#!/bin/bash
# 查为什么浏览器连不上 relay.xxmxxs.top。
set -u

HOST=relay.xxmxxs.top

echo "===== 1. 隧道服务 ====="
echo "  服务: $(systemctl is-active lanremote-tunnel)"
echo "  进程: $(pgrep -c -f 'cloudflared tunnel' || echo 0) 个"
echo "  已注册连接: $(grep -c 'Registered tunnel connection' /root/lanremote-relay/tunnel.log 2>/dev/null || echo 0)"
echo "  连接中断: $(grep -c 'Connection terminated' /root/lanremote-relay/tunnel.log 2>/dev/null || echo 0)"

echo
echo "===== 2. 日志最近 8 行 ====="
tail -8 /root/lanremote-relay/tunnel.log 2>/dev/null | sed 's/^/  /'

echo
echo "===== 3. 本地源站正常吗 ====="
echo "  /v1/health: HTTP $(timeout 10 curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:8080/v1/health)"
echo "  / (管理页):  HTTP $(timeout 10 curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:8080/)"

echo
echo "===== 4. DNS 解析 ====="
echo "  $HOST ->"
getent ahostsv4 "$HOST" | head -3 | sed 's/^/    /'
echo "  CNAME 链:"
timeout 8 python3 - <<'PY' 2>/dev/null || echo "    （查不了）"
import socket
try:
    print("    " + socket.gethostbyname("relay.xxmxxs.top"))
except Exception as exc:
    print(f"    解析失败: {exc}")
PY

echo
echo "===== 5. 不带 UA 访问（浏览器之外，模拟普通客户端）====="
for i in 1 2 3; do
    C=$(timeout 25 curl -4 -s -o /dev/null -w '%{http_code}' "https://$HOST/" 2>/dev/null)
    printf "    第 %d 次: HTTP %s\n" "$i" "${C:-超时}"
    sleep 2
done

echo
echo "===== 6. 带浏览器 UA 访问（模拟你的浏览器）====="
UA='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36'
for i in 1 2 3; do
    OUT=$(timeout 25 curl -4 -s -w '\n%{http_code}' -H "User-Agent: $UA" "https://$HOST/" 2>/dev/null)
    CODE=$(echo "$OUT" | tail -1)
    BODY=$(echo "$OUT" | head -c 80 | tr -d '\n')
    printf "    第 %d 次: HTTP %s  %s\n" "$i" "${CODE:-超时}" "$BODY"
    sleep 2
done

echo
echo "===== 7. 管理页内容对不对 ====="
UA='Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0'
BODY=$(timeout 25 curl -4 -s -H "User-Agent: $UA" "https://$HOST/" 2>/dev/null)
if echo "$BODY" | grep -q '管理密码\|登录'; then
    echo "  ✓ 拿到的是登录页"
elif echo "$BODY" | grep -q '中转服务器'; then
    echo "  ✓ 拿到的是管理页"
else
    echo "  内容开头: $(echo "$BODY" | head -c 120)"
fi

echo
echo "===== 8. 结论 ====="
C=$(timeout 25 curl -4 -s -o /dev/null -w '%{http_code}' "https://$HOST/" 2>/dev/null)
LOCAL=$(timeout 10 curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:8080/)
CONN=$(grep -c 'Registered tunnel connection' /root/lanremote-relay/tunnel.log 2>/dev/null || echo 0)
echo "  本地源站: $LOCAL    隧道路径: ${C:-超时}    已注册连接: $CONN"
if [ "$LOCAL" = "200" ] && [ "$C" != "200" ]; then
    echo "  -> 源站好的，隧道这一段不通"
    echo "     这条 4G 线路对 Cloudflare 边缘的 QUIC 丢包严重，"
    echo "     表现就是时好时坏。看门狗会在连续失败后重启隧道。"
fi