mirror of
https://github.com/routerich/RouterichAX3000_configs.git
synced 2025-12-06 11:36:43 +03:00
Merge pull request #7 from CodeRoK7/main
Fix replace config after repeat run script,add files awg_config, podkop
This commit is contained in:
CodeRoK7
293
awg_config.sh
Normal file
293
awg_config.sh
Normal file
@@ -0,0 +1,293 @@
|
||||
#!/bin/sh
|
||||
|
||||
install_awg_packages() {
|
||||
# Получение pkgarch с наибольшим приоритетом
|
||||
PKGARCH=$(opkg print-architecture | awk 'BEGIN {max=0} {if ($3 > max) {max = $3; arch = $2}} END {print arch}')
|
||||
|
||||
TARGET=$(ubus call system board | jsonfilter -e '@.release.target' | cut -d '/' -f 1)
|
||||
SUBTARGET=$(ubus call system board | jsonfilter -e '@.release.target' | cut -d '/' -f 2)
|
||||
VERSION=$(ubus call system board | jsonfilter -e '@.release.version')
|
||||
PKGPOSTFIX="_v${VERSION}_${PKGARCH}_${TARGET}_${SUBTARGET}.ipk"
|
||||
BASE_URL="https://github.com/Slava-Shchipunov/awg-openwrt/releases/download/"
|
||||
|
||||
AWG_DIR="/tmp/amneziawg"
|
||||
mkdir -p "$AWG_DIR"
|
||||
|
||||
if opkg list-installed | grep -q kmod-amneziawg; then
|
||||
echo "kmod-amneziawg already installed"
|
||||
else
|
||||
KMOD_AMNEZIAWG_FILENAME="kmod-amneziawg${PKGPOSTFIX}"
|
||||
DOWNLOAD_URL="${BASE_URL}v${VERSION}/${KMOD_AMNEZIAWG_FILENAME}"
|
||||
wget -O "$AWG_DIR/$KMOD_AMNEZIAWG_FILENAME" "$DOWNLOAD_URL"
|
||||
|
||||
if [ $? -eq 0 ]; then
|
||||
echo "kmod-amneziawg file downloaded successfully"
|
||||
else
|
||||
echo "Error downloading kmod-amneziawg. Please, install kmod-amneziawg manually and run the script again"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
opkg install "$AWG_DIR/$KMOD_AMNEZIAWG_FILENAME"
|
||||
|
||||
if [ $? -eq 0 ]; then
|
||||
echo "kmod-amneziawg file downloaded successfully"
|
||||
else
|
||||
echo "Error installing kmod-amneziawg. Please, install kmod-amneziawg manually and run the script again"
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
if opkg list-installed | grep -q amneziawg-tools; then
|
||||
echo "amneziawg-tools already installed"
|
||||
else
|
||||
AMNEZIAWG_TOOLS_FILENAME="amneziawg-tools${PKGPOSTFIX}"
|
||||
DOWNLOAD_URL="${BASE_URL}v${VERSION}/${AMNEZIAWG_TOOLS_FILENAME}"
|
||||
wget -O "$AWG_DIR/$AMNEZIAWG_TOOLS_FILENAME" "$DOWNLOAD_URL"
|
||||
|
||||
if [ $? -eq 0 ]; then
|
||||
echo "amneziawg-tools file downloaded successfully"
|
||||
else
|
||||
echo "Error downloading amneziawg-tools. Please, install amneziawg-tools manually and run the script again"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
opkg install "$AWG_DIR/$AMNEZIAWG_TOOLS_FILENAME"
|
||||
|
||||
if [ $? -eq 0 ]; then
|
||||
echo "amneziawg-tools file downloaded successfully"
|
||||
else
|
||||
echo "Error installing amneziawg-tools. Please, install amneziawg-tools manually and run the script again"
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
if opkg list-installed | grep -q luci-app-amneziawg; then
|
||||
echo "luci-app-amneziawg already installed"
|
||||
else
|
||||
LUCI_APP_AMNEZIAWG_FILENAME="luci-app-amneziawg${PKGPOSTFIX}"
|
||||
DOWNLOAD_URL="${BASE_URL}v${VERSION}/${LUCI_APP_AMNEZIAWG_FILENAME}"
|
||||
wget -O "$AWG_DIR/$LUCI_APP_AMNEZIAWG_FILENAME" "$DOWNLOAD_URL"
|
||||
|
||||
if [ $? -eq 0 ]; then
|
||||
echo "luci-app-amneziawg file downloaded successfully"
|
||||
else
|
||||
echo "Error downloading luci-app-amneziawg. Please, install luci-app-amneziawg manually and run the script again"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
opkg install "$AWG_DIR/$LUCI_APP_AMNEZIAWG_FILENAME"
|
||||
|
||||
if [ $? -eq 0 ]; then
|
||||
echo "luci-app-amneziawg file downloaded successfully"
|
||||
else
|
||||
echo "Error installing luci-app-amneziawg. Please, install luci-app-amneziawg manually and run the script again"
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
rm -rf "$AWG_DIR"
|
||||
}
|
||||
|
||||
echo "opkg update"
|
||||
opkg update
|
||||
|
||||
#проверка и установка пакетов AmneziaWG
|
||||
install_awg_packages
|
||||
|
||||
#проверяем установлени ли библиотека jq
|
||||
if opkg list-installed | grep -q jq; then
|
||||
echo "jq already installed..."
|
||||
else
|
||||
echo "jq not installed. Installed jq..."
|
||||
opkg install jq
|
||||
if [ $? -eq 0 ]; then
|
||||
echo "jq file downloaded successfully"
|
||||
else
|
||||
echo "Error installing jq. Please, install jq manually and run the script again"
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
#проверяем установлени ли пакет dnsmasq-full
|
||||
if opkg list-installed | grep -q dnsmasq-full; then
|
||||
echo "dnsmasq-full already installed..."
|
||||
else
|
||||
echo "Installed dnsmasq-full..."
|
||||
cd /tmp/ && opkg download dnsmasq-full
|
||||
opkg remove dnsmasq && opkg install dnsmasq-full --cache /tmp/
|
||||
|
||||
[ -f /etc/config/dhcp-opkg ] && cp /etc/config/dhcp /etc/config/dhcp-old && mv /etc/config/dhcp-opkg /etc/config/dhcp
|
||||
fi
|
||||
|
||||
#проверяем установлени ли пакет coreutils-base64
|
||||
if opkg list-installed | grep -q coreutils-base64; then
|
||||
echo "coreutils-base64 already installed..."
|
||||
else
|
||||
echo "Installed coreutils-base64"
|
||||
opkg install coreutils-base64
|
||||
if [ $? -eq 0 ]; then
|
||||
echo "coreutils-base64 file downloaded successfully"
|
||||
else
|
||||
echo "Error installing coreutils-base64. Please, install coreutils-base64 manually and run the script again"
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
|
||||
#запрос конфигурации WARP
|
||||
result=$(curl 'https://warp.llimonix.pw/api/warp' \
|
||||
-H 'Accept: */*' \
|
||||
-H 'Accept-Language: ru-RU,ru;q=0.9,en-US;q=0.8,en;q=0.7' \
|
||||
-H 'Connection: keep-alive' \
|
||||
-H 'Content-Type: application/json' \
|
||||
-H 'Origin: https://warp.llimonix.pw' \
|
||||
-H 'Referer: https://warp.llimonix.pw/' \
|
||||
-H 'Sec-Fetch-Dest: empty' \
|
||||
-H 'Sec-Fetch-Mode: cors' \
|
||||
-H 'Sec-Fetch-Site: same-origin' \
|
||||
-H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36' \
|
||||
-H 'sec-ch-ua: "Not(A:Brand";v="99", "Google Chrome";v="133", "Chromium";v="133")' \
|
||||
-H 'sec-ch-ua-mobile: ?0' \
|
||||
-H 'sec-ch-ua-platform: "Windows"' \
|
||||
--data-raw '{"selectedServices":[],"siteMode":"all","deviceType":"computer"}')
|
||||
|
||||
|
||||
#парсим результат запроса конфигурации WARP
|
||||
content=$(echo $result | jq '.content')
|
||||
configBase64=$(echo $content | jq -r '.configBase64')
|
||||
#echo "$result"
|
||||
warp_config=$(echo "$configBase64" | base64 -d)
|
||||
#echo "$warp_config"
|
||||
while IFS=' = ' read -r line; do
|
||||
if echo "$line" | grep -q "="; then
|
||||
# Разделяем строку по первому вхождению "="
|
||||
key=$(echo "$line" | cut -d'=' -f1 | xargs) # Убираем пробелы
|
||||
value=$(echo "$line" | cut -d'=' -f2- | xargs) # Убираем пробелы
|
||||
eval "$key=\"$value\""
|
||||
fi
|
||||
done < <(echo "$warp_config")
|
||||
|
||||
#вытаскиваем нужные нам данные из распарсинного ответа
|
||||
Address=$(echo "$Address" | cut -d',' -f1)
|
||||
DNS=$(echo "$DNS" | cut -d',' -f1)
|
||||
AllowedIPs=$(echo "$AllowedIPs" | cut -d',' -f1)
|
||||
EndpointIP=$(echo "$Endpoint" | cut -d':' -f1)
|
||||
EndpointPort=$(echo "$Endpoint" | cut -d':' -f2)
|
||||
|
||||
echo "Create and configure tunnel AmneziaWG WARP..."
|
||||
|
||||
#задаём имя интерфейса
|
||||
INTERFACE_NAME="awg_route0"
|
||||
CONFIG_NAME="amnezia_route0"
|
||||
PROTO="amneziawg"
|
||||
ZONE_NAME="awg"
|
||||
|
||||
uci set network.${INTERFACE_NAME}=interface
|
||||
uci set network.${INTERFACE_NAME}.proto=$PROTO
|
||||
uci set network.${INTERFACE_NAME}.private_key=$PrivateKey
|
||||
uci set network.${INTERFACE_NAME}.listen_port='51821'
|
||||
uci set network.${INTERFACE_NAME}.addresses=$Address
|
||||
uci set network.${INTERFACE_NAME}.awg_jc=$Jc
|
||||
uci set network.${INTERFACE_NAME}.awg_jmin=$Jmin
|
||||
uci set network.${INTERFACE_NAME}.awg_jmax=$Jmax
|
||||
uci set network.${INTERFACE_NAME}.awg_s1=$S1
|
||||
uci set network.${INTERFACE_NAME}.awg_s2=$S2
|
||||
uci set network.${INTERFACE_NAME}.awg_h1=$H1
|
||||
uci set network.${INTERFACE_NAME}.awg_h2=$H2
|
||||
uci set network.${INTERFACE_NAME}.awg_h3=$H3
|
||||
uci set network.${INTERFACE_NAME}.awg_h4=$H4
|
||||
uci set network.${INTERFACE_NAME}.mtu=$MTU
|
||||
|
||||
if ! uci show network | grep -q ${CONFIG_NAME}; then
|
||||
uci add network ${CONFIG_NAME}
|
||||
echo "add $INTERFACE_NAME"
|
||||
fi
|
||||
|
||||
uci set network.@${CONFIG_NAME}[0]=$CONFIG_NAME
|
||||
uci set network.@${CONFIG_NAME}[0].name="${INTERFACE_NAME}_client"
|
||||
uci set network.@${CONFIG_NAME}[0].public_key=$PublicKey
|
||||
uci set network.@${CONFIG_NAME}[0].route_allowed_ips='0'
|
||||
uci set network.@${CONFIG_NAME}[0].persistent_keepalive='25'
|
||||
uci set network.@${CONFIG_NAME}[0].endpoint_host=$EndpointIP
|
||||
uci set network.@${CONFIG_NAME}[0].allowed_ips='0.0.0.0/0'
|
||||
uci set network.@${CONFIG_NAME}[0].endpoint_port=$EndpointPort
|
||||
uci commit network
|
||||
|
||||
if ! uci show firewall | grep -q "@zone.*name='${ZONE_NAME}'"; then
|
||||
printf "\033[32;1mZone Create\033[0m\n"
|
||||
uci add firewall zone
|
||||
uci set firewall.@zone[-1].name=$ZONE_NAME
|
||||
uci set firewall.@zone[-1].network=$INTERFACE_NAME
|
||||
uci set firewall.@zone[-1].forward='REJECT'
|
||||
uci set firewall.@zone[-1].output='ACCEPT'
|
||||
uci set firewall.@zone[-1].input='REJECT'
|
||||
uci set firewall.@zone[-1].masq='1'
|
||||
uci set firewall.@zone[-1].mtu_fix='1'
|
||||
uci set firewall.@zone[-1].family='ipv4'
|
||||
uci commit firewall
|
||||
fi
|
||||
|
||||
if ! uci show firewall | grep -q "@forwarding.*name='${ZONE_NAME}'"; then
|
||||
printf "\033[32;1mConfigured forwarding\033[0m\n"
|
||||
uci add firewall forwarding
|
||||
uci set firewall.@forwarding[-1]=forwarding
|
||||
uci set firewall.@forwarding[-1].name="${ZONE_NAME}-lan"
|
||||
uci set firewall.@forwarding[-1].dest=${ZONE_NAME}
|
||||
uci set firewall.@forwarding[-1].src='lan'
|
||||
uci set firewall.@forwarding[-1].family='ipv4'
|
||||
uci commit firewall
|
||||
fi
|
||||
|
||||
if [ -f "/etc/init.d/podkop" ]; then
|
||||
path_podkop_config="/etc/config/podkop"
|
||||
path_podkop_config_backup="/root/podkop"
|
||||
URL="https://raw.githubusercontent.com/CodeRoK7/RouterichAX3000_configs/refs/heads/main"
|
||||
printf "Podkop installed. Reconfigured on AWG WARP? (y/n): \n"
|
||||
read is_reconfig_podkop
|
||||
if [ "$is_reconfig_podkop" = "y" ] || [ "$is_reconfig_podkop" = "Y" ]; then
|
||||
cp -f "$path_podkop_config" "$path_podkop_config_backup"
|
||||
wget -O "$path_podkop_config" "$URL/podkop"
|
||||
echo "Backup of your config in path '$path_podkop_config_backup'"
|
||||
echo "Podkop reconfigured..."
|
||||
echo "Service Podkop restart..."
|
||||
service podkop restart
|
||||
fi
|
||||
else
|
||||
printf "\033[32;1mInstall and configure PODKOP (a tool for point routing of traffic)?? (y/n): \033[0m\n"
|
||||
read is_install_podkop
|
||||
|
||||
if [ "$is_install_podkop" = "y" ] || [ "$is_install_podkop" = "Y" ]; then
|
||||
DOWNLOAD_DIR="/tmp/podkop"
|
||||
mkdir -p "$DOWNLOAD_DIR"
|
||||
REPO="https://api.github.com/repos/itdoginfo/podkop/releases/tags/v0.2.5"
|
||||
wget -qO- "$REPO" | grep -o 'https://[^"]*\.ipk' | while read -r url; do
|
||||
filename=$(basename "$url")
|
||||
echo "Download $filename..."
|
||||
wget -q -O "$DOWNLOAD_DIR/$filename" "$url"
|
||||
done
|
||||
opkg install $DOWNLOAD_DIR/podkop*.ipk
|
||||
opkg install $DOWNLOAD_DIR/luci-app-podkop*.ipk
|
||||
opkg install $DOWNLOAD_DIR/luci-i18n-podkop-ru*.ipk
|
||||
rm -f $DOWNLOAD_DIR/podkop*.ipk $DOWNLOAD_DIR/luci-app-podkop*.ipk $DOWNLOAD_DIR/luci-i18n-podkop-ru*.ipk
|
||||
|
||||
uci set podkop.main.mode='vpn'
|
||||
uci set podkop.main.interface="$INTERFACE_NAME"
|
||||
uci set podkop.main.domain_list_enabled='1'
|
||||
uci set podkop.main.domain_list='ru_inside'
|
||||
uci set podkop.main.delist_domains_enabled='0'
|
||||
uci add_list podkop.main.subnets='meta'
|
||||
uci add_list podkop.main.subnets='twitter'
|
||||
uci add_list podkop.main.subnets='discord'
|
||||
uci commit podkop
|
||||
echo "Service Podkop restart..."
|
||||
service podkop restart
|
||||
fi
|
||||
fi
|
||||
|
||||
printf "\033[32;1mStop and disabled service 'youtubeUnblock'...\033[0m"
|
||||
service youtubeUnblock stop
|
||||
service youtubeUnblock disable
|
||||
|
||||
printf "Configured completed...\n\033[32;1mRestart network...\033[0m\n"
|
||||
service firewall restart
|
||||
service network restart
|
||||
@@ -35,18 +35,18 @@ then
|
||||
do
|
||||
cp -f "$DIR/$file" "$DIR_BACKUP/$file"
|
||||
done
|
||||
|
||||
echo "Replace configs..."
|
||||
|
||||
for file in $config_files
|
||||
do
|
||||
if [ "$file" != "dhcp" ]
|
||||
then
|
||||
wget -O "$DIR/$file" "$URL/$file"
|
||||
fi
|
||||
done
|
||||
fi
|
||||
|
||||
echo "Replace configs..."
|
||||
|
||||
for file in $config_files
|
||||
do
|
||||
if [ "$file" != "dhcp" ]
|
||||
then
|
||||
wget -O "$DIR/$file" "$URL/$file"
|
||||
fi
|
||||
done
|
||||
|
||||
echo "Configure dhcp..."
|
||||
|
||||
uci set dhcp.cfg01411c.strictorder='1'
|
||||
|
||||
26
podkop
Normal file
26
podkop
Normal file
@@ -0,0 +1,26 @@
|
||||
|
||||
config main 'main'
|
||||
option mode 'vpn'
|
||||
option domain_list_enabled '1'
|
||||
option subnets_list_enabled '1'
|
||||
option custom_domains_list_enabled 'disabled'
|
||||
option custom_subnets_list_enabled 'disabled'
|
||||
option all_traffic_from_ip_enabled '0'
|
||||
option custom_download_domains_list_enabled '0'
|
||||
option custom_download_subnets_list_enabled '0'
|
||||
option exclude_from_ip_enabled '0'
|
||||
option exclude_ntp '1'
|
||||
option update_interval '0 4 * * *'
|
||||
option custom_local_domains_list_enabled '0'
|
||||
option interface 'awg_route0'
|
||||
option domain_list 'ru_inside'
|
||||
option delist_domains_enabled '0'
|
||||
list subnets 'meta'
|
||||
list subnets 'twitter'
|
||||
list subnets 'discord'
|
||||
|
||||
config second 'second'
|
||||
option second_enable '0'
|
||||
option domain_list_enabled '0'
|
||||
list domains 'youtube'
|
||||
|
||||
Reference in New Issue
Block a user