Реализован production-hardening по fix1: env/reconfigure, IPv4-only, TLS, secrets, firewall, docs

apps/service/config.go

@@ -74,23 +74,23 @@ func GetHysteria2Config() (bo.Hysteria2ServerConfig, error) {
 
 func UpdateHysteria2Config(hysteria2ServerConfig bo.Hysteria2ServerConfig) error {
 	// Значения по умолчанию
-	config, err := dao.ListConfig("key in ?", []string{constant.HUIWebPort, constant.JwtSecret})
+	config, err := dao.ListConfig("key in ?", []string{constant.HUIWebPort, constant.Hysteria2TrafficStatsSecret})
 	if err != nil {
 		return err
 	}
 
 	var hUIWebPort string
-	var jwtSecret string
+	var trafficStatsSecret string
 	for _, item := range config {
 		if *item.Key == constant.HUIWebPort {
 			hUIWebPort = *item.Value
-		} else if *item.Key == constant.JwtSecret {
-			jwtSecret = *item.Value
+		} else if *item.Key == constant.Hysteria2TrafficStatsSecret {
+			trafficStatsSecret = *item.Value
 		}
 	}
 
-	if hUIWebPort == "" || jwtSecret == "" {
-		logrus.Errorf("hUIWebPort or jwtSecret is nil")
+	if hUIWebPort == "" || trafficStatsSecret == "" {
+		logrus.Errorf("hUIWebPort or trafficStatsSecret is nil")
 		return errors.New(constant.SysError)
 	}
 
@@ -108,7 +108,7 @@ func UpdateHysteria2Config(hysteria2ServerConfig bo.Hysteria2ServerConfig) error
 	http.Insecure = &authHttpInsecure
 	auth.HTTP = &http
 	hysteria2ServerConfig.Auth = &auth
-	hysteria2ServerConfig.TrafficStats.Secret = &jwtSecret
+	hysteria2ServerConfig.TrafficStats.Secret = &trafficStatsSecret
 
 	yamlConfig, err := yaml.Marshal(&hysteria2ServerConfig)
 	if err != nil {
@@ -195,4 +195,3 @@ func GetAuthHttpUrl() (string, error) {
 	}
 	return fmt.Sprintf("%s://127.0.0.1:%d%s/hui/hysteria2/auth", protocol, port, webContext), nil
 }
-