mirror of
https://github.com/okxlin/appstore.git
synced 2026-09-24 16:01:02 +00:00
okxlin
96a9bf6a29
Rebuilt-from-PR: #6488 Source-PR: #6488 Maintainer-workflow: appstore-pr-maintainer - Consolidate fixed rotator variants onto one numeric version line. - Add ALLOW_NO_AUTH form/env handling and preserve existing upgrade values. - Pin the fixed MicroWARP image to the verified multi-architecture digest. - Keep the rolling aliases and HTTP/rotator variants. Runtime evidence: - 1Panel upgrade smoke: rotator-latest -> 0.3.1-rotator: passed - 1Panel upgrade smoke: rotator-http-latest -> 0.3.1-rotator-http: passed - Upgrade compatibility cases: missing/0/1 ALLOW_NO_AUTH and idempotent rerun: passed - YAML, shell, Compose, and repository Renovate tests: passed Residual security review: - Candidate fixed image scan: Critical=1, High=12; baseline 0.2.0 scan: Critical=0, High=0. - This accepted-risk update is disclosed in the app README; deployment should be restricted and the upstream image monitored. - Existing strict validator app_data_dir diagnostics are present in the unchanged baseline scripts and were not introduced here.
53 lines
1.2 KiB
YAML
53 lines
1.2 KiB
YAML
services:
|
|
microwarp:
|
|
image: "ghcr.io/ccbkkb/microwarp:latest"
|
|
container_name: ${CONTAINER_NAME}
|
|
labels:
|
|
createdBy: "Apps"
|
|
ports:
|
|
- "${PANEL_APP_PORT_SOCKS5}:${BIND_PORT}"
|
|
environment:
|
|
- TZ=${TZ}
|
|
- BIND_ADDR=0.0.0.0
|
|
- BIND_PORT=${BIND_PORT}
|
|
- ALLOW_NO_AUTH=${ALLOW_NO_AUTH:-1}
|
|
- SOCKS_USER=${SOCKS_USER:-}
|
|
- SOCKS_PASS=${SOCKS_PASS:-}
|
|
- ENDPOINT_IP=${ENDPOINT_IP:-}
|
|
- GH_PROXY=${GH_PROXY:-}
|
|
- TAILSCALE_CIDR=${TAILSCALE_CIDR:-100.64.0.0/10}
|
|
- MTU=${MTU}
|
|
- WARP_WGCF_CONF=${WARP_WGCF_CONF:-}
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- SYS_MODULE
|
|
sysctls:
|
|
- net.ipv4.conf.all.src_valid_mark=1
|
|
volumes:
|
|
- "${APP_DATA_DIR_1}:/etc/wireguard"
|
|
restart: always
|
|
networks:
|
|
- 1panel-network
|
|
|
|
http-proxy:
|
|
image: "gogost/gost:latest"
|
|
container_name: ${CONTAINER_NAME}-http
|
|
labels:
|
|
createdBy: "Apps"
|
|
depends_on:
|
|
- microwarp
|
|
command:
|
|
- "-L"
|
|
- "http://0.0.0.0:8080"
|
|
- "-F"
|
|
- "socks5://microwarp:${BIND_PORT}"
|
|
ports:
|
|
- "${PANEL_APP_PORT_HTTP_PROXY}:8080"
|
|
restart: always
|
|
networks:
|
|
- 1panel-network
|
|
|
|
networks:
|
|
1panel-network:
|
|
external: true
|