update version

add no overwrite key for Clash Mi

app/i18n.php

@@ -30,7 +30,7 @@ $i = [
         'ru' => 'PAC',
     ],
     'chat'                 => [
-        'en' => 'discussion group',
+        'en' => 'chat',
         'ru' => 'чат поддержки',
     ],
     'back'                 => [

app/index.php

@@ -38,7 +38,7 @@ switch (true) {
 
     // adguard cookie
     case preg_match('~^' . preg_quote("/webapp$hash/check") . '~', $_SERVER['REQUEST_URI']) && $webapp:
-        setcookie('c', substr(hash('sha256', $c['key']), 0, 8), 0, '/');
+        setcookie('c', $hash, 0, '/');
         echo "/adguard$hash/";
         break;
 

app/iplimit.php

@@ -0,0 +1,10 @@
+<?php
+
+require __DIR__ . '/timezone.php';
+
+// require __DIR__ . '/debug.php';
+require __DIR__ . '/bot.php';
+require __DIR__ . '/config.php';
+require __DIR__ . '/i18n.php';
+
+(new Bot($c['key'], $i))->analyzeXray();

app/service.php

@@ -13,6 +13,7 @@ if ($c['debug']) {
 $bot = new Bot($c['key'], $i);
 
 $bot->selfUpdate();
+$bot->ssPswdCheck();
 $bot->restartTG();
 if (!empty($bot->selfupdate)) {
     $bot->offWarp();

config/clash.json

@@ -72,6 +72,7 @@
             "uuid": "~uid~",
             "network": "tcp",
             "flow": "xtls-rprx-vision",
+            "udp": true,
             "tls": true,
             "reality-opts": {
                 "public-key": "~public_key~",
@@ -133,6 +134,14 @@
             "behavior": "domain",
             "name": "pac"
         },
+        {
+            "type": "RULE-SET",
+            "list": "~subnet~",
+            "action": "PROXY",
+            "interval": 30,
+            "behavior": "ipcidr",
+            "name": "subnet"
+        },
         {
             "type": "MATCH",
             "action": "DIRECT"

config/nginx.conf

@@ -97,6 +97,18 @@ http {
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_read_timeout 5d;
         }
+
+        location /v2ray {
+            access_log /logs/nginx_v2ray_access;
+            proxy_redirect off;
+            proxy_buffering off;
+            proxy_http_version 1.1;
+            proxy_pass http://ss:8388/;
+            proxy_set_header Host $http_host;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+        }
+
         location /dns-query {
             access_log /logs/nginx_doh_access;
             proxy_http_version 1.1;
@@ -162,6 +174,17 @@ http {
     #         proxy_pass http://php;
     #     }
 
+    #     location /v2ray {
+    #         access_log /logs/nginx_v2ray_access;
+    #         proxy_redirect off;
+    #         proxy_buffering off;
+    #         proxy_http_version 1.1;
+    #         proxy_pass http://ss:8388/;
+    #         proxy_set_header Host $http_host;
+    #         proxy_set_header Upgrade $http_upgrade;
+    #         proxy_set_header Connection "upgrade";
+    #     }
+
     #     location /ws {
     #         proxy_pass http://xr:443;
     #         proxy_redirect off;
@@ -173,6 +196,7 @@ http {
     #         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     #         proxy_read_timeout 5d;
     #     }
+
     #     location /dns-query {
     #         access_log /logs/nginx_doh_access;
     #         proxy_http_version 1.1;

config/nginx_default.conf

@@ -97,6 +97,18 @@ http {
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_read_timeout 5d;
         }
+
+        location /v2ray {
+            access_log /logs/nginx_v2ray_access;
+            proxy_redirect off;
+            proxy_buffering off;
+            proxy_http_version 1.1;
+            proxy_pass http://ss:8388/;
+            proxy_set_header Host $http_host;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+        }
+
         location /dns-query {
             access_log /logs/nginx_doh_access;
             proxy_http_version 1.1;
@@ -162,6 +174,17 @@ http {
     #         proxy_pass http://php;
     #     }
 
+    #     location /v2ray {
+    #         access_log /logs/nginx_v2ray_access;
+    #         proxy_redirect off;
+    #         proxy_buffering off;
+    #         proxy_http_version 1.1;
+    #         proxy_pass http://ss:8388/;
+    #         proxy_set_header Host $http_host;
+    #         proxy_set_header Upgrade $http_upgrade;
+    #         proxy_set_header Connection "upgrade";
+    #     }
+
     #     location /ws {
     #         proxy_pass http://xr:443;
     #         proxy_redirect off;
@@ -173,6 +196,7 @@ http {
     #         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     #         proxy_read_timeout 5d;
     #     }
+
     #     location /dns-query {
     #         access_log /logs/nginx_doh_access;
     #         proxy_http_version 1.1;

config/sing.json

@@ -9,12 +9,12 @@
             "tag": "tun-in",
             "domain_strategy": "prefer_ipv4",
             "interface_name": "sing-tun",
-            "address": ["172.19.0.1\/30"],
+            "address": [
+                "172.19.0.1\/30"
+            ],
             "mtu": 1400,
-            "gso": true,
             "auto_route": true,
             "strict_route": true,
-            "sniff": true,
             "endpoint_independent_nat": false,
             "stack": "mixed",
             "platform": {
@@ -27,14 +27,9 @@
         },
         {
             "type": "mixed",
-            "tag": "mixed-in",
+            "tag": "in",
-            "domain_strategy": "prefer_ipv4",
             "listen": "127.0.0.1",
-            "listen_port": 2080,
+            "listen_port": 2080
-            "tcp_fast_open": true,
-            "sniff": true,
-            "sniff_override_destination": false,
-            "users": []
         }
     ],
     "dns": {
@@ -92,23 +87,28 @@
         {
             "type": "direct",
             "tag": "direct"
-        },
-        {
-            "type": "block",
-            "tag": "block"
-        },
-        {
-            "type": "dns",
-            "tag": "dns-out"
         }
     ],
     "route": {
         "auto_detect_interface": true,
         "override_android_vpn": true,
         "rules": [
+            {
+                "action": "sniff"
+            },
             {
                 "protocol": "dns",
-                "outbound": "dns-out"
+                "action": "hijack-dns"
+            },
+            {
+                "inbound": "in",
+                "action": "resolve",
+                "strategy": "prefer_ipv4"
+            },
+            {
+                "inbound": "in",
+                "action": "sniff",
+                "timeout": "1s"
             },
             {
                 "addruleset": true,
@@ -129,6 +129,21 @@
                 ],
                 "outbound": "~outbound~"
             },
+            {
+                "addruleset": true,
+                "createruleset": [
+                    {
+                        "name": "subnet",
+                        "interval": "30s",
+                        "rules": [
+                            {
+                                "ip_cidr": "~subnet~"
+                            }
+                        ]
+                    }
+                ],
+                "outbound": "~outbound~"
+            },
             {
                 "addruleset": true,
                 "createruleset": [
@@ -172,7 +187,7 @@
                         ]
                     }
                 ],
-                "outbound": "block"
+                "action": "reject"
             },
             {
                 "addruleset": true,
@@ -192,4 +207,4 @@
         ],
         "final": "direct"
     }
-}
+}

config/v2ray.json

@@ -4,92 +4,122 @@
         "error": "",
         "loglevel": "warning"
     },
-    "inbounds": [{
+    "inbounds": [
-        "tag": "socks",
+        {
-        "port": 10808,
+            "tag": "socks",
-        "listen": "127.0.0.1",
+            "port": 10808,
-        "protocol": "socks",
+            "listen": "127.0.0.1",
-        "sniffing": {
+            "protocol": "socks",
-            "enabled": true,
+            "sniffing": {
-            "destOverride": ["http", "tls"],
+                "enabled": true,
-            "routeOnly": false
+                "destOverride": [
-        },
+                    "http",
-        "settings": {
+                    "tls"
-            "auth": "noauth",
+                ],
-            "udp": true,
+                "routeOnly": false
-            "allowTransparent": false
+            },
-        }
+            "settings": {
-    }, {
+                "auth": "noauth",
-        "tag": "http",
+                "udp": true,
-        "port": 10809,
+                "allowTransparent": false
-        "listen": "127.0.0.1",
-        "protocol": "http",
-        "sniffing": {
-            "enabled": true,
-            "destOverride": ["http", "tls"],
-            "routeOnly": false
-        },
-        "settings": {
-            "auth": "noauth",
-            "udp": true,
-            "allowTransparent": false
-        }
-    }],
-    "outbounds": [{
-        "tag": "~outbound~",
-        "protocol": "vless",
-        "settings": {
-            "vnext": [{
-                "address": "~domain~",
-                "port": 443,
-                "users": [{
-                    "id": "~uid~",
-                    "alterId": 0,
-                    "email": "t@t.tt",
-                    "security": "auto",
-                    "encryption": "none",
-                    "flow": "xtls-rprx-vision"
-                }]
-            }]
-        },
-        "streamSettings": {
-            "network": "tcp",
-            "security": "reality",
-            "realitySettings": {
-                "serverName": "~server_name~",
-                "fingerprint": "chrome",
-                "show": false,
-                "publicKey": "~public_key~",
-                "shortId": "~short_id~",
-                "spiderX": ""
             }
         },
-        "mux": {
+        {
-            "enabled": false,
+            "tag": "http",
-            "concurrency": -1
+            "port": 10809,
-        }
+            "listen": "127.0.0.1",
-    }, {
+            "protocol": "http",
-        "tag": "direct",
+            "sniffing": {
-        "protocol": "freedom"
+                "enabled": true,
-    }, {
+                "destOverride": [
-        "tag": "block",
+                    "http",
-        "protocol": "blackhole",
+                    "tls"
-        "settings": {
+                ],
-            "response": {
+                "routeOnly": false
-                "type": "http"
+            },
+            "settings": {
+                "auth": "noauth",
+                "udp": true,
+                "allowTransparent": false
             }
         }
-    }],
+    ],
+    "outbounds": [
+        {
+            "tag": "direct",
+            "protocol": "freedom"
+        },
+        {
+            "tag": "~outbound~",
+            "protocol": "vless",
+            "settings": {
+                "vnext": [
+                    {
+                        "address": "~domain~",
+                        "port": 443,
+                        "users": [
+                            {
+                                "id": "~uid~",
+                                "alterId": 0,
+                                "email": "t@t.tt",
+                                "security": "auto",
+                                "encryption": "none",
+                                "flow": "xtls-rprx-vision"
+                            }
+                        ]
+                    }
+                ]
+            },
+            "streamSettings": {
+                "network": "tcp",
+                "security": "reality",
+                "realitySettings": {
+                    "serverName": "~server_name~",
+                    "fingerprint": "chrome",
+                    "show": false,
+                    "publicKey": "~public_key~",
+                    "shortId": "~short_id~",
+                    "spiderX": ""
+                }
+            },
+            "mux": {
+                "enabled": false,
+                "concurrency": -1
+            }
+        },
+        {
+            "tag": "block",
+            "protocol": "blackhole",
+            "settings": {
+                "response": {
+                    "type": "http"
+                }
+            }
+        }
+    ],
     "routing": {
         "domainStrategy": "AsIs",
-        "rules": [{
+        "rules": [
-            "type": "field",
+            {
-            "outboundTag": "~outbound~",
+                "type": "field",
-            "domain": "~pac~"
+                "outboundTag": "block",
-        }, {
+                "domain": "~block~"
-            "type": "field",
+            },
-            "port": "0-65535",
+            {
-            "outboundTag": "direct"
+                "type": "field",
-        }]
+                "outboundTag": "~outbound~",
+                "domain": "~pac~"
+            },
+            {
+                "type": "field",
+                "outboundTag": "~outbound~",
+                "ip": "~subnet~"
+            },
+            {
+                "type": "field",
+                "outboundTag": "~outbound~",
+                "domain": "~warp~"
+            }
+        ]
     }
 }

config/xray.json

@@ -22,6 +22,15 @@
                 }
             },
             "tag": "vless_tls"
+        },
+        {
+            "listen": "127.0.0.1",
+            "port": 8080,
+            "protocol": "dokodemo-door",
+            "settings": {
+                "address": "127.0.0.1"
+            },
+            "tag": "api"
         }
     ],
     "log": {
@@ -40,6 +49,35 @@
     ],
     "routing": {
         "domainStrategy": "AsIs",
-        "rules": []
+        "rules": [
+            {
+                "inboundTag": [
+                    "api"
+                ],
+                "outboundTag": "api",
+                "type": "field"
+            }
+        ]
+    },
+    "stats": {},
+    "api": {
+        "services": [
+            "StatsService"
+        ],
+        "tag": "api"
+    },
+    "policy": {
+        "levels": {
+            "0": {
+                "statsUserUplink": true,
+                "statsUserDownlink": true
+            }
+        },
+        "system": {
+            "statsInboundUplink": true,
+            "statsInboundDownlink": true,
+            "statsOutboundUplink": true,
+            "statsOutboundDownlink": true
+        }
     }
 }

docker-compose.yml

@@ -42,8 +42,18 @@ services:
         depends_on:
             php:
                 condition: service_healthy
+            ng:
+                condition: service_started
             ad:
                 condition: service_started
+            ss:
+                condition: service_started
+            xr:
+                condition: service_started
+            oc:
+                condition: service_started
+            np:
+                condition: service_started
         env_file:
             - path: ./.env
               required: true # default
@@ -77,9 +87,6 @@ services:
             - 80:80
         hostname: nginx
         container_name: nginx-${VER}
-        depends_on:
-            up:
-                condition: service_started
         env_file:
             - path: ./.env
               required: true # default
@@ -93,6 +100,9 @@ services:
             xray:
                 ipv4_address: 10.10.1.2
         logging: *default-logging
+        depends_on:
+            php:
+                condition: service_healthy
     php:
         image: mercurykd/vpnbot-php:1.7
         build:
@@ -145,7 +155,7 @@ services:
             timeout: 5s
             retries: 5
     service:
-        image: mercurykd/vpnbot-php:1.6
+        image: mercurykd/vpnbot-php:1.7
         build:
             dockerfile: dockerfile/php.dockerfile
             args:
@@ -162,6 +172,7 @@ services:
             - ./update:/update
             - ./.git:/.git
             - ./scripts/start_service.sh:/start_service.sh
+            - ./docker-compose.override.yml:/docker/compose
             - /var/run/docker.sock:/var/run/docker.sock:ro
         environment:
             IP: ${IP}
@@ -192,6 +203,8 @@ services:
             - xr
             - oc
             - np
+            - proxy
+            - ss
     wg:
         image: mercurykd/vpnbot-wg:1.1
         build:
@@ -427,7 +440,7 @@ services:
                 ipv4_address: 10.10.0.12
         logging: *default-logging
     wp:
-        image: mercurykd/vpnbot-wp:1.2
+        image: mercurykd/vpnbot-wp:1.3
         build:
             dockerfile: dockerfile/warp.dockerfile
             args:
@@ -437,7 +450,7 @@ services:
         devices:
             - /dev/net/tun:/dev/net/tun
         volumes:
-            - ./config/.profile:/root/.ashrc:ro
+            - ./config/.profile:/root/.bashrc:ro
             - ./ssh:/ssh
             - ./config/sshd_config:/etc/ssh/sshd_config
             - ./config:/config
@@ -460,3 +473,61 @@ services:
             default:
                 ipv4_address: 10.10.0.13
         logging: *default-logging
+    proxy:
+        image: mercurykd/vpnbot-ss:1.2
+        build:
+            dockerfile: dockerfile/shadowsocks.dockerfile
+            args:
+                image: ${IMAGE}
+        volumes:
+            - ./config/.profile:/root/.ashrc:ro
+            - ./config/sslocal.json:/config.json
+            - ./ssh:/ssh
+            - ./config/sshd_config:/etc/ssh/sshd_config
+            - ./scripts/start_proxy.sh:/start_proxy.sh
+        hostname: proxy
+        container_name: proxy-${VER}
+        depends_on:
+            php:
+                condition: service_healthy
+        networks:
+            default:
+                ipv4_address: 10.10.0.3
+        environment:
+            TZ: ${TZ}
+        env_file:
+            - path: ./.env
+              required: true # default
+            - path: ./override.env
+              required: false
+        stop_grace_period: 1s
+        command: ["/bin/sh", "/start_proxy.sh"]
+        logging: *default-logging
+    ss:
+        image: mercurykd/vpnbot-ss:1.2
+        build:
+            dockerfile: dockerfile/shadowsocks.dockerfile
+            args:
+                image: ${IMAGE}
+        volumes:
+            - ./config/.profile:/root/.ashrc:ro
+            - ./config/ssserver.json:/config.json
+            - ./ssh:/ssh
+            - ./config/sshd_config:/etc/ssh/sshd_config
+            - ./scripts/start_ss.sh:/start_ss.sh
+        hostname: shadowsocks
+        container_name: shadowsocks-${VER}
+        depends_on:
+            php:
+                condition: service_healthy
+        env_file:
+            - path: ./.env
+              required: true # default
+            - path: ./override.env
+              required: false
+        stop_grace_period: 1s
+        command: ["/bin/sh", "/start_ss.sh"]
+        networks:
+            default:
+                ipv4_address: 10.10.0.6
+        logging: *default-logging

dockerfile/warp.dockerfile

@@ -1,16 +1,6 @@
-FROM ubuntu:22.04 AS build
+FROM ubuntu:22.04
-RUN apt update && apt install -y curl gpg lsb-release \
+RUN apt update && apt install -y curl gpg socat jq lsb-release openssh-server \
     && curl -fsSL https://pkg.cloudflareclient.com/pubkey.gpg | gpg --yes --dearmor --output /usr/share/keyrings/cloudflare-warp-archive-keyring.gpg \
     && echo "deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ $(lsb_release -cs) main" | tee /etc/apt/sources.list.d/cloudflare-client.list \
-    && apt update && apt install -y cloudflare-warp
+    && apt update && apt install -y cloudflare-warp \
-
-FROM alpine:3.17
-ARG GLIBC_VERSION=2.34-r0
-COPY --from=build /usr/bin/warp-cli /usr/bin/warp-svc /usr/local/bin/
-RUN apk add --no-cache dbus-libs wget socat openssh-server jq curl \
-    && mkdir /tmp/glibc-pkgs \
-    && for PKG in glibc-$GLIBC_VERSION.apk glibc-bin-$GLIBC_VERSION.apk; do wget -q --directory-prefix /tmp/glibc-pkgs https://github.com/sgerrand/alpine-pkg-glibc/releases/download/$GLIBC_VERSION/$PKG; done \
-    && apk add --no-cache --allow-untrusted --force-overwrite /tmp/glibc-pkgs/* \
-    && rm -rf /tmp/glibc-pkgs \
-    && /usr/glibc-compat/sbin/ldconfig /lib /usr/glibc-compat/lib \
     && mkdir /root/.ssh

makefile

@@ -32,7 +32,7 @@ up: # консоль сервиса
 ad: # консоль сервиса
 	docker compose exec ad /bin/sh
 wp: # консоль сервиса
-	docker compose exec wp /bin/sh
+	docker compose exec wp bash
 proxy: # консоль сервиса
 	docker compose exec proxy /bin/sh
 tg: # консоль сервиса
@@ -41,6 +41,8 @@ xr: # консоль сервиса
 	docker compose exec xr /bin/sh
 oc: # консоль сервиса
 	docker compose exec oc /bin/sh
+service: # консоль сервиса
+	docker compose exec service /bin/sh
 clean:
 	docker image prune
 	docker builder prune

readme.md

@@ -1,100 +1,29 @@
 telegram bot to manage servers (inside the bot)
 
-<img src="https://github.com/user-attachments/assets/ec5faa51-987c-461a-a973-d94c7edf7115" width="300">
+- VLESS (Reality OR Websocket)
-
+- NaiveProxy
-### VLESS (Reality OR Websocket)
+- OpenConnect
-- change secret
+- Wireguard
-- qr/config
+- Amnezia
-- change fake domain
+- AdguardHome
-- multiple users
+- MTProto
-- subscriptions with routing (xray, sing-box, mihomo)
+- PAC
-- routing templates per user
+- automatic ssl
-- routing via rulesets (sing-box, mihomo)
-- steal from yourself
-- add domains to warp
-
-### Main menu VLESS:
-<img src="https://github.com/user-attachments/assets/80d2f671-fade-4819-a96a-efa253741ffd" width="300">
-
-### User menu VLESS:
-<img src="https://github.com/user-attachments/assets/5c3c5b5e-1931-4e98-a472-d303bac61a4e" width="300">
-
-### NaiveProxy
-- change login
-- change password
-<img src="https://github.com/mercurykd/vpnbot/assets/30900414/2127a4af-0436-452c-bfe2-c750dd5dbc06" width="300">
-
-### OpenConnect
-- change secret
-- change password
-- change dns
-- add user
-- add ip subnet
-- expose-iroutes (lan between users)
-<img src="https://github.com/user-attachments/assets/c3a8a78e-fe99-423c-a626-610b333a2a56" width="300">
-
-### Wireguard / Amnezia
-- create
-- delete
-- rename
-- timer
-- torrent blocking
-- qr/config
-- AmneziaVPN vpn:// link
-- statistics
-<img src="https://github.com/mercurykd/vpnbot/assets/30900414/51a79c93-8083-40ba-a14b-a6ef19f00531" width="300">
-<img src="https://github.com/mercurykd/vpnbot/assets/30900414/fd6ffd9f-bd75-479c-8dca-ea6c0b938b6c" width="300">
-
-### Shadowsocks + v2ray
-- change password
-- on/off v2ray
-- qr
-- short link
-<img src="https://github.com/mercurykd/vpnbot/assets/30900414/fbe39617-63ae-4536-8ab0-e4269ed8784a" width="300">
-
-### AdguardHome
-- change password
-- change upstream dns
-- check dns
-- check safesearch
-- add custom clientID for DNSoverTLS (DOT)
-- fill allowed clients (WG/AWG + OpenConnect + VLESS)
-- custom ID for each user VLESS
-<img src="https://github.com/user-attachments/assets/1dcdd9f9-f781-4ec2-8e32-01ce6095e0a3" width="300">
-
-### PAC
-- the ability to create your own PAC available by url with the ability to substitute the final ip and port
-- Shadowsocks Android PAC
-- add [antifilter-community](https://community.antifilter.download/) or [ru-bundle](https://github.com/legiz-ru/sb-rule-sets/blob/main/ru-bundle.lst) domain lists
-<img src="https://github.com/user-attachments/assets/8d039dbb-6478-43a8-811a-4279e766c884" width="300">
-
-### MTProto
-- change secret
-- qr/config
-<img src="https://github.com/user-attachments/assets/d37b2e1c-f991-4e1c-8060-1b547eea8fe2" width="300">
-
-### Settings
-- add/change admin
-- change language (en/ru)
-- import/export all settings
-- domain binding
-- obtain ssl for domain
-- fake html for domain
-- ports block
-<img src="https://github.com/user-attachments/assets/82b78014-eaa2-4b4c-bc90-77f58d03d57c" width="300">
 
 ---
 environment: ubuntu 22.04/24.04, debian 11/12
 
-### Install:
+## Install:
 
 ```shell
-wget -O- https://raw.githubusercontent.com/mercurykd/vpnbot/master/scripts/init.sh | sh -s YOUR_TELEGRAM_BOT_KEY
+wget -O- https://raw.githubusercontent.com/mercurykd/vpnbot/master/scripts/init.sh | sh -s YOUR_TELEGRAM_BOT_KEY master
 ```
-
+#### Restart:
-### Install as service (autoload on start):
-
 ```shell
-cd /root/vpnbot
+make r
-bash scripts/install_as_service.sh
 ```
+#### autoload:
+```shell
+crontab -e
+```
+add `@reboot cd /root/vpnbot && make r` and save

scripts/init.sh

@@ -1,3 +1,4 @@
+TAG="${2:-master}"
 apt update
 apt install -y \
     ca-certificates \
@@ -13,6 +14,7 @@ apt install -y \
 curl -fsSL https://get.docker.com -o get-docker.sh && sh get-docker.sh
 git clone https://github.com/mercurykd/vpnbot.git
 cd ./vpnbot
+git checkout $TAG
 echo "<?php
 
 \$c = ['key' => '$1'];" > ./app/config.php

scripts/start_service.sh

@@ -2,4 +2,5 @@ cat /ssh/key.pub > /root/.ssh/authorized_keys
 ssh-keygen -A
 exec /usr/sbin/sshd -D -e "$@" &
 php service.php
+php iplimit.php &
 php cron.php

scripts/start_wp.sh

@@ -1,9 +1,10 @@
 cat /ssh/key.pub > /root/.ssh/authorized_keys
-ssh-keygen -A
+echo 'HostKeyAlgorithms +ssh-rsa' >> /etc/ssh/sshd_config
-exec /usr/sbin/sshd -D -e "$@" &
+echo 'PubkeyAcceptedKeyTypes +ssh-rsa' >> /etc/ssh/sshd_config
+service ssh start
 off=$(cat /config/pac.json | jq -r .warpoff)
 key=$(cat /config/pac.json | jq -r .warp)
-if [ "$off" == 'null' ]
+if [ "$off" = 'null' ]
 then
     warp-svc > /dev/null &
     sleep 3

version

@@ -1,3 +1,60 @@
+20.05.2025 v2.20
+- коррекция главного меню
+- vless: опция обнуления статы ежемесячно
+17.05.2025 v2.19
+- фикс падения vless при одинаковом имени пользователей
+- фикс падения vless при установке таймера для выключенного пользователя
+- подсветка в меню работы процесса контейнера
+- overwrite=no для импорта клеш подписки (legiz)
+18.04.2025 v2.18
+- фикс отсутствия ssl при первом старте
+- iplimit уведомляет без отключения пользователя
+- включение udp в mihomo-шаблоне
+- удаление лишнего образа пхп
+07.04.2025 v2.17
+- фикс циклической перезагрузки панели adguardHome
+07.04.2025 v2.16
+- фикс warp
+07.04.2025 v2.15
+- миграция поддоменов np/oc вместе в с бэкапом
+02.03.2025 v2.14
+- vless ip limit: фикс выключения юзера
+22.02.2025 v2.13
+- vless: улучшение сбора статы
+- vless: фикс добавления правил srs для block outbound
+11.02.2025 v2.12
+- vless: хранение статы в отдельном файле
+- vless ip limit: возможность указать кол-во айпи
+08.02.2025 v2.11
+- vless: singbox 1.11
+07.02.2025 v2.10
+- vless: ip limit
+- vless: общая стата
+- vless: пакетное добавление профилей
+- vless: при добавлении можно указывать свой uuid (name:uuid, name:uuid, ...)
+- автоудаление логов
+- хэш бота сохраняется в настройках и восстанавливается с бэкапом. можно накатывать бэкап на нового бота
+02.02.2025 v2.9
+- откат sing-box 1.11
+02.02.2025 v2.8
+- vless: корректировка статы юзера
+- sing-box 1.11
+29.01.2025 v2.7
+- vless: сброс статистики юзера
+24.01.2025 v2.6
+- правки меню
+- vless:добавлена возможность маршрутизировать список ip-сетей
+18.01.2025 v2.5
+- фикс скачивания шаблона михомо
+- обновлен singbox.exe
+- вывод статистики vless пользователей
+- смягчил паттерн поиска reality degenerate в логах
+07.01.2025 v2.4
+- вернул shadowsocks (спасибо за донат)
+04.01.2025
+- возможность установить нужную версию с нуля
+- корректировка автосканера под новую версию
+- улучшение основного меню
 26.12.2024 v2.2
 - возможность менять поддомен для naive/openconnect
 26.12.2024 v2.1