Commit Graph

7 Commits

Author SHA1 Message Date
copilot-swe-agent[bot] faf2f28c7c
铸渊专线全面排查修复: Shell注入防护+SMTP持久化+loadConfig通用化+ecosystem环境变量补全
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f9b09d73-b949-4f02-b3b9-2e69f90cd8b6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 09:04:51 +00:00
copilot-swe-agent[bot] aca1bea425
fix: CN relay Nginx启动失败 + 订阅自动故障转移 + 验证步骤强化
根因: setup-cn-relay.sh使用systemctl reload但Nginx未运行→静默失败→端口2053未监听
修复:
1. setup-cn-relay.sh: reload→start/reload智能切换, 健康检查失败报错退出
2. subscription-server.js: 添加url-test自动选择组, SG直连优先, CN故障自动切换
3. deploy-proxy-service.yml: 验证步骤失败时报错不再静默通过

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/e0510c81-17f8-4d94-955a-a2c8cfdf6fd3

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 11:50:23 +00:00
copilot-swe-agent[bot] d939bafb07
fix: SSH ProxyJump跳板架构 · 修复GitHub Actions无法直连中国服务器
根因: GitHub Actions运行器在美国,直接SSH到中国广州服务器被GFW/网络路由阻断
方案: 通过新加坡SG服务器作为SSH ProxyJump跳板 (美国→新加坡→广州)
变更:
- deploy-proxy-service.yml: CN中转配置改用ProxyJump跳板
- deploy-to-cn-server.yml: 所有CN服务器操作改用ProxyJump跳板
- SSL-GUIDE: 更新架构说明 + 提醒CN防火墙需开放端口2053
- secrets-manifest.json: 新增ZY_CN_SSH_PORT文档
- cn-server-profile.json: 新增ZY_CN_SSH_PORT需求

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/fb793e24-d5d6-4f39-a86f-a5d1f00db508

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 10:01:10 +00:00
copilot-swe-agent[bot] d77505b17c
fix: CN服务器SSH端口可配置 · 修复Connection timed out · 添加ZY_CN_SSH_PORT支持
问题: 铸渊专线#17 CN中转配置失败 — ssh: connect to host port 22: Connection timed out
根因: 腾讯云CN服务器SSH端口可能非默认22端口,硬编码端口22导致连接超时
修复:
- deploy-proxy-service.yml: CN中转job所有SSH/SCP/ssh-keyscan命令添加-p端口参数
- deploy-to-cn-server.yml: 所有CN服务器SSH连接添加-p端口参数
- 新增ZY_CN_SSH_PORT Secret支持(默认回退22)
- 添加详细的连接失败诊断信息和排查建议
- 更新secrets-manifest.json、cn-server-profile.json、SSL-GUIDE文档

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/fb793e24-d5d6-4f39-a86f-a5d1f00db508

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 09:53:33 +00:00
copilot-swe-agent[bot] eaa6c89864
fix: restore Reality dest to microsoft.com + add CN relay architecture
Root cause: previous change of dest from www.microsoft.com:443 to 127.0.0.1:8443
broke Reality anti-probing — GFW detected certificate mismatch and blocked VPN.

Fix 1: Restore dest to www.microsoft.com:443 (Reality anti-probing works)
Fix 2: SSL on port 8443 (external, independent from Xray)
Fix 3: CN relay via Guangzhou server (domestic users → CN:2053 → SG:443)
Fix 4: Subscription generates dual-node config (SG direct + CN relay)

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/ddb1f363-5bb4-457a-b769-794c1fe0489a

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 08:24:52 +00:00
copilot-swe-agent[bot] 6c20c7efb4
🌐 修复铸渊专线订阅服务连接失败 · 绑定0.0.0.0+Nginx反代+密钥持久化
根因: subscription-server.js绑定127.0.0.1导致外部客户端无法连接

修复:
- subscription-server.js: 绑定改为0.0.0.0, getServerHost()增加.env.keys回退
- zhuyuan-sovereign.conf: 添加/api/proxy-sub/反代location块
- deploy-proxy.sh: 新增save_server_host()持久化ZY_SERVER_HOST
- deploy-proxy-service.yml: 部署时export ZY_SERVER_HOST

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f70d170f-1916-4f79-a461-2b674592df30

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 05:48:38 +00:00
copilot-swe-agent[bot] 23b6619feb
铸渊专线VPN代理服务·全部代码+架构+操作指南·v18.0·第十一次对话
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5419233e-e968-4807-9644-2281c40b91fb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 02:28:21 +00:00