-
9ca581c1e9
fix: ECH 默认 DNS 8.8.8.8 -> 9.9.9.9（Quad9，实测不被屏蔽；8.8.8.8 偶发断）
main
eli
2026-08-25 15:25:23 +08:00
-
9385f02421
fix: ECH 默认查询改用 udp://8.8.8.8（明文 UDP53，墙内实测最稳）
eli
2026-08-25 13:13:23 +08:00
-
e362c3d3fd
fix: ECH default DoH -> 8.8.8.8 IP 字面量（实测连通；免 dns.google 域名二次解析）
eli
2026-08-25 12:30:54 +08:00
-
e8787278b7
fix: ECH default DoH endpoint cloudflare-dns.com -> dns.google
eli
2026-08-25 12:24:43 +08:00
-
36e9b06976
feat: CDN links carry ech= — dynamic DoH query form by default
eli
2026-08-25 12:12:30 +08:00
-
f4d11671c1
feat: XHTTP extra padding on by default (XHTTP_PADDING=0 to disable)
eli
2026-08-25 12:12:16 +08:00
-
4e4d0f489b
feat: optional XHTTP extra padding via XHTTP_PADDING=1 (link carries extra=)
eli
2026-08-25 00:09:31 +08:00
-
15d91b2b7a
fix: drop XHTTP extra/xPadding block — breaks every link-imported client (400)
eli
2026-08-24 23:55:38 +08:00
-
1a040cb54e
fix: WS route stripped /scilad prefix (handle_path) — xray 404'd every handshake
eli
2026-08-24 23:27:59 +08:00
-
bc1c751e2a
feat: fp=chrome on all TLS client links; ws-cdn link test
eli
2026-08-24 22:47:37 +08:00
-
13432e1091
fix: drop h3 from Caddy TLS ALPN; add ws-cdn client link
eli
2026-08-24 21:21:44 +08:00
-
3c58aec356
fix: disable Caddy auto_https redirects shadowing hy2 ACME challenge route
eli
2026-08-24 20:27:05 +08:00
-
d8269b12c1
feat: self-check probes ACME challenge route; live caddy route test
eli
2026-08-24 19:54:30 +08:00
-
2d10c12e9f
fix: default hy2 masquerade to engineersblog.net (match xray camouflage)
eli
2026-08-24 19:37:53 +08:00
-
da2387dbbc
fix: port-80 ACME challenge route was shadowed by bare redir
eli
2026-08-24 19:31:44 +08:00
-
ba99627efb
docs: fix HTTP/3 toggle location (Speed > Settings) and dig HTTPS syntax
eli
2026-08-24 19:04:50 +08:00
-
c78cac6d8b
docs: ECH is default-on for Free zones; clarify HTTPS redirect, TLS 1.2, ACM
eli
2026-08-24 18:56:22 +08:00
-
72cf63b08b
docs: drop Enterprise-only Origin Rule from CDN guide — Preserve works
eli
2026-08-24 18:46:32 +08:00
-
b8fba66302
docs: Cloudflare origin setup guide for current 2026 dashboard
eli
2026-08-24 18:36:13 +08:00
-
d006d6455e
fix: preflight silently killed the script under set -e when DRY_RUN unset
eli
2026-08-24 15:51:00 +08:00
-
1738eb3614
docs: clarify tty detection comment
eli
2026-08-24 15:32:45 +08:00
-
eb9a0c90ca
feat: ACTION=upgrade — non-interactive upgrade of all components
eli
2026-08-24 15:27:32 +08:00
-
31facd9c7a
feat: optional VLESS post-quantum encryption (XRAY_VLESS_ENC), README index + ECH/PQ docs
eli
2026-08-24 15:20:15 +08:00
-
b540cfc558
docs: add 2026-08 protocol landscape review to design doc
eli
2026-08-24 13:36:19 +08:00
-
e41a5b5ab3
feat: hysteria2 HTTP-01 standalone mode binds port 80 when Caddy skipped
eli
2026-08-24 13:28:27 +08:00
-
70a19d126c
feat: default hysteria2 cert to ACME HTTP-01 via Caddy port-80 proxy
eli
2026-08-24 12:57:49 +08:00
-
35e3a5e06c
fix: DNS takeover mode by resolv.conf disposition, in-place restore
eli
2026-08-24 11:04:17 +08:00
-
50c0de2d60
docs: usage docs for caddy+xray+hysteria script, archive original templates
eli
2026-08-24 00:37:04 +08:00
-
85b6305fd4
chore: untrack hand-written templates and codegraph index
eli
2026-08-24 00:34:35 +08:00
-
922a397e70
feat: self-check, client summary, uninstall
eli
2026-08-24 00:34:24 +08:00
-
7d9524ac87
feat: nftables port hopping, validation, service enablement
eli
2026-08-24 00:32:45 +08:00
-
97a3d9dcc2
feat: hysteria2 install + config render
eli
2026-08-24 00:31:13 +08:00
-
45552433a9
feat: xray install, keypair generation, config render
eli
2026-08-24 00:30:05 +08:00
-
d616d751dd
feat: caddy install + Caddyfile render
eli
2026-08-24 00:27:49 +08:00
-
e0c3341219
feat: parameter collection, env persistence, test scaffold
eli
2026-08-24 00:24:46 +08:00
-
5b99adb57f
feat: add setup_caddy_xray_hysteria.sh skeleton
eli
2026-08-24 00:21:54 +08:00
-
a6d42ae602
docs: condense implementation plan (keep tasks + key info)
eli
2026-08-24 00:15:49 +08:00
-
afe4aa3756
Add optional CDN_DOMAIN second site block to design
eli
2026-08-23 23:47:29 +08:00
-
bbf5b50a68
Add design doc for caddy+xray+hysteria2 setup script
eli
2026-08-23 23:44:25 +08:00
-
e4bb6ee07c
Diagnose team-name typos: explain HTTP 404 on enrollment JWT fetch
eli
2026-08-23 22:39:32 +08:00
-
3b4beb9d41
Add README with 2026 Zero Trust enrollment paths, improve JWT error diagnostics
eli
2026-08-23 22:18:44 +08:00
-
e6f8b5be20
Add interactive mode, wireguard-go fallback, supply-chain hardening
eli
2026-08-23 22:01:08 +08:00
-
0b59471c52
Rewrite WARP setup: fix registration, add Zero Trust team mode
eli
2026-08-23 21:47:38 +08:00
-
32d465d4fa
Update setup_warp_zerotrust.sh
eli
2026-08-23 18:42:59 +08:00
-
630397e7c4
Update setup_warp_zerotrust.sh
eli
2026-08-23 17:19:21 +08:00
-
7ec70cd66b
Update setup_warp_zerotrust.sh
eli
2026-08-23 12:00:02 +08:00
-
3177d0b890
Update setup_warp_zerotrust.sh
eli
2026-08-23 11:57:11 +08:00
-
54a8df0764
Update setup_warp_zerotrust.sh
eli
2026-08-23 11:55:48 +08:00
-
5bd5e7043e
Update setup_warp_zerotrust.sh
eli
2026-08-23 11:53:53 +08:00
-
fe44a6c350
Update setup_warp_zerotrust.sh
eli
2026-08-23 11:46:40 +08:00
-
304e5b548c
Add setup_warp_zerotrust.sh
eli
2026-08-23 11:44:59 +08:00