Commit Graph

70 Commits

Author SHA1 Message Date
copilot-swe-agent[bot] b2aaeeab88
fix: V2 VPN subscription 404 - nginx path /api/proxy-sub/ → /api/proxy-v2/
Root cause: deploy-brain-proxy.yml generates subscription URLs with
/api/proxy-v2/ path, but nginx config and deploy script incorrectly
used V1 path /api/proxy-sub/, causing 404 on subscription requests.

Changes:
- nginx-brain-proxy-snippet.conf: location /api/proxy-sub/ → /api/proxy-v2/
- deploy-brain-proxy.sh: all inline nginx templates, grep checks,
  perl/sed injections, and health checks updated to /api/proxy-v2/
- Added migration logic to auto-fix existing servers with old path

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/8e4facc2-e5bd-4114-bfd0-ec0d2ca93b6d

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 11:11:49 +00:00
copilot-swe-agent[bot] 3178c96b35
fix: V2订阅发送缺少send参数 + URL覆盖未生效
工作流调用send-subscription.js时遗漏send命令参数,
导致邮箱被解析为操作名触发"未知操作"错误。
同时修复generateSubscriptionEmail不接受URL覆盖参数的问题,
使V2工作流传入的/api/proxy-v2/路径正确用于邮件内容。

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c366b233-2a6b-4347-bb66-9013b9af3629

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 10:28:02 +00:00
copilot-swe-agent[bot] e646b24139
改进Nginx配置函数: 更灵活的端口匹配+更安全的配置注入+更好的错误处理
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/2d8735f4-e1e5-40a4-afec-464aa2dbae9d

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 09:02:27 +00:00
copilot-swe-agent[bot] 7907053588
D57修复: Nginx反代端口3802→3803 + 大脑服务器自动Nginx配置
根因: nginx-proxy-snippet.conf指向V1端口3802, 但V2订阅服务监听3803
修复:
- 新建nginx-brain-proxy-snippet.conf (V2·端口3803)
- deploy-brain-proxy.sh新增configure_nginx函数
- install/update操作自动配置Nginx反向代理
- 自动检测并修复3802→3803端口错误
- health_check新增Nginx反代检查
- 更新V1 snippet注释标明仅用于面孔服务器

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/2d8735f4-e1e5-40a4-afec-464aa2dbae9d

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 09:00:50 +00:00
copilot-swe-agent[bot] bd58cf1b7b
D57: Address code review feedback - configurable timeouts, security fixes, dynamic specs
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/24c233b1-db72-4d9c-b668-22679479825b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 08:12:16 +00:00
copilot-swe-agent[bot] 4fc20144c3
D57: ZY-CLOUD VPN living module v2 - HLDP dynamic node registration + VPN Worker
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/24c233b1-db72-4d9c-b668-22679479825b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 08:09:01 +00:00
copilot-swe-agent[bot] f26bb88872
D57: ZY-CLOUD VPN living module with 5 LivingModule interfaces
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/24c233b1-db72-4d9c-b668-22679479825b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 08:03:55 +00:00
copilot-swe-agent[bot] 5abe4aa852
D57: Three-node smart routing + UUID sync to face server
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/24c233b1-db72-4d9c-b668-22679479825b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 08:00:05 +00:00
copilot-swe-agent[bot] eb7e05306f
D57: VPN V2 multi-user system with per-email isolation
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/24c233b1-db72-4d9c-b668-22679479825b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 07:54:00 +00:00
copilot-swe-agent[bot] 1510725e4f
D57: Brain server init script + AGE OS deployment infrastructure
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/24c233b1-db72-4d9c-b668-22679479825b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 07:46:18 +00:00
copilot-swe-agent[bot] cdfa23ef28
D56: 4核8G大脑服务器(ZY-SVR-005·43.156.237.110)归入配置结构·密钥清单输出
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/a2cc1ff7-8948-4f5b-bf1a-ab7f39c842cb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-05 06:28:37 +00:00
copilot-swe-agent[bot] 24b5ec9d80
Phase 0: Add client API endpoints for ZY VPN client (sing-box config, nodes, status, speedtest, diagnostics)
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f586f1d5-1eda-4ae0-8827-20cd06a36142

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 17:57:55 +00:00
copilot-swe-agent[bot] bd0b14313c
fix: add cloud firewall diagnostics and ensure UFW port 443 for VPN
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c8257ad8-5a4b-4bd5-8df3-b895d8806ac9

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 16:36:29 +00:00
copilot-swe-agent[bot] b72d72036b
fix: 移除 Nginx duplicate default_server 冲突 — 两个部署入口都删除 /etc/nginx/sites-enabled/default (D52)
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/b6918f45-0c40-4738-978f-5630bf9ab8b4

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 16:11:19 +00:00
copilot-swe-agent[bot] 37a21bedf3
Fix: GitHub path encoding, MCP gateway write-tool security, content preview constant
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/2127a3a7-ea58-48a4-856c-84961107632b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 15:24:09 +00:00
copilot-swe-agent[bot] 3f62f770c2
D51 S6+S7: Notion client, GitHub client, 11 new MCP tools, 3800→3100 gateway
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/2127a3a7-ea58-48a4-856c-84961107632b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 15:21:18 +00:00
copilot-swe-agent[bot] 06ce7d6d38
fix: 代码审查反馈 — sed模式兼容空白、server_name去重检查、.env.keys解析健壮性
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/b544c0e1-240b-465e-9194-6ca0e2719deb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 12:17:20 +00:00
copilot-swe-agent[bot] 578b50dd22
fix: 铸渊专线Nginx反代根因修复 — default_server + localhost + 健康检查Host头 + 全流程验证进度表
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/b544c0e1-240b-465e-9194-6ca0e2719deb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 12:16:09 +00:00
copilot-swe-agent[bot] 37f44b87c9
fix: 解决code review和CodeQL反馈 — 移除tainted format string、EADDRINUSE退出不重试、uncaughtException优雅退出、clientError日志、sed注入proxy_send_timeout
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/88ed5687-7596-4d04-b181-57c89c032004

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 09:47:43 +00:00
copilot-swe-agent[bot] 71eda1389f
fix: 铸渊专线订阅服务修复 — PM2 fork模式、错误处理、Nginx配置路径、健康检查增强
根因分析:
- PM2使用cluster模式可能干扰server.listen('127.0.0.1')绑定
- subscription-server.js缺少try-catch和进程级错误处理,异常导致静默崩溃
- deploy-proxy.sh的configure_nginx()目标文件错误(/etc/nginx/sites-enabled/default → zhuyuan.conf)
- update()不调用configure_nginx(),主部署覆盖Nginx配置后proxy-sub location丢失
- 健康检查仅测直连3802,未验证Nginx反代路径
- Nginx反代缺少proxy_connect_timeout/proxy_read_timeout

修复:
1. ecosystem.proxy.config.js: 添加exec_mode:'fork'防止cluster模式
2. subscription-server.js: 请求级try-catch + server error/clientError事件 + uncaughtException保护
3. deploy-proxy.sh: configure_nginx()自动查找正确配置文件 + update()调用configure_nginx + 双路健康检查
4. zhuyuan-sovereign.conf: 添加proxy timeout配置
5. nginx-proxy-snippet.conf: 同步更新proxy_http_version和timeout

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/88ed5687-7596-4d04-b181-57c89c032004

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 09:45:36 +00:00
copilot-swe-agent[bot] d3965af623
fix: deploy-proxy.sh SMTP凭据写入使用grep+printf替代sed,避免密码特殊字符问题
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f9b09d73-b949-4f02-b3b9-2e69f90cd8b6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 09:07:17 +00:00
copilot-swe-agent[bot] faf2f28c7c
铸渊专线全面排查修复: Shell注入防护+SMTP持久化+loadConfig通用化+ecosystem环境变量补全
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f9b09d73-b949-4f02-b3b9-2e69f90cd8b6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 09:04:51 +00:00
copilot-swe-agent[bot] 20800e877e
refactor(proxy): 提取PM2管理逻辑到 start_pm2_services() 消除重复代码
update() 和 restart() 共用 start_pm2_services() 函数,
该函数统一使用 pm2 startOrRestart --update-env 处理启动和重启。

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c15b16e7-9f03-4f45-9c83-4e8fe1583aa6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 08:42:55 +00:00
copilot-swe-agent[bot] 59ce18c1c5
fix(proxy): 修复铸渊专线部署3个问题 — ufw警告抑制、PM2服务管理重构(startOrRestart)、版本号N/A
1. deploy-proxy.sh: 修复 ufw delete 'Could not delete non-existent rule' 警告
   — 先检查规则是否存在再删除,消除无效警告输出
2. deploy-proxy.sh: PM2服务管理从 describe+delete+start 重构为 startOrRestart
   — 消除 '⚠️ PM2代理服务未完整注册' 每次update都出现的问题
   — 统一 update() 和 restart() 函数的PM2逻辑
   — 添加 --update-env 确保环境变量同步
3. ecosystem.proxy.config.js: 为三个代理服务添加 version: '1.0.0'
   — 消除 PM2 进程列表中版本显示 N/A 的问题

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c15b16e7-9f03-4f45-9c83-4e8fe1583aa6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 08:40:54 +00:00
copilot-swe-agent[bot] 05634f433f
fix: 铸渊专线订阅服务502修复 — PM2进程不存在时自动启动
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/3a6becc7-9313-432b-b112-d9602a27a514

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 07:53:24 +00:00
copilot-swe-agent[bot] 5fed40c4f3
fix: address code review feedback - reset editor timer, fix graceful shutdown timeout
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/283b1454-583c-4cf7-8df8-444f15863b52

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 07:20:03 +00:00
copilot-swe-agent[bot] e2669f05b0
fix(proxy): bind subscription-server to 127.0.0.1 only, add temp file cleanup, graceful shutdown, improve key gen error handling
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/283b1454-583c-4cf7-8df8-444f15863b52

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-04 07:18:03 +00:00
copilot-swe-agent[bot] 28c5516a39
修复代码审查问题: SQL参数化/关系查询逻辑/数据库密码校验
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/ade2eb4a-06f6-42c6-a33a-fe0503789458

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-03 07:36:33 +00:00
copilot-swe-agent[bot] 37912abc51
AGE OS 落地系统架构 v1.0 · D45 · 数据库Schema + MCP Server骨架 + Agent框架 + 密钥扩展
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/ade2eb4a-06f6-42c6-a33a-fe0503789458

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-03 07:33:09 +00:00
copilot-swe-agent[bot] 67c2d096f2
安全修复:feedback API隐藏内部错误信息,改用通用错误提示
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/32fa4778-f82b-4742-b89e-3b3af9529167

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-02 14:48:48 +00:00
copilot-swe-agent[bot] 3814cf3d89
首页三栏布局 + 悬浮球可拖拽 + 动态公告ticker + 留言板/回执系统 + 后端feedback API
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/32fa4778-f82b-4742-b89e-3b3af9529167

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-02 14:46:40 +00:00
copilot-swe-agent[bot] fd6d576eda
COS桶名确认: zy-core-bucket-1317346199 + zy-corpus-bucket-1317346199 · 密钥全部就位 · 第37次对话
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c1efefab-e498-46f0-a45d-13051dcd2056

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-02 12:26:07 +00:00
copilot-swe-agent[bot] d76e27a20b
代码审查修复: 依赖安全、COS桶名注释、去除函数包装、同步防重叠
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5fc8d967-00c4-4b70-9d49-bd775684c43b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-02 12:11:11 +00:00
copilot-swe-agent[bot] 6df459247c
光湖灯塔v40.0 · 语言驱动3D翻转操作系统 + 码字工作台 + COS双桶 + 智能模型分流
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5fc8d967-00c4-4b70-9d49-bd775684c43b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-02 12:07:12 +00:00
copilot-swe-agent[bot] d2f7d73062
COS双桶对接 + 智能模型分流 + 聊天引擎(服务端)
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5fc8d967-00c4-4b70-9d49-bd775684c43b

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-02 11:50:46 +00:00
copilot-swe-agent[bot] 2cef11959d
铸渊第三十四次唤醒·部署架构调整·直接部署到服务器·不走GitHub Pages·v40.0
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/4ac68513-968e-4820-ac9b-dbf371a701cf

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-02 09:08:16 +00:00
copilot-swe-agent[bot] d7cd3099e0
fix: address code review - move npmmirror to 国内直连 section
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/d98b0abc-cf0b-4b53-8044-245d309f66a6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 15:47:27 +00:00
copilot-swe-agent[bot] c2cc3f8c1c
fix: 铸渊专线订阅YAML v3.0 · 添加DNS fake-ip + 全局设置 + sniffer + GeoData
根因: 缺少DNS fake-ip配置导致Clash Mi流量为0
修复:
- 添加完整DNS配置 (fake-ip模式 + nameserver + fallback + fallback-filter)
- 添加全局设置 (unified-delay, tcp-concurrent, ipv6:false, geodata-mode)
- 使用mixed-port替代分离的port/socks-port
- 添加sniffer域名嗅探配置
- 添加GeoData数据源URL
- 添加external-controller
- 添加skip-cert-verify:false安全设置
- 扩展路由规则 (Apple直连, 国内常用直连, 局域网直连, 更多社交/流媒体)
- global-client-fingerprint: chrome

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/d98b0abc-cf0b-4b53-8044-245d309f66a6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 15:45:18 +00:00
copilot-swe-agent[bot] aca1bea425
fix: CN relay Nginx启动失败 + 订阅自动故障转移 + 验证步骤强化
根因: setup-cn-relay.sh使用systemctl reload但Nginx未运行→静默失败→端口2053未监听
修复:
1. setup-cn-relay.sh: reload→start/reload智能切换, 健康检查失败报错退出
2. subscription-server.js: 添加url-test自动选择组, SG直连优先, CN故障自动切换
3. deploy-proxy-service.yml: 验证步骤失败时报错不再静默通过

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/e0510c81-17f8-4d94-955a-a2c8cfdf6fd3

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 11:50:23 +00:00
copilot-swe-agent[bot] 83d23e1611
refactor: extract shared stream module functions to reduce duplication, add find -maxdepth limit
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/9bb46eed-d7d9-4fa9-a557-18abe41a60f1

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 11:04:33 +00:00
copilot-swe-agent[bot] f91bd5bc8d
fix: setup-cn-relay.sh Nginx stream module loading - install libnginx-mod-stream package, expand .so search paths, add modules-enabled check, add recovery logic in §5
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/9bb46eed-d7d9-4fa9-a557-18abe41a60f1

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 11:02:44 +00:00
copilot-swe-agent[bot] d77505b17c
fix: CN服务器SSH端口可配置 · 修复Connection timed out · 添加ZY_CN_SSH_PORT支持
问题: 铸渊专线#17 CN中转配置失败 — ssh: connect to host port 22: Connection timed out
根因: 腾讯云CN服务器SSH端口可能非默认22端口,硬编码端口22导致连接超时
修复:
- deploy-proxy-service.yml: CN中转job所有SSH/SCP/ssh-keyscan命令添加-p端口参数
- deploy-to-cn-server.yml: 所有CN服务器SSH连接添加-p端口参数
- 新增ZY_CN_SSH_PORT Secret支持(默认回退22)
- 添加详细的连接失败诊断信息和排查建议
- 更新secrets-manifest.json、cn-server-profile.json、SSL-GUIDE文档

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/fb793e24-d5d6-4f39-a86f-a5d1f00db508

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 09:53:33 +00:00
copilot-swe-agent[bot] 23c70c3262
fix: 域名修正 guanghu.online → guanghulab.online + CN中转Nginx stream动态模块加载修复
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/b50bddfa-167a-4a14-afda-39a2c2afd592

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 09:23:19 +00:00
copilot-swe-agent[bot] 3f44e4fb44
fix: address code review feedback (glob guard, CN relay comments)
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/ddb1f363-5bb4-457a-b769-794c1fe0489a

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 08:29:05 +00:00
copilot-swe-agent[bot] eaa6c89864
fix: restore Reality dest to microsoft.com + add CN relay architecture
Root cause: previous change of dest from www.microsoft.com:443 to 127.0.0.1:8443
broke Reality anti-probing — GFW detected certificate mismatch and blocked VPN.

Fix 1: Restore dest to www.microsoft.com:443 (Reality anti-probing works)
Fix 2: SSL on port 8443 (external, independent from Xray)
Fix 3: CN relay via Guangzhou server (domestic users → CN:2053 → SG:443)
Fix 4: Subscription generates dual-node config (SG direct + CN relay)

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/ddb1f363-5bb4-457a-b769-794c1fe0489a

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 08:24:52 +00:00
copilot-swe-agent[bot] a3b30d50b9
fix: 修复deploy-proxy.sh中basename变量名冲突
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/4ac521db-bc43-4555-af76-a1d30b0ea1c5

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 07:58:38 +00:00
copilot-swe-agent[bot] 075246c1a8
fix: 修复Xray(VPN)与Nginx(SSL)端口443冲突·实现共存架构
核心修复:
- xray-config-template.json: dest从www.microsoft.com:443改为127.0.0.1:8443
- setup-ssl.sh: Nginx SSL监听127.0.0.1:8443(内部)而非443(外部)
- 添加DNS配置确保代理流量DNS解析可靠

架构: Xray(443外部) → 非VLESS流量回落 → Nginx(8443内部SSL)
VPN客户端和HTTPS网站共用443端口互不干扰

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/4ac521db-bc43-4555-af76-a1d30b0ea1c5

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 07:56:12 +00:00
copilot-swe-agent[bot] ae1db6ae34
fix: 代码审查修复 · certbot --redirect移除 · IP检测超时 · 路径触发优化
- setup-ssl.sh: 移除certonly模式下无效的--redirect参数
- setup-ssl.sh: IP检测添加--max-time 5超时
- setup-ssl.sh: 修复here-string兼容性(<<<改为echo|grep)
- staging-auto-deploy.yml: 移除scripts/**路径触发(避免监控脚本变更触发部署)

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/e77d1d37-c3b4-4567-96d1-f0616e1836b9

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 07:06:50 +00:00
copilot-swe-agent[bot] ddaec6b547
feat: 🔒 SSL自动化v1.0 · certbot+Let's Encrypt · 冰朔操作指南 · v23.0
冰朔第十六次对话:
- 新增 server/setup/setup-ssl.sh: certbot自动获取Let's Encrypt免费SSL证书
- 新增 docs/SSL-GUIDE-FOR-BINGSUO.md: 冰朔操作指南(3步完成SSL配置)
- deploy-to-zhuyuan-server.yml: 新增setup-ssl动作+ssl_domain输入
- README.md: SSL状态+操作指南入口+版本更新v23.0
- brain/fast-wake.json: 第十六次对话记录
- brain/secrets-manifest.json: SSL密钥改为not_needed(certbot自动管理)

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/e77d1d37-c3b4-4567-96d1-f0616e1836b9

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 07:02:55 +00:00
copilot-swe-agent[bot] 6891619c81
fix: 代码审查和安全扫描反馈修复
- work-order-manager.js: 归档前确保目录存在(mkdirSync recursive)
- staging-ops-agent.js: LLM模型名可配置(ZY_LLM_MODEL环境变量)
- staging-auto-deploy.yml: 工单读取增加try-catch错误处理
- zhuyuan-sovereign.conf: SSL配置块增加域名占位符替换说明

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/bb893563-5fa6-41ba-86e4-b6f87d2c2c32

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-03-31 06:48:30 +00:00