sing-REALITY-box.sh

#!/bin/bash

# Function to print characters with delay
print_with_delay() {
    text=$1
    delay=$2
    for ((i = 0; i < ${#text}; i++)); do
        echo -n "${text:$i:1}"
        sleep $delay
    done
}

# Introduction animation
echo ""
echo ""
print_with_delay "s" 0.1
print_with_delay "i" 0.1
print_with_delay "n" 0.1
print_with_delay "g" 0.1
print_with_delay "-" 0.1
print_with_delay "R" 0.1
print_with_delay "E" 0.1
print_with_delay "A" 0.1
print_with_delay "L" 0.1
print_with_delay "I" 0.1
print_with_delay "T" 0.1
print_with_delay "Y" 0.1
print_with_delay "-" 0.1
print_with_delay "b" 0.1
print_with_delay "o" 0.1
print_with_delay "x" 0.1
print_with_delay " " 0.1
print_with_delay "b" 0.1
print_with_delay "y" 0.1
print_with_delay " " 0.1
print_with_delay "D" 0.1
print_with_delay "E" 0.1
print_with_delay "A" 0.1
print_with_delay "T" 0.1
print_with_delay "H" 0.1
print_with_delay "L" 0.1
print_with_delay "I" 0.1
print_with_delay "N" 0.1
print_with_delay "E" 0.1
print_with_delay " " 0.1
print_with_delay "|" 0.1
print_with_delay " " 0.1
print_with_delay "n" 0.1
print_with_delay "a" 0.1
print_with_delay "m" 0.1
print_with_delay "e" 0.1
print_with_delay "l" 0.1
print_with_delay "e" 0.1
print_with_delay "s" 0.1
print_with_delay " " 0.1
print_with_delay "g" 0.1
print_with_delay "h" 0.1
print_with_delay "o" 0.1
print_with_delay "u" 0.1
print_with_delay "l" 0.1
print_with_delay ""
echo ""
echo ""


# Check if jq is installed, and install it if not
if ! command -v jq &> /dev/null; then
    echo "jq is not installed. Installing..."
    if [ -n "$(command -v apt)" ]; then
        apt update
        apt install -y jq
    elif [ -n "$(command -v yum)" ]; then
        yum install -y epel-release
        yum install -y jq
    elif [ -n "$(command -v dnf)" ]; then
        dnf install -y jq
    else
        echo "Cannot install jq. Please install jq manually and rerun the script."
        exit 1
    fi
fi

# Check if reality.json, sing-box, and sing-box.service already exist
if [ -f "/root/reality.json" ] && [ -f "/root/sing-box" ] && [ -f "/root/public.key.b64" ] && [ -f "/etc/systemd/system/sing-box.service" ]; then

    echo "Reality files already exist."
    echo ""
    echo "Please choose an option:"
    echo ""
    echo "1. Reinstall"
    echo "2. Modify"
    echo "3. Show Current Link"
    echo "4. Uninstall"
    echo ""
    read -p "Enter your choice (1-4): " choice

    case $choice in
        1)
	            	echo "Reinstalling..."
	            	# Uninstall previous installation
	            	systemctl stop sing-box
	            	systemctl disable sing-box
	           	rm /etc/systemd/system/sing-box.service
	            	rm /root/reality.json
	            	rm /root/sing-box
	
	            	# Proceed with installation
	            	;;
        2)
            		echo "Modifying..."
			# Get current listen port
			current_listen_port=$(jq -r '.inbounds[0].listen_port' /root/reality.json)

			# Ask for listen port
			read -p "Enter desired listen port (Current port is $current_listen_port): " listen_port
			listen_port=${listen_port:-$current_listen_port}

			# Get current server name
			current_server_name=$(jq -r '.inbounds[0].tls.server_name' /root/reality.json)

			# Ask for server name (sni)
			read -p "Enter server name/SNI (Current value is $current_server_name): " server_name
			server_name=${server_name:-$current_server_name}

			# Modify reality.json with new settings
			jq --arg listen_port "$listen_port" --arg server_name "$server_name" '.inbounds[0].listen_port = ($listen_port | tonumber) | .inbounds[0].tls.server_name = $server_name | .inbounds[0].tls.reality.handshake.server = $server_name' /root/reality.json > /root/reality_modified.json
			mv /root/reality_modified.json /root/reality.json

			# Restart sing-box service
			systemctl restart sing-box
			echo ""
			echo ""
			echo "New Link:"
			echo ""
			echo ""
			# Get current listen port
			current_listen_port=$(jq -r '.inbounds[0].listen_port' /root/reality.json)

			# Get current server name
			current_server_name=$(jq -r '.inbounds[0].tls.server_name' /root/reality.json)

			# Get the UUID
			uuid=$(jq -r '.inbounds[0].users[0].uuid' /root/reality.json)

			# Get the public key from the file, decoding it from base64
			public_key=$(base64 --decode /root/public.key.b64)
			
			# Get the short ID
			short_id=$(jq -r '.inbounds[0].tls.reality.short_id[0]' /root/reality.json)
			
			# Retrieve the server IP address
			server_ip=$(curl -s https://api.ipify.org)
			
			# Generate the link
			server_link="vless://$uuid@$server_ip:$current_listen_port?encryption=none&flow=xtls-rprx-vision&security=reality&sni=$current_server_name&fp=chrome&pbk=$public_key&sid=$short_id&type=tcp&headerType=none#SING-BOX-TCP"
			
			echo "$server_link"
			echo ""
			echo ""
			exit 0
            		;;
	3)
			echo "Showing current link..."
			
			# Get current listen port
			current_listen_port=$(jq -r '.inbounds[0].listen_port' /root/reality.json)

			# Get current server name
			current_server_name=$(jq -r '.inbounds[0].tls.server_name' /root/reality.json)

			# Get the UUID
			uuid=$(jq -r '.inbounds[0].users[0].uuid' /root/reality.json)

			# Get the public key from the file, decoding it from base64
			public_key=$(base64 --decode /root/public.key.b64)
			
			# Get the short ID
			short_id=$(jq -r '.inbounds[0].tls.reality.short_id[0]' /root/reality.json)
			
			# Retrieve the server IP address
			server_ip=$(curl -s https://api.ipify.org)
			
			# Generate the link
			server_link="vless://$uuid@$server_ip:$current_listen_port?encryption=none&flow=xtls-rprx-vision&security=reality&sni=$current_server_name&fp=chrome&pbk=$public_key&sid=$short_id&type=tcp&headerType=none#SING-BOX-TCP"
			echo ""
			echo ""
			echo "$server_link"
			echo ""
			echo ""
			exit 0
			;;	
        4)
	            	echo "Uninstalling..."
	            	# Stop and disable sing-box service
	            	systemctl stop sing-box
	            	systemctl disable sing-box
	
	            	# Remove files
	            	rm /etc/systemd/system/sing-box.service
	            	rm /root/reality.json
	            	rm /root/sing-box
			rm /root/public.key.b64
		    	echo "DONE!"
	            	exit 0
	            	;;
	        	*)
	            	echo "Invalid choice. Exiting."
	            	exit 1
	            	;;
	    esac
	fi

# Fetch the latest (including pre-releases) release version number from GitHub API
latest_version=$(curl -s "https://api.github.com/repos/SagerNet/sing-box/releases" | grep -P -m1 -o "(v[0-9]{1,}\.[0-9]{1,}\.[0-9]{1,}(-beta.[0-9]{1,})?)" | tr -d 'v')
echo "Latest version: $latest_version"

# Detect server architecture
arch=$(uname -m)
echo "Architecture: $arch"

# Map architecture names
case ${arch} in
    x86_64)
        arch="amd64"
        ;;
    aarch64)
        arch="arm64"
        ;;
    armv7l)
        arch="armv7"
        ;;
esac


# Prepare package names
package_name="sing-box-${latest_version}-linux-${arch}"

# Prepare download URL
url="https://github.com/SagerNet/sing-box/releases/download/v${latest_version}/${package_name}.tar.gz"

# Download the latest release package (.tar.gz) from GitHub
curl -sLo "/root/${package_name}.tar.gz" "$url"


# Extract the package and move the binary to /root
tar -xzf "/root/${package_name}.tar.gz" -C /root
mv "/root/${package_name}/sing-box" /root/

# Cleanup the package
rm -r "/root/${package_name}.tar.gz" "/root/${package_name}"

# Set the permissions
chown root:root /root/sing-box
chmod +x /root/sing-box


# Generate key pair
echo "Generating key pair..."
key_pair=$(/root/sing-box generate reality-keypair)
echo "Key pair generation complete."
echo

# Extract private key and public key
private_key=$(echo "$key_pair" | awk '/PrivateKey/ {print $2}' | tr -d '"')
public_key=$(echo "$key_pair" | awk '/PublicKey/ {print $2}' | tr -d '"')

# Save the public key in a file using base64 encoding
echo "$public_key" | base64 > /root/public.key.b64

# Generate necessary values
uuid=$(/root/sing-box generate uuid)
short_id=$(/root/sing-box generate rand --hex 8)

# Ask for listen port
read -p "Enter desired listen port (default: 443): " listen_port
listen_port=${listen_port:-443}
echo ""
# Ask for server name (sni)
read -p "Enter server name/SNI (default: telewebion.com): " server_name
server_name=${server_name:-telewebion.com}

# Retrieve the server IP address
server_ip=$(curl -s https://api.ipify.org)

# Create reality.json using jq
jq -n --arg listen_port "$listen_port" --arg server_name "$server_name" --arg private_key "$private_key" --arg short_id "$short_id" --arg uuid "$uuid" --arg server_ip "$server_ip" '{
  "log": {
    "level": "info",
    "timestamp": true
  },
  "inbounds": [
    {
      "type": "vless",
      "tag": "vless-in",
      "listen": "::",
      "listen_port": ($listen_port | tonumber),
      "sniff": true,
      "sniff_override_destination": true,
      "domain_strategy": "ipv4_only",
      "users": [
        {
          "uuid": $uuid,
          "flow": "xtls-rprx-vision"
        }
      ],
      "tls": {
        "enabled": true,
        "server_name": $server_name,
          "reality": {
          "enabled": true,
          "handshake": {
            "server": $server_name,
            "server_port": 443
          },
          "private_key": $private_key,
          "short_id": [$short_id]
        }
      }
    }
  ],
  "outbounds": [
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "block",
      "tag": "block"
    }
  ]
}' > /root/reality.json

# Create sing-box.service
cat > /etc/systemd/system/sing-box.service <<EOF
[Unit]
After=network.target nss-lookup.target

[Service]
User=root
WorkingDirectory=/root
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
ExecStart=/root/sing-box run -c /root/reality.json
ExecReload=/bin/kill -HUP \$MAINPID
Restart=on-failure
RestartSec=10
LimitNOFILE=infinity

[Install]
WantedBy=multi-user.target
EOF

# Check configuration and start the service
if /root/sing-box check -c /root/reality.json; then
    echo "Configuration checked successfully. Starting sing-box service..."
    systemctl daemon-reload
    systemctl enable sing-box
    systemctl start sing-box
    systemctl restart sing-box

# Generate the link

    server_link="vless://$uuid@$server_ip:$listen_port?encryption=none&flow=xtls-rprx-vision&security=reality&sni=$server_name&fp=chrome&pbk=$public_key&sid=$short_id&type=tcp&headerType=none#SING-BOX-TCP"

    # Print the server details
    echo
    echo "Server IP: $server_ip"
    echo "Listen Port: $listen_port"
    echo "Server Name: $server_name"
    echo "Public Key: $public_key"
    echo "Short ID: $short_id"
    echo "UUID: $uuid"
    echo ""
    echo ""
    echo "Here is the link for v2rayN and v2rayNG :"
    echo ""
    echo ""
    echo "$server_link"
    echo ""
    echo ""
else
    echo "Error in configuration. Aborting."
fi