cyclical rebooting panel adguardhome fix

new variable ~dnspath~

app/bot.php

@@ -13,6 +13,7 @@ class Bot
     public $mtu;
     public $logs;
     public $reg;
+    public $pool;
 
     public function __construct($key, $i18n)
     {
@@ -161,6 +162,9 @@ class Bot
             case preg_match('~^/switchBanIp$~', $this->input['callback'], $m):
                 $this->switchBanIp();
                 break;
+            case preg_match('~^/setIpLimit$~', $this->input['callback'], $m):
+                $this->setIpLimit();
+                break;
             case preg_match('~^/searchLogs (.+)$~', $this->input['message'], $m):
                 $this->searchLogs($m[1]);
                 break;
@@ -378,6 +382,12 @@ class Bot
             case preg_match('~^/renameXrUser (\d+)$~', $this->input['callback'], $m):
                 $this->renameXrUser($m[1]);
                 break;
+            case preg_match('~^/resetXrUser (\d+)$~', $this->input['callback'], $m):
+                $this->resetXrUser($m[1]);
+                break;
+            case preg_match('~^/resetXrStats$~', $this->input['callback'], $m):
+                $this->resetXrStats();
+                break;
             case preg_match('~^/v2ray$~', $this->input['callback'], $m):
                 $this->v2ray();
                 break;
@@ -541,6 +551,9 @@ class Bot
             case preg_match('~^/xtlsprocess(?: (\d+))?$~', $this->input['callback'], $m):
                 $this->xtlsprocess($m[1] ?: 0);
                 break;
+            case preg_match('~^/xtlssubnet(?: (\d+))?$~', $this->input['callback'], $m):
+                $this->xtlssubnet($m[1] ?: 0);
+                break;
             case preg_match('~^/xtlsrulesset(?: (\d+))?$~', $this->input['callback'], $m):
                 $this->xtlsrulesset($m[1] ?: 0);
                 break;
@@ -571,6 +584,9 @@ class Bot
             case preg_match('~^/changeFakeDomain$~', $this->input['callback'], $m):
                 $this->changeFakeDomain();
                 break;
+            case preg_match('~^/autoCleanLogs$~', $this->input['callback'], $m):
+                $this->autoCleanLogs();
+                break;
             case preg_match('~^/selfFakeDomain$~', $this->input['callback'], $m):
                 $this->selfFakeDomain();
                 break;
@@ -720,7 +736,7 @@ class Bot
             "statsOutboundDownlink" => true
         ];
         if (empty($norestart)) {
-            $c = $this->collectSession($c);
+            $this->collectSession();
             file_put_contents('/config/xray.json', json_encode($c, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
             $this->ssh('pkill xray', 'xr');
             $this->ssh('xray run -config /xray.json > /dev/null 2>&1 &', 'xr');
@@ -729,12 +745,23 @@ class Bot
         }
     }
 
-    public function collectSession($c) {
-        foreach ($c['inbounds'][0]['settings']['clients'] as $k => $v) {
-            $c['inbounds'][0]['settings']['clients'][$k]['global']['download'] += $v['session']['download'];
-            $c['inbounds'][0]['settings']['clients'][$k]['global']['upload']   += $v['session']['upload'];
+    public function collectSession() {
+        $p = $this->getXrayStats();
+        $p['global'] = [
+            'download' => $p['global']['download'] + $p['session']['download'],
+            'upload'   => $p['global']['upload'] + $p['session']['upload'],
+        ];
+        $p['session'] = [
+            'download' => 0,
+            'upload'   => 0,
+        ];
+        foreach ($p['users'] as $k => $v) {
+            $p['users'][$k]['global']['download']  += $v['session']['download'];
+            $p['users'][$k]['session']['download']  = 0;
+            $p['users'][$k]['global']['upload']    += $v['session']['upload'];
+            $p['users'][$k]['session']['upload']    = 0;
         }
-        return $c;
+        $this->setXrayStats($p);
     }
 
     public function linkMtproto()
@@ -966,7 +993,7 @@ class Bot
     {
         $r = $this->send(
             $this->input['chat'],
-            "@{$this->input['username']} enter pass",
+            "@{$this->input['username']} enter password",
             $this->input['message_id'],
             reply: 'enter password',
         );
@@ -984,7 +1011,7 @@ class Bot
             $this->input['chat'],
             "@{$this->input['username']} enter name",
             $this->input['message_id'],
-            reply: 'enter password',
+            reply: 'enter name',
         );
         $_SESSION['reply'][$r['result']['message_id']] = [
             'start_message'  => $this->input['message_id'],
@@ -1000,7 +1027,7 @@ class Bot
             $this->input['chat'],
             "@{$this->input['username']} enter name",
             $this->input['message_id'],
-            reply: 'enter password',
+            reply: 'enter name:uuid [,name:uuid]',
         );
         $_SESSION['reply'][$r['result']['message_id']] = [
             'start_message'  => $this->input['message_id'],
@@ -1310,6 +1337,7 @@ class Bot
             $this->shutdownClientXr();
             $this->checkVersion();
             $this->checkBackup($period);
+            $this->checkLogs($period);
             $this->checkCert();
             $this->autoAnalyzeLogs();
             $this->xrayStatsUser();
@@ -1320,18 +1348,33 @@ class Bot
     public function xrayStatsUser()
     {
         try {
-            $x = $this->getXray();
+            $x  = $this->getXray();
+            $td = json_decode($this->ssh('xray api stats --server=127.0.0.1:8080 -name "inbound>>>vless_tls>>>traffic>>>downlink" 2>&1', 'xr'), true)['stat']['value'] ?: 0;
+            $tu = json_decode($this->ssh('xray api stats --server=127.0.0.1:8080 -name "inbound>>>vless_tls>>>traffic>>>uplink" 2>&1', 'xr'), true)['stat']['value'] ?: 0;
+            $p  = $this->getXrayStats();
+            $p['session'] = [
+                'download' => $td,
+                'upload'   => $tu,
+            ];
             if (!empty($users = $x['inbounds'][0]['settings']['clients'])) {
+                $tmp = [];
                 foreach ($users as $k => $v) {
                     $d = json_decode($this->ssh('xray api stats --server=127.0.0.1:8080 -name "user>>>' . $v['email'] . '>>>traffic>>>downlink" 2>&1', 'xr'), true)['stat']['value'] ?: 0;
                     $u = json_decode($this->ssh('xray api stats --server=127.0.0.1:8080 -name "user>>>' . $v['email'] . '>>>traffic>>>uplink" 2>&1', 'xr'), true)['stat']['value'] ?: 0;
-                    $x['inbounds'][0]['settings']['clients'][$k]['session'] = [
-                        'download' => $d,
-                        'upload'   => $u,
+                    $tmp[$k] = [
+                        'session' => [
+                            'download' => $d,
+                            'upload'   => $u,
+                        ],
+                        'global' => [
+                            'download' => $p['users'][$k]['global']['download'],
+                            'upload'   => $p['users'][$k]['global']['upload'],
+                        ]
                     ];
                 }
-                $this->restartXray($x, norestart: 1);
+                $p['users'] = $tmp;
             }
+            $this->setXrayStats($p);
         } catch (\Throwable $th) {
         }
     }
@@ -1402,6 +1445,26 @@ class Bot
         }
     }
 
+    public function checkLogs($delta)
+    {
+        $c = $this->getPacConf();
+        if (!empty($c['autocleanlogs'])) {
+            $now = strtotime(date('Y-m-d H:i:s'));
+            [$start, $period] = explode('/', $c['autocleanlogs']);
+            $start  = strtotime(trim($start));
+            $period = strtotime(trim($period), 0);
+            if (
+                !empty($start)
+                && !empty($period)
+                && empty($this->backup)
+                && $now - $start >= 0
+                && (($now - $start) % $period < $delta)
+            ) {
+                $this->cleanLog();
+            }
+        }
+    }
+
     public function cleanQueue(): void
     {
         $r = $this->request('deleteWebhook', []);
@@ -1614,7 +1677,7 @@ class Bot
             'ocu'           => file_get_contents('/config/ocserv.passwd'),
             'ss'            => $this->getSSConfig(),
             'sl'            => $this->getSSLocalConfig(),
-
+            'xraystats'     => $this->getXrayStats(),
         ];
         return json_encode($conf, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
     }
@@ -1727,6 +1790,12 @@ class Bot
                 $this->adguardXrayClients();
                 $this->setUpstreamDomain($json['pac']['transport'] != 'Reality' ? 't' : ($json['pac']['reality']['domain'] ?: $json['xray']['inbounds'][0]['streamSettings']['realitySettings']['serverNames'][0]));
             }
+            // xraystats
+            if (!empty($json['xraystats'])) {
+                $out[] = 'update xray stats';
+                $this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
+                $this->setXrayStats($json['xraystats']);
+            }
             // ocserv
             if (!empty($json['oc'])) {
                 $out[] = 'update ocserv';
@@ -2362,6 +2431,21 @@ class Bot
         ];
     }
 
+    public function setIpLimit()
+    {
+        $r = $this->send(
+            $this->input['chat'],
+            "@{$this->input['username']} enter seconds and count ip",
+            $this->input['message_id'],
+            reply: 'enter seconds:count_ip',
+        );
+        $_SESSION['reply'][$r['result']['message_id']] = [
+            'start_message' => $this->input['message_id'],
+            'callback'      => 'switchIpLimit',
+            'args'          => [],
+        ];
+    }
+
     public function addLinkDomain()
     {
         $r = $this->send(
@@ -2693,15 +2777,15 @@ DNS-over-HTTPS with IP:
                 $this->xtlswarp();
                 break;
             case 'processlist':
-                $this->xrayUpdateRules();
                 $this->xtlsprocess();
                 break;
             case 'packagelist':
-                $this->xrayUpdateRules();
                 $this->xtlsapp();
                 break;
+            case 'subnetlist':
+                $this->xtlssubnet();
+                break;
             case 'rulessetlist':
-                $this->xrayUpdateRules();
                 $this->xtlsrulesset();
                 break;
             case 'white':
@@ -3516,8 +3600,6 @@ DNS-over-HTTPS with IP:
                             'text'          => $this->i18n('delete'),
                             'callback_data' => "/delete {$client}_$page",
                         ],
-                    ],
-                    [
                         [
                             'text'          => $this->i18n('back'),
                             'callback_data' => "/menu wg $page",
@@ -3751,6 +3833,12 @@ DNS-over-HTTPS with IP:
             case 'packagelist':
                 $dir = 'PACKAGE';
                 break;
+            case 'processlist':
+                $dir = 'PROCESS';
+                break;
+            case 'subnetlist':
+                $dir = 'SUBNET';
+                break;
             case 'rulessetlist':
                 $dir = 'rulesset';
                 break;
@@ -3797,6 +3885,22 @@ DNS-over-HTTPS with IP:
                     ],
                 ];
                 break;
+            case 'processlist':
+                $data[] = [
+                    [
+                        'text'          => $this->i18n('back'),
+                        'callback_data' => "/xtlsprocess",
+                    ],
+                ];
+                break;
+            case 'subnetlist':
+                $data[] = [
+                    [
+                        'text'          => $this->i18n('back'),
+                        'callback_data' => "/xtlssubnet",
+                    ],
+                ];
+                break;
             case 'rulessetlist':
                 $data[] = [
                     [
@@ -3944,7 +4048,25 @@ DNS-over-HTTPS with IP:
         $text[] = "Menu -> " . $this->i18n('xray') . ' -> ' . $this->i18n('routes') . ' -> process list';
 
         [$data] = $this->listPac('processlist', $page, 'xtlsprocess');
-        $p      = $this->getPacConf();
+        $data[] = [
+            [
+                'text'          => $this->i18n('back'),
+                'callback_data' => "/routes",
+            ],
+        ];
+        $this->update(
+            $this->input['chat'],
+            $this->input['message_id'],
+            implode("\n", $text ?: ['...']),
+            $data ?: false,
+        );
+    }
+
+    public function xtlssubnet($page = 0)
+    {
+        $text[] = "Menu -> " . $this->i18n('xray') . ' -> ' . $this->i18n('routes') . ' -> subnet';
+
+        [$data] = $this->listPac('subnetlist', $page, 'xtlssubnet');
         $data[] = [
             [
                 'text'          => $this->i18n('back'),
@@ -4000,7 +4122,7 @@ DNS-over-HTTPS with IP:
                 }
                 $data[] = [
                     [
-                        'text'          => $this->i18n($v ? 'on' : 'off') . ' ' . ($basename ? basename($k) . ' ' : '') . (in_array($type, ['rulessetlist', 'packagelist', 'processlist']) ? $k : idn_to_utf8($k)),
+                        'text'          => $this->i18n($v ? 'on' : 'off') . ' ' . ($basename ? basename($k) . ' ' : '') . (in_array($type, ['rulessetlist', 'packagelist', 'processlist', 'subnetlist']) ? $k : idn_to_utf8($k)),
                         'callback_data' => "/change$type " . ($i + $page * $this->limit),
                     ],
                     [
@@ -4200,12 +4322,6 @@ DNS-over-HTTPS with IP:
             'main' => [
                 'text' => implode("\n", $main ?: []),
                 'data' => [
-                    [
-                        [
-                            'text'          => $this->i18n('config'),
-                            'callback_data' => "/menu config",
-                        ],
-                    ],
                     [
                         [
                             'text'          => $this->i18n($this->getPacConf()['amnezia'] ? 'amnezia' : 'wg_title'),
@@ -4256,10 +4372,16 @@ DNS-over-HTTPS with IP:
                             'callback_data' => "/pacMenu 0",
                         ],
                     ],
+                    [
+                        [
+                            'text'          => $this->i18n('config'),
+                            'callback_data' => "/menu config",
+                        ],
+                    ],
                     [
                         [
                             'text' => $this->i18n('chat'),
-                            'url'  => "https://t.me/+Wfxg6-nrokBlMmYy",
+                            'url'  => base64_decode('aHR0cHM6Ly90Lm1lLytXZnhnNi1ucm9rQmxNbVl5'),
                         ],
                         [
                             'text' => $this->i18n('donate'),
@@ -4338,6 +4460,21 @@ DNS-over-HTTPS with IP:
         $this->ipMenu();
     }
 
+    public function switchIpLimit($limit)
+    {
+        $limit = explode(':', $limit);
+        $c = $this->getPacConf();
+        if ((int) $limit[0] <= 0) {
+            unset($c['ip_limit']);
+            unset($c['ip_count']);
+        } else {
+            $c['ip_limit'] = (int) $limit[0];
+            $c['ip_count'] = (int) $limit[1] ?: 1;
+        }
+        $this->setPacConf($c);
+        $this->xray();
+    }
+
     public function switchSilence()
     {
         $c = $this->getPacConf();
@@ -4352,12 +4489,6 @@ DNS-over-HTTPS with IP:
         $pac    = $this->getPacConf();
         $d      = count($pac['deny'] ?: []);
         $w      = count($pac['white'] ?: []);
-        $data[] = [
-            [
-                'text'          => $this->i18n('logs'),
-                'callback_data' => "/logs",
-            ],
-        ];
         $data[] = [
             [
                 'text'          => $this->i18n('autoscan') . ': ' . ($pac['autoscan'] ? $this->getTime(strtotime(($pac['autoscan_timeout'] ?: 3600) . ' seconds')) : $this->i18n('off')),
@@ -5181,10 +5312,13 @@ DNS-over-HTTPS with IP:
 
     public function delxr($i)
     {
-        $r = $this->getXray();
+        $r  = $this->getXray();
+        $st = $this->getXrayStats();
         foreach ($r['inbounds'][0]['settings']['clients'] as $k => $v) {
             if ($i == $k) {
                 unset($r['inbounds'][0]['settings']['clients'][$k]);
+                unset($st['users'][$k]);
+                $this->setXrayStats($st);
                 $this->restartXray($r);
                 $this->adguardXrayClients();
                 break;
@@ -5206,22 +5340,30 @@ DNS-over-HTTPS with IP:
         $this->menu('oc');
     }
 
-    public function addxrus($user)
+    public function addxrus($users)
     {
-        $c    = $this->getXray();
-        $p    = $this->getPacConf();
-        $uuid = trim($this->ssh('xray uuid', 'xr'));
-        $c['inbounds'][0]['settings']['clients'][] = $p['transport'] != 'Reality' ? [
-                'id'    => $uuid,
-                'email' => $user,
-            ] : [
-                'id'    => $uuid,
-                'flow'  => 'xtls-rprx-vision',
-                'email' => $user,
-        ];
+        $c     = $this->getXray();
+        $p     = $this->getPacConf();
+        $users = array_map(fn ($e) => trim($e), explode(',', $users));
+        $users = array_map(fn ($e) => explode(':', $e), $users);
+        foreach ($users as $user) {
+            $uuid = $user[1] ?: trim($this->ssh('xray uuid', 'xr'));
+            $c['inbounds'][0]['settings']['clients'][] = $p['transport'] != 'Reality' ? [
+                    'id'    => $uuid,
+                    'email' => $user[0],
+                ] : [
+                    'id'    => $uuid,
+                    'flow'  => 'xtls-rprx-vision',
+                    'email' => $user[0],
+            ];
+        }
         $this->restartXray($c);
         $this->adguardXrayClients();
-        $this->userXr(count($c['inbounds'][0]['settings']['clients']) - 1);
+        if (count($users) == 1) {
+            $this->userXr(count($c['inbounds'][0]['settings']['clients']) - 1);
+        } else {
+            $this->xray();
+        }
     }
 
     public function setTimerXr($time, $i)
@@ -5271,6 +5413,31 @@ DNS-over-HTTPS with IP:
         $this->userXr($i);
     }
 
+    public function getXrayStats()
+    {
+        return json_decode(file_get_contents('/config/xray.stats'), true) ?: [];
+    }
+
+    public function setXrayStats($x)
+    {
+        file_put_contents('/config/xray.stats', json_encode($x));
+    }
+
+    public function resetXrUser($i)
+    {
+        $c = $this->getXrayStats();
+        unset($c['users'][$i]);
+        $this->restartXray($this->getXray());
+        $this->userXr($i);
+    }
+
+    public function resetXrStats()
+    {
+        $this->restartXray($this->getXray());
+        $this->setXrayStats([]);
+        $this->xray();
+    }
+
     public function listXr($i)
     {
         $c = $this->getPacConf();
@@ -5437,14 +5604,17 @@ DNS-over-HTTPS with IP:
             <code>~pac~</code>
             <code>~package~</code>
             <code>~process~</code>
+            <code>~subnet~</code>
             <code>~block~</code>
             <code>~warp~</code>
             <code>~dns~</code>
+            <code>~dnspath~</code>
             <code>~uid~</code>
             <code>~domain~</code>
             <code>~directdomain~</code>
             <code>~cdndomain~</code>
             <code>~short_id~</code>
+            <code>~email~</code>
             <code>~public_key~</code>
             <code>~server_name~</code>
             <code>~ip~</code>
@@ -5569,6 +5739,15 @@ DNS-over-HTTPS with IP:
             $text[] = "fake domain: <code>$fake</code>";
         }
         $text[] = 'transport: ' . ($p['transport'] ?: 'Websocket');
+        $st = $this->getXrayStats();
+        $td = $this->getBytes($st['global']['download'] + $st['session']['download']);
+        $tu = $this->getBytes($st['global']['upload'] + $st['session']['upload']);
+        $data[] = [
+            [
+                'text'          => $this->i18n('reset stats') . ": ↓$td  ↑$tu",
+                'callback_data' => '/resetXrStats',
+            ],
+        ];
         $data[] = [
             [
                 'text'          => $this->i18n('main outbound name: ') . ($p['outbound'] ?: 'proxy'),
@@ -5591,6 +5770,13 @@ DNS-over-HTTPS with IP:
                 'callback_data' => "/changeTransport 1",
             ],
         ];
+        $ip_count = $p['ip_count'] ?: 1;
+        $data[] = [
+            [
+                'text'          => $this->i18n('ip limit') . ' ' . ($p['ip_limit'] ? ": {$p['ip_limit']} sec & $ip_count" : $this->i18n('off')),
+                'callback_data' => "/setIpLimit",
+            ],
+        ];
         if ($p['transport'] == 'Reality') {
             $data[] = [
                 [
@@ -5639,8 +5825,8 @@ DNS-over-HTTPS with IP:
         $page    = $page == -2 ? $all - 1 : $page;
         $clients = $page != -1 ? array_slice($clients, $page * $this->limit, $this->limit, true) : $clients;
         foreach ($clients as $k => $v) {
-            $download = $this->getBytes($v['global']['download'] + $v['session']['download']);
-            $upload   = $this->getBytes($v['global']['upload'] + $v['session']['upload']);
+            $download = $this->getBytes($st['users'][$k]['global']['download'] + $st['users'][$k]['session']['download']);
+            $upload   = $this->getBytes($st['users'][$k]['global']['upload'] + $st['users'][$k]['session']['upload']);
             $time     = $v['time'] ? $this->getTime($v['time']) : '';
             $data[]   = [
                 [
@@ -5694,9 +5880,6 @@ DNS-over-HTTPS with IP:
     {
         $text[] = "Menu -> " . $this->i18n('xray') . ' -> routes';
 
-        $p = $this->getPacConf();
-        $outbound = $p['outbound'] ?: 'proxy';
-
         $data = [
             [[
                 'text'          => $this->i18n('block'),
@@ -5710,6 +5893,10 @@ DNS-over-HTTPS with IP:
                 'text'          => 'domains',
                 'callback_data' => "/xtlsproxy",
             ]],
+            [[
+                'text'          => "subnet",
+                'callback_data' => "/xtlssubnet",
+            ]],
             [[
                 'text'          => 'process',
                 'callback_data' => "/xtlsprocess",
@@ -5777,6 +5964,79 @@ DNS-over-HTTPS with IP:
         return 'off';
     }
 
+    public function analyzeXray()
+    {
+        while (true) {
+            if (!empty($this->getPacConf()['ip_limit'])) {
+                $this->pool = [];
+                $log = '/logs/xray';
+                $r   = fopen($log, 'r');
+                fseek($r, 0, SEEK_END);
+                while (true) {
+                    $pac = $this->getPacConf();
+                    if (empty($pac['ip_limit'])) {
+                        break;
+                    }
+                    $currentPosition = ftell($r);
+                    clearstatcache();
+                    $fileSize = filesize($log);
+                    if ($fileSize > $currentPosition) {
+                        fseek($r, $currentPosition); // сброс флага feof
+                        while (!feof($r)) {
+                            $line = fgets($r);
+                            if ($line !== false) {
+                                $this->frequencyAnalyze($line, $pac);
+                            }
+                        }
+                    }
+                    sleep(1);
+                }
+                fclose($r);
+            }
+            sleep(10);
+        }
+    }
+
+    public function frequencyAnalyze($line, $pac)
+    {
+        preg_match('~(?<date>.+)\sfrom\s(?<ip>\d+\.\d+\.\d+\.\d+)(?=.+email:\s(?<email>.+))~', $line, $m);
+        if (!empty($this->pool)) {
+            foreach ($this->pool as $i => $j) {
+                if (!empty($j['ips'])) {
+                    foreach ($j['ips'] as $k => $v) {
+                        if ($v + $pac['ip_limit'] < time()) {
+                            unset($this->pool[$i]['ips'][$k]);
+                        }
+                    }
+                }
+            }
+        }
+        if (!empty($m['ip']) && !empty($m['email'])) {
+            $ip = ip2long($m['ip']);
+            if (!empty($this->pool[$m['email']]['ip']) && $this->pool[$m['email']]['ip'] != $ip) {
+                $this->pool[$m['email']]['ips'][$ip] = time();
+            }
+            if (!empty($this->pool[$m['email']]['ips']) && count($this->pool[$m['email']]['ips']) > ($pac['ip_count'] ?: 1)) {
+                $xr = $this->getXray();
+                foreach ($xr['inbounds'][0]['settings']['clients'] as $k => $v) {
+                    if (empty($v['off']) && $v['email'] == $m['email']) {
+                        require __DIR__ . '/config.php';
+                        foreach ($c['admin'] as $admin) {
+                            $this->send($admin, "vless: {$m['email']} is turned off (limit by one IP)");
+                        }
+                        unset($this->pool[$m['email']]);
+                        $this->switchXr($k, 1);
+                        $flag = 1;
+                        break;
+                    }
+                }
+            }
+            if (empty($flag)) {
+                $this->pool[$m['email']]['ip'] = $ip;
+            }
+        }
+    }
+
     public function offWarp()
     {
         $p    = $this->getPacConf();
@@ -5931,8 +6191,16 @@ DNS-over-HTTPS with IP:
         $text[] = "sing-box config: <pre><code>$si</code></pre>";
         $text[] = "mihomo config: <pre><code>$cl</code></pre>";
 
-        $text[] = "sing-box windows: <a href='$scheme://{$domain}/pac$hash?t=si&r=w&s={$c['id']}'>windows service</a>";
-
+        $text[]   = "sing-box windows: <a href='$scheme://{$domain}/pac$hash?t=si&r=w&s={$c['id']}'>windows service</a>";
+        $st       = $this->getXrayStats();
+        $download = $this->getBytes($st['users'][$i]['global']['download'] + $st['users'][$i]['session']['download']);
+        $upload   = $this->getBytes($st['users'][$i]['global']['upload'] + $st['users'][$i]['session']['upload']);
+        $data[]   = [
+            [
+                'text'          => $this->i18n('reset stats') . ": ↓$download  ↑$upload",
+                'callback_data' => "/resetXrUser $i",
+            ],
+        ];
         $data[] = [
             [
                 'text'    => $this->i18n('v2ray'),
@@ -6228,12 +6496,15 @@ DNS-over-HTTPS with IP:
             '"~warp~"'       => json_encode(array_keys(array_filter($pac['warplist'] ?: []))),
             '"~process~"'    => json_encode(array_keys(array_filter($pac['processlist'] ?: []))),
             '"~package~"'    => json_encode(array_keys(array_filter($pac['packagelist'] ?: []))),
+            '"~subnet~"'     => json_encode(array_keys(array_filter($pac['subnetlist'] ?: []))),
             '~dns~'          => "https://$domain/dns-query$hash/$uid",
+            '~dnspath~'      => "/dns-query$hash/$uid",
             '~uid~'          => $uid,
             '~domain~'       => $domain,
             '~directdomain~' => $pac['domain'],
             '~cdndomain~'    => $pac['linkdomain'],
             '~short_id~'     => $xr['inbounds'][0]['streamSettings']['realitySettings']['shortIds'][0],
+            '~email~'        => $email,
             '~public_key~'   => $pac['xray'],
             '~server_name~'  => $xr['inbounds'][0]['streamSettings']['realitySettings']['serverNames'][0],
             '~ip~'           => $this->ip,
@@ -6255,7 +6526,7 @@ DNS-over-HTTPS with IP:
                 $c['route'] = $this->createRuleSet($c['route'], $uid, $domain);
                 if (!empty($c['route']['rules'])) {
                     foreach ($c['route']['rules'] as $k => $v) {
-                        if (count($v) < 2) {
+                        if (count($v) == 1 && array_key_exists('outbound', $v)) {
                             unset($c['route']['rules'][$k]);
                         }
                     }
@@ -6337,6 +6608,9 @@ DNS-over-HTTPS with IP:
                             case 'domain':
                                 echo yaml_emit(['payload' => array_map(fn($e) => "+.$e", $v['list'])]);
                                 break;
+                            case 'ipcidr':
+                                echo yaml_emit(['payload' => array_map(fn($e) => $e, $v['list'])]);
+                                break;
 
                             default:
                                 echo yaml_emit(['payload' => array_map(fn($e) => "PROCESS-NAME,$e", $v['list'])]);
@@ -6382,7 +6656,7 @@ DNS-over-HTTPS with IP:
         if (!empty($route['rules'])) {
             foreach ($route['rules'] as $k => $v) {
                 if (!empty($v['addruleset'])) {
-                    $t[$v['outbound']] = $k;
+                    $t[$v['outbound'] ?: 'block'] = $k;
                 }
             }
             $p = $this->getPacConf();
@@ -6533,7 +6807,13 @@ DNS-over-HTTPS with IP:
 
     public function getHashBot()
     {
-        return substr(hash('sha256', $this->key), 0, 8);
+        $p = $this->getPacConf();
+        if (!empty($p['hashbot'])) {
+            return $p['hashbot'];
+        }
+        $p['hashbot'] = substr(hash('sha256', $this->key), 0, 8);
+        $this->setPacConf($p);
+        return $p['hashbot'];
     }
 
     public function cloakNginx()
@@ -6577,7 +6857,13 @@ DNS-over-HTTPS with IP:
 
     public function getHashSubdomain($subdomain)
     {
-        return $this->getPacConf()["{$subdomain}_domain"] ?: substr(hash('sha256', "$subdomain{$this->key}"), 0, 8);
+        $p = $this->getPacConf();
+        if (!empty($p["{$subdomain}_domain"])) {
+            return $p["{$subdomain}_domain"];
+        }
+        $p["{$subdomain}_domain"] = substr(hash('sha256', "$subdomain{$this->key}"), 0, 8);
+        $this->setPacConf($p);
+        return $p["{$subdomain}_domain"];
     }
 
     public function addWg($page)
@@ -6933,7 +7219,11 @@ DNS-over-HTTPS with IP:
                 'callback_data' => "/ports",
             ],
             [
-                'text'          => $this->i18n('IP ban & Logs'),
+                'text'          => $this->i18n('logs'),
+                'callback_data' => "/logs",
+            ],
+            [
+                'text'          => $this->i18n('IP ban'),
                 'callback_data' => "/ipMenu",
             ],
         ];
@@ -7129,6 +7419,7 @@ DNS-over-HTTPS with IP:
 
     public function logs()
     {
+        $p = $this->getPacConf();
         foreach (scandir('/logs/') as $k => $v) {
             if (!preg_match('~^\.~', $v)) {
                 $size   = filesize("/logs/$v");
@@ -7150,10 +7441,24 @@ DNS-over-HTTPS with IP:
                 'callback_data' => "/cleanLog",
             ],
         ];
+        $autocleanlogs = array_filter(explode('/', $p['autocleanlogs']));
+        if (!empty($autocleanlogs)) {
+            if (!empty(strtotime($autocleanlogs[0])) && !empty(strtotime($autocleanlogs[1]))) {
+                $autocleanlogs = "{$autocleanlogs[0]} start / {$autocleanlogs[1]} period";
+            } else {
+                $autocleanlogs = $this->i18n('off') . " {$p['autocleanlogs']} - wrong format";
+            }
+        }
+        $data[] = [
+            [
+                'text'          => $this->i18n('autoclean'). ': ' . ($autocleanlogs ?: $this->i18n('off')),
+                'callback_data' => "/autoCleanLogs",
+            ],
+        ];
         $data[] = [
             [
                 'text'          => $this->i18n('back'),
-                'callback_data' => "/ipMenu",
+                'callback_data' => "/menu config",
             ],
         ];
         $this->update(
@@ -7249,6 +7554,22 @@ DNS-over-HTTPS with IP:
         ];
     }
 
+    public function autoCleanLogs()
+    {
+        $r = $this->send(
+            $this->input['chat'],
+            "@{$this->input['username']} enter like: start / period",
+            $this->input['message_id'],
+            reply: 'enter like: now / 12 hours',
+        );
+        $_SESSION['reply'][$r['result']['message_id']] = [
+            'start_message'  => $this->input['message_id'],
+            'start_callback' => $this->input['callback_id'],
+            'callback'       => 'setAutoCleanLogs',
+            'args'           => [],
+        ];
+    }
+
     public function changeFakeDomain()
     {
         $r = $this->send(
@@ -7382,6 +7703,24 @@ DNS-over-HTTPS with IP:
         $this->menu('config');
     }
 
+    public function setAutoCleanLogs($text)
+    {
+        $text = trim($text);
+        $c    = $this->getPacConf();
+        if (empty($text)) {
+            $c['autocleanlogs'] = '';
+        } else {
+            [$start, $period] = explode('/', $text);
+            if (!empty(strtotime($start)) && !empty(strtotime($period))) {
+                $c['autocleanlogs'] = implode(' / ', [date('Y-m-d H:i', strtotime($start)), trim($period)]);
+            } else {
+                $this->send($this->input['from'], $this->input['message'] . ' - wrong format');
+            }
+        }
+        $this->setPacConf($c);
+        $this->logs();
+    }
+
     public function debug()
     {
         $file = __DIR__ . '/config.php';

app/i18n.php

@@ -30,7 +30,7 @@ $i = [
         'ru' => 'PAC',
     ],
     'chat'                 => [
-        'en' => 'discussion group',
+        'en' => 'chat',
         'ru' => 'чат поддержки',
     ],
     'back'                 => [

app/index.php

@@ -38,7 +38,7 @@ switch (true) {
 
     // adguard cookie
     case preg_match('~^' . preg_quote("/webapp$hash/check") . '~', $_SERVER['REQUEST_URI']) && $webapp:
-        setcookie('c', substr(hash('sha256', $c['key']), 0, 8), 0, '/');
+        setcookie('c', $hash, 0, '/');
         echo "/adguard$hash/";
         break;
 

app/iplimit.php

@@ -0,0 +1,10 @@
+<?php
+
+require __DIR__ . '/timezone.php';
+
+// require __DIR__ . '/debug.php';
+require __DIR__ . '/bot.php';
+require __DIR__ . '/config.php';
+require __DIR__ . '/i18n.php';
+
+(new Bot($c['key'], $i))->analyzeXray();

config/clash.json

@@ -133,6 +133,14 @@
             "behavior": "domain",
             "name": "pac"
         },
+        {
+            "type": "RULE-SET",
+            "list": "~subnet~",
+            "action": "PROXY",
+            "interval": 30,
+            "behavior": "ipcidr",
+            "name": "subnet"
+        },
         {
             "type": "MATCH",
             "action": "DIRECT"

config/sing.json

@@ -9,12 +9,12 @@
             "tag": "tun-in",
             "domain_strategy": "prefer_ipv4",
             "interface_name": "sing-tun",
-            "address": ["172.19.0.1\/30"],
+            "address": [
+                "172.19.0.1\/30"
+            ],
             "mtu": 1400,
-            "gso": true,
             "auto_route": true,
             "strict_route": true,
-            "sniff": true,
             "endpoint_independent_nat": false,
             "stack": "mixed",
             "platform": {
@@ -27,14 +27,9 @@
         },
         {
             "type": "mixed",
-            "tag": "mixed-in",
-            "domain_strategy": "prefer_ipv4",
+            "tag": "in",
             "listen": "127.0.0.1",
-            "listen_port": 2080,
-            "tcp_fast_open": true,
-            "sniff": true,
-            "sniff_override_destination": false,
-            "users": []
+            "listen_port": 2080
         }
     ],
     "dns": {
@@ -92,23 +87,28 @@
         {
             "type": "direct",
             "tag": "direct"
-        },
-        {
-            "type": "block",
-            "tag": "block"
-        },
-        {
-            "type": "dns",
-            "tag": "dns-out"
         }
     ],
     "route": {
         "auto_detect_interface": true,
         "override_android_vpn": true,
         "rules": [
+            {
+                "action": "sniff"
+            },
             {
                 "protocol": "dns",
-                "outbound": "dns-out"
+                "action": "hijack-dns"
+            },
+            {
+                "inbound": "in",
+                "action": "resolve",
+                "strategy": "prefer_ipv4"
+            },
+            {
+                "inbound": "in",
+                "action": "sniff",
+                "timeout": "1s"
             },
             {
                 "addruleset": true,
@@ -129,6 +129,21 @@
                 ],
                 "outbound": "~outbound~"
             },
+            {
+                "addruleset": true,
+                "createruleset": [
+                    {
+                        "name": "subnet",
+                        "interval": "30s",
+                        "rules": [
+                            {
+                                "ip_cidr": "~subnet~"
+                            }
+                        ]
+                    }
+                ],
+                "outbound": "~outbound~"
+            },
             {
                 "addruleset": true,
                 "createruleset": [
@@ -172,7 +187,7 @@
                         ]
                     }
                 ],
-                "outbound": "block"
+                "action": "reject"
             },
             {
                 "addruleset": true,
@@ -192,4 +207,4 @@
         ],
         "final": "direct"
     }
-}
+}

config/v2ray.json

@@ -110,6 +110,11 @@
                 "outboundTag": "~outbound~",
                 "domain": "~pac~"
             },
+            {
+                "type": "field",
+                "outboundTag": "~outbound~",
+                "ip": "~subnet~"
+            },
             {
                 "type": "field",
                 "outboundTag": "~outbound~",

docker-compose.yml

@@ -432,7 +432,7 @@ services:
                 ipv4_address: 10.10.0.12
         logging: *default-logging
     wp:
-        image: mercurykd/vpnbot-wp:1.2
+        image: mercurykd/vpnbot-wp:1.3
         build:
             dockerfile: dockerfile/warp.dockerfile
             args:
@@ -442,7 +442,7 @@ services:
         devices:
             - /dev/net/tun:/dev/net/tun
         volumes:
-            - ./config/.profile:/root/.ashrc:ro
+            - ./config/.profile:/root/.bashrc:ro
             - ./ssh:/ssh
             - ./config/sshd_config:/etc/ssh/sshd_config
             - ./config:/config

dockerfile/warp.dockerfile

@@ -1,16 +1,6 @@
-FROM ubuntu:22.04 AS build
-RUN apt update && apt install -y curl gpg lsb-release \
+FROM ubuntu:22.04
+RUN apt update && apt install -y curl gpg socat jq lsb-release openssh-server \
     && curl -fsSL https://pkg.cloudflareclient.com/pubkey.gpg | gpg --yes --dearmor --output /usr/share/keyrings/cloudflare-warp-archive-keyring.gpg \
     && echo "deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ $(lsb_release -cs) main" | tee /etc/apt/sources.list.d/cloudflare-client.list \
-    && apt update && apt install -y cloudflare-warp
-
-FROM alpine:3.17
-ARG GLIBC_VERSION=2.34-r0
-COPY --from=build /usr/bin/warp-cli /usr/bin/warp-svc /usr/local/bin/
-RUN apk add --no-cache dbus-libs wget socat openssh-server jq curl \
-    && mkdir /tmp/glibc-pkgs \
-    && for PKG in glibc-$GLIBC_VERSION.apk glibc-bin-$GLIBC_VERSION.apk; do wget -q --directory-prefix /tmp/glibc-pkgs https://github.com/sgerrand/alpine-pkg-glibc/releases/download/$GLIBC_VERSION/$PKG; done \
-    && apk add --no-cache --allow-untrusted --force-overwrite /tmp/glibc-pkgs/* \
-    && rm -rf /tmp/glibc-pkgs \
-    && /usr/glibc-compat/sbin/ldconfig /lib /usr/glibc-compat/lib \
+    && apt update && apt install -y cloudflare-warp \
     && mkdir /root/.ssh

makefile

@@ -32,7 +32,7 @@ up: # консоль сервиса
 ad: # консоль сервиса
 	docker compose exec ad /bin/sh
 wp: # консоль сервиса
-	docker compose exec wp /bin/sh
+	docker compose exec wp bash
 proxy: # консоль сервиса
 	docker compose exec proxy /bin/sh
 tg: # консоль сервиса

readme.md

@@ -13,8 +13,17 @@ telegram bot to manage servers (inside the bot)
 ---
 environment: ubuntu 22.04/24.04, debian 11/12
 
-### Install:
+## Install:
 
 ```shell
 wget -O- https://raw.githubusercontent.com/mercurykd/vpnbot/master/scripts/init.sh | sh -s YOUR_TELEGRAM_BOT_KEY master
 ```
+#### Restart:
+```shell
+make r
+```
+#### autoload:
+```shell
+crontab -e
+```
+add `@reboot cd /root/vpnbot && make r` and save

scripts/start_service.sh

@@ -2,4 +2,5 @@ cat /ssh/key.pub > /root/.ssh/authorized_keys
 ssh-keygen -A
 exec /usr/sbin/sshd -D -e "$@" &
 php service.php
+php iplimit.php &
 php cron.php

scripts/start_wp.sh

@@ -1,9 +1,10 @@
 cat /ssh/key.pub > /root/.ssh/authorized_keys
-ssh-keygen -A
-exec /usr/sbin/sshd -D -e "$@" &
+echo 'HostKeyAlgorithms +ssh-rsa' >> /etc/ssh/sshd_config
+echo 'PubkeyAcceptedKeyTypes +ssh-rsa' >> /etc/ssh/sshd_config
+service ssh start
 off=$(cat /config/pac.json | jq -r .warpoff)
 key=$(cat /config/pac.json | jq -r .warp)
-if [ "$off" == 'null' ]
+if [ "$off" = 'null' ]
 then
     warp-svc > /dev/null &
     sleep 3

version

@@ -1,3 +1,36 @@
+07.04.2025 v2.17
+- фикс циклической перезагрузки панели adguardHome
+07.04.2025 v2.16
+- фикс warp
+07.04.2025 v2.15
+- миграция поддоменов np/oc вместе в с бэкапом
+02.03.2025 v2.14
+- vless ip limit: фикс выключения юзера
+22.02.2025 v2.13
+- vless: улучшение сбора статы
+- vless: фикс добавления правил srs для block outbound
+11.02.2025 v2.12
+- vless: хранение статы в отдельном файле
+- vless ip limit: возможность указать кол-во айпи
+08.02.2025 v2.11
+- vless: singbox 1.11
+07.02.2025 v2.10
+- vless: ip limit
+- vless: общая стата
+- vless: пакетное добавление профилей
+- vless: при добавлении можно указывать свой uuid (name:uuid, name:uuid, ...)
+- автоудаление логов
+- хэш бота сохраняется в настройках и восстанавливается с бэкапом. можно накатывать бэкап на нового бота
+02.02.2025 v2.9
+- откат sing-box 1.11
+02.02.2025 v2.8
+- vless: корректировка статы юзера
+- sing-box 1.11
+29.01.2025 v2.7
+- vless: сброс статистики юзера
+24.01.2025 v2.6
+- правки меню
+- vless:добавлена возможность маршрутизировать список ip-сетей
 18.01.2025 v2.5
 - фикс скачивания шаблона михомо
 - обновлен singbox.exe