wangjia
1a346c32c1
deploy-pangolin / deploy (push) Has been cancelled
- edge: 容器化 nginx 接管 80/443,逐字移植现网 vhost(blog/jiu/marzban/pay)+ stream SNI 分流 - singbox: Hysteria2(host 网络,UDP 443) - certbot: DNS-01(Cloudflare)续期,容器化 - xray: REALITY 仅 profile newnode(本台沿用 Marzban) - deploy.sh 幂等且切换感知;cutover.sh 一次性停宿主 nginx 切容器(可秒级回滚) - 弃用方案A 的 host nginx-apply/sudoers/root-setup - 部署目录改 ~/pangolin(免 root);CI 注入 CF_API_TOKEN EC2 实测:edge nginx -t 通过(真实证书)、compose 校验通过 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
21 lines
780 B
Plaintext
21 lines
780 B
Plaintext
# 443/TCP SNI 分流(ssl_preread)—— 逐字沿用现网,后端地址不变。
|
|
# host 网络下容器内的 127.0.0.1 即宿主 loopback,可直达各后端。
|
|
stream {
|
|
map $ssl_preread_server_name $backend {
|
|
www.cloudflare.com 127.0.0.1:10443; # Marzban REALITY(线上代理)
|
|
vpn.51yanmei.com 127.0.0.1:8443; # Marzban 面板(本 nginx http)
|
|
blog.51yanmei.com 127.0.0.1:8444; # 博客(本 nginx http)
|
|
jiu.51yanmei.com 127.0.0.1:8445; # jiu(本 nginx http)
|
|
default 127.0.0.1:10443; # 兜底 → Marzban REALITY
|
|
}
|
|
|
|
server {
|
|
listen 443;
|
|
listen [::]:443;
|
|
proxy_pass $backend;
|
|
ssl_preread on;
|
|
proxy_connect_timeout 10s;
|
|
proxy_timeout 3600s;
|
|
}
|
|
}
|