eli
0 Followers · 0 Following
  • Joined on 2022-10-31
Repositories
5
 Projects Packages Code Public Activity Starred Repositories
eli pushed to main at eli/vpsetup 2026-11-11 12:24:45 +08:00
1d5af2248b fix(firewall): forward 链改回"作用域白名单 + 默认丢弃"
eli pushed to main at eli/vpsetup 2026-11-11 00:11:51 +08:00
38c2f1fd14 fix(firewall): 加 wt0 进模板、删掉无用的 NTP 规则
eli pushed to main at eli/vpsetup 2026-11-10 18:53:06 +08:00
a8b22b594c fix(firewall): 按旧 iptables 实现精确复刻容器放行，并补回遗漏的 NTP
eli pushed to main at eli/vpsetup 2026-11-10 15:46:49 +08:00
4889ac36f2 docs: 删除「rules.v6 由另一个 agent 管」这条过期约束
eli pushed to main at eli/vpsetup 2026-11-10 13:06:26 +08:00
57b21d5b99 refactor(firewall): forward 链彻底不做过滤（回到 netavark 本来就能工作的状态）
eli pushed to main at eli/vpsetup 2026-11-10 11:48:50 +08:00
bff47139d7 fix(firewall): 补容器 DNS/出站放行、修 --local --apply 的静默失败
eli pushed to main at eli/vpsetup 2026-11-10 11:24:38 +08:00
328a41fda3 fix(firewall): forward 链放行 DNAT，否则容器发布端口全被挡成 refused
eli pushed to main at eli/vpsetup 2026-11-10 10:42:46 +08:00
3b19271b6a feat(rotate): hy2 的 CF 令牌轮换脚本（含一次真实事故的教训）
eli pushed to main at eli/vpsetup 2026-11-08 20:40:38 +08:00
6982948324 docs(readme): 补 init-firewall.sh 章节（之前脚本在、README 里完全没提）
eli pushed to main at eli/vpsetup 2026-11-08 20:32:11 +08:00
dea51c546a chore(cdn-v6): 文件头补上 Akamai 来源仓库地址（测试断言要求写明来源）
ca5d8ee84a refactor: CDN 清单生成器移交 gc-toolkit/cdn-list
8fd7d9db1b feat(tools): 新增 refresh-cdn-lists.sh，把清单刷新变成一条命令
37db75413d fix(cdn-list): 换用上游仓库自带的合并版，并补上一直缺失的 Akamai IPv6
bb27fb24dc feat(cdn-list): v4 清单 188 → 402 条，覆盖面上补到 GCP 那份的规模
Compare 10 commits »
eli pushed to main at eli/vpsetup 2026-11-04 19:13:10 +08:00
0cc1d093b9 docs: 替换 AGENTS/README 真实域名/IP，改用代号与占位符；更新测试断言与夹具
c3d06b2273 docs: cdn-bypass networkd drop-in 三处文档同步；HANDOFF §13 记录 10-16 事故与 10-30 修复实测；README 287→188 段订正；顺带落库 §12（10-24 ZeroTier 恢复，此前漏提交）
a7f63052a2 fix(cdn-bypass): networkd drop-in 防 fwmark 策略路由被清——2026-10-16 gcoregon 静默失效根治
f0b4c1a984 style: vlessenc 解析处 A&&B||C 改 if（SC2015）——本地 shellcheck 0.8.0 默认 severity 闸门恢复全绿
4a88b3a4ac AGENTS: point workspace to /home/eli/cloud/vpsetup
Compare 68 commits »
eli pushed to main at eli/vpsetup 2026-10-30 20:38:57 +08:00
a485637ae8 docs: cdn-bypass networkd drop-in 三处文档同步；HANDOFF §13 记录 10-16 事故与 10-30 修复实测；README 287→188 段订正；顺带落库 §12（10-24 ZeroTier 恢复，此前漏提交）
0074acc932 fix(cdn-bypass): networkd drop-in 防 fwmark 策略路由被清——2026-10-16 gcoregon 静默失效根治
fa51596e87 style: vlessenc 解析处 A&&B||C 改 if（SC2015）——本地 shellcheck 0.8.0 默认 severity 闸门恢复全绿
Compare 3 commits »
eli pushed to main at eli/vpsetup 2026-10-25 10:20:56 +08:00
6100be2e45 AGENTS: point workspace to /home/eli/cloud/vpsetup
6c8493fca2 Never start nftables at runtime: enable --now flushes the host firewall
Compare 2 commits »
eli pushed to main at eli/vpsetup 2026-10-11 09:54:24 +08:00
4502595776 docs(research): 归档 Caddy v2.11.4 上游 gRPC/h2 长流源码级调研报告（含引用与逐行证据）
eli pushed to main at eli/vpsetup 2026-10-11 09:54:15 +08:00
22e9078d79 docs(HANDOFF): 补 Caddy v2.11.4 源码级结论（keepalive_interval 非 h2 PING、别盲升级、2.11.4 有 #8185 挂起 bug）
eli pushed to main at eli/vpsetup 2026-10-11 09:52:20 +08:00
700e609e01 docs(HANDOFF): 实测证明 Caddy 不掐 gRPC——300s 是 traefik 的 504、404 是 proxy 用 IP 直连公司缺 SNI/Host
eli pushed to main at eli/vpsetup 2026-10-11 09:28:44 +08:00
cb631c83f1 docs(HANDOFF): netbird 证书交付定型为「SFTP 直传最终目录 + SSH 只 reload」
eli pushed to main at eli/vpsetup 2026-10-10 22:11:45 +08:00
a9cd46906c fix(xray): REALITY dest 写全 127.0.0.1:8003（裸端口在 v25.7.26+ 会变 localhost）
eli pushed to main at eli/vpsetup 2026-10-10 16:48:16 +08:00
1736a8a0d4 docs(HANDOFF): netbird 证书交付契约——同时满足 Caddy 与 netbird-proxy 的 UID/GID
eli pushed to main at eli/vpsetup 2026-10-10 11:05:38 +08:00
7550a65c61 feat(migrate): 额外站点块直接装进站点目录——迁移后不再需要人工合并