feat: add declarative sing-box egress control plane

2026-08-27 00:58:52 +05:00
commit b8d19b2c3e
54 changed files with 3337 additions and 0 deletions
@@ -0,0 +1,14 @@
+#!/bin/sh
+set -eu
+
+if [ "$1" = configure ]; then
+    install -d -m 0700 -o root -g root /etc/vpn-egress
+    install -d -m 0700 -o root -g root /var/lib/vpn-egress /var/lib/vpn-egress/backups
+    if [ ! -e /etc/vpn-egress/policy.json ]; then
+        install -m 0600 -o root -g root /usr/share/vpn-egressctl/policy.json /etc/vpn-egress/policy.json
+    fi
+    systemctl daemon-reload >/dev/null 2>&1 || true
+fi
+
+# Watcher activation is deliberately left to the documented migration step.
+exit 0