ssh root@你的VPS_IP

#!/bin/bash
# WireGuard 一键安装脚本（AI生成）

set -e

# 获取服务器公网IP
SERVER_IP=$(curl -s ifconfig.me)
WG_PORT=51820
WG_INTERFACE="wg0"

echo "=== WireGuard VPN 一键安装 ==="
echo "服务器IP: $SERVER_IP"

# 安装WireGuard
apt update && apt install -y wireguard qrencode

# 生成服务器密钥
wg genkey | tee /etc/wireguard/server_private.key | wg pubkey > /etc/wireguard/server_public.key
chmod 600 /etc/wireguard/server_private.key

SERVER_PRIVKEY=$(cat /etc/wireguard/server_private.key)
SERVER_PUBKEY=$(cat /etc/wireguard/server_public.key)

# 服务器配置
cat > /etc/wireguard/wg0.conf << EOF
[Interface]
Address = 10.0.0.1/24
ListenPort = $WG_PORT
PrivateKey = $SERVER_PRIVKEY
PostUp = iptables -A FORWARD -i $WG_INTERFACE -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = iptables -D FORWARD -i $WG_INTERFACE -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
EOF

# 开启IP转发
echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf
sysctl -p

# 开放防火墙
ufw allow $WG_PORT/udp
ufw allow ssh
ufw --force enable

# 生成客户端配置函数
generate_client() {
    CLIENT_NAME=$1
    CLIENT_IP=$2

    wg genkey | tee /tmp/${CLIENT_NAME}_private.key | wg pubkey > /tmp/${CLIENT_NAME}_public.key
    CLIENT_PRIVKEY=$(cat /tmp/${CLIENT_NAME}_private.key)
    CLIENT_PUBKEY=$(cat /tmp/${CLIENT_NAME}_public.key)

    # 添加到服务器Peers
    cat >> /etc/wireguard/wg0.conf << EOF

[Peer]
PublicKey = $CLIENT_PUBKEY
AllowedIPs = ${CLIENT_IP}/32
EOF

    # 生成客户端配置
    cat > /tmp/${CLIENT_NAME}.conf << EOF
[Interface]
PrivateKey = $CLIENT_PRIVKEY
Address = ${CLIENT_IP}/24
DNS = 1.1.1.1, 8.8.8.8

[Peer]
PublicKey = $SERVER_PUBKEY
Endpoint = ${SERVER_IP}:${WG_PORT}
AllowedIPs = 0.0.0.0/0
PersistentKeepalive = 25
EOF

    echo "--- 客户端 ${CLIENT_NAME} 配置 ---"
    cat /tmp/${CLIENT_NAME}.conf
    echo ""
    echo "二维码（手机扫码导入）："
    qrencode -t ansiutf8 < /tmp/${CLIENT_NAME}.conf
    echo ""
}

# 生成两个客户端
generate_client "phone" "10.0.0.2"
generate_client "laptop" "10.0.0.3"

# 启动WireGuard
systemctl enable wg-quick@wg0
systemctl start wg-quick@wg0

echo "=== 安装完成 ==="
echo "服务器端状态："
wg show

chmod +x install-wg.sh
./install-wg.sh