kai/infra-docker-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add DC9 HAProxy TLS front door

Browse Source
This commit is contained in:
Codex
2026-09-02 22:54:05 -07:00
parent 7ea4515b27
commit 787a1128c1
8 changed files with 142 additions and 72 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/bwh-us-dc9/sing-box/.env.example
+2 -7
View File
@@ -5,16 +5,11 @@ USER1_PASSWORD=change-me
CLOUDFLARE_API_TOKEN=change-me
ANYTLS_DOMAIN=sb-dd65a3.kais.cloud
ANYTLS_HY2_PORT=43824
ANYTLS_PORT=43824
ANYTLS_PASSWORD=change-me
HY2_PASSWORD=change-me
HY2_OBFS_PASSWORD=change-me
VLESS_PORT=22590
VLESS_UUID=00000000-0000-4000-8000-000000000000
REALITY_SERVER_NAME=www.cloudflare.com
REALITY_PRIVATE_KEY=change-me
REALITY_SHORT_ID=0123456789abcdef
HY2_PORT=443
# sing-box uses version 5 for the Snell v4-compatible TCP wire protocol.
SNELL_V4_PORT=53469
servers/bwh-us-dc9/sing-box/compose.yaml
+3 -7
View File
@@ -1,6 +1,6 @@
services:
config-render:
image: alpine:3.20
image: alpine:3.24
environment:
DOMAIN: ${DOMAIN}
ACME_EMAIL: ${ACME_EMAIL}
@@ -8,15 +8,11 @@ services:
USER1_PASSWORD: ${USER1_PASSWORD}
CLOUDFLARE_API_TOKEN: ${CLOUDFLARE_API_TOKEN}
ANYTLS_DOMAIN: ${ANYTLS_DOMAIN}
ANYTLS_HY2_PORT: ${ANYTLS_HY2_PORT}
ANYTLS_PORT: ${ANYTLS_PORT}
ANYTLS_PASSWORD: ${ANYTLS_PASSWORD}
HY2_PASSWORD: ${HY2_PASSWORD}
HY2_OBFS_PASSWORD: ${HY2_OBFS_PASSWORD}
VLESS_PORT: ${VLESS_PORT}
VLESS_UUID: ${VLESS_UUID}
REALITY_SERVER_NAME: ${REALITY_SERVER_NAME}
REALITY_PRIVATE_KEY: ${REALITY_PRIVATE_KEY}
REALITY_SHORT_ID: ${REALITY_SHORT_ID}
HY2_PORT: ${HY2_PORT}
SNELL_V4_PORT: ${SNELL_V4_PORT}
SNELL_V4_PSK: ${SNELL_V4_PSK}
SNELL_V6_PORT: ${SNELL_V6_PORT}
servers/bwh-us-dc9/sing-box/etc/sing-box/config.json.template
+20 -58
View File
@@ -1,4 +1,19 @@
{
"certificate_providers": [
{
"type": "acme",
"tag": "public-cert",
"domain": [
"${DOMAIN}",
"${ANYTLS_DOMAIN}"
],
"email": "${ACME_EMAIL}",
"dns01_challenge": {
"provider": "cloudflare",
"api_token": "${CLOUDFLARE_API_TOKEN}"
}
}
],
"inbounds": [
{
"type": "trojan",
@@ -14,15 +29,7 @@
"tls": {
"enabled": true,
"server_name": "${DOMAIN}",
"acme": {
"domain": "${DOMAIN}",
"data_directory": "/var/lib/sing-box/certmagic-anytls",
"email": "${ACME_EMAIL}",
"dns01_challenge": {
"provider": "cloudflare",
"api_token": "${CLOUDFLARE_API_TOKEN}"
}
}
"certificate_provider": "public-cert"
},
"multiplex": {
"enabled": true
@@ -32,7 +39,7 @@
"type": "anytls",
"tag": "anytls-in",
"listen": "::",
"listen_port": ${ANYTLS_HY2_PORT},
"listen_port": ${ANYTLS_PORT},
"users": [
{
"name": "user1",
@@ -42,22 +49,14 @@
"tls": {
"enabled": true,
"server_name": "${ANYTLS_DOMAIN}",
"acme": {
"domain": "${ANYTLS_DOMAIN}",
"data_directory": "/var/lib/sing-box/certmagic-anytls",
"email": "${ACME_EMAIL}",
"dns01_challenge": {
"provider": "cloudflare",
"api_token": "${CLOUDFLARE_API_TOKEN}"
}
}
"certificate_provider": "public-cert"
}
},
{
"type": "hysteria2",
"tag": "hysteria2-in",
"listen": "0.0.0.0",
"listen_port": ${ANYTLS_HY2_PORT},
"listen_port": ${HY2_PORT},
"obfs": {
"type": "salamander",
"password": "${HY2_OBFS_PASSWORD}"
@@ -74,44 +73,7 @@
"alpn": [
"h3"
],
"acme": {
"domain": "${ANYTLS_DOMAIN}",
"data_directory": "/var/lib/sing-box/certmagic-anytls",
"email": "${ACME_EMAIL}",
"dns01_challenge": {
"provider": "cloudflare",
"api_token": "${CLOUDFLARE_API_TOKEN}"
}
}
}
},
{
"type": "vless",
"tag": "vless-reality-in",
"listen": "::",
"listen_port": ${VLESS_PORT},
"users": [
{
"name": "user1",
"uuid": "${VLESS_UUID}",
"flow": "xtls-rprx-vision"
}
],
"tls": {
"enabled": true,
"server_name": "${REALITY_SERVER_NAME}",
"reality": {
"enabled": true,
"handshake": {
"server": "${REALITY_SERVER_NAME}",
"server_port": 443
},
"private_key": "${REALITY_PRIVATE_KEY}",
"short_id": [
"${REALITY_SHORT_ID}"
],
"max_time_difference": "2m"
}
"certificate_provider": "public-cert"
}
},
{