bingshuo
/
zhizhi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
2,136 Commits 1 Branch 0 Tags 10 MiB
Commit Graph

8 Commits

Author SHA1 Message Date
copilot-swe-agent[bot] b2aaeeab88
fix: V2 VPN subscription 404 - nginx path /api/proxy-sub/ → /api/proxy-v2/ 
Root cause: deploy-brain-proxy.yml generates subscription URLs with
/api/proxy-v2/ path, but nginx config and deploy script incorrectly
used V1 path /api/proxy-sub/, causing 404 on subscription requests.

Changes:
- nginx-brain-proxy-snippet.conf: location /api/proxy-sub/ → /api/proxy-v2/
- deploy-brain-proxy.sh: all inline nginx templates, grep checks,
  perl/sed injections, and health checks updated to /api/proxy-v2/
- Added migration logic to auto-fix existing servers with old path

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/8e4facc2-e5bd-4114-bfd0-ec0d2ca93b6d

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-05 11:11:49 +00:00
copilot-swe-agent[bot] 7907053588
D57修复: Nginx反代端口3802→3803 + 大脑服务器自动Nginx配置 
根因: nginx-proxy-snippet.conf指向V1端口3802, 但V2订阅服务监听3803
修复:
- 新建nginx-brain-proxy-snippet.conf (V2·端口3803)
- deploy-brain-proxy.sh新增configure_nginx函数
- install/update操作自动配置Nginx反向代理
- 自动检测并修复3802→3803端口错误
- health_check新增Nginx反代检查
- 更新V1 snippet注释标明仅用于面孔服务器

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/2d8735f4-e1e5-40a4-afec-464aa2dbae9d

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-05 09:00:50 +00:00
copilot-swe-agent[bot] bd0b14313c
fix: add cloud firewall diagnostics and ensure UFW port 443 for VPN 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c8257ad8-5a4b-4bd5-8df3-b895d8806ac9

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-04 16:36:29 +00:00
copilot-swe-agent[bot] 71eda1389f
fix: 铸渊专线订阅服务修复 — PM2 fork模式、错误处理、Nginx配置路径、健康检查增强 
根因分析:
- PM2使用cluster模式可能干扰server.listen('127.0.0.1')绑定
- subscription-server.js缺少try-catch和进程级错误处理，异常导致静默崩溃
- deploy-proxy.sh的configure_nginx()目标文件错误(/etc/nginx/sites-enabled/default → zhuyuan.conf)
- update()不调用configure_nginx()，主部署覆盖Nginx配置后proxy-sub location丢失
- 健康检查仅测直连3802，未验证Nginx反代路径
- Nginx反代缺少proxy_connect_timeout/proxy_read_timeout

修复:
1. ecosystem.proxy.config.js: 添加exec_mode:'fork'防止cluster模式
2. subscription-server.js: 请求级try-catch + server error/clientError事件 + uncaughtException保护
3. deploy-proxy.sh: configure_nginx()自动查找正确配置文件 + update()调用configure_nginx + 双路健康检查
4. zhuyuan-sovereign.conf: 添加proxy timeout配置
5. nginx-proxy-snippet.conf: 同步更新proxy_http_version和timeout

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/88ed5687-7596-4d04-b181-57c89c032004

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-04 09:45:36 +00:00
copilot-swe-agent[bot] eaa6c89864
fix: restore Reality dest to microsoft.com + add CN relay architecture 
Root cause: previous change of dest from www.microsoft.com:443 to 127.0.0.1:8443
broke Reality anti-probing — GFW detected certificate mismatch and blocked VPN.

Fix 1: Restore dest to www.microsoft.com:443 (Reality anti-probing works)
Fix 2: SSL on port 8443 (external, independent from Xray)
Fix 3: CN relay via Guangzhou server (domestic users → CN:2053 → SG:443)
Fix 4: Subscription generates dual-node config (SG direct + CN relay)

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/ddb1f363-5bb4-457a-b769-794c1fe0489a

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-03-31 08:24:52 +00:00
copilot-swe-agent[bot] 075246c1a8
fix: 修复Xray(VPN)与Nginx(SSL)端口443冲突·实现共存架构 
核心修复:
- xray-config-template.json: dest从www.microsoft.com:443改为127.0.0.1:8443
- setup-ssl.sh: Nginx SSL监听127.0.0.1:8443(内部)而非443(外部)
- 添加DNS配置确保代理流量DNS解析可靠

架构: Xray(443外部) → 非VLESS流量回落 → Nginx(8443内部SSL)
VPN客户端和HTTPS网站共用443端口互不干扰

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/4ac521db-bc43-4555-af76-a1d30b0ea1c5

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-03-31 07:56:12 +00:00
copilot-swe-agent[bot] b3ad4d5294
fix: 修复铸渊专线 Xray 启动失败 (权限拒绝 + User=nobody + GFW警告) 
1. 创建 systemd drop-in override 将 Xray 运行用户从 nobody 改为 root
   - 修复 "permission denied" 写入日志目录
   - 消除 "Special user nobody configured" systemd 警告
2. 显式设置日志目录权限 chmod 755
3. 从 REALITY serverNames 移除 www.apple.com (消除 GFW 封锁风险警告)
4. deploy-proxy.sh 提取共用函数减少重复代码

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f201a674-d23b-4eaf-a0e6-f46c380e9494

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-03-31 04:45:06 +00:00
copilot-swe-agent[bot] 23b6619feb
铸渊专线VPN代理服务·全部代码+架构+操作指南·v18.0·第十一次对话 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5419233e-e968-4807-9644-2281c40b91fb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-03-31 02:28:21 +00:00