mirror of
https://github.com/okxlin/appstore.git
synced 2026-10-06 08:00:31 +00:00
okxlin
96a9bf6a29
Rebuilt-from-PR: #6488 Source-PR: #6488 Maintainer-workflow: appstore-pr-maintainer - Consolidate fixed rotator variants onto one numeric version line. - Add ALLOW_NO_AUTH form/env handling and preserve existing upgrade values. - Pin the fixed MicroWARP image to the verified multi-architecture digest. - Keep the rolling aliases and HTTP/rotator variants. Runtime evidence: - 1Panel upgrade smoke: rotator-latest -> 0.3.1-rotator: passed - 1Panel upgrade smoke: rotator-http-latest -> 0.3.1-rotator-http: passed - Upgrade compatibility cases: missing/0/1 ALLOW_NO_AUTH and idempotent rerun: passed - YAML, shell, Compose, and repository Renovate tests: passed Residual security review: - Candidate fixed image scan: Critical=1, High=12; baseline 0.2.0 scan: Critical=0, High=0. - This accepted-risk update is disclosed in the app README; deployment should be restricted and the upstream image monitored. - Existing strict validator app_data_dir diagnostics are present in the unchanged baseline scripts and were not introduced here.
60 lines
1.7 KiB
YAML
60 lines
1.7 KiB
YAML
services:
|
|
microwarp:
|
|
image: "ghcr.io/ccbkkb/microwarp:0.3.1@sha256:d5b709efd49dbec3a965c617eb263b46cdf1449e65776d1b9a351927439b2b17"
|
|
container_name: ${CONTAINER_NAME}
|
|
labels:
|
|
createdBy: "Apps"
|
|
ports:
|
|
- "${PANEL_APP_PORT_SOCKS5}:${BIND_PORT}"
|
|
environment:
|
|
- TZ=${TZ}
|
|
- BIND_ADDR=0.0.0.0
|
|
- BIND_PORT=${BIND_PORT}
|
|
- ALLOW_NO_AUTH=${ALLOW_NO_AUTH:-1}
|
|
- ROTATE_INTERVAL_MINUTES=${ROTATE_INTERVAL_MINUTES:-0}
|
|
- ROTATE_MAX_ATTEMPTS=${ROTATE_MAX_ATTEMPTS:-5}
|
|
- ROTATE_RETRY_DELAY_SECONDS=${ROTATE_RETRY_DELAY_SECONDS:-5}
|
|
- TEST_URL=${TEST_URL}
|
|
- IP_CHECK_URL=${IP_CHECK_URL:-https://cloudflare.com/cdn-cgi/trace}
|
|
- SOCKS_USER=${SOCKS_USER:-}
|
|
- SOCKS_PASS=${SOCKS_PASS:-}
|
|
- ENDPOINT_IP=${ENDPOINT_IP:-}
|
|
- GH_PROXY=${GH_PROXY:-}
|
|
- TAILSCALE_CIDR=${TAILSCALE_CIDR:-100.64.0.0/10}
|
|
- MTU=${MTU}
|
|
- WARP_WGCF_CONF=${WARP_WGCF_CONF:-}
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- SYS_MODULE
|
|
sysctls:
|
|
- net.ipv4.conf.all.src_valid_mark=1
|
|
volumes:
|
|
- "${APP_DATA_DIR_1}:/etc/wireguard"
|
|
- "./rotate.sh:/usr/local/bin/rotate.sh:ro"
|
|
restart: always
|
|
command: ["/bin/sh", "/usr/local/bin/rotate.sh"]
|
|
networks:
|
|
- 1panel-network
|
|
|
|
http-proxy:
|
|
image: "gogost/gost:latest"
|
|
container_name: ${CONTAINER_NAME}-http
|
|
labels:
|
|
createdBy: "Apps"
|
|
depends_on:
|
|
- microwarp
|
|
command:
|
|
- "-L"
|
|
- "http://0.0.0.0:8080"
|
|
- "-F"
|
|
- "socks5://microwarp:${BIND_PORT}"
|
|
ports:
|
|
- "${PANEL_APP_PORT_HTTP_PROXY}:8080"
|
|
restart: always
|
|
networks:
|
|
- 1panel-network
|
|
|
|
networks:
|
|
1panel-network:
|
|
external: true
|