mercury
2172 lines
80 KiB
PHP
2172 lines
80 KiB
PHP
<?php
|
|
|
|
class Bot
|
|
{
|
|
public $input;
|
|
|
|
public function __construct($key)
|
|
{
|
|
$this->key = $key;
|
|
$this->api = "https://api.telegram.org/bot$key/";
|
|
$this->file = "https://api.telegram.org/file/bot$key/";
|
|
$this->clients = '/config/clients.json';
|
|
$this->pac = '/config/pac.json';
|
|
}
|
|
|
|
public function input()
|
|
{
|
|
$this->input_raw = $input = json_decode(file_get_contents('php://input'), true);
|
|
$this->input = [
|
|
'message' => $input['callback_query']['message']['text'] ?? $input['message']['text'] ?? $input['channel_post']['text'] ?? '',
|
|
'message_id' => $input['callback_query']['message']['message_id'] ?? $input['message']['message_id'] ?? $input['channel_post']['message_id'],
|
|
'chat' => $input['message']['chat']['id'] ?? $input['callback_query']['message']['chat']['id'] ?? $input['channel_post']['chat']['id'] ?? $input['my_chat_member']['chat']['id'],
|
|
'from' => $input['message']['from']['id'] ?? $input['inline_query']['from']['id'] ?? $input['callback_query']['from']['id'] ?? $input['channel_post']['chat']['id'] ?? $input['my_chat_member']['from']['id'],
|
|
'username' => $input['message']['from']['username'] ?? $input['inline_query']['from']['username'] ?? $input['callback_query']['from']['username'],
|
|
'query' => $input['inline_query']['query'] ?? '',
|
|
'inlid' => $input['inline_query']['id'] ?? '',
|
|
'group' => 'group' == $input['message']['chat']['type'],
|
|
'sticker_id' => $input['message']['sticker']['file_id'] ?? false,
|
|
'channel' => !empty($input['channel_post']['message_id']),
|
|
'callback' => $input['callback_query']['data'] ?? false,
|
|
'callback_id' => $input['callback_query']['id'] ?? false,
|
|
'photo' => $input['message']['photo'] ?? false,
|
|
'file_name' => $input['message']['document']['file_name'] ?? false,
|
|
'file_id' => $input['message']['document']['file_id'] ?? false,
|
|
'caption' => $input['message']['caption'] ?? false,
|
|
'reply' => $input['message']['reply_to_message']['message_id'] ?? false,
|
|
'reply_from' => $input['message']['reply_to_message']['from']['id'] ?? $input['callback_query']['message']['reply_to_message']['from']['id'] ?? false,
|
|
'reply_text' => $input['message']['reply_to_message']['text'] ?? false,
|
|
'new_member_id' => $input['my_chat_member']['new_chat_member']['user']['id'] ?? false,
|
|
'new_member_status' => $input['my_chat_member']['new_chat_member']['status'] ?? false,
|
|
];
|
|
$this->auth();
|
|
$this->session();
|
|
$this->action();
|
|
$this->callbackCheck();
|
|
}
|
|
|
|
public function auth()
|
|
{
|
|
$file = __DIR__ . '/config.php';
|
|
require $file;
|
|
if (empty($c['admin'])) {
|
|
$c['admin'] = $this->input['from'];
|
|
file_put_contents($file, "<?php\n\n\$c = " . var_export($c, true) . ";\n");
|
|
} elseif ($c['admin'] != $this->input['from']) {
|
|
$this->send($this->input['chat'], 'you are not authorized', $this->input['message_id']);
|
|
exit;
|
|
}
|
|
}
|
|
|
|
public function callbackCheck()
|
|
{
|
|
if (empty($this->callback) && !empty($this->input['callback_id'])) {
|
|
$this->answer($this->input['callback_id'], $GLOBALS['debug'] ? $this->input['callback']: false);
|
|
}
|
|
}
|
|
|
|
public function session()
|
|
{
|
|
session_id($this->input['from']);
|
|
session_start();
|
|
if (!empty($_SESSION['reply'])) {
|
|
if (empty($this->input['reply'])) {
|
|
foreach ($_SESSION['reply'] as $k => $v) {
|
|
$this->delete($this->input['chat'], $k);
|
|
}
|
|
unset($_SESSION['reply']);
|
|
}
|
|
}
|
|
}
|
|
|
|
public function sd($var, $log = false, $json = false, $raw = false)
|
|
{
|
|
if ($log) {
|
|
if ($json) {
|
|
file_put_contents('/logs/debug', json_encode($var, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
|
|
} elseif ($raw) {
|
|
file_put_contents('/logs/debug', $var);
|
|
} else {
|
|
file_put_contents('/logs/debug', var_export($var, true));
|
|
}
|
|
}
|
|
$this->send($this->input['chat'], var_export($var, true), $this->input['message_id']);
|
|
}
|
|
|
|
public function action()
|
|
{
|
|
switch (true) {
|
|
// смена айпи сервера
|
|
case preg_match('~^/menu$~', $this->input['message'], $m):
|
|
case preg_match('~^/start$~', $this->input['message'], $m):
|
|
case preg_match('~^/menu$~', $this->input['callback'], $m):
|
|
case preg_match('~^/menu (?P<type>addpeer) (?P<arg>(?:-)?\d+)$~', $this->input['callback'], $m):
|
|
case preg_match('~^/menu (?P<type>wg) (?P<arg>(?:-)?\d+)$~', $this->input['callback'], $m):
|
|
case preg_match('~^/menu (?P<type>client) (?P<arg>\d+(?:_(?:-)?\d+)?)$~', $this->input['callback'], $m):
|
|
case preg_match('~^/menu (?P<type>pac)$~', $this->input['callback'], $m):
|
|
case preg_match('~^/menu (?P<type>adguard)$~', $this->input['callback'], $m):
|
|
case preg_match('~^/menu (?P<type>config)$~', $this->input['callback'], $m):
|
|
case preg_match('~^/menu (?P<type>ss)$~', $this->input['callback'], $m):
|
|
case preg_match('~^/menu (?P<type>subzoneslist|reverselist|includelist|excludelist) (?P<arg>(?:-)?\d+)$~', $this->input['callback'], $m):
|
|
$this->menu(type: $m['type'] ?? false, arg: $m['arg'] ?? false);
|
|
break;
|
|
case preg_match('~^/selfssl$~', $this->input['callback'], $m):
|
|
$this->selfssl();
|
|
break;
|
|
case preg_match('~^/sspswd$~', $this->input['callback'], $m):
|
|
$this->sspswd();
|
|
break;
|
|
case preg_match('~^/v2ray$~', $this->input['callback'], $m):
|
|
$this->v2ray();
|
|
break;
|
|
case preg_match('~^/checkdns$~', $this->input['callback'], $m):
|
|
$this->checkdns();
|
|
break;
|
|
case preg_match('~^/resetnginx$~', $this->input['callback'], $m):
|
|
$this->resetnginx();
|
|
break;
|
|
case preg_match('~^/adguardpsswd$~', $this->input['callback'], $m):
|
|
$this->adguardpsswd();
|
|
break;
|
|
case preg_match('~^/adguardreset$~', $this->input['callback'], $m):
|
|
$this->adguardreset();
|
|
break;
|
|
case preg_match('~^/addupstream$~', $this->input['callback'], $m):
|
|
$this->addupstream();
|
|
break;
|
|
case preg_match('~^/checkurl$~', $this->input['callback'], $m):
|
|
$this->checkurl();
|
|
break;
|
|
case preg_match('~^/setSSL (\w+)$~', $this->input['callback'], $m):
|
|
$this->setSSL($m[1]);
|
|
break;
|
|
case preg_match('~^/deletessl$~', $this->input['callback'], $m):
|
|
$this->deleteSSL();
|
|
break;
|
|
case preg_match('~^/download (\d+)$~', $this->input['callback'], $m):
|
|
$this->downloadPeer($m[1]);
|
|
break;
|
|
case preg_match('~^/qr (\d+)$~', $this->input['callback'], $m):
|
|
$this->qrPeer($m[1]);
|
|
break;
|
|
case preg_match('~^/delupstream (\d+)$~', $this->input['callback'], $m):
|
|
$this->delupstream($m[1]);
|
|
break;
|
|
case preg_match('~^/delete (?P<arg>\d+(?:_(?:-)?\d+)?)$~', $this->input['callback'], $m):
|
|
$this->deletePeer(...explode('_', $m['arg']));
|
|
break;
|
|
case preg_match('~^/deldomain$~', $this->input['callback'], $m):
|
|
$this->delDomain();
|
|
break;
|
|
case preg_match('~^/(?P<action>change|delete)(?P<typelist>subzoneslist|reverselist|includelist|excludelist) (?P<arg>[^\s]+(?:_(?:-)?\d+)?)$~', $this->input['callback'], $m):
|
|
$this->listPacChange($m['typelist'], $m['action'], ...explode('_', $m['arg']));
|
|
break;
|
|
case preg_match('~^/paczapret$~', $this->input['callback'], $m):
|
|
$this->pacZapret();
|
|
break;
|
|
case preg_match('~^/pacupdate$~', $this->input['callback'], $m):
|
|
$this->pacUpdate();
|
|
break;
|
|
case preg_match('~^/add$~', $this->input['callback'], $m):
|
|
$this->addPeer(); // добавление клиента "весь траффик"
|
|
break;
|
|
case preg_match('~^/add_ips$~', $this->input['callback'], $m):
|
|
$this->addips(); // ответ с предложением ввести список подсетей
|
|
break;
|
|
case preg_match('~^/domain$~', $this->input['callback'], $m):
|
|
$this->domain();
|
|
break;
|
|
case preg_match('~^/include (\d+)$~', $this->input['callback'], $m):
|
|
$this->include($m[1]);
|
|
break;
|
|
case preg_match('~^/exclude (\d+)$~', $this->input['callback'], $m):
|
|
$this->exclude($m[1]);
|
|
break;
|
|
case preg_match('~^/reverse (\d+)$~', $this->input['callback'], $m):
|
|
$this->reverse($m[1]);
|
|
break;
|
|
case preg_match('~^/subzones (\d+)$~', $this->input['callback'], $m):
|
|
$this->subzones($m[1]);
|
|
break;
|
|
case preg_match('~^/showreset$~', $this->input['callback'], $m):
|
|
$this->showreset();
|
|
break;
|
|
case preg_match('~^/reset$~', $this->input['callback'], $m):
|
|
$this->reset();
|
|
break;
|
|
case preg_match('~^/proxy$~', $this->input['callback'], $m):
|
|
$this->proxy();
|
|
break;
|
|
case preg_match('~^/showpac$~', $this->input['callback'], $m):
|
|
$this->showpac();
|
|
break;
|
|
case preg_match('~^/export$~', $this->input['callback'], $m):
|
|
$this->export();
|
|
break;
|
|
case preg_match('~^/import$~', $this->input['callback'], $m):
|
|
$this->import();
|
|
break;
|
|
case preg_match('~^/rename (?P<arg>\d+(?:_(?:-)?\d+)?)$~', $this->input['callback'], $m):
|
|
$this->rename(...explode('_', $m['arg']));
|
|
break;
|
|
case !empty($this->input['reply']):
|
|
$this->reply();
|
|
break;
|
|
}
|
|
}
|
|
|
|
public function checkurl()
|
|
{
|
|
$r = $this->send(
|
|
$this->input['chat'],
|
|
"@{$this->input['username']} enter url",
|
|
$this->input['message_id'],
|
|
reply: 'enter url',
|
|
);
|
|
$_SESSION['reply'][$r['result']['message_id']] = [
|
|
'start_message' => $this->input['message_id'],
|
|
'start_callback' => $this->input['callback_id'],
|
|
'callback' => 'urlcheck',
|
|
'args' => [],
|
|
];
|
|
}
|
|
|
|
public function urlcheck($url)
|
|
{
|
|
if (file_exists(__DIR__ . '/zapretlists/mpac')) {
|
|
$domains = explode("\n", file_get_contents(__DIR__ . '/zapretlists/mpac'));
|
|
foreach ($domains as $k => $v) {
|
|
if (preg_match("~$v~", $url)) {
|
|
$flag = 1;
|
|
break;
|
|
}
|
|
}
|
|
if ($flag) {
|
|
$text = "$url\nmatch";
|
|
} else {
|
|
$text = "$url\nnot match";
|
|
}
|
|
} else {
|
|
$text = 'no file, update pac';
|
|
}
|
|
$this->update($this->input['chat'], $this->input['message_id'], $text);
|
|
sleep(3);
|
|
$this->menu('pac');
|
|
}
|
|
|
|
public function sspswd()
|
|
{
|
|
$r = $this->send(
|
|
$this->input['chat'],
|
|
"@{$this->input['username']} enter password",
|
|
$this->input['message_id'],
|
|
reply: 'enter password',
|
|
);
|
|
$_SESSION['reply'][$r['result']['message_id']] = [
|
|
'start_message' => $this->input['message_id'],
|
|
'start_callback' => $this->input['callback_id'],
|
|
'callback' => 'sspwdch',
|
|
'args' => [],
|
|
];
|
|
}
|
|
|
|
public function sspwdch($pass)
|
|
{
|
|
$this->ssh('pkill ssserver', 'ss');
|
|
$c = $this->getSSConfig();
|
|
$c['password'] = $pass;
|
|
file_put_contents('/config/ssserver.json', json_encode($c, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
|
|
$this->ssh('/ssserver -v -d -c /config.json', 'ss');
|
|
$this->menu('ss');
|
|
}
|
|
|
|
public function v2ray()
|
|
{
|
|
$this->ssh('pkill sslocal', 'proxy');
|
|
$this->ssh('pkill ssserver', 'ss');
|
|
$c = $this->getSSConfig();
|
|
$l = $this->getSSLocalConfig();
|
|
$domain = $this->getPacConf()['domain'];
|
|
if ($c['plugin']) {
|
|
unset($c['plugin']);
|
|
unset($c['plugin_opts']);
|
|
unset($l['plugin']);
|
|
unset($l['plugin_opts']);
|
|
$l['server'] = 'ss';
|
|
$l['server_port'] = 8388;
|
|
} else {
|
|
$c['plugin'] = 'v2ray-plugin';
|
|
$c['plugin_opts'] = 'server;loglevel=none';
|
|
$l['server'] = 'ng';
|
|
$l['server_port'] = 443;
|
|
$l['plugin'] = 'v2ray-plugin';
|
|
$l['plugin_opts'] = "tls;fast-open;path=/v2ray;host=$domain";
|
|
}
|
|
file_put_contents('/config/ssserver.json', json_encode($c, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
|
|
file_put_contents('/config/sslocal.json', json_encode($l, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
|
|
$this->ssh('/ssserver -v -d -c /config.json', 'ss');
|
|
$this->ssh('/sslocal -v -d -c /config.json', 'proxy');
|
|
$this->menu('ss');
|
|
}
|
|
|
|
public function rename(int $client, $page)
|
|
{
|
|
$r = $this->send(
|
|
$this->input['chat'],
|
|
"@{$this->input['username']} enter the title:",
|
|
$this->input['message_id'],
|
|
reply: 'enter the title:',
|
|
);
|
|
$_SESSION['reply'][$r['result']['message_id']] = [
|
|
'start_message' => $this->input['message_id'],
|
|
'start_callback' => $this->input['callback_id'],
|
|
'callback' => 'renameClient',
|
|
'args' => [$client, $page],
|
|
];
|
|
}
|
|
|
|
public function renameClient(string $name, int $client)
|
|
{
|
|
$clients = $this->readClients();
|
|
$clients[$client]['interface']['## name'] = $name;
|
|
$this->saveClients($clients);
|
|
$server = $this->readConfig();
|
|
foreach ($server['peers'] as $k => $v) {
|
|
if ($v['AllowedIPs'] == $clients[$client]['interface']['Address']) {
|
|
$server['peers'][$k]['## name'] = $name;
|
|
}
|
|
}
|
|
$this->restartWG($this->createConfig($server));
|
|
$this->menu('client', implode('_', $_SESSION['reply'][$this->input['reply']]['args']));
|
|
}
|
|
|
|
public function readClients():array
|
|
{
|
|
return json_decode(file_get_contents($this->clients), true) ?: [];
|
|
}
|
|
|
|
public function export()
|
|
{
|
|
$conf = [
|
|
'wg' => [
|
|
'server' => $this->readConfig(),
|
|
'clients' => json_decode(file_get_contents($this->clients), true) ?: [],
|
|
],
|
|
'ss' => $this->getSSConfig(),
|
|
'sl' => $this->getSSLocalConfig(),
|
|
'ad' => yaml_parse_file('/config/adguard/AdGuardHome.yaml'),
|
|
'pac' => $this->getPacConf(),
|
|
'ssl' => [
|
|
'private' => file_exists('/certs/cert_private') ? file_get_contents('/certs/cert_private') : false,
|
|
'public' => file_exists('/certs/cert_public') ? file_get_contents('/certs/cert_public') : false,
|
|
],
|
|
'nginx' => file_get_contents('/config/nginx.conf')
|
|
|
|
];
|
|
$this->upload(date('d_m_Y_H_i') . '.json', json_encode($conf, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
|
|
}
|
|
|
|
public function import()
|
|
{
|
|
$r = $this->send(
|
|
$this->input['chat'],
|
|
"@{$this->input['username']} send the export file:",
|
|
$this->input['message_id'],
|
|
reply: 'send the export file:',
|
|
);
|
|
$_SESSION['reply'][$r['result']['message_id']] = [
|
|
'start_message' => $this->input['message_id'],
|
|
'start_callback' => $this->input['callback_id'],
|
|
'callback' => 'importFile',
|
|
'args' => [],
|
|
];
|
|
}
|
|
|
|
public function importFile()
|
|
{
|
|
$r = $this->request('getFile', ['file_id' => $this->input['file_id']]);
|
|
$json = json_decode(file_get_contents($this->file . $r['result']['file_path']), true);
|
|
if (empty($json) || !is_array($json)) {
|
|
$this->answer($this->input['callback_id'], 'error', true);
|
|
} else {
|
|
// wg
|
|
if (!empty($json['wg'])) {
|
|
$out[] = 'update wireguard';
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$this->saveClients($json['wg']['clients']);
|
|
$this->restartWG($this->createConfig($json['wg']['server']));
|
|
}
|
|
// pac
|
|
if (!empty($json['pac'])) {
|
|
$out[] = 'update pac';
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$this->setPacConf($json['pac']);
|
|
}
|
|
// ad
|
|
if (!empty($json['ad'])) {
|
|
$out[] = 'update adguard';
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$this->ssh("/AdGuardHome/AdGuardHome -s stop 2>&1", 'ad');
|
|
yaml_emit_file('/config/adguard/AdGuardHome.yaml', $json['ad']);
|
|
$this->ssh("/AdGuardHome/AdGuardHome -s start 2>&1", 'ad');
|
|
}
|
|
// ss
|
|
if (!empty($json['ss'])) {
|
|
$out[] = 'update shadowsocks server';
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$this->ssh('pkill ssserver', 'ss');
|
|
file_put_contents('/config/ssserver.json', json_encode($json['ss'], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
|
|
$this->ssh('/ssserver -v -d -c /config.json', 'ss');
|
|
}
|
|
// sl
|
|
if (!empty($json['sl'])) {
|
|
$out[] = 'update shadowsocks proxy';
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$this->ssh('pkill sslocal', 'proxy');
|
|
file_put_contents('/config/sslocal.json', json_encode($json['sl'], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
|
|
$this->ssh('/sslocal -v -d -c /config.json', 'proxy');
|
|
}
|
|
// certs
|
|
if (!empty($json['ssl'])) {
|
|
$out[] = 'update certificates';
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
file_put_contents('/certs/cert_private', $json['ssl']['private']);
|
|
file_put_contents('/certs/cert_public', $json['ssl']['public']);
|
|
}
|
|
// nginx
|
|
if (!empty($json['nginx'])) {
|
|
$out[] = 'reload nginx';
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
file_put_contents('/config/nginx.conf', $json['nginx']);
|
|
$this->ssh("nginx -s reload 2>&1", 'ng');
|
|
}
|
|
$out[] = 'end import';
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
sleep(3);
|
|
$this->menu();
|
|
}
|
|
}
|
|
|
|
public function downloadPeer($client)
|
|
{
|
|
$client = $this->readClients()[$client];
|
|
$name = $this->getName($client['interface']);
|
|
$code = $this->createConfig($client);
|
|
$this->upload(preg_replace(['~\s+~', '~\(|\)~'], ['_', ''], $name) . ".conf", $code);
|
|
}
|
|
|
|
public function qrPeer($client)
|
|
{
|
|
$client = $this->readClients()[$client];
|
|
$name = $this->getName($client['interface']);
|
|
$code = $this->createConfig($client);
|
|
$qr = preg_replace(['~\s+~', '~\(~', '~\)~'], ['_', '\(', '\)'], $name);
|
|
$qr_file = __DIR__ . "/qr/$qr.png";
|
|
exec("qrencode -t png -o $qr_file '$code'");
|
|
$r = $this->sendPhoto(
|
|
$this->input['chat'],
|
|
curl_file_create($qr_file),
|
|
$name,
|
|
);
|
|
unlink($qr_file);
|
|
}
|
|
|
|
public function upload($name, $code)
|
|
{
|
|
$path = "/logs/$name";
|
|
file_put_contents($path, $code);
|
|
$this->sendFile(
|
|
$this->input['chat'],
|
|
curl_file_create($path),
|
|
);
|
|
unlink($path);
|
|
}
|
|
|
|
public function proxy()
|
|
{
|
|
$proxy = trim($this->ssh("getent hosts proxy | awk '{ print $1 }'"));
|
|
$this->createPeer("$proxy/32", 'proxy');
|
|
}
|
|
|
|
public function change_server_ip($ip)
|
|
{
|
|
$conf = $this->readConfig();
|
|
$conf['interface']['Address'] = $ip;
|
|
$this->restartWG($this->createConfig($conf));
|
|
}
|
|
|
|
public function reply()
|
|
{
|
|
if (!empty($_SESSION['reply'][$this->input['reply']])) {
|
|
$this->delete($this->input['chat'], $this->input['reply']);
|
|
$this->delete($this->input['chat'], $this->input['message_id']);
|
|
$callback = $_SESSION['reply'][$this->input['reply']]['callback'];
|
|
$this->input['message_id'] = $this->input['callback_id'] = $_SESSION['reply'][$this->input['reply']]['start_message'];
|
|
$this->{$callback}($this->input['message'], ...$_SESSION['reply'][$this->input['reply']]['args']);
|
|
$this->answer($_SESSION['reply'][$this->input['reply']]['start_message']);
|
|
unset($_SESSION['reply'][$this->input['reply']]);
|
|
}
|
|
}
|
|
|
|
public function addDomain($domain)
|
|
{
|
|
$domain = trim($domain);
|
|
if (!empty($domain)) {
|
|
$conf = $this->getPacConf();
|
|
$conf['domain'] = idn_to_ascii($domain);
|
|
$nginx = file_get_contents('/config/nginx.conf');
|
|
$t = preg_replace('/server_name([^\n]+)?/', "server_name {$conf['domain']};", $nginx);
|
|
preg_match_all('~#-domain.+?#-domain~s', $t, $m);
|
|
foreach ($m[0] as $k => $v) {
|
|
$t = preg_replace('~#-domain.+?#-domain~s', $this->uncomment($v, 'domain'), $t, 1);
|
|
}
|
|
file_put_contents('/config/nginx.conf', $t);
|
|
$u = $this->ssh("nginx -t 2>&1", 'ng');
|
|
$out[] = $u;
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
if (preg_match('~test is successful~', $u)) {
|
|
$out[] = $this->ssh("nginx -s reload 2>&1", 'ng');
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$this->setPacConf($conf);
|
|
} else {
|
|
file_put_contents('/config/nginx.conf', $nginx);
|
|
}
|
|
}
|
|
sleep(3);
|
|
$this->menu('config');
|
|
}
|
|
|
|
public function comment($text, $tag)
|
|
{
|
|
$text = explode("\n", $text);
|
|
foreach ($text as $k => $v) {
|
|
if (preg_match("~##$tag~", $v)) {
|
|
$text[$k] = "#-$tag";
|
|
continue;
|
|
}
|
|
$text[$k] = "#$v";
|
|
}
|
|
return implode("\n", $text);
|
|
}
|
|
|
|
public function uncomment($text, $tag)
|
|
{
|
|
$text = explode("\n", $text);
|
|
foreach ($text as $k => $v) {
|
|
if (preg_match("~#-$tag~", $v)) {
|
|
$text[$k] = "##$tag";
|
|
continue;
|
|
}
|
|
$text[$k] = preg_replace('~#~', '', $v, 1);
|
|
}
|
|
return implode("\n", $text);
|
|
}
|
|
|
|
public function deleteSSL($notmenu = false)
|
|
{
|
|
$nginx = file_get_contents('/config/nginx.conf');
|
|
$t = preg_replace("/#~[^\s]+/", '#~', $nginx);
|
|
preg_match_all('~##ssl.+?##ssl~s', $t, $m);
|
|
foreach ($m[0] as $k => $v) {
|
|
$t = preg_replace('~##ssl.+?##ssl~s', $this->comment($v, 'ssl'), $t, 1);
|
|
}
|
|
file_put_contents('/config/nginx.conf', $t);
|
|
$u = $this->ssh("nginx -t 2>&1", 'ng');
|
|
$this->update($this->input['chat'], $this->input['message_id'], $u);
|
|
if (preg_match('~test is successful~', $u)) {
|
|
$u .= $this->ssh("nginx -s reload 2>&1", 'ng');
|
|
$this->update($this->input['chat'], $this->input['message_id'], $u);
|
|
unlink('/certs/cert_private');
|
|
unlink('/certs/cert_public');
|
|
sleep(3);
|
|
} else {
|
|
file_put_contents('/config/nginx.conf', $nginx);
|
|
}
|
|
if (!$notmenu) {
|
|
$this->menu('config');
|
|
}
|
|
}
|
|
|
|
public function updateUnitInitConfig()
|
|
{
|
|
$unit = $this->controlUnit('config');
|
|
file_put_contents('/config/unit.json', $unit);
|
|
}
|
|
|
|
public function setSSL($name)
|
|
{
|
|
$conf = $this->getPacConf();
|
|
switch ($name) {
|
|
case 'letsencrypt':
|
|
$out[] = 'Install certificate:';
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
exec("certbot certonly -n --agree-tos --email mail@{$conf['domain']} -d {$conf['domain']} --webroot -w /certs/ 2>&1", $out, $code);
|
|
if ($code > 0) {
|
|
$this->send($this->input['chat'], "ERROR\n" . implode("\n", $out));
|
|
break;
|
|
}
|
|
$out[] = 'Generate bundle';
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$bundle = file_get_contents("/etc/letsencrypt/live/{$conf['domain']}/privkey.pem") . file_get_contents("/etc/letsencrypt/live/{$conf['domain']}/fullchain.pem");
|
|
break;
|
|
case 'self':
|
|
$r = $this->request('getFile', ['file_id' => $this->input['file_id']]);
|
|
$bundle = file_get_contents($this->file . $r['result']['file_path']);
|
|
break;
|
|
}
|
|
if (preg_match('~[^\s]+BEGIN PRIVATE KEY.+?END PRIVATE KEY[^\s]+~s', $bundle, $m)) {
|
|
file_put_contents('/certs/cert_private', $m[0]);
|
|
file_put_contents('/certs/cert_public', preg_replace('~[^\s]+BEGIN PRIVATE KEY.+?END PRIVATE KEY[^\s]+~s', '', $bundle));
|
|
$nginx = file_get_contents('/config/nginx.conf');
|
|
$t = preg_replace('/#~([^\n]+)?/', "#~$name", $nginx);
|
|
preg_match_all('~#-ssl.+?#-ssl~s', $t, $m);
|
|
foreach ($m[0] as $k => $v) {
|
|
$t = preg_replace('~#-ssl.+?#-ssl~s', $this->uncomment($v, 'ssl'), $t, 1);
|
|
}
|
|
file_put_contents('/config/nginx.conf', $t);
|
|
$u = $this->ssh("nginx -t 2>&1", 'ng');
|
|
$out[] = $u;
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
if (preg_match('~test is successful~', $u)) {
|
|
$out[] = $this->ssh("nginx -s reload 2>&1", 'ng');
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
} else {
|
|
file_put_contents('/config/nginx.conf', $nginx);
|
|
}
|
|
} else {
|
|
$this->update($this->input['chat'], $this->input['message_id'], "wrong format key");
|
|
}
|
|
sleep(3);
|
|
$this->menu('config');
|
|
}
|
|
|
|
public function controlUnit($url, $method = 'GET', $json = false, $bundle = false)
|
|
{
|
|
$ch = curl_init();
|
|
$opt = [
|
|
CURLOPT_CUSTOMREQUEST => $method,
|
|
CURLOPT_URL => "http://localhost/$url",
|
|
CURLOPT_RETURNTRANSFER => 1,
|
|
CURLOPT_UNIX_SOCKET_PATH => '/var/run/control.unit.sock',
|
|
CURLOPT_TIMEOUT => 10,
|
|
];
|
|
if ($json) {
|
|
$opt[CURLOPT_POSTFIELDS] = $json;
|
|
}
|
|
if ($bundle) {
|
|
$opt[CURLOPT_POSTFIELDS] = ['file' => new CURLStringFile($bundle, 'bundle.pem', 'text/plain')];
|
|
}
|
|
curl_setopt_array($ch, $opt);
|
|
$r = curl_exec($ch);
|
|
curl_close($ch);
|
|
return $r ?: 'lost connect to unit';
|
|
}
|
|
|
|
public function delDomain()
|
|
{
|
|
$this->deleteSSL(1);
|
|
$conf = $this->getPacConf();
|
|
unset($conf['domain']);
|
|
$nginx = $t = file_get_contents('/config/nginx.conf');
|
|
preg_match_all('~##domain.+?##domain~s', $t, $m);
|
|
foreach ($m[0] as $k => $v) {
|
|
$t = preg_replace('~##domain.+?##domain~s', $this->comment($v, 'domain'), $t, 1);
|
|
}
|
|
file_put_contents('/config/nginx.conf', $t);
|
|
$u = $this->ssh("nginx -t 2>&1", 'ng');
|
|
$out[] = $u;
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
if (preg_match('~test is successful~', $u)) {
|
|
$out[] = $this->ssh("nginx -s reload 2>&1", 'ng');
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$this->setPacConf($conf);
|
|
} else {
|
|
file_put_contents('/config/nginx.conf', $nginx);
|
|
}
|
|
$this->menu('config');
|
|
}
|
|
|
|
public function addips()
|
|
{
|
|
$r = $this->send(
|
|
$this->input['chat'],
|
|
"@{$this->input['username']} list subnets separated by commas",
|
|
$this->input['message_id'],
|
|
reply: 'list subnets separated by commas',
|
|
);
|
|
$_SESSION['reply'][$r['result']['message_id']] = [
|
|
'start_message' => $this->input['message_id'],
|
|
'callback' => 'createPeer',
|
|
'args' => ['subnet'],
|
|
];
|
|
}
|
|
|
|
public function getPacConf()
|
|
{
|
|
return json_decode(file_get_contents($this->pac), true);
|
|
}
|
|
|
|
public function setPacConf(array $conf)
|
|
{
|
|
return file_put_contents($this->pac, json_encode($conf, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
|
|
}
|
|
|
|
public function domain()
|
|
{
|
|
$r = $this->send(
|
|
$this->input['chat'],
|
|
"@{$this->input['username']} enter domain",
|
|
$this->input['message_id'],
|
|
reply: 'enter domain',
|
|
);
|
|
$_SESSION['reply'][$r['result']['message_id']] = [
|
|
'start_message' => $this->input['message_id'],
|
|
'callback' => 'addDomain',
|
|
'args' => [],
|
|
];
|
|
}
|
|
|
|
public function selfssl()
|
|
{
|
|
$r = $this->send(
|
|
$this->input['chat'],
|
|
"@{$this->input['username']} send file with your certificate chain and private key <code>cat key.pem ca.pem cert.pem</code>",
|
|
$this->input['message_id'],
|
|
reply: 'send file with your certificate chain and private key',
|
|
);
|
|
$_SESSION['reply'][$r['result']['message_id']] = [
|
|
'start_message' => $this->input['message_id'],
|
|
'callback' => 'selfsslInstall',
|
|
'args' => [],
|
|
];
|
|
}
|
|
|
|
public function resetnginx()
|
|
{
|
|
$nginx = file_get_contents('/config/nginx.conf');
|
|
$default = file_get_contents('/config/nginx_default.conf');
|
|
file_put_contents('/config/nginx.conf', $default);
|
|
$u = $this->ssh("nginx -t 2>&1", 'ng');
|
|
$out[] = $u;
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
if (preg_match('~test is successful~', $u)) {
|
|
$out[] = $this->ssh("nginx -s reload 2>&1", 'ng');
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$conf = $this->getPacConf();
|
|
unset($conf['domain']);
|
|
$this->setPacConf($conf);
|
|
} else {
|
|
file_put_contents('/config/nginx.conf', $nginx);
|
|
}
|
|
sleep(5);
|
|
$this->menu('config');
|
|
}
|
|
|
|
public function adguardpsswd()
|
|
{
|
|
$r = $this->send(
|
|
$this->input['chat'],
|
|
"@{$this->input['username']} enter password",
|
|
$this->input['message_id'],
|
|
reply: 'enter password',
|
|
);
|
|
$_SESSION['reply'][$r['result']['message_id']] = [
|
|
'start_message' => $this->input['message_id'],
|
|
'callback' => 'chpsswd',
|
|
'args' => [],
|
|
];
|
|
}
|
|
|
|
public function chpsswd($pass)
|
|
{
|
|
$out[] = 'Restart Adguard Home';
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$out[] = $this->ssh("/AdGuardHome/AdGuardHome -s stop 2>&1", 'ad');
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$c = yaml_parse_file('/config/adguard/AdGuardHome.yaml');
|
|
$c['users'][0]['password'] = password_hash($pass, PASSWORD_DEFAULT);
|
|
yaml_emit_file('/config/adguard/AdGuardHome.yaml', $c);
|
|
$out[] = $this->ssh("/AdGuardHome/AdGuardHome -s start 2>&1", 'ad');
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
sleep(3);
|
|
$this->menu('adguard');
|
|
}
|
|
|
|
public function adguardreset()
|
|
{
|
|
$out[] = 'Restart Adguard Home';
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$out[] = $this->ssh("/AdGuardHome/AdGuardHome -s stop 2>&1", 'ad');
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$c = yaml_parse_file('/config/AdGuardHome.yaml');
|
|
$this->sd($c);
|
|
yaml_emit_file('/config/adguard/AdGuardHome.yaml', $c);
|
|
$out[] = $this->ssh("/AdGuardHome/AdGuardHome -s start 2>&1", 'ad');
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
sleep(3);
|
|
$this->menu('adguard');
|
|
}
|
|
|
|
public function checkdns()
|
|
{
|
|
$r = $this->send(
|
|
$this->input['chat'],
|
|
"@{$this->input['username']} enter dns address
|
|
Plain DNS:
|
|
<code>example.org 94.140.14.14</code>
|
|
DNS-over-TLS:
|
|
<code>example.org tls://dns.adguard.com</code>
|
|
DNS-over-TLS with IP:
|
|
<code>example.org tls://dns.adguard.com 94.140.14.14</code>
|
|
DNS-over-HTTPS with HTTP/2:
|
|
<code>example.org https://dns.adguard.com/dns-query</code>
|
|
DNS-over-HTTPS forcing HTTP/3 only:
|
|
<code>example.org h3://dns.google/dns-query</code>
|
|
DNS-over-HTTPS with IP:
|
|
<code>example.org https://dns.adguard.com/dns-query 94.140.14.14</code>",
|
|
$this->input['message_id'],
|
|
reply: 'enter command',
|
|
);
|
|
$_SESSION['reply'][$r['result']['message_id']] = [
|
|
'start_message' => $this->input['message_id'],
|
|
'callback' => 'dnscheck',
|
|
'args' => [],
|
|
];
|
|
}
|
|
|
|
public function dnscheck($dns)
|
|
{
|
|
exec("JSON=1 dnslookup $dns", $out, $code);
|
|
if ($code) {
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out), mode: false);
|
|
} else {
|
|
$this->send($this->input['chat'], "JSON=1 dnslookup $dns\n" . implode("\n", $out), mode: false);
|
|
}
|
|
sleep(3);
|
|
$this->menu('adguard');
|
|
}
|
|
|
|
public function addupstream()
|
|
{
|
|
$r = $this->send(
|
|
$this->input['chat'],
|
|
"@{$this->input['username']} enter address upstream",
|
|
$this->input['message_id'],
|
|
reply: 'enter address upstream',
|
|
);
|
|
$_SESSION['reply'][$r['result']['message_id']] = [
|
|
'start_message' => $this->input['message_id'],
|
|
'callback' => 'upstream',
|
|
'args' => [],
|
|
];
|
|
}
|
|
|
|
public function upstream($url)
|
|
{
|
|
$out[] = 'Restart Adguard Home';
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$out[] = $this->ssh("/AdGuardHome/AdGuardHome -s stop 2>&1", 'ad');
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$c = yaml_parse_file('/config/adguard/AdGuardHome.yaml');
|
|
$c['dns']['upstream_dns'][] = $url;
|
|
yaml_emit_file('/config/adguard/AdGuardHome.yaml', $c);
|
|
$out[] = $this->ssh("/AdGuardHome/AdGuardHome -s start 2>&1", 'ad');
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
sleep(3);
|
|
$this->menu('adguard');
|
|
}
|
|
|
|
public function delupstream($k)
|
|
{
|
|
$out[] = 'Restart Adguard Home';
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$out[] = $this->ssh("/AdGuardHome/AdGuardHome -s stop 2>&1", 'ad');
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
$c = yaml_parse_file('/config/adguard/AdGuardHome.yaml');
|
|
unset($c['dns']['upstream_dns'][$k]);
|
|
yaml_emit_file('/config/adguard/AdGuardHome.yaml', $c);
|
|
$out[] = $this->ssh("/AdGuardHome/AdGuardHome -s start 2>&1", 'ad');
|
|
$this->update($this->input['chat'], $this->input['message_id'], implode("\n", $out));
|
|
sleep(3);
|
|
$this->menu('adguard');
|
|
}
|
|
|
|
public function selfsslInstall()
|
|
{
|
|
$this->setSSL('self');
|
|
}
|
|
|
|
public function include(int $count)
|
|
{
|
|
$r = $this->send(
|
|
$this->input['chat'],
|
|
"@{$this->input['username']} list domains separated by commas",
|
|
$this->input['message_id'],
|
|
reply: 'list domains separated by commas',
|
|
);
|
|
$_SESSION['reply'][$r['result']['message_id']] = [
|
|
'start_message' => $this->input['message_id'],
|
|
'callback' => 'addInclude',
|
|
'args' => [$count],
|
|
];
|
|
}
|
|
|
|
public function addInclude(string $domains, int $count)
|
|
{
|
|
$domains = explode(',', $domains);
|
|
$domains = array_filter($domains, fn($x) => !empty(trim($x)));
|
|
if (!empty($domains)) {
|
|
$conf = $this->getPacConf();
|
|
foreach ($domains as $k => $v) {
|
|
$conf['includelist'][idn_to_ascii(trim($v))] = true;
|
|
}
|
|
ksort($conf['includelist']);
|
|
$this->setPacConf($conf);
|
|
$page = (int) floor(array_search($v, array_keys($conf['includelist'])) / $count);
|
|
}
|
|
$page = $page ?: -2;
|
|
$this->menu('includelist', $page);
|
|
}
|
|
|
|
public function reverse(int $count)
|
|
{
|
|
$r = $this->send(
|
|
$this->input['chat'],
|
|
"@{$this->input['username']} list domains separated by commas",
|
|
$this->input['message_id'],
|
|
reply: 'list domains separated by commas',
|
|
);
|
|
$_SESSION['reply'][$r['result']['message_id']] = [
|
|
'start_message' => $this->input['message_id'],
|
|
'callback' => 'addReverse',
|
|
'args' => [$count],
|
|
];
|
|
}
|
|
|
|
public function addReverse(string $domains, int $count)
|
|
{
|
|
$domains = explode(',', $domains);
|
|
$domains = array_filter($domains, fn($x) => !empty(trim($x)));
|
|
if (!empty($domains)) {
|
|
$conf = $this->getPacConf();
|
|
foreach ($domains as $k => $v) {
|
|
$conf['reverselist'][idn_to_ascii(trim($v))] = true;
|
|
}
|
|
ksort($conf['reverselist']);
|
|
$this->setPacConf($conf);
|
|
$page = (int) floor(array_search($v, array_keys($conf['reverselist'])) / $count);
|
|
}
|
|
$page = $page ?: -2;
|
|
$this->menu('reverselist', $page);
|
|
}
|
|
|
|
public function subzones(int $count)
|
|
{
|
|
$r = $this->send(
|
|
$this->input['chat'],
|
|
"@{$this->input['username']} list subdomains separated by commas",
|
|
$this->input['message_id'],
|
|
reply: 'list subdomains separated by commas',
|
|
);
|
|
$_SESSION['reply'][$r['result']['message_id']] = [
|
|
'start_message' => $this->input['message_id'],
|
|
'callback' => 'addSubzones',
|
|
'args' => [$count],
|
|
];
|
|
}
|
|
|
|
public function addSubzones(string $domains, int $count)
|
|
{
|
|
$domains = explode(',', $domains);
|
|
$domains = array_filter($domains, fn($x) => !empty(trim($x)));
|
|
if (!empty($domains)) {
|
|
$conf = $this->getPacConf();
|
|
foreach ($domains as $k => $v) {
|
|
$conf['subzoneslist'][idn_to_ascii(trim($v))] = true;
|
|
}
|
|
ksort($conf['subzoneslist']);
|
|
$this->setPacConf($conf);
|
|
$page = (int) floor(array_search($v, array_keys($conf['subzoneslist'])) / $count);
|
|
}
|
|
$page = $page ?: -2;
|
|
$this->menu('subzoneslist', $page);
|
|
}
|
|
|
|
public function exclude(int $count)
|
|
{
|
|
$r = $this->send(
|
|
$this->input['chat'],
|
|
"@{$this->input['username']} enter regular expression",
|
|
$this->input['message_id'],
|
|
reply: 'enter regular expression',
|
|
);
|
|
$_SESSION['reply'][$r['result']['message_id']] = [
|
|
'start_message' => $this->input['message_id'],
|
|
'callback' => 'addExclude',
|
|
'args' => [$count],
|
|
];
|
|
}
|
|
|
|
public function addExclude(string $reg, int $count)
|
|
{
|
|
$reg = trim($reg);
|
|
if (!empty($reg)) {
|
|
$conf = $this->getPacConf();
|
|
$conf['excludelist'][$reg] = true;
|
|
ksort($conf['excludelist']);
|
|
$this->setPacConf($conf);
|
|
$page = (int) floor(array_search($reg, array_keys($conf['excludelist'])) / $count);
|
|
}
|
|
$page = $page ?: -2;
|
|
$this->menu('excludelist', $page);
|
|
}
|
|
|
|
public function showreset()
|
|
{
|
|
$data = [
|
|
[
|
|
[
|
|
'text' => "confirm",
|
|
'callback_data' => "/reset",
|
|
],
|
|
[
|
|
'text' => "back",
|
|
'callback_data' => "/menu",
|
|
],
|
|
],
|
|
];
|
|
$this->update(
|
|
$this->input['chat'],
|
|
$this->input['message_id'],
|
|
"Reset settings?",
|
|
$data,
|
|
);
|
|
}
|
|
|
|
public function reset()
|
|
{
|
|
$conf = $this->readConfig();
|
|
$address = getenv('ADDRESS');
|
|
$port = getenv('PORT_WG');
|
|
$r = $this->ssh("/bin/sh /reset_wg.sh $address $port");
|
|
file_put_contents($this->clients, '');
|
|
$this->menu();
|
|
}
|
|
|
|
public function addPeer()
|
|
{
|
|
$this->createPeer(name: 'all traffic');
|
|
}
|
|
|
|
public function config()
|
|
{
|
|
$conf = $this->createConfig($this->readConfig());
|
|
$data = [
|
|
[
|
|
[
|
|
'text' => "back",
|
|
'callback_data' => "/menu",
|
|
],
|
|
],
|
|
];
|
|
$this->update(
|
|
$this->input['chat'],
|
|
$this->input['message_id'],
|
|
"Server config:\n\n<code>$conf</code>",
|
|
$data,
|
|
);
|
|
}
|
|
|
|
public function deletePeer($client, $page)
|
|
{
|
|
$conf = $this->readConfig();
|
|
$this->deleteClient($client);
|
|
unset($conf['peers'][$client]);
|
|
$this->restartWG($this->createConfig($conf));
|
|
$this->menu('wg', $page);
|
|
}
|
|
|
|
public function statusWg(int $page = 0)
|
|
{
|
|
$conf = $this->readConfig();
|
|
$status = $this->readStatus();
|
|
$text[] = 'Server:';
|
|
$text[] = " address: {$conf['interface']['Address']}";
|
|
$text[] = " port: {$status['interface']['listening port']}";
|
|
$text[] = " publickey: {$status['interface']['public key']}";
|
|
$text[] = "\nPeers:";
|
|
if (!empty($conf['peers'])) {
|
|
foreach ($conf['peers'] as $k => $v) {
|
|
foreach ($clients as $cl) {
|
|
if ($cl['interface']['Address'] == $v['AllowedIPs']) {
|
|
$allowed_ips = $cl['peers'][0]['AllowedIPs'];
|
|
}
|
|
}
|
|
$conf['peers'][$k]['status'] = $this->getStatusPeer($v['PublicKey'], $status['peers']);
|
|
$conf['peers'][$k]['online'] = preg_match('~^(\d+ seconds|[12] minute)~', $conf['peers'][$k]['status']['latest handshake']) ? $conf['peers'][$k]['status']['endpoint'] : 'OFFLINE';
|
|
}
|
|
usort($conf['peers'], fn($a, $b) => ($a['online'] == 'OFFLINE') <=> ($b['online'] == 'OFFLINE'));
|
|
foreach ($conf['peers'] as $k => $v) {
|
|
preg_match_all('~([0-9.]+\.?)\s(\w+)~', $v['status']['transfer'], $m);
|
|
$text[] = ($v['online'] == 'OFFLINE' ? '(OFFLINE) ' : '')
|
|
. "{$this->getName($v)} "
|
|
. ($v['online'] != 'OFFLINE' ? "({$v['online']})" : '')
|
|
. ($m[0] ? " {$m[1][0]}↑ {$m[2][0]} / {$m[1][1]}↓ {$m[2][1]}" : '')
|
|
. "\n"
|
|
;
|
|
}
|
|
}
|
|
$text = "Menu -> Wireguard\n\n<code>" . implode(PHP_EOL, $text) . '</code>';
|
|
$data = [
|
|
[[
|
|
'text' => "update status",
|
|
'callback_data' => "/menu wg 0",
|
|
]],
|
|
[[
|
|
'text' => "add peer",
|
|
'callback_data' => "/menu addpeer $page",
|
|
]],
|
|
];
|
|
if ($clients = $this->getClients($page)) {
|
|
$data = array_merge($data, $clients);
|
|
}
|
|
$data[] = [[
|
|
'text' => 'back',
|
|
'callback_data' => "/menu",
|
|
]];
|
|
return [
|
|
'text' => $text,
|
|
'data' => $data,
|
|
];
|
|
}
|
|
|
|
public function getClient($client, $page)
|
|
{
|
|
$clients = $this->readClients();
|
|
if ($clients) {
|
|
$name = $this->getName($clients[$client]['interface']);
|
|
$conf = $this->createConfig($clients[$client]);
|
|
return [
|
|
'text' => "<code>$conf</code>\n\n<b>$name</b>",
|
|
'data' => [
|
|
[
|
|
[
|
|
'text' => "rename",
|
|
'callback_data' => "/rename {$client}_$page",
|
|
],
|
|
],
|
|
[
|
|
[
|
|
'text' => "show QR",
|
|
'callback_data' => "/qr $client",
|
|
],
|
|
[
|
|
'text' => "download config",
|
|
'callback_data' => "/download $client",
|
|
],
|
|
],
|
|
[
|
|
[
|
|
'text' => "delete",
|
|
'callback_data' => "/delete {$client}_$page",
|
|
],
|
|
],
|
|
[
|
|
[
|
|
'text' => "back",
|
|
'callback_data' => "/menu wg $page",
|
|
],
|
|
],
|
|
],
|
|
];
|
|
}
|
|
return [
|
|
'text' => "no clients",
|
|
'data' => false
|
|
];
|
|
}
|
|
|
|
public function getClients(int $page, int $count = 5)
|
|
{
|
|
$clients = $this->readClients();
|
|
if (!empty($clients)) {
|
|
$all = (int) ceil(count($clients) / $count);
|
|
$page = min($page, $all - 1);
|
|
$page = $page == -2 ? $all - 1 : $page;
|
|
$clients = $page != -1 ? array_slice($clients, $page * $count, $count, true) : $clients;
|
|
foreach ($clients as $k => $v) {
|
|
$data[] = [[
|
|
'text' => $this->getName($v['interface']),
|
|
'callback_data' => "/menu client {$k}_$page",
|
|
]];
|
|
}
|
|
if ($page != -1 && $all > 1) {
|
|
$data[] = [
|
|
[
|
|
'text' => '<<',
|
|
'callback_data' => "/menu wg " . ($page - 1 >= 0 ? $page - 1 : $all - 1),
|
|
],
|
|
[
|
|
'text' => 'all',
|
|
'callback_data' => "/menu wg -1",
|
|
],
|
|
[
|
|
'text' => '>>',
|
|
'callback_data' => "/menu wg " . ($page < $all - 1 ? $page + 1 : 0),
|
|
]
|
|
];
|
|
}
|
|
}
|
|
return $data;
|
|
}
|
|
|
|
public function sizeFormat($bytes)
|
|
{
|
|
if (floor($bytes / 1024 ** 2) > 0) {
|
|
$r = round($bytes / 1024 ** 2, 2) . 'MB';
|
|
} elseif (floor($bytes / 1024) > 0) {
|
|
$r = round($bytes / 1024, 2) . 'KB';
|
|
} else {
|
|
$r = $bytes . 'B';
|
|
}
|
|
return $r;
|
|
}
|
|
|
|
public function pacMenu()
|
|
{
|
|
$rmpac = stat(__DIR__ . '/zapretlists/rmpac');
|
|
$rpac = stat(__DIR__ . '/zapretlists/rpac');
|
|
$mpac = stat(__DIR__ . '/zapretlists/mpac');
|
|
$pac = stat(__DIR__ . '/zapretlists/pac');
|
|
$conf = $this->getPacConf();
|
|
$zapret = $conf['zapret'] ? 'ON' : 'OFF';
|
|
$ip = $conf['domain'] ?: file_get_contents('https://ipinfo.io/ip');
|
|
$hash = substr(md5($this->key), 0, 8);
|
|
$scheme = empty($this->nginxGetTypeCert()) ? 'http' : 'https';
|
|
$text = <<<text
|
|
Menu -> pac
|
|
|
|
<code>RU blacklist:</code> <code>https://github.com/zapret-info/z-i</code>
|
|
|
|
self lists - domains that will work through a proxy
|
|
|
|
reverse lists - domains that will work without a proxy, all others through a proxy
|
|
text;
|
|
if ($pac) {
|
|
$pac['time'] = date('d.m.Y H:i:s', $pac['mtime']);
|
|
$pac['sz'] = $this->sizeFormat($pac['size']);
|
|
$text .= <<<text
|
|
|
|
|
|
<b>PAC ({$pac['time']} / {$pac['sz']}):</b>
|
|
<code>$scheme://$ip/pac?h=$hash&a=127.0.0.1&p=1080</code>
|
|
text;
|
|
$urls[0][] = [
|
|
'text' => "PAC",
|
|
'url' => "$scheme://$ip/pac?h=$hash&a=127.0.0.1&p=1080",
|
|
];
|
|
$urls[1][] = [
|
|
'text' => "PAC Wireguard proxy",
|
|
'url' => "$scheme://$ip/pac?h=$hash&a=10.10.0.3&p=1080",
|
|
];
|
|
}
|
|
if ($mpac) {
|
|
$mpac['time'] = date('d.m.Y H:i:s', $mpac['mtime']);
|
|
$mpac['sz'] = $this->sizeFormat($mpac['size']);
|
|
$text .= <<<text
|
|
|
|
|
|
<b>Shadowsocks-android PAC ({$mpac['time']} / {$mpac['sz']}):</b>
|
|
<code>$scheme://$ip/pac?h=$hash&t=mpac</code>
|
|
text;
|
|
$urls[2][] = [
|
|
'text' => "PAC ShadowSocks(Android)",
|
|
'url' => "$scheme://$ip/pac?h=$hash&t=mpac",
|
|
];
|
|
}
|
|
if ($rpac) {
|
|
$rpac['time'] = date('d.m.Y H:i:s', $rpac['mtime']);
|
|
$rpac['sz'] = $this->sizeFormat($rpac['size']);
|
|
$text .= <<<text
|
|
|
|
|
|
<b>Reverse PAC ({$rpac['time']} / {$rpac['sz']}):</b>
|
|
<code>$scheme://$ip/pac?h=$hash&t=rpac&a=127.0.0.1&p=1080</code>
|
|
text;
|
|
$urls[0][] = [
|
|
'text' => "Reverse PAC",
|
|
'url' => "$scheme://$ip/pac?h=$hash&t=rpac",
|
|
];
|
|
$urls[1][] = [
|
|
'text' => "Reverse PAC Wireguard proxy",
|
|
'url' => "$scheme://$ip/pac?h=$hash&t=rpac&a=10.10.0.3",
|
|
];
|
|
}
|
|
if ($rmpac) {
|
|
$rmpac['time'] = date('d.m.Y H:i:s', $rmpac['mtime']);
|
|
$rmpac['sz'] = $this->sizeFormat($rmpac['size']);
|
|
$text .= <<<text
|
|
|
|
|
|
<b>Reverse shadowsocks-android PAC ({$rmpac['time']} / {$rmpac['sz']}):</b>
|
|
<code>$scheme://$ip/pac?h=$hash&t=rmpac</code>
|
|
text;
|
|
$urls[2][] = [
|
|
'text' => "Reverse PAC SS(Android)",
|
|
'url' => "$scheme://$ip/pac?h=$hash&t=rmpac",
|
|
];
|
|
}
|
|
if ($urls) {
|
|
$data = $urls;
|
|
}
|
|
if ($conf['zapret']) {
|
|
$data[] = [
|
|
[
|
|
'text' => "RU blacklist : $zapret",
|
|
'callback_data' => "/paczapret",
|
|
],
|
|
[
|
|
'text' => 'blacklist exclude',
|
|
'callback_data' => "/menu excludelist 0",
|
|
],
|
|
];
|
|
} else {
|
|
$data[] = [
|
|
[
|
|
'text' => "RU blacklist : $zapret",
|
|
'callback_data' => "/paczapret",
|
|
],
|
|
];
|
|
}
|
|
$data[] = [
|
|
[
|
|
'text' => 'self list',
|
|
'callback_data' => "/menu includelist 0",
|
|
],
|
|
[
|
|
'text' => 'subzones',
|
|
'callback_data' => "/menu subzoneslist 0",
|
|
],
|
|
[
|
|
'text' => "reverse list",
|
|
'callback_data' => "/menu reverselist 0",
|
|
],
|
|
];
|
|
if ($conf['zapret'] || !empty($conf['includelist'])) {
|
|
$data[] = [
|
|
[
|
|
'text' => 'update PAC',
|
|
'callback_data' => "/pacupdate",
|
|
],
|
|
[
|
|
'text' => 'check url',
|
|
'callback_data' => "/checkurl",
|
|
],
|
|
];
|
|
}
|
|
$data[] = [
|
|
[
|
|
'text' => 'back',
|
|
'callback_data' => "/menu",
|
|
],
|
|
];
|
|
return [
|
|
'text' => $text,
|
|
'data' => $data,
|
|
];
|
|
}
|
|
|
|
public function pacList($type, int $page, int $count = 5)
|
|
{
|
|
$name = str_replace('list', '', $type);
|
|
$text = "Menu -> pac -> {$name}list\n\n";
|
|
$data[] = [
|
|
[
|
|
'text' => 'add',
|
|
'callback_data' => "/$name $count",
|
|
],
|
|
];
|
|
$domains = $this->getPacConf()[$type];
|
|
if (!empty($domains)) {
|
|
ksort($domains);
|
|
$all = (int) ceil(count($domains) / $count);
|
|
$page = min($page, $all - 1);
|
|
$page = $page == -2 ? $all - 1 : $page;
|
|
$domains = $page != -1 ? array_slice($domains, $page * $count, $count, true) : $domains;
|
|
foreach ($domains as $k => $v) {
|
|
$data[] = [
|
|
[
|
|
'text' => '(' . ($v ? 'ON' : 'OFF') . ') ' . ($type == 'includelist' ? idn_to_utf8($k) : $k),
|
|
'callback_data' => "/change{$name}list {$k}_$count",
|
|
],
|
|
[
|
|
'text' => 'delete',
|
|
'callback_data' => "/delete{$name}list {$k}_$count",
|
|
],
|
|
];
|
|
}
|
|
if ($page != -1 && $all > 1) {
|
|
$data[] = [
|
|
[
|
|
'text' => '<<',
|
|
'callback_data' => "/menu $type " . ($page - 1 >= 0 ? $page - 1 : $all - 1),
|
|
],
|
|
// [
|
|
// 'text' => 'all',
|
|
// 'callback_data' => "/menu $type -1",
|
|
// ],
|
|
[
|
|
'text' => '>>',
|
|
'callback_data' => "/menu $type " . ($page < $all - 1 ? $page + 1 : 0),
|
|
]
|
|
];
|
|
}
|
|
}
|
|
$data[] = [
|
|
[
|
|
'text' => 'back',
|
|
'callback_data' => "/menu pac",
|
|
],
|
|
];
|
|
return [
|
|
'text' => $text,
|
|
'data' => $data,
|
|
];
|
|
}
|
|
|
|
public function listPacChange($type, $action, $key, int $count)
|
|
{
|
|
$conf = $this->getPacConf();
|
|
ksort($conf[$type]);
|
|
$page = (int) floor(array_search($key, array_keys($conf[$type])) / $count);
|
|
switch ($action) {
|
|
case 'change':
|
|
$conf[$type][$key] = !$conf[$type][$key];
|
|
$page = (int) floor(array_search($key, array_keys($conf[$type])) / $count);
|
|
break;
|
|
case 'delete':
|
|
unset($conf[$type][$key]);
|
|
break;
|
|
}
|
|
$this->setPacConf($conf);
|
|
$this->menu($type, $page);
|
|
}
|
|
|
|
public function pacZapret()
|
|
{
|
|
$conf = $this->getPacConf();
|
|
$conf['zapret'] = !$conf['zapret'];
|
|
$this->setPacConf($conf);
|
|
$this->menu('pac');
|
|
}
|
|
|
|
public function pacUpdate()
|
|
{
|
|
exec("php updatepac.php start {$this->input['chat']} {$this->input['message_id']} {$this->input['callback_id']} > /dev/null &");
|
|
}
|
|
|
|
public function getSSConfig()
|
|
{
|
|
return json_decode(file_get_contents('/config/ssserver.json'), true);
|
|
}
|
|
|
|
public function getSSLocalConfig()
|
|
{
|
|
return json_decode(file_get_contents('/config/sslocal.json'), true);
|
|
}
|
|
|
|
public function menuSS()
|
|
{
|
|
$conf = $this->getPacConf();
|
|
$ip = file_get_contents('https://ipinfo.io/ip');
|
|
$domain = $conf['domain'] ?: $ip;
|
|
$scheme = empty($ssl = $this->nginxGetTypeCert()) ? 'http' : 'https';
|
|
$ss = $this->getSSConfig();
|
|
$v2ray = !empty($ss['plugin']) ? 'ON' : 'OFF';
|
|
$port = !empty($ssl) && !empty($ss['plugin']) ? 443 : 8388;
|
|
$options = !empty($ssl) && !empty($ss['plugin']) ? "tls;fast-open;path=/v2ray;host=$domain" : "path=/v2ray;host=$domain";
|
|
|
|
$text = "Menu -> ShadowSocks";
|
|
$data[] = [
|
|
[
|
|
'text' => 'change password',
|
|
'callback_data' => "/sspswd",
|
|
],
|
|
];
|
|
$text .= "\n\nserver: <code>$domain:$port</code>";
|
|
$text .= "\n\nmethod: <code>{$ss['method']}</code>";
|
|
$text .= "\n\nnameserver: <code>10.10.0.5</code>";
|
|
if ($ss['plugin']) {
|
|
$text .= "\n\nplugin: <code>v2ray-plugin_windows_amd64</code>";
|
|
$text .= "\n\nv2ray options: <code>$options</code>";
|
|
}
|
|
$data[] = [
|
|
[
|
|
'text' => "v2ray: $v2ray",
|
|
'callback_data' => "/v2ray",
|
|
],
|
|
];
|
|
$data[] = [
|
|
[
|
|
'text' => 'back',
|
|
'callback_data' => "/menu",
|
|
],
|
|
];
|
|
return [
|
|
'text' => $text,
|
|
'data' => $data,
|
|
];
|
|
}
|
|
|
|
public function menu($type = false, $arg = false, $return = false)
|
|
{
|
|
$menu = [
|
|
'main' => [
|
|
'text' => "Menu",
|
|
'data' => [
|
|
[
|
|
[
|
|
'text' => "Wireguard",
|
|
'callback_data' => "/menu wg 0",
|
|
],
|
|
[
|
|
'text' => "Shadowsocks",
|
|
'callback_data' => "/menu ss",
|
|
],
|
|
],
|
|
[
|
|
[
|
|
'text' => "Adguard",
|
|
'callback_data' => "/menu adguard",
|
|
],
|
|
[
|
|
'text' => "PAC",
|
|
'callback_data' => "/menu pac",
|
|
],
|
|
],
|
|
[
|
|
[
|
|
'text' => "config",
|
|
'callback_data' => "/menu config",
|
|
]
|
|
],
|
|
[
|
|
[
|
|
'text' => 'discussion group',
|
|
'url' => "https://t.me/vpnbot_group",
|
|
],
|
|
[
|
|
'text' => 'donate for a new laptop',
|
|
'url' => "https://yoomoney.ru/to/410011827900450",
|
|
],
|
|
]
|
|
],
|
|
],
|
|
'wg' => $type == 'wg' ? $this->statusWg($arg) : false,
|
|
'client' => $type == 'client' ? $this->getClient(...explode('_', $arg)) : false,
|
|
'addpeer' => [
|
|
'text' => "Menu -> Wireguard -> Add peer\n\n",
|
|
'data' => [
|
|
[[
|
|
'text' => "all traffic",
|
|
'callback_data' => "/add",
|
|
]],
|
|
[[
|
|
'text' => "subnet",
|
|
'callback_data' => "/add_ips",
|
|
]],
|
|
[[
|
|
'text' => "proxy ip",
|
|
'callback_data' => "/proxy",
|
|
]],
|
|
[[
|
|
'text' => "back",
|
|
'callback_data' => "/menu wg $arg",
|
|
]],
|
|
],
|
|
],
|
|
'pac' => $type == 'pac' ? $this->pacMenu() : false,
|
|
'adguard' => $type == 'adguard' ? $this->adguardMenu() : false,
|
|
'includelist' => $type == 'includelist' ? $this->pacList($type, $arg) : false,
|
|
'excludelist' => $type == 'excludelist' ? $this->pacList($type, $arg) : false,
|
|
'reverselist' => $type == 'reverselist' ? $this->pacList($type, $arg) : false,
|
|
'subzoneslist' => $type == 'subzoneslist' ? $this->pacList($type, $arg) : false,
|
|
'config' => $type == 'config' ? $this->configMenu() : false,
|
|
'ss' => $type == 'ss' ? $this->menuSS() : false,
|
|
];
|
|
|
|
$text = $menu[$type ?: 'main' ]['text'];
|
|
$data = $menu[$type ?: 'main' ]['data'];
|
|
|
|
if ($return) {
|
|
return [$text, $data];
|
|
}
|
|
|
|
if (!empty($this->input['callback_id'])) {
|
|
$this->update(
|
|
$this->input['chat'],
|
|
$this->input['message_id'],
|
|
$text,
|
|
$data ?: false,
|
|
);
|
|
} else {
|
|
$this->send(
|
|
$this->input['chat'],
|
|
$text,
|
|
$this->input['message_id'],
|
|
$data ?: false,
|
|
);
|
|
}
|
|
}
|
|
|
|
public function adguardMenu()
|
|
{
|
|
$conf = $this->getPacConf();
|
|
$ip = file_get_contents('https://ipinfo.io/ip');
|
|
$domain = $conf['domain'] ?: $ip;
|
|
$scheme = empty($ssl = $this->nginxGetTypeCert()) ? 'http' : 'https';
|
|
|
|
$text = "Menu -> Adguard Home\n\nDNS server:\n<code>$ip</code>\n\n";
|
|
if ($ssl) {
|
|
$text .= "DNS over HTTPS:\n<code>$ip</code>\n<code>$scheme://$domain/dns-query</code>\n\n";
|
|
$text .= "DNS over TLS:\n<code>$ip:853</code>";
|
|
}
|
|
$data = [
|
|
[
|
|
[
|
|
'text' => 'Adguard Home',
|
|
'url' => "$scheme://$domain/adguard",
|
|
],
|
|
[
|
|
'text' => 'change password',
|
|
'callback_data' => "/adguardpsswd",
|
|
],
|
|
[
|
|
'text' => 'reset settings',
|
|
'callback_data' => "/adguardreset",
|
|
],
|
|
],
|
|
];
|
|
$data[] = [
|
|
[
|
|
'text' => 'add upstream',
|
|
'callback_data' => "/addupstream",
|
|
],
|
|
];
|
|
$upstreams = yaml_parse_file('/config/adguard/AdGuardHome.yaml')['dns']['upstream_dns'];
|
|
if (!empty($upstreams)) {
|
|
foreach ($upstreams as $k => $v) {
|
|
$data[] = [
|
|
[
|
|
'text' => $v,
|
|
'callback_data' => "/menu adguard",
|
|
],
|
|
[
|
|
'text' => 'delete',
|
|
'callback_data' => "/delupstream $k",
|
|
],
|
|
];
|
|
}
|
|
}
|
|
$data[] = [
|
|
[
|
|
'text' => 'check DNS',
|
|
'callback_data' => "/checkdns",
|
|
],
|
|
];
|
|
$data[] = [
|
|
[
|
|
'text' => 'back',
|
|
'callback_data' => "/menu",
|
|
],
|
|
];
|
|
return [
|
|
'text' => $text,
|
|
'data' => $data,
|
|
];
|
|
}
|
|
|
|
public function configMenu()
|
|
{
|
|
$conf = $this->getPacConf();
|
|
$text = "Menu -> Config\n\nSome clients require a valid certificate when connecting, such as windows 11 DoH or ShadowSocks Android (PAC url), this requires a domain";
|
|
$data = [
|
|
[
|
|
[
|
|
'text' => $conf['domain'] ? "delete {$conf['domain']}" : 'install domain',
|
|
'callback_data' => $conf['domain'] ? '/deldomain' : '/domain',
|
|
],
|
|
],
|
|
];
|
|
if ($conf['domain']) {
|
|
if ($cert = $this->nginxGetTypeCert()) {
|
|
switch ($cert) {
|
|
case 'letsencrypt':
|
|
$data[] = [
|
|
[
|
|
'text' => 'renew SSL',
|
|
'callback_data' => "/setSSL letsencrypt",
|
|
],
|
|
[
|
|
'text' => 'delete SSL',
|
|
'callback_data' => "/deletessl",
|
|
],
|
|
];
|
|
break;
|
|
case 'self':
|
|
$data[] = [
|
|
[
|
|
'text' => 'delete SSL',
|
|
'callback_data' => "/deletessl",
|
|
],
|
|
];
|
|
break;
|
|
}
|
|
} else {
|
|
$data[] = [
|
|
[
|
|
'text' => 'Letsencrypt SSL',
|
|
'callback_data' => "/setSSL letsencrypt",
|
|
],
|
|
[
|
|
'text' => 'Self SSL',
|
|
'callback_data' => "/selfssl",
|
|
],
|
|
];
|
|
}
|
|
}
|
|
$data[] = [
|
|
[
|
|
'text' => 'reset nginx',
|
|
'callback_data' => "/resetnginx",
|
|
],
|
|
];
|
|
$data[] = [
|
|
[
|
|
'text' => 'import',
|
|
'callback_data' => "/import",
|
|
],
|
|
];
|
|
$data[] = [
|
|
[
|
|
'text' => 'export',
|
|
'callback_data' => "/export",
|
|
],
|
|
];
|
|
$data[] = [
|
|
[
|
|
'text' => 'back',
|
|
'callback_data' => "/menu",
|
|
],
|
|
];
|
|
return [
|
|
'text' => $text,
|
|
'data' => $data,
|
|
];
|
|
}
|
|
|
|
public function getStatusPeer(string $publickey, array $peers)
|
|
{
|
|
foreach ($peers as $k => $v) {
|
|
if ($v['peer'] == $publickey) {
|
|
return $v;
|
|
}
|
|
}
|
|
}
|
|
|
|
public function readConfig()
|
|
{
|
|
$r = $this->ssh('cat /etc/wireguard/wg0.conf');
|
|
$r = explode(PHP_EOL, $r);
|
|
$r = array_filter($r);
|
|
$i = 0;
|
|
foreach ($r as $k => $v) {
|
|
if (preg_match('~\[(.+)\]~', $v, $m)) {
|
|
$i++;
|
|
if ($m[1] == 'Interface') {
|
|
$data[$i]['type'] = 'interface';
|
|
} else {
|
|
$data[$i]['type'] = 'peer';
|
|
}
|
|
} else {
|
|
$t = explode('=', $v, 2);
|
|
$data[$i][trim($t[0])] = trim($t[1]);
|
|
}
|
|
}
|
|
foreach ($data as $v) {
|
|
$type = $v['type'];
|
|
unset($v['type']);
|
|
if ($type == 'interface') {
|
|
$d['interface'] = $v;
|
|
} else {
|
|
$d['peers'][] = $v;
|
|
}
|
|
}
|
|
return $d;
|
|
}
|
|
|
|
public function nginxGetTypeCert()
|
|
{
|
|
$conf = $this->ssh('cat /etc/nginx/nginx.conf', 'ng');
|
|
preg_match("/#~([^\s]+)/", $conf, $m);
|
|
return $m[1];
|
|
}
|
|
|
|
public function readStatus()
|
|
{
|
|
$r = $this->ssh('wg');
|
|
$r = explode(PHP_EOL, $r);
|
|
$r = array_filter($r);
|
|
$i = 0;
|
|
foreach ($r as $k => $v) {
|
|
if (preg_match('~^(interface|peer):~', $v, $m)) {
|
|
$i++;
|
|
if ($m[1] == 'interface') {
|
|
$data[$i]['type'] = 'interface';
|
|
} else {
|
|
$data[$i]['type'] = 'peer';
|
|
}
|
|
}
|
|
$t = explode(':', $v, 2);
|
|
$data[$i][trim($t[0])] = trim($t[1]);
|
|
}
|
|
foreach ($data as $v) {
|
|
$type = $v['type'];
|
|
unset($v['type']);
|
|
if ($type == 'interface') {
|
|
$d['interface'] = $v;
|
|
} else {
|
|
$d['peers'][] = $v;
|
|
}
|
|
}
|
|
return $d;
|
|
}
|
|
|
|
public function getName(array $a):string
|
|
{
|
|
$name = '';
|
|
foreach ($a as $k => $v) {
|
|
if (preg_match('~^#.*name$~', $k)) {
|
|
$name = $v;
|
|
}
|
|
}
|
|
$name = $name ?: $a['AllowedIPs'] ?: $a['Address'];
|
|
return $name;
|
|
}
|
|
|
|
public function createConfig($data)
|
|
{
|
|
$conf[] = "[Interface]";
|
|
foreach ($data['interface'] as $k => $v) {
|
|
$conf[] = "$k = $v";
|
|
}
|
|
if (!empty($data['peers'])) {
|
|
foreach ($data['peers'] as $peer) {
|
|
$conf[] = '';
|
|
$conf[] = '[Peer]';
|
|
foreach ($peer as $k => $v) {
|
|
$conf[] = "$k = $v";
|
|
}
|
|
}
|
|
}
|
|
return implode(PHP_EOL, $conf);
|
|
}
|
|
|
|
public function createPeer($ips_user = false, $name = false)
|
|
{
|
|
$conf = $this->readConfig();
|
|
$ipnet = explode('/', $conf['interface']['Address']);
|
|
$server_ip = ip2long($ipnet[0]);
|
|
$ips = [$server_ip];
|
|
$bitmask = $ipnet[1];
|
|
if (!empty($conf['peers'])) {
|
|
foreach ($conf['peers'] as $k => $v) {
|
|
$ips[] = ip2long(explode('/', $v['AllowedIPs'])[0]);
|
|
}
|
|
}
|
|
$ip_count = (1 << (32 - $bitmask)) - count($ips) - 1;
|
|
for ($i=1; $i < $ip_count; $i++) {
|
|
$ip = $i + $server_ip;
|
|
if (!in_array($ip, $ips)) {
|
|
$client_ip = long2ip($ip);
|
|
break;
|
|
}
|
|
}
|
|
$public_server_key = trim($this->ssh("echo {$conf['interface']['PrivateKey']} | wg pubkey"));
|
|
$private_peer_key = trim($this->ssh("wg genkey"));
|
|
$public_peer_key = trim($this->ssh("echo $private_peer_key | wg pubkey"));
|
|
|
|
$conf['peers'][] = [
|
|
'## name' => $client_ip . ($name ? " ($name)" : ''),
|
|
'PublicKey' => $public_peer_key,
|
|
'AllowedIPs' => "$client_ip/32",
|
|
];
|
|
$client_conf = [
|
|
'interface' => [
|
|
'## name' => $client_ip . ($name ? " ($name)" : ''),
|
|
'PrivateKey' => $private_peer_key,
|
|
'Address' => "$client_ip/32",
|
|
'MTU' => 1350,
|
|
'DNS' => '10.10.0.5',
|
|
],
|
|
'peers' => [
|
|
[
|
|
'PublicKey' => $public_server_key,
|
|
'Endpoint' => file_get_contents('https://ipinfo.io/ip') . ":" . getenv('PORT_WG'),
|
|
'AllowedIPs' => $ips_user ?: "0.0.0.0/0",
|
|
'PersistentKeepalive' => 20,
|
|
]
|
|
]
|
|
];
|
|
$k = $this->saveClient($client_conf);
|
|
$this->restartWG($this->createConfig($conf));
|
|
$this->menu('client', "{$k}_-2");
|
|
}
|
|
|
|
public function deleteClient(int $client)
|
|
{
|
|
$clients = $this->readClients();
|
|
unset($clients[$client]);
|
|
$this->saveClients($clients);
|
|
}
|
|
|
|
public function saveClient(array $client)
|
|
{
|
|
$r = array_merge($this->readClients(), [$client]);
|
|
$this->saveClients($r);
|
|
return count($r) - 1;
|
|
}
|
|
|
|
public function saveClients(array $clients)
|
|
{
|
|
file_put_contents($this->clients, json_encode($clients, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
|
|
}
|
|
|
|
public function restartWG($conf_str)
|
|
{
|
|
$this->ssh("wg-quick down wg0");
|
|
$this->ssh("echo '$conf_str' > /etc/wireguard/wg0.conf");
|
|
$this->ssh("wg-quick up wg0");
|
|
return true;
|
|
}
|
|
|
|
public function disconnect(...$args)
|
|
{
|
|
$this->send($this->input['chat'], "disconnect: \n" . var_export($args, true) . "\n", $this->input['message_id']);
|
|
}
|
|
|
|
public function ssh($cmd, $service = 'wg')
|
|
{
|
|
try {
|
|
$c = ssh2_connect($service, 22);
|
|
if (empty($c)) {
|
|
throw new Exception("no connection to $service: \n$cmd\n" . var_export($c, true));
|
|
}
|
|
$a = ssh2_auth_pubkey_file($c, 'root', '/ssh/key.pub', '/ssh/key');
|
|
if (empty($a)) {
|
|
throw new Exception("auth fail: \n$cmd\n" . var_export($a, true));
|
|
}
|
|
$s = ssh2_exec($c, $cmd);
|
|
if (empty($s)) {
|
|
throw new Exception("exec fail: \n$cmd\n" . var_export($s, true));
|
|
}
|
|
stream_set_blocking($s, true);
|
|
$data = "";
|
|
while ($buf = fread($s, 4096)) {
|
|
$data .= $buf;
|
|
}
|
|
fclose($s);
|
|
ssh2_disconnect($c);
|
|
} catch (Exception | Error $e) {
|
|
$this->send($this->input['chat'], $e->getMessage(), $this->input['message_id']);
|
|
die();
|
|
}
|
|
return $data;
|
|
}
|
|
|
|
public function request($method, $data, $json_header = 0)
|
|
{
|
|
$ch = curl_init();
|
|
curl_setopt_array($ch, [
|
|
CURLOPT_URL => $this->api . $method,
|
|
CURLOPT_CUSTOMREQUEST => 'POST',
|
|
CURLOPT_RETURNTRANSFER => true,
|
|
CURLOPT_HTTPHEADER => $json_header ? [
|
|
'Content-Type: application/json'
|
|
]: [],
|
|
CURLOPT_POSTFIELDS => $data,
|
|
]);
|
|
$res = curl_exec($ch);
|
|
return json_decode($res, true);
|
|
}
|
|
|
|
public function setwebhook()
|
|
{
|
|
$ip = file_get_contents('https://ipinfo.io/ip');
|
|
if (empty($ip)) {
|
|
die('нет айпи');
|
|
}
|
|
echo "$ip\n";
|
|
var_dump($this->request('setWebhook', [
|
|
'url' => "https://$ip/tlgrm?k={$this->key}",
|
|
'certificate' => curl_file_create('/certs/self_public'),
|
|
]));
|
|
}
|
|
|
|
public function setcommands()
|
|
{
|
|
$data = [
|
|
'commands' => [
|
|
[
|
|
'command' => 'menu',
|
|
'description' => '...',
|
|
],
|
|
]
|
|
];
|
|
var_dump($this->request('setMyCommands', json_encode($data), 1));
|
|
}
|
|
|
|
public function send($chat, $text, ?int $to = 0, $button = false, $reply = false, $mode = 'HTML')
|
|
{
|
|
if ($button) {
|
|
$extra = ['inline_keyboard' => $button];
|
|
}
|
|
if (false !== $reply) {
|
|
$extra = [
|
|
'force_reply' => true,
|
|
'input_field_placeholder' => $reply,
|
|
'selective' => true,
|
|
];
|
|
}
|
|
$length = 3096;
|
|
if (mb_strlen($text, 'utf-8') > $length) {
|
|
$tails = $this->splitText($text, $length);
|
|
foreach ($tails as $k => $v) {
|
|
$data = [
|
|
'chat_id' => $chat,
|
|
'text' => "$v\n",
|
|
'parse_mode' => $mode,
|
|
// 'disable_web_page_preview' => true,
|
|
// 'disable_notification' => !empty($to) && 0 == $k,
|
|
'reply_to_message_id' => 0 == $k && $to > 0 ? $to : false,
|
|
];
|
|
if ($k == array_key_last($tails)) {
|
|
if ($extra) {
|
|
$data['reply_markup'] = json_encode($extra);
|
|
}
|
|
}
|
|
$r = $this->request('sendMessage', $data);
|
|
}
|
|
} else {
|
|
$data = [
|
|
'chat_id' => $chat,
|
|
'text' => $text,
|
|
'parse_mode' => $mode,
|
|
// 'disable_web_page_preview' => true,
|
|
// 'disable_notification' => !empty($to),
|
|
'reply_to_message_id' => $to,
|
|
];
|
|
if (!empty($extra)) {
|
|
$data['reply_markup'] = json_encode($extra);
|
|
}
|
|
$r = $this->request('sendMessage', $data);
|
|
}
|
|
return $r;
|
|
}
|
|
|
|
public function splitText($text, $size = 4096)
|
|
{
|
|
$tails = preg_split('~\n~', $text);
|
|
if (!empty($tails)) {
|
|
foreach ($tails as $v) {
|
|
$lines[] = [
|
|
'length' => mb_strlen($v, 'utf-8'),
|
|
'text' => $v,
|
|
];
|
|
}
|
|
$i = 0;
|
|
foreach ($lines as $v) {
|
|
$i += $v['length'];
|
|
$output[ceil($i / $size)] .= $v['text'] . "\n";
|
|
}
|
|
return array_values($output);
|
|
} else {
|
|
return [$text];
|
|
}
|
|
}
|
|
|
|
public function image($chat, $id_url_cFile, $caption = false, $to = false)
|
|
{
|
|
return $this->request('sendPhoto', [
|
|
'chat_id' => $chat,
|
|
'photo' => $id_url_cFile,
|
|
'caption' => $caption,
|
|
'reply_to_message_id' => $to,
|
|
]);
|
|
}
|
|
|
|
public function sendPhoto($chat, $id_url_cFile, $caption = false, $to = false)
|
|
{
|
|
return $this->request('sendPhoto', [
|
|
'chat_id' => $chat,
|
|
'photo' => $id_url_cFile,
|
|
'caption' => $caption,
|
|
'reply_to_message_id' => $to,
|
|
'parse_mode' => 'html',
|
|
]);
|
|
}
|
|
|
|
public function sendFile($chat, $id_url_cFile, $caption = false, $to = false)
|
|
{
|
|
return $this->request('sendDocument', [
|
|
'chat_id' => $chat,
|
|
'document' => $id_url_cFile,
|
|
'caption' => $caption,
|
|
'reply_to_message_id' => $to,
|
|
'parse_mode' => 'html',
|
|
]);
|
|
}
|
|
|
|
public function update($chat, $message_id, $text, $button = false, $reply = false, $mode = 'HTML')
|
|
{
|
|
if ($button) {
|
|
$extra = ['inline_keyboard' => $button];
|
|
}
|
|
if ($reply !== false) {
|
|
$extra = [
|
|
'force_reply' => true,
|
|
'input_field_placeholder' => $reply
|
|
];
|
|
}
|
|
$data = [
|
|
'chat_id' => $chat,
|
|
'message_id' => $message_id,
|
|
'text' => $text,
|
|
'parse_mode' => $mode,
|
|
'disable_web_page_preview' => true,
|
|
];
|
|
if (!empty($extra)) {
|
|
$data['reply_markup'] = json_encode($extra);
|
|
}
|
|
return $this->request('editMessageText', $data);
|
|
}
|
|
|
|
public function answer($callback_id, $textNotify = false, $notify = false)
|
|
{
|
|
return $this->callback = $this->request('answerCallbackQuery', [
|
|
'callback_query_id' => $callback_id,
|
|
'show_alert' => $notify,
|
|
'text' => $textNotify,
|
|
]);
|
|
}
|
|
|
|
public function delete($chat, $message_id)
|
|
{
|
|
$data = [
|
|
'chat_id' => $chat,
|
|
'message_id' => $message_id,
|
|
];
|
|
return $this->request('deleteMessage', $data);
|
|
}
|
|
}
|