#!/bin/bash
set -euo pipefail

# 固定配置
SSH_USER="tu"
SSH_HOST="111.230.145.123"
SSH_PORT=22
SOCKS_PORT=1080

# 初始化SSH权限
mkdir -p ~/.ssh && chmod 700 ~/.ssh

# 生成密钥（存在则跳过）
[ ! -f ~/.ssh/id_rsa ] && ssh-keygen -t rsa -b 4096 -N "" -f ~/.ssh/id_rsa
chmod 600 ~/.ssh/id_rsa && chmod 644 ~/.ssh/id_rsa.pub

# 免密推送公钥（去重不重复）
PUB_KEY=$(cat ~/.ssh/id_rsa.pub)
ssh -p $SSH_PORT $SSH_USER@$SSH_HOST "
mkdir -p ~/.ssh && chmod 700 ~/.ssh
grep -q '$PUB_KEY' ~/.ssh/authorized_keys || echo '$PUB_KEY' >> ~/.ssh/authorized_keys
chmod 600 ~/.ssh/authorized_keys
"

# 安装保活工具
sudo apt update && sudo apt install -y autossh

killall autossh
autossh -M 20000 -f  -N -R 0.0.0.0:1491:127.0.0.1:22 -p ${SSH_PORT} ${SSH_USER}@${SSH_HOST}