feat: uuid for sub link

server/src/index.ts

@@ -1,5 +1,6 @@
 import express from 'express';
 import path from 'path';
+import crypto from 'crypto';
 import './db.js'; // Initialize database
 import subscriptionsRouter from './routes/subscriptions.js';
 import nodesRouter from './routes/nodes.js';
@@ -8,16 +9,30 @@ import surgeRouter from './routes/surge.js';
 import db from './db.js';
 import { generateSurgeConfig } from './services/generator.js';
 
+// Ensure surge_token exists
+function ensureSurgeToken(): string {
+  const row = db.prepare("SELECT value FROM config WHERE key = 'surge_token'").get() as any;
+  if (row?.value) return row.value;
+  const token = crypto.randomUUID();
+  db.prepare("INSERT OR REPLACE INTO config (key, value) VALUES ('surge_token', ?)").run(token);
+  return token;
+}
+ensureSurgeToken();
+
 const app = express();
 const PORT = parseInt(process.env.PORT || '3456', 10);
 
 app.use(express.json());
 
-// Surge endpoint (no auth, before everything)
-app.get('/surge', (req, res) => {
+// Surge endpoint (no auth, token-protected path)
+app.get('/surge/:token', (req, res) => {
+  const row = db.prepare("SELECT value FROM config WHERE key = 'surge_token'").get() as any;
+  if (!row?.value || req.params.token !== row.value) {
+    return res.status(404).send('Not Found');
+  }
   const host = req.headers.host || 'localhost:3456';
   const protocol = req.secure ? 'https' : 'http';
-  const hostUrl = `${protocol}://${host}/surge`;
+  const hostUrl = `${protocol}://${host}/surge/${row.value}`;
   const config = generateSurgeConfig(hostUrl);
   res.set({
     'Content-Type': 'text/plain; charset=utf-8',
@@ -89,12 +104,13 @@ app.get('/api/stats', (_req, res) => {
 const webDist = path.join(__dirname, '..', '..', 'web', 'dist');
 app.use(express.static(webDist));
 app.get('*', (req, res, next) => {
-  if (req.path.startsWith('/api') || req.path === '/surge') return next();
+  if (req.path.startsWith('/api') || req.path.startsWith('/surge')) return next();
   res.sendFile(path.join(webDist, 'index.html'));
 });
 
 app.listen(PORT, () => {
+  const token = ensureSurgeToken();
   console.log(`Sub Router running at http://127.0.0.1:${PORT}`);
-  console.log(`Surge subscription: http://127.0.0.1:${PORT}/surge`);
+  console.log(`Surge subscription: http://127.0.0.1:${PORT}/surge/${token}`);
   console.log(`Admin panel: http://127.0.0.1:${PORT}`);
 });