mkdir -p /etc/apt/keyrings &&
   curl -fsSL https://sing-box.app/gpg.key -o /etc/apt/keyrings/sagernet.asc &&
   chmod a+r /etc/apt/keyrings/sagernet.asc &&
   echo '
Types: deb
URIs: https://deb.sagernet.org/
Suites: *
Components: *
Enabled: yes
Signed-By: /etc/apt/keyrings/sagernet.asc
' | tee /etc/apt/sources.list.d/sagernet.sources &&
   apt update &&
   apt install sing-box tmux -y

AUTH_KEY=""
PASSWORD="d29kZTE2d2VpbWltYTkzNA=="

while [ $# -gt 0 ]; do
  case "$1" in
    -ak) AUTH_KEY="$2"; shift 2 ;;
    -p)  PASSWORD="$2"; shift 2 ;;
    *)   shift ;;
  esac
done

cat > ~/config.json << EOF
{
  "log": { "level": "info" },
  "endpoints": [
    {
      "type": "tailscale",
      "tag": "ts-ep",
      "auth_key": "$AUTH_KEY",
      "ephemeral": false,
      "accept_routes": false,
      "exit_node": "",
      "exit_node_allow_lan_access": false,
      "advertise_routes": [],
      "advertise_exit_node": true,
      "advertise_tags": [],
      "relay_server_port": 0,
      "relay_server_static_endpoints": [],
      "system_interface": false,
      "system_interface_name": "",
      "system_interface_mtu": 0,
      "udp_timeout": "5m"
    }
  ],
  "inbounds": [
    {
      "type": "mixed",
      "tag": "mixed-in",
      "listen": "::",
      "listen_port": 1080
    },
    {
      "type": "shadowsocks",
      "tag": "ss-in",
      "listen": "::",
      "listen_port": 8080,
      "method": "2022-blake3-aes-128-gcm",
      "password": "$PASSWORD"
    }
  ],
  "outbounds": [
    {
      "type": "direct",
      "tag": "direct"
    }
  ]
}
EOF

tmux new -s singbox