Реализован production-hardening по fix1: env/reconfigure, IPv4-only, TLS, secrets, firewall, docs

2026-04-26 07:27:06 +05:00
parent 2b4a45ad23
commit 3fccd5c442
109 changed files with 1773 additions and 569 deletions
@@ -1,14 +1,13 @@
-listen: :{{HYSTERIA_PORT}}
+listen: {{HYSTERIA_BIND_HOST}}:{{HYSTERIA_PORT}}

-tls:
-  cert: /etc/hysteria/server.crt
-  key: /etc/hysteria/server.key
+{{TLS_ACME_BLOCK}}
+{{TLS_FILE_BLOCK}}

 auth:
  type: http
  http:
    url: http://127.0.0.1:{{UI_PORT}}/hui/hysteria2/auth
-    insecure: true
+    insecure: {{AUTH_INSECURE}}

 obfs:
  type: salamander
@@ -20,7 +19,7 @@ bandwidth:
  down: "{{BANDWIDTH_DOWN}}"

 trafficStats:
-  listen: 127.0.0.1:{{HYSTERIA_API_PORT}}
+  listen: {{HYSTERIA_API_HOST}}:{{HYSTERIA_API_PORT}}
  secret: "{{HYSTERIA_API_SECRET}}"

 quic: