6814fa2a62
Add deployment traces for the JPpro proxy node, RackNerd origin hosts, catproxy boundary changes, local speed checks, and Sub2API rate-limit behavior. Keep remote secrets excluded while tracking sanitized nginx, compose, plan, and operational memory documents.
20 lines
964 B
Plaintext
20 lines
964 B
Plaintext
# proxy-ng 节点配置模板。复制到目标机器后填写真实值，不要把真实密钥提交到仓库。
|
||
|
||
PROXY_NG_DOMAIN=proxy.api.lilifamily.com
|
||
PROXY_NG_NODE_NAME=jppro-akile-0504-1c1g
|
||
|
||
# 后端入口网关地址，建议使用 HTTPS。
|
||
SUB2API_BACKEND_ORIGIN=https://origin.proxy.api.lilifamily.com
|
||
SUB2API_BACKEND_ORIGIN_HOST=origin.proxy.api.lilifamily.com
|
||
|
||
# proxy-ng 节点发给后端入口网关的共享密钥只应保存在远程 root-only 文件。
|
||
# 当前约定路径：/etc/nginx/proxy-ng/token.conf，权限 600 root root。
|
||
PROXY_NG_TOKEN_FILE=/etc/nginx/proxy-ng/token.conf
|
||
|
||
# 可选：中国大陆访问控制。需要 Cloudflare 或其他入口注入可信国家头时才启用。
|
||
ALLOW_COUNTRY_CODES=CN
|
||
|
||
# TLS 证书路径。可以由 certbot 写入，也可以由运维系统分发。
|
||
TLS_CERT_PATH=/etc/letsencrypt/live/proxy.api.lilifamily.com/fullchain.pem
|
||
TLS_KEY_PATH=/etc/letsencrypt/live/proxy.api.lilifamily.com/privkey.pem
|