hiddifypanel 10.50.4__py3-none-any.whl → 10.50.6.dev0__py3-none-any.whl

hiddifypanel/VERSION

@@ -1 +1 @@
-10.50.4
+10.50.6.dev0

hiddifypanel/VERSION.py

@@ -1,3 +1,3 @@
-__version__='10.50.4'
+__version__='10.50.6.dev0'
 from datetime import datetime
-__release_date__= datetime.strptime('2024-07-17','%Y-%m-%d')
+__release_date__= datetime.strptime('2024-07-25','%Y-%m-%d')

hiddifypanel/drivers/user_driver.py

@@ -18,11 +18,15 @@ def get_users_usage(reset=True):
     users = list(User.query.all())
     res = defaultdict(lambda: {'usage': 0, 'devices': ''})
     for driver in enabled_drivers():
-        all_usage = driver.get_all_usage(users)
-        for user, usage in all_usage.items():
-            if usage:
-                res[user]['usage'] += usage
-            # res[user]['devices'] +=usage
+        try:
+            all_usage = driver.get_all_usage(users)
+            for user, usage in all_usage.items():
+                if usage:
+                    res[user]['usage'] += usage
+                # res[user]['devices'] +=usage
+        except Exception as e:
+            print(driver)
+            hiddify.error(f'ERROR! {driver.__class__.__name__} has error in update usage {e}')
     return res
 
 
@@ -40,7 +44,7 @@ def get_enabled_users():
             total += 1
         except Exception as e:
             print(driver)
-            hiddify.error(f'ERROR! {driver.__class__.__name__} has error in get_enabled users')
+            hiddify.error(f'ERROR! {driver.__class__.__name__} has error in get_enabled users {e}')
     # print(d, total)
     res = defaultdict(bool)
     for u, v in d.items():
@@ -54,7 +58,7 @@ def add_client(user: User):
         try:
             driver.add_client(user)
         except Exception as e:
-            hiddify.error(f'ERROR! {driver.__class__.__name__} has error {e} in add client for user={user.uuid}')
+            hiddify.error(f'ERROR! {driver.__class__.__name__} has error {e} in add client for user={user.uuid} {e}')
 
 
 def remove_client(user: User):

hiddifypanel/hutils/flask.py

@@ -4,6 +4,8 @@ from wtforms.validators import ValidationError
 from apiflask import abort as apiflask_abort
 from flask_babel import gettext as _
 from flask import url_for  # type: ignore
+from flask import abort as flask_abort
+from markupsafe import Markup
 from urllib.parse import urlparse
 from strenum import StrEnum
 
@@ -24,7 +26,7 @@ def flash(message: str, category: str = "message"):
 
 def flash_config_success(restart_mode: ApplyMode = ApplyMode.nothing, domain_changed=True):
     if restart_mode != ApplyMode.nothing:
-        url = hurl_for('admin.Actions:reinstall', complete_install=restart_mode == ApplyMode.restart, domain_changed=domain_changed)
+        url = hurl_for('admin.Actions:reinstall', complete_install=restart_mode == ApplyMode.reinstall, domain_changed=domain_changed)
         apply_btn = f"<a href='{url}' class='btn btn-primary form_post'>" + \
             _("admin.config.apply_configs") + "</a>"
         flash((_('config.validation-success', link=apply_btn)), 'success')  # type: ignore
@@ -220,9 +222,9 @@ def proxy_path_validator(proxy_path: str) -> None:
 
     if is_api_call(request.path):
         if __is_admin_api_call() and proxy_path != admin_proxy_path:
-            return apiflask_abort(400, Markup(f"Invalid Proxy Path <a href=/{admin_proxy_path}/admin>Admin Panel</a>")) if dbg_mode else apiflask_abort(400, 'invalid request')
+            return flask_abort(400, Markup(f"Invalid Proxy Path <a href=/{admin_proxy_path}/admin>Admin Panel</a>")) if dbg_mode else apiflask_abort(400, 'invalid request')
         if is_user_api_call() and proxy_path != client_proxy_path:
-            return apiflask_abort(400, Markup(f"Invalid Proxy Path <a href=/{client_proxy_path}/admin>User Panel</a>")) if dbg_mode else apiflask_abort(400, 'invalid request')
+            return flask_abort(400, Markup(f"Invalid Proxy Path <a href=/{client_proxy_path}/admin>User Panel</a>")) if dbg_mode else apiflask_abort(400, 'invalid request')
 
 
 def list_dir_files(dir_path: str) -> List[str]:

hiddifypanel/hutils/network/net.py

@@ -1,3 +1,4 @@
+import glob
 from typing import List, Literal, Set, Union
 from urllib.parse import urlparse
 import urllib.request
@@ -282,14 +283,24 @@ def get_warp_info() -> str:
 
 
 def is_ssh_password_authentication_enabled() -> bool:
-    if os.path.isfile('/etc/ssh/sshd_config'):
-        with open('/etc/ssh/sshd_config', 'r') as f:
-            for line in f.readlines():
-                line = line.strip()
-                if line.startswith('#'):
-                    continue
-                if re.search("^PasswordAuthentication\\s+no", line, re.IGNORECASE):
-                    return False
+    def check_file(file_path: str) -> bool:
+        if os.path.isfile(file_path):
+            try:
+                with open(file_path, 'r') as f:
+                    for line in f.readlines():
+                        line = line.strip()
+                        if line.startswith('#'):
+                            continue
+                        if re.search(r"^PasswordAuthentication\s+no", line, re.IGNORECASE):
+                            return False
+            except Exception as e:
+                print(e)
+
+        return True
+
+    for config_file in glob.glob("/etc/ssh/sshd*") + glob.glob("/etc/ssh/sshd*/*"):
+        if not check_file(config_file):
+            return False
 
     return True
 
@@ -319,7 +330,7 @@ def add_number_to_ipv6(ip: str, number: int) -> str:
     return modified_ipv6
 
 
-@cache.cache(600)
+@ cache.cache(600)
 def is_in_same_asn(domain_or_ip: str, domain_or_ip_target: str) -> bool:
     '''Returns True if domain is in panel ASN'''
     try:
@@ -344,7 +355,7 @@ def is_in_same_asn(domain_or_ip: str, domain_or_ip_target: str) -> bool:
         #                    f"<br> Server ASN={asn_ipv4.get('autonomous_system_organization','unknown')}<br>{domain}_ASN={asn_dip.get('autonomous_system_organization','unknown')}", "warning")
 
 
-@cache.cache(600)
+@ cache.cache(600)
 def get_ip_asn(ip: ipaddress.IPv4Address | ipaddress.IPv6Address | str) -> str:
     if not IPASN:
         return __get_ip_asn_api(ip)
@@ -364,7 +375,7 @@ def __get_ip_asn_api(ip: ipaddress.IPv4Address | ipaddress.IPv6Address | str) ->
     return str(requests.get(endpoint).content)
 
 
-@cache.cache(3600)
+@ cache.cache(3600)
 def is_ip(input: str):
     try:
         _ = ipaddress.ip_address(input)

hiddifypanel/hutils/proxy/shared.py

@@ -137,10 +137,12 @@ def get_proxies(child_id: int = 0, only_enabled=False) -> list['Proxy']:
         proxies = [c for c in proxies if 'trojan' not in c.proto]
     if not hconfig(ConfigEnum.httpupgrade_enable, child_id):
         proxies = [c for c in proxies if ProxyTransport.httpupgrade not in c.transport]
+    if not hconfig(ConfigEnum.splithttp_enable, child_id):
+        proxies = [c for c in proxies if ProxyTransport.splithttp not in c.transport]
     if not hconfig(ConfigEnum.ws_enable, child_id):
         proxies = [c for c in proxies if ProxyTransport.WS not in c.transport]
-    if not hconfig(ConfigEnum.xtls_enable, child_id):
-        proxies = [c for c in proxies if ProxyTransport.XTLS not in c.transport]
+    # if not hconfig(ConfigEnum.xtls_enable, child_id):
+        #     proxies = [c for c in proxies if ProxyTransport.XTLS not in c.transport]
     if not hconfig(ConfigEnum.grpc_enable, child_id):
         proxies = [c for c in proxies if ProxyTransport.grpc not in c.transport]
     if not hconfig(ConfigEnum.tcp_enable, child_id):
@@ -190,7 +192,7 @@ def get_valid_proxies(domains: list[Domain]) -> list[dict]:
             noDomainProxies = False
             if proxy.proto in [ProxyProto.ssh, ProxyProto.wireguard]:
                 noDomainProxies = True
-            if proxy.proto in [ProxyProto.ss] and proxy.transport not in [ProxyTransport.grpc, ProxyTransport.h2, ProxyTransport.WS, ProxyTransport.httpupgrade]:
+            if proxy.proto in [ProxyProto.ss] and proxy.transport not in [ProxyTransport.grpc, ProxyTransport.h2, ProxyTransport.WS, ProxyTransport.httpupgrade, ProxyTransport.splithttp]:
                 noDomainProxies = True
             options = []
             key = f'{proxy.proto}{proxy.transport}{proxy.cdn}{proxy.l3}'
@@ -411,6 +413,11 @@ def make_proxy(hconfigs: dict, proxy: Proxy, domain_db: Domain, phttp=80, ptls=4
         base['path'] = f'/{path[base["proto"]]}{hconfigs[ConfigEnum.path_httpupgrade]}'
         base["host"] = domain
         return base
+    if proxy.transport in [ProxyTransport.splithttp]:
+        base['transport'] = 'splithttp'
+        base['path'] = f'/{path[base["proto"]]}{hconfigs[ConfigEnum.path_splithttp]}'
+        base["host"] = domain
+        return base
 
     if proxy.transport == "grpc":
         base['transport'] = 'grpc'

hiddifypanel/hutils/proxy/xray.py

@@ -127,7 +127,7 @@ def to_link(proxy: dict) -> str | dict:
     if proxy.get('fingerprint', 'none') != 'none':
         baseurl += "&fp=" + proxy['fingerprint']
     if proxy['l3'] != 'quic':
-        if proxy.get('l3') != ProxyL3.reality and (proxy.get('transport') == ProxyTransport.tcp or proxy.get('transport') == ProxyTransport.httpupgrade) and proxy['proto'] in [ProxyProto.vless, ProxyProto.trojan]:
+        if proxy.get('l3') != ProxyL3.reality and (proxy.get('transport') in {ProxyTransport.tcp, ProxyTransport.httpupgrade, ProxyTransport.splithttp}) and proxy['proto'] in [ProxyProto.vless, ProxyProto.trojan]:
             baseurl += '&headerType=http'
         else:
             baseurl += '&headerType=None'

hiddifypanel/hutils/proxy/xrayjson.py

@@ -261,6 +261,9 @@ def add_stream_settings(base: dict, proxy: dict):
     if proxy['transport'] == ProxyTransport.httpupgrade:
         ss['network'] = proxy['transport']
         add_httpupgrade_stream(ss, proxy)
+    if proxy['transport'] == ProxyTransport.splithttp:
+        ss['network'] = proxy['transport']
+        add_splithttp_stream(ss, proxy)
     if proxy['transport'] == 'ws':
         ss['network'] = proxy['transport']
         add_ws_stream(ss, proxy)
@@ -334,6 +337,14 @@ def add_httpupgrade_stream(ss: dict, proxy: dict):
     }
 
 
+def add_splithttp_stream(ss: dict, proxy: dict):
+    ss['splithttpSettings'] = {
+        'path': proxy['path'],
+        'host': proxy['host'],
+        # 'acceptProxyProtocol': '', for inbounds only
+    }
+
+
 def add_kcp_stream(ss: dict, proxy: dict):
     # TODO: fix server side configs first
     ss['kcpSettings'] = {}

hiddifypanel/models/config_enum.py

@@ -64,8 +64,8 @@ class ConfigCategory(StrEnum):
 
 
 class ApplyMode(StrEnum):
-    apply = auto()
-    restart = auto()
+    apply_config = auto()
+    reinstall = auto()
     nothing = auto()
 
 
@@ -89,7 +89,7 @@ class ConfigEnum(metaclass=FastEnum):
     # category: ConfigCategory
     __slots__ = ('name', 'value', 'category', 'apply_mode', 'type', 'show_in_parent', 'hide_in_virtual_child')
 
-    def __init__(self, category: ConfigCategory, apply_mode: ApplyMode = ApplyMode.apply, ctype=type, show_in_parent: bool = True, hide_in_virtual_child=False, name=auto):
+    def __init__(self, category: ConfigCategory, apply_mode: ApplyMode = ApplyMode.apply_config, ctype=type, show_in_parent: bool = True, hide_in_virtual_child=False, name=auto):
         self.value = name
         self.name = name
         self.category = category
@@ -101,41 +101,41 @@ class ConfigEnum(metaclass=FastEnum):
     @classmethod
     def dbvalues(cls):
         return {c.name: c for c in ConfigEnum}
-    create_easysetup_link = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply, hide_in_virtual_child=True)
-    wireguard_enable = _BoolConfigDscr(ConfigCategory.wireguard, ApplyMode.apply, hide_in_virtual_child=True)
-    wireguard_port = _StrConfigDscr(ConfigCategory.wireguard, ApplyMode.apply, hide_in_virtual_child=True)
-    wireguard_ipv6 = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply, hide_in_virtual_child=True)
-    wireguard_ipv4 = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply, hide_in_virtual_child=True)
-    wireguard_private_key = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply, hide_in_virtual_child=True)
-    wireguard_public_key = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply, hide_in_virtual_child=True)
-    wireguard_noise_trick = _StrConfigDscr(ConfigCategory.wireguard, ApplyMode.apply)
+    create_easysetup_link = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.nothing, hide_in_virtual_child=True)
+    wireguard_enable = _BoolConfigDscr(ConfigCategory.wireguard, ApplyMode.reinstall, hide_in_virtual_child=True)
+    wireguard_port = _StrConfigDscr(ConfigCategory.wireguard, ApplyMode.apply_config, hide_in_virtual_child=True)
+    wireguard_ipv6 = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config, hide_in_virtual_child=True)
+    wireguard_ipv4 = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config, hide_in_virtual_child=True)
+    wireguard_private_key = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config, hide_in_virtual_child=True)
+    wireguard_public_key = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config, hide_in_virtual_child=True)
+    wireguard_noise_trick = _StrConfigDscr(ConfigCategory.wireguard, ApplyMode.apply_config)
 
     ssh_server_redis_url = _StrConfigDscr(ConfigCategory.hidden, hide_in_virtual_child=True)
-    ssh_server_port = _StrConfigDscr(ConfigCategory.ssh, ApplyMode.apply, hide_in_virtual_child=True)
-    ssh_server_enable = _BoolConfigDscr(ConfigCategory.ssh, ApplyMode.apply)
+    ssh_server_port = _StrConfigDscr(ConfigCategory.ssh, ApplyMode.apply_config, hide_in_virtual_child=True)
+    ssh_server_enable = _BoolConfigDscr(ConfigCategory.ssh, ApplyMode.reinstall)
     first_setup = _BoolConfigDscr(ConfigCategory.hidden)
-    core_type = _StrConfigDscr(ConfigCategory.advanced, ApplyMode.apply, hide_in_virtual_child=True)
-    warp_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.restart, hide_in_virtual_child=True)
-    warp_mode = _StrConfigDscr(ConfigCategory.warp, ApplyMode.restart, hide_in_virtual_child=True)
-    warp_plus_code = _StrConfigDscr(ConfigCategory.warp, ApplyMode.apply, hide_in_virtual_child=True)
-    warp_sites = _StrConfigDscr(ConfigCategory.warp, ApplyMode.apply, hide_in_virtual_child=True)
-    dns_server = _StrConfigDscr(ConfigCategory.general, ApplyMode.apply, hide_in_virtual_child=True)
-    reality_fallback_domain = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply)  # removed
-    reality_server_names = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply)  # removed
-    reality_short_ids = _StrConfigDscr(ConfigCategory.reality, ApplyMode.apply, hide_in_virtual_child=True)
-    reality_private_key = _StrConfigDscr(ConfigCategory.reality, ApplyMode.apply, hide_in_virtual_child=True)
-    reality_public_key = _StrConfigDscr(ConfigCategory.reality, ApplyMode.apply, hide_in_virtual_child=True)
-    reality_port = _StrConfigDscr(ConfigCategory.reality, ApplyMode.apply, hide_in_virtual_child=True)
+    core_type = _StrConfigDscr(ConfigCategory.advanced, ApplyMode.reinstall, hide_in_virtual_child=True)
+    warp_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.reinstall, hide_in_virtual_child=True)
+    warp_mode = _StrConfigDscr(ConfigCategory.warp, ApplyMode.apply_config, hide_in_virtual_child=True)
+    warp_plus_code = _StrConfigDscr(ConfigCategory.warp, ApplyMode.apply_config, hide_in_virtual_child=True)
+    warp_sites = _StrConfigDscr(ConfigCategory.warp, ApplyMode.apply_config, hide_in_virtual_child=True)
+    dns_server = _StrConfigDscr(ConfigCategory.general, ApplyMode.apply_config, hide_in_virtual_child=True)
+    reality_fallback_domain = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config)  # removed
+    reality_server_names = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config)  # removed
+    reality_short_ids = _StrConfigDscr(ConfigCategory.reality, ApplyMode.apply_config, hide_in_virtual_child=True)
+    reality_private_key = _StrConfigDscr(ConfigCategory.reality, ApplyMode.apply_config, hide_in_virtual_child=True)
+    reality_public_key = _StrConfigDscr(ConfigCategory.reality, ApplyMode.apply_config, hide_in_virtual_child=True)
+    reality_port = _StrConfigDscr(ConfigCategory.reality, ApplyMode.apply_config, hide_in_virtual_child=True)
 
     restls1_2_domain = _StrConfigDscr(ConfigCategory.hidden)
     restls1_3_domain = _StrConfigDscr(ConfigCategory.hidden)
     show_usage_in_sublink = _BoolConfigDscr(ConfigCategory.general)
-    cloudflare = _StrConfigDscr(ConfigCategory.too_advanced, ApplyMode.apply)
+    cloudflare = _StrConfigDscr(ConfigCategory.too_advanced)
     license = _StrConfigDscr(ConfigCategory.hidden)
-    country = _StrConfigDscr(ConfigCategory.general, ApplyMode.restart, hide_in_virtual_child=True)
+    country = _StrConfigDscr(ConfigCategory.general, ApplyMode.reinstall, hide_in_virtual_child=True)
     package_mode = _StrConfigDscr(ConfigCategory.advanced, hide_in_virtual_child=True)
     utls = _StrConfigDscr(ConfigCategory.advanced)
-    telegram_bot_token = _StrConfigDscr(ConfigCategory.telegram, ApplyMode.apply, hide_in_virtual_child=True)
+    telegram_bot_token = _StrConfigDscr(ConfigCategory.telegram, hide_in_virtual_child=True)
 
     # region child-parent
     # deprecated
@@ -147,10 +147,10 @@ class ConfigEnum(metaclass=FastEnum):
 
     # the panel mode could be one of these: "parent", "child", "standalone"
     # this config value would be 'standalone' by default. and would be set by panel itself
-    panel_mode = _TypedConfigDscr(PanelMode, ConfigCategory.hidden, ApplyMode.nothing, hide_in_virtual_child=True)
+    panel_mode = _TypedConfigDscr(PanelMode, ConfigCategory.hidden, hide_in_virtual_child=True)
     # endregion
 
-    log_level = _TypedConfigDscr(LogLevel, ConfigCategory.hidden, ApplyMode.restart, hide_in_virtual_child=True)
+    log_level = _TypedConfigDscr(LogLevel, ConfigCategory.hidden, ApplyMode.reinstall, hide_in_virtual_child=True)
 
     unique_id = _StrConfigDscr(ConfigCategory.hidden)
     last_hash = _StrConfigDscr(ConfigCategory.hidden)
@@ -160,110 +160,113 @@ class ConfigEnum(metaclass=FastEnum):
     admin_secret = _StrConfigDscr(ConfigCategory.hidden)  # removed
 
     # tls
-    tls_ports = _StrConfigDscr(ConfigCategory.tls, ApplyMode.apply)
+    tls_ports = _StrConfigDscr(ConfigCategory.tls, ApplyMode.apply_config)
 
-    tls_fragment_enable = _BoolConfigDscr(ConfigCategory.tls_trick, ApplyMode.apply)
-    tls_fragment_size = _StrConfigDscr(ConfigCategory.tls_trick, ApplyMode.apply)
-    tls_fragment_sleep = _StrConfigDscr(ConfigCategory.tls_trick, ApplyMode.apply)
-    tls_mixed_case = _BoolConfigDscr(ConfigCategory.tls_trick, ApplyMode.apply)
-    tls_padding_enable = _BoolConfigDscr(ConfigCategory.tls_trick, ApplyMode.apply)
-    tls_padding_length = _StrConfigDscr(ConfigCategory.tls_trick, ApplyMode.apply)
+    tls_fragment_enable = _BoolConfigDscr(ConfigCategory.tls_trick)
+    tls_fragment_size = _StrConfigDscr(ConfigCategory.tls_trick)
+    tls_fragment_sleep = _StrConfigDscr(ConfigCategory.tls_trick)
+    tls_mixed_case = _BoolConfigDscr(ConfigCategory.tls_trick)
+    tls_padding_enable = _BoolConfigDscr(ConfigCategory.tls_trick, ApplyMode.apply_config)
+    tls_padding_length = _StrConfigDscr(ConfigCategory.tls_trick, ApplyMode.apply_config)
 
     # mux
-    mux_enable = _BoolConfigDscr(ConfigCategory.mux, ApplyMode.apply)
-    mux_protocol = _StrConfigDscr(ConfigCategory.mux, ApplyMode.apply)
-    mux_max_connections = _IntConfigDscr(ConfigCategory.mux, ApplyMode.apply)
-    mux_min_streams = _IntConfigDscr(ConfigCategory.mux, ApplyMode.apply)
-    mux_max_streams = _IntConfigDscr(ConfigCategory.mux, ApplyMode.apply)
-    mux_padding_enable = _BoolConfigDscr(ConfigCategory.mux, ApplyMode.apply)
-    mux_brutal_enable = _BoolConfigDscr(ConfigCategory.mux, ApplyMode.apply)
-    mux_brutal_up_mbps = _IntConfigDscr(ConfigCategory.mux, ApplyMode.apply)
-    mux_brutal_down_mbps = _IntConfigDscr(ConfigCategory.mux, ApplyMode.apply)
-
-    http_ports = _StrConfigDscr(ConfigCategory.http, ApplyMode.apply)
-    kcp_ports = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply)
-    kcp_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply)
-    decoy_domain = _StrConfigDscr(ConfigCategory.general, ApplyMode.apply, hide_in_virtual_child=True)
+    mux_enable = _BoolConfigDscr(ConfigCategory.mux, ApplyMode.apply_config)
+    mux_protocol = _StrConfigDscr(ConfigCategory.mux, ApplyMode.apply_config)
+    mux_max_connections = _IntConfigDscr(ConfigCategory.mux, ApplyMode.apply_config)
+    mux_min_streams = _IntConfigDscr(ConfigCategory.mux, ApplyMode.apply_config)
+    mux_max_streams = _IntConfigDscr(ConfigCategory.mux, ApplyMode.apply_config)
+    mux_padding_enable = _BoolConfigDscr(ConfigCategory.mux, ApplyMode.apply_config)
+    mux_brutal_enable = _BoolConfigDscr(ConfigCategory.mux, ApplyMode.apply_config)
+    mux_brutal_up_mbps = _IntConfigDscr(ConfigCategory.mux, ApplyMode.apply_config)
+    mux_brutal_down_mbps = _IntConfigDscr(ConfigCategory.mux, ApplyMode.apply_config)
+
+    http_ports = _StrConfigDscr(ConfigCategory.http, ApplyMode.apply_config)
+    kcp_ports = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config)
+    kcp_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config)
+    decoy_domain = _StrConfigDscr(ConfigCategory.general, ApplyMode.apply_config, hide_in_virtual_child=True)
     # will be deprecated
-    proxy_path = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply, hide_in_virtual_child=True)
-    proxy_path_admin = _StrConfigDscr(ConfigCategory.too_advanced, ApplyMode.apply, hide_in_virtual_child=True)
-    proxy_path_client = _StrConfigDscr(ConfigCategory.too_advanced, ApplyMode.apply, hide_in_virtual_child=True)
-    firewall = _BoolConfigDscr(ConfigCategory.general, ApplyMode.apply, hide_in_virtual_child=True)
-    netdata = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply)  # removed
+    proxy_path = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config, hide_in_virtual_child=True)
+    proxy_path_admin = _StrConfigDscr(ConfigCategory.too_advanced, ApplyMode.apply_config, hide_in_virtual_child=True)
+    proxy_path_client = _StrConfigDscr(ConfigCategory.too_advanced, ApplyMode.apply_config, hide_in_virtual_child=True)
+    firewall = _BoolConfigDscr(ConfigCategory.general, ApplyMode.apply_config, hide_in_virtual_child=True)
+    netdata = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.reinstall)  # removed
     http_proxy_enable = _BoolConfigDscr(ConfigCategory.http)
-    block_iran_sites = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply, hide_in_virtual_child=True)
-    allow_invalid_sni = _BoolConfigDscr(ConfigCategory.tls, ApplyMode.apply, hide_in_virtual_child=True)
-    auto_update = _BoolConfigDscr(ConfigCategory.general, ApplyMode.apply, True, hide_in_virtual_child=True)
-    speed_test = _BoolConfigDscr(ConfigCategory.general, ApplyMode.apply, hide_in_virtual_child=True)
-    only_ipv4 = _BoolConfigDscr(ConfigCategory.general, ApplyMode.apply, hide_in_virtual_child=True)
+    block_iran_sites = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply_config, hide_in_virtual_child=True)
+    allow_invalid_sni = _BoolConfigDscr(ConfigCategory.tls, ApplyMode.apply_config, hide_in_virtual_child=True)
+    auto_update = _BoolConfigDscr(ConfigCategory.general, ApplyMode.apply_config, True, hide_in_virtual_child=True)
+    speed_test = _BoolConfigDscr(ConfigCategory.general, ApplyMode.reinstall, hide_in_virtual_child=True)
+    only_ipv4 = _BoolConfigDscr(ConfigCategory.general, ApplyMode.apply_config, hide_in_virtual_child=True)
 
-    shared_secret = _StrConfigDscr(ConfigCategory.proxies, ApplyMode.apply, hide_in_virtual_child=True)
+    shared_secret = _StrConfigDscr(ConfigCategory.proxies, ApplyMode.apply_config, hide_in_virtual_child=True)
 
-    telegram_enable = _BoolConfigDscr(ConfigCategory.telegram, ApplyMode.restart)
+    telegram_enable = _BoolConfigDscr(ConfigCategory.telegram, ApplyMode.reinstall)
     # telegram_secret=auto()
-    telegram_adtag = _StrConfigDscr(ConfigCategory.telegram, ApplyMode.restart, hide_in_virtual_child=True)
-    telegram_lib = _StrConfigDscr(ConfigCategory.telegram, ApplyMode.restart, hide_in_virtual_child=True)
-    telegram_fakedomain = _StrConfigDscr(ConfigCategory.telegram, ApplyMode.restart, hide_in_virtual_child=True)
+    telegram_adtag = _StrConfigDscr(ConfigCategory.telegram, ApplyMode.reinstall, hide_in_virtual_child=True)
+    telegram_lib = _StrConfigDscr(ConfigCategory.telegram, ApplyMode.reinstall, hide_in_virtual_child=True)
+    telegram_fakedomain = _StrConfigDscr(ConfigCategory.telegram, ApplyMode.reinstall, hide_in_virtual_child=True)
 
-    v2ray_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply)
-    torrent_block = _BoolConfigDscr(ConfigCategory.general, ApplyMode.apply)
+    v2ray_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.reinstall)
+    torrent_block = _BoolConfigDscr(ConfigCategory.general, ApplyMode.apply_config)
 
-    tuic_enable = _BoolConfigDscr(ConfigCategory.tuic, ApplyMode.apply)
-    tuic_port = _StrConfigDscr(ConfigCategory.tuic, ApplyMode.apply, hide_in_virtual_child=True)
+    tuic_enable = _BoolConfigDscr(ConfigCategory.tuic, ApplyMode.apply_config)
+    tuic_port = _StrConfigDscr(ConfigCategory.tuic, ApplyMode.apply_config, hide_in_virtual_child=True)
 
     # the hysteria is refereing to hysteria2
-    hysteria_enable = _BoolConfigDscr(ConfigCategory.hysteria, ApplyMode.apply)
-    hysteria_port = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply, hide_in_virtual_child=True)
+    hysteria_enable = _BoolConfigDscr(ConfigCategory.hysteria, ApplyMode.apply_config)
+    hysteria_port = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config, hide_in_virtual_child=True)
     # if be enable hysteria2 will be use salamander as obfs
-    hysteria_obfs_enable = _BoolConfigDscr(ConfigCategory.hysteria, ApplyMode.apply)
-    hysteria_up_mbps = _StrConfigDscr(ConfigCategory.hysteria, ApplyMode.apply)
-    hysteria_down_mbps = _StrConfigDscr(ConfigCategory.hysteria, ApplyMode.apply)
-
-    shadowsocks2022_enable = _BoolConfigDscr(ConfigCategory.shadowsocks, ApplyMode.apply)
-    shadowsocks2022_method = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply)
-    shadowsocks2022_port = _StrConfigDscr(ConfigCategory.shadowsocks, ApplyMode.apply)
-    ssfaketls_enable = _BoolConfigDscr(ConfigCategory.shadowsocks, ApplyMode.restart)
-    ssfaketls_fakedomain = _StrConfigDscr(ConfigCategory.shadowsocks, ApplyMode.apply, hide_in_virtual_child=True)
-    shadowtls_enable = _BoolConfigDscr(ConfigCategory.shadowsocks, ApplyMode.apply)
-    shadowtls_fakedomain = _StrConfigDscr(ConfigCategory.shadowsocks, ApplyMode.apply, hide_in_virtual_child=True)
-
-    ssr_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply)
+    hysteria_obfs_enable = _BoolConfigDscr(ConfigCategory.hysteria, ApplyMode.apply_config)
+    hysteria_up_mbps = _StrConfigDscr(ConfigCategory.hysteria, ApplyMode.apply_config)
+    hysteria_down_mbps = _StrConfigDscr(ConfigCategory.hysteria, ApplyMode.apply_config)
+
+    shadowsocks2022_enable = _BoolConfigDscr(ConfigCategory.shadowsocks, ApplyMode.apply_config)
+    shadowsocks2022_method = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config)
+    shadowsocks2022_port = _StrConfigDscr(ConfigCategory.shadowsocks, ApplyMode.apply_config)
+    ssfaketls_enable = _BoolConfigDscr(ConfigCategory.shadowsocks, ApplyMode.reinstall)
+    ssfaketls_fakedomain = _StrConfigDscr(ConfigCategory.shadowsocks, ApplyMode.apply_config, hide_in_virtual_child=True)
+    shadowtls_enable = _BoolConfigDscr(ConfigCategory.shadowsocks, ApplyMode.apply_config)
+    shadowtls_fakedomain = _StrConfigDscr(ConfigCategory.shadowsocks, ApplyMode.apply_config, hide_in_virtual_child=True)
+
+    ssr_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config)
     # ssr_secret="ssr_secret"
-    ssr_fakedomain = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply)
+    ssr_fakedomain = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config)
 
-    vmess_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply)
+    vmess_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply_config)
     domain_fronting_domain = _StrConfigDscr(ConfigCategory.hidden)  # removed
-    domain_fronting_http_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply)  # removed
-    domain_fronting_tls_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply)  # removed
-
-    ws_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply)
-    grpc_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply)
-    httpupgrade_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply)
-    vless_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply)
-    trojan_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply)
-    reality_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply)
-    tcp_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply)
-    quic_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply)
-    xtls_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply)
-    h2_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply)
-
-    db_version = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply)
-    last_priodic_usage_check = _IntConfigDscr(ConfigCategory.hidden, ApplyMode.apply)
+    domain_fronting_http_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config)  # removed
+    domain_fronting_tls_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config)  # removed
+
+    ws_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply_config)
+    grpc_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply_config)
+    httpupgrade_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply_config)
+    splithttp_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply_config)
+
+    vless_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply_config)
+    trojan_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply_config)
+    reality_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply_config)
+    tcp_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply_config)
+    quic_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config)
+    xtls_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config)
+    h2_enable = _BoolConfigDscr(ConfigCategory.proxies, ApplyMode.apply_config)
+
+    db_version = _StrConfigDscr(ConfigCategory.hidden)
+    last_priodic_usage_check = _IntConfigDscr(ConfigCategory.hidden)
 
     branding_title = _StrConfigDscr(ConfigCategory.branding)
     branding_site = _StrConfigDscr(ConfigCategory.branding)
     branding_freetext = _StrConfigDscr(ConfigCategory.branding)
     not_found = _StrConfigDscr(ConfigCategory.hidden)
-    path_vmess = _StrConfigDscr(ConfigCategory.too_advanced, hide_in_virtual_child=True)
-    path_vless = _StrConfigDscr(ConfigCategory.too_advanced, hide_in_virtual_child=True)
-    path_trojan = _StrConfigDscr(ConfigCategory.too_advanced, hide_in_virtual_child=True)
-    path_v2ray = _StrConfigDscr(ConfigCategory.hidden, hide_in_virtual_child=True)  # deprecated
-    path_ss = _StrConfigDscr(ConfigCategory.hidden, hide_in_virtual_child=True)
-
-    path_httpupgrade = _StrConfigDscr(ConfigCategory.too_advanced, hide_in_virtual_child=True)
-    path_ws = _StrConfigDscr(ConfigCategory.too_advanced, hide_in_virtual_child=True)
-    path_tcp = _StrConfigDscr(ConfigCategory.too_advanced, hide_in_virtual_child=True)
-    path_grpc = _StrConfigDscr(ConfigCategory.too_advanced, hide_in_virtual_child=True)
+    path_vmess = _StrConfigDscr(ConfigCategory.too_advanced, ApplyMode.apply_config, hide_in_virtual_child=True)
+    path_vless = _StrConfigDscr(ConfigCategory.too_advanced, ApplyMode.apply_config, hide_in_virtual_child=True)
+    path_trojan = _StrConfigDscr(ConfigCategory.too_advanced, ApplyMode.apply_config, hide_in_virtual_child=True)
+    path_v2ray = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config, hide_in_virtual_child=True)  # deprecated
+    path_ss = _StrConfigDscr(ConfigCategory.hidden, ApplyMode.apply_config, hide_in_virtual_child=True)
+
+    path_splithttp = _StrConfigDscr(ConfigCategory.too_advanced, ApplyMode.apply_config, hide_in_virtual_child=True)
+    path_httpupgrade = _StrConfigDscr(ConfigCategory.too_advanced, ApplyMode.apply_config, hide_in_virtual_child=True)
+    path_ws = _StrConfigDscr(ConfigCategory.too_advanced, ApplyMode.apply_config, hide_in_virtual_child=True)
+    path_tcp = _StrConfigDscr(ConfigCategory.too_advanced, ApplyMode.apply_config, hide_in_virtual_child=True)
+    path_grpc = _StrConfigDscr(ConfigCategory.too_advanced, ApplyMode.apply_config, hide_in_virtual_child=True)
 
     # subs
     sub_full_singbox_enable = _BoolConfigDscr(ConfigCategory.hidden)
@@ -274,7 +277,7 @@ class ConfigEnum(metaclass=FastEnum):
     sub_full_clash_enable = _BoolConfigDscr(ConfigCategory.hidden)
     sub_full_clash_meta_enable = _BoolConfigDscr(ConfigCategory.hidden)
 
-    hiddifycli_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.restart)
+    hiddifycli_enable = _BoolConfigDscr(ConfigCategory.hidden, ApplyMode.reinstall)
 
     @classmethod
     def __missing__(cls, value):

hiddifypanel/models/proxy.py

@@ -20,6 +20,7 @@ class ProxyTransport(StrEnum):
     tcp = auto()
     ssh = auto()
     httpupgrade = auto()
+    splithttp = auto()
     custom = auto()
     shadowsocks = auto()
 

hiddifypanel/panel/admin/Actions.py

@@ -108,7 +108,7 @@ class Actions(FlaskView):
         key = hutils.crypto.generate_x25519_keys()
         set_hconfig(ConfigEnum.reality_private_key, key['private_key'])
         set_hconfig(ConfigEnum.reality_public_key, key['public_key'])
-        hutils.flask.flash_config_success(restart_mode=ApplyMode.restart, domain_changed=False)
+        hutils.flask.flash_config_success(restart_mode=ApplyMode.apply_config, domain_changed=False)
         return redirect(hurl_for('admin.SettingAdmin:index'))
 
     @ login_required(roles={Role.super_admin})

hiddifypanel/panel/admin/DomainAdmin.py

@@ -195,6 +195,7 @@ class DomainAdmin(AdminLTEModelView):
             # raise ValidationError(_("You have to add your cloudflare api key to use this feature: "))
 
         dips = hutils.network.get_domain_ips(model.domain)
+        server_ips = [*ipv4_list, *ipv6_list]
         if model.sub_link_only:
             if not dips:
                 raise ValidationError(_("Domain can not be resolved! there is a problem in your domain"))  # type: ignore
@@ -203,7 +204,7 @@ class DomainAdmin(AdminLTEModelView):
                 raise ValidationError(_("Domain can not be resolved! there is a problem in your domain"))  # type: ignore
 
             domain_ip_is_same_as_panel = False
-            server_ips = [*ipv4_list, *ipv6_list]
+
             for mip in server_ips:
                 domain_ip_is_same_as_panel |= mip in dips
             server_ips_str = ', '.join(list(map(str, server_ips)))
@@ -275,7 +276,7 @@ class DomainAdmin(AdminLTEModelView):
         old_db_domain = Domain.by_domain(model.domain)
         if is_created or not old_db_domain or old_db_domain.mode != model.mode:
             # return hiddify.reinstall_action(complete_install=False, domain_changed=True)
-            hutils.flask.flash_config_success(restart_mode=ApplyMode.apply, domain_changed=True)
+            hutils.flask.flash_config_success(restart_mode=ApplyMode.apply_config, domain_changed=True)
 
     # def after_model_change(self,form, model, is_created):
     #     if model.show_domains.count==0:
@@ -289,7 +290,7 @@ class DomainAdmin(AdminLTEModelView):
                 hutils.flask.flash(_('cf-delete.failed'), 'warning')  # type: ignore
         model.showed_by_domains = []
         # db.session.commit()
-        hutils.flask.flash_config_success(restart_mode=ApplyMode.apply, domain_changed=True)
+        hutils.flask.flash_config_success(restart_mode=ApplyMode.apply_config, domain_changed=True)
 
     def after_model_delete(self, model):
         if hutils.node.is_child():

hiddifypanel/panel/admin/ProxyAdmin.py

@@ -60,7 +60,7 @@ class ProxyAdmin(FlaskView):
             hutils.proxy.get_proxies.invalidate_all()
             if hutils.node.is_child():
                 hutils.node.run_node_op_in_bg(hutils.node.child.sync_with_parent, *[hutils.node.child.SyncFields.proxies])
-            hutils.flask.flash_config_success(restart_mode=ApplyMode.apply, domain_changed=False)
+            hutils.flask.flash_config_success(restart_mode=ApplyMode.apply_config, domain_changed=False)
             global_config_form = get_global_config_form(True)
         else:
             hutils.flask.flash((_('config.validation-error')), 'danger')

hiddifypanel/panel/admin/SettingAdmin.py

@@ -214,8 +214,8 @@ def get_config_form():
                     description=_(f"config.{c.key}.description"),
                     default=hconfig(c.key))
             elif c.key == ConfigEnum.country:
-                field = wtf.SelectField(_(f"config.{c.key}.label"), choices=[("ir", _("Iran")), ("zh", _(
-                    "China")), ("other", _("Others"))], description=_(f"config.{c.key}.description"), default=hconfig(c.key))
+                field = wtf.SelectField(_(f"config.{c.key}.label"), choices=[
+                    ("ir", _("Iran")), ("zh", _("China")), ("ru", _("Russia")), ("other", _("Others"))], description=_(f"config.{c.key}.description"), default=hconfig(c.key))
             elif c.key == ConfigEnum.package_mode:
                 package_modes = [("release", _("Release")), ("beta", _("Beta"))]
                 if hconfig(c.key) == "develop":