feat: add declarative sing-box egress control plane

2026-08-27 00:58:52 +05:00
commit b8d19b2c3e
54 changed files with 3337 additions and 0 deletions
@@ -0,0 +1,54 @@
+{
+  "schema_version": 1,
+  "sing_box": {
+    "binary": "/usr/bin/sing-box",
+    "config_path": "/etc/sing-box/config.json",
+    "service": "sing-box.service",
+    "required_version": "1.13.19"
+  },
+  "runtime": {
+    "uri_path": "/etc/vpn-egress/hysteria2.uri",
+    "state_dir": "/var/lib/vpn-egress",
+    "lock_path": "/run/lock/vpn-egressctl.lock",
+    "backup_keep": 5
+  },
+  "network": {
+    "upstream_interface": "eth0",
+    "vpn_lan_interface": "eth1",
+    "tun_name": "tun-sb0",
+    "tun_address": "172.19.0.1/30",
+    "mtu": 1400,
+    "route_exclude_address": [
+      "10.20.0.0/24",
+      "10.30.0.0/24",
+      "127.0.0.0/8"
+    ],
+    "iproute2_table_index": 2022,
+    "iproute2_rule_index": 9000,
+    "auto_redirect_input_mark": "0x2023",
+    "auto_redirect_output_mark": "0x2024",
+    "auto_redirect_reset_mark": "0x2025",
+    "auto_redirect_nfqueue": 100,
+    "auto_redirect_fallback_rule_index": 32768
+  },
+  "dns": {
+    "bootstrap_server": "1.1.1.1",
+    "bootstrap_port": 53,
+    "remote_server": "1.1.1.1",
+    "remote_port": 443,
+    "remote_path": "/dns-query",
+    "remote_tls_server_name": "cloudflare-dns.com",
+    "strategy": "ipv4_only"
+  },
+  "bandwidth": {
+    "up_mbps": 50,
+    "down_mbps": 200
+  },
+  "healthcheck": {
+    "url": "https://www.cloudflare.com/cdn-cgi/trace",
+    "timeout_seconds": 15,
+    "settle_seconds": 2,
+    "expected_status": 200,
+    "body_contains": "ip="
+  }
+}