zizi 6814fa2a62 docs(ops): record proxy-ng deployment hardening
Add deployment traces for the JPpro proxy node, RackNerd origin hosts, catproxy boundary changes, local speed checks, and Sub2API rate-limit behavior.

Keep remote secrets excluded while tracking sanitized nginx, compose, plan, and operational memory documents.
2026-05-26 23:27:41 +08:00

16 lines
905 B
Markdown
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# JPpro Current State
最后核对时间2026-05-26 19:10 Asia/Shanghai
JPpro 当前作为 `proxy-ng` 公开入口节点使用,只运行 nginx 反向代理,不运行 Sub2API、PostgreSQL、Redis、Caddy 或账号出口代理。
- 公开入口:`https://proxy.api.lilifamily.com`
- 节点入口:`https://jp.proxy.api.lilifamily.com`
- 回源目标:`https://origin.proxy.api.lilifamily.com`
- nginx 站点配置:`/etc/nginx/sites-available/jp-proxy-sub2api.conf`
- nginx map 配置:`/etc/nginx/conf.d/proxy-ng-map.conf`
- token 文件:`/etc/nginx/proxy-ng/token.conf`,远程 root-only不入 Git
- 本地配置副本:`current/nginx-jp-proxy-sub2api.conf``current/proxy-ng-map.conf`
- 监听端口SSH `22`、HTTP `80`、HTTPS `443`
- 证书:`/etc/letsencrypt/live/proxy.api.lilifamily.com/fullchain.pem`,覆盖 `proxy.api.lilifamily.com``jp.proxy.api.lilifamily.com`