#!/bin/bash

# SSH over Websocket - by Decarte
# wget -O websocket-install.sh "https://pastebin.pl/view/raw/421d113e" && chmod +x websocket-install.sh && ./websocket-install.sh

apt update -y
apt install nginx python3 -y

rm /etc/nginx/sites-available/default
rm /etc/nginx/sites-enabled/default

mkdir -p /etc/nginx/ssl

cat > /etc/nginx/ssl/public.pem <<-END
-----BEGIN CERTIFICATE-----
MIIEpDCCA4ygAwIBAgIURtZzOOREPW5m1LQC1VLJ7K0r47MwDQYJKoZIhvcNAQEL
BQAwgYsxCzAJBgNVBAYTAlVTMRkwFwYDVQQKExBDbG91ZEZsYXJlLCBJbmMuMTQw
MgYDVQQLEytDbG91ZEZsYXJlIE9yaWdpbiBTU0wgQ2VydGlmaWNhdGUgQXV0aG9y
aXR5MRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRMwEQYDVQQIEwpDYWxpZm9ybmlh
MB4XDTI0MDMwODExMDYwMFoXDTM5MDMwNTExMDYwMFowYjEZMBcGA1UEChMQQ2xv
dWRGbGFyZSwgSW5jLjEdMBsGA1UECxMUQ2xvdWRGbGFyZSBPcmlnaW4gQ0ExJjAk
BgNVBAMTHUNsb3VkRmxhcmUgT3JpZ2luIENlcnRpZmljYXRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z20BFQunF2eyNqRwoycmZ9iq0lnN7cwjR0v
2crxKzJUzpsfQLY0hrfso5OK7vS4HHbJXYuKl8EhGkoC2Qa5QfvI8ZXLQome9/Yi
rF0egeHvRUjyelpMM2QwgGZtOtyLGI9dpUs6MjsImyHAzq705rUh9rI6aXjGuT/H
BlFebAkOtLf9xUDzyPDvdJKS/hnDMUfPdpVcOcWu/FI1Ah4O5MJRfYCmEKNHbHQT
QiGUBIpTdRf7uSchxbtshf4te+AZC5rCiiPLPC6md+i1OtEAYoXCkpCjBN+UYk86
kUZBCI2WsGd9fHMJqAjfoWJB8TnfOjb51++k2aSq53CzS1xzwQIDAQABo4IBJjCC
ASIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcD
ATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQCKo/R7WkmRkYo8ZvkZ3A/LDfAHDAf
BgNVHSMEGDAWgBQk6FNXXXw0QIep65TbuuEWePwppDBABggrBgEFBQcBAQQ0MDIw
MAYIKwYBBQUHMAGGJGh0dHA6Ly9vY3NwLmNsb3VkZmxhcmUuY29tL29yaWdpbl9j
YTAnBgNVHREEIDAegg4qLm11a2F2cG4uc2l0ZYIMbXVrYXZwbi5zaXRlMDgGA1Ud
HwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuY2xvdWRmbGFyZS5jb20vb3JpZ2luX2Nh
LmNybDANBgkqhkiG9w0BAQsFAAOCAQEAmpwgdA20nqqN07i2/eJo24lb05s+XfAQ
hAzdso686cbognSt3f2QcXyyeLTNU7mFe2wNYoSolSO3tY50kivCaf5nozg+LkCL
VdUMFoobYpwgvTukZquDncXsyRaJurhJyAlbsGvYs7sRSeIqqtqqYJjRY3kjZIXr
zgfj73VSwdrvj7d6L+exWZP/e2beV/S2SiqdJyZkimHwSEuSqElI4yDiCiY7LGIW
9haHRw+JTMLcK7YfZqUB3HQkCa+dw7qKSBWHiE6eIX1nwIfFs1WKemmbsl7YUicF
h9FQTxWP+VbybsW0o2zP1lCcH/kxf7p6n2yAAS8FbHai38IpIj+/iw==
-----END CERTIFICATE-----

END

cat > /etc/nginx/ssl/private.pem <<-END
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
END

cat /etc/nginx/sites-available/websocket <<-END
server {
    listen 80;
    listen 8080;
    listen 443 ssl;
    server_name br01.mukavpn.site;

    ssl_certificate /etc/nginx/ssl/public.pem;
    ssl_certificate_key /etc/nginx/ssl/private.pem;

    location / {
        proxy_pass http://localhost:3000;
        # proxy_http_version 1.1;
        # proxy_set_header Upgrade \$http_upgrade;
        # proxy_set_header Connection "Upgrade";
    }
}
END

ln -s /etc/nginx/sites-available/websocket /etc/nginx/sites-enabled/
nginx -t
systemctl reload nginx

echo "\n[!] Certificado NGINX configurado, instalando o Websocket-TLS\n"

wget -O websocket-tls.py "https://pastebin.com/raw/rhYT7Ayu"

cat > /etc/systemd/system/websocket.service <<-END
[Unit]
 Descripti TLS
After=network.target

[Service]
ExecStart=/usr/bin/python3 /root/websocket-tls.py
WorkingDirectory=/root/
StandardOutput=inherit
StandardError=inherit
Restart=always

[Install]
WantedBy=multi-user.target
END

systemctl daemon-reload
systemctl start websocket
systemctl enable websocket

echo "\n[!] Websocket-TLS configurado, instalando o BadVPN\n"

wget -O /usr/bin/badvpn-udpgw "https://raw.githubusercontent.com/daybreakersx/premscript/master/badvpn-udpgw64"
touch /etc/rc.local
echo -e "\nscreen -AmdS badvpn-udpgw --listen-addr 127.0.0.1:7300" >> /etc/rc.local
echo -e "screen -AmdS badvpn-udpgw --listen-addr 127.0.0.1:7200 --max-clients 5000" >> /etc/rc.local
echo -e "screen -AmdS badvpn-udpgw --listen-addr 127.0.0.1:7100 --max-clients 5000" >> /etc/rc.local
chmod +x /usr/bin/badvpn-udpgw

echo "\n[!] BadVPN configurado, criando o user default\n"

sudo useradd -m -s /bin/false mukaus3r1 && echo "mukapa55" | sudo passwd --stdin mukaus3r1

echo "\n[!] Perfeito :)\n"

sleep 5
reboot