├── .gitattributes ├── 22.sh ├── README.md ├── SwitchyOmega_Chromium.zip ├── Trojan.sh ├── trojan-client.zip ├── trojan_1 ├── trojan_install.sh ├── trojan_panel └── web.zip /.gitattributes: -------------------------------------------------------------------------------- 1 | # Auto detect text files and perform LF normalization 2 | * text=auto 3 | -------------------------------------------------------------------------------- /22.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | blue(){ 3 | echo -e "\033[34m\033[01m$1\033[0m" 4 | } 5 | green(){ 6 | echo -e "\033[32m\033[01m$1\033[0m" 7 | } 8 | red(){ 9 | echo -e "\033[31m\033[01m$1\033[0m" 10 | } 11 | #检测系统版本，获取安装命令 12 | if [[ -f /etc/redhat-release ]]; then 13 | release="centos" 14 | systemPackage="yum" 15 | systempwd="/usr/lib/systemd/system/" 16 | elif cat /etc/issue | grep -Eqi "debian"; then 17 | release="debian" 18 | systemPackage="apt-get" 19 | systempwd="/lib/systemd/system/" 20 | elif cat /etc/issue | grep -Eqi "ubuntu"; then 21 | release="ubuntu" 22 | systemPackage="apt-get" 23 | systempwd="/lib/systemd/system/" 24 | elif cat /etc/issue | grep -Eqi "centos|red hat|redhat"; then 25 | release="centos" 26 | systemPackage="yum" 27 | systempwd="/usr/lib/systemd/system/" 28 | elif cat /proc/version | grep -Eqi "debian"; then 29 | release="debian" 30 | systemPackage="apt-get" 31 | systempwd="/lib/systemd/system/" 32 | elif cat /proc/version | grep -Eqi "ubuntu"; then 33 | release="ubuntu" 34 | systemPackage="apt-get" 35 | systempwd="/lib/systemd/system/" 36 | elif cat /proc/version | grep -Eqi "centos|red hat|redhat"; then 37 | release="centos" 38 | systemPackage="yum" 39 | systempwd="/usr/lib/systemd/system/" 40 | fi 41 | 42 | #安装依赖环境 43 | $systemPackage update 44 | $systemPackage -y install nginx wget unzip zip curl tar 45 | systemctl enable nginx 46 | systemctl stop nginx 47 | green "=======================" 48 | blue "请输入绑定到本VPS的域名" 49 | green "=======================" 50 | read your_domain 51 | real_addr=`ping ${your_domain} -c 1 | sed '1{s/[^(]*(//;s/).*//;q}'` 52 | local_addr=`curl ipv4.icanhazip.com` 53 | if [ $real_addr == $local_addr ] ; then 54 | green "==========================================" 55 | green " 开始安装Nginx并配置" 56 | green "==========================================" 57 | sleep 3s 58 | cat > /etc/nginx/nginx.conf <<-EOF 59 | user root; 60 | worker_processes 1; 61 | error_log /var/log/nginx/error.log warn; 62 | pid /var/run/nginx.pid; 63 | events { 64 | worker_connections 1024; 65 | } 66 | http { 67 | include /etc/nginx/mime.types; 68 | default_type application/octet-stream; 69 | log_format main '\$remote_addr - \$remote_user [\$time_local] "\$request" ' 70 | '\$status \$body_bytes_sent "\$http_referer" ' 71 | '"\$http_user_agent" "\$http_x_forwarded_for"'; 72 | access_log /var/log/nginx/access.log main; 73 | sendfile on; 74 | #tcp_nopush on; 75 | keepalive_timeout 120; 76 | client_max_body_size 20m; 77 | #gzip on; 78 | server { 79 | listen 80; 80 | server_name $your_domain; 81 | root /usr/share/nginx/html; 82 | index index.php index.html index.htm; 83 | } 84 | } 85 | EOF 86 | 87 | #设置伪装站 88 | green "==========================================" 89 | green " 开始下载伪装站点源码并部署" 90 | green "==========================================" 91 | sleep 3s 92 | rm -rf /usr/share/nginx/html/* 93 | cd /usr/share/nginx/html/ 94 | wget https://github.com/V2RaySSR/Trojan/raw/master/web.zip 95 | unzip web.zip 96 | systemctl restart nginx 97 | 98 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | Trojan 一键安装脚本 2 | 3 | ==================================== 4 | 5 | Trojan 一键安装自动脚本 6 | 7 | 系统：centos7+/debian9+/ubuntu16.04+ 8 | 9 | 网站：www.v2rayssr.com （已开启禁止国内访问） 10 | 11 | 脚本东拼西凑 需要感谢 秋水逸冰、Atrandys、V2ray官方等 12 | 13 | Youtube：波仔分享 14 | 15 | ==================================== 16 | 17 | 脚本安装命令 18 | 19 | curl -O https://raw.githubusercontent.com/V2RaySSR/Trojan/master/Trojan.sh && chmod x trojan.sh && ./trojan.sh 20 | 21 | wget --no-check-certificate https://raw.githubusercontent.com/V2RaySSR/Trojan/master/Trojan.sh && chmod +x Trojan.sh && ./Trojan.sh 22 | -------------------------------------------------------------------------------- /SwitchyOmega_Chromium.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/V2RaySSR/Trojan/0ccfca652248c773e34ef30d6f65f027888c4dc2/SwitchyOmega_Chromium.zip -------------------------------------------------------------------------------- /Trojan.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | #fonts color 4 | yellow(){ 5 | echo -e "\033[33m\033[01m$1\033[0m" 6 | } 7 | green(){ 8 | echo -e "\033[32m\033[01m$1\033[0m" 9 | } 10 | red(){ 11 | echo -e "\033[31m\033[01m$1\033[0m" 12 | } 13 | 14 | #copy from 秋水逸冰 ss scripts 15 | if [[ -f /etc/redhat-release ]]; then 16 | release="centos" 17 | systemPackage="yum" 18 | systempwd="/usr/lib/systemd/system/" 19 | elif cat /etc/issue | grep -Eqi "debian"; then 20 | release="debian" 21 | systemPackage="apt-get" 22 | systempwd="/lib/systemd/system/" 23 | elif cat /etc/issue | grep -Eqi "ubuntu"; then 24 | release="ubuntu" 25 | systemPackage="apt-get" 26 | systempwd="/lib/systemd/system/" 27 | elif cat /etc/issue | grep -Eqi "centos|red hat|redhat"; then 28 | release="centos" 29 | systemPackage="yum" 30 | systempwd="/usr/lib/systemd/system/" 31 | elif cat /proc/version | grep -Eqi "debian"; then 32 | release="debian" 33 | systemPackage="apt-get" 34 | systempwd="/lib/systemd/system/" 35 | elif cat /proc/version | grep -Eqi "ubuntu"; then 36 | release="ubuntu" 37 | systemPackage="apt-get" 38 | systempwd="/lib/systemd/system/" 39 | elif cat /proc/version | grep -Eqi "centos|red hat|redhat"; then 40 | release="centos" 41 | systemPackage="yum" 42 | systempwd="/usr/lib/systemd/system/" 43 | fi 44 | 45 | function install_trojan(){ 46 | CHECK=$(grep SELINUX= /etc/selinux/config | grep -v "#") 47 | if [ "$CHECK" == "SELINUX=enforcing" ]; then 48 | red "=======================================================================" 49 | red "检测到SELinux为开启状态，为防止申请证书失败，请先重启VPS后，再执行本脚本" 50 | red "=======================================================================" 51 | read -p "是否现在重启 ?请输入 [Y/n] :" yn 52 | [ -z "${yn}" ] && yn="y" 53 | if [[ $yn == [Yy] ]]; then 54 | sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config 55 | setenforce 0 56 | echo -e "VPS 重启中..." 57 | reboot 58 | fi 59 | exit 60 | fi 61 | if [ "$CHECK" == "SELINUX=permissive" ]; then 62 | red "=======================================================================" 63 | red "检测到SELinux为宽容状态，为防止申请证书失败，请先重启VPS后，再执行本脚本" 64 | red "=======================================================================" 65 | read -p "是否现在重启 ?请输入 [Y/n] :" yn 66 | [ -z "${yn}" ] && yn="y" 67 | if [[ $yn == [Yy] ]]; then 68 | sed -i 's/SELINUX=permissive/SELINUX=disabled/g' /etc/selinux/config 69 | setenforce 0 70 | echo -e "VPS 重启中..." 71 | reboot 72 | fi 73 | exit 74 | fi 75 | if [ "$release" == "centos" ]; then 76 | if [ -n "$(grep ' 6\.' /etc/redhat-release)" ] ;then 77 | red "===============" 78 | red "当前系统不受支持" 79 | red "===============" 80 | exit 81 | fi 82 | if [ -n "$(grep ' 5\.' /etc/redhat-release)" ] ;then 83 | red "===============" 84 | red "当前系统不受支持" 85 | red "===============" 86 | exit 87 | fi 88 | systemctl stop firewalld 89 | systemctl disable firewalld 90 | rpm -Uvh http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm 91 | elif [ "$release" == "ubuntu" ]; then 92 | if [ -n "$(grep ' 14\.' /etc/os-release)" ] ;then 93 | red "===============" 94 | red "当前系统不受支持" 95 | red "===============" 96 | exit 97 | fi 98 | if [ -n "$(grep ' 12\.' /etc/os-release)" ] ;then 99 | red "===============" 100 | red "当前系统不受支持" 101 | red "===============" 102 | exit 103 | fi 104 | systemctl stop ufw 105 | systemctl disable ufw 106 | apt-get update 107 | fi 108 | $systemPackage -y install nginx wget unzip zip curl tar >/dev/null 2>&1 109 | systemctl enable nginx.service 110 | green "=======================" 111 | yellow "请输入绑定到本VPS的域名" 112 | green "=======================" 113 | read your_domain 114 | real_addr=`ping ${your_domain} -c 1 | sed '1{s/[^(]*(//;s/).*//;q}'` 115 | local_addr=`curl ipv4.icanhazip.com` 116 | if [ $real_addr == $local_addr ] ; then 117 | green "==========================================" 118 | green " 域名解析正常，开始安装trojan" 119 | green "==========================================" 120 | sleep 1s 121 | cat > /etc/nginx/nginx.conf <<-EOF 122 | user root; 123 | worker_processes 1; 124 | error_log /var/log/nginx/error.log warn; 125 | pid /var/run/nginx.pid; 126 | events { 127 | worker_connections 1024; 128 | } 129 | http { 130 | include /etc/nginx/mime.types; 131 | default_type application/octet-stream; 132 | log_format main '\$remote_addr - \$remote_user [\$time_local] "\$request" ' 133 | '\$status \$body_bytes_sent "\$http_referer" ' 134 | '"\$http_user_agent" "\$http_x_forwarded_for"'; 135 | access_log /var/log/nginx/access.log main; 136 | sendfile on; 137 | #tcp_nopush on; 138 | keepalive_timeout 120; 139 | client_max_body_size 20m; 140 | #gzip on; 141 | server { 142 | listen 80; 143 | server_name $your_domain; 144 | root /usr/share/nginx/html; 145 | index index.php index.html index.htm; 146 | } 147 | } 148 | EOF 149 | #设置伪装站 150 | rm -rf /usr/share/nginx/html/* 151 | cd /usr/share/nginx/html/ 152 | wget https://github.com/V2RaySSR/Trojan/raw/master/web.zip 153 | unzip web.zip 154 | systemctl restart nginx.service 155 | #申请https证书 156 | mkdir /usr/src/trojan-cert 157 | curl https://get.acme.sh | sh 158 | ~/.acme.sh/acme.sh --issue -d $your_domain --webroot /usr/share/nginx/html/ 159 | ~/.acme.sh/acme.sh --installcert -d $your_domain \ 160 | --key-file /usr/src/trojan-cert/private.key \ 161 | --fullchain-file /usr/src/trojan-cert/fullchain.cer \ 162 | --reloadcmd "systemctl force-reload nginx.service" 163 | if test -s /usr/src/trojan-cert/fullchain.cer; then 164 | cd /usr/src 165 | #wget https://github.com/trojan-gfw/trojan/releases/download/v1.13.0/trojan-1.13.0-linux-amd64.tar.xz 166 | wget https://github.com/trojan-gfw/trojan/releases/download/v1.14.0/trojan-1.14.0-linux-amd64.tar.xz 167 | tar xf trojan-1.* 168 | #下载trojan客户端 169 | wget https://github.com/atrandys/trojan/raw/master/trojan-cli.zip 170 | unzip trojan-cli.zip 171 | cp /usr/src/trojan-cert/fullchain.cer /usr/src/trojan-cli/fullchain.cer 172 | trojan_passwd=$(cat /dev/urandom | head -1 | md5sum | head -c 8) 173 | cat > /usr/src/trojan-cli/config.json <<-EOF 174 | { 175 | "run_type": "client", 176 | "local_addr": "127.0.0.1", 177 | "local_port": 1080, 178 | "remote_addr": "$your_domain", 179 | "remote_port": 443, 180 | "password": [ 181 | "$trojan_passwd" 182 | ], 183 | "log_level": 1, 184 | "ssl": { 185 | "verify": true, 186 | "verify_hostname": true, 187 | "cert": "fullchain.cer", 188 | "cipher_tls13":"TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384", 189 | "sni": "", 190 | "alpn": [ 191 | "h2", 192 | "http/1.1" 193 | ], 194 | "reuse_session": true, 195 | "session_ticket": false, 196 | "curves": "" 197 | }, 198 | "tcp": { 199 | "no_delay": true, 200 | "keep_alive": true, 201 | "fast_open": false, 202 | "fast_open_qlen": 20 203 | } 204 | } 205 | EOF 206 | rm -rf /usr/src/trojan/server.conf 207 | cat > /usr/src/trojan/server.conf <<-EOF 208 | { 209 | "run_type": "server", 210 | "local_addr": "0.0.0.0", 211 | "local_port": 443, 212 | "remote_addr": "127.0.0.1", 213 | "remote_port": 80, 214 | "password": [ 215 | "$trojan_passwd" 216 | ], 217 | "log_level": 1, 218 | "ssl": { 219 | "cert": "/usr/src/trojan-cert/fullchain.cer", 220 | "key": "/usr/src/trojan-cert/private.key", 221 | "key_password": "", 222 | "cipher_tls13":"TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384", 223 | "prefer_server_cipher": true, 224 | "alpn": [ 225 | "http/1.1" 226 | ], 227 | "reuse_session": true, 228 | "session_ticket": false, 229 | "session_timeout": 600, 230 | "plain_http_response": "", 231 | "curves": "", 232 | "dhparam": "" 233 | }, 234 | "tcp": { 235 | "no_delay": true, 236 | "keep_alive": true, 237 | "fast_open": false, 238 | "fast_open_qlen": 20 239 | }, 240 | "mysql": { 241 | "enabled": false, 242 | "server_addr": "127.0.0.1", 243 | "server_port": 3306, 244 | "database": "trojan", 245 | "username": "trojan", 246 | "password": "" 247 | } 248 | } 249 | EOF 250 | cd /usr/src/trojan-cli/ 251 | zip -q -r trojan-cli.zip /usr/src/trojan-cli/ 252 | trojan_path=$(cat /dev/urandom | head -1 | md5sum | head -c 16) 253 | mkdir /usr/share/nginx/html/${trojan_path} 254 | mv /usr/src/trojan-cli/trojan-cli.zip /usr/share/nginx/html/${trojan_path}/ 255 | #增加启动脚本 256 | 257 | cat > ${systempwd}trojan.service <<-EOF 258 | [Unit] 259 | Description=trojan 260 | After=network.target 261 | 262 | [Service] 263 | Type=simple 264 | PIDFile=/usr/src/trojan/trojan/trojan.pid 265 | ExecStart=/usr/src/trojan/trojan -c "/usr/src/trojan/server.conf" 266 | ExecReload= 267 | ExecStop=/usr/src/trojan/trojan 268 | PrivateTmp=true 269 | 270 | [Install] 271 | WantedBy=multi-user.target 272 | EOF 273 | 274 | chmod +x ${systempwd}trojan.service 275 | systemctl start trojan.service 276 | systemctl enable trojan.service 277 | green "======================================================================" 278 | green "Trojan已安装完成，请使用以下链接下载trojan客户端，此客户端已配置好所有参数" 279 | green "1、复制下面的链接，在浏览器打开，下载客户端" 280 | yellow "http://${your_domain}/$trojan_path/trojan-cli.zip" 281 | red "请记录下面规则网址" 282 | yellow "http://${your_domain}/trojan.txt" 283 | green "2、将下载的压缩包解压，打开文件夹，打开start.bat即打开并运行Trojan客户端" 284 | green "3、打开stop.bat即关闭Trojan客户端" 285 | green "4、Trojan客户端需要搭配浏览器插件使用，例如switchyomega等" 286 | green "访问 https://www.v2rayssr.com/trojan-1.html ‎ 下载 浏览器插件 及教程" 287 | green "======================================================================" 288 | else 289 | red "================================" 290 | red "https证书没有申请成果，本次安装失败" 291 | red "================================" 292 | fi 293 | 294 | else 295 | red "================================" 296 | red "域名解析地址与本VPS IP地址不一致" 297 | red "本次安装失败，请确保域名解析正常" 298 | red "================================" 299 | fi 300 | } 301 | 302 | function remove_trojan(){ 303 | red "================================" 304 | red "即将卸载trojan" 305 | red "同时卸载安装的nginx" 306 | red "================================" 307 | systemctl stop trojan 308 | systemctl disable trojan 309 | rm -f ${systempwd}trojan.service 310 | if [ "$release" == "centos" ]; then 311 | yum remove -y nginx 312 | else 313 | apt autoremove -y nginx 314 | fi 315 | rm -rf /usr/src/trojan* 316 | rm -rf /usr/share/nginx/html/* 317 | green "==============" 318 | green "trojan删除完毕" 319 | green "==============" 320 | } 321 | 322 | function bbr_boost_sh(){ 323 | bash <(curl -L -s -k "https://raw.githubusercontent.com/chiakge/Linux-NetSpeed/master/tcp.sh") 324 | } 325 | 326 | start_menu(){ 327 | clear 328 | green " ====================================" 329 | green " Trojan 一键安装自动脚本 " 330 | green " 系统：centos7+/debian9+/ubuntu16.04+" 331 | green " 网站：www.v2rayssr.com （已开启禁止国内访问） " 332 | green " 此脚本为 atrandys 的，波仔集成了BBRPLUS加速 " 333 | green " Youtube：波仔分享 " 334 | green " ====================================" 335 | echo 336 | red " ====================================" 337 | yellow " 1. 一键安装 Trojan" 338 | red " ====================================" 339 | yellow " 2. 安装 4 IN 1 BBRPLUS加速脚本" 340 | red " ====================================" 341 | yellow " 3. 一键卸载 Trojan" 342 | red " ====================================" 343 | yellow " 0. 退出脚本" 344 | red " ====================================" 345 | echo 346 | read -p "请输入数字:" num 347 | case "$num" in 348 | 1) 349 | install_trojan 350 | ;; 351 | 2) 352 | bbr_boost_sh 353 | ;; 354 | 3) 355 | remove_trojan 356 | ;; 357 | 0) 358 | exit 1 359 | ;; 360 | *) 361 | clear 362 | red "请输入正确数字" 363 | sleep 1s 364 | start_menu 365 | ;; 366 | esac 367 | } 368 | 369 | start_menu -------------------------------------------------------------------------------- /trojan-client.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/V2RaySSR/Trojan/0ccfca652248c773e34ef30d6f65f027888c4dc2/trojan-client.zip -------------------------------------------------------------------------------- /trojan_1: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | blue(){ 3 | echo -e "\033[34m\033[01m$1\033[0m" 4 | } 5 | green(){ 6 | echo -e "\033[32m\033[01m$1\033[0m" 7 | } 8 | red(){ 9 | echo -e "\033[31m\033[01m$1\033[0m" 10 | } 11 | 12 | if [[ -f /etc/redhat-release ]]; then 13 | release="centos" 14 | systemPackage="yum" 15 | systempwd="/usr/lib/systemd/system/" 16 | elif cat /etc/issue | grep -Eqi "debian"; then 17 | release="debian" 18 | systemPackage="apt-get" 19 | systempwd="/lib/systemd/system/" 20 | elif cat /etc/issue | grep -Eqi "ubuntu"; then 21 | release="ubuntu" 22 | systemPackage="apt-get" 23 | systempwd="/lib/systemd/system/" 24 | elif cat /etc/issue | grep -Eqi "centos|red hat|redhat"; then 25 | release="centos" 26 | systemPackage="yum" 27 | systempwd="/usr/lib/systemd/system/" 28 | elif cat /proc/version | grep -Eqi "debian"; then 29 | release="debian" 30 | systemPackage="apt-get" 31 | systempwd="/lib/systemd/system/" 32 | elif cat /proc/version | grep -Eqi "ubuntu"; then 33 | release="ubuntu" 34 | systemPackage="apt-get" 35 | systempwd="/lib/systemd/system/" 36 | elif cat /proc/version | grep -Eqi "centos|red hat|redhat"; then 37 | release="centos" 38 | systemPackage="yum" 39 | systempwd="/usr/lib/systemd/system/" 40 | fi 41 | 42 | clear 43 | green "==========================================================" 44 | blue "支持：centos7+/debian9+/ubuntu16.04+" 45 | blue "网站：www.v2rayssr.com （已开启禁止国内访问）" 46 | blue "YouTube频道：波仔分享" 47 | green "==========================================================" 48 | red "简介：本脚本为Trojan分解安装第一部分（安装依赖环境和服务）" 49 | green "==========================================================" 50 | read -s -n1 -p "若同意上述协议，请按任意键继续 ... " 51 | green " " 52 | if cat /proc/version | grep -Eqi "centos|red hat|redhat"; then 53 | yum install epel-release 54 | fi 55 | $systemPackage update 56 | $systemPackage -y install sudo nginx wget unzip zip curl tar 57 | systemctl enable nginx 58 | systemctl stop nginx 59 | green "=======================" 60 | blue "请输入绑定到本VPS的域名" 61 | green "=======================" 62 | read your_domain 63 | real_addr=`ping ${your_domain} -c 1 | sed '1{s/[^(]*(//;s/).*//;q}'` 64 | local_addr=`curl ipv4.icanhazip.com` 65 | green " " 66 | green " " 67 | green "===================================" 68 | blue "检测到域名解析地址为 $real_addr" 69 | blue "本VPS的IP为 $local_addr" 70 | green "===================================" 71 | sleep 3s 72 | if [ $real_addr == $local_addr ] ; then 73 | green " " 74 | green " " 75 | green "==========================================" 76 | blue " 开始安装Nginx并配置" 77 | green "==========================================" 78 | sleep 3s 79 | cat > /etc/nginx/nginx.conf <<-EOF 80 | user root; 81 | worker_processes 1; 82 | error_log /var/log/nginx/error.log warn; 83 | pid /var/run/nginx.pid; 84 | events { 85 | worker_connections 1024; 86 | } 87 | http { 88 | include /etc/nginx/mime.types; 89 | default_type application/octet-stream; 90 | log_format main '\$remote_addr - \$remote_user [\$time_local] "\$request" ' 91 | '\$status \$body_bytes_sent "\$http_referer" ' 92 | '"\$http_user_agent" "\$http_x_forwarded_for"'; 93 | access_log /var/log/nginx/access.log main; 94 | sendfile on; 95 | #tcp_nopush on; 96 | keepalive_timeout 120; 97 | client_max_body_size 20m; 98 | #gzip on; 99 | server { 100 | listen 80; 101 | server_name $your_domain; 102 | root /usr/share/nginx/html; 103 | index index.php index.html index.htm; 104 | } 105 | } 106 | EOF 107 | green " " 108 | green " " 109 | green "==========================================" 110 | blue " 开始下载伪装站点源码并部署" 111 | green "==========================================" 112 | sleep 3s 113 | rm -rf /usr/share/nginx/html/* 114 | cd /usr/share/nginx/html/ 115 | wget https://github.com/V2RaySSR/Trojan/raw/master/web.zip 116 | unzip web.zip 117 | systemctl restart nginx 118 | green "==========================================" 119 | blue " 开始下载安装官方Trojan最新版本" 120 | green "==========================================" 121 | sleep 3s 122 | sudo bash -c "$(wget -O- https://raw.githubusercontent.com/trojan-gfw/trojan-quickstart/master/trojan-quickstart.sh)" 123 | systemctl enable trojan 124 | green "========================================================" 125 | blue "本次脚本安装完成，现在进行检测" 126 | green "========================================================" 127 | read -s -n1 -p "现在开始检测安装情况，请按任意键继续 ... " 128 | green " " 129 | if test -s /etc/nginx/nginx.conf; then 130 | green " " 131 | green " " 132 | green "===========================" 133 | blue " Nginx安装正常" 134 | green "===========================" 135 | sleep 3s 136 | else 137 | green " " 138 | green " " 139 | green "===========================" 140 | red " Nginx安装不成功" 141 | green "===========================" 142 | sleep 3s 143 | fi 144 | if test -s /usr/local/etc/trojan/config.json; then 145 | green " " 146 | green " " 147 | green "===========================" 148 | blue " Trojan安装正常" 149 | green "===========================" 150 | sleep 3s 151 | else 152 | green " " 153 | green " " 154 | green "===========================" 155 | red " Trojan安装不成功" 156 | green "===========================" 157 | sleep 3s 158 | fi 159 | green " " 160 | green " " 161 | green "========================================================" 162 | blue " 本过程安装了sudo/nginx/wget/unzip/zip/curl/tar/trojan" 163 | blue " 现在你访问 http://$your_domain 应该有伪装站点的存在了" 164 | blue " 伪装站点目录在 /usr/share/nginx/html 可自行更换网站" 165 | blue " Trojan配置文件在 /usr/local/etc/trojan" 166 | blue " 检测没有问题之后可以进行下一部分安装" 167 | green "========================================================" 168 | else 169 | green " " 170 | green " " 171 | red "================================" 172 | red "域名解析地址与本VPS IP地址不一致" 173 | red "本次安装失败，请确保域名解析正常" 174 | red "================================" 175 | fi 176 | -------------------------------------------------------------------------------- /trojan_install.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | ＃字体颜色 3 | blue(){ 4 | echo -e "\033[34m\033[01m$1\033[0m" 5 | } 6 | green(){ 7 | echo -e "\033[32m\033[01m$1\033[0m" 8 | } 9 | red(){ 10 | echo -e "\033[31m\033[01m$1\033[0m" 11 | } 12 | #copy from 秋水逸冰 ss scripts 13 | if [[ -f /etc/redhat-release ]]; then 14 | release="centos" 15 | systemPackage="yum" 16 | systempwd="/usr/lib/systemd/system/" 17 | elif cat /etc/issue | grep -Eqi "debian"; then 18 | release="debian" 19 | systemPackage="apt-get" 20 | systempwd="/lib/systemd/system/" 21 | elif cat /etc/issue | grep -Eqi "ubuntu"; then 22 | release="ubuntu" 23 | systemPackage="apt-get" 24 | systempwd="/lib/systemd/system/" 25 | elif cat /etc/issue | grep -Eqi "centos|red hat|redhat"; then 26 | release="centos" 27 | systemPackage="yum" 28 | systempwd="/usr/lib/systemd/system/" 29 | elif cat /proc/version | grep -Eqi "debian"; then 30 | release="debian" 31 | systemPackage="apt-get" 32 | systempwd="/lib/systemd/system/" 33 | elif cat /proc/version | grep -Eqi "ubuntu"; then 34 | release="ubuntu" 35 | systemPackage="apt-get" 36 | systempwd="/lib/systemd/system/" 37 | elif cat /proc/version | grep -Eqi "centos|red hat|redhat"; then 38 | release="centos" 39 | systemPackage="yum" 40 | systempwd="/usr/lib/systemd/system/" 41 | fi 42 | 43 | function install_trojan(){ 44 | systemctl stop nginx 45 | $systemPackage -y install net-tools socat 46 | Port80=`netstat -tlpn | awk -F '[: ]+' '$1=="tcp"{print $5}' | grep -w 80` 47 | Port443=`netstat -tlpn | awk -F '[: ]+' '$1=="tcp"{print $5}' | grep -w 443` 48 | if [ -n "$Port80" ]; then 49 | process80=`netstat -tlpn | awk -F '[: ]+' '$5=="80"{print $9}'` 50 | red "===========================================================" 51 | red "检测到80端口被占用，占用进程为：${process80}，本次安装结束" 52 | red "===========================================================" 53 | exit 1 54 | fi 55 | if [ -n "$Port443" ]; then 56 | process443=`netstat -tlpn | awk -F '[: ]+' '$5=="443"{print $9}'` 57 | red "=============================================================" 58 | red "检测到443端口被占用，占用进程为：${process443}，本次安装结束" 59 | red "=============================================================" 60 | exit 1 61 | fi 62 | CHECK=$(grep SELINUX= /etc/selinux/config | grep -v "#") 63 | if [ "$CHECK" == "SELINUX=enforcing" ]; then 64 | red "=======================================================================" 65 | red "检测到SELinux为开启状态，为防止申请证书失败，请先重启VPS后，再执行本脚本" 66 | red "=======================================================================" 67 | read -p "是否现在重启 ?请输入 [Y/n] :" yn 68 | [ -z "${yn}" ] && yn="y" 69 | if [[ $yn == [Yy] ]]; then 70 | sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config 71 | setenforce 0 72 | echo -e "VPS 重启中..." 73 | reboot 74 | fi 75 | exit 76 | fi 77 | if [ "$CHECK" == "SELINUX=permissive" ]; then 78 | red "=======================================================================" 79 | red "检测到SELinux为宽容状态，为防止申请证书失败，请先重启VPS后，再执行本脚本" 80 | red "=======================================================================" 81 | read -p "是否现在重启 ?请输入 [Y/n] :" yn 82 | [ -z "${yn}" ] && yn="y" 83 | if [[ $yn == [Yy] ]]; then 84 | sed -i 's/SELINUX=permissive/SELINUX=disabled/g' /etc/selinux/config 85 | setenforce 0 86 | echo -e "VPS 重启中..." 87 | reboot 88 | fi 89 | exit 90 | fi 91 | if [ "$release" == "centos" ]; then 92 | if [ -n "$(grep ' 6\.' /etc/redhat-release)" ] ;then 93 | red "===============" 94 | red "当前系统不受支持" 95 | red "===============" 96 | exit 97 | fi 98 | if [ -n "$(grep ' 5\.' /etc/redhat-release)" ] ;then 99 | red "===============" 100 | red "当前系统不受支持" 101 | red "===============" 102 | exit 103 | fi 104 | systemctl stop firewalld 105 | systemctl disable firewalld 106 | rpm -Uvh http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm 107 | elif [ "$release" == "ubuntu" ]; then 108 | if [ -n "$(grep ' 14\.' /etc/os-release)" ] ;then 109 | red "===============" 110 | red "当前系统不受支持" 111 | red "===============" 112 | exit 113 | fi 114 | if [ -n "$(grep ' 12\.' /etc/os-release)" ] ;then 115 | red "===============" 116 | red "当前系统不受支持" 117 | red "===============" 118 | exit 119 | fi 120 | systemctl stop ufw 121 | systemctl disable ufw 122 | apt-get update 123 | elif [ "$release" == "debian" ]; then 124 | apt-get update 125 | fi 126 | $systemPackage -y install nginx wget unzip zip curl tar >/dev/null 2>&1 127 | systemctl enable nginx 128 | systemctl stop nginx 129 | green "=======================" 130 | blue "请输入绑定到本VPS的域名" 131 | green "=======================" 132 | read your_domain 133 | real_addr=`ping ${your_domain} -c 1 | sed '1{s/[^(]*(//;s/).*//;q}'` 134 | local_addr=`curl ipv4.icanhazip.com` 135 | if [ $real_addr == $local_addr ] ; then 136 | green "==========================================" 137 | green " 域名解析正常，开始安装trojan" 138 | green "==========================================" 139 | sleep 1s 140 | cat > /etc/nginx/nginx.conf <<-EOF 141 | user root; 142 | worker_processes 1; 143 | error_log /var/log/nginx/error.log warn; 144 | pid /var/run/nginx.pid; 145 | events { 146 | worker_connections 1024; 147 | } 148 | http { 149 | include /etc/nginx/mime.types; 150 | default_type application/octet-stream; 151 | log_format main '\$remote_addr - \$remote_user [\$time_local] "\$request" ' 152 | '\$status \$body_bytes_sent "\$http_referer" ' 153 | '"\$http_user_agent" "\$http_x_forwarded_for"'; 154 | access_log /var/log/nginx/access.log main; 155 | sendfile on; 156 | #tcp_nopush on; 157 | keepalive_timeout 120; 158 | client_max_body_size 20m; 159 | #gzip on; 160 | server { 161 | listen 80; 162 | server_name $your_domain; 163 | root /usr/share/nginx/html; 164 | index index.php index.html index.htm; 165 | } 166 | } 167 | EOF 168 | #设置伪装站 169 | rm -rf /usr/share/nginx/html/* 170 | cd /usr/share/nginx/html/ 171 | wget https://github.com/V2RaySSR/Trojan/raw/master/web.zip 172 | unzip web.zip 173 | systemctl stop nginx 174 | sleep 5 175 | #申请https证书 176 | mkdir /usr/src/trojan-cert /usr/src/trojan-temp 177 | curl https://get.acme.sh | sh 178 | ~/.acme.sh/acme.sh --issue -d $your_domain --standalone 179 | ~/.acme.sh/acme.sh --installcert -d $your_domain \ 180 | --key-file /usr/src/trojan-cert/private.key \ 181 | --fullchain-file /usr/src/trojan-cert/fullchain.cer 182 | if test -s /usr/src/trojan-cert/fullchain.cer; then 183 | systemctl start nginx 184 | cd /usr/src 185 | #wget https://github.com/trojan-gfw/trojan/releases/download/v1.13.0/trojan-1.13.0-linux-amd64.tar.xz 186 | wget https://api.github.com/repos/trojan-gfw/trojan/releases/latest 187 | latest_version=`grep tag_name latest| awk -F '[:,"v]' '{print $6}'` 188 | wget https://github.com/trojan-gfw/trojan/releases/download/v${latest_version}/trojan-${latest_version}-linux-amd64.tar.xz 189 | tar xf trojan-${latest_version}-linux-amd64.tar.xz 190 | #下载trojan WIN客户端 191 | wget https://github.com/atrandys/trojan/raw/master/trojan-cli.zip 192 | wget -P /usr/src/trojan-temp https://github.com/trojan-gfw/trojan/releases/download/v${latest_version}/trojan-${latest_version}-win.zip 193 | unzip trojan-cli.zip 194 | unzip /usr/src/trojan-temp/trojan-${latest_version}-win.zip -d /usr/src/trojan-temp/ 195 | cp /usr/src/trojan-cert/fullchain.cer /usr/src/trojan-cli/fullchain.cer 196 | mv -f /usr/src/trojan-temp/trojan/trojan.exe /usr/src/trojan-cli/ 197 | #下载trojan MAC客户端 198 | wget -P /usr/src/trojan-macos https://github.com/trojan-gfw/trojan/releases/download/v${latest_version}/trojan-${latest_version}-macos.zip 199 | unzip /usr/src/trojan-macos/trojan-${latest_version}-macos.zip -d /usr/src/trojan-macos/ 200 | rm -rf /usr/src/trojan-macos/trojan-${latest_version}-macos.zip 201 | trojan_passwd=$(cat /dev/urandom | head -1 | md5sum | head -c 8) 202 | #配置trojan mac 203 | cat > /usr/src/trojan-macos/trojan/config.json <<-EOF 204 | { 205 | "run_type": "client", 206 | "local_addr": "127.0.0.1", 207 | "local_port": 1080, 208 | "remote_addr": "$your_domain", 209 | "remote_port": 443, 210 | "password": [ 211 | "$trojan_passwd" 212 | ], 213 | "log_level": 1, 214 | "ssl": { 215 | "verify": true, 216 | "verify_hostname": true, 217 | "cert": "", 218 | "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA", 219 | "cipher_tls13": "TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384", 220 | "sni": "", 221 | "alpn": [ 222 | "h2", 223 | "http/1.1" 224 | ], 225 | "reuse_session": true, 226 | "session_ticket": false, 227 | "curves": "" 228 | }, 229 | "tcp": { 230 | "no_delay": true, 231 | "keep_alive": true, 232 | "reuse_port": false, 233 | "fast_open": false, 234 | "fast_open_qlen": 20 235 | } 236 | } 237 | 238 | EOF 239 | 240 | cat > /usr/src/trojan-cli/config.json <<-EOF 241 | { 242 | "run_type": "client", 243 | "local_addr": "127.0.0.1", 244 | "local_port": 1080, 245 | "remote_addr": "$your_domain", 246 | "remote_port": 443, 247 | "password": [ 248 | "$trojan_passwd" 249 | ], 250 | "log_level": 1, 251 | "ssl": { 252 | "verify": true, 253 | "verify_hostname": true, 254 | "cert": "fullchain.cer", 255 | "cipher_tls13":"TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384", 256 | "sni": "", 257 | "alpn": [ 258 | "h2", 259 | "http/1.1" 260 | ], 261 | "reuse_session": true, 262 | "session_ticket": false, 263 | "curves": "" 264 | }, 265 | "tcp": { 266 | "no_delay": true, 267 | "keep_alive": true, 268 | "fast_open": false, 269 | "fast_open_qlen": 20 270 | } 271 | } 272 | EOF 273 | rm -rf /usr/src/trojan/server.conf 274 | cat > /usr/src/trojan/server.conf <<-EOF 275 | { 276 | "run_type": "server", 277 | "local_addr": "0.0.0.0", 278 | "local_port": 443, 279 | "remote_addr": "127.0.0.1", 280 | "remote_port": 80, 281 | "password": [ 282 | "$trojan_passwd" 283 | ], 284 | "log_level": 1, 285 | "ssl": { 286 | "cert": "/usr/src/trojan-cert/fullchain.cer", 287 | "key": "/usr/src/trojan-cert/private.key", 288 | "key_password": "", 289 | "cipher_tls13":"TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384", 290 | "prefer_server_cipher": true, 291 | "alpn": [ 292 | "http/1.1" 293 | ], 294 | "reuse_session": true, 295 | "session_ticket": false, 296 | "session_timeout": 600, 297 | "plain_http_response": "", 298 | "curves": "", 299 | "dhparam": "" 300 | }, 301 | "tcp": { 302 | "no_delay": true, 303 | "keep_alive": true, 304 | "fast_open": false, 305 | "fast_open_qlen": 20 306 | }, 307 | "mysql": { 308 | "enabled": false, 309 | "server_addr": "127.0.0.1", 310 | "server_port": 3306, 311 | "database": "trojan", 312 | "username": "trojan", 313 | "password": "" 314 | } 315 | } 316 | EOF 317 | #打包WIN客户端 318 | cd /usr/src/trojan-cli/ 319 | zip -q -r trojan-cli.zip /usr/src/trojan-cli/ 320 | trojan_path=$(cat /dev/urandom | head -1 | md5sum | head -c 16) 321 | mkdir /usr/share/nginx/html/${trojan_path} 322 | mv /usr/src/trojan-cli/trojan-cli.zip /usr/share/nginx/html/${trojan_path}/ 323 | #打包MAC客户端 324 | cd /usr/src/trojan-macos/ 325 | zip -q -r trojan-mac.zip /usr/src/trojan-macos/ 326 | mv /usr/src/trojan-macos/trojan-mac.zip /usr/share/nginx/html/${trojan_path}/ 327 | 328 | #增加启动脚本 329 | cat > ${systempwd}trojan.service <<-EOF 330 | [Unit] 331 | Description=trojan 332 | After=network.target 333 | 334 | [Service] 335 | Type=simple 336 | PIDFile=/usr/src/trojan/trojan/trojan.pid 337 | ExecStart=/usr/src/trojan/trojan -c "/usr/src/trojan/server.conf" 338 | ExecReload= 339 | ExecStop=/usr/src/trojan/trojan 340 | PrivateTmp=true 341 | 342 | [Install] 343 | WantedBy=multi-user.target 344 | EOF 345 | 346 | chmod +x ${systempwd}trojan.service 347 | systemctl start trojan.service 348 | systemctl enable trojan.service 349 | green "======================================================================" 350 | green "Trojan已安装完成，请使用以下链接下载trojan客户端，此客户端已配置好所有参数" 351 | green "1、复制下面的链接，在浏览器打开，下载客户端" 352 | blue "Windows客户端下载：http://${your_domain}/$trojan_path/trojan-cli.zip" 353 | blue "MacOS客户端下载：http://${your_domain}/$trojan_path/trojan-mac.zip" 354 | green "2、Windows将下载的客户端解压，打开文件夹，打开start.bat即打开并运行Trojan客户端" 355 | green "3、MacOS将下载的客户端解压，打开文件夹，打开start.command即打开并运行Trojan客户端" 356 | green "Trojan推荐使用 Mellow 工具代理（WIN/MAC通用）下载地址如下：" 357 | green "https://github.com/mellow-io/mellow/releases (exe为Win客户端,dmg为Mac客户端)" 358 | green "======================================================================" 359 | else 360 | red "===================================" 361 | red "https证书没有申请成果，自动安装失败" 362 | green "不要担心，你可以手动修复证书申请" 363 | green "1. 重启VPS" 364 | green "2. 重新执行脚本，使用修复证书功能" 365 | red "===================================" 366 | fi 367 | 368 | else 369 | red "================================" 370 | red "域名解析地址与本VPS IP地址不一致" 371 | red "本次安装失败，请确保域名解析正常" 372 | red "================================" 373 | fi 374 | } 375 | 376 | function repair_cert(){ 377 | systemctl stop nginx 378 | Port80=`netstat -tlpn | awk -F '[: ]+' '$1=="tcp"{print $5}' | grep -w 80` 379 | if [ -n "$Port80" ]; then 380 | process80=`netstat -tlpn | awk -F '[: ]+' '$5=="80"{print $9}'` 381 | red "===========================================================" 382 | red "检测到80端口被占用，占用进程为：${process80}，本次安装结束" 383 | red "===========================================================" 384 | exit 1 385 | fi 386 | green "=======================" 387 | blue "请输入绑定到本VPS的域名" 388 | blue "务必与之前失败使用的域名一致" 389 | green "=======================" 390 | read your_domain 391 | real_addr=`ping ${your_domain} -c 1 | sed '1{s/[^(]*(//;s/).*//;q}'` 392 | local_addr=`curl ipv4.icanhazip.com` 393 | if [ $real_addr == $local_addr ] ; then 394 | ~/.acme.sh/acme.sh --issue -d $your_domain --standalone 395 | ~/.acme.sh/acme.sh --installcert -d $your_domain \ 396 | --key-file /usr/src/trojan-cert/private.key \ 397 | --fullchain-file /usr/src/trojan-cert/fullchain.cer 398 | if test -s /usr/src/trojan-cert/fullchain.cer; then 399 | green "证书申请成功" 400 | green "请将/usr/src/trojan-cert/下的fullchain.cer下载放到客户端trojan-cli文件夹" 401 | systemctl restart trojan 402 | systemctl start nginx 403 | else 404 | red "申请证书失败" 405 | fi 406 | else 407 | red "================================" 408 | red "域名解析地址与本VPS IP地址不一致" 409 | red "本次安装失败，请确保域名解析正常" 410 | red "================================" 411 | fi 412 | } 413 | 414 | function remove_trojan(){ 415 | red "================================" 416 | red "即将卸载trojan" 417 | red "同时卸载安装的nginx" 418 | red "================================" 419 | systemctl stop trojan 420 | systemctl disable trojan 421 | rm -f ${systempwd}trojan.service 422 | if [ "$release" == "centos" ]; then 423 | yum remove -y nginx 424 | else 425 | apt autoremove -y nginx 426 | fi 427 | rm -rf /usr/src/trojan* 428 | rm -rf /usr/share/nginx/html/* 429 | green "==============" 430 | green "trojan删除完毕" 431 | green "==============" 432 | } 433 | 434 | function bbr_boost_sh(){ 435 | wget -N --no-check-certificate "https://raw.githubusercontent.com/chiakge/Linux-NetSpeed/master/tcp.sh" && chmod +x tcp.sh && ./tcp.sh 436 | } 437 | 438 | start_menu(){ 439 | clear 440 | green " ====================================" 441 | green " Trojan 一键安装自动脚本 2020-2-27 更新 " 442 | green " 系统：centos7+/debian9+/ubuntu16.04+" 443 | green " 网站：www.v2rayssr.com （已开启禁止国内访问）" 444 | green " 此脚本为 atrandys 的，波仔集成BBRPLUS加速及MAC客户端 " 445 | green " Youtube：波仔分享 " 446 | green " ====================================" 447 | blue " 声明：" 448 | red " *请不要在任何生产环境使用此脚本" 449 | red " *请不要有其他程序占用80和443端口" 450 | red " *若是第二次使用脚本，请先执行卸载trojan" 451 | green " =======================================" 452 | echo 453 | green " 1. 安装trojan" 454 | red " 2. 卸载trojan" 455 | green " 3. 修复证书" 456 | green " 4. 安装BBR-PLUS加速4合一脚本" 457 | blue " 0. 退出脚本" 458 | echo 459 | read -p "请输入数字:" num 460 | case "$num" in 461 | 1) 462 | install_trojan 463 | ;; 464 | 2) 465 | remove_trojan 466 | ;; 467 | 3) 468 | repair_cert 469 | ;; 470 | 4) 471 | bbr_boost_sh 472 | ;; 473 | 0) 474 | exit 1 475 | ;; 476 | *) 477 | clear 478 | red "请输入正确数字" 479 | sleep 1s 480 | start_menu 481 | ;; 482 | esac 483 | } 484 | 485 | start_menu 486 | -------------------------------------------------------------------------------- /trojan_panel: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | ＃字体颜色 3 | blue(){ 4 | echo -e "\033[34m\033[01m$1\033[0m" 5 | } 6 | green(){ 7 | echo -e "\033[32m\033[01m$1\033[0m" 8 | } 9 | red(){ 10 | echo -e "\033[31m\033[01m$1\033[0m" 11 | } 12 | 13 | function install_trojan_panel(){ 14 | systemctl stop nginx 15 | apt-get -y install net-tools socat 16 | Port80=`netstat -tlpn | awk -F '[: ]+' '$1=="tcp"{print $5}' | grep -w 80` 17 | Port443=`netstat -tlpn | awk -F '[: ]+' '$1=="tcp"{print $5}' | grep -w 443` 18 | if [ -n "$Port80" ]; then 19 | process80=`netstat -tlpn | awk -F '[: ]+' '$5=="80"{print $9}'` 20 | red "===========================================================" 21 | red "检测到80端口被占用，占用进程为：${process80}，本次安装结束" 22 | red "===========================================================" 23 | exit 1 24 | fi 25 | if [ -n "$Port443" ]; then 26 | process443=`netstat -tlpn | awk -F '[: ]+' '$5=="443"{print $9}'` 27 | red "=============================================================" 28 | red "检测到443端口被占用，占用进程为：${process443}，本次安装结束" 29 | red "=============================================================" 30 | exit 1 31 | fi 32 | CHECK=$(grep SELINUX= /etc/selinux/config | grep -v "#") 33 | if [ "$CHECK" == "SELINUX=enforcing" ]; then 34 | red "=======================================================================" 35 | red "检测到SELinux为开启状态，为防止申请证书失败，请先重启VPS后，再执行本脚本" 36 | red "=======================================================================" 37 | read -p "是否现在重启 ?请输入 [Y/n] :" yn 38 | [ -z "${yn}" ] && yn="y" 39 | if [[ $yn == [Yy] ]]; then 40 | sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config 41 | setenforce 0 42 | echo -e "VPS 重启中..." 43 | reboot 44 | fi 45 | exit 46 | fi 47 | if [ "$CHECK" == "SELINUX=permissive" ]; then 48 | red "=======================================================================" 49 | red "检测到SELinux为宽容状态，为防止申请证书失败，请先重启VPS后，再执行本脚本" 50 | red "=======================================================================" 51 | read -p "是否现在重启 ?请输入 [Y/n] :" yn 52 | [ -z "${yn}" ] && yn="y" 53 | if [[ $yn == [Yy] ]]; then 54 | sed -i 's/SELINUX=permissive/SELINUX=disabled/g' /etc/selinux/config 55 | setenforce 0 56 | echo -e "VPS 重启中..." 57 | reboot 58 | fi 59 | exit 60 | -------------------------------------------------------------------------------- /web.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/V2RaySSR/Trojan/0ccfca652248c773e34ef30d6f65f027888c4dc2/web.zip --------------------------------------------------------------------------------