prod/singbox_glue
5
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

fix: harden sing-box egress rollout

Browse Source
This commit is contained in:
Crimson
2026-08-27 03:39:06 +05:00
parent adb3e849df
commit 8ac3b2b1ba
24 changed files with 228 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files
debian/changelog
Vendored
+4
View File
@@ -1,5 +1,9 @@
vpn-egressctl (0.1.0) unstable; urgency=medium
* Initial release for sing-box 1.13.19.
* Require the nftables guard before starting sing-box.
* Enforce QUIC and gVisor build tags and remove the unsafe render command.
* Tighten URI parsing and protected filesystem diagnostics.
* Document local healthcheck and forwarded workload acceptance separately.
-- Flamy Studio <dev@flamy.studio> Thu, 27 Aug 2026 00:00:00 +0500
debian/install
Vendored
+1
View File
@@ -2,3 +2,4 @@ config/policy.json usr/share/vpn-egressctl
packaging/systemd/vpn-egress-guard.service usr/lib/systemd/system
packaging/systemd/vpn-egress-sync.service usr/lib/systemd/system
packaging/systemd/vpn-egress-sync.path usr/lib/systemd/system
packaging/systemd/sing-box.service.d/10-vpn-egress-guard.conf usr/lib/systemd/system/sing-box.service.d