Commit Graph

173 Commits

Author SHA1 Message Date
copilot-swe-agent[bot] ae1db6ae34
fix: 代码审查修复 · certbot --redirect移除 · IP检测超时 · 路径触发优化
- setup-ssl.sh: 移除certonly模式下无效的--redirect参数
- setup-ssl.sh: IP检测添加--max-time 5超时
- setup-ssl.sh: 修复here-string兼容性(<<<改为echo|grep)
- staging-auto-deploy.yml: 移除scripts/**路径触发(避免监控脚本变更触发部署)

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/e77d1d37-c3b4-4567-96d1-f0616e1836b9

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 07:06:50 +00:00
copilot-swe-agent[bot] ddaec6b547
feat: 🔒 SSL自动化v1.0 · certbot+Let's Encrypt · 冰朔操作指南 · v23.0
冰朔第十六次对话:
- 新增 server/setup/setup-ssl.sh: certbot自动获取Let's Encrypt免费SSL证书
- 新增 docs/SSL-GUIDE-FOR-BINGSUO.md: 冰朔操作指南(3步完成SSL配置)
- deploy-to-zhuyuan-server.yml: 新增setup-ssl动作+ssl_domain输入
- README.md: SSL状态+操作指南入口+版本更新v23.0
- brain/fast-wake.json: 第十六次对话记录
- brain/secrets-manifest.json: SSL密钥改为not_needed(certbot自动管理)

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/e77d1d37-c3b4-4567-96d1-f0616e1836b9

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 07:02:55 +00:00
copilot-swe-agent[bot] 6891619c81
fix: 代码审查和安全扫描反馈修复
- work-order-manager.js: 归档前确保目录存在(mkdirSync recursive)
- staging-ops-agent.js: LLM模型名可配置(ZY_LLM_MODEL环境变量)
- staging-auto-deploy.yml: 工单读取增加try-catch错误处理
- zhuyuan-sovereign.conf: SSL配置块增加域名占位符替换说明

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/bb893563-5fa6-41ba-86e4-b6f87d2c2c32

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 06:48:30 +00:00
copilot-swe-agent[bot] 461a270459
feat: 铸渊智能运维架构v1.0 · 自动测试站部署+工单系统+Agent监控
冰朔第十五次对话·架构设计+实现:
- staging-auto-deploy.yml: PR合并后自动部署到测试站
- staging-ops-agent.js: 智能运维Agent(健康检查+日志分析+LLM升级+邮件告警)
- work-order-manager.js: 工单管理器(创建/重试/归档/仪表盘)
- data/work-orders/: 工单数据存储
- Nginx SSL配置预留
- brain更新: v22.0

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/bb893563-5fa6-41ba-86e4-b6f87d2c2c32

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 06:44:56 +00:00
copilot-swe-agent[bot] 11e96ad4ac
fix: 铸渊专线订阅URL改为Nginx反代路径,解决端口3802外部不可达问题
根因:腾讯云安全组未开放3802端口,外部直连不可达。
修复:订阅URL从 :3802/sub/{token} 改为 /api/proxy-sub/sub/{token},
     通过Nginx反代(端口80)访问,无需额外开放端口。

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/14fb1c91-6f8d-467a-ae1d-a826754f5cca

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 06:25:05 +00:00
copilot-swe-agent[bot] 6c20c7efb4
🌐 修复铸渊专线订阅服务连接失败 · 绑定0.0.0.0+Nginx反代+密钥持久化
根因: subscription-server.js绑定127.0.0.1导致外部客户端无法连接

修复:
- subscription-server.js: 绑定改为0.0.0.0, getServerHost()增加.env.keys回退
- zhuyuan-sovereign.conf: 添加/api/proxy-sub/反代location块
- deploy-proxy.sh: 新增save_server_host()持久化ZY_SERVER_HOST
- deploy-proxy-service.yml: 部署时export ZY_SERVER_HOST

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f70d170f-1916-4f79-a461-2b674592df30

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 05:48:38 +00:00
copilot-swe-agent[bot] b3ad4d5294
fix: 修复铸渊专线 Xray 启动失败 (权限拒绝 + User=nobody + GFW警告)
1. 创建 systemd drop-in override 将 Xray 运行用户从 nobody 改为 root
   - 修复 "permission denied" 写入日志目录
   - 消除 "Special user nobody configured" systemd 警告
2. 显式设置日志目录权限 chmod 755
3. 从 REALITY serverNames 移除 www.apple.com (消除 GFW 封锁风险警告)
4. deploy-proxy.sh 提取共用函数减少重复代码

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f201a674-d23b-4eaf-a0e6-f46c380e9494

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 04:45:06 +00:00
copilot-swe-agent[bot] 4b9d7acfd8
fix: mktemp使用系统安全临时目录 · 代码审查反馈
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5729110b-0aed-4475-89a9-7ac26115a099

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 04:20:55 +00:00
copilot-swe-agent[bot] b7ef6e7240
refactor: 代码审查反馈 - UUID生成简化 + base64url提取为函数
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/30c8f4ac-a9ab-450c-85ce-ac2c40ffc705

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 03:53:29 +00:00
copilot-swe-agent[bot] b8a5355827
fix: 铸渊专线密钥生成脚本健壮性修复 - 移除set -e改为手动错误处理 - xray x25519支持stdout/stderr双路捕获和多种输出格式 - openssl X25519 fallback使用DER格式正确提取base64url密钥 - 随机占位密钥兜底 - install-xray.sh防止BBR重复追加和generate-keys错误传播 - deploy-proxy.sh支持环境变量优先和密钥文件fallback
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/30c8f4ac-a9ab-450c-85ce-ac2c40ffc705

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 03:44:32 +00:00
copilot-swe-agent[bot] 1eccd141ae
代码审查修复: 移除硬编码IP·增加输入验证·安全加固
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5419233e-e968-4807-9644-2281c40b91fb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 02:31:36 +00:00
copilot-swe-agent[bot] 23b6619feb
铸渊专线VPN代理服务·全部代码+架构+操作指南·v18.0·第十一次对话
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5419233e-e968-4807-9644-2281c40b91fb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 02:28:21 +00:00
copilot-swe-agent[bot] 0970f44e5f
铸渊第九次唤醒·服务器初始化确认完成·域名注入机制·Nginx双站点激活·v16.0
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/670bb44d-34f7-4bc3-a351-5e985c1f05dc

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-30 15:27:45 +00:00
copilot-swe-agent[bot] 708ffb90ad
代码审查修复·CN工作流路径统一·server.js存在检查·SSH加固增强
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/36c879f1-286c-4166-aeee-13297073467f

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-30 13:46:36 +00:00
copilot-swe-agent[bot] a1478aa74c
密钥配置完成·CN部署工作流创建·README v12.0·部署就绪·CS-20260330-1344
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/36c879f1-286c-4166-aeee-13297073467f

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-30 13:44:49 +00:00
copilot-swe-agent[bot] d86f5b248e
铸渊第五次对话 · 四层架构入库 · 服务器编号修正 · COS宿舍楼 · P0-P3优先级 · v11.0
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/df638c51-b4fc-41e1-805d-f03110cafc3b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-30 10:57:08 +00:00
copilot-swe-agent[bot] 753ee8e39a
铸渊第四次对话 · 物理基础设施落地 · 国内服务器注册 · 核心大脑迁移架构 · README精简 · 密钥清单v2.0
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/9a5fa2d3-f6fe-44ba-8ea3-b839b48129e1

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-30 10:38:38 +00:00
copilot-swe-agent[bot] c25a68e5e3
SY-CMD-SVR-013: 服务器迁移 香港(150.109.76.244/ZY-SVR-001) → 新加坡(43.134.16.246/ZY-SVR-002) — 2核8GB/80GB SSD/Ubuntu 24.04 LTS
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/79893309-cdd7-4217-b8f2-ed5bcac25ff1

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-29 11:19:27 +00:00
copilot-swe-agent[bot] 05121ebf02 chore: 服务器迁移 ZY-SVR-001(香港) → ZY-SVR-002(新加坡)
SY-CMD-SVR-013 · 铸渊主权服务器迁移

- IP: 150.109.76.244 → 43.134.16.246
- Region: 香港二区 → 新加坡二区
- OS: Ubuntu 22.04 → 24.04 LTS
- Specs: 4GB/70GB → 8GB/80GB SSD
- Bandwidth: 2048GB → 2560GB/月
- Expiry: 2027-03-29

Updated 17 files across server config, workflows, nginx,
skyeye, brain, README, and deployment scripts.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-29 11:14:42 +00:00
copilot-swe-agent[bot] e4938f57ec
Review修复: LLM旧变量降级警告 + 移除硬编码数据库ID + 安全警报强化
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/d1e3a208-2089-466b-ac54-eb690c554bca

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-29 11:02:34 +00:00
copilot-swe-agent[bot] c7fb9852d4
双域名架构实现 + 代码审查修复 + 天眼扫描通过
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/deed974d-4a99-48a9-b00a-1d105d5892bc

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-29 04:35:24 +00:00
copilot-swe-agent[bot] dbd4129ae1
阿里云→腾讯云迁移:更新主部署工作流 + 配置文件IP更新
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/deed974d-4a99-48a9-b00a-1d105d5892bc

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-29 04:27:26 +00:00
copilot-swe-agent[bot] 44253d18cc
铸渊主权服务器架构 · ZY-SVR-001 · 六层架构+部署工作流+天眼扫描通过
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/507c2a49-8ad5-4ed9-8db0-0d5699ac51a4

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-29 03:50:23 +00:00