v1.3.1 — Update TUI, SSH MAC fix, DNS/Xray hardening

What's New

Update from TUI

• New option 10) Update script in the management menu
• --update flag for CLI usage
• Auto-detects new versions, downloads, validates, and restarts

SSH MAC Compatibility

• Fix for Bitvise and older SSH clients failing with no match for method mac algo
• Adds non-ETM SHA2 MACs as fallbacks while keeping ETM preferred
• Fixes #19

DNS Safety (never locks users out)

• EXIT trap auto-fixes DNS if script crashes mid-operation
• resolv.conf backed up and locked with chattr +i
• Fallback nameservers written if DNS breaks after disabling stub listener

3x-ui / Xray Backend

• Credentials set via x-ui setting binary (handles bcrypt hashing in v2.0+)
• Panel port set via binary, not just sqlite3
• Login probing validates JSON responses (not HTML error pages)
• Fixes #18

microsocks GLIBC

• Proactive GLIBC compatibility check right after dnstm install
• Waits for dpkg lock (unattended-upgrades) before installing build tools

NoizDNS

• Binaries self-hosted as GitHub release assets for reliability
• Binary validation uses file command instead of unreliable -help flag

sshd_config Safety

• Backed up before sshtun-user configure
• Validated with sshd -t after modification
• Auto-rollback if validation fails