86 lines
2.1 KiB
Bash
86 lines
2.1 KiB
Bash
#!/bin/bash
|
||
# OpenVPN 连通后拉起 microsocks；出口跟随系统路由（含 tun0），避免 Dante 绑错网卡。
|
||
set -euo pipefail
|
||
|
||
VPN_DIR="${VPN_DIR:-/vpn}"
|
||
SOCKS_HOST="${SOCKS_HOST:-0.0.0.0}"
|
||
SOCKS_PORT="${SOCKS_PORT:-1080}"
|
||
RONGXING_HOST="${RONGXING_HOST:-192.168.3.43}"
|
||
|
||
cd "$VPN_DIR"
|
||
|
||
CONF=""
|
||
for f in *.conf *.ovpn; do
|
||
if [ -f "$f" ]; then
|
||
CONF="$f"
|
||
break
|
||
fi
|
||
done
|
||
|
||
if [ -z "$CONF" ]; then
|
||
echo "[rongxing-vpn] 未在 ${VPN_DIR} 找到 .ovpn/.conf，请挂载证书目录"
|
||
exit 1
|
||
fi
|
||
|
||
echo "[rongxing-vpn] 使用配置: ${CONF}"
|
||
echo "[rongxing-vpn] 仅路由 ${RONGXING_HOST}/32，SOCKS5 ${SOCKS_HOST}:${SOCKS_PORT}"
|
||
|
||
openvpn \
|
||
--config "$CONF" \
|
||
--cd "$VPN_DIR" \
|
||
--route-nopull \
|
||
--route "$RONGXING_HOST" 255.255.255.255 \
|
||
--daemon \
|
||
--writepid /var/run/openvpn.pid \
|
||
--log /var/log/openvpn.log \
|
||
--verb 3
|
||
|
||
for i in $(seq 1 90); do
|
||
if ip link show tun0 >/dev/null 2>&1; then
|
||
echo "[rongxing-vpn] tun0 已就绪 (${i}s)"
|
||
break
|
||
fi
|
||
if [ "$i" -eq 90 ]; then
|
||
echo "[rongxing-vpn] 等待 tun0 超时，OpenVPN 日志："
|
||
cat /var/log/openvpn.log || true
|
||
exit 1
|
||
fi
|
||
sleep 1
|
||
done
|
||
|
||
echo "[rongxing-vpn] 路由表："
|
||
ip route || true
|
||
|
||
# 直连自检（不阻断）
|
||
if curl -sS -m 5 -o /tmp/rx_probe.out -w "[rongxing-vpn] 直连探测 HTTP %{http_code}\n" "http://${RONGXING_HOST}:7007/" ; then
|
||
head -c 200 /tmp/rx_probe.out 2>/dev/null || true
|
||
echo
|
||
else
|
||
echo "[rongxing-vpn] 直连探测失败: http://${RONGXING_HOST}:7007/"
|
||
fi
|
||
|
||
microsocks -i "$SOCKS_HOST" -p "$SOCKS_PORT" &
|
||
SOCKS_PID=$!
|
||
sleep 1
|
||
if ! kill -0 "$SOCKS_PID" 2>/dev/null; then
|
||
echo "[rongxing-vpn] microsocks 启动失败"
|
||
exit 1
|
||
fi
|
||
echo "[rongxing-vpn] SOCKS5 已监听 :${SOCKS_PORT} (microsocks pid=${SOCKS_PID})"
|
||
|
||
cleanup() {
|
||
kill "$SOCKS_PID" 2>/dev/null || true
|
||
if [ -f /var/run/openvpn.pid ]; then
|
||
kill "$(cat /var/run/openvpn.pid)" 2>/dev/null || true
|
||
fi
|
||
}
|
||
trap cleanup EXIT INT TERM
|
||
|
||
while kill -0 "$(cat /var/run/openvpn.pid)" 2>/dev/null && kill -0 "$SOCKS_PID" 2>/dev/null; do
|
||
sleep 5
|
||
done
|
||
|
||
echo "[rongxing-vpn] OpenVPN 或 SOCKS 已退出"
|
||
cat /var/log/openvpn.log || true
|
||
exit 1
|