#!/bin/bash

# SSH Tunnel Workaround for Proxy Access
# This creates an SSH tunnel to forward proxy traffic through SSH (port 22)

echo "=== SSH Tunnel Workaround for Clash Proxy ==="
echo ""
echo "Since Oracle Cloud Security List blocks proxy ports, we'll use SSH port forwarding"
echo ""

# Get server details
SERVER="server2"
PROXY_PORT="7890"
LOCAL_PORT="7890"

echo "Creating SSH tunnel..."
echo "Local port: $LOCAL_PORT -> Remote: $SERVER:$PROXY_PORT"
echo ""
echo "Run this command on your Mac:"
echo ""
echo "ssh -L $LOCAL_PORT:127.0.0.1:$PROXY_PORT -N $SERVER"
echo ""
echo "Or for background:"
echo "ssh -f -N -L $LOCAL_PORT:127.0.0.1:$PROXY_PORT $SERVER"
echo ""
echo "Then configure Shadowrocket to use:"
echo "  Server: 127.0.0.1 (localhost)"
echo "  Port: $LOCAL_PORT"
echo "  Username: proxy_user"
echo "  Password: Cs7yBx1Rh9oK"
echo ""
echo "Note: This only works when SSH tunnel is active on your Mac"