diff --git a/README.md b/README.md
index 7e17df8..5bf8d14 100644
--- a/README.md
+++ b/README.md
@@ -12,7 +12,7 @@
 
 ## ABOUT
 
-**Gopanel** It is a management panel written in Go language with zero dependencies, super simple deployment and very simple functions.
+**gopanel** It is a management panel written in Go language with zero dependencies, super simple deployment and very simple functions.
 
 ❗Entertainment project, do not use in production environment
 
@@ -31,20 +31,28 @@ bash <(curl -s https://raw.githubusercontent.com/BapiGso/gopanel/master/shell/un
 ```
 
 #### FUNCTION
- - Panel security entrance 
- - Server monitoring
- - cron
- - webssh
- - webdav server
- - web file editor
- - caddy manage
- - frps manage
- - frpc manage
- - UnblockNeteaseMusic
- - docker manage
- - nftables
- - headscale
+- Panel security entrance
+- Server monitoring([github.com/shirou/gopsutil](github.com/shirou/gopsutil))
+- cron ([github.com/go-co-op/gocron/v2](https://github.com/go-co-op/gocron))
+- webssh ([golang.org/x/crypto/ssh](https://golang.org/x/crypto/ssh))
+- webdav server ([golang.org/x/net/webdav](https://golang.org/x/net/webdav))
+- web file editor
+- caddy manage ([github.com/caddyserver/caddy/v2](https://github.com/caddyserver/caddy))
+- frps manage ([github.com/fatedier/frp](https://github.com/fatedier/frp))
+- frpc manage ([github.com/fatedier/frp](https://github.com/fatedier/frp))
+- ~~UnblockNeteaseMusic~~ ([github.com/cnsilvan/UnblockNeteaseMusic](https://github.com/cnsilvan/UnblockNeteaseMusic))
+- docker manage ([github.com/docker/docker](https://github.com/docker/docker))
+- firewall ([github.com/google/nftables](https://github.com/google/nftables))
+
+
+#### TODO
+
+- headscale ([github.com/juanfont/headscale](https://github.com/juanfont/headscale))
 
 ## LICENSE
 
 released under the [GPL-2.0 License](https://github.com/BapiGso/gopanel/blob/master/LICENSE).
+
+## Acknowledgments
+
+I would like to extend my heartfelt thanks to the gopher developers and the open-source community for their invaluable contributions. Your efforts have made this project possible.
diff --git a/assets/header.template b/assets/header.template
index 49c9a6b..072acd3 100644
--- a/assets/header.template
+++ b/assets/header.template
@@ -98,8 +98,8 @@
             <li><a href="/admin/docker" >docker</a></li>
             <li><a href="/admin/frps" >frps</a></li>
             <li><a href="/admin/frpc" >frpc</a></li>
-            <li><a href="/admin/headscale" >headscale</a></li>
-            <li><a href="/admin/UnblockNeteaseMusic">UnblockNeteaseMusic</a></li>
+{{/*            <li><a href="/admin/headscale" >headscale</a></li>*/}}
+<!--            <li><a href="/admin/UnblockNeteaseMusic">UnblockNeteaseMusic</a></li>-->
             <li><a href="/admin/term" >term</a></li>
             <li><a href="/admin/cron" >cron</a></li>
             <li><a href="/admin/firewall">firewall</a></li>
diff --git a/assets/headscale.template b/assets/headscale.template
index bcba09f..6790ec1 100644
--- a/assets/headscale.template
+++ b/assets/headscale.template
@@ -9,16 +9,26 @@
         <!-- <button @click="manageFrps('stop')">Stop frps</button> -->
         <button @click="manageHeadscale('enable')">Switch Enable</button>
     </p>
-    <div id="editor"></div>
+    <form action="/admin/headscale?status=start" method="POST" @submit.prevent="startHeadscale">
+        <label>服务器URL<input name="server_url" value="https://myheadscale.example.com:443"></label>
+        <label>监听地址<input name="listen_addr" value="0.0.0.0:8080"></label>
+        <label>指标监听地址<input name="metrics_listen_addr" value="127.0.0.1:9090"></label>
+        <label>gRPC监听地址<input name="grpc_listen_addr" value="127.0.0.1:50443"></label>
+        <label>Noise私钥路径<input name="private_key_path" value="/var/lib/headscale/noise_private.key"></label>
+        <label>IPv4前缀<input name="ipv4_prefix" value="100.64.0.0/10"></label>
+        <label>IPv6前缀<input name="ipv6_prefix" value="fd7a:115c:a1e0::/48"></label>
+        <label>基础域名<input name="base_domain" value="example.com"></label>
+        <button type="submit">保存配置</button>
+    </form>
 </section>
 <script type="text/javascript" src="/assets/js/ace.js"></script>
 <script>
     document.addEventListener('alpine:init', () => {
         Alpine.data('panel', () => ({
-                init(){
-                    window.editor = ace.edit("editor");
-                    {{/*editor.setValue("{{.headscaleConfig}}", -1);*/}}
-                },
+                {{/*init(){*/}}
+                {{/*    window.editor = ace.edit("editor");*/}}
+                {{/*    */}}{{/*editor.setValue("{{.headscaleConfig}}", -1);*/}}
+                {{/*},*/}}
                 updateConfig(){
                     fetch(`/admin/headscale`, {
                         method:'PUT',
@@ -35,7 +45,11 @@
                         alert(data);
                         location.reload();
                     })
-                }
+                },
+                async startHeadscale(e){
+                    alert(await (await fetch(e.target.action,{method:"POST",body: new FormData(e.target)})).json())
+                    location.reload()
+                },
             })
         )
     })
diff --git a/core/file/handler.go b/core/file/handler.go
index 5fddc24..72f09c7 100644
--- a/core/file/handler.go
+++ b/core/file/handler.go
@@ -76,7 +76,7 @@ func Process(c echo.Context) error {
 			}
 		}
 		if mode == "PMSN" {
-			perm, err := strconv.ParseUint(string(data), 10, 32)
+			perm, err := strconv.ParseUint(string(data), 8, 64)
 			if err != nil {
 				return err
 			}
@@ -85,6 +85,7 @@ func Process(c echo.Context) error {
 			}
 		}
 		if mode == "update" {
+
 			if err = os.WriteFile(path, data, 0644); err != nil {
 				return err
 			}
diff --git a/core/headscale/handler.go b/core/headscale/handler.go
index ef0c77f..8c173ce 100644
--- a/core/headscale/handler.go
+++ b/core/headscale/handler.go
@@ -4,23 +4,52 @@ package headscale
 
 import (
 	"errors"
-	_ "github.com/juanfont/headscale/cmd/headscale/cli"
+	"fmt"
 	"github.com/juanfont/headscale/hscontrol"
 	"github.com/juanfont/headscale/hscontrol/types"
+	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/labstack/echo/v4"
+	"github.com/rs/zerolog/log"
 	"github.com/spf13/viper"
+	"go4.org/netipx"
 	"io"
 	"net/http"
+	"net/netip"
 	"os"
+	"tailscale.com/net/tsaddr"
+	"time"
 )
 
+// headscaleConfig 定义了Headscale的配置结构
+type headscaleConfig struct {
+	ServerURL         string `form:"server_url"`          // 服务器URL，客户端将连接到的地址
+	ListenAddr        string `form:"listen_addr"`         // 服务器监听地址
+	MetricsListenAddr string `form:"metrics_listen_addr"` // metrics监听地址
+	GRPCListenAddr    string `form:"grpc_listen_addr"`    // gRPC监听地址
+	PrivateKeyPath    string `form:"private_key_path"`    // Noise私钥路径
+	IPv4Prefix        string `form:"ipv4_prefix"`         // IPv4地址分配范围
+	IPv6Prefix        string `form:"ipv6_prefix"`         // IPv6地址分配范围
+	BaseDomain        string `form:"base_domain"`         // MagicDNS基础域名
+}
+
 const confPath = "/etc/headscale/config.yaml"
 
 func Index(c echo.Context) error {
+	req := &headscaleConfig{}
+	if err := c.Bind(req); err != nil {
+		return err
+	}
+	if err := c.Validate(req); err != nil {
+		return err
+	}
 	switch c.Request().Method {
 	case "POST":
 		if c.QueryParam("status") == "start" {
-			cfg, err := types.LoadServerConfig()
+			//cfg, err := types.LoadServerConfig()
+			//if err != nil {
+			//	return err
+			//}
+			cfg, err := loadServerConfig(req)
 			if err != nil {
 				return err
 			}
@@ -31,6 +60,7 @@ func Index(c echo.Context) error {
 			if err = app.Serve(); err != nil && !errors.Is(err, http.ErrServerClosed) {
 				return err
 			}
+
 		}
 
 		return c.JSON(200, "success")
@@ -57,3 +87,169 @@ func Index(c echo.Context) error {
 
 	return echo.ErrMethodNotAllowed
 }
+
+func loadServerConfig(c *headscaleConfig) (*types.Config, error) {
+	prefix4, err := prefixV4()
+	if err != nil {
+		return nil, err
+	}
+
+	prefix6, err := prefixV6()
+	if err != nil {
+		return nil, err
+	}
+	allocStr := "sequential"
+	var alloc types.IPAllocationStrategy
+	switch allocStr {
+	case string(types.IPAllocationStrategySequential):
+		alloc = types.IPAllocationStrategySequential
+	case string(types.IPAllocationStrategyRandom):
+		alloc = types.IPAllocationStrategyRandom
+	default:
+		return nil, fmt.Errorf("config error, prefixes.allocation is set to %s, which is not a valid strategy, allowed options: %s, %s", allocStr, types.IPAllocationStrategySequential, types.IPAllocationStrategyRandom)
+	}
+	return &types.Config{
+		ServerURL:          c.ServerURL,
+		Addr:               c.ListenAddr,
+		MetricsAddr:        c.MetricsListenAddr,
+		GRPCAddr:           c.GRPCListenAddr,
+		GRPCAllowInsecure:  false,
+		DisableUpdateCheck: false,
+
+		PrefixV4:     prefix4,
+		PrefixV6:     prefix6,
+		IPAllocation: alloc,
+
+		NoisePrivateKeyPath: util.AbsolutePathFromConfigPath(
+			c.PrivateKeyPath,
+		),
+		//BaseDomain: dnsConfig.BaseDomain,
+		//
+		//DERP: derpConfig,
+
+		EphemeralNodeInactivityTimeout: viper.GetDuration(
+			"ephemeral_node_inactivity_timeout",
+		),
+
+		Database: types.DatabaseConfig{
+			Type:  "sqlite3",
+			Debug: false,
+			Sqlite: types.SqliteConfig{
+				Path:          "/var/lib/headscale/db.sqlite",
+				WriteAheadLog: false,
+			},
+		},
+		//
+		//TLS: tlsConfig(),
+		//
+		//DNSConfig:             dnsToTailcfgDNS(dnsConfig),
+		//DNSUserNameInMagicDNS: dnsConfig.UserNameInMagicDNS,
+
+		ACMEEmail: "",
+		ACMEURL:   "https://acme-v02.api.letsencrypt.org/directory",
+
+		UnixSocket:           viper.GetString("unix_socket"),
+		UnixSocketPermission: util.GetFileMode("unix_socket_permission"),
+
+		//OIDC: OIDCConfig{
+		//	OnlyStartIfOIDCIsAvailable: viper.GetBool(
+		//		"oidc.only_start_if_oidc_is_available",
+		//	),
+		//	Issuer:           viper.GetString("oidc.issuer"),
+		//	ClientID:         viper.GetString("oidc.client_id"),
+		//	ClientSecret:     oidcClientSecret,
+		//	Scope:            viper.GetStringSlice("oidc.scope"),
+		//	ExtraParams:      viper.GetStringMapString("oidc.extra_params"),
+		//	AllowedDomains:   viper.GetStringSlice("oidc.allowed_domains"),
+		//	AllowedUsers:     viper.GetStringSlice("oidc.allowed_users"),
+		//	AllowedGroups:    viper.GetStringSlice("oidc.allowed_groups"),
+		//	StripEmaildomain: viper.GetBool("oidc.strip_email_domain"),
+		//	Expiry: func() time.Duration {
+		//		// if set to 0, we assume no expiry
+		//		if value := viper.GetString("oidc.expiry"); value == "0" {
+		//			return maxDuration
+		//		} else {
+		//			expiry, err := model.ParseDuration(value)
+		//			if err != nil {
+		//				log.Warn().Msg("failed to parse oidc.expiry, defaulting back to 180 days")
+		//
+		//				return defaultOIDCExpiryTime
+		//			}
+		//
+		//			return time.Duration(expiry)
+		//		}
+		//	}(),
+		//	UseExpiryFromToken: viper.GetBool("oidc.use_expiry_from_token"),
+		//},
+
+		//LogTail:             logTailConfig,
+		RandomizeClientPort: false,
+		//
+		//Policy: policyConfig(),
+		//
+		//CLI: CLIConfig{
+		//	Address:  viper.GetString("cli.address"),
+		//	APIKey:   viper.GetString("cli.api_key"),
+		//	Timeout:  viper.GetDuration("cli.timeout"),
+		//	Insecure: viper.GetBool("cli.insecure"),
+		//},
+		//
+		//Log: logConfig,
+
+		// TODO(kradalby): Document these settings when more stable
+		Tuning: types.Tuning{
+			NotifierSendTimeout:            time.Duration(1 * time.Minute),
+			BatchChangeDelay:               time.Duration(1 * time.Second),
+			NodeMapSessionBufferedChanSize: 256,
+		},
+	}, nil
+}
+
+func prefixV4() (*netip.Prefix, error) {
+	prefixV4Str := viper.GetString("prefixes.v4")
+
+	if prefixV4Str == "" {
+		return nil, nil
+	}
+
+	prefixV4, err := netip.ParsePrefix(prefixV4Str)
+	if err != nil {
+		return nil, fmt.Errorf("parsing IPv4 prefix from config: %w", err)
+	}
+
+	builder := netipx.IPSetBuilder{}
+	builder.AddPrefix(tsaddr.CGNATRange())
+	ipSet, _ := builder.IPSet()
+	if !ipSet.ContainsPrefix(prefixV4) {
+		log.Warn().
+			Msgf("Prefix %s is not in the %s range. This is an unsupported configuration.",
+				prefixV4Str, tsaddr.CGNATRange())
+	}
+
+	return &prefixV4, nil
+}
+
+func prefixV6() (*netip.Prefix, error) {
+	prefixV6Str := viper.GetString("prefixes.v6")
+
+	if prefixV6Str == "" {
+		return nil, nil
+	}
+
+	prefixV6, err := netip.ParsePrefix(prefixV6Str)
+	if err != nil {
+		return nil, fmt.Errorf("parsing IPv6 prefix from config: %w", err)
+	}
+
+	builder := netipx.IPSetBuilder{}
+	builder.AddPrefix(tsaddr.TailscaleULARange())
+	ipSet, _ := builder.IPSet()
+
+	if !ipSet.ContainsPrefix(prefixV6) {
+		log.Warn().
+			Msgf("Prefix %s is not in the %s range. This is an unsupported configuration.",
+				prefixV6Str, tsaddr.TailscaleULARange())
+	}
+
+	return &prefixV6, nil
+}
diff --git a/core/headscale/init.go b/core/headscale/init.go
index 4249784..c761b72 100644
--- a/core/headscale/init.go
+++ b/core/headscale/init.go
@@ -2,33 +2,23 @@
 
 package headscale
 
-import (
-	"github.com/juanfont/headscale/hscontrol"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/spf13/viper"
-	"log"
-	"os"
-	"path/filepath"
-	"time"
-)
-
-func init() {
-	if _, err := os.Stat(confPath); os.IsNotExist(err) {
-		err := os.MkdirAll(filepath.Dir(confPath), 0755)
-		if err != nil {
-			log.Fatalf("无法创建目录: %v", err)
-		}
-		content :=
-			"---\n# headscale will look for a configuration file named `config.yaml` (or `config.json`) in the following order:\n#\n# - `/etc/headscale`\n# - `~/.headscale`\n# - current working directory\n\n# The url clients will connect to.\n# Typically this will be a domain like:\n#\n# https://myheadscale.example.com:443\n#\nserver_url: http://127.0.0.1:8080\n\n# Address to listen to / bind to on the server\n#\n# For production:\n# listen_addr: 0.0.0.0:8080\nlisten_addr: 127.0.0.1:8080\n\n# Address to listen to /metrics, you may want\n# to keep this endpoint private to your internal\n# network\n#\nmetrics_listen_addr: 127.0.0.1:9090\n\n# Address to listen for gRPC.\n# gRPC is used for controlling a headscale server\n# remotely with the CLI\n# Note: Remote access _only_ works if you have\n# valid certificates.\n#\n# For production:\n# grpc_listen_addr: 0.0.0.0:50443\ngrpc_listen_addr: 127.0.0.1:50443\n\n# Allow the gRPC admin interface to run in INSECURE\n# mode. This is not recommended as the traffic will\n# be unencrypted. Only enable if you know what you\n# are doing.\ngrpc_allow_insecure: false\n\n# The Noise section includes specific configuration for the\n# TS2021 Noise protocol\nnoise:\n  # The Noise private key is used to encrypt the\n  # traffic between headscale and Tailscale clients when\n  # using the new Noise-based protocol.\n  private_key_path: /var/lib/headscale/noise_private.key\n\n# List of IP prefixes to allocate tailaddresses from.\n# Each prefix consists of either an IPv4 or IPv6 address,\n# and the associated prefix length, delimited by a slash.\n# It must be within IP ranges supported by the Tailscale\n# client - i.e., subnets of 100.64.0.0/10 and fd7a:115c:a1e0::/48.\n# See below:\n# IPv6: https://github.com/tailscale/tailscale/blob/22ebb25e833264f58d7c3f534a8b166894a89536/net/tsaddr/tsaddr.go#LL81C52-L81C71\n# IPv4: https://github.com/tailscale/tailscale/blob/22ebb25e833264f58d7c3f534a8b166894a89536/net/tsaddr/tsaddr.go#L33\n# Any other range is NOT supported, and it will cause unexpected issues.\nprefixes:\n  v6: fd7a:115c:a1e0::/48\n  v4: 100.64.0.0/10\n\n  # Strategy used for allocation of IPs to nodes, available options:\n  # - sequential (default): assigns the next free IP from the previous given IP.\n  # - random: assigns the next free IP from a pseudo-random IP generator (crypto/rand).\n  allocation: sequential\n\n# DERP is a relay system that Tailscale uses when a direct\n# connection cannot be established.\n# https://tailscale.com/blog/how-tailscale-works/#encrypted-tcp-relays-derp\n#\n# headscale needs a list of DERP servers that can be presented\n# to the clients.\nderp:\n  server:\n    # If enabled, runs the embedded DERP server and merges it into the rest of the DERP config\n    # The Headscale server_url defined above MUST be using https, DERP requires TLS to be in place\n    enabled: false\n\n    # Region ID to use for the embedded DERP server.\n    # The local DERP prevails if the region ID collides with other region ID coming from\n    # the regular DERP config.\n    region_id: 999\n\n    # Region code and name are displayed in the Tailscale UI to identify a DERP region\n    region_code: \"headscale\"\n    region_name: \"Headscale Embedded DERP\"\n\n    # Listens over UDP at the configured address for STUN connections - to help with NAT traversal.\n    # When the embedded DERP server is enabled stun_listen_addr MUST be defined.\n    #\n    # For more details on how this works, check this great article: https://tailscale.com/blog/how-tailscale-works/\n    stun_listen_addr: \"0.0.0.0:3478\"\n\n    # Private key used to encrypt the traffic between headscale DERP\n    # and Tailscale clients.\n    # The private key file will be autogenerated if it's missing.\n    #\n    private_key_path: /var/lib/headscale/derp_server_private.key\n\n    # This flag can be used, so the DERP map entry for the embedded DERP server is not written automatically,\n    # it enables the creation of your very own DERP map entry using a locally available file with the parameter DERP.paths\n    # If you enable the DERP server and set this to false, it is required to add the DERP server to the DERP map using DERP.paths\n    automatically_add_embedded_derp_region: true\n\n    # For better connection stability (especially when using an Exit-Node and DNS is not working),\n    # it is possible to optionally add the public IPv4 and IPv6 address to the Derp-Map using:\n    ipv4: 1.2.3.4\n    ipv6: 2001:db8::1\n\n  # List of externally available DERP maps encoded in JSON\n  urls:\n    - https://controlplane.tailscale.com/derpmap/default\n\n  # Locally available DERP map files encoded in YAML\n  #\n  # This option is mostly interesting for people hosting\n  # their own DERP servers:\n  # https://tailscale.com/kb/1118/custom-derp-servers/\n  #\n  # paths:\n  #   - /etc/headscale/derp-example.yaml\n  paths: []\n\n  # If enabled, a worker will be set up to periodically\n  # refresh the given sources and update the derpmap\n  # will be set up.\n  auto_update_enabled: true\n\n  # How often should we check for DERP updates?\n  update_frequency: 24h\n\n# Disables the automatic check for headscale updates on startup\ndisable_check_updates: false\n\n# Time before an inactive ephemeral node is deleted?\nephemeral_node_inactivity_timeout: 30m\n\ndatabase:\n  # Database type. Available options: sqlite, postgres\n  # Please note that using Postgres is highly discouraged as it is only supported for legacy reasons.\n  # All new development, testing and optimisations are done with SQLite in mind.\n  type: sqlite\n\n  # Enable debug mode. This setting requires the log.level to be set to \"debug\" or \"trace\".\n  debug: false\n\n  # GORM configuration settings.\n  gorm:\n    # Enable prepared statements.\n    prepare_stmt: true\n\n    # Enable parameterized queries.\n    parameterized_queries: true\n\n    # Skip logging \"record not found\" errors.\n    skip_err_record_not_found: true\n\n    # Threshold for slow queries in milliseconds.\n    slow_threshold: 1000\n\n  # SQLite config\n  sqlite:\n    path: /var/lib/headscale/db.sqlite\n\n    # Enable WAL mode for SQLite. This is recommended for production environments.\n    # https://www.sqlite.org/wal.html\n    write_ahead_log: true\n\n  # # Postgres config\n  # Please note that using Postgres is highly discouraged as it is only supported for legacy reasons.\n  # See database.type for more information.\n  # postgres:\n  #   # If using a Unix socket to connect to Postgres, set the socket path in the 'host' field and leave 'port' blank.\n  #   host: localhost\n  #   port: 5432\n  #   name: headscale\n  #   user: foo\n  #   pass: bar\n  #   max_open_conns: 10\n  #   max_idle_conns: 10\n  #   conn_max_idle_time_secs: 3600\n\n  #   # If other 'sslmode' is required instead of 'require(true)' and 'disabled(false)', set the 'sslmode' you need\n  #   # in the 'ssl' field. Refers to https://www.postgresql.org/docs/current/libpq-ssl.html Table 34.1.\n  #   ssl: false\n\n### TLS configuration\n#\n## Let's encrypt / ACME\n#\n# headscale supports automatically requesting and setting up\n# TLS for a domain with Let's Encrypt.\n#\n# URL to ACME directory\nacme_url: https://acme-v02.api.letsencrypt.org/directory\n\n# Email to register with ACME provider\nacme_email: \"\"\n\n# Domain name to request a TLS certificate for:\ntls_letsencrypt_hostname: \"\"\n\n# Path to store certificates and metadata needed by\n# letsencrypt\n# For production:\ntls_letsencrypt_cache_dir: /var/lib/headscale/cache\n\n# Type of ACME challenge to use, currently supported types:\n# HTTP-01 or TLS-ALPN-01\n# See: docs/ref/tls.md for more information\ntls_letsencrypt_challenge_type: HTTP-01\n# When HTTP-01 challenge is chosen, letsencrypt must set up a\n# verification endpoint, and it will be listening on:\n# :http = port 80\ntls_letsencrypt_listen: \":http\"\n\n## Use already defined certificates:\ntls_cert_path: \"\"\ntls_key_path: \"\"\n\nlog:\n  # Output formatting for logs: text or json\n  format: text\n  level: info\n\n## Policy\n# headscale supports Tailscale's ACL policies.\n# Please have a look to their KB to better\n# understand the concepts: https://tailscale.com/kb/1018/acls/\npolicy:\n  # The mode can be \"file\" or \"database\" that defines\n  # where the ACL policies are stored and read from.\n  mode: file\n  # If the mode is set to \"file\", the path to a\n  # HuJSON file containing ACL policies.\n  path: \"\"\n\n## DNS\n#\n# headscale supports Tailscale's DNS configuration and MagicDNS.\n# Please have a look to their KB to better understand the concepts:\n#\n# - https://tailscale.com/kb/1054/dns/\n# - https://tailscale.com/kb/1081/magicdns/\n# - https://tailscale.com/blog/2021-09-private-dns-with-magicdns/\n#\n# Please note that for the DNS configuration to have any effect,\n# clients must have the `--accept-dns=true` option enabled. This is the\n# default for the Tailscale client. This option is enabled by default\n# in the Tailscale client.\n#\n# Setting _any_ of the configuration and `--accept-dns=true` on the\n# clients will integrate with the DNS manager on the client or\n# overwrite /etc/resolv.conf.\n# https://tailscale.com/kb/1235/resolv-conf\n#\n# If you want stop Headscale from managing the DNS configuration\n# all the fields under `dns` should be set to empty values.\ndns:\n  # Whether to use [MagicDNS](https://tailscale.com/kb/1081/magicdns/).\n  magic_dns: true\n\n  # Defines the base domain to create the hostnames for MagicDNS.\n  # This domain _must_ be different from the server_url domain.\n  # `base_domain` must be a FQDN, without the trailing dot.\n  # The FQDN of the hosts will be\n  # `hostname.base_domain` (e.g., _myhost.example.com_).\n  base_domain: example.com\n\n  # List of DNS servers to expose to clients.\n  nameservers:\n    global:\n      - 1.1.1.1\n      - 1.0.0.1\n      - 2606:4700:4700::1111\n      - 2606:4700:4700::1001\n\n      # NextDNS (see https://tailscale.com/kb/1218/nextdns/).\n      # \"abc123\" is example NextDNS ID, replace with yours.\n      # - https://dns.nextdns.io/abc123\n\n    # Split DNS (see https://tailscale.com/kb/1054/dns/),\n    # a map of domains and which DNS server to use for each.\n    split:\n      {}\n      # foo.bar.com:\n      #   - 1.1.1.1\n      # darp.headscale.net:\n      #   - 1.1.1.1\n      #   - 8.8.8.8\n\n  # Set custom DNS search domains. With MagicDNS enabled,\n  # your tailnet base_domain is always the first search domain.\n  search_domains: []\n\n  # Extra DNS records\n  # so far only A-records are supported (on the tailscale side)\n  # See: docs/ref/dns.md\n  extra_records: []\n  #   - name: \"grafana.myvpn.example.com\"\n  #     type: \"A\"\n  #     value: \"100.64.0.3\"\n  #\n  #   # you can also put it in one line\n  #   - { name: \"prometheus.myvpn.example.com\", type: \"A\", value: \"100.64.0.3\" }\n\n  # DEPRECATED\n  # Use the username as part of the DNS name for nodes, with this option enabled:\n  # node1.username.example.com\n  # while when this is disabled:\n  # node1.example.com\n  # This is a legacy option as Headscale has have this wrongly implemented\n  # while in upstream Tailscale, the username is not included.\n  use_username_in_magic_dns: false\n\n# Unix socket used for the CLI to connect without authentication\n# Note: for production you will want to set this to something like:\nunix_socket: /var/run/headscale/headscale.sock\nunix_socket_permission: \"0770\"\n#\n# headscale supports experimental OpenID connect support,\n# it is still being tested and might have some bugs, please\n# help us test it.\n# OpenID Connect\n# oidc:\n#   only_start_if_oidc_is_available: true\n#   issuer: \"https://your-oidc.issuer.com/path\"\n#   client_id: \"your-oidc-client-id\"\n#   client_secret: \"your-oidc-client-secret\"\n#   # Alternatively, set `client_secret_path` to read the secret from the file.\n#   # It resolves environment variables, making integration to systemd's\n#   # `LoadCredential` straightforward:\n#   client_secret_path: \"${CREDENTIALS_DIRECTORY}/oidc_client_secret\"\n#   # client_secret and client_secret_path are mutually exclusive.\n#\n#   # The amount of time from a node is authenticated with OpenID until it\n#   # expires and needs to reauthenticate.\n#   # Setting the value to \"0\" will mean no expiry.\n#   expiry: 180d\n#\n#   # Use the expiry from the token received from OpenID when the user logged\n#   # in, this will typically lead to frequent need to reauthenticate and should\n#   # only been enabled if you know what you are doing.\n#   # Note: enabling this will cause `oidc.expiry` to be ignored.\n#   use_expiry_from_token: false\n#\n#   # Customize the scopes used in the OIDC flow, defaults to \"openid\", \"profile\" and \"email\" and add custom query\n#   # parameters to the Authorize Endpoint request. Scopes default to \"openid\", \"profile\" and \"email\".\n#\n#   scope: [\"openid\", \"profile\", \"email\", \"custom\"]\n#   extra_params:\n#     domain_hint: example.com\n#\n#   # List allowed principal domains and/or users. If an authenticated user's domain is not in this list, the\n#   # authentication request will be rejected.\n#\n#   allowed_domains:\n#     - example.com\n#   # Note: Groups from keycloak have a leading '/'\n#   allowed_groups:\n#     - /headscale\n#   allowed_users:\n#     - alice@example.com\n#\n#   # If `strip_email_domain` is set to `true`, the domain part of the username email address will be removed.\n#   # This will transform `first-name.last-name@example.com` to the user `first-name.last-name`\n#   # If `strip_email_domain` is set to `false` the domain part will NOT be removed resulting to the following\n#   user: `first-name.last-name.example.com`\n#\n#   strip_email_domain: true\n\n# Logtail configuration\n# Logtail is Tailscales logging and auditing infrastructure, it allows the control panel\n# to instruct tailscale nodes to log their activity to a remote server.\nlogtail:\n  # Enable logtail for this headscales clients.\n  # As there is currently no support for overriding the log server in headscale, this is\n  # disabled by default. Enabling this will make your clients send logs to Tailscale Inc.\n  enabled: false\n\n# Enabling this option makes devices prefer a random port for WireGuard traffic over the\n# default static port 41641. This option is intended as a workaround for some buggy\n# firewall devices. See https://tailscale.com/kb/1181/firewalls/ for more information.\nrandomize_client_port: false"
-		_ = os.WriteFile(confPath, []byte(content), 0644)
-	}
-	go func() {
-		time.Sleep(3 * time.Second)
-		if viper.GetBool("enable.headscale") {
-			cfg, _ := types.LoadServerConfig()
-			app, _ := hscontrol.NewHeadscale(cfg)
-			_ = app.Serve()
-		}
-	}()
-
-}
+//func init() {
+//	if _, err := os.Stat(confPath); os.IsNotExist(err) {
+//		err := os.MkdirAll(filepath.Dir(confPath), 0755)
+//		if err != nil {
+//			log.Fatalf("无法创建目录: %v", err)
+//		}
+//		content :=
+//			"---\n# headscale will look for a configuration file named `config.yaml` (or `config.json`) in the following order:\n#\n# - `/etc/headscale`\n# - `~/.headscale`\n# - current working directory\n\n# The url clients will connect to.\n# Typically this will be a domain like:\n#\n# https://myheadscale.example.com:443\n#\nserver_url: http://127.0.0.1:8080\n\n# Address to listen to / bind to on the server\n#\n# For production:\n# listen_addr: 0.0.0.0:8080\nlisten_addr: 127.0.0.1:8080\n\n# Address to listen to /metrics, you may want\n# to keep this endpoint private to your internal\n# network\n#\nmetrics_listen_addr: 127.0.0.1:9090\n\n# Address to listen for gRPC.\n# gRPC is used for controlling a headscale server\n# remotely with the CLI\n# Note: Remote access _only_ works if you have\n# valid certificates.\n#\n# For production:\n# grpc_listen_addr: 0.0.0.0:50443\ngrpc_listen_addr: 127.0.0.1:50443\n\n# Allow the gRPC admin interface to run in INSECURE\n# mode. This is not recommended as the traffic will\n# be unencrypted. Only enable if you know what you\n# are doing.\ngrpc_allow_insecure: false\n\n# The Noise section includes specific configuration for the\n# TS2021 Noise protocol\nnoise:\n  # The Noise private key is used to encrypt the\n  # traffic between headscale and Tailscale clients when\n  # using the new Noise-based protocol.\n  private_key_path: /var/lib/headscale/noise_private.key\n\n# List of IP prefixes to allocate tailaddresses from.\n# Each prefix consists of either an IPv4 or IPv6 address,\n# and the associated prefix length, delimited by a slash.\n# It must be within IP ranges supported by the Tailscale\n# client - i.e., subnets of 100.64.0.0/10 and fd7a:115c:a1e0::/48.\n# See below:\n# IPv6: https://github.com/tailscale/tailscale/blob/22ebb25e833264f58d7c3f534a8b166894a89536/net/tsaddr/tsaddr.go#LL81C52-L81C71\n# IPv4: https://github.com/tailscale/tailscale/blob/22ebb25e833264f58d7c3f534a8b166894a89536/net/tsaddr/tsaddr.go#L33\n# Any other range is NOT supported, and it will cause unexpected issues.\nprefixes:\n  v6: fd7a:115c:a1e0::/48\n  v4: 100.64.0.0/10\n\n  # Strategy used for allocation of IPs to nodes, available options:\n  # - sequential (default): assigns the next free IP from the previous given IP.\n  # - random: assigns the next free IP from a pseudo-random IP generator (crypto/rand).\n  allocation: sequential\n\n# DERP is a relay system that Tailscale uses when a direct\n# connection cannot be established.\n# https://tailscale.com/blog/how-tailscale-works/#encrypted-tcp-relays-derp\n#\n# headscale needs a list of DERP servers that can be presented\n# to the clients.\nderp:\n  server:\n    # If enabled, runs the embedded DERP server and merges it into the rest of the DERP config\n    # The Headscale server_url defined above MUST be using https, DERP requires TLS to be in place\n    enabled: false\n\n    # Region ID to use for the embedded DERP server.\n    # The local DERP prevails if the region ID collides with other region ID coming from\n    # the regular DERP config.\n    region_id: 999\n\n    # Region code and name are displayed in the Tailscale UI to identify a DERP region\n    region_code: \"headscale\"\n    region_name: \"Headscale Embedded DERP\"\n\n    # Listens over UDP at the configured address for STUN connections - to help with NAT traversal.\n    # When the embedded DERP server is enabled stun_listen_addr MUST be defined.\n    #\n    # For more details on how this works, check this great article: https://tailscale.com/blog/how-tailscale-works/\n    stun_listen_addr: \"0.0.0.0:3478\"\n\n    # Private key used to encrypt the traffic between headscale DERP\n    # and Tailscale clients.\n    # The private key file will be autogenerated if it's missing.\n    #\n    private_key_path: /var/lib/headscale/derp_server_private.key\n\n    # This flag can be used, so the DERP map entry for the embedded DERP server is not written automatically,\n    # it enables the creation of your very own DERP map entry using a locally available file with the parameter DERP.paths\n    # If you enable the DERP server and set this to false, it is required to add the DERP server to the DERP map using DERP.paths\n    automatically_add_embedded_derp_region: true\n\n    # For better connection stability (especially when using an Exit-Node and DNS is not working),\n    # it is possible to optionally add the public IPv4 and IPv6 address to the Derp-Map using:\n    ipv4: 1.2.3.4\n    ipv6: 2001:db8::1\n\n  # List of externally available DERP maps encoded in JSON\n  urls:\n    - https://controlplane.tailscale.com/derpmap/default\n\n  # Locally available DERP map files encoded in YAML\n  #\n  # This option is mostly interesting for people hosting\n  # their own DERP servers:\n  # https://tailscale.com/kb/1118/custom-derp-servers/\n  #\n  # paths:\n  #   - /etc/headscale/derp-example.yaml\n  paths: []\n\n  # If enabled, a worker will be set up to periodically\n  # refresh the given sources and update the derpmap\n  # will be set up.\n  auto_update_enabled: true\n\n  # How often should we check for DERP updates?\n  update_frequency: 24h\n\n# Disables the automatic check for headscale updates on startup\ndisable_check_updates: false\n\n# Time before an inactive ephemeral node is deleted?\nephemeral_node_inactivity_timeout: 30m\n\ndatabase:\n  # Database type. Available options: sqlite, postgres\n  # Please note that using Postgres is highly discouraged as it is only supported for legacy reasons.\n  # All new development, testing and optimisations are done with SQLite in mind.\n  type: sqlite\n\n  # Enable debug mode. This setting requires the log.level to be set to \"debug\" or \"trace\".\n  debug: false\n\n  # GORM configuration settings.\n  gorm:\n    # Enable prepared statements.\n    prepare_stmt: true\n\n    # Enable parameterized queries.\n    parameterized_queries: true\n\n    # Skip logging \"record not found\" errors.\n    skip_err_record_not_found: true\n\n    # Threshold for slow queries in milliseconds.\n    slow_threshold: 1000\n\n  # SQLite config\n  sqlite:\n    path: /var/lib/headscale/db.sqlite\n\n    # Enable WAL mode for SQLite. This is recommended for production environments.\n    # https://www.sqlite.org/wal.html\n    write_ahead_log: true\n\n  # # Postgres config\n  # Please note that using Postgres is highly discouraged as it is only supported for legacy reasons.\n  # See database.type for more information.\n  # postgres:\n  #   # If using a Unix socket to connect to Postgres, set the socket path in the 'host' field and leave 'port' blank.\n  #   host: localhost\n  #   port: 5432\n  #   name: headscale\n  #   user: foo\n  #   pass: bar\n  #   max_open_conns: 10\n  #   max_idle_conns: 10\n  #   conn_max_idle_time_secs: 3600\n\n  #   # If other 'sslmode' is required instead of 'require(true)' and 'disabled(false)', set the 'sslmode' you need\n  #   # in the 'ssl' field. Refers to https://www.postgresql.org/docs/current/libpq-ssl.html Table 34.1.\n  #   ssl: false\n\n### TLS configuration\n#\n## Let's encrypt / ACME\n#\n# headscale supports automatically requesting and setting up\n# TLS for a domain with Let's Encrypt.\n#\n# URL to ACME directory\nacme_url: https://acme-v02.api.letsencrypt.org/directory\n\n# Email to register with ACME provider\nacme_email: \"\"\n\n# Domain name to request a TLS certificate for:\ntls_letsencrypt_hostname: \"\"\n\n# Path to store certificates and metadata needed by\n# letsencrypt\n# For production:\ntls_letsencrypt_cache_dir: /var/lib/headscale/cache\n\n# Type of ACME challenge to use, currently supported types:\n# HTTP-01 or TLS-ALPN-01\n# See: docs/ref/tls.md for more information\ntls_letsencrypt_challenge_type: HTTP-01\n# When HTTP-01 challenge is chosen, letsencrypt must set up a\n# verification endpoint, and it will be listening on:\n# :http = port 80\ntls_letsencrypt_listen: \":http\"\n\n## Use already defined certificates:\ntls_cert_path: \"\"\ntls_key_path: \"\"\n\nlog:\n  # Output formatting for logs: text or json\n  format: text\n  level: info\n\n## Policy\n# headscale supports Tailscale's ACL policies.\n# Please have a look to their KB to better\n# understand the concepts: https://tailscale.com/kb/1018/acls/\npolicy:\n  # The mode can be \"file\" or \"database\" that defines\n  # where the ACL policies are stored and read from.\n  mode: file\n  # If the mode is set to \"file\", the path to a\n  # HuJSON file containing ACL policies.\n  path: \"\"\n\n## DNS\n#\n# headscale supports Tailscale's DNS configuration and MagicDNS.\n# Please have a look to their KB to better understand the concepts:\n#\n# - https://tailscale.com/kb/1054/dns/\n# - https://tailscale.com/kb/1081/magicdns/\n# - https://tailscale.com/blog/2021-09-private-dns-with-magicdns/\n#\n# Please note that for the DNS configuration to have any effect,\n# clients must have the `--accept-dns=true` option enabled. This is the\n# default for the Tailscale client. This option is enabled by default\n# in the Tailscale client.\n#\n# Setting _any_ of the configuration and `--accept-dns=true` on the\n# clients will integrate with the DNS manager on the client or\n# overwrite /etc/resolv.conf.\n# https://tailscale.com/kb/1235/resolv-conf\n#\n# If you want stop Headscale from managing the DNS configuration\n# all the fields under `dns` should be set to empty values.\ndns:\n  # Whether to use [MagicDNS](https://tailscale.com/kb/1081/magicdns/).\n  magic_dns: true\n\n  # Defines the base domain to create the hostnames for MagicDNS.\n  # This domain _must_ be different from the server_url domain.\n  # `base_domain` must be a FQDN, without the trailing dot.\n  # The FQDN of the hosts will be\n  # `hostname.base_domain` (e.g., _myhost.example.com_).\n  base_domain: example.com\n\n  # List of DNS servers to expose to clients.\n  nameservers:\n    global:\n      - 1.1.1.1\n      - 1.0.0.1\n      - 2606:4700:4700::1111\n      - 2606:4700:4700::1001\n\n      # NextDNS (see https://tailscale.com/kb/1218/nextdns/).\n      # \"abc123\" is example NextDNS ID, replace with yours.\n      # - https://dns.nextdns.io/abc123\n\n    # Split DNS (see https://tailscale.com/kb/1054/dns/),\n    # a map of domains and which DNS server to use for each.\n    split:\n      {}\n      # foo.bar.com:\n      #   - 1.1.1.1\n      # darp.headscale.net:\n      #   - 1.1.1.1\n      #   - 8.8.8.8\n\n  # Set custom DNS search domains. With MagicDNS enabled,\n  # your tailnet base_domain is always the first search domain.\n  search_domains: []\n\n  # Extra DNS records\n  # so far only A-records are supported (on the tailscale side)\n  # See: docs/ref/dns.md\n  extra_records: []\n  #   - name: \"grafana.myvpn.example.com\"\n  #     type: \"A\"\n  #     value: \"100.64.0.3\"\n  #\n  #   # you can also put it in one line\n  #   - { name: \"prometheus.myvpn.example.com\", type: \"A\", value: \"100.64.0.3\" }\n\n  # DEPRECATED\n  # Use the username as part of the DNS name for nodes, with this option enabled:\n  # node1.username.example.com\n  # while when this is disabled:\n  # node1.example.com\n  # This is a legacy option as Headscale has have this wrongly implemented\n  # while in upstream Tailscale, the username is not included.\n  use_username_in_magic_dns: false\n\n# Unix socket used for the CLI to connect without authentication\n# Note: for production you will want to set this to something like:\nunix_socket: /var/run/headscale/headscale.sock\nunix_socket_permission: \"0770\"\n#\n# headscale supports experimental OpenID connect support,\n# it is still being tested and might have some bugs, please\n# help us test it.\n# OpenID Connect\n# oidc:\n#   only_start_if_oidc_is_available: true\n#   issuer: \"https://your-oidc.issuer.com/path\"\n#   client_id: \"your-oidc-client-id\"\n#   client_secret: \"your-oidc-client-secret\"\n#   # Alternatively, set `client_secret_path` to read the secret from the file.\n#   # It resolves environment variables, making integration to systemd's\n#   # `LoadCredential` straightforward:\n#   client_secret_path: \"${CREDENTIALS_DIRECTORY}/oidc_client_secret\"\n#   # client_secret and client_secret_path are mutually exclusive.\n#\n#   # The amount of time from a node is authenticated with OpenID until it\n#   # expires and needs to reauthenticate.\n#   # Setting the value to \"0\" will mean no expiry.\n#   expiry: 180d\n#\n#   # Use the expiry from the token received from OpenID when the user logged\n#   # in, this will typically lead to frequent need to reauthenticate and should\n#   # only been enabled if you know what you are doing.\n#   # Note: enabling this will cause `oidc.expiry` to be ignored.\n#   use_expiry_from_token: false\n#\n#   # Customize the scopes used in the OIDC flow, defaults to \"openid\", \"profile\" and \"email\" and add custom query\n#   # parameters to the Authorize Endpoint request. Scopes default to \"openid\", \"profile\" and \"email\".\n#\n#   scope: [\"openid\", \"profile\", \"email\", \"custom\"]\n#   extra_params:\n#     domain_hint: example.com\n#\n#   # List allowed principal domains and/or users. If an authenticated user's domain is not in this list, the\n#   # authentication request will be rejected.\n#\n#   allowed_domains:\n#     - example.com\n#   # Note: Groups from keycloak have a leading '/'\n#   allowed_groups:\n#     - /headscale\n#   allowed_users:\n#     - alice@example.com\n#\n#   # If `strip_email_domain` is set to `true`, the domain part of the username email address will be removed.\n#   # This will transform `first-name.last-name@example.com` to the user `first-name.last-name`\n#   # If `strip_email_domain` is set to `false` the domain part will NOT be removed resulting to the following\n#   user: `first-name.last-name.example.com`\n#\n#   strip_email_domain: true\n\n# Logtail configuration\n# Logtail is Tailscales logging and auditing infrastructure, it allows the control panel\n# to instruct tailscale nodes to log their activity to a remote server.\nlogtail:\n  # Enable logtail for this headscales clients.\n  # As there is currently no support for overriding the log server in headscale, this is\n  # disabled by default. Enabling this will make your clients send logs to Tailscale Inc.\n  enabled: false\n\n# Enabling this option makes devices prefer a random port for WireGuard traffic over the\n# default static port 41641. This option is intended as a workaround for some buggy\n# firewall devices. See https://tailscale.com/kb/1181/firewalls/ for more information.\nrandomize_client_port: false"
+//		_ = os.WriteFile(confPath, []byte(content), 0644)
+//	}
+//	go func() {
+//		time.Sleep(3 * time.Second)
+//		if viper.GetBool("enable.headscale") {
+//			cfg, _ := types.LoadServerConfig()
+//			app, _ := hscontrol.NewHeadscale(cfg)
+//			_ = app.Serve()
+//		}
+//	}()
+//
+//}
diff --git a/core/route.go b/core/route.go
index 8cb8f97..0d0db8b 100644
--- a/core/route.go
+++ b/core/route.go
@@ -5,14 +5,12 @@ import (
 	"github.com/labstack/echo/v4/middleware"
 	"github.com/spf13/viper"
 	"net/http"
-	"panel/core/UnblockNeteaseMusic"
 	"panel/core/cron"
 	"panel/core/docker"
 	"panel/core/file"
 	"panel/core/firewall"
 	"panel/core/frpc"
 	"panel/core/frps"
-	"panel/core/headscale"
 	"panel/core/login"
 	"panel/core/monitor"
 	"panel/core/mymiddleware"
@@ -71,9 +69,9 @@ func (c *Core) Route() {
 	admin.Any("/docker", docker.Index)
 	admin.Any("/frps", frps.Index)
 	admin.Any("/frpc", frpc.Index)
-	admin.Any("/headscale", headscale.Index)
+	//admin.Any("/headscale", headscale.Index)
 	admin.Any("/firewall", firewall.Index)
-	admin.Any("/UnblockNeteaseMusic", UnblockNeteaseMusic.Index)
+	//admin.Any("/UnblockNeteaseMusic", UnblockNeteaseMusic.Index)
 	c.e.StartTLS(viper.GetString("panel.port"), []byte(certPEM), []byte(keyPEM))
 }
 
diff --git a/go.mod b/go.mod
index 3bc3fc3..e1a8c90 100644
--- a/go.mod
+++ b/go.mod
@@ -16,16 +16,11 @@ require (
 	github.com/labstack/echo-jwt/v4 v4.2.0
 	github.com/labstack/echo/v4 v4.12.0
 	github.com/labstack/gommon v0.4.2
-	github.com/rs/zerolog v1.33.0
 	github.com/shirou/gopsutil v3.21.11+incompatible
-	github.com/spf13/cobra v1.8.1
 	github.com/spf13/viper v1.20.0-alpha.6
-	github.com/tcnksm/go-latest v0.0.0-20170313132115-e3007ae9052e
 	golang.org/x/crypto v0.26.0
 	golang.org/x/net v0.28.0
 	golang.org/x/sys v0.24.0
-	google.golang.org/grpc v1.66.0
-	gopkg.in/yaml.v3 v3.0.1
 )
 
 require (
@@ -218,6 +213,7 @@ require (
 	github.com/rivo/uniseg v0.4.7 // indirect
 	github.com/robfig/cron/v3 v3.0.1 // indirect
 	github.com/rs/xid v1.5.0 // indirect
+	github.com/rs/zerolog v1.33.0 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/safchain/ethtool v0.3.0 // indirect
 	github.com/sagikazarmark/locafero v0.6.0 // indirect
@@ -236,6 +232,7 @@ require (
 	github.com/sourcegraph/conc v0.3.0 // indirect
 	github.com/spf13/afero v1.11.0 // indirect
 	github.com/spf13/cast v1.7.0 // indirect
+	github.com/spf13/cobra v1.8.1 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/stoewer/go-strcase v1.3.0 // indirect
 	github.com/subosito/gotenv v1.6.0 // indirect
@@ -253,6 +250,7 @@ require (
 	github.com/tailscale/web-client-prebuilt v0.0.0-20240226180453-5db17b287bf1 // indirect
 	github.com/tailscale/wireguard-go v0.0.0-20240731203015-71393c576b98 // indirect
 	github.com/tcnksm/go-httpstat v0.2.0 // indirect
+	github.com/tcnksm/go-latest v0.0.0-20170313132115-e3007ae9052e // indirect
 	github.com/templexxx/cpu v0.1.1 // indirect
 	github.com/templexxx/xorsimd v0.4.3 // indirect
 	github.com/tjfoc/gmsm v1.4.1 // indirect
@@ -309,9 +307,11 @@ require (
 	golang.zx2c4.com/wireguard/windows v0.5.3 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20240903143218-8af14fe29dc1 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20240903143218-8af14fe29dc1 // indirect
+	google.golang.org/grpc v1.66.0 // indirect
 	google.golang.org/protobuf v1.34.2 // indirect
 	gopkg.in/ini.v1 v1.67.0 // indirect
 	gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
 	gorm.io/driver/postgres v1.5.9 // indirect
 	gorm.io/gorm v1.25.11 // indirect
 	gotest.tools/v3 v3.5.1 // indirect
@@ -328,4 +328,4 @@ require (
 	tailscale.com v1.72.1 // indirect
 )
 
-replace github.com/samber/lo v1.47.0 => github.com/samber/lo v1.39.0
\ No newline at end of file
+replace github.com/samber/lo v1.47.0 => github.com/samber/lo v1.39.0
diff --git a/go.sum b/go.sum
index 9b22786..853b9e5 100644
--- a/go.sum
+++ b/go.sum
@@ -236,7 +236,6 @@ github.com/fatedier/frp v0.61.0 h1:+OuBLMtfsd3bHTd+uiYUKaz2h5Xv8JJnKfHD2FLwjOU=
 github.com/fatedier/frp v0.61.0/go.mod h1:slbDpYP9l8y6p3buVKGniAzbmxL3Fr+IdEJ3chRaA8Q=
 github.com/fatedier/golib v0.5.0 h1:hNcH7hgfIFqVWbP+YojCCAj4eO94pPf4dEF8lmq2jWs=
 github.com/fatedier/golib v0.5.0/go.mod h1:W6kIYkIFxHsTzbgqg5piCxIiDo4LzwgTY6R5W8l9NFQ=
-github.com/fatedier/yamux v0.0.0-20230628132301-7aca4898904d/go.mod h1:CtWFDAQgb7dxtzFs4tWbplKIe2jSi3+5vKbgIO0SLnQ=
 github.com/felixge/fgprof v0.9.3/go.mod h1:RdbpDgzqYVh/T9fPELJyV7EYJuHB55UTEULNun8eiPw=
 github.com/felixge/fgprof v0.9.5 h1:8+vR6yu2vvSKn08urWyEuxx75NWPEvybbkBirEpsbVY=
 github.com/felixge/fgprof v0.9.5/go.mod h1:yKl+ERSa++RYOs32d8K6WEXCB4uXdLls4ZaZPpayhMM=
@@ -720,8 +719,6 @@ github.com/sagikazarmark/locafero v0.6.0 h1:ON7AQg37yzcRPU69mt7gwhFEBwxI6P9T4Qu3
 github.com/sagikazarmark/locafero v0.6.0/go.mod h1:77OmuIc6VTraTXKXIs/uvUxKGUXjE1GbemJYHqdNjX0=
 github.com/samber/lo v1.39.0 h1:4gTz1wUhNYLhFSKl6O+8peW0v2F4BCY034GRpU9WnuA=
 github.com/samber/lo v1.39.0/go.mod h1:+m/ZKRl6ClXCE2Lgf3MsQlWfh4bn1bz6CXEOxnEXnEA=
-github.com/samber/lo v1.47.0 h1:z7RynLwP5nbyRscyvcD043DWYoOcYRv3mV8lBeqOCLc=
-github.com/samber/lo v1.47.0/go.mod h1:RmDH9Ct32Qy3gduHQuKJ3gW1fMHAnE/fAzQuf6He5cU=
 github.com/sasha-s/go-deadlock v0.3.5 h1:tNCOEEDG6tBqrNDOX35j/7hL5FcFViG6awUGROb2NsU=
 github.com/sasha-s/go-deadlock v0.3.5/go.mod h1:bugP6EGbdGYObIlx7pUZtWqlvo8k9H6vCBBsiChJQ5U=
 github.com/satori/go.uuid v1.2.0/go.mod h1:dA0hQrYB0VpLJoorglMZABFdXlWrHn1NEOzdhQKdks0=
diff --git a/shell/install_gopanel.sh b/shell/install_gopanel.sh
index d7da3d8..5932935 100644
--- a/shell/install_gopanel.sh
+++ b/shell/install_gopanel.sh
@@ -26,6 +26,12 @@ case "$ARCH" in
     mips|mipsel)
         GOARCH="mips"
         ;;
+    s390x)
+        GOARCH="s390x"
+        ;;
+    riscv64)
+        GOARCH="riscv64"
+        ;;
     *)
         echo "不支持的系统架构: $ARCH，请手动下载适用于您系统的 gopanel 版本。"
         exit 1