sub2api.conf

# --- 基础信息 / Basic Information ---
app_id="sub2api" # 和文件名一致，用于安装状态检测 / Same as the filename, used for installation status detection.
app_name="Sub2API" # 应用显示名称
app_text="AI API 网关平台 - 订阅配额分发管理（Claude/Gemini/OpenAI/Grok 等）" # 一句话简介
app_url="https://github.com/Wei-Shaw/sub2api" # 官网链接
docker_name="sub2api" # 容器启动后的名称
docker_port="8080" # 默认访问端口
app_size="3" # 占用空间大小(GB)

# --- 核心逻辑 / Core Logic ---
docker_app_install() {
    mkdir -p /home/docker/sub2api && cd /home/docker/sub2api

    # 端口可自定义
    local app_port=${docker_port}

    # 生成安全密钥（如果不存在）
    local postgres_password=$(openssl rand -hex 32 2>/dev/null || echo "$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 32)")
    local jwt_secret=$(openssl rand -hex 32 2>/dev/null || echo "$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 32)")
    local totp_key=$(openssl rand -hex 32 2>/dev/null || echo "$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 32)")
    local admin_password=$(openssl rand -hex 16 2>/dev/null || echo "$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 16)")

    # 初始化 .env 文件
    if [ ! -f .env ]; then
        cat > .env <<ENV
# PostgreSQL 数据库密码（已自动生成，请妥善保存）
POSTGRES_PASSWORD=${postgres_password}

# JWT 密钥（用于登录会话保持，已自动生成）
JWT_SECRET=${jwt_secret}

# TOTP 加密密钥（用于双因素认证，已自动生成）
TOTP_ENCRYPTION_KEY=${totp_key}

# 管理员账号（首次运行自动创建）
ADMIN_EMAIL=admin@example.com
ADMIN_PASSWORD=${admin_password}

# 数据库名称
POSTGRES_DB=sub2api

# 数据库用户名
POSTGRES_USER=sub2api

# Redis 密码（留空则无密码）
# REDIS_PASSWORD=

# 时区设置
TZ=Asia/Shanghai
ENV
    fi

    # 生成 docker-compose.yml
    cat > docker-compose.yml <<YML
services:
  sub2api:
    image: weishaw/sub2api:latest
    container_name: sub2api
    restart: unless-stopped
    ulimits:
      nofile:
        soft: 100000
        hard: 100000
    ports:
      - "${app_port}:8080"
    volumes:
      - sub2api_data:/app/data
    environment:
      - AUTO_SETUP=true
      - SERVER_HOST=0.0.0.0
      - SERVER_PORT=8080
      - SERVER_MODE=release
      - RUN_MODE=standard
      - DATABASE_HOST=postgres
      - DATABASE_PORT=5432
      - DATABASE_USER=sub2api
      - DATABASE_PASSWORD=\${POSTGRES_PASSWORD}
      - DATABASE_DBNAME=sub2api
      - DATABASE_SSLMODE=disable
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - REDIS_DB=0
      - ADMIN_EMAIL=\${ADMIN_EMAIL}
      - ADMIN_PASSWORD=\${ADMIN_PASSWORD}
      - JWT_SECRET=\${JWT_SECRET}
      - TOTP_ENCRYPTION_KEY=\${TOTP_ENCRYPTION_KEY}
      - TZ=Asia/Shanghai
      - GEMINI_OAUTH_CLIENT_ID=
      - GEMINI_OAUTH_CLIENT_SECRET=
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    networks:
      - sub2api-network
    healthcheck:
      test: ["CMD", "wget", "-q", "-T", "5", "-O", "/dev/null", "http://localhost:8080/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s

  postgres:
    image: postgres:18-alpine
    container_name: sub2api-postgres
    restart: unless-stopped
    ulimits:
      nofile:
        soft: 100000
        hard: 100000
    volumes:
      - postgres_data:/var/lib/postgresql/data
    environment:
      - PGDATA=/var/lib/postgresql/data
      - POSTGRES_USER=sub2api
      - POSTGRES_PASSWORD=\${POSTGRES_PASSWORD}
      - POSTGRES_DB=sub2api
      - TZ=Asia/Shanghai
    networks:
      - sub2api-network
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U sub2api -d sub2api"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 10s

  redis:
    image: redis:8-alpine
    container_name: sub2api-redis
    restart: unless-stopped
    ulimits:
      nofile:
        soft: 100000
        hard: 100000
    volumes:
      - redis_data:/data
    command: >
      sh -c 'redis-server --save 60 1 --appendonly yes --appendfsync everysec'
    environment:
      - TZ=Asia/Shanghai
    networks:
      - sub2api-network
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 10s

volumes:
  sub2api_data:
  postgres_data:
  redis_data:

networks:
  sub2api-network:
    driver: bridge
YML

    docker compose up -d

    echo ""
    echo "========================================"
    echo "  安装完成 / Install Complete"
    echo "========================================"
    echo "  管理面板: http://$(hostname -I | awk '{print $1}'):${app_port}"
    echo ""
    echo "  管理员账号:"
    echo "    邮箱: admin@example.com"
    echo "    密码: ${admin_password}"
    echo ""
    echo "  密钥文件: /home/docker/sub2api/.env"
    echo "========================================"
    echo ""
    echo "  重要提示:"
    echo "  1. 请妥善保存以上登录信息"
    echo "  2. .env 文件包含所有密钥，请勿泄露"
    echo "  3. 首次登录后建议修改管理员密码"
    echo "========================================"
    echo ""

    check_docker_app_ip
}

docker_app_update() {
    cd /home/docker/sub2api
    docker compose pull
    docker compose up -d
    echo "更新完成 / Update Complete"
}

docker_app_uninstall() {
    cd /home/docker/sub2api
    docker compose down --volumes --rmi all
    rm -rf /home/docker/sub2api
    echo "卸载完成 / Uninstall Complete"
}

# --- 注册 (必须包含) / Registration (Mandatory) ---
docker_app_plus