aaaamoooo
d9bf21a847
Avoids the v2ray_api listen colliding with L-UI's fixed 10086 on dual-homed nodes. NG_SINGBOX_API_PORT env still overrides. Aligns the stats-query --server default and the doctor script fallback to the same value. Agent version stays 0.6.8.
63 lines
3.2 KiB
Bash
63 lines
3.2 KiB
Bash
#!/usr/bin/env bash
|
||
set -u
|
||
|
||
[[ "${EUID}" -eq 0 ]] || { printf '请使用 root 运行\n' >&2; exit 1; }
|
||
[[ -r /etc/nexusgate/agent.env ]] || { printf '未安装 NexusGate Agent\n' >&2; exit 1; }
|
||
# Local root-owned configuration. Never print the enrollment key.
|
||
source /etc/nexusgate/agent.env
|
||
printf '控制面：%s\n' "${NG_CONTROLLER:-未配置}"
|
||
printf '已验证节点证书：'
|
||
node -e 'const domains=require("/opt/nexusgate-agent/agent.js").installedCertificates();console.log(domains.length?domains.join(", "):"暂无；运行 ng-agent cert")' 2>&1 || true
|
||
printf 'Agent 版本：'
|
||
node -p "require('fs').readFileSync('/opt/nexusgate-agent/agent.js','utf8').match(/const VERSION = '([^']+)'/)[1]" 2>/dev/null || printf '无法读取\n'
|
||
if command -v systemctl >/dev/null && [[ -d /run/systemd/system ]]; then
|
||
for name in nexusgate-agent nexusgate-sing-box; do
|
||
printf '%s：' "$name"
|
||
systemctl is-active "$name" 2>&1 || true
|
||
done
|
||
else
|
||
rc-service nexusgate-agent status || true
|
||
rc-service nexusgate-sing-box status || true
|
||
fi
|
||
printf '\nsing-box 构建与配置：\n'
|
||
if [[ -x /usr/local/bin/nexusgate-sing-box && ! -x /usr/local/bin/nexusgate-sing-box-stats ]]; then
|
||
printf 'sing-box 主程序存在但统计组件缺失；安装不完整，运行 ng-agent engine install 重试。\n'
|
||
elif [[ -x /usr/local/bin/nexusgate-sing-box ]]; then
|
||
/usr/local/bin/nexusgate-sing-box version | head -n 4
|
||
if [[ -f /etc/nexusgate/sing-box/config.json ]]; then
|
||
/usr/local/bin/nexusgate-sing-box check -c /etc/nexusgate/sing-box/config.json 2>&1 | tail -n 12
|
||
printf '入站流量统计（累计）：\n'
|
||
/usr/local/bin/nexusgate-sing-box-stats --server="127.0.0.1:${NG_SINGBOX_API_PORT:-10089}" 2>&1 | head -c 900
|
||
printf '\n'
|
||
else
|
||
printf '已安装，当前没有节点资源\n'
|
||
fi
|
||
else
|
||
printf '未安装；运行 ng-agent engine install\n'
|
||
fi
|
||
printf '控制面连通性：'
|
||
curl --max-time 8 -fsS "${NG_CONTROLLER%/}/healthz" 2>&1 | head -c 350 || true
|
||
printf '\nHysteria 2 UDP 监听：\n'
|
||
node <<'NODE' 2>&1 || true
|
||
const fs = require('node:fs');
|
||
const agent = require('/opt/nexusgate-agent/agent.js');
|
||
const dir = '/etc/nexusgate/agent/resources';
|
||
const resources = fs.readdirSync(dir).filter((name) => name.endsWith('.json'))
|
||
.map((name) => JSON.parse(fs.readFileSync(`${dir}/${name}`, 'utf8')));
|
||
const expected = resources.flatMap((resource) => resource.inbounds || [])
|
||
.filter((inbound) => inbound.type === 'hysteria2').map((inbound) => inbound.listen_port);
|
||
if (!expected.length) console.log('没有 Hysteria 2 入站');
|
||
else {
|
||
try {
|
||
const missing = agent.missingHysteriaListeners(resources);
|
||
console.log(missing.length ? `未监听 UDP: ${missing.join(', ')}` : '所有 Hysteria 2 UDP 端口均由 sing-box 监听');
|
||
} catch (error) { console.log(`监听检查失败: ${error.message}`); }
|
||
}
|
||
NODE
|
||
printf '\n最近 Agent 与 sing-box 日志：\n'
|
||
if command -v journalctl >/dev/null && [[ -d /run/systemd/system ]]; then
|
||
journalctl -u nexusgate-agent -u nexusgate-sing-box -n 45 --no-pager -o short-iso 2>&1 | sed -E 's/(Bearer |NG_AGENT_KEY=)[^[:space:]]+/\1[REDACTED]/g; s/[Pp]rivate[[:space:]]*[Kk]ey:[[:space:]]*[^[:space:]]+/PrivateKey: [REDACTED]/g'
|
||
else
|
||
tail -n 45 /var/log/nexusgate/sing-box-access.log 2>/dev/null || true
|
||
fi
|