From d7299d46b36a9e77e7c3584e47d458e12db89833 Mon Sep 17 00:00:00 2001
From: Whispering Wind <151555003+ReturnFI@users.noreply.github.com>
Date: Fri, 9 Aug 2024 21:15:24 +0330
Subject: [PATCH] Create singbox.py

---
 core/scripts/singbox/singbox.py | 111 ++++++++++++++++++++++++++++++++
 1 file changed, 111 insertions(+)
 create mode 100644 core/scripts/singbox/singbox.py

diff --git a/core/scripts/singbox/singbox.py b/core/scripts/singbox/singbox.py
new file mode 100644
index 0000000..111d577
--- /dev/null
+++ b/core/scripts/singbox/singbox.py
@@ -0,0 +1,111 @@
+from aiohttp import web
+import ssl
+import json
+import subprocess
+from urllib.parse import unquote, parse_qs
+import re
+
+async def handle(request):
+    username = request.query.get('username')
+    ip_version = request.query.get('ip')
+    fragment = request.match_info.get('fragment', '')
+
+    if not username:
+        return web.Response(status=400, text="Error: Missing 'username' parameter.")
+    
+    if not ip_version:
+        return web.Response(status=400, text="Error: Missing 'ip' parameter.")
+    
+    if ip_version not in ['4', '6']:
+        return web.Response(status=400, text="Error: Invalid 'ip' parameter. Must be '4' or '6'.")
+
+    try:
+        config = generate_singbox_config(username, ip_version, fragment)
+        config_json = json.dumps(config, indent=4, sort_keys=True)
+        
+        return web.Response(text=config_json, content_type='application/json')
+    except Exception as e:
+        return web.Response(status=500, text="Error: Internal server error.")
+
+def generate_singbox_config(username, ip_version, fragment):
+    # CLI command
+    try:
+        uri = subprocess.check_output([
+            'python3', '/etc/hysteria/core/cli.py', 'show-user-uri', '-u', username, '-ip', ip_version
+        ]).decode().strip()
+    except subprocess.CalledProcessError as e:
+        raise RuntimeError(f"Failed to get URI: {e}")
+    
+    if ip_version == '4':
+        components = extract_uri_components(uri, 'IPv4:')
+    else:
+        components = extract_uri_components(uri, 'IPv6:')
+    
+    config = load_singbox_template()
+    hysteria_tag = f"{username}-Hysteria2"
+    config['outbounds'][2]['tag'] = hysteria_tag
+    config['outbounds'][2]['server'] = components['ip']
+    config['outbounds'][2]['server_port'] = int(components['port'])
+    config['outbounds'][2]['obfs']['password'] = components['obfs_password']
+    config['outbounds'][2]['password'] = f"{username}:{components['password']}"
+    
+    if fragment:
+        config['outbounds'][2]['tls']['server_name'] = fragment
+
+    config['outbounds'][0]['outbounds'] = ["auto", hysteria_tag]
+    config['outbounds'][1]['outbounds'] = [hysteria_tag]
+    
+    return config
+
+def extract_uri_components(uri, prefix):
+    if uri.startswith(prefix):
+        uri = uri[len(prefix):].strip()
+    
+    decoded_uri = unquote(uri)
+    pattern = re.compile(
+        r'^hy2://([^:]+):([^@]+)@(\[?[^\]]+?\]?):(\d+)\?([^#]+)(?:#([^/]+))?$'
+    )
+    match = pattern.match(decoded_uri)
+    
+    if not match:
+        raise ValueError(f"Could not parse URI: {decoded_uri}")
+
+    username = match.group(1)
+    password = match.group(2)
+    ip = match.group(3)
+    port = match.group(4)
+    query_params = match.group(5)
+    fragment = match.group(6)
+    
+    if ip.startswith('[') and ip.endswith(']'):
+        ip = ip[1:-1]
+
+    params = parse_qs(query_params)
+    obfs_password = params.get('obfs-password', [''])[0]
+    
+    return {
+        'username': username,
+        'password': password,
+        'ip': ip,
+        'port': port,
+        'obfs_password': obfs_password,
+    }
+
+def load_singbox_template():
+    try:
+        with open('/etc/hysteria/core/scripts/singbox/singbox.json', 'r') as f:
+            return json.load(f)
+    except IOError as e:
+        raise RuntimeError(f"Failed to load template: {e}")
+
+if __name__ == '__main__':
+    app = web.Application()
+    app.add_routes([web.get('/sub/singbox/', handle)])
+
+    # SSL context
+    ssl_context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
+    ssl_context.load_cert_chain(certfile="/etc/letsencrypt/live/example.com/fullchain.pem", keyfile="/etc/letsencrypt/live/example.com/privkey.pem")
+    ssl_context.minimum_version = ssl.TLSVersion.TLSv1_2
+    ssl_context.set_ciphers('AES256+EECDH:AES256+EDH')
+    
+    web.run_app(app, port=3324, ssl_context=ssl_context)