mirror of
https://github.com/kiddin9/op-packages.git
synced 2026-07-27 10:31:38 +08:00
237 lines
10 KiB
Bash
237 lines
10 KiB
Bash
#!/bin/sh
|
|
|
|
. "$IPKG_INSTROOT/etc/nikki/scripts/include.sh"
|
|
|
|
# since v1.18.0
|
|
|
|
mixin_rule=$(uci -q get nikki.mixin.rule); [ -z "$mixin_rule" ] && uci set nikki.mixin.rule=0
|
|
|
|
mixin_rule_provider=$(uci -q get nikki.mixin.rule_provider); [ -z "$mixin_rule_provider" ] && uci set nikki.mixin.rule_provider=0
|
|
|
|
# since v1.19.0
|
|
|
|
uci show nikki | grep -E 'nikki\.@rule\[[[:digit:]]+\].match=' | sed 's/nikki.@rule\[\([[:digit:]]\+\)\].match=.*/rename nikki.@rule[\1].match=matcher/' | uci batch
|
|
|
|
# since v1.19.1
|
|
|
|
proxy_fake_ip_ping_hijack=$(uci -q get nikki.proxy.fake_ip_ping_hijack); [ -z "$proxy_fake_ip_ping_hijack" ] && uci set nikki.proxy.fake_ip_ping_hijack=0
|
|
|
|
# since v1.20.0
|
|
|
|
mixin_api_port=$(uci -q get nikki.mixin.api_port); [ -n "$mixin_api_port" ] && {
|
|
uci del nikki.mixin.api_port
|
|
uci set nikki.mixin.api_listen="[::]:$mixin_api_port"
|
|
}
|
|
|
|
mixin_dns_port=$(uci -q get nikki.mixin.dns_port); [ -n "$mixin_dns_port" ] && {
|
|
uci del nikki.mixin.dns_port
|
|
uci set nikki.mixin.dns_listen="[::]:$mixin_dns_port"
|
|
}
|
|
|
|
# since v1.22.0
|
|
|
|
proxy_transparent_proxy=$(uci -q get nikki.proxy.transparent_proxy); [ -n "$proxy_transparent_proxy" ] && {
|
|
uci rename nikki.proxy.transparent_proxy=enabled
|
|
uci rename nikki.proxy.tcp_transparent_proxy_mode=tcp_mode
|
|
uci rename nikki.proxy.udp_transparent_proxy_mode=udp_mode
|
|
|
|
uci add nikki router_access_control
|
|
uci set nikki.@router_access_control[-1].enabled=1
|
|
proxy_bypass_user=$(uci -q get nikki.proxy.bypass_user); [ -n "$proxy_bypass_user" ] && {
|
|
for router_access_control_user in $proxy_bypass_user; do
|
|
uci add_list nikki.@router_access_control[-1].user="$router_access_control_user"
|
|
done
|
|
}
|
|
proxy_bypass_group=$(uci -q get nikki.proxy.bypass_group); [ -n "$proxy_bypass_group" ] && {
|
|
for router_access_control_group in $proxy_bypass_group; do
|
|
uci add_list nikki.@router_access_control[-1].group="$router_access_control_group"
|
|
done
|
|
}
|
|
proxy_bypass_cgroup=$(uci -q get nikki.proxy.bypass_cgroup); [ -n "$proxy_bypass_cgroup" ] && {
|
|
for router_access_control_cgroup in $proxy_bypass_cgroup; do
|
|
uci add_list nikki.@router_access_control[-1].cgroup="$router_access_control_cgroup"
|
|
done
|
|
}
|
|
uci set nikki.@router_access_control[-1].proxy=0
|
|
|
|
uci add nikki router_access_control
|
|
uci set nikki.@router_access_control[-1].enabled=1
|
|
uci set nikki.@router_access_control[-1].proxy=1
|
|
|
|
uci add_list nikki.proxy.lan_inbound_interface=lan
|
|
|
|
proxy_access_control_mode=$(uci -q get nikki.proxy.access_control_mode)
|
|
|
|
[ "$proxy_access_control_mode" != "all" ] && {
|
|
proxy_acl_ip=$(uci -q get nikki.proxy.acl_ip); [ -n "$proxy_acl_ip" ] && {
|
|
for ip in $proxy_acl_ip; do
|
|
uci add nikki lan_access_control
|
|
uci set nikki.@lan_access_control[-1].enabled=1
|
|
uci add_list nikki.@lan_access_control[-1].ip="$ip"
|
|
[ "$proxy_access_control_mode" = "allow" ] && uci set nikki.@lan_access_control[-1].proxy=1
|
|
[ "$proxy_access_control_mode" = "block" ] && uci set nikki.@lan_access_control[-1].proxy=0
|
|
done
|
|
}
|
|
proxy_acl_ip6=$(uci -q get nikki.proxy.acl_ip6); [ -n "$proxy_acl_ip6" ] && {
|
|
for ip6 in $proxy_acl_ip6; do
|
|
uci add nikki lan_access_control
|
|
uci set nikki.@lan_access_control[-1].enabled=1
|
|
uci add_list nikki.@lan_access_control[-1].ip6="$ip6"
|
|
[ "$proxy_access_control_mode" = "allow" ] && uci set nikki.@lan_access_control[-1].proxy=1
|
|
[ "$proxy_access_control_mode" = "block" ] && uci set nikki.@lan_access_control[-1].proxy=0
|
|
done
|
|
}
|
|
proxy_acl_mac=$(uci -q get nikki.proxy.acl_mac); [ -n "$proxy_acl_mac" ] && {
|
|
for mac in $proxy_acl_mac; do
|
|
uci add nikki lan_access_control
|
|
uci set nikki.@lan_access_control[-1].enabled=1
|
|
uci add_list nikki.@lan_access_control[-1].mac="$mac"
|
|
[ "$proxy_access_control_mode" = "allow" ] && uci set nikki.@lan_access_control[-1].proxy=1
|
|
[ "$proxy_access_control_mode" = "block" ] && uci set nikki.@lan_access_control[-1].proxy=0
|
|
done
|
|
}
|
|
}
|
|
|
|
[ "$proxy_access_control_mode" != "allow" ] && {
|
|
uci add nikki lan_access_control
|
|
uci set nikki.@lan_access_control[-1].enabled=1
|
|
uci set nikki.@lan_access_control[-1].proxy=1
|
|
}
|
|
|
|
uci del nikki.proxy.access_control_mode
|
|
uci del nikki.proxy.acl_ip
|
|
uci del nikki.proxy.acl_ip6
|
|
uci del nikki.proxy.acl_mac
|
|
uci del nikki.proxy.acl_interface
|
|
uci del nikki.proxy.bypass_user
|
|
uci del nikki.proxy.bypass_group
|
|
uci del nikki.proxy.bypass_cgroup
|
|
}
|
|
|
|
# since v1.23.0
|
|
|
|
section_routing=$(uci -q get nikki.routing); [ -z "$section_routing" ] && {
|
|
uci set nikki.routing=routing
|
|
uci set nikki.routing.tproxy_fw_mark=0x80
|
|
uci set nikki.routing.tun_fw_mark=0x81
|
|
uci set nikki.routing.tproxy_rule_pref=1024
|
|
uci set nikki.routing.tun_rule_pref=1025
|
|
uci set nikki.routing.tproxy_route_table=80
|
|
uci set nikki.routing.tun_route_table=81
|
|
uci set nikki.routing.cgroup_id=0x12061206
|
|
uci set nikki.routing.cgroup_name=nikki
|
|
}
|
|
|
|
proxy_tun_timeout=$(uci -q get nikki.proxy.tun_timeout); [ -z "$proxy_tun_timeout" ] && uci set nikki.proxy.tun_timeout=30
|
|
|
|
proxy_tun_interval=$(uci -q get nikki.proxy.tun_interval); [ -z "$proxy_tun_interval" ] && uci set nikki.proxy.tun_interval=1
|
|
|
|
# since v1.23.1
|
|
|
|
uci show nikki | grep -o -E 'nikki\.@router_access_control\[[[:digit:]]+\]=router_access_control' | cut -d '=' -f 1 | while read -r router_access_control; do
|
|
for router_access_control_cgroup in $(uci -q get "$router_access_control.cgroup"); do
|
|
[ -d "/sys/fs/cgroup/$router_access_control_cgroup" ] && continue
|
|
[ -d "/sys/fs/cgroup/services/$router_access_control_cgroup" ] && {
|
|
uci del_list "$router_access_control.cgroup=$router_access_control_cgroup"
|
|
uci add_list "$router_access_control.cgroup=services/$router_access_control_cgroup"
|
|
}
|
|
done
|
|
done
|
|
|
|
# since v1.23.3
|
|
|
|
uci show nikki | grep -o -E 'nikki\.@router_access_control\[[[:digit:]]+\]=router_access_control' | cut -d '=' -f 1 | while read -r router_access_control; do
|
|
router_access_control_proxy=$(uci -q get "$router_access_control.proxy")
|
|
router_access_control_dns=$(uci -q get "$router_access_control.dns")
|
|
[ -z "$router_access_control_dns" ] && uci set "$router_access_control.dns=$router_access_control_proxy"
|
|
done
|
|
|
|
uci show nikki | grep -o -E 'nikki\.@lan_access_control\[[[:digit:]]+\]=lan_access_control' | cut -d '=' -f 1 | while read -r lan_access_control; do
|
|
lan_access_control_proxy=$(uci -q get "$lan_access_control.proxy")
|
|
lan_access_control_dns=$(uci -q get "$lan_access_control.dns")
|
|
[ -z "$lan_access_control_dns" ] && uci set "$lan_access_control.dns=$lan_access_control_proxy"
|
|
done
|
|
|
|
# since v1.24.0
|
|
|
|
proxy_reserved_ip=$(uci -q get nikki.proxy.reserved_ip); [ -z "$proxy_reserved_ip" ] && {
|
|
uci add_list nikki.proxy.reserved_ip=0.0.0.0/8
|
|
uci add_list nikki.proxy.reserved_ip=10.0.0.0/8
|
|
uci add_list nikki.proxy.reserved_ip=127.0.0.0/8
|
|
uci add_list nikki.proxy.reserved_ip=100.64.0.0/10
|
|
uci add_list nikki.proxy.reserved_ip=169.254.0.0/16
|
|
uci add_list nikki.proxy.reserved_ip=172.16.0.0/12
|
|
uci add_list nikki.proxy.reserved_ip=192.168.0.0/16
|
|
uci add_list nikki.proxy.reserved_ip=224.0.0.0/4
|
|
uci add_list nikki.proxy.reserved_ip=240.0.0.0/4
|
|
}
|
|
|
|
proxy_reserved_ip6=$(uci -q get nikki.proxy.reserved_ip6); [ -z "$proxy_reserved_ip6" ] && {
|
|
uci add_list nikki.proxy.reserved_ip6=::/128
|
|
uci add_list nikki.proxy.reserved_ip6=::1/128
|
|
uci add_list nikki.proxy.reserved_ip6=::ffff:0:0/96
|
|
uci add_list nikki.proxy.reserved_ip6=100::/64
|
|
uci add_list nikki.proxy.reserved_ip6=64:ff9b::/96
|
|
uci add_list nikki.proxy.reserved_ip6=2001::/32
|
|
uci add_list nikki.proxy.reserved_ip6=2001:10::/28
|
|
uci add_list nikki.proxy.reserved_ip6=2001:20::/28
|
|
uci add_list nikki.proxy.reserved_ip6=2001:db8::/32
|
|
uci add_list nikki.proxy.reserved_ip6=2002::/16
|
|
uci add_list nikki.proxy.reserved_ip6=fc00::/7
|
|
uci add_list nikki.proxy.reserved_ip6=fe80::/10
|
|
uci add_list nikki.proxy.reserved_ip6=ff00::/8
|
|
}
|
|
|
|
# since v1.24.3
|
|
|
|
proxy_bypass_china_mainland_ip=$(uci -q get nikki.proxy.bypass_china_mainland_ip)
|
|
proxy_bypass_china_mainland_ip6=$(uci -q get nikki.proxy.bypass_china_mainland_ip6)
|
|
[ -z "$proxy_bypass_china_mainland_ip6" ] && uci set nikki.proxy.bypass_china_mainland_ip6=$proxy_bypass_china_mainland_ip
|
|
|
|
routing_tproxy_fw_mask=$(uci -q get nikki.routing.tproxy_fw_mask); [ -z "$routing_tproxy_fw_mask" ] && uci set nikki.routing.tproxy_fw_mask=0xFF
|
|
routing_tun_fw_mask=$(uci -q get nikki.routing.tun_fw_mask); [ -z "$routing_tun_fw_mask" ] && uci set nikki.routing.tun_fw_mask=0xFF
|
|
|
|
section_procd=$(uci -q get nikki.procd); [ -z "$section_procd" ] && {
|
|
uci set nikki.procd=procd
|
|
uci set nikki.procd.fast_reload=$(uci -q get nikki.config.fast_reload)
|
|
uci set nikki.procd.env_safe_paths=$(uci -q get nikki.env.safe_paths)
|
|
uci set nikki.procd.env_disable_loopback_detector=$(uci -q get nikki.env.disable_loopback_detector)
|
|
uci set nikki.procd.env_disable_quic_go_gso=$(uci -q get nikki.env.disable_quic_go_gso)
|
|
uci set nikki.procd.env_disable_quic_go_ecn=$(uci -q get nikki.env.disable_quic_go_ecn)
|
|
uci set nikki.procd.env_skip_system_ipv6_check=$(uci -q get nikki.env.skip_system_ipv6_check)
|
|
uci del nikki.config.fast_reload
|
|
uci del nikki.env
|
|
}
|
|
|
|
# since v1.25.1
|
|
|
|
routing_dummy_device=$(uci -q get nikki.routing.dummy_device); [ -z "$routing_dummy_device" ] && uci set nikki.routing.dummy_device=nikki-dummy
|
|
|
|
# since v1.25.2
|
|
|
|
section_core=$(uci -q get nikki.core); [ -z "$section_core" ] && {
|
|
uci set nikki.core=core
|
|
uci set nikki.core.redirect_listener_name=redir-in
|
|
uci set nikki.core.tproxy_listener_name=tproxy-in
|
|
uci set nikki.core.tun_listener_name=tun-in
|
|
}
|
|
|
|
# since v1.25.3
|
|
|
|
config_scheduled_restart_cron=$(uci -q get nikki.config.scheduled_restart_cron); [ -z "$config_scheduled_restart_cron" ] && uci rename nikki.config.cron_expression="scheduled_restart_cron"
|
|
|
|
log_scheduled_clear=$(uci -q get nikki.log.scheduled_clear); [ -z "$log_scheduled_clear" ] && uci set nikki.log.scheduled_clear=1
|
|
log_scheduled_clear_cron=$(uci -q get nikki.log.scheduled_clear_cron); [ -z "$log_scheduled_clear_cron" ] && uci set nikki.log.scheduled_clear_cron="*/5 * * * *"
|
|
log_scheduled_clear_size_limit=$(uci -q get nikki.log.scheduled_clear_size_limit); [ -z "$log_scheduled_clear_size_limit" ] && uci set nikki.log.scheduled_clear_size_limit=1
|
|
log_scheduled_clear_size_limit_unit=$(uci -q get nikki.log.scheduled_clear_size_limit_unit); [ -z "$log_scheduled_clear_size_limit_unit" ] && uci set nikki.log.scheduled_clear_size_limit_unit=MB
|
|
|
|
# since v1.25.4
|
|
|
|
config_clear_at_stop=$(uci -q get nikki.log.clear_at_stop); [ -z "$config_clear_at_stop" ] && uci set nikki.log.clear_at_stop=1
|
|
|
|
# commit
|
|
uci commit nikki
|
|
|
|
# exit with 0
|
|
exit 0
|