zizi 6814fa2a62 docs(ops): record proxy-ng deployment hardening
Add deployment traces for the JPpro proxy node, RackNerd origin hosts, catproxy boundary changes, local speed checks, and Sub2API rate-limit behavior.

Keep remote secrets excluded while tracking sanitized nginx, compose, plan, and operational memory documents.
2026-05-26 23:27:41 +08:00

905 B
Raw Blame History

JPpro Current State

最后核对时间2026-05-26 19:10 Asia/Shanghai

JPpro 当前作为 proxy-ng 公开入口节点使用,只运行 nginx 反向代理,不运行 Sub2API、PostgreSQL、Redis、Caddy 或账号出口代理。

  • 公开入口:https://proxy.api.lilifamily.com
  • 节点入口:https://jp.proxy.api.lilifamily.com
  • 回源目标:https://origin.proxy.api.lilifamily.com
  • nginx 站点配置:/etc/nginx/sites-available/jp-proxy-sub2api.conf
  • nginx map 配置:/etc/nginx/conf.d/proxy-ng-map.conf
  • token 文件:/etc/nginx/proxy-ng/token.conf,远程 root-only不入 Git
  • 本地配置副本:current/nginx-jp-proxy-sub2api.confcurrent/proxy-ng-map.conf
  • 监听端口SSH 22、HTTP 80、HTTPS 443
  • 证书:/etc/letsencrypt/live/proxy.api.lilifamily.com/fullchain.pem,覆盖 proxy.api.lilifamily.comjp.proxy.api.lilifamily.com