CF_ACCOUNT_ID="你的Account_ID"
CF_API_TOKEN="你的API_Token"
CF_ZONE_ID="你的Zone_ID"

cloudflared tunnel run --token <你的_TOKEN>

docker run -d --name argo-connector --restart always \
  cloudflare/cloudflared:latest tunnel --no-autoupdate run --token <你的_TOKEN>

#!/usr/bin/env bash

# ==============================================================================
# Cloudflare Argo 远程托管固定隧道管理脚本
# ==============================================================================

CF_ACCOUNT_ID="********************"
CF_API_TOKEN="********************"
CF_ZONE_ID="********************"

RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[0;33m'
BLUE='\033[0;34m'
CYAN='\033[0;36m'
NC='\033[0m'

pause() { echo ""; read -r -p "按回车键返回主菜单..."; }

check_env() {
    if [[ "$CF_ACCOUNT_ID" == *"你的"* || "$CF_API_TOKEN" == *"你的"* || "$CF_ZONE_ID" == *"你的"* ]]; then
        echo -e "${RED}[X] 请先配置 CF_ACCOUNT_ID、CF_API_TOKEN 和 CF_ZONE_ID！${NC}"
        exit 1
    fi
    if ! command -v jq &> /dev/null || ! command -v curl &> /dev/null; then
        echo -e "${BLUE}--> 正在自动安装基础依赖 (curl, jq)...${NC}"
        if command -v pacman &> /dev/null; then sudo pacman -Sy --noconfirm jq curl
        elif command -v apt &> /dev/null; then sudo apt update && sudo apt install -y jq curl
        elif command -v yum &> /dev/null; then sudo yum install -y jq curl
        fi
    fi
}

list_tunnels() {
    echo -e "\n${CYAN}====== 当前 Argo 固定隧道列表 ======${NC}"
    RESPONSE=$(curl -s -X GET "https://api.cloudflare.com/client/v4/accounts/${CF_ACCOUNT_ID}/cfd_tunnel?is_deleted=false" \
        -H "Authorization: Bearer ${CF_API_TOKEN}")
    SUCCESS=$(echo "$RESPONSE" | jq -r '.success // false')
    if [ "$SUCCESS" != "true" ]; then
        echo -e "${RED}[X] 获取列表失败:${NC}"; echo "$RESPONSE" | jq '.errors'; pause; return
    fi
    TOTAL=$(echo "$RESPONSE" | jq '.result | length')
    if [ "$TOTAL" -eq 0 ]; then
        echo -e "${YELLOW}当前没有活跃的隧道。${NC}"
    else
        echo "$RESPONSE" | jq -r '.result[] | "ID: \(.id) | 名称: \(.name) | 状态: \(.status)"'
    fi
    pause
}

create_argo_tunnel() {
    echo -e "\n${CYAN}====== 创建 Argo 固定隧道 ======${NC}"
    read -r -p "1. 请输入隧道名称 (输入 0 返回): " TUNNEL_NAME
    if [[ "$TUNNEL_NAME" == "0" || -z "$TUNNEL_NAME" ]]; then return; fi
    read -r -p "2. 请输入绑定的完整域名 (例如 app.yourdomain.com, 输入 0 返回): " FULL_DOMAIN
    if [[ "$FULL_DOMAIN" == "0" || -z "$FULL_DOMAIN" ]]; then return; fi
    read -r -p "3. 请输入本地服务地址 (默认 http://localhost:8001, 输入 0 返回): " LOCAL_SERVICE
    if [ "$LOCAL_SERVICE" == "0" ]; then return; fi
    LOCAL_SERVICE=${LOCAL_SERVICE:-"http://localhost:8001"}

    echo -e "\n${BLUE}--> [1/4] 正在云端创建远程托管隧道 [$TUNNEL_NAME]...${NC}"
    CREATE_RESP=$(curl -s -X POST "https://api.cloudflare.com/client/v4/accounts/${CF_ACCOUNT_ID}/cfd_tunnel" \
        -H "Authorization: Bearer ${CF_API_TOKEN}" \
        -H "Content-Type: application/json" \
        --data "{\"name\":\"${TUNNEL_NAME}\",\"config_src\":\"cloudflare\"}")
    if [ "$(echo "$CREATE_RESP" | jq -r '.success // false')" != "true" ]; then
        echo -e "${RED}[X] 隧道创建失败:${NC}"; echo "$CREATE_RESP" | jq '.errors'; pause; return
    fi
    TUNNEL_ID=$(echo "$CREATE_RESP" | jq -r '.result.id')
    echo -e "${GREEN}[✔] 隧道创建成功！Tunnel ID: ${TUNNEL_ID}${NC}"

    echo -e "${BLUE}--> [2/4] 正在配置云端应用程序路由 ($FULL_DOMAIN -> $LOCAL_SERVICE)...${NC}"
    ROUTE_DATA=$(jq -n --arg hostname "$FULL_DOMAIN" --arg service "$LOCAL_SERVICE" \
        '{config: {ingress: [{hostname: $hostname, service: $service}, {service: "http_status:404"}]}}')
    ROUTE_RESP=$(curl -s -X PUT "https://api.cloudflare.com/client/v4/accounts/${CF_ACCOUNT_ID}/cfd_tunnel/${TUNNEL_ID}/configurations" \
        -H "Authorization: Bearer ${CF_API_TOKEN}" -H "Content-Type: application/json" --data "$ROUTE_DATA")
    if [ "$(echo "$ROUTE_RESP" | jq -r '.success // false')" != "true" ]; then
        echo -e "${RED}[X] 云端路由设置失败:${NC}"; echo "$ROUTE_RESP" | jq '.errors'
    else
        echo -e "${GREEN}[✔] 云端路由规则配置完毕！${NC}"
    fi

    echo -e "${BLUE}--> [3/4] 正在添加 DNS CNAME 记录...${NC}"
    DNS_RESP=$(curl -s -X POST "https://api.cloudflare.com/client/v4/zones/${CF_ZONE_ID}/dns_records" \
        -H "Authorization: Bearer ${CF_API_TOKEN}" -H "Content-Type: application/json" \
        --data "{\"type\":\"CNAME\",\"name\":\"${FULL_DOMAIN}\",\"content\":\"${TUNNEL_ID}.cfargot.com\",\"proxied\":true}")
    if [ "$(echo "$DNS_RESP" | jq -r '.success // false')" != "true" ]; then
        echo -e "${YELLOW}[!] DNS 绑定未成功 (可能域名已存在解析)，请手动确认。${NC}"
    else
        echo -e "${GREEN}[✔] DNS CNAME 绑定成功！${NC}"
    fi

    echo -e "${BLUE}--> [4/4] 正在生成连接器 Token...${NC}"
    TOKEN_RESP=$(curl -s -X GET "https://api.cloudflare.com/client/v4/accounts/${CF_ACCOUNT_ID}/cfd_tunnel/${TUNNEL_ID}/token" \
        -H "Authorization: Bearer ${CF_API_TOKEN}")
    TOKEN=$(echo "$TOKEN_RESP" | jq -r '.result // empty')

    if [ -n "$TOKEN" ]; then
        echo -e "\n${GREEN}=================== 创建完成 ===================${NC}"
        echo -e "${BLUE}域名:${NC} ${FULL_DOMAIN} -> ${LOCAL_SERVICE}"
        echo -e "${BLUE}Tunnel ID:${NC} ${TUNNEL_ID}"
        echo -e "${BLUE}连接器 Token:${NC}"; echo -e "${YELLOW}${TOKEN}${NC}"
        echo -e "${GREEN}================================================${NC}"
        echo -e "${CYAN}在客户端只需运行：${NC}"
        echo -e "cloudflared tunnel run --token ${TOKEN}"
    else
        echo -e "${RED}[X] 获取 Token 失败。${NC}"
    fi
    pause
}

delete_argo_tunnel() {
    echo -e "\n${CYAN}====== 删除 Argo 隧道 ======${NC}"
    read -r -p "请输入要删除的 Tunnel ID (输入 0 返回): " TUNNEL_ID
    if [[ "$TUNNEL_ID" == "0" || -z "$TUNNEL_ID" ]]; then return; fi
    echo -e "${BLUE}--> 正在删除云端隧道...${NC}"
    RESPONSE=$(curl -s -X DELETE "https://api.cloudflare.com/client/v4/accounts/${CF_ACCOUNT_ID}/cfd_tunnel/${TUNNEL_ID}" \
        -H "Authorization: Bearer ${CF_API_TOKEN}")
    SUCCESS=$(echo "$RESPONSE" | jq -r '.success // false')
    if [ "$SUCCESS" == "true" ]; then
        echo -e "${GREEN}[✔] 隧道删除成功！${NC}"
    else
        echo -e "${RED}[X] 删除失败:${NC}"; echo "$RESPONSE" | jq '.errors'
    fi
    pause
}

main_menu() {
    check_env
    while true; do
        clear
        echo -e "${CYAN}====================================================${NC}"
        echo -e "${CYAN}         Cloudflare Argo 固定隧道管理               ${NC}"
        echo -e "${CYAN}====================================================${NC}"
        echo -e " 1) 查看所有固定隧道"
        echo -e " 2) 创建固定隧道 (包含域名配置与 Token 生成)"
        echo -e " 3) 删除固定隧道"
        echo -e " 0) 退出"
        echo -e "${CYAN}----------------------------------------------------${NC}"
        read -r -p "请选择操作 [0-3]: " CHOICE
        case "$CHOICE" in
            1) list_tunnels ;;
            2) create_argo_tunnel ;;
            3) delete_argo_tunnel ;;
            0) echo -e "${GREEN}退出程序。${NC}"; exit 0 ;;
            *) echo -e "${RED}无效选项！${NC}"; pause ;;
        esac
    done
}

main_menu