1
#!/bin/bash
2
# 出现错误时自动退出
3
set -e
4
echo -e "\033[31m需要jq依赖\033[0m"
5
echo -e "\033[31mapt install jq\033[0m"
6
# 仓库源信息
7
REPO="MetaCubeX/mihomo"
8
PLATFORM_TAG="linux-amd64-v2"
9
RESULT="mihomo-core"
10
# 安装路径
11
mkdir -p /opt/mihomo
12
WORK_DIR="/opt/mihomo"
13
echo "Created working directory at $WORK_DIR"
14
cd $WORK_DIR || { echo "can not cd to $WORK_DIR"; exit 1; }
15
echo "Getting release version from $REPO"
16
echo "正在拉取最新版本信息..."
17
VERSION=$(curl -s https://api.github.com/repos/$REPO/releases/latest | jq -r .tag_name)
18
if [ -z "$VERSION" ] || [ "$VERSION" == "null" ]; then
19
    echo "Could not fetch the latest version."
20
    echo "无法获取版本信息,请检查网络连接..."
21
    exit 1
22
fi
23
echo "最新版本: $VERSION"
24
echo "The latest version is $VERSION"
25
if $WORK_DIR/mihomo-core -v | grep -q "$VERSION"; then
26
    echo "已存在安装最新版本: $VERSION"
27
    echo "mihomo is already at the latest version: $VERSION"
28
    exit 0
29
fi
30
# 构造结果示例: mihomo-linux-amd64-v3-v1.19.18.gz
31
TARGET_FILE="mihomo-${PLATFORM_TAG}-${VERSION}.gz"
32
echo "待下载目标文件名: $TARGET_FILE"
33

34
# API 返回的 assets 中查找该文件名的下载地址
35
DOWNLOAD_URL=$(curl -s https://api.github.com/repos/$REPO/releases/latest | \
36
               jq -r ".assets[] | select(.name == \"$TARGET_FILE\") | .browser_download_url")
37

38
# 检查是否找到了链接
39
if [ -z "$DOWNLOAD_URL" ] || [ "$DOWNLOAD_URL" == "null" ]; then
40
    echo "错误：在 Release 附件中未找到文件 $TARGET_FILE"
41
    exit 1
42
fi
43
echo "Downloading..."
44
echo "正在下载: $DOWNLOAD_URL"
45

46
# 4. 执行下载
47
curl -L -o "$TARGET_FILE" "$DOWNLOAD_URL"
48
gunzip -f "$TARGET_FILE"
49
mv mihomo-linux-* $RESULT
50
chmod +x $RESULT
51
if [ $? -eq 0 ]; then
52
    echo "OK"
53
else
54
    echo "failed to download..."
55
    exit 1
56
fi
57

58
# Create systemd service unit
59
echo "创建systemd服务单元..."
60
SERVICE_NAME="mihomo"
61
NAME="mihomo.service"
62
SERVICE_FILE="$WORK_DIR/${SERVICE_NAME}.service"
63
tee "$SERVICE_FILE" > /dev/null <<EOF
64
[Unit]
65
Description=mihomo server.
66
After=network.target NetworkManager.service systemd-networkd.service iwd.service
67

68
[Service]
69
Type=simple
70
LimitNPROC=500
71
LimitNOFILE=1000000
72
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW CAP_NET_BIND_SERVICE CAP_SYS_TIME CAP_SYS_PTRACE CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE
73
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW CAP_NET_BIND_SERVICE CAP_SYS_TIME CAP_SYS_PTRACE CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE
74
Restart=always
75
ExecStartPre=/usr/bin/sleep 1s
76
ExecStart=$WORK_DIR/mihomo-core -d $WORK_DIR
77
ExecReload=/bin/kill -HUP $MAINPID
78

79
[Install]
80
WantedBy=multi-user.target
81
EOF
82
# set service
83
cp $SERVICE_FILE /etc/systemd/system/
84
systemctl daemon-reload
85
sleep 1
86
systemctl enable "$NAME"
87
systemctl restart "$NAME"
88
echo "OK"
89
sleep 2
90
systemctl status "$NAME"

1
listeners:
2
  # VLess-Enc+VISION+TLS+WS
3
  - name: "vless-in"
4
    type: vless
5
    port: 8443
6
    listen: "0.0.0.0"
7
    users:
8
      - username: 1
9
        uuid: "" #运行xray uuid生成
10
        flow: "xtls-rprx-vision"
11
    ws-path: "/p" # 传输层ws-path
12
    decryption: "" #运行xray vless enc生成
13
    certificate: "./cert.crt" #证书
14
    private-key: "./cert.key" #私钥

1
  - name: "VLess-Enc+VISION+TLS+WS"
2
    type: vless
3
    server: "ip" #优选IP
4
    port: 8443
5
    udp: true
6
    uuid: "uuid"
7
    flow: "xtls-rprx-vision" #若开enc则填，不开则留空
8
    tls: true
9
    alpn:
10
      - http/1.1
11
    skip-cert-verify: false
12
    servername: "" #sni 域名
13
    encryption: "" #运行xray vlessenc生成
14
    network: "ws"
15
    ws-opts:
16
      path: "/" #path
17
      headers:
18
        Host: "domain" #必填，同sni
19
    smux:
20
      enabled: true # 启用多路复用
21
      protocol: smux
22
      max-connections: 4
23
      min-streams: 4
24
      max-streams: 0

1
# 示例写法
2
104.18.41.190/24

1
----电信----
2
162.159.39.13
3
104.18.40.152
4
104.18.41.190
5
162.159.44.27
6
104.18.41.190
7
172.64.229.173
8
172.64.229.195
9

10
----移动----
11
172.64.146.66
12
172.64.153.209
13
104.25.243.2
14
172.64.153.47
15
104.25.254.199