From 7b3e800dc93f52823d0e38d8817ed3aff88eac5f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=A1=D0=B5=D1=80=D0=B3=D0=B5=D0=B9=20=D0=9F=D1=80=D0=BE?=
 =?UTF-8?q?=D1=85=D0=BE=D1=80=D0=BE=D0=B2?= <seriy.pr@gmail.com>
Date: Sun, 3 Mar 2019 20:15:45 +0100
Subject: [PATCH] Add option to enable dd-only mode from command line

---
 README.md |  9 +++++----
 start.sh  | 28 +++++++++++++++++++++-------
 2 files changed, 26 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index ca67d3c..04b1ce1 100644
--- a/README.md
+++ b/README.md
@@ -40,9 +40,10 @@ docker run -d --network=host -e MTP_PORT=443 -e MTP_SECRET=d0d6e111bada5511fcce9
 
 Where
 
-* `-p 443` / `MTP_PORT` proxy port
-* `-s d0d6e111bada5511fcce9584deadbeef` / `MTP_SECRET` proxy secret (don't append `dd`! it should be 32 chars long!)
-* `-t dcbe8f1493fa4cd9ab300891c0b5b326` / `MTP_TAG` ad-tag that you get from [@MTProxybot](https://t.me/MTProxybot)
+* `-p 443` / `MTP_PORT=…` proxy port
+* `-s d0d6e111bada5511fcce9584deadbeef` / `MTP_SECRET=…` proxy secret (don't append `dd`! it should be 32 chars long!)
+* `-t dcbe8f1493fa4cd9ab300891c0b5b326` / `MTP_TAG=…` ad-tag that you get from [@MTProxybot](https://t.me/MTProxybot)
+* `-d` / `MTP_DD_ONLY=t` only allow "secure" connections (dd-secrets)
 
 ### To run with custom config-file
 
@@ -247,6 +248,6 @@ Helpers
 
 Number of connections
 
-```erlang
+```bash
 /opt/mtp_proxy/bin/mtp_proxy eval 'lists:sum([proplists:get_value(all_connections, L) || {_, L} <- ranch:info()]).'
 ```
diff --git a/start.sh b/start.sh
index ab14486..5ead358 100755
--- a/start.sh
+++ b/start.sh
@@ -2,6 +2,7 @@
 # Script that helps to overwrite port/secret/ad tag from command line without changing config-files
 
 CMD="/opt/mtp_proxy/bin/mtp_proxy foreground"
+# CMD="/opt/mtp_proxy/bin/mtp_proxy console"
 THIS=$0
 
 usage() {
@@ -10,13 +11,16 @@ usage() {
     echo "${THIS}"
     echo "To start in single-port mode configured from command-line:"
     echo "${THIS} -p <port> -s <secret> -t <ad tag>"
+    echo "To only allow connections with randomized protocol (dd-secrets):"
+    echo "${THIS} -d"
     echo "Parameters:"
     echo "-p <port>: port to listen on. 1-65535"
     echo "-s <secret>: proxy secret. 32 hex characters 0-9 a-f"
-    echo "-t <ad tag>: promo tag, that you get from @MTProxybot. 32 hex characters"
-    echo "port secret and tag can also be configured via environment variables:"
-    echo "MTP_PORT, MTP_SECRET, MTP_TAG"
-    echo "If both command line and environment are set, command line have higher priority"
+    echo "-t <ad tag>: promo tag that you get from @MTProxybot. 32 hex characters"
+    echo "-d: only allow 'secure' connections (with dd-secret)"
+    echo "port, secret, tag and secure mode can also be configured via environment variables:"
+    echo "MTP_PORT, MTP_SECRET, MTP_TAG, MTP_DD_ONLY"
+    echo "If both command line and environment are set, command line have higher priority."
 }
 
 error() {
@@ -29,9 +33,10 @@ error() {
 PORT=${MTP_PORT:-""}
 SECRET=${MTP_SECRET:-""}
 TAG=${MTP_TAG:-""}
+DD_ONLY=${MTP_DD_ONLY:-""}
 
 # check command line options
-while getopts "p:s:t:h" o; do
+while getopts "p:s:t:dh" o; do
     case "${o}" in
         p)
             PORT=${OPTARG}
@@ -42,12 +47,21 @@ while getopts "p:s:t:h" o; do
         t)
             TAG=${OPTARG}
             ;;
+        d)
+            DD_ONLY="y"
+            ;;
         h)
             usage
             exit 0
     esac
 done
 
+DD_ARG=""
+
+if [ -n "${DD_ONLY}" ]; then
+    DD_ARG='-mtproto_proxy allowed_protocols [mtp_secure]'
+fi
+
 # if at least one option is set...
 if [ -n "${PORT}" -o -n "${SECRET}" -o -n "${TAG}" ]; then
     # If at least one of them not set...
@@ -62,7 +76,7 @@ if [ -n "${PORT}" -o -n "${SECRET}" -o -n "${TAG}" ]; then
     [ -n "`echo $TAG | grep -x '[[:xdigit:]]\{32\}'`" ] || \
         error "Invalid tag. Should be 32 chars of 0-9 a-f"
 
-    exec $CMD -mtproto_proxy ports "[#{name => mtproto_proxy, port => $PORT, secret => <<\"$SECRET\">>, tag => <<\"$TAG\">>}]"
+    exec $CMD $DD_ARG -mtproto_proxy ports "[#{name => mtproto_proxy, port => $PORT, secret => <<\"$SECRET\">>, tag => <<\"$TAG\">>}]"
 else
-    exec $CMD
+    exec $CMD $DD_ARG
 fi