sub2api/ops/remote/README.md
zizi 6814fa2a62 docs(ops): record proxy-ng deployment hardening
Add deployment traces for the JPpro proxy node, RackNerd origin hosts, catproxy boundary changes, local speed checks, and Sub2API rate-limit behavior.

Keep remote secrets excluded while tracking sanitized nginx, compose, plan, and operational memory documents.
2026-05-26 23:27:41 +08:00

32 lines
1.8 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Remote Deployment Inventory
本目录记录 Sub2API 远程部署事实。每台服务器必须单独一个子目录,目录名建议使用:
```text
ops/remote/<provider-or-region>-<host-date>-sub2api/
```
## 当前目录
| 目录 | Tabby profile | 公网入口 | 状态 |
|------|---------------|----------|------|
| `jppro-sub2api/` | `个人-JPpro-akile-0504-1c1g` | `https://proxy.api.lilifamily.com` / `https://jp.proxy.api.lilifamily.com` | proxy-ng 公开入口节点,回源到 3c4g origin |
| `us-racknerd-0425-sub2api/` | `个人-US-racknerd-0425-1c1g` | `https://pai.cyan2000.uk` | 旧机,迁移来源和回滚来源 |
| `us-racknerd-0526-sub2api/` | `个人-US-racknerd-0526-3c4g` | `https://origin.proxy.api.lilifamily.com` / `https://catproxy.lilifamily.com` | Sub2API 受限 origin 和公开直连主站入口 |
## 留痕规则
每个服务器目录至少包含:
- `README.md`域名、IP、服务器名、Tabby profile、部署方式、部署架构、运行检查和操作记录。
- `current/`:当前远程实际生效配置副本,例如 `docker-compose.yml``nginx-sub2api.conf``Caddyfile`
- `secrets/README.md`:说明哪些真实密钥可在本机私有保存,但不得提交。
- `.gitignore`:排除 `.env`、密钥、订阅、临时备份和数据库备份。
- `backups/`:只保留 `.gitkeep`、非敏感说明或 `*.SHA256SUMS` 校验记录;真实备份文件不得提交。
## 变更要求
- 迁移、部署、域名切换、证书、反代、Compose、数据库、Redis、Mihomo 或代理配置变化后,必须同步更新对应服务器目录。
-`AGENTS.md` 只保留规则和索引;具体运行事实沉到本目录的服务器子目录。
- 未验证的信息必须标注为“目标”“计划”或“待确认”,不能写成当前事实。