1245 commits

Author	SHA1	Message	Date
Anton Petrov	8fe297ef9d	Fix QR codes colors inversion (#3607)	2026-01-02 16:12:30 +01:00
Zhenyu Qi	c881d1015a	fix: handle GitHub API error responses in GetXrayVersions (#3609) ... GitHub API returns JSON object instead of array when encountering errors (e.g., rate limit exceeded). This causes JSON unmarshal error: 'cannot unmarshal object into Go value of type []service.Release' Add HTTP status code check to handle error responses gracefully and return user-friendly error messages instead of JSON parsing errors. Fixes issue where getXrayVersion fails with unmarshal error when GitHub API rate limit is exceeded.	2026-01-02 16:12:13 +01:00
zd	4c797dc154	fix: display of outbound traffic (#3604) ... shows the direction of traffic	2025-12-23 15:43:25 +01:00
Борисов Семён	f000322a06	fix: handle CPU threshold error to prevent false notifications (#3603) ... Previously, when GetTgCpu() failed, the error was ignored and threshold defaulted to 0, causing notifications to be sent for any CPU usage. Now the job properly checks for errors and skips notifications if: - The threshold cannot be retrieved (error) - The threshold is not set or is 0 This ensures notifications are only sent when CPU usage exceeds the configured threshold value from settings.	2025-12-12 14:29:27 +01:00
Danil S.	70f6d6b21a	chore: use Intl for date formatting (#3588) ... * chore: use `Intl` for date formatting * fix: show last traffic reset * chore: use raw timestamps * fix: remove unnecessary import	2025-12-03 23:37:27 +01:00
Roman Gogolev	83a1c721c7	Fix int64 for 32-bit arch (#3591) ... * fix int64 for 32-bit arch * Update web/service/tgbot.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>	2025-12-03 14:58:54 +01:00
Anton Petrov	7ccc0877a1	Add "Last Online" printing for Telegram bot (#3593)	2025-12-03 14:43:37 +01:00
fgsfds	538f7fd5d7	Fix: Incorrect time in xray logs (#3587) ... * fixed timezone in xray logs * remove leading / at the address	2025-11-09 00:42:02 +01:00
lillinlin	575ee854c8	Better Random Reality (#3585) ... * Update reality_targets.js * Update inbound.js	2025-11-02 14:46:50 +01:00
Дмитрий Олегович Саенко	4a75bd0a48	Feature: add setting certs for subscription while generating for panel (#3578)	2025-11-01 13:10:27 +01:00
Rashid Yusubov	b0c223c631	fix: improve russian localization (#3576) ... * fix: improve russian localization * fix: updating the Russian translation according to the suggestions	2025-11-01 13:07:49 +01:00
Denis Gorelov	313b51f96f	feat: Add random Reality Target/SNI selection from 52 popular services (#3577) ... * feat: Add random Reality Target/SNI selection from 52 popular services - Created reality_targets.js with list of 52 popular services - Updated RealityStreamSettings to use random targets by default - Added UI randomize buttons with sync icon in Reality settings form - Implemented randomizeRealityTarget() method in inbound modal - Replaces hardcoded google.com with diverse global services * fix --------- Co-authored-by: mhsanaei <ho3ein.sanaei@gmail.com>	2025-11-01 13:07:05 +01:00
OleksandrParshyn	020cd63e22	Fix: Graceful Telegram bot shutdown to prevent 409 Conflict (#3580) ... * Fix: Graceful Telegram bot shutdown to prevent 409 Conflict Introduces a `botCancel` context and a global `StopBot()` function to ensure the Telegram bot's Long Polling operation is safely terminated (via context cancellation) before the service restarts. This prevents the "Conflict: another update consumer is running" (409) error upon panel restart. Changes: - Added `botCancel context.CancelFunc` to manage context cancellation. - Implemented global `StopBot()` function. - Updated `Tgbot.Stop()` to call `StopBot()`. - Modified `Tgbot.OnReceive()` to use the new cancellable context for `UpdatesViaLongPolling`. * Fix: Prevent race condition and goroutine leak in TgBot Addresses a critical race condition on the global `botCancel` variable, which could occur if `Tgbot.OnReceive()` was called concurrently (e.g., during rapid panel restarts or unexpected behavior). Changes in tgbot.go: - Added `tgBotMutex sync.Mutex` to ensure thread safety. - Protected `botCancel` creation and assignment in `OnReceive()` using the mutex, and added a check to prevent overwriting an active context, which avoids goroutine leaks. - Protected the cancellation and cleanup logic in `StopBot()` with the mutex. * Refactor: Replace time.Sleep with sync.WaitGroup for reliable TgBot shutdown Replaced the unreliable `time.Sleep(1 * time.Second)` in `service.StopBot()` with `sync.WaitGroup`. This ensures the Long Polling goroutine is explicitly waited for and reliably exits before the panel continues, preventing potential resource leaks and incomplete shutdowns during restarts. Changes: - Added `botWG sync.WaitGroup` variable. - Updated `service.StopBot()` to call `botWG.Wait()` instead of `time.Sleep()`. - Modified `Tgbot.OnReceive()` to correctly use `botWG.Add(1)` and `defer botWG.Done()` within the Long Polling goroutine. - Corrected the goroutine structure in `OnReceive()` to properly encapsulate all message handling logic.	2025-11-01 13:01:44 +01:00
mhsanaei	713a7328f6	gofmt	2025-10-21 13:02:55 +02:00
mhsanaei	d8523bbdac	fix(import): prevent sqlite disk I/O error by validating temp DB then swapping	2025-10-14 22:03:17 +02:00
fpointsstar	00baeffe74	Update translate.ru_RU.toml (#3574) ... Fix RU translation for login title: replace “Приветствие!” with “Добро пожаловать!” to match English “Welcome”.	2025-10-07 16:31:32 +02:00
mhsanaei	b578a33518	update dependencies	2025-10-07 13:49:08 +02:00
mhsanaei	8153e0ac05	fragment : MaxSplit	2025-10-07 13:46:30 +02:00
mhsanaei	2eb9d2e2e8	DevTools	2025-10-02 01:47:12 +02:00
Vadim Iskuchekov	a824875c4f	fix: improve error handling in periodic traffic reset job (#3572)	2025-10-01 23:12:09 +02:00
mhsanaei	e7cfee570b	first try native CPU implementation	2025-10-01 20:13:32 +02:00
konstpic	b65ec83c39	fix: fix delete method (#3569) ... Co-authored-by: Пичугин Константин <k.pichugin@comagic.dev>	2025-09-29 18:16:46 +02:00
konstpic	28a17a80ec	feat: add ldap component (#3568) ... * add ldap component * fix: fix russian comments, tls cert verify default true * feat: remove replaces go mod for local dev	2025-09-28 21:04:54 +02:00
Дмитрий Олегович Саенко	172f2ddaa7	fix russian translate in tgbot (#3557)	2025-09-25 15:21:40 +02:00
Tara Rostami	d69af328dc	fix: login animation (#3559) ... * Add IPv4 for wget in install * fix: login animation	2025-09-25 15:16:50 +02:00
mhsanaei	89def9aee6	fix	2025-09-24 21:30:58 +02:00
mhsanaei	b2b0024648	login: autocomplete password	2025-09-24 20:41:32 +02:00
mhsanaei	a0c07241c0	minor changes	2025-09-24 11:47:14 +02:00
mhsanaei	adf3242602	bug fix	2025-09-24 11:44:02 +02:00
mhsanaei	3f62592e4b	API improve security: returns 404 for unauthenticated API requests	2025-09-24 11:29:55 +02:00
Дмитрий Олегович Саенко	02bff4db6c	max port to 65535 (#3536) ... * add EXPOSE port in Dockerfile * fix: max port 65 531 -> 65 535 * fix --------- Co-authored-by: mhsanaei <ho3ein.sanaei@gmail.com>	2025-09-23 19:43:56 +02:00
Happ-dev	8ff4e1ff31	Add Happ client export open link (#3542) ... Co-authored-by: y.sivushkin <y.sivushkin@corp.101xp.com>	2025-09-23 16:46:45 +02:00
mhsanaei	26c6438ec2	fix api : subid, uuid from inbound settings	2025-09-23 11:52:40 +02:00
mhsanaei	1016f3b4f9	fix: outbound address for vless	2025-09-22 00:20:05 +02:00
mhsanaei	d518979e4f	pageSize to 25	2025-09-21 20:47:34 +02:00
mhsanaei	83f8a03b50	TGbot: improved (5x faster)	2025-09-21 19:27:05 +02:00
mhsanaei	b45e63a14a	API: UUID for getClientTraffics	2025-09-21 19:16:54 +02:00
mhsanaei	55f1d72af5	security fix: Uncontrolled data used in path expression	2025-09-21 18:51:54 +02:00
mhsanaei	e64e6327ef	security fix: Uncontrolled data used in path expression	2025-09-21 17:52:18 +02:00
mhsanaei	eacfbc86b5	security fix: Command built from user-controlled sources CWE-78 ... https://cwe.mitre.org/data/definitions/78.html https://owasp.org/www-community/attacks/Command_Injection	2025-09-21 17:39:30 +02:00
mhsanaei	37c17357fc	undo vnext for vmess	2025-09-20 13:10:57 +02:00
Tara Rostami	5e7a3db873	Minor Fixes (#3520)	2025-09-20 09:36:56 +02:00
mhsanaei	6ced549dea	docs: add comments for all functions	2025-09-20 09:35:50 +02:00
mhsanaei	f60682a6b7	new: VACUUM database	2025-09-19 17:14:39 +02:00
mhsanaei	50bd7a8040	better design for dns presets	2025-09-19 15:44:00 +02:00
mhsanaei	7465768ff7	fix: subpath panic	2025-09-19 14:39:21 +02:00
mhsanaei	5b00a52c65	fix: ineffectual assignment to needRestart	2025-09-19 10:47:28 +02:00
mhsanaei	151f1173a1	Fix ineffassign “date”	2025-09-19 10:46:49 +02:00
mhsanaei	e262132b9d	misspell	2025-09-19 10:35:03 +02:00
mhsanaei	7447cec17e	go package correction v2	2025-09-19 10:05:43 +02:00
mhsanaei	0ffd27c0aa	v2.8.2	2025-09-19 00:22:15 +02:00
mhsanaei	054cb1dea0	go package correction	2025-09-18 23:12:14 +02:00
Drahonn	3757ae0b11	cpu history timeframe (#3509)	2025-09-18 20:52:31 +02:00
mhsanaei	b46a0b404b	enhancements	2025-09-18 16:28:09 +02:00
mhsanaei	59ea2645db	new: subJsonEnable ... after this subEnable by default is true and subJsonEnable is false	2025-09-18 13:56:04 +02:00
mhsanaei	8c8d280f14	minor change	2025-09-18 12:20:21 +02:00
Harry NG	c720008187	chore: update sub page URL (#3505) ... * Fix: Shadowrocket link using base64 encoding * chore: update url	2025-09-18 12:11:52 +02:00
mhsanaei	170d24499e	fix PeriodicTrafficResetJob: log only when there are matching inbound	2025-09-18 11:41:11 +02:00
mhsanaei	99c79d4056	fix: online	2025-09-17 20:02:58 +02:00
RahGozar	fcdeb1fc79	feat: add UUID to ClientTraffic (#3491) ... * Update client_traffic.go * Update inbound.go	2025-09-17 17:45:28 +02:00
Harry NG	0a58b5e745	Fix: Shadowrocket link using base64 encoding (#3489)	2025-09-17 17:43:09 +02:00
Tara Rostami	db7e7dcd29	css [fixes] (#3487)	2025-09-17 15:47:04 +02:00
mhsanaei	01b8a27996	bug fix	2025-09-17 15:46:03 +02:00
Tara Rostami	d7efc2aef9	Minor Fixes (#3483) ... * Minor Fixes * Minor Fixes 2 --------- Co-authored-by: Sanaei <ho3ein.sanaei@gmail.com>	2025-09-17 13:47:01 +02:00
fgsfds	2eb8abf61e	Improved xray logs display handling (#3475) ... * improved xray logs handling * fix download Xray Logs * Update index.html	2025-09-17 13:19:55 +02:00
mhsanaei	299572a4c2	API: subid to getClientTraffics ... /getClientTraffics/:email /getClientTrafficsById/:id	2025-09-17 01:29:22 +02:00
mhsanaei	22afa50901	fix CPU History intervals	2025-09-17 01:08:59 +02:00
mhsanaei	bc274d1e1f	Reality: placeholder for min, max	2025-09-16 18:57:27 +02:00
mhsanaei	dc21f41932	bug fix: del Depleted	2025-09-16 18:28:02 +02:00
mhsanaei	f137b1af76	bug fix: enable	2025-09-16 14:57:31 +02:00
mhsanaei	ecfffa882a	CPU History, CPU Utilization	2025-09-16 14:15:18 +02:00
mhsanaei	3af5026abe	tgbot: subscription, qrcode, link - for admin	2025-09-16 13:41:48 +02:00
mhsanaei	1de7accd7c	vnext removed	2025-09-16 13:41:05 +02:00
Tara Rostami	76afff2a6f	UI Improvements and Fixes (#3470)	2025-09-16 09:25:21 +02:00
Vadim Iskuchekov	9623e87511	feat: Simple periodic traffic reset (for Inbounds) – daily | weekly | monthly (#3407) ... * Add periodic traffic reset feature model and ui with localization support * Remove periodic traffic reset fields from client * fix: add periodicTrafficReset field to inbound data structure * feat: implement periodic traffic reset job and integrate with cron scheduler * feat: enhance periodic traffic reset functionality with scheduling and inbound filtering * refactor: rename periodicTrafficReset to trafficReset and add lastTrafficResetTime field * feat: add periodic client traffic reset job and schedule tasks * Update web/job/periodic_traffic_reset_job.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Update web/job/periodic_client_traffic_reset_job.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Update web/service/inbound.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * refactor: rename periodicTrafficReset to trafficReset and add lastTrafficResetTime * feat: add last traffic reset time display and update logic in inbound service * fix: correct log message for completed periodic traffic reset * refactor: update traffic reset fields in Inbound model and remove unused client traffic reset job * refactor: remove unused traffic reset logic and clean up client model fields * cleanup comments * fix	2025-09-16 09:24:32 +02:00
mhsanaei	5408a2f82c	v2.8.0	2025-09-14 22:09:36 +02:00
mhsanaei	c8d71ea748	minify css	2025-09-14 20:05:15 +02:00
mhsanaei	bf9d2e6aeb	rule: Vless Route	2025-09-14 19:53:05 +02:00
mhsanaei	ed96fa090b	tgbot: subscription,qrcode, link	2025-09-14 19:51:57 +02:00
Alireza Ahmadi	3ac1d7f546	enhancements	2025-09-14 19:44:26 +02:00
mhsanaei	10025ffa66	Subscription	2025-09-14 18:56:31 +02:00
mhsanaei	5ee62b25ca	clean html files ... move styles to css	2025-09-12 18:46:20 +02:00
mhsanaei	311d11a3c1	cookie: MaxAge ... and minor changes	2025-09-12 13:04:36 +02:00
Copilot	40b6d7707a	Fix critical bugs in ObjectUtil.equals() and filterInbounds() functions (#3451) ... * Initial plan * Fix ObjectUtil.equals asymmetric comparison and filterInbounds null pointer bugs Co-authored-by: MHSanaei <33454419+MHSanaei@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: MHSanaei <33454419+MHSanaei@users.noreply.github.com>	2025-09-11 11:48:30 +02:00
mhsanaei	cbf316db31	Update check_client_ip_job.go	2025-09-11 11:10:17 +02:00
Ivan Korney	33a36ada4b	fix: ru top level domain regexp option (#3450)	2025-09-11 07:06:51 +02:00
mhsanaei	82ddd10627	Fixed: update Xray Core on Windows	2025-09-10 21:12:37 +02:00
mhsanaei	2401c99817	rules: source to sourceIP	2025-09-10 18:30:40 +02:00
mhsanaei	2f36a4047c	API: delClientByEmail	2025-09-10 16:36:12 +02:00
mhsanaei	dc3b0d218a	Xray Core v25.9.11	2025-09-10 14:39:07 +02:00
mhsanaei	610d29765a	outbound: mixed to socks	2025-09-10 12:19:09 +02:00
mhsanaei	3f0bfa2472	Remove the buggy version of Xray core	2025-09-10 08:43:10 +02:00
mhsanaei	723ec25fb2	renamed dest to target	2025-09-09 14:35:21 +02:00
mhsanaei	7dc52e9a53	dokodemo-door, socks renamed to mixed, tunnel	2025-09-09 13:57:40 +02:00
Sanaei	fe9f0d1d0e	api (#3434)	2025-09-09 02:32:05 +02:00
mhsanaei	18d74d54ca	outbound: ECH Config List	2025-09-08 21:25:30 +02:00
mhsanaei	c7ba6ae909	add clear button	2025-09-08 21:17:48 +02:00
mhsanaei	5420e643cf	minor change	2025-09-08 14:32:49 +02:00
mhsanaei	dbec28b915	remove unsupported cipher method	2025-09-07 22:55:37 +02:00
Sanaei	b008ff4ad2	Vlessenc (#3426) ... * mlkem768 * VlessEnc	2025-09-07 22:35:38 +02:00