mirror of
https://github.com/wcwq98/realm.git
synced 2025-01-22 12:58:14 -05:00
299 lines
6.4 KiB
Go
299 lines
6.4 KiB
Go
package main
|
||
|
||
import (
|
||
"fmt"
|
||
"io/ioutil"
|
||
"log"
|
||
"net/http"
|
||
"os/exec"
|
||
"sync"
|
||
|
||
"github.com/BurntSushi/toml"
|
||
"github.com/gin-contrib/sessions"
|
||
"github.com/gin-contrib/sessions/cookie"
|
||
"github.com/gin-gonic/gin"
|
||
)
|
||
|
||
type ForwardingRule struct {
|
||
Listen string `toml:"listen"`
|
||
Remote string `toml:"remote"`
|
||
}
|
||
|
||
type Config struct {
|
||
Network struct {
|
||
NoTCP bool `toml:"no_tcp"`
|
||
UseUDP bool `toml:"use_udp"`
|
||
} `toml:"network"`
|
||
Endpoints []ForwardingRule `toml:"endpoints"`
|
||
}
|
||
|
||
type PanelConfig struct {
|
||
Auth struct {
|
||
Password string `toml:"password"`
|
||
} `toml:"auth"`
|
||
Server struct {
|
||
Port int `toml:"port"`
|
||
} `toml:"server"`
|
||
HTTPS struct {
|
||
Enabled bool `toml:"enabled"`
|
||
CertFile string `toml:"cert_file"`
|
||
KeyFile string `toml:"key_file"`
|
||
} `toml:"https"`
|
||
}
|
||
|
||
var (
|
||
rules []ForwardingRule
|
||
mu sync.Mutex
|
||
config Config
|
||
panelConfig PanelConfig
|
||
)
|
||
|
||
func LoadConfig() error {
|
||
data, err := ioutil.ReadFile("/root/.realm/config.toml")
|
||
if err != nil {
|
||
return err
|
||
}
|
||
|
||
if _, err := toml.Decode(string(data), &config); err != nil {
|
||
return err
|
||
}
|
||
|
||
rules = config.Endpoints
|
||
return nil
|
||
}
|
||
|
||
func LoadPanelConfig() error {
|
||
data, err := ioutil.ReadFile("./config.toml")
|
||
if err != nil {
|
||
return err
|
||
}
|
||
|
||
if _, err := toml.Decode(string(data), &panelConfig); err != nil {
|
||
return err
|
||
}
|
||
|
||
return nil
|
||
}
|
||
|
||
func SaveRules() error {
|
||
mu.Lock()
|
||
defer mu.Unlock()
|
||
|
||
config.Endpoints = rules
|
||
data, err := toml.Marshal(config)
|
||
if err != nil {
|
||
return err
|
||
}
|
||
|
||
return ioutil.WriteFile("/root/.realm/config.toml", data, 0644)
|
||
}
|
||
|
||
// 认证中间件
|
||
func AuthRequired() gin.HandlerFunc {
|
||
return func(c *gin.Context) {
|
||
session := sessions.Default(c)
|
||
user := session.Get("user")
|
||
if user == nil {
|
||
c.Redirect(http.StatusFound, "/login")
|
||
c.Abort()
|
||
return
|
||
}
|
||
c.Next()
|
||
}
|
||
}
|
||
|
||
func main() {
|
||
if err := LoadConfig(); err != nil {
|
||
log.Fatalf("无法加载 realm 配置: %v", err)
|
||
}
|
||
|
||
if err := LoadPanelConfig(); err != nil {
|
||
log.Fatalf("无法加载面板配置: %v", err)
|
||
}
|
||
|
||
r := gin.Default()
|
||
|
||
// 设置 session
|
||
store := cookie.NewStore([]byte("secret"))
|
||
r.Use(sessions.Sessions("realm_session", store))
|
||
|
||
// 静态文件
|
||
r.Static("/static", "./static")
|
||
|
||
// 登录页面
|
||
r.GET("/login", func(c *gin.Context) {
|
||
session := sessions.Default(c)
|
||
if session.Get("user") != nil {
|
||
c.Redirect(http.StatusFound, "/")
|
||
return
|
||
}
|
||
c.File("./templates/login.html")
|
||
})
|
||
|
||
// 登录处理
|
||
r.POST("/login", func(c *gin.Context) {
|
||
var loginData struct {
|
||
Password string `json:"password"`
|
||
}
|
||
|
||
if err := c.ShouldBindJSON(&loginData); err != nil {
|
||
c.JSON(http.StatusBadRequest, gin.H{"error": "无效的请求"})
|
||
return
|
||
}
|
||
|
||
if loginData.Password == panelConfig.Auth.Password {
|
||
session := sessions.Default(c)
|
||
session.Set("user", true)
|
||
session.Options(sessions.Options{
|
||
MaxAge: 3600 * 24, // 24小时
|
||
})
|
||
if err := session.Save(); err != nil {
|
||
c.JSON(http.StatusInternalServerError, gin.H{"error": "Session保存失败"})
|
||
return
|
||
}
|
||
c.JSON(http.StatusOK, gin.H{"message": "登录成功"})
|
||
} else {
|
||
c.JSON(http.StatusUnauthorized, gin.H{"error": "密码错误"})
|
||
}
|
||
})
|
||
|
||
// 登出
|
||
r.POST("/logout", AuthRequired(), func(c *gin.Context) {
|
||
session := sessions.Default(c)
|
||
session.Clear()
|
||
session.Save()
|
||
c.JSON(http.StatusOK, gin.H{"message": "登出成功"})
|
||
})
|
||
|
||
// 需要认证的路由
|
||
authorized := r.Group("/")
|
||
authorized.Use(AuthRequired())
|
||
{
|
||
// 主页
|
||
authorized.GET("/", func(c *gin.Context) {
|
||
c.File("./templates/index.html")
|
||
})
|
||
|
||
// 获取转发规则
|
||
authorized.GET("/get_rules", func(c *gin.Context) {
|
||
mu.Lock()
|
||
defer mu.Unlock()
|
||
c.JSON(200, rules)
|
||
})
|
||
|
||
// 添加转发规则
|
||
authorized.POST("/add_rule", func(c *gin.Context) {
|
||
var input struct {
|
||
Listen string `json:"listen"`
|
||
Remote string `json:"remote"`
|
||
}
|
||
|
||
if err := c.ShouldBindJSON(&input); err != nil {
|
||
c.JSON(400, gin.H{"error": "Invalid input"})
|
||
return
|
||
}
|
||
|
||
mu.Lock()
|
||
rules = append(rules, ForwardingRule{
|
||
Listen: input.Listen,
|
||
Remote: input.Remote,
|
||
})
|
||
mu.Unlock()
|
||
|
||
if err := SaveRules(); err != nil {
|
||
c.JSON(500, gin.H{"error": "Failed to save rules"})
|
||
return
|
||
}
|
||
|
||
c.JSON(201, input)
|
||
})
|
||
|
||
// 删除转发规则
|
||
authorized.DELETE("/delete_rule", func(c *gin.Context) {
|
||
listen := c.Query("listen")
|
||
|
||
mu.Lock()
|
||
for i, rule := range rules {
|
||
if rule.Listen == listen {
|
||
rules = append(rules[:i], rules[i+1:]...)
|
||
break
|
||
}
|
||
}
|
||
mu.Unlock()
|
||
|
||
if err := SaveRules(); err != nil {
|
||
c.JSON(500, gin.H{"error": "Failed to save rules"})
|
||
return
|
||
}
|
||
|
||
c.Status(200)
|
||
})
|
||
|
||
// 启动服务
|
||
authorized.POST("/start_service", func(c *gin.Context) {
|
||
cmd := exec.Command("systemctl", "start", "realm")
|
||
if err := cmd.Run(); err != nil {
|
||
c.JSON(500, gin.H{"error": "Failed to start service"})
|
||
return
|
||
}
|
||
|
||
c.JSON(200, gin.H{"message": "Service started successfully"})
|
||
})
|
||
|
||
// 停止服务
|
||
authorized.POST("/stop_service", func(c *gin.Context) {
|
||
cmd := exec.Command("systemctl", "stop", "realm")
|
||
if err := cmd.Run(); err != nil {
|
||
c.JSON(500, gin.H{"error": "Failed to stop service"})
|
||
return
|
||
}
|
||
|
||
c.JSON(200, gin.H{"message": "Service stopped successfully"})
|
||
})
|
||
|
||
// 检查服务状态
|
||
authorized.GET("/check_status", func(c *gin.Context) {
|
||
cmd := exec.Command("systemctl", "is-active", "--quiet", "realm")
|
||
err := cmd.Run()
|
||
|
||
var status string
|
||
if err != nil {
|
||
if exitError, ok := err.(*exec.ExitError); ok {
|
||
if exitError.ExitCode() == 3 {
|
||
status = "未启用"
|
||
} else {
|
||
status = "未知状态"
|
||
}
|
||
} else {
|
||
status = "检查失败"
|
||
}
|
||
} else {
|
||
status = "启用"
|
||
}
|
||
|
||
c.JSON(200, gin.H{"status": status})
|
||
})
|
||
}
|
||
|
||
port := panelConfig.Server.Port
|
||
if port == 0 {
|
||
port = 8081 // 默认端口
|
||
}
|
||
|
||
if panelConfig.HTTPS.Enabled {
|
||
if panelConfig.HTTPS.CertFile == "" || panelConfig.HTTPS.KeyFile == "" {
|
||
log.Println("警告：HTTPS 已启用，但证书或密钥文件路径未指定。将使用 HTTP 继续。")
|
||
log.Printf("服务器正在使用 HTTP 运行，端口：%d\n", port)
|
||
r.Run(fmt.Sprintf(":%d", port))
|
||
} else {
|
||
log.Printf("服务器正在使用 HTTPS 运行，端口：%d\n", port)
|
||
r.RunTLS(fmt.Sprintf(":%d", port), panelConfig.HTTPS.CertFile, panelConfig.HTTPS.KeyFile)
|
||
}
|
||
} else {
|
||
log.Println("警告：未启用 HTTPS，将使用 HTTP 继续。")
|
||
log.Printf("服务器正在使用 HTTP 运行，端口：%d\n", port)
|
||
r.Run(fmt.Sprintf(":%d", port))
|
||
}
|
||
}
|
||
|