wgmtu.sh 25 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828
  1. #!/bin/bash
  2. # WireGuard 管理使用命令 bash wgmtu 短网址: https://git.io/wgmtu
  3. # Usage: wget https://git.io/wgmtu && bash wgmtu
  4. # 修改mtu数值
  5. setmtu(){
  6. echo -e "${GreenBG}WireGuard 修改服务器端MTU值,提高效率;默认值MTU=1420${Font}"
  7. read -p "请输入数字(1200--1500): " num
  8. if [[ ${num} -ge 1200 ]] && [[ ${num} -le 1500 ]]; then
  9. mtu=$num
  10. else
  11. mtu=1420
  12. fi
  13. ip link set mtu $num up dev wg0
  14. wg-quick save wg0
  15. echo -e "${SkyBlue}:: 服务器端MTU值已经修改!${Font}"
  16. }
  17. # 修改端口号
  18. setport(){
  19. echo -e "${GreenBG}修改 WireGuard 服务器端端口号,客户端要自行修改${Font}"
  20. read -p "请输入数字(100--60000): " num
  21. if [[ ${num} -ge 100 ]] && [[ ${num} -le 60000 ]]; then
  22. port=$num
  23. wg set wg0 listen-port $port
  24. wg-quick save wg0
  25. echo -e "${SkyBlue}:: 端口号已经修改, 客户端请手工修改! ${Font}"
  26. else
  27. echo -e "${Red}:: 没有修改端口号!${Font}"
  28. fi
  29. }
  30. # 显示客户端配置和手机二维码
  31. conf_QRcode(){
  32. echo -e "${Yellow}:: 显示客户端配置和手机二维码 (默认2号),请输入数字${Font}\c"
  33. read -p "(2-9): " x
  34. if [[ ${x} -ge 2 ]] && [[ ${x} -le 9 ]]; then
  35. i=$x
  36. else
  37. i=2
  38. fi
  39. host=$(hostname -s)
  40. echo -e "${SkyBlue}:: 客户端配置文件: wg_${host}_$i.conf ${Font}"
  41. cat /etc/wireguard/wg_${host}_$i.conf
  42. echo -e "${SkyBlue}:: 请使用组合键 Ctrl+Ins 复制文本给Windows客户端使用${Font}"
  43. cat /etc/wireguard/wg_${host}_$i.conf | qrencode -o - -t UTF8
  44. echo -e "${Green}:: 配置文件: wg_${host}_$i.conf 生成二维码,请用手机客户端扫描使用${Font}"
  45. echo -e "${SkyBlue}:: 安卓手机WireGuard官方APP目前支持纯IPV6连接,是否显示IPV6二维码?${Font}\c"
  46. read -p "(Y/N): " key
  47. case $key in
  48. Y)
  49. ipv6_QRcode $i
  50. ;;
  51. y)
  52. ipv6_QRcode $i
  53. ;;
  54. esac
  55. echo -e "${SkyBlue}:: SSH工具推荐Git-Bash 2.20; GCP_SSH(浏览器)字体Courier New 二维码正常${Font}"
  56. }
  57. # 显示IPV6手机客户端二维码
  58. ipv6_QRcode(){
  59. if [[ $# > 0 ]]; then
  60. i="$1"
  61. fi
  62. get_serverip
  63. serveripv6=$(curl -6 ip.sb)
  64. if [[ -z $serveripv6 ]]; then
  65. echo -e "${Red}:: 获取IPV6地址不正确,你的服务器可能没有IPV6网络支持!${Font}"
  66. else
  67. cat /etc/wireguard/wg_${host}_$i.conf | sed "s/${serverip}/[${serveripv6}]/g" | qrencode -o - -t UTF8
  68. echo -e "${Green}:: IPV6地址: [${serveripv6}] 请确认服务器和本地网络支持IPV6!${Font}"
  69. fi
  70. }
  71. get_serverip(){
  72. if [ ! -e '/var/ip_addr' ]; then
  73. echo -n $(curl -s https://262235.xyz/ip/) > /var/ip_addr
  74. fi
  75. serverip=$(cat /var/ip_addr)
  76. ipv6_range="fd08:620c:4df0:65eb::"
  77. }
  78. # 重置 WireGuard 客户端配置和数量
  79. wg_clients(){
  80. echo -e "${Red}:: 注意原来的客户端配置都会删除,按 Ctrl+ C 可以紧急撤销 ${Font}"
  81. # 转到wg配置文件目录
  82. cd /etc/wireguard
  83. cp wg0.conf conf.wg0.bak
  84. echo -e "${SkyBlue}:: 输入客户端Peer总数${Font}\c"
  85. read -p "(2--200): " num_x
  86. if [[ ${num_x} -ge 2 ]] && [[ ${num_x} -le 200 ]]; then
  87. wg_num=OK
  88. else
  89. num_x=3
  90. fi
  91. # 服务器 IP 和 端口
  92. port=$(wg show wg0 listen-port) && host=$(hostname -s)
  93. get_serverip
  94. # 删除原配置,让IP和ID号对应; 保留原来服务器的端口等配置
  95. rm /etc/wireguard/wg_${host}_* >/dev/null 2>&1
  96. line_num=$(cat -n wg0.conf | grep 'AllowedIPs' | head -n 1 | awk '{print $1}')
  97. head -n ${line_num} conf.wg0.bak > wg0.conf
  98. # 重启wg服务器
  99. wg-quick down wg0 >/dev/null 2>&1
  100. wg-quick up wg0 >/dev/null 2>&1
  101. # 重新生成用户配置数量
  102. for i in `seq 2 200`
  103. do
  104. ip=10.0.0.${i}
  105. ip6=${ipv6_range}${i}
  106. wg genkey | tee cprivatekey | wg pubkey > cpublickey
  107. wg set wg0 peer $(cat cpublickey) allowed-ips "${ip}/32, ${ip6}"
  108. cat <<EOF >wg_${host}_$i.conf
  109. [Interface]
  110. PrivateKey = $(cat cprivatekey)
  111. Address = $ip/24, $ip6/64
  112. DNS = 8.8.8.8, 2001:4860:4860::8888
  113. [Peer]
  114. PublicKey = $(wg show wg0 public-key)
  115. Endpoint = $serverip:$port
  116. AllowedIPs = 0.0.0.0/0, ::0/0
  117. PersistentKeepalive = 25
  118. EOF
  119. cat wg_${host}_$i.conf | qrencode -o wg_${host}_$i.png
  120. if [ $i -ge $num_x ]; then break; fi
  121. done
  122. wg-quick save wg0
  123. clear && display_peer
  124. cat /etc/wireguard/wg_${host}_2.conf
  125. echo -e "${SkyBlue}:: 使用${GreenBG} bash wg5 ${SkyBlue}命令,可以临时网页下载配置和二维码${Font}"
  126. }
  127. # 安装 WireGuard+Speeder+Udp2Raw 和 SS+Kcp+Udp2RAW 配置
  128. ss_kcp_udp2raw_wg_speed(){
  129. # 下载/编译 shadowsocks-libev
  130. wget -qO- git.io/fhExJ | bash
  131. wget -O ~/ss_wg_set_raw git.io/fpKnF >/dev/null 2>&1
  132. bash ~/ss_wg_set_raw
  133. rm ~/ss_wg_set_raw
  134. }
  135. # 常用工具和配置 IP中国地区识别判断
  136. get_tools_conf(){
  137. apt install -y htop tmux curl wget vim psmisc bash-completion ca-certificates locales locate
  138. # yum install -y vim htop tmux screen iperf3 >/dev/null 2>&1
  139. cd ~
  140. china=$(curl -s https://262235.xyz/ip/$(curl -s https://262235.xyz/ip/) | grep 中国)
  141. if [[ ! -z "${china}" ]]; then
  142. wget -O .vimrc --no-check-certificate https://262235.xyz/_vimrc
  143. wget -O .bashrc --no-check-certificate https://262235.xyz/_bashrc
  144. wget -O .tmux.conf --no-check-certificate https://262235.xyz/_tmux.conf
  145. else
  146. wget -O .vimrc --no-check-certificate https://raw.githubusercontent.com/hongwenjun/srgb/master/vim/_vimrc
  147. wget -O .bashrc --no-check-certificate https://raw.githubusercontent.com/hongwenjun/srgb/master/vim/_bashrc
  148. wget -O .tmux.conf --no-check-certificate https://raw.githubusercontent.com/hongwenjun/tmux_for_windows/master/.tmux.conf
  149. fi
  150. }
  151. # 慎用 authorized_keys # Debian Linux 建立 SSH 证书登录 生成 SSH 密钥对命令 ssh-keygen -t ed25519 -C lyvba.com
  152. authorized_keys(){
  153. mkdir -p ~/.ssh && cd ~/.ssh
  154. cat <<EOF >> authorized_keys
  155. ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBOHnIrfVws0HM6ILIJGMzYeqckqWTxB7/wKiPHhTbhO lyvba.com
  156. EOF
  157. }
  158. # 主菜单输入数字 88 # 隐藏功能:从源VPS克隆服务端配置,获得常用工具和配置
  159. scp_conf(){
  160. echo -e "${RedBG}:: 警告: 警告: 警告:${Yellow} VPS服务器已经被GFW防火墙关照,按 Ctrl+ C 可以紧急逃离! ${Font}"
  161. # echo_SkyBlue ":: 隐藏功能: 从源VPS克隆服务端配置,共用客户端配置"
  162. # read -p ":: 请输入源VPS的IP地址(域名):" vps_ip
  163. # cmd="scp root@${vps_ip}:/etc/wireguard/* /etc/wireguard/. "
  164. # echo -e "${GreenBG}# ${cmd} ${Font} 现在运行scp命令,按提示输入yes,源vps的root密码"
  165. # ${cmd}
  166. # wg-quick down wg0 >/dev/null 2>&1
  167. # wg-quick up wg0 >/dev/null 2>&1
  168. # echo -e "${RedBG} 我真不知道WG服务器端是否已经使用源vps的配置启动! ${Font}"
  169. authorized_keys
  170. get_tools_conf
  171. }
  172. # DEBIAN LOCALE LANGUAGE SETTINGS
  173. en_US()
  174. {
  175. cat <<EOF >/etc/default/locale
  176. LANG=en_US.UTF-8
  177. EOF
  178. echo -e "Please log in again on Debian tty1"
  179. }
  180. zh_CN()
  181. {
  182. cat <<EOF >/etc/default/locale
  183. # 中文显示
  184. LANG="zh_CN.UTF-8"
  185. LANGUAGE="zh_CN:zh"
  186. EOF
  187. echo -e ":: 仅支持本身中文系统切换回中文!"
  188. echo -e "Please log in again on Debian tty1"
  189. }
  190. ipinfo(){
  191. echo_GreenBG ":: 统计自己电信服务商IP动态变化 ::"
  192. echo -e "${Green}"
  193. # 应用: 统计自己电信服务商IP动态变化
  194. cat /var/log/udp2raw.log \
  195. | grep -oE '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}' | sort | uniq -c| sort -nrk 1
  196. echo -e
  197. echo_RedBG ":: 抠脚大叔在窥视你的小鸡 ::"
  198. echo -e "${Red}"
  199. # 统计哪些IP在扫描你的vps
  200. cat /var/log/auth.log \
  201. | grep -oE '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}' | sort | uniq -c| sort -nrk 1
  202. echo -e
  203. echo_GreenBG ":: 查询IP信息和物理地址 https://www.ipip.net/ipquery.html"
  204. echo -e
  205. echo_Yellow ":: 当前${RedBG} 服务器IP: ${Yellow} $(cat /var/ip_addr) ${Font} ::"
  206. }
  207. # 创建容器: qbittorrent
  208. docker_qb(){
  209. docker run --name=qbittorrent \
  210. -e PUID=1000 -e PGID=1000 \
  211. -e TZ=Asia/ShangHai \
  212. -e UMASK_SET=022 -e \
  213. WEBUI_PORT=8080 \
  214. -p 59902:59902 \
  215. -p 59902:59902/udp \
  216. -p 8080:8080 \
  217. -v /mnt/config:/config \
  218. -v /mnt/downloads:/downloads \
  219. --restart unless-stopped \
  220. -d linuxserver/qbittorrent
  221. # 浏览器中输入网址管理
  222. echo -e http://$(curl -s https://262235.xyz/ip/):8080
  223. echo -e "${GreenBG}:: qbittorrent 网页管理地址和密码 ${Yellow}"
  224. echo -e "${SkyBlue}:: 默认用户名 ${RedBG} admin ${SkyBlue} 密码 ${RedBG} adminadmin ${Font} "
  225. echo -e ":: 请登陆配置Peer端口(59902)和密码, 重启命令: ${GreenBG} docker restart qbittorrent ${Font}"
  226. }
  227. # 安装tcping
  228. tcping_install(){
  229. wget https://github.com/cloverstd/tcping/releases/download/v0.1.1/tcping-linux-amd64-v0.1.1.tar.gz
  230. tar xf tcping-linux-amd64-v0.1.1.tar.gz
  231. mv tcping /usr/bin/tcping
  232. tcping 1.1.1.1 53
  233. rm tcping-linux-amd64-v0.1.1.tar.gz
  234. }
  235. # 安装 autopt 自动PT
  236. autopt_install(){
  237. wget git.io/autopt.sh && bash autopt.sh
  238. }
  239. # 一键 WordPress 博客安装脚本
  240. lnmp_install(){
  241. wget git.io/lnmp.sh && bash lnmp.sh
  242. }
  243. # 安装Docker可视化界面Portainer
  244. portainer_install(){
  245. docker run --name Portainer \
  246. --restart=always -d -p 9000:9000 \
  247. -v /var/run/docker.sock:/var/run/docker.sock \
  248. -v /opt/portainer_data:/data \
  249. portainer/portainer
  250. # 浏览器中输入网址管理
  251. echo -e "${GreenBG}:: Docker可视化界面Portainer 管理地址 ${Yellow}"
  252. echo -e http://$(curl -s https://262235.xyz/ip/):9000
  253. }
  254. # 部署 nginx-php 和 php 相册
  255. photo_install(){
  256. downloads=/mnt/downloads
  257. docker run -d -p 80:80 -p 443:443 \
  258. --cpus 0.6 --restart=always \
  259. -v ${downloads}:/var/www/html \
  260. --name nginx-php \
  261. hongwenjun/nginx-php
  262. cd ${downloads}
  263. wget https://github.com/hongwenjun/srgb/raw/master/files.photo.gallery/index.php
  264. mkdir -p _files
  265. chown -R www-data:www-data _files
  266. chmod 0777 _files/
  267. echo -e "${GreenBG}:: 部署nginx-php和php相册,挂载目录: ${SkyBlue} ${downloads} ${Font}"
  268. echo -e http://$(curl -s https://262235.xyz/ip/)
  269. }
  270. # 定义文字颜色
  271. Green="\033[32m" && Red="\033[31m" && GreenBG="\033[42;37m" && RedBG="\033[41;37m"
  272. Font="\033[0m" && Yellow="\033[0;33m" && SkyBlue="\033[0;36m"
  273. echo_SkyBlue(){
  274. echo -e "${SkyBlue}$1${Font}"
  275. }
  276. echo_Yellow(){
  277. echo -e "${Yellow}$1${Font}"
  278. }
  279. echo_GreenBG(){
  280. echo -e "${GreenBG}$1${Font}"
  281. }
  282. echo_RedBG(){
  283. echo -e "${RedBG}$1${Font}"
  284. }
  285. # Vps_Setup 一键脚本 藏经阁
  286. onekey_plus(){
  287. echo_RedBG " 一键安装设置全家桶 by 蘭雅sRGB "
  288. echo_GreenBG " 开源项目:https://github.com/hongwenjun/vps_setup "
  289. echo_SkyBlue " # 一键安装 WireGuard Shadowsocks V2Ray 服务端三合一脚本"
  290. echo_Yellow " bash <(curl -L -s https://git.io/vps.sh)"
  291. echo_SkyBlue " # 下载 IPTABLES 设置防火墙规则 脚本 By 蘭雅sRGB"
  292. echo_Yellow " wget -qO safe_iptables.sh git.io/fhUSe && bash safe_iptables.sh"
  293. echo_SkyBlue " # Google Cloud Platform GCP实例开启密码与root用户登陆"
  294. echo_Yellow " wget -qO- git.io/fpQWf | bash"
  295. echo_SkyBlue " # 一键安装 vnstat 流量检测 by 蘭雅sRGB"
  296. echo_Yellow " bash <(curl -L -s https://git.io/fxxlb) setup"
  297. echo_SkyBlue " # 一键安装wireguard 脚本 For Debian_9 Ubuntu Centos_7"
  298. echo_Yellow " wget -qO- git.io/fptwc | bash"
  299. echo_SkyBlue " # 一键安装 SS+Kcp+Udp2Raw 脚本 快速安装 for Debian 9"
  300. echo_Yellow " wget -qO- git.io/fpZIW | bash"
  301. echo_SkyBlue " # 一键安装 SS+Kcp+Udp2Raw 脚本 for Debian 9 Ubuntu (编译安装)"
  302. echo_Yellow " wget -qO- git.io/fx6UQ | bash"
  303. echo_SkyBlue " # Telegram 代理 MTProxy Go版 一键脚本(源:逗比网)"
  304. echo_Yellow " wget -qO mtproxy_go.sh git.io/fpWo4 && bash mtproxy_go.sh"
  305. echo_SkyBlue " # linux下golang环境搭建自动脚本 by 蘭雅sRGB"
  306. echo_Yellow " wget -qO- https://git.io/fp4jf | bash"
  307. echo_SkyBlue " # SuperBench.sh 一键测试服务器的基本参数"
  308. echo_Yellow " wget -qO- git.io/superbench.sh | bash"
  309. echo_SkyBlue " # 使用BestTrace查看VPS的去程和回程"
  310. echo_Yellow " wget -qO- git.io/fp5lf | bash"
  311. echo_SkyBlue " # 挂载GD网盘 安装rclone官方脚本"
  312. echo_Yellow " curl https://rclone.org/install.sh | sudo bash"
  313. echo_SkyBlue " # 安装Docker软件一键脚本"
  314. echo_Yellow " curl -fsSLo- get.docker.com | /bin/sh"
  315. echo_SkyBlue " # 另一个Linux服务器基准脚本"
  316. echo_Yellow " curl -sL yabs.sh | bash"
  317. }
  318. safe_iptables(){
  319. # IPTABLES 设置防火墙规则 脚本 By 蘭雅sRGB 特别感谢 TaterLi 指导
  320. wget -qO safe_iptables.sh git.io/fhUSe && bash safe_iptables.sh
  321. }
  322. # 更新wgmtu脚本
  323. update_self(){
  324. # 安装 bash wgmtu 脚本用来设置服务器
  325. wget -O ~/wgmtu https://git.io/wgmtu >/dev/null 2>&1
  326. }
  327. # 更新 WireGuard
  328. wireguard_update(){
  329. yum update -y wireguard-dkms wireguard-tools >/dev/null 2>&1
  330. apt update -y wireguard-dkms wireguard-tools >/dev/null 2>&1
  331. echo -e "${RedBG} 更新完成 ${Font}"
  332. }
  333. # 卸载 WireGuard
  334. wireguard_remove(){
  335. wg-quick down wg0
  336. yum remove -y wireguard-dkms wireguard-tools >/dev/null 2>&1
  337. apt remove -y wireguard-dkms wireguard-tools >/dev/null 2>&1
  338. rm -rf /etc/wireguard/
  339. echo -e "${RedBG} 卸载完成 ${Font}"
  340. }
  341. # 更新/安装 UDP2RAW KCPTUN UDPspeeder 工具
  342. udp2raw_update()
  343. {
  344. systemctl stop rc-local
  345. # 下载 UDP2RAW
  346. udp2raw_ver=$(wget --no-check-certificate -qO- https://api.github.com/repos/wangyu-/udp2raw-tunnel/releases/latest | grep 'tag_name' | cut -d\" -f4)
  347. wget https://github.com/wangyu-/udp2raw-tunnel/releases/download/${udp2raw_ver}/udp2raw_binaries.tar.gz
  348. tar xf udp2raw_binaries.tar.gz
  349. mv udp2raw_amd64 /usr/bin/udp2raw
  350. rm udp2raw* -rf
  351. rm version.txt
  352. # 下载 KCPTUN
  353. kcp_ver=$(wget --no-check-certificate -qO- https://api.github.com/repos/xtaci/kcptun/releases/latest | grep 'tag_name' | cut -d\" -f4)
  354. kcp_gz_ver=${kcp_ver:1:8}
  355. kcptun_tar_gz=kcptun-linux-amd64-${kcp_gz_ver}.tar.gz
  356. wget https://github.com/xtaci/kcptun/releases/download/${kcp_ver}/$kcptun_tar_gz
  357. tar xf $kcptun_tar_gz
  358. mv server_linux_amd64 /usr/bin/kcp-server
  359. rm $kcptun_tar_gz
  360. rm client_linux_amd64
  361. # 下载 UDPspeeder
  362. udpspeeder_ver=$(wget --no-check-certificate -qO- https://api.github.com/repos/wangyu-/UDPspeeder/releases/latest | grep 'tag_name' | cut -d\" -f4)
  363. wget https://github.com/wangyu-/UDPspeeder/releases/download/${udpspeeder_ver}/speederv2_binaries.tar.gz
  364. tar xf speederv2_binaries.tar.gz
  365. mv speederv2_amd64 /usr/bin/speederv2
  366. rm speederv2* -rf
  367. rm version.txt
  368. systemctl restart rc-local
  369. ps aux | grep -e kcp -e udp -e speed -e ss-server
  370. ss-server -h | head -2 && kcp-server -v && udp2raw -h | head -2 && speederv2 -h | head -2
  371. }
  372. rc-local_remove(){
  373. echo -e "${RedBG} 卸载Udp2Raw套接服务配置 /etc/rc.local ${Font}"
  374. systemctl stop rc-local
  375. rm /usr/bin/udp2raw /usr/bin/kcp-server /usr/bin/speederv2
  376. ps aux | grep -e kcp -e udp -e speed
  377. mv /etc/rc.local ~/rc.local
  378. echo -e "${RedBG} 卸载完成,备份在 /root/rc.local ${Font}"
  379. }
  380. update_remove_menu(){
  381. echo -e "${RedBG} 更新/卸载 WireGuard服务端和Udp2Raw ${Font}"
  382. echo -e "${Green}> 1. 更新 WireGuard 服务端"
  383. echo -e "> 2. 卸载 WireGuard 服务端"
  384. echo -e "> 3. 更新 Udp2Raw KCPTUN UDPspeeder 软件"
  385. echo -e "> 4. 卸载 Udp2Raw KCPTUN UDPspeeder 服务套件"
  386. echo -e "> 5. 退出${Font}"
  387. echo
  388. read -p "请输入数字(1-5):" num_x
  389. case "$num_x" in
  390. 1)
  391. wireguard_update
  392. ;;
  393. 2)
  394. wireguard_remove
  395. ;;
  396. 3)
  397. udp2raw_update
  398. ;;
  399. 4)
  400. rc-local_remove
  401. ;;
  402. 5)
  403. exit 1
  404. ;;
  405. *)
  406. ;;
  407. esac
  408. }
  409. # 删除末尾的Peer
  410. del_last_peer(){
  411. peer_key=$(wg show wg0 allowed-ips | tail -1 | awk '{print $1}')
  412. wg set wg0 peer $peer_key remove
  413. wg-quick save wg0
  414. echo -e "${SkyBlue}:: 删除客户端 peer: ${Yellow} ${peer_key} ${SkyBlue} 完成.${Font}"
  415. }
  416. # 显示激活Peer表
  417. display_peer(){
  418. # peer和ip表写临时文件
  419. wg show wg0 allowed-ips > /tmp/peer_list
  420. # 显示 peer和ip表
  421. echo -e "${RedBG} ID ${GreenBG} Peer: <base64 public key> ${SkyBlue} IP_Addr: ${Font}"
  422. i=1
  423. while read -r line || [[ -n $line ]]; do
  424. peer=$(echo $line | awk '{print $1}')
  425. ip=$(echo $line | awk '{print $2}')
  426. line="> ${Red}${i} ${Yellow}${peer}${Font} ${ip}"
  427. echo -e $line && let i++
  428. done < /tmp/peer_list
  429. }
  430. # 选择删除Peer客户端
  431. del_peer(){
  432. display_peer
  433. echo
  434. echo -e "${RedBG}请选择 IP_Addr 对应 ID 号码,指定客户端配置将删除! ${Font}"
  435. read -p "请输入ID号数字(1-X):" x
  436. peer_cnt=$(cat /tmp/peer_list | wc -l)
  437. if [[ ${x} -ge 1 ]] && [[ ${x} -le ${peer_cnt} ]]; then
  438. i=$x
  439. peer_key=$(cat /tmp/peer_list | head -n $i | tail -1 | awk '{print $1}')
  440. wg set wg0 peer $peer_key remove
  441. wg-quick save wg0
  442. echo -e "${SkyBlue}:: 删除客户端 peer: ${Yellow} ${peer_key} ${SkyBlue} 完成.${Font}"
  443. else
  444. echo -e "${SkyBlue}:: 命令使用: ${GreenBG} wg set wg0 peer <base64 public key> remove ${Font}"
  445. fi
  446. rm /tmp/peer_list
  447. }
  448. # 添加新的客户端peer
  449. add_peer(){
  450. # 服务器 IP 端口 ,新客户端 序号和IP
  451. port=$(wg show wg0 listen-port)
  452. get_serverip && host=$(hostname -s) && cd /etc/wireguard
  453. wg genkey | tee cprivatekey | wg pubkey > cpublickey
  454. ipnum=$(wg show wg0 allowed-ips | tail -1 | awk '{print $2}' | awk -F '[./]' '{print $4}')
  455. i=$((10#${ipnum}+1)) && ip=10.0.0.${i} ip6=${ipv6_range}${i}
  456. # 生成客户端配置文件
  457. cat <<EOF >wg_${host}_$i.conf
  458. [Interface]
  459. PrivateKey = $(cat cprivatekey)
  460. Address = $ip/24, $ip6/64
  461. DNS = 8.8.8.8, 2001:4860:4860::8888
  462. [Peer]
  463. PublicKey = $(wg show wg0 public-key)
  464. Endpoint = $serverip:$port
  465. AllowedIPs = 0.0.0.0/0, ::0/0
  466. PersistentKeepalive = 25
  467. EOF
  468. # 在wg服务器中生效客户端peer
  469. wg set wg0 peer $(cat cpublickey) allowed-ips "${ip}/32, ${ip6}"
  470. wg-quick save wg0
  471. # 显示客户端
  472. cat /etc/wireguard/wg_${host}_$i.conf | qrencode -o wg_${host}_$i.png
  473. cat /etc/wireguard/wg_${host}_$i.conf | qrencode -o - -t UTF8
  474. echo -e "${SkyBlue}:: 新客户端peer添加完成; 文件:${Yellow} /etc/wireguard/wg_${host}_$i.conf ${Font}"
  475. cat /etc/wireguard/wg_${host}_$i.conf
  476. }
  477. wg_clients_menu(){
  478. echo -e "${RedBG} 添加/删除 WireGuard Peer 客户端管理 ${Font}"
  479. echo -e "${Green}> 1. 添加一个 WireGuard Peer 客户端配置"
  480. echo -e "> 2. 删除末尾 WireGuard Peer 客户端配置"
  481. echo -e "> 3. 指定删除 WireGuard Peer 客户端配置"
  482. echo "------------------------------------------------------"
  483. echo -e "${SkyBlue}> 4. 退出"
  484. echo -e "> 5.${RedBG} 重置 WireGuard 客户端 Peer 数量 ${Font}"
  485. echo
  486. read -p "请输入数字(1-5):" num_x
  487. case "$num_x" in
  488. 1)
  489. add_peer
  490. ;;
  491. 2)
  492. del_last_peer
  493. ;;
  494. 3)
  495. del_peer
  496. ;;
  497. 4)
  498. display_peer
  499. exit 1
  500. ;;
  501. 5)
  502. wg_clients
  503. ;;
  504. *)
  505. ;;
  506. esac
  507. }
  508. # 设置菜单
  509. start_menu(){
  510. clear
  511. echo -e "${RedBG} 一键安装 WireGuard 脚本 For Debian_9 Ubuntu Centos_7 ${Font}"
  512. echo -e "${GreenBG} 开源项目: https://github.com/hongwenjun/vps_setup ${Font}"
  513. echo -e "${Green}> 1. 显示客户端配置和二维码 (手机支持纯IPV6,稳定性有待测试)"
  514. echo -e "> 2. 修改 WireGuard 服务器端 MTU 值"
  515. echo -e "> 3. 修改 WireGuard 端口号"
  516. echo -e "> 4. 安装 WireGuard+Speeder+Udp2Raw 和 SS+Kcp+Udp2RAW 一键脚本"
  517. echo "----------------------------------------------------------"
  518. echo -e "${SkyBlue}> 5. 添加/删除 WireGuard Peer 客户端管理"
  519. echo -e "> 6. 更新/卸载 WireGuard服务端和Udp2Raw"
  520. echo -e "> 7. Replace the Script itself with Simplified Chinese to English"
  521. echo -e "> 8. ${RedBG} IPTABLES 防火墙设置脚本 ${Font}"
  522. echo
  523. echo_SkyBlue "Usage: ${GreenBG} bash wgmtu ${SkyBlue} [ setup | remove | vps | bench | -U ] "
  524. echo_SkyBlue " [ v2ray | vnstat | log | trace | -h ] "
  525. echo_SkyBlue " [ tr|qb | docker |rclone|ip|en |yabs] "
  526. echo_SkyBlue " [ tcping|autopt|portainer|photo|lnmp] "
  527. echo
  528. read -p "请输入数字(1-8):" num
  529. case "$num" in
  530. 1)
  531. conf_QRcode
  532. ;;
  533. 2)
  534. setmtu
  535. ;;
  536. 3)
  537. setport
  538. ;;
  539. 4)
  540. ss_kcp_udp2raw_wg_speed
  541. ;;
  542. 5)
  543. wg_clients_menu
  544. ;;
  545. 6)
  546. update_remove_menu
  547. update_self
  548. exit 1
  549. ;;
  550. 7)
  551. wget -O ~/wgmtu https://raw.githubusercontent.com/hongwenjun/vps_setup/english/wgmtu.sh
  552. bash wgmtu
  553. exit 1
  554. ;;
  555. 777)
  556. # Vps_Setup 一键脚本 藏经阁
  557. onekey_plus
  558. ;;
  559. 8)
  560. safe_iptables
  561. ;;
  562. ip)
  563. ipinfo
  564. ;;
  565. tr)
  566. # Debian 安装 Transmission 一键脚本
  567. wget https://raw.githubusercontent.com/hongwenjun/vps_setup/master/rclone/transmission.sh
  568. bash transmission.sh
  569. ;;
  570. qb)
  571. docker_qb
  572. ;;
  573. autopt)
  574. autopt_install
  575. ;;
  576. lnmp)
  577. lnmp_install
  578. ;;
  579. portainer)
  580. portainer_install
  581. ;;
  582. photo)
  583. photo_install
  584. ;;
  585. tcping)
  586. tcping_install
  587. ;;
  588. # 菜单输入 管理命令 bash wgmtu 命令行参数
  589. setup)
  590. ss_kcp_udp2raw_wg_speed
  591. ;;
  592. remove)
  593. wireguard_remove
  594. rc-local_remove
  595. ;;
  596. 88)
  597. scp_conf
  598. ;;
  599. 9999)
  600. bash <(curl -L -s https://git.io/fpnQt) 9999
  601. ;;
  602. -U)
  603. update_self
  604. ;;
  605. -h)
  606. wgmtu_help
  607. ;;
  608. vps)
  609. bash <(curl -L -s https://git.io/vps.sh)
  610. ;;
  611. docker)
  612. curl -fsSLo- get.docker.com | /bin/sh
  613. ;;
  614. rclone)
  615. curl https://rclone.org/install.sh | bash
  616. ;;
  617. en)
  618. en_US
  619. ;;
  620. cn)
  621. zh_CN
  622. ;;
  623. vnstat)
  624. bash <(curl -L -s https://git.io/fxxlb) setup
  625. ;;
  626. bench)
  627. wget -qO- git.io/superbench.sh | bash
  628. ;;
  629. yabs)
  630. curl -sL yabs.sh | bash
  631. ;;
  632. trace)
  633. wget -qO- git.io/fp5lf | bash
  634. ;;
  635. v2ray)
  636. bash <(curl -L -s https://git.io/v2ray.ss)
  637. ;;
  638. log)
  639. cat vps_setup.log
  640. ;;
  641. *)
  642. display_peer
  643. ;;
  644. esac
  645. }
  646. wgmtu_help(){
  647. echo_SkyBlue "Usage: ${GreenBG} bash wgmtu ${SkyBlue} [ setup | remove | vps | bench | -U ] "
  648. echo_SkyBlue " [ v2ray | vnstat | log | trace | -h ] "
  649. echo_SkyBlue " [ tr|qb | docker |rclone|ip|en |yabs] "
  650. echo_SkyBlue " [ tcping|autopt|portainer|photo|lnmp] "
  651. echo
  652. echo_Yellow "[setup 惊喜 | remove 卸载 | vps 脚本 | bench 基准测试 | -U 更新]"
  653. echo_Yellow "[v2ray 你懂 | vnstat 流量 | log 信息 | trace 网络回程 | -h 帮助]"
  654. echo_Yellow "[tr|qb PT下载 | docker 容器安装 | rclone G D网盘 | yabs 测试]"
  655. echo_Yellow "[tcping工具|autopt 自动PT|portainer 管理|photo相册 |lnmp wp博客]"
  656. }
  657. # WireGuard 管理命令 bash wgmtu 命令行参数
  658. if [[ $# > 0 ]]; then
  659. key="$1"
  660. case $key in
  661. setup)
  662. ss_kcp_udp2raw_wg_speed
  663. ;;
  664. remove)
  665. wireguard_remove
  666. rc-local_remove
  667. ;;
  668. 88)
  669. scp_conf
  670. ;;
  671. 9999)
  672. bash <(curl -L -s https://git.io/fpnQt) 9999
  673. ;;
  674. -U)
  675. update_self
  676. ;;
  677. -h)
  678. wgmtu_help
  679. ;;
  680. vps)
  681. bash <(curl -L -s https://git.io/vps.sh)
  682. ;;
  683. ip)
  684. ipinfo
  685. ;;
  686. tr)
  687. # Debian 安装 Transmission 一键脚本
  688. wget https://raw.githubusercontent.com/hongwenjun/vps_setup/master/rclone/transmission.sh
  689. bash transmission.sh
  690. ;;
  691. qb)
  692. docker_qb
  693. ;;
  694. docker)
  695. curl -fsSLo- get.docker.com | /bin/sh
  696. ;;
  697. autopt)
  698. autopt_install
  699. ;;
  700. lnmp)
  701. lnmp_install
  702. ;;
  703. portainer)
  704. portainer_install
  705. ;;
  706. photo)
  707. photo_install
  708. ;;
  709. tcping)
  710. tcping_install
  711. ;;
  712. rclone)
  713. curl https://rclone.org/install.sh | bash
  714. ;;
  715. en)
  716. en_US
  717. ;;
  718. cn)
  719. zh_CN
  720. ;;
  721. vnstat)
  722. bash <(curl -L -s https://git.io/fxxlb) setup
  723. ;;
  724. bench)
  725. wget -qO- git.io/superbench.sh | bash
  726. ;;
  727. yabs)
  728. curl -sL yabs.sh | bash
  729. ;;
  730. trace)
  731. wget -qO- git.io/fp5lf | bash
  732. ;;
  733. v2ray)
  734. bash <(curl -L -s https://git.io/v2ray.ss)
  735. ;;
  736. log)
  737. cat vps_setup.log
  738. ;;
  739. esac
  740. else
  741. start_menu
  742. fi