-
Notifications
You must be signed in to change notification settings - Fork 167
/
Copy pathapp.js
235 lines (208 loc) · 7.44 KB
/
app.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
require('dotenv').config();
const process = require('process');
const username = process.env.WEB_USERNAME || "admin";
const password = process.env.WEB_PASSWORD || "password";
const UUID = process.env.UUID || "de04add9-5c68-8bab-950c-08cd5320df18";
const os = require('os');
const path = require('path');
const express = require("express");
const fs = require('fs');
const { exec } = require('child_process');
const crypto = require('crypto');
const auth = require("basic-auth");
const app = express();
const csrfTokens = new Set();
function generateCSRFToken() {
return crypto.randomBytes(16).toString('hex');
}
function validateCSRFToken(req, res, next) {
const token = req.headers['csrf-token'];
if (csrfTokens.has(token)) {
csrfTokens.delete(token);
next();
} else {
res.status(403).send('无效的CSRF令牌');
}
}
app.use(express.json());
app.use((req, res, next) => {
const user = auth(req);
if (req.path === '/info' || req.path.startsWith(`/${UUID}`)) {
return next();
}
if (user && user.name === username && user.pass === password) {
return next();
}
res.set("WWW-Authenticate", 'Basic realm="Node"');
return res.status(401).send();
});
const USERNAME = os.userInfo().username;
const USERNAME_DOMAIN = USERNAME.toLowerCase().replace(/[^a-z0-9-]/g, '');
const WORKDIR = path.join('/home', USERNAME, 'domains', `${USERNAME_DOMAIN}.serv00.net`, 'public_nodejs');
process.chdir(WORKDIR);
app.get("/info", function (req, res) {
res.type("html").send("<pre>Powered by X-for-Serv00\nAuthor: <a href='https://github.com/k0baya'>K0baya</a>" + "</pre>");
});
app.get(`/${UUID}/sub`, function (req, res) {
let cmdStr = "cat sub";
exec(cmdStr, function (err, stdout, stderr) {
if (err) {
res.type("html").send("<pre>命令行执行错误：\n" + err + "</pre>");
} else {
res.send(stdout);
}
});
});
app.get("/status", function (req, res) {
let cmdStr = "ps aux";
exec(cmdStr, function (err, stdout, stderr) {
if (err) {
res.type("html").send("<pre>命令行执行错误：\n" + err + "</pre>");
} else {
res.type("html").send("<pre>获取系统进程表：\n" + stdout + "</pre>");
}
});
});
app.get("/list", async function (req, res) {
let cmdStr = "cat list";
const fileExists = (path) => {
return new Promise((resolve, reject) => {
fs.access(path, fs.constants.F_OK, (err) => {
resolve(!err);
});
});
};
const waitForFile = async (path, retries, interval) => {
for (let i = 0; i < retries; i++) {
if (await fileExists(path)) {
return true;
}
await new Promise(resolve => setTimeout(resolve, interval));
}
return false;
};
const fileReady = await waitForFile('list', 30, 1000);
if (!fileReady) {
res.type("html").send("<pre>文件未生成</pre>");
return;
}
exec(cmdStr, function (err, stdout, stderr) {
if (err) {
res.type("html").send("<pre>命令行执行错误：\n" + err + "</pre>");
} else {
const fullUrl = `${req.protocol}://${req.get('host')}/${UUID}/sub`;
res.type("html").send("<pre>订阅地址：" + fullUrl + "\n\n节点数据：\n\n" + stdout + "</pre>");
}
});
});
app.get('/control', (req, res) => {
const csrfToken = generateCSRFToken();
csrfTokens.add(csrfToken);
const htmlContent = `
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Control</title>
<style>
button {
margin: 20px;
padding: 10px 20px;
font-size: 16px;
}
</style>
</head>
<body>
<h1>Control Panel</h1>
<button onclick="restart()">Restart</button>
<button onclick="uninstall()">Uninstall</button>
<script>
const csrfToken = '${csrfToken}';
function restart() {
fetch('/restart', {
method: 'POST',
headers: {
'Content-Type': 'application/json',
'CSRF-Token': csrfToken
},
body: JSON.stringify({ action: 'restart' })
})
.then(response => response.text())
.then(message => alert(message))
.catch(error => console.error('Error:', error));
}
function uninstall() {
fetch('/uninstall', {
method: 'POST',
headers: {
'Content-Type': 'application/json',
'CSRF-Token': csrfToken
},
body: JSON.stringify({ action: 'uninstall' })
})
.then(response => response.text())
.then(message => alert(message))
.catch(error => console.error('Error:', error));
}
</script>
</body>
</html>
`;
res.type('html').send(htmlContent);
});
app.post('/restart', validateCSRFToken, (req, res) => {
exec('killall -u $(whoami)', (error, stdout, stderr) => {
if (error) {
console.error(`执行命令错误: ${error}`);
return res.status(500).send('重启失败，请检查服务器日志。');
}
res.send('已经成功重启，请刷新页面。');
});
});
app.post('/uninstall', validateCSRFToken, (req, res) => {
const cleanupCmd = `find . -mindepth 1 -maxdepth 1 ! -name 'public' ! -name 'tmp' -exec rm -rf {} + && killall -u $(whoami)`;
exec(cleanupCmd, { cwd: WORKDIR }, (error, stdout, stderr) => {
if (error) {
console.error(`执行命令错误: ${error}`);
return res.status(500).send('删除失败，请检查服务器日志。');
}
res.send('已成功卸载，请刷新页面。');
});
});
function keep_web_alive() {
exec("pgrep -laf web.js", function (err, stdout, stderr) {
if (stdout.includes("./web.js -c ./config.json")) {
console.log("web 正在运行");
} else {
exec(
"chmod +x web.js && ./web.js -c ./config.json > /dev/null 2>&1 &",
function (err, stdout, stderr) {
if (err) {
console.log("保活-调起web-命令行执行错误:" + err);
} else {
console.log("保活-调起web-命令行执行成功!");
}
}
);
}
});
}
setInterval(keep_web_alive, 10 * 1000);
function keep_argo_alive() {
exec("pgrep -laf cloudflared", function (err, stdout, stderr) {
if (stdout.includes("./cloudflared tunnel")) {
console.log("Argo 正在运行");
} else {
exec("chmod +x argo.sh && bash argo.sh 2>&1 &", function (err, stdout, stderr) {
if (err) {
console.log("保活-调起Argo-命令行执行错误:" + err);
} else {
console.log("保活-调起Argo-命令行执行成功!");
}
});
}
});
}
setInterval(keep_argo_alive, 30 * 1000);
app.listen(3000, () => console.log(`Example app listening on port 3000!`));