#!/bin/bash
set -e

# --- 1. 下载 xray-saas 二进制（自动获取最新版）---
LATEST_URL=$(curl -fsSL https://api.github.com/repos/0yb8PRsfhfhU/xray-rs/releases/latest \
  | grep -o 'https://github\.com[^"]*xray-saas-x86_64-unknown-linux-musl')
curl -fL -o /usr/local/bin/xray-saas "$LATEST_URL"
chmod +x /usr/local/bin/xray-saas

# --- 2. 创建配置目录并写入本节点配置 ---
mkdir -p /etc/xray-saas/acme/cgyu

cat > /etc/xray-saas/config.toml << 'EOF'
[Log]
Level = "error" # none | error | warning | info | debug

[ConnectionConfig]
Handshake = 4
ConnIdle = 30
UplinkOnly = 2
DownlinkOnly = 4
BufferSize = 64

[[Nodes]]
PanelType = "SSpanel"

[Nodes.ApiConfig]
ApiHost = "https://01.congyu.moe"
ApiKey = "poshmSovblZ2Mz0C7OAaxbMqiERrjLMy"
NodeID = 6
NodeType = "V2ray"
Timeout = 30
EnableVless = false
VlessFlow = ""
SpeedLimit = 0.0
DeviceLimit = 0
RuleListPath = ""
DisableCustomConfig = false

[Nodes.ControllerConfig]
ListenIP = "0.0.0.0"
SendIP = "0.0.0.0"
UpdatePeriodic = 60
EnableProxyProtocol = false
DisableSniffing = false
DisableUploadTraffic = false
DisableGetRule = false
DNSType = "AsIs"

[Nodes.ControllerConfig.CertConfig]
CertMode = "file"
CertDomain = "us7.murasame.top"
CertFile = "/etc/xray-saas/acme/cgyu/fullchain.pem"
KeyFile = "/etc/xray-saas/acme/cgyu/privkey.pem"
EOF

# --- 3. 下载证书 ---
curl -fL -o /etc/xray-saas/acme/cgyu/fullchain.pem \
  https://o.oo0o.ooo/scripts/acme/cgyu/fullchain.pem
curl -fL -o /etc/xray-saas/acme/cgyu/privkey.pem \
  https://o.oo0o.ooo/scripts/acme/cgyu/privkey.pem

# --- 4. 安装 systemd 服务 ---
cat > /etc/systemd/system/xray-saas.service << 'EOF'
[Unit]
Description=xray-saas
After=network.target

[Service]
WorkingDirectory=/etc/xray-saas
ExecStart=/usr/local/bin/xray-saas /etc/xray-saas/config.toml
Restart=on-failure
RestartSec=5s

[Install]
WantedBy=multi-user.target
EOF

systemctl daemon-reload
systemctl enable xray-saas
systemctl restart xray-saas
systemctl status xray-saas