Commit Graph

13 Commits

Author SHA1 Message Date
copilot-swe-agent[bot] aca1bea425
fix: CN relay Nginx启动失败 + 订阅自动故障转移 + 验证步骤强化
根因: setup-cn-relay.sh使用systemctl reload但Nginx未运行→静默失败→端口2053未监听
修复:
1. setup-cn-relay.sh: reload→start/reload智能切换, 健康检查失败报错退出
2. subscription-server.js: 添加url-test自动选择组, SG直连优先, CN故障自动切换
3. deploy-proxy-service.yml: 验证步骤失败时报错不再静默通过

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/e0510c81-17f8-4d94-955a-a2c8cfdf6fd3

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 11:50:23 +00:00
copilot-swe-agent[bot] 83d23e1611
refactor: extract shared stream module functions to reduce duplication, add find -maxdepth limit
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/9bb46eed-d7d9-4fa9-a557-18abe41a60f1

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 11:04:33 +00:00
copilot-swe-agent[bot] f91bd5bc8d
fix: setup-cn-relay.sh Nginx stream module loading - install libnginx-mod-stream package, expand .so search paths, add modules-enabled check, add recovery logic in §5
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/9bb46eed-d7d9-4fa9-a557-18abe41a60f1

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 11:02:44 +00:00
copilot-swe-agent[bot] 23c70c3262
fix: 域名修正 guanghu.online → guanghulab.online + CN中转Nginx stream动态模块加载修复
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/b50bddfa-167a-4a14-afda-39a2c2afd592

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 09:23:19 +00:00
copilot-swe-agent[bot] 3f44e4fb44
fix: address code review feedback (glob guard, CN relay comments)
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/ddb1f363-5bb4-457a-b769-794c1fe0489a

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 08:29:05 +00:00
copilot-swe-agent[bot] eaa6c89864
fix: restore Reality dest to microsoft.com + add CN relay architecture
Root cause: previous change of dest from www.microsoft.com:443 to 127.0.0.1:8443
broke Reality anti-probing — GFW detected certificate mismatch and blocked VPN.

Fix 1: Restore dest to www.microsoft.com:443 (Reality anti-probing works)
Fix 2: SSL on port 8443 (external, independent from Xray)
Fix 3: CN relay via Guangzhou server (domestic users → CN:2053 → SG:443)
Fix 4: Subscription generates dual-node config (SG direct + CN relay)

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/ddb1f363-5bb4-457a-b769-794c1fe0489a

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 08:24:52 +00:00
copilot-swe-agent[bot] 11e96ad4ac
fix: 铸渊专线订阅URL改为Nginx反代路径,解决端口3802外部不可达问题
根因:腾讯云安全组未开放3802端口,外部直连不可达。
修复:订阅URL从 :3802/sub/{token} 改为 /api/proxy-sub/sub/{token},
     通过Nginx反代(端口80)访问,无需额外开放端口。

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/14fb1c91-6f8d-467a-ae1d-a826754f5cca

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 06:25:05 +00:00
copilot-swe-agent[bot] b3ad4d5294
fix: 修复铸渊专线 Xray 启动失败 (权限拒绝 + User=nobody + GFW警告)
1. 创建 systemd drop-in override 将 Xray 运行用户从 nobody 改为 root
   - 修复 "permission denied" 写入日志目录
   - 消除 "Special user nobody configured" systemd 警告
2. 显式设置日志目录权限 chmod 755
3. 从 REALITY serverNames 移除 www.apple.com (消除 GFW 封锁风险警告)
4. deploy-proxy.sh 提取共用函数减少重复代码

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f201a674-d23b-4eaf-a0e6-f46c380e9494

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 04:45:06 +00:00
copilot-swe-agent[bot] 4b9d7acfd8
fix: mktemp使用系统安全临时目录 · 代码审查反馈
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5729110b-0aed-4475-89a9-7ac26115a099

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 04:20:55 +00:00
copilot-swe-agent[bot] b7ef6e7240
refactor: 代码审查反馈 - UUID生成简化 + base64url提取为函数
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/30c8f4ac-a9ab-450c-85ce-ac2c40ffc705

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 03:53:29 +00:00
copilot-swe-agent[bot] b8a5355827
fix: 铸渊专线密钥生成脚本健壮性修复 - 移除set -e改为手动错误处理 - xray x25519支持stdout/stderr双路捕获和多种输出格式 - openssl X25519 fallback使用DER格式正确提取base64url密钥 - 随机占位密钥兜底 - install-xray.sh防止BBR重复追加和generate-keys错误传播 - deploy-proxy.sh支持环境变量优先和密钥文件fallback
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/30c8f4ac-a9ab-450c-85ce-ac2c40ffc705

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 03:44:32 +00:00
copilot-swe-agent[bot] 1eccd141ae
代码审查修复: 移除硬编码IP·增加输入验证·安全加固
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5419233e-e968-4807-9644-2281c40b91fb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 02:31:36 +00:00
copilot-swe-agent[bot] 23b6619feb
铸渊专线VPN代理服务·全部代码+架构+操作指南·v18.0·第十一次对话
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5419233e-e968-4807-9644-2281c40b91fb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 02:28:21 +00:00