Initial release: install, uninstall, SmartDNS, web UI

Co-authored-by: Cursor <cursoragent@cursor.com>

install.sh

@@ -0,0 +1,153 @@
+#!/bin/sh
+# Keenetic-Split-DNS — one-line installer for Keenetic + Entware
+# curl -fsSL https://raw.githubusercontent.com/andrey271192/Keenetic-Split-DNS/main/install.sh | sh
+
+set -e
+
+KSD_VERSION="1.0.0"
+KSD_ETC="/opt/etc/keenetic-split-dns"
+KSD_SHARE="/opt/share/keenetic-split-dns"
+KSD_VAR_LOG="/opt/var/log/keenetic-split-dns"
+KSD_VAR_RUN="/opt/var/run/keenetic-split-dns"
+REPO_RAW="${KSD_REPO_RAW:-https://raw.githubusercontent.com/andrey271192/Keenetic-Split-DNS/main}"
+
+log() { printf '[keenetic-split-dns] %s\n' "$*"; }
+die() { log "ERROR: $*"; exit 1; }
+
+# --- Entware check ---
+[ -x /opt/bin/opkg ] || die "Entware not found. Install Entware on USB first."
+[ -d /opt/etc ] || die "/opt/etc missing — Entware broken?"
+
+# --- resolve source tree ---
+SRC_DIR=""
+case "$0" in
+  /*|./*|*/install.sh)
+    _d="$(CDPATH= cd -- "$(dirname "$0")" && pwd)"
+    [ -f "${_d}/etc/config.yaml.example" ] && SRC_DIR="$_d"
+    ;;
+esac
+if [ -z "$SRC_DIR" ]; then
+  TMP="$(mktemp -d /tmp/ksd-install.XXXXXX)"
+  trap 'rm -rf "$TMP"' EXIT INT HUP
+  log "Downloading repository..."
+  if command -v git >/dev/null 2>&1; then
+    git clone --depth 1 https://github.com/andrey271192/Keenetic-Split-DNS.git "$TMP/repo"
+    SRC_DIR="$TMP/repo"
+  else
+    die "git not found. On router: opkg install git git-http. Or clone repo manually and run install.sh from it."
+  fi
+fi
+
+log "Installing Keenetic-Split-DNS v${KSD_VERSION}..."
+
+# --- packages ---
+log "Installing Entware packages..."
+opkg update >/dev/null 2>&1 || true
+for pkg in smartdns lighttpd lighttpd-mod-cgi ca-certificates curl grep sed bind-dig; do
+  opkg list-installed 2>/dev/null | grep -q "^${pkg} " || opkg install "$pkg" >/dev/null 2>&1 || {
+    case "$pkg" in
+      bind-dig) opkg install bind-tools >/dev/null 2>&1 || opkg install dig >/dev/null 2>&1 || true ;;
+      *) log "Warning: package $pkg may be missing" ;;
+    esac
+  }
+done
+
+mkdir -p "$KSD_ETC" "$KSD_SHARE" "$KSD_VAR_LOG" "$KSD_VAR_RUN" \
+  "${KSD_ETC}/domain-sets" "${KSD_SHARE}/www" "${KSD_SHARE}/scripts" \
+  "${KSD_SHARE}/cgi-bin" "${KSD_SHARE}/smartdns" "${KSD_SHARE}/lighttpd" \
+  "${KSD_SHARE}/domain-sets"
+
+# --- copy files ---
+cp -f "$SRC_DIR/etc/config.yaml.example" "${KSD_ETC}/config.yaml" 2>/dev/null || true
+[ -f "${KSD_ETC}/config.yaml" ] || cp "$SRC_DIR/etc/config.yaml.example" "${KSD_ETC}/config.yaml"
+
+cp -rf "$SRC_DIR/scripts/"* "${KSD_SHARE}/scripts/"
+cp -rf "$SRC_DIR/www/"* "${KSD_SHARE}/www/"
+cp -f "$SRC_DIR/cgi-bin/api.cgi" "${KSD_SHARE}/cgi-bin/"
+cp -rf "$SRC_DIR/etc/domain-sets/"* "${KSD_SHARE}/domain-sets/" 2>/dev/null || true
+cp -f "$SRC_DIR/etc/smartdns/"* "${KSD_SHARE}/smartdns/" 2>/dev/null || true
+cp -f "$SRC_DIR/etc/lighttpd/lighttpd.conf" "${KSD_SHARE}/lighttpd/"
+
+# symlink API CGI into web root
+ln -sf "${KSD_SHARE}/cgi-bin/api.cgi" "${KSD_SHARE}/www/api.cgi"
+mkdir -p "${KSD_SHARE}/www/api"
+ln -sf "${KSD_SHARE}/cgi-bin/api.cgi" "${KSD_SHARE}/www/api/index.cgi"
+
+chmod +x "${KSD_SHARE}/scripts/"*.sh "${KSD_SHARE}/cgi-bin/api.cgi"
+
+# --- detect LAN ---
+DETECT="${KSD_SHARE}/scripts/detect-lan.sh"
+LAN_IP="$("$DETECT" lan 2>/dev/null || echo "192.168.1.1")"
+if grep -q 'lan_ip: "192.168.1.1"' "${KSD_ETC}/config.yaml" 2>/dev/null; then
+  sed -i "s/lan_ip: \"192.168.1.1\"/lan_ip: \"${LAN_IP}\"/" "${KSD_ETC}/config.yaml" 2>/dev/null \
+    || sed "s/lan_ip: \"192.168.1.1\"/lan_ip: \"${LAN_IP}\"/" "${KSD_ETC}/config.yaml" > "${KSD_ETC}/config.yaml.tmp" \
+    && mv "${KSD_ETC}/config.yaml.tmp" "${KSD_ETC}/config.yaml"
+fi
+
+# --- API token ---
+if [ ! -f "${KSD_ETC}/token" ]; then
+  if [ -r /dev/urandom ]; then
+    TOKEN="$(head -c 24 /dev/urandom | hexdump -ve '1/1 "%02x"' 2>/dev/null | head -c 48)"
+  else
+    TOKEN="$(date +%s)$(uname -n)"
+  fi
+  [ -n "$TOKEN" ] || TOKEN="change-me-$(date +%s)"
+  echo "$TOKEN" > "${KSD_ETC}/token"
+  chmod 600 "${KSD_ETC}/token"
+fi
+
+# --- init.d ---
+for s in S97ksd-compile S98smartdns S99ksd-web; do
+  cp -f "$SRC_DIR/init.d/$s" "/opt/etc/init.d/$s"
+  chmod +x "/opt/etc/init.d/$s"
+done
+
+# --- netfilter fallback ---
+mkdir -p /opt/etc/ndm/netfilter.d
+cp -f "$SRC_DIR/etc/ndm/netfilter.d/010-keenetic-split-dns.sh" /opt/etc/ndm/netfilter.d/
+chmod +x /opt/etc/ndm/netfilter.d/010-keenetic-split-dns.sh
+
+# --- domain sets to etc ---
+cp -f "${KSD_SHARE}/domain-sets/"*.txt "${KSD_ETC}/domain-sets/" 2>/dev/null || true
+
+# --- compile & start ---
+export KSD_ETC KSD_SHARE
+"${KSD_SHARE}/scripts/compile-config.sh"
+
+# --- dns-override (HydraRoute Neo compatible path) ---
+DNS_OVERRIDE_STATE="${KSD_ETC}/dns-override.state"
+if opkg dns-override 2>/dev/null | grep -q enable; then
+  log "Configuring opkg dns-override..."
+  if ! grep -q '^enabled=1' /opt/etc/dns-override.conf 2>/dev/null; then
+    cp /opt/etc/dns-override.conf /opt/etc/dns-override.conf.ksd-bak 2>/dev/null || true
+    echo "before-install" > "$DNS_OVERRIDE_STATE"
+  fi
+  opkg dns-override enable 2>/dev/null || true
+  echo "enabled" > "$DNS_OVERRIDE_STATE"
+  log "dns-override enabled — clients use Entware SmartDNS"
+else
+  log "dns-override not available — using netfilter.d redirect (if br0 DNS used)"
+  echo "netfilter" > "$DNS_OVERRIDE_STATE"
+fi
+
+/opt/etc/init.d/S97ksd-compile start
+/opt/etc/init.d/S98smartdns start
+/opt/etc/init.d/S99ksd-web start
+
+ndm -p netfilter restart 2>/dev/null || true
+
+WEB_PORT="$(grep '^web_port:' "${KSD_ETC}/config.yaml" | awk '{print $2}')"
+[ -n "$WEB_PORT" ] || WEB_PORT="3200"
+TOKEN_SHOW="$(cat "${KSD_ETC}/token")"
+
+log "=============================================="
+log "Keenetic-Split-DNS installed successfully."
+log "Web UI:  http://${LAN_IP}:${WEB_PORT}"
+log "API token (save it): ${TOKEN_SHOW}"
+log "Config:  ${KSD_ETC}/config.yaml"
+log ""
+log "IMPORTANT: Disable global DoT in Keenetic UI"
+log "(Интернет-фильтры -> DNS) to avoid conflicts."
+log "HydraRoute Neo: keep DHCP DNS = router IP."
+log "=============================================="
+exit 0