⛅ Sync 2026-09-29 21:45:00

luci-app-homeproxy-pro/root/etc/homeproxy-pro/scripts/generate_server.uc

@@ -0,0 +1,66 @@
+#!/usr/bin/ucode
+/*
+ * SPDX-License-Identifier: GPL-2.0-only
+ *
+ *     scripts/generate_server.uc: process-level entry point.
+ *
+ * Mirror of scripts/generate_client.uc for the server instance. The
+ * server generator (generator/server.uc) returns null when no inbound
+ * is enabled; the shell then exits 1 so init.d can detect
+ * "server disabled" without a separate UCI check.
+ */
+
+'use strict';
+
+import { mkdtemp, writefile } from 'fs';
+import { Loader } from './config/loader.uc';
+import { generate_server } from './generator/server.uc';
+import { removeBlankAttrs, RUN_DIR, shellQuote, UCICONFIG_DIR } from './homeproxy-pro.uc';
+
+const dm = Loader.load(UCICONFIG_DIR);
+const config = generate_server(dm);
+if (!config)
+	exit(1);
+
+const cleaned = removeBlankAttrs(config);
+system('mkdir -p ' + shellQuote(RUN_DIR));
+
+/* A private scratch directory rather than a fixed `<out>.tmp`.
+ *
+ * Two generation runs can still overlap (a LuCI apply while the cron entry
+ * reloads, or a manual and a triggered reload). With a fixed name both wrote
+ * the same file, and `sing-box check` could be validating a file the other run
+ * was still writing - the winner then installed a half-written config.
+ *
+ * mkdtemp() is this package's existing primitive for that (executeCommand()
+ * uses it) and gives a 0700 directory under /tmp.  The path here comes from
+ * mkdtemp() so it is safe today, but it goes through shellQuote() anyway:
+ * the "all shell args quoted" rule is the machine-checkable
+ * invariant, not a comment about today's safety. */
+const work_dir = mkdtemp();
+const tmp = work_dir + '/sing-box-s.json';
+
+/* Same reason as the client path: a failed write used to be reported as a
+ * failed `sing-box check`. */
+if (writefile(tmp, sprintf('%.J\n', cleaned)) == null) {
+	system('rm -rf ' + shellQuote(work_dir));
+	die('failed to write the generated server configuration to ' + tmp);
+}
+
+if (system('sing-box check --config ' + shellQuote(tmp)) !== 0) {
+	system('rm -rf ' + shellQuote(work_dir));
+	exit(1);
+}
+
+if (system('mv -f ' + shellQuote(tmp) + ' ' + shellQuote(RUN_DIR) + '/sing-box-s.json') !== 0) {
+	system('rm -rf ' + shellQuote(work_dir));
+	exit(1);
+}
+
+/* The server config carries inbound credentials and the REALITY/ECH key
+ * material, and writefile() has no mode argument, so it lands with the
+ * process umask.  0600 matches what sing-box needs to read it as its own
+ * user. */
+system('chmod 600 ' + shellQuote(RUN_DIR) + '/sing-box-s.json');
+
+system('rm -rf ' + shellQuote(work_dir));