602 lines
18 KiB
Go
602 lines
18 KiB
Go
package main
|
||
|
||
import (
|
||
"flag"
|
||
"fmt"
|
||
"log"
|
||
"os"
|
||
"os/signal"
|
||
// "os/exec"
|
||
// "strings"
|
||
"syscall"
|
||
_ "unsafe"
|
||
// 中文注释: 新增了 time 和 x-ui/job 的导入，这是运行定时任务所必需的
|
||
"time"
|
||
|
||
"x-ui/web/job"
|
||
"x-ui/config"
|
||
"x-ui/database"
|
||
"x-ui/logger"
|
||
"x-ui/sub"
|
||
"x-ui/util/crypto"
|
||
"x-ui/web"
|
||
"x-ui/web/global"
|
||
"x-ui/web/service"
|
||
|
||
"github.com/joho/godotenv"
|
||
"github.com/op/go-logging"
|
||
)
|
||
|
||
// runWebServer 是【设备限制】项目的主执行函数
|
||
func runWebServer() {
|
||
log.Printf("Starting %v %v", config.GetName(), config.GetVersion())
|
||
|
||
switch config.GetLogLevel() {
|
||
case config.Debug:
|
||
logger.InitLogger(logging.DEBUG)
|
||
case config.Info:
|
||
logger.InitLogger(logging.INFO)
|
||
case config.Notice:
|
||
logger.InitLogger(logging.NOTICE)
|
||
case config.Warn:
|
||
logger.InitLogger(logging.WARNING)
|
||
case config.Error:
|
||
logger.InitLogger(logging.ERROR)
|
||
default:
|
||
log.Fatalf("Unknown log level: %v", config.GetLogLevel())
|
||
}
|
||
|
||
godotenv.Load()
|
||
|
||
err := database.InitDB(config.GetDBPath())
|
||
if err != nil {
|
||
log.Fatalf("Error initializing database: %v", err)
|
||
}
|
||
|
||
// 中文注释: xrayService 在这里被创建，我们需要将它传递给我们的新任务
|
||
xrayService := service.XrayService{}
|
||
|
||
var server *web.Server
|
||
server = web.NewServer()
|
||
global.SetWebServer(server)
|
||
err = server.Start()
|
||
if err != nil {
|
||
log.Fatalf("Error starting web server: %v", err)
|
||
return
|
||
}
|
||
|
||
var subServer *sub.Server
|
||
subServer = sub.NewServer()
|
||
global.SetSubServer(subServer)
|
||
err = subServer.Start()
|
||
if err != nil {
|
||
log.Fatalf("Error starting sub server: %v", err)
|
||
return
|
||
}
|
||
|
||
// 中文注释: 在面板服务启动后，我们在这里启动设备限制的后台任务
|
||
go func() {
|
||
// 中文注释: 等待5秒，确保面板和Xray服务已基本稳定，避免任务启动过早
|
||
time.Sleep(10 * time.Second)
|
||
|
||
// 中文注释: 创建一个定时器。这里的 "10 * time.Second" 就是任务执行的间隔时间。
|
||
// 您可以修改 10 为 2 或 1，来实现更短的延迟。
|
||
// 例如: time.NewTicker(2 * time.Second) 就是2秒执行一次。
|
||
ticker := time.NewTicker(10 * time.Second)
|
||
defer ticker.Stop()
|
||
|
||
// 〔中文注释〕: 步骤一：在循环外部，只声明一次 tgBotService 变量。
|
||
// 我们将其声明为接口类型，初始值为 nil。
|
||
var tgBotService service.TelegramService
|
||
|
||
// 〔中文注释〕: 步骤二：检查 Telegram Bot 是否在面板设置中启用。
|
||
settingService := service.SettingService{}
|
||
tgEnable, err := settingService.GetTgbotEnabled()
|
||
if err != nil {
|
||
logger.Warningf("无法获取 Telegram Bot 设置: %v, 设备限制通知功能可能无法使用", err)
|
||
}
|
||
|
||
// 〔中文注释〕: 步骤三：如果 Bot 已启用，则初始化实例并赋值给上面声明的变量。
|
||
// 注意这里使用的是 `=` 而不是 `:=`，因为我们是给已存在的变量赋值。
|
||
if tgEnable {
|
||
tgBotService = new(service.Tgbot)
|
||
}
|
||
|
||
// 〔中文注释〕：步骤四：创建任务实例时，将 xrayService 和 可能为 nil 的 tgBotService 一同传入。
|
||
// 这样做是安全的，因为 check_client_ip_job.go 内部的 SendMessage 调用前，会先判断服务实例是否可用。
|
||
checkJob := job.NewCheckDeviceLimitJob(&xrayService, tgBotService)
|
||
|
||
|
||
// 中文注释: 使用一个无限循环，每次定时器触发，就执行一次任务的 Run() 函数
|
||
for {
|
||
<-ticker.C
|
||
checkJob.Run()
|
||
}
|
||
}()
|
||
|
||
sigCh := make(chan os.Signal, 1)
|
||
// Trap shutdown signals
|
||
signal.Notify(sigCh, syscall.SIGHUP, syscall.SIGTERM)
|
||
for {
|
||
sig := <-sigCh
|
||
|
||
switch sig {
|
||
case syscall.SIGHUP:
|
||
logger.Info("Received SIGHUP signal. Restarting servers...")
|
||
|
||
err := server.Stop()
|
||
if err != nil {
|
||
logger.Debug("Error stopping web server:", err)
|
||
}
|
||
err = subServer.Stop()
|
||
if err != nil {
|
||
logger.Debug("Error stopping sub server:", err)
|
||
}
|
||
|
||
server = web.NewServer()
|
||
global.SetWebServer(server)
|
||
err = server.Start()
|
||
if err != nil {
|
||
log.Fatalf("Error restarting web server: %v", err)
|
||
return
|
||
}
|
||
log.Println("Web server restarted successfully.")
|
||
|
||
subServer = sub.NewServer()
|
||
global.SetSubServer(subServer)
|
||
err = subServer.Start()
|
||
if err != nil {
|
||
log.Fatalf("Error restarting sub server: %v", err)
|
||
return
|
||
}
|
||
log.Println("Sub server restarted successfully.")
|
||
|
||
default:
|
||
server.Stop()
|
||
subServer.Stop()
|
||
log.Println("Shutting down servers.")
|
||
return
|
||
}
|
||
}
|
||
}
|
||
|
||
func resetSetting() {
|
||
err := database.InitDB(config.GetDBPath())
|
||
if err != nil {
|
||
fmt.Println("Failed to initialize database:", err)
|
||
return
|
||
}
|
||
|
||
settingService := service.SettingService{}
|
||
err = settingService.ResetSettings()
|
||
if err != nil {
|
||
fmt.Println("Failed to reset settings（重置设置失败）:", err)
|
||
} else {
|
||
fmt.Println("Settings successfully reset ---->>重置设置成功")
|
||
}
|
||
}
|
||
|
||
func showSetting(show bool) {
|
||
// 执行 shell 命令获取 IPv4 地址
|
||
// cmdIPv4 := exec.Command("sh", "-c", "curl -s4m8 ip.p3terx.com -k | sed -n 1p")
|
||
// outputIPv4, err := cmdIPv4.Output()
|
||
// if err != nil {
|
||
// log.Fatal(err)
|
||
// }
|
||
|
||
// 执行 shell 命令获取 IPv6 地址
|
||
// cmdIPv6 := exec.Command("sh", "-c", "curl -s6m8 ip.p3terx.com -k | sed -n 1p")
|
||
// outputIPv6, err := cmdIPv6.Output()
|
||
// if err != nil {
|
||
// log.Fatal(err)
|
||
// }
|
||
|
||
// 去除命令输出中的换行符
|
||
// ipv4 := strings.TrimSpace(string(outputIPv4))
|
||
// ipv6 := strings.TrimSpace(string(outputIPv6))
|
||
// 定义转义字符，定义不同颜色的转义字符
|
||
const (
|
||
Reset = "\033[0m"
|
||
Red = "\033[31m"
|
||
Green = "\033[32m"
|
||
Yellow = "\033[33m"
|
||
)
|
||
if show {
|
||
settingService := service.SettingService{}
|
||
port, err := settingService.GetPort()
|
||
if err != nil {
|
||
fmt.Println("get current port failed, error info（获取当前端口失败，错误信息）:", err)
|
||
}
|
||
|
||
webBasePath, err := settingService.GetBasePath()
|
||
if err != nil {
|
||
fmt.Println("get webBasePath failed, error info（获取访问路径失败，错误信息）:", err)
|
||
}
|
||
|
||
certFile, err := settingService.GetCertFile()
|
||
if err != nil {
|
||
fmt.Println("get cert file failed, error info:", err)
|
||
}
|
||
keyFile, err := settingService.GetKeyFile()
|
||
if err != nil {
|
||
fmt.Println("get key file failed, error info:", err)
|
||
}
|
||
|
||
userService := service.UserService{}
|
||
userModel, err := userService.GetFirstUser()
|
||
if err != nil {
|
||
fmt.Println("get current user info failed, error info（获取当前用户信息失败，错误信息）:", err)
|
||
}
|
||
|
||
if userModel.Username == "" || userModel.Password == "" {
|
||
fmt.Println("current username or password is empty --->>当前用户名或密码为空")
|
||
}
|
||
|
||
fmt.Println("")
|
||
fmt.Println(Yellow + "----->>>以下为面板重要信息，请自行记录保存<<<-----" + Reset)
|
||
fmt.Println(Green + "Current panel settings as follows (当前面板设置如下):" + Reset)
|
||
fmt.Println("")
|
||
if certFile == "" || keyFile == "" {
|
||
fmt.Println(Red + "------>> 警告：面板未安装证书进行SSL保护" + Reset)
|
||
} else {
|
||
fmt.Println(Green + "------>> 面板已安装证书采用SSL保护" + Reset)
|
||
}
|
||
fmt.Println("")
|
||
hasDefaultCredential := func() bool {
|
||
return userModel.Username == "admin" && crypto.CheckPasswordHash(userModel.Password, "admin")
|
||
}()
|
||
if hasDefaultCredential == true {
|
||
fmt.Println(Red + "------>> 警告：使用了默认的admin账号/密码，容易被扫描" + Reset)
|
||
} else {
|
||
fmt.Println(Green + "------>> 为非默认admin账号/密码，请牢记" + Reset)
|
||
}
|
||
fmt.Println("")
|
||
fmt.Println(Green + fmt.Sprintf("port（端口号）: %d", port) + Reset)
|
||
fmt.Println(Green + fmt.Sprintf("webBasePath（访问路径）: %s", webBasePath) + Reset)
|
||
fmt.Println(Green + "PS：为安全起见，不显示账号和密码" + Reset)
|
||
fmt.Println(Green + "若您已经忘记账号/密码，请用脚本选项〔6〕重新设置" + Reset)
|
||
|
||
fmt.Println("")
|
||
fmt.Println("--------------------------------------------------")
|
||
// 根据条件打印带颜色的字符串
|
||
// if ipv4 != "" {
|
||
// fmt.Println("")
|
||
// formattedIPv4 := fmt.Sprintf("%s %s%s:%d%s" + Reset,
|
||
// Green+"面板 IPv4 访问地址------>>",
|
||
// Yellow+"http://",
|
||
// ipv4,
|
||
// port,
|
||
// Yellow+webBasePath + Reset)
|
||
// fmt.Println(formattedIPv4)
|
||
// fmt.Println("")
|
||
// }
|
||
|
||
// if ipv6 != "" {
|
||
// fmt.Println("")
|
||
// formattedIPv6 := fmt.Sprintf("%s %s[%s%s%s]:%d%s%s",
|
||
// Green+"面板 IPv6 访问地址------>>", // 绿色的提示信息
|
||
// Yellow+"http://", // 黄色的 http:// 部分
|
||
// Yellow, // 黄色的[ 左方括号
|
||
// ipv6, // IPv6 地址
|
||
// Yellow, // 黄色的] 右方括号
|
||
// port, // 端口号
|
||
// Yellow+webBasePath, // 黄色的 Web 基础路径
|
||
// Reset) // 重置颜色
|
||
// fmt.Println(formattedIPv6)
|
||
// fmt.Println("")
|
||
// }
|
||
fmt.Println(Green + ">>>>>>>>注：若您安装了〔证书〕，请使用您的域名用https方式登录" + Reset)
|
||
fmt.Println("")
|
||
fmt.Println("--------------------------------------------------")
|
||
fmt.Println("")
|
||
// fmt.Println("↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑")
|
||
fmt.Println(fmt.Sprintf("%s请确保 %s%d%s 端口已打开放行%s",Green, Red, port, Green, Reset))
|
||
fmt.Println(Yellow + "请自行确保此端口没有被其他程序占用" + Reset)
|
||
// fmt.Println(Green + "若要登录访问面板，请复制上面的地址到浏览器" + Reset)
|
||
fmt.Println("")
|
||
fmt.Println("--------------------------------------------------")
|
||
fmt.Println("")
|
||
}
|
||
}
|
||
|
||
func updateTgbotEnableSts(status bool) {
|
||
settingService := service.SettingService{}
|
||
currentTgSts, err := settingService.GetTgbotEnabled()
|
||
if err != nil {
|
||
fmt.Println(err)
|
||
return
|
||
}
|
||
logger.Infof("current enabletgbot status[%v],need update to status[%v]", currentTgSts, status)
|
||
if currentTgSts != status {
|
||
err := settingService.SetTgbotEnabled(status)
|
||
if err != nil {
|
||
fmt.Println(err)
|
||
return
|
||
} else {
|
||
logger.Infof("SetTgbotEnabled[%v] success", status)
|
||
}
|
||
}
|
||
}
|
||
|
||
func updateTgbotSetting(tgBotToken string, tgBotChatid string, tgBotRuntime string) {
|
||
err := database.InitDB(config.GetDBPath())
|
||
if err != nil {
|
||
fmt.Println("Error initializing database（初始化数据库出错）:", err)
|
||
return
|
||
}
|
||
|
||
settingService := service.SettingService{}
|
||
|
||
if tgBotToken != "" {
|
||
err := settingService.SetTgBotToken(tgBotToken)
|
||
if err != nil {
|
||
fmt.Printf("Error setting Telegram bot token（设置TG电报机器人令牌出错）: %v\n", err)
|
||
return
|
||
}
|
||
logger.Info("Successfully updated Telegram bot token ----->>已成功更新TG电报机器人令牌")
|
||
}
|
||
|
||
if tgBotRuntime != "" {
|
||
err := settingService.SetTgbotRuntime(tgBotRuntime)
|
||
if err != nil {
|
||
fmt.Printf("Error setting Telegram bot runtime（设置TG电报机器人通知周期出错）: %v\n", err)
|
||
return
|
||
}
|
||
logger.Infof("Successfully updated Telegram bot runtime to （已成功将TG电报机器人通知周期设置为） [%s].", tgBotRuntime)
|
||
}
|
||
|
||
if tgBotChatid != "" {
|
||
err := settingService.SetTgBotChatId(tgBotChatid)
|
||
if err != nil {
|
||
fmt.Printf("Error setting Telegram bot chat ID（设置TG电报机器人管理者聊天ID出错）: %v\n", err)
|
||
return
|
||
}
|
||
logger.Info("Successfully updated Telegram bot chat ID ----->>已成功更新TG电报机器人管理者聊天ID")
|
||
}
|
||
}
|
||
|
||
func updateSetting(port int, username string, password string, webBasePath string, listenIP string, resetTwoFactor bool) {
|
||
err := database.InitDB(config.GetDBPath())
|
||
if err != nil {
|
||
fmt.Println("Database initialization failed（初始化数据库失败）:", err)
|
||
return
|
||
}
|
||
|
||
settingService := service.SettingService{}
|
||
userService := service.UserService{}
|
||
|
||
if port > 0 {
|
||
err := settingService.SetPort(port)
|
||
if err != nil {
|
||
fmt.Println("Failed to set port（设置端口失败）:", err)
|
||
} else {
|
||
fmt.Printf("Port set successfully（端口设置成功）: %v\n", port)
|
||
}
|
||
}
|
||
|
||
if username != "" || password != "" {
|
||
err := userService.UpdateFirstUser(username, password)
|
||
if err != nil {
|
||
fmt.Println("Failed to update username and password（更新用户名和密码失败）:", err)
|
||
} else {
|
||
fmt.Println("Username and password updated successfully ------>>用户名和密码更新成功")
|
||
}
|
||
}
|
||
|
||
if webBasePath != "" {
|
||
err := settingService.SetBasePath(webBasePath)
|
||
if err != nil {
|
||
fmt.Println("Failed to set base URI path（设置访问路径失败）:", err)
|
||
} else {
|
||
fmt.Println("Base URI path set successfully ------>>设置访问路径成功")
|
||
}
|
||
}
|
||
|
||
if resetTwoFactor {
|
||
err := settingService.SetTwoFactorEnable(false)
|
||
|
||
if err != nil {
|
||
fmt.Println("Failed to reset two-factor authentication（设置两步验证失败）:", err)
|
||
} else {
|
||
settingService.SetTwoFactorToken("")
|
||
fmt.Println("Two-factor authentication reset successfully --------->>设置两步验证成功")
|
||
}
|
||
}
|
||
|
||
if listenIP != "" {
|
||
err := settingService.SetListen(listenIP)
|
||
if err != nil {
|
||
fmt.Println("Failed to set listen IP（设置监听IP失败）:", err)
|
||
} else {
|
||
fmt.Printf("listen %v set successfully --------->>设置监听IP成功", listenIP)
|
||
}
|
||
}
|
||
}
|
||
|
||
func updateCert(publicKey string, privateKey string) {
|
||
err := database.InitDB(config.GetDBPath())
|
||
if err != nil {
|
||
fmt.Println(err)
|
||
return
|
||
}
|
||
|
||
if (privateKey != "" && publicKey != "") || (privateKey == "" && publicKey == "") {
|
||
settingService := service.SettingService{}
|
||
err = settingService.SetCertFile(publicKey)
|
||
if err != nil {
|
||
fmt.Println("set certificate public key failed（设置证书公钥失败）:", err)
|
||
} else {
|
||
fmt.Println("set certificate public key success --------->>设置证书公钥成功")
|
||
}
|
||
|
||
err = settingService.SetKeyFile(privateKey)
|
||
if err != nil {
|
||
fmt.Println("set certificate private key failed（设置证书私钥失败）:", err)
|
||
} else {
|
||
fmt.Println("set certificate private key success --------->>设置证书私钥成功")
|
||
}
|
||
} else {
|
||
fmt.Println("both public and private key should be entered ------>>必须同时输入证书公钥和私钥")
|
||
}
|
||
}
|
||
|
||
func GetCertificate(getCert bool) {
|
||
if getCert {
|
||
settingService := service.SettingService{}
|
||
certFile, err := settingService.GetCertFile()
|
||
if err != nil {
|
||
fmt.Println("get cert file failed, error info:", err)
|
||
}
|
||
keyFile, err := settingService.GetKeyFile()
|
||
if err != nil {
|
||
fmt.Println("get key file failed, error info:", err)
|
||
}
|
||
|
||
fmt.Println("cert:", certFile)
|
||
fmt.Println("key:", keyFile)
|
||
}
|
||
}
|
||
|
||
func GetListenIP(getListen bool) {
|
||
if getListen {
|
||
|
||
settingService := service.SettingService{}
|
||
ListenIP, err := settingService.GetListen()
|
||
if err != nil {
|
||
log.Printf("Failed to retrieve listen IP: %v", err)
|
||
return
|
||
}
|
||
|
||
fmt.Println("listenIP:", ListenIP)
|
||
}
|
||
}
|
||
|
||
func migrateDb() {
|
||
inboundService := service.InboundService{}
|
||
|
||
err := database.InitDB(config.GetDBPath())
|
||
if err != nil {
|
||
log.Fatal(err)
|
||
}
|
||
fmt.Println("Start migrating database... ---->>开始迁移数据库...")
|
||
inboundService.MigrateDB()
|
||
fmt.Println("Migration done! ------------>>迁移完成！")
|
||
}
|
||
|
||
func main() {
|
||
if len(os.Args) < 2 {
|
||
runWebServer()
|
||
return
|
||
}
|
||
|
||
var showVersion bool
|
||
flag.BoolVar(&showVersion, "v", false, "show version")
|
||
|
||
runCmd := flag.NewFlagSet("run", flag.ExitOnError)
|
||
|
||
settingCmd := flag.NewFlagSet("setting", flag.ExitOnError)
|
||
var port int
|
||
var username string
|
||
var password string
|
||
var webBasePath string
|
||
var listenIP string
|
||
var getListen bool
|
||
var webCertFile string
|
||
var webKeyFile string
|
||
var tgbottoken string
|
||
var tgbotchatid string
|
||
var enabletgbot bool
|
||
var tgbotRuntime string
|
||
var reset bool
|
||
var show bool
|
||
var getCert bool
|
||
var resetTwoFactor bool
|
||
settingCmd.BoolVar(&reset, "reset", false, "Reset all settings")
|
||
settingCmd.BoolVar(&show, "show", false, "Display current settings")
|
||
settingCmd.IntVar(&port, "port", 0, "Set panel port number")
|
||
settingCmd.StringVar(&username, "username", "", "Set login username")
|
||
settingCmd.StringVar(&password, "password", "", "Set login password")
|
||
settingCmd.StringVar(&webBasePath, "webBasePath", "", "Set base path for Panel")
|
||
settingCmd.StringVar(&listenIP, "listenIP", "", "set panel listenIP IP")
|
||
settingCmd.BoolVar(&resetTwoFactor, "resetTwoFactor", false, "Reset two-factor authentication settings")
|
||
settingCmd.BoolVar(&getListen, "getListen", false, "Display current panel listenIP IP")
|
||
settingCmd.BoolVar(&getCert, "getCert", false, "Display current certificate settings")
|
||
settingCmd.StringVar(&webCertFile, "webCert", "", "Set path to public key file for panel")
|
||
settingCmd.StringVar(&webKeyFile, "webCertKey", "", "Set path to private key file for panel")
|
||
settingCmd.StringVar(&tgbottoken, "tgbottoken", "", "Set token for Telegram bot")
|
||
settingCmd.StringVar(&tgbotRuntime, "tgbotRuntime", "", "Set cron time for Telegram bot notifications")
|
||
settingCmd.StringVar(&tgbotchatid, "tgbotchatid", "", "Set chat ID for Telegram bot notifications")
|
||
settingCmd.BoolVar(&enabletgbot, "enabletgbot", false, "Enable notifications via Telegram bot")
|
||
|
||
oldUsage := flag.Usage
|
||
flag.Usage = func() {
|
||
oldUsage()
|
||
fmt.Println()
|
||
fmt.Println("Commands:")
|
||
fmt.Println(" run run web panel")
|
||
fmt.Println(" migrate migrate form other/old x-ui")
|
||
fmt.Println(" setting set settings")
|
||
}
|
||
|
||
flag.Parse()
|
||
if showVersion {
|
||
fmt.Println(config.GetVersion())
|
||
return
|
||
}
|
||
|
||
switch os.Args[1] {
|
||
case "run":
|
||
err := runCmd.Parse(os.Args[2:])
|
||
if err != nil {
|
||
fmt.Println(err)
|
||
return
|
||
}
|
||
runWebServer()
|
||
case "migrate":
|
||
migrateDb()
|
||
case "setting":
|
||
err := settingCmd.Parse(os.Args[2:])
|
||
if err != nil {
|
||
fmt.Println(err)
|
||
return
|
||
}
|
||
if reset {
|
||
resetSetting()
|
||
} else {
|
||
updateSetting(port, username, password, webBasePath, listenIP, resetTwoFactor)
|
||
}
|
||
if show {
|
||
showSetting(show)
|
||
}
|
||
if getListen {
|
||
GetListenIP(getListen)
|
||
}
|
||
if getCert {
|
||
GetCertificate(getCert)
|
||
}
|
||
if (tgbottoken != "") || (tgbotchatid != "") || (tgbotRuntime != "") {
|
||
updateTgbotSetting(tgbottoken, tgbotchatid, tgbotRuntime)
|
||
}
|
||
if enabletgbot {
|
||
updateTgbotEnableSts(enabletgbot)
|
||
}
|
||
case "cert":
|
||
err := settingCmd.Parse(os.Args[2:])
|
||
if err != nil {
|
||
fmt.Println(err)
|
||
return
|
||
}
|
||
if reset {
|
||
updateCert("", "")
|
||
} else {
|
||
updateCert(webCertFile, webKeyFile)
|
||
}
|
||
default:
|
||
fmt.Println("Invalid subcommands ----->>无效命令")
|
||
fmt.Println()
|
||
runCmd.Usage()
|
||
fmt.Println()
|
||
settingCmd.Usage()
|
||
}
|
||
}
|