 wangjia
|
58c6eb721e
|
feat: 新增 server/api/openapi.yaml — v1 API 完整契约(tsk_A1HkEdRbXLGY)
OpenAPI 3.0.3，覆盖 doc/02 §2 全部 15 个操作：
- 认证 4（sendVerificationCode/register/login/refreshToken，security:[]）
- 账户 3（getMe/listDevices/deleteDevice）
- 商业 3（redeemCode/adsUnlock/listPlans）
- 节点 3（listNodes 含 304/connectNode/disconnectNode）
- 用量 1（getUsage）、公告 1（listNotices）
全量 schema：Error·TokenPair·Me·UserInfo·SubscriptionInfo·TodayUsageSummary·
Device·Plan·RedeemResult·NodeDirectory·Node·ConnectCredential·
RealityParams·Hysteria2Params·UsagePoint·Notice
安全约定：bearerAuth(JWT RS256) 全局；auth 四操作 security:[]；
components/responses 统一 Error 引用；429 TooManyRequests 带 Retry-After；
节点目录不含密钥，密钥仅由 connect 端点下发；对外 ID 全部 uuid 格式。
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-06-13 01:29:31 +08:00 |
|
|
wangjia
|
a642bf16a2
|
feat: 同步 design/ 设计系统(含 iPad tablet kit) + 架构任务拆分(todo/)
design/ 同步自最新设计导出，新增 ui_kits/tablet/ 平板分栏布局；todo/ 录入 18 个并行实施任务。
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
|
2026-06-11 23:57:57 +08:00 |
|
|
wangjia
|
3ae96ef229
|
docs: 新增整体架构设计文档(doc/，HTML 七章)
覆盖前端五端/后端/MySQL/弹性节点拓扑/Web安全/安全总纲，遵循 design/ 设计系统视觉呈现。
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
|
2026-06-11 23:57:49 +08:00 |
|
|
wangjia
|
4bff8593e7
|
docs: 新增 CLAUDE.md(部署架构与主机约束指引)
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-05-30 23:30:08 +08:00 |
|
|
wangjia
|
73e026a4df
|
edge 容器自带证书续期(certbot in nginx 镜像)
deploy-pangolin / deploy (push) Has been cancelled
- edge 改为自定义镜像:官方 nginx + certbot + dns-cloudflare 插件
- pangolin-entrypoint.sh:后台每12h certbot renew,续期后本容器内 nginx -s reload
- 不再需要宿主 cron / docker socket / 独立 certbot 服务做日常续期
- /etc/letsencrypt 改 rw 挂载,挂入 cloudflare.ini
- compose 去掉 build:(宿主 docker-compose 不支持 compose build),改脚本 docker build
- deploy.sh/cutover.sh: docker build -t pangolin-edge:local 后再 up
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-05-30 23:10:17 +08:00 |
|
|
wangjia
|
39e7f2fc11
|
回滚:rollback.sh + docs/回滚手册.md
deploy-pangolin / deploy (push) Has been cancelled
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-05-30 17:09:00 +08:00 |
|
|
wangjia
|
1bb3a26f0c
|
cutover: 失败自动回滚到宿主 nginx
deploy-pangolin / deploy (push) Has been cancelled
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-05-30 16:52:05 +08:00 |
|
|
wangjia
|
fa3954724c
|
print-clients: 修正提示路径为 ~/pangolin
deploy-pangolin / deploy (push) Has been cancelled
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-05-30 16:45:15 +08:00 |
|
|
wangjia
|
1a346c32c1
|
方案C:分发层容器化(edge nginx)+ Hy2 + DNS-01 续期
deploy-pangolin / deploy (push) Has been cancelled
- edge: 容器化 nginx 接管 80/443,逐字移植现网 vhost(blog/jiu/marzban/pay)+ stream SNI 分流
- singbox: Hysteria2(host 网络,UDP 443)
- certbot: DNS-01(Cloudflare)续期,容器化
- xray: REALITY 仅 profile newnode(本台沿用 Marzban)
- deploy.sh 幂等且切换感知;cutover.sh 一次性停宿主 nginx 切容器(可秒级回滚)
- 弃用方案A 的 host nginx-apply/sudoers/root-setup
- 部署目录改 ~/pangolin(免 root);CI 注入 CF_API_TOKEN
EC2 实测:edge nginx -t 通过(真实证书)、compose 校验通过
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-05-30 16:42:30 +08:00 |
|
|
wangjia
|
bc77e85b7d
|
root-setup: 同时创建并授权 /opt/pangolin 部署目录
deploy-pangolin / deploy (push) Has been cancelled
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-05-30 11:52:32 +08:00 |
|
|
wangjia
|
cf96989e01
|
Phase 0: 容器化数据面 + CI/CD 自动部署
deploy-pangolin / deploy (push) Has been cancelled
- deploy/: Xray VLESS+REALITY (11443, 经宿主 nginx SNI 分流) + sing-box Hysteria2 (UDP 443) docker-compose
- 幂等 deploy.sh / gen-secrets.sh / print-clients.sh;受限 nginx-apply 特权脚本 + 一次性 root-setup
- .gitea/workflows/deploy.yml: NAS runner 经 SSH 远程部署到 EC2
- docs/ plan/: 设计方案与实施计划
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-05-30 11:48:47 +08:00 |
|
 wangjia
|
833b8365da
|
Initial commit
|
2026-05-29 23:53:38 +00:00 |
|