Add DC9 HAProxy TLS front door

This commit is contained in:
Codex
2026-09-02 22:54:05 -07:00
parent 7ea4515b27
commit 787a1128c1
8 changed files with 142 additions and 72 deletions
@@ -1,4 +1,19 @@
{
"certificate_providers": [
{
"type": "acme",
"tag": "public-cert",
"domain": [
"${DOMAIN}",
"${ANYTLS_DOMAIN}"
],
"email": "${ACME_EMAIL}",
"dns01_challenge": {
"provider": "cloudflare",
"api_token": "${CLOUDFLARE_API_TOKEN}"
}
}
],
"inbounds": [
{
"type": "trojan",
@@ -14,15 +29,7 @@
"tls": {
"enabled": true,
"server_name": "${DOMAIN}",
"acme": {
"domain": "${DOMAIN}",
"data_directory": "/var/lib/sing-box/certmagic-anytls",
"email": "${ACME_EMAIL}",
"dns01_challenge": {
"provider": "cloudflare",
"api_token": "${CLOUDFLARE_API_TOKEN}"
}
}
"certificate_provider": "public-cert"
},
"multiplex": {
"enabled": true
@@ -32,7 +39,7 @@
"type": "anytls",
"tag": "anytls-in",
"listen": "::",
"listen_port": ${ANYTLS_HY2_PORT},
"listen_port": ${ANYTLS_PORT},
"users": [
{
"name": "user1",
@@ -42,22 +49,14 @@
"tls": {
"enabled": true,
"server_name": "${ANYTLS_DOMAIN}",
"acme": {
"domain": "${ANYTLS_DOMAIN}",
"data_directory": "/var/lib/sing-box/certmagic-anytls",
"email": "${ACME_EMAIL}",
"dns01_challenge": {
"provider": "cloudflare",
"api_token": "${CLOUDFLARE_API_TOKEN}"
}
}
"certificate_provider": "public-cert"
}
},
{
"type": "hysteria2",
"tag": "hysteria2-in",
"listen": "0.0.0.0",
"listen_port": ${ANYTLS_HY2_PORT},
"listen_port": ${HY2_PORT},
"obfs": {
"type": "salamander",
"password": "${HY2_OBFS_PASSWORD}"
@@ -74,44 +73,7 @@
"alpn": [
"h3"
],
"acme": {
"domain": "${ANYTLS_DOMAIN}",
"data_directory": "/var/lib/sing-box/certmagic-anytls",
"email": "${ACME_EMAIL}",
"dns01_challenge": {
"provider": "cloudflare",
"api_token": "${CLOUDFLARE_API_TOKEN}"
}
}
}
},
{
"type": "vless",
"tag": "vless-reality-in",
"listen": "::",
"listen_port": ${VLESS_PORT},
"users": [
{
"name": "user1",
"uuid": "${VLESS_UUID}",
"flow": "xtls-rprx-vision"
}
],
"tls": {
"enabled": true,
"server_name": "${REALITY_SERVER_NAME}",
"reality": {
"enabled": true,
"handshake": {
"server": "${REALITY_SERVER_NAME}",
"server_port": 443
},
"private_key": "${REALITY_PRIVATE_KEY}",
"short_id": [
"${REALITY_SHORT_ID}"
],
"max_time_difference": "2m"
}
"certificate_provider": "public-cert"
}
},
{