fix: harden runtime policy and remove legacy hysteria mutation paths

apps/service/hysteria2.go

@@ -4,12 +4,10 @@ import (
 	"errors"
 	"fmt"
 	"github.com/sirupsen/logrus"
-	"gopkg.in/yaml.v3"
 	"hy2xs-admin/dao"
 	"hy2xs-admin/model/constant"
 	"hy2xs-admin/model/vo"
 	"hy2xs-admin/util"
-	"os"
 )
 
 func InitHysteria2() error {
@@ -28,97 +26,21 @@ func InitHysteria2() error {
 	return nil
 }
 
-func setHysteria2ConfigYAML() error {
-	serverConfig, err := GetHysteria2Config()
-	if err != nil {
-		return err
-	}
-	if serverConfig.Listen == nil || *serverConfig.Listen == "" {
-		return errors.New("hysteria2 config is empty")
-	}
-
-	authHttpUrl, err := GetAuthHttpUrl()
-	if err != nil {
-		return err
-	}
-
-	if serverConfig.Auth == nil || serverConfig.Auth.HTTP == nil || serverConfig.Auth.HTTP.URL == nil {
-		if err := UpdateHysteria2Config(serverConfig); err != nil {
-			return err
-		}
-		serverConfig, err = GetHysteria2Config()
-		if err != nil {
-			return err
-		}
-	}
-
-	// update auth http url
-	if *serverConfig.Auth.HTTP.URL != authHttpUrl {
-		serverConfig.Auth.HTTP.URL = &authHttpUrl
-		if err := UpdateHysteria2Config(serverConfig); err != nil {
-			return err
-		}
-	}
-
-	hysteria2Config, err := yaml.Marshal(&serverConfig)
-	if err != nil {
-		logrus.Errorf("marshal hysteria2 config err: %v", err)
-		return errors.New("marshal hysteria2 config err")
-	}
-	tmpPath := fmt.Sprintf("%s.tmp", constant.Hysteria2ConfigPath)
-	file, err := os.OpenFile(tmpPath, os.O_WRONLY|os.O_TRUNC|os.O_CREATE, 0600)
-	if err != nil {
-		logrus.Errorf("create hysteria2 server config file err: %v", err)
-		return errors.New("create hysteria2 server config file err")
-	}
-	defer file.Close()
-	_, err = file.WriteString(string(hysteria2Config))
-	if err != nil {
-		logrus.Errorf("write hysteria2 config.json file err: %v", err)
-		return errors.New("hysteria2 config.json file write err")
-	}
-	if syncErr := file.Sync(); syncErr != nil {
-		return syncErr
-	}
-	if closeErr := file.Close(); closeErr != nil {
-		return closeErr
-	}
-	if renameErr := os.Rename(tmpPath, constant.Hysteria2ConfigPath); renameErr != nil {
-		return renameErr
-	}
-	if chmodErr := os.Chmod(constant.Hysteria2ConfigPath, 0600); chmodErr != nil {
-		return chmodErr
-	}
-	if chownErr := os.Chown(constant.Hysteria2ConfigPath, 0, 0); chownErr != nil {
-		return chownErr
-	}
-	return nil
-}
-
 func Hysteria2IsRunning() bool {
 	_, err := util.Exec("systemctl is-active --quiet hysteria-server")
 	return err == nil
 }
 
 func StartHysteria2() error {
-	if err := setHysteria2ConfigYAML(); err != nil {
-		return err
-	}
-	return util.Systemctl("restart", "hysteria-server")
+	return errors.New("managed by orchestrator: use hy2xs-orchestrator reconfigure")
 }
 
 func StopHysteria2() error {
-	return util.Systemctl("stop", "hysteria-server")
+	return errors.New("managed by orchestrator: use hy2xs-orchestrator reconfigure")
 }
 
 func RestartHysteria2() error {
-	if err := StopHysteria2(); err != nil {
-		return err
-	}
-	if err := StartHysteria2(); err != nil {
-		return err
-	}
-	return nil
+	return errors.New("managed by orchestrator: use hy2xs-orchestrator reconfigure")
 }
 
 func ReleaseHysteria2() error {