo "应用层配置: ~/.openclaw/openclaw.json" echo "宿主机审批: ~/.openclaw/exec-approvals.json" echo "---------------------------------------" local current_profile current_sec current_ask current_elevated current_profile=$(openclaw config get tools.profile 2>/dev/null | head -n 1 | sed 's/^"//;s/"$//') current_sec=$(openclaw config get tools.exec.security 2>/dev/null | head -n 1 | sed 's/^"//;s/"$//') current_ask=$(openclaw config get tools.exec.ask 2>/dev/null | head -n 1 | sed 's/^"//;s/"$//') current_elevated=$(openclaw config get tools.elevated.enabled 2>/dev/null | head -n 1 | sed 's/^"//;s/"$//') # 清理空值 [ -z "$current_profile" ] || echo "$current_profile" | grep -qi "config path not found" && current_profile="" [ -z "$current_sec" ] || echo "$current_sec" | grep -qi "config path not found" && current_sec="" [ -z "$current_ask" ] || echo "$current_ask" | grep -qi "config path not found" && current_ask="" [ -z "$current_elevated" ] || echo "$current_elevated" | grep -qi "config path not found" && current_elevated="" local current_mode="未知 / 自定义" if [ "$current_profile" = "full" ] && [ "$current_sec" = "full" ] && [ "$current_ask" = "off" ]; then current_mode="\033[1;31m完全开放模式\033[0m" elif [ "$current_profile" = "coding" ] && [ "$current_sec" = "allowlist" ] && [ "$current_ask" = "on-miss" ] && [ "$current_elevated" = "true" ]; then current_mode="\033[1;33m开发增强模式\033[0m" elif [ "$current_profile" = "coding" ] && [ "$current_sec" = "allowlist" ] && [ "$current_ask" = "on-miss" ] && [ "$current_elevated" != "true" ]; then current_mode="\033[1;32m标准安全模式\033[0m" elif [ -z "$current_profile" ] && [ -z "$current_sec" ]; then current_mode="\033[1;36m官方沙盒兜底\033[0m" fi echo -e " 当前综合安全等级: ${current_mode}" echo "---------------------------------------" echo -e "${gl_huang}[应用层 Tool Policy 状态]${gl_bai}" echo " Profile (预设): ${current_profile:-(unset)}" echo " Exec 限制: ${current_sec:-(unset)}" echo " 审批提示: ${current_ask:-(unset)}" echo " 提权开关: ${current_elevated:-(unset)}" echo -e "\n${gl_huang}[底层 Exec Approvals 状态]${gl_bai}" if openclaw_has_command openclaw; then local approvals_json approvals_json=$(openclaw approvals get --json 2>/dev/null) if [ -n "$approvals_json" ]; then python3 -c ' import json, sys try: d = json.loads(sys.argv[1]) defaults = d.get("file", {}).get("defaults", {}) if not defaults: defaults = d.get("defaults", {}) sec = defaults.get("security", "(unset)") ask = defaults.get("ask", "(unset)") fb = defaults.get("askFallback", "(unset)") auto = defaults.get("autoAllowSkills", False) print(" 拦截策略 (Security): " + str(sec)) print(" 提示策略 (Ask): " + str(ask)) print(" 无UI兜底 (AskFallback): " + str(fb)) print(" 自动放行技能 (autoAllowSkills): " + ("on" if auto else "off")) exists = d.get("exists", True) if not exists: print(" (审批文件不存在，使用系统内置安全兜底)") except Exception as e: print(" (解析失败: " + str(e) + ")") ' "$approvals_json" else echo " (openclaw approvals get --json 无输出)" fi elif [ -f "$HOME/.openclaw/exec-approvals.json" ]; then python3 -c ' import json, os path = os.path.expanduser("~/.openclaw/exec-approvals.json") try: with open(path) as f: d = json.load(f).get("defaults", {}) print(" 拦截策略 (Security): " + str(d.get("security", "(unset)"))) print(" 提示策略 (Ask): " + str(d.get("ask", "(unset)"))) print(" 无UI兜底 (AskFallback): " + str(d.get("askFallback", "(unset)"))) except Exception: print(" (配置文件解析失败)") ' else echo " (未配置，强制使用系统内置安全兜底策略)" fi } openclaw_permission_apply_standard() { send_stats "OpenClaw权限-标准安全模式" openclaw_permission_require_openclaw || return 1 echo "正在配置应用层策略..." openclaw config set tools.profile coding >/dev/null 2>&1 openclaw config set tools.exec.security allowlist >/dev/null 2>&1 openclaw config set tools.exec.ask on-miss >/dev/null 2>&1 openclaw config set tools.elevated.enabled false >/dev/null 2>&1 openclaw config set tools.exec.strictInlineEval true >/dev/null 2>&1 # 拦截危险的内联代码 openclaw config unset commands.bash >/dev/null 2>&1 # 废弃旧版参数 echo "正在配置宿主机审批拦截..." openclaw_permission_update_exec_approvals "allowlist" "on-miss" "deny" openclaw_permission_restart_gateway echo -e "${gl_lv}✅ 已切换为标准安全模式 (所有危险命令将通过UI/TG请求你的审批)${gl_bai}" } openclaw_permission_apply_developer() { send_stats "OpenClaw权限-开发增强模式" openclaw_permission_require_openclaw || return 1 echo "正在配置应用层策略..." openclaw config set tools.profile coding >/dev/null 2>&1 openclaw config set tools.exec.security allowlist >/dev/null 2>&1 openclaw config set tools.exec.ask on-miss >/dev/null 2>&1 openclaw config set tools.elevated.enabled true >/dev/null 2>&1 # 允许智能体申请提权 openclaw config set tools.exec.strictInlineEval false >/dev/null 2>&1 echo "正在配置宿主机审批拦截..." openclaw_permission_update_exec_approvals "allowlist" "on-miss" "deny" openclaw_permission_restart_gateway echo -e "${gl_lv}✅ 已切换为开发增强模式 (允许提权，但常规危险命令依然需要审批)${gl_bai}" } openclaw_permission_apply_full() { send_stats "OpenClaw权限-完全开放模式" openclaw_permission_require_openclaw || return 1 echo "正在配置应用层策略..." openclaw config set tools.profile full >/dev/null 2>&1 openclaw config set tools.exec.security full >/dev/null 2>&1 openclaw config set tools.exec.ask off >/dev/null 2>&1 openclaw config set tools.elevated.enabled true >/dev/null 2>&1 openclaw config set tools.exec.strictInlineEval false >/dev/null 2>&1 echo "正在瓦解宿主机拦截防御..." # 这里的 full 和 off 将彻底绕过底层宿主机的 exec 审批系统 openclaw_permission_update_exec_approvals "full" "off" "full" openclaw_permission_restart_gateway echo -e "${gl_lv}✅ 已切换为完全开放模式 (警告：所有宿主机命令拦截已失效，智能体具有最高权限)${gl_bai}" } openclaw_permission_restore_official_defaults() { send_stats "OpenClaw权限-恢复官方默认" openclaw_permission_require_openclaw || return 1 echo "清理应用层强制覆盖..." openclaw config unset tools.profile >/dev/null 2>&1 openclaw config unset tools.exec.security >/dev/null 2>&1 openclaw config unset tools.exec.ask >/dev/null 2>&1 openclaw config unset tools.elevated.enabled >/dev/null 2>&1 openclaw config unset tools.exec.strictInlineEval >/dev/null 2>&1 echo "清理宿主机拦截配置..." # 优先通过 CLI 清空审批配置，回退直接删文件 if echo '{"version":1,"defaults":{}}' | openclaw approvals set --stdin >/dev/null 2>&1; then true else rm -f "$HOME/.openclaw/exec-approvals.json" fi openclaw_permission_restart_gateway echo -e "${gl_lv}✅ 已恢复到 OpenClaw 官方安全沙盒防御机制${gl_bai}" } openclaw_permission_run_audit() { echo "=======================================" echo "运行 OpenClaw 官方安全审计与体检..." echo "=======================================" openclaw security audit echo "---------------------------------------" read -e -p "是否尝试自动修复发现的安全隐患？(y/n): " fix_choice if [[ "$fix_choice" == "y" || "$fix_choice" == "Y" || "$fix_choice" == "yes" ]]; then openclaw security audit --fix echo -e "${gl_lv}✅ 自动修复完成。${gl_bai}" fi echo "按任意键返回..." read -n 1 -s } openclaw_permission_manage_allowlist() { while true; do clear echo "=======================================" echo " Exec 命令白名单管理" echo "=======================================" echo "当前白名单：" local allowlist_json allowlist_json=$(openclaw approvals get --json 2>/dev/null) if [ -n "$allowlist_json" ]; then python3 -c ' import json, sys try: d = json.loads(sys.argv[1]) f = d.get("file", {}) agents = f.get("agents", {}) found = False for agent_id, agent_data in agents.items(): al = agent_data.get("allowlist", []) if al: found = True print(" 智能体 [%s]:" % agent_id) for item in al: print(" - %s" % item) if not found: print(" (空，未配置任何白名单规则)") except Exception as e: print(" (解析失败: " + str(e) + ")") ' "$allowlist_json" else echo " (无法获取)" fi echo "---------------------------------------" echo "1. 添加白名单规则" echo "2. 移除白名单规则" echo "0. 返回" echo "---------------------------------------" read -e -p "请选择: " al_choice case "$al_choice" in 1) read -e -p "输入要放行的命令路径 (支持 glob，如 /usr/bin/git): " pattern [ -z "$pattern" ] && { echo "不能为空"; break_end; continue; } read -e -p "指定智能体ID (留空=所有智能体 *): " agent_id agent_id="${agent_id:-*}" openclaw approvals allowlist add --agent "$agent_id" "$pattern" break_end ;; 2) read -e -p "输入要移除的命令路径: " pattern [ -z "$pattern" ] && { echo "不能为空"; break_end; continue; } openclaw approvals allowlist remove "$pattern" break_end ;; 0) return 0 ;; *) echo "无效选择"; sleep 1 ;; esac done } openclaw_permission_menu() { send_stats "OpenClaw权限管理" while true; do clear echo "=======================================" echo " OpenClaw 权限管理 (双层架构深度适配)" echo "=======================================" openclaw_permission_render_status echo "---------------------------------------" echo -e "${gl_kjlan}1.${gl_bai} 切换为标准安全模式（日常推荐，弹卡片审批）" echo -e "${gl_kjlan}2.${gl_bai} 切换为开发增强模式（允许智能体申请提权）" echo -e "${gl_kjlan}3.${gl_bai} 切换为完全开放模式（${gl_hong}高风险！彻底解除所有宿主机拦截${gl_bai}）" echo -e "${gl_kjlan}4.${gl_bai} 恢复官方默认沙盒防御策略" echo -e "${gl_kjlan}5.${gl_bai} 运行底层安全审计与自动修复" echo -e "${gl_kjlan}6.${gl_bai} 管理 Exec 命令白名单" echo -e "${gl_kjlan}0.${gl_bai} 返回上一级" echo "---------------------------------------" read -e -p "请输入你的选择: " perm_choice case "$perm_choice" in 1) echo "准备应用：标准安全模式" read -e -p "输入 yes 确认: " confirm if [ "$confirm" = "yes" ]; then openclaw_permission_apply_standard; else echo "已取消"; fi break_end ;; 2) echo "准备应用：开发增强模式" read -e -p "输入 yes 确认: " confirm if [ "$confirm" = "yes" ]; then openclaw_permission_apply_developer; else echo "已取消"; fi break_end ;; 3) echo -e "${gl_hong}⚠️ 完全开放模式会彻底瓦解 exec 审批并自动放行高危代码。${gl_bai}" read -e -p "输入 FULL 确认继续: " confirm if [ "$confirm" = "FULL" ]; then openclaw_permission_apply_full; else echo "已取消"; fi break_end ;; 4) echo "将清除所有定制覆盖，恢复 OpenClaw 刚安装时的严格沙盒状态。" read -e -p "输入 yes 确认: " confirm if [ "$confirm" = "yes" ]; then openclaw_permission_restore_official_defaults; else echo "已取消"; fi break_end ;; 5) openclaw_permission_run_audit ;; 6) openclaw_permission_manage_allowlist ;; 0) return 0 ;; *) echo "无效的选择，请重试。" sleep 1 ;; esac done } openclaw_multiagent_config_file() { local config_file config_file=$(openclaw_permission_config_file) if [ -s "$config_file" ]; then echo "$config_file" return 0 fi openclaw config file 2>/dev/null | tail -n 1 } openclaw_multiagent_default_agent() { local config_file config_file=$(openclaw_permission_config_file) if [ -s "$config_file" ]; then python3 - "$config_file" <<'PY' import json,sys,os path=sys.argv[1] value="(unset)" try: with open(path) as f: data=json.load(f) defaults=data.get("agents",{}).get("defaults",{}) if isinstance(data,dict) else {} value=defaults.get("agent") or None if not value: for item in data.get("agents",{}).get("list",[]) or []: if isinstance(item,dict) and (item.get("isDefault") or item.get("default")): value=item.get("id") break if not value: for item in data.get("agents",{}).get("list",[]) or []: if isinstance(item,dict) and item.get("id"): value=item.get("id") break except Exception: value="(unset)" print(value or "(unset)") PY return 0 fi local value value=$(openclaw config get agents.defaults.agent 2>&1 | head -n 1) if [ -z "$value" ] || echo "$value" | grep -qi "config path not found"; then value=$(openclaw agents list --json 2>/dev/null | python3 -c 'import json,sys try: data=json.load(sys.stdin) print(next((x.get("id","(unset)") for x in data if x.get("isDefault")), "(unset)")) except Exception: print("(unset)")' 2>/dev/null) fi [ -z "$value" ] && value="(unset)" if echo "$value" | grep -q '^".*"$'; then value=$(echo "$value" | sed -e 's/^"//' -e 's/"$//') fi echo "$value" } openclaw_multiagent_require_openclaw() { if ! openclaw_has_command openclaw; then echo "❌ 未检测到 openclaw 命令，请先安装或初始化 OpenClaw。" return 1 fi return 0 } openclaw_multiagent_agents_json() { local result if openclaw_has_command openclaw; then result=$(openclaw agents list --json 2>/dev/null) if [ -n "$result" ] && python3 -c "import json,sys; json.loads(sys.argv[1])" "$result" 2>/dev/null; then echo "$result" return 0 fi fi # 回退：从配置文件读取 local config_file config_file=$(openclaw_permission_config_file) if [ -s "$config_file" ]; then python3 - "$config_file" <<'PY' import json,sys,os path=sys.argv[1] try: with open(path) as f: data=json.load(f) agents=data.get("agents",{}).get("list",[]) if not isinstance(agents,list): agents=[] print(json.dumps(agents, ensure_ascii=False)) except Exception: print("[]") PY return 0 fi echo '[]' } openclaw_multiagent_bindings_json() { local result if openclaw_has_command openclaw; then result=$(openclaw agents bindings --json 2>/dev/null) if [ -n "$result" ] && python3 -c "import json,sys; json.loads(sys.argv[1])" "$result" 2>/dev/null; then echo "$result" return 0 fi fi # 回退：从配置文件读取 local config_file config_file=$(openclaw_permission_config_file) if [ -s "$config_file" ]; then python3 - "$config_file" <<'PY' import json,sys path=sys.argv[1] try: with open(path) as f: data=json.load(f) bindings=data.get("agents",{}).get("bindings",[]) if not isinstance(bindings,list): bindings=[] results=[] for item in bindings: if not isinstance(item,dict): continue results.append({"agentId": item.get("agentId") or item.get("agent") or "?", "description": item.get("description") or "-"}) print(json.dumps(results, ensure_ascii=False)) except Exception: print("[]") PY return 0 fi echo '[]' } openclaw_multiagent_sessions_json() { local result if openclaw_has_command openclaw; then result=$(openclaw sessions --json 2>/dev/null | grep -v '^\[') if [ -n "$result" ] && python3 -c "import json,sys; json.loads(sys.argv[1])" "$result" 2>/dev/null; then echo "$result" return 0 fi fi # 回退：从文件系统读取 python3 <<'PY' import json,os base=os.path.expanduser("~/.openclaw/agents") sessions=[] try: agent_dirs=[d for d in os.listdir(base) if os.path.isdir(os.path.join(base,d))] except Exception: agent_dirs=[] for agent_id in agent_dirs: path=os.path.join(base,agent_id,"sessions","sessions.json") if not os.path.exists(path): continue try: with open(path) as f: data=json.load(f) except Exception: continue if isinstance(data,dict): items=data.items() elif isinstance(data,list): items=[(item.get("key") or "?", item) for item in data if isinstance(item,dict)] else: continue for key,item in items: if not isinstance(item,dict): continue model=item.get("model") or "-" sessions.append({"agentId": agent_id, "key": key, "model": model}) print(json.dumps({"path":"(filesystem)","count":len(sessions),"sessions":sessions}, ensure_ascii=False)) PY } openclaw_multiagent_render_status() { local config_file default_agent config_file=$(openclaw_multiagent_config_file) default_agent=$(openclaw_multiagent_default_agent) echo "配置文件: ${config_file:-$(openclaw_permission_config_file)}" echo "默认智能体: $default_agent" python3 -c ' import json,sys agents=json.loads(sys.argv[1] or "[]") bindings=json.loads(sys.argv[2] or "[]") sess_obj=json.loads(sys.argv[3] or "{}") sessions=sess_obj.get("sessions",[]) if isinstance(sess_obj,dict) else [] print("已配置智能体数: %s" % len(agents)) print("路由绑定数: %s" % len(bindings)) print("会话总数: %s" % len(sessions)) print("---------------------------------------") if not agents: print("当前未配置任何多智能体。") else: for item in agents[:8]: aid = item.get("id","?") identity = item.get("identityName") or item.get("name") or "-" emoji = item.get("identityEmoji") or "" ws = item.get("workspace") or "-" model = item.get("model") or "-" is_default = item.get("isDefault", False) bcount = item.get("bindings", 0) default_tag = " [默认]" if is_default else "" print("- 智能体ID: \033[1;36m%s\033[0m%s" % (aid, default_tag)) print(" 身份名称: %s %s" % (identity, emoji)) print(" 模型: %s" % model) print(" 工作目录: %s" % ws) print(" 绑定数: %s" % bcount) ' "$(openclaw_multiagent_agents_json)" "$(openclaw_multiagent_bindings_json)" "$(openclaw_multiagent_sessions_json)" } openclaw_multiagent_list_agents() { send_stats "OpenClaw多智能体-列出Agent" python3 -c 'import json,sys; agents=json.loads(sys.argv[1] or "[]"); if not agents: print("暂无已配置 Agent。"); raise SystemExit(0) for idx,item in enumerate(agents,1): print("%s. %s" % (idx, item.get("id","?"))); print(" workspace : %s" % item.get("workspace","-")); ident=(item.get("identityName") or "-") + ((" " + item.get("identityEmoji")) if item.get("identityEmoji") else ""); print(" identity : %s" % ident.strip()); print(" model : %s" % (item.get("model") or "-")); print(" bindings : %s" % item.get("bindings",0)); print(" default : %s" % ("yes" if item.get("isDefault") else "no"))' "$(openclaw_multiagent_agents_json)" } openclaw_multiagent_add_agent() { send_stats "OpenClaw多智能体-新增Agent" openclaw_multiagent_require_openclaw || return 1 local agent_id workspace confirm read -e -p "请输入新的 Agent ID: " agent_id [ -z "$agent_id" ] && echo "已取消：Agent ID 不能为空。" && return 1 read -e -p "请输入 workspace 路径（默认 ~/.openclaw/workspace-${agent_id}）: " workspace [ -z "$workspace" ] && workspace="~/.openclaw/workspace-${agent_id}" echo "将创建智能体: $agent_id" echo "工作目录: $workspace" read -e -p "输入 yes 确认继续: " confirm [ "$confirm" = "yes" ] || { echo "已取消"; return 1; } if openclaw agents add "$agent_id" --workspace "$workspace"; then echo "✅ 智能体创建成功: $agent_id" local name theme read -e -p "请输入智能体身份名称 (如: 代码专家): " name [ -z "$name" ] && name="$agent_id" read -e -p "请输入智能体性格主题 (如: 严谨、高效): " theme [ -z "$theme" ] && theme="助手" echo "正在配置智能体身份..." openclaw agents set-identity --agent "$agent_id" --name "$name" --theme "$theme" else echo "❌ 智能体创建失败" return 1 fi } openclaw_multiagent_delete_agent() { send_stats "OpenClaw多智能体-删除Agent" openclaw_multiagent_require_openclaw || return 1 local agent_id confirm read -e -p "请输入要删除的 Agent ID: " agent_id [ -z "$agent_id" ] && echo "已取消：Agent ID 不能为空。" && return 1 echo "⚠️ 删除智能体可能影响其工作目录、路由绑定与会话路由。" read -e -p "输入 DELETE 确认删除 ${agent_id}: " confirm [ "$confirm" = "DELETE" ] || { echo "已取消"; return 1; } if openclaw agents delete "$agent_id"; then echo "✅ 智能体删除成功: $agent_id" else echo "❌ 智能体删除失败" return 1 fi } openclaw_multiagent_list_bindings() { send_stats "OpenClaw多智能体-查看路由绑定" python3 -c ' import json,sys bindings=json.loads(sys.argv[1] or "[]") if not bindings: print("暂无路由绑定。") raise SystemExit(0) for idx,item in enumerate(bindings,1): desc = item.get("description") or "-" print("%s. agent=%s | %s" % (idx, item.get("agentId","?"), desc)) ' "$(openclaw_multiagent_bindings_json)" } openclaw_multiagent_add_binding() { send_stats "OpenClaw多智能体-新增路由绑定" openclaw_multiagent_require_openclaw || return 1 local agent_id bind_value confirm read -e -p "请输入智能体 ID: " agent_id read -e -p "请输入路由绑定值（如 telegram:ops / discord:guild-a）: " bind_value { [ -z "$agent_id" ] || [ -z "$bind_value" ]; } && echo "已取消：参数不能为空。" && return 1 echo "将绑定智能体 [$agent_id] -> [$bind_value]" read -e -p "输入 yes 确认继续: " confirm [ "$confirm" = "yes" ] || { echo "已取消"; return 1; } if openclaw agents bind --agent "$agent_id" --bind "$bind_value"; then echo "✅ 路由绑定添加成功" else echo "❌ 路由绑定添加失败" return 1 fi } openclaw_multiagent_remove_binding() { send_stats "OpenClaw多智能体-移除路由绑定" openclaw_multiagent_require_openclaw || return 1 local agent_id bind_value confirm read -e -p "请输入智能体 ID: " agent_id read -e -p "请输入要移除的路由绑定值: " bind_value { [ -z "$agent_id" ] || [ -z "$bind_value" ]; } && echo "已取消：参数不能为空。" && return 1 echo "将移除智能体 [$agent_id] 的路由绑定 [$bind_value]" read -e -p "输入 yes 确认继续: " confirm [ "$confirm" = "yes" ] || { echo "已取消"; return 1; } if openclaw agents unbind --agent "$agent_id" --bind "$bind_value"; then echo "✅ 路由绑定移除成功" else echo "❌ 路由绑定移除失败" return 1 fi } openclaw_multiagent_show_sessions() { send_stats "OpenClaw多智能体-会话概况" python3 -c ' import json,sys sess_obj=json.loads(sys.argv[1] or "{}") sessions=sess_obj.get("sessions",[]) if isinstance(sess_obj,dict) else [] if not sessions: print("暂无 session 数据。") raise SystemExit(0) by_agent={} for item in sessions: aid = item.get("agentId","?") by_agent[aid] = by_agent.get(aid, 0) + 1 print("会话汇总:") for agent_id,count in sorted(by_agent.items()): print("- %s: %s" % (agent_id, count)) print("---------------------------------------") for item in sessions[:10]: key = item.get("key","-") model = item.get("model") or "-" aid = item.get("agentId","?") tokens = "" it = item.get("inputTokens") ot = item.get("outputTokens") if it is not None: tokens = " | in=%s out=%s" % (it, ot or 0) print("%s | %s | %s%s" % (aid, key, model, tokens)) ' "$(openclaw_multiagent_sessions_json)" } openclaw_multiagent_health_check() { send_stats "OpenClaw多智能体-健康检查" openclaw_multiagent_require_openclaw || return 1 local config_file config_file=$(openclaw_multiagent_config_file) echo "检查配置文件: ${config_file:-$(openclaw_permission_config_file)}" openclaw config validate || echo "⚠️ 配置校验未通过，请检查上方输出。" python3 -c ' import json,sys,os agents=json.loads(sys.argv[1] or "[]") bindings=json.loads(sys.argv[2] or "[]") print("---------------------------------------") if not agents: print("⚠️ 未发现已配置智能体。") else: for item in agents: ws = item.get("workspace") or "" aid = item.get("id","?") if ws and os.path.isdir(os.path.expanduser(ws)): state = "OK" elif aid == "main": state = "OK" else: state = "MISSING" model = item.get("model") or "-" bcount = item.get("bindings", 0) print("agent=%s workspace=%s model=%s bindings=%s [%s]" % (aid, ws or "-", model, bcount, state)) print("路由绑定数=%s" % len(bindings)) print("✅ 多智能体健康检查完成") ' "$(openclaw_multiagent_agents_json)" "$(openclaw_multiagent_bindings_json)" echo "" echo "运行安全审计..." openclaw security audit 2>/dev/null || echo "⚠️ 安全审计命令不可用" } openclaw_multiagent_set_identity() { openclaw_multiagent_require_openclaw || return 1 openclaw_multiagent_list_agents read -e -p "输入要修改身份的智能体ID: " agent_id [ -z "$agent_id" ] && { echo "ID 不能为空"; return 1; } echo "修改选项（留空跳过）：" read -e -p " 新名称: " new_name read -e -p " 新 Emoji: " new_emoji local cmd="openclaw agents set-identity --agent $agent_id" [ -n "$new_name" ] && cmd="$cmd --name $new_name" [ -n "$new_emoji" ] && cmd="$cmd --emoji $new_emoji" echo "也可以从 IDENTITY.md 自动读取身份信息。" read -e -p "是否从 IDENTITY.md 读取？(y/n): " from_id if [ "$from_id" = "y" ]; then cmd="openclaw agents set-identity --agent $agent_id --from-identity" fi eval "$cmd" } openclaw_multiagent_cleanup_sessions() { openclaw_multiagent_require_openclaw || return 1 echo "即将清理过期/冗余会话数据..." read -e -p "输入 yes 确认: " confirm [ "$confirm" != "yes" ] && { echo "已取消"; return 0; } openclaw sessions cleanup } openclaw_multiagent_menu() { send_stats "OpenClaw多智能体管理" while true; do clear echo "=======================================" echo "OpenClaw 多智能体管理" echo "=======================================" openclaw_multiagent_render_status echo "---------------------------------------" echo "1. 新增智能体" echo "2. 删除智能体" echo "3. 查看路由绑定" echo "4. 新增路由绑定" echo "5. 移除路由绑定" echo "6. 查看会话概况" echo "7. 运行多智能体健康检查" echo "8. 修改智能体身份（名称/Emoji）" echo "9. 清理过期会话" echo "0. 返回上一级" echo "---------------------------------------" read -e -p "请输入你的选择: " multi_choice case "$multi_choice" in 1) openclaw_multiagent_add_agent; break_end ;; 2) openclaw_multiagent_delete_agent; break_end ;; 3) openclaw_multiagent_list_bindings; break_end ;; 4) openclaw_multiagent_add_binding; break_end ;; 5) openclaw_multiagent_remove_binding; break_end ;; 6) openclaw_multiagent_show_sessions; break_end ;; 7) openclaw_multiagent_health_check; break_end ;; 8) openclaw_multiagent_set_identity; break_end ;; 9) openclaw_multiagent_cleanup_sessions; break_end ;; 0) return 0 ;; *) echo "无效的选择，请重试。"; sleep 1 ;; esac done } openclaw_backup_restore_menu() { send_stats "OpenClaw备份与还原" while true; do clear echo "=======================================" echo "OpenClaw 备份与还原" echo "=======================================" openclaw_backup_render_file_list echo "---------------------------------------" echo "1. 备份记忆全量" echo "2. 还原记忆全量" echo "3. 备份 OpenClaw 项目（默认安全模式）" echo "4. 还原 OpenClaw 项目（高级/高风险）" echo "5. 删除备份文件" echo "0. 返回上一级" echo "---------------------------------------" read -e -p "请输入你的选择: " backup_choice case "$backup_choice" in 1) openclaw_memory_backup_export ;; 2) openclaw_memory_backup_import ;; 3) openclaw_project_backup_export ;; 4) openclaw_project_backup_import ;; 5) openclaw_backup_delete_file ;; 0) return 0 ;; *) echo "无效的选择，请重试。" sleep 1 ;; esac done } update_moltbot() { echo "更新 OpenClaw..." send_stats "更新 OpenClaw..." install_node_and_tools git config --global url."${gh_proxy}github.com/".insteadOf ssh://git@github.com/ git config --global url."${gh_proxy}github.com/".insteadOf git@github.com: npm install -g openclaw@latest crontab -l 2>/dev/null | grep -v "s gateway" | crontab - start_gateway hash -r add_app_id echo "更新完成" break_end } uninstall_moltbot() { echo "卸载 OpenClaw..." send_stats "卸载 OpenClaw..." openclaw uninstall npm uninstall -g openclaw crontab -l 2>/dev/null | grep -v "s gateway" | crontab - rm -rf "$HOME/.openclaw" [ "$HOME" != "/root" ] && [ -d /root/.openclaw ] && echo "⚠️ 检测到 root 目录下仍存在 /root/.openclaw，如需清理请手动处理" hash -r sed -i "/\b${app_id}\b/d" /home/docker/appno.txt echo "卸载完成" break_end } nano_openclaw_json() { send_stats "编辑 OpenClaw 配置文件" install nano nano "$(openclaw_get_config_file)" start_gateway } openclaw_find_webui_domain() { local conf domain_list domain_list=$( grep -R "18789" /home/web/conf.d/*.conf 2>/dev/null \ | awk -F: '{print $1}' \ | sort -u \ | while read conf; do basename "$conf" .conf done ) if [ -n "$domain_list" ]; then echo "$domain_list" fi } openclaw_show_webui_addr() { local local_ip token domains echo "==================================" echo "OpenClaw WebUI 访问地址" local_ip="127.0.0.1" token=$( openclaw dashboard 2>/dev/null \ | sed -n 's/.*:18789\/#token=\([a-f0-9]\+\).*/\1/p' \ | head -n 1 ) echo echo "本机地址：" echo "http://${local_ip}:18789/#token=${token}" domains=$(openclaw_find_webui_domain) if [ -n "$domains" ]; then echo "域名地址：" echo "$domains" | while read d; do echo "https://${d}/#token=${token}" done fi echo "==================================" } # 添加域名（调用你给的函数） openclaw_domain_webui() { add_yuming ldnmp_Proxy ${yuming} 127.0.0.1 18789 token=$( openclaw dashboard 2>/dev/null \ | sed -n 's/.*:18789\/#token=\([a-f0-9]\+\).*/\1/p' \ | head -n 1 ) clear echo "访问地址:" echo "https://${yuming}/#token=$token" echo "先访问URL触发设备ID，然后回车下一步进行配对。" read echo -e "${gl_kjlan}正在加载设备列表……${gl_bai}" # 自动添加域名到 allowedOrigins config_file=$(openclaw_get_config_file) if [ -f "$config_file" ]; then new_origin="https://${yuming}" # 使用 jq 安全修改 JSON，确保结构存在且不重复添加域名 if command -v jq >/dev/null 2>&1; then tmp_json=$(mktemp) jq 'if .gateway.controlUi == null then .gateway.controlUi = {"allowedOrigins": ["http://127.0.0.1"]} else . end | if (.gateway.controlUi.allowedOrigins | contains([$origin]) | not) then .gateway.controlUi.allowedOrigins += [$origin] else . end' --arg origin "$new_origin" "$config_file" > "$tmp_json" && mv "$tmp_json" "$config_file" echo -e "${gl_kjlan}已将域名 ${yuming} 加入 allowedOrigins 配置${gl_bai}" openclaw gateway restart >/dev/null 2>&1 fi fi openclaw devices list read -e -p "请输入 Request_Key: " Request_Key [ -z "$Request_Key" ] && { echo "Request_Key 不能为空" return 1 } openclaw devices approve "$Request_Key" } # 删除域名 openclaw_remove_domain() { echo "域名格式 example.com 不带https://" web_del } # 主菜单 openclaw_webui_menu() { send_stats "WebUI访问与设置" while true; do clear openclaw_show_webui_addr echo echo "1. 添加域名访问" echo "2. 删除域名访问" echo "0. 退出" echo read -e -p "请选择: " choice case "$choice" in 1) openclaw_domain_webui echo read -p "按回车返回菜单..." ;; 2) openclaw_remove_domain read -p "按回车返回菜单..." ;; 0) break ;; *) echo "无效选项" sleep 1 ;; esac done } # 主循环 while true; do show_menu read choice case $choice in 1) install_moltbot ;; 2) start_bot ;; 3) stop_bot ;; 4) view_logs ;; 5) change_model ;; 6) openclaw_api_manage_menu ;; 7) change_tg_bot_code ;; 8) install_plugin ;; 9) install_skill ;; 10) nano_openclaw_json ;; 11) send_stats "初始化配置向导" openclaw onboard --install-daemon break_end ;; 12) send_stats "健康检测与修复" openclaw doctor --fix break_end ;; 13) openclaw_webui_menu ;; 14) send_stats "TUI命令行对话" openclaw tui break_end ;; 15) openclaw_memory_menu ;; 16) openclaw_permission_menu ;; 17) openclaw_multiagent_menu ;; 18) openclaw_backup_restore_menu ;; 19) update_moltbot ;; 20) uninstall_moltbot ;; *) break ;; esac done } linux_panel() { local sub_choice="$1" clear cd ~ install git echo -e "${gl_kjlan}正在更新应用列表请稍等……${gl_bai}" if [ ! -d apps/.git ]; then timeout 10s git clone ${gh_proxy}github.com/kejilion/apps.git else cd apps # git pull origin main > /dev/null 2>&1 timeout 10s git pull ${gh_proxy}github.com/kejilion/apps.git main > /dev/null 2>&1 fi while true; do if [ -z "$sub_choice" ]; then clear echo -e "应用市场" echo -e "${gl_kjlan}-------------------------" local app_numbers=$([ -f /home/docker/appno.txt ] && cat /home/docker/appno.txt || echo "") # 用循环设置颜色 for i in {1..150}; do if echo "$app_numbers" | grep -q "^$i$"; then declare "color$i=${gl_lv}" else declare "color$i=${gl_bai}" fi done echo -e "${gl_kjlan}1. ${color1}宝塔面板官方版 ${gl_kjlan}2. ${color2}aaPanel宝塔国际版" echo -e "${gl_kjlan}3. ${color3}1Panel新一代管理面板 ${gl_kjlan}4. ${color4}NginxProxyManager可视化面板" echo -e "${gl_kjlan}5. ${color5}OpenList多存储文件列表程序 ${gl_kjlan}6. ${color6}Ubuntu远程桌面网页版" echo -e "${gl_kjlan}7. ${color7}哪吒探针VPS监控面板 ${gl_kjlan}8. ${color8}QB离线BT磁力下载面板" echo -e "${gl_kjlan}9. ${color9}Poste.io邮件服务器程序 ${gl_kjlan}10. ${color10}RocketChat多人在线聊天系统" echo -e "${gl_kjlan}-------------------------" echo -e "${gl_kjlan}11. ${color11}禅道项目管理软件 ${gl_kjlan}12. ${color12}青龙面板定时任务管理平台" echo -e "${gl_kjlan}13. ${color13}Cloudreve网盘 ${gl_huang}★${gl_bai} ${gl_kjlan}14. ${color14}简单图床图片管理程序" echo -e "${gl_kjlan}15. ${color15}emby多媒体管理系统 ${gl_kjlan}16. ${color16}Speedtest测速面板" echo -e "${gl_kjlan}17. ${color17}AdGuardHome去广告软件 ${gl_kjlan}18. ${color18}onlyoffice在线办公OFFICE" echo -e "${gl_kjlan}19. ${color19}雷池WAF防火墙面板 ${gl_kjlan}20. ${color20}portainer容器管理面板" echo -e "${gl_kjlan}-------------------------" echo -e "${gl_kjlan}21. ${color21}VScode网页版 ${gl_kjlan}22. ${color22}UptimeKuma监控工具" echo -e "${gl_kjlan}23. ${color23}Memos网页备忘录 ${gl_kjlan}24. ${color24}Webtop远程桌面网页版 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}25. ${color25}Nextcloud网盘 ${gl_kjlan}26. ${color26}QD-Today定时任务管理框架" echo -e "${gl_kjlan}27. ${color27}Dockge容器堆栈管理面板 ${gl_kjlan}28. ${color28}LibreSpeed测速工具" echo -e "${gl_kjlan}29. ${color29}searxng聚合搜索站 ${gl_huang}★${gl_bai} ${gl_kjlan}30. ${color30}PhotoPrism私有相册系统" echo -e "${gl_kjlan}-------------------------" echo -e "${gl_kjlan}31. ${color31}StirlingPDF工具大全 ${gl_kjlan}32. ${color32}drawio免费的在线图表软件 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}33. ${color33}Sun-Panel导航面板 ${gl_kjlan}34. ${color34}Pingvin-Share文件分享平台" echo -e "${gl_kjlan}35. ${color35}极简朋友圈 ${gl_kjlan}36. ${color36}LobeChatAI聊天聚合网站" echo -e "${gl_kjlan}37. ${color37}MyIP工具箱 ${gl_huang}★${gl_bai} ${gl_kjlan}38. ${color38}小雅alist全家桶" echo -e "${gl_kjlan}39. ${color39}Bililive直播录制工具 ${gl_kjlan}40. ${color40}webssh网页版SSH连接工具" echo -e "${gl_kjlan}-------------------------" echo -e "${gl_kjlan}41. ${color41}耗子管理面板 ${gl_kjlan}42. ${color42}Nexterm远程连接工具" echo -e "${gl_kjlan}43. ${color43}RustDesk远程桌面(服务端) ${gl_huang}★${gl_bai} ${gl_kjlan}44. ${color44}RustDesk远程桌面(中继端) ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}45. ${color45}Docker加速站 ${gl_kjlan}46. ${color46}GitHub加速站 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}47. ${color47}普罗米修斯监控 ${gl_kjlan}48. ${color48}普罗米修斯(主机监控)" echo -e "${gl_kjlan}49. ${color49}普罗米修斯(容器监控) ${gl_kjlan}50. ${color50}补货监控工具" echo -e "${gl_kjlan}-------------------------" echo -e "${gl_kjlan}51. ${color51}PVE开小鸡面板 ${gl_kjlan}52. ${color52}DPanel容器管理面板" echo -e "${gl_kjlan}53. ${color53}llama3聊天AI大模型 ${gl_kjlan}54. ${color54}AMH主机建站管理面板" echo -e "${gl_kjlan}55. ${color55}FRP内网穿透(服务端) ${gl_huang}★${gl_bai} ${gl_kjlan}56. ${color56}FRP内网穿透(客户端) ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}57. ${color57}Deepseek聊天AI大模型 ${gl_kjlan}58. ${color58}Dify大模型知识库 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}59. ${color59}NewAPI大模型资产管理 ${gl_kjlan}60. ${color60}JumpServer开源堡垒机" echo -e "${gl_kjlan}-------------------------" echo -e "${gl_kjlan}61. ${color61}在线翻译服务器 ${gl_kjlan}62. ${color62}RAGFlow大模型知识库" echo -e "${gl_kjlan}63. ${color63}OpenWebUI自托管AI平台 ${gl_huang}★${gl_bai} ${gl_kjlan}64. ${color64}it-tools工具箱" echo -e "${gl_kjlan}65. ${color65}n8n自动化工作流平台 ${gl_huang}★${gl_bai} ${gl_kjlan}66. ${color66}yt-dlp视频下载工具" echo -e "${gl_kjlan}67. ${color67}ddns-go动态DNS管理工具 ${gl_huang}★${gl_bai} ${gl_kjlan}68. ${color68}AllinSSL证书管理平台" echo -e "${gl_kjlan}69. ${color69}SFTPGo文件传输工具 ${gl_kjlan}70. ${color70}AstrBot聊天机器人框架" echo -e "${gl_kjlan}-------------------------" echo -e "${gl_kjlan}71. ${color71}Navidrome私有音乐服务器 ${gl_kjlan}72. ${color72}bitwarden密码管理器 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}73. ${color73}LibreTV私有影视 ${gl_kjlan}74. ${color74}MoonTV私有影视" echo -e "${gl_kjlan}75. ${color75}Melody音乐精灵 ${gl_kjlan}76. ${color76}在线DOS老游戏" echo -e "${gl_kjlan}77. ${color77}迅雷离线下载工具 ${gl_kjlan}78. ${color78}PandaWiki智能文档管理系统" echo -e "${gl_kjlan}79. ${color79}Beszel服务器监控 ${gl_kjlan}80. ${color80}linkwarden书签管理" echo -e "${gl_kjlan}-------------------------" echo -e "${gl_kjlan}81. ${color81}JitsiMeet视频会议 ${gl_kjlan}82. ${color82}gpt-load高性能AI透明代理" echo -e "${gl_kjlan}83. ${color83}komari服务器监控工具 ${gl_kjlan}84. ${color84}Wallos个人财务管理工具" echo -e "${gl_kjlan}85. ${color85}immich图片视频管理器 ${gl_kjlan}86. ${color86}jellyfin媒体管理系统" echo -e "${gl_kjlan}87. ${color87}SyncTV一起看片神器 ${gl_kjlan}88. ${color88}Owncast自托管直播平台" echo -e "${gl_kjlan}89. ${color89}FileCodeBox文件快递 ${gl_kjlan}90. ${color90}matrix去中心化聊天协议" echo -e "${gl_kjlan}-------------------------" echo -e "${gl_kjlan}91. ${color91}gitea私有代码仓库 ${gl_kjlan}92. ${color92}FileBrowser文件管理器" echo -e "${gl_kjlan}93. ${color93}Dufs极简静态文件服务器 ${gl_kjlan}94. ${color94}Gopeed高速下载工具" echo -e "${gl_kjlan}95. ${color95}paperless文档管理平台 ${gl_kjlan}96. ${color96}2FAuth自托管二步验证器" echo -e "${gl_kjlan}97. ${color97}WireGuard组网(服务端) ${gl_kjlan}98. ${color98}WireGuard组网(客户端)" echo -e "${gl_kjlan}99. ${color99}DSM群晖虚拟机 ${gl_kjlan}100. ${color100}Syncthing点对点文件同步工具" echo -e "${gl_kjlan}-------------------------" echo -e "${gl_kjlan}101. ${color101}AI视频生成工具 ${gl_kjlan}102. ${color102}VoceChat多人在线聊天系统" echo -e "${gl_kjlan}103. ${color103}Umami网站统计工具 ${gl_kjlan}104. ${color104}Stream四层代理转发工具" echo -e "${gl_kjlan}105. ${color105}思源笔记 ${gl_kjlan}106. ${color106}Drawnix开源白板工具" echo -e "${gl_kjlan}107. ${color107}PanSou网盘搜索 ${gl_kjlan}108. ${color108}LangBot聊天机器人" echo -e "${gl_kjlan}109. ${color109}ZFile在线网盘 ${gl_kjlan}110. ${color110}Karakeep书签管理" echo -e "${gl_kjlan}-------------------------" echo -e "${gl_kjlan}111. ${color111}多格式文件转换工具 ${gl_kjlan}112. ${color112}Lucky大内网穿透工具" echo -e "${gl_kjlan}113. ${color113}Firefox浏览器 ${gl_kjlan}114. ${color114}OpenClaw机器人管理工具${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}115. ${color115}Hermes机器人管理工具${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}-------------------------" echo -e "${gl_kjlan}第三方应用列表" echo -e "${gl_kjlan}想要让你的应用出现在这里？查看开发者指南: ${gl_huang}https://dev.kejilion.sh/${gl_bai}" for f in "$HOME"/apps/*.conf; do [ -e "$f" ] || continue local base_name=$(basename "$f" .conf) # 获取应用描述 local app_text=$(grep "app_text=" "$f" | cut -d'=' -f2 | tr -d '"' | tr -d "'") # 检查安装状态 (匹配 appno.txt 中的 ID) # 这里假设 appno.txt 中记录的是 base_name (即文件名) if echo "$app_numbers" | grep -q "^$base_name$"; then # 如果已安装：显示 base_name - 描述 [已安装] (绿色) echo -e "${gl_kjlan}$base_name${gl_bai} - ${gl_lv}$app_text [已安装]${gl_bai}" else # 如果未安装：正常显示 echo -e "${gl_kjlan}$base_name${gl_bai} - $app_text" fi done echo -e "${gl_kjlan}-------------------------" echo -e "${gl_kjlan}b. ${gl_bai}备份全部应用数据 ${gl_kjlan}r. ${gl_bai}还原全部应用数据" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}0. ${gl_bai}返回主菜单" echo -e "${gl_kjlan}------------------------${gl_bai}" read -e -p "请输入你的选择: " sub_choice fi case $sub_choice in 1|bt|baota) local app_id="1" local lujing="[ -d "/www/server/panel" ]" local panelname="宝塔面板" local panelurl="https://www.bt.cn/new/index.html" panel_app_install() { if [ -f /usr/bin/curl ];then curl -sSO https://download.bt.cn/install/install_panel.sh;else wget -O install_panel.sh https://download.bt.cn/install/install_panel.sh;fi;bash install_panel.sh ed8484bec } panel_app_manage() { bt } panel_app_uninstall() { curl -o bt-uninstall.sh http://download.bt.cn/install/bt-uninstall.sh > /dev/null 2>&1 && chmod +x bt-uninstall.sh && ./bt-uninstall.sh chmod +x bt-uninstall.sh ./bt-uninstall.sh } install_panel ;; 2|aapanel) local app_id="2" local lujing="[ -d "/www/server/panel" ]" local panelname="aapanel" local panelurl="https://www.aapanel.com/new/index.html" panel_app_install() { URL=https://www.aapanel.com/script/install_7.0_en.sh && if [ -f /usr/bin/curl ];then curl -ksSO "$URL" ;else wget --no-check-certificate -O install_7.0_en.sh "$URL";fi;bash install_7.0_en.sh aapanel } panel_app_manage() { bt } panel_app_uninstall() { curl -o bt-uninstall.sh http://download.bt.cn/install/bt-uninstall.sh > /dev/null 2>&1 && chmod +x bt-uninstall.sh && ./bt-uninstall.sh chmod +x bt-uninstall.sh ./bt-uninstall.sh } install_panel ;; 3|1p|1panel) local app_id="3" local lujing="command -v 1pctl" local panelname="1Panel" local panelurl="https://1panel.cn/" panel_app_install() { install bash bash -c "$(curl -sSL https://resource.fit2cloud.com/1panel/package/v2/quick_start.sh)" } panel_app_manage() { 1pctl user-info 1pctl update password } panel_app_uninstall() { 1pctl uninstall } install_panel ;; 4|npm) local app_id="4" local docker_name="npm" local docker_img="jc21/nginx-proxy-manager:latest" local docker_port=81 docker_rum() { docker run -d \ --name=$docker_name \ -p ${docker_port}:81 \ -p 80:80 \ -p 443:443 \ -v /home/docker/npm/data:/data \ -v /home/docker/npm/letsencrypt:/etc/letsencrypt \ --restart=always \ $docker_img } local docker_describe="一个Nginx反向代理工具面板，不支持添加域名访问。" local docker_url="官网介绍: https://nginxproxymanager.com/" local docker_use="echo \"初始用户名: admin@example.com\"" local docker_passwd="echo \"初始密码: changeme\"" local app_size="1" docker_app ;; 5|openlist) local app_id="5" local docker_name="openlist" local docker_img="openlistteam/openlist:latest-aria2" local docker_port=5244 docker_rum() { mkdir -p /home/docker/openlist chmod -R 777 /home/docker/openlist docker run -d \ --restart=always \ -v /home/docker/openlist:/opt/openlist/data \ -p ${docker_port}:5244 \ -e PUID=0 \ -e PGID=0 \ -e UMASK=022 \ --name="openlist" \ openlistteam/openlist:latest-aria2 } local docker_describe="一个支持多种存储，支持网页浏览和 WebDAV 的文件列表程序，由 gin 和 Solidjs 驱动" local docker_url="官网介绍: ${gh_https_url}github.com/OpenListTeam/OpenList" local docker_use="docker exec openlist ./openlist admin random" local docker_passwd="" local app_size="1" docker_app ;; 6|webtop-ubuntu) local app_id="6" local docker_name="webtop-ubuntu" local docker_img="lscr.io/linuxserver/webtop:ubuntu-kde" local docker_port=3006 docker_rum() { read -e -p "设置登录用户名: " admin read -e -p "设置登录用户密码: " admin_password docker run -d \ --name=webtop-ubuntu \ --security-opt seccomp=unconfined \ -e PUID=1000 \ -e PGID=1000 \ -e TZ=Etc/UTC \ -e SUBFOLDER=/ \ -e TITLE=Webtop \ -e CUSTOM_USER=${admin} \ -e PASSWORD=${admin_password} \ -p ${docker_port}:3000 \ -v /home/docker/webtop/data:/config \ -v /var/run/docker.sock:/var/run/docker.sock \ --shm-size="1gb" \ --restart=always \ lscr.io/linuxserver/webtop:ubuntu-kde } local docker_describe="webtop基于Ubuntu的容器。若IP无法访问，请添加域名访问。" local docker_url="官网介绍: https://docs.linuxserver.io/images/docker-webtop/" local docker_use="" local docker_passwd="" local app_size="2" docker_app ;; 7|nezha) clear send_stats "搭建哪吒" local app_id="7" local docker_name="nezha-dashboard" local docker_port=8008 while true; do check_docker_app check_docker_image_update $docker_name clear echo -e "哪吒监控 $check_docker $update_status" echo "开源、轻量、易用的服务器监控与运维工具" echo "官网搭建文档: https://nezha.wiki/guide/dashboard.html" if docker ps -a --format '{{.Names}}' 2>/dev/null | grep -q "$docker_name"; then local docker_port=$(docker port $docker_name | awk -F'[:]' '/->/ {print $NF}' | uniq) check_docker_app_ip fi echo "" echo "------------------------" echo "1. 使用" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "输入你的选择: " choice case $choice in 1) check_disk_space 1 install unzip jq install_docker curl -sL ${gh_proxy}raw.githubusercontent.com/nezhahq/scripts/refs/heads/main/install.sh -o nezha.sh && chmod +x nezha.sh && ./nezha.sh local docker_port=$(docker port $docker_name | awk -F'[:]' '/->/ {print $NF}' | uniq) check_docker_app_ip ;; *) break ;; esac break_end done ;; 8|qb|QB) local app_id="8" local docker_name="qbittorrent" local docker_img="lscr.io/linuxserver/qbittorrent:latest" local docker_port=8081 docker_rum() { docker run -d \ --name=qbittorrent \ -e PUID=1000 \ -e PGID=1000 \ -e TZ=Etc/UTC \ -e WEBUI_PORT=${docker_port} \ -e TORRENTING_PORT=56881 \ -p ${docker_port}:${docker_port} \ -p 56881:56881 \ -p 56881:56881/udp \ -v /home/docker/qbittorrent/config:/config \ -v /home/docker/qbittorrent/downloads:/downloads \ --restart=always \ lscr.io/linuxserver/qbittorrent:latest } local docker_describe="qbittorrent离线BT磁力下载服务" local docker_url="官网介绍: https://hub.docker.com/r/linuxserver/qbittorrent" local docker_use="sleep 3" local docker_passwd="docker logs qbittorrent" local app_size="1" docker_app ;; 9|mail) send_stats "搭建邮局" clear install telnet local app_id="9" local docker_name=“mailserver” while true; do check_docker_app check_docker_image_update $docker_name clear echo -e "邮局服务 $check_docker $update_status" echo "poste.io 是一个开源的邮件服务器解决方案，" echo "视频介绍: https://www.bilibili.com/video/BV1wv421C71t?t=0.1" echo "" echo "端口检测" port=25 timeout=3 if echo "quit" | timeout $timeout telnet smtp.qq.com $port | grep 'Connected'; then echo -e "${gl_lv}端口 $port 当前可用${gl_bai}" else echo -e "${gl_hong}端口 $port 当前不可用${gl_bai}" fi echo "" if docker ps -a --format '{{.Names}}' 2>/dev/null | grep -q "$docker_name"; then yuming=$(cat /home/docker/mail.txt) echo "访问地址: " echo "https://$yuming" fi echo "------------------------" echo "1. 安装 2. 更新 3. 卸载" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "输入你的选择: " choice case $choice in 1) setup_docker_dir check_disk_space 2 /home/docker read -e -p "请设置邮箱域名 例如 mail.yuming.com : " yuming mkdir -p /home/docker echo "$yuming" > /home/docker/mail.txt echo "------------------------" ip_address echo "先解析这些DNS记录" echo "A mail $ipv4_address" echo "CNAME imap $yuming" echo "CNAME pop $yuming" echo "CNAME smtp $yuming" echo "MX @ $yuming" echo "TXT @ v=spf1 mx ~all" echo "TXT ? ?" echo "" echo "------------------------" echo "按任意键继续..." read -n 1 -s -r -p "" install jq install_docker docker run \ --net=host \ -e TZ=Europe/Prague \ -v /home/docker/mail:/data \ --name "mailserver" \ -h "$yuming" \ --restart=always \ -d analogic/poste.io add_app_id clear echo "poste.io已经安装完成" echo "------------------------" echo "您可以使用以下地址访问poste.io:" echo "https://$yuming" echo "" ;; 2) docker rm -f mailserver docker rmi -f analogic/poste.i yuming=$(cat /home/docker/mail.txt) docker run \ --net=host \ -e TZ=Europe/Prague \ -v /home/docker/mail:/data \ --name "mailserver" \ -h "$yuming" \ --restart=always \ -d analogic/poste.i add_app_id clear echo "poste.io已经安装完成" echo "------------------------" echo "您可以使用以下地址访问poste.io:" echo "https://$yuming" echo "" ;; 3) docker rm -f mailserver docker rmi -f analogic/poste.io rm /home/docker/mail.txt rm -rf /home/docker/mail sed -i "/\b${app_id}\b/d" /home/docker/appno.txt echo "应用已卸载" ;; *) break ;; esac break_end done ;; 10|rocketchat) local app_id="10" local app_name="Rocket.Chat聊天系统" local app_text="Rocket.Chat 是一个开源的团队通讯平台，支持实时聊天、音视频通话、文件共享等多种功能，" local app_url="官方介绍: https://www.rocket.chat/" local docker_name="rocketchat" local docker_port="3897" local app_size="2" docker_app_install() { docker run --name db -d --restart=always \ -v /home/docker/mongo/dump:/dump \ mongo:latest --replSet rs5 --oplogSize 256 sleep 1 docker exec db mongosh --eval "printjson(rs.initiate())" sleep 5 docker run --name rocketchat --restart=always -p ${docker_port}:3000 --link db --env ROOT_URL=http://localhost --env MONGO_OPLOG_URL=mongodb://db:27017/rs5 -d rocket.chat clear ip_address echo "已经安装完成" check_docker_app_ip } docker_app_update() { docker rm -f rocketchat docker rmi -f rocket.chat:latest docker run --name rocketchat --restart=always -p ${docker_port}:3000 --link db --env ROOT_URL=http://localhost --env MONGO_OPLOG_URL=mongodb://db:27017/rs5 -d rocket.chat clear ip_address echo "rocket.chat已经安装完成" check_docker_app_ip } docker_app_uninstall() { docker rm -f rocketchat docker rmi -f rocket.chat docker rm -f db docker rmi -f mongo:latest rm -rf /home/docker/mongo echo "应用已卸载" } docker_app_plus ;; 11|zentao) local app_id="11" local docker_name="zentao-server" local docker_img="idoop/zentao:latest" local docker_port=82 docker_rum() { docker run -d -p ${docker_port}:80 \ -e ADMINER_USER="root" -e ADMINER_PASSWD="password" \ -e BIND_ADDRESS="false" \ -v /home/docker/zentao-server/:/opt/zbox/ \ --add-host smtp.exmail.qq.com:163.177.90.125 \ --name zentao-server \ --restart=always \ idoop/zentao:latest } local docker_describe="禅道是通用的项目管理软件" local docker_url="官网介绍: https://www.zentao.net/" local docker_use="echo \"初始用户名: admin\"" local docker_passwd="echo \"初始密码: 123456\"" local app_size="2" docker_app ;; 12|qinglong) local app_id="12" local docker_name="qinglong" local docker_img="whyour/qinglong:latest" local docker_port=5700 docker_rum() { docker run -d \ -v /home/docker/qinglong/data:/ql/data \ -p ${docker_port}:5700 \ --name qinglong \ --hostname qinglong \ --restart=always \ whyour/qinglong:latest } local docker_describe="青龙面板是一个定时任务管理平台" local docker_url="官网介绍: ${gh_proxy}github.com/whyour/qinglong" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 13|cloudreve) local app_id="13" local app_name="cloudreve网盘" local app_text="cloudreve是一个支持多家云存储的网盘系统" local app_url="视频介绍: https://www.bilibili.com/video/BV13F4m1c7h7?t=0.1" local docker_name="cloudreve" local docker_port="5212" local app_size="2" docker_app_install() { cd /home/ && mkdir -p docker/cloud && cd docker/cloud && mkdir temp_data && mkdir -vp cloudreve/{uploads,avatar} && touch cloudreve/conf.ini && touch cloudreve/cloudreve.db && mkdir -p aria2/config && mkdir -p data/aria2 && chmod -R 777 data/aria2 curl -o /home/docker/cloud/docker-compose.yml ${gh_proxy}raw.githubusercontent.com/kejilion/docker/main/cloudreve-docker-compose.yml sed -i "s/5212:5212/${docker_port}:5212/g" /home/docker/cloud/docker-compose.yml cd /home/docker/cloud/ docker compose up -d clear echo "已经安装完成" check_docker_app_ip } docker_app_update() { cd /home/docker/cloud/ && docker compose down --rmi all cd /home/docker/cloud/ && docker compose up -d } docker_app_uninstall() { cd /home/docker/cloud/ && docker compose down --rmi all rm -rf /home/docker/cloud echo "应用已卸载" } docker_app_plus ;; 14|easyimage) local app_id="14" local docker_name="easyimage" local docker_img="ddsderek/easyimage:latest" local docker_port=8014 docker_rum() { docker run -d \ --name easyimage \ -p ${docker_port}:80 \ -e TZ=Asia/Shanghai \ -e PUID=1000 \ -e PGID=1000 \ -v /home/docker/easyimage/config:/app/web/config \ -v /home/docker/easyimage/i:/app/web/i \ --restart=always \ ddsderek/easyimage:latest } local docker_describe="简单图床是一个简单的图床程序" local docker_url="官网介绍: ${gh_proxy}github.com/icret/EasyImages2.0" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 15|emby) local app_id="15" local docker_name="emby" local docker_img="linuxserver/emby:latest" local docker_port=8015 docker_rum() { docker run -d --name=emby --restart=always \ -v /home/docker/emby/config:/config \ -v /home/docker/emby/share1:/mnt/share1 \ -v /home/docker/emby/share2:/mnt/share2 \ -v /mnt/notify:/mnt/notify \ -p ${docker_port}:8096 \ -e UID=1000 -e GID=100 -e GIDLIST=100 \ linuxserver/emby:latest } local docker_describe="emby是一个主从式架构的媒体服务器软件，可以用来整理服务器上的视频和音频，并将音频和视频流式传输到客户端设备" local docker_url="官网介绍: https://emby.media/" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 16|looking) local app_id="16" local docker_name="looking-glass" local docker_img="wikihostinc/looking-glass-server" local docker_port=8016 docker_rum() { docker run -d --name looking-glass --restart=always -p ${docker_port}:80 wikihostinc/looking-glass-server } local docker_describe="Speedtest测速面板是一个VPS网速测试工具，多项测试功能，还可以实时监控VPS进出站流量" local docker_url="官网介绍: ${gh_proxy}github.com/wikihost-opensource/als" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 17|adguardhome) local app_id="17" local docker_name="adguardhome" local docker_img="adguard/adguardhome" local docker_port=8017 docker_rum() { docker run -d \ --name adguardhome \ -v /home/docker/adguardhome/work:/opt/adguardhome/work \ -v /home/docker/adguardhome/conf:/opt/adguardhome/conf \ -p 53:53/tcp \ -p 53:53/udp \ -p ${docker_port}:3000/tcp \ --restart=always \ adguard/adguardhome } local docker_describe="AdGuardHome是一款全网广告拦截与反跟踪软件，未来将不止是一个DNS服务器。" local docker_url="官网介绍: https://hub.docker.com/r/adguard/adguardhome" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 18|onlyoffice) local app_id="18" local docker_name="onlyoffice" local docker_img="onlyoffice/documentserver" local docker_port=8018 docker_rum() { docker run -d -p ${docker_port}:80 \ --restart=always \ --name onlyoffice \ -v /home/docker/onlyoffice/DocumentServer/logs:/var/log/onlyoffice \ -v /home/docker/onlyoffice/DocumentServer/data:/var/www/onlyoffice/Data \ onlyoffice/documentserver } local docker_describe="onlyoffice是一款开源的在线office工具，太强大了！" local docker_url="官网介绍: https://www.onlyoffice.com/" local docker_use="" local docker_passwd="" local app_size="2" docker_app ;; 19|safeline) send_stats "搭建雷池" local app_id="19" local docker_name=safeline-mgt local docker_port=9443 while true; do check_docker_app clear echo -e "雷池服务 $check_docker" echo "雷池是长亭科技开发的WAF站点防火墙程序面板，可以反代站点进行自动化防御" echo "视频介绍: https://www.bilibili.com/video/BV1mZ421T74c?t=0.1" if docker ps -a --format '{{.Names}}' 2>/dev/null | grep -q "$docker_name"; then check_docker_app_ip fi echo "" echo "------------------------" echo "1. 安装 2. 更新 3. 重置密码 4. 卸载" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "输入你的选择: " choice case $choice in 1) install_docker check_disk_space 5 bash -c "$(curl -fsSLk https://waf-ce.chaitin.cn/release/latest/setup.sh)" add_app_id clear echo "雷池WAF面板已经安装完成" check_docker_app_ip docker exec safeline-mgt resetadmin ;; 2) bash -c "$(curl -fsSLk https://waf-ce.chaitin.cn/release/latest/upgrade.sh)" docker rmi $(docker images | grep "safeline" | grep "none" | awk '{print $3}') echo "" add_app_id clear echo "雷池WAF面板已经更新完成" check_docker_app_ip ;; 3) docker exec safeline-mgt resetadmin ;; 4) cd /data/safeline docker compose down --rmi all sed -i "/\b${app_id}\b/d" /home/docker/appno.txt echo "如果你是默认安装目录那现在项目已经卸载。如果你是自定义安装目录你需要到安装目录下自行执行:" echo "docker compose down && docker compose down --rmi all" ;; *) break ;; esac break_end done ;; 20|portainer) local app_id="20" local docker_name="portainer" local docker_img="portainer/portainer" local docker_port=8020 docker_rum() { docker run -d \ --name portainer \ -p ${docker_port}:9000 \ -v /var/run/docker.sock:/var/run/docker.sock \ -v /home/docker/portainer:/data \ --restart=always \ portainer/portainer } local docker_describe="portainer是一个轻量级的docker容器管理面板" local docker_url="官网介绍: https://www.portainer.io/" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 21|vscode) local app_id="21" local docker_name="vscode-web" local docker_img="codercom/code-server" local docker_port=8021 docker_rum() { docker run -d -p ${docker_port}:8080 -v /home/docker/vscode-web:/home/coder/.local/share/code-server --name vscode-web --restart=always codercom/code-server } local docker_describe="VScode是一款强大的在线代码编写工具" local docker_url="官网介绍: ${gh_proxy}github.com/coder/code-server" local docker_use="sleep 3" local docker_passwd="docker exec vscode-web cat /home/coder/.config/code-server/config.yaml" local app_size="1" docker_app ;; 22|uptime-kuma) local app_id="22" local docker_name="uptime-kuma" local docker_img="louislam/uptime-kuma:latest" local docker_port=8022 docker_rum() { docker run -d \ --name=uptime-kuma \ -p ${docker_port}:3001 \ -v /home/docker/uptime-kuma/uptime-kuma-data:/app/data \ --restart=always \ louislam/uptime-kuma:latest } local docker_describe="Uptime Kuma 易于使用的自托管监控工具" local docker_url="官网介绍: ${gh_proxy}github.com/louislam/uptime-kuma" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 23|memos) local app_id="23" local docker_name="memos" local docker_img="neosmemo/memos:stable" local docker_port=8023 docker_rum() { docker run -d --name memos -p ${docker_port}:5230 -v /home/docker/memos:/var/opt/memos --restart=always neosmemo/memos:stable } local docker_describe="Memos是一款轻量级、自托管的备忘录中心" local docker_url="官网介绍: ${gh_proxy}github.com/usememos/memos" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 24|webtop) local app_id="24" local docker_name="webtop" local docker_img="lscr.io/linuxserver/webtop:latest" local docker_port=8024 docker_rum() { read -e -p "设置登录用户名: " admin read -e -p "设置登录用户密码: " admin_password docker run -d \ --name=webtop \ --security-opt seccomp=unconfined \ -e PUID=1000 \ -e PGID=1000 \ -e TZ=Etc/UTC \ -e SUBFOLDER=/ \ -e TITLE=Webtop \ -e CUSTOM_USER=${admin} \ -e PASSWORD=${admin_password} \ -e LC_ALL=zh_CN.UTF-8 \ -e DOCKER_MODS=linuxserver/mods:universal-package-install \ -e INSTALL_PACKAGES=font-noto-cjk \ -p ${docker_port}:3000 \ -v /home/docker/webtop/data:/config \ -v /var/run/docker.sock:/var/run/docker.sock \ --shm-size="1gb" \ --restart=always \ lscr.io/linuxserver/webtop:latest } local docker_describe="webtop基于Alpine的中文版容器。若IP无法访问，请添加域名访问。" local docker_url="官网介绍: https://docs.linuxserver.io/images/docker-webtop/" local docker_use="" local docker_passwd="" local app_size="2" docker_app ;; 25|nextcloud) local app_id="25" local docker_name="nextcloud" local docker_img="nextcloud:latest" local docker_port=8025 local rootpasswd=$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c16) docker_rum() { docker run -d --name nextcloud --restart=always -p ${docker_port}:80 -v /home/docker/nextcloud:/var/www/html -e NEXTCLOUD_ADMIN_USER=nextcloud -e NEXTCLOUD_ADMIN_PASSWORD=$rootpasswd nextcloud } local docker_describe="Nextcloud拥有超过 400,000 个部署，是您可以下载的最受欢迎的本地内容协作平台" local docker_url="官网介绍: https://nextcloud.com/" local docker_use="echo \"账号: nextcloud 密码: $rootpasswd\"" local docker_passwd="" local app_size="3" docker_app ;; 26|qd) local app_id="26" local docker_name="qd" local docker_img="qdtoday/qd:latest" local docker_port=8026 docker_rum() { docker run -d --name qd -p ${docker_port}:80 -v /home/docker/qd/config:/usr/src/app/config qdtoday/qd } local docker_describe="QD-Today是一个HTTP请求定时任务自动执行框架" local docker_url="官网介绍: https://qd-today.github.io/qd/zh_CN/" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 27|dockge) local app_id="27" local docker_name="dockge" local docker_img="louislam/dockge:latest" local docker_port=8027 docker_rum() { docker run -d --name dockge --restart=always -p ${docker_port}:5001 -v /var/run/docker.sock:/var/run/docker.sock -v /home/docker/dockge/data:/app/data -v /home/docker/dockge/stacks:/home/docker/dockge/stacks -e DOCKGE_STACKS_DIR=/home/docker/dockge/stacks louislam/dockge } local docker_describe="dockge是一个可视化的docker-compose容器管理面板" local docker_url="官网介绍: ${gh_proxy}github.com/louislam/dockge" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 28|speedtest) local app_id="28" local docker_name="speedtest" local docker_img="ghcr.io/librespeed/speedtest" local docker_port=8028 docker_rum() { docker run -d -p ${docker_port}:8080 --name speedtest --restart=always ghcr.io/librespeed/speedtest } local docker_describe="librespeed是用Javascript实现的轻量级速度测试工具，即开即用" local docker_url="官网介绍: ${gh_proxy}github.com/librespeed/speedtest" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 29|searxng) local app_id="29" local docker_name="searxng" local docker_img="searxng/searxng" local docker_port=8029 docker_rum() { docker run -d \ --name searxng \ --restart=always \ -p ${docker_port}:8080 \ -v "/home/docker/searxng:/etc/searxng" \ searxng/searxng } local docker_describe="searxng是一个私有且隐私的搜索引擎站点" local docker_url="官网介绍: https://hub.docker.com/r/alandoyle/searxng" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 30|photoprism) local app_id="30" local docker_name="photoprism" local docker_img="photoprism/photoprism:latest" local docker_port=8030 local rootpasswd=$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c16) docker_rum() { docker run -d \ --name photoprism \ --restart=always \ --security-opt seccomp=unconfined \ --security-opt apparmor=unconfined \ -p ${docker_port}:2342 \ -e PHOTOPRISM_UPLOAD_NSFW="true" \ -e PHOTOPRISM_ADMIN_PASSWORD="$rootpasswd" \ -v /home/docker/photoprism/storage:/photoprism/storage \ -v /home/docker/photoprism/Pictures:/photoprism/originals \ photoprism/photoprism } local docker_describe="photoprism非常强大的私有相册系统" local docker_url="官网介绍: https://www.photoprism.app/" local docker_use="echo \"账号: admin 密码: $rootpasswd\"" local docker_passwd="" local app_size="1" docker_app ;; 31|s-pdf) local app_id="31" local docker_name="s-pdf" local docker_img="frooodle/s-pdf:latest" local docker_port=8031 docker_rum() { docker run -d \ --name s-pdf \ --restart=always \ -p ${docker_port}:8080 \ -v /home/docker/s-pdf/trainingData:/usr/share/tesseract-ocr/5/tessdata \ -v /home/docker/s-pdf/extraConfigs:/configs \ -v /home/docker/s-pdf/logs:/logs \ -e DOCKER_ENABLE_SECURITY=false \ frooodle/s-pdf:latest } local docker_describe="这是一个强大的本地托管基于 Web 的 PDF 操作工具，使用 docker，允许您对 PDF 文件执行各种操作，例如拆分合并、转换、重新组织、添加图像、旋转、压缩等。" local docker_url="官网介绍: ${gh_proxy}github.com/Stirling-Tools/Stirling-PDF" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 32|drawio) local app_id="32" local docker_name="drawio" local docker_img="jgraph/drawio" local docker_port=8032 docker_rum() { docker run -d --restart=always --name drawio -p ${docker_port}:8080 -v /home/docker/drawio:/var/lib/drawio jgraph/drawio } local docker_describe="这是一个强大图表绘制软件。思维导图，拓扑图，流程图，都能画" local docker_url="官网介绍: https://www.drawio.com/" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 33|sun-panel) local app_id="33" local docker_name="sun-panel" local docker_img="hslr/sun-panel" local docker_port=8033 docker_rum() { docker run -d --restart=always -p ${docker_port}:3002 \ -v /home/docker/sun-panel/conf:/app/conf \ -v /home/docker/sun-panel/uploads:/app/uploads \ -v /home/docker/sun-panel/database:/app/database \ --name sun-panel \ hslr/sun-panel } local docker_describe="Sun-Panel服务器、NAS导航面板、Homepage、浏览器首页" local docker_url="官网介绍: https://doc.sun-panel.top/zh_cn/" local docker_use="echo \"账号: admin@sun.cc 密码: 12345678\"" local docker_passwd="" local app_size="1" docker_app ;; 34|pingvin-share) local app_id="34" local docker_name="pingvin-share" local docker_img="stonith404/pingvin-share" local docker_port=8034 docker_rum() { docker run -d \ --name pingvin-share \ --restart=always \ -p ${docker_port}:3000 \ -v /home/docker/pingvin-share/data:/opt/app/backend/data \ stonith404/pingvin-share } local docker_describe="Pingvin Share 是一个可自建的文件分享平台，是 WeTransfer 的一个替代品" local docker_url="官网介绍: ${gh_proxy}github.com/stonith404/pingvin-share" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 35|moments) local app_id="35" local docker_name="moments" local docker_img="kingwrcy/moments:latest" local docker_port=8035 docker_rum() { docker run -d --restart=always \ -p ${docker_port}:3000 \ -v /home/docker/moments/data:/app/data \ -v /etc/localtime:/etc/localtime:ro \ -v /etc/timezone:/etc/timezone:ro \ --name moments \ kingwrcy/moments:latest } local docker_describe="极简朋友圈，高仿微信朋友圈，记录你的美好生活" local docker_url="官网介绍: ${gh_proxy}github.com/kingwrcy/moments?tab=readme-ov-file" local docker_use="echo \"账号: admin 密码: a123456\"" local docker_passwd="" local app_size="1" docker_app ;; 36|lobe-chat) local app_id="36" local docker_name="lobe-chat" local docker_img="lobehub/lobe-chat:latest" local docker_port=8036 docker_rum() { docker run -d -p ${docker_port}:3210 \ --name lobe-chat \ --restart=always \ lobehub/lobe-chat } local docker_describe="LobeChat聚合市面上主流的AI大模型，ChatGPT/Claude/Gemini/Groq/Ollama" local docker_url="官网介绍: ${gh_proxy}github.com/lobehub/lobe-chat" local docker_use="" local docker_passwd="" local app_size="2" docker_app ;; 37|myip) local app_id="37" local docker_name="myip" local docker_img="jason5ng32/myip:latest" local docker_port=8037 docker_rum() { docker run -d -p ${docker_port}:18966 --name myip jason5ng32/myip:latest } local docker_describe="是一个多功能IP工具箱，可以查看自己IP信息及连通性，用网页面板呈现" local docker_url="官网介绍: ${gh_proxy}github.com/jason5ng32/MyIP/blob/main/README_ZH.md" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 38|xiaoya) send_stats "小雅全家桶" clear install_docker check_disk_space 1 bash -c "$(curl --insecure -fsSL https://ddsrem.com/xiaoya_install.sh)" ;; 39|bililive) if [ ! -d /home/docker/bililive-go/ ]; then mkdir -p /home/docker/bililive-go/ > /dev/null 2>&1 wget -O /home/docker/bililive-go/config.yml ${gh_proxy}raw.githubusercontent.com/hr3lxphr6j/bililive-go/master/config.yml > /dev/null 2>&1 fi local app_id="39" local docker_name="bililive-go" local docker_img="chigusa/bililive-go" local docker_port=8039 docker_rum() { docker run --restart=always --name bililive-go -v /home/docker/bililive-go/config.yml:/etc/bililive-go/config.yml -v /home/docker/bililive-go/Videos:/srv/bililive -p ${docker_port}:8080 -d chigusa/bililive-go } local docker_describe="Bililive-go是一个支持多种直播平台的直播录制工具" local docker_url="官网介绍: ${gh_proxy}github.com/hr3lxphr6j/bililive-go" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 40|webssh) local app_id="40" local docker_name="webssh" local docker_img="jrohy/webssh" local docker_port=8040 docker_rum() { docker run -d -p ${docker_port}:5032 --restart=always --name webssh -e TZ=Asia/Shanghai jrohy/webssh } local docker_describe="简易在线ssh连接工具和sftp工具" local docker_url="官网介绍: ${gh_proxy}github.com/Jrohy/webssh" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 41|haozi|acepanel) local app_id="41" local lujing="[ -d "/www/server/panel" ]" local panelname="AcePanel 原耗子面板" local panelurl="官方地址: ${gh_proxy}github.com/acepanel/panel" panel_app_install() { cd ~ bash <(curl -sSLm 10 https://dl.acepanel.net/helper.sh) } panel_app_manage() { acepanel help } panel_app_uninstall() { cd ~ bash <(curl -sSLm 10 https://dl.acepanel.net/helper.sh) } install_panel ;; 42|nexterm) local app_id="42" local docker_name="nexterm" local docker_img="germannewsmaker/nexterm:latest" local docker_port=8042 docker_rum() { ENCRYPTION_KEY=$(openssl rand -hex 32) docker run -d \ --name nexterm \ -e ENCRYPTION_KEY=${ENCRYPTION_KEY} \ -p ${docker_port}:6989 \ -v /home/docker/nexterm:/app/data \ --restart=always \ germannewsmaker/nexterm:latest } local docker_describe="nexterm是一款强大的在线SSH/VNC/RDP连接工具。" local docker_url="官网介绍: ${gh_proxy}github.com/gnmyt/Nexterm" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 43|hbbs) local app_id="43" local docker_name="hbbs" local docker_img="rustdesk/rustdesk-server" local docker_port=0000 docker_rum() { docker run --name hbbs -v /home/docker/hbbs/data:/root -td --net=host --restart=always rustdesk/rustdesk-server hbbs } local docker_describe="rustdesk开源的远程桌面(服务端)，类似自己的向日葵私服。" local docker_url="官网介绍: https://rustdesk.com/zh-cn/" local docker_use="docker logs hbbs" local docker_passwd="echo \"把你的IP和key记录下，会在远程桌面客户端中用到。去44选项装中继端吧！\"" local app_size="1" docker_app ;; 44|hbbr) local app_id="44" local docker_name="hbbr" local docker_img="rustdesk/rustdesk-server" local docker_port=0000 docker_rum() { docker run --name hbbr -v /home/docker/hbbr/data:/root -td --net=host --restart=always rustdesk/rustdesk-server hbbr } local docker_describe="rustdesk开源的远程桌面(中继端)，类似自己的向日葵私服。" local docker_url="官网介绍: https://rustdesk.com/zh-cn/" local docker_use="echo \"前往官网下载远程桌面的客户端: https://rustdesk.com/zh-cn/\"" local docker_passwd="" local app_size="1" docker_app ;; 45|registry) local app_id="45" local docker_name="registry" local docker_img="registry:2" local docker_port=8045 docker_rum() { docker run -d \ -p ${docker_port}:5000 \ --name registry \ -v /home/docker/registry:/var/lib/registry \ -e REGISTRY_PROXY_REMOTEURL=https://registry-1.docker.io \ --restart=always \ registry:2 } local docker_describe="Docker Registry 是一个用于存储和分发 Docker 镜像的服务。" local docker_url="官网介绍: https://hub.docker.com/_/registry" local docker_use="" local docker_passwd="" local app_size="2" docker_app ;; 46|ghproxy) local app_id="46" local docker_name="ghproxy" local docker_img="wjqserver/ghproxy:latest" local docker_port=8046 docker_rum() { docker run -d --name ghproxy --restart=always -p ${docker_port}:8080 -v /home/docker/ghproxy/config:/data/ghproxy/config wjqserver/ghproxy:latest } local docker_describe="使用Go实现的GHProxy，用于加速部分地区Github仓库的拉取。" local docker_url="官网介绍: ${gh_https_url}github.com/WJQSERVER-STUDIO/ghproxy" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 47|prometheus|grafana) local app_id="47" local app_name="普罗米修斯监控" local app_text="Prometheus+Grafana企业级监控系统" local app_url="官网介绍: https://prometheus.io" local docker_name="grafana" local docker_port="8047" local app_size="2" docker_app_install() { prometheus_install clear ip_address echo "已经安装完成" check_docker_app_ip echo "初始用户名密码均为: admin" } docker_app_update() { docker rm -f node-exporter prometheus grafana docker rmi -f prom/node-exporter docker rmi -f prom/prometheus:latest docker rmi -f grafana/grafana:latest docker_app_install } docker_app_uninstall() { docker rm -f node-exporter prometheus grafana docker rmi -f prom/node-exporter docker rmi -f prom/prometheus:latest docker rmi -f grafana/grafana:latest rm -rf /home/docker/monitoring echo "应用已卸载" } docker_app_plus ;; 48|node-exporter) local app_id="48" local docker_name="node-exporter" local docker_img="prom/node-exporter" local docker_port=8048 docker_rum() { docker run -d \ --name=node-exporter \ -p ${docker_port}:9100 \ --restart=always \ prom/node-exporter } local docker_describe="这是一个普罗米修斯的主机数据采集组件，请部署在被监控主机上。" local docker_url="官网介绍: ${gh_https_url}github.com/prometheus/node_exporter" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 49|cadvisor) local app_id="49" local docker_name="cadvisor" local docker_img="gcr.io/cadvisor/cadvisor:latest" local docker_port=8049 docker_rum() { docker run -d \ --name=cadvisor \ --restart=always \ -p ${docker_port}:8080 \ --volume=/:/rootfs:ro \ --volume=/var/run:/var/run:rw \ --volume=/sys:/sys:ro \ --volume=/var/lib/docker/:/var/lib/docker:ro \ gcr.io/cadvisor/cadvisor:latest \ -housekeeping_interval=10s \ -docker_only=true } local docker_describe="这是一个普罗米修斯的容器数据采集组件，请部署在被监控主机上。" local docker_url="官网介绍: ${gh_https_url}github.com/google/cadvisor" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 50|changedetection) local app_id="50" local docker_name="changedetection" local docker_img="dgtlmoon/changedetection.io:latest" local docker_port=8050 docker_rum() { docker run -d --restart=always -p ${docker_port}:5000 \ -v /home/docker/datastore:/datastore \ --name changedetection dgtlmoon/changedetection.io:latest } local docker_describe="这是一款网站变化检测、补货监控和通知的小工具" local docker_url="官网介绍: ${gh_https_url}github.com/dgtlmoon/changedetection.io" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 51|pve) clear send_stats "PVE开小鸡" check_disk_space 1 curl -L ${gh_proxy}raw.githubusercontent.com/oneclickvirt/pve/main/scripts/install_pve.sh -o install_pve.sh && chmod +x install_pve.sh && bash install_pve.sh ;; 52|dpanel) local app_id="52" local docker_name="dpanel" local docker_img="dpanel/dpanel:lite" local docker_port=8052 docker_rum() { docker run -d --name dpanel --restart=always \ -p ${docker_port}:8080 -e APP_NAME=dpanel \ -v /var/run/docker.sock:/var/run/docker.sock \ -v /home/docker/dpanel:/dpanel \ dpanel/dpanel:lite } local docker_describe="Docker可视化面板系统，提供完善的docker管理功能。" local docker_url="官网介绍: ${gh_https_url}github.com/donknap/dpanel" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 53|llama3) local app_id="53" local docker_name="ollama" local docker_img="ghcr.io/open-webui/open-webui:ollama" local docker_port=8053 docker_rum() { docker run -d -p ${docker_port}:8080 -v /home/docker/ollama:/root/.ollama -v /home/docker/ollama/open-webui:/app/backend/data --name ollama --restart=always ghcr.io/open-webui/open-webui:ollama } local docker_describe="OpenWebUI一款大语言模型网页框架，接入全新的llama3大语言模型" local docker_url="官网介绍: ${gh_https_url}github.com/open-webui/open-webui" local docker_use="docker exec ollama ollama run llama3.2:1b" local docker_passwd="" local app_size="5" docker_app ;; 54|amh) local app_id="54" local lujing="[ -d "/www/server/panel" ]" local panelname="AMH面板" local panelurl="官方地址: https://amh.sh/index.htm?amh" panel_app_install() { cd ~ wget https://dl.amh.sh/amh.sh && bash amh.sh } panel_app_manage() { panel_app_install } panel_app_uninstall() { panel_app_install } install_panel ;; 55|frps) frps_panel ;; 56|frpc) frpc_panel ;; 57|deepseek) local app_id="57" local docker_name="ollama" local docker_img="ghcr.io/open-webui/open-webui:ollama" local docker_port=8053 docker_rum() { docker run -d -p ${docker_port}:8080 -v /home/docker/ollama:/root/.ollama -v /home/docker/ollama/open-webui:/app/backend/data --name ollama --restart=always ghcr.io/open-webui/open-webui:ollama } local docker_describe="OpenWebUI一款大语言模型网页框架，接入全新的DeepSeek R1大语言模型" local docker_url="官网介绍: ${gh_https_url}github.com/open-webui/open-webui" local docker_use="docker exec ollama ollama run deepseek-r1:1.5b" local docker_passwd="" local app_size="5" docker_app ;; 58|dify) local app_id="58" local app_name="Dify知识库" local app_text="是一款开源的大语言模型(LLM) 应用开发平台。自托管训练数据用于AI生成" local app_url="官方网站: https://docs.dify.ai/zh-hans" local docker_name="docker-nginx-1" local docker_port="8058" local app_size="3" docker_app_install() { install git mkdir -p /home/docker/ && cd /home/docker/ && git clone ${gh_proxy}github.com/langgenius/dify.git && cd dify/docker && cp .env.example .env sed -i "s/^EXPOSE_NGINX_PORT=.*/EXPOSE_NGINX_PORT=${docker_port}/; s/^EXPOSE_NGINX_SSL_PORT=.*/EXPOSE_NGINX_SSL_PORT=8858/" /home/docker/dify/docker/.env docker compose up -d chown -R 1001:1001 /home/docker/dify/docker/volumes/app/storage chmod -R 755 /home/docker/dify/docker/volumes/app/storage docker compose down docker compose up -d clear echo "已经安装完成" check_docker_app_ip } docker_app_update() { cd /home/docker/dify/docker/ && docker compose down --rmi all cd /home/docker/dify/ git pull ${gh_proxy}github.com/langgenius/dify.git main > /dev/null 2>&1 sed -i 's/^EXPOSE_NGINX_PORT=.*/EXPOSE_NGINX_PORT=8058/; s/^EXPOSE_NGINX_SSL_PORT=.*/EXPOSE_NGINX_SSL_PORT=8858/' /home/docker/dify/docker/.env cd /home/docker/dify/docker/ && docker compose up -d } docker_app_uninstall() { cd /home/docker/dify/docker/ && docker compose down --rmi all rm -rf /home/docker/dify echo "应用已卸载" } docker_app_plus ;; 59|new-api) local app_id="59" local app_name="NewAPI" local app_text="新一代大模型网关与AI资产管理系统" local app_url="官方网站: ${gh_https_url}github.com/Calcium-Ion/new-api" local docker_name="new-api" local docker_port="8059" local app_size="3" docker_app_install() { install git mkdir -p /home/docker/ && cd /home/docker/ && git clone ${gh_proxy}github.com/Calcium-Ion/new-api.git && cd new-api sed -i -e "s/- \"3000:3000\"/- \"${docker_port}:3000\"/g" \ -e 's/container_name: redis/container_name: redis-new-api/g' \ -e 's/container_name: mysql/container_name: mysql-new-api/g' \ docker-compose.yml docker compose up -d clear echo "已经安装完成" check_docker_app_ip } docker_app_update() { cd /home/docker/new-api/ && docker compose down --rmi all cd /home/docker/new-api/ git pull ${gh_proxy}github.com/Calcium-Ion/new-api.git main > /dev/null 2>&1 sed -i -e "s/- \"3000:3000\"/- \"${docker_port}:3000\"/g" \ -e 's/container_name: redis/container_name: redis-new-api/g' \ -e 's/container_name: mysql/container_name: mysql-new-api/g' \ docker-compose.yml docker compose up -d clear echo "已经安装完成" check_docker_app_ip } docker_app_uninstall() { cd /home/docker/new-api/ && docker compose down --rmi all rm -rf /home/docker/new-api echo "应用已卸载" } docker_app_plus ;; 60|jms) local app_id="60" local app_name="JumpServer开源堡垒机" local app_text="是一个开源的特权访问管理 (PAM) 工具，该程序占用80端口不支持添加域名访问了" local app_url="官方介绍: ${gh_https_url}github.com/jumpserver/jumpserver" local docker_name="jms_web" local docker_port="80" local app_size="2" docker_app_install() { curl -sSL ${gh_proxy}github.com/jumpserver/jumpserver/releases/latest/download/quick_start.sh | bash clear echo "已经安装完成" check_docker_app_ip echo "初始用户名: admin" echo "初始密码: ChangeMe" } docker_app_update() { cd /opt/jumpserver-installer*/ ./jmsctl.sh upgrade echo "应用已更新" } docker_app_uninstall() { cd /opt/jumpserver-installer*/ ./jmsctl.sh uninstall cd /opt rm -rf jumpserver-installer*/ rm -rf jumpserver echo "应用已卸载" } docker_app_plus ;; 61|libretranslate) local app_id="61" local docker_name="libretranslate" local docker_img="libretranslate/libretranslate:latest" local docker_port=8061 docker_rum() { docker run -d \ -p ${docker_port}:5000 \ --name libretranslate \ libretranslate/libretranslate \ --load-only ko,zt,zh,en,ja,pt,es,fr,de,ru } local docker_describe="免费开源机器翻译 API，完全自托管，它的翻译引擎由开源Argos Translate库提供支持。" local docker_url="官网介绍: ${gh_https_url}github.com/LibreTranslate/LibreTranslate" local docker_use="" local docker_passwd="" local app_size="5" docker_app ;; 62|ragflow) local app_id="62" local app_name="RAGFlow知识库" local app_text="基于深度文档理解的开源 RAG（检索增强生成）引擎" local app_url="官方网站: ${gh_https_url}github.com/infiniflow/ragflow" local docker_name="ragflow-server" local docker_port="8062" local app_size="8" docker_app_install() { install git mkdir -p /home/docker/ && cd /home/docker/ && git clone ${gh_proxy}github.com/infiniflow/ragflow.git && cd ragflow/docker sed -i "s/- 80:80/- ${docker_port}:80/; /- 443:443/d" docker-compose.yml docker compose up -d clear echo "已经安装完成" check_docker_app_ip } docker_app_update() { cd /home/docker/ragflow/docker/ && docker compose down --rmi all cd /home/docker/ragflow/ git pull ${gh_proxy}github.com/infiniflow/ragflow.git main > /dev/null 2>&1 cd /home/docker/ragflow/docker/ sed -i "s/- 80:80/- ${docker_port}:80/; /- 443:443/d" docker-compose.yml docker compose up -d } docker_app_uninstall() { cd /home/docker/ragflow/docker/ && docker compose down --rmi all rm -rf /home/docker/ragflow echo "应用已卸载" } docker_app_plus ;; 63|open-webui) local app_id="63" local docker_name="open-webui" local docker_img="ghcr.io/open-webui/open-webui:main" local docker_port=8063 docker_rum() { docker run -d -p ${docker_port}:8080 -v /home/docker/open-webui:/app/backend/data --name open-webui --restart=always ghcr.io/open-webui/open-webui:main } local docker_describe="OpenWebUI一款大语言模型网页框架，官方精简版本，支持各大模型API接入" local docker_url="官网介绍: ${gh_https_url}github.com/open-webui/open-webui" local docker_use="" local docker_passwd="" local app_size="3" docker_app ;; 64|it-tools) local app_id="64" local docker_name="it-tools" local docker_img="corentinth/it-tools:latest" local docker_port=8064 docker_rum() { docker run -d --name it-tools --restart=always -p ${docker_port}:80 corentinth/it-tools:latest } local docker_describe="对开发人员和 IT 工作者来说非常有用的工具" local docker_url="官网介绍: ${gh_https_url}github.com/CorentinTh/it-tools" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 65|n8n) local app_id="65" local docker_name="n8n" local docker_img="docker.n8n.io/n8nio/n8n" local docker_port=8065 docker_rum() { add_yuming mkdir -p /home/docker/n8n chmod -R 777 /home/docker/n8n docker run -d --name n8n \ --restart=always \ -p ${docker_port}:5678 \ -v /home/docker/n8n:/home/node/.n8n \ -e N8N_HOST=${yuming} \ -e N8N_PORT=5678 \ -e N8N_PROTOCOL=https \ -e WEBHOOK_URL=https://${yuming}/ \ docker.n8n.io/n8nio/n8n ldnmp_Proxy ${yuming} 127.0.0.1 ${docker_port} block_container_port "$docker_name" "$ipv4_address" } local docker_describe="是一款功能强大的自动化工作流平台" local docker_url="官网介绍: ${gh_https_url}github.com/n8n-io/n8n" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 66|yt) yt_menu_pro ;; 67|ddns) local app_id="67" local docker_name="ddns-go" local docker_img="jeessy/ddns-go" local docker_port=8067 docker_rum() { docker run -d \ --name ddns-go \ --restart=always \ -p ${docker_port}:9876 \ -v /home/docker/ddns-go:/root \ jeessy/ddns-go } local docker_describe="自动将你的公网 IP（IPv4/IPv6）实时更新到各大 DNS 服务商，实现动态域名解析。" local docker_url="官网介绍: ${gh_https_url}github.com/jeessy2/ddns-go" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 68|allinssl) local app_id="68" local docker_name="allinssl" local docker_img="allinssl/allinssl:latest" local docker_port=8068 docker_rum() { docker run -d --name allinssl -p ${docker_port}:8888 -v /home/docker/allinssl/data:/www/allinssl/data -e ALLINSSL_USER=allinssl -e ALLINSSL_PWD=allinssldocker -e ALLINSSL_URL=allinssl allinssl/allinssl:latest } local docker_describe="开源免费的 SSL 证书自动化管理平台" local docker_url="官网介绍: https://allinssl.com" local docker_use="echo \"安全入口: /allinssl\"" local docker_passwd="echo \"用户名: allinssl 密码: allinssldocker\"" local app_size="1" docker_app ;; 69|sftpgo) local app_id="69" local docker_name="sftpgo" local docker_img="drakkan/sftpgo:latest" local docker_port=8069 docker_rum() { mkdir -p /home/docker/sftpgo/data mkdir -p /home/docker/sftpgo/config chown -R 1000:1000 /home/docker/sftpgo docker run -d \ --name sftpgo \ --restart=always \ -p ${docker_port}:8080 \ -p 22022:2022 \ --mount type=bind,source=/home/docker/sftpgo/data,target=/srv/sftpgo \ --mount type=bind,source=/home/docker/sftpgo/config,target=/var/lib/sftpgo \ drakkan/sftpgo:latest } local docker_describe="开源免费随时随地SFTP FTP WebDAV 文件传输工具" local docker_url="官网介绍: https://sftpgo.com/" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 70|astrbot) local app_id="70" local docker_name="astrbot" local docker_img="soulter/astrbot:latest" local docker_port=8070 docker_rum() { mkdir -p /home/docker/astrbot/data docker run -d \ -p ${docker_port}:6185 \ -p 6195:6195 \ -p 6196:6196 \ -p 6199:6199 \ -p 11451:11451 \ -v /home/docker/astrbot/data:/AstrBot/data \ --restart=always \ --name astrbot \ soulter/astrbot:latest } local docker_describe="开源AI聊天机器人框架，支持微信，QQ，TG接入AI大模型" local docker_url="官网介绍: https://astrbot.app/" local docker_use="echo \"用户名: astrbot 密码: astrbot\"" local docker_passwd="" local app_size="1" docker_app ;; 71|navidrome) local app_id="71" local docker_name="navidrome" local docker_img="deluan/navidrome:latest" local docker_port=8071 docker_rum() { docker run -d \ --name navidrome \ --restart=always \ --user $(id -u):$(id -g) \ -v /home/docker/navidrome/music:/music \ -v /home/docker/navidrome/data:/data \ -p ${docker_port}:4533 \ -e ND_LOGLEVEL=info \ deluan/navidrome:latest } local docker_describe="是一个轻量、高性能的音乐流媒体服务器" local docker_url="官网介绍: https://www.navidrome.org/" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 72|bitwarden) local app_id="72" local docker_name="bitwarden" local docker_img="vaultwarden/server" local docker_port=8072 docker_rum() { docker run -d \ --name bitwarden \ --restart=always \ -p ${docker_port}:80 \ -v /home/docker/bitwarden/data:/data \ vaultwarden/server } local docker_describe="一个你可以控制数据的密码管理器" local docker_url="官网介绍: https://bitwarden.com/" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 73|libretv) local app_id="73" local docker_name="libretv" local docker_img="bestzwei/libretv:latest" local docker_port=8073 docker_rum() { read -e -p "设置LibreTV的登录密码: " app_passwd docker run -d \ --name libretv \ --restart=always \ -p ${docker_port}:8080 \ -e PASSWORD=${app_passwd} \ bestzwei/libretv:latest } local docker_describe="免费在线视频搜索与观看平台" local docker_url="官网介绍: ${gh_https_url}github.com/LibreSpark/LibreTV" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 74|moontv) local app_id="74" local app_name="moontv私有影视" local app_text="免费在线视频搜索与观看平台" local app_url="视频介绍: ${gh_https_url}github.com/MoonTechLab/LunaTV" local docker_name="moontv-core" local docker_port="8074" local app_size="2" docker_app_install() { read -e -p "设置登录用户名: " admin read -e -p "设置登录用户密码: " admin_password read -e -p "输入授权码: " shouquanma mkdir -p /home/docker/moontv mkdir -p /home/docker/moontv/config mkdir -p /home/docker/moontv/data cd /home/docker/moontv curl -o /home/docker/moontv/docker-compose.yml ${gh_proxy}raw.githubusercontent.com/kejilion/docker/main/moontv-docker-compose.yml sed -i "s/3000:3000/${docker_port}:3000/g" /home/docker/moontv/docker-compose.yml sed -i "s|admin_password|${admin_password}|g" /home/docker/moontv/docker-compose.yml sed -i "s|admin|${admin}|g" /home/docker/moontv/docker-compose.yml sed -i "s|shouquanma|${shouquanma}|g" /home/docker/moontv/docker-compose.yml cd /home/docker/moontv/ docker compose up -d clear echo "已经安装完成" check_docker_app_ip } docker_app_update() { cd /home/docker/moontv/ && docker compose down --rmi all cd /home/docker/moontv/ && docker compose up -d } docker_app_uninstall() { cd /home/docker/moontv/ && docker compose down --rmi all rm -rf /home/docker/moontv echo "应用已卸载" } docker_app_plus ;; 75|melody) local app_id="75" local docker_name="melody" local docker_img="foamzou/melody:latest" local docker_port=8075 docker_rum() { docker run -d \ --name melody \ --restart=always \ -p ${docker_port}:5566 \ -v /home/docker/melody/.profile:/app/backend/.profile \ foamzou/melody:latest } local docker_describe="你的音乐精灵，旨在帮助你更好地管理音乐。" local docker_url="官网介绍: ${gh_https_url}github.com/foamzou/melody" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 76|dosgame) local app_id="76" local docker_name="dosgame" local docker_img="oldiy/dosgame-web-docker:latest" local docker_port=8076 docker_rum() { docker run -d \ --name dosgame \ --restart=always \ -p ${docker_port}:262 \ oldiy/dosgame-web-docker:latest } local docker_describe="是一个中文DOS游戏合集网站" local docker_url="官网介绍: ${gh_https_url}github.com/rwv/chinese-dos-games" local docker_use="" local docker_passwd="" local app_size="2" docker_app ;; 77|xunlei) local app_id="77" local docker_name="xunlei" local docker_img="cnk3x/xunlei" local docker_port=8077 docker_rum() { read -e -p "设置登录用户名: " app_use read -e -p "设置登录密码: " app_passwd docker run -d \ --name xunlei \ --restart=always \ --privileged \ -e XL_DASHBOARD_USERNAME=${app_use} \ -e XL_DASHBOARD_PASSWORD=${app_passwd} \ -v /home/docker/xunlei/data:/xunlei/data \ -v /home/docker/xunlei/downloads:/xunlei/downloads \ -p ${docker_port}:2345 \ cnk3x/xunlei } local docker_describe="迅雷你的离线高速BT磁力下载工具" local docker_url="官网介绍: ${gh_https_url}github.com/cnk3x/xunlei" local docker_use="echo \"手机登录迅雷，再输入邀请码，邀请码: 迅雷牛通\"" local docker_passwd="" local app_size="1" docker_app ;; 78|PandaWiki) local app_id="78" local app_name="PandaWiki" local app_text="PandaWiki是一款AI大模型驱动的开源智能文档管理系统，强烈建议不要自定义端口部署。" local app_url="官方介绍: ${gh_https_url}github.com/chaitin/PandaWiki" local docker_name="panda-wiki-nginx" local docker_port="2443" local app_size="2" docker_app_install() { bash -c "$(curl -fsSLk https://release.baizhi.cloud/panda-wiki/manager.sh)" } docker_app_update() { docker_app_install } docker_app_uninstall() { docker_app_install } docker_app_plus ;; 79|beszel) local app_id="79" local docker_name="beszel" local docker_img="henrygd/beszel" local docker_port=8079 docker_rum() { mkdir -p /home/docker/beszel && \ docker run -d \ --name beszel \ --restart=always \ -v /home/docker/beszel:/beszel_data \ -p ${docker_port}:8090 \ henrygd/beszel } local docker_describe="Beszel轻量易用的服务器监控" local docker_url="官网介绍: https://beszel.dev/zh/" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 80|linkwarden) local app_id="80" local app_name="linkwarden书签管理" local app_text="一个开源的自托管书签管理平台，支持标签、搜索和团队协作。" local app_url="官方网站: https://linkwarden.app/" local docker_name="linkwarden-linkwarden-1" local docker_port="8080" local app_size="3" docker_app_install() { install git openssl mkdir -p /home/docker/linkwarden && cd /home/docker/linkwarden # 下载官方 docker-compose 和 env 文件 curl -O ${gh_proxy}raw.githubusercontent.com/linkwarden/linkwarden/refs/heads/main/docker-compose.yml curl -L ${gh_proxy}raw.githubusercontent.com/linkwarden/linkwarden/refs/heads/main/.env.sample -o ".env" # 生成随机密钥与密码 local ADMIN_EMAIL="admin@example.com" local ADMIN_PASSWORD=$(openssl rand -hex 8) sed -i "s|^NEXTAUTH_URL=.*|NEXTAUTH_URL=http://localhost:${docker_port}/api/v1/auth|g" .env sed -i "s|^NEXTAUTH_SECRET=.*|NEXTAUTH_SECRET=$(openssl rand -hex 32)|g" .env sed -i "s|^POSTGRES_PASSWORD=.*|POSTGRES_PASSWORD=$(openssl rand -hex 16)|g" .env sed -i "s|^MEILI_MASTER_KEY=.*|MEILI_MASTER_KEY=$(openssl rand -hex 32)|g" .env # 追加管理员账号信息 echo "ADMIN_EMAIL=${ADMIN_EMAIL}" >> .env echo "ADMIN_PASSWORD=${ADMIN_PASSWORD}" >> .env sed -i "s/3000:3000/${docker_port}:3000/g" /home/docker/linkwarden/docker-compose.yml # 启动容器 docker compose up -d clear echo "已经安装完成" check_docker_app_ip } docker_app_update() { cd /home/docker/linkwarden && docker compose down --rmi all curl -O ${gh_proxy}raw.githubusercontent.com/linkwarden/linkwarden/refs/heads/main/docker-compose.yml curl -L ${gh_proxy}raw.githubusercontent.com/linkwarden/linkwarden/refs/heads/main/.env.sample -o ".env.new" # 保留原本的变量 source .env mv .env.new .env echo "NEXTAUTH_URL=$NEXTAUTH_URL" >> .env echo "NEXTAUTH_SECRET=$NEXTAUTH_SECRET" >> .env echo "POSTGRES_PASSWORD=$POSTGRES_PASSWORD" >> .env echo "MEILI_MASTER_KEY=$MEILI_MASTER_KEY" >> .env echo "ADMIN_EMAIL=$ADMIN_EMAIL" >> .env echo "ADMIN_PASSWORD=$ADMIN_PASSWORD" >> .env sed -i "s/3000:3000/${docker_port}:3000/g" /home/docker/linkwarden/docker-compose.yml docker compose up -d } docker_app_uninstall() { cd /home/docker/linkwarden && docker compose down --rmi all rm -rf /home/docker/linkwarden echo "应用已卸载" } docker_app_plus ;; 81|jitsi) local app_id="81" local app_name="JitsiMeet视频会议" local app_text="一个开源的安全视频会议解决方案，支持多人在线会议、屏幕共享与加密通信。" local app_url="官方网站: https://jitsi.org/" local docker_name="jitsi" local docker_app_service="jitsi-web-1" local docker_port="8081" local app_size="3" docker_app_install() { add_yuming mkdir -p /home/docker/jitsi && cd /home/docker/jitsi rm -rf docker-jitsi-meet-* jitsi.zip local jitsi_zip_url=$(wget -q -O - https://api.github.com/repos/jitsi/docker-jitsi-meet/releases/latest | grep -m1 '"zipball_url"' | cut -d\" -f4) if [ -z "$jitsi_zip_url" ]; then echo "Failed to get Jitsi Meet latest download URL" return 1 fi wget -O jitsi.zip "$jitsi_zip_url" unzip -q jitsi.zip cd "$(find . -maxdepth 1 -type d -name '*docker-jitsi-meet*' | head -n 1)" cp env.example .env ./gen-passwords.sh mkdir -p /home/docker/jitsi/config/{web,transcripts,prosody/config,prosody/prosody-plugins-custom,jicofo,jvb,jigasi,jibri} sed -i "s|^CONFIG=.*|CONFIG=/home/docker/jitsi/config|" .env grep -q '^COMPOSE_PROJECT_NAME=' .env && sed -i "s|^COMPOSE_PROJECT_NAME=.*|COMPOSE_PROJECT_NAME=jitsi|" .env || echo "COMPOSE_PROJECT_NAME=jitsi" >> .env sed -i "s|^HTTP_PORT=.*|HTTP_PORT=${docker_port}|" .env sed -i "s|^#\?PUBLIC_URL=.*|PUBLIC_URL=https://$yuming|" .env grep -q '^PUBLIC_URL=' .env || echo "PUBLIC_URL=https://$yuming" >> .env grep -q '^DISABLE_HTTPS=' .env && sed -i "s|^DISABLE_HTTPS=.*|DISABLE_HTTPS=1|" .env || echo "DISABLE_HTTPS=1" >> .env grep -q '^ENABLE_HTTP_REDIRECT=' .env && sed -i "s|^ENABLE_HTTP_REDIRECT=.*|ENABLE_HTTP_REDIRECT=0|" .env || echo "ENABLE_HTTP_REDIRECT=0" >> .env sed -i "/'\${HTTPS_PORT}:443'/d" docker-compose.yml docker compose up -d local jitsi_web_container=$(docker compose ps -q web) ldnmp_Proxy ${yuming} 127.0.0.1 ${docker_port} [ -n "$jitsi_web_container" ] && block_container_port "$jitsi_web_container" "$ipv4_address" } docker_app_update() { cd /home/docker/jitsi cd "$(find . -maxdepth 1 -type d -name '*docker-jitsi-meet*' | head -n 1)" docker compose pull docker compose up -d } docker_app_uninstall() { cd /home/docker/jitsi cd "$(find . -maxdepth 1 -type d -name '*docker-jitsi-meet*' | head -n 1)" docker compose down --rmi all rm -rf /home/docker/jitsi echo "应用已卸载" } docker_app_plus ;; 82|gpt-load) local app_id="82" local docker_name="gpt-load" local docker_img="tbphp/gpt-load:latest" local docker_port=8082 docker_rum() { read -e -p "设置${docker_name}的登录密钥（sk-开头字母和数字组合）如: sk-159kejilionyyds163: " app_passwd mkdir -p /home/docker/gpt-load && \ docker run -d --name gpt-load \ -p ${docker_port}:3001 \ -e AUTH_KEY=${app_passwd} \ -v "/home/docker/gpt-load/data":/app/data \ tbphp/gpt-load:latest } local docker_describe="高性能AI接口透明代理服务" local docker_url="官网介绍: https://www.gpt-load.com/" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 83|komari) local app_id="83" local docker_name="komari" local docker_img="ghcr.io/komari-monitor/komari:latest" local docker_port=8083 docker_rum() { mkdir -p /home/docker/komari && \ docker run -d \ --name komari \ -p ${docker_port}:25774 \ -v /home/docker/komari:/app/data \ -e ADMIN_USERNAME=admin \ -e ADMIN_PASSWORD=1212156 \ -e TZ=Asia/Shanghai \ --restart=always \ ghcr.io/komari-monitor/komari:latest } local docker_describe="轻量级的自托管服务器监控工具" local docker_url="官网介绍: ${gh_https_url}github.com/komari-monitor/komari/tree/main" local docker_use="echo \"默认账号: admin 默认密码: 1212156\"" local docker_passwd="" local app_size="1" docker_app ;; 84|wallos) local app_id="84" local docker_name="wallos" local docker_img="bellamy/wallos:latest" local docker_port=8084 docker_rum() { mkdir -p /home/docker/wallos && \ docker run -d --name wallos \ -v /home/docker/wallos/db:/var/www/html/db \ -v /home/docker/wallos/logos:/var/www/html/images/uploads/logos \ -e TZ=UTC \ -p ${docker_port}:80 \ --restart=always \ bellamy/wallos:latest } local docker_describe="开源个人订阅追踪器，可用于财务管理" local docker_url="官网介绍: ${gh_https_url}github.com/ellite/Wallos" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 85|immich) local app_id="85" local app_name="immich图片视频管理器" local app_text="高性能自托管照片和视频管理解决方案。" local app_url="官网介绍: ${gh_https_url}github.com/immich-app/immich" local docker_name="immich_server" local docker_port="8085" local app_size="3" docker_app_install() { install git openssl wget mkdir -p /home/docker/${docker_name} && cd /home/docker/${docker_name} wget -O docker-compose.yml ${gh_proxy}github.com/immich-app/immich/releases/latest/download/docker-compose.yml wget -O .env ${gh_proxy}github.com/immich-app/immich/releases/latest/download/example.env sed -i "s/2283:2283/${docker_port}:2283/g" /home/docker/${docker_name}/docker-compose.yml docker compose up -d clear echo "已经安装完成" check_docker_app_ip } docker_app_update() { cd /home/docker/${docker_name} && docker compose down --rmi all docker_app_install } docker_app_uninstall() { cd /home/docker/${docker_name} && docker compose down --rmi all rm -rf /home/docker/${docker_name} echo "应用已卸载" } docker_app_plus ;; 86|jellyfin) local app_id="86" local docker_name="jellyfin" local docker_img="jellyfin/jellyfin" local docker_port=8086 docker_rum() { mkdir -p /home/docker/jellyfin/media chmod -R 777 /home/docker/jellyfin docker run -d \ --name jellyfin \ --user root \ --volume /home/docker/jellyfin/config:/config \ --volume /home/docker/jellyfin/cache:/cache \ --mount type=bind,source=/home/docker/jellyfin/media,target=/media \ -p ${docker_port}:8096 \ -p 7359:7359/udp \ --restart=always \ jellyfin/jellyfin } local docker_describe="是一款开源媒体服务器软件" local docker_url="官网介绍: https://jellyfin.org/" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 87|synctv) local app_id="87" local docker_name="synctv" local docker_img="synctvorg/synctv" local docker_port=8087 docker_rum() { docker run -d \ --name synctv \ -v /home/docker/synctv:/root/.synctv \ -p ${docker_port}:8080 \ --restart=always \ synctvorg/synctv } local docker_describe="远程一起观看电影和直播的程序。它提供了同步观影、直播、聊天等功能" local docker_url="官网介绍: ${gh_https_url}github.com/synctv-org/synctv" local docker_use="echo \"初始账号和密码: root 登陆后请及时修改登录密码\"" local docker_passwd="" local app_size="1" docker_app ;; 88|owncast) local app_id="88" local docker_name="owncast" local docker_img="owncast/owncast:latest" local docker_port=8088 docker_rum() { docker run -d \ --name owncast \ -p ${docker_port}:8080 \ -p 1935:1935 \ -v /home/docker/owncast/data:/app/data \ --restart=always \ owncast/owncast:latest } local docker_describe="开源、免费的自建直播平台" local docker_url="官网介绍: https://owncast.online" local docker_use="echo \"访问地址后面带 /admin 访问管理员页面\"" local docker_passwd="echo \"初始账号: admin 初始密码: abc123 登陆后请及时修改登录密码\"" local app_size="1" docker_app ;; 89|file-code-box) local app_id="89" local docker_name="file-code-box" local docker_img="lanol/filecodebox:latest" local docker_port=8089 docker_rum() { docker run -d \ --name file-code-box \ -p ${docker_port}:12345 \ -v /home/docker/file-code-box/data:/app/data \ --restart=always \ lanol/filecodebox:latest } local docker_describe="匿名口令分享文本和文件，像拿快递一样取文件" local docker_url="官网介绍: ${gh_https_url}github.com/vastsa/FileCodeBox" local docker_use="echo \"访问地址后面带 /#/admin 访问管理员页面\"" local docker_passwd="echo \"管理员密码: FileCodeBox2023\"" local app_size="1" docker_app ;; 90|matrix) local app_id="90" local docker_name="matrix" local docker_img="matrixdotorg/synapse:latest" local docker_port=8090 docker_rum() { add_yuming if [ ! -d /home/docker/matrix/data ]; then docker run --rm \ -v /home/docker/matrix/data:/data \ -e SYNAPSE_SERVER_NAME=${yuming} \ -e SYNAPSE_REPORT_STATS=yes \ --name matrix \ matrixdotorg/synapse:latest generate fi docker run -d \ --name matrix \ -v /home/docker/matrix/data:/data \ -p ${docker_port}:8008 \ --restart=always \ matrixdotorg/synapse:latest echo "创建初始用户或管理员。请设置以下内容用户名和密码以及是否为管理员。" docker exec -it matrix register_new_matrix_user \ http://localhost:8008 \ -c /data/homeserver.yaml sed -i '/^enable_registration:/d' /home/docker/matrix/data/homeserver.yaml sed -i '/^# vim:ft=yaml/i enable_registration: true' /home/docker/matrix/data/homeserver.yaml sed -i '/^enable_registration_without_verification:/d' /home/docker/matrix/data/homeserver.yaml sed -i '/^# vim:ft=yaml/i enable_registration_without_verification: true' /home/docker/matrix/data/homeserver.yaml docker restart matrix ldnmp_Proxy ${yuming} 127.0.0.1 ${docker_port} block_container_port "$docker_name" "$ipv4_address" } local docker_describe="Matrix是一个去中心化的聊天协议" local docker_url="官网介绍: https://matrix.org/" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 91|gitea) local app_id="91" local app_name="gitea私有代码仓库" local app_text="免费新一代的代码托管平台，提供接近 GitHub 的使用体验。" local app_url="视频介绍: ${gh_https_url}github.com/go-gitea/gitea" local docker_name="gitea" local docker_port="8091" local app_size="2" docker_app_install() { mkdir -p /home/docker/gitea mkdir -p /home/docker/gitea/gitea mkdir -p /home/docker/gitea/data mkdir -p /home/docker/gitea/postgres cd /home/docker/gitea curl -o /home/docker/gitea/docker-compose.yml ${gh_proxy}raw.githubusercontent.com/kejilion/docker/main/gitea-docker-compose.yml sed -i "s/3000:3000/${docker_port}:3000/g" /home/docker/gitea/docker-compose.yml cd /home/docker/gitea/ docker compose up -d clear echo "已经安装完成" check_docker_app_ip } docker_app_update() { cd /home/docker/gitea/ && docker compose down --rmi all cd /home/docker/gitea/ && docker compose up -d } docker_app_uninstall() { cd /home/docker/gitea/ && docker compose down --rmi all rm -rf /home/docker/gitea echo "应用已卸载" } docker_app_plus ;; 92|filebrowser) local app_id="92" local docker_name="filebrowser" local docker_img="hurlenko/filebrowser" local docker_port=8092 docker_rum() { docker run -d \ --name filebrowser \ --restart=always \ -p ${docker_port}:8080 \ -v /home/docker/filebrowser/data:/data \ -v /home/docker/filebrowser/config:/config \ -e FB_BASEURL=/filebrowser \ hurlenko/filebrowser } local docker_describe="是一个基于Web的文件管理器" local docker_url="官网介绍: https://filebrowser.org/" local docker_use="docker logs filebrowser" local docker_passwd="" local app_size="1" docker_app ;; 93|dufs) local app_id="93" local docker_name="dufs" local docker_img="sigoden/dufs" local docker_port=8093 docker_rum() { docker run -d \ --name ${docker_name} \ --restart=always \ -v /home/docker/${docker_name}:/data \ -p ${docker_port}:5000 \ ${docker_img} /data -A } local docker_describe="极简静态文件服务器，支持上传下载" local docker_url="官网介绍: ${gh_https_url}github.com/sigoden/dufs" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 94|gopeed) local app_id="94" local docker_name="gopeed" local docker_img="liwei2633/gopeed" local docker_port=8094 docker_rum() { read -e -p "设置登录用户名: " app_use read -e -p "设置登录密码: " app_passwd docker run -d \ --name ${docker_name} \ --restart=always \ -v /home/docker/${docker_name}/downloads:/app/Downloads \ -v /home/docker/${docker_name}/storage:/app/storage \ -p ${docker_port}:9999 \ ${docker_img} -u ${app_use} -p ${app_passwd} } local docker_describe="分布式高速下载工具，支持多种协议" local docker_url="官网介绍: ${gh_https_url}github.com/GopeedLab/gopeed" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 95|paperless) local app_id="95" local app_name="paperless文档管理平台" local app_text="开源的电子文档管理系统，它的主要用途是把你的纸质文件数字化并管理起来。" local app_url="视频介绍: https://docs.paperless-ngx.com/" local docker_name="paperless-webserver-1" local docker_port="8095" local app_size="2" docker_app_install() { mkdir -p /home/docker/paperless mkdir -p /home/docker/paperless/export mkdir -p /home/docker/paperless/consume cd /home/docker/paperless curl -o /home/docker/paperless/docker-compose.yml ${gh_proxy}raw.githubusercontent.com/paperless-ngx/paperless-ngx/refs/heads/main/docker/compose/docker-compose.postgres-tika.yml curl -o /home/docker/paperless/docker-compose.env ${gh_proxy}raw.githubusercontent.com/paperless-ngx/paperless-ngx/refs/heads/main/docker/compose/.env sed -i "s/8000:8000/${docker_port}:8000/g" /home/docker/paperless/docker-compose.yml cd /home/docker/paperless docker compose up -d clear echo "已经安装完成" check_docker_app_ip } docker_app_update() { cd /home/docker/paperless/ && docker compose down --rmi all docker_app_install } docker_app_uninstall() { cd /home/docker/paperless/ && docker compose down --rmi all rm -rf /home/docker/paperless echo "应用已卸载" } docker_app_plus ;; 96|2fauth) local app_id="96" local app_name="2FAuth自托管二步验证器" local app_text="自托管的双重身份验证 (2FA) 账户管理和验证码生成工具。" local app_url="官网: ${gh_https_url}github.com/Bubka/2FAuth" local docker_name="2fauth" local docker_port="8096" local app_size="1" docker_app_install() { add_yuming mkdir -p /home/docker/2fauth mkdir -p /home/docker/2fauth/data chmod -R 777 /home/docker/2fauth/ cd /home/docker/2fauth curl -o /home/docker/2fauth/docker-compose.yml ${gh_proxy}raw.githubusercontent.com/kejilion/docker/main/2fauth-docker-compose.yml sed -i "s/8000:8000/${docker_port}:8000/g" /home/docker/2fauth/docker-compose.yml sed -i "s/yuming.com/${yuming}/g" /home/docker/2fauth/docker-compose.yml cd /home/docker/2fauth docker compose up -d ldnmp_Proxy ${yuming} 127.0.0.1 ${docker_port} block_container_port "$docker_name" "$ipv4_address" clear echo "已经安装完成" check_docker_app_ip } docker_app_update() { cd /home/docker/2fauth/ && docker compose down --rmi all docker_app_install } docker_app_uninstall() { cd /home/docker/2fauth/ && docker compose down --rmi all rm -rf /home/docker/2fauth echo "应用已卸载" } docker_app_plus ;; 97|wgs) local app_id="97" local docker_name="wireguard" local docker_img="lscr.io/linuxserver/wireguard:latest" local docker_port=8097 docker_rum() { read -e -p "请输入组网的客户端数量 (默认 5): " COUNT COUNT=${COUNT:-5} read -e -p "请输入 WireGuard 网段 (默认 10.13.13.0): " NETWORK NETWORK=${NETWORK:-10.13.13.0} PEERS=$(seq -f "wg%02g" 1 "$COUNT" | paste -sd,) ip link delete wg0 &>/dev/null ip_address docker run -d \ --name=wireguard \ --network host \ --cap-add=NET_ADMIN \ --cap-add=SYS_MODULE \ -e PUID=1000 \ -e PGID=1000 \ -e TZ=Etc/UTC \ -e SERVERURL=${ipv4_address} \ -e SERVERPORT=51820 \ -e PEERS=${PEERS} \ -e INTERNAL_SUBNET=${NETWORK} \ -e ALLOWEDIPS=${NETWORK}/24 \ -e PERSISTENTKEEPALIVE_PEERS=all \ -e LOG_CONFS=true \ -v /home/docker/wireguard/config:/config \ -v /lib/modules:/lib/modules \ --restart=always \ lscr.io/linuxserver/wireguard:latest sleep 3 docker exec wireguard sh -c " f='/config/wg_confs/wg0.conf' sed -i 's/51820/${docker_port}/g' \$f " docker exec wireguard sh -c " for d in /config/peer_*; do sed -i 's/51820/${docker_port}/g' \$d/*.conf done " docker exec wireguard sh -c ' for d in /config/peer_*; do sed -i "/^DNS/d" "$d"/*.conf done ' docker exec wireguard sh -c ' for d in /config/peer_*; do for f in "$d"/*.conf; do grep -q "^PersistentKeepalive" "$f" || \ sed -i "/^AllowedIPs/ a PersistentKeepalive = 25" "$f" done done ' docker exec wireguard bash -c ' for d in /config/peer_*; do cd "$d" || continue conf_file=$(ls *.conf) base_name="${conf_file%.conf}" qrencode -o "$base_name.png" < "$conf_file" done ' docker restart wireguard sleep 2 echo echo -e "${gl_huang}所有客户端二维码配置: ${gl_bai}" docker exec wireguard bash -c 'for i in $(ls /config | grep peer_ | sed "s/peer_//"); do echo "--- $i ---"; /app/show-peer $i; done' sleep 2 echo echo -e "${gl_huang}所有客户端配置代码: ${gl_bai}" docker exec wireguard sh -c 'for d in /config/peer_*; do echo "# $(basename $d) "; cat $d/*.conf; echo; done' sleep 2 echo -e "${gl_lv}${COUNT}个客户端配置全部输出，使用方法如下：${gl_bai}" echo -e "${gl_lv}1. 手机下载wg的APP，扫描上方二维码，可以快速连接网络${gl_bai}" echo -e "${gl_lv}2. Windows下载客户端，复制配置代码连接网络。${gl_bai}" echo -e "${gl_lv}3. Linux用脚本部署WG客户端，复制配置代码连接网络。${gl_bai}" echo -e "${gl_lv}官方客户端下载方式: https://www.wireguard.com/install/${gl_bai}" break_end } local docker_describe="现代化、高性能的虚拟专用网络工具" local docker_url="官网介绍: https://www.wireguard.com/" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 98|wgc) local app_id="98" local docker_name="wireguardc" local docker_img="kjlion/wireguard:alpine" local docker_port=51820 docker_rum() { mkdir -p /home/docker/wireguard/config/ local CONFIG_FILE="/home/docker/wireguard/config/wg0.conf" # 创建目录（如果不存在） mkdir -p "$(dirname "$CONFIG_FILE")" echo "请粘贴你的客户端配置，连续按两次回车保存：" # 初始化变量 input="" empty_line_count=0 # 逐行读取用户输入 while IFS= read -r line; do if [[ -z "$line" ]]; then ((empty_line_count++)) if [[ $empty_line_count -ge 2 ]]; then break fi else empty_line_count=0 input+="$line"$'\n' fi done # 写入配置文件 echo "$input" > "$CONFIG_FILE" echo "客户端配置已保存到 $CONFIG_FILE" ip link delete wg0 &>/dev/null docker run -d \ --name wireguardc \ --network host \ --cap-add NET_ADMIN \ --cap-add SYS_MODULE \ -v /home/docker/wireguard/config:/config \ -v /lib/modules:/lib/modules:ro \ --restart=always \ kjlion/wireguard:alpine sleep 3 docker logs wireguardc break_end } local docker_describe="现代化、高性能的虚拟专用网络工具" local docker_url="官网介绍: https://www.wireguard.com/" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 99|dsm) local app_id="99" local app_name="dsm群晖虚拟机" local app_text="Docker容器中的虚拟DSM" local app_url="官网: ${gh_https_url}github.com/vdsm/virtual-dsm" local docker_name="dsm" local docker_port="8099" local app_size="16" docker_app_install() { read -e -p "设置 CPU 核数 (默认 2): " CPU_CORES local CPU_CORES=${CPU_CORES:-2} read -e -p "设置内存大小 (默认 4G): " RAM_SIZE local RAM_SIZE=${RAM_SIZE:-4} mkdir -p /home/docker/dsm mkdir -p /home/docker/dsm/dev chmod -R 777 /home/docker/dsm/ cd /home/docker/dsm curl -o /home/docker/dsm/docker-compose.yml ${gh_proxy}raw.githubusercontent.com/kejilion/docker/main/dsm-docker-compose.yml sed -i "s/5000:5000/${docker_port}:5000/g" /home/docker/dsm/docker-compose.yml sed -i "s|CPU_CORES: "2"|CPU_CORES: "${CPU_CORES}"|g" /home/docker/dsm/docker-compose.yml sed -i "s|RAM_SIZE: "2G"|RAM_SIZE: "${RAM_SIZE}G"|g" /home/docker/dsm/docker-compose.yml cd /home/docker/dsm docker compose up -d clear echo "已经安装完成" check_docker_app_ip } docker_app_update() { cd /home/docker/dsm/ && docker compose down --rmi all docker_app_install } docker_app_uninstall() { cd /home/docker/dsm/ && docker compose down --rmi all rm -rf /home/docker/dsm echo "应用已卸载" } docker_app_plus ;; 100|syncthing) local app_id="100" local docker_name="syncthing" local docker_img="syncthing/syncthing:latest" local docker_port=8100 docker_rum() { docker run -d \ --name=syncthing \ --hostname=my-syncthing \ --restart=always \ -p ${docker_port}:8384 \ -p 22000:22000/tcp \ -p 22000:22000/udp \ -p 21027:21027/udp \ -v /home/docker/syncthing:/var/syncthing \ syncthing/syncthing:latest } local docker_describe="开源的点对点文件同步工具，类似于 Dropbox、Resilio Sync，但完全去中心化。" local docker_url="官网介绍: ${gh_https_url}github.com/syncthing/syncthing" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 101|moneyprinterturbo) local app_id="101" local app_name="AI视频生成工具" local app_text="MoneyPrinterTurbo是一款使用AI大模型合成高清短视频的工具" local app_url="官方网站: ${gh_https_url}github.com/harry0703/MoneyPrinterTurbo" local docker_name="moneyprinterturbo" local docker_port="8101" local app_size="3" docker_app_install() { install git mkdir -p /home/docker/ && cd /home/docker/ && git clone ${gh_proxy}github.com/harry0703/MoneyPrinterTurbo.git && cd MoneyPrinterTurbo/ sed -i "s/8501:8501/${docker_port}:8501/g" /home/docker/MoneyPrinterTurbo/docker-compose.yml docker compose up -d clear echo "已经安装完成" check_docker_app_ip } docker_app_update() { cd /home/docker/MoneyPrinterTurbo/ && docker compose down --rmi all cd /home/docker/MoneyPrinterTurbo/ git pull ${gh_proxy}github.com/harry0703/MoneyPrinterTurbo.git main > /dev/null 2>&1 sed -i "s/8501:8501/${docker_port}:8501/g" /home/docker/MoneyPrinterTurbo/docker-compose.yml cd /home/docker/MoneyPrinterTurbo/ && docker compose up -d } docker_app_uninstall() { cd /home/docker/MoneyPrinterTurbo/ && docker compose down --rmi all rm -rf /home/docker/MoneyPrinterTurbo echo "应用已卸载" } docker_app_plus ;; 102|vocechat) local app_id="102" local docker_name="vocechat-server" local docker_img="privoce/vocechat-server:latest" local docker_port=8102 docker_rum() { docker run -d --restart=always \ -p ${docker_port}:3000 \ --name vocechat-server \ -v /home/docker/vocechat/data:/home/vocechat-server/data \ privoce/vocechat-server:latest } local docker_describe="是一款支持独立部署的个人云社交媒体聊天服务" local docker_url="官网介绍: ${gh_https_url}github.com/Privoce/vocechat-web" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 103|umami) local app_id="103" local app_name="Umami网站统计工具" local app_text="开源、轻量、隐私友好的网站分析工具，类似于GoogleAnalytics。" local app_url="官方网站: ${gh_https_url}github.com/umami-software/umami" local docker_name="umami-umami-1" local docker_port="8103" local app_size="1" docker_app_install() { install git mkdir -p /home/docker/ && cd /home/docker/ && git clone ${gh_proxy}github.com/umami-software/umami.git && cd umami sed -i "s/3000:3000/${docker_port}:3000/g" /home/docker/umami/docker-compose.yml docker compose up -d clear echo "已经安装完成" check_docker_app_ip echo "初始用户名: admin" echo "初始密码: umami" } docker_app_update() { cd /home/docker/umami/ && docker compose down --rmi all cd /home/docker/umami/ git pull ${gh_proxy}github.com/umami-software/umami.git main > /dev/null 2>&1 sed -i "s/8501:8501/${docker_port}:8501/g" /home/docker/umami/docker-compose.yml cd /home/docker/umami/ && docker compose up -d } docker_app_uninstall() { cd /home/docker/umami/ && docker compose down --rmi all rm -rf /home/docker/umami echo "应用已卸载" } docker_app_plus ;; 104|nginx-stream) stream_panel ;; 105|siyuan) local app_id="105" local docker_name="siyuan" local docker_img="b3log/siyuan" local docker_port=8105 docker_rum() { read -e -p "设置登录密码: " app_passwd docker run -d \ --name siyuan \ --restart=always \ -v /home/docker/siyuan/workspace:/siyuan/workspace \ -p ${docker_port}:6806 \ -e PUID=1001 \ -e PGID=1002 \ b3log/siyuan \ --workspace=/siyuan/workspace/ \ --accessAuthCode="${app_passwd}" } local docker_describe="思源笔记是一款隐私优先的知识管理系统" local docker_url="官网介绍: ${gh_https_url}github.com/siyuan-note/siyuan" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 106|drawnix) local app_id="106" local docker_name="drawnix" local docker_img="pubuzhixing/drawnix" local docker_port=8106 docker_rum() { docker run -d \ --restart=always \ --name drawnix \ -p ${docker_port}:80 \ pubuzhixing/drawnix } local docker_describe="是一款强大的开源白板工具，集成思维导图、流程图等。" local docker_url="官网介绍: ${gh_https_url}github.com/plait-board/drawnix" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 107|pansou) local app_id="107" local docker_name="pansou" local docker_img="ghcr.io/fish2018/pansou-web" local docker_port=8107 docker_rum() { docker run -d \ --name pansou \ --restart=always \ -p ${docker_port}:80 \ -v /home/docker/pansou/data:/app/data \ -v /home/docker/pansou/logs:/app/logs \ -e ENABLED_PLUGINS="hunhepan,jikepan,panwiki,pansearch,panta,qupansou, susu,thepiratebay,wanou,xuexizhinan,panyq,zhizhen,labi,muou,ouge,shandian, duoduo,huban,cyg,erxiao,miaoso,fox4k,pianku,clmao,wuji,cldi,xiaozhang, libvio,leijing,xb6v,xys,ddys,hdmoli,yuhuage,u3c3,javdb,clxiong,jutoushe, sdso,xiaoji,xdyh,haisou,bixin,djgou,nyaa,xinjuc,aikanzy,qupanshe,xdpan, discourse,yunsou,ahhhhfs,nsgame,gying" \ ghcr.io/fish2018/pansou-web } local docker_describe="PanSou是一个高性能的网盘资源搜索API服务。" local docker_url="官网介绍: ${gh_https_url}github.com/fish2018/pansou" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 108|langbot) local app_id="108" local app_name="LangBot聊天机器人" local app_text="是一个开源的大语言模型原生即时通信机器人开发平台" local app_url="官方网站: ${gh_https_url}github.com/langbot-app/LangBot" local docker_name="langbot_plugin_runtime" local docker_port="8108" local app_size="1" docker_app_install() { install git mkdir -p /home/docker/ && cd /home/docker/ && git clone ${gh_proxy}github.com/langbot-app/LangBot && cd LangBot/docker sed -i "s/5300:5300/${docker_port}:5300/g" /home/docker/LangBot/docker/docker-compose.yaml docker compose up -d clear echo "已经安装完成" check_docker_app_ip } docker_app_update() { cd /home/docker/LangBot/docker && docker compose down --rmi all cd /home/docker/LangBot/ git pull ${gh_proxy}github.com/langbot-app/LangBot main > /dev/null 2>&1 sed -i "s/5300:5300/${docker_port}:5300/g" /home/docker/LangBot/docker/docker-compose.yaml cd /home/docker/LangBot/docker/ && docker compose up -d } docker_app_uninstall() { cd /home/docker/LangBot/docker/ && docker compose down --rmi all rm -rf /home/docker/LangBot echo "应用已卸载" } docker_app_plus ;; 109|zfile) local app_id="109" local docker_name="zfile" local docker_img="zhaojun1998/zfile:latest" local docker_port=8109 docker_rum() { docker run -d --name=zfile --restart=always \ -p ${docker_port}:8080 \ -v /home/docker/zfile/db:/root/.zfile-v4/db \ -v /home/docker/zfile/logs:/root/.zfile-v4/logs \ -v /home/docker/zfile/file:/data/file \ -v /home/docker/zfile/application.properties:/root/.zfile-v4/application.properties \ zhaojun1998/zfile:latest } local docker_describe="是一个适用于个人或小团队的在线网盘程序。" local docker_url="官网介绍: ${gh_https_url}github.com/zfile-dev/zfile" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 110|karakeep) local app_id="110" local app_name="karakeep书签管理" local app_text="是一款可自行托管的书签应用，带有人工智能功能，专为数据囤积者而设计。" local app_url="官方网站: ${gh_https_url}github.com/karakeep-app/karakeep" local docker_name="docker-web-1" local docker_port="8110" local app_size="1" docker_app_install() { install git mkdir -p /home/docker/ && cd /home/docker/ && git clone ${gh_proxy}github.com/karakeep-app/karakeep.git && cd karakeep/docker && cp .env.sample .env sed -i "s/3000:3000/${docker_port}:3000/g" /home/docker/karakeep/docker/docker-compose.yml docker compose up -d clear echo "已经安装完成" check_docker_app_ip } docker_app_update() { cd /home/docker/karakeep/docker/ && docker compose down --rmi all cd /home/docker/karakeep/ git pull ${gh_proxy}github.com/karakeep-app/karakeep.git main > /dev/null 2>&1 sed -i "s/3000:3000/${docker_port}:3000/g" /home/docker/karakeep/docker/docker-compose.yml cd /home/docker/karakeep/docker/ && docker compose up -d } docker_app_uninstall() { cd /home/docker/karakeep/docker/ && docker compose down --rmi all rm -rf /home/docker/karakeep echo "应用已卸载" } docker_app_plus ;; 111|convertx) local app_id="111" local docker_name="convertx" local docker_img="ghcr.io/c4illin/convertx:latest" local docker_port=8111 docker_rum() { docker run -d --name=${docker_name} --restart=always \ -p ${docker_port}:3000 \ -v /home/docker/convertx:/app/data \ ${docker_img} } local docker_describe="是一个功能强大的多格式文件转换工具（支持文档、图像、音频视频等）强烈建议添加域名访问" local docker_url="项目地址: ${gh_https_url}github.com/c4illin/ConvertX" local docker_use="" local docker_passwd="" local app_size="2" docker_app ;; 112|lucky) local app_id="112" local docker_name="lucky" local docker_img="gdy666/lucky:v2" # 由于 Lucky 使用 host 网络模式，这里的端口仅作记录/说明参考，实际由应用自身控制（默认16601） local docker_port=8112 docker_rum() { docker run -d --name=${docker_name} --restart=always \ --network host \ -v /home/docker/lucky/conf:/app/conf \ -v /var/run/docker.sock:/var/run/docker.sock \ ${docker_img} echo "正在等待 Lucky 初始化..." sleep 10 docker exec lucky /app/lucky -rSetHttpAdminPort ${docker_port} } local docker_describe="Lucky 是一个大内网穿透及端口转发管理工具，支持 DDNS、反向代理、WOL 等功能。" local docker_url="项目地址: ${gh_https_url}github.com/gdy666/lucky" local docker_use="echo \"默认账号密码: 666\"" local docker_passwd="" local app_size="1" docker_app ;; 113|firefox) local app_id="113" local docker_name="firefox" local docker_img="jlesage/firefox:latest" local docker_port=8113 docker_rum() { read -e -p "设置登录密码: " admin_password docker run -d --name=${docker_name} --restart=always \ -p ${docker_port}:5800 \ -v /home/docker/firefox:/config:rw \ -e ENABLE_CJK_FONT=1 \ -e WEB_AUDIO=1 \ -e VNC_PASSWORD="${admin_password}" \ ${docker_img} } local docker_describe="是一个运行在 Docker 中的 Firefox 浏览器，支持通过网页直接访问桌面版浏览器界面。" local docker_url="项目地址: ${gh_https_url}github.com/jlesage/docker-firefox" local docker_use="" local docker_passwd="" local app_size="1" docker_app ;; 114|Moltbot|ClawdBot|moltbot|clawdbot|openclaw|OpenClaw) moltbot_menu ;; 115|hermes) bash <(curl -sL ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/hermes_manager.sh) ;; b) clear send_stats "全部应用备份" local backup_filename="app_$(date +"%Y%m%d%H%M%S").tar.gz" echo -e "${gl_kjlan}正在备份 $backup_filename ...${gl_bai}" cd / && tar czvf "$backup_filename" home while true; do clear echo "备份文件已创建: /$backup_filename" read -e -p "要传送备份数据到远程服务器吗？(Y/N): " choice case "$choice" in [Yy]) kj_ssh_read_host_port "请输入远端服务器IP: " "目标服务器SSH端口 [默认22]: " "22" local remote_ip="$KJ_SSH_HOST" local TARGET_PORT="$KJ_SSH_PORT" local latest_tar=$(ls -t /app*.tar.gz | head -1) if [ -n "$latest_tar" ]; then ssh-keygen -f "/root/.ssh/known_hosts" -R "$remote_ip" sleep 2 # 添加等待时间 scp -P "$TARGET_PORT" -o StrictHostKeyChecking=no "$latest_tar" "root@$remote_ip:/" echo "文件已传送至远程服务器/根目录。" else echo "未找到要传送的文件。" fi break ;; *) echo "注意: 目前备份仅包含docker项目，不包含宝塔，1panel等建站面板的数据备份。" break ;; esac done ;; r) root_use send_stats "全部应用还原" echo "可用的应用备份" echo "-------------------------" ls -lt /app*.gz | awk '{print $NF}' echo "" read -e -p "回车键还原最新的备份，输入备份文件名还原指定的备份，输入0退出：" filename if [ "$filename" == "0" ]; then break_end linux_panel fi # 如果用户没有输入文件名，使用最新的压缩包 if [ -z "$filename" ]; then local filename=$(ls -t /app*.tar.gz | head -1) fi if [ -n "$filename" ]; then echo -e "${gl_kjlan}正在解压 $filename ...${gl_bai}" cd / && tar -xzf "$filename" echo "应用数据已还原，目前请手动进入指定应用菜单，更新应用，即可还原应用。" else echo "没有找到压缩包。" fi ;; 0) kejilion ;; *) cd ~ install git if [ ! -d apps/.git ]; then timeout 10s git clone ${gh_proxy}github.com/kejilion/apps.git else cd apps # git pull origin main > /dev/null 2>&1 timeout 10s git pull ${gh_proxy}github.com/kejilion/apps.git main > /dev/null 2>&1 fi local custom_app="$HOME/apps/${sub_choice}.conf" if [ -f "$custom_app" ]; then . "$custom_app" else echo -e "${gl_hong}错误: 未找到编号为 ${sub_choice} 的应用配置${gl_bai}" fi ;; esac break_end sub_choice="" done } linux_work() { while true; do clear send_stats "后台工作区" echo -e "后台工作区" echo -e "系统将为你提供可以后台常驻运行的工作区，你可以用来执行长时间的任务" echo -e "即使你断开SSH，工作区中的任务也不会中断，后台常驻任务。" echo -e "${gl_huang}提示: ${gl_bai}进入工作区后使用Ctrl+b再单独按d，退出工作区！" echo -e "${gl_kjlan}------------------------" echo "当前已存在的工作区列表" echo -e "${gl_kjlan}------------------------" tmux list-sessions echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}1. ${gl_bai}1号工作区" echo -e "${gl_kjlan}2. ${gl_bai}2号工作区" echo -e "${gl_kjlan}3. ${gl_bai}3号工作区" echo -e "${gl_kjlan}4. ${gl_bai}4号工作区" echo -e "${gl_kjlan}5. ${gl_bai}5号工作区" echo -e "${gl_kjlan}6. ${gl_bai}6号工作区" echo -e "${gl_kjlan}7. ${gl_bai}7号工作区" echo -e "${gl_kjlan}8. ${gl_bai}8号工作区" echo -e "${gl_kjlan}9. ${gl_bai}9号工作区" echo -e "${gl_kjlan}10. ${gl_bai}10号工作区" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}21. ${gl_bai}SSH常驻模式 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}22. ${gl_bai}创建/进入工作区" echo -e "${gl_kjlan}23. ${gl_bai}注入命令到后台工作区" echo -e "${gl_kjlan}24. ${gl_bai}删除指定工作区" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}0. ${gl_bai}返回主菜单" echo -e "${gl_kjlan}------------------------${gl_bai}" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) clear install tmux local SESSION_NAME="work1" send_stats "启动工作区$SESSION_NAME" tmux_run ;; 2) clear install tmux local SESSION_NAME="work2" send_stats "启动工作区$SESSION_NAME" tmux_run ;; 3) clear install tmux local SESSION_NAME="work3" send_stats "启动工作区$SESSION_NAME" tmux_run ;; 4) clear install tmux local SESSION_NAME="work4" send_stats "启动工作区$SESSION_NAME" tmux_run ;; 5) clear install tmux local SESSION_NAME="work5" send_stats "启动工作区$SESSION_NAME" tmux_run ;; 6) clear install tmux local SESSION_NAME="work6" send_stats "启动工作区$SESSION_NAME" tmux_run ;; 7) clear install tmux local SESSION_NAME="work7" send_stats "启动工作区$SESSION_NAME" tmux_run ;; 8) clear install tmux local SESSION_NAME="work8" send_stats "启动工作区$SESSION_NAME" tmux_run ;; 9) clear install tmux local SESSION_NAME="work9" send_stats "启动工作区$SESSION_NAME" tmux_run ;; 10) clear install tmux local SESSION_NAME="work10" send_stats "启动工作区$SESSION_NAME" tmux_run ;; 21) while true; do clear if grep -q 'tmux attach-session -t sshd || tmux new-session -s sshd' ~/.bashrc; then local tmux_sshd_status="${gl_lv}开启${gl_bai}" else local tmux_sshd_status="${gl_hui}关闭${gl_bai}" fi send_stats "SSH常驻模式 " echo -e "SSH常驻模式 ${tmux_sshd_status}" echo "开启后SSH连接后会直接进入常驻模式，直接回到之前的工作状态。" echo "------------------------" echo "1. 开启 2. 关闭" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " gongzuoqu_del case "$gongzuoqu_del" in 1) install tmux local SESSION_NAME="sshd" send_stats "启动工作区$SESSION_NAME" grep -q "tmux attach-session -t sshd" ~/.bashrc || echo -e "\n# 自动进入 tmux 会话\nif [[ -z \"\$TMUX\" ]]; then\n tmux attach-session -t sshd || tmux new-session -s sshd\nfi" >> ~/.bashrc source ~/.bashrc tmux_run ;; 2) sed -i '/# 自动进入 tmux 会话/,+4d' ~/.bashrc tmux kill-window -t sshd ;; *) break ;; esac done ;; 22) read -e -p "请输入你创建或进入的工作区名称，如1001 kj001 work1: " SESSION_NAME tmux_run send_stats "自定义工作区" ;; 23) read -e -p "请输入你要后台执行的命令，如:curl -fsSL https://get.docker.com | sh: " tmuxd tmux_run_d send_stats "注入命令到后台工作区" ;; 24) read -e -p "请输入要删除的工作区名称: " gongzuoqu_name tmux kill-window -t $gongzuoqu_name send_stats "删除工作区" ;; 0) kejilion ;; *) echo "无效的输入!" ;; esac break_end done } # 智能切换镜像源函数 switch_mirror() { # 可选参数，默认为 false local upgrade_software=${1:-false} local clean_cache=${2:-false} # 获取用户国家 local country country=$(curl -s ipinfo.io/country) echo "检测到国家：$country" if [ "$country" = "CN" ]; then echo "使用国内镜像源..." bash <(curl -sSL https://linuxmirrors.cn/main.sh) \ --source mirrors.huaweicloud.com \ --protocol https \ --use-intranet-source false \ --backup true \ --upgrade-software "$upgrade_software" \ --clean-cache "$clean_cache" \ --ignore-backup-tips \ --install-epel false \ --pure-mode else echo "使用海外镜像源..." if [ -f /etc/os-release ] && grep -qi "oracle" /etc/os-release; then bash <(curl -sSL https://linuxmirrors.cn/main.sh) \ --source mirrors.xtom.com \ --protocol https \ --use-intranet-source false \ --backup true \ --upgrade-software "$upgrade_software" \ --clean-cache "$clean_cache" \ --ignore-backup-tips \ --install-epel false \ --pure-mode else bash <(curl -sSL https://linuxmirrors.cn/main.sh) \ --use-official-source true \ --protocol https \ --use-intranet-source false \ --backup true \ --upgrade-software "$upgrade_software" \ --clean-cache "$clean_cache" \ --ignore-backup-tips \ --install-epel false \ --pure-mode fi fi } fail2ban_panel() { root_use send_stats "ssh防御" while true; do check_f2b_status echo -e "SSH防御程序 $check_f2b_status" echo "fail2ban是一个SSH防止暴力破解工具" echo "官网介绍: ${gh_proxy}github.com/fail2ban/fail2ban" echo "------------------------" echo "1. 安装防御程序" echo "------------------------" echo "2. 查看SSH拦截记录" echo "3. 日志实时监控" echo "------------------------" echo "4. 基础参数配置（封禁时长/时间窗口/重试次数）" echo "5. 编辑配置文件（nano）" echo "------------------------" echo "9. 卸载防御程序" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) f2b_install_sshd cd ~ f2b_status break_end ;; 2) echo "------------------------" f2b_sshd echo "------------------------" break_end ;; 3) tail -f /var/log/fail2ban.log break ;; 4) send_stats "SSH防御基础参数配置" f2b_basic_config break_end ;; 5) send_stats "SSH防御编辑配置文件" f2b_edit_config break_end ;; 9) remove fail2ban rm -rf /etc/fail2ban echo "Fail2Ban防御程序已卸载" break ;; *) break ;; esac done } net_menu() { send_stats "网卡管理工具" show_nics() { echo "================ 当前网卡信息 ================" printf "%-18s %-12s %-20s %-26s\n" "网卡名" "状态" "IP地址" "MAC地址" echo "------------------------------------------------" for nic in $(ls /sys/class/net); do state=$(cat /sys/class/net/$nic/operstate 2>/dev/null) ipaddr=$(ip -4 addr show $nic | awk '/inet /{print $2}' | head -n1) mac=$(cat /sys/class/net/$nic/address 2>/dev/null) printf "%-15s %-10s %-18s %-20s\n" "$nic" "$state" "${ipaddr:-无}" "$mac" done echo "================================================" } while true; do clear show_nics echo echo "=========== 网卡管理菜单 ===========" echo "1. 启用网卡" echo "2. 禁用网卡" echo "3. 查看网卡详细信息" echo "4. 刷新网卡信息" echo "0. 返回上一级选单" echo "====================================" read -erp "请选择操作: " choice case $choice in 1) send_stats "启用网卡" read -erp "请输入要启用的网卡名: " nic if ip link show "$nic" &>/dev/null; then ip link set "$nic" up && echo "✔ 网卡 $nic 已启用" else echo "✘ 网卡不存在" fi read -erp "按回车继续..." ;; 2) send_stats "禁用网卡" read -erp "请输入要禁用的网卡名: " nic if ip link show "$nic" &>/dev/null; then ip link set "$nic" down && echo "✔ 网卡 $nic 已禁用" else echo "✘ 网卡不存在" fi read -erp "按回车继续..." ;; 3) send_stats "查看网卡详情" read -erp "请输入要查看的网卡名: " nic if ip link show "$nic" &>/dev/null; then echo "========== $nic 详细信息 ==========" ip addr show "$nic" ethtool "$nic" 2>/dev/null | head -n 10 else echo "✘ 网卡不存在" fi read -erp "按回车继续..." ;; 4) send_stats "刷新网卡信息" continue ;; *) break ;; esac done } log_menu() { send_stats "系统日志管理工具" show_log_overview() { echo "============= 系统日志概览 =============" echo "主机名: $(hostname)" echo "系统时间: $(date)" echo echo "[ /var/log 目录占用 ]" du -sh /var/log 2>/dev/null echo echo "[ journal 日志占用 ]" journalctl --disk-usage 2>/dev/null echo "========================================" } while true; do clear show_log_overview echo echo "=========== 系统日志管理菜单 ===========" echo "1. 查看最近系统日志（journal）" echo "2. 查看指定服务日志" echo "3. 查看登录/安全日志" echo "4. 实时跟踪日志" echo "5. 清理旧 journal 日志" echo "0. 返回上一级选单" echo "=======================================" read -erp "请选择操作: " choice case $choice in 1) send_stats "查看最近日志" read -erp "查看最近多少行日志？[默认 100]: " lines lines=${lines:-100} journalctl -n "$lines" --no-pager read -erp "按回车继续..." ;; 2) send_stats "查看指定服务日志" read -erp "请输入服务名（如 sshd、nginx）: " svc if systemctl list-unit-files | grep -q "^$svc"; then journalctl -u "$svc" -n 100 --no-pager else echo "✘ 服务不存在或无日志" fi read -erp "按回车继续..." ;; 3) send_stats "查看登录/安全日志" echo "====== 最近登录日志 ======" last -n 10 echo echo "====== 认证日志 ======" if [ -f /var/log/secure ]; then tail -n 20 /var/log/secure elif [ -f /var/log/auth.log ]; then tail -n 20 /var/log/auth.log else echo "未找到安全日志文件" fi read -erp "按回车继续..." ;; 4) send_stats "实时跟踪日志" echo "1) 系统日志" echo "2) 指定服务日志" read -erp "选择跟踪类型: " t if [ "$t" = "1" ]; then journalctl -f elif [ "$t" = "2" ]; then read -erp "输入服务名: " svc journalctl -u "$svc" -f else echo "无效选择" fi ;; 5) send_stats "清理旧 journal 日志" echo "⚠️ 清理 journal 日志（安全方式）" echo "1) 保留最近 7 天" echo "2) 保留最近 3 天" echo "3) 限制日志最大 500M" read -erp "请选择清理方式: " c case $c in 1) journalctl --vacuum-time=7d ;; 2) journalctl --vacuum-time=3d ;; 3) journalctl --vacuum-size=500M ;; *) echo "无效选项" ;; esac echo "✔ journal 日志清理完成" sleep 2 ;; *) break ;; esac done } env_menu() { BASHRC="$HOME/.bashrc" PROFILE="$HOME/.profile" send_stats "系统变量管理工具" show_env_vars() { clear send_stats "当前已生效环境变量" echo "========== 当前已生效环境变量（节选） ==========" printf "%-20s %s\n" "变量名" "值" echo "-----------------------------------------------" for v in USER HOME SHELL LANG PWD; do printf "%-20s %s\n" "$v" "${!v}" done echo echo "PATH:" echo "$PATH" | tr ':' '\n' | nl -ba echo echo "========== 配置文件中定义的变量（解析） ==========" parse_file_vars() { local file="$1" [ -f "$file" ] || return echo echo ">>> 来源文件：$file" echo "-----------------------------------------------" # 提取 export VAR=xxx 或 VAR=xxx grep -Ev '^\s*#|^\s*$' "$file" \ | grep -E '^(export[[:space:]]+)?[A-Za-z_][A-Za-z0-9_]*=' \ | while read -r line; do var=$(echo "$line" | sed -E 's/^(export[[:space:]]+)?([A-Za-z_][A-Za-z0-9_]*).*/\2/') val=$(echo "$line" | sed -E 's/^[^=]+=//') printf "%-20s %s\n" "$var" "$val" done } parse_file_vars "$HOME/.bashrc" parse_file_vars "$HOME/.profile" echo echo "===============================================" read -erp "按回车继续..." } view_file() { local file="$1" send_stats "查看变量文件 $file" clear if [ -f "$file" ]; then echo "========== 查看文件：$file ==========" cat -n "$file" echo "====================================" else echo "文件不存在：$file" fi read -erp "按回车继续..." } edit_file() { local file="$1" send_stats "编辑变量文件 $file" install nano nano "$file" } source_files() { echo "正在重新加载环境变量..." send_stats "正在重新加载环境变量" source "$BASHRC" source "$PROFILE" echo "✔ 环境变量已重新加载" read -erp "按回车继续..." } while true; do clear echo "=========== 系统环境变量管理 ==========" echo "当前用户：$USER" echo "--------------------------------------" echo "1. 查看当前常用环境变量" echo "2. 查看 ~/.bashrc" echo "3. 查看 ~/.profile" echo "4. 编辑 ~/.bashrc" echo "5. 编辑 ~/.profile" echo "6. 重新加载环境变量（source）" echo "--------------------------------------" echo "0. 返回上一级选单" echo "--------------------------------------" read -erp "请选择操作: " choice case "$choice" in 1) show_env_vars ;; 2) view_file "$BASHRC" ;; 3) view_file "$PROFILE" ;; 4) edit_file "$BASHRC" ;; 5) edit_file "$PROFILE" ;; 6) source_files ;; 0) break ;; *) echo "无效选项" sleep 1 ;; esac done } create_user_with_sshkey() { local new_username="$1" local is_sudo="${2:-false}" local sshkey_vl if [[ -z "$new_username" ]]; then echo "用法：create_user_with_sshkey <用户名>" return 1 fi # 创建用户 useradd -m -s /bin/bash "$new_username" || return 1 echo "导入公钥范例：" echo " - URL： ${gh_https_url}github.com/torvalds.keys" echo " - 直接粘贴： ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAI..." read -e -p "请导入 ${new_username} 的公钥: " sshkey_vl case "$sshkey_vl" in http://*|https://*) send_stats "从 URL 导入 SSH 公钥" fetch_remote_ssh_keys "$sshkey_vl" "/home/$new_username" ;; ssh-rsa*|ssh-ed25519*|ssh-ecdsa*) send_stats "公钥直接导入" import_sshkey "$sshkey_vl" "/home/$new_username" ;; *) echo "错误：未知参数 '$sshkey_vl'" return 1 ;; esac # 修正权限 chown -R "$new_username:$new_username" "/home/$new_username/.ssh" install sudo # sudo 免密 if [[ "$is_sudo" == "true" ]]; then cat >"/etc/sudoers.d/$new_username" <> /etc/ssh/sshd_config passwd -l "$new_username" &>/dev/null restart_ssh echo "用户 $new_username 创建完成" } linux_Settings() { while true; do clear # send_stats "系统工具" echo -e "系统工具" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}1. ${gl_bai}设置脚本启动快捷键 ${gl_kjlan}2. ${gl_bai}修改登录密码" echo -e "${gl_kjlan}3. ${gl_bai}用户密码登录模式 ${gl_kjlan}4. ${gl_bai}安装Python指定版本" echo -e "${gl_kjlan}5. ${gl_bai}开放所有端口 ${gl_kjlan}6. ${gl_bai}修改SSH连接端口" echo -e "${gl_kjlan}7. ${gl_bai}优化DNS地址 ${gl_kjlan}8. ${gl_bai}一键重装系统 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}9. ${gl_bai}禁用ROOT账户创建新账户 ${gl_kjlan}10. ${gl_bai}切换优先ipv4/ipv6" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}11. ${gl_bai}查看端口占用状态 ${gl_kjlan}12. ${gl_bai}修改虚拟内存大小" echo -e "${gl_kjlan}13. ${gl_bai}用户管理 ${gl_kjlan}14. ${gl_bai}用户/密码生成器" echo -e "${gl_kjlan}15. ${gl_bai}系统时区调整 ${gl_kjlan}16. ${gl_bai}设置BBR3加速" echo -e "${gl_kjlan}17. ${gl_bai}防火墙高级管理器 ${gl_kjlan}18. ${gl_bai}修改主机名" echo -e "${gl_kjlan}19. ${gl_bai}切换系统更新源 ${gl_kjlan}20. ${gl_bai}定时任务管理" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}21. ${gl_bai}本机host解析 ${gl_kjlan}22. ${gl_bai}SSH防御程序" echo -e "${gl_kjlan}23. ${gl_bai}限流自动关机 ${gl_kjlan}24. ${gl_bai}用户密钥登录模式" echo -e "${gl_kjlan}25. ${gl_bai}TG-bot系统监控预警 ${gl_kjlan}26. ${gl_bai}修复OpenSSH高危漏洞" echo -e "${gl_kjlan}27. ${gl_bai}红帽系Linux内核升级 ${gl_kjlan}28. ${gl_bai}Linux系统内核参数优化 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}29. ${gl_bai}病毒扫描工具 ${gl_huang}★${gl_bai} ${gl_kjlan}30. ${gl_bai}文件管理器" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}31. ${gl_bai}切换系统语言 ${gl_kjlan}32. ${gl_bai}命令行美化工具 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}33. ${gl_bai}设置系统回收站 ${gl_kjlan}34. ${gl_bai}系统备份与恢复" echo -e "${gl_kjlan}35. ${gl_bai}ssh远程连接工具 ${gl_kjlan}36. ${gl_bai}硬盘分区管理工具" echo -e "${gl_kjlan}37. ${gl_bai}命令行历史记录 ${gl_kjlan}38. ${gl_bai}rsync远程同步工具" echo -e "${gl_kjlan}39. ${gl_bai}命令收藏夹 ${gl_huang}★${gl_bai} ${gl_kjlan}40. ${gl_bai}网卡管理工具" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}41. ${gl_bai}系统日志管理工具 ${gl_huang}★${gl_bai} ${gl_kjlan}42. ${gl_bai}系统变量管理工具" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}61. ${gl_bai}留言板 ${gl_kjlan}66. ${gl_bai}一条龙系统调优 ${gl_huang}★${gl_bai}" echo -e "${gl_kjlan}99. ${gl_bai}重启服务器 ${gl_kjlan}100. ${gl_bai}隐私与安全" echo -e "${gl_kjlan}101. ${gl_bai}k命令高级用法 ${gl_huang}★${gl_bai} ${gl_kjlan}102. ${gl_bai}卸载科技lion脚本" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}0. ${gl_bai}返回主菜单" echo -e "${gl_kjlan}------------------------${gl_bai}" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) while true; do clear read -e -p "请输入你的快捷按键（输入0退出）: " kuaijiejian if [ "$kuaijiejian" == "0" ]; then break_end linux_Settings fi find /usr/local/bin/ -type l -exec bash -c 'test "$(readlink -f {})" = "/usr/local/bin/k" && rm -f {}' \; if [ "$kuaijiejian" != "k" ]; then ln -sf /usr/local/bin/k /usr/local/bin/$kuaijiejian fi ln -sf /usr/local/bin/k /usr/bin/$kuaijiejian > /dev/null 2>&1 echo "快捷键已设置" send_stats "脚本快捷键已设置" break_end linux_Settings done ;; 2) clear send_stats "设置你的登录密码" echo "设置你的登录密码" passwd ;; 3) clear add_sshpasswd ;; 4) root_use send_stats "py版本管理" echo "python版本管理" echo "视频介绍: https://www.bilibili.com/video/BV1Pm42157cK?t=0.1" echo "---------------------------------------" echo "该功能可无缝安装python官方支持的任何版本！" local VERSION=$(python3 -V 2>&1 | awk '{print $2}') echo -e "当前python版本号: ${gl_huang}$VERSION${gl_bai}" echo "------------" echo "推荐版本: 3.12 3.11 3.10 3.9 3.8 2.7" echo "查询更多版本: https://www.python.org/downloads/" echo "------------" read -e -p "输入你要安装的python版本号（输入0退出）: " py_new_v if [[ "$py_new_v" == "0" ]]; then send_stats "脚本PY管理" break_end linux_Settings fi if ! grep -q 'export PYENV_ROOT="\$HOME/.pyenv"' ~/.bashrc; then if command -v yum &>/dev/null; then yum update -y && yum install git -y yum groupinstall "Development Tools" -y yum install openssl-devel bzip2-devel libffi-devel ncurses-devel zlib-devel readline-devel sqlite-devel xz-devel findutils -y curl -O https://www.openssl.org/source/openssl-1.1.1u.tar.gz tar -xzf openssl-1.1.1u.tar.gz cd openssl-1.1.1u ./config --prefix=/usr/local/openssl --openssldir=/usr/local/openssl shared zlib make make install echo "/usr/local/openssl/lib" > /etc/ld.so.conf.d/openssl-1.1.1u.conf ldconfig -v cd .. export LDFLAGS="-L/usr/local/openssl/lib" export CPPFLAGS="-I/usr/local/openssl/include" export PKG_CONFIG_PATH="/usr/local/openssl/lib/pkgconfig" elif command -v apt &>/dev/null; then apt update -y && apt install git -y apt install build-essential libssl-dev zlib1g-dev libbz2-dev libreadline-dev libsqlite3-dev wget curl llvm libncurses5-dev libncursesw5-dev xz-utils tk-dev libffi-dev liblzma-dev libgdbm-dev libnss3-dev libedit-dev -y elif command -v apk &>/dev/null; then apk update && apk add git apk add --no-cache bash gcc musl-dev libffi-dev openssl-dev bzip2-dev zlib-dev readline-dev sqlite-dev libc6-compat linux-headers make xz-dev build-base ncurses-dev else echo "未知的包管理器!" return fi curl https://pyenv.run | bash cat << EOF >> ~/.bashrc export PYENV_ROOT="\$HOME/.pyenv" if [[ -d "\$PYENV_ROOT/bin" ]]; then export PATH="\$PYENV_ROOT/bin:\$PATH" fi eval "\$(pyenv init --path)" eval "\$(pyenv init -)" eval "\$(pyenv virtualenv-init -)" EOF fi sleep 1 source ~/.bashrc sleep 1 pyenv install $py_new_v pyenv global $py_new_v rm -rf /tmp/python-build.* rm -rf $(pyenv root)/cache/* local VERSION=$(python -V 2>&1 | awk '{print $2}') echo -e "当前python版本号: ${gl_huang}$VERSION${gl_bai}" send_stats "脚本PY版本切换" ;; 5) root_use send_stats "开放端口" iptables_open remove iptables-persistent ufw firewalld iptables-services > /dev/null 2>&1 echo "端口已全部开放" ;; 6) root_use send_stats "修改SSH端口" while true; do clear sed -i 's/^\s*#\?\s*Port/Port/' /etc/ssh/sshd_config # 读取当前的 SSH 端口号 local current_port=$(grep -E '^ *Port [0-9]+' /etc/ssh/sshd_config | awk '{print $2}') # 打印当前的 SSH 端口号 echo -e "当前的 SSH 端口号是: ${gl_huang}$current_port ${gl_bai}" echo "------------------------" echo "端口号范围1到65535之间的数字。（输入0退出）" # 提示用户输入新的 SSH 端口号 read -e -p "请输入新的 SSH 端口号: " new_port # 判断端口号是否在有效范围内 if [[ $new_port =~ ^[0-9]+$ ]]; then # 检查输入是否为数字 if [[ $new_port -ge 1 && $new_port -le 65535 ]]; then send_stats "SSH端口已修改" new_ssh_port $new_port elif [[ $new_port -eq 0 ]]; then send_stats "退出SSH端口修改" break else echo "端口号无效，请输入1到65535之间的数字。" send_stats "输入无效SSH端口" break_end fi else echo "输入无效，请输入数字。" send_stats "输入无效SSH端口" break_end fi done ;; 7) set_dns_ui ;; 8) dd_xitong ;; 9) root_use send_stats "新用户禁用root" read -e -p "请输入新用户名（输入0退出）: " new_username if [ "$new_username" == "0" ]; then break_end linux_Settings fi create_user_with_sshkey $new_username true ssh-keygen -l -f /home/$new_username/.ssh/authorized_keys &>/dev/null && { passwd -l root &>/dev/null sed -i 's/^[[:space:]]*#\?[[:space:]]*PermitRootLogin.*/PermitRootLogin no/' /etc/ssh/sshd_config } ;; 10) root_use send_stats "设置v4/v6优先级" while true; do clear echo "设置v4/v6优先级" echo "------------------------" if grep -Eq '^\s*precedence\s+::ffff:0:0/96\s+100\s*$' /etc/gai.conf 2>/dev/null; then echo -e "当前网络优先级设置: ${gl_huang}IPv4${gl_bai} 优先" else echo -e "当前网络优先级设置: ${gl_huang}IPv6${gl_bai} 优先" fi echo "" echo "------------------------" echo "1. IPv4 优先 2. IPv6 优先 3. IPv6 修复工具" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "选择优先的网络: " choice case $choice in 1) prefer_ipv4 ;; 2) rm -f /etc/gai.conf echo "已切换为 IPv6 优先" send_stats "已切换为 IPv6 优先" ;; 3) clear bash <(curl -L -s jhb.ovh/jb/v6.sh) echo "该功能由jhb大神提供，感谢他！" send_stats "ipv6修复" ;; *) break ;; esac done ;; 11) clear ss -tulnape ;; 12) root_use send_stats "设置虚拟内存" while true; do clear echo "设置虚拟内存" local swap_used=$(free -m | awk 'NR==3{print $3}') local swap_total=$(free -m | awk 'NR==3{print $2}') local swap_info=$(free -m | awk 'NR==3{used=$3; total=$2; if (total == 0) {percentage=0} else {percentage=used*100/total}; printf "%dM/%dM (%d%%)", used, total, percentage}') echo -e "当前虚拟内存: ${gl_huang}$swap_info${gl_bai}" echo "------------------------" echo "1. 分配1024M 2. 分配2048M 3. 分配4096M 4. 自定义大小" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " choice case "$choice" in 1) send_stats "已设置1G虚拟内存" add_swap 1024 ;; 2) send_stats "已设置2G虚拟内存" add_swap 2048 ;; 3) send_stats "已设置4G虚拟内存" add_swap 4096 ;; 4) read -e -p "请输入虚拟内存大小（单位M）: " new_swap add_swap "$new_swap" send_stats "已设置自定义虚拟内存" ;; *) break ;; esac done ;; 13) while true; do root_use send_stats "用户管理" echo "用户列表" echo "----------------------------------------------------------------------------" printf "%-24s %-34s %-20s %-10s\n" "用户名" "用户权限" "用户组" "sudo权限" while IFS=: read -r username _ userid groupid _ _ homedir shell; do local groups=$(groups "$username" | cut -d : -f 2) local sudo_status if sudo -n -lU "$username" 2>/dev/null | grep -q "(ALL) \(NOPASSWD: \)\?ALL"; then sudo_status="Yes" else sudo_status="No" fi printf "%-20s %-30s %-20s %-10s\n" "$username" "$homedir" "$groups" "$sudo_status" done < /etc/passwd echo "" echo "账户操作" echo "------------------------" echo "1. 创建普通用户 2. 创建高级用户" echo "------------------------" echo "3. 赋予最高权限 4. 取消最高权限" echo "------------------------" echo "5. 删除账号" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) # 提示用户输入新用户名 read -e -p "请输入新用户名: " new_username create_user_with_sshkey $new_username false ;; 2) # 提示用户输入新用户名 read -e -p "请输入新用户名: " new_username create_user_with_sshkey $new_username true ;; 3) read -e -p "请输入用户名: " username install sudo cat >"/etc/sudoers.d/$username" </dev/null | xargs rm -f fi sed -i "/^$username\s*ALL=(ALL)/d" /etc/sudoers ;; 5) read -e -p "请输入要删除的用户名: " username userdel -r "$username" ;; *) break # 跳出循环，退出菜单 ;; esac done ;; 14) clear send_stats "用户信息生成器" echo "随机用户名" echo "------------------------" for i in {1..5}; do username="user$(< /dev/urandom tr -dc _a-z0-9 | head -c6)" echo "随机用户名 $i: $username" done echo "" echo "随机姓名" echo "------------------------" local first_names=("John" "Jane" "Michael" "Emily" "David" "Sophia" "William" "Olivia" "James" "Emma" "Ava" "Liam" "Mia" "Noah" "Isabella") local last_names=("Smith" "Johnson" "Brown" "Davis" "Wilson" "Miller" "Jones" "Garcia" "Martinez" "Williams" "Lee" "Gonzalez" "Rodriguez" "Hernandez") # 生成5个随机用户姓名 for i in {1..5}; do local first_name_index=$((RANDOM % ${#first_names[@]})) local last_name_index=$((RANDOM % ${#last_names[@]})) local user_name="${first_names[$first_name_index]} ${last_names[$last_name_index]}" echo "随机用户姓名 $i: $user_name" done echo "" echo "随机UUID" echo "------------------------" for i in {1..5}; do uuid=$(cat /proc/sys/kernel/random/uuid) echo "随机UUID $i: $uuid" done echo "" echo "16位随机密码" echo "------------------------" for i in {1..5}; do local password=$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c16) echo "随机密码 $i: $password" done echo "" echo "32位随机密码" echo "------------------------" for i in {1..5}; do local password=$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c32) echo "随机密码 $i: $password" done echo "" ;; 15) root_use send_stats "换时区" while true; do clear echo "系统时间信息" # 获取当前系统时区 local timezone=$(current_timezone) # 获取当前系统时间 local current_time=$(date +"%Y-%m-%d %H:%M:%S") # 显示时区和时间 echo "当前系统时区：$timezone" echo "当前系统时间：$current_time" echo "" echo "时区切换" echo "------------------------" echo "亚洲" echo "1. 中国上海时间 2. 中国香港时间" echo "3. 日本东京时间 4. 韩国首尔时间" echo "5. 新加坡时间 6. 印度加尔各答时间" echo "7. 阿联酋迪拜时间 8. 澳大利亚悉尼时间" echo "9. 泰国曼谷时间" echo "------------------------" echo "欧洲" echo "11. 英国伦敦时间 12. 法国巴黎时间" echo "13. 德国柏林时间 14. 俄罗斯莫斯科时间" echo "15. 荷兰尤特赖赫特时间 16. 西班牙马德里时间" echo "------------------------" echo "美洲" echo "21. 美国西部时间 22. 美国东部时间" echo "23. 加拿大时间 24. 墨西哥时间" echo "25. 巴西时间 26. 阿根廷时间" echo "------------------------" echo "31. UTC全球标准时间" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) set_timedate Asia/Shanghai ;; 2) set_timedate Asia/Hong_Kong ;; 3) set_timedate Asia/Tokyo ;; 4) set_timedate Asia/Seoul ;; 5) set_timedate Asia/Singapore ;; 6) set_timedate Asia/Kolkata ;; 7) set_timedate Asia/Dubai ;; 8) set_timedate Australia/Sydney ;; 9) set_timedate Asia/Bangkok ;; 11) set_timedate Europe/London ;; 12) set_timedate Europe/Paris ;; 13) set_timedate Europe/Berlin ;; 14) set_timedate Europe/Moscow ;; 15) set_timedate Europe/Amsterdam ;; 16) set_timedate Europe/Madrid ;; 21) set_timedate America/Los_Angeles ;; 22) set_timedate America/New_York ;; 23) set_timedate America/Vancouver ;; 24) set_timedate America/Mexico_City ;; 25) set_timedate America/Sao_Paulo ;; 26) set_timedate America/Argentina/Buenos_Aires ;; 31) set_timedate UTC ;; *) break ;; esac done ;; 16) bbrv3 ;; 17) iptables_panel ;; 18) root_use send_stats "修改主机名" while true; do clear local current_hostname=$(uname -n) echo -e "当前主机名: ${gl_huang}$current_hostname${gl_bai}" echo "------------------------" read -e -p "请输入新的主机名（输入0退出）: " new_hostname if [ -n "$new_hostname" ] && [ "$new_hostname" != "0" ]; then if [ -f /etc/alpine-release ]; then # Alpine echo "$new_hostname" > /etc/hostname hostname "$new_hostname" else # 其他系统，如 Debian, Ubuntu, CentOS 等 hostnamectl set-hostname "$new_hostname" sed -i "s/$current_hostname/$new_hostname/g" /etc/hostname systemctl restart systemd-hostnamed fi if grep -q "127.0.0.1" /etc/hosts; then sed -i "s/127.0.0.1 .*/127.0.0.1 $new_hostname localhost localhost.localdomain/g" /etc/hosts else echo "127.0.0.1 $new_hostname localhost localhost.localdomain" >> /etc/hosts fi if grep -q "^::1" /etc/hosts; then sed -i "s/^::1 .*/::1 $new_hostname localhost localhost.localdomain ipv6-localhost ipv6-loopback/g" /etc/hosts else echo "::1 $new_hostname localhost localhost.localdomain ipv6-localhost ipv6-loopback" >> /etc/hosts fi echo "主机名已更改为: $new_hostname" send_stats "主机名已更改" sleep 1 else echo "已退出，未更改主机名。" break fi done ;; 19) root_use send_stats "换系统更新源" clear echo "选择更新源区域" echo "接入LinuxMirrors切换系统更新源" echo "------------------------" echo "1. 中国大陆【默认】 2. 中国大陆【教育网】 3. 海外地区 4. 智能切换更新源" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "输入你的选择: " choice case $choice in 1) send_stats "中国大陆默认源" bash <(curl -sSL https://linuxmirrors.cn/main.sh) ;; 2) send_stats "中国大陆教育源" bash <(curl -sSL https://linuxmirrors.cn/main.sh) --edu ;; 3) send_stats "海外源" bash <(curl -sSL https://linuxmirrors.cn/main.sh) --abroad ;; 4) send_stats "智能切换更新源" switch_mirror false false ;; *) echo "已取消" ;; esac ;; 20) send_stats "定时任务管理" while true; do clear check_crontab_installed clear echo "定时任务列表" crontab -l echo "" echo "操作" echo "------------------------" echo "1. 添加定时任务 2. 删除定时任务 3. 编辑定时任务" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) read -e -p "请输入新任务的执行命令: " newquest echo "------------------------" echo "1. 每月任务 2. 每周任务" echo "3. 每天任务 4. 每小时任务" echo "------------------------" read -e -p "请输入你的选择: " dingshi case $dingshi in 1) read -e -p "选择每月的几号执行任务？ (1-30): " day (crontab -l ; echo "0 0 $day * * $newquest") | crontab - > /dev/null 2>&1 ;; 2) read -e -p "选择周几执行任务？ (0-6，0代表星期日): " weekday (crontab -l ; echo "0 0 * * $weekday $newquest") | crontab - > /dev/null 2>&1 ;; 3) read -e -p "选择每天几点执行任务？（小时，0-23）: " hour (crontab -l ; echo "0 $hour * * * $newquest") | crontab - > /dev/null 2>&1 ;; 4) read -e -p "输入每小时的第几分钟执行任务？（分钟，0-60）: " minute (crontab -l ; echo "$minute * * * * $newquest") | crontab - > /dev/null 2>&1 ;; *) break # 跳出 ;; esac send_stats "添加定时任务" ;; 2) read -e -p "请输入需要删除任务的关键字: " kquest crontab -l | grep -v "$kquest" | crontab - send_stats "删除定时任务" ;; 3) crontab -e send_stats "编辑定时任务" ;; *) break # 跳出循环，退出菜单 ;; esac done ;; 21) root_use send_stats "本地host解析" while true; do clear echo "本机host解析列表" echo "如果你在这里添加解析匹配，将不再使用动态解析了" cat /etc/hosts echo "" echo "操作" echo "------------------------" echo "1. 添加新的解析 2. 删除解析地址" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " host_dns case $host_dns in 1) read -e -p "请输入新的解析记录 格式: 110.25.5.33 kejilion.pro : " addhost echo "$addhost" >> /etc/hosts send_stats "本地host解析新增" ;; 2) read -e -p "请输入需要删除的解析内容关键字: " delhost sed -i "/$delhost/d" /etc/hosts send_stats "本地host解析删除" ;; *) break # 跳出循环，退出菜单 ;; esac done ;; 22) fail2ban_panel ;; 23) root_use send_stats "限流关机功能" while true; do clear echo "限流关机功能" echo "视频介绍: https://www.bilibili.com/video/BV1mC411j7Qd?t=0.1" echo "------------------------------------------------" echo "当前流量使用情况，重启服务器流量计算会清零！" output_status echo -e "${gl_kjlan}总接收: ${gl_bai}$rx" echo -e "${gl_kjlan}总发送: ${gl_bai}$tx" # 检查是否存在 Limiting_Shut_down.sh 文件 if [ -f ~/Limiting_Shut_down.sh ]; then # 获取 threshold_gb 的值 local rx_threshold_gb=$(grep -oP 'rx_threshold_gb=\K\d+' ~/Limiting_Shut_down.sh) local tx_threshold_gb=$(grep -oP 'tx_threshold_gb=\K\d+' ~/Limiting_Shut_down.sh) echo -e "${gl_lv}当前设置的进站限流阈值为: ${gl_huang}${rx_threshold_gb}${gl_lv}G${gl_bai}" echo -e "${gl_lv}当前设置的出站限流阈值为: ${gl_huang}${tx_threshold_gb}${gl_lv}GB${gl_bai}" else echo -e "${gl_hui}当前未启用限流关机功能${gl_bai}" fi echo echo "------------------------------------------------" echo "系统每分钟会检测实际流量是否到达阈值，到达后会自动关闭服务器！" echo "------------------------" echo "1. 开启限流关机功能 2. 停用限流关机功能" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " Limiting case "$Limiting" in 1) # 输入新的虚拟内存大小 echo "如果实际服务器就100G流量，可设置阈值为95G，提前关机，以免出现流量误差或溢出。" read -e -p "请输入进站流量阈值（单位为G，默认100G）: " rx_threshold_gb rx_threshold_gb=${rx_threshold_gb:-100} read -e -p "请输入出站流量阈值（单位为G，默认100G）: " tx_threshold_gb tx_threshold_gb=${tx_threshold_gb:-100} read -e -p "请输入流量重置日期（默认每月1日重置）: " cz_day cz_day=${cz_day:-1} cd ~ curl -Ss -o ~/Limiting_Shut_down.sh ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/Limiting_Shut_down1.sh chmod +x ~/Limiting_Shut_down.sh sed -i "s/110/$rx_threshold_gb/g" ~/Limiting_Shut_down.sh sed -i "s/120/$tx_threshold_gb/g" ~/Limiting_Shut_down.sh check_crontab_installed crontab -l | grep -v '~/Limiting_Shut_down.sh' | crontab - (crontab -l ; echo "* * * * * ~/Limiting_Shut_down.sh") | crontab - > /dev/null 2>&1 crontab -l | grep -v 'reboot' | crontab - (crontab -l ; echo "0 1 $cz_day * * reboot") | crontab - > /dev/null 2>&1 echo "限流关机已设置" send_stats "限流关机已设置" ;; 2) check_crontab_installed crontab -l | grep -v '~/Limiting_Shut_down.sh' | crontab - crontab -l | grep -v 'reboot' | crontab - rm ~/Limiting_Shut_down.sh echo "已关闭限流关机功能" ;; *) break ;; esac done ;; 24) sshkey_panel ;; 25) root_use send_stats "电报预警" echo "TG-bot监控预警功能" echo "视频介绍: https://youtu.be/vLL-eb3Z_TY" echo "------------------------------------------------" echo "您需要配置tg机器人API和接收预警的用户ID，即可实现本机CPU，内存，硬盘，流量，SSH登录的实时监控预警" echo "到达阈值后会向用户发预警消息" echo -e "${gl_hui}-关于流量，重启服务器将重新计算-${gl_bai}" read -e -p "确定继续吗？(Y/N): " choice case "$choice" in [Yy]) send_stats "电报预警启用" cd ~ install nano tmux bc jq check_crontab_installed if [ -f ~/TG-check-notify.sh ]; then chmod +x ~/TG-check-notify.sh nano ~/TG-check-notify.sh else curl -sS -O ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/TG-check-notify.sh chmod +x ~/TG-check-notify.sh nano ~/TG-check-notify.sh fi tmux kill-session -t TG-check-notify > /dev/null 2>&1 tmux new -d -s TG-check-notify "~/TG-check-notify.sh" crontab -l | grep -v '~/TG-check-notify.sh' | crontab - > /dev/null 2>&1 (crontab -l ; echo "@reboot tmux new -d -s TG-check-notify '~/TG-check-notify.sh'") | crontab - > /dev/null 2>&1 curl -sS -O ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/TG-SSH-check-notify.sh > /dev/null 2>&1 sed -i "3i$(grep '^TELEGRAM_BOT_TOKEN=' ~/TG-check-notify.sh)" TG-SSH-check-notify.sh > /dev/null 2>&1 sed -i "4i$(grep '^CHAT_ID=' ~/TG-check-notify.sh)" TG-SSH-check-notify.sh chmod +x ~/TG-SSH-check-notify.sh # 添加到 ~/.profile 文件中 if ! grep -q 'bash ~/TG-SSH-check-notify.sh' ~/.profile > /dev/null 2>&1; then echo 'bash ~/TG-SSH-check-notify.sh' >> ~/.profile if command -v dnf &>/dev/null || command -v yum &>/dev/null; then echo 'source ~/.profile' >> ~/.bashrc fi fi source ~/.profile clear echo "TG-bot预警系统已启动" echo -e "${gl_hui}你还可以将root目录中的TG-check-notify.sh预警文件放到其他机器上直接使用！${gl_bai}" ;; [Nn]) echo "已取消" ;; *) echo "无效的选择，请输入 Y 或 N。" ;; esac ;; 26) root_use send_stats "修复SSH高危漏洞" cd ~ curl -sS -O ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/upgrade_openssh9.8p1.sh chmod +x ~/upgrade_openssh9.8p1.sh ~/upgrade_openssh9.8p1.sh rm -f ~/upgrade_openssh9.8p1.sh ;; 27) elrepo ;; 28) Kernel_optimize ;; 29) clamav ;; 30) linux_file ;; 31) linux_language ;; 32) shell_bianse ;; 33) linux_trash ;; 34) linux_backup ;; 35) ssh_manager ;; 36) disk_manager ;; 37) clear send_stats "命令行历史记录" get_history_file() { for file in "$HOME"/.bash_history "$HOME"/.ash_history "$HOME"/.zsh_history "$HOME"/.local/share/fish/fish_history; do [ -f "$file" ] && { echo "$file"; return; } done return 1 } history_file=$(get_history_file) && cat -n "$history_file" ;; 38) rsync_manager ;; 39) clear linux_fav ;; 40) clear net_menu ;; 41) clear log_menu ;; 42) clear env_menu ;; 61) clear send_stats "留言板" echo "访问科技lion官方留言板，您对脚本有任何想法欢迎留言交流！" echo "https://board.kejilion.pro" echo "公共密码: kejilion.sh" ;; 66) root_use send_stats "一条龙调优" echo "一条龙系统调优" echo "------------------------------------------------" echo "将对以下内容进行操作与优化" echo "1. 优化系统更新源，更新系统到最新" echo "2. 清理系统垃圾文件" echo -e "3. 设置虚拟内存${gl_huang}1G${gl_bai}" echo -e "4. 设置SSH端口号为${gl_huang}5522${gl_bai}" echo -e "5. 启动fail2ban防御SSH暴力破解" echo -e "6. 开放所有端口" echo -e "7. 开启${gl_huang}BBR${gl_bai}加速" echo -e "8. 设置时区到${gl_huang}上海${gl_bai}" echo -e "9. 自动优化DNS地址${gl_huang}海外: 1.1.1.1 8.8.8.8 国内: 223.5.5.5 ${gl_bai}" echo -e "10. 设置网络为${gl_huang}ipv4优先${gl_bai}" echo -e "11. 安装基础工具${gl_huang}docker wget sudo tar unzip socat btop nano vim${gl_bai}" echo -e "12. Linux系统内核参数优化${gl_huang}自动根据网络环境调优${gl_bai}" echo "------------------------------------------------" read -e -p "确定一键保养吗？(Y/N): " choice case "$choice" in [Yy]) clear send_stats "一条龙调优启动" echo "------------------------------------------------" switch_mirror false false linux_update echo -e "[${gl_lv}OK${gl_bai}] 1/12. 更新系统到最新" echo "------------------------------------------------" linux_clean echo -e "[${gl_lv}OK${gl_bai}] 2/12. 清理系统垃圾文件" echo "------------------------------------------------" add_swap 1024 echo -e "[${gl_lv}OK${gl_bai}] 3/12. 设置虚拟内存${gl_huang}1G${gl_bai}" echo "------------------------------------------------" new_ssh_port 5522 echo -e "[${gl_lv}OK${gl_bai}] 4/12. 设置SSH端口号为${gl_huang}5522${gl_bai}" echo "------------------------------------------------" f2b_install_sshd cd ~ f2b_status echo -e "[${gl_lv}OK${gl_bai}] 5/12. 启动fail2ban防御SSH暴力破解" echo "------------------------------------------------" echo -e "[${gl_lv}OK${gl_bai}] 6/12. 开放所有端口" echo "------------------------------------------------" bbr_on echo -e "[${gl_lv}OK${gl_bai}] 7/12. 开启${gl_huang}BBR${gl_bai}加速" echo "------------------------------------------------" set_timedate Asia/Shanghai echo -e "[${gl_lv}OK${gl_bai}] 8/12. 设置时区到${gl_huang}上海${gl_bai}" echo "------------------------------------------------" auto_optimize_dns echo -e "[${gl_lv}OK${gl_bai}] 9/12. 自动优化DNS地址${gl_huang}${gl_bai}" echo "------------------------------------------------" prefer_ipv4 echo -e "[${gl_lv}OK${gl_bai}] 10/12. 设置网络为${gl_huang}ipv4优先${gl_bai}}" echo "------------------------------------------------" install_docker install wget sudo tar unzip socat btop nano vim echo -e "[${gl_lv}OK${gl_bai}] 11/12. 安装基础工具${gl_huang}docker wget sudo tar unzip socat btop nano vim${gl_bai}" echo "------------------------------------------------" curl -sS ${gh_proxy}raw.githubusercontent.com/kejilion/sh/refs/heads/main/network-optimize.sh | bash echo -e "[${gl_lv}OK${gl_bai}] 12/12. Linux系统内核参数优化" echo -e "${gl_lv}一条龙系统调优已完成${gl_bai}" ;; [Nn]) echo "已取消" ;; *) echo "无效的选择，请输入 Y 或 N。" ;; esac ;; 99) clear send_stats "重启系统" server_reboot ;; 100) root_use while true; do clear if grep -q '^ENABLE_STATS="true"' /usr/local/bin/k > /dev/null 2>&1; then local status_message="${gl_lv}正在采集数据${gl_bai}" elif grep -q '^ENABLE_STATS="false"' /usr/local/bin/k > /dev/null 2>&1; then local status_message="${gl_hui}采集已关闭${gl_bai}" else local status_message="无法确定的状态" fi echo "隐私与安全" echo "脚本将收集用户使用功能的数据，优化脚本体验，制作更多好玩好用的功能" echo "将收集脚本版本号，使用的时间，系统版本，CPU架构，机器所属国家和使用的功能的名称，" echo "------------------------------------------------" echo -e "当前状态: $status_message" echo "--------------------" echo "1. 开启采集" echo "2. 关闭采集" echo "--------------------" echo "0. 返回上一级选单" echo "--------------------" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) cd ~ sed -i 's/^ENABLE_STATS="false"/ENABLE_STATS="true"/' /usr/local/bin/k sed -i 's/^ENABLE_STATS="false"/ENABLE_STATS="true"/' ~/kejilion.sh echo "已开启采集" send_stats "隐私与安全已开启采集" ;; 2) cd ~ sed -i 's/^ENABLE_STATS="true"/ENABLE_STATS="false"/' /usr/local/bin/k sed -i 's/^ENABLE_STATS="true"/ENABLE_STATS="false"/' ~/kejilion.sh echo "已关闭采集" send_stats "隐私与安全已关闭采集" ;; *) break ;; esac done ;; 101) clear k_info ;; 102) clear send_stats "卸载科技lion脚本" echo "卸载科技lion脚本" echo "------------------------------------------------" echo "将彻底卸载kejilion脚本，不影响你其他功能" read -e -p "确定继续吗？(Y/N): " choice case "$choice" in [Yy]) clear (crontab -l | grep -v "kejilion.sh") | crontab - rm -f /usr/local/bin/k rm ~/kejilion.sh echo "脚本已卸载，再见！" break_end clear exit ;; [Nn]) echo "已取消" ;; *) echo "无效的选择，请输入 Y 或 N。" ;; esac ;; 0) kejilion ;; *) echo "无效的输入!" ;; esac break_end done } linux_file() { root_use send_stats "文件管理器" while true; do clear echo "文件管理器" echo "------------------------" echo "当前路径" pwd echo "------------------------" ls --color=auto -x echo "------------------------" echo "1. 进入目录 2. 创建目录 3. 修改目录权限 4. 重命名目录" echo "5. 删除目录 6. 返回上一级选单目录" echo "------------------------" echo "11. 创建文件 12. 编辑文件 13. 修改文件权限 14. 重命名文件" echo "15. 删除文件" echo "------------------------" echo "21. 压缩文件目录 22. 解压文件目录 23. 移动文件目录 24. 复制文件目录" echo "25. 传文件至其他服务器" echo "------------------------" echo "0. 返回上一级选单" echo "------------------------" read -e -p "请输入你的选择: " Limiting case "$Limiting" in 1) # 进入目录 read -e -p "请输入目录名: " dirname cd "$dirname" 2>/dev/null || echo "无法进入目录" send_stats "进入目录" ;; 2) # 创建目录 read -e -p "请输入要创建的目录名: " dirname mkdir -p "$dirname" && echo "目录已创建" || echo "创建失败" send_stats "创建目录" ;; 3) # 修改目录权限 read -e -p "请输入目录名: " dirname read -e -p "请输入权限 (如 755): " perm chmod "$perm" "$dirname" && echo "权限已修改" || echo "修改失败" send_stats "修改目录权限" ;; 4) # 重命名目录 read -e -p "请输入当前目录名: " current_name read -e -p "请输入新目录名: " new_name mv "$current_name" "$new_name" && echo "目录已重命名" || echo "重命名失败" send_stats "重命名目录" ;; 5) # 删除目录 read -e -p "请输入要删除的目录名: " dirname rm -rf "$dirname" && echo "目录已删除" || echo "删除失败" send_stats "删除目录" ;; 6) # 返回上一级选单目录 cd .. send_stats "返回上一级选单目录" ;; 11) # 创建文件 read -e -p "请输入要创建的文件名: " filename touch "$filename" && echo "文件已创建" || echo "创建失败" send_stats "创建文件" ;; 12) # 编辑文件 read -e -p "请输入要编辑的文件名: " filename install nano nano "$filename" send_stats "编辑文件" ;; 13) # 修改文件权限 read -e -p "请输入文件名: " filename read -e -p "请输入权限 (如 755): " perm chmod "$perm" "$filename" && echo "权限已修改" || echo "修改失败" send_stats "修改文件权限" ;; 14) # 重命名文件 read -e -p "请输入当前文件名: " current_name read -e -p "请输入新文件名: " new_name mv "$current_name" "$new_name" && echo "文件已重命名" || echo "重命名失败" send_stats "重命名文件" ;; 15) # 删除文件 read -e -p "请输入要删除的文件名: " filename rm -f "$filename" && echo "文件已删除" || echo "删除失败" send_stats "删除文件" ;; 21) # 压缩文件/目录 read -e -p "请输入要压缩的文件/目录名: " name install tar tar -czvf "$name.tar.gz" "$name" && echo "已压缩为 $name.tar.gz" || echo "压缩失败" send_stats "压缩文件/目录" ;; 22) # 解压文件/目录 read -e -p "请输入要解压的文件名 (.tar.gz): " filename install tar tar -xzvf "$filename" && echo "已解压 $filename" || echo "解压失败" send_stats "解压文件/目录" ;; 23) # 移动文件或目录 read -e -p "请输入要移动的文件或目录路径: " src_path if [ ! -e "$src_path" ]; then echo "错误: 文件或目录不存在。" send_stats "移动文件或目录失败: 文件或目录不存在" continue fi read -e -p "请输入目标路径 (包括新文件名或目录名): " dest_path if [ -z "$dest_path" ]; then echo "错误: 请输入目标路径。" send_stats "移动文件或目录失败: 目标路径未指定" continue fi mv "$src_path" "$dest_path" && echo "文件或目录已移动到 $dest_path" || echo "移动文件或目录失败" send_stats "移动文件或目录" ;; 24) # 复制文件目录 read -e -p "请输入要复制的文件或目录路径: " src_path if [ ! -e "$src_path" ]; then echo "错误: 文件或目录不存在。" send_stats "复制文件或目录失败: 文件或目录不存在" continue fi read -e -p "请输入目标路径 (包括新文件名或目录名): " dest_path if [ -z "$dest_path" ]; then echo "错误: 请输入目标路径。" send_stats "复制文件或目录失败: 目标路径未指定" continue fi # 使用 -r 选项以递归方式复制目录 cp -r "$src_path" "$dest_path" && echo "文件或目录已复制到 $dest_path" || echo "复制文件或目录失败" send_stats "复制文件或目录" ;; 25) # 传送文件至远端服务器 read -e -p "请输入要传送的文件路径: " file_to_transfer if [ ! -f "$file_to_transfer" ]; then echo "错误: 文件不存在。" send_stats "传送文件失败: 文件不存在" continue fi kj_ssh_read_host_user_port "请输入远端服务器IP: " "请输入远端服务器用户名 (默认root): " "请输入登录端口 (默认22): " "root" "22" local remote_ip="$KJ_SSH_HOST" local remote_user="$KJ_SSH_USER" local remote_port="$KJ_SSH_PORT" kj_ssh_read_password "请输入远端服务器密码: " local remote_password="$KJ_SSH_PASSWORD" # 清除已知主机的旧条目 ssh-keygen -f "/root/.ssh/known_hosts" -R "$remote_ip" sleep 2 # 等待时间 # 使用scp传输文件 scp -P "$remote_port" -o StrictHostKeyChecking=no "$file_to_transfer" "$remote_user@$remote_ip:/home/" < ~/cluster/servers.py << EOF servers = [ ] EOF fi while true; do clear send_stats "集群控制中心" echo "服务器集群控制" cat ~/cluster/servers.py echo echo -e "${gl_kjlan}------------------------${gl_bai}" echo -e "${gl_kjlan}服务器列表管理${gl_bai}" echo -e "${gl_kjlan}1. ${gl_bai}添加服务器 ${gl_kjlan}2. ${gl_bai}删除服务器 ${gl_kjlan}3. ${gl_bai}编辑服务器" echo -e "${gl_kjlan}4. ${gl_bai}备份集群 ${gl_kjlan}5. ${gl_bai}还原集群" echo -e "${gl_kjlan}------------------------${gl_bai}" echo -e "${gl_kjlan}批量执行任务${gl_bai}" echo -e "${gl_kjlan}11. ${gl_bai}安装科技lion脚本 ${gl_kjlan}12. ${gl_bai}更新系统 ${gl_kjlan}13. ${gl_bai}清理系统" echo -e "${gl_kjlan}14. ${gl_bai}安装docker ${gl_kjlan}15. ${gl_bai}安装BBR3 ${gl_kjlan}16. ${gl_bai}设置1G虚拟内存" echo -e "${gl_kjlan}17. ${gl_bai}设置时区到上海 ${gl_kjlan}18. ${gl_bai}开放所有端口 ${gl_kjlan}51. ${gl_bai}自定义指令" echo -e "${gl_kjlan}------------------------${gl_bai}" echo -e "${gl_kjlan}0. ${gl_bai}返回主菜单" echo -e "${gl_kjlan}------------------------${gl_bai}" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) send_stats "添加集群服务器" read -e -p "服务器名称: " server_name read -e -p "服务器IP: " server_ip read -e -p "服务器端口（22）: " server_port local server_port=${server_port:-22} read -e -p "服务器用户名（root）: " server_username local server_username=${server_username:-root} read -e -p "服务器用户密码: " server_password sed -i "/servers = \[/a\ {\"name\": \"$server_name\", \"hostname\": \"$server_ip\", \"port\": $server_port, \"username\": \"$server_username\", \"password\": \"$server_password\", \"remote_path\": \"/home/\"}," ~/cluster/servers.py ;; 2) send_stats "删除集群服务器" read -e -p "请输入需要删除的关键字: " rmserver sed -i "/$rmserver/d" ~/cluster/servers.py ;; 3) send_stats "编辑集群服务器" install nano nano ~/cluster/servers.py ;; 4) clear send_stats "备份集群" echo -e "请将 ${gl_huang}/root/cluster/servers.py${gl_bai} 文件下载，完成备份！" break_end ;; 5) clear send_stats "还原集群" echo "请上传您的servers.py，按任意键开始上传！" echo -e "请上传您的 ${gl_huang}servers.py${gl_bai} 文件到 ${gl_huang}/root/cluster/${gl_bai} 完成还原！" break_end ;; 11) local py_task="install_kejilion.py" cluster_python3 ;; 12) run_commands_on_servers "k update" ;; 13) run_commands_on_servers "k clean" ;; 14) run_commands_on_servers "k docker install" ;; 15) run_commands_on_servers "k bbr3" ;; 16) run_commands_on_servers "k swap 1024" ;; 17) run_commands_on_servers "k time Asia/Shanghai" ;; 18) run_commands_on_servers "k iptables_open" ;; 51) send_stats "自定义执行命令" read -e -p "请输入批量执行的命令: " mingling run_commands_on_servers "${mingling}" ;; *) kejilion ;; esac done } kejilion_Affiliates() { clear send_stats "广告专栏" echo "广告专栏" echo "------------------------" echo "将为用户提供更简单优雅的推广与购买体验！" echo "" echo -e "服务器优惠" echo "------------------------" echo -e "${gl_lan}莱卡云 香港CN2 GIA 韩国双ISP 美国CN2 GIA 优惠活动${gl_bai}" echo -e "${gl_bai}网址: https://www.lcayun.com/aff/ZEXUQBIM${gl_bai}" echo "------------------------" echo -e "${gl_lan}RackNerd 10.99刀每年 美国 1核心 1G内存 20G硬盘 1T流量每月${gl_bai}" echo -e "${gl_bai}网址: https://my.racknerd.com/aff.php?aff=5501&pid=879${gl_bai}" echo "------------------------" echo -e "${gl_zi}Hostinger 52.7刀每年 美国 1核心 4G内存 50G硬盘 4T流量每月${gl_bai}" echo -e "${gl_bai}网址: https://cart.hostinger.com/pay/d83c51e9-0c28-47a6-8414-b8ab010ef94f?_ga=GA1.3.942352702.1711283207${gl_bai}" echo "------------------------" echo -e "${gl_huang}搬瓦工 49刀每季 美国CN2GIA 日本软银 2核心 1G内存 20G硬盘 1T流量每月${gl_bai}" echo -e "${gl_bai}网址: https://bandwagonhost.com/aff.php?aff=69004&pid=87${gl_bai}" echo "------------------------" echo -e "${gl_lan}DMIT 28刀每季 美国CN2GIA 1核心 2G内存 20G硬盘 800G流量每月${gl_bai}" echo -e "${gl_bai}网址: https://www.dmit.io/aff.php?aff=4966&pid=100${gl_bai}" echo "------------------------" echo -e "${gl_zi}V.PS 6.9刀每月 东京软银 2核心 1G内存 20G硬盘 1T流量每月${gl_bai}" echo -e "${gl_bai}网址: https://vps.hosting/cart/tokyo-cloud-kvm-vps/?id=148&?affid=1355&?affid=1355${gl_bai}" echo "------------------------" echo -e "${gl_kjlan}VPS更多热门优惠${gl_bai}" echo -e "${gl_bai}网址: https://kejilion.pro/topvps/${gl_bai}" echo "------------------------" echo "" echo -e "域名优惠" echo "------------------------" echo -e "${gl_lan}GNAME 8.8刀首年COM域名 6.68刀首年CC域名${gl_bai}" echo -e "${gl_bai}网址: https://www.gname.com/register?tt=86836&ttcode=KEJILION86836&ttbj=sh${gl_bai}" echo "------------------------" echo "" echo -e "科技lion周边" echo "------------------------" echo -e "${gl_kjlan}B站: ${gl_bai}https://b23.tv/2mqnQyh ${gl_kjlan}油管: ${gl_bai}https://www.youtube.com/@kejilion${gl_bai}" echo -e "${gl_kjlan}官网: ${gl_bai}https://kejilion.pro/ ${gl_kjlan}导航: ${gl_bai}https://dh.kejilion.pro/${gl_bai}" echo -e "${gl_kjlan}博客: ${gl_bai}https://blog.kejilion.pro/ ${gl_kjlan}软件中心: ${gl_bai}https://app.kejilion.pro/${gl_bai}" echo "------------------------" echo -e "${gl_kjlan}脚本官网: ${gl_bai}https://kejilion.sh ${gl_kjlan}GitHub地址: ${gl_bai}${gh_https_url}github.com/kejilion/sh${gl_bai}" echo "------------------------" echo "" } games_server_tools() { while true; do clear echo -e "游戏开服脚本合集" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}1. ${gl_bai}幻兽帕鲁开服脚本" echo -e "${gl_kjlan}2. ${gl_bai}我的世界开服脚本" echo -e "${gl_kjlan}------------------------" echo -e "${gl_kjlan}0. ${gl_bai}返回主菜单" echo -e "${gl_kjlan}------------------------${gl_bai}" read -e -p "请输入你的选择: " sub_choice case $sub_choice in 1) send_stats "幻兽帕鲁开服脚本" ; cd ~ curl -sS -O ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/palworld.sh ; chmod +x palworld.sh ; ./palworld.sh exit ;; 2) send_stats "我的世界开服脚本" ; cd ~ curl -sS -O ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/mc.sh ; chmod +x mc.sh ; ./mc.sh exit ;; 0) kejilion ;; *) echo "无效的输入!" ;; esac break_end done } kejilion_update() { send_stats "脚本更新" cd ~ while true; do clear echo "更新日志" echo "------------------------" echo "全部日志: ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/kejilion_sh_log.txt" echo "------------------------" curl -s --max-time 15 ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/kejilion_sh_log.txt | tail -n 30 # 只下载前5行获取版本号，避免下载整个脚本 local sh_v_new=$(curl -s --max-time 15 -r 0-200 ${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/kejilion.sh | grep -o 'sh_v="[0-9.]*"' | head -1 | cut -d '"' -f 2) if [ -z "$sh_v_new" ]; then echo -e "${gl_hong}无法获取最新版本信息，请检查网络连接${gl_bai}" elif [ "$sh_v" = "$sh_v_new" ]; then echo -e "${gl_lv}你已经是最新版本！${gl_huang}v$sh_v${gl_bai}" send_stats "脚本已经最新了，无需更新" else echo "发现新版本！" echo -e "当前版本 v$sh_v 最新版本 ${gl_huang}v$sh_v_new${gl_bai}" fi local cron_job="kejilion.sh" local existing_cron=$(crontab -l 2>/dev/null | grep -F "$cron_job") if [ -n "$existing_cron" ]; then echo "------------------------" echo -e "${gl_lv}自动更新已开启，每天凌晨2点脚本会自动更新！${gl_bai}" fi echo "------------------------" echo "1. 现在更新 2. 开启自动更新 3. 关闭自动更新" echo "------------------------" echo "0. 返回主菜单" echo "------------------------" read -e -p "请输入你的选择: " choice case "$choice" in 1) clear local country=$(curl -s --max-time 5 ipinfo.io/country) local download_url if [ "$country" = "CN" ]; then download_url="${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/cn/kejilion.sh" else download_url="${gh_proxy}raw.githubusercontent.com/kejilion/sh/main/kejilion.sh" fi # 备份当前脚本 cp -f ~/kejilion.sh ~/kejilion.sh.bak 2>/dev/null # 下载到临时文件，校验后再替换 local tmp_file=$(mktemp ~/kejilion_tmp.XXXXXX) if curl -sS --max-time 60 --fail -o "$tmp_file" "$download_url" && \ [ -s "$tmp_file" ] && \ head -1 "$tmp_file" | grep -q '^#!/bin/bash'; then chmod +x "$tmp_file" mv -f "$tmp_file" ~/kejilion.sh canshu_v6 CheckFirstRun_true yinsiyuanquan2 cp -f ~/kejilion.sh /usr/local/bin/k > /dev/null 2>&1 ln -sf /usr/local/bin/k /usr/bin/k > /dev/null 2>&1 echo -e "${gl_lv}脚本已更新到最新版本！${gl_huang}v$sh_v_new${gl_bai}" send_stats "脚本已经最新$sh_v_new" else rm -f "$tmp_file" # 恢复备份 if [ -f ~/kejilion.sh.bak ]; then mv -f ~/kejilion.sh.bak ~/kejilion.sh fi echo -e "${gl_hong}更新失败！下载出错或文件校验不通过，已恢复原版本${gl_bai}" send_stats "脚本更新失败" fi break_end ~/kejilion.sh exit ;; 2) clear local country=$(curl -s --max-time 5 ipinfo.io/country) local ipv6_address=$(curl -s --max-time 1 ipv6.ip.sb) local cron_proxy cron_sed_cmd if [ "$country" = "CN" ]; then cron_proxy="https://gh.kejilion.pro/" cron_sed_cmd="sed -i 's/canshu=\"default\"/canshu=\"CN\"/g' ~/kejilion.sh" elif [ -n "$ipv6_address" ]; then cron_proxy="https://gh.kejilion.pro/" cron_sed_cmd="sed -i 's/canshu=\"default\"/canshu=\"V6\"/g' ~/kejilion.sh" else cron_proxy="https://" cron_sed_cmd="" fi # 构建健壮的自动更新命令：下载到临时文件 → 校验 → 备份 → 替换 → 恢复本地设置 → 部署 SH_Update_task="cd ~ && tmp=\$(mktemp ~/kejilion_tmp.XXXXXX) && curl -sS --max-time 60 --fail -o \"\$tmp\" ${cron_proxy}raw.githubusercontent.com/kejilion/sh/main/kejilion.sh && [ -s \"\$tmp\" ] && head -1 \"\$tmp\" | grep -q '^#!/bin/bash' && cp -f ~/kejilion.sh ~/kejilion.sh.bak 2>/dev/null && chmod +x \"\$tmp\" && mv -f \"\$tmp\" ~/kejilion.sh" # 追加设置恢复 if [ -n "$cron_sed_cmd" ]; then SH_Update_task="$SH_Update_task && $cron_sed_cmd" fi # 从旧脚本恢复 permission_granted 和 ENABLE_STATS 设置 SH_Update_task="$SH_Update_task && grep -q 'permission_granted=\"true\"' ~/kejilion.sh.bak 2>/dev/null && sed -i 's/permission_granted=\"false\"/permission_granted=\"true\"/' ~/kejilion.sh; grep -q 'ENABLE_STATS=\"false\"' ~/kejilion.sh.bak 2>/dev/null && sed -i 's/ENABLE_STATS=\"true\"/ENABLE_STATS=\"false\"/' ~/kejilion.sh" # 部署到 /usr/local/bin/k 和 /usr/bin/k SH_Update_task="$SH_Update_task; cp -f ~/kejilion.sh /usr/local/bin/k 2>/dev/null; ln -sf /usr/local/bin/k /usr/bin/k 2>/dev/null" # 下载失败时清理临时文件 SH_Update_task="$SH_Update_task || rm -f \"\$tmp\" 2>/dev/null" check_crontab_installed (crontab -l | grep -v "kejilion.sh") | crontab - (crontab -l 2>/dev/null; echo "$(shuf -i 0-59 -n 1) 2 * * * bash -c '$SH_Update_task'") | crontab - echo -e "${gl_lv}自动更新已开启，每天凌晨2点脚本会自动更新！${gl_bai}" send_stats "开启脚本自动更新" break_end ;; 3) clear (crontab -l | grep -v "kejilion.sh") | crontab - echo -e "${gl_lv}自动更新已关闭${gl_bai}" send_stats "关闭脚本自动更新" break_end ;; *) kejilion_sh ;; esac done } kejilion_sh() { while true; do clear echo -e "${gl_kjlan}" echo "╦╔═╔═╗ ╦╦╦ ╦╔═╗╔╗╔ ╔═╗╦ ╦" echo "╠╩╗║╣ ║║║ ║║ ║║║║ ╚═╗╠═╣" echo "╩ ╩╚═╝╚╝╩╩═╝╩╚═╝╝╚╝o╚═╝╩ ╩" echo -e "科技lion脚本工具箱 v$sh_v" echo -e "命令行输入${gl_huang}k${gl_kjlan}可快速启动脚本${gl_bai}" echo -e "${gl_kjlan}------------------------${gl_bai}" echo -e "${gl_kjlan}1. ${gl_bai}系统信息查询" echo -e "${gl_kjlan}2. ${gl_bai}系统更新" echo -e "${gl_kjlan}3. ${gl_bai}系统清理" echo -e "${gl_kjlan}4. ${gl_bai}基础工具" echo -e "${gl_kjlan}5. ${gl_bai}BBR管理" echo -e "${gl_kjlan}6. ${gl_bai}Docker管理" echo -e "${gl_kjlan}7. ${gl_bai}WARP管理" echo -e "${gl_kjlan}8. ${gl_bai}测试脚本合集" echo -e "${gl_kjlan}9. ${gl_bai}甲骨文云脚本合集" echo -e "${gl_huang}10. ${gl_bai}LDNMP建站" echo -e "${gl_kjlan}11. ${gl_bai}应用市场" echo -e "${gl_kjlan}12. ${gl_bai}后台工作区" echo -e "${gl_kjlan}13. ${gl_bai}系统工具" echo -e "${gl_kjlan}14. ${gl_bai}服务器集群控制" echo -e "${gl_kjlan}15. ${gl_bai}广告专栏" echo -e "${gl_kjlan}16. ${gl_bai}游戏开服脚本合集" echo -e "${gl_kjlan}------------------------${gl_bai}" echo -e "${gl_kjlan}00. ${gl_bai}脚本更新" echo -e "${gl_kjlan}------------------------${gl_bai}" echo -e "${gl_kjlan}0. ${gl_bai}退出脚本" echo -e "${gl_kjlan}------------------------${gl_bai}" read -e -p "请输入你的选择: " choice case $choice in 1) linux_info ;; 2) clear ; send_stats "系统更新" ; linux_update ;; 3) clear ; send_stats "系统清理" ; linux_clean ;; 4) linux_tools ;; 5) linux_bbr ;; 6) linux_docker ;; 7) clear ; send_stats "warp管理" ; install wget wget -N https://gitlab.com/fscarmen/warp/-/raw/main/menu.sh ; bash menu.sh [option] [lisence/url/token] ;; 8) linux_test ;; 9) linux_Oracle ;; 10) linux_ldnmp ;; 11) linux_panel ;; 12) linux_work ;; 13) linux_Settings ;; 14) linux_cluster ;; 15) kejilion_Affiliates ;; 16) games_server_tools ;; 00) kejilion_update ;; 0) clear ; exit ;; *) echo "无效的输入!" ;; esac break_end done } k_info() { send_stats "k命令参考用例" echo "-------------------" echo "视频介绍: https://www.bilibili.com/video/BV1ib421E7it?t=0.1" echo "以下是k命令参考用例：" echo "启动脚本 k" echo "安装软件包 k install nano wget | k add nano wget | k 安装 nano wget" echo "卸载软件包 k remove nano wget | k del nano wget | k uninstall nano wget | k 卸载 nano wget" echo "更新系统 k update | k 更新" echo "清理系统垃圾 k clean | k 清理" echo "重装系统面板 k dd | k 重装" echo "bbr3控制面板 k bbr3 | k bbrv3" echo "内核调优面板 k nhyh | k 内核优化" echo "设置虚拟内存 k swap 2048" echo "设置虚拟时区 k time Asia/Shanghai | k 时区 Asia/Shanghai" echo "系统回收站 k trash | k hsz | k 回收站" echo "系统备份功能 k backup | k bf | k 备份" echo "ssh远程连接工具 k ssh | k 远程连接" echo "rsync远程同步工具 k rsync | k 远程同步" echo "硬盘管理工具 k disk | k 硬盘管理" echo "内网穿透（服务端） k frps" echo "内网穿透（客户端） k frpc" echo "软件启动 k start sshd | k 启动 sshd " echo "软件停止 k stop sshd | k 停止 sshd " echo "软件重启 k restart sshd | k 重启 sshd " echo "软件状态查看 k status sshd | k 状态 sshd " echo "软件开机启动 k enable docker | k autostart docke | k 开机启动 docker " echo "域名证书申请 k ssl" echo "域名证书到期查询 k ssl ps" echo "docker管理平面 k docker" echo "docker环境安装 k docker install |k docker 安装" echo "docker容器管理 k docker ps |k docker 容器" echo "docker镜像管理 k docker img |k docker 镜像" echo "LDNMP站点管理 k web" echo "LDNMP缓存清理 k web cache" echo "安装WordPress k wp |k wordpress |k wp xxx.com" echo "安装反向代理 k fd |k rp |k 反代 |k fd xxx.com" echo "安装负载均衡 k loadbalance |k 负载均衡" echo "安装L4负载均衡 k stream |k L4负载均衡" echo "防火墙面板 k fhq |k 防火墙" echo "开放端口 k dkdk 8080 |k 打开端口 8080" echo "关闭端口 k gbdk 7800 |k 关闭端口 7800" echo "放行IP k fxip 127.0.0.0/8 |k 放行IP 127.0.0.0/8" echo "阻止IP k zzip 177.5.25.36 |k 阻止IP 177.5.25.36" echo "命令收藏夹 k fav | k 命令收藏夹" echo "应用市场管理 k app" echo "应用编号快捷管理 k app 26 | k app 1panel | k app npm" echo "fail2ban管理 k fail2ban | k f2b" echo "显示系统信息 k info" echo "ROOT密钥管理 k sshkey" echo "SSH公钥导入(URL) k sshkey " echo "SSH公钥导入(GitHub) k sshkey github " } if [ "$#" -eq 0 ]; then # 如果没有参数，运行交互式逻辑 kejilion_sh else # 如果有参数，执行相应函数 case $1 in install|add|安装) shift send_stats "安装软件" install "$@" ;; remove|del|uninstall|卸载) shift send_stats "卸载软件" remove "$@" ;; update|更新) linux_update ;; clean|清理) linux_clean ;; dd|重装) dd_xitong ;; bbr3|bbrv3) bbrv3 ;; nhyh|内核优化) Kernel_optimize ;; trash|hsz|回收站) linux_trash ;; backup|bf|备份) linux_backup ;; ssh|远程连接) ssh_manager ;; rsync|远程同步) rsync_manager ;; rsync_run) shift send_stats "定时rsync同步" run_task "$@" ;; disk|硬盘管理) disk_manager ;; wp|wordpress) shift ldnmp_wp "$@" ;; fd|rp|反代) shift ldnmp_Proxy "$@" find_container_by_host_port "$port" if [ -z "$docker_name" ]; then close_port "$port" echo "已阻止IP+端口访问该服务" else ip_address close_port "$port" block_container_port "$docker_name" "$ipv4_address" fi ;; loadbalance|负载均衡) ldnmp_Proxy_backend ;; stream|L4负载均衡) ldnmp_Proxy_backend_stream ;; swap) shift send_stats "快速设置虚拟内存" add_swap "$@" ;; time|时区) shift send_stats "快速设置时区" set_timedate "$@" ;; iptables_open) iptables_open ;; frps) frps_panel ;; frpc) frpc_panel ;; 打开端口|dkdk) shift open_port "$@" ;; 关闭端口|gbdk) shift close_port "$@" ;; 放行IP|fxip) shift allow_ip "$@" ;; 阻止IP|zzip) shift block_ip "$@" ;; 防火墙|fhq) iptables_panel ;; 命令收藏夹|fav) linux_fav ;; status|状态) shift send_stats "软件状态查看" status "$@" ;; start|启动) shift send_stats "软件启动" start "$@" ;; stop|停止) shift send_stats "软件暂停" stop "$@" ;; restart|重启) shift send_stats "软件重启" restart "$@" ;; enable|autostart|开机启动) shift send_stats "软件开机自启" enable "$@" ;; ssl) shift if [ "$1" = "ps" ]; then send_stats "查看证书状态" ssl_ps elif [ -z "$1" ]; then add_ssl send_stats "快速申请证书" elif [ -n "$1" ]; then add_ssl "$1" send_stats "快速申请证书" else k_info fi ;; docker) shift case $1 in install|安装) send_stats "快捷安装docker" install_docker ;; ps|容器) send_stats "快捷容器管理" docker_ps ;; img|镜像) send_stats "快捷镜像管理" docker_image ;; *) linux_docker ;; esac ;; web) shift if [ "$1" = "cache" ]; then web_cache elif [ "$1" = "sec" ]; then web_security elif [ "$1" = "opt" ]; then web_optimization elif [ -z "$1" ]; then ldnmp_web_status else k_info fi ;; app) shift send_stats "应用$@" linux_panel "$@" ;; claw|oc|OpenClaw) moltbot_menu ;; info) linux_info ;; fail2ban|f2b) fail2ban_panel ;; sshkey) shift case "$1" in "" ) # sshkey → 交互菜单 send_stats "SSHKey 交互菜单" sshkey_panel ;; github ) shift send_stats "从 GitHub 导入 SSH 公钥" fetch_github_ssh_keys "$1" ;; http://*|https://* ) send_stats "从 URL 导入 SSH 公钥" fetch_remote_ssh_keys "$1" ;; ssh-rsa*|ssh-ed25519*|ssh-ecdsa* ) send_stats "公钥直接导入" import_sshkey "$1" ;; * ) echo "错误：未知参数 '$1'" echo "用法：" echo " k sshkey 进入交互菜单" echo " k sshkey \"\" 直接导入 SSH 公钥" echo " k sshkey 从 URL 导入 SSH 公钥" echo " k sshkey github 从 GitHub 导入 SSH 公钥" ;; esac ;; *) k_info ;; esac fi