import aiohttp import asyncio import datetime import ssl import certifi import uuid import os SSL_CTX = ssl.create_default_context(cafile=certifi.where()) # ============ TÙY CHỈNH MÔ TẢ DNS PROFILE iOS ============ PROFILE_DISPLAY_NAME = "LOCKET GOLD - BY DANGKHAI💛" PROFILE_DESCRIPTION = "Lưu ý vui lòng giữ dns để giữ gold \n DNS giữ gold + huy hiệu vip💛" PROFILE_ORGANIZATION = "Locket Gold VIP" # ========================================================== def generate_mobileconfig(profile_id, username="user"): """Tạo file .mobileconfig tùy chỉnh với mô tả riêng""" payload_uuid1 = str(uuid.uuid4()).upper() payload_uuid2 = str(uuid.uuid4()).upper() content = f""" PayloadContent DNSSettings DNSProtocol HTTPS ServerURL https://dns.nextdns.io/{profile_id} OnDemandRules Action Connect PayloadDisplayName {PROFILE_DISPLAY_NAME} PayloadIdentifier com.locketgold.dns.{profile_id} PayloadType com.apple.dnsSettings.managed PayloadUUID {payload_uuid1} PayloadVersion 1 ProhibitDisablement PayloadDescription {PROFILE_DESCRIPTION} PayloadDisplayName {PROFILE_DISPLAY_NAME} PayloadIdentifier com.locketgold.profile.{profile_id} PayloadOrganization {PROFILE_ORGANIZATION} PayloadRemovalDisallowed PayloadType Configuration PayloadUUID {payload_uuid2} PayloadVersion 1 """ # Lưu file vào thư mục tạm safe_name = "".join(c for c in username if c.isalnum() or c in "-_")[:30] or "user" filepath = os.path.join(os.path.dirname(os.path.dirname(os.path.dirname(__file__))), f"dns_{safe_name}.mobileconfig") with open(filepath, "w", encoding="utf-8") as f: f.write(content) return filepath async def create_profile(api_key, log_callback=None): from app.config import NEXTDNS_ID def log(msg): if log_callback: log_callback(msg) headers = { "X-Api-Key": api_key, "Content-Type": "application/json" } if NEXTDNS_ID: pid = NEXTDNS_ID log(f"[+] Using FIXED NextDNS Profile ID: {pid}") # Vẫn thực hiện kiểm tra và ép rules cho ID cố định này log(f"[*] Applying Anti-Revoke rules to fixed ID...") async with aiohttp.ClientSession(headers=headers, connector=aiohttp.TCPConnector(ssl=SSL_CTX)) as session: denylist_url = f"https://api.nextdns.io/profiles/{pid}/denylist" target_domains = [ "revenuecat.com", "api.revenuecat.com", "amplitude.com", "api.amplitude.com", "api2.amplitude.com", "app-measurement.com", "crashlytics.com", "google-analytics.com", "firebaseremoteconfig.googleapis.com", "firebase-settings.crashlytics.com", "firebaselogging-pa.googleapis.com" ] for domain in target_domains: try: async with session.post(denylist_url, json={"id": domain, "active": True}) as r: await r.read() except: pass await asyncio.sleep(0.1) # Small delay for cleanup log(f"[SUCCESS] DNS Profile {pid} is ready.") return pid, f"https://apple.nextdns.io/?profile={pid}" headers = { "X-Api-Key": api_key, "Content-Type": "application/json" } tz_vn = datetime.timezone(datetime.timedelta(hours=7)) today_str = datetime.datetime.now(tz_vn).strftime("%Y-%m-%d") profile_name = f"LocketVIP-{today_str}" log(f"[*] Checking for existing profile: {profile_name}...") async with aiohttp.ClientSession(headers=headers, connector=aiohttp.TCPConnector(ssl=SSL_CTX)) as session: try: list_url = "https://api.nextdns.io/profiles" async with session.get(list_url) as res: if res.status == 200: data = await res.json() profiles = data.get('data', []) for p in profiles: if p.get('name') == profile_name: pid = p.get('id') log(f"[+] Found existing daily profile: {pid} (REUSING)") log(f"[>] Verifying High-Speed VIP Node...") denylist_url = f"https://api.nextdns.io/profiles/{pid}/denylist" try: async with session.post(denylist_url, json={"id": "revenuecat.com", "active": True}) as post_res: await post_res.read() log(f"[>] Integrity Check: OK (Rules Checked).") except Exception as e: log(f"[!] Warning checking rules: {e}") await asyncio.sleep(0.1) log(f"[SUCCESS] DNS VIP Node Active (Cached).") return pid, f"https://apple.nextdns.io/?profile={pid}" except Exception as e: log(f"[!] Error listing profiles: {e}") log(f"[*] Creating new daily profile: {profile_name}") log(f"[*] Initializing High-Speed VIP DNS Node...") await asyncio.sleep(0.5) create_url = "https://api.nextdns.io/profiles" payload = {"name": profile_name} try: async with session.post(create_url, json=payload) as response: if response.status == 200: data = await response.json() pid = data['data']['id'] log(f"[+] Profile created: {pid}") log(f"[>] Applying Anti-Revoke Rules (RevenueCat/Apple)...") await asyncio.sleep(0.4) denylist_url = f"https://api.nextdns.io/profiles/{pid}/denylist" target_domains = [ "revenuecat.com", "api.revenuecat.com", "amplitude.com", "app-measurement.com", "firebaseremoteconfig.googleapis.com", "firebase-settings.crashlytics.com", "firebaselogging-pa.googleapis.com", "ocsp.apple.com", "ocsp2.apple.com", "certs.apple.com", "crl.apple.com", "valid.apple.com", "appattest.apple.com", "vpp.itunes.apple.com", "ipify.org", "api.ipify.org", "ipapi.co", "ip-api.com", "ipinfo.io", "icanhazip.com", "checkip.amazonaws.com", "ifconfig.me", "ifconfig.co", "ip.sb", "ipgeolocation.io", "ip-api.io", "ipbase.com", "ipstack.com", "appsflyer.com", "mixpanel.com", "branch.io", "appboy.com", "braze.com" ] try: for domain in target_domains: async with session.post(denylist_url, json={"id": domain, "active": True}) as r: await r.read() async with session.get(denylist_url) as verify_r: verify_status = verify_r.status verify_data = await verify_r.json() if verify_status == 200 else {} if verify_status == 200: rules = verify_data.get('data', []) blocked = [d.get('id') for d in rules if d.get('active')] log(f"[+] Firewall Rules Applied: {len(blocked)} domains.") else: log(f"[!] Validation Failed: {verify_status}") except Exception as block_e: log(f"[!] Error blocking domain: {block_e}") await asyncio.sleep(0.2) log(f"[SUCCESS] DNS VIP Node Active.") link = f"https://apple.nextdns.io/?profile={pid}" return pid, link else: text = await response.text() log(f"NextDNS Error: {response.status} {text}") return None, None except Exception as e: log(f"Error creating NextDNS profile: {e}") return None, None