update version

add no overwrite key for Clash Mi

.gitignore

@@ -26,3 +26,5 @@ docker-compose.override.yml
 backup.json
 app/webapp/override/
 .rest
+
+subscription.php

app/bot.php

@@ -162,6 +162,9 @@ class Bot
             case preg_match('~^/switchBanIp$~', $this->input['callback'], $m):
                 $this->switchBanIp();
                 break;
+            case preg_match('~^/switchMonthlyStats$~', $this->input['callback'], $m):
+                $this->switchMonthlyStats();
+                break;
             case preg_match('~^/setIpLimit$~', $this->input['callback'], $m):
                 $this->setIpLimit();
                 break;
@@ -241,8 +244,7 @@ class Bot
                 $this->addLinkDomain();
                 break;
             case preg_match('~^/id$~', $this->input['message'], $m):
-                $this->send($this->input['chat'], $this->input['from'], $this->input['message_id']);
-                $this->send($this->input['chat'], $this->input['chat'], $this->input['message_id']);
+                $this->send($this->input['chat'], "your id: {$this->input['from']}\nchat id: {$this->input['chat']}", $this->input['message_id']);
                 break;
             case preg_match('~^/adguardChBr$~', $this->input['callback'], $m):
                 $this->adguardChBr();
@@ -1337,6 +1339,7 @@ class Bot
             $this->checkVersion();
             $this->checkBackup($period);
             $this->checkLogs($period);
+            $this->checkResetXrayStats($period);
             $this->checkCert();
             $this->autoAnalyzeLogs();
             $this->xrayStatsUser();
@@ -1444,6 +1447,29 @@ class Bot
         }
     }
 
+    public function checkResetXrayStats($delta)
+    {
+        $pac = $this->getPacConf();
+        if (!empty($pac['reset_monthly'])) {
+            $now    = strtotime(date('Y-m-d H:i:s'));
+            $start  = strtotime('first day of previous month midnight');
+            $period = strtotime('1 month', 0);
+            if (
+                !empty($start)
+                && !empty($period)
+                && empty($this->backup)
+                && $now - $start >= 0
+                && (($now - $start) % $period < $delta)
+            ) {
+                $this->resetXrStats(1);
+                require __DIR__ . '/config.php';
+                foreach ($c['admin'] as $admin) {
+                    $this->send($admin, "vless: reset stats");
+                }
+            }
+        }
+    }
+
     public function checkLogs($delta)
     {
         $c = $this->getPacConf();
@@ -3395,10 +3421,14 @@ DNS-over-HTTPS with IP:
                         'text'          => '<<',
                         'callback_data' => "/subnet {$wgpage}_" . ($page - 1 >= 0 ? $page - 1 : $all - 1) . ($openconnect ? '_1' : ''),
                     ],
+                    [
+                        'text'          => $page + 1,
+                        'callback_data' => "/subnet {$wgpage}_$page" . ($openconnect ? '_1' : ''),
+                    ],
                     [
                         'text'          => '>>',
                         'callback_data' => "/subnet {$wgpage}_" . ($page < $all - 1 ? $page + 1 : 0) . ($openconnect ? '_1' : ''),
-                    ]
+                    ],
                 ];
             }
         }
@@ -3634,10 +3664,10 @@ DNS-over-HTTPS with IP:
                         'text'          => '<<',
                         'callback_data' => "/menu wg " . ($page - 1 >= 0 ? $page - 1 : $all - 1),
                     ],
-                    // [
-                    //     'text'          => 'all',
-                    //     'callback_data' => "/menu wg -1",
-                    // ],
+                    [
+                        'text'          => $page + 1,
+                        'callback_data' => "/menu wg $page",
+                    ],
                     [
                         'text'          => '>>',
                         'callback_data' => "/menu wg " . ($page < $all - 1 ? $page + 1 : 0),
@@ -4137,10 +4167,14 @@ DNS-over-HTTPS with IP:
                         'text'          => '<<',
                         'callback_data' => "/$menu " . ($page - 1 >= 0 ? $page - 1 : $all - 1),
                     ],
+                    [
+                        'text'          => $page + 1,
+                        'callback_data' => "/$menu $page",
+                    ],
                     [
                         'text'          => '>>',
                         'callback_data' => "/$menu " . ($page < $all - 1 ? $page + 1 : 0),
-                    ]
+                    ],
                 ];
             }
             $data[] = [
@@ -4276,6 +4310,43 @@ DNS-over-HTTPS with IP:
         $this->menu('wg', 0);
     }
 
+    public function alignColumns(array $columns): string
+    {
+        // Находим максимальную длину для каждого столбца
+        $columnLengths = [];
+        foreach ($columns as $column) {
+            $maxLength = 0;
+            foreach ($column as $cell) {
+                $len = mb_strlen($cell, 'UTF-8');
+                $maxLength = max($maxLength, $len);
+            }
+            $columnLengths[] = $maxLength;
+        }
+
+        // Получаем количество строк из первого столбца
+        $rowCount = count($columns[0]);
+        $columnCount = count($columns);
+
+        // Формируем строки с выравниванием
+        $result = [];
+        for ($row = 0; $row < $rowCount; $row++) {
+            $line = '';
+            for ($col = 0; $col < $columnCount; $col++) {
+                $cell = $columns[$col][$row];
+                $padding = str_repeat(' ', $columnLengths[$col] - mb_strlen($cell, 'UTF-8'));
+                $line .= $cell . $padding;
+
+                // Добавляем разделитель между столбцами, кроме последнего
+                if ($col < $columnCount - 1) {
+                    $line .= '  '; // Два пробела между столбцами
+                }
+            }
+            $result[] = $line;
+        }
+
+        return implode("\n", $result);
+    }
+
     public function menu($type = false, $arg = false, $return = false)
     {
         $conf   = $this->getPacConf();
@@ -4296,26 +4367,70 @@ DNS-over-HTTPS with IP:
             $f      = '/docker/compose';
             $c      = yaml_parse_file($f)['services'];
             $main[] = 'v' . getenv('VER') . " $branch" . ($update ? ' (have updates)' : '');
-            $main[] = '';
-            $main[] = $cron;
-            $main[] = $this->i18n($backup ? 'on' : 'off') . ' autobackup' . ($backup ? " $backup" : '');
-            $main[] = $this->i18n($conf['autoupdate'] ? 'on' : 'off') . ' autoupdate';
-            $main[] = $this->i18n($conf['autoscan'] ? 'on' : 'off') . ' autoscan';
-            $main[] = $this->i18n($conf['autodeny'] ? 'on' : 'off') . ' autoblock' . ($conf['deny'] ? ': ' . count($conf['deny']) : '');
-            $main[] = '';
-            $main[] = $this->i18n($c['wg'] ? 'on' : 'off') . ' ' . getenv('WGPORT') . ' Wireguard';
-            $main[] = $this->i18n($c['wg1'] ? 'on' : 'off') . ' ' . getenv('WG1PORT') . ' Wireguard 1';
-            $main[] = $this->i18n($c['tg'] ? 'on' : 'off') . ' ' . getenv('TGPORT') . ' MTProto';
-            $main[] = $this->i18n($c['ad'] ? 'on' : 'off') . ' 853 AdguardHome DoT';
-            $main[] = $this->i18n($c['ss'] ? 'on' : 'off') . ' 8388 Shadowsocks';
+
             if (!empty($conf['domain'])) {
                 $main[] = '';
                 $oc     = $this->getHashSubdomain('oc');
                 $np     = $this->getHashSubdomain('np');
-                $main[] = $conf['domain'] ? "Domains:\n{$conf['domain']}\n$np.{$conf['domain']} (for naiveproxy)\n$oc.{$conf['domain']} (for openconnect)" . ($conf['adguardkey'] ? "\n{$conf['adguardkey']}.{$conf['domain']} (for adguard DoT)" : '') : $this->i18n('domain explain');
-                $ssl    = $this->expireCert();
-                $main[] = $conf['domain'] ? "\nSSL: " . ($ssl ? date('Y-m-d H:i:s', $this->expireCert()) . "\n" . $this->domainsCert() : 'none') : '';
+                if (!empty($conf['domain'])) {
+                    $ssl_expiry = $this->expireCert();
+                    $certs      = $this->domainsCert() ?: [];
+
+                    $main[] = "<blockquote>";
+                    $main[] = "Domains:";
+                    $main[] = $conf['domain'] . (in_array($conf['domain'], $certs) ? ' (ssl: ' . date('Y-m-d H:i:s', $ssl_expiry) . ')' : '');
+                    $main[] = 'naive ' . "$np.{$conf['domain']}" . (in_array("$np.{$conf['domain']}", $certs) ? ' (ssl: ' . date('Y-m-d H:i:s', $ssl_expiry) . ')' : '');
+                    $main[] = 'openconnect ' . "$oc.{$conf['domain']}" . (in_array("$oc.{$conf['domain']}", $certs) ? ' (ssl: ' . date('Y-m-d H:i:s', $ssl_expiry) . ')' : '');
+                    if (!empty($conf['adguardkey'])) {
+                        $main[] = "{$conf['adguardkey']}.{$conf['domain']}" . (in_array("{$conf['adguardkey']}.{$conf['domain']}", $certs) ? ' (ssl: ' . date('Y-m-d H:i:s', $ssl_expiry) . ')' : '') . ' adguard DOT';;
+                    }
+                    $main[] = "</blockquote>";
+                } else {
+                    $main[] = $this->i18n('domain explain');
+                }
             }
+            $main[] = '';
+
+            $main[] = '<code>';
+            $main[] = $this->alignColumns([
+                [
+                    $this->i18n($this->ssh($this->getPacConf()['amnezia'] ? 'awg' : 'wg', 'wg') ? 'on' : 'off') . ' ' . $this->i18n($this->getPacConf()['amnezia'] ? 'amnezia' : 'wg_title'),
+                    $this->i18n($this->ssh($this->getPacConf()['wg1_amnezia'] ? 'awg' : 'wg', 'wg1') ? 'on' : 'off') . ' ' . $this->i18n($this->getPacConf()['wg1_amnezia'] ? 'amnezia' : 'wg_title'),
+                    $this->i18n($this->ssh('pgrep xray', 'xr') ? 'on' : 'off') . ' ' . $this->i18n('xray'),
+                    $this->i18n($this->ssh('pgrep caddy', 'np') ? 'on' : 'off') . ' ' . $this->i18n('naive'),
+                    $this->i18n($this->ssh('pgrep ocserv', 'oc') ? 'on' : 'off') . ' ' . $this->i18n('ocserv'),
+                    $this->i18n($this->ssh('pgrep mtproto-proxy', 'tg') ? 'on' : 'off') . ' ' . $this->i18n('mtproto'),
+                    $this->i18n(exec("JSON=1 timeout 2 dnslookup google.com ad") ? 'on' : 'off') . ' ' . $this->i18n('ad_title'),
+                    $this->i18n($this->ssh('pgrep ssserver', 'ss') ? 'on' : 'off') . ' ' . $this->i18n('sh_title'),
+                    $this->i18n($this->warpStatus()) . ' ' . $this->i18n('warp'),
+                ],
+                [
+                    $this->i18n($c['wg'] ? 'on' : 'off') . ' ' . getenv('WGPORT'),
+                    $this->i18n($c['wg1'] ? 'on' : 'off') . ' ' . getenv('WG1PORT'),
+                    $this->i18n('on') . ' 443',
+                    $this->i18n('on') . ' 443',
+                    $this->i18n('on') . ' 443',
+                    $this->i18n($c['tg'] ? 'on' : 'off') . ' ' . getenv('TGPORT'),
+                    $this->i18n($c['ad'] ? 'on' : 'off') . ' 853',
+                    $this->i18n($c['ss'] ? 'on' : 'off') . ' ' . getenv('SSPORT'),
+                    '',
+                ],
+            ]);
+            $main[] = '';
+            $main[] = $this->alignColumns([
+                [
+                    $this->i18n($backup ? 'on' : 'off') . ' autobackup',
+                    $this->i18n($conf['autoupdate'] ? 'on' : 'off') . ' autoupdate',
+                    $this->i18n($conf['autoscan'] ? 'on' : 'off') . ' autoscan',
+                ],
+                [
+                    $this->i18n($conf['autodeny'] ? 'on' : 'off') . ' autoblock' . ($conf['deny'] ? ': ' . count($conf['deny']) : ''),
+                    $this->i18n($conf['reset_monthly'] ? 'on' : 'off') . ' autoreset',
+                    $cron,
+                ],
+            ]);
+            $main[] = '</code>';
+
         }
         $menu   = [
             'main' => [
@@ -4357,7 +4472,7 @@ DNS-over-HTTPS with IP:
                             'callback_data' => "/menu adguard",
                         ],
                         [
-                            'text'          => $this->i18n('warp') . ': ' . $this->warpStatus(),
+                            'text'          => $this->i18n('warp'),
                             'callback_data' => "/warp",
                         ],
                     ],
@@ -4459,6 +4574,14 @@ DNS-over-HTTPS with IP:
         $this->ipMenu();
     }
 
+    public function switchMonthlyStats()
+    {
+        $c = $this->getPacConf();
+        $c['reset_monthly'] = $c['reset_monthly'] ? 0 : 1;
+        $this->setPacConf($c);
+        $this->xray();
+    }
+
     public function switchIpLimit($limit)
     {
         $limit = explode(':', $limit);
@@ -4679,10 +4802,14 @@ DNS-over-HTTPS with IP:
                         'text'          => '<<',
                         'callback_data' => "/analysisIp " . ($page - 1 >= 0 ? $page - 1 : $all - 1),
                     ],
+                    [
+                        'text'          => $page + 1,
+                        'callback_data' => "/analysisIp $page",
+                    ],
                     [
                         'text'          => '>>',
                         'callback_data' => "/analysisIp " . ($page < $all - 1 ? $page + 1 : 0),
-                    ]
+                    ],
                 ];
             }
         }
@@ -4888,10 +5015,14 @@ DNS-over-HTTPS with IP:
                         'text'          => '<<',
                         'callback_data' => "/denyList " . ($page - 1 >= 0 ? $page - 1 : $all - 1) . ($white ? " 1" : ' 0'),
                     ],
+                    [
+                        'text'          => $page + 1,
+                        'callback_data' => "/denyList $page" . ($white ? " 1" : ' 0'),
+                    ],
                     [
                         'text'          => '>>',
                         'callback_data' => "/denyList " . ($page < $all - 1 ? $page + 1 : 0) . ($white ? " 1" : ' 0'),
-                    ]
+                    ],
                 ];
             }
             $data[] = [
@@ -5178,35 +5309,21 @@ DNS-over-HTTPS with IP:
 
     public function getMirror()
     {
-        unlink('/config/mirror.tar.gz');
-        unlink('/config/mirror.tar');
         $s = file_get_contents('/mirror/start_socat.sh');
-        $t = preg_replace([
-            '~{ip}~',
-            '~{tg}~',
-            '~{ss}~',
-            '~{wg}~',
+        $t = str_replace([
+            '~ip~',
+            '~tg~',
+            '~ss~',
+            '~wg1~',
+            '~wg2~',
         ], [
             getenv('IP'),
             getenv('TGPORT'),
             getenv('SSPORT'),
             getenv('WGPORT'),
+            getenv('WG1PORT'),
         ], $s);
-        file_put_contents('/mirror/start_socat.sh', $t);
-        $a = new PharData('/config/mirror.tar');
-        $a->buildFromDirectory('/mirror');
-        $a->compress(Phar::GZ);
-        if (!empty($this->input)) {
-            $this->sendFile($this->input['from'], curl_file_create('/config/mirror.tar.gz'));
-        } else {
-            header('Content-Disposition: attachment; filename=mirror.tar.gz');
-            header('Content-Type: application/tar+gzip');
-            echo file_get_contents('/config/mirror.tar.gz');
-            exit;
-        }
-        unlink('/config/mirror.tar.gz');
-        unlink('/config/mirror.tar');
-        file_put_contents('/mirror/start_socat.sh', $s);
+        $this->sendFile($this->input['from'], new CURLStringFile($t, 'socat.sh', 'application/x-sh'));
     }
 
     public function ocMenu()
@@ -5345,8 +5462,16 @@ DNS-over-HTTPS with IP:
         $p     = $this->getPacConf();
         $users = array_map(fn ($e) => trim($e), explode(',', $users));
         $users = array_map(fn ($e) => explode(':', $e), $users);
+        foreach ($c['inbounds'][0]['settings']['clients'] as $k => $v) {
+            $uuids[]  = $v['id'];
+            $emails[] = $v['email'];
+        }
         foreach ($users as $user) {
             $uuid = $user[1] ?: trim($this->ssh('xray uuid', 'xr'));
+            if (in_array($uuid, $uuids ?: []) || in_array($user[0], $emails ?: [])) {
+                $this->send($this->input['chat'], "user {$user[0]} already exists");
+                return $this->xray();
+            }
             $c['inbounds'][0]['settings']['clients'][] = $p['transport'] != 'Reality' ? [
                     'id'    => $uuid,
                     'email' => $user[0],
@@ -5376,20 +5501,22 @@ DNS-over-HTTPS with IP:
                 $this->send($this->input['chat'], 'wrong format');
                 return;
             }
-            if (!empty($c['inbounds'][0]['settings']['clients'][$i]['off'])) {
-                $this->switchXr($i, 1);
-                $c = $this->getXray();
-            }
             $c['inbounds'][0]['settings']['clients'][$i]['time'] = $time;
         }
-        file_put_contents('/config/xray.json', json_encode($c, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
-        $this->userXr($i);
+        $this->restartXray($c, 1);
+        if (!empty($c['inbounds'][0]['settings']['clients'][$i]['off'])) {
+            $this->switchXr($i, 0, 1);
+        } else {
+            $this->userXr($i);
+        }
     }
 
-    public function switchXr($i, $nm = 0)
+    public function switchXr($i, $nm = 0, $time = false)
     {
         $c = $this->getXray();
-        unset($c['inbounds'][0]['settings']['clients'][$i]['time']);
+        if (empty($time)) {
+            unset($c['inbounds'][0]['settings']['clients'][$i]['time']);
+        }
         if (empty($c['inbounds'][0]['settings']['clients'][$i]['off'])) {
             $c['inbounds'][0]['settings']['clients'][$i]['off'] = $c['inbounds'][0]['settings']['clients'][$i]['id'];
             $c['inbounds'][0]['settings']['clients'][$i]['id']  = trim($this->ssh('xray uuid', 'xr'));
@@ -5430,11 +5557,13 @@ DNS-over-HTTPS with IP:
         $this->userXr($i);
     }
 
-    public function resetXrStats()
+    public function resetXrStats($nomenu = false)
     {
         $this->restartXray($this->getXray());
         $this->setXrayStats([]);
-        $this->xray();
+        if (empty($nomenu)) {
+            $this->xray();
+        }
     }
 
     public function listXr($i)
@@ -5741,11 +5870,16 @@ DNS-over-HTTPS with IP:
         $st = $this->getXrayStats();
         $td = $this->getBytes($st['global']['download'] + $st['session']['download']);
         $tu = $this->getBytes($st['global']['upload'] + $st['session']['upload']);
+        $text[] = "↓$td  ↑$tu";
         $data[] = [
             [
-                'text'          => $this->i18n('reset stats') . ": ↓$td  ↑$tu",
+                'text'          => $this->i18n('reset stats'),
                 'callback_data' => '/resetXrStats',
             ],
+            [
+                'text'          => $this->i18n('reset monthly') . ": " . $this->i18n($this->getPacConf()['reset_monthly'] ? 'on' : 'off'),
+                'callback_data' => '/switchMonthlyStats',
+            ],
         ];
         $data[] = [
             [
@@ -5840,10 +5974,14 @@ DNS-over-HTTPS with IP:
                     'text'          => '<<',
                     'callback_data' => "/xray " . ($page - 1 >= 0 ? $page - 1 : $all - 1),
                 ],
+                [
+                    'text'          => $page + 1,
+                    'callback_data' => "/xray $page",
+                ],
                 [
                     'text'          => '>>',
                     'callback_data' => "/xray " . ($page < $all - 1 ? $page + 1 : 0),
-                ]
+                ],
             ];
         }
         $data[] = [
@@ -5958,7 +6096,7 @@ DNS-over-HTTPS with IP:
         if (!empty($this->ssh('pgrep warp-svc', 'wp'))) {
             $st = $this->ssh('curl -m 1 -x socks5://127.0.0.1:40000 https://cloudflare.com/cdn-cgi/trace', 'wp');
             preg_match('~warp=(\w+)~', $st, $m);
-            return $m[1];
+            return trim($m[1]) ?: 'off';
         }
         return 'off';
     }
@@ -6164,6 +6302,9 @@ DNS-over-HTTPS with IP:
         $hash   = $this->getHashBot();
 
         $text[] = "Menu -> " . $this->i18n('xray') . " -> {$c['email']}\n";
+        if (file_exists(__DIR__ . '/subscription.php')) {
+            $text[] = "<a href='$scheme://{$domain}/pac$hash/sub?id={$c['id']}'>subscription</a>";
+        }
         $text[] = "<pre><code>{$this->linkXray($i)}</code></pre>\n";
 
         $text[] = "<a href='$scheme://{$domain}/pac$hash?t=s&r=v&s={$c['id']}#{$c['email']}'>import://v2rayng</a>";
@@ -6291,7 +6432,57 @@ DNS-over-HTTPS with IP:
         return $c['domain'] ?: $this->ip;
     }
 
-    public function subscription()
+    public function sub()
+    {
+        $xr     = $this->getXray();
+        $pac    = $this->getPacConf();
+        $st     = $this->getXrayStats();
+        $domain = $_GET['cdn'] ?: ($_SERVER['SERVER_NAME'] ?: $this->getDomain($pac['transport'] != 'Reality'));
+        $scheme = empty($this->nginxGetTypeCert()) ? 'http' : 'https';
+        $hash   = $this->getHashBot();
+        $flag   = true;
+        foreach ($xr['inbounds'][0]['settings']['clients'] as $k => $v) {
+            if ($v['id'] == $_GET['id']) {
+                if (empty($v['off'])) {
+                    $flag = false;
+                }
+                $uid   = $v['id'];
+                $email = $v['email'];
+                break;
+            }
+        }
+        $download = $this->getBytes($st['users'][$k]['global']['download'] + $st['users'][$k]['session']['download']);
+        $upload   = $this->getBytes($st['users'][$k]['global']['upload'] + $st['users'][$k]['session']['upload']);
+        $singbox  = "$scheme://{$domain}/pac$hash/" . base64_encode(serialize([
+            'h' => $hash,
+            't' => 'si',
+            's' => $uid,
+        ]));
+        $xray = "$scheme://{$domain}/pac$hash/" . base64_encode(serialize([
+            'h' => $hash,
+            't' => 's',
+            's' => $uid,
+        ]));
+        $clash = "$scheme://{$domain}/pac$hash/" . base64_encode(serialize([
+            'h' => $hash,
+            't' => 'cl',
+            's' => $uid,
+        ]));
+        $vless   = $this->linkXray($k);
+        $windows = "$scheme://{$domain}/pac$hash?t=si&r=w&s=$uid";
+        $_GET['s'] = $uid;
+        foreach ([
+          'xray'    => 's',
+          'singbox' => 'si',
+          'clash'   => 'cl'
+        ] as $k     => $v) {
+            $_GET['t'] = $v;
+            $configs[$k] = $this->subscription(1);
+        }
+        require __DIR__ . '/subscription.php';
+    }
+
+    public function subscription($return = false)
     {
         switch ($_GET['t']) {
             case 's':
@@ -6360,7 +6551,7 @@ DNS-over-HTTPS with IP:
                     header("Location: hiddify://install-config/?url=$si");
                     exit;
                 case 'c':
-                    header("Location: clash://install-config/?url=$cl&name=$email");
+                    header("Location: clash://install-config/?url=$cl&overwrite=no&name=$email");
                     exit;
                 case 'w':
                     $link = htmlspecialchars($si, ENT_XML1, 'UTF-8');
@@ -6545,6 +6736,12 @@ DNS-over-HTTPS with IP:
                 }
                 break;
         }
+        if (!empty($return)) {
+            if ($_GET['t'] == 'cl') {
+                return yaml_emit($c);
+            }
+            return json_encode($c);
+        }
 
         if ($_GET['t'] == 'cl') {
             header('Content-type: text/yaml');
@@ -7086,7 +7283,7 @@ DNS-over-HTTPS with IP:
         if (empty($domains)) {
             return false;
         }
-        return implode("\n", array_map(fn($e) => trim($e), explode(',', str_replace('DNS:', '', $domains))));
+        return array_map(fn($e) => trim($e), explode(',', str_replace('DNS:', '', $domains)));
     }
 
     public function updatebot()
@@ -7156,17 +7353,24 @@ DNS-over-HTTPS with IP:
     public function configMenu()
     {
         $conf = $this->getPacConf();
-        if (!empty($conf['subdomain'])) {
-            $custom = "\ncustom:\n";
-            foreach ($conf['subdomain'] as $v) {
-                $custom .= "$v\n";
-            }
-        }
         $oc   = $this->getHashSubdomain('oc');
         $np   = $this->getHashSubdomain('np');
-        $text[] = $conf['domain'] ? "Domains:\n{$conf['domain']}\n$np.{$conf['domain']} (for naiveproxy)\n$oc.{$conf['domain']} (for openconnect)" . ($conf['adguardkey'] ? "\n{$conf['adguardkey']}.{$conf['domain']} (for adguard DoT)" : '') : $this->i18n('domain explain');
-        $ssl    = $this->expireCert();
-        $text[] = $conf['domain'] ? "\nSSL: " . ($ssl ? date('Y-m-d H:i:s', $this->expireCert()) . "\n" . $this->domainsCert() : 'none') : '';
+        if (!empty($conf['domain'])) {
+            $ssl_expiry = $this->expireCert();
+            $certs      = $this->domainsCert() ?: [];
+
+            $text[] = "<blockquote>";
+            $text[] = "Domains:";
+            $text[] = $conf['domain'] . (in_array($conf['domain'], $certs) ? ' (ssl: ' . date('Y-m-d H:i:s', $ssl_expiry) . ')' : '');
+            $text[] = 'naive ' . "$np.{$conf['domain']}" . (in_array("$np.{$conf['domain']}", $certs) ? ' (ssl: ' . date('Y-m-d H:i:s', $ssl_expiry) . ')' : '');
+            $text[] = 'openconnect ' . "$oc.{$conf['domain']}" . (in_array("$oc.{$conf['domain']}", $certs) ? ' (ssl: ' . date('Y-m-d H:i:s', $ssl_expiry) . ')' : '');
+            if (!empty($conf['adguardkey'])) {
+                $text[] = "{$conf['adguardkey']}.{$conf['domain']}" . (in_array("{$conf['adguardkey']}.{$conf['domain']}", $certs) ? ' (ssl: ' . date('Y-m-d H:i:s', $ssl_expiry) . ')' : '') . ' adguard DOT';;
+            }
+            $text[] = "</blockquote>";
+        } else {
+            $text[] = $this->i18n('domain explain');
+        }
 
         $data = [
             [
@@ -8087,8 +8291,9 @@ DNS-over-HTTPS with IP:
         }
         echo "$ip\n";
         var_dump($r = $this->request('setWebhook', [
-            'url'         => "https://$ip/tlgrm?k={$this->key}",
-            'certificate' => curl_file_create('/certs/self_public'),
+            'url'             => "https://$ip/tlgrm?k={$this->key}",
+            'certificate'     => curl_file_create('/certs/self_public'),
+            'allowed_updates' => json_encode(['*']),
         ]));
         if (!empty($r['result']) && $r['result'] == true) {
             file_put_contents('/start', 1);

app/index.php

@@ -42,6 +42,10 @@ switch (true) {
         echo "/adguard$hash/";
         break;
 
+    case preg_match('~^' . preg_quote("/pac$hash/sub") . '~', $_SERVER['REQUEST_URI']) && file_exists(__DIR__ . '/subscription.php'):
+        $bot->sub();
+        exit;
+
     // subs & pac
     case preg_match('~^' . preg_quote("/pac$hash") . '~', $_SERVER['REQUEST_URI']):
         if (!empty($t = unserialize(base64_decode(explode('/', $_SERVER['REQUEST_URI'])[2])))) { // fix sing-box import

docker-compose.yml

@@ -42,10 +42,18 @@ services:
         depends_on:
             php:
                 condition: service_healthy
+            ng:
+                condition: service_started
             ad:
                 condition: service_started
             ss:
                 condition: service_started
+            xr:
+                condition: service_started
+            oc:
+                condition: service_started
+            np:
+                condition: service_started
         env_file:
             - path: ./.env
               required: true # default
@@ -79,9 +87,6 @@ services:
             - 80:80
         hostname: nginx
         container_name: nginx-${VER}
-        depends_on:
-            up:
-                condition: service_started
         env_file:
             - path: ./.env
               required: true # default
@@ -95,6 +100,9 @@ services:
             xray:
                 ipv4_address: 10.10.1.2
         logging: *default-logging
+        depends_on:
+            php:
+                condition: service_healthy
     php:
         image: mercurykd/vpnbot-php:1.7
         build:

makefile

@@ -1,7 +1,7 @@
 b:
 	docker compose build
 u: # запуск контейнеров
-	$(eval IP := $(shell curl -s -t 1 2ip.io || curl -s -t 1 ipinfo.io/ip || curl -s -t 1 ifconfig.me))
+	$(eval IP := $(shell hostname -I | awk '{print $$1}'))
 	bash ./update/update.sh &
 	touch ./override.env ./docker-compose.override.yml
 	IP=$(IP) VER=$(shell git describe --tags) docker compose --env-file ./.env --env-file ./override.env up -d --force-recreate

mirror/docker-compose.yml

@@ -1,18 +0,0 @@
-version: "3"
-
-services:
-  socat:
-    build:
-        dockerfile: ./dockerfile
-    ports:
-      - 80:80
-      - 443:443
-      - 853:853
-      - ${TGPORT}:${TGPORT}
-      - ${SSPORT}:${SSPORT}
-      - ${SSPORT}:${SSPORT}/udp
-      - ${WGPORT}:${WGPORT}/udp
-    volumes:
-      - ./start_socat.sh:/start_socat.sh
-    command: /bin/sh /start_socat.sh
-    stop_grace_period: 1s

mirror/dockerfile

@@ -1,2 +0,0 @@
-FROM alpine:3.18
-RUN apk add socat htop net-tools

mirror/makefile

@@ -1,11 +0,0 @@
-b:
-	docker compose build --no-cache
-u:
-	docker compose up -d --build
-d:
-	docker compose down
-ps:
-	docker compose ps
-e:
-	docker compose exec socat sh
-r: d u

mirror/start_socat.sh

@@ -1,8 +1,53 @@
-socat TCP-LISTEN:80,fork TCP:{ip}:80 &
-socat TCP-LISTEN:443,fork TCP:{ip}:443 &
-socat TCP-LISTEN:853,fork TCP:{ip}:853 &
-socat TCP-LISTEN:{tg},fork TCP:{ip}:{tg} &
-socat TCP-LISTEN:{ss},fork TCP:{ip}:{ss} &
-socat UDP-LISTEN:{ss},fork UDP:{ip}:{ss} &
-socat UDP-LISTEN:{wg},fork UDP:{ip}:{wg} &
-tail -f /dev/null
+#!/bin/bash
+
+# Параметры (можно менять)
+PORTS=(80 443 853 ~tg~ ~ss~ ~wg1~ ~wg2~)          # Прослушиваемые порты
+TARGET="~ip~"               # Куда перенаправляем трафик
+TCP_CMD="socat TCP-LISTEN:{PORT},fork,reuseaddr TCP:$TARGET:{PORT}"
+UDP_CMD="socat UDP-LISTEN:{PORT},fork,reuseaddr UDP:$TARGET:{PORT}"
+
+# Проверяем, установлен ли socat
+if ! command -v socat &> /dev/null; then
+    echo "socat не установлен. Устанавливаем..."
+    if [[ -f /etc/debian_version ]]; then
+        sudo apt update && sudo apt install -y socat
+    elif [[ -f /etc/redhat-release ]]; then
+        sudo yum install -y socat
+    else
+        echo "Ошибка: Неизвестный дистрибутив. Установите socat вручную."
+        exit 1
+    fi
+fi
+
+# Проверяем, заняты ли порты (TCP и UDP)
+for PORT in "${PORTS[@]}"; do
+    # Проверка TCP
+    if ss -tulnp | grep -q ":$PORT "; then
+        PROCESS=$(ss -tulnp | grep ":$PORT " | awk '{print $7}')
+        echo "Ошибка: Порт $PORT (TCP) занят процессом: $PROCESS"
+        exit 1
+    fi
+    # Проверка UDP
+    if ss -ulnp | grep -q ":$PORT "; then
+        PROCESS=$(ss -ulnp | grep ":$PORT " | awk '{print $6}')
+        echo "Ошибка: Порт $PORT (UDP) занят процессом: $PROCESS"
+        exit 1
+    fi
+done
+
+# Запускаем socat для каждого порта (TCP и UDP)
+for PORT in "${PORTS[@]}"; do
+    # TCP
+    CMD_TCP=$(echo "$TCP_CMD" | sed "s/{PORT}/$PORT/g")
+    echo "Запуск (TCP): $CMD_TCP"
+    eval "$CMD_TCP &"  # Запускаем в фоне
+
+    # UDP
+    CMD_UDP=$(echo "$UDP_CMD" | sed "s/{PORT}/$PORT/g")
+    echo "Запуск (UDP): $CMD_UDP"
+    eval "$CMD_UDP &"  # Запускаем в фоне
+done
+
+echo "socat запущен для портов: ${PORTS[*]} (TCP и UDP)"
+echo "Трафик перенаправляется на: $TARGET"
+echo "Для остановки выполните: pkill socat"

update/update.sh

@@ -38,7 +38,7 @@ do
         curl -H "Content-Type: application/json" -X POST https://api.telegram.org/bot$key/editMessageText -d "$(cat $pwd/update/curl | sed 's/"text":"~t~"/"text": "launching the bot"/')"
         > $pwd/update/key
         > $pwd/update/curl
-        IP=$(curl -s -t 1 2ip.io || curl -s -t 1 ipinfo.io/ip || curl -s -t 1 ifconfig.me) VER=$(git describe --tags) docker compose --env-file ./.env --env-file ./override.env up -d --force-recreate
+        IP=$(hostname -I | awk '{print $1}') VER=$(git describe --tags) docker compose --env-file ./.env --env-file ./override.env up -d --force-recreate
         bash $pwd/update/update.sh &
         exit 0
     fi

version

@@ -1,3 +1,22 @@
+16.07.2025 v2.23
+- фикс зависания бота из-за пустого статуса warp
+- скрипт socat.sh для мостов /mirror
+04.07.2025 v2.23
+- фикс двойного /id
+- фикс отображения статы vless на мобилке
+- страница подписок app/subscription.php
+18.06.2025 v2.22
+- фикс определения айпи при запуске
+11.06.2025 v2.21
+- пагинация в списках
+20.05.2025 v2.20
+- коррекция главного меню
+- vless: опция обнуления статы ежемесячно
+17.05.2025 v2.19
+- фикс падения vless при одинаковом имени пользователей
+- фикс падения vless при установке таймера для выключенного пользователя
+- подсветка в меню работы процесса контейнера
+- overwrite=no для импорта клеш подписки (legiz)
 18.04.2025 v2.18
 - фикс отсутствия ssl при первом старте
 - iplimit уведомляет без отключения пользователя