DC9 sing-box

The managed sing-box service runs Trojan, AnyTLS, Hysteria2, VLESS Reality, and two Snell compatibility generations.

Snell compatibility

SNELL_V4_PORT renders a Snell inbound with version: 5. sing-box does not implement Snell v5 QUIC, so its v5 TCP wire protocol is compatible with clients configured as Snell v4.
SNELL_V6_PORT renders a separate version: 6 inbound. Snell v6 is not wire compatible with v4/v5 and therefore requires its own port and PSK.
Keep the existing standalone snell-managed project running during the migration. Retire it only after the new v4-compatible inbound passes a sustained client test.
Current Mihomo releases support Snell through v5, not v6. Use the v4-compatible endpoint from Mihomo and reserve the v6 endpoint for a sing-box 1.14 client.

The real PSKs live only in the Arcane Environment-local .env; never commit them to this repository.