oqyude 7f5ea81f37 3x-ui: make module generic via xlib.services.3x-ui options ...

The 3x-ui container config was hardcoded for vds: it mounted the LE
cert for pubray1.zeroq.su and published host:15380→container:443 for
Xray REALITY. The server imports the same module but for x.zeroq.su
(no REALITY inbound, no cert needed by 3x-ui itself yet).

Add two options so each device picks what it needs:
  - xlib.services.3x-ui.certDomain: domain whose LE cert is mounted
    at /root/cert/{fullchain,key}.pem. null means no cert mount.
  - xlib.services.3x-ui.reality443Forwarding: when true, also publish
    host:15380→container:443 for nginx stream SNI-routed REALITY.

vds sets both. Server sets only certDomain (kept harmless; nginx
still terminates TLS for x.zeroq.su, so the mounted cert is unused
until/unless 3x-ui is reconfigured to terminate TLS itself).

2026-08-28 01:17:59 +03:00

..

default.nix

3x-ui: make module generic via xlib.services.3x-ui options

2026-08-28 01:17:59 +03:00

glances.nix

glances added

2026-04-11 12:54:52 +03:00

netbird.nix

new domain

2026-04-10 10:57:20 +03:00

nginx.nix

vds: drop pubrayx1.zeroq.su from SNI map — Xray now served under pubray1

2026-08-28 00:56:28 +03:00

samba.nix

some fix

2026-03-27 17:56:12 +03:00

systemd.nix

path refactoring

2026-08-09 01:11:23 +03:00

xray.nix

Init

2026-03-09 10:50:12 +03:00