Полный продовый фикс HY2XS/Hysteria2: auth DTO, валидация bind, smoke, URI, preflight и env-контракт

package/config/hy2xs.env

@@ -4,9 +4,8 @@ HY2XS_DOMAIN=uk.api.withen.pro
 HY2XS_PUBLIC_HOST=uk.api.withen.pro
 HY2XS_PUBLIC_PORT=443
 HY2XS_SSH_PORT=22
-HY2XS_FIREWALL_ENABLED=true
+HY2XS_FIREWALL_MODE=managed
 HY2XS_FIREWALL_STAGED_APPLY=true
-HY2XS_FIREWALL_ALLOW_TAKEOVER=false
 HY2XS_UI_BIND_HOST=127.0.0.1
 HY2XS_UI_PUBLIC_ACCESS=false
 HY2XS_UI_PORT=8080
@@ -22,10 +21,12 @@ HY2XS_TLS_CERT_PATH=/etc/hysteria/server.crt
 HY2XS_TLS_KEY_PATH=/etc/hysteria/server.key
 HY2XS_HYSTERIA_BIND_HOST=0.0.0.0
 HY2XS_HYSTERIA_PORT=443
+# fixed in production profile: must remain http
 HY2XS_HYSTERIA_AUTH_MODE=http
 HY2XS_HYSTERIA_TRAFFIC_STATS_HOST=127.0.0.1
 HY2XS_HYSTERIA_TRAFFIC_STATS_PORT=36712
 HY2XS_HYSTERIA_TRAFFIC_STATS_SECRET=__GENERATE__
+# fixed in production profile: must remain salamander
 HY2XS_HYSTERIA_OBFS_TYPE=salamander
 HY2XS_HYSTERIA_OBFS_PASSWORD=__GENERATE__
 HY2XS_HYSTERIA_BANDWIDTH_UP=50 mbps

package/templates/env/post-install.env.tpl

@@ -32,9 +32,9 @@ HY2_AUTH_URL=http://127.0.0.1:{{UI_PORT}}/hui/hysteria2/auth
 HY2_TRAFFIC_STATS_LISTEN={{HYSTERIA_API_HOST}}:{{HYSTERIA_API_PORT}}
 HY2_OBFS_TYPE=salamander
 HY2_OBFS_PASSWORD={{HYSTERIA_OBFS_PASSWORD}}
-HY2_BANDWIDTH_UP_Mbps=50
-HY2_BANDWIDTH_DOWN_Mbps=50
-HY2_IGNORE_CLIENT_BANDWIDTH=false
+HY2_BANDWIDTH_UP={{BANDWIDTH_UP}}
+HY2_BANDWIDTH_DOWN={{BANDWIDTH_DOWN}}
+HY2_IGNORE_CLIENT_BANDWIDTH={{IGNORE_CLIENT_BANDWIDTH}}
 HY2_CONFIG_PATH=/etc/hysteria/config.yaml
 
 HUI_ENABLED=true