#!/bin/bash
#copyright by hiboy
source /etc/storage/script/init.sh
softether_enable=`nvram get softether_enable`
[ -z $softether_enable ] && softether_enable=0 && nvram set softether_enable=0
softether_path=`nvram get softether_path`
[ -z $softether_path ] && softether_path="/opt/softether/vpnserver" && nvram set softether_path=$softether_path
softether_renum=`nvram get softether_renum`
softether_renum=${softether_renum:-"0"}
cmd_log_enable=`nvram get cmd_log_enable`
cmd_name="softether"
cmd_log=""
if [ "$cmd_log_enable" = "1" ] || [ "$softether_renum" -gt "0" ] ; then
	cmd_log="$cmd_log2"
fi
#if [ "$softether_enable" != "0" ] ; then
#nvramshow=`nvram showall | grep '=' | grep softether | awk '{print gensub(/'"'"'/,"'"'"'\"'"'"'\"'"'"'","g",$0);}'| awk '{print gensub(/=/,"='\''",1,$0)"'\'';";}'` && eval $nvramshow

#fi

if [ ! -z "$(echo $scriptfilepath | grep -v "/tmp/script/" | grep softether)" ]  && [ ! -s /tmp/script/_softether ]; then
	mkdir -p /tmp/script
	{ echo '#!/bin/bash' ; echo $scriptfilepath '"$@"' '&' ; } > /tmp/script/_softether
	chmod 777 /tmp/script/_softether
fi

softether_restart () {

relock="/var/lock/softether_restart.lock"
if [ "$1" = "o" ] ; then
	nvram set softether_renum="0"
	[ -f $relock ] && rm -f $relock
	return 0
fi
if [ "$1" = "x" ] ; then
	if [ -f $relock ] ; then
		logger -t "【softether】" "多次尝试启动失败，等待【"`cat $relock`"分钟】后自动尝试重新启动"
		exit 0
	fi
	softether_renum=${softether_renum:-"0"}
	softether_renum=`expr $softether_renum + 1`
	nvram set softether_renum="$softether_renum"
	if [ "$softether_renum" -gt "3" ] ; then
		I=19
		echo $I > $relock
		logger -t "【softether】" "多次尝试启动失败，等待【"`cat $relock`"分钟】后自动尝试重新启动"
		while [ $I -gt 0 ]; do
			I=$(($I - 1))
			echo $I > $relock
			sleep 60
			[ "$(nvram get softether_renum)" = "0" ] && exit 0
			[ $I -lt 0 ] && break
		done
		nvram set softether_renum="1"
	fi
	[ -f $relock ] && rm -f $relock
fi
nvram set softether_status=0
eval "$scriptfilepath &"
exit 0
}

softether_get_status () {

SVC_PATH="$softether_path"
A_restart=`nvram get softether_status`
B_restart="$softether_enable$softether_path$(cat /etc/storage/softether_script.sh | grep -v '^#' | grep -v '^$')"
B_restart=`echo -n "$B_restart" | md5sum | sed s/[[:space:]]//g | sed s/-//g`
cut_B_re
if [ "$A_restart" != "$B_restart" ] ; then
	nvram set softether_status=$B_restart
	needed_restart=1
else
	needed_restart=0
fi
}

softether_check () {

softether_get_status
if [ "$softether_enable" != "1" ] && [ "$needed_restart" = "1" ] ; then
	[ ! -z "$(ps -w | grep "$softether_path" | grep -v grep )" ] && logger -t "【softether】" "停止 softether" && softether_close
	{ kill_ps "$scriptname" exit0; exit 0; }
fi
if [ "$softether_enable" = "1" ] ; then
	if [ "$needed_restart" = "1" ] ; then
		softether_close
		softether_start
	else
		[ -z "$(ps -w | grep "$softether_path" | grep -v grep )" ] && softether_restart
		softether_port_dpt
	fi
fi
}

softether_keep () {
logger -t "【softether】" "守护进程启动"
if [ -s /tmp/script/_opt_script_check ]; then
sed -Ei '/【softether】|^$/d' /tmp/script/_opt_script_check
cat >> "/tmp/script/_opt_script_check" <<-OSC
	NUM=\`grep "$softether_path" /tmp/ps | grep -v grep |wc -l\` # 【softether】
	if [ "\$NUM" -lt "1" ] || [ ! -s "$softether_path" ] ; then # 【softether】
		logger -t "【softether】" "重新启动\$NUM" # 【softether】
		nvram set softether_status=00 && eval "$scriptfilepath &" && sed -Ei '/【softether】|^$/d' /tmp/script/_opt_script_check # 【softether】
	fi # 【softether】
OSC
return
fi

while true; do
	NUM=`ps -w | grep "$softether_path" | grep -v grep |wc -l`
	if [ "$NUM" -lt "1" ] || [ ! -s "$softether_path" ] ; then
		logger -t "【softether】" "重新启动$NUM"
		softether_restart
	fi
sleep 225
done
}

softether_close () {

kill_ps "$scriptname keep"
sed -Ei '/【softether】|^$/d' /tmp/script/_opt_script_check
iptables -t filter -D INPUT -p udp --destination-port 500 -j ACCEPT
iptables -t filter -D INPUT -p udp --destination-port 4500 -j ACCEPT
iptables -t filter -D INPUT -p udp --destination-port 1701 -j ACCEPT
[ ! -z "$softether_path" ] && $softether_path stop
[ ! -z "$softether_path" ] && kill_ps "$softether_path"
killall vpnserver softether_script.sh
killall -9 vpnserver softether_script.sh
rm -f /etc/storage/dnsmasq/dnsmasq.d/softether.conf
restart_on_dhcpd
kill_ps "/tmp/script/_softether"
kill_ps "_softether.sh"
kill_ps "$scriptname"
}

softether_start () {
check_webui_yes
SVC_PATH="$softether_path"
if [ ! -s "$SVC_PATH" ] ; then
	SVC_PATH="/opt/softether/vpnserver"
fi
[[ "$($SVC_PATH -h 2>&1 | wc -l)" -lt 2 ]] && rm -rf $SVC_PATH
if [ ! -s "$SVC_PATH" ] ; then
	logger -t "【softether】" "找不到 $SVC_PATH，安装 opt 程序"
	/etc/storage/script/Sh01_mountopt.sh start
fi
mkdir -p /opt/softether
for h_i in $(seq 1 2) ; do
[[ "$($SVC_PATH -h 2>&1 | wc -l)" -lt 2 ]] && rm -rf $SVC_PATH
wgetcurl_file "$SVC_PATH" "$hiboyfile/vpnserver" "$hiboyfile2/vpnserver"
[[ "$("$(dirname $SVC_PATH)"/vpncmd -h 2>&1 | wc -l)" -lt 2 ]] && rm -rf "$(dirname $SVC_PATH)"/vpncmd
wgetcurl_file "$(dirname $SVC_PATH)"/vpncmd "$hiboyfile/vpncmd" "$hiboyfile2/vpncmd"
done
if [ ! -s "$(dirname $SVC_PATH)"/hamcore.se2 ] ; then
wgetcurl_checkmd5 "$(dirname $SVC_PATH)"/hamcore.se2 "$hiboyfile/hamcore.se2" "$hiboyfile2/hamcore.se2" N
fi
chmod 777 "$SVC_PATH"
if [ ! -s "$SVC_PATH" ] ; then
	logger -t "【softether】" "找不到 $SVC_PATH ，需要手动安装 $SVC_PATH"
	logger -t "【softether】" "启动失败, 10 秒后自动尝试重新启动" && sleep 10 && softether_restart x
fi
softether_path="$SVC_PATH"
logger -t "【softether】" "运行 softether_script"
$softether_path stop
eval "/etc/storage/softether_script.sh $cmd_log" &
sleep 4
[ ! -z "`pidof vpnserver`" ] && logger -t "【softether】" "启动成功" && softether_restart o
[ -z "`pidof vpnserver`" ] && logger -t "【softether】" "启动失败, 注意检查hamcore.se2、vpncmd、vpnserver是否下载完整,10 秒后自动尝试重新启动" && sleep 10 && { rm -f $softether_path ; softether_restart x ; }

softether_port_dpt
initopt
softether_get_status
eval "$scriptfilepath keep &"
exit 0
}

initopt () {
optPath=`grep ' /opt ' /proc/mounts | grep tmpfs`
[ ! -z "$optPath" ] && return
if [ ! -z "$(echo $scriptfilepath | grep -v "/opt/etc/init")" ] && [ -s "/opt/etc/init.d/rc.func" ] ; then
	{ echo '#!/bin/bash' ; echo $scriptfilepath '"$@"' '&' ; } > /opt/etc/init.d/$scriptname && chmod 777  /opt/etc/init.d/$scriptname
fi

}

initconfig () {

	if [ ! -f "/etc/storage/softether_script.sh" ] || [ ! -s "/etc/storage/softether_script.sh" ] ; then
cat > "/etc/storage/softether_script.sh" <<-\FOF
#!/bin/bash
export PATH='/opt/softether:/etc/storage/bin:/tmp/script:/etc/storage/script:/opt/usr/sbin:/opt/usr/bin:/opt/sbin:/opt/bin:/usr/local/sbin:/usr/sbin:/usr/bin:/sbin:/bin'
export LD_LIBRARY_PATH=/lib:/opt/lib
source /etc/storage/script/init.sh
softether_path=`nvram get softether_path`
[ -z $softether_path ] && softether_path=`which vpnserver` && nvram set softether_path=$softether_path
SVC_PATH=$softether_path
[ -f /opt/softether/vpn_server.config ] && [ ! -f /etc/storage/vpn_server.config ] && cp -f /opt/softether/vpn_server.config /etc/storage/vpn_server.config
[ ! -f /etc/storage/vpn_server.config ] && touch /etc/storage/vpn_server.config
ln -sf /etc/storage/vpn_server.config /opt/softether/vpn_server.config
[ ! -s /opt/softether/vpn_server.config ] && cp -f /etc/storage/vpn_server.config /opt/softether/vpn_server.config
$SVC_PATH start 2>&1 &
tap=""
until [ ! -z "$tap" ]
do
    tap=`ifconfig | grep tap_ | awk '{print $1}'`
    sleep 2
done
logger -t "【softether】" "正确启动 vpnserver!"
brctl addif br0 $tap
echo interface=$tap > /etc/storage/dnsmasq/dnsmasq.d/softether.conf
restart_dhcpd
mtd_storage.sh save &
FOF
chmod 777 "/etc/storage/softether_script.sh"
	fi

}

initconfig

softether_port_dpt () {

port=$(iptables -t filter -L INPUT -v -n --line-numbers | grep dpt:500 | cut -d " " -f 1 | sort -nr | wc -l)
if [ "$port" = 0 ] ; then
	logger -t "【softether】" "允许 500、4500、1701 udp端口通过防火墙"
	iptables -t filter -I INPUT -p udp --destination-port 500 -j ACCEPT
	iptables -t filter -I INPUT -p udp --destination-port 4500 -j ACCEPT
	iptables -t filter -I INPUT -p udp --destination-port 1701 -j ACCEPT
fi

}

case $ACTION in
start)
	softether_close
	softether_check
	;;
check)
	softether_check
	;;
stop)
	softether_close
	;;
keep)
	#softether_check
	softether_keep
	;;
*)
	softether_check
	;;
esac

