#!/bin/bash

# --- Script Menu Refresh Sistem dengan Auto-Scheduler & Status Checker (Versi Perbaikan) ---
# Nama: fresh
# Fungsi: Menu interaktif untuk merefresh CPU, RAM, Swap, penjadwalan, dan status
# Author: AI Assistant
# -------------------------------------------------------------------------

# Fungsi untuk menjalankan refresh otomatis (tanpa interaksi)
run_auto_refresh() {
    echo "$(date): Memulai auto-refresh..." >> /var/log/fresh-auto.log
    sync
    echo 3 > /proc/sys/vm/drop_caches
    swapoff -a
    swapon -a
    echo "$(date): Auto-refresh selesai." >> /var/log/fresh-auto.log
}

# Cek argumen --auto untuk mode otomatis
if [ "$1" == "--auto" ]; then
    run_auto_refresh
    exit 0
fi

# Cek apakah script dijalankan dengan sudo (untuk mode interaktif)
if [ "$(id -u)" -ne 0 ]; then
   echo -e "\e[31mError: Script ini harus dijalankan dengan hak akses root (sudo).\e[0m" >&2
   exit 1
fi

# Fungsi untuk menampilkan menu utama
tampilkan_menu() {
    clear
    echo -e "\e[36m========================================\e[0m"
    echo -e "\e[1;32m        MENU REFRESH SISTEM VPS       \e[0m"
    echo -e "\e[36m========================================\e[0m"
    echo "Pilih tindakan yang ingin dilakukan:"
    echo "1. Kelola Proses CPU (buka htop)"
    echo "2. Refresh RAM (Hapus Cache)"
    echo "3. Refresh Swap"
    echo "4. Refresh Semua (RAM + Swap)"
    echo "5. Lihat Status Memori Saat Ini"
    echo "6. Jadwalkan Auto Refresh"
    echo "7. Cek Status Auto Refresh"
    echo "0. Keluar"
    echo -e "\e[36m----------------------------------------\e[0m"
}

# Fungsi untuk menu penjadwalan
menu_scheduler() {
    while true; do
        clear
        echo -e "\e[36m========================================\e[0m"
        echo -e "\e[1;34m       MENU JADWAL AUTO REFRESH       \e[0m"
        echo -e "\e[36m========================================\e[0m"
        echo "Pilih interval waktu:"
        echo "1. Setiap 1 Jam"
        echo "2. Setiap 3 Jam"
        echo "3. Setiap 6 Jam"
        echo "4. Setiap 12 Jam"
        echo "5. Setiap 24 Jam (1 Hari)"
        echo "6. Setiap 1 Minggu"
        echo "7. Setiap 2 Minggu"
        echo "8. Setiap 1 Bulan"
        echo "9. Hapus Semua Jadwal"
        echo "0. Kembali ke Menu Utama"
        echo -e "\e[36m----------------------------------------\e[0m"
        read -p "Masukkan pilihan Anda: " pilihan_sched

        case $pilihan_sched in
            1) cron_interval="0 * * * *"; break ;; # Setiap jam penuh
            2) cron_interval="0 */3 * * *"; break ;; # Setiap 3 jam
            3) cron_interval="0 */6 * * *"; break ;; # Setiap 6 jam
            4) cron_interval="0 */12 * * *"; break ;; # Setiap 12 jam
            5) cron_interval="0 0 * * *"; break ;; # Setiap hari pukul 00:00
            6) cron_interval="0 0 * * 0"; break ;; # Setiap Minggu pukul 00:00
            7) cron_interval="0 0 */14 * *"; break ;; # Setiap 14 hari (2 minggu)
            8) cron_interval="0 0 1 * *"; break ;; # Setiap bulan pukul 00:00
            9)
                echo "Menghapus semua jadwal 'fresh --auto'..."
                # Hapus cron job dengan cara yang lebih aman
                crontab -l 2>/dev/null | grep -v "fresh --auto" | crontab -
                echo -e "\e[32mSemua jadwal berhasil dihapus.\e[0m"
                pause
                return
                ;;
            0) return ;;
            *) 
                echo -e "\e[31mPilihan tidak valid.\e[0m"
                pause
                ;;
        esac
    done

    # Validasi format cron
    if ! echo "$cron_interval" | grep -qE '^([0-5]?[0-9]|\*) [0-2]?[0-9] \* \* \*(|\*)$'; then
        echo -e "\e[31mFormat waktu tidak valid!\e[0m"
        pause
        return
    fi

    # Tambahkan cron job dengan metode yang lebih aman
    echo "Menambahkan jadwal baru ke crontab..."
    
    # Hapus cron job lama (jika ada) dan tambahkan yang baru
    (crontab -l 2>/dev/null | grep -v "fresh --auto") | crontab -
    echo "$cron_interval sudo /usr/local/bin/fresh --auto >> /var/log/fresh-auto.log 2>&1" | crontab -
    
    # Verifikasi apakah cron job berhasil ditambahkan
    if crontab -l 2>/dev/null | grep -q "fresh --auto"; then
        echo -e "\e[32mJadwal berhasil dibuat!\e[0m"
        echo "Log akan disimpan di /var/log/fresh-auto.log"
    else
        echo -e "\e[31mGagal membuat jadwal. Periksa format cron.\e[0m"
    fi
    
    pause
}

# Fungsi untuk mengecek status auto-refresh
cek_status_auto_refresh() {
    clear
    echo -e "\e[36m========================================\e[0m"
    echo -e "\e[1;35m       STATUS AUTO REFRESH            \e[0m"
    echo -e "\e[36m========================================\e[0m"
    
    # Cek cron job dengan pengecekan yang lebih akurat
    if crontab -l 2>/dev/null | grep -q "fresh --auto.*>> /var/log/fresh-auto.log"; then
        echo -e "\e[32mStatus: AKTIF\e[0m"
        echo ""
        echo "Jadwal yang sedang berjalan:"
        crontab -l 2>/dev/null | grep --color=auto "fresh --auto"
    else
        echo -e "\e[31mStatus: TIDAK AKTIF\e[0m"
        echo ""
        echo "Tidak ada jadwal auto-refresh yang ditemukan."
    fi
    echo ""
    echo -e "\e[33mLog dapat dilihat di: /var/log/fresh-auto.log\e[0m"
    echo -e "\e[36m----------------------------------------\e[0m"
    pause
}

# Fungsi untuk pause
pause() {
    read -p "Tekan [Enter] untuk melanjutkan..."
}

# Loop utama program
while true; do
    tampilkan_menu
    read -p "Masukkan pilihan Anda [1-7] atau 0 untuk keluar: " pilihan

    case $pilihan in
        1)
            echo -e "\e[33mMembuka htop untuk mengelola proses CPU...\e[0m"
            pause
            htop
            ;;
        2)
            echo -e "\e[33mMembersihkan cache RAM...\e[0m"
            sync && echo 3 > /proc/sys/vm/drop_caches
            echo -e "\e[32mCache RAM berhasil dibersihkan.\e[0m"
            pause
            ;;
        3)
            echo -e "\e[31mPERINGATAN: Pastikan RAM Anda mencukupi!\e[0m"
            free -h
            read -p "Apakah Anda yakin ingin melanjutkan? (y/n) " konfirmasi
            if [[ $konfirmasi =~ ^[Yy]$ ]]; then
                swapoff -a && swapon -a
                echo -e "\e[32mSwap berhasil direfresh.\e[0m"
            else
                echo "Operasi dibatalkan."
            fi
            pause
            ;;
        4)
            echo -e "\e[31mPERINGATAN: Ini akan membersihkan cache RAM dan merefresh Swap.\e[0m"
            free -h
            read -p "Apakah Anda yakin ingin melanjutkan? (y/n) " konfirmasi
            if [[ $konfirmasi =~ ^[Yy]$ ]]; then
                run_auto_refresh
                echo -e "\e[32mSemua proses refresh selesai!\e[0m"
            else
                echo "Operasi dibatalkan."
            fi
            pause
            ;;
        5)
            echo -e "\e[33mStatus Memori Saat Ini:\e[0m"
            free -h
            echo ""
            echo -e "\e[33mPenggunaan Swap:\e[0m"
            swapon --show
            pause
            ;;
        6)
            menu_scheduler
            ;;
        7)
            cek_status_auto_refresh
            ;;
        0)
            echo -e "\e[32mTerima kasih! Sampai jumpa.\e[0m"
            exit 0
            ;;
        *)
            echo -e "\e[31mPilihan tidak valid, silakan coba lagi.\e[0m"
            pause
            ;;
    esac
done

#!/bin/bash

# =================================================================
# --- KONFIGURASI PATH ---
# =================================================================
FLAG_FILE="/opt/udp-proxy/log/enforcer.enabled"
STATE_FILE="/opt/udp-proxy/log/enforcer_state.log"
BANDWIDTH_LOG="/opt/udp-proxy/log/bandwidth_usage.log"
DAILY_LEDGER="/opt/udp-proxy/log/bw_daily_ledger.log"
DAILY_LOG_DIR="/opt/udp-proxy/log/daily"
IPTABLES_CHAIN="UDP_ENFORCER"
BANDWIDTH_CHAIN="UDP_BW_COUNTER"
SERVICE_NAME="udp-enforcer.service"

# Warna untuk tampilan
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
CYAN='\033[0;36m'
NC='\033[0m' # No Color
BOLD='\033[1m'

# =================================================================
# --- FUNGSI HELPER ---
# =================================================================
get_status_icon() {
    if sudo systemctl is-active --quiet "$SERVICE_NAME" 2>/dev/null; then
        echo -e "${GREEN}[AKTIF]${NC}"
    else
        echo -e "${RED}[NONAKTIF]${NC}"
    fi
}

get_blocked_count() {
    # COLUMNS=9999 mencegah wrapping, dan hilangkan || echo "0" karena grep -c sudah default 0
    COLUMNS=9999 sudo iptables -L "$IPTABLES_CHAIN" -n -v 2>/dev/null | grep -c "DROP"
}

get_online_count() {
    if [ -f "$STATE_FILE" ]; then
        grep -c ":" "$STATE_FILE" 2>/dev/null || echo "0"
    else
        echo "0"
    fi
}

# =================================================================
# --- FUNGSI MENU ---
# =================================================================
show_menu() {
    clear
    local status_icon=$(get_status_icon)
    local blocked_count=$(get_blocked_count)
    local online_count=$(get_online_count)
    
    echo -e "${CYAN}==========================================${NC}"
    echo -e "${BOLD}     PANEL PENJAGA UDP - HUNTER${NC}"
    echo -e "${CYAN}==========================================${NC}"
    echo -e " Status Layanan : $status_icon"
    echo -e " User Online    : ${GREEN}$online_count${NC}"
    echo -e " IP Diblokir    : ${RED}$blocked_count${NC}"
    echo -e "${CYAN}==========================================${NC}"
    echo " 1. Aktifkan Penjaga UDP"
    echo " 2. Nonaktifkan Penjaga UDP"
    echo " 3. Restart Penjaga UDP"
    echo -e "${CYAN}------------------------------------------${NC}"
    echo " 4. Lihat Status Detail"
    echo " 5. Pantau Log Aktivitas (Live)"
    echo -e "${CYAN}------------------------------------------${NC}"
    echo " 6. Lihat User Sedang Online"
    echo " 7. Lihat IP yang Diblokir (+User)"
    echo " 8. Bersihkan Semua IP Diblokir"
    echo -e "${CYAN}------------------------------------------${NC}"
    echo " 9. Monitor Bandwidth (5 mnt & 1 Jam)"
    echo "10. Daftar User Hari Ini (24 Jam)"
    echo "11. Lihat Riwayat Laporan"
    echo -e "${CYAN}------------------------------------------${NC}"
    echo "12. Reset Data Bandwidth Hari Ini"
    echo "13. Keluar"
    echo -e "${CYAN}==========================================${NC}"
}

# =================================================================
# --- MENU 1: AKTIFKAN ---
# =================================================================
menu_enable() {
    echo -e "${YELLOW}>> Mengaktifkan Penjaga...${NC}"
    
    if [ -f "/opt/udp-proxy/panel/enable.sh" ]; then
        sudo /opt/udp-proxy/panel/enable.sh
    else
        mkdir -p "$(dirname "$FLAG_FILE")"
        touch "$FLAG_FILE"
        sudo systemctl start "$SERVICE_NAME" 2>/dev/null
        sudo systemctl enable "$SERVICE_NAME" 2>/dev/null
        echo -e "${GREEN}>> Penjaga telah diaktifkan (manual)${NC}"
    fi
    
    sleep 1
}

# =================================================================
# --- MENU 2: NONAKTIFKAN ---
# =================================================================
menu_disable() {
    echo -e "${YELLOW}>> Menonaktifkan Penjaga...${NC}"
    
    if [ -f "/opt/udp-proxy/panel/disable.sh" ]; then
        sudo /opt/udp-proxy/panel/disable.sh
    else
        rm -f "$FLAG_FILE"
        sudo systemctl stop "$SERVICE_NAME" 2>/dev/null
        echo -e "${GREEN}>> Penjaga telah dinonaktifkan (manual)${NC}"
    fi
    
    sleep 1
}

# =================================================================
# --- MENU 3: RESTART ---
# =================================================================
menu_restart() {
    echo -e "${YELLOW}>> Merestart Penjaga...${NC}"
    sudo systemctl restart "$SERVICE_NAME"
    sleep 2
    if sudo systemctl is-active --quiet "$SERVICE_NAME"; then
        echo -e "${GREEN}>> Penjaga berhasil direstart${NC}"
    else
        echo -e "${RED}>> Gagal merestart penjaga! Cek log untuk detail.${NC}"
    fi
}

# =================================================================
# --- MENU 4: STATUS DETAIL ---
# =================================================================
menu_status() {
    echo -e "${CYAN}>> Status Detail Layanan Penjaga:${NC}"
    echo "=============================================="
    sudo systemctl status "$SERVICE_NAME" --no-pager -l
    echo ""
    echo "=============================================="
    echo -e "${CYAN}>> Status Chain IPTables:${NC}"
    echo "--- Chain UDP_ENFORCER (Blokir) ---"
    # Gunakan COLUMNS=9999 agar komentar tidak terputus ke baris baru
    COLUMNS=9999 sudo iptables -L "$IPTABLES_CHAIN" -n -v --line-numbers 2>/dev/null | head -20
    echo ""
    echo "--- Chain UDP_BW_COUNTER (Bandwidth) ---"
    local bw_rules=$(sudo iptables -L "$BANDWIDTH_CHAIN" -n 2>/dev/null | grep -c "user:")
    echo "Jumlah aturan counter: $bw_rules"
    echo "=============================================="
}

# =================================================================
# --- MENU 5: LIVE LOG ---
# =================================================================
menu_live_log() {
    echo -e "${CYAN}>> Menampilkan log aktivitas (tekan Ctrl+C untuk kembali)${NC}"
    echo "=============================================="
    sudo journalctl -u "$SERVICE_NAME" -f --no-tail
}

# =================================================================
# --- MENU 6: USER ONLINE ---
# =================================================================
menu_online_users() {
    echo -e "${CYAN}>> Daftar User Sedang Online:${NC}"
    echo "=============================================="
    
    if [ -f "$STATE_FILE" ] && [ -s "$STATE_FILE" ]; then
        local current_time=$(date +%s)
        printf "%-15s %-18s %15s %12s\n" "USER" "IP" "DURASI" "STATUS"
        echo "----------------------------------------------"
        
        while IFS=':' read -r user ip last_seen violation_time; do
            if [[ -z "$user" || -z "$ip" || -z "$last_seen" ]]; then continue; fi
            
            local elapsed=$((current_time - last_seen))
            local hours=$((elapsed / 3600))
            local mins=$(((elapsed % 3600) / 60))
            local duration=""
            
            if [ "$hours" -gt 0 ]; then
                duration="${hours}j ${mins}m"
            else
                duration="${mins}m"
            fi
            
            local status="Normal"
            if [[ -n "$violation_time" && "$violation_time" =~ ^[0-9]+$ ]]; then
                status="${RED}Pelanggaran${NC}"
            fi
            
            printf "%-15s %-18s %15s %12s\n" "$user" "$ip" "$duration" "$status"
        done < "$STATE_FILE"
    else
        echo -e "${YELLOW}>> Tidak ada user yang sedang online.${NC}"
    fi
    echo "=============================================="
}

# =================================================================
# --- MENU 7: IP DIBLOKIR (+ USER) ---
# =================================================================
menu_blocked_ips() {
    echo -e "${CYAN}>> Daftar IP yang Saat Ini Diblokir:${NC}"
    echo "=============================================================="
    
    # COLUMNS=9999 mencegah komentar iptables terputus ke baris baru
    local rules=$(COLUMNS=9999 sudo iptables -L "$IPTABLES_CHAIN" -n -v --line-numbers 2>/dev/null)
    
    if [ -z "$rules" ]; then
        echo -e "${YELLOW}>> Chain iptables tidak ditemukan atau kosong.${NC}"
        echo "=============================================================="
        return
    fi
    
    # Hapus || echo "0" karena grep -c sudah otomatis mengembalikan 0
    # Hapus tanda ^ pada "^DROP" karena baris dimulai dari angka urutan
    local drop_count=$(echo "$rules" | grep -c "DROP")
    
    if [ "$drop_count" -eq 0 ]; then
        echo -e "${GREEN}>> Tidak ada IP yang diblokir saat ini.${NC}"
    else
        printf "%-6s %-18s %-15s %-30s\n" "NO" "IP" "PACKETS" "KOMENTAR"
        echo "--------------------------------------------------------------"
        echo "$rules" | grep "DROP" | while read -r num pkts bytes target prot opt in out source dest extra; do
            local ip="$source"
            local comment=$(echo "$extra" | grep -oP 'Kicked \K[^ ]+' 2>/dev/null || echo "-")
            local waktu=$(echo "$extra" | grep -oP 'on \K[0-9-]+-[0-9:]+' 2>/dev/null || echo "-")
            printf "%-6s %-18s %-15s User: %-15s Waktu: %s\n" "$num" "$ip" "$pkts" "$comment" "$waktu"
        done
    fi
    echo "=============================================================="
    echo -e "Total: ${RED}$drop_count IP${NC} diblokir"
}

# =================================================================
# --- MENU 8: BERSIHKAN BLOKIR ---
# =================================================================
menu_clear_blocked() {
    local drop_count=$(get_blocked_count)
    
    if [ "$drop_count" -eq 0 ]; then
        echo -e "${GREEN}>> Tidak ada IP yang perlu dibersihkan.${NC}"
        return
    fi
    
    echo -e "${RED}==============================================${NC}"
    echo -e "${RED}PERINGATAN!${NC}"
    echo -e "Anda akan membersihkan ${BOLD}$drop_count IP${NC} yang diblokir."
    echo -e "Ini juga akan membersihkan file state dan lock."
    echo -e "${RED}==============================================${NC}"
    
    read -p "Yakin ingin melanjutkan? (y/N): " confirm
    
    if [[ "$confirm" =~ ^[Yy]$ ]]; then
        echo -e "${YELLOW}>> Membersihkan aturan iptables...${NC}"
        sudo iptables -F "$IPTABLES_CHAIN" 2>/dev/null
        
        echo -e "${YELLOW}>> Membersihkan state file...${NC}"
        > "$STATE_FILE"
        
        echo -e "${YELLOW}>> Membersihkan lock files...${NC}"
        rm -f /opt/udp-proxy/log/*.lock
        
        echo -e "${GREEN}>> Berhasil! Semua IP telah dibebaskan.${NC}"
    else
        echo -e "${YELLOW}>> Dibatalkan.${NC}"
    fi
}

# =================================================================
# --- MENU 9: MONITOR BANDWIDTH ---
# =================================================================
menu_bandwidth() {
    echo -e "${CYAN}>> Laporan Bandwidth Akumulasi Per User:${NC}"
    echo "--------------------------------------------------------------"
    
    if [ -f "$BANDWIDTH_LOG" ] && [ -s "$BANDWIDTH_LOG" ]; then
        cat "$BANDWIDTH_LOG"
        echo "--------------------------------------------------------------"
        echo -e "${YELLOW}Catatan:${NC}"
        echo "- Data 5 menit: Pemakaian dalam 5 menit terakhir"
        echo "- Data 1 jam: Pemakaian dalam 1 jam terakhir"
        echo "- Avg Mbps: Rata-rata kecepatan dari data 5 menit"
        echo "- User offline > 1 jam akan otomatis hilang dari sini"
        echo ""
        echo -e "${GREEN}Gunakan Menu 10 untuk melihat total harian yang TIDAK PERNAH HILANG.${NC}"
    else
        echo -e "${YELLOW}>> File log bandwidth belum tersedia atau kosong.${NC}"
        echo ">> Tunggu beberapa menit setelah user online."
    fi
    echo "--------------------------------------------------------------"
}

# =================================================================
# --- MENU 10: DAFTAR USER HARI INI ---
# =================================================================
menu_daily_users() {
    echo -e "${CYAN}>> Daftar Total Pemakaian Semua User (Hari Ini)${NC}"
    echo "--------------------------------------------------------------"
    
    if [ -f "$DAILY_LEDGER" ] && [ -s "$DAILY_LEDGER" ]; then
        local total_bytes=$(awk -F':' '{sum+=$2} END {print sum}' "$DAILY_LEDGER")
        local total_mb=$(echo "scale=2; $total_bytes / 1048576" | bc 2>/dev/null || echo "0.00")
        local user_count=$(wc -l < "$DAILY_LEDGER")
        
        printf "%-15s %18s %12s\n" "USER" "TOTAL HARI INI (MB)" "PERSEN"
        echo "--------------------------------------------------------------"
        awk -F':' -v total="$total_bytes" '{
            mb = $2/1048576;
            pct = ($2/total)*100;
            printf "%-15s %18.2f MB %10.1f%%\n", $1, mb, pct
        }' "$DAILY_LEDGER" | sort -k2 -rn
        echo "--------------------------------------------------------------"
        echo -e "Total: ${BOLD}$total_mb MB${NC} dari ${BOLD}$user_count user${NC}"
        echo "--------------------------------------------------------------"
        echo -e "${YELLOW}* Semua user yang pernah terhubung hari ini tetap ada${NC}"
        echo -e "${YELLOW}* Daftar ini direset otomatis tepat jam 00:00 malam${NC}"
    else
        echo -e "${YELLOW}>> Belum ada user yang terhubung hari ini.${NC}"
    fi
}

# =================================================================
# --- MENU 11: RIWAYAT LAPORAN ---
# =================================================================
menu_history() {
    echo -e "${CYAN}>> Riwayat Laporan Harian${NC}"
    echo "--------------------------------------------------------------"
    
    if [ -d "$DAILY_LOG_DIR" ] && ls "$DAILY_LOG_DIR"/*.log 1>/dev/null 2>&1; then
        echo "Tanggal yang tersedia:"
        echo "--------------------------------------------------------------"
        ls -1 "$DAILY_LOG_DIR"/*.log 2>/dev/null | while read -r file; do
            local date_name=$(basename "$file" .log)
            local size=$(du -h "$file" | cut -f1)
            local user_count=$(wc -l < "$file")
            echo "  - $date_name ($size, $user_count user)"
        done
        echo "--------------------------------------------------------------"
    else
        echo -e "${YELLOW}>> Belum ada riwayat laporan tersimpan.${NC}"
        return
    fi
    
    echo ""
    read -p "Masukkan tanggal (Format: YYYY-MM-DD) atau tekan Enter untuk batal: " req_date
    
    if [[ "$req_date" =~ ^[0-9]{4}-[0-9]{2}-[0-9]{2}$ ]]; then
        local hist_file="$DAILY_LOG_DIR/${req_date}.log"
        
        if [ -f "$hist_file" ] && [ -s "$hist_file" ]; then
            local total_bytes=$(awk -F':' '{sum+=$2} END {print sum}' "$hist_file")
            local total_mb=$(echo "scale=2; $total_bytes / 1048576" | bc 2>/dev/null || echo "0.00")
            
            echo ""
            echo -e "${CYAN}>> Laporan Total Semua User Pada Tanggal: $req_date${NC}"
            echo "--------------------------------------------------------------"
            printf "%-15s %18s %12s\n" "USER" "TOTAL (MB)" "PERSEN"
            echo "--------------------------------------------------------------"
            awk -F':' -v total="$total_bytes" '{
                mb = $2/1048576;
                pct = ($2/total)*100;
                printf "%-15s %18.2f MB %10.1f%%\n", $1, mb, pct
            }' "$hist_file" | sort -k2 -rn
            echo "--------------------------------------------------------------"
            echo -e "Total hari itu: ${BOLD}$total_mb MB${NC}"
            echo "--------------------------------------------------------------"
        else
            echo -e "${RED}>> Tidak ditemukan data untuk tanggal $req_date.${NC}"
        fi
    else
        echo -e "${YELLOW}>> Batal melihat riwayat.${NC}"
    fi
}

# =================================================================
# --- MENU 12: RESET DATA BANDWIDTH ---
# =================================================================
menu_reset_bandwidth() {
    echo -e "${RED}==============================================${NC}"
    echo -e "${RED}PERINGATAN!${NC}"
    echo "Anda akan mereset SEMUA data bandwidth hari ini:"
    echo "  - Data akumulasi 5 menit & 1 jam"
    echo "  - Data buku harian (Menu 10)"
    echo ""
    echo -e "${YELLOW}Data riwayat hari sebelumnya TIDAK terpengaruh.${NC}"
    echo -e "${RED}==============================================${NC}"
    
    read -p "Yakin ingin mereset? (y/N): " confirm
    
    if [[ "$confirm" =~ ^[Yy]$ ]]; then
        echo -e "${YELLOW}>> Mereset data bandwidth...${NC}"
        
        > "$BANDWIDTH_LOG"
        > "/opt/udp-proxy/log/bw_accumulator.log"
        > "/opt/udp-proxy/log/bw_history_1h.log"
        > "$DAILY_LEDGER"
        > "/opt/udp-proxy/log/bw_flush_queue.log"
        
        sudo iptables -Z "$BANDWIDTH_CHAIN" 2>/dev/null
        
        echo -e "${GREEN}>> Data bandwidth hari ini berhasil direset.${NC}"
    else
        echo -e "${YELLOW}>> Dibatalkan.${NC}"
    fi
}

# =================================================================
# --- LOOP UTAMA MENU ---
# =================================================================
while true; do
    show_menu
    read -p "Masukkan pilihan Anda [1-13]: " choice

    case $choice in
        1)  menu_enable ;;
        2)  menu_disable ;;
        3)  menu_restart ;;
        4)  menu_status ;;
        5)  menu_live_log ;;
        6)  menu_online_users ;;
        7)  menu_blocked_ips ;;
        8)  menu_clear_blocked ;;
        9)  menu_bandwidth ;;
        10) menu_daily_users ;;
        11) menu_history ;;
        12) menu_reset_bandwidth ;;
        13)
            echo -e "${CYAN}>> Keluar dari menu Hunter. Sampai jumpa!${NC}"
            exit 0
            ;;
        *)
            echo -e "${RED}>> Pilihan tidak valid, silakan coba lagi.${NC}"
            ;;
    esac

    echo ""
    read -p "Tekan [Enter] untuk melanjutkan..."
done

#!/bin/bash

# =================================================================
# --- CEK FILE BENDERA (PANEL KONTROL) ---
# Skrip akan berhenti jika file bendera ini tidak ada.
# =================================================================
FLAG_FILE="/opt/udp-proxy/log/enforcer.enabled"
if [ ! -f "$FLAG_FILE" ]; then
    echo "[$(date)] File bendera '$FLAG_FILE' tidak ditemukan. Penjaga tidak aktif. Keluar."
    exit 0
fi

# =================================================================
# --- KONFIGURASI PENJAGA (UBAH BAGIAN INI SAJA) ---
# =================================================================
PROTECTED_PORT=36712         # Port UDP yang dilindungi
STATE_FILE="/opt/udp-proxy/log/enforcer_state.log"
IPTABLES_CHAIN="UDP_ENFORCER"
MEMORY_MINUTES=10            # Berapa lama mengingat sesi yang tidak aktif
TIMEOUT_MINUTES=15           # Sesi dianggap hangus setelah X menit tidak ada aktivitas
GRACE_PERIOD_SECONDS=0       # Waktu tunggu sebelum IP lama ditendang (0 detik = segera)
# Nama layanan UDP proxy Anda (DITEMUKAN DI LANGKAH 0)
UDP_SERVICE_NAME="udp-custom.service"
# =================================================================

# --- PASTIKAN DIREKTORI YANG DIPERLUKAN ADA ---
mkdir -p "$(dirname "$STATE_FILE")"
touch "$STATE_FILE"

# =================================================================
# --- FUNGSI PEMBERSIH (OTOMATIS LUPA & EKSEKUSI TIMER) ---
# =================================================================
function cleanup() {
    echo "[$(date)] =====> MEMULAI PEMBERSIHAN DAN EKSEKUSI TIMER <====="
    local current_time=$(date +%s)
    local timeout_seconds=$((TIMEOUT_MINUTES * 60))
    local temp_state_file=$(mktemp)

    while IFS=':' read -r user ip last_seen violation_time; do
        if [[ -z "$user" || -z "$ip" || -z "$last_seen" ]]; then continue; fi
        
        local elapsed=$((current_time - last_seen))

        if [ "$elapsed" -lt "$timeout_seconds" ]; then
            if [[ -n "$violation_time" ]]; then
                local violation_elapsed=$((current_time - violation_time))
                if [ "$violation_elapsed" -ge "$GRACE_PERIOD_SECONDS" ]; then
                    echo "[$(date)] >>> EKSEKUSI: Timer habis. Memutus & memblokir IP '$ip' (user: '$user')..."
                    sudo conntrack -D -s "$ip" -p udp 2>/dev/null
                    if ! sudo iptables -C "$IPTABLES_CHAIN" -s "$ip" -j DROP &> /dev/null; then
                        sudo iptables -A "$IPTABLES_CHAIN" -s "$ip" -j DROP -m comment --comment "Kicked $USER on $(date +%F-%T)"
                        echo "[$(date)] >>> IP '$ip' telah diblokir."
                    fi
                    continue
                else
                    echo "[$(date)] [DEBUG] Timer untuk IP '$ip' user '$user' belum habis. Menunggu..."
                    echo "${user}:${ip}:${last_seen}:${violation_time}" >> "$temp_state_file"
                fi
            else
                echo "[$(date)] [DEBUG] Sesi normal untuk user '$user' dari IP '$ip'."
                echo "${user}:${ip}:${last_seen}:" >> "$temp_state_file"
            fi
        else
            echo "[$(date)] Sesi untuk user '$user' dari IP '$ip' kadaluarsa. Membuka blokir..."
            local rule_num=$(sudo iptables -L "$IPTABLES_CHAIN" --line-numbers -n | grep "$ip" | awk '{print $1}' | head -n 1)
            if [ -n "$rule_num" ]; then
                sudo iptables -D "$IPTABLES_CHAIN" "$rule_num"
            fi
        fi
    done < "$STATE_FILE"

    mv "$temp_state_file" "$STATE_FILE"
    echo "[$(date)] =====> PEMBERSIHAN SELESAI <====="
}

# =================================================================
# --- FUNGSI BLOCKING SEGERA (Pendekatan 1) ---
# =================================================================
function immediate_block() {
    local user="$1"
    local old_ip="$2"
    echo "[$(date)] >>> EKSEKUSI SEGERA: Memutus & memblokir IP '$old_ip' (user: '$user')..."
    sudo conntrack -D -s "$old_ip" -p udp 2>/dev/null
    if ! sudo iptables -C "$IPTABLES_CHAIN" -s "$old_ip" -j DROP &> /dev/null; then
        sudo iptables -A "$IPTABLES_CHAIN" -s "$old_ip" -j DROP -m comment --comment "Kicked $user on $(date +%F-%T)"
        echo "[$(date)] >>> IP '$old_ip' telah diblokir SEGERA."
    fi
}

# =================================================================
# --- INISIALISASI PENJAGA ---
# =================================================================
# Buat chain jika belum ada
if ! sudo iptables -L "$IPTABLES_CHAIN" &> /dev/null; then
    echo "[$(date)] Membuat chain iptables: $IPTABLES_CHAIN"
    sudo iptables -N "$IPTABLES_CHAIN"
fi

# --- PASTIKAN POSISI ATURAN BENAR (KRUSIAL) ---
echo "[$(date)] Memastikan aturan iptables berada di posisi teratas..."
sudo iptables -D INPUT -p udp --dport "$PROTECTED_PORT" -j "$IPTABLES_CHAIN" 2>/dev/null
sudo iptables -D FORWARD -p udp --dport "$PROTECTED_PORT" -j "$IPTABLES_CHAIN" 2>/dev/null
sudo iptables -F "$IPTABLES_CHAIN" # Bersihkan aturan lama
sudo iptables -I INPUT 1 -p udp --dport "$PROTECTED_PORT" -j "$IPTABLES_CHAIN"
sudo iptables -I FORWARD 1 -p udp --dport "$PROTECTED_PORT" -j "$IPTABLES_CHAIN"

# Jalankan cleanup di latar belakang (setiap 1 menit - Pendekatan 2)
while true; do
    cleanup
    sleep 60  # Cek setiap 1 menit (bukan 5 menit)
done &
CLEANUP_PID=$!
trap 'kill $CLEANUP_PID; exit' SIGTERM SIGINT

# Memori awal
echo "[$(date)] Memuat memori awal dari $MEMORY_MINUTES menit terakhir..."
sudo journalctl -u "$UDP_SERVICE_NAME" --since "$MEMORY_MINUTES minutes ago" --no-pager | grep "Client connected" | sort | awk -F'[][]' '
{
    for (i=1; i<=NF; i++) {
        if ($i ~ /src:/) { split($i, s, ":"); ip = s[2]; }
        if ($i ~ /user:/) { split($i, u, ":"); user = u[2]; }
    }
    if (user && ip) {
        print user ":" ip ":" systime() ":" > "'"$STATE_FILE"'"
    }
}'
awk -i inplace '!seen[$0]++' "$STATE_FILE"
echo "[$(date)] Memori awal selesai. Penjaga siap bertugas!"

# Loop utama pemantauan
echo "[$(date)] Memantau log layanan: $UDP_SERVICE_NAME"
sudo journalctl -u "$UDP_SERVICE_NAME" -f --no-tail | while read line; do
    if [[ "$line" == *"[INFO]"*"[src:"*"[user:"*"Client connected"* ]]; then
        IP=$(echo "$line" | awk -F'[][]' '{for(i=1;i<=NF;i++){if($i ~ /src:/){split($i, a, ":"); print a[2]}}}')
        USER=$(echo "$line" | awk -F'[][]' '{for(i=1;i<=NF;i++){if($i ~ /user:/){split($i, a, ":"); print a[2]}}}')
        if [[ -n "$IP" && -n "$USER" ]]; then
            echo "[$(date)] Koneksi baru: User '$USER' dari IP '$IP'"
            LAST_ENTRY=$(grep "^${USER}:" "$STATE_FILE" | tail -n 1)
            LAST_IP=$(echo "$LAST_ENTRY" | cut -d':' -f2)
            if [[ -n "$LAST_IP" && "$LAST_IP" != "$IP" ]]; then
                echo "[$(date)] >>> PELANGGARAN: User '$USER' multi-login (IP lama: '$LAST_IP', IP baru: '$IP')."
                # Panggil blocking segera (Pendekatan 1)
                immediate_block "$USER" "$LAST_IP"
                # Hapus entri lama tanpa menunggu grace period
                sed -i "/^${USER}:${LAST_IP}:/d" "$STATE_FILE"
            fi
            echo "${USER}:${IP}:$(date +%s)::" >> "$STATE_FILE"
            awk -i inplace '!seen[$0]++' "$STATE_FILE"
        fi
    elif [[ "$line" == *"[INFO]"*"[src:"*"[user:"*"Client disconnected"* ]]; then
        IP=$(echo "$line" | awk -F'[][]' '{for(i=1;i<=NF;i++){if($i ~ /src:/){split($i, a, ":"); print a[2]}}}')
        USER=$(echo "$line" | awk -F'[][]' '{for(i=1;i<=NF;i++){if($i ~ /user:/){split($i, a, ":"); print a[2]}}}')
        if [[ -n "$IP" && -n "$USER" ]]; then
            echo "[$(date)] User '$USER' dari IP '$IP' disconnect. Membersihkan state..."
            sed -i "/^${USER}:${IP}:/d" "$STATE_FILE"
        fi
    fi
done

ffmpeg -re -f concat -safe 0 -stream_loop -1 -i playlist.txt \
-vf scale=640:-2 \
-c:v libx264 -preset ultrafast -tune zerolatency -b:v 350k -maxrate 350k -bufsize 700k -pix_fmt yuv420p -g 30 -threads 1 \
-c:a aac -b:a 64k -ar 44100 \
-f flv "rtmps://live-api-s.facebook.com:443/rtmp/FB-25673775738930917-0-Ab6a6EuzqQhALumB1JgAeiCj"

#!/bin/bash

# --- DEFINISI WARNA ---
NC='\033[0m'; RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; BLUE='\033[0;34m'; MAGENTA='\033[0;35m'; CYAN='\033[0;36m'; WHITE='\033[1;37m'

# --- Fungsi Helper untuk Enforcer ---
function start_enforcer() {
    if pgrep -f "enforcer.sh" > /dev/null; then
        echo -e "${YELLOW}Penjaga Koneksi (Enforcer) sudah berjalan.${NC}"
    else
        echo -e "${YELLOW}Menjalankan Penjaga Koneksi di latar belakang...${NC}"
        screen -dmS enforcer /opt/udp-proxy/bin/enforcer.sh
        sleep 2
        if pgrep -f "enforcer.sh" > /dev/null; then
            echo -e "${GREEN}Penjaga Koneksi berhasil dijalankan.${NC}"
        else
            echo -e "${RED}Gagal menjalankan Penjaga Koneksi. Cek lognya dengan 'screen -r enforcer'.${NC}"
        fi
    fi
}

function stop_enforcer() {
    if pgrep -f "enforcer.sh" > /dev/null; then
        echo -e "${YELLOW}Menghentikan Penjaga Koneksi...${NC}"
        pkill -f "enforcer.sh"
        sleep 2
        echo -e "${GREEN}Penjaga Koneksi telah dihentikan.${NC}"
    else
        echo -e "${YELLOW}Penjaga Koneksi tidak sedang berjalan.${NC}"
    fi
}

function show_enforcer_status() {
    if pgrep -f "enforcer.sh" > /dev/null; then
        echo -e "${GREEN}Status: Berjalan${NC}"
        echo -e "Untuk melihat log real-time, jalankan: ${CYAN}screen -r enforcer${NC}"
    else
        echo -e "${RED}Status: Tidak Berjalan${NC}"
    fi
    echo ""
    echo -e "${CYAN}Aturan IP yang diblokir saat ini:${NC}"
    sudo iptables -L UDP_ENFORCER --line-numbers -n
}

function unkick_all() {
    echo -e "${YELLOW}Menghapus semua aturan blokir IP...${NC}"
    sudo iptables -F UDP_ENFORCER
    echo -e "${GREEN}Semua IP telah dibebaskan (unkicked).${NC}"
}

# --- Fungsi Menu Enforcer ---
function show_enforcer_menu() {
    while true; do
        show_header
        echo -e "${BLUE}--- Kelola Penjaga Koneksi (Kick Multi-Login) ---${NC}"
        echo -e "  ${GREEN}1.${NC} Jalankan Penjaga Koneksi"
        echo -e "  ${GREEN}2.${NC} Hentikan Penjaga Koneksi"
        echo -e "  ${GREEN}3.${NC} Lihat Status Penjaga & IP Terblokir"
        echo -e "  ${YELLOW}4.${NC} Hapus Semua Blokir IP (Unkick All)"
        echo -e "  ${RED}5.${NC} Kembali ke Menu Utama"
        echo ""
        printf "${YELLOW}Masukkan pilihan Anda [1-5]: ${NC}"
        read choice
        case $choice in
            1)
                echo -e "${YELLOW}Menjalankan dan mengaktifkan Penjaga Koneksi...${NC}"
                sudo systemctl enable udp-enforcer.service
                sudo systemctl start udp-enforcer.service
                sleep 2
                echo -e "${GREEN}Selesai.${NC}"
                ;;
            2)
                echo -e "${YELLOW}Menghentikan dan menonaktifkan Penjaga Koneksi...${NC}"
                sudo systemctl stop udp-enforcer.service
                sudo systemctl disable udp-enforcer.service
                sleep 2
                echo -e "${GREEN}Selesai.${NC}"
                ;;
            3)
                echo -e "${CYAN}Status Layanan:${NC}"
                sudo systemctl status udp-enforcer.service --no-pager
                echo ""
                echo -e "${CYAN}Aturan IP yang diblokir saat ini:${NC}"
                sudo iptables -L UDP_ENFORCER --line-numbers -n
                ;;
            4) unkick_all ;;
            5) break ;;
            *) echo -e "${RED}Pilihan tidak valid.${NC}"; sleep 1 ;;
        esac
        read -p "Tekan Enter untuk melanjutkan..."
    done
}


# --- FUNGSI MENU LAINNYA (TIDAK PERLU DIUBAH) ---
function show_header() {
    clear
    echo -e "${CYAN}════════════════════════════════════════════════════════════════════════════════${NC}"
    echo -e "${WHITE}                            [ UDP MONITOR PANEL ]                              ${NC}"
    echo -e "${CYAN}════════════════════════════════════════════════════════════════════════════════${NC}"
    echo -e "${CYAN}                              Powered by HAXOR                                  ${NC}"
    echo -e "${CYAN}════════════════════════════════════════════════════════════════════════════════${NC}"
    echo ""
}
function show_menu() {
    echo -e "${MAGENTA}Pilih kategori menu:${NC}"
    echo -e "  ${GREEN}1.${NC} Monitoring User UDP"
    echo -e "  ${GREEN}2.${NC} Monitoring Bandwidth & Jaringan"
    echo -e "  ${GREEN}3.${NC} Monitoring Sumber Daya (CPU/RAM/Disk)"
    echo -e "  ${GREEN}4.${NC} Informasi & Kontrol Sistem"
    echo -e "  ${GREEN}5.${NC} Kelola Penjaga Koneksi (Kick Multi-Login)"
    echo -e "  ${RED}6.${NC} Keluar"
    echo ""
}
function show_user_menu() {
    while true; do
        show_header
        echo -e "${BLUE}--- Monitoring User UDP ---${NC}"
        echo -e "  ${GREEN}1.${NC} Cek User Login (Real-time Dashboard)"; echo -e "  ${GREEN}2.${NC} Cek User Multi-Login"; echo -e "  ${GREEN}3.${NC} Tampilkan User Aktif Saat Ini"; echo -e "  ${GREEN}4.${NC} Tampilkan Alur Log Koneksi (Live Stream)"; echo -e "  ${RED}5.${NC} Kembali ke Menu Utama"; echo ""
        printf "${YELLOW}Masukkan pilihan Anda [1-5]: ${NC}"; read choice
        case $choice in 1) watch -n 5 udplog ;; 2) checkmultilogin ;; 3) udplog ;; 4) sudo journalctl -u udp-custom.service -f | grep "Client connected" ;; 5) break ;; *) echo -e "${RED}Pilihan tidak valid.${NC}"; sleep 1 ;; esac
        read -p "Tekan Enter untuk melanjutkan..."
    done
}
function show_network_menu() {
    while true; do
        show_header
        echo -e "${BLUE}--- Monitoring Bandwidth & Jaringan ---${NC}"
        echo -e "  ${GREEN}1.${NC} Monitor Bandwidth (Per Jam)"; echo -e "  ${GREEN}2.${NC} Monitor Bandwidth (Per Hari)"; echo -e "  ${GREEN}3.${NC} Monitor Bandwidth (Per Bulan)"; echo -e "  ${GREEN}4.${NC} Cek Kecepatan Internet (Ookla Speedtest)"; echo -e "  ${RED}5.${NC} Kembali ke Menu Utama"; echo ""
        printf "${YELLOW}Masukkan pilihan Anda [1-5]: ${NC}"; read choice
        case $choice in 1) vnstat -h ;; 2) vnstat -d ;; 3) vnstat -m ;; 4) speedtest ;; 5) break ;; *) echo -e "${RED}Pilihan tidak valid.${NC}"; sleep 1 ;; esac
        read -p "Tekan Enter untuk melanjutkan..."
    done
}
function show_resource_menu() {
    while true; do
        show_header
        echo -e "${BLUE}--- Monitoring Sumber Daya ---${NC}"
        echo -e "  ${GREEN}1.${NC} Tampilkan Penggunaan CPU & RAM (Real-time)"; echo -e "  ${GREEN}2.${NC} Tampilkan Penggunaan Disk"; echo -e "  ${GREEN}3.${NC} Ringkasan Penggunaan Sumber Daya"; echo -e "  ${RED}4.${NC} Kembali ke Menu Utama"; echo ""
        printf "${YELLOW}Masukkan pilihan Anda [1-4]: ${NC}"; read choice
        case $choice in 1) htop ;; 2) df -h ;; 3) echo -e "${CYAN}### Penggunaan CPU & RAM ###${NC}"; top -bn1 | head -5; echo -e "\n${CYAN}### Penggunaan Disk ###${NC}"; df -h ;; 4) break ;; *) echo -e "${RED}Pilihan tidak valid.${NC}"; sleep 1 ;; esac
        read -p "Tekan Enter untuk melanjutkan..."
    done
}
function show_system_menu() {
    while true; do
        show_header
        echo -e "${BLUE}--- Informasi & Kontrol Sistem ---${NC}"
        echo -e "  ${GREEN}1.${NC} Informasi VPS Lengkap"; echo -e "  ${GREEN}2.${NC} Pengguna VPS yang Sedang Login"; echo -e "  ${GREEN}3.${NC} Restart Service UDP"; echo -e "  ${YELLOW}4.${NC} Restart VPS"; echo -e "  ${GREEN}5.${NC} Atur Auto Reboot VPS"; echo -e "  ${RED}6.${NC} Kembali ke Menu Utama"; echo ""
        printf "${YELLOW}Masukkan pilihan Anda [1-6]: ${NC}"; read choice
        case $choice in
            1) neofetch ;;
            2) w ;;
            3) echo -e "${YELLOW}Mencoba me-restart service udp-custom...${NC}"; sudo systemctl restart udp-custom.service; echo -e "${GREEN}Service telah di-restart.${NC}" ;;
            4) printf "${RED}Apakah Anda yakin ingin me-reboot VPS? (y/n): ${NC}"; read confirm; if [[ $confirm == [yY] ]]; then echo -e "${YELLOW}VPS akan reboot dalam 5 detik...${NC}"; sleep 5; sudo reboot; fi ;;
            5) setup_auto_reboot_menu ;;
            6) break ;;
            *) echo -e "${RED}Pilihan tidak valid.${NC}"; sleep 1 ;;
        esac
        read -p "Tekan Enter untuk melanjutkan..."
    done
}
function setup_auto_reboot_menu() {
    while true; do
        show_header
        echo -e "${BLUE}--- Atur Auto Reboot VPS ---${NC}"
        echo -e "  ${GREEN}1.${NC} Setiap Jam"; echo -e "  ${GREEN}2.${NC} Setiap 6 Jam"; echo -e "  ${GREEN}3.${NC} Setiap 12 Jam"; echo -e "  ${GREEN}4.${NC} Setiap Hari (Tengah Malam)"; echo -e "  ${YELLOW}5.${NC} Batalkan Auto Reboot"; echo -e "  ${RED}6.${NC} Kembali"; echo ""
        printf "${YELLOW}Masukkan pilihan Anda [1-6]: ${NC}"; read choice
        local cron_job=""
        case $choice in 1) cron_job="0 * * * * /sbin/reboot" ;; 2) cron_job="0 */6 * * * /sbin/reboot" ;; 3) cron_job="0 */12 * * * /sbin/reboot" ;; 4) cron_job="0 0 * * * /sbin/reboot" ;;
            5) echo -e "${YELLOW}Membatalkan semua auto-reboot...${NC}"; (crontab -l | grep -v "/sbin/reboot") | crontab -; echo -e "${GREEN}Auto-reboot telah dibatalkan.${NC}"; read -p "Tekan Enter untuk melanjutkan..."; break ;;
            6) break ;; *) echo -e "${RED}Pilihan tidak valid.${NC}"; sleep 1; continue ;;
        esac
        if [ -n "$cron_job" ]; then echo -e "${YELLOW}Menambahkan cron job: $cron_job${NC}"; (crontab -l 2>/dev/null; echo "$cron_job") | crontab -; echo -e "${GREEN}Auto-reboot telah diatur.${NC}"; read -p "Tekan Enter untuk melanjutkan..."; break; fi
    done
}

# --- Loop Utama Program ---
while true; do
    show_header; show_menu
    printf "${YELLOW}Masukkan pilihan Anda [1-6]: ${NC}"; read choice
    case $choice in
        1) show_user_menu ;;
        2) show_network_menu ;;
        3) show_resource_menu ;;
        4) show_system_menu ;;
        5) show_enforcer_menu ;;
        6) echo -e "${GREEN}Keluar dari Monitor Panel. Sampai jumpa!${NC}"; exit 0 ;;
        *) echo -e "${RED}Pilihan tidak valid, silakan coba lagi.${NC}"; sleep 2 ;;
    esac
done