nixos

mirror of https://github.com/oqyude/nixos.git synced 2026-10-07 20:47:14 +03:00

T

oqyude 7f5ea81f37 3x-ui: make module generic via xlib.services.3x-ui options

The 3x-ui container config was hardcoded for vds: it mounted the LE
cert for pubray1.zeroq.su and published host:15380→container:443 for
Xray REALITY. The server imports the same module but for x.zeroq.su
(no REALITY inbound, no cert needed by 3x-ui itself yet).

Add two options so each device picks what it needs:
  - xlib.services.3x-ui.certDomain: domain whose LE cert is mounted
    at /root/cert/{fullchain,key}.pem. null means no cert mount.
  - xlib.services.3x-ui.reality443Forwarding: when true, also publish
    host:15380→container:443 for nginx stream SNI-routed REALITY.

vds sets both. Server sets only certDomain (kept harmless; nginx
still terminates TLS for x.zeroq.su, so the mounted cert is unused
until/unless 3x-ui is reconfigured to terminate TLS itself).

2026-08-28 01:17:59 +03:00

configurations

br v4

2026-08-11 22:13:53 +03:00

deploy

big refactoring

2026-08-11 02:31:00 +03:00

home

br v4

2026-08-11 22:13:53 +03:00

lib

br v4