-
4502595776
docs(research): 归档 Caddy v2.11.4 上游 gRPC/h2 长流源码级调研报告（含引用与逐行证据）
main
eli
2026-10-11 09:54:22 +08:00
-
22e9078d79
docs(HANDOFF): 补 Caddy v2.11.4 源码级结论（keepalive_interval 非 h2 PING、别盲升级、2.11.4 有 #8185 挂起 bug）
eli
2026-10-11 09:54:14 +08:00
-
700e609e01
docs(HANDOFF): 实测证明 Caddy 不掐 gRPC——300s 是 traefik 的 504、404 是 proxy 用 IP 直连公司缺 SNI/Host
eli
2026-10-11 09:52:18 +08:00
-
cb631c83f1
docs(HANDOFF): netbird 证书交付定型为「SFTP 直传最终目录 + SSH 只 reload」
eli
2026-10-11 09:28:42 +08:00
-
a9cd46906c
fix(xray): REALITY dest 写全 127.0.0.1:8003（裸端口在 v25.7.26+ 会变 localhost）
eli
2026-10-10 22:11:43 +08:00
-
1736a8a0d4
docs(HANDOFF): netbird 证书交付契约——同时满足 Caddy 与 netbird-proxy 的 UID/GID
eli
2026-10-10 16:48:15 +08:00
-
7550a65c61
feat(migrate): 额外站点块直接装进站点目录——迁移后不再需要人工合并
eli
2026-10-10 11:05:37 +08:00
-
13637a1c9e
docs(HANDOFF): netbird 落地结果 + OPNsense ACME 自动化可复用配方
eli
2026-10-10 10:53:53 +08:00
-
084bba7226
fix(apt): Caddy 官方源 402 的窄容错——upgrade 不再在第一步就中止
eli
2026-10-10 10:48:10 +08:00
-
addd631e79
docs: 额外站点扩展点（README 章节 + 环境变量表 + AGENTS/HANDOFF）
eli
2026-10-10 09:59:26 +08:00
-
d848a14f43
feat(caddy): 额外站点目录扩展点——升级安全的 import，手加站点不再被 upgrade 覆盖
eli
2026-10-10 09:59:19 +08:00
-
796dcd722b
docs: gcorhy 未决项了结（用户确认域名本身已废弃）；标注 migrate 额外站点合并逻辑由另一会话负责
eli
2026-10-10 09:44:06 +08:00
-
cba988f55c
docs: 新增 docs/HANDOFF.md —— 旧 Claude 会话中的部署事实落库
eli
2026-10-09 23:47:54 +08:00
-
6c1a9f7d9a
docs: 项目指引迁移 CLAUDE.md → AGENTS.md（DSH 原生），补访问地图与 standing constraints
eli
2026-10-09 23:47:54 +08:00
-
057a77f8ff
docs: cdn-bypass 注释/CLAUDE.md 对齐新架构（客户端流量同样经 nft 筛选；direct 出站带 255 的典型症状；188 官方 CIDR；drop-in 20- 前缀）
eli
2026-09-28 13:10:11 +08:00
-
23e75dab24
fix: cdn-bypass drop-in 改名 20- 前缀——官方 xray 安装脚本自带 10-donot_touch_single_conf.conf 会在同前缀 ASCII 序后加载盖掉我们的 -confdir；卸载同时清 10-/20- 两种残留
eli
2026-09-28 13:04:50 +08:00
-
12189de816
fix: systemd drop-in ExecStart 从新版 {path=...;argv[]=...} 形式正确抽出 argv[]
eli
2026-09-28 12:51:23 +08:00
-
1c69bd6bb0
fix: migrate 脚本 xray 解析器补上 # 剥注释（gcoregon 配置含 # 注释无法解析）
eli
2026-09-28 11:55:21 +08:00
-
d4e238cd75
refactor: 端口过滤下沉到 nft 层（xray 不再做端口筛选），架构对齐 nft 全筛原则
eli
2026-09-28 11:50:01 +08:00
-
68c29d97d1
fix: cdn-bypass 清单只保留三家公司官方段（401→188，剔除 213 条来源不明的 LE 回源 IP）
eli
2026-09-28 11:34:52 +08:00
-
44e1531924
test: cdn-bypass 脚本 DRY_RUN 断言（routing 端口过滤 / mark255 / 双 nft 表 / CIDR≥400）
eli
2026-09-28 08:01:56 +08:00
-
1b5a0f25e3
fix: cdn-bypass 与 gcoregon 实战清单合并(287→401) + routing 端口过滤
eli
2026-09-28 08:00:56 +08:00
-
7db64aedd9
fix: northflank 模板容器端口 443->8443（对齐实测：public 端口是 8443，443 是 private 上已移除的死 REALITY）
eli
2026-09-26 16:47:47 +08:00
-
d3d8f8a3df
docs: northflank/ 部署模板（XHTTP 最优配置 + hy2 + healthcheck 指南）
eli
2026-09-26 15:48:28 +08:00
-
f9d829934d
feat: 迁移脚本 migrate_existing_stack.sh + WS_PATH 参数化 + ACTION=links
eli
2026-09-26 15:31:41 +08:00
-
ff77b7e69f
chore: gitignore 加入 .env（Northflank API token 等本地机密，不入库）
eli
2026-09-26 15:31:15 +08:00
-
b4e53c5d27
docs: README 重构——索引、选型总览、mermaid 架构图、新增 cdn-bypass 章节
eli
2026-09-26 12:25:30 +08:00
-
8cbd977d22
feat: 新增 setup_cdn_bypass_tproxy.sh —— CDN 绕行透明代理
eli
2026-09-26 12:25:30 +08:00
-
e932564fd6
fix: nftables 运行时只加载自己的表，不再执行整份 nftables.conf
eli
2026-09-26 12:25:30 +08:00
-
9ca581c1e9
fix: ECH 默认 DNS 8.8.8.8 -> 9.9.9.9（Quad9，实测不被屏蔽；8.8.8.8 偶发断）
eli
2026-08-25 15:25:23 +08:00
-
9385f02421
fix: ECH 默认查询改用 udp://8.8.8.8（明文 UDP53，墙内实测最稳）
eli
2026-08-25 13:13:23 +08:00
-
e362c3d3fd
fix: ECH default DoH -> 8.8.8.8 IP 字面量（实测连通；免 dns.google 域名二次解析）
eli
2026-08-25 12:30:54 +08:00
-
e8787278b7
fix: ECH default DoH endpoint cloudflare-dns.com -> dns.google
eli
2026-08-25 12:24:43 +08:00
-
36e9b06976
feat: CDN links carry ech= — dynamic DoH query form by default
eli
2026-08-25 12:12:30 +08:00
-
f4d11671c1
feat: XHTTP extra padding on by default (XHTTP_PADDING=0 to disable)
eli
2026-08-25 12:12:16 +08:00
-
4e4d0f489b
feat: optional XHTTP extra padding via XHTTP_PADDING=1 (link carries extra=)
eli
2026-08-25 00:09:31 +08:00
-
15d91b2b7a
fix: drop XHTTP extra/xPadding block — breaks every link-imported client (400)
eli
2026-08-24 23:55:38 +08:00
-
1a040cb54e
fix: WS route stripped /scilad prefix (handle_path) — xray 404'd every handshake
eli
2026-08-24 23:27:59 +08:00
-
bc1c751e2a
feat: fp=chrome on all TLS client links; ws-cdn link test
eli
2026-08-24 22:47:37 +08:00
-
13432e1091
fix: drop h3 from Caddy TLS ALPN; add ws-cdn client link
eli
2026-08-24 21:21:44 +08:00
-
3c58aec356
fix: disable Caddy auto_https redirects shadowing hy2 ACME challenge route
eli
2026-08-24 20:27:05 +08:00
-
d8269b12c1
feat: self-check probes ACME challenge route; live caddy route test
eli
2026-08-24 19:54:30 +08:00
-
2d10c12e9f
fix: default hy2 masquerade to engineersblog.net (match xray camouflage)
eli
2026-08-24 19:37:53 +08:00
-
da2387dbbc
fix: port-80 ACME challenge route was shadowed by bare redir
eli
2026-08-24 19:31:44 +08:00
-
ba99627efb
docs: fix HTTP/3 toggle location (Speed > Settings) and dig HTTPS syntax
eli
2026-08-24 19:04:50 +08:00
-
c78cac6d8b
docs: ECH is default-on for Free zones; clarify HTTPS redirect, TLS 1.2, ACM
eli
2026-08-24 18:56:22 +08:00
-
72cf63b08b
docs: drop Enterprise-only Origin Rule from CDN guide — Preserve works
eli
2026-08-24 18:46:32 +08:00
-
b8fba66302
docs: Cloudflare origin setup guide for current 2026 dashboard
eli
2026-08-24 18:36:13 +08:00
-
d006d6455e
fix: preflight silently killed the script under set -e when DRY_RUN unset
eli
2026-08-24 15:51:00 +08:00
-
1738eb3614
docs: clarify tty detection comment
eli
2026-08-24 15:32:45 +08:00
-
eb9a0c90ca
feat: ACTION=upgrade — non-interactive upgrade of all components
eli
2026-08-24 15:27:32 +08:00
-
31facd9c7a
feat: optional VLESS post-quantum encryption (XRAY_VLESS_ENC), README index + ECH/PQ docs
eli
2026-08-24 15:20:15 +08:00
-
b540cfc558
docs: add 2026-08 protocol landscape review to design doc
eli
2026-08-24 13:36:19 +08:00
-
e41a5b5ab3
feat: hysteria2 HTTP-01 standalone mode binds port 80 when Caddy skipped
eli
2026-08-24 13:28:27 +08:00
-
70a19d126c
feat: default hysteria2 cert to ACME HTTP-01 via Caddy port-80 proxy
eli
2026-08-24 12:57:49 +08:00
-
35e3a5e06c
fix: DNS takeover mode by resolv.conf disposition, in-place restore
eli
2026-08-24 11:04:17 +08:00
-
50c0de2d60
docs: usage docs for caddy+xray+hysteria script, archive original templates
eli
2026-08-24 00:37:04 +08:00
-
85b6305fd4
chore: untrack hand-written templates and codegraph index
eli
2026-08-24 00:34:35 +08:00
-
922a397e70
feat: self-check, client summary, uninstall
eli
2026-08-24 00:34:24 +08:00
-
7d9524ac87
feat: nftables port hopping, validation, service enablement
eli
2026-08-24 00:32:45 +08:00
-
97a3d9dcc2
feat: hysteria2 install + config render
eli
2026-08-24 00:31:13 +08:00
-
45552433a9
feat: xray install, keypair generation, config render
eli
2026-08-24 00:30:05 +08:00
-
d616d751dd
feat: caddy install + Caddyfile render
eli
2026-08-24 00:27:49 +08:00
-
e0c3341219
feat: parameter collection, env persistence, test scaffold
eli
2026-08-24 00:24:46 +08:00
-
5b99adb57f
feat: add setup_caddy_xray_hysteria.sh skeleton
eli
2026-08-24 00:21:54 +08:00
-
a6d42ae602
docs: condense implementation plan (keep tasks + key info)
eli
2026-08-24 00:15:49 +08:00
-
afe4aa3756
Add optional CDN_DOMAIN second site block to design
eli
2026-08-23 23:47:29 +08:00
-
bbf5b50a68
Add design doc for caddy+xray+hysteria2 setup script
eli
2026-08-23 23:44:25 +08:00
-
e4bb6ee07c
Diagnose team-name typos: explain HTTP 404 on enrollment JWT fetch
eli
2026-08-23 22:39:32 +08:00
-
3b4beb9d41
Add README with 2026 Zero Trust enrollment paths, improve JWT error diagnostics
eli
2026-08-23 22:18:44 +08:00
-
e6f8b5be20
Add interactive mode, wireguard-go fallback, supply-chain hardening
eli
2026-08-23 22:01:08 +08:00
-
0b59471c52
Rewrite WARP setup: fix registration, add Zero Trust team mode
eli
2026-08-23 21:47:38 +08:00
-
32d465d4fa
Update setup_warp_zerotrust.sh
eli
2026-08-23 18:42:59 +08:00
-
630397e7c4
Update setup_warp_zerotrust.sh
eli
2026-08-23 17:19:21 +08:00
-
7ec70cd66b
Update setup_warp_zerotrust.sh
eli
2026-08-23 12:00:02 +08:00
-
3177d0b890
Update setup_warp_zerotrust.sh
eli
2026-08-23 11:57:11 +08:00
-
54a8df0764
Update setup_warp_zerotrust.sh
eli
2026-08-23 11:55:48 +08:00
-
5bd5e7043e
Update setup_warp_zerotrust.sh
eli
2026-08-23 11:53:53 +08:00
-
fe44a6c350
Update setup_warp_zerotrust.sh
eli
2026-08-23 11:46:40 +08:00
-
304e5b548c
Add setup_warp_zerotrust.sh
eli
2026-08-23 11:44:59 +08:00