#!/bin/bash

# =================================================================
# Xray (xtls-rprx-vision Reality) 服务器端管理脚本
# =================================================================

# 定义输出颜色
GREEN='\033[0;32m'
RED='\033[0;31m'
NC='\033[0m' # 无颜色

XRAY_CONFIG_FILE="/usr/local/etc/xray/config.json"
XRAY_KEYS_FILE="/usr/local/etc/xray/reality.keys"

# --- 通用函数 ---
check_root() {
    if [ "$(id -u)" -ne 0 ]; then
        echo -e "${RED}错误：此脚本需要以 root 权限运行。${NC}" >&2
        exit 1
    fi
}

# --- 函数: 确保 jq 已安装 ---
ensure_jq() {
    if ! command -v jq &> /dev/null; then
        echo "--> 检测到依赖工具 jq 未安装，正在尝试自动安装..."
        if command -v apt-get &> /dev/null; then
            apt-get update >/dev/null && apt-get install -y jq
        elif command -v yum &> /dev/null; then
            yum install -y jq
        else
            echo -e "${RED}无法自动安装 jq。请手动安装 (sudo apt install jq / sudo yum install jq) 后再试。${NC}"
            return 1
        fi
        if ! command -v jq &> /dev/null; then
            echo -e "${RED}jq 安装失败，请检查包管理器或手动安装。${NC}"
            return 1
        fi
        echo "    jq 安装成功。"
    fi
    return 0
}

# --- 函数: 检查 Xray 安装和运行状态 ---
check_xray_status() {
    if [ -f /usr/local/bin/xray ]; then
        echo -e "${GREEN}Xray 核心: 已安装${NC}"
    else
        echo -e "${RED}Xray 核心: 未安装${NC}"
    fi

    if [ -f "${XRAY_CONFIG_FILE}" ]; then
        echo -e "${GREEN}配置状态 : 已配置${NC}"
        if systemctl is-active --quiet xray; then
            echo -e "${GREEN}服务状态 : 运行中${NC}"
        else
            echo -e "${RED}服务状态 : 未运行${NC}"
        fi
    else
        echo -e "${RED}配置状态 : 未配置${NC}"
    fi
}


# --- 函数: 生成 Reality 配置 ---
generate_reality_simple_config() {
    echo "--> 正在配置 Reality 配置..."
    read -p "请输入监听端口 (例如 443, 留空随机): " PORT
    [ -z "$PORT" ] && PORT=$((RANDOM % 55536 + 10000))

    read -p "请输入伪装域名 (留空则默认为 icloud.com): " SNI_DOMAIN
    [ -z "$SNI_DOMAIN" ] && SNI_DOMAIN="icloud.com"

    local sni_domain_cleaned=$(echo "${SNI_DOMAIN}" | cut -d':' -f1)

    echo "--> 正在生成 UUID 和 Reality 密钥对..."
    local uuid=$(/usr/local/bin/xray uuid)
    local key_pair=$(/usr/local/bin/xray x25519)
    local private_key=$(echo "$key_pair" | grep 'PrivateKey' | awk '{print $2}')
    local public_key=$(echo "$key_pair" | grep 'Password' | awk '{print $2}')

    echo "PrivateKey: ${private_key}" > "${XRAY_KEYS_FILE}"
    echo "PublicKey: ${public_key}" >> "${XRAY_KEYS_FILE}"

    echo "--> 正在创建配置文件 ${XRAY_CONFIG_FILE}..."
    cat > "${XRAY_CONFIG_FILE}" <<EOF
{
    "log": {
        "loglevel": "warning"
    },
    "inbounds": [
        {
            "port": ${PORT},
            "protocol": "vless",
            "settings": {
                "clients": [
                    {
                        "id": "${uuid}",
                        "flow": "xtls-rprx-vision"
                    }
                ],
                "decryption": "none"
            },
            "streamSettings": {
                "network": "tcp",
                "security": "reality",
                "realitySettings": {
                    "dest": "${sni_domain_cleaned}:443",
                    "serverNames": [ "${sni_domain_cleaned}" ],
                    "privateKey": "${private_key}",
                    "shortIds": [ "", "0123456789abcdef" ]
                }
            },
            "sniffing": {
                "enabled": true,
                "destOverride": [ "http", "tls", "quic" ],
                "routeOnly": true
            }
        }
    ],
    "outbounds": [
        {
            "protocol": "freedom",
            "tag": "direct"
        }
    ]
}
EOF
}


# --- 函数: 生成 Reality (防偷) 配置 ---
generate_reality_dokodemo_config() {
    echo "--> 正在配置 Reality (防偷)..."
    read -p "请输入外部监听端口 (例如 443, 留空随机): " EXT_PORT
    [ -z "$EXT_PORT" ] && EXT_PORT=$((RANDOM % 55536 + 10000))

    read -p "请输入内部 VLESS 端口 (留空随机): " INT_PORT
    [ -z "$INT_PORT" ] && INT_PORT=$((RANDOM % 55536 + 10000))
    
    read -p "请输入伪装域名 (留空则默认为 icloud.com): " SNI_DOMAIN
    [ -z "$SNI_DOMAIN" ] && SNI_DOMAIN="icloud.com"

    local sni_domain_cleaned=$(echo "${SNI_DOMAIN}" | cut -d':' -f1)

    echo "--> 正在生成 UUID 和 Reality 密钥对..."
    local uuid=$(/usr/local/bin/xray uuid)
    local key_pair=$(/usr/local/bin/xray x25519)
    local private_key=$(echo "$key_pair" | grep 'PrivateKey' | awk '{print $2}')
    local public_key=$(echo "$key_pair" | grep 'Password' | awk '{print $2}')
    
    echo "PrivateKey: ${private_key}" > "${XRAY_KEYS_FILE}"
    echo "PublicKey: ${public_key}" >> "${XRAY_KEYS_FILE}"

    echo "--> 正在创建配置文件 ${XRAY_CONFIG_FILE}..."
    cat > "${XRAY_CONFIG_FILE}" <<EOF
{
    "log": {
        "loglevel": "warning"
    },
    "inbounds": [
        {
            "tag": "dokodemo-in",
            "port": ${EXT_PORT},
            "protocol": "dokodemo-door",
            "settings": {
                "address": "127.0.0.1",
                "port": ${INT_PORT},
                "network": "tcp"
            },
            "sniffing": {
                "enabled": true,
                "destOverride": [ "tls" ],
                "routeOnly": true
            }
        },
        {
            "listen": "127.0.0.1",
            "port": ${INT_PORT},
            "protocol": "vless",
            "settings": {
                "clients": [
                    {
                        "id": "${uuid}",
                        "flow": "xtls-rprx-vision"
                    }
                ],
                "decryption": "none"
            },
            "streamSettings": {
                "network": "tcp",
                "security": "reality",
                "realitySettings": {
                    "dest": "${sni_domain_cleaned}:443",
                    "serverNames": [ "${sni_domain_cleaned}" ],
                    "privateKey": "${private_key}",
                    "shortIds": [ "", "0123456789abcdef" ]
                }
            },
            "sniffing": {
                "enabled": true,
                "destOverride": [ "http", "tls", "quic" ],
                "routeOnly": true
            }
        }
    ],
    "outbounds": [
        { "protocol": "freedom", "tag": "direct" },
        { "protocol": "blackhole", "tag": "block" }
    ],
    "routing": {
        "rules": [
            {
                "inboundTag": [ "dokodemo-in" ],
                "domain": [ "${sni_domain_cleaned}" ],
                "outboundTag": "direct"
            },
            {
                "inboundTag": [ "dokodemo-in" ],
                "outboundTag": "block"
            }
        ]
    }
}
EOF
}

# --- 函数: 安装 Xray 核心 ---
install_xray_core() {
    if [ -f /usr/local/bin/xray ]; then
        echo -e "${GREEN}Xray 核心已安装，无需重复操作。${NC}"
        return 0
    fi
    echo "--> 正在使用官方脚本安装 Xray 核心..."
    bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install -u root
    if [ ! -f /usr/local/bin/xray ]; then
        echo -e "${RED}Xray 核心安装失败。${NC}"
        return 1
    else
        echo -e "${GREEN}Xray 核心安装成功。${NC}"
        echo "--> 正在清理旧的配置文件..."
        systemctl stop xray >/dev/null 2>&1
        rm -f "${XRAY_CONFIG_FILE}"
        rm -f "${XRAY_KEYS_FILE}"
        echo "    旧配置已清理。"
        return 0
    fi
}

# --- 函数: (包装器) 配置 Reality ---
configure_reality_simple() {
    if ! [ -f /usr/local/bin/xray ]; then
        echo "--> Xray 核心未安装，正在自动安装..."
        install_xray_core || return
    fi

    if [ -f "${XRAY_CONFIG_FILE}" ]; then
        read -p "检测到现有配置，继续将覆盖它。确定吗？[y/N]: " confirm
        if [[ ! "$confirm" =~ ^[yY] ]]; then echo "操作已取消。"; return; fi
    fi
    
    generate_reality_simple_config
    
    echo "--> 正在测试配置并启动 Xray..."
    /usr/local/bin/xray -test -config "${XRAY_CONFIG_FILE}"
    if [ $? -ne 0 ]; then
        echo -e "${RED}配置文件测试失败，请检查。配置未应用。${NC}"; return; fi
    
    systemctl restart xray
    systemctl enable xray > /dev/null 2>&1
    echo -e "${GREEN}🎉 Xray Reality 配置成功！${NC}"
    view_config_xray
}

# --- 函数: (包装器) 配置 Reality (防偷) ---
configure_reality_dokodemo() {
    if ! [ -f /usr/local/bin/xray ]; then
        echo "--> Xray 核心未安装，正在自动安装..."
        install_xray_core || return
    fi
    
    if [ -f "${XRAY_CONFIG_FILE}" ]; then
        read -p "检测到现有配置，继续将覆盖它。确定吗？[y/N]: " confirm
        if [[ ! "$confirm" =~ ^[yY] ]]; then echo "操作已取消。"; return; fi
    fi

    generate_reality_dokodemo_config
    
    echo "--> 正在测试配置并启动 Xray..."
    /usr/local/bin/xray -test -config "${XRAY_CONFIG_FILE}"
    if [ $? -ne 0 ]; then
        echo -e "${RED}配置文件测试失败，请检查。配置未应用。${NC}"; return; fi
    
    systemctl restart xray
    systemctl enable xray > /dev/null 2>&1
    echo -e "${GREEN}🎉 Xray Reality (防偷) 配置成功！${NC}"
    view_config_xray
}


# --- 函数: 卸载 Xray ---
uninstall_xray() {
    if [ ! -f /usr/local/bin/xray ]; then
        echo -e "${RED}Xray 未安装。${NC}"; return; fi
    
    read -p "警告：确定要卸载 Xray 吗？这将删除所有数据。[y/N]: " confirm
    if [[ ! "$confirm" =~ ^[yY]([eE][sS])?$ ]]; then
        echo "卸载操作已取消。"; return; fi
    
    systemctl stop xray
    bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ remove --purge
    rm -f "${XRAY_KEYS_FILE}"
    echo -e "${GREEN}Xray 已成功卸载。${NC}"
}

# --- 函数: 查看 Xray 配置 ---
view_config_xray() {
    if [ ! -f "${XRAY_CONFIG_FILE}" ]; then
        echo -e "${RED}Xray 未配置。请先选择一个配置方案。${NC}"; return; fi
    ensure_jq || return

    if ! jq . "${XRAY_CONFIG_FILE}" >/dev/null 2>&1; then
        echo -e "${RED}错误：配置文件 ${XRAY_CONFIG_FILE} 格式无效。${NC}"; return; fi

    local ip_address=$(curl -s https://ipv4.icanhazip.com || echo "<您的服务器IP>")
    local public_key="<未找到>"
    if [ -f "${XRAY_KEYS_FILE}" ]; then
        public_key=$(grep 'PublicKey' "${XRAY_KEYS_FILE}" | awk '{print $2}')
    fi

    echo "------------------------------------------"
    echo "     Xray (Reality) 当前配置信息"
    echo "------------------------------------------"
    
    # 通过 tag 判断配置类型
    if jq -e '.inbounds[] | select(.tag=="dokodemo-in")' "${XRAY_CONFIG_FILE}" >/dev/null 2>&1; then
        # 防偷配置
        local ext_port=$(jq '.inbounds[] | select(.tag=="dokodemo-in") | .port' "${XRAY_CONFIG_FILE}")
        local vless_inbound=$(jq '.inbounds[] | select(.protocol=="vless")' "${XRAY_CONFIG_FILE}")
        local uuid=$(echo "$vless_inbound" | jq -r '.settings.clients[0].id')
        local flow=$(echo "$vless_inbound" | jq -r '.settings.clients[0].flow')
        local sni=$(echo "$vless_inbound" | jq -r '.streamSettings.realitySettings.serverNames[0]')
        local short_id=$(echo "$vless_inbound" | jq -r '.streamSettings.realitySettings.shortIds[0]')
        
        echo -e "配置类型   : ${GREEN}Reality (防偷)${NC}"
        echo -e "监听地址   : ${GREEN}${ip_address}${NC}"
        echo -e "外部端口   : ${GREEN}${ext_port}${NC}"
        echo -e "UUID       : ${GREEN}${uuid}${NC}"
        echo -e "Flow       : ${GREEN}${flow}${NC}"
        echo -e "伪装域名   : ${GREEN}${sni}${NC}"
        echo -e "Short ID   : ${GREEN}${short_id}${NC}"
        echo -e "公钥 (pbk) : ${GREEN}${public_key}${NC}"
        echo "------------------------------------------"
        echo "VLESS 分享链接:"
        local vless_link="vless://${uuid}@${ip_address}:${ext_port}?encryption=none&flow=${flow}&security=reality&sni=${sni}&fp=random&pbk=${public_key}&sid=${short_id}&allowInsecure=1&type=tcp&headerType=none#VPS_防偷"
        echo -e "${GREEN}${vless_link}${NC}"

    else
        # Reality 配置
        local vless_inbound=$(jq '.inbounds[] | select(.protocol=="vless")' "${XRAY_CONFIG_FILE}")
        local port=$(echo "$vless_inbound" | jq -r '.port')
        local uuid=$(echo "$vless_inbound" | jq -r '.settings.clients[0].id')
        local flow=$(echo "$vless_inbound" | jq -r '.settings.clients[0].flow')
        local sni=$(echo "$vless_inbound" | jq -r '.streamSettings.realitySettings.serverNames[0]')
        local short_id=$(echo "$vless_inbound" | jq -r '.streamSettings.realitySettings.shortIds[0]')

        echo -e "配置类型   : ${GREEN}Reality 配置${NC}"
        echo -e "监听地址   : ${GREEN}${ip_address}${NC}"
        echo -e "端口       : ${GREEN}${port}${NC}"
        echo -e "UUID       : ${GREEN}${uuid}${NC}"
        echo -e "Flow       : ${GREEN}${flow}${NC}"
        echo -e "伪装域名   : ${GREEN}${sni}${NC}"
        echo -e "Short ID   : ${GREEN}${short_id}${NC}"
        echo -e "公钥 (pbk) : ${GREEN}${public_key}${NC}"
        echo "------------------------------------------"
        echo "VLESS 分享链接:"
        local vless_link="vless://${uuid}@${ip_address}:${port}?encryption=none&flow=${flow}&security=reality&sni=${sni}&fp=random&pbk=${public_key}&sid=${short_id}&allowInsecure=1&type=tcp&headerType=none#VPS_Reality"
        echo -e "${GREEN}${vless_link}${NC}"
    fi
    echo "------------------------------------------"
}

# --- 函数: Xray 服务管理 ---
manage_xray_service() {
    if ! systemctl list-units --type=service | grep -q "xray.service"; then
        echo -e "${RED}Xray 服务未安装。${NC}"; return; fi
    case $1 in
        start) systemctl start xray && echo -e "${GREEN}服务启动成功。${NC}" || echo -e "${RED}服务启动失败。${NC}" ;;
        stop) systemctl stop xray && echo -e "${GREEN}服务已停止。${NC}" || echo -e "${RED}服务停止失败。${NC}" ;;
        restart) systemctl restart xray && echo -e "${GREEN}服务重启成功。${NC}" || echo -e "${RED}服务重启失败。${NC}" ;;
        status) systemctl status xray ;;
    esac
}

# --- 函数: Xray 主菜单 ---
xray_menu() {
    while true; do
        clear
        echo "=================================================="
        echo "       XTLS-RPRX-VISION Reality 管理脚本"
        echo "=================================================="
        check_xray_status
        echo "--------------------------------------------------"
        echo "1. 安装 Xray 核心"
        echo "2. 配置 Reality"
        echo "3. 配置 Reality (防偷)"
        echo "4. 卸载 Xray"
        echo "5. 查看 Xray 配置"
        echo "6. 启动 Xray"
        echo "7. 停止 Xray"
        echo "8. 重启 Xray"
        echo "9. 查看运行状态"
        echo "0. 退出脚本"
        echo "=================================================="
        read -p "请输入选项 [0-9]: " choice

        case $choice in
            1) install_xray_core ;;
            2) configure_reality_simple ;;
            3) configure_reality_dokodemo ;;
            4) uninstall_xray ;;
            5) view_config_xray ;;
            6) manage_xray_service start ;;
            7) manage_xray_service stop ;;
            8) manage_xray_service restart ;;
            9) manage_xray_service status ;;
            0) break ;;
            *) echo -e "${RED}无效选项，请重试。${NC}" ;;
        esac
        [ "$choice" != "0" ] && [ "$choice" != "9" ] && read -p "按 Enter 键返回..."
    done
}

# --- 脚本入口 ---
check_root
xray_menu
echo "脚本已退出。"