mirror of
https://github.com/okxlin/appstore.git
synced 2026-09-24 00:01:00 +00:00
okxlin
96a9bf6a29
Rebuilt-from-PR: #6488 Source-PR: #6488 Maintainer-workflow: appstore-pr-maintainer - Consolidate fixed rotator variants onto one numeric version line. - Add ALLOW_NO_AUTH form/env handling and preserve existing upgrade values. - Pin the fixed MicroWARP image to the verified multi-architecture digest. - Keep the rolling aliases and HTTP/rotator variants. Runtime evidence: - 1Panel upgrade smoke: rotator-latest -> 0.3.1-rotator: passed - 1Panel upgrade smoke: rotator-http-latest -> 0.3.1-rotator-http: passed - Upgrade compatibility cases: missing/0/1 ALLOW_NO_AUTH and idempotent rerun: passed - YAML, shell, Compose, and repository Renovate tests: passed Residual security review: - Candidate fixed image scan: Critical=1, High=12; baseline 0.2.0 scan: Critical=0, High=0. - This accepted-risk update is disclosed in the app README; deployment should be restricted and the upstream image monitored. - Existing strict validator app_data_dir diagnostics are present in the unchanged baseline scripts and were not introduced here.
205 lines
6.3 KiB
YAML
205 lines
6.3 KiB
YAML
additionalProperties:
|
|
formFields:
|
|
- default: 1080
|
|
envKey: PANEL_APP_PORT_SOCKS5
|
|
labelEn: SOCKS5 Port
|
|
labelZh: SOCKS5 端口
|
|
label:
|
|
en: SOCKS5 Port
|
|
zh: SOCKS5 端口
|
|
zh-Hant: SOCKS5 連接埠
|
|
ja: SOCKS5 ポート
|
|
ko: SOCKS5 포트
|
|
ru: Порт SOCKS5
|
|
ms: Port SOCKS5
|
|
pt-br: Porta SOCKS5
|
|
required: true
|
|
rule: paramPort
|
|
type: number
|
|
edit: true
|
|
- default: 1080
|
|
envKey: BIND_PORT
|
|
labelEn: Internal Bind Port
|
|
labelZh: 容器内部绑定端口
|
|
label:
|
|
en: Internal Bind Port
|
|
zh: 容器内部绑定端口
|
|
zh-Hant: 容器內部綁定連接埠
|
|
ja: コンテナ内部バインドポート
|
|
ko: 컨테이너 내부 바인드 포트
|
|
ru: Внутренний порт привязки контейнера
|
|
ms: Port bind dalaman kontena
|
|
pt-br: Porta interna de bind do contêiner
|
|
required: true
|
|
rule: paramPort
|
|
type: number
|
|
edit: true
|
|
- default: "1"
|
|
envKey: ALLOW_NO_AUTH
|
|
labelEn: Allow Unauthenticated Access
|
|
labelZh: 允许无认证访问
|
|
label:
|
|
en: Allow Unauthenticated Access
|
|
zh: 允许无认证访问
|
|
zh-Hant: 允許未驗證存取
|
|
ja: 未認証アクセスを許可
|
|
ko: 인증되지 않은 액세스 허용
|
|
ru: Разрешить доступ без аутентификации
|
|
ms: Benarkan akses tanpa pengesahan
|
|
pt-br: Permitir acesso não autenticado
|
|
description:
|
|
en: Allow startup without SOCKS credentials. Keep enabled to preserve existing installations; disable only when SOCKS_USER and SOCKS_PASS are both set.
|
|
zh: 允许未配置 SOCKS 凭据时启动。为兼容已有安装请保持开启；关闭后必须同时设置 SOCKS_USER 与 SOCKS_PASS。
|
|
zh-Hant: 允許未設定 SOCKS 憑據時啟動。為相容既有安裝請保持開啟；關閉後必須同時設定 SOCKS_USER 與 SOCKS_PASS。
|
|
required: true
|
|
type: select
|
|
values:
|
|
- label: Enabled (legacy-compatible default)
|
|
value: "1"
|
|
- label: Disabled (requires credentials)
|
|
value: "0"
|
|
- default: ""
|
|
envKey: SOCKS_USER
|
|
labelEn: SOCKS Username
|
|
labelZh: SOCKS 用户名
|
|
label:
|
|
en: SOCKS Username
|
|
zh: SOCKS 用户名
|
|
zh-Hant: SOCKS 使用者名稱
|
|
ja: SOCKS ユーザー名
|
|
ko: SOCKS 사용자명
|
|
ru: Имя пользователя SOCKS
|
|
ms: Nama pengguna SOCKS
|
|
pt-br: Usuário SOCKS
|
|
required: false
|
|
type: text
|
|
edit: true
|
|
- default: ""
|
|
envKey: SOCKS_PASS
|
|
labelEn: SOCKS Password
|
|
labelZh: SOCKS 密码
|
|
label:
|
|
en: SOCKS Password
|
|
zh: SOCKS 密码
|
|
zh-Hant: SOCKS 密碼
|
|
ja: SOCKS パスワード
|
|
ko: SOCKS 비밀번호
|
|
ru: Пароль SOCKS
|
|
ms: Kata laluan SOCKS
|
|
pt-br: Senha SOCKS
|
|
required: false
|
|
type: text
|
|
edit: true
|
|
- default: ""
|
|
envKey: ENDPOINT_IP
|
|
labelEn: WARP Endpoint
|
|
labelZh: WARP 终结点
|
|
label:
|
|
en: WARP Endpoint
|
|
zh: WARP 终结点
|
|
zh-Hant: WARP 終結點
|
|
ja: WARP エンドポイント
|
|
ko: WARP 엔드포인트
|
|
ru: WARP endpoint
|
|
ms: Titik akhir WARP
|
|
pt-br: Endpoint WARP
|
|
required: false
|
|
type: text
|
|
edit: true
|
|
- default: ""
|
|
envKey: GH_PROXY
|
|
labelEn: wgcf Download Proxy
|
|
labelZh: wgcf 下载代理
|
|
label:
|
|
en: wgcf Download Proxy
|
|
zh: wgcf 下载代理
|
|
zh-Hant: wgcf 下載代理
|
|
ja: wgcf ダウンロードプロキシ
|
|
ko: wgcf 다운로드 프록시
|
|
ru: Прокси для загрузки wgcf
|
|
ms: Proksi muat turun wgcf
|
|
pt-br: Proxy de download do wgcf
|
|
required: false
|
|
type: text
|
|
edit: true
|
|
- default: 100.64.0.0/10
|
|
envKey: TAILSCALE_CIDR
|
|
labelEn: Tailscale Return Route CIDR
|
|
labelZh: Tailscale 回程路由 CIDR
|
|
label:
|
|
en: Tailscale Return Route CIDR
|
|
zh: Tailscale 回程路由 CIDR
|
|
zh-Hant: Tailscale 回程路由 CIDR
|
|
ja: Tailscale 戻りルート CIDR
|
|
ko: Tailscale 리턴 라우트 CIDR
|
|
ru: CIDR обратного маршрута Tailscale
|
|
ms: CIDR laluan balik Tailscale
|
|
pt-br: CIDR de rota de retorno do Tailscale
|
|
required: true
|
|
type: text
|
|
edit: true
|
|
- default: 1280
|
|
envKey: MTU
|
|
labelEn: WireGuard MTU
|
|
labelZh: WireGuard MTU
|
|
label:
|
|
en: WireGuard MTU
|
|
zh: WireGuard MTU
|
|
zh-Hant: WireGuard MTU
|
|
ja: WireGuard MTU
|
|
ko: WireGuard MTU
|
|
ru: MTU WireGuard
|
|
ms: MTU WireGuard
|
|
pt-br: MTU do WireGuard
|
|
required: true
|
|
type: number
|
|
edit: true
|
|
- default: ""
|
|
envKey: WARP_WGCF_CONF
|
|
labelEn: WireGuard Config Content
|
|
labelZh: WireGuard 配置内容
|
|
label:
|
|
en: WireGuard Config Content
|
|
zh: WireGuard 配置内容
|
|
zh-Hant: WireGuard 設定內容
|
|
ja: WireGuard 設定内容
|
|
ko: WireGuard 구성 내용
|
|
ru: Содержимое конфигурации WireGuard
|
|
ms: Kandungan konfigurasi WireGuard
|
|
pt-br: Conteúdo da configuração WireGuard
|
|
required: false
|
|
type: text
|
|
edit: true
|
|
- default: Asia/Shanghai
|
|
envKey: TZ
|
|
labelEn: Timezone
|
|
labelZh: 时区
|
|
label:
|
|
en: Timezone
|
|
zh: 时区
|
|
zh-Hant: 時區
|
|
ja: タイムゾーン
|
|
ko: 시간대
|
|
ru: Часовой пояс
|
|
ms: Zon waktu
|
|
pt-br: Fuso horário
|
|
required: true
|
|
type: text
|
|
edit: true
|
|
- default: ./data
|
|
envKey: APP_DATA_DIR_1
|
|
labelEn: WireGuard Data Directory
|
|
labelZh: WireGuard 数据目录
|
|
label:
|
|
en: WireGuard Data Directory
|
|
zh: WireGuard 数据目录
|
|
zh-Hant: WireGuard 資料目錄
|
|
ja: WireGuard データディレクトリ
|
|
ko: WireGuard 데이터 디렉터리
|
|
ru: Каталог данных WireGuard
|
|
ms: Direktori data WireGuard
|
|
pt-br: Diretório de dados do WireGuard
|
|
required: true
|
|
type: text
|
|
edit: true
|