mirror of
https://github.com/kiddin9/op-packages.git
synced 2026-09-11 02:44:57 +08:00
1310 lines
46 KiB
Lua
1310 lines
46 KiB
Lua
-- Copyright (C) 2018-2020 L-WRT Team
|
|
-- Copyright (C) 2021-2025 xiaorouji
|
|
-- Copyright (C) 2026 Openwrt-Passwall Organization
|
|
|
|
module("luci.controller.passwall", package.seeall)
|
|
local api = require "luci.passwall.api"
|
|
local appname = api.appname -- not available
|
|
local c_config = api.c_config -- not available
|
|
local uci, uci_get, uci_set, uci_del, uci_foreach, uci_save = api.uci, api.uci_get_c, api.uci_set_c, api.uci_del_c, api.uci_foreach_c, api.uci_save_c
|
|
local fs = api.fs
|
|
local http = require "luci.http"
|
|
local util = require "luci.util"
|
|
local i18n = require "luci.i18n"
|
|
local jsonStringify = luci.jsonc.stringify
|
|
local jsonParse = luci.jsonc.parse
|
|
|
|
function index()
|
|
if not nixio.fs.access("/etc/config/passwall") then
|
|
if nixio.fs.access("/usr/share/passwall/0_default_config") then
|
|
luci.sys.call('cp -f /usr/share/passwall/0_default_config /etc/config/passwall')
|
|
else return end
|
|
end
|
|
local api = require "luci.passwall.api"
|
|
local appname = api.appname -- global definitions not available
|
|
local fs = api.fs
|
|
entry({"admin", "services", appname}).dependent = true
|
|
entry({"admin", "services", appname, "show"}, call("show_menu")).leaf = true
|
|
entry({"admin", "services", appname, "hide"}, call("hide_menu")).leaf = true
|
|
entry({"admin", "services", appname, "ip"}, call('check_ip')).leaf = true
|
|
entry({"admin", "services", appname, "adblock_refresh"}, call('adblock_refresh')).leaf = true
|
|
local e
|
|
if api.uci_get_c("@global[0]", "hide_from_luci") ~= "1" then
|
|
e = entry({"admin", "services", appname}, alias("admin", "services", appname, "settings"), _("Pass Wall"), -1)
|
|
else
|
|
e = entry({"admin", "services", appname}, alias("admin", "services", appname, "settings"), nil, -1)
|
|
end
|
|
e.dependent = true
|
|
e.acl_depends = { "luci-app-passwall" }
|
|
--[[ Client ]]
|
|
entry({"admin", "services", appname, "settings"}, cbi(appname .. "/client/global"), _("Basic Settings"), 1).dependent = true
|
|
entry({"admin", "services", appname, "node_list"}, cbi(appname .. "/client/node_list"), _("Node List"), 2).dependent = true
|
|
entry({"admin", "services", appname, "node_subscribe"}, cbi(appname .. "/client/node_subscribe"), _("Node Subscribe"), 3).dependent = true
|
|
entry({"admin", "services", appname, "other"}, cbi(appname .. "/client/other"), _("Other Settings"), 92).leaf = true
|
|
if api.is_finded("haproxy") then
|
|
entry({"admin", "services", appname, "haproxy"}, cbi(appname .. "/client/haproxy"), _("Load Balancing"), 93).leaf = true
|
|
end
|
|
entry({"admin", "services", appname, "app_update"}, cbi(appname .. "/client/app_update"), _("App Update"), 95).leaf = true
|
|
entry({"admin", "services", appname, "rule"}, cbi(appname .. "/client/rule"), _("Rule Manage"), 96).leaf = true
|
|
entry({"admin", "services", appname, "rule_list"}, cbi(appname .. "/client/rule_list", {autoapply = true}), _("Rule List"), 97).leaf = true
|
|
entry({"admin", "services", appname, "node_subscribe_config"}, cbi(appname .. "/client/node_subscribe_config")).leaf = true
|
|
entry({"admin", "services", appname, "node_config"}, cbi(appname .. "/client/node_config")).leaf = true
|
|
entry({"admin", "services", appname, "shunt_rules"}, cbi(appname .. "/client/shunt_rules")).leaf = true
|
|
entry({"admin", "services", appname, "socks_config"}, cbi(appname .. "/client/socks_config")).leaf = true
|
|
entry({"admin", "services", appname, "acl"}, cbi(appname .. "/client/acl"), _("Access control"), 98).leaf = true
|
|
entry({"admin", "services", appname, "acl_config"}, cbi(appname .. "/client/acl_config")).leaf = true
|
|
entry({"admin", "services", appname, "log"}, template(appname .. "/log/log"), _("Runtime Logs"), 999).leaf = true
|
|
|
|
--[[ Server ]]
|
|
entry({"admin", "services", appname, "server"}, cbi(appname .. "/server/index"), _("Server-Side"), 99).leaf = true
|
|
entry({"admin", "services", appname, "server_config"}, cbi(appname .. "/server/server_config")).leaf = true
|
|
entry({"admin", "services", appname, "server_user_config"}, cbi(appname .. "/server/user_config")).leaf = true
|
|
|
|
--[[ API ]]
|
|
entry({"admin", "services", appname, "server_update_config"}, call("server_update_config")).leaf = true
|
|
entry({"admin", "services", appname, "server_status"}, call("server_status")).leaf = true
|
|
entry({"admin", "services", appname, "server_log"}, call("server_log")).leaf = true
|
|
entry({"admin", "services", appname, "server_get_log"}, call("server_get_log")).leaf = true
|
|
entry({"admin", "services", appname, "server_clear_log"}, call("server_clear_log")).leaf = true
|
|
entry({"admin", "services", appname, "link_add_node"}, call("link_add_node")).leaf = true
|
|
entry({"admin", "services", appname, "socks_autoswitch_add_node"}, call("socks_autoswitch_add_node")).leaf = true
|
|
entry({"admin", "services", appname, "socks_autoswitch_remove_node"}, call("socks_autoswitch_remove_node")).leaf = true
|
|
entry({"admin", "services", appname, "gen_client_config"}, call("gen_client_config")).leaf = true
|
|
entry({"admin", "services", appname, "get_now_use_node"}, call("get_now_use_node")).leaf = true
|
|
entry({"admin", "services", appname, "get_redir_log"}, call("get_redir_log")).leaf = true
|
|
entry({"admin", "services", appname, "get_socks_log"}, call("get_socks_log")).leaf = true
|
|
entry({"admin", "services", appname, "get_chinadns_log"}, call("get_chinadns_log")).leaf = true
|
|
entry({"admin", "services", appname, "get_log"}, call("get_log")).leaf = true
|
|
entry({"admin", "services", appname, "clear_log"}, call("clear_log")).leaf = true
|
|
entry({"admin", "services", appname, "index_status"}, call("index_status")).leaf = true
|
|
entry({"admin", "services", appname, "haproxy_status"}, call("haproxy_status")).leaf = true
|
|
entry({"admin", "services", appname, "socks_status"}, call("socks_status")).leaf = true
|
|
entry({"admin", "services", appname, "connect_status"}, call("connect_status")).leaf = true
|
|
entry({"admin", "services", appname, "ping_node"}, call("ping_node")).leaf = true
|
|
entry({"admin", "services", appname, "urltest_node"}, call("urltest_node")).leaf = true
|
|
entry({"admin", "services", appname, "update_config"}, call("update_config")).leaf = true
|
|
entry({"admin", "services", appname, "add_node"}, call("add_node")).leaf = true
|
|
entry({"admin", "services", appname, "set_node"}, call("set_node")).leaf = true
|
|
entry({"admin", "services", appname, "copy_node"}, call("copy_node")).leaf = true
|
|
entry({"admin", "services", appname, "clear_all_nodes"}, call("clear_all_nodes")).leaf = true
|
|
entry({"admin", "services", appname, "delete_select_nodes"}, call("delete_select_nodes")).leaf = true
|
|
entry({"admin", "services", appname, "reassign_group"}, call("reassign_group")).leaf = true
|
|
entry({"admin", "services", appname, "get_node"}, call("get_node")).leaf = true
|
|
entry({"admin", "services", appname, "save_node_list_opt"}, call("save_node_list_opt")).leaf = true
|
|
entry({"admin", "services", appname, "update_rules"}, call("update_rules")).leaf = true
|
|
entry({"admin", "services", appname, "rollback_rules"}, call("rollback_rules")).leaf = true
|
|
entry({"admin", "services", appname, "subscribe_del_node"}, call("subscribe_del_node")).leaf = true
|
|
entry({"admin", "services", appname, "subscribe_del_all"}, call("subscribe_del_all")).leaf = true
|
|
entry({"admin", "services", appname, "subscribe_manual"}, call("subscribe_manual")).leaf = true
|
|
entry({"admin", "services", appname, "subscribe_manual_all"}, call("subscribe_manual_all")).leaf = true
|
|
entry({"admin", "services", appname, "flush_set"}, call("flush_set")).leaf = true
|
|
entry({"admin", "services", appname, "get_shunt_rules"}, call("get_shunt_rules")).leaf = true
|
|
entry({"admin", "services", appname, "add_shunt_rule"}, call("add_shunt_rule")).leaf = true
|
|
entry({"admin", "services", appname, "delete_select_shunt_rules"}, call("delete_select_shunt_rules")).leaf = true
|
|
|
|
--[[rule_list]]
|
|
entry({"admin", "services", appname, "read_rulelist"}, call("read_rulelist")).leaf = true
|
|
|
|
--[[Components update]]
|
|
entry({"admin", "services", appname, "check_passwall"}, call("app_check")).leaf = true
|
|
local coms = require "luci.passwall.com"
|
|
local com
|
|
for _, com in ipairs(coms.order) do
|
|
entry({"admin", "services", appname, "check_" .. com}, call("com_check", com)).leaf = true
|
|
entry({"admin", "services", appname, "update_" .. com}, call("com_update", com)).leaf = true
|
|
entry({"admin", "services", appname, "version_" .. com}, call("com_version", com)).leaf = true
|
|
end
|
|
|
|
--[[Backup]]
|
|
entry({"admin", "services", appname, "create_backup"}, call("create_backup")).leaf = true
|
|
entry({"admin", "services", appname, "restore_backup"}, call("restore_backup")).leaf = true
|
|
entry({"admin", "services", appname, "reset_config"}, call("reset_config")).leaf = true
|
|
|
|
--[[geoview]]
|
|
entry({"admin", "services", appname, "geo_view"}, call("geo_view")).leaf = true
|
|
|
|
entry({"admin", "services", appname, "fetch_certsha256"}, call("fetch_certsha256")).leaf = true
|
|
entry({"admin", "services", appname, "gen_wireguard_key"}, call("gen_wireguard_key")).leaf = true
|
|
end
|
|
|
|
local function http_write_json(content)
|
|
http.prepare_content("application/json")
|
|
http.write(jsonStringify(content or {code = 1}))
|
|
end
|
|
|
|
local function http_write_json_ok(data)
|
|
http.prepare_content("application/json")
|
|
http.write(jsonStringify({code = 1, data = data}))
|
|
end
|
|
|
|
local function http_write_json_error(data)
|
|
http.prepare_content("application/json")
|
|
http.write(jsonStringify({code = 0, data = data}))
|
|
end
|
|
|
|
function show_menu()
|
|
api.sh_uci_del(c_config, "@global[0]", "hide_from_luci", true)
|
|
luci.sys.call("rm -rf /tmp/luci-*")
|
|
luci.sys.call("/etc/init.d/rpcd restart >/dev/null")
|
|
http.redirect(api.url())
|
|
end
|
|
|
|
function hide_menu()
|
|
api.sh_uci_set(c_config, "@global[0]", "hide_from_luci", "1", true)
|
|
luci.sys.call("rm -rf /tmp/luci-*")
|
|
luci.sys.call("/etc/init.d/rpcd restart >/dev/null")
|
|
http.redirect(luci.dispatcher.build_url("admin", "status", "overview"))
|
|
end
|
|
|
|
function link_add_node()
|
|
-- 分片接收以突破uhttpd的限制
|
|
local tmp_file = "/tmp/links.conf"
|
|
local chunk = http.formvalue("chunk")
|
|
local chunk_index = tonumber(http.formvalue("chunk_index"))
|
|
local total_chunks = tonumber(http.formvalue("total_chunks"))
|
|
local group = http.formvalue("group") or "default"
|
|
|
|
if chunk and chunk_index ~= nil and total_chunks ~= nil then
|
|
-- 按顺序拼接到文件
|
|
local mode = "a"
|
|
if chunk_index == 0 then
|
|
mode = "w"
|
|
end
|
|
local f = io.open(tmp_file, mode)
|
|
if f then
|
|
f:write(chunk)
|
|
f:close()
|
|
end
|
|
-- 如果是最后一片，才执行
|
|
if chunk_index + 1 == total_chunks then
|
|
luci.sys.call("lua /usr/share/passwall/subscribe.lua add " .. group)
|
|
end
|
|
end
|
|
end
|
|
|
|
function socks_autoswitch_add_node()
|
|
local id = http.formvalue("id")
|
|
local key = http.formvalue("key")
|
|
if id and id ~= "" and key and key ~= "" then
|
|
uci_set(id, "enable_autoswitch", "1")
|
|
local new_list = uci_get(id, "autoswitch_backup_node") or {}
|
|
for i = #new_list, 1, -1 do
|
|
if (uci_get(new_list[i], "remarks") or ""):find(key) then
|
|
table.remove(new_list, i)
|
|
end
|
|
end
|
|
for k, e in ipairs(api.get_valid_nodes()) do
|
|
if e.node_type == "normal" and e["remark"]:find(key) then
|
|
table.insert(new_list, e.id)
|
|
end
|
|
end
|
|
uci_set(id, "autoswitch_backup_node", new_list)
|
|
uci_save()
|
|
end
|
|
http.redirect(api.url("socks_config", id))
|
|
end
|
|
|
|
function socks_autoswitch_remove_node()
|
|
local id = http.formvalue("id")
|
|
local key = http.formvalue("key")
|
|
if id and id ~= "" and key and key ~= "" then
|
|
uci_set(id, "enable_autoswitch", "1")
|
|
local new_list = uci_get(id, "autoswitch_backup_node") or {}
|
|
for i = #new_list, 1, -1 do
|
|
if (uci_get(new_list[i], "remarks") or ""):find(key) then
|
|
table.remove(new_list, i)
|
|
end
|
|
end
|
|
uci_set(id, "autoswitch_backup_node", new_list)
|
|
uci_save()
|
|
end
|
|
http.redirect(api.url("socks_config", id))
|
|
end
|
|
|
|
|
|
function gen_client_config()
|
|
local id = http.formvalue("id")
|
|
local config_file = api.TMP_PATH .. "/config_" .. id
|
|
luci.sys.call(string.format("/usr/share/passwall/app.sh run_socks flag=config_%s node=%s bind=127.0.0.1 socks_port=1080 config_file=%s no_run=1", id, id, config_file))
|
|
if nixio.fs.access(config_file) then
|
|
http.prepare_content("application/json")
|
|
http.write(luci.sys.exec("cat " .. config_file))
|
|
luci.sys.call("rm -f " .. config_file)
|
|
else
|
|
http.redirect(api.url("node_list"))
|
|
end
|
|
end
|
|
|
|
function get_now_use_node()
|
|
local path = api.TMP_PATH .. "/acl/default"
|
|
local e = {}
|
|
local node = api.get_cache_var("ACL_GLOBAL_node")
|
|
if node then
|
|
e["global"] = node
|
|
end
|
|
http_write_json(e)
|
|
end
|
|
|
|
function get_redir_log()
|
|
local id = http.formvalue("id")
|
|
local path = api.TMP_PATH .. "/acl/" .. id
|
|
|
|
local function alert(msg)
|
|
http.write(string.format("<script>alert('%s');window.close();</script>", i18n.translate(msg)))
|
|
end
|
|
|
|
local name = "global"
|
|
if id and id ~= "default" then
|
|
local global_node = uci_get("@global[0]", "node") or "nil"
|
|
local acl_node = uci_get(id, "node") or "nil"
|
|
local global_enabled = uci_get("@global[0]", "enabled") == "1"
|
|
if acl_node == global_node and global_enabled then
|
|
path = api.TMP_PATH .. "/acl/default"
|
|
if uci_get("@global[0]", "log_node") ~= "1" then
|
|
alert("The access control node is the same as the global node. Please enable global logging.")
|
|
return
|
|
end
|
|
else
|
|
name = "node"
|
|
end
|
|
end
|
|
|
|
if fs.access(path .. "/" .. name .. ".log") then
|
|
local content = luci.sys.exec("tail -n 5000 ".. path .. "/" .. name .. ".log")
|
|
content = content:gsub("\n", "<br />")
|
|
http.write(content)
|
|
else
|
|
alert("Not enabled log")
|
|
end
|
|
end
|
|
|
|
function get_socks_log()
|
|
local name = http.formvalue("name")
|
|
local path = api.TMP_PATH .. "/" .. name .. ".log"
|
|
if fs.access(path) then
|
|
local content = luci.sys.exec("tail -n 5000 ".. path)
|
|
content = content:gsub("\n", "<br />")
|
|
http.write(content)
|
|
else
|
|
http.write(string.format("<script>alert('%s');window.close();</script>", i18n.translate("Not enabled log")))
|
|
end
|
|
end
|
|
|
|
function get_chinadns_log()
|
|
local flag = http.formvalue("flag")
|
|
local path = api.TMP_PATH .. "/acl/" .. flag .. "/chinadns_ng.log"
|
|
if flag ~= "default" then
|
|
local global_node = uci_get("@global[0]", "node") or "nil"
|
|
local acl_node = uci_get(flag, "node") or "nil"
|
|
if acl_node == global_node and uci_get("@global[0]", "enabled") == "1" then
|
|
path = api.TMP_PATH .. "/acl/default/chinadns_ng.log"
|
|
if uci_get("@global[0]", "log_chinadns_ng") ~= "1" then
|
|
http.write(string.format("<script>alert('%s');window.close();</script>", i18n.translate("The access control node is the same as the global node. Please enable global logging.")))
|
|
return
|
|
end
|
|
end
|
|
end
|
|
if fs.access(path) then
|
|
local content = luci.sys.exec("tail -n 5000 ".. path)
|
|
content = content:gsub("\n", "<br />")
|
|
http.write(content)
|
|
else
|
|
http.write(string.format("<script>alert('%s');window.close();</script>", i18n.translate("Not enabled log")))
|
|
end
|
|
end
|
|
|
|
function get_log()
|
|
-- luci.sys.exec("[ -f /tmp/log/passwall.log ] && sed '1!G;h;$!d' /tmp/log/passwall.log > /tmp/log/passwall_show.log")
|
|
http.write(luci.sys.exec("[ -f '/tmp/log/passwall.log' ] && cat /tmp/log/passwall.log"))
|
|
end
|
|
|
|
function clear_log()
|
|
luci.sys.call("echo '' > /tmp/log/passwall.log")
|
|
end
|
|
|
|
function adblock_refresh()
|
|
local icount = 0
|
|
|
|
local status = luci.sys.call("/usr/share/passwall/adblock.sh >/dev/null 2>&1")
|
|
if status == 0 then
|
|
icount = tonumber(luci.sys.exec("wc -l < /usr/share/passwall/rules/block_host"))
|
|
if icount>0 then
|
|
retstring = tostring(math.ceil(icount))
|
|
else
|
|
retstring = "-1"
|
|
end
|
|
elseif status == 2 then
|
|
retstring = "0"
|
|
else
|
|
retstring = "-1"
|
|
end
|
|
luci.http.prepare_content("application/json")
|
|
luci.http.write_json({ret=retstring})
|
|
end
|
|
|
|
function check_site(host, port)
|
|
local nixio = require "nixio"
|
|
local socket = nixio.socket("inet", "stream")
|
|
socket:setopt("socket", "rcvtimeo", 2)
|
|
socket:setopt("socket", "sndtimeo", 2)
|
|
local ret = socket:connect(host, port)
|
|
socket:close()
|
|
return ret
|
|
end
|
|
|
|
function get_ip_geo_info()
|
|
local result = luci.sys.exec('curl --retry 3 -m 10 -LfsA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" http://ip-api.com/json/')
|
|
local json = require "luci.jsonc"
|
|
local info = json.parse(result)
|
|
|
|
return {
|
|
flag = string.lower(info.countryCode) or "un",
|
|
country = get_country_name(info.countryCode) or "Unknown",
|
|
ip = info.query,
|
|
isp = info.isp
|
|
}
|
|
end
|
|
|
|
function get_country_name(countryCode)
|
|
local country_names = {
|
|
US = "美国", CN = "中国", JP = "日本", GB = "英国", DE = "德国",
|
|
FR = "法国", BR = "巴西", IT = "意大利", RU = "俄罗斯", CA = "加拿大",
|
|
KR = "韩国", ES = "西班牙", AU = "澳大利亚", MX = "墨西哥", ID = "印度尼西亚",
|
|
NL = "荷兰", TR = "土耳其", CH = "瑞士", SA = "沙特阿拉伯", SE = "瑞典",
|
|
PL = "波兰", BE = "比利时", AR = "阿根廷", NO = "挪威", AT = "奥地利",
|
|
TW = "台湾", ZA = "南非", TH = "泰国", DK = "丹麦", MY = "马来西亚",
|
|
PH = "菲律宾", SG = "新加坡", IE = "爱尔兰", HK = "香港", FI = "芬兰",
|
|
CL = "智利", PT = "葡萄牙", GR = "希腊", IL = "以色列", NZ = "新西兰",
|
|
CZ = "捷克", RO = "罗马尼亚", VN = "越南", UA = "乌克兰", HU = "匈牙利",
|
|
AE = "阿联酋", CO = "哥伦比亚", IN = "印度", EG = "埃及", PE = "秘鲁", TW = "台湾"
|
|
}
|
|
return country_names[countryCode]
|
|
end
|
|
|
|
function check_ip()
|
|
local e = {}
|
|
local port = 80
|
|
local geo_info = get_ip_geo_info(ip)
|
|
e.ip = geo_info.ip
|
|
e.flag = geo_info.flag
|
|
e.country = geo_info.country
|
|
e.isp = geo_info.isp
|
|
e.baidu = check_site('www.baidu.com', port)
|
|
e.taobao = check_site('www.taobao.com', port)
|
|
e.google = check_site('www.google.com', port)
|
|
e.youtube = check_site('www.youtube.com', port)
|
|
luci.http.prepare_content('application/json')
|
|
luci.http.write_json(e)
|
|
end
|
|
|
|
function index_status()
|
|
local e = {}
|
|
local dns_shunt = uci_get("@global[0]", "dns_shunt") or "dnsmasq"
|
|
if dns_shunt == "smartdns" then
|
|
local port = api.get_cache_var("SMARTDNS_LOCAL_PORT") or 0
|
|
e.dns_mode_status = (port ~= 0) and luci.sys.call("netstat -apn | grep ':%s ' >/dev/null" % port) == 0 or false
|
|
elseif dns_shunt == "chinadns-ng" then
|
|
e.dns_mode_status = luci.sys.call("/bin/busybox top -bn1 | grep -v 'grep' | grep '%s/bin/' | grep 'default' | grep 'chinadns_ng' >/dev/null" % api.TMP_PATH) == 0
|
|
else
|
|
e.dns_mode_status = luci.sys.call("netstat -apn | grep ':15353 ' >/dev/null") == 0
|
|
end
|
|
|
|
e.haproxy_status = "-1"
|
|
if api.is_finded("haproxy") then
|
|
e.haproxy_status = (luci.sys.call("/bin/busybox top -bn1 | grep -v 'grep' | grep '%s/bin/' | grep haproxy >/dev/null" % appname) == 0) and "0" or "1"
|
|
end
|
|
|
|
if api.get_cache_var("ENABLED_DEFAULT_ACL") == "1" then
|
|
local has_tproxy = api.get_cache_var("HAS_TPROXY")
|
|
if not has_tproxy then
|
|
local handle = io.popen("lsmod")
|
|
local mods = handle and handle:read("*a") or ""
|
|
if handle then handle:close() end
|
|
has_tproxy = (mods:find("TPROXY") or mods:find("nft_tproxy")) and "1" or "0"
|
|
api.set_cache_var("HAS_TPROXY", has_tproxy)
|
|
end
|
|
e["tcp_status"] = luci.sys.call("/bin/busybox top -bn1 | grep -v 'grep' | grep '%s/bin/' | grep 'default' | grep 'global' >/dev/null" % api.TMP_PATH) == 0
|
|
if has_tproxy == "1" then
|
|
e["udp_status"] = luci.sys.call("/bin/busybox top -bn1 | grep -v -E 'grep|naive' | grep '%s/bin/' | grep 'default' | grep 'global' >/dev/null" % api.TMP_PATH) == 0
|
|
end
|
|
end
|
|
http_write_json(e)
|
|
end
|
|
|
|
function haproxy_status()
|
|
local e = {}
|
|
e["status"] = luci.sys.call("/bin/busybox top -bn1 | grep -v 'grep' | grep '%s/bin/' | grep haproxy >/dev/null" % appname) == 0
|
|
http_write_json(e)
|
|
end
|
|
|
|
function socks_status()
|
|
local e = {}
|
|
local index = http.formvalue("index")
|
|
local id = http.formvalue("id")
|
|
e.index = index
|
|
e.socks_status = luci.sys.call(string.format("/bin/busybox top -bn1 | grep -v -E 'grep|acl/|acl_' | grep '%s/bin/' | grep '/%s' > /dev/null", appname, id)) == 0
|
|
local use_http = uci_get(id, "http_port") or 0
|
|
e.use_http = 0
|
|
if tonumber(use_http) > 0 then
|
|
e.use_http = 1
|
|
e.http_status = luci.sys.call(string.format("/bin/busybox top -bn1 | grep -v -E 'grep|acl/|acl_' | grep '%s/bin/' | grep '/%s' | grep -E '\\+http|_http' > /dev/null", appname, id)) == 0
|
|
end
|
|
http_write_json(e)
|
|
end
|
|
|
|
function connect_status()
|
|
local e = {}
|
|
e.use_time = ""
|
|
local url = http.formvalue("url")
|
|
local aliyun = string.find(url, "aliyun")
|
|
local chn_list = uci_get("@global[0]", "chn_list") or "direct"
|
|
local gfw_list = uci_get("@global[0]", "use_gfw_list") or "1"
|
|
local proxy_mode = uci_get("@global[0]", "tcp_proxy_mode") or "proxy"
|
|
local localhost_proxy = uci_get("@global[0]", "localhost_proxy") or "1"
|
|
local socks_server = (localhost_proxy == "0") and api.get_cache_var("GLOBAL_SOCKS_server") or ""
|
|
url = "-w %{http_code}:%{time_pretransfer} " .. url
|
|
if socks_server and socks_server ~= "" then
|
|
if (chn_list == "proxy" and gfw_list == "0" and proxy_mode ~= "proxy" and aliyun ~= nil) or (chn_list == "0" and gfw_list == "0" and proxy_mode == "proxy") then
|
|
-- 中国列表+阿里 or 全局
|
|
url = "-x socks5h://" .. socks_server .. " " .. url
|
|
elseif aliyun == nil then
|
|
-- 其他代理模式+阿里以外网站
|
|
url = "-x socks5h://" .. socks_server .. " " .. url
|
|
end
|
|
end
|
|
local result = luci.sys.exec('/usr/bin/curl --connect-timeout 3 --max-time 5 -o /dev/null -I -sk ' .. url)
|
|
local code = tonumber(luci.sys.exec("echo -n '" .. result .. "' | awk -F ':' '{print $1}'") or "0")
|
|
if code ~= 0 then
|
|
local use_time_str = luci.sys.exec("echo -n '" .. result .. "' | awk -F ':' '{print $2}'")
|
|
local use_time = tonumber(use_time_str)
|
|
if use_time then
|
|
if use_time_str:find("%.") then
|
|
e.use_time = string.format("%.2f", use_time * 1000)
|
|
else
|
|
e.use_time = string.format("%.2f", use_time / 1000)
|
|
end
|
|
e.ping_type = "curl"
|
|
end
|
|
end
|
|
http_write_json(e)
|
|
end
|
|
|
|
function ping_node()
|
|
local index = http.formvalue("index")
|
|
local address = http.formvalue("address")
|
|
local port = http.formvalue("port")
|
|
local type = http.formvalue("type") or "icmp"
|
|
local e = {}
|
|
e.index = index
|
|
if type == "tcping" and luci.sys.exec("echo -n $(command -v tcping)") ~= "" then
|
|
if api.is_ipv6(address) then
|
|
address = api.get_ipv6_only(address)
|
|
end
|
|
e.ping = luci.sys.exec(string.format("echo -n $(tcping -q -c 1 -i 1 -t 2 -p %s %s 2>&1 | grep -o 'time=[0-9]*' | awk -F '=' '{print $2}') 2>/dev/null", port, address))
|
|
else
|
|
e.ping = luci.sys.exec("echo -n $(ping -c 1 -W 1 %q 2>&1 | grep -o 'time=[0-9]*' | awk -F '=' '{print $2}') 2>/dev/null" % address)
|
|
end
|
|
http_write_json(e)
|
|
end
|
|
|
|
function urltest_node()
|
|
local index = http.formvalue("index")
|
|
local id = http.formvalue("id")
|
|
local e = {}
|
|
e.index = index
|
|
local result = luci.sys.exec(string.format("/usr/share/passwall/test.sh url_test_node %s %s", id, "urltest_node"))
|
|
local code = tonumber(luci.sys.exec("echo -n '" .. result .. "' | awk -F ':' '{print $1}'") or "0")
|
|
if code ~= 0 then
|
|
local use_time_str = luci.sys.exec("echo -n '" .. result .. "' | awk -F ':' '{print $2}'")
|
|
local use_time = tonumber(use_time_str)
|
|
if use_time then
|
|
if use_time_str:find("%.") then
|
|
e.use_time = string.format("%.2f", use_time * 1000)
|
|
else
|
|
e.use_time = string.format("%.2f", use_time / 1000)
|
|
end
|
|
end
|
|
end
|
|
http_write_json(e)
|
|
end
|
|
|
|
function update_config()
|
|
local id = http.formvalue("id") -- Node id
|
|
local data = http.formvalue("data") -- json new Data
|
|
if id and data then
|
|
local data_t = jsonParse(data) or {}
|
|
if next(data_t) then
|
|
for k, v in pairs(data_t) do
|
|
uci_set(id, k, v)
|
|
end
|
|
uci_save()
|
|
http_write_json_ok()
|
|
return
|
|
end
|
|
end
|
|
http_write_json_error()
|
|
end
|
|
|
|
function add_node()
|
|
local redirect = http.formvalue("redirect")
|
|
|
|
local uid = api.gen_random_char()
|
|
uci:section(c_config, "nodes", uid)
|
|
|
|
local group = http.formvalue("group")
|
|
if group and group ~= "default" then
|
|
uci_set(uid, "group", group)
|
|
end
|
|
|
|
uci_set(uid, "type", "Socks")
|
|
|
|
if redirect == "1" then
|
|
uci_save()
|
|
http.redirect(api.url("node_config", uid))
|
|
else
|
|
uci_save(true, true)
|
|
http_write_json({result = uid})
|
|
end
|
|
end
|
|
|
|
function set_node()
|
|
local type = http.formvalue("type")
|
|
local config = http.formvalue("config")
|
|
local section = http.formvalue("section")
|
|
if type == "@global[0]" then
|
|
local node_protocol = uci_get(section, "protocol")
|
|
if node_protocol == "_shunt" then
|
|
local node_type = uci_get(section, "type")
|
|
local dns_shunt = uci_get(type, "dns_shunt")
|
|
local dns_key = (dns_shunt == "smartdns") and "smartdns_dns_mode" or "dns_mode"
|
|
local dns_mode = uci_get(type, dns_key)
|
|
local new_dns_mode = (node_type == "Xray") and "xray" or "sing-box"
|
|
if dns_mode ~= new_dns_mode then
|
|
uci_set(type, dns_key, new_dns_mode)
|
|
uci_set(type, "v2ray_dns_mode", "tcp")
|
|
end
|
|
end
|
|
end
|
|
uci_set(type, config, section)
|
|
uci_save(true, true)
|
|
http.redirect(api.url("log"))
|
|
end
|
|
|
|
function copy_node()
|
|
local section = http.formvalue("section")
|
|
local uid = api.gen_random_char()
|
|
uci:section(c_config, "nodes", uid)
|
|
for k, v in pairs(uci_get(section)) do
|
|
if not k:match("^%.") and k ~= "group" then
|
|
if k == "remarks" then v = (v or "") .. "(1)" end
|
|
uci_set(uid, k, v)
|
|
end
|
|
end
|
|
uci_set(uid, "add_mode", 1)
|
|
uci_save()
|
|
http.redirect(api.url("node_config", uid))
|
|
end
|
|
|
|
function clear_all_nodes()
|
|
uci_set('@global[0]', "enabled", "0")
|
|
uci_set('@global[0]', "socks_enabled", "0")
|
|
uci_set('@global_haproxy[0]', "balancing_enable", "0")
|
|
uci_del('@global[0]', "node")
|
|
uci_foreach("socks", function(t)
|
|
uci_del(t[".name"])
|
|
uci_set(t[".name"], "autoswitch_backup_node", {})
|
|
end)
|
|
uci_foreach("haproxy_config", function(t)
|
|
uci_del(t[".name"])
|
|
end)
|
|
uci_foreach("acl_rule", function(t)
|
|
uci_del(t[".name"], "node")
|
|
end)
|
|
uci_foreach("nodes", function(node)
|
|
uci_del(node['.name'])
|
|
end)
|
|
uci_foreach("subscribe_list", function(t)
|
|
uci_del(t[".name"], "md5")
|
|
uci_del(t[".name"], "chain_proxy")
|
|
uci_del(t[".name"], "preproxy_node")
|
|
uci_del(t[".name"], "to_node")
|
|
end)
|
|
|
|
uci_save(true, true)
|
|
end
|
|
|
|
function delete_select_nodes()
|
|
local ids = http.formvalue("ids")
|
|
local redirect = http.formvalue("redirect")
|
|
local ids_t = {}
|
|
string.gsub(ids, '[^' .. "," .. ']+', function(w)
|
|
ids_t[#ids_t + 1] = w
|
|
if (uci_get("@global[0]", "node") or "") == w then
|
|
uci_del('@global[0]', "node")
|
|
end
|
|
uci_foreach("socks", function(t)
|
|
local changed = false
|
|
local auto_switch_node_list = uci_get(t[".name"], "autoswitch_backup_node") or {}
|
|
for i = #auto_switch_node_list, 1, -1 do
|
|
if w == auto_switch_node_list[i] then
|
|
table.remove(auto_switch_node_list, i)
|
|
changed = true
|
|
end
|
|
end
|
|
if changed then
|
|
uci_set(t[".name"], "autoswitch_backup_node", auto_switch_node_list)
|
|
end
|
|
if t["node"] == w then
|
|
local new_node = api.get_random_normal_node(ids_t)
|
|
if new_node then
|
|
uci_set(t[".name"], "node", new_node[".name"])
|
|
else
|
|
uci_set(t[".name"], "enabled", "0")
|
|
end
|
|
end
|
|
end)
|
|
uci_foreach("haproxy_config", function(t)
|
|
if t["lbss"] == w then
|
|
uci_del(t[".name"])
|
|
end
|
|
end)
|
|
uci_foreach("acl_rule", function(t)
|
|
if t["node"] == w then
|
|
uci_del(t[".name"], "node")
|
|
end
|
|
end)
|
|
uci_foreach("nodes", function(t)
|
|
if t["preproxy_node"] == w then
|
|
uci_del(t[".name"], "preproxy_node")
|
|
uci_del(t[".name"], "chain_proxy")
|
|
end
|
|
if t["to_node"] == w then
|
|
uci_del(t[".name"], "to_node")
|
|
uci_del(t[".name"], "chain_proxy")
|
|
end
|
|
local list_name = t["urltest_node"] and "urltest_node" or (t["balancing_node"] and "balancing_node")
|
|
if list_name then
|
|
local nodes = uci:get_list(c_config, t[".name"], list_name)
|
|
if nodes then
|
|
local changed = false
|
|
local new_nodes = {}
|
|
for _, node in ipairs(nodes) do
|
|
if node ~= w and node ~= socks then
|
|
table.insert(new_nodes, node)
|
|
else
|
|
changed = true
|
|
end
|
|
end
|
|
if changed then
|
|
uci_set(t[".name"], list_name, new_nodes)
|
|
end
|
|
end
|
|
end
|
|
if t["fallback_node"] == w then
|
|
uci_del(t[".name"], "fallback_node")
|
|
end
|
|
end)
|
|
uci_foreach("subscribe_list", function(t)
|
|
if t["preproxy_node"] == w then
|
|
uci_del(t[".name"], "preproxy_node")
|
|
uci_del(t[".name"], "chain_proxy")
|
|
end
|
|
if t["to_node"] == w then
|
|
uci_del(t[".name"], "to_node")
|
|
uci_del(t[".name"], "chain_proxy")
|
|
end
|
|
end)
|
|
if (uci_get(w, "add_mode") or "0") == "2" then
|
|
local group = uci_get(w, "group") or ""
|
|
if group ~= "" then
|
|
uci_foreach("subscribe_list", function(t)
|
|
if t["remark"] == group then
|
|
uci_del(t[".name"], "md5")
|
|
end
|
|
end)
|
|
end
|
|
end
|
|
uci_del(w)
|
|
end)
|
|
if redirect == "1" then
|
|
uci_save()
|
|
http.redirect(api.url("node_list"))
|
|
else
|
|
uci_save(true, true)
|
|
end
|
|
end
|
|
|
|
function get_node()
|
|
local id = http.formvalue("id")
|
|
local result = {}
|
|
local show_node_info = uci_get("@global_other[0]", "show_node_info") or "0"
|
|
|
|
local function add_is_ipv6_key(o)
|
|
if o and o.address and show_node_info == "1" then
|
|
local f = api.get_ipv6_full(o.address)
|
|
if f ~= "" then
|
|
o.ipv6 = true
|
|
o.full_address = f
|
|
end
|
|
end
|
|
end
|
|
|
|
if id then
|
|
result = uci_get(id)
|
|
add_is_ipv6_key(result)
|
|
else
|
|
local default_nodes = {}
|
|
local other_nodes = {}
|
|
uci_foreach("nodes", function(t)
|
|
add_is_ipv6_key(t)
|
|
if not t.group or t.group == "" then
|
|
default_nodes[#default_nodes + 1] = t
|
|
else
|
|
other_nodes[#other_nodes + 1] = t
|
|
end
|
|
end)
|
|
for i = 1, #default_nodes do result[#result + 1] = default_nodes[i] end
|
|
for i = 1, #other_nodes do result[#result + 1] = other_nodes[i] end
|
|
end
|
|
http_write_json(result)
|
|
end
|
|
|
|
function reassign_group()
|
|
local ids = http.formvalue("ids") or ""
|
|
local group = http.formvalue("group") or "default"
|
|
for id in ids:gmatch("([^,]+)") do
|
|
if group ~="" and group ~= "default" then
|
|
api.sh_uci_set(c_config, id, "group", group)
|
|
else
|
|
api.sh_uci_del(c_config, id, "group")
|
|
end
|
|
end
|
|
api.sh_uci_commit(c_config)
|
|
http_write_json({ status = "ok" })
|
|
end
|
|
|
|
function save_node_list_opt()
|
|
local option = http.formvalue("option") or ""
|
|
local value = http.formvalue("value") or ""
|
|
if option ~= "" then
|
|
api.sh_uci_set(c_config, "@global_other[0]", option, value, true)
|
|
end
|
|
http_write_json({ status = "ok" })
|
|
end
|
|
|
|
function update_rules()
|
|
local update = http.formvalue("update") or ""
|
|
if update == "" then
|
|
http_write_json_error({ message = "missing update target" })
|
|
return
|
|
end
|
|
luci.sys.call("lua /usr/share/passwall/rule_update.lua log '" .. update .. "' > /dev/null 2>&1 &")
|
|
http_write_json()
|
|
end
|
|
|
|
function rollback_rules()
|
|
local arg_type = http.formvalue("type")
|
|
local rules = http.formvalue("rules") or ""
|
|
if arg_type ~= "geoip" and arg_type ~= "geosite" then
|
|
http_write_json_error()
|
|
return
|
|
end
|
|
local bak_dir = "/tmp/bak_v2ray/"
|
|
local geo_dir = (uci_get("@global_rules[0]", "v2ray_location_asset") or "/usr/share/v2ray/")
|
|
local geo2rule = uci_get("@global_rules[0]", "geo2rule") or "0"
|
|
fs.move(bak_dir .. arg_type .. ".dat", geo_dir .. arg_type .. ".dat")
|
|
fs.rmdir(bak_dir)
|
|
if geo2rule == "1" and rules ~= "" then
|
|
luci.sys.call("lua /usr/share/passwall/rule_update.lua log '" .. rules .. "' rollback > /dev/null")
|
|
end
|
|
uci_set("@global[0]", "flush_set", "1")
|
|
uci_save(true)
|
|
http_write_json_ok()
|
|
end
|
|
|
|
function server_update_config()
|
|
local id = http.formvalue("id") -- Node id
|
|
local data = http.formvalue("data") -- json new Data
|
|
if id and data then
|
|
local data_t = jsonParse(data) or {}
|
|
if next(data_t) then
|
|
for k, v in pairs(data_t) do
|
|
api.uci_set_s(id, k, v)
|
|
end
|
|
api.uci_save_s()
|
|
http_write_json_ok()
|
|
return
|
|
end
|
|
end
|
|
http_write_json_error()
|
|
end
|
|
|
|
function server_status()
|
|
local e = {}
|
|
e.index = http.formvalue("index")
|
|
e.status = luci.sys.call(string.format("/bin/busybox top -bn1 | grep -v 'grep' | grep '%s/bin/' | grep -i '%s' >/dev/null", appname .. "_server", http.formvalue("id"))) == 0
|
|
http_write_json(e)
|
|
end
|
|
|
|
function server_log()
|
|
local id = http.formvalue("id")
|
|
local f_file = api.S_TMP_PATH .. "/" .. id .. ".log"
|
|
if nixio.fs.access(f_file) then
|
|
local content = luci.sys.exec("cat " .. f_file)
|
|
content = content:gsub("\n", "<br />")
|
|
http.write(content)
|
|
else
|
|
http.write(string.format("<script>alert('%s');window.close();</script>", i18n.translate("Not enabled log")))
|
|
end
|
|
end
|
|
|
|
function server_get_log()
|
|
http.write(luci.sys.exec("[ -f '/tmp/log/passwall_server.log' ] && cat /tmp/log/passwall_server.log"))
|
|
end
|
|
|
|
function server_clear_log()
|
|
luci.sys.call("echo '' > /tmp/log/passwall_server.log")
|
|
end
|
|
|
|
function app_check()
|
|
local json = api.to_check_self()
|
|
http_write_json(json)
|
|
end
|
|
|
|
function com_check(comname)
|
|
local json = api.to_check("",comname)
|
|
http_write_json(json)
|
|
end
|
|
|
|
function com_update(comname)
|
|
local json = nil
|
|
local task = http.formvalue("task")
|
|
if task == "extract" then
|
|
json = api.to_extract(comname, http.formvalue("file"), http.formvalue("subfix"))
|
|
elseif task == "move" then
|
|
json = api.to_move(comname, http.formvalue("file"))
|
|
else
|
|
json = api.to_download(comname, http.formvalue("url"), http.formvalue("size"))
|
|
end
|
|
|
|
http_write_json(json)
|
|
end
|
|
|
|
function com_version(comname)
|
|
local version = api.get_app_version(comname)
|
|
http_write_json_ok(version)
|
|
end
|
|
|
|
function read_rulelist()
|
|
local rule_type = http.formvalue("type")
|
|
local rule_path
|
|
if rule_type == "gfw" then
|
|
rule_path = "/usr/share/passwall/rules/gfwlist"
|
|
elseif rule_type == "chn" then
|
|
rule_path = "/usr/share/passwall/rules/chnlist"
|
|
elseif rule_type == "chnroute" then
|
|
rule_path = "/usr/share/passwall/rules/chnroute"
|
|
else
|
|
http.status(400, "Invalid rule type")
|
|
return
|
|
end
|
|
if fs.access(rule_path) then
|
|
http.prepare_content("text/plain")
|
|
http.write(fs.readfile(rule_path))
|
|
end
|
|
end
|
|
|
|
local backup_files = {
|
|
"/etc/config/passwall",
|
|
"/etc/config/passwall_server",
|
|
"/usr/share/passwall/rules/block_host",
|
|
"/usr/share/passwall/rules/block_ip",
|
|
"/usr/share/passwall/rules/direct_host",
|
|
"/usr/share/passwall/rules/direct_ip",
|
|
"/usr/share/passwall/rules/proxy_host",
|
|
"/usr/share/passwall/rules/proxy_ip",
|
|
"/usr/share/passwall/rules/domains_excluded"
|
|
}
|
|
|
|
function create_backup()
|
|
local date = os.date("%y%m%d%H%M")
|
|
local tar_file = "/tmp/passwall-" .. date .. "-backup.tar.gz"
|
|
local version_file = "/tmp/passwall-version"
|
|
local version = api.get_version()
|
|
fs.remove(tar_file)
|
|
fs.writefile(version_file, version .. "\n")
|
|
local cmd = "tar -czf " .. tar_file .. " " .. table.concat(backup_files, " ") .. " " .. "-C /tmp passwall-version"
|
|
luci.sys.call(cmd)
|
|
fs.remove(version_file)
|
|
http.header("Content-Disposition", "attachment; filename=passwall-" .. date .. "-backup.tar.gz")
|
|
http.header("X-Backup-Filename", "passwall-" .. date .. "-backup.tar.gz")
|
|
http.prepare_content("application/octet-stream")
|
|
http.write(fs.readfile(tar_file))
|
|
fs.remove(tar_file)
|
|
end
|
|
|
|
function restore_backup()
|
|
local type = http.formvalue("type")
|
|
local result = { status = "error", message = "unknown error" }
|
|
local ok, err = pcall(function()
|
|
local filename = http.formvalue("filename")
|
|
local chunk = http.formvalue("chunk")
|
|
local chunk_index = tonumber(http.formvalue("chunk_index") or "-1")
|
|
local total_chunks = tonumber(http.formvalue("total_chunks") or "-1")
|
|
if not filename then
|
|
result = { status = "error", message = "Missing filename" }
|
|
return
|
|
end
|
|
if not chunk then
|
|
result = { status = "error", message = "Missing chunk data" }
|
|
return
|
|
end
|
|
local file_path = "/tmp/" .. filename
|
|
local decoded = nixio.bin.b64decode(chunk)
|
|
if not decoded then
|
|
result = { status = "error", message = "Base64 decode failed" }
|
|
return
|
|
end
|
|
local fp = io.open(file_path, "a+")
|
|
if not fp then
|
|
result = { status = "error", message = "Failed to open file: " .. file_path }
|
|
return
|
|
end
|
|
fp:write(decoded)
|
|
fp:close()
|
|
if chunk_index + 1 == total_chunks then
|
|
uci:revert(c_config)
|
|
uci:revert(api.s_config)
|
|
luci.sys.call("echo '' > /tmp/log/passwall.log")
|
|
api.log(" * PassWall 备份文件上传成功…")
|
|
local version_file = "passwall-version"
|
|
local version = luci.sys.exec("tar -xOf " .. file_path .. " " .. version_file .. " 2>/dev/null"):match("^%s*(.-)%s*$")
|
|
if version and version ~= "" then
|
|
api.log(" * 备份文件由 PassWall " .. version .. " 生成。")
|
|
end
|
|
local temp_dir = '/tmp/passwall_bak'
|
|
luci.sys.call("mkdir -p " .. temp_dir)
|
|
if luci.sys.call("tar -xzf " .. file_path .. " -C " .. temp_dir) == 0 then
|
|
for _, backup_file in ipairs(backup_files) do
|
|
local is_server_config = backup_file == "/etc/config/passwall_server"
|
|
if type == "all" or (type == "client" and not is_server_config) or (type == "server" and is_server_config) then
|
|
local temp_file = temp_dir .. backup_file
|
|
if fs.access(temp_file) then
|
|
luci.sys.call("cp -f " .. temp_file .. " " .. backup_file)
|
|
end
|
|
end
|
|
end
|
|
if type == "all" or type == "client" then
|
|
api.log(" * PassWall 备份还原成功…")
|
|
api.log(" * 重启 PassWall 服务中…\n")
|
|
api.sh_uci_set(c_config, "@global[0]", "flush_set", "1", true)
|
|
luci.sys.call('/etc/init.d/passwall restart > /dev/null 2>&1 &')
|
|
end
|
|
if type == "all" or type == "server" then
|
|
luci.sys.call('/etc/init.d/passwall_server restart > /dev/null 2>&1 &')
|
|
end
|
|
result = { status = "success", message = "Upload completed", path = file_path }
|
|
else
|
|
api.log(" * PassWall 备份文件解压失败，请重试！")
|
|
result = { status = "error", message = "Decompression failed" }
|
|
end
|
|
luci.sys.call("rm -rf " .. temp_dir)
|
|
fs.remove(file_path)
|
|
else
|
|
result = { status = "success", message = "Chunk received" }
|
|
end
|
|
end)
|
|
if not ok then
|
|
result = { status = "error", message = tostring(err) }
|
|
end
|
|
http_write_json(result)
|
|
end
|
|
|
|
function reset_config()
|
|
local type = http.formvalue("type")
|
|
if type == "client" then
|
|
uci:revert(c_config)
|
|
luci.sys.call("echo '' > /tmp/log/passwall.log")
|
|
luci.sys.call('/etc/init.d/passwall stop')
|
|
if luci.sys.call('[ -s "/usr/share/passwall/0_default_config" ]') == 0 then
|
|
luci.sys.call('cp -f /usr/share/passwall/0_default_config /etc/config/passwall')
|
|
api.log(" * 恢复默认配置成功。")
|
|
else
|
|
api.log(" * 找不到默认配置文件，重置失败！")
|
|
end
|
|
elseif type == "server" then
|
|
uci:revert(api.s_config)
|
|
luci.sys.call("echo '' > /tmp/log/passwall_server.log")
|
|
luci.sys.call('/etc/init.d/passwall_server stop')
|
|
luci.sys.call("echo \"config global 'global'\" > /etc/config/passwall_server")
|
|
end
|
|
end
|
|
|
|
function geo_view()
|
|
local action = http.formvalue("action")
|
|
local value = http.formvalue("value")
|
|
if not value or value == "" then
|
|
http.prepare_content("text/plain")
|
|
http.write(i18n.translate("Please enter query content!"))
|
|
return
|
|
end
|
|
local function get_rules(str, type)
|
|
local rules = {}
|
|
uci_foreach("shunt_rules", function(s)
|
|
local list
|
|
if type == "geoip" then list = s.ip_list else list = s.domain_list end
|
|
for line in string.gmatch((list or ""), "[^\r\n]+") do
|
|
if line ~= "" and not line:find("#") then
|
|
local prefix, main = line:match("^(.-):(.*)")
|
|
if not main then main = line end
|
|
if type == "geoip" and (api.datatypes.ipaddr(str) or api.datatypes.ip6addr(str)) then
|
|
if main:find(str, 1, true) then
|
|
table.insert(rules, {id = s[".name"], group = s.group or i18n.translate("default")})
|
|
end
|
|
else
|
|
if main == str then
|
|
table.insert(rules, {id = s[".name"], group = s.group or i18n.translate("default")})
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end)
|
|
return rules
|
|
end
|
|
local geo_dir = (uci_get("@global_rules[0]", "v2ray_location_asset") or "/usr/share/v2ray/"):match("^(.*)/")
|
|
local geosite_path = geo_dir .. "/geosite.dat"
|
|
local geoip_path = geo_dir .. "/geoip.dat"
|
|
local geo_type, file_path, cmd
|
|
local geo_string = ""
|
|
local bin = api.finded_com("geoview")
|
|
if action == "lookup" then
|
|
if api.datatypes.ipaddr(value) or api.datatypes.ip6addr(value) then
|
|
geo_type, file_path = "geoip", geoip_path
|
|
else
|
|
geo_type, file_path = "geosite", geosite_path
|
|
end
|
|
cmd = string.format("%q -type %q -action lookup -input %q -value %q -lowmem=true", bin, geo_type, file_path, value)
|
|
geo_string = luci.sys.exec(cmd):lower()
|
|
if geo_string ~= "" then
|
|
local lines, rules, seen = {}, {}, {}
|
|
for line in geo_string:gmatch("([^\n]+)") do
|
|
lines[#lines + 1] = geo_type .. ":" .. line
|
|
for _, r in ipairs(get_rules(line, geo_type) or {}) do
|
|
if not seen[r.id] then
|
|
seen[r.id] = true
|
|
rules[#rules + 1] = string.format("[%s]%s", r.group, r.id)
|
|
end
|
|
end
|
|
end
|
|
for _, r in ipairs(get_rules(value, geo_type) or {}) do
|
|
if not seen[r.id] then
|
|
seen[r.id] = true
|
|
rules[#rules + 1] = string.format("[%s]%s", r.group, r.id)
|
|
end
|
|
end
|
|
geo_string = table.concat(lines, "\n")
|
|
if #rules > 0 then
|
|
geo_string = geo_string .. "\n--------------------\n"
|
|
geo_string = geo_string .. i18n.translate("Rules containing this value:") .. "\n"
|
|
geo_string = geo_string .. table.concat(rules, "\n")
|
|
end
|
|
end
|
|
elseif action == "extract" then
|
|
local prefix, list = value:match("^(geoip:)(.*)$")
|
|
if not prefix then
|
|
prefix, list = value:match("^(geosite:)(.*)$")
|
|
end
|
|
if prefix and list and list ~= "" then
|
|
geo_type = prefix:sub(1, -2)
|
|
file_path = (geo_type == "geoip") and geoip_path or geosite_path
|
|
cmd = string.format("%q -type %q -action extract -input %q -list %q -lowmem=true", bin, geo_type, file_path, list)
|
|
geo_string = luci.sys.exec(cmd)
|
|
end
|
|
end
|
|
http.prepare_content("text/plain")
|
|
if geo_string and geo_string ~="" then
|
|
http.write(geo_string)
|
|
else
|
|
http.write(i18n.translate("No results were found!"))
|
|
end
|
|
end
|
|
|
|
function subscribe_del_node()
|
|
local remark = http.formvalue("remark")
|
|
if remark and remark ~= "" then
|
|
luci.sys.call("lua /usr/share/" .. appname .. "/subscribe.lua truncate " .. luci.util.shellquote(remark) .. " > /dev/null 2>&1")
|
|
end
|
|
http.status(200, "OK")
|
|
end
|
|
|
|
function subscribe_del_all()
|
|
luci.sys.call("lua /usr/share/" .. appname .. "/subscribe.lua truncate > /dev/null 2>&1")
|
|
http.status(200, "OK")
|
|
end
|
|
|
|
function subscribe_manual()
|
|
local section = http.formvalue("section") or ""
|
|
local current_url = http.formvalue("url") or ""
|
|
if section == "" or current_url == "" then
|
|
http_write_json({ success = false, msg = "Missing section or URL, skip." })
|
|
return
|
|
end
|
|
local uci_url = api.sh_uci_get(c_config, section, "url")
|
|
if not uci_url or uci_url == "" then
|
|
http_write_json({ success = false, msg = i18n.translate("Please save and apply before manually subscribing.") })
|
|
return
|
|
end
|
|
if uci_url ~= current_url then
|
|
api.sh_uci_set(c_config, section, "url", current_url, true)
|
|
end
|
|
luci.sys.call("lua /usr/share/" .. appname .. "/subscribe.lua start " .. section .. " manual >/dev/null 2>&1 &")
|
|
http_write_json({ success = true, msg = "Subscribe triggered." })
|
|
end
|
|
|
|
function subscribe_manual_all()
|
|
local sections = http.formvalue("sections") or ""
|
|
local urls = http.formvalue("urls") or ""
|
|
if sections == "" or urls == "" then
|
|
http_write_json({ success = false, msg = "Missing section or URL, skip." })
|
|
return
|
|
end
|
|
local section_list = util.split(sections, ",")
|
|
local url_list = util.split(urls, ",")
|
|
-- 检查是否存在未保存配置
|
|
for i, section in ipairs(section_list) do
|
|
local uci_url = api.sh_uci_get(c_config, section, "url")
|
|
if not uci_url or uci_url == "" then
|
|
http_write_json({ success = false, msg = i18n.translate("Please save and apply before manually subscribing.") })
|
|
return
|
|
end
|
|
end
|
|
-- 保存有变动的url
|
|
for i, section in ipairs(section_list) do
|
|
local current_url = url_list[i] or ""
|
|
local uci_url = api.sh_uci_get(c_config, section, "url")
|
|
if current_url ~= "" and uci_url ~= current_url then
|
|
api.sh_uci_set(c_config, section, "url", current_url, true)
|
|
end
|
|
end
|
|
luci.sys.call("lua /usr/share/" .. appname .. "/subscribe.lua start all manual >/dev/null 2>&1 &")
|
|
http_write_json({ success = true, msg = "Subscribe triggered." })
|
|
end
|
|
|
|
function flush_set()
|
|
local redirect = http.formvalue("redirect") or "0"
|
|
local reload = http.formvalue("reload") or "0"
|
|
if reload == "1" then
|
|
uci_set('@global[0]', "flush_set", "1")
|
|
uci_save(true, true)
|
|
else
|
|
api.sh_uci_set(c_config, "@global[0]", "flush_set", "1", true)
|
|
end
|
|
if redirect == "1" then
|
|
http.redirect(api.url("log"))
|
|
end
|
|
end
|
|
|
|
function fetch_certsha256()
|
|
local id = http.formvalue("id") or ""
|
|
local address = (id ~= "") and uci_get(id, "address") or ""
|
|
local port = (id ~= "") and uci_get(id, "port") or 0
|
|
local sni = (id ~= "") and uci_get(id, "tls_serverName") or ""
|
|
sni = (sni ~= "") and sni or address
|
|
local protocol = uci_get(id, "protocol")
|
|
local h3, timeout = false, 10
|
|
if protocol == "hysteria2" then
|
|
h3 = true
|
|
timeout = 60
|
|
if port == 0 then
|
|
local hop = uci_get(id, "hysteria2_hop") or "0"
|
|
port = tonumber(hop:match("^%s*(%d+)"))
|
|
end
|
|
end
|
|
if address == "" or port == 0 then
|
|
http_write_json_error()
|
|
return
|
|
end
|
|
local data = api.fetch_cert_sha256(address, port, sni, timeout, h3)
|
|
http_write_json(data ~= "" and { code = 1, data = data } or { code = 0 })
|
|
end
|
|
|
|
function get_shunt_rules()
|
|
local id = http.formvalue("id")
|
|
local result = {}
|
|
|
|
if id then
|
|
result = uci_get(id)
|
|
else
|
|
local default_items = {}
|
|
local other_items = {}
|
|
uci_foreach("shunt_rules", function(t)
|
|
if not t.group or t.group == "" then
|
|
default_items[#default_items + 1] = t
|
|
else
|
|
other_items[#other_items + 1] = t
|
|
end
|
|
end)
|
|
for i = 1, #default_items do result[#result + 1] = default_items[i] end
|
|
for i = 1, #other_items do result[#result + 1] = other_items[i] end
|
|
end
|
|
http_write_json(result)
|
|
end
|
|
|
|
function add_shunt_rule()
|
|
local add_name = http.formvalue("add_name")
|
|
local redirect = http.formvalue("redirect")
|
|
|
|
local uid = add_name
|
|
if add_name then
|
|
local has = uci_get(uid)
|
|
if has then
|
|
http_write_json_error({ message = i18n.translate("This ID already exists.") })
|
|
return
|
|
end
|
|
else
|
|
uid = api.gen_random_char()
|
|
end
|
|
uci:section(c_config, "shunt_rules", uid)
|
|
|
|
local group = http.formvalue("group")
|
|
if group and group ~= "default" then
|
|
uci_set(uid, "group", group)
|
|
end
|
|
|
|
if redirect == "1" then
|
|
uci_save()
|
|
http.redirect(api.url("shunt_rules", uid))
|
|
else
|
|
uci_save()
|
|
http_write_json_ok({uid = uid, redirect_url = api.url("shunt_rules", uid)})
|
|
end
|
|
end
|
|
|
|
function delete_select_shunt_rules()
|
|
local ids = http.formvalue("ids")
|
|
local redirect = http.formvalue("redirect")
|
|
string.gsub(ids, '[^' .. "," .. ']+', function(w)
|
|
uci_foreach("nodes", function(s)
|
|
if s["protocol"] and s["protocol"] == "_shunt" then
|
|
uci_del(s[".name"], w)
|
|
end
|
|
end)
|
|
uci_del(w)
|
|
end)
|
|
if redirect == "1" then
|
|
uci_save()
|
|
http.redirect(api.url("rule"))
|
|
else
|
|
uci_save(true, true)
|
|
end
|
|
end
|
|
|
|
function gen_wireguard_key()
|
|
local key = api.gen_wireguard_key()
|
|
if key then
|
|
http_write_json_ok(key)
|
|
else
|
|
http_write_json_error()
|
|
end
|
|
end
|