ShellCrash/scripts/clash.sh

#!/bin/sh
# Copyright (C) Juewuy

getconfig(){
	#服务器缺省地址
	[ -z "$update_url" ] && update_url=https://cdn.jsdelivr.net/gh/juewuy/ShellClash
	#文件路径
	[ -z "$clashdir" ] && echo 环境变量配置有误！请重新安装脚本！
	ccfg=$clashdir/mark
	yaml=$clashdir/config.yaml
	#检查/读取标识文件
	[ ! -f $ccfg ] && echo '#标识clash运行状态的文件，不明勿动！' > $ccfg
	source $ccfg
	#设置默认端口
	[ -z "$mix_port" ] && mix_port=7890
	[ -z "$redir_port" ] && redir_port=7892
	[ -z "$db_port" ] && db_port=9999
	[ -z "$dns_port" ] && dns_port=1053
	#检查mac地址记录
	[ ! -f $clashdir/mac ] && touch $clashdir/mac
	#获取本机host地址
	if [ -f /bin/opkg ];then
		host=$(ubus call network.interface.lan status | grep \"address\" | grep -oE '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}';)
	else
		host=$(ip a|grep -w 'inet'|grep 'global'|grep -E '192.|10.'|sed 's/.*inet.//g'|sed 's/\/[0-9][0-9].*$//g'|head -n 1)
		[ -z "$host" ] && host=127.0.0.1
	fi
	#dashboard目录位置
	[ -d $clashdir/ui ] && dbdir=$clashdir/ui && hostdir=":$db_port/ui"
	[ -d /www/clash ] && dbdir=/www/clash && hostdir=/clash
	#开机自启相关
	if [ -f /etc/rc.common ];then
		[ -n "$(find /etc/rc.d -name '*clash')" ] && autostart=enable_rc || autostart=disable_rc
	else
		[ -n "$(systemctl is-enabled clash.service 2>&1 | grep enable)" ] && autostart=enable_sys || autostart=disable_sys
	fi
	#开机自启描述
	if [ "$start_old" = "已开启" ];then
		auto="\033[33m已设置保守模式！\033[0m"
		auto1="\033[36m设为\033[0m常规模式启动"
	elif [ "$autostart" = "enable_rc" -o "$autostart" = "enable_sys" ]; then
		auto="\033[32m已设置开机启动！\033[0m"
		auto1="\033[36m禁用\033[0mclash开机启动"
	else
		auto="\033[31m未设置开机启动！\033[0m"
		auto1="\033[36m允许\033[0mclash开机启动"
	fi
	#获取运行模式
	if [ -z "$redir_mod" ];then
		sed -i "2i\redir_mod=Redir模式" $ccfg
		redir_mod=Redir模式
	fi
	#获取运行状态
	PID=$(pidof clash)
	if [ -n "$PID" ];then
		run="\033[32m正在运行（$redir_mod）\033[0m"
		VmRSS=`cat /proc/$PID/status|grep -w VmRSS|awk '{print $2,$3}'`
		#获取运行时长
		if [ -n "$start_time" ]; then 
			time=$((`date +%s`-start_time))
			day=$((time/86400))
			[ "$day" = "0" ] && day='' || day="$day天"
			time=`date -u -d @${time} +%H小时%M分%S秒`
		fi
	else
		run="\033[31m没有运行（$redir_mod）\033[0m"
		#检测系统端口占用
		checkport
	fi
	#检查定时任务配置文件
	if [ -z "$cronpath" ];then
		[ -d /etc/crontabs/ ] && cronpath="/etc/crontabs/root"
		[ -d /var/spool/cron/ ] && cronpath="/var/spool/cron/root"
		[ -d /var/spool/cron/crontabs/ ] && cronpath="/var/spool/cron/crontabs/root"
		[ -d /etc/storage/cron/crontabs ] && cronpath="/etc/storage/cron/crontabs/admin"
		[ -n "$cronpath" ] && sed -i "1i\cronpath=\'$cronpath\'" $ccfg
	fi
	#输出状态
	echo -----------------------------------------------
	echo -e "\033[30;46m欢迎使用ShellClash！\033[0m		版本：$versionsh_l"
	echo -e "Clash服务"$run"，"$auto""
	if [ -n "$PID" ];then
		echo -e "当前内存占用：\033[44m"$VmRSS"\033[0m，已运行：\033[46;30m"$day"\033[44;37m"$time"\033[0m"
	fi
	echo -e "TG群：\033[36;4mhttps://t.me/clashfm\033[0m"
	echo -----------------------------------------------
	#检查新手引导
	if [ -z "$userguide" ];then
		read -p "检测到首次运行，是否启动新手引导？(1/0) > " res
		echo -----------------------------------------------
		sed -i "1i\userguide=1" $ccfg
		[ "$res" = 1 ] && source $clashdir/getdate.sh && userguide
	fi
}
echoerrornum(){
	echo -----------------------------------------------
	echo -e "\033[31m请输入正确的数字！\033[0m"
}
catpac(){
	cat > /tmp/pac <<EOF
function FindProxyForURL(url, host) {
	if (
		isInNet(host, "0.0.0.0", "255.0.0.0")||
		isInNet(host, "10.0.0.0", "255.0.0.0")||
		isInNet(host, "127.0.0.0", "255.0.0.0")||
		isInNet(host, "224.0.0.0", "224.0.0.0")||
		isInNet(host, "240.0.0.0", "240.0.0.0")||
		isInNet(host, "172.16.0.0",  "255.240.0.0")||
		isInNet(host, "192.168.0.0", "255.255.0.0")||
		isInNet(host, "169.254.0.0", "255.255.0.0")
	)
		return "DIRECT";
	else
		return "PROXY $host:$mix_port; DIRECT;"
}
EOF
	[ ! -d $clashdir/ui ] && mkdir -p $clashdir/ui
	[ "$(cat /tmp/pac)" = "$(cat $clashdir/ui/pac 2>&1)" ] && rm -rf /tmp/pac || mv -f /tmp/pac $clashdir/ui/pac
}
start_over(){
	[ $? -eq 1 ] && exit
	echo -e "\033[32mclash服务已启动！\033[0m"
	if [ -n "$hostdir" ];then
		echo -e "请使用\033[30;47m http://$host$hostdir \033[0m管理内置规则"
	else
		echo -e "可使用\033[30;47m http://clash.razord.top \033[0m管理内置规则"
		echo -e "Host地址:\033[36m $host \033[0m 端口:\033[36m $db_port \033[0m"
		echo -e "也可前往更新菜单安装本地Dashboard面板，连接更稳定！\033[0m"
	fi
	echo -----------------------------------------------
}
setport(){
	inputport(){
		read -p "请输入端口号(1000-65535) > " portx
		if [ -z "$portx" ]; then
			setport
		elif [ $portx -gt 65535 -o $portx -le 999 ]; then
			echo -e "\033[31m输入错误！请输入正确的数值(1000-65535)！\033[0m"
			inputport
		elif [ -n "$(echo $mix_port$redir_port$dns_port$db_port|grep $portx)" ]; then
			echo -e "\033[31m输入错误！请不要输入重复的端口！\033[0m"
			inputport
		elif [ -n "$(netstat -ntul |grep :$portx)" ];then
			echo -e "\033[31m当前端口已被其他进程占用，请重新输入！\033[0m"
			inputport
		else
			sed -i "/$xport*/"d $ccfg
			sed -i "1i$xport=$portx" $ccfg
			echo -e "\033[32m设置成功！！！\033[0m"
			setport
		fi
	}
	source $ccfg
	[ -z "$secret" ] && secret=未设置
	[ -z "$authentication" ] && authentication=未设置
	if [ -n "$(pidof clash)" ];then
		echo -----------------------------------------------
		echo -e "\033[33m检测到clash服务正在运行，需要先停止clash服务！\033[0m"
		read -p "是否停止clash服务？(1/0) > " res
		if [ "$res" = "1" ];then
			$clashdir/start.sh stop
		else
			clashadv
		fi
	fi
	echo -----------------------------------------------
	echo -e " 1 修改Http/Sock5端口：	\033[36m$mix_port\033[0m"
	echo -e " 2 设置Http/Sock5密码：	\033[36m$authentication\033[0m"
	echo -e " 3 修改静态路由端口：	\033[36m$redir_port\033[0m"
	echo -e " 4 修改DNS监听端口：	\033[36m$dns_port\033[0m"
	echo -e " 5 修改面板访问端口：	\033[36m$db_port\033[0m"
	echo -e " 6 设置面板访问密码：	\033[36m$secret\033[0m"
	echo -e " 0 返回上级菜单"
	read -p "请输入对应数字 > " num
	if [ -z "$num" ]; then 
		echoerrornum
	elif [ "$num" = 1 ]; then
		xport=mix_port
		inputport
	elif [ "$num" = 2 ]; then
		echo -----------------------------------------------
		echo -e "格式必须是\033[32m 用户名:密码 \033[0m的形式，注意用小写冒号分隔！"
		echo -e "请尽量不要使用特殊符号！可能会产生未知错误！"
		echo -e "\033[31m需要使用本机代理功能时，请勿设置密码！\033[0m"
		echo "输入 0 删除密码"
		echo -----------------------------------------------
		read -p "请输入Http/Sock5用户名及密码 > " input
		if [ "$input" = "0" ];then
			authentication=""
			sed -i "/authentication*/"d $ccfg
			echo 密码已移除！
		else
			[ "$local_proxy" = "已开启" ] && echo -e "\033[32m请先禁用本机代理功能！\033[0m" && setport
			authentication=$(echo $input | grep :)
			if [ -n "$authentication" ]; then
				sed -i "/authentication*/"d $ccfg
				sed -i "1i\authentication=\'$authentication\'" $ccfg
				echo -e "\033[32m设置成功！！！\033[0m"
			else
				echo -e "\033[31m输入有误，请重新输入！\033[0m"
			fi
		fi
		setport
	elif [ "$num" = 3 ]; then
		xport=redir_port
		inputport
	elif [ "$num" = 4 ]; then
		xport=dns_port
		inputport
	elif [ "$num" = 5 ]; then
		xport=db_port
		inputport
	elif [ "$num" = 6 ]; then
		read -p "请输入面板访问密码(输入0删除密码) > " secret
		if [ -n "$secret" ]; then
			sed -i "/secret*/"d $ccfg
			[ "$secret" = "0" ] && secret="" || sed -i "1i\secret=$secret" $ccfg
			echo -e "\033[32m设置成功！！！\033[0m"
		fi
		setport
	fi	
}
setdns(){
	source $ccfg
	if [ "$dns_no" = "true" ];then
		read -p "检测到内置DNS已被禁用，是否启用内置DNS？(1/0) > " res
		if [ "$res" = "1" ];then
			sed -i "/dns_no*/"d $ccfg
		else
			clashadv
		fi
	fi
	[ -z "$dns_nameserver" ] && dns_nameserver='114.114.114.114, 223.5.5.5'
	[ -z "$dns_fallback" ] && dns_fallback='1.0.0.1, 8.8.4.4'
	echo -----------------------------------------------
	echo -e "当前基础DNS：\033[36m$dns_nameserver\033[0m"
	echo -e "fallbackDNS：\033[36m$dns_fallback\033[0m"
	echo -e "多个DNS地址请用\033[30;47m | \033[0m分隔一次性输入"
	echo -e "\033[33m使用redir-host时，fallback组暂不支持tls或者https形式的DNS\033[0m"
	echo -----------------------------------------------
	echo -e " 1 修改基础DNS"
	echo -e " 2 修改fallback_DNS"
	echo -e " 3 重置DNS配置"
	echo -e " 4 禁用内置DNS(慎用)"
	echo -e " 0 返回上级菜单"
	echo -----------------------------------------------
	read -p "请输入对应数字 > " num
	if [ -z "$num" ]; then 
		echoerrornum
		clashadv
	elif [ "$num" = 1 ]; then
		read -p "请输入新的DNS > " dns_nameserver
		dns_nameserver=$(echo $dns_nameserver | sed 's/|/\,\ /')
		if [ -n "$dns_nameserver" ]; then
			sed -i "/dns_nameserver*/"d $ccfg
			sed -i "1i\dns_nameserver=\'$dns_nameserver\'" $ccfg
			echo -e "\033[32m设置成功！！！\033[0m"
		fi
	elif [ "$num" = 2 ]; then
		read -p "请输入新的DNS > " dns_fallback
		dns_fallback=$(echo $dns_nameserver | sed 's/|/\,\ /')
		if [ -n "$dns_fallback" ]; then
			sed -i "/dns_fallback*/"d $ccfg
			sed -i "1i\dns_fallback=\'$dns_fallback\'" $ccfg
			echo -e "\033[32m设置成功！！！\033[0m"
		fi	
	elif [ "$num" = 3 ]; then
		dns_nameserver=""
		dns_fallback=""
		sed -i "/dns_nameserver*/"d $ccfg
		sed -i "/dns_fallback*/"d $ccfg
		echo -e "\033[33mDNS配置已重置！！！\033[0m"
	elif [ "$num" = 4 ]; then
		echo -----------------------------------------------
		echo -e "\033[31m仅限搭配其他DNS服务(比如dnsmasq、smartDNS)时使用！\033[0m"
		sed -i "/dns_no*/"d $ccfg
		sed -i "1i\dns_no=true" $ccfg
		echo -e "\033[33m已禁用内置DNS！！！\033[0m"
		clashadv
	else
		clashadv
	fi
	setdns
}
checkport(){
	for portx in $dns_port $mix_port $redir_port $db_port ;do
		if [ -n "$(netstat -ntul 2>&1 |grep :$portx)" ];then
			echo -----------------------------------------------
			echo -e "检测到端口【$portx】被以下进程占用！clash可能无法正常启动！\033[33m"
			echo $(netstat -ntulp | grep :$portx | head -n 1)
			echo -e "\033[0m-----------------------------------------------"
			echo -e "\033[36m请修改默认端口配置！\033[0m"
			setport
			source $ccfg
			checkport
		fi
	done
}
clashstart(){
	#检查clash核心
	if [ ! -f $clashdir/clash ];then
		echo -----------------------------------------------
		echo -e "\033[31m没有找到核心文件，请先下载clash核心！\033[0m"
		source $clashdir/getdate.sh && checkupdate && getcore
	fi
	#检查GeoIP数据库
	if [ ! -f $clashdir/Country.mmdb ];then
		echo -----------------------------------------------
		echo -e "\033[31m没有找到GeoIP数据库文件，请下载数据库文件！\033[0m"
		source $clashdir/getdate.sh && checkupdate && getgeo
	fi
	#检查yaml配置文件
	if [ ! -f "$yaml" ];then
		echo -----------------------------------------------
		echo -e "\033[31m没有找到配置文件，请先导入配置文件！\033[0m"
		clashlink
	fi
	if [ -n "$PID" ];then
		echo -----------------------------------------------
		$clashdir/start.sh stop
		echo -e "\033[31mClash服务已停止！\033[0m"
	fi
	catpac #生成pac自动代理文件
	echo -----------------------------------------------
	$clashdir/start.sh start
	sleep 1
	PID=$(pidof clash)
	if [ -z "$PID" ];then 
		$clashdir/start.sh stop
		echo -e "\033[31mclash启动失败！\033[0m" 
		exit;
	fi
	start_over
}
macfilter(){
	add_mac(){
		echo -----------------------------------------------
		echo -e "\033[33m序号   设备IP       设备mac地址       设备名称\033[32m"
		cat $dhcpdir | awk '{print " "NR" "$3,$2,$4}'
		echo -e "\033[0m 0-----------------------------------------------"
		echo -e " 0 或回车 结束添加"
		read -p "请输入需要添加的设备的对应序号 > " num
		if [ -z "$num" ]||[ "$num" -le 0 ]; then
			macfilter
		elif [ $num -le $(cat $dhcpdir | awk 'END{print NR}') ]; then
			macadd=$(cat $dhcpdir | awk '{print $2}' | sed -n "$num"p)
			if [ -z "$(cat $clashdir/mac | grep -E "$macadd")" ];then
				echo $macadd >> $clashdir/mac
				echo -----------------------------------------------
				echo 已添加的mac地址：
				cat $clashdir/mac
			else
				echo -----------------------------------------------
				echo -e "\033[31m已添加的设备，请勿重复添加！\033[0m"
			fi
		else
			echo -----------------------------------------------
			echo -e "\033[31m输入有误，请重新输入！\033[0m"
		fi
		add_mac
	}
	del_mac(){
		echo -----------------------------------------------
		if [ -z "$(cat $clashdir/mac)" ];then
			echo -e "\033[31m列表中没有需要移除的设备！\033[0m"
			macfilter
		fi
		echo -e "\033[33m序号   设备IP       设备mac地址       设备名称\033[0m"
		i=1
		for mac in $(cat $clashdir/mac); do
			echo -e " $i \033[32m$(cat $dhcpdir | awk '{print $3,$2,$4}' | grep $mac)\033[0m"
			i=$((i+1))
		done
		echo -----------------------------------------------
		echo -e "\033[0m 0 或回车 结束删除"
		read -p "请输入需要移除的设备的对应序号 > " num
		if [ -z "$num" ]||[ "$num" -le 0 ]; then
			macfilter
		elif [ $num -le $(cat $clashdir/mac | wc -l) ];then
			sed -i "${num}d" $clashdir/mac
			echo -----------------------------------------------
			echo -e "\033[32m对应设备已移除！\033[0m"
		else
			echo -----------------------------------------------
			echo -e "\033[31m输入有误，请重新输入！\033[0m"
		fi
		del_mac
	}
	echo -----------------------------------------------
	[ -f /var/lib/dhcp/dhcpd.leases ] && dhcpdir='/var/lib/dhcp/dhcpd.leases'
	[ -f /var/lib/dhcpd/dhcpd.leases ] && dhcpdir='/var/lib/dhcpd/dhcpd.leases'
	[ -f /tmp/dhcp.leases ] && dhcpdir='/tmp/dhcp.leases'
	######
	echo -e "\033[30;47m请在此添加或移除设备\033[0m"
	if [ -n "$(cat $clashdir/mac)" ]; then
		echo -----------------------------------------------
		echo -e "当前已过滤设备为：\033[36m"
		echo -e "\033[33m   设备IP       设备mac地址       设备名称\033[0m"
		for mac in $(cat $clashdir/mac); do
			cat $dhcpdir | awk '{print $3,$2,$4}' | grep $mac
		done
		echo -----------------------------------------------
	fi
	echo -e " 1 \033[31m清空整个列表\033[0m"
	echo -e " 2 \033[32m添加指定设备\033[0m"
	echo -e " 3 \033[33m移除指定设备\033[0m"
	echo -e " 4 \033[32m添加全部设备\033[0m(请搭配移除指定设备使用)"
	echo -e " 0 返回上级菜单"
	read -p "请输入对应数字 > " num
	if [ -z "$num" ]; then
		echoerrornum
		clashcfg
	elif [ "$num" = 0 ]; then
		clashcfg
	elif [ "$num" = 1 ]; then
		:>$clashdir/mac
		echo -----------------------------------------------
		echo -e "\033[31m设备列表已清空！\033[0m"
		macfilter
	elif [ "$num" = 2 ]; then	
		add_mac
	elif [ "$num" = 3 ]; then	
		del_mac
	elif [ "$num" = 4 ]; then	
		echo -----------------------------------------------		
		cat $dhcpdir | awk '{print $2}' > $clashdir/mac
		echo -e "\033[32m已经将所有设备全部添加进过滤列表！\033[0m"
		echo -e "\033[33m请搭配【移除指定设备】功能使用！\033[0m"
		sleep 1
		macfilter
	else
		echoerrornum
		macfilter
	fi
}
clashcfg(){
	set_redir_mod(){
		echo -----------------------------------------------
		echo -e "当前代理模式为：\033[47;30m $redir_mod \033[0m；Clash核心为：\033[47;30m $clashcore \033[0m"
		echo -e "\033[33m切换模式后需要手动重启clash服务以生效！\033[0m"
		echo -e "\033[36mTun及混合模式必须使用clashpre核心！\033[0m"
		echo -----------------------------------------------
		echo " 1 Redir模式：CPU以及内存占用较低"
		echo "              但不支持UDP流量转发"
		echo "              适合非游戏用户使用"
		echo " 2 Tun模式：  支持UDP转发且延迟最低"
		echo "              CPU占用极高，只支持fake-ip模式"
		echo "              适合游戏用户、非大流量用户"
		echo " 3 混合模式： 使用redir转发TCP，Tun转发UPD"
		echo "              速度较快，内存占用略高"
		echo "              适合游戏用户、综合用户"
		echo " 4 纯净模式： 不设置iptables静态路由"
		echo "              必须手动配置http/sock5代理"
		echo "              或使用内置的PAC文件配置代理"
		echo " 0 返回上级菜单"
		read -p "请输入对应数字 > " num	
		if [ -z "$num" ]; then
			echoerrornum
			clashcfg
		elif [ "$num" = 0 ]; then
			clashcfg
		elif [ "$num" = 1 ]; then
			redir_mod=Redir模式
		elif [ "$num" = 2 ]; then
			if [ "$clashcore" = "clash" ] || [ "$clashcore" = "clashr" ];then
				echo -----------------------------------------------
				echo -e "\033[31m当前核心不支持开启Tun模式！请先切换clash核心！！！\033[0m"
				clashcfg
			fi
			redir_mod=Tun模式
			dns_mod=fake-ip
		elif [ "$num" = 3 ]; then
			if [ "$clashcore" = "clash" ] || [ "$clashcore" = "clashr" ];then
				echo -----------------------------------------------
				echo -e "\033[31m当前核心不支持开启Tun模式！请先切换clash核心！！！\033[0m"
				clashcfg
			fi
			redir_mod=混合模式	
		elif [ "$num" = 4 ]; then
			redir_mod=纯净模式			
			echo -----------------------------------------------
			echo -e "\033[32m已经设置为纯净模式！\033[0m"
			echo -e "\033[33m当前模式需要手动在设备WiFi或应用中配置HTTP或sock5代理\033[0m"
			echo -e "HTTP/SOCK5代理服务器地址：\033[30;47m$host\033[0m;端口均为：\033[30;47m$mix_port\033[0m"
			echo -e "也可以使用更便捷的PAC自动代理，PAC代理链接为：\033[30;47m http://$host:$mix_port/ui/pac \033[0m"
			echo -e "PAC的使用教程请参考：\033[4;32mhttps://juewuy.github.io/ehRUeewcv\033[0m"
			sleep 2
		else
			echoerrornum
			clashcfg
		fi
		sed -i '/redir_mod*/'d $ccfg
		sed -i "1i\redir_mod=$redir_mod" $ccfg
		sed -i '/dns_mod*/'d $ccfg
		sed -i "1i\dns_mod=$dns_mod" $ccfg
		echo -----------------------------------------------	
		echo -e "\033[36m已设为 $redir_mod ！！\033[0m"
	}
	set_dns_mod(){
		echo -----------------------------------------------
		echo -e "当前DNS运行模式为：\033[47;30m $dns_mod \033[0m"
		echo -e "\033[33m切换模式后需要手动重启clash服务以生效！\033[0m"
		echo -----------------------------------------------
		echo " 1 fake-ip模式：   响应速度更快"
		echo "                   可能与某些局域网设备有冲突"
		echo " 2 redir_host模式：兼容性更好"
		echo "                   不支持Tun模式，可能存在DNS污染"
		echo " 0 返回上级菜单"
		read -p "请输入对应数字 > " num
		if [ -z "$num" ]; then
			echoerrornum
			clashcfg
		elif [ "$num" = 0 ]; then
			clashcfg
		elif [ "$num" = 1 ]; then
			dns_mod=fake-ip
		elif [ "$num" = 2 ]; then
			dns_mod=redir_host
			redir_mod=Redir模式
		else
			echoerrornum
			clashcfg
		fi
		sed -i '/dns_mod*/'d $ccfg
		sed -i "1i\dns_mod=$dns_mod" $ccfg
		sed -i '/redir_mod*/'d $ccfg
		sed -i "1i\redir_mod=$redir_mod" $ccfg
		echo -----------------------------------------------	
		echo -e "\033[36m已设为 $dns_mod 模式！！\033[0m"
	}
	
	#获取设置默认显示
	[ -z "$skip_cert" ] && skip_cert=已开启
	[ -z "$common_ports" ] && common_ports=已开启
	[ -z "$dns_mod" ] && dns_mod=redir_host
	[ -z "$dns_over" ] && dns_over=已开启
	[ -z "$local_proxy" ] && local_proxy=未开启
	[ -z "$(cat $clashdir/mac)" ] && mac_return=未开启 || mac_return=已启用
	#
	echo -----------------------------------------------
	echo -e "\033[30;47m欢迎使用功能设置菜单：\033[0m"
	echo -e "\033[32m修改配置后请手动重启clash服务！\033[0m"
	echo -----------------------------------------------
	echo -e " 1 切换Clash运行模式: 	\033[36m$redir_mod\033[0m"
	echo -e " 2 切换DNS运行模式：	\033[36m$dns_mod\033[0m"
	echo -e " 3 跳过本地证书验证：	\033[36m$skip_cert\033[0m   ————解决节点证书验证错误"
	echo -e " 4 只代理常用端口： 	\033[36m$common_ports\033[0m   ————用于屏蔽P2P流量"
	echo -e " 5 过滤局域网mac地址：	\033[36m$mac_return\033[0m   ————列表内设备不走代理"
	echo -e " 6 不使用本地DNS服务：	\033[36m$dns_over\033[0m   ————防止redir-host模式的dns污染"
	echo -e " 7 设置本机代理服务:	\033[36m$local_proxy\033[0m	————使用环境变量或GUI/api配置本机代理"
	echo -----------------------------------------------
	echo -e " 9 \033[32m重启\033[0mclash服务"
	echo -e " 0 返回上级菜单 \033[0m"
	echo -----------------------------------------------
	read -p "请输入对应数字 > " num
	if [ -z "$num" ]; then
		echoerrornum
		clashsh
	elif [ "$num" = 0 ]; then
		clashsh  
	elif [ "$num" = 1 ]; then
		set_redir_mod
		clashcfg
	  
	elif [ "$num" = 2 ]; then
		set_dns_mod
		clashcfg
	
	elif [ "$num" = 3 ]; then	
		sed -i '/skip_cert*/'d $ccfg
		echo -----------------------------------------------
		if [ "$skip_cert" = "未开启" ] > /dev/null 2>&1; then 
			sed -i "1i\skip_cert=已开启" $ccfg
			echo -e "\033[33m已设为开启跳过本地证书验证！！\033[0m"
			skip_cert=已开启
		else
			sed -i "1i\skip_cert=未开启" $ccfg
			echo -e "\033[33m已设为禁止跳过本地证书验证！！\033[0m"
			skip_cert=未开启
		fi
		clashcfg
	
	elif [ "$num" = 4 ]; then	
		sed -i '/common_ports*/'d $ccfg
		echo -----------------------------------------------
		if [ "$common_ports" = "未开启" ] > /dev/null 2>&1; then 
			sed -i "1i\common_ports=已开启" $ccfg
			echo -e "\033[33m已设为仅代理（22,53,587,465,995,993,143,80,443）等常用端口！！\033[0m"
			common_ports=已开启
		else
			sed -i "1i\common_ports=未开启" $ccfg
			echo -e "\033[33m已设为代理全部端口！！\033[0m"
			common_ports=未开启
		fi
		clashcfg  

	elif [ "$num" = 5 ]; then	
		macfilter
		
	elif [ "$num" = 6 ]; then	
		sed -i '/dns_over*/'d $ccfg
		echo -----------------------------------------------
		if [ "$dns_over" = "未开启" ] > /dev/null 2>&1; then 
			sed -i "1i\dns_over=已开启" $ccfg
			echo -e "\033[33m已设置DNS为不走本地dnsmasq服务器！\033[0m"
			echo -e "可能会对浏览速度产生一定影响，介意勿用！"
			dns_over=已开启
		else
			/etc/init.d/clash enable
			sed -i "1i\dns_over=未开启" $ccfg
			echo -e "\033[32m已设置DNS通过本地dnsmasq服务器！\033[0m"
			echo -e "redir-host模式下部分网站可能会被运营商dns污染导致无法打开"
			dns_over=未开启
		fi
		clashcfg  
		
	elif [ "$num" = 7 ]; then	
		sed -i '/local_proxy*/'d $ccfg
		echo -----------------------------------------------
		if [ "$local_proxy" = "未开启" ] > /dev/null 2>&1; then 
			if [ -n "$authentication" ] && [ "$authentication" != "未设置" ] ;then
				echo -e "\033[32m检测到您已经设置了Http/Sock5代理密码，请先取消密码！\033[0m"
				sleep 1
				setport
			else
				sed -i "1i\local_proxy=已开启" $ccfg
				local_proxy=已开启
				$clashdir/start.sh set_proxy $mix_port
				echo -e "\033[32m已经成功配置本机代理~\033[0m"
				echo -e "\033[36m如未生效，请重新启动终端或重新连接SSH！\033[0m"
			fi
		else
			sed -i "1i\local_proxy=未开启" $ccfg
			local_proxy=未开启
			$clashdir/start.sh unset_proxy
			echo -e "\033[33m已经停用本机代理规则！！\033[0m"
			echo -e "\033[36m如未生效，请重新启动终端或重新连接SSH！\033[0m"
		fi
		sleep 1
		clashcfg
		
	elif [ "$num" = 9 ]; then	
		clashstart
		clashsh
	else
		echoerrornum
		clashsh
	fi
}
clashadv(){
	#获取设置默认显示
	[ -z "$modify_yaml" ] && modify_yaml=未开启
	[ -z "$ipv6_support" ] && ipv6_support=未开启
	[ -z "$start_old" ] && start_old=未开启
	[ -z "$tproxy_mod" ] && tproxy_mod=未开启
	#
	echo -----------------------------------------------
	echo -e "\033[30;47m欢迎使用进阶模式菜单：\033[0m"
	echo -e "\033[33m如您不是很了解clash的运行机制，请勿更改！\033[0m"
	echo -e "\033[32m修改配置后请手动重启clash服务！\033[0m"
	echo -----------------------------------------------
	echo -e " 1 使用自定义配置:	\033[36m$modify_yaml\033[0m	————不使用内置规则修饰config.yaml"
	echo -e " 2 启用ipv6支持:	\033[36m$ipv6_support\033[0m	————实验性功能，可能不稳定"
	echo -e " 3 使用保守方式启动:	\033[36m$start_old\033[0m	————切换时会停止clash服务"
	echo -e " 4 Redir模式udp转发:	\033[36m$tproxy_mod\033[0m	————依赖iptables-mod-tproxy"
	echo -e " 5 手动指定clash运行端口及秘钥"
	echo -e " 6 手动配置内置DNS服务"
	echo -----------------------------------------------
	echo -e " 8 \033[31m重置\033[0m配置文件"
	echo -e " 9 \033[32m重启\033[0mclash服务"
	echo -e " 0 返回上级菜单 \033[0m"
	echo -----------------------------------------------
	read -p "请输入对应数字 > " num
	if [ -z "$num" ]; then
		echoerrornum
		clashsh
	elif [ "$num" = 0 ]; then
		clashsh  
	
	elif [ "$num" = 1 ]; then	
		sed -i '/modify_yaml*/'d $ccfg
		echo -----------------------------------------------
		if [ "$modify_yaml" = "未开启" ] > /dev/null 2>&1; then 
			sed -i "1i\modify_yaml=已开启" $ccfg
			echo -e "\033[33m已设为使用用户完全自定义的配置文件！！"
			echo -e "\033[36m不明白原理的用户切勿随意开启此选项"
			echo -e "\033[31m！！！必然会导致上不了网！！!\033[0m"
			modify_yaml=已开启
			sleep 3
		else
			sed -i "1i\modify_yaml=未开启" $ccfg
			echo -e "\033[32m已设为使用脚本内置规则管理config.yaml配置文件！！\033[0m"
			modify_yaml=未开启
		fi
		clashadv  
		
	elif [ "$num" = 2 ]; then	
		sed -i '/ipv6_support*/'d $ccfg
		echo -----------------------------------------------
		if [ "$ipv6_support" = "未开启" ] > /dev/null 2>&1; then 
			sed -i "1i\ipv6_support=已开启" $ccfg
			echo -e "\033[33m已开启对ipv6协议的支持！！\033[0m"
			echo -e "Clash对ipv6的支持并不友好，如不能使用请静等修复！"
			ipv6_support=已开启
			sleep 2
		else
			sed -i "1i\ipv6_support=未开启" $ccfg
			echo -e "\033[32m已禁用对ipv6协议的支持！！\033[0m"
			ipv6_support=未开启
		fi
		clashadv  
		
	elif [ "$num" = 3 ]; then	
		sed -i '/start_old*/'d $ccfg
		echo -----------------------------------------------
		if [ "$start_old" = "未开启" ] > /dev/null 2>&1; then 
			sed -i "1i\start_old=已开启" $ccfg
			echo -e "\033[33m改为使用保守方式启动clash服务！！\033[0m"
			echo -e "\033[36m此模式兼容性更好但无法禁用开机启动！！\033[0m"
			start_old=已开启
			$clashdir/start.sh stop
			sleep 2
		else
			sed -i "1i\start_old=未开启" $ccfg
			echo -e "\033[32m改为使用默认方式启动clash服务！！\033[0m"
			start_old=未开启
			$clashdir/start.sh stop
		fi
		clashadv  
		
	elif [ "$num" = 4 ]; then	
		sed -i '/tproxy_mod*/'d $ccfg
		echo -----------------------------------------------
		if [ "$tproxy_mod" = "未开启" ]; then 
			if [ -n "$(iptables -j TPROXY 2>&1 | grep 'on-port')" ];then
				sed -i "1i\tproxy_mod=已开启" $ccfg
				tproxy_mod=已开启
				echo -e "\033[32m已经为Redir模式启用udp转发功能！\033[0m"
			else
				echo -e "\033[31m您的设备不支持tproxy模式，无法开启！\033[0m"
			fi
		else
			sed -i "1i\tproxy_mod=未开启" $ccfg
			tproxy_mod=未开启
			echo -e "\033[33m已经停止使用tproxy转发udp流量！！\033[0m"
		fi
		sleep 1
		clashadv 		
	elif [ "$num" = 5 ]; then
		setport
		clashadv
		
	elif [ "$num" = 6 ]; then
		setdns
		clashadv
		
	elif [ "$num" = 8 ]; then	
		read -p "确认重置配置文件？(1/0) > " res
		if [ "$res" = "1" ];then
			echo "versionsh_l=$versionsh_l" > $ccfg
			echo "start_time=$start_time" >> $ccfg
			echo "#标识clash运行状态的文件，不明勿动！" >> $ccfg
			echo -e "\033[33m配置文件已重置，请重新运行脚本！\033[0m"
			exit
		fi
		clashadv
		
	elif [ "$num" = 9 ]; then	
		clashstart
		sleep 1
		clashsh
	else
		echoerrornum
		clashsh
	fi
}
clashcron(){

	setcron(){
		echo -----------------------------------------------
		echo -e " 正在设置：\033[32m$cronname\033[0m定时任务"
		echo -e " 输入  1-7  对应\033[33m每周相应天\033[0m运行"
		echo -e " 输入   8   设为\033[33m每天定时\033[0m运行"
		echo -e " 输入 1,3,6 代表\033[36m每周1,3,6\033[0m运行(注意用小写逗号分隔)"
		echo -----------------------------------------------
		echo -e " 输入   9   \033[31m删除定时任务\033[0m"
		echo -e " 输入   0   返回上级菜单"
		echo -----------------------------------------------
		read -p "请输入对应数字 > " num
		if [ -z "$num" ]; then 
			echoerrornum
			clashcron
		elif [ "$num" = 0 ]; then
			clashcron
		elif [ "$num" = 9 ]; then
			sed -i /$cronname/d $cronpath
			echo -----------------------------------------------
			echo -e "\033[31m定时任务：$cronname已删除！\033[0m"
			clashcron
		elif [ "$num" = 8 ]; then	
			week='*'
			week1=每天
			echo 已设为每天定时运行！
		else
			week=$num	
			week1=每周$week
			echo 已设为每周 $num 运行！
		fi
		#设置具体时间
		echo -----------------------------------------------
		read -p "请输入小时（0-23） > " num
		if [ -z "$num" ]; then 
			echoerrornum
			setcron
		elif [ $num -gt 23 ] || [ $num -lt 0 ]; then 
			echoerrornum
			setcron
		else	
			hour=$num
		fi
		echo -----------------------------------------------
		read -p "请输入分钟（0-60） > " num
		if [ -z "$num" ]; then 
			echoerrornum
			setcron
		elif [ $num -gt 60 ] || [ $num -lt 0 ]; then 
			echoerrornum
			setcron
		else	
			min=$num
		fi
		echo -----------------------------------------------
		echo 将在$week1的$hour点$min分$cronname（旧的任务会被覆盖）
		read -p  "是否确认添加定时任务？(1/0) > " res
			if [ "$res" = '1' ]; then
				sed -i /$cronname/d $cronpath
				echo "$min $hour * * $week $cronset >/dev/null 2>&1 #$week1的$hour点$min分$cronname" >> $cronpath
				echo -----------------------------------------------
				echo -e "\033[31m定时任务已添加！！！\033[0m"
				chmod 600 $cronpath #修改权限
			fi
			clashcron
	}
	checkcron(){
		if [ -z "$cronpath" ];then
			echo -----------------------------------------------
			echo -e "\033[33m找不到定时任务配置文件，无法添加添加定时任务！"
			echo -e "\033[0m请手动指定定时任务配置文件，文件位置可以通过【crontab -e】命令查看\033[0m"
			echo -----------------------------------------------
			read -p "请输入crontab文件路径(输入回车返回主菜单) > " path
			if [ -z "$path" ];then
				clashsh
			elif [ -f $path ];then
				cronpath=$path
				sed -i '/cronpath*/'d $ccfg
				sed -i "1i\cronpath=\'$cronpath\'" $ccfg
			else
				echo -e "\033[33m输入的路径不正确，请重新输入！\033[0m"
				checkcron
			fi
		fi
	}
	#定时任务菜单
	checkcron #检测定时任务文件
	echo -----------------------------------------------
	echo -e "\033[30;47m欢迎使用定时任务功能：\033[0m"
	echo -e "\033[44m 实验性功能，遇问题请加TG群反馈：\033[42;30m t.me/clashfm \033[0m"
	echo -----------------------------------------------
	echo  -e "\033[33m已添加的定时任务：\033[36m"
	cat $cronpath | grep -oE ' #.*' 
	echo -e "\033[0m"-----------------------------------------------
	echo -e " 1 设置\033[33m定时重启\033[0mclash服务"
	echo -e " 2 设置\033[31m定时停止\033[0mclash服务"
	echo -e " 3 设置\033[32m定时开启\033[0mclash服务"
	echo -e " 4 设置\033[33m定时更新\033[0m订阅并重启服务"
	echo -----------------------------------------------
	echo -e " 0 返回上级菜单" 
	read -p "请输入对应数字 > " num
	if [ -z "$num" ]; then 
		echoerrornum
		clashsh
		
	elif [ "$num" = 0 ]; then
		clashsh
		
	elif [ "$num" = 1 ]; then
		cronname=重启clash服务
		cronset="$clashdir/start.sh restart"
		setcron
	elif [ "$num" = 2 ]; then
		cronname=停止clash服务
		cronset="$clashdir/start.sh stop"
		setcron
	elif [ "$num" = 3 ]; then
		cronname=开启clash服务
		cronset="$clashdir/start.sh start"
		setcron
	elif [ "$num" = 4 ]; then	
		cronname=更新订阅链接
		cronset="$clashdir/start.sh getyaml"
		setcron	
		
	else
		echoerrornum
		clashsh
	fi
}
clashsh(){
	#############################
	getconfig
	#############################
	echo -e " 1 \033[32m启动/重启\033[0mclash服务"
	echo -e " 2 clash\033[33m功能设置\033[0m"
	echo -e " 3 \033[31m停止\033[0mclash服务"
	echo -e " 4 $auto1"
	echo -e " 5 设置\033[33m定时任务\033[0m$cronoff"
	echo -e " 6 导入\033[32m配置文件\033[0m"
	echo -e " 7 clash\033[31m进阶设置\033[0m"
	echo -e " 8 \033[35m测试菜单\033[0m"
	echo -e " 9 \033[36m更新/卸载\033[0m"
	echo -----------------------------------------------
	echo -e " 0 \033[0m退出脚本\033[0m"
	read -p "请输入对应数字 > " num
	if [ -z "$num" ];then
		echoerrornum
		exit;
		
	elif [ "$num" = 0 ]; then
		exit;
		
	elif [ "$num" = 1 ]; then
		clashstart
		sleep 1
		clashsh
  
	elif [ "$num" = 2 ]; then
		clashcfg

	elif [ "$num" = 3 ]; then
		$clashdir/start.sh stop
		echo -----------------------------------------------
		echo -e "\033[31mClash服务已停止！\033[0m"
		echo -----------------------------------------------
		exit;

	elif [ "$num" = 4 ]; then
		echo -----------------------------------------------
		if [ "$start_old" = "已开启" ];then
			sed -i "/start_old*/d" $ccfg
			sed -i "1i\start_old=未开启" $ccfg
			echo -e "\033[32m已设为使用默认方式启动clash服务！！\033[0m"
			start_old=未开启
		elif [ "$autostart" = "enable_rc" ]; then
			/etc/init.d/clash disable
			echo -e "\033[33m已禁止Clash开机启动！\033[0m"
		elif [ "$autostart" = "disable_rc" ]; then
			/etc/init.d/clash enable
			echo -e "\033[32m已设置Clash开机启动！\033[0m"
		elif [ "$autostart" = "enable_sys" ]; then
			systemctl disable clash.service > /dev/null 2>&1
			echo -e "\033[33m已禁止Clash开机启动！\033[0m"
		elif [ "$autostart" = "disable_sys" ]; then
			systemctl enable clash.service > /dev/null 2>&1
			echo -e "\033[32m已设置Clash开机启动！\033[0m"
		else
			echo -e "\033[32m当前系统不支持设置开启启动！\033[0m"
		fi
		clashsh

	elif [ "$num" = 5 ]; then
		clashcron
    
	elif [ "$num" = 6 ]; then
		source $clashdir/getdate.sh && clashlink
		
	elif [ "$num" = 7 ]; then
		clashadv

	elif [ "$num" = 8 ]; then
		source $clashdir/getdate.sh && testcommand

	elif [ "$num" = 9 ]; then
		source $clashdir/getdate.sh && update
	
	else
		echoerrornum
		exit;
	fi
}

[ -z "$1" ] && clashsh

case "$1" in
	-h)
	echo -----------------------------------------
	echo "欢迎使用ShellClash"
	echo -----------------------------------------
	echo "	-t 测试模式"
	echo "	-h 帮助列表"
	echo -----------------------------------------
	echo "在线求助：t.me/clashfm"
	echo "官方博客：juewuy.github.io"
	echo "发布页面：github.com/juewuy/ShellClash"
	echo -----------------------------------------
	;;
	-t)
	shtype=sh && [ -n "$(ls -l /bin/sh|grep -o dash)" ] && shtype=bash
	$shtype -x $clashdir/clash.sh
	;;
esac