bingshuo
/
zhizhi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
2,136 Commits 1 Branch 0 Tags 10 MiB
Commit Graph

21 Commits

Author SHA1 Message Date
copilot-swe-agent[bot] bd0b14313c
fix: add cloud firewall diagnostics and ensure UFW port 443 for VPN 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c8257ad8-5a4b-4bd5-8df3-b895d8806ac9

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-04 16:36:29 +00:00
copilot-swe-agent[bot] b72d72036b
fix: 移除 Nginx duplicate default_server 冲突 — 两个部署入口都删除 /etc/nginx/sites-enabled/default (D52) 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/b6918f45-0c40-4738-978f-5630bf9ab8b4

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-04 16:11:19 +00:00
copilot-swe-agent[bot] 06ce7d6d38
fix: 代码审查反馈 — sed模式兼容空白、server_name去重检查、.env.keys解析健壮性 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/b544c0e1-240b-465e-9194-6ca0e2719deb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-04 12:17:20 +00:00
copilot-swe-agent[bot] 578b50dd22
fix: 铸渊专线Nginx反代根因修复 — default_server + localhost + 健康检查Host头 + 全流程验证进度表 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/b544c0e1-240b-465e-9194-6ca0e2719deb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-04 12:16:09 +00:00
copilot-swe-agent[bot] 37f44b87c9
fix: 解决code review和CodeQL反馈 — 移除tainted format string、EADDRINUSE退出不重试、uncaughtException优雅退出、clientError日志、sed注入proxy_send_timeout 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/88ed5687-7596-4d04-b181-57c89c032004

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-04 09:47:43 +00:00
copilot-swe-agent[bot] 71eda1389f
fix: 铸渊专线订阅服务修复 — PM2 fork模式、错误处理、Nginx配置路径、健康检查增强 
根因分析:
- PM2使用cluster模式可能干扰server.listen('127.0.0.1')绑定
- subscription-server.js缺少try-catch和进程级错误处理，异常导致静默崩溃
- deploy-proxy.sh的configure_nginx()目标文件错误(/etc/nginx/sites-enabled/default → zhuyuan.conf)
- update()不调用configure_nginx()，主部署覆盖Nginx配置后proxy-sub location丢失
- 健康检查仅测直连3802，未验证Nginx反代路径
- Nginx反代缺少proxy_connect_timeout/proxy_read_timeout

修复:
1. ecosystem.proxy.config.js: 添加exec_mode:'fork'防止cluster模式
2. subscription-server.js: 请求级try-catch + server error/clientError事件 + uncaughtException保护
3. deploy-proxy.sh: configure_nginx()自动查找正确配置文件 + update()调用configure_nginx + 双路健康检查
4. zhuyuan-sovereign.conf: 添加proxy timeout配置
5. nginx-proxy-snippet.conf: 同步更新proxy_http_version和timeout

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/88ed5687-7596-4d04-b181-57c89c032004

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-04 09:45:36 +00:00
copilot-swe-agent[bot] d3965af623
fix: deploy-proxy.sh SMTP凭据写入使用grep+printf替代sed，避免密码特殊字符问题 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f9b09d73-b949-4f02-b3b9-2e69f90cd8b6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-04 09:07:17 +00:00
copilot-swe-agent[bot] faf2f28c7c
铸渊专线全面排查修复: Shell注入防护+SMTP持久化+loadConfig通用化+ecosystem环境变量补全 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f9b09d73-b949-4f02-b3b9-2e69f90cd8b6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-04 09:04:51 +00:00
copilot-swe-agent[bot] 20800e877e
refactor(proxy): 提取PM2管理逻辑到 start_pm2_services() 消除重复代码 
update() 和 restart() 共用 start_pm2_services() 函数，
该函数统一使用 pm2 startOrRestart --update-env 处理启动和重启。

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c15b16e7-9f03-4f45-9c83-4e8fe1583aa6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-04 08:42:55 +00:00
copilot-swe-agent[bot] 59ce18c1c5
fix(proxy): 修复铸渊专线部署3个问题 — ufw警告抑制、PM2服务管理重构(startOrRestart)、版本号N/A 
1. deploy-proxy.sh: 修复 ufw delete 'Could not delete non-existent rule' 警告
   — 先检查规则是否存在再删除，消除无效警告输出
2. deploy-proxy.sh: PM2服务管理从 describe+delete+start 重构为 startOrRestart
   — 消除 '⚠️ PM2代理服务未完整注册' 每次update都出现的问题
   — 统一 update() 和 restart() 函数的PM2逻辑
   — 添加 --update-env 确保环境变量同步
3. ecosystem.proxy.config.js: 为三个代理服务添加 version: '1.0.0'
   — 消除 PM2 进程列表中版本显示 N/A 的问题

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/c15b16e7-9f03-4f45-9c83-4e8fe1583aa6

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-04 08:40:54 +00:00
copilot-swe-agent[bot] 05634f433f
fix: 铸渊专线订阅服务502修复 — PM2进程不存在时自动启动 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/3a6becc7-9313-432b-b112-d9602a27a514

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-04-04 07:53:24 +00:00
copilot-swe-agent[bot] 3f44e4fb44
fix: address code review feedback (glob guard, CN relay comments) 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/ddb1f363-5bb4-457a-b769-794c1fe0489a

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-03-31 08:29:05 +00:00
copilot-swe-agent[bot] eaa6c89864
fix: restore Reality dest to microsoft.com + add CN relay architecture 
Root cause: previous change of dest from www.microsoft.com:443 to 127.0.0.1:8443
broke Reality anti-probing — GFW detected certificate mismatch and blocked VPN.

Fix 1: Restore dest to www.microsoft.com:443 (Reality anti-probing works)
Fix 2: SSL on port 8443 (external, independent from Xray)
Fix 3: CN relay via Guangzhou server (domestic users → CN:2053 → SG:443)
Fix 4: Subscription generates dual-node config (SG direct + CN relay)

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/ddb1f363-5bb4-457a-b769-794c1fe0489a

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-03-31 08:24:52 +00:00
copilot-swe-agent[bot] a3b30d50b9
fix: 修复deploy-proxy.sh中basename变量名冲突 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/4ac521db-bc43-4555-af76-a1d30b0ea1c5

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-03-31 07:58:38 +00:00
copilot-swe-agent[bot] 075246c1a8
fix: 修复Xray(VPN)与Nginx(SSL)端口443冲突·实现共存架构 
核心修复:
- xray-config-template.json: dest从www.microsoft.com:443改为127.0.0.1:8443
- setup-ssl.sh: Nginx SSL监听127.0.0.1:8443(内部)而非443(外部)
- 添加DNS配置确保代理流量DNS解析可靠

架构: Xray(443外部) → 非VLESS流量回落 → Nginx(8443内部SSL)
VPN客户端和HTTPS网站共用443端口互不干扰

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/4ac521db-bc43-4555-af76-a1d30b0ea1c5

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-03-31 07:56:12 +00:00
copilot-swe-agent[bot] 11e96ad4ac
fix: 铸渊专线订阅URL改为Nginx反代路径，解决端口3802外部不可达问题 
根因：腾讯云安全组未开放3802端口，外部直连不可达。
修复：订阅URL从 :3802/sub/{token} 改为 /api/proxy-sub/sub/{token}，
     通过Nginx反代(端口80)访问，无需额外开放端口。

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/14fb1c91-6f8d-467a-ae1d-a826754f5cca

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-03-31 06:25:05 +00:00
copilot-swe-agent[bot] 6c20c7efb4
🌐 修复铸渊专线订阅服务连接失败 · 绑定0.0.0.0+Nginx反代+密钥持久化 
根因: subscription-server.js绑定127.0.0.1导致外部客户端无法连接

修复:
- subscription-server.js: 绑定改为0.0.0.0, getServerHost()增加.env.keys回退
- zhuyuan-sovereign.conf: 添加/api/proxy-sub/反代location块
- deploy-proxy.sh: 新增save_server_host()持久化ZY_SERVER_HOST
- deploy-proxy-service.yml: 部署时export ZY_SERVER_HOST

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f70d170f-1916-4f79-a461-2b674592df30

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-03-31 05:48:38 +00:00
copilot-swe-agent[bot] b3ad4d5294
fix: 修复铸渊专线 Xray 启动失败 (权限拒绝 + User=nobody + GFW警告) 
1. 创建 systemd drop-in override 将 Xray 运行用户从 nobody 改为 root
   - 修复 "permission denied" 写入日志目录
   - 消除 "Special user nobody configured" systemd 警告
2. 显式设置日志目录权限 chmod 755
3. 从 REALITY serverNames 移除 www.apple.com (消除 GFW 封锁风险警告)
4. deploy-proxy.sh 提取共用函数减少重复代码

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/f201a674-d23b-4eaf-a0e6-f46c380e9494

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-03-31 04:45:06 +00:00
copilot-swe-agent[bot] b8a5355827
fix: 铸渊专线密钥生成脚本健壮性修复 - 移除set -e改为手动错误处理 - xray x25519支持stdout/stderr双路捕获和多种输出格式 - openssl X25519 fallback使用DER格式正确提取base64url密钥 - 随机占位密钥兜底 - install-xray.sh防止BBR重复追加和generate-keys错误传播 - deploy-proxy.sh支持环境变量优先和密钥文件fallback 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/30c8f4ac-a9ab-450c-85ce-ac2c40ffc705

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-03-31 03:44:32 +00:00
copilot-swe-agent[bot] 1eccd141ae
代码审查修复: 移除硬编码IP·增加输入验证·安全加固 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5419233e-e968-4807-9644-2281c40b91fb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-03-31 02:31:36 +00:00
copilot-swe-agent[bot] 23b6619feb
铸渊专线VPN代理服务·全部代码+架构+操作指南·v18.0·第十一次对话 
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/5419233e-e968-4807-9644-2281c40b91fb

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
 2026-03-31 02:28:21 +00:00