Реализован production-hardening по fix1: env/reconfigure, IPv4-only, TLS, secrets, firewall, docs

docs/examples/post-install.env.example

@@ -9,16 +9,27 @@ PACKAGE_VERSION=0.1.0
 
 ORCH_SOURCE_STACK=bun-typescript
 ORCH_BUILD_MODE=bun-compile
-ORCH_BUILD_ID=orch-build-20260413-001
+ORCH_BUILD_ID=build-20260413-001
 ORCH_ENTRYPOINT=/usr/local/lib/hy2xs/hy2xs-orchestrator
 
 DEPLOY_DOMAIN=example.com
+PUBLIC_HOST=example.com
+PUBLIC_PORT=443
 SSH_PORT=22
+HY2XS_FIREWALL_ENABLED=true
+HY2XS_FIREWALL_STAGED_APPLY=true
 
 HY2_SOURCE=official-upstream
 HY2_VERSION=v2.8.1
+HY2_TLS_MODE=acme
+HY2_ACME_EMAIL=admin@example.com
+HY2_TLS_CERT_PATH=
+HY2_TLS_KEY_PATH=
 HY2_LISTEN_HOST=0.0.0.0
 HY2_PORT=443
+HY2_AUTH_MODE=http
+HY2_AUTH_URL=http://127.0.0.1:8081/hui/hysteria2/auth
+HY2_TRAFFIC_STATS_LISTEN=127.0.0.1:25413
 HY2_OBFS_TYPE=salamander
 HY2_OBFS_PASSWORD=CHANGE_ME
 HY2_BANDWIDTH_UP_Mbps=50
@@ -27,9 +38,10 @@ HY2_IGNORE_CLIENT_BANDWIDTH=false
 HY2_CONFIG_PATH=/etc/hysteria/config.yaml
 
 HUI_ENABLED=true
-HUI_FORK_REF=main
-HUI_BUILD_ID=hy2xs-admin-build-20260413-001
+HUI_FORK_REF=packaged
+HUI_BUILD_ID=build-20260413-001
 HUI_BIND_HOST=127.0.0.1
 HUI_PORT=8081
 HUI_INSTALL_DIR=/opt/hy2xs-admin
 HUI_DATA_DIR=/var/lib/hy2xs-admin
+HUI_LOG_DIR=/var/log/hy2xs-admin