feat: migrate Osaka node to full sing-box
This commit is contained in:
Codex
@@ -1,6 +0,0 @@
|
||||
# LiteLLM Vertex AI Relay
|
||||
|
||||
- 仅通过 HK 节点的 Tailscale IPv4 地址监听；`LISTEN_IP` 不要填写公网地址或 `0.0.0.0`。
|
||||
- ADC、LiteLLM key 仅存放于 Arcane `.env`，不得提交 Git。
|
||||
- 默认监听端口为 `1049`；需要修改时设置 `LITELLM_PORT`。
|
||||
- 后续 Vertex Anthropic 模型在 `config.yaml` 增加独立模型项。
|
||||
@@ -1,39 +0,0 @@
|
||||
services:
|
||||
adc-init:
|
||||
image: alpine:3.22
|
||||
restart: "no"
|
||||
environment:
|
||||
GOOGLE_ADC_B64: ${GOOGLE_ADC_B64}
|
||||
volumes:
|
||||
- google-adc:/credentials
|
||||
command:
|
||||
- /bin/sh
|
||||
- -c
|
||||
- |
|
||||
umask 077
|
||||
printf '%s' "$${GOOGLE_ADC_B64}" | base64 -d > /credentials/application_default_credentials.json
|
||||
|
||||
litellm:
|
||||
image: ghcr.io/berriai/litellm:main-stable
|
||||
restart: unless-stopped
|
||||
depends_on:
|
||||
adc-init:
|
||||
condition: service_completed_successfully
|
||||
network_mode: host
|
||||
environment:
|
||||
GOOGLE_APPLICATION_CREDENTIALS: /credentials/application_default_credentials.json
|
||||
VERTEXAI_PROJECT: ${VERTEXAI_PROJECT}
|
||||
VERTEXAI_LOCATION: ${VERTEXAI_LOCATION:-global}
|
||||
LITELLM_MASTER_KEY: ${LITELLM_MASTER_KEY}
|
||||
volumes:
|
||||
- ./config.yaml:/app/config.yaml:ro
|
||||
- google-adc:/credentials:ro
|
||||
command: ["--config", "/app/config.yaml", "--host", "${LISTEN_IP:-127.0.0.1}", "--port", "${LITELLM_PORT:-1049}"]
|
||||
logging:
|
||||
driver: json-file
|
||||
options:
|
||||
max-size: 1m
|
||||
max-file: "2"
|
||||
|
||||
volumes:
|
||||
google-adc:
|
||||
@@ -1,15 +0,0 @@
|
||||
model_list:
|
||||
- model_name: gemini-3.6-flash
|
||||
litellm_params:
|
||||
model: vertex_ai/gemini-3.6-flash
|
||||
vertex_project: os.environ/VERTEXAI_PROJECT
|
||||
vertex_location: os.environ/VERTEXAI_LOCATION
|
||||
|
||||
- model_name: gemini-3.5-flash-lite
|
||||
litellm_params:
|
||||
model: vertex_ai/gemini-3.5-flash-lite
|
||||
vertex_project: os.environ/VERTEXAI_PROJECT
|
||||
vertex_location: os.environ/VERTEXAI_LOCATION
|
||||
|
||||
general_settings:
|
||||
master_key: os.environ/LITELLM_MASTER_KEY
|
||||
@@ -1,41 +0,0 @@
|
||||
services:
|
||||
config-render:
|
||||
image: alpine:3.20
|
||||
environment:
|
||||
DOMAIN: ${DOMAIN}
|
||||
ACME_EMAIL: ${ACME_EMAIL}
|
||||
LISTEN_PORT: ${LISTEN_PORT}
|
||||
USER1_PASSWORD: ${USER1_PASSWORD}
|
||||
CLOUDFLARE_API_TOKEN: ${CLOUDFLARE_API_TOKEN}
|
||||
volumes:
|
||||
- ./etc/sing-box/config.json.template:/template/config.json.template:ro
|
||||
- sing-box-config:/output
|
||||
command:
|
||||
- /bin/sh
|
||||
- -ec
|
||||
- |
|
||||
apk add --no-cache gettext
|
||||
envsubst < /template/config.json.template > /output/config.json
|
||||
chmod 600 /output/config.json
|
||||
restart: "no"
|
||||
|
||||
sing-box:
|
||||
image: ghcr.io/sagernet/sing-box:v1.12.13
|
||||
restart: unless-stopped
|
||||
depends_on:
|
||||
config-render:
|
||||
condition: service_completed_successfully
|
||||
volumes:
|
||||
- sing-box-config:/etc/sing-box:ro
|
||||
- sing-box-data:/var/lib/sing-box
|
||||
command: -D /var/lib/sing-box -C /etc/sing-box/ run
|
||||
network_mode: host
|
||||
logging:
|
||||
driver: json-file
|
||||
options:
|
||||
max-size: 200k
|
||||
max-file: "2"
|
||||
|
||||
volumes:
|
||||
sing-box-config:
|
||||
sing-box-data:
|
||||
@@ -1,43 +0,0 @@
|
||||
{
|
||||
"inbounds": [
|
||||
{
|
||||
"type": "trojan",
|
||||
"tag": "trojan-in",
|
||||
"listen": "::",
|
||||
"listen_port": ${LISTEN_PORT},
|
||||
"sniff": true,
|
||||
"sniff_override_destination": true,
|
||||
"users": [
|
||||
{
|
||||
"name": "user1",
|
||||
"password": "${USER1_PASSWORD}"
|
||||
}
|
||||
],
|
||||
"tls": {
|
||||
"enabled": true,
|
||||
"server_name": "${DOMAIN}",
|
||||
"acme": {
|
||||
"domain": "${DOMAIN}",
|
||||
"email": "${ACME_EMAIL}",
|
||||
"dns01_challenge": {
|
||||
"provider": "cloudflare",
|
||||
"api_token": "${CLOUDFLARE_API_TOKEN}"
|
||||
}
|
||||
}
|
||||
},
|
||||
"multiplex": {
|
||||
"enabled": true
|
||||
}
|
||||
}
|
||||
],
|
||||
"outbounds": [
|
||||
{
|
||||
"type": "direct"
|
||||
}
|
||||
],
|
||||
"log": {
|
||||
"disabled": false,
|
||||
"level": "info",
|
||||
"timestamp": true
|
||||
}
|
||||
}
|
||||
@@ -1,21 +0,0 @@
|
||||
FROM alpine:3.21 AS downloader
|
||||
|
||||
ARG SNELL_VERSION=5.0.1
|
||||
ARG SNELL_ZIP_SHA256=9bea1c2b9e35b73b31634856c04d18c393072b9e5dcde6a32781d8b8f908c539
|
||||
|
||||
RUN apk add --no-cache curl unzip \
|
||||
&& curl -fsSL "https://dl.nssurge.com/snell/snell-server-v${SNELL_VERSION}-linux-amd64.zip" -o /tmp/snell.zip \
|
||||
&& echo "${SNELL_ZIP_SHA256} /tmp/snell.zip" | sha256sum -c - \
|
||||
&& unzip -p /tmp/snell.zip snell-server > /snell-server \
|
||||
&& chmod 755 /snell-server
|
||||
|
||||
FROM debian:bookworm-slim
|
||||
|
||||
RUN apt-get update \
|
||||
&& apt-get install -y --no-install-recommends ca-certificates libstdc++6 \
|
||||
&& rm -rf /var/lib/apt/lists/*
|
||||
COPY --from=downloader /snell-server /usr/local/bin/snell-server
|
||||
COPY entrypoint.sh /usr/local/bin/entrypoint.sh
|
||||
RUN chmod 755 /usr/local/bin/entrypoint.sh
|
||||
|
||||
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
|
||||
@@ -1,5 +0,0 @@
|
||||
# Snell Server
|
||||
|
||||
- 当前锁定 Snell Server 5.0.1，由本目录 Dockerfile 从官方包构建并校验 SHA-256。
|
||||
- 客户端因禁用 QUIC 显示 `version=4` 属现有兼容用法，不改变服务端 5.0.1 部署。
|
||||
- Snell 6 与 5 不兼容。迁移时新增独立 `snell-v6` 服务、端口和 PSK，与 v5 并存；客户端迁移完成后再停 v5。
|
||||
@@ -1,19 +0,0 @@
|
||||
services:
|
||||
snell-v5:
|
||||
build:
|
||||
context: .
|
||||
args:
|
||||
SNELL_VERSION: 5.0.1
|
||||
SNELL_ZIP_SHA256: 9bea1c2b9e35b73b31634856c04d18c393072b9e5dcde6a32781d8b8f908c539
|
||||
image: local/snell-server:5.0.1
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- "${HOST_PORT:-47854}:9102/tcp"
|
||||
environment:
|
||||
PSK: ${PSK}
|
||||
PORT: 9102
|
||||
logging:
|
||||
driver: json-file
|
||||
options:
|
||||
max-size: 200k
|
||||
max-file: "2"
|
||||
@@ -1,19 +0,0 @@
|
||||
#!/bin/sh
|
||||
set -eu
|
||||
|
||||
: "${PSK:?PSK is required}"
|
||||
: "${PORT:?PORT is required}"
|
||||
|
||||
case "$PORT" in
|
||||
*[!0-9]*|'') echo "PORT must be numeric" >&2; exit 1 ;;
|
||||
esac
|
||||
|
||||
umask 077
|
||||
cat > /tmp/snell-server.conf <<EOF
|
||||
[snell-server]
|
||||
listen = :::${PORT}
|
||||
psk = ${PSK}
|
||||
EOF
|
||||
|
||||
exec /usr/local/bin/snell-server -c /tmp/snell-server.conf
|
||||
|
||||
@@ -1,19 +0,0 @@
|
||||
rules.kais.cloud {
|
||||
root * /srv/web
|
||||
reverse_proxy filebrowser:80
|
||||
}
|
||||
|
||||
dav.kais.cloud {
|
||||
root * /srv/web
|
||||
reverse_proxy webdav:80
|
||||
}
|
||||
|
||||
share.kais.cloud {
|
||||
root * /srv/share
|
||||
encode zstd gzip
|
||||
file_server browse
|
||||
}
|
||||
|
||||
api.opfo.xyz {
|
||||
reverse_proxy 100.100.130.66:1049
|
||||
}
|
||||
@@ -1,7 +0,0 @@
|
||||
# HK Web Services
|
||||
|
||||
- Arcane 项目名：`web-managed`
|
||||
- 复用旧项目 `/opt/stacks/web` 下的持久化数据。
|
||||
- Secret 仅存 Arcane `.env`：`WEBDAV_PASSWORD`。
|
||||
- 切换前先停止旧 `/opt/stacks/web/compose.yaml`，再启动本项目。
|
||||
- `metacubexd` 与 `metube` 不迁移。
|
||||
@@ -1,35 +0,0 @@
|
||||
services:
|
||||
caddy:
|
||||
image: caddy:2.10.2
|
||||
container_name: caddy
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- "80:80"
|
||||
- "443:443"
|
||||
- "443:443/udp"
|
||||
volumes:
|
||||
- ./Caddyfile:/etc/caddy/Caddyfile:ro
|
||||
- /opt/stacks/web/caddy/site:/srv
|
||||
- /opt/stacks/web/caddy/data:/data
|
||||
- /opt/stacks/web/caddy/config:/config
|
||||
|
||||
filebrowser:
|
||||
image: filebrowser/filebrowser:s6
|
||||
container_name: filebrowser
|
||||
restart: unless-stopped
|
||||
environment:
|
||||
PUID: 65534
|
||||
PGID: 65534
|
||||
volumes:
|
||||
- /opt/stacks/web/filebrowser/database:/database
|
||||
- /opt/stacks/web/filebrowser/config:/config
|
||||
- /opt/stacks/web/filebrowser/storage:/srv/web
|
||||
|
||||
webdav:
|
||||
image: jinlife/docker-cwebdav
|
||||
restart: always
|
||||
environment:
|
||||
USERNAME: dav
|
||||
PASSWORD: ${WEBDAV_PASSWORD}
|
||||
volumes:
|
||||
- /opt/stacks/web/dav:/media
|
||||
Reference in New Issue
Block a user