From bbb35d21385fd58571a3bbbb856a03073ca622ea Mon Sep 17 00:00:00 2001
From: jonny <475634114@qq.com>
Date: Tue, 30 Mar 2021 15:47:40 +0800
Subject: [PATCH 1/5] Create docker_entrypoint.sh
---
docker/docker_entrypoint.sh | 41 +++++++++++++++++++++++++++++++++++++
1 file changed, 41 insertions(+)
create mode 100644 docker/docker_entrypoint.sh
diff --git a/docker/docker_entrypoint.sh b/docker/docker_entrypoint.sh
new file mode 100644
index 0000000..1ddfe54
--- /dev/null
+++ b/docker/docker_entrypoint.sh
@@ -0,0 +1,41 @@
+#!/bin/sh
+USER="admin"
+MM=$(pwgen -1s)
+CREATE_USER=1
+CONFIG_FILE='/app/conf/server.toml'
+
+if [ $CREATE_USER -eq 1 ]; then
+ if [ ! -e $CREATE_USER ]; then
+ MM=$(pwgen -1s)
+ touch $CREATE_USER
+ bash /app/generate-certs.sh
+ cd /app/conf/ && cp *.crt /usr/local/share/ca-certificates/
+ update-ca-certificates --fresh
+ userpass=$(/app/anylink -passwd "${MM}"| cut -d : -f2)
+ echo "${userpass}"
+ jwttoken=$(/app/anylink -secret | cut -d : -f2)
+ echo "-- First container startup --user:${USER} pwd:${MM}"
+ sed -i "s/admin/${USER}/g" /app/server-example.toml
+ sed -i "s/123456/${MM}/g" /app/server-example.toml
+ sed -i "s#usertoken#${userpass}#g" /app/server-example.toml
+ sed -i "s/jwttoken/${jwttoken}/g" /app/server-example.toml
+ else
+ echo "-- Not first container startup --"
+ fi
+
+else
+ echo "user switch not create"
+
+fi
+
+if [ ! -f $CONFIG_FILE ]; then
+echo "#####Generating configuration file#####"
+cp /app/server-example.toml /app/conf/server.toml
+else
+ echo "#####Configuration file already exists#####"
+fi
+
+rtaddr=$(grep "cidr" /app/conf/server.toml |awk -F \" '{print $2}')
+sysctl -w net.ipv4.ip_forward=1
+iptables -t nat -A POSTROUTING -s "${rtaddr}" -o eth0+ -j MASQUERADE
+/app/anylink -conf="/app/conf/server.toml"
From 656eca93a7a86bc23e7ba7ed79af21d50af6ebc3 Mon Sep 17 00:00:00 2001
From: jonny <475634114@qq.com>
Date: Tue, 30 Mar 2021 15:49:09 +0800
Subject: [PATCH 2/5] Create generate-certs.sh
---
docker/generate-certs.sh | 39 +++++++++++++++++++++++++++++++++++++++
1 file changed, 39 insertions(+)
create mode 100644 docker/generate-certs.sh
diff --git a/docker/generate-certs.sh b/docker/generate-certs.sh
new file mode 100644
index 0000000..1ef944e
--- /dev/null
+++ b/docker/generate-certs.sh
@@ -0,0 +1,39 @@
+#!/bin/sh
+
+mkdir -p ssl
+
+OUTPUT_FILENAME="example.com"
+
+printf "[req]
+prompt = no
+default_bits = 4096
+default_md = sha256
+encrypt_key = no
+string_mask = utf8only
+
+distinguished_name = cert_distinguished_name
+req_extensions = req_x509v3_extensions
+x509_extensions = req_x509v3_extensions
+
+[ cert_distinguished_name ]
+C = CN
+ST = BJ
+L = BJ
+O = example.com
+OU = example.com
+CN = example.com
+
+[req_x509v3_extensions]
+basicConstraints = critical,CA:true
+subjectKeyIdentifier = hash
+keyUsage = critical,digitalSignature,keyCertSign,cRLSign #,keyEncipherment
+extendedKeyUsage = critical,serverAuth #, clientAuth
+subjectAltName = @alt_names
+
+[alt_names]
+DNS.1 = example.com
+DNS.2 = *.example.com
+
+">ssl/${OUTPUT_FILENAME}.conf
+
+openssl req -x509 -newkey rsa:2048 -keyout /app/conf/$OUTPUT_FILENAME.key -out /app/conf/$OUTPUT_FILENAME.crt -days 3600 -nodes -config ssl/${OUTPUT_FILENAME}.conf
From ac412ea6c76d52b4ead93fe5b5036eed83e4bc5f Mon Sep 17 00:00:00 2001
From: jonny <475634114@qq.com>
Date: Tue, 30 Mar 2021 15:50:24 +0800
Subject: [PATCH 3/5] Create server-example.toml
---
docker/server-example.toml | 61 ++++++++++++++++++++++++++++++++++++++
1 file changed, 61 insertions(+)
create mode 100644 docker/server-example.toml
diff --git a/docker/server-example.toml b/docker/server-example.toml
new file mode 100644
index 0000000..6b53f4b
--- /dev/null
+++ b/docker/server-example.toml
@@ -0,0 +1,61 @@
+#服务配置信息
+
+#其他配置文件,可以使用绝对路径
+#或者相对于server.toml的路径
+
+#数据文件
+db_file = "./data.db"
+#证书文件
+cert_file = "./example.com.crt"
+cert_key = "./example.com.key"
+ui_path = "../ui"
+files_path = "../files"
+#日志目录,为空写入标准输出
+#log_path = "../log"
+log_path = ""
+log_level = "info"
+
+#系统名称
+issuer = "XX公司VPN"
+#后台管理用户
+admin_user = "admin"
+#pass 123456
+admin_pass = "usertoken"
+jwt_secret = "jwttoken"
+
+
+#vpn服务对外地址,影响开通邮件二维码
+link_addr = "test.example.com"
+
+#前台服务监听地址
+server_addr = ":443"
+#后台服务监听地址
+admin_addr = ":8800"
+#开启tcp proxy protocol协议
+proxy_protocol = false
+
+link_mode = "tun"
+
+#客户端分配的ip地址池
+ipv4_cidr = "192.168.10.0/24"
+ipv4_gateway = "192.168.10.1"
+ipv4_pool = ["192.168.10.100", "192.168.10.200"]
+
+#最大客户端数量
+max_client = 100
+#单个用户同时在线数量
+max_user_client = 3
+#IP租期(秒)
+ip_lease = 1209600
+
+#默认选择的组
+default_group = "one"
+
+#客户端失效检测时间(秒) dpd > keepalive
+cstp_keepalive = 20
+cstp_dpd = 30
+mobile_keepalive = 50
+mobile_dpd = 60
+#session过期时间，用于断线重连，0永不过期
+session_timeout = 3600
+auth_timeout = 0
From fdca29790042cc3782c54a5ba0cb1f6631d3da98 Mon Sep 17 00:00:00 2001
From: jonny <475634114@qq.com>
Date: Tue, 30 Mar 2021 15:53:13 +0800
Subject: [PATCH 4/5] Create Dockerfile
---
Dockerfile | 26 ++++++++++++++++++++++++++
1 file changed, 26 insertions(+)
create mode 100644 Dockerfile
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..44f0d01
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,26 @@
+FROM golang:alpine as builder
+ENV GOPROXY=https://goproxy.io \
+ GO111MODULE=on \
+ GOOS=linux
+WORKDIR /root/
+RUN apk add --no-cache --update bash git g++ nodejs npm \
+ && git clone https://github.com/bjdgyc/anylink.git \
+ && cd anylink/server \
+ && go build -o anylink -ldflags "-X main.COMMIT_ID=$(git rev-parse HEAD)" \
+ && cd ../web \
+ && npm install \
+ && npx browserslist@latest --update-db \
+ && npm run build
+
+
+FROM golang:alpine
+LABEL maintainer="www.mrdoc.fun"
+COPY --from=builder /root/anylink/server /app/
+COPY --from=builder /root/anylink/web/ui /app/ui/
+COPY docker/ /app/
+WORKDIR /app
+RUN apk add --no-cache pwgen bash iptables openssl ca-certificates \
+ && rm -f /app/conf/server.toml \
+ && chmod +x docker_entrypoint.sh
+
+ENTRYPOINT ["./docker_entrypoint.sh"]
From 5e5395dabe63e3b4d552fdd616ff3ae777917dff Mon Sep 17 00:00:00 2001
From: jonny <475634114@qq.com>
Date: Tue, 30 Mar 2021 15:56:43 +0800
Subject: [PATCH 5/5] Update Dockerfile
---
Dockerfile | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/Dockerfile b/Dockerfile
index 44f0d01..efbf806 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -17,7 +17,7 @@ FROM golang:alpine
LABEL maintainer="www.mrdoc.fun"
COPY --from=builder /root/anylink/server /app/
COPY --from=builder /root/anylink/web/ui /app/ui/
-COPY docker/ /app/
+COPY --from=builder /root/anylink/docker /app/
WORKDIR /app
RUN apk add --no-cache pwgen bash iptables openssl ca-certificates \
&& rm -f /app/conf/server.toml \