{{H1}}

# 查看规则是否生效
nft list ruleset | grep "20000"

# 重新加载规则
systemctl restart hy2-porthopping

{
  "log": {
    "level": "info"
  },
  "outbounds": [
    {
      "type": "hysteria2",
      "tag": "HY2-主力(WiFi)",
      "server": "hy2.<主域名>",
      "server_port": 8443,
      "password": "<HY2 密码>",
      "obfs": {
        "type": "salamander",
        "password": "<HY2 混淆密码>"
      },
      "tls": {
        "enabled": true,
        "server_name": "hy2.<主域名>"
      }
    },
    {
      "type": "vless",
      "tag": "VLESS-gRPC-CDN",
      "server": "ws.<主域名>",
      "server_port": 443,
      "uuid": "<VLESS UUID>",
      "transport": {
        "type": "grpc",
        "service_name": "<gRPC serviceName>"
      },
      "tls": {
        "enabled": true,
        "server_name": "ws.<主域名>"
      }
    },
    {
      "type": "vless",
      "tag": "VLESS-WS-CDN",
      "server": "ws.<主域名>",
      "server_port": 443,
      "uuid": "<VLESS UUID>",
      "transport": {
        "type": "ws",
        "path": "<WS 路径>"
      },
      "tls": {
        "enabled": true,
        "server_name": "ws.<主域名>"
      }
    },
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "block",
      "tag": "block"
    }
  ],
  "route": {
    "rules": [
      {
        "geoip": "cn",
        "outbound": "direct"
      },
      {
        "geosite": "cn",
        "outbound": "direct"
      }
    ],
    "final": "VLESS-gRPC-CDN"
  }
}

# 查看所有代理服务状态
systemctl status hysteria-server xray nginx

# 查看 Hysteria 2 实时日志
journalctl -u hysteria-server -f --no-pager

# 查看 Xray 实时日志
journalctl -u xray -f --no-pager

# 手动续签证书（通常自动，无需手动）
export CF_Token="<Cloudflare API Token>"
~/.acme.sh/acme.sh --renew -d hy2.<主域名> --server letsencrypt
~/.acme.sh/acme.sh --renew -d ws.<主域名> --server letsencrypt

# 查看端口监听状态
ss -ulnp | grep '8443'            # Hysteria 2 UDP
ss -tlnp | grep -E '10000|10001'  # Xray 本地端口
ss -tlnp | grep ':443'            # Nginx HTTPS

xray version

bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install

xray version
systemctl status xray

cat > /usr/local/bin/gen-links << 'EOF'
#!/usr/bin/env python3
import json, re, sys

def urlencode(s):
    safe = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~"
    return "".join(c if c in safe else f"%{ord(c):02X}" for c in s)

try:
    with open("/usr/local/etc/xray/config.json") as f:
        xray = json.load(f)
except Exception as e:
    print(f"读取 Xray 配置失败: {e}"); sys.exit(1)

ws_uuid = ws_path = grpc_uuid = grpc_name = None
for ib in xray.get("inbounds", []):
    clients = ib.get("settings", {}).get("clients", [])
    ss = ib.get("streamSettings", {})
    if ss.get("network") == "ws" and not ws_path:
        ws_path = ss.get("wsSettings", {}).get("path", "")
        if clients: ws_uuid = clients[0].get("id")
    if ss.get("network") == "grpc" and not grpc_name:
        grpc_name = ss.get("grpcSettings", {}).get("serviceName", "")
        if clients: grpc_uuid = clients[0].get("id")

try:
    with open("/etc/hysteria/config.yaml") as f:
        hy2 = f.read()
except Exception as e:
    print(f"读取 Hysteria2 配置失败: {e}"); sys.exit(1)

hy2_pass = obfs_pass = None
for pat in [r'auth:\s*\n\s*(?:type:\s*\S+\s*\n\s*)?password:\s*["\']?([^"\'\n]+)', r'auth:\s*["\']?([^"\'\n]+)']:
    m = re.search(pat, hy2)
    if m: hy2_pass = m.group(1).strip().strip("\"'"); break
m = re.search(r'salamander:\s*\n\s*password:\s*["\']?([^"\'\n]+)', hy2)
if m: obfs_pass = m.group(1).strip().strip("\"'")

DOMAIN = "<主域名>"

print()
print("=" * 60)
print("  VLESS + WebSocket + CDN")
print("=" * 60)
print(f"vless://{ws_uuid}@ws.{DOMAIN}:443?type=ws&path={urlencode(ws_path)}&security=tls&sni=ws.{DOMAIN}#VLESS-WS-CDN")
print()
print("=" * 60)
print("  VLESS + gRPC + CDN")
print("=" * 60)
print(f"vless://{grpc_uuid}@ws.{DOMAIN}:443?type=grpc&serviceName={grpc_name}&security=tls&sni=ws.{DOMAIN}#VLESS-gRPC-CDN")
print()
print("=" * 60)
print("  Hysteria 2")
print("=" * 60)
print(f"hysteria2://{urlencode(hy2_pass)}@hy2.{DOMAIN}:8443?sni=hy2.{DOMAIN}&obfs=salamander&obfs-password={urlencode(obfs_pass)}#HY2-主力")
print()
EOF
chmod +x /usr/local/bin/gen-links

gen-links