mirror of
https://github.com/PRVTPRO/Amnezia-Web-Panel.git
synced 2026-09-18 01:44:10 +02:00
Public relations & Virtual technology
29def95df8
Add SOCKS5 support Add AdGuard Home integration Add node status and latency tracking Add drag-and-drop server management Upgrade Xray from v1.8 to v26.3.27 with backward compatibility Fix Telemt dependency installation Extend Telegram bot to support all protocols Improve server cleanup process Enhance API structure (system routes moved to a separate group) Add JWT token generation for external integrations
84 lines
3.6 KiB
Python
84 lines
3.6 KiB
Python
|
|
import os
|
|
import logging
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
class DNSManager:
|
|
def __init__(self, ssh):
|
|
self.ssh = ssh
|
|
|
|
def install_protocol(self, protocol_type='dns', port='53'):
|
|
"""Install AmneziaDNS service."""
|
|
try:
|
|
# 1. Check if docker is installed
|
|
out, _, _ = self.ssh.run_command("docker --version")
|
|
if "docker version" not in out.lower():
|
|
return {"status": "error", "message": "Docker not installed"}
|
|
|
|
# 2. Prepare directory
|
|
self.ssh.run_sudo_command("mkdir -p /opt/amnezia/dns")
|
|
|
|
# 3. Create Dockerfile matching official Amnezia implementation
|
|
# We use Unbound (mvance/unbound) with DNS-over-TLS to Cloudflare
|
|
forward_config = """forward-zone:
|
|
name: "."
|
|
forward-tls-upstream: yes
|
|
forward-addr: 1.1.1.1@853
|
|
forward-addr: 1.0.0.1@853
|
|
"""
|
|
self.ssh.write_file("/opt/amnezia/dns/forward-records.conf", forward_config)
|
|
|
|
dockerfile = """
|
|
FROM mvance/unbound:latest
|
|
LABEL maintainer="AmneziaVPN"
|
|
COPY forward-records.conf /opt/unbound/etc/unbound/forward-records.conf
|
|
"""
|
|
self.ssh.write_file("/opt/amnezia/dns/Dockerfile", dockerfile)
|
|
|
|
# 4. Build and run
|
|
self.ssh.run_sudo_command("docker build -t amnezia-dns /opt/amnezia/dns")
|
|
self.ssh.run_sudo_command("docker stop amnezia-dns || true")
|
|
self.ssh.run_sudo_command("docker rm amnezia-dns || true")
|
|
|
|
# Create internal network for DNS (like original Amnezia client)
|
|
self.ssh.run_sudo_command("docker network ls | grep -q amnezia-dns-net || docker network create --subnet 172.29.172.0/24 amnezia-dns-net")
|
|
|
|
# Use internal network with static IP. Do not expose 53 on host to avoid systemd-resolved conflict.
|
|
cmd = "docker run -d --name amnezia-dns --restart always --network amnezia-dns-net --ip=172.29.172.254 amnezia-dns"
|
|
self.ssh.run_sudo_command(cmd)
|
|
|
|
# Connect existing VPN containers to the DNS network
|
|
vpn_containers = ['amnezia-awg', 'amnezia-awg2', 'amnezia-awg-legacy', 'amnezia-xray', 'telemt']
|
|
for c in vpn_containers:
|
|
self.ssh.run_sudo_command(f"docker ps | grep -q {c} && docker network connect amnezia-dns-net {c} || true")
|
|
|
|
return {"status": "success", "message": "AmneziaDNS installed successfully"}
|
|
except Exception as e:
|
|
logger.exception("Error installing DNS")
|
|
return {"status": "error", "message": str(e)}
|
|
|
|
def get_server_status(self, protocol_type='dns'):
|
|
"""Check if AmneziaDNS container is running."""
|
|
try:
|
|
out, _, _ = self.ssh.run_sudo_command("docker ps --filter name=^amnezia-dns$ --format '{{.Status}}'")
|
|
is_running = 'Up' in out
|
|
|
|
out_exists, _, _ = self.ssh.run_sudo_command("docker ps -a --filter name=^amnezia-dns$ --format '{{.Names}}'")
|
|
container_exists = 'amnezia-dns' in out_exists.strip().split('\n')
|
|
|
|
return {
|
|
"container_exists": container_exists,
|
|
"container_running": is_running,
|
|
"port": "53",
|
|
"protocol": protocol_type
|
|
}
|
|
except Exception as e:
|
|
return {"error": str(e)}
|
|
|
|
def remove_container(self, protocol_type='dns'):
|
|
"""Remove AmneziaDNS container."""
|
|
self.ssh.run_sudo_command("docker stop amnezia-dns || true")
|
|
self.ssh.run_sudo_command("docker rm amnezia-dns || true")
|
|
self.ssh.run_sudo_command("rm -rf /opt/amnezia/dns")
|