pangolin

wangjia/pangolin

Fork 0

Commit Graph

Author	SHA1	Message	Date
wangjia	c92cd11cc5	feat: CI 流水线 — lint + 单测 + OpenAPI 校验 + 脱敏扫描 + 镜像构建 [tsk_P5b5nIrEsfrV] 新增 .gitea/workflows/ci.yml 五个 Job： 1. lint — shellcheck -S warning 扫描全部 deploy/ shell 脚本 2. unit-test — docker-compose config 语法校验 + nginx -t（桩证书） 3. openapi-check — openapi-spec-validator 验证 design/server/openapi.yaml 4. redline-scan — ci/scan-redline.sh 扫描 UI 文案红线词（design/ jsx/dart/html） 5. image-build — docker build pangolin-edge:ci 附带： - ci/scan-redline.sh：脱敏扫描脚本，过滤注释行与外部渠道 handle - ci/nginx-test.sh：自签桩证书 + nginx -t，CI 免依赖真实 Let's Encrypt - design/server/openapi.yaml：依据 ARCHITECTURE.md §3 展开的 OAS 3.0 完整契约 - dparts.jsx / parts.jsx：修复 killSwitchSub EN 文案「the VPN drops」红线词 → 改为「connection drops」（行为描述，不提产品类别） Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-13 01:19:28 +08:00
wangjia	1a346c32c1	方案C:分发层容器化(edge nginx)+ Hy2 + DNS-01 续期 deploy-pangolin / deploy (push) Has been cancelled Details - edge: 容器化 nginx 接管 80/443,逐字移植现网 vhost(blog/jiu/marzban/pay)+ stream SNI 分流 - singbox: Hysteria2(host 网络,UDP 443) - certbot: DNS-01(Cloudflare)续期,容器化 - xray: REALITY 仅 profile newnode(本台沿用 Marzban) - deploy.sh 幂等且切换感知;cutover.sh 一次性停宿主 nginx 切容器(可秒级回滚) - 弃用方案A 的 host nginx-apply/sudoers/root-setup - 部署目录改 ~/pangolin(免 root);CI 注入 CF_API_TOKEN EC2 实测:edge nginx -t 通过(真实证书)、compose 校验通过 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-05-30 16:42:30 +08:00
wangjia	cf96989e01	Phase 0: 容器化数据面 + CI/CD 自动部署 deploy-pangolin / deploy (push) Has been cancelled Details - deploy/: Xray VLESS+REALITY (11443, 经宿主 nginx SNI 分流) + sing-box Hysteria2 (UDP 443) docker-compose - 幂等 deploy.sh / gen-secrets.sh / print-clients.sh;受限 nginx-apply 特权脚本 + 一次性 root-setup - .gitea/workflows/deploy.yml: NAS runner 经 SSH 远程部署到 EC2 - docs/ plan/: 设计方案与实施计划 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-05-30 11:48:47 +08:00

Author

SHA1

Message

Date

wangjia

c92cd11cc5

feat: CI 流水线 — lint + 单测 + OpenAPI 校验 + 脱敏扫描 + 镜像构建 [tsk_P5b5nIrEsfrV]

新增 .gitea/workflows/ci.yml 五个 Job：
  1. lint        — shellcheck -S warning 扫描全部 deploy/ shell 脚本
  2. unit-test   — docker-compose config 语法校验 + nginx -t（桩证书）
  3. openapi-check — openapi-spec-validator 验证 design/server/openapi.yaml
  4. redline-scan  — ci/scan-redline.sh 扫描 UI 文案红线词（design/ jsx/dart/html）
  5. image-build   — docker build pangolin-edge:ci

附带：
  - ci/scan-redline.sh：脱敏扫描脚本，过滤注释行与外部渠道 handle
  - ci/nginx-test.sh：自签桩证书 + nginx -t，CI 免依赖真实 Let's Encrypt
  - design/server/openapi.yaml：依据 ARCHITECTURE.md §3 展开的 OAS 3.0 完整契约
  - dparts.jsx / parts.jsx：修复 killSwitchSub EN 文案「the VPN drops」红线词
    → 改为「connection drops」（行为描述，不提产品类别）

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-13 01:19:28 +08:00

wangjia

1a346c32c1

方案C:分发层容器化(edge nginx)+ Hy2 + DNS-01 续期

deploy-pangolin / deploy (push) Has been cancelled

Details

- edge: 容器化 nginx 接管 80/443,逐字移植现网 vhost(blog/jiu/marzban/pay)+ stream SNI 分流
- singbox: Hysteria2(host 网络,UDP 443)
- certbot: DNS-01(Cloudflare)续期,容器化
- xray: REALITY 仅 profile newnode(本台沿用 Marzban)
- deploy.sh 幂等且切换感知;cutover.sh 一次性停宿主 nginx 切容器(可秒级回滚)
- 弃用方案A 的 host nginx-apply/sudoers/root-setup
- 部署目录改 ~/pangolin(免 root);CI 注入 CF_API_TOKEN

EC2 实测:edge nginx -t 通过(真实证书)、compose 校验通过

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-05-30 16:42:30 +08:00

wangjia

cf96989e01

Phase 0: 容器化数据面 + CI/CD 自动部署

deploy-pangolin / deploy (push) Has been cancelled

Details

- deploy/: Xray VLESS+REALITY (11443, 经宿主 nginx SNI 分流) + sing-box Hysteria2 (UDP 443) docker-compose
- 幂等 deploy.sh / gen-secrets.sh / print-clients.sh;受限 nginx-apply 特权脚本 + 一次性 root-setup
- .gitea/workflows/deploy.yml: NAS runner 经 SSH 远程部署到 EC2
- docs/ plan/: 设计方案与实施计划

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-05-30 11:48:47 +08:00

3 Commits