Skip to content

Commit

Permalink
Create tunsafe_install.sh
Browse files Browse the repository at this point in the history
  • Loading branch information
@birch83
birch83 authored Jun 6, 2020
0 parents commit 367fbb9
Showing 1 changed file with 254 additions and 0 deletions.
254 changes: 254 additions & 0 deletions tunsafe_install.sh
Original file line number Diff line number Diff line change
@@ -0,0 +1,254 @@
#!/bin/bash

function blue(){
echo -e "\033[34m\033[01m $1 \033[0m"
}
function green(){
echo -e "\033[32m\033[01m $1 \033[0m"
}
function red(){
echo -e "\033[31m\033[01m $1 \033[0m"
}
function yellow(){
echo -e "\033[33m\033[01m $1 \033[0m"
}
function bred(){
echo -e "\033[31m\033[01m\033[05m $1 \033[0m"
}
function byellow(){
echo -e "\033[33m\033[01m\033[05m $1 \033[0m"
}

rand(){
min=$1
max=$(($2-$min+1))
num=$(cat /dev/urandom | head -n 10 | cksum | awk -F ' ' '{print $1}')
echo $(($num%$max+$min))
}

tunsafe_install(){
version=$(cat /etc/os-release | awk -F '[".]' '$1=="VERSION="{print $2}')
apt-get update -y
sudo apt-get install -y git curl make
git clone https://github.com/TunSafe/TunSafe.git
cd TunSafe
sudo apt-get install -y clang-6.0
sudo make && sudo make install

sudo echo net.ipv4.ip_forward = 1 >> /etc/sysctl.conf
sysctl -p
echo "1"> /proc/sys/net/ipv4/ip_forward

mkdir /etc/tunsafe
cd /etc/tunsafe
tunsafe genkey | tee sprivatekey | tunsafe pubkey > spublickey
tunsafe genkey | tee cprivatekey | tunsafe pubkey > cpublickey
s1=$(cat sprivatekey)
s2=$(cat spublickey)
c1=$(cat cprivatekey)
c2=$(cat cpublickey)
serverip=$(curl ipv4.icanhazip.com)
port=$(rand 10000 60000)
eth=$(ls /sys/class/net | awk '/^e/{print}')
obfsstr=$(cat /dev/urandom | head -1 | md5sum | head -c 4)
green "输入 1 开启默认UDP+混淆模式（推荐使用）"
green "输入 2 开启默认TCP+混淆模式"
green "输入 3 开启默认TCP+混淆+HTTPS伪装模式"
read choose
if [ $choose == 1 ]
then

sudo cat > /etc/tunsafe/TunSafe.conf <<-EOF
[Interface]
PrivateKey = $s1
Address = 10.0.0.1/24
ObfuscateKey = $obfsstr
PostUp = iptables -A FORWARD -i tun0 -j ACCEPT; iptables -A FORWARD -o tun0 -j ACCEPT; iptables -t nat -A POSTROUTING -o $eth -j MASQUERADE
PostDown = iptables -D FORWARD -i tun0 -j ACCEPT; iptables -D FORWARD -o tun0 -j ACCEPT; iptables -t nat -D POSTROUTING -o $eth -j MASQUERADE
ListenPort = $port
DNS = 8.8.8.8
MTU = 1380
[Peer]
PublicKey = $c2
AllowedIPs = 10.0.0.2/32
EOF


sudo cat > /etc/tunsafe/client.conf <<-EOF
[Interface]
PrivateKey = $c1
Address = 10.0.0.2/24
ObfuscateKey = $obfsstr
DNS = 8.8.8.8
MTU = 1380
[Peer]
PublicKey = $s2
Endpoint = $serverip:$port
AllowedIPs = 0.0.0.0/0, ::0/0
PersistentKeepalive = 25
EOF

fi
if [ $choose == 2 ]
then
sudo cat > /etc/tunsafe/TunSafe.conf <<-EOF
[Interface]
PrivateKey = $s1
Address = 10.0.0.1/24
ObfuscateKey = $obfsstr
ListenPortTCP = $port
PostUp = iptables -A FORWARD -i tun0 -j ACCEPT; iptables -A FORWARD -o tun0 -j ACCEPT; iptables -t nat -A POSTROUTING -o $eth -j MASQUERADE
PostDown = iptables -D FORWARD -i tun0 -j ACCEPT; iptables -D FORWARD -o tun0 -j ACCEPT; iptables -t nat -D POSTROUTING -o $eth -j MASQUERADE
DNS = 8.8.8.8
MTU = 1380
[Peer]
PublicKey = $c2
AllowedIPs = 10.0.0.2/32
EOF


sudo cat > /etc/tunsafe/client.conf <<-EOF
[Interface]
PrivateKey = $c1
Address = 10.0.0.2/24
ObfuscateKey = $obfsstr
DNS = 8.8.8.8
MTU = 1380
[Peer]
PublicKey = $s2
Endpoint = tcp://$serverip:$port
AllowedIPs = 0.0.0.0/0, ::0/0
PersistentKeepalive = 25
EOF

fi
if [ $choose == 3 ]
then
sudo cat > /etc/tunsafe/TunSafe.conf <<-EOF
[Interface]
PrivateKey = $s1
Address = 10.0.0.1/24
ObfuscateKey = $obfsstr
ListenPortTCP = 443
ObfuscateTCP=tls-chrome
PostUp = iptables -A FORWARD -i tun0 -j ACCEPT; iptables -A FORWARD -o tun0 -j ACCEPT; iptables -t nat -A POSTROUTING -o $eth -j MASQUERADE
PostDown = iptables -D FORWARD -i tun0 -j ACCEPT; iptables -D FORWARD -o tun0 -j ACCEPT; iptables -t nat -D POSTROUTING -o $eth -j MASQUERADE
ListenPort = $port
DNS = 8.8.8.8
MTU = 1380
[Peer]
PublicKey = $c2
AllowedIPs = 10.0.0.2/32
EOF


sudo cat > /etc/tunsafe/client.conf <<-EOF
[Interface]
PrivateKey = $c1
Address = 10.0.0.2/24
ObfuscateKey = $obfsstr
ObfuscateTCP=tls-chrome
DNS = 8.8.8.8
MTU = 1380
[Peer]
PublicKey = $s2
Endpoint = tcp://$serverip:443
AllowedIPs = 0.0.0.0/0, ::0/0
PersistentKeepalive = 25
EOF

fi

sudo apt-get install -y qrencode

sudo cat > /etc/init.d/tunstart <<-EOF
#! /bin/bash
### BEGIN INIT INFO
# Provides: tunstart
# Required-Start: $remote_fs $syslog
# Required-Stop: $remote_fs $syslog
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: tunstart
### END INIT INFO
cd /etc/tunsafe/
sudo tunsafe start -d TunSafe.conf
EOF

sudo chmod +x /etc/init.d/tunstart
cd /etc/init.d
sudo update-rc.d tunstart defaults
cd /etc/tunsafe
sudo tunsafe start -d TunSafe.conf

content=$(cat /etc/tunsafe/client.conf)
green "电脑端请下载/etc/tunsafe/client.conf，手机端可直接使用软件扫码"
echo "${content}" | qrencode -o - -t UTF8
}

add_user(){
green "给新用户起个名字，不能和已有用户重复"
read -p "请输入用户名：" newname
cd /etc/tunsafe/
cp client.conf $newname.conf
tunsafe genkey | tee temprikey | tunsafe pubkey > tempubkey
ipnum=$(grep Allowed /etc/tunsafe/TunSafe.conf | tail -1 | awk -F '[ ./]' '{print $6}')
newnum=$((10#${ipnum}+1))
sed -i 's%^PrivateKey.*$%'"PrivateKey = $(cat temprikey)"'%' $newname.conf
sed -i 's%^Address.*$%'"Address = 10.0.0.$newnum\/24"'%' $newname.conf

cat >> /etc/tunsafe/TunSafe.conf <<-EOF
[Peer]
PublicKey = $(cat tempubkey)
AllowedIPs = 10.0.0.$newnum/32
EOF
tunsafe set tun0 peer $(cat tempubkey) allowed-ips 10.0.0.$newnum/32
green "添加完成，文件：/etc/tunsafe/$newname.conf"
rm -f temprikey tempubkey
}

#开始菜单
start_menu(){
clear
green " ===================================="
green " 介绍：一键安装TunSafe "
green " 系统：Ubuntu >= 16.04 "
green " ===================================="
echo
green " 1. 安装TunSafe"
green " 2. 查看客户端二维码"
green " 3. 增加用户"
yellow " 0. 退出脚本"
echo
read -p "请输入数字:" num
case "$num" in
1)
tunsafe_install
;;
2)
content=$(cat /etc/tunsafe/client.conf)
green "这里只显示默认增加的第一个client的二维码"
echo "${content}" | qrencode -o - -t UTF8
;;
3)
add_user
;;
0)
exit 1
;;
*)
clear
red "请输入正确数字"
sleep 2s
start_menu
;;
esac
}

start_men

0 comments on commit 367fbb9

Please sign in to comment.