@@ -1,8 +1,8 @@
#!/bin/bash
# ==========================================================
# 脚本名称: install.sh (IP-Sentinel 分布式边缘节点部署脚本 v3.0 .3 - Global Nexus)
# 核心功能: 区域选择、模块按需开启、官方机器人一键配置
# 脚本名称: install.sh (IP-Sentinel 分布式边缘节点部署脚本 v3.2 .3 - Global Nexus)
# 核心功能: 区域选择、模块按需开启、官方机器人一键配置、平滑热更新
# ==========================================================
# 你的 GitHub 仓库 Raw 数据直链前缀
@@ -51,8 +51,31 @@ if [ "$ACTION_CHOICE" == "2" ]; then
exit 0
fi
# ================== [v3.1.1 新增: 安装前环境纯净度清理 (严格保留日志) ] ==================
echo -e "\n⏳ 正在清理旧版守护进程与冗余任务 (保留历史日志)... "
# ================== [v3.2.2 新增: 平滑升级模式嗅探 ] ==================
UPGRADE_MODE = "false "
KEEP_LOGS = "true"
if [ " $ACTION_CHOICE " = = "1" ] && [ -f " $CONFIG_FILE " ] ; then
echo -e "\n\033[33m💡 哨兵雷达提示：检测到本机已部署过 IP-Sentinel。\033[0m"
read -p "👉 是否按原配置直接进行平滑升级？(y/n, 默认y): " UPGRADE_CHOICE
if [ [ -z " $UPGRADE_CHOICE " || " $UPGRADE_CHOICE " = ~ ^[ Yy] $ ] ] ; then
UPGRADE_MODE = "true"
read -p "👉 是否保留历史运行日志？(y/n, 默认y): " LOG_CHOICE
if [ [ " $LOG_CHOICE " = ~ ^[ Nn] $ ] ] ; then
KEEP_LOGS = "false"
fi
# 将原配置读入环境变量，为后续跳过配置步骤提供燃料
source " $CONFIG_FILE "
echo -e "\033[32m✅ 已激活 [平滑升级模式]，即将跳过基础配置，直接更新核心装甲...\033[0m"
else
echo -e "\033[33m🔄 您选择了重新配置，旧的哨兵数据将被彻底抹除。\033[0m"
fi
fi
# ====================================================================
# ================== [v3.1.1/v3.2.2 优化: 安装前环境纯净度清理] ==================
echo -e "\n⏳ 正在清理旧版守护进程与冗余任务..."
# 1. 强制超度可能存活的 Webhook 及各类看门狗进程，释放端口
pkill -9 -f "webhook.py" >/dev/null 2>& 1 || true
pkill -9 -f "agent_daemon.sh" >/dev/null 2>& 1 || true
@@ -65,236 +88,253 @@ if crontab -l >/dev/null 2>&1; then
rm -f /tmp/cron_clean
fi
# 3. 抹除旧版核心代码与配置文件 ，杜绝代码冲突 (精准避开 logs 目录 )
if [ -d " $INSTALL_DIR ] ; then
rm -rf " ${ INSTALL_DIR } /core " " ${ INSTALL_DIR } /data " " ${ INSTALL_DIR } /config.conf " " ${ INSTALL_DIR } /.last_ip " 2>/dev/null
# 3. 抹除旧版核心代码，杜绝代码冲突 (根据模式分流 )
if [ " $UPGRADE_MODE " = = "true " ] ; then
# 升级模式：仅销毁核心引擎，严格保留 config 与 data
rm -rf " ${ INSTALL_DIR } /core " 2>/dev/null
if [ " $KEEP_LOGS " = = "false" ] ; then
rm -rf " ${ INSTALL_DIR } /logs " 2>/dev/null
echo -e "🗑️ 历史日志已按指令清空。"
else
echo -e "📦 历史配置与战地日志已妥善保留。"
fi
else
# 全新安装模式：焦土政策，彻底抹除
if [ -d " $INSTALL_DIR " ] ; then
rm -rf " ${ INSTALL_DIR } /core " " ${ INSTALL_DIR } /data " " ${ INSTALL_DIR } /config.conf " " ${ INSTALL_DIR } /.last_ip " 2>/dev/null
fi
fi
echo -e "\033[32m✅ 环境清理完毕，幽灵进程已肃清！\033[0m"
# ========================================================================================
# 📍 动态一级菜单：国家选择
echo -e "\n\033[36m📍 【第一级】请选择目标国家/地区:\033[0m"
jq -r '.countries[] | "\(.id)|\(.name)|\(.keyword_file)"' /tmp/map.json > /tmp/countries.txt
i = 1; COUNTRY_MAP = ( ) ; KEYWORD_MAP = ( )
while IFS = "|" read -r c_id c_name k_file; do
echo " $i ) $c_name "
COUNTRY_MAP[ $i ] = " $c_id "
KEYWORD_MAP[ $i ] = " $k_file "
( ( i++) )
done < /tmp/countries.txt
# ==========================================================
# 🛑 如果是全新部署，才执行以下所有交互逻辑；否则直接跳过
# ==========================================================
if [ " $UPGRADE_MODE " = = "false" ] ; then
read -p " 请输入选择 [1- $(( i-1)) ] (默认1): " C_SEL
C_SEL = ${ C_SEL :- 1 }
COUNTRY_ID = " ${ COUNTRY_MAP [ $C_SEL ] } "
KEYWORD_FILE = " ${ KEYWORD_MAP [ $C_SEL ] } "
REGION_CODE = " $COUNTRY_ID " # 兼容旧版的 config.conf
# 📍 动态二级菜单：省/州选择
echo -e " \n\033[36m📍 【第二级】正在检索 [ $COUNTRY_ID ] 的行政区数据...\033[0m "
jq -r " .countries[] | select(.id==\" $COUNTRY_ID \") | .states[] | \"\(.id)|\(.name)\" " /tmp/map.json > /tmp/states.txt
STATE_COUNT = $( wc -l < /tmp/states.txt)
if [ " $STATE_COUNT " -eq 1 ] ; then
IFS = "|" read -r STATE_ID STATE_NAME < /tmp/states.txt
echo -e " \033[32m💡 该国家下仅有单一配置 [ $STATE_NAME ]，已自动跃迁。\033[0m "
else
i = 1; STATE_MAP = ( )
while IFS = "|" read -r s_id s_name; do
echo " $i ) $s_name "
STATE_MAP[ $i ] = " $s_id "
( ( i++) )
done < /tmp/states.txt
read -p " 请输入选择 [1- $(( i-1)) ] (默认1): " S_SEL
S_SEL = ${ S_SEL :- 1 }
STATE_ID = " ${ STATE_MAP [ $S_SEL ] } "
fi
# 📍 动态三级菜单：城市选择
echo -e "\n\033[36m📍 【第三级】请锁定具体城市节点:\033[0m"
jq -r " .countries[] | select(.id==\" $COUNTRY_ID \") | .states[] | select(.id==\" $STATE_ID \") | .cities[] | \"\(.id)|\(.name)\" " /tmp/map.json > /tmp/cities.txt
CITY_COUNT = $( wc -l < /tmp/cities.txt)
if [ " $CITY_COUNT " -eq 1 ] ; then
IFS = "|" read -r CITY_ID CITY_NAME < /tmp/cities.txt
echo -e " \033[32m💡 该区域下仅有单一城市 [ $CITY_NAME ]，已自动锁定。\033[0m "
else
i = 1; CITY_MAP = ( )
while IFS = "|" read -r c_id c_name; do
# 📍 动态一级菜单：国家选择
echo -e "\n\033[36m📍 【第一级】请选择目标国家/地区:\033[0m"
jq -r '.countries[] | "\(.id)|\(.name)|\(.keyword_file)"' /tmp/map.json > /tmp/countries.txt
i = 1; COUNTRY_MAP = ( ) ; KEYWORD_MAP = ( )
while IFS = "|" read -r c_id c_name k_file; do
echo " $i ) $c_name "
CIT Y_MAP[ $i ] = " $c_id "
COUNTR Y_MAP[ $i ] = " $c_id "
KEYWORD_MAP[ $i ] = " $k_file "
( ( i++) )
done < /tmp/cit ies.txt
read -p " 请输入选择 [1- $(( i-1)) ] (默认1): " CI_SEL
CI_SEL = ${ CI_SEL :- 1 }
CITY_ID = " ${ CITY_MAP [ $CI_SEL ] } "
fi
done < /tmp/countr ies.txt
# 清理临时文件
rm -f /tmp/map.json /tmp/countries.txt /tmp/states.txt /tmp/cities.txt
read -p " 请输入选择 [1- $(( i-1)) ] (默认1): " C_SEL
C_SEL = ${ C_SEL :- 1 }
COUNTRY_ID = " ${ COUNTRY_MAP [ $C_SEL ] } "
KEYWORD_FILE = " ${ KEYWORD_MAP [ $C_SEL ] } "
REGION_CODE = " $COUNTRY_ID " # 兼容旧版的 config.conf
# 本地工作目录初始化 (支持 v3.0 的深度层级)
mkdir -p " ${ INSTALL_DIR } /core "
mkdir -p " ${ INSTALL_DIR } /data/keywords "
mkdir -p " ${ INSTALL_DIR } /data/regions/ ${ COUNTRY_ID } / ${ STATE_ID } "
mkdir -p " ${ INSTALL_DIR } /logs "
# 📍 动态二级菜单：省/州选择
echo -e " \n\033[36m📍 【第二级】正在检索 [ $COUNTRY_ID ] 的行政区数据...\033[0m "
jq -r " .countries[] | select(.id==\" $COUNTRY_ID \") | .states[] | \"\(.id)|\(.name)\" " /tmp/map.json > /tmp/states.txt
STATE_COUNT = $( wc -l < /tmp/states.txt)
# 3. 功能模块前置开关 (按需加载)
echo -e "\n[3/7] 请选择需要开启的养护模块 (按需开启，节省资源):"
echo " 1) 📍 仅开启 [Google 区域纠偏] (默认，适合流媒体解锁机位漂移) "
echo " 2) 🛡️ 仅开启 [IP 信用净化] (适合高风险机房 IP 降低 Scamalytics 分数)"
echo " 3) 🔥 双管齐下 (同时开启以上两项)"
read -p "请输入选择 [1-3] (默认1): " MODULE_CHOICE
ENABLE_GOOGLE = "true"
ENABLE_TRUST = "false"
case ${ MODULE_CHOICE :- 1 } in
2) ENABLE_GOOGLE = "false" ; ENABLE_TRUST = "true" ; ;
3) ENABLE_GOOGLE = "true" ; ENABLE_TRUST = "true" ; ;
*) ENABLE_GOOGLE = "true" ; ENABLE_TRUST = "false" ; ;
esac
# 4. 接入 Master 中枢配置
echo -e "\n[4/7] 是否接入 Master 司令部？(需要配置与主控相同的 TG 机器人) (y/n)"
read -p "请输入选择 [y/n] (默认n): " TG_CHOICE
TG_TOKEN = ""
CHAT_ID = ""
AGENT_PORT = "9527"
if [ [ " $TG_CHOICE " = ~ ^[ Yy] $ ] ] ; then
echo -e "\n\033[33m💡 提示：您可以选择使用自己的机器人，或者直接回车使用官方公共机器人。\033[0m"
echo -e "\033[33m⚠️
read -p "请输入您的 Telegram Bot Token (回车使用官方默认): " USER_TOKEN
if [ -z " $USER_TOKEN " ] ; then
TG_TOKEN = "OFFICIAL_GATEWAY_MODE"
TG_API_URL = "https://omni-gateway.samanthaestime296.workers.dev"
echo -e "\033[32m✅ 已自动连接官方安全网关 (@OmniBeacon_bot)。\033[0m"
echo -e "\033[33m👉 请确保您已关注官方机器人并发送过 /start，
if [ " $STATE_COUNT " -eq 1 ] ; then
IFS = "|" read -r STATE_ID STATE_NAME < /tmp/states.txt
echo -e " \033[32m💡 该国家下仅有单一配置 [ $STATE_NAME ]，已自动跃迁。\033[0m
else
TG_TOKEN = " $USER_TOKEN "
TG_API_URL = " https://api.telegram.org/bot ${ TG_TOKEN } /sendMessage "
echo -e "\033[32m✅ 已记录您的私有机器人 Token。\033[0m "
i = 1; STATE_MAP = ( )
while IFS = "|" read -r s_id s_name; do
echo " $i ) $s_name
STATE_MAP[ $i ] = " $s_id "
( ( i++) )
done < /tmp/states.txt
read -p " 请输入选择 [1- $(( i-1)) ] (默认1): " S_SEL
S_SEL = ${ S_SEL :- 1 }
STATE_ID = " ${ STATE_MAP [ $S_SEL ] } "
fi
echo -e "\033[33m💡 提示：如果您不知道自己的 Chat ID，
read p "请输入你的 Chat ID (与主控一致): " CHAT_ID
# ================== [v3.0.3 变更: 智能随机高位端口生成系统] ==================
echo -e "\n\033[36m[4.2/7] 正在构建 Webhook 安全通信隧道...\033[0m"
echo -n "🎲 正在探测可用随机端口..."
while true; do
RANDOM_PORT = $(( RANDOM % 55536 + 10000 ))
# 同时兼容 ss (新) 和 netstat (旧) 检查端口占用
if ! ( ss -tuln 2>/dev/null | grep -q " : $RANDOM_PORT " || netstat -tuln 2>/dev/null | grep -q " : $RANDOM_PORT " ) ; then
b reak
fi
echo -n ". "
done
echo -e " 完成！"
echo -e " 💡 系统为您生成的推荐随机高位端口为: \033[32m $RANDOM_PORT \033[0m "
echo -e "\033[33m(该端口已通过本地占用校验，可直接使用)\033[0m "
while true; do
read -p "请输入 Webhook 监听端口 (回车采用推荐, 或手动输入): " INPUT_PORT
# 📍 动态三级菜单：城市选择
echo e "\n\033[36m📍 【第三级】请锁定具体城市节点:\033[0m"
jq -r " .countries[] | select(.id==\" $COUNTRY_ID \") | .states[] | select(.id==\" $STATE_ID \") | .cities[] | \"\(.id)|\(.name)\" " /tmp/map.json > /tmp/cities.txt
CITY_COUNT = $( wc -l < /tmp/cities.txt)
if [ " $CITY_COUNT " -eq 1 ] ; then
IFS = "|" read -r CITY_ID CITY_NAME < /tmp/cities.txt
echo -e " \033[32m💡 该区域下仅有单一城市 [ $CITY_NAME ]，已自动锁定。\033[0m "
else
i = 1; CITY_MAP = ( )
while IFS = "|" read -r c_id c_name; do
echo " $i ) $c_name "
CITY_MAP[ $i ] = " $c_id
( ( i++) )
done < /tmp/cities.txt
read -p " 请输入选择 [1- $(( i-1)) ] (默认1): " CI_SEL
CI_SEL = ${ CI_SEL :- 1 }
CITY_ID = " ${ CITY_MAP [ $CI_SEL ] }
fi
# 清理临时文件
rm -f /tmp/map.json /tmp/countries.txt /tmp/states.txt /tmp/cities.txt
# 本地工作目录初始化 (支持 v3.0 的深度层级)
mkdir -p " ${ INSTALL_DIR } /core "
mkdir -p " ${ INSTALL_DIR } /data/keywords "
mkdir -p " ${ INSTALL_DIR } /data/regions/ ${ COUNTRY_ID } / ${ STATE_ID } "
mkdir -p " ${ INSTALL_DIR } /logs "
# 3. 功能模块前置开关 (按需加载)
echo -e "\n[3/7] 请选择需要开启的养护模块 (按需开启，节省资源):"
echo " 1) 📍 仅开启 [Google 区域纠偏] (默认，适合流媒体解锁机位漂移)"
echo " 2) 🛡️ 仅开启 [IP 信用净化] (适合高风险机房 IP 降低 Scamalytics 分数)"
echo " 3) 🔥 双管齐下 (同时开启以上两项)"
read -p "请输入选择 [1-3] (默认1): " MODULE_CHOICE
ENABLE_GOOGLE = "true"
ENABLE_TRUST = "false"
case ${ MODULE_CHOICE :- 1 } in
2) ENABLE_GOOGLE = "false" ; ENABLE_TRUST = "true" ; ;
3) ENABLE_GOOGLE = "true" ; ENABLE_TRUST = "true" ; ;
*) ENABLE_GOOGLE = "true" ; ENABLE_TRUST = "false" ; ;
esac
# 4. 接入 Master 中枢配置
echo -e "\n[4/7] 是否接入 Master 司令部？(需要配置与主控相同的 TG 机器人) (y/n)"
read -p "请输入选择 [y/n] (默认n): " TG_CHOICE
TG_TOKEN = ""
CHAT_ID = ""
AGENT_PORT = "9527"
if [ [ " $TG_CHOICE " = ~ ^[ Yy] $ ] ] ; then
echo -e "\n\033[33m💡 提示：您可以选择使用自己的机器人，或者直接回车使用官方公共机器人。\033[0m"
echo -e "\033[33m⚠️
if [ z "$INPUT_PORT " ] ; then
AGENT_PORT = " $RANDOM_PORT "
break
read p "请输入您的 Telegram Bot Token (回车使用官方默认): " USER_TOKEN
if [ -z " $USER_TOKEN " ] ; then
TG_TOKEN = "OFFICIAL_GATEWAY_MODE"
TG_API_URL = "https://omni-gateway.samanthaestime296.workers.dev"
echo -e "\033[32m✅ 已自动连接官方安全网关 (@OmniBeacon_bot)。\033[0m"
echo -e "\033[33m👉 请确保您已关注官方机器人并发送过 /start，
else
# 校验手动输入的合法性与可用性
if [ [ " $INPUT_PORT " = ~ ^[ 0-9] +$ ] ] && [ " $INPUT_PORT " -ge 1 ] && [ " $INPUT_PORT " -le 65535 ] ; then
if ( ss -tuln 2>/dev/null | grep -q ": $INPUT_PORT " || netstat -tuln 2>/dev/null | grep -q " : $INPUT_PORT " ) ; then
echo -e " \033[31m❌ 端口 $INPUT_PORT 已被占用，请重新输入或使用推荐端口。\033[0m "
else
AGENT_PORT = " $INPUT_PORT
break
fi
else
echo -e "\033[31m❌ 输入非法！端口范围应为 1-65535。 \033[0m"
TG_TOKEN = " $USER_TOKEN "
TG_API_URL = " https://api.telegram.org/bot ${ TG_TOKEN } /sendMessage "
echo e "\033[32m✅ 已记录您的私有机器人 Token。\033[0m"
fi
echo -e "\033[33m💡 提示：如果您不知道自己的 Chat ID， "
read -p "请输入你的 Chat ID (与主控一致): " CHAT_ID
# ================== [v3.0.3 变更: 智能随机高位端口生成系统] ==================
echo -e "\n\ 033[36m[4.2/7] 正在构建 Webhook 安全通信隧道... \033[0m"
echo -n "🎲 正在探测可用随机端口..."
while true; do
RANDOM_PORT = $(( RANDOM % 55536 + 10000 ))
# 同时兼容 ss (新) 和 netstat (旧) 检查端口占用
if ! ( ss -tuln 2>/dev/null | grep -q " : $RANDOM_PORT " || netstat -tuln 2>/dev/null | grep -q " : $RANDOM_PORT " ) ; then
break
fi
fi
done
echo -e "✅ 已锁定 Webhook 通讯端口: \033[32m $AGENT_PORT \033[0m
# ====================================================================
fi
echo -n "."
done
echo -e " 完成！ "
echo -e " 💡 系统为您生成的推荐随机高位端口为: \033[32m $RANDOM_PORT \033[0m "
echo -e "\033[33m(该端口已通过本地占用校验，可直接使用)\033[0m"
while true; do
read -p "请输入 Webhook 监听端口 (回车采用推荐, 或手动输入): " INPUT_PORT
if [ -z " $INPUT_PORT " ] ; then
AGENT_PORT = " $RANDOM_PORT "
break
else
# 校验手动输入的合法性与可用性
if [ [ " $INPUT_PORT " = ~ ^[ 0-9] +$ ] ] && [ " $INPUT_PORT " -ge 1 ] && [ " $INPUT_PORT " -le 65535 ] ; then
if ( ss -tuln 2>/dev/null | grep -q " : $INPUT_PORT " || netstat -tuln 2>/dev/null | grep -q " : $INPUT_PORT " ) ; then
echo -e " \033[31m❌ 端口 $INPUT_PORT 已被占用，请重新输入或使用推荐端口。\033[0m "
else
AGENT_PORT = " $INPUT_PORT "
break
fi
else
echo -e "\033[31m❌ 输入非法！端口范围应为 1-65535。\033[0m"
fi
fi
done
echo -e " ✅ 已锁定 Webhook 通讯端口: \033[32m $AGENT_PORT \033[0m "
# ====================================================================
fi
# ================== [v3.0.1新增修改 1: 冗余网络栈探测与锚点锁定] ==================
echo -e "\n\033[36m[4.5/7] 正在探测本机网络栈与可用出口 (多节点雷达扫描中)...\033[0m"
# ================== [v3.0.1新增修改 1: 冗余网络栈探测与锚点锁定] ==================
echo -e "\n\033[36m[4.5/7] 正在探测本机网络栈与可用出口 (多节点雷达扫描中)...\033[0m"
# 引入容灾机制：依次尝试三个不同的 API，
DETECT_V4 = $( ( curl -4 -s -m 3 api.ip.sb/ip || curl -4 -s -m 3 ifconfig.me || curl -4 -s -m 3 ipv4.icanhazip.com) 2>/dev/null | grep -E "^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+" | head -n 1 | tr -d '[:space:]' )
DETECT_V6 = $( ( curl -6 -s -m 3 api.ip.sb/ip || curl -6 -s -m 3 ifconfig.me || curl -6 -s -m 3 ipv6.icanhazip.com) 2>/dev/null | grep -E "^[0-9a-fA-F:]+.*:" | head -n 1 | tr -d '[:space:]' )
# 引入容灾机制：依次尝试三个不同的 API，
DETECT_V4 = $( ( curl -4 -s -m 3 api.ip.sb/ip || curl -4 -s -m 3 ifconfig.me || curl -4 -s -m 3 ipv4.icanhazip.com) 2>/dev/null | grep -E "^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+" | head -n 1 | tr -d '[:space:]' )
DETECT_V6 = $( ( curl -6 -s -m 3 api.ip.sb/ip || curl -6 -s -m 3 ifconfig.me || curl -6 -s -m 3 ipv6.icanhazip.com) 2>/dev/null | grep -E "^[0-9a-fA-F:]+.*:" | head -n 1 | tr -d '[:space:]' )
# 构建动态选项数组
IP_OPTIONS = ( )
IP_PROTO = ( )
# 构建动态选项数组
IP_OPTIONS = ( )
IP_PROTO = ( )
[ [ -n " $DETECT_V4 " ] ] && { IP_OPTIONS += ( " $DETECT_V4 " ) ; IP_PROTO += ( "4" ) ; }
[ [ -n " $DETECT_V6 " ] ] && { IP_OPTIONS += ( " $DETECT_V6 " ) ; IP_PROTO += ( "6" ) ; }
[ [ -n " $DETECT_V4 " ] ] && { IP_OPTIONS += ( " $DETECT_V4 " ) ; IP_PROTO += ( "4" ) ; }
[ [ -n " $DETECT_V6 " ] ] && { IP_OPTIONS += ( " $DETECT_V6 " ) ; IP_PROTO += ( "6" ) ; }
if [ ${# IP_OPTIONS [@] } -eq 0 ] ; then
echo -e "\033[33m⚠️ ，
read -p "请输入您要绑定的公网 IP (v4 或 v6): " PUBLIC_IP
[ [ " $PUBLIC_IP " = = *":" * ] ] && IP_PREF = "6" || IP_PREF = "4"
else
echo "📍 发现可用出口 IP，
for i in " ${ !IP_OPTIONS[@] } " ; do
num = $(( i+1))
if [ " ${ IP_PROTO [ $i ] } " = = "4" ] ; then
echo " $num ) 🌐 IPv4: ${ IP_OPTIONS [ $i ] } (默认选项) "
else
echo " $num ) 🌌 IPv6: ${ IP_OPTIONS [ $i ] } "
fi
done
CUSTOM_OPT = $(( ${# IP_OPTIONS [@] } + 1 ))
echo " $CUSTOM_OPT ) ✍️ 手动指定其他 IP (适合多 IP 站群机) "
read -p "请输入选择 (默认1): " IP_CHOICE
IP_CHOICE = ${ IP_CHOICE :- 1 }
if [ " $IP_CHOICE " -le " ${# IP_OPTIONS [@] } " ] && [ " $IP_CHOICE " -gt 0 ] ; then
idx = $(( IP_CHOICE-1))
PUBLIC_IP = " ${ IP_OPTIONS [ $idx ] } "
IP_PREF = " ${ IP_PROTO [ $idx ] } "
elif [ " $IP_CHOICE " -eq " $CUSTOM_OPT " ] ; then
if [ ${# IP_OPTIONS [@] } -eq 0 ] ; then
echo -e "\033[33m⚠️ ，
read -p "请输入您要绑定的公网 IP (v4 或 v6): " PUBLIC_IP
[ [ " $PUBLIC_IP " = = *":" * ] ] && IP_PREF = "6" || IP_PREF = "4"
else
# 兜底：乱输就默认选第一个
PUBLIC_IP = " ${ [0 ]} "
IP_PREF = " ${ IP_PROTO [0] } "
echo "📍 发现可用出口 IP，
for i in " ${ ! IP_OPTIONS[@ ]} " ; do
num = $(( i+1))
if [ " ${ IP_PROTO [ $i ] } " = = "4" ] ; then
echo " $num ) 🌐 IPv4: ${ IP_OPTIONS [ $i ] } (默认选项) "
else
echo " $num ) 🌌 IPv6: ${ IP_OPTIONS [ $i ] } "
fi
done
CUSTOM_OPT = $(( ${# IP_OPTIONS [@] } + 1 ))
echo " $CUSTOM_OPT ) ✍️ 手动指定其他 IP (适合多 IP 站群机) "
read -p "请输入选择 (默认1): " IP_CHOICE
IP_CHOICE = ${ IP_CHOICE :- 1 }
if [ " $IP_CHOICE " -le " ${# IP_OPTIONS [@] } " ] && [ " $IP_CHOICE " -gt 0 ] ; then
idx = $(( IP_CHOICE-1))
PUBLIC_IP = " ${ IP_OPTIONS [ $idx ] } "
IP_PREF = " ${ IP_PROTO [ $idx ] } "
elif [ " $IP_CHOICE " -eq " $CUSTOM_OPT " ] ; then
read -p "请输入您要绑定的公网 IP (v4 或 v6): " PUBLIC_IP
[ [ " $PUBLIC_IP " = = *":" * ] ] && IP_PREF = "6" || IP_PREF = "4"
else
# 兜底：乱输就默认选第一个
PUBLIC_IP = " ${ IP_OPTIONS [0] } "
IP_PREF = " ${ IP_PROTO [0] } "
fi
fi
fi
# 终极修复：为 IPv6 自动穿上防护装甲（方括号），解决 Master 拼接 URL 报错问题
if [ [ " $PUBLIC_IP " = = *":" * ] ] && [ [ " $PUBLIC_IP " != *"[" * ] ] ; then
BIND_IP = " [ ${ PUBLIC_IP } ] "
else
BIND_IP = " $PUBLIC_IP "
fi
echo -e " \033[32m✅ 哨兵锚点已永久锁定至: $BIND_IP \033[0m "
# ========================================================================
# 终极修复：为 IPv6 自动穿上防护装甲（方括号），解决 Master 拼接 URL 报错问题
if [ [ " $PUBLIC_IP " = = *":" * ] ] && [ [ " $PUBLIC_IP " != *"[" * ] ] ; then
BIND_IP = " [ ${ PUBLIC_IP } ] "
else
BIND_IP = " $PUBLIC_IP "
fi
echo -e " \033[32m✅ 哨兵锚点已永久锁定至: $BIND_IP \033[0m "
# ========================================================================
# 5. 远程拉取冷数据并解析固化
echo -e " \n[5/7] 正在从云端数据仓库拉取 [ ${ CITY_NAME } ] 节点的底层规则... "
REGION_JSON_FILE = " ${ INSTALL_DIR } /data/regions/ ${ COUNTRY_ID } / ${ STATE_ID } / ${ CITY_ID } .json "
curl -sL " ${ REPO_RAW_URL } /data/regions/ ${ COUNTRY_ID } / ${ STATE_ID } / ${ CITY_ID } .json " -o " $REGION_JSON_FILE "
# 5. 远程拉取冷数据并解析固化
echo -e " \n[5/7] 正在从云端数据仓库拉取 [ ${ CITY_NAME } ] 节点的底层规则... "
REGION_JSON_FILE = " ${ INSTALL_DIR } /data/regions/ ${ COUNTRY_ID } / ${ STATE_ID } / ${ CITY_ID } .json "
curl -sL " ${ REPO_RAW_URL } /data/regions/ ${ COUNTRY_ID } / ${ STATE_ID } / ${ CITY_ID } .json " -o " $REGION_JSON_FILE "
if [ ! -s " $REGION_JSON_FILE " ] ; then
echo "❌ 拉取或解析规则失败！请检查 Forgejo 仓库是否公开或网络是否畅通。"
exit 1
fi
if [ ! -s " $REGION_JSON_FILE " ] ; then
echo "❌ 拉取或解析规则失败！请检查 Forgejo 仓库是否公开或网络是否畅通。"
exit 1
fi
# 使用 jq 提取 JSON 里的核心值
REGION_NAME = $( jq -r '.region_name' " $REGION_JSON_FILE " )
BASE_LAT = $( jq -r '.google_module.base_lat' " $REGION_JSON_FILE " )
BASE_LON = $( jq -r '.google_module.base_lon' " $REGION_JSON_FILE " )
LANG_PARAMS = $( jq -r '.google_module.lang_params' " $REGION_JSON_FILE " )
VALID_URL_SUFFIX = $( jq -r '.google_module.valid_url_suffix' " $REGION_JSON_FILE " )
# 使用 jq 提取 JSON 里的核心值
REGION_NAME = $( jq -r '.region_name' " $REGION_JSON_FILE " )
BASE_LAT = $( jq -r '.google_module.base_lat' " $REGION_JSON_FILE " )
BASE_LON = $( jq -r '.google_module.base_lon' " $REGION_JSON_FILE " )
LANG_PARAMS = $( jq -r '.google_module.lang_params' " $REGION_JSON_FILE " )
VALID_URL_SUFFIX = $( jq -r '.google_module.valid_url_suffix' " $REGION_JSON_FILE " )
# 写入本地静态配置文件
cat > " $CONFIG_FILE " << EOF
# 写入本地静态配置文件
cat > " $CONFIG_FILE " << EOF
# IP-Sentinel 本地固化配置 (生成时间: $(date '+%Y-%m-%d %H:%M:%S'))
REGION_CODE="$REGION_CODE"
REGION_NAME="$REGION_NAME"
@@ -319,12 +359,19 @@ IP_PREF="$IP_PREF"
BIND_IP="$BIND_IP"
EOF
# ================== [v3.0.3 变更: 敏感配置文件权限收敛] ==================
chmod 600 " $CONFIG_FILE "
# ====================================================================
# ================== [v3.0.3 变更: 敏感配置文件权限收敛] ==================
chmod 600 " $CONFIG_FILE "
# ====================================================================
fi
# 🛑 拦截块结束 (全套交互配置跳过完毕)
# 6. 拉取全套组件 (按需下载，绝不浪费空间)
echo -e "\n[6/7] 正在根据模块开关部署核心引擎与热数据..."
# 确保目录在升级模式下也能被正确建立
mkdir -p " ${ INSTALL_DIR } /core "
mkdir -p " ${ INSTALL_DIR } /data/keywords "
# 基础公共组件
curl -sL " ${ REPO_RAW_URL } /core/runner.sh " -o " ${ INSTALL_DIR } /core/runner.sh "
curl -sL " ${ REPO_RAW_URL } /core/updater.sh " -o " ${ INSTALL_DIR } /core/updater.sh "
@@ -336,8 +383,13 @@ curl -sL "${REPO_RAW_URL}/data/user_agents.txt" -o "${INSTALL_DIR}/data/user_age
# 动态按需组件
if [ " $ENABLE_GOOGLE " = = "true" ] ; then
curl -sL " ${ REPO_RAW_URL } /core/mod_google.sh " -o " ${ INSTALL_DIR } /core/mod_google.sh "
# 根据 map.json 动态匹配的 词库文件进行 下载
curl -sL " ${ REPO_RAW_URL } /data/keywords/ ${ KEYWORD_FILE } " -o " ${ INSTALL_DIR } /data/keywords/ ${ KEYWORD_FILE } "
# [v3.2.2 修复] 动态匹配词库下载逻辑
if [ " $UPGRADE_MODE " = = "false" ] ; then
curl -sL " ${ REPO_RAW_URL } /data/keywords/ ${ KEYWORD_FILE } " -o " ${ INSTALL_DIR } /data/keywords/ ${ KEYWORD_FILE } "
else
# 升级模式：利用已有的 REGION_CODE 更新通用词库
curl -sL " ${ REPO_RAW_URL } /data/keywords/kw_ ${ REGION_CODE } .txt " -o " ${ INSTALL_DIR } /data/keywords/kw_ ${ REGION_CODE } .txt " 2>/dev/null || true
fi
fi
if [ " $ENABLE_TRUST " = = "true" ] ; then
@@ -376,18 +428,30 @@ fi
crontab /tmp/cron_backup
rm -f /tmp/cron_backup
# ================== [v3.2.2 优化: 战报通知分流 (注册/升级)] ==================
if [ [ -n " $TG_TOKEN " ] ] && [ [ -n " $CHAT_ID " ] ] ; then
echo -e "\n📡 正在向指挥部发送注册暗号..."
# 构造注册暗号 (V3.1.3 协议升级: 携带 REGION_CODE 大区标识)
NODE_NAME = $( hostname | cut -c 1-15)
REG_MSG = " #REGISTER#| ${ REGION_CODE } | ${ NODE_NAME } | ${ BIND_IP } | ${ AGENT_PORT } "
# 执行主动推送
PUSH_RESULT = $( curl -s -X POST " ${ TG_API_URL } " \
-d " chat_id= ${ CHAT_ID } " \
"parse_mode=Markdown " \
"text=✨ *IP-Sentinel 部署成功！*
if [ " $UPGRADE_MODE " = = "true" ] ; then
echo -e "\n📡 正在向指挥部发送升级成功战报..."
curl -s -X POST " ${ TG_API_URL } " \
-d "chat_id= ${ CHAT_ID } \
-d "parse_mode=Markdown" \
" text=✨ *IP-Sentinel 引擎热更新完成！*
📍 节点：\` ${ NODE_NAME } \`
🌐 IP： ${ BIND_IP } \`
🚀 状态： " >/dev/null 2>& 1
echo -e "\033[32m✅ 升级成功通知已推送到您的 Telegram！
else
echo -e "\n📡 正在向指挥部发送注册暗号..."
# 构造注册暗号 (V3.1.3 协议升级: 携带 REGION_CODE 大区标识)
REG_MSG = " #REGISTER#| ${ REGION_CODE } | ${ NODE_NAME } | ${ BIND_IP } | ${ AGENT_PORT } "
# 执行主动推送
PUSH_RESULT = $( curl -s -X POST " ${ TG_API_URL } " \
" chat_id= ${ CHAT_ID } " \
"parse_mode=Markdown" \
" text=✨ *IP-Sentinel 部署成功！*
📍 区域： ${ REGION_NAME }
🌐 IP： ${ BIND_IP }
🔌 端口： ${ AGENT_PORT }
@@ -395,15 +459,21 @@ if [[ -n "$TG_TOKEN" ]] && [[ -n "$CHAT_ID" ]]; then
🔑 *请点击下方指令复制并回复给机器人：*
\` ${ REG_MSG } \` " )
if echo " $PUSH_RESULT " | grep -q '"ok":true' ; then
echo -e "\033[32m✅ 注册信息已推送到您的 Telegram， ！
else
echo -e "\033[31m❌ 消息推送失败，请检查 Chat ID 是否正确或是否已关注机器人。\033[0m"
if echo " $PUSH_RESULT " | grep -q '"ok":true' ; then
echo -e "\033[32m✅ 注册信息已推送到您的 Telegram， ！
else
echo -e "\033[31m❌ 消息推送失败，请检查 Chat ID 是否正确或是否已关注机器人。\033[0m"
fi
fi
fi
# =========================================================================
echo "========================================================"
echo "🎉 边缘节点 (Agent) 部署流程彻底完成！"
if [ " $UPGRADE_MODE " = = "true" ] ; then
echo "🎉 边缘节点 (Agent) 平滑热更新已彻底完成！"
else
echo "🎉 边缘节点 (Agent) 部署流程彻底完成！"
fi
echo " 📍 你的本地守护区域已锁定为: $REGION_NAME "
echo "⚙️ 哨兵现已开启 [每30分钟] 的高频高拟真养护循环。"
if [ [ -n " $TG_TOKEN " ] ] ; then
@@ -416,7 +486,12 @@ if [[ -n "$TG_TOKEN" ]]; then
elif command -v firewall-cmd >/dev/null 2>& 1 && systemctl is-active firewalld | grep -qw active; then
FW_MSG = " firewall-cmd --zone=public --add-port= $AGENT_PORT /tcp --permanent && firewall-cmd --reload "
elif command -v iptables >/dev/null 2>& 1; then
FW_MSG = " iptables -I INPUT -p tcp --dport $AGENT_PORT -j ACCEPT "
# 智能双栈雷达：根据绑定的 IP 属性，动态下发对应的防火墙放行指令
if [ [ " $BIND_IP " = = *":" * ] ] ; then
FW_MSG = " ip6tables -I INPUT -p tcp --dport $AGENT_PORT -j ACCEPT "
else
FW_MSG = " iptables -I INPUT -p tcp --dport $AGENT_PORT -j ACCEPT "
fi
fi
echo -e " \033[33m⚠️ $AGENT_PORT 端口！\033[0m "
