🌴 Sync 2026-03-05 23:51:42

luci-app-passwall/root/etc/config/passwall_server

@@ -0,0 +1,4 @@
+
+config global 'global'
+	option enable '0'
+

luci-app-passwall/root/etc/hotplug.d/iface/98-passwall

@@ -0,0 +1,23 @@
+#!/bin/sh
+
+[[ "$ACTION" == "ifup" && $(uci get "passwall.@global[0].enabled") == "1" ]] && [ -f /var/lock/passwall_ready.lock ] && {
+	default_device=$(ip route | grep default | awk -F 'dev ' '{print $2}' | awk '{print $1}')
+	[ "$default_device" == "$DEVICE" ] && {
+		LOCK_FILE_DIR=/var/lock
+		[ ! -d ${LOCK_FILE_DIR} ] && mkdir -p ${LOCK_FILE_DIR}
+		LOCK_FILE="${LOCK_FILE_DIR}/passwall_ifup.lock"
+		if [ -s ${LOCK_FILE} ]; then
+			SPID=$(cat ${LOCK_FILE})
+			if [ -e /proc/${SPID}/status ]; then
+				exit 1
+			fi
+			cat /dev/null > ${LOCK_FILE}
+		fi
+		echo $$ > ${LOCK_FILE}
+		
+		/etc/init.d/passwall restart >/dev/null 2>&1 &
+		logger -p notice -t network -s "passwall: restart when $INTERFACE ifup"
+		
+		rm -rf ${LOCK_FILE}
+	}
+}

luci-app-passwall/root/etc/init.d/passwall

@@ -0,0 +1,77 @@
+#!/bin/sh /etc/rc.common
+
+START=99
+STOP=15
+
+ROOT="${IPKG_INSTROOT:-}"
+. "$ROOT/usr/share/passwall/utils.sh"
+APP_FILE=${APP_PATH}/app.sh
+LOCK_FILE_DIR=/var/lock
+LOCK_FILE=${LOCK_FILE_DIR}/${CONFIG}.lock
+
+set_lock() {
+	[ ! -d "$LOCK_FILE_DIR" ] && mkdir -p $LOCK_FILE_DIR
+	exec 999>"$LOCK_FILE"
+	flock -xn 999
+}
+
+unset_lock() {
+	flock -u 999
+	rm -rf "$LOCK_FILE"
+}
+
+unlock() {
+	failcount=1
+	while [ "$failcount" -le 10 ]; do
+		if [ -f "$LOCK_FILE" ]; then
+			let "failcount++"
+			sleep 1s
+			[ "$failcount" -ge 10 ] && unset_lock
+		else
+			break
+		fi
+	done
+}
+
+boot_func() {
+	local delay=$(uci -q get ${CONFIG}.@global_delay[0].start_delay || echo 1)
+	if [ "$delay" -gt 0 ]; then
+		echolog "执行启动延时 $delay 秒后再启动!"
+		sleep $delay
+	fi
+	restart boot
+	touch ${LOCK_FILE_DIR}/${CONFIG}_ready.lock
+}
+
+boot() {
+	boot_func >/dev/null 2>&1 &
+}
+
+start() {
+	set_lock
+	[ $? == 1 ] && echolog "脚本已经在运行，不重复运行，退出." && exit 0
+	$APP_FILE start
+	unset_lock
+}
+
+stop() {
+	unlock
+	set_lock
+	[ $? == 1 ] && echolog "停止脚本等待超时，不重复运行，退出." && exit 0
+	$APP_FILE stop
+	unset_lock
+}
+
+restart() {
+	set_lock
+	[ $? == 1 ] && echolog "脚本已经在运行，不重复运行，退出." && exit 0
+	$APP_FILE stop
+	$APP_FILE start $1
+	unset_lock
+}
+
+reload() {
+	echo "Warning: This service does not support configuration reloading"
+	echo "Performing full restart instead..."
+	restart
+}

luci-app-passwall/root/etc/init.d/passwall_server

@@ -0,0 +1,22 @@
+#!/bin/sh /etc/rc.common
+
+START=99
+
+start() {
+	lua /usr/lib/lua/luci/passwall/server_app.lua start
+}
+
+stop() {
+	lua /usr/lib/lua/luci/passwall/server_app.lua stop
+}
+
+restart() {
+	stop
+	start
+}
+
+reload() {
+	echo "Warning: This service does not support configuration reloading"
+	echo "Performing full restart instead..."
+	restart
+}

luci-app-passwall/root/etc/uci-defaults/luci-passwall

@@ -0,0 +1,71 @@
+#!/bin/sh
+[ ! -f "/usr/share/ucitrack/luci-app-passwall.json" ] && {
+    cat > /usr/share/ucitrack/luci-app-passwall.json << EEOF
+{
+    "config": "passwall",
+    "init": "passwall"
+}
+EEOF
+}
+
+[ "`which nft`" ] && uci -q set passwall.@global_forwarding[0].use_nft=1
+
+grep -q ip-api.com /usr/share/passwall/rules/proxy_host ||
+	sed -i '$a ip-api.com' /usr/share/passwall/rules/proxy_host
+
+if [ -e "/etc/config/ucitrack" ]; then
+    uci -q batch <<-EOF
+ 		delete ucitrack.@passwall[-1]
+		add ucitrack passwall
+		set ucitrack.@passwall[-1].init=passwall
+		delete ucitrack.@passwall_server[-1]
+		add ucitrack passwall_server
+		set ucitrack.@passwall_server[-1].init=passwall_server
+		commit ucitrack
+EOF
+fi
+
+uci -q batch <<-EOF
+	delete firewall.passwall
+	set firewall.passwall=include
+	set firewall.passwall.type='script'
+	set firewall.passwall.path='/var/etc/passwall.include'
+
+	delete firewall.passwall_server
+	set firewall.passwall_server=include
+	set firewall.passwall_server.type='script'
+	set firewall.passwall_server.path='/var/etc/passwall_server.include'
+
+	set dhcp.@dnsmasq[0].localuse=1
+	commit dhcp
+	set uhttpd.main.max_requests=50
+	commit uhttpd
+EOF
+
+if [ -x "/sbin/fw3" ]; then
+	uci -q set firewall.passwall.reload='1'
+	uci -q set firewall.passwall_server.reload='1'
+else
+	uci -q delete firewall.passwall.reload
+	uci -q delete firewall.passwall.fw4_compatible
+	uci -q delete firewall.passwall_server.reload
+	uci -q delete firewall.passwall_server.fw4_compatible
+fi
+uci commit firewall
+
+[ ! -s "/etc/config/passwall" ] && cp -f /usr/share/passwall/0_default_config /etc/config/passwall
+
+chmod +x /usr/share/passwall/*.sh
+
+[ "$(uci -q get passwall.@global_xray[0].sniffing)" == "1" ] && [ "$(uci -q get passwall.@global_xray[0].route_only)" != "1" ] && uci -q set passwall.@global_xray[0].sniffing_override_dest=1
+uci -q delete passwall.@global_xray[0].sniffing
+uci -q delete passwall.@global_xray[0].route_only
+uci -q commit passwall
+
+sed -i "s#add_from#group#g" /etc/config/passwall 2>/dev/null
+
+rm -f /tmp/luci-indexcache /tmp/luci-indexcache.*
+rm -rf /tmp/luci-modulecache/
+killall -HUP rpcd 2>/dev/null
+
+exit 0