commit ac70aaae03afd4c0ba4d438bb6d99c60ea767cb4 Author: SashegDev Date: Sat May 16 16:45:47 2026 +0000 Initial release: soft-tariff multi-server VPN aggregator with Happ support diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..e2c432d --- /dev/null +++ b/.gitignore @@ -0,0 +1,7 @@ +motd.txt +servers.conf +settings.conf +users.db +__pycache__/ +*.pyc +.env diff --git a/README.md b/README.md new file mode 100644 index 0000000..46548d8 --- /dev/null +++ b/README.md @@ -0,0 +1,181 @@ +# Py-3XUI-multiserver + +Объединение нескольких серверов 3x-UI в единую VPN-подписку. Soft-tariff система с веб-панелью, донатной оплатой и Happ-совместимостью. + +## Architecture + +``` +servers.conf ──→ 3x-UI сервера (API + sub URL) +settings.conf ──→ тарифы, платежи, админка +users.db ───────→ пользователи (SQLite) + ↓ +aggregator.py ──→ FastAPI сервер + ↓ + /sub/{id} ────→ подписка для клиента (VLESS links) + /admin/* ─────→ веб-панель управления +``` + +**Soft-tariff**: пользователь создаётся на всех inbounds один раз, tier (free/test/paid) меняется локально в БД, без дёргания 3x-UI API. + +## Features + +- Multi-server: объединение любого количества 3x-UI серверов +- Multi-inbound: поддержка нескольких inbound на сервере +- Soft-tariff: free / test / paid tier без пересоздания клиентов +- DonationAlerts: приём платежей (50₽ → test 7д, 150₽ → paid 30д, 990₽ → paid 365д) +- Веб-панель: дашборд, CRUD пользователей, просмотр трафика, QR-коды +- Happ.su совместимость: hide-settings, sub-expire, announce через HTTP-хедеры +- In-memory кеш: ссылки кешируются на 7 дней, трафик — на 2 минуты +- ShortID ротация: автоматическая смена shortId на серверах каждые N часов +- MOTD: объявления из motd.txt или settings + +## Quick Start + +```bash +pip install fastapi uvicorn httpx py3xui qrcode[pil] Pillow +git clone https://github.com/SashegDev/Py-3XUI-multiserver.git +cd Py-3XUI-multiserver +# настроить servers.conf, settings.conf (см. ниже) +python3 aggregator.py +``` + +## Configuration + +### servers.conf + +```json +{ + "servers": [ + { + "name": "ru-1", + "subscription_url": "https://panel.domain.com:2096", + "api_base_url": "https://panel.domain.com:65431/PATH", + "country": "RU", + "sub_path": "/sub/{sub_id}", + "inbounds": [ + { + "id": 1, + "name": "Reality", + "api_host": "https://panel.domain.com:65431/PATH", + "api_user": "admin", + "api_pass": "password" + } + ] + } + ] +} +``` + +| Field | Type | Description | +|-------|------|-------------| +| `name` | string | Unique server name | +| `subscription_url` | string | Base URL for subscription links | +| `api_base_url` | string | API URL for traffic stats | +| `country` | string | 2-letter country code (RU, DE, NL...) | +| `sub_path` | string | Sub endpoint path on the server (`/sub/{sub_id}`) | +| `inbounds[].id` | int | Inbound ID in 3x-UI | +| `inbounds[].name` | string | Display name | +| `inbounds[].api_host` | string | 3x-UI API URL for this inbound | +| `inbounds[].api_user` | string | API login | +| `inbounds[].api_pass` | string | API password | + +### settings.conf + +```json +{ + "general": { + "title": "MyVPN", + "host": "conn.example.com", + "support_url": "https://t.me/support" + }, + "announcement": "base64 enc or plain text", + "shortid_rotation_hours": 11, + "tiers": { + "free": { + "name": "Free", + "servers": ["ru-1"], + "traffic_limit_gb": 0 + }, + "test": { + "name": "Test 7 days", + "servers": ["ru-1", "nl-1"], + "traffic_limit_gb": 5, + "price": 50, + "duration_days": 7 + }, + "paid": { + "name": "Premium", + "servers": ["ru-1", "nl-1", "de-1"], + "traffic_limit_gb": 0 + } + }, + "payments": { + "donationalerts": { + "enabled": true, + "token": "your_donationalerts_token", + "url": "https://www.donationalerts.com/r/you" + } + }, + "admin": { + "username": "admin", + "password": "secure_password" + } +} +``` + +### Tiers + +| Tier | Servers | Traffic | Price | Duration | +|------|---------|---------|-------|----------| +| free | subset marked `is_free: true` in config | unlimited (0 = ∞) | free | forever | +| test | all servers | 5 GB | 50₽ | 7 days | +| paid | all servers | unlimited | 150₽/30d, 990₽/365d | configurable | + +Free servers are defined in `servers.conf` per-server via `is_free: true`. + +### MOTD + +Two ways: +1. `motd.txt` — plain text file in project root +2. `settings.conf → announcement` — string (plain or base64) + +## Endpoints + +| Path | Method | Description | +|------|--------|-------------| +| `/sub/{id}` | GET | Subscription (format: base64/json/raw) | +| `/sub/{id}` | GET (HTML accept) | Web page with QR and info | +| `/admin/login` | POST | Admin auth | +| `/admin/users` | GET | User management panel | +| `/admin/dashboard` | GET | Stats dashboard | +| `/admin/api/users` | POST | Create user | +| `/admin/api/users/update` | POST | Update user | +| `/admin/api/users/delete` | POST | Delete user | +| `/admin/api/reload` | POST | Reload configs + clear cache | +| `/admin/api/rotate-shortids` | GET | Rotate short IDs on all servers | +| `/` | GET | Landing page | + +## DonationAlerts + +Polling-based (every ~2 seconds). Amount mapping: +- 50₽ → test tier (7 days) +- 150₽ → paid tier (30 days) +- 990₽ → paid tier (365 days) + +Other amounts are ignored. Donor identified by `id` (priority) or `username` from message parts. + +## Happ.su Support + +Subscription response includes Happ-compatible headers: +- `Profile-Title`, `Profile-Update-Interval`, `Profile-Web-Page-Url` +- `Subscription-Userinfo` (upload/download/total/expire) +- `Announce`, `Support-Url`, `Hide-Settings` +- `Sub-Expire`, `Sub-Expire-Button-Link` + +## Tech + +- **FastAPI** + uvicorn +- **SQLite** (users only) +- **py3xui** — 3x-UI API client +- **httpx** — async HTTP for sub links +- **qrcode** — QR generation diff --git a/aggregator.py b/aggregator.py new file mode 100644 index 0000000..f15745c --- /dev/null +++ b/aggregator.py @@ -0,0 +1,1438 @@ +#!/usr/bin/env python3 +""" +ZernProxy Manager v22 - Soft-Tariff with SQLite +""" + +import json +import base64 +import logging +import asyncio +import io +import os +import qrcode +import uuid +import hashlib +import secrets +import sqlite3 +import time +from datetime import datetime, timedelta +from qrcode.image.styledpil import StyledPilImage +from qrcode.image.styles.moduledrawers import SquareModuleDrawer +from typing import List, Dict, Optional, Tuple +from contextlib import contextmanager +from fastapi import FastAPI, Response, HTTPException, Query, Request +from fastapi.middleware.cors import CORSMiddleware +from fastapi.responses import HTMLResponse, FileResponse, JSONResponse, RedirectResponse +import uvicorn +import httpx +import re +from py3xui import Api +import urllib3 +urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning) + +logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(name)s - %(levelname)s - %(message)s') +logger = logging.getLogger("zernproxy") + +BASE_DIR = "/opt/aggregator" +SERVERS_CONF = os.path.join(BASE_DIR, "servers.conf") +SETTINGS_CONF = os.path.join(BASE_DIR, "settings.conf") +USERS_DB = os.path.join(BASE_DIR, "users.db") +LOGO_PATH = os.path.join(BASE_DIR, "logo.png") +MOTD_PATH = os.path.join(BASE_DIR, "motd.txt") + +servers = [] +settings = {} +last_donation_id = 0 + +# In-memory cache +_links_cache: Dict[str, Tuple[List[str], float]] = {} +_traffic_cache: Dict[str, Tuple[Dict, float]] = {} +CACHE_TTL_TRAFFIC = 120 +CACHE_TTL_LINKS = 86400 * 7 + +def _get_cached(key: str, cache: dict, ttl: float): + entry = cache.get(key) + if entry and time.time() - entry[1] < ttl: + return entry[0] + return None + +def _set_cache(key: str, value, cache: dict): + cache[key] = (value, time.time()) + +def get_cached_links(sub_id: str): + return _get_cached(sub_id, _links_cache, CACHE_TTL_LINKS) + +def set_cached_links(sub_id: str, links: List[str]): + _set_cache(sub_id, links, _links_cache) + +def get_cached_traffic(sub_id: str): + return _get_cached(sub_id, _traffic_cache, CACHE_TTL_TRAFFIC) + +def set_cached_traffic(sub_id: str, data: dict): + _set_cache(sub_id, data, _traffic_cache) + +def clear_cache(sub_id: str = None): + if sub_id: + _links_cache.pop(sub_id, None) + _traffic_cache.pop(sub_id, None) + else: + _links_cache.clear() + _traffic_cache.clear() + +def load_json(path: str, default: dict) -> dict: + if os.path.exists(path): + try: + with open(path, "r", encoding="utf-8") as f: + return json.load(f) + except Exception as e: + logger.error(f"Error loading {path}: {e}") + return default + +def save_json(path: str, data: dict): + try: + with open(path, "w", encoding="utf-8") as f: + json.dump(data, f, indent=4, ensure_ascii=False) + except Exception as e: + logger.error(f"Error saving {path}: {e}") + +def init_db(): + conn = sqlite3.connect(USERS_DB) + conn.execute(""" + CREATE TABLE IF NOT EXISTS users ( + id INTEGER PRIMARY KEY AUTOINCREMENT, + username TEXT UNIQUE NOT NULL, + subscription_id TEXT UNIQUE NOT NULL, + tier TEXT DEFAULT 'free', + tariff_days_bought INTEGER DEFAULT 0, + tariff_days_remaining INTEGER DEFAULT 0, + total_paid_rubles INTEGER DEFAULT 0, + traffic_limit_gb INTEGER DEFAULT 0, + is_active BOOLEAN DEFAULT 1, + created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP + ) + """) + conn.commit() + conn.close() + +def get_db(): + conn = sqlite3.connect(USERS_DB, timeout=30.0) + conn.row_factory = sqlite3.Row + return conn + +def load_configs(): + global servers, settings + servers = load_json(SERVERS_CONF, {"servers": []}).get("servers", []) + settings = load_json(SETTINGS_CONF, { + "general": {"title": "ZernProxy", "host": "conn.zernmc.ru", "support_url": ""}, + "announcement": "", + "shortid_rotation_hours": 11, + "tiers": { + "free": {"name": "Free", "servers": [], "traffic_limit_gb": 0}, + "paid": {"name": "Premium", "servers": [], "traffic_limit_gb": 0} + }, + "payments": {"donationalerts": {"enabled": False}} + }) + logger.info(f"Loaded {len(servers)} servers") + +init_db() +load_configs() + +def get_flag_emoji(country_code: str) -> str: + if not country_code or len(country_code) < 2: + return "" + try: + return chr(ord(country_code[0].upper()) + 127397) + chr(ord(country_code[1].upper()) + 127397) + except: + return "" + +def generate_qr_base64(data: str, size: int = 300) -> str: + qr = qrcode.QRCode(version=None, error_correction=qrcode.constants.ERROR_CORRECT_M, box_size=10, border=2) + qr.add_data(data) + qr.make(fit=True) + img = qr.make_image(fill_color="black", back_color="white", image_factory=StyledPilImage, module_drawer=SquareModuleDrawer()) + img = img.resize((size, size), resample=0) + buffered = io.BytesIO() + img.save(buffered, format="PNG") + return base64.b64encode(buffered.getvalue()).decode() + +def get_logo_base64() -> Optional[str]: + if os.path.exists(LOGO_PATH): + try: + with open(LOGO_PATH, "rb") as f: + return base64.b64encode(f.read()).decode() + except: + pass + return None + +def get_motd() -> str: + if os.path.exists(MOTD_PATH): + try: + with open(MOTD_PATH, "r", encoding="utf-8") as f: + return f.read().strip() + except: + pass + return "" + +def format_bytes(bytes_val: int) -> str: + if bytes_val == 0: + return "0 B" + sizes = ["B", "KB", "MB", "GB", "TB"] + i = 0 + val = float(bytes_val) + while val >= 1024 and i < len(sizes) - 1: + val /= 1024 + i += 1 + return f"{val:.1f} {sizes[i]}" if val < 100 else f"{int(val)} {sizes[i]}" + +def get_traffic_stats(sub_id: str) -> dict: + total_up = 0 + total_down = 0 + by_server = {} + + for srv in servers: + srv_up = 0 + srv_down = 0 + for inbound in srv.get("inbounds", []): + api_host = inbound.get("api_host") + api_user = inbound.get("api_user") + api_pass = inbound.get("api_pass") + inbound_id = inbound.get("id") + + if not all([api_host, api_user, api_pass, inbound_id]): + continue + + try: + api = Api(host=api_host, username=api_user, password=api_pass, use_tls_verify=False) + api.login() + + inbounds = api.inbound.get_list() + for ib in inbounds: + if ib.id == inbound_id and ib.client_stats: + for client in ib.client_stats: + if getattr(client, 'sub_id', '') == sub_id: + srv_up += client.up or 0 + srv_down += client.down or 0 + except: + pass + + if srv_up or srv_down: + by_server[srv["name"]] = {"up": srv_up, "down": srv_down} + total_up += srv_up + total_down += srv_down + + return {"total_up": total_up, "total_down": total_down, "by_server": by_server} + +def generate_sub_id(length: int = 16) -> str: + return ''.join(secrets.choice('abcdefghijklmnopqrstuvwxyz0123456789') for _ in range(length)) + +async def fetch_vless_links(url: str) -> List[str]: + async with httpx.AsyncClient(verify=False, timeout=10.0, follow_redirects=True) as client: + try: + resp = await client.get(url) + if resp.status_code == 404 or resp.status_code == 400: + logger.warning(f"Sub not found on server: {url}") + return [] + if resp.status_code == 200: + content = resp.text.strip() + try: + decoded = base64.b64decode(content).decode('utf-8') + links = re.findall(r'(vless://[^\s\n]+)', decoded) + if links: + return links + except: + pass + return re.findall(r'(vless://[^\s\n]+)', content) + except Exception as e: + logger.error(f"Fetch error: {e}") + return [] + +def find_user_on_servers(sub_id: str) -> Optional[str]: + """Ищет юзера на 3x-UI серверах по subId, возвращает username""" + logger.info(f"Looking for sub_id: {sub_id}") + for srv in servers: + for inbound in srv.get("inbounds", []): + api_host = inbound.get("api_host") + api_user = inbound.get("api_user") + api_pass = inbound.get("api_pass") + inbound_id = inbound.get("id") + + if not all([api_host, api_user, api_pass, inbound_id]): + continue + + try: + api = Api(host=api_host, username=api_user, password=api_pass, use_tls_verify=False) + api.login() + + inbounds = api.inbound.get_list() + for ib in inbounds: + if ib.id == inbound_id and ib.client_stats: + for client in ib.client_stats: + client_subid = getattr(client, 'sub_id', '') or '' + logger.info(f"Found client: {client.email} sub_id: {client_subid}") + if client_subid == sub_id: + email = client.email or "" + if '@' in email: + username = email.split('@')[0] + if '_' in username: + username = username.split('_')[0] + logger.info(f"Migrated user: {username} (found on {srv['name']}/{inbound['name']})") + return username + except Exception as e: + logger.error(f"Error checking {srv['name']}/{inbound['name']}: {e}") + + return None + +def get_user_tier(sub_id: str) -> Tuple[Optional[dict], str]: + conn = get_db() + try: + user = conn.execute("SELECT * FROM users WHERE subscription_id = ?", (sub_id,)).fetchone() + + if not user: + username = find_user_on_servers(sub_id) + if username: + try: + conn.execute(""" + INSERT INTO users (username, subscription_id, tier, tariff_days_bought, tariff_days_remaining, total_paid_rubles, traffic_limit_gb, is_active) +VALUES (?, ?, 'free', 0, 0, 0, 0, 1) + """, (username, sub_id)) + conn.commit() + user = conn.execute("SELECT * FROM users WHERE subscription_id = ?", (sub_id,)).fetchone() + logger.info(f"User migrated: {username}") + except sqlite3.IntegrityError: + pass + + if not user: + return None, "free" + + user = dict(user) + + if user['tier'] == 'paid' and user['tariff_days_remaining'] <= 0: + conn.execute("UPDATE users SET tier = 'free' WHERE id = ?", (user['id'],)) + conn.commit() + user['tier'] = 'free' + + return user, user['tier'] + finally: + conn.close() + +def get_servers_for_tier(tier: str) -> List[dict]: + result = [] + for srv in servers: + if not srv.get("is_active"): + continue + + if tier == "free": + if srv.get("is_free", True): + result.append(srv) + elif tier == "paid": + result.append(srv) + + return result + +def deduplicate_inbounds(servers_list: List[dict], tier: str) -> List[Tuple[dict, dict]]: + seen = set() + result = [] + for srv in servers_list: + for inbound in srv.get("inbounds", []): + if tier == "free" and not inbound.get("is_free", True): + continue + + key = (srv["name"], inbound.get("name", "")) + if key not in seen: + seen.add(key) + result.append((srv, inbound)) + return result + +app = FastAPI(title="ZernProxy Manager", docs_url=None, redoc_url=None) +app.add_middleware(CORSMiddleware, allow_origins=["*"], allow_methods=["*"], allow_headers=["*"]) + +ADMIN_USER = settings.get("admin", {}).get("username", "admin") +ADMIN_PASS = settings.get("admin", {}).get("password", "") + +def check_admin(request: Request) -> bool: + if not ADMIN_PASS: + return True + token = request.cookies.get("admin_token", "") + if token == ADMIN_PASS: + return True + auth = request.headers.get("Authorization", "") + if auth.startswith("Basic "): + try: + decoded = base64.b64decode(auth[6:]).decode() + u, p = decoded.split(":", 1) + if u == ADMIN_USER and p == ADMIN_PASS: + return True + except: + pass + return False + +ADMIN_LOGIN_PAGE = ''' + +Вход +

🔐 Вход

+
+
+
+ +
''' + +@app.post("/admin/login") +async def admin_login(request: Request): + data = await request.form() + if data.get("username") == ADMIN_USER and data.get("password") == ADMIN_PASS: + resp = RedirectResponse(url="/admin/users") + resp.set_cookie(key="admin_token", value=ADMIN_PASS, max_age=86400 * 7, httponly=True) + return resp + return HTMLResponse(content=ADMIN_LOGIN_PAGE.replace("Вход", "Вход · неверный пароль"), status_code=401) + +@app.get("/sub/{subscription_id}") +async def get_subscription(request: Request, subscription_id: str, format: str = Query("base64", pattern="^(json|base64|raw)$")): + accept = request.headers.get("accept", "") + if "text/html" in accept and format == "base64": + return await get_web_page(subscription_id) + + user, tier = get_user_tier(subscription_id) + if not user: + raise HTTPException(404, "User not found") + + if not user.get("is_active"): + raise HTTPException(403, "User is disabled") + + tier_config = settings.get("tiers", {}).get(tier, {}) + servers_for_tier = get_servers_for_tier(tier) + inbounds = deduplicate_inbounds(servers_for_tier, tier) + + if not inbounds: + raise HTTPException(404, "No servers available") + + all_links = get_cached_links(subscription_id) + if all_links is None: + all_links = [] + seen_links = set() + servers_processed = set() + + for srv, inbound in inbounds: + srv_name = srv["name"] + if srv_name in servers_processed: + continue + + sub_path = srv["sub_path"].format(sub_id=subscription_id) + url = f"{srv['subscription_url'].rstrip('/')}{sub_path}" + links = await fetch_vless_links(url) + + servers_processed.add(srv_name) + + for link in links: + clean_link = link.split('#')[0] + if clean_link in seen_links: + continue + seen_links.add(clean_link) + + srv_inbounds = [ib for s, ib in inbounds if s["name"] == srv_name] + if len(srv_inbounds) > 1: + inbound_names = ", ".join([ib["name"] for ib in srv_inbounds]) + remark = f"{get_flag_emoji(srv.get('country', ''))} {srv_name.upper()} ({inbound_names})" + else: + remark = f"{get_flag_emoji(srv.get('country', ''))} {srv_name.upper()} ({inbound['name']})" + + all_links.append(f"{clean_link}#{remark}") + + set_cached_links(subscription_id, all_links) + + if not all_links: + raise HTTPException(404, "No links found") + + if format == "json": + return {"links": all_links, "count": len(all_links), "tier": tier} + + lines = [] + motd_text = get_motd() + announce_header = "" + + if motd_text: + announce_header = f"base64:{base64.b64encode(motd_text.encode()).decode()}" + elif settings.get("announcement"): + announce_header = f"base64:{base64.b64encode(settings['announcement'].encode()).decode()}" + + host = settings.get("general", {}).get("host", "conn.zernmc.ru") + title = settings.get("general", {}).get("title", "ZernProxy") + support_url = settings.get("general", {}).get("support_url", "") + update_interval = 12 + + web_url = f"https://{host}/sub/{subscription_id}" + lines.append(f"#profile-web-page-url: {web_url}") + lines.append(f"#profile-title: {title}") + lines.append(f"#profile-update-interval: {update_interval}") + lines.append("#hide-settings: 1") + if support_url: + lines.append(f"#support-url: {support_url}") + + expire_ts = 0 + if user.get("tariff_days_remaining", 0) > 0: + expire_ts = int((datetime.now() + timedelta(days=user["tariff_days_remaining"])).timestamp()) + lines.append("#sub-expire: 1") + if support_url: + lines.append(f"#sub-expire-button-link: {support_url}") + + traffic_limit = user.get("traffic_limit_gb") or tier_config.get("traffic_limit_gb", 0) + traffic_limit_bytes = traffic_limit * 1073741824 if traffic_limit > 0 else 0 + + traffic = get_cached_traffic(subscription_id) + if not traffic: + traffic = get_traffic_stats(subscription_id) + set_cached_traffic(subscription_id, traffic) + upload = traffic.get("total_up", 0) + download = traffic.get("total_down", 0) + + lines.append(f"#subscription-userinfo: upload={upload}; download={download}; total={traffic_limit_bytes}; expire={expire_ts}") + + if announce_header: + lines.append(f"#announce: {announce_header}") + + lines.extend(all_links) + content = "\n".join(lines) + + headers = { + "Profile-Title": title, + "Profile-Update-Interval": str(update_interval), + "Profile-Web-Page-Url": web_url, + "Subscription-Userinfo": f"upload={upload}; download={download}; total={traffic_limit_bytes}; expire={expire_ts}", + "Content-Disposition": f"attachment; filename={title}_{user['username']}", + } + if announce_header: + headers["Announce"] = announce_header + if support_url: + headers["Support-Url"] = support_url + headers["Hide-Settings"] = "1" + if expire_ts: + headers["Sub-Expire"] = "1" + if support_url: + headers["Sub-Expire-Button-Link"] = support_url + + if format == "base64": + return Response(content=base64.b64encode(content.encode()).decode(), media_type="text/plain; charset=utf-8", headers=headers) + return Response(content=content, media_type="text/plain; charset=utf-8", headers=headers) + +async def get_web_page(subscription_id: str): + user, tier = get_user_tier(subscription_id) + if not user: + raise HTTPException(404, "User not found") + + tier_config = settings.get("tiers", {}).get(tier, {}) + servers_for_tier = get_servers_for_tier(tier) + inbounds = deduplicate_inbounds(servers_for_tier, tier) + + host = settings.get("general", {}).get("host", "conn.zernmc.ru") + title = settings.get("general", {}).get("title", "ZernProxy") + announcement = get_motd() or settings.get("announcement", "") + da_config = settings.get("payments", {}).get("donationalerts", {}) + + sub_url = f"https://{host}/sub/{subscription_id}" + qr_base64 = generate_qr_base64(sub_url, size=300) + logo_base64 = get_logo_base64() + + logo_html = f'Logo' if logo_base64 else '
⚡
' + announcement_html = f'
{announcement}
' if announcement else '' + + tier_color = "#4CAF50" if tier == "paid" else "#757575" + tier_name = tier_config.get("name", "Free") + tier_badge = f'{tier_name}' + + days_remaining = user.get("tariff_days_remaining", 0) + days_info = f"

⏳ Осталось дней: {days_remaining}

" if tier == "paid" and days_remaining > 0 else "" + + traffic = get_cached_traffic(subscription_id) + if not traffic: + traffic = get_traffic_stats(subscription_id) + set_cached_traffic(subscription_id, traffic) + traffic_limit_val = user.get('traffic_limit_gb') or tier_config.get('traffic_limit_gb', 0) + traffic_limit_str = "∞" if traffic_limit_val == 0 else f"{traffic_limit_val} GB" + traffic_info = f"

📊 Лимит: {traffic_limit_str}

⬆️ {format_bytes(traffic['total_up'])} | ⬇️ {format_bytes(traffic['total_down'])}

" + + traffic_details = "" + if traffic.get("by_server"): + for srv_name, data in traffic["by_server"].items(): + if data["up"] or data["down"]: + traffic_details += f'
{srv_name}: ⬆ {format_bytes(data["up"])} ⬇ {format_bytes(data["down"])}
' + + info_html = f'
{days_info}{traffic_info}{traffic_details}
' if days_info or traffic_info or traffic_details else '' + + servers_html = "".join(f'{get_flag_emoji(srv.get("country", ""))} {srv["name"].upper()}' for srv in servers_for_tier) + + support_btn = "" + if da_config.get("enabled"): + da_url = da_config.get("url", "#") + support_btn = f''' + + favorite Поддержать проект + + ''' + + html = f''' + + + + + {title} + + + + + +
+
+ {logo_html} +

{title}

+ {tier_badge} +
+ {announcement_html} +
+ {info_html} +
{servers_html}
+
+
+
+ QR Code +
{sub_url}
+ + download Скачать подписку + + {support_btn} +
+
+
+

© 2026 {title}

+
+
+ +''' + return HTMLResponse(content=html.replace("{sub_url}", sub_url).replace("{host}", host)) + +@app.post("/payment/webhook/donationalerts") +async def webhook_donationalerts(request: Request): + try: + data = await request.json() + except: + return JSONResponse({"error": "Invalid JSON"}, status_code=400) + + amount = data.get("amount", 0) + username = data.get("username", "") + message = data.get("message", "") + + if amount not in [150, 990]: + return JSONResponse({"status": "ignored", "reason": "not_vpn_payment"}) + + user = None + message_parts = message.split() if message else [] + + for part in message_parts: + conn = get_db() + try: + if part.isdigit(): + user = conn.execute("SELECT * FROM users WHERE id = ?", (int(part),)).fetchone() + if not user: + user = conn.execute("SELECT * FROM users WHERE username = ? COLLATE NOCASE", (part,)).fetchone() + if user: + break + finally: + conn.close() + + if not user and username: + conn = get_db() + try: + user = conn.execute("SELECT * FROM username = ? COLLATE NOCASE", (username,)).fetchone() + finally: + conn.close() + + if not user: + return JSONResponse({"status": "ignored", "reason": "user_not_found"}) + + days = 30 if amount == 150 else 365 + + conn = get_db() + try: + conn.execute(""" + UPDATE users SET + tier = 'paid', + tariff_days_bought = tariff_days_bought + ?, + tariff_days_remaining = tariff_days_remaining + ?, + total_paid_rubles = total_paid_rubles + ? + WHERE id = ? + """, (days, days, amount, user["id"])) + conn.commit() + finally: + conn.close() + + logger.info(f"VPN payment: {username} paid {amount} RUB, +{days} days") + return JSONResponse({"status": "ok", "user": user["username"], "days": days}) + +@app.get("/admin/users") +async def admin_users(request: Request): + if not check_admin(request): + return HTMLResponse(content=ADMIN_LOGIN_PAGE) + conn = get_db() + try: + users = conn.execute("SELECT * FROM users ORDER BY created_at DESC").fetchall() + finally: + conn.close() + + da_config = settings.get("payments", {}).get("donationalerts", {}) + + html = f''' + + + + + Управление - {settings.get("general", {}).get("title", "ZernProxy")} + + + + + +
+
+

👥 Пользователи ({len(users)})

+ +
+
+ + + + + + {"".join(f''' + + + + + + + + + + + ''' for u in users)} + +
IDUsernameSub IDТарифДнейОплаченоТрафикСтатусСоздан
{u['id']}{u['username']}{u['subscription_id']}{u['tier'].upper()}{u['tariff_days_remaining']}{u['total_paid_rubles']}₽{u['traffic_limit_gb'] if u['traffic_limit_gb'] > 0 else '∞'} GB{"✓" if u['is_active'] else "✗"}{u['created_at'][:10]} + + +
+
+
+ + + + +''' + return HTMLResponse(content=html) + +@app.get("/admin/dashboard") +async def admin_dashboard(request: Request): + if not check_admin(request): + return HTMLResponse(content=ADMIN_LOGIN_PAGE) + + conn = get_db() + try: + total_users = conn.execute("SELECT COUNT(*) as c FROM users").fetchone()["c"] + free_users = conn.execute("SELECT COUNT(*) as c FROM users WHERE tier='free'").fetchone()["c"] + paid_users = conn.execute("SELECT COUNT(*) as c FROM users WHERE tier='paid'").fetchone()["c"] + test_users = conn.execute("SELECT COUNT(*) as c FROM users WHERE tier='test'").fetchone()["c"] + total_revenue = conn.execute("SELECT SUM(total_paid_rubles) as s FROM users").fetchone()["s"] or 0 + total_donations = conn.execute("SELECT SUM(total_paid_rubles) as s FROM users WHERE total_paid_rubles > 0").fetchone()["s"] or 0 + finally: + conn.close() + + online_count = 0 + for srv in servers: + for inbound in srv.get("inbounds", []): + try: + api = Api(host=inbound["api_host"], username=inbound["api_user"], password=inbound["api_pass"], use_tls_verify=False) + api.login() + online = api.client.online() + online_count += len(online) + except: + pass + + html = f''' + + + +Дашборд - ZernProxy + + + + +
+
+

📊 Дашборд

+
+👥 Пользователи +📊 Дашборд +
+
+
+

Всего пользователей

{total_users}
+

Free

{free_users}
+

Test

{test_users}
+

Paid

{paid_users}
+

Онлайн

{online_count}
на всех серверах
+

Выручка

{total_revenue}₽
всего оплат
+

Серверов

{len(servers)}
+

Инбаундов

{sum(len(s.get("inbounds",[])) for s in servers)}
+
+
+

Серверы

+{"".join(f'
{get_flag_emoji(s.get("country",""))} {s["name"].upper()}{len(s.get("inbounds",[]))} inbound
' for s in servers)} +
+
+ +''' + return HTMLResponse(content=html) + +@app.get("/") +async def home_page(): + title = settings.get("general", {}).get("title", "ZernProxy") + return HTMLResponse(content=f''' + + + +{title} + + + + +
+ +

{title}

+

Быстрый и надёжный VPN. Подписка на основе подписки. Безлимитный трафик на всех тарифах.

+
+
🆓

Free

Базовый доступ к серверам. Безлимитный трафик.

+
🧪

Test 7 дней

Пробный период за 50₽. 5GB трафика.

+
⭐

Premium

Полный доступ, приоритетные серверы. От 150₽/мес.

+
+
+👤 Панель управления +❤️ Поддержать проект +
+
© 2026 {title} · admin
+
+ +''') + +@app.get("/webhook/tg") +async def tg_webhook(): + bot_cfg = settings.get("bot", {}) + if bot_cfg.get("enabled"): + return JSONResponse({"status": "ok", "bot": True, "message": "Telegram bot is ready"}) + return JSONResponse({"status": "ok", "bot": False, "message": "Telegram bot not configured"}) + +def create_3xui_client(username: str, sub_id: str, inbound: dict, traffic_gb: int = 0) -> dict: + """Создаёт клиента на 3x-UI сервере""" + api_host = inbound.get("api_host") + api_user = inbound.get("api_user") + api_pass = inbound.get("api_pass") + inbound_id = inbound.get("id") + + if not all([api_host, api_user, api_pass, inbound_id]): + return {"success": False, "error": "missing_credentials"} + + try: + api = Api(host=api_host, username=api_user, password=api_pass, use_tls_verify=False) + api.login() + + inbound_name = inbound.get('name', 'default') + email = f"{username}_{inbound_name}@vless.local" + total_bytes = traffic_gb * 1073741824 if traffic_gb > 0 else 0 + + logger.info(f"Creating client: email={email}, total_bytes={total_bytes}, inbound={inbound_name}") + + from py3xui.client import Client + client = Client( + id=str(uuid.uuid4()), + email=email, + enable=True, + total_gb=total_bytes, + expiry_time=0, + limit_ip=0, + subId=sub_id + ) + + try: + existing = api.client.get_by_email(email) + if existing: + logger.info(f"Deleting existing client: {existing.id}") + api.client.delete(existing.id, inbound_id) + except: + pass + + logger.info(f"About to add client: {client}") + api.client.add(inbound_id=inbound_id, clients=[client]) + logger.info(f"Client created successfully on {inbound_name}") + return {"success": True, "email": email} + + except Exception as e: + logger.error(f"Error creating client: {e}") + import traceback + logger.error(traceback.format_exc()) + return {"success": False, "error": str(e)[:150]} + +def delete_3xui_client(username: str, sub_id: str, inbound: dict) -> dict: + """Удаляет клиента с 3x-UI сервера""" + api_host = inbound.get("api_host") + api_user = inbound.get("api_user") + api_pass = inbound.get("api_pass") + inbound_id = inbound.get("id") + + if not all([api_host, api_user, api_pass, inbound_id]): + return {"success": False, "error": "missing_credentials"} + + try: + api = Api(host=api_host, username=api_user, password=api_pass, use_tls_verify=False) + api.login() + + inbounds = api.inbound.get_list() + for ib in inbounds: + if ib.id == inbound_id and ib.client_stats: + for client in ib.client_stats: + if getattr(client, 'sub_id', '') == sub_id: + api.client.delete(inbound_id, client.uuid) + logger.info(f"Deleted client from {inbound.get('name')}") + return {"success": True} + + return {"success": True, "error": "not_found"} + + except Exception as e: + return {"success": False, "error": str(e)[:100]} + +@app.post("/admin/api/users") +async def create_user(request: Request, data: dict): + if not check_admin(request): + return JSONResponse({"error": "Unauthorized"}, status_code=401) + username = data.get("username", "").strip() + if not username: + return JSONResponse({"error": "username required"}, status_code=400) + + sub_id = generate_sub_id() + conn = get_db() + + traffic_gb = int(data.get("traffic_limit_gb", 0) or 0) + logger.info(f"Creating user: username={username}, traffic_gb={traffic_gb}") + + results = [] + for srv in servers: + srv_result = {"server": srv["name"], "inbounds": []} + for inbound in srv.get("inbounds", []): + result = create_3xui_client(username, sub_id, inbound, traffic_gb) + srv_result["inbounds"].append({ + "name": inbound.get("name"), + "success": result["success"], + "error": result.get("error", "") + }) + results.append(srv_result) + + try: + conn.execute(""" + INSERT INTO users (username, subscription_id, tier, tariff_days_bought, tariff_days_remaining, total_paid_rubles, traffic_limit_gb, is_active) + VALUES (?, ?, 'free', 0, 0, 0, 0, 1) + """, (username, sub_id)) + conn.commit() + except sqlite3.IntegrityError: + conn.close() + return JSONResponse({"error": "username exists"}, status_code=400) + finally: + conn.close() + + success_count = sum(1 for r in results for ib in r["inbounds"] if ib["success"]) + total_count = sum(len(r["inbounds"]) for r in results) + + return JSONResponse({ + "status": "ok", + "username": username, + "subscription_id": sub_id, + "subscription_url": f"https://{settings.get('general', {}).get('host', 'conn.zernmc.ru')}/sub/{sub_id}", + "results": results, + "summary": f"{success_count}/{total_count} инбаундов создано" + }) + +@app.post("/admin/api/users/update") +async def update_user(request: Request, data: dict): + if not check_admin(request): + return JSONResponse({"error": "Unauthorized"}, status_code=401) + logger.info(f"RAW data received: {data}") + + user_id = int(data.get("id", 0)) + tier = str(data.get("tier", "free")) + tariff_days_remaining = int(data.get("tariff_days_remaining", 0) or 0) + traffic_limit_gb = int(data.get("traffic_limit_gb", 0) or 0) + is_active = 1 if data.get("is_active") in [True, "true", "on", "1", 1] else 0 + + logger.info(f"Update user: id={user_id}, tier='{tier}', days={tariff_days_remaining}, traffic={traffic_limit_gb}, active={is_active}") + + conn = get_db() + try: + conn.execute(""" + UPDATE users SET tier = ?, tariff_days_remaining = ?, traffic_limit_gb = ?, is_active = ? + WHERE id = ? + """, (tier, tariff_days_remaining, traffic_limit_gb, is_active, user_id)) + conn.commit() + + updated = conn.execute("SELECT * FROM users WHERE id = ?", (user_id,)).fetchone() + logger.info(f"After update DB: {dict(updated)}") + finally: + conn.close() + + return JSONResponse({"status": "ok"}) + +@app.post("/admin/api/users/delete") +async def delete_user(request: Request, data: dict): + if not check_admin(request): + return JSONResponse({"error": "Unauthorized"}, status_code=401) + user_id = data.get("id") + username = data.get("username", "") + + conn = get_db() + try: + user = conn.execute("SELECT subscription_id FROM users WHERE id = ?", (user_id,)).fetchone() + if not user: + return JSONResponse({"error": "user not found"}, status_code=404) + + sub_id = user["subscription_id"] + + for srv in servers: + for inbound in srv.get("inbounds", []): + result = delete_3xui_client(username, sub_id, inbound) + + conn.execute("DELETE FROM users WHERE id = ?", (user_id,)) + conn.commit() + finally: + conn.close() + + return JSONResponse({"status": "ok", "message": "User deleted from all servers"}) + +async def rotate_shortids(): + while True: + try: + rotation_hours = settings.get("shortid_rotation_hours", 11) + await asyncio.sleep(rotation_hours * 3600) + + for srv in servers: + for inbound in srv.get("inbounds", []): + api_host = inbound.get("api_host") + api_user = inbound.get("api_user") + api_pass = inbound.get("api_pass") + + if not all([api_host, api_user, api_pass]): + continue + + try: + api = Api(host=api_host, username=api_user, password=api_pass, use_tls_verify=False) + api.login() + + new_shortid = secrets.token_hex(4) + + inbounds = api.inbound.get_inbounds() + for ib in inbounds: + if ib.id == inbound.get("id"): + ib.shortid = new_shortid + api.inbound.update_inbound(ib) + logger.info(f"ShortID rotated for {srv['name']}/{inbound['name']}: {new_shortid}") + break + except Exception as e: + logger.error(f"ShortID rotation error {srv['name']}/{inbound['name']}: {e}") + except Exception as e: + logger.error(f"ShortID rotation error: {e}") + await asyncio.sleep(3600) + +def update_3xui_expiry(sub_id: str, days: int): + """Обновляет expiry_time на всех 3x-UI серверах""" + import time + expiry_timestamp = int(time.time() + (days * 86400)) + + for srv in servers: + for inbound in srv.get("inbounds", []): + api_host = inbound.get("api_host") + api_user = inbound.get("api_user") + api_pass = inbound.get("api_pass") + inbound_id = inbound.get("id") + + if not all([api_host, api_user, api_pass, inbound_id]): + continue + + try: + api = Api(host=api_host, username=api_user, password=api_pass, use_tls_verify=False) + api.login() + + inbounds = api.inbound.get_list() + for ib in inbounds: + if ib.id == inbound_id and ib.client_stats: + for client in ib.client_stats: + if getattr(client, 'sub_id', '') == sub_id: + client.expiry_time = expiry_timestamp + api.client.update(client.uuid, client) + logger.info(f"Updated expiry for {srv['name']}/{inbound['name']}: {days} days") + break + except Exception as e: + logger.error(f"Error updating expiry {srv['name']}/{inbound['name']}: {e}") + +async def poll_donationalerts(): + global last_donation_id + while True: + try: + da_config = settings.get("payments", {}).get("donationalerts", {}) + if not da_config.get("enabled"): + await asyncio.sleep(300) + continue + + api_token = da_config.get("api_token", "") + if not api_token: + logger.warning("DonationAlerts API token not configured") + await asyncio.sleep(300) + continue + + interval = da_config.get("check_interval_minutes", 5) + await asyncio.sleep(interval * 60) + + async with httpx.AsyncClient(timeout=30.0) as client: + resp = await client.get( + "https://www.donationalerts.com/api/v1/alerts/donations", + headers={"Authorization": f"Bearer {api_token}"} + ) + + if resp.status_code != 200: + logger.error(f"DA API error: {resp.status_code}") + continue + + data = resp.json() + donations = data.get("data", []) + + for donation in reversed(donations): + donation_id = donation.get("id") + if donation_id <= last_donation_id: + continue + + amount = donation.get("amount", 0) + username = donation.get("username", "") + message = donation.get("message", "") + + if amount not in [150, 990]: + last_donation_id = donation_id + continue + + user = None + message_parts = message.split() if message else [] + + conn = get_db() + try: + for part in message_parts: + if part.isdigit(): + user = conn.execute("SELECT * FROM users WHERE id = ?", (int(part),)).fetchone() + if not user: + user = conn.execute("SELECT * FROM users WHERE username = ? COLLATE NOCASE", (part,)).fetchone() + if user: + break + + if not user and username: + user = conn.execute("SELECT * FROM users WHERE username = ? COLLATE NOCASE", (username,)).fetchone() + + if user: + tier = "paid" + if amount == 50: + tier = "test" + days = 7 + elif amount == 150: + days = 30 + elif amount == 990: + days = 365 + else: + continue + + current_expiry = user.get("tariff_days_remaining", 0) + if current_expiry > 0: + new_expiry = current_expiry + days + else: + new_expiry = days + + conn.execute(""" + UPDATE users SET + tier = ?, + tariff_days_bought = tariff_days_bought + ?, + tariff_days_remaining = ?, + total_paid_rubles = total_paid_rubles + ? + WHERE id = ? + """, (tier, days, new_expiry, amount, user["id"])) + conn.commit() + + sub_id = user["subscription_id"] + update_3xui_expiry(sub_id, days) + + logger.info(f"VPN payment: {username} paid {amount} RUB, tier={tier}, +{days} days") + finally: + conn.close() + + last_donation_id = donation_id + + except Exception as e: + logger.error(f"DonationAlerts polling error: {e}") + await asyncio.sleep(300) + +@app.get("/health") +async def health(): + return {"status": "ok", "servers": len(servers), "settings_loaded": bool(settings)} + +@app.post("/admin/api/reload") +async def reload_configs(request: Request): + if not check_admin(request): + return JSONResponse({"error": "Unauthorized"}, status_code=401) + load_configs() + clear_cache() + return {"status": "ok"} + +@app.get("/admin/api/rotate-shortids") +async def manual_rotate(request: Request): + if not check_admin(request): + return JSONResponse({"error": "Unauthorized"}, status_code=401) + await rotate_shortids() + return {"status": "ok"} + +if __name__ == "__main__": + loop = asyncio.new_event_loop() + asyncio.set_event_loop(loop) + loop.create_task(rotate_shortids()) + loop.create_task(poll_donationalerts()) + uvicorn.run(app, host="0.0.0.0", port=8000, log_level="info") \ No newline at end of file diff --git a/logo.png b/logo.png new file mode 100644 index 0000000..e0bd113 Binary files /dev/null and b/logo.png differ