2144 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
kazan417	38d87230d3	Update x-ui.sh (#3947) ... looks like now cert management is option 19	2026-03-18 19:45:45 +01:00
MHSanaei	f0f98c7122	Add Go code analyzer workflow	2026-03-17 23:01:15 +01:00
Abdalrahman	554981d9d3	feat(tgbot): send connection links and qrs on client creation (closes #3320)\n\n- Refactored inline keyboards into getCommonClientButtons to respect DRY\n- Extended SubmitAddClient callback handlers to dispatch individual links and QR codes to the bot chat on success. (#3888)	2026-03-17 22:09:49 +01:00
Nikolay	a08f1c6c13	Update translate.ru_RU.toml (#3889) ... Change to plural (geofiles, not geofile)	2026-03-17 21:24:09 +01:00
Alimpo	7f7ae0c547	fix: stop overwriting client_traffics.enable with JSON enable in GetClientTrafficByEmail (#3931) ... When a client hit traffic/expiry limit, disableInvalidClients sets client_traffics.enable=false and removes the user from Xray. GetClientTrafficByEmail was overwriting that with settings.clients[].enable (admin config), so ResetClientTraffic never saw the client as disabled and did not re-add the user. Clients could not connect until manually disabled/re-enabled. Now the DB runtime enable flag is preserved; reset correctly re-adds the user to Xray.	2026-03-17 21:20:24 +01:00
HamidReza Sadeghzadeh	60abeaad66	fix: Ban new IPs with fail2ban instead of disconnected the client. (#3919) ... * fix: Ban new IPs with fail2ban instead of disconnected the client. * fix: Remove unused strconv import * fix: Revert log fail2ban format	2026-03-17 21:18:10 +01:00
dependabot[bot]	a6d0100381	Bump docker/metadata-action from 5 to 6 (#3942) ... Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5 to 6. - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](https://github.com/docker/metadata-action/compare/v5...v6) --- updated-dependencies: - dependency-name: docker/metadata-action dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-17 21:10:09 +01:00
dependabot[bot]	6767f76ccf	Bump actions/upload-artifact from 4 to 7 (#3941) ... Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-17 21:09:56 +01:00
dependabot[bot]	e4add73c9e	Bump actions/checkout from 5 to 6 (#3940) ... Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-17 21:05:43 +01:00
dependabot[bot]	ff72090e1a	Bump docker/setup-buildx-action from 3 to 4 (#3938) ... Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-17 21:05:28 +01:00
dependabot[bot]	a3e1bd59df	Bump docker/build-push-action from 6 to 7 (#3937) ... Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6 to 7. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/v6...v7) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-17 21:05:07 +01:00
dependabot[bot]	5bbb48a8fd	Bump docker/setup-qemu-action from 3 to 4 (#3936) ... Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3 to 4. - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/v3...v4) --- updated-dependencies: - dependency-name: docker/setup-qemu-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-17 21:04:54 +01:00
dependabot[bot]	ee84d585f9	Bump docker/login-action from 3 to 4 (#3939) ... Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v3...v4) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-17 21:04:41 +01:00
Sanaei	7b03346cfc	Set package ecosystem to GitHub Actions in dependabot.yml	2026-03-17 21:03:32 +01:00
MHSanaei	258b08fff3	Update fail2ban filter regex in x-ui.sh	2026-03-08 11:53:34 +01:00
Aleksei Sidorenko	a2097ad062	feat: mask password in telegram notification on 2FA failure (#3884)	2026-03-04 18:26:53 +01:00
MHSanaei	52fdf5d429	v2.8.11	2026-03-04 13:54:01 +01:00
MHSanaei	34d8885075	Adjust KCP MTU when selecting xDNS mask	2026-03-04 13:39:14 +01:00
MHSanaei	5740996436	update dependencies	2026-03-04 13:05:29 +01:00
Artur	874aae8080	Add cron to ubuntu packages (#3875)	2026-03-04 12:36:45 +01:00
子寒	842fae18d7	Add 'default' runlevel to x-ui service in Alpine (#3854) ... it should be 'default' runlevel when add x-ui service to openrc, default is 'sysinit' runlevel. 'sysinit' runlevel is unnecessary,maybe. if not, there is an error when call to function 'check_enabled()' as command 'grep default -c' can`t print 'default' runlevel. check_enabled() { if [[ $release == "alpine" ]]; then if [[ $(rc-update show | grep -F 'x-ui' | grep default -c) == 1 ]]; then return 0 else return 1 fi	2026-03-04 12:32:01 +01:00
Happ-dev	ccd223aeea	Fix DeepLink for Happ, remove encoding URL (#3863) ... Co-authored-by: y.sivushkin <y.sivushkin@corp.101xp.com>	2026-03-04 12:29:46 +01:00
Aleksei Sidorenko	96b8fe472c	Fix: escape HTML characters in tgbot start command (#3883)	2026-03-04 11:35:24 +01:00
Nabi KaramAliZadeh	59b695ba83	fix: remove excluded paths from gzip middleware in router initialization (#3860)	2026-03-01 15:18:16 +01:00
Alireza Ahmadi	159b85f979	Merge pull request #3828 from MHSanaei/restartXrayOption ... [feat] restart xray-core from cli #3825	2026-02-25 21:09:42 +01:00
Alireza Ahmadi	3ec5b3589f	fix windows build	2026-02-20 02:07:46 +01:00
Alireza Ahmadi	2b1d3e7347	[feat] restart xray-core from cli #3825	2026-02-20 00:03:16 +01:00
MHSanaei	37f0880f8f	Bump Go to 1.26	2026-02-16 01:10:43 +01:00
MHSanaei	5b796672e9	Improve telego client robustness and retries ... Add a createRobustFastHTTPClient helper to configure fasthttp.Client with better timeouts, connection limits, retries and optional SOCKS5 proxy dialing. Validate and sanitize proxy and API server URLs instead of returning early on invalid values, and build telego.Bot options dynamically. Reduce long-polling timeout to detect connection issues faster and adjust update retrieval comments. Implement exponential-backoff retry logic for SendMessage calls to handle transient connection/timeouts and improve delivery reliability; also reduce inter-message delay for better throughput.	2026-02-14 22:49:19 +01:00
MHSanaei	3fa0da38c9	Add timeouts and delays to backup sends ... Add rate-limit friendly delays and context timeouts when sending backups via Telegram. Iterate admin IDs with index to sleep 1s between sends; add 30s context.WithTimeout for each SendDocument call and defer file.Close() for opened files; insert a 500ms pause between sending DB and config files. These changes improve resource cleanup and reduce chance of Telegram rate-limit/timeout failures.	2026-02-14 22:31:41 +01:00
MHSanaei	8eb1225734	translate bug fix #3789	2026-02-14 21:41:20 +01:00
MHSanaei	e5c0fe3edf	bug fix #3785	2026-02-11 22:21:09 +01:00
MHSanaei	f4057989f5	Require HTTP 200 from curl before using IP ... Replace simple curl+trim checks with a response+http_code parse to ensure the remote URL returns HTTP 200 and a non-empty body before assigning server_ip. Changes applied to install.sh, update.sh and x-ui.sh: use curl -w to append the status code, extract http_code and ip_result, and only set server_ip when http_code == 200 and ip_result is non-empty. This makes the IP discovery more robust against error pages or partial responses while keeping the existing timeout behavior.	2026-02-11 21:32:23 +01:00
MHSanaei	84013b0b3f	v2.8.10	2026-02-11 18:21:43 +01:00
MHSanaei	511adffc5b	Remove allowInsecure ... Remove the deprecated `allowInsecure`	2026-02-11 18:21:23 +01:00
bakatrouble	fc6344b840	Fix ipv6 hostname parsing for subscriptions (#3782)	2026-02-11 15:33:53 +01:00
emirjorge	b3555ce1b8	Update translate.es_ES.toml (#3766) ... Fix some trasnslations :)	2026-02-09 23:40:03 +01:00
MHSanaei	c2f409c3c4	fix security issue	2026-02-09 23:36:10 +01:00
Nebulosa	0994f8756f	refactor: set default ProfileUrl (#3773)	2026-02-09 21:45:25 +01:00
surbiks	4779939424	Add url speed test for outbound (#3767) ... * add outbound testing functionality with configurable test URL * use no kernel tun for conflict errors	2026-02-09 21:43:17 +01:00
MHSanaei	4a455aa532	Xray Core v26.2.6 and dependency updates ... Update Xray download URLs to v26.2.6 in the GitHub Actions release workflow and DockerInit script. Bump Go toolchain to 1.25.7 and refresh several module versions (telego, xtls/xray-core, klauspost/compress, pires/go-proxyproto, golang.org/x/arch, golang.org/x/sys, google.golang.org/genproto, etc.). Update go.sum to match the new dependency versions.	2026-02-09 12:49:32 +01:00
Nebulosa	25f64738e4	refactor: set header only if it not empty (#3763)	2026-02-07 23:01:05 +01:00
Sanaei	5bb87fd3d4	fix : Uncontrolled data used in path expression ... Co-Authored-By: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>	2026-02-07 22:54:40 +01:00
Mojtaba Arezoomand	491e3f9f8b	feat: add openssl to dockerfile (#3762)	2026-02-07 22:30:03 +01:00
Aung Ye Zaw	d8fb09faae	feat: implement 'last IP wins' policy for IP limitation (#3735) ... - Add timestamp tracking for each client IP address - Sort IPs by connection time (newest first) instead of alphabetically - Automatically disconnect old connections when IP limit exceeded - Keep only the most recent N IPs based on LimitIP setting - Force disconnection via Xray API (RemoveUser + AddUser) - Prevents account sharing while allowing legitimate network switching - Log format: [LIMIT_IP] Email = user@example.com || Disconnecting OLD IP = 1.2.3.4 || Timestamp = 1738521234 This ensures users can seamlessly switch between networks (mobile/WiFi) and the system maintains connections from their most recent IPs only. Fixes account sharing prevention for VPN providers selling per-IP licenses. Co-authored-by: Aung Ye Zaw <zaw.a.y@phluid.world>	2026-02-04 00:38:11 +01:00
MHSanaei	f87c68ea68	Add workflow to clean old GitHub Actions caches ... Adds a scheduled GitHub Actions workflow (.github/workflows/cleanup_caches.yml) that runs weekly (and via workflow_dispatch) to delete Actions caches not accessed in the last 3 days. The job uses the gh CLI with the repository token and actions: write permission to list caches, filter by last_accessed_at against a 3-day cutoff, and delete matching cache IDs.	2026-02-03 00:19:44 +01:00
Ebrahim Tahernejad	687e8cf1ba	[Windows] Use MSYS2 to fix the runtime CGO problem (#3689) ... * Use MSYS2 to fix the runtime CGO problem * macOS build workflow * Remove macOS build steps and update Windows packaging Removed macOS build steps from the release workflow and updated Windows packaging step. * Rename step to copy and download resources	2026-02-02 23:26:04 +01:00
Nebulosa	03f04194f2	Update geofiles according 304 http respond (#3690) ... * feat: enhance geofile update process with conditional GET and modification time handling * style: improve formatting in UpdateGeofile function	2026-02-02 23:20:57 +01:00
Alimpo	248700a8a3	fix: trim whitespace from comma-separated list values in routing rules (#3734)	2026-02-02 23:19:30 +01:00
MHSanaei	ff128a7275	Xray Core v26.2.2	2026-02-02 17:57:56 +01:00