hiddifypanel 10.70.8__py3-none-any.whl → 10.80.0__py3-none-any.whl

hiddifypanel/VERSION

@@ -1 +1 @@
-10.70.8
+10.80.0

hiddifypanel/VERSION.py

@@ -1,3 +1,6 @@
-__version__='10.70.8'
+import importlib.metadata
 from datetime import datetime
-__release_date__= datetime.strptime('2024-11-18','%Y-%m-%d')
+
+__version__ = importlib.metadata.version(__package__ or __name__)
+__release_time__= datetime.strptime('2024-12-15T04:01:06','%Y-%m-%dT%H:%M:%S')
+is_released_version=True

hiddifypanel/__init__.py

@@ -1,4 +1,8 @@
-from .VERSION import __version__, __release_date__
+from .VERSION import __version__, __release_time__,is_released_version
+
+from dotenv import load_dotenv
+load_dotenv("/opt/hiddify-manager/hiddify-panel/app.cfg")
+
 # from . import cache
 from . import Events
 from .base import create_app, create_app_wsgi

hiddifypanel/apps/asgi_app.py

@@ -0,0 +1,7 @@
+#!/opt/hiddify-manager/.venv/bin/python
+
+from hiddifypanel import create_app_wsgi
+from asgiref.wsgi import WsgiToAsgi
+
+app = create_app_wsgi()  # noqa
+asgi_app = WsgiToAsgi(app)

hiddifypanel/apps/celery_app.py

@@ -0,0 +1,3 @@
+from hiddifypanel.base import create_celery_app
+
+celery_app=create_celery_app()

hiddifypanel/apps/wsgi_app.py

@@ -0,0 +1,5 @@
+#!/opt/hiddify-manager/.venv/bin/python
+
+from hiddifypanel import create_app_wsgi
+
+app =  create_app_wsgi()  # noqa

hiddifypanel/auth.py

@@ -142,14 +142,19 @@ def get_account_by_uuid(uuid, is_admin):
     return AdminUser.by_uuid(f'{uuid}') if is_admin else User.by_uuid(f'{uuid}')
 
 
-def login_by_uuid(uuid, is_admin: bool):
+def login_by_uuid(uuid,password:str, is_admin: bool)->bool:
     account = get_account_by_uuid(uuid, is_admin)
     if not account:
         return False
+    if account.password!=password:
+        return False
     return login_user(account, force=True)
 
 
 def auth_before_request():
+    if ".webmanifest" in request.path:
+        return
+
     # print("before_request")
     account = None
 
@@ -160,7 +165,7 @@ def auth_before_request():
         # print("uuid", g.uuid, is_admin_path)
         account = get_account_by_uuid(g.uuid, is_admin_path)
         # print(account)
-        if not account:
+        if not account or account.password!="":
             return logout_redirect()
         if is_admin_path:
             next_url = request.url
@@ -230,7 +235,7 @@ def redirect_to_login():
         json_abort(403, 'Unathorized')
     # if g.user_agent['is_browser']:
     # return redirect(hurl_for('common_bp.LoginView:basic_0', force=1, next=request.path))
-    return redirect(hurl_for('common_bp.LoginView:index', force=1, next=request.path))
+    return redirect(hurl_for('common_bp.LoginView:index', force=1, next=request.path.replace(f'{g.uuid}/',''),user=g.uuid))
 
     # else:
     #     abort(401, "Unauthorized")

hiddifypanel/base.py

@@ -1,11 +1,7 @@
 from flask import request, g
 # from hiddifypanel.cache import cache
-from hiddifypanel.models import *
 
-import flask_bootstrap
-import hiddifypanel
-from flask_babel import Babel
-from flask_session import Session
+
 
 import datetime
 
@@ -13,135 +9,54 @@ from dotenv import dotenv_values
 import os
 import sys
 from apiflask import APIFlask
-from werkzeug.middleware.proxy_fix import ProxyFix
 from loguru import logger
-from hiddifypanel.panel.init_db import init_db
-
-
-def logger_dynamic_formatter(record) -> str:
-    fmt = '<green>{time:YYYY-MM-DD HH:mm:ss}</green> | <level>{level: <8}</level> | <cyan>{name}</cyan>:<cyan>{function}</cyan>:<cyan>{line}</cyan> - <level>{message}</level>'
-    if record['extra']:
-        fmt += ' | <level>{extra}</level>'
-    return fmt + '\n'
 
 
-def init_logger(app, cli):
-    # configure logger
-    logger.remove()
-    logger.add(sys.stderr if cli else sys.stdout, format=logger_dynamic_formatter, level=app.config['STDOUT_LOG_LEVEL'],
-               colorize=True, catch=True, enqueue=True, diagnose=False, backtrace=True)
-    logger.trace('Logger initiated :)')
-
-
-# TODO: refactor this function
+from dynaconf import FlaskDynaconf
 
 def create_app(*args, cli=False, **config):
 
     app = APIFlask(__name__, static_url_path="/<proxy_path>/static/", instance_relative_config=True, version='2.2.0', title="Hiddify API",
                    openapi_blueprint_url_prefix="/<proxy_path>/api", docs_ui='elements', json_errors=False, enable_openapi=not cli)
     # app = Flask(__name__, static_url_path="/<proxy_path>/static/", instance_relative_config=True)
-
-    if not cli:
-        from hiddifypanel.cache import redis_client
-        from hiddifypanel import auth
-        app.config["PREFERRED_URL_SCHEME"] = "https"
-        app.wsgi_app = ProxyFix(
-            app.wsgi_app, x_for=1, x_proto=1, x_host=1, x_prefix=1,
-        )
-        app.servers = {
-            'name': 'current',
-            'url': '',
-        }  # type: ignore
-        app.info = {
-            'description': 'Hiddify is a free and open source software. It is as it is.',
-            'termsOfService': 'https://hiddify.com',
-            'contact': {
-                'name': 'API Support',
-                'url': 'https://www.hiddify.com/support',
-                'email': 'panel@hiddify.com'
-            },
-            'license': {
-                'name': 'Creative Commons Zero v1.0 Universal',
-                'url': 'https://github.com/hiddify/Hiddify-Manager/blob/main/LICENSE'
-            }
-        }
-        # setup flask server-side session
-        # app.config['APPLICATION_ROOT'] = './'
-        # app.config['SESSION_COOKIE_DOMAIN'] = '/'
-        app.config['SESSION_TYPE'] = 'redis'
-        app.config['SESSION_REDIS'] = redis_client
-        app.config['SESSION_PERMANENT'] = True
-        app.config['PERMANENT_SESSION_LIFETIME'] = datetime.timedelta(days=10)
-        app.security_schemes = {  # equals to use config SECURITY_SCHEMES
-            'Hiddify-API-Key': {
-                'type': 'apiKey',
-                'in': 'header',
-                'name': 'Hiddify-API-Key',
-            }
-        }
-        Session(app)
-
-        app.jinja_env.line_statement_prefix = '%'
-        from hiddifypanel import hutils
-        app.jinja_env.filters['b64encode'] = hutils.encode.do_base_64
-        app.view_functions['admin.static'] = {}  # fix bug in apiflask
-        flask_bootstrap.Bootstrap4(app)
-
+    # app.asgi_app = WsgiToAsgi(app)
+    
     for c, v in dotenv_values(os.environ.get("HIDDIFY_CFG_PATH", 'app.cfg')).items():
         if v.isdecimal():
             v = int(v)
         else:
             v = True if v.lower() == "true" else (False if v.lower() == "false" else v)
-
         app.config[c] = v
-    init_logger(app, cli)
-    hiddifypanel.database.init_app(app)
-    with app.app_context():
-        init_db()
-        logger.add(app.config['HIDDIFY_CONFIG_PATH'] + "/log/system/panel.log", format=logger_dynamic_formatter, level=hconfig(ConfigEnum.log_level),
-                   colorize=True, catch=True, enqueue=True, diagnose=False, backtrace=True)
-
-    def get_locale():
-        # Put your logic here. Application can store locale in
-        # user profile, cookie, session, etc.
-        if "admin" in request.base_url:
-            g.locale = hconfig(ConfigEnum.admin_lang) or 'en'
-        else:
-            g.locale = auth.current_account.lang or hconfig(ConfigEnum.lang) or 'en'
-        return g.locale
-    app.jinja_env.globals['get_locale'] = get_locale
-    babel = Babel(app, locale_selector=get_locale)
-    if not cli:
-        hiddifypanel.panel.common.init_app(app)
-        hiddifypanel.panel.common_bp.init_app(app)
-
-        from hiddifypanel.panel import user, commercial, admin
-        admin.init_app(app)
-        user.init_app(app)
-        commercial.init_app(app)
+    dyn=FlaskDynaconf(app,settings_files=[os.environ.get("HIDDIFY_CFG_PATH", 'app.cfg')])
+
+    if cli:
+        app.config['EXTENSIONS']=[
+            # "hiddifypanel.cache:init_app",
+            "hiddifypanel.database:init_app",
+            "hiddifypanel.panel.hlogger:init_cli",
+            "hiddifypanel.panel.cli:init_app",
+            "hiddifypanel.celery:init_app",
+        ]
+    else:
+        app.config['EXTENSIONS']=[
+            # "hiddifypanel.cache:init_app",
+            "hiddifypanel.database:init_app",
+            "hiddifypanel.panel.hlogger:init_app",
+            "hiddifypanel.base_setup:init_app",
+            "hiddifypanel.panel.common:init_app",
+            "hiddifypanel.panel.common_bp:init_app",
+            "hiddifypanel.panel.admin:init_app",
+            "hiddifypanel.panel.user:init_app",
+            "hiddifypanel.panel.commercial:init_app",
+            "hiddifypanel.panel.node:init_app",
+            "hiddifypanel.celery:init_app",
+        ]
+    
+
 
     app.config.update(config)  # Override with passed config
-    # app.config['WTF_CSRF_CHECK_DEFAULT'] = False
-    app.config['WTF_CSRF_ENABLED'] = False
-    # app.config['BABEL_TRANSLATION_DIRECTORIES'] = '/workspace/Hiddify-Server/hiddify-panel/src/translations.i18n'
-
-    # from flask_wtf.csrf import CSRFProtect
-
-    # csrf = CSRFProtect(app)
-
-    # @app.before_request
-    # def check_csrf():
-    # if "/admin/user/" in request.base_url:
-    #     return
-    # if "/admin/domain/" in request.base_url:
-    #     return
-    # if "/admin/actions/" in request.base_url:
-    #     return
-    # if "/api/" in request.base_url:
-    #     return
-    # csrf.protect()
-
-    hiddifypanel.panel.cli.init_app(app)
+    
+    app.config.load_extensions("EXTENSIONS")
     return app
 
 
@@ -150,16 +65,18 @@ def create_app_wsgi(*args, **kwargs):
     # that doesn't allow **config
     # to be passed to create_app
     # https://github.com/pallets/flask/issues/4170
-    cli = ("hiddifypanel" in sys.argv[0]) or (sys.argv[1] in ["update-usage", "all-configs", "admin_links", "admin_path"])
+    cli = ("hiddifypanel" in sys.argv[0] ) or (sys.argv[1] in ["update-usage", "all-configs", "admin_links", "admin_path"])
+
     app = create_app(cli=cli)
     return app
 
 
-# def create_cli_app(*args, **kwargs):
-#     #     # workaround for Flask issue
-#     #     # that doesn't allow **config
-#     #     # to be passed to create_app
-#     #     # https://github.com/pallets/flask/issues/4170
-#     # print(kwargs)
-#     app = create_app(*args, cli=True, **kwargs)
-#     return app
+
+def create_celery_app():
+    #     # workaround for Flask issue
+    #     # that doesn't allow **config
+    #     # to be passed to create_app
+    #     # https://github.com/pallets/flask/issues/4170
+    # print(kwargs)
+    app = create_app(cli=True)
+    return app.extensions["celery"]

hiddifypanel/base_setup.py

@@ -0,0 +1,82 @@
+from flask import request, g
+import redis
+# from hiddifypanel.cache import cache
+from hiddifypanel.models import *
+
+import flask_bootstrap
+from flask_babel import Babel
+from flask_session import Session
+
+import datetime
+
+from dotenv import dotenv_values
+import os
+import sys
+from werkzeug.middleware.proxy_fix import ProxyFix
+from loguru import logger
+from sonora.wsgi import grpcWSGI
+
+
+
+def init_app(app):
+        from hiddifypanel import auth
+        app.config["PREFERRED_URL_SCHEME"] = "https"
+        app.wsgi_app = ProxyFix(
+            app.wsgi_app, x_for=1, x_proto=1, x_host=1, x_prefix=1,
+        )
+        
+
+        app.secret_key="asdsad"
+        app.servers = {
+            'name': 'current',
+            'url': '',
+        }  # type: ignore
+        app.info = {
+            'description': 'Hiddify is a free and open source software. It is as it is.',
+            'termsOfService': 'https://hiddify.com',
+            'contact': {
+                'name': 'API Support',
+                'url': 'https://www.hiddify.com/support',
+                'email': 'panel@hiddify.com'
+            },
+            'license': {
+                'name': 'Creative Commons Zero v1.0 Universal',
+                'url': 'https://github.com/hiddify/Hiddify-Manager/blob/main/LICENSE'
+            }
+        }
+        # setup flask server-side session
+        # app.config['APPLICATION_ROOT'] = './'
+        # app.config['SESSION_COOKIE_DOMAIN'] = '/'
+        
+
+        app.jinja_env.line_statement_prefix = '%'
+        from hiddifypanel import hutils
+        app.jinja_env.filters['b64encode'] = hutils.encode.do_base_64
+        app.view_functions['admin.static'] = {}  # fix bug in apiflask
+        flask_bootstrap.Bootstrap4(app)
+
+        def get_locale():
+            # Put your logic here. Application can store locale in
+            # user profile, cookie, session, etc.
+            if "admin" in request.base_url:
+                g.locale = hconfig(ConfigEnum.admin_lang) or 'en'
+            else:
+                g.locale = auth.current_account.lang or hconfig(ConfigEnum.lang) or 'en'
+            return g.locale
+        app.jinja_env.globals['get_locale'] = get_locale
+        babel = Babel(app, locale_selector=get_locale)
+        
+        app.config['SESSION_TYPE'] = 'redis'
+        
+        app.config['SESSION_REDIS'] = redis.from_url(os.environ['REDIS_URI_MAIN'])
+        app.config['SESSION_PERMANENT'] = True
+        app.config['PERMANENT_SESSION_LIFETIME'] = datetime.timedelta(days=10)
+        app.security_schemes = {  # equals to use config SECURITY_SCHEMES
+            'Hiddify-API-Key': {
+                'type': 'apiKey',
+                'in': 'header',
+                'name': 'Hiddify-API-Key',
+            }
+        }
+        Session(app)
+        app.wsgi_app = grpcWSGI(app.wsgi_app)

hiddifypanel/cache.py

@@ -1,10 +1,11 @@
+import os
 from redis_cache import RedisCache, chunks, compact_dump
 import redis
 from pickle import dumps, loads
 from loguru import logger
 
-redis_client = redis.from_url('unix:///opt/hiddify-manager/other/redis/run.sock?db=0')
-
+redis_client = redis.from_url(os.environ["REDIS_URI_MAIN"])
+# print(os.environ["REDIS_URI_MAIN"])
 
 class CustomRedisCache(RedisCache):
     def __init__(self, redis_client, prefix="rc", serializer=compact_dump, deserializer=loads, key_serializer=None, support_cluster=True, exception_handler=None):

hiddifypanel/celery.py

@@ -0,0 +1,45 @@
+from celery import Celery, Task
+from celery.schedules import crontab
+
+def init_app(app):
+    class FlaskTask(Task):
+        def __call__(self, *args: object, **kwargs: object) -> object:
+            with app.app_context():
+                return self.run(*args, **kwargs)
+
+    celery_app = Celery(app.name, task_cls=FlaskTask)
+    
+    celery_app.config_from_object(dict(
+        broker_url=app.config['REDIS_URI_MAIN'],
+        result_backend=app.config['REDIS_URI_MAIN'],
+        # task_ignore_result=True,
+    ))
+    app.extensions["celery"] = celery_app
+
+
+        # Calls test('hello') every 10 seconds.
+    from hiddifypanel.panel import usage
+    celery_app.add_periodic_task(60.0, usage.update_local_usage.s(), name='update usage')
+    # celery_app.conf.beat_schedule = {
+    # 'update_usage': {
+    #     'task': 'hiddifypanel.panel.usage.update_local_usage',
+    #     'schedule': 30.0, 
+
+    # },
+# }
+    from hiddifypanel.panel.cli import backup_task
+    celery_app.autodiscover_tasks()
+    # celery_app.add_periodic_task(30.0, backup_task.s(), name='backup task')
+    # celery_app.add_periodic_task(
+    #     crontab(hour="*/6", minute=30),
+    #     backup_task.delay(),
+    # )
+
+    celery_app.add_periodic_task(
+        crontab(hour="*/6", minute="0"),
+        backup_task.s(),
+        name="backup_task "
+    )
+    
+    celery_app.set_default()
+    return celery_app

hiddifypanel/database.py

@@ -6,6 +6,9 @@ import os
 from sqlalchemy import Row, text, Sequence
 
 
+
+
+
 db: SQLAlchemy = SQLAlchemy()
 db.UUID = UUIDType  # type: ignore
 
@@ -13,6 +16,10 @@ db.UUID = UUIDType  # type: ignore
 def init_app(app):
     app.config['SQLALCHEMY_TRACK_MODIFICATIONS'] = True
     db.init_app(app)
+    with app.app_context():
+        from hiddifypanel.panel.init_db import init_db
+        init_db()
+        
 
 
 def db_execute(query: str, return_val: bool = False, commit: bool = False, **params: dict):

hiddifypanel/drivers/ssh_liberty_bridge_api.py

@@ -1,3 +1,4 @@
+import os
 from .abstract_driver import DriverABS
 from hiddifypanel.models import *
 import redis
@@ -13,7 +14,7 @@ class SSHLibertyBridgeApi(DriverABS):
 
     def get_ssh_redis_client(self):
         if not hasattr(self, 'redis_client'):
-            self.redis_client = redis.from_url('unix:///opt/hiddify-manager/other/redis/run.sock?db=1', decode_responses=True)
+            self.redis_client = redis.from_url(os.environ.get("REDIS_URI_SSH",""), decode_responses=True)
 
         return self.redis_client
 

hiddifypanel/drivers/wireguard_api.py

@@ -13,7 +13,7 @@ USERS_USAGE = "wg:users-usage"
 class WireguardApi(DriverABS):
     def get_redis_client(self):
         if not hasattr(self, 'redis_client'):
-            self.redis_client = redis.from_url('unix:///opt/hiddify-manager/other/redis/run.sock?db=1')
+            self.redis_client = redis.from_url(os.environ.get("REDIS_URI_SSH",""))
 
         return self.redis_client
 

hiddifypanel/hutils/crypto.py

@@ -1,3 +1,4 @@
+import os
 import subprocess
 from cryptography.hazmat.primitives import serialization
 from cryptography.hazmat.primitives.asymmetric import x25519, ed25519
@@ -46,3 +47,29 @@ def generate_x25519_keys():
     priv_str = base64.urlsafe_b64encode(priv_bytes).decode()[:-1]
 
     return {'private_key': priv_str, 'public_key': pub_str}
+
+
+
+def generate_ssh_host_keys():
+    key_types = ["dsa", "ecdsa", "ed25519", "rsa"]
+    keys_dict = {}
+
+    # Generate and read keys
+    for key_type in key_types:
+        key_file = f"ssh_host_{key_type}_key"
+
+        subprocess.run([
+            "ssh-keygen", "-t", key_type,
+            "-f", key_file,
+            "-N", "" 
+        ], check=True)
+
+        keys_dict[key_type]={}
+        with open(key_file, "r") as f:
+            keys_dict[key_type]['pk'] = f.read()
+        with open(f"{key_file}.pub", "r") as f:
+            keys_dict[key_type]['pub'] = f.read()
+
+        os.remove(key_file)
+        os.remove(f"{key_file}.pub")  # Remove the public key if not needed
+    return keys_dict

hiddifypanel/hutils/flask.py

@@ -51,7 +51,7 @@ def hurl_for(endpoint, **values):
 def get_user_agent() -> dict:
     ua = __parse_user_agent(request.user_agent.string)
 
-    if ua.get('v', 1) < 7:
+    if ua.get('v', 1) < 9:
         __parse_user_agent.invalidate_all()  # type:ignore
         ua = __parse_user_agent(request.user_agent.string)
     return ua
@@ -65,13 +65,14 @@ def __parse_user_agent(ua: str) -> dict:
     # Example: SFA/1.8.0 (239; sing-box 1.8.0)
     # Example: SFA/1.7.0 (239; sing-box 1.7.0)
     # Example: HiddifyNext/0.13.6 (android) like ClashMeta v2ray sing-box
-
+    if ua=="v2rayNG/1.8.23": #temporary fix for xray sub in hiddifynext
+        ua="HiddifyNextX/3.0.0 (android) like ClashMeta v2ray sing-box"
     uaa = user_agents.parse(ua)
 
     match = re.search(ua_version_pattern, ua)
     generic_version = list(map(int, match.group(1).split('.'))) if match else [0, 0, 0]
     res = {}
-    res['v'] = 7
+    res['v'] = 9
     res["is_bot"] = uaa.is_bot
     res["is_browser"] = re.match('^Mozilla', ua, re.IGNORECASE) and True
     res['os'] = uaa.os.family
@@ -80,6 +81,7 @@ def __parse_user_agent(ua: str) -> dict:
     res['is_clash_meta'] = re.match('^(Clash-verge|Clash-?Meta|Stash|NekoBox|NekoRay|Pharos|hiddify-desktop)', ua, re.IGNORECASE) and True
     res['is_singbox'] = re.match('^(HiddifyNext|Dart|SFI|SFA)', ua, re.IGNORECASE) and True
     res['is_hiddify'] = re.match('^(HiddifyNext)', ua, re.IGNORECASE) and True
+    res['is_hiddify_prefere_xray'] = re.match('^(HiddifyNextX)', ua, re.IGNORECASE) and True
     res['is_streisand'] = re.match('^(Streisand)', ua, re.IGNORECASE) and True
     res['is_shadowrocket'] = re.match('^(Shadowrocket)', ua, re.IGNORECASE) and True
     res['is_v2rayng'] = re.match('^(v2rayNG)', ua, re.IGNORECASE) and True

hiddifypanel/hutils/network/cf_api.py

@@ -1,18 +1,18 @@
-import CloudFlare
+import cloudflare
 from hiddifypanel.models import hconfig, ConfigEnum
 
-__cf: CloudFlare.CloudFlare = ''  # type: ignore
+__cf: cloudflare.Cloudflare   # type: ignore
 
 
 def __prepare_cf_api_client() -> bool:
     '''Prepares cloudflare client if it's not already'''
     global __cf
-    if __cf and isinstance(__cf, CloudFlare.CloudFlare):
+    if __cf and isinstance(__cf, cloudflare.Cloudflare):
         return True
 
     if hconfig(ConfigEnum.cloudflare):
-        __cf = CloudFlare.CloudFlare(token=hconfig(ConfigEnum.cloudflare))
-        if __cf and isinstance(__cf, CloudFlare.CloudFlare):
+        __cf = cloudflare.Cloudflare(token=hconfig(ConfigEnum.cloudflare))
+        if __cf and isinstance(__cf, cloudflare.Cloudflare):
             return True
     return False
 

hiddifypanel/hutils/proxy/__init__.py

@@ -3,3 +3,4 @@ from . import xray
 from . import xrayjson
 from . import singbox
 from . import clash
+from . import wireguard

hiddifypanel/hutils/proxy/clash.py

@@ -33,7 +33,7 @@ def to_clash(proxy, meta_or_normal):
 
     if proxy['l3'] in ["kcp", ProxyL3.h3_quic]:
         return {'name': name, 'msg': f"clash does not support {proxy['l3']}", 'type': 'debug'}
-    if proxy['transport'] in [ProxyTransport.splithttp, ProxyTransport.httpupgrade]:
+    if proxy['transport'] in [ProxyTransport.xhttp, ProxyTransport.httpupgrade]:
         return {'name': name, 'msg': f"clash does not support {proxy['transport']}", 'type': 'debug'}
     # if proxy['proto'] in [Proxy.shado]:
 
@@ -44,7 +44,7 @@ def to_clash(proxy, meta_or_normal):
             return {'name': name, 'msg': f"clash does not support {proxy['proto']}", 'type': 'debug'}
         if proxy['proto'] in ["vless", 'tuic', 'hysteria2']:
             return {'name': name, 'msg': f"{proxy['proto']} not supported in clash", 'type': 'debug'}
-        if proxy['transport'] in ["shadowtls", "splithttp"]:
+        if proxy['transport'] in ["shadowtls", "xhttp"]:
             return {'name': name, 'msg': f"{proxy['transport']} not supported in clash", 'type': 'debug'}
     if proxy['l3'] == ProxyL3.tls_h2 and proxy['proto'] in [ProxyProto.vmess, ProxyProto.vless] and proxy['dbe'].cdn == ProxyCDN.direct:
         return {'name': name, 'msg': "bug tls_h2 vmess and vless in clash meta", 'type': 'warning'}
@@ -57,7 +57,7 @@ def to_clash(proxy, meta_or_normal):
     if proxy["proto"] == "ssh":
         base["username"] = proxy["uuid"]
         base["private-key"] = proxy['private_key']
-        base["host-key"] = proxy.get('host_key', [])
+        base["host-key"] = proxy.get('host_keys', [])
         return base
     base["udp"] = True
     if proxy["proto"] == ProxyProto.wireguard: