Haitao Pan
a1aa9fc5fd
Support multi-peer site connections and unify node access structure, enhance tproxy configuration flexibility:
...
- Merge hubs and sites into node_map for unified access
- Refactor xray tproxy to use node_map and xray_xxx variables
- Update tproxy-config.json template references accordingly
- add vpn-keys entries including us-proxy, ca-proxy, icp-huawei
- Support list format for wireguard_peer to allow multiple peer connections
2025-05-14 17:51:23 +08:00
shenlan
3f092026af
Merge pull request #71 from svc-design/vpn-overlay
...
config(icp-aliyun): add WireGuard keys and xray client config
2025-05-14 11:39:03 +08:00
Haitao Pan
df5547e26c
config(icp-aliyun): add WireGuard keys and xray client config
2025-05-12 16:25:56 +08:00
shenlan
68b4a30c7e
Merge pull request #70 from svc-design/vpn-overlay
...
Vpn overlay
2025-05-09 10:54:18 +08:00
Haitao Pan
5165a75e8d
feat(vpn-overlay): update vxlan site setup
...
- Add vxlan-config.yaml.j2 template for vxlan site configuration
- Update setup_sit_vxlan.sh to support new vxlan deployment logic
2025-04-28 17:47:49 +08:00
Haitao Pan
d8367ba012
feat(vpn-overlay): dynamic Endpoint switching and WireGuard keys generation
...
- Support dynamic AllowedIPs and Endpoint based on enable_vless
- Fix wg1 -> wg0 in iptables rules
- Update config files
- Support dynamic WireGuard keys generation in gen_wireguard_keys.sh
2025-04-27 15:28:16 +08:00
Haitao Pan
24c6ff4de4
Merge branch 'main' into vpn-overlay
2025-04-27 13:49:15 +08:00
Haitao Pan
29685ad815
feat(wireguard-site): add iptables rules for traffic forwarding and NAT
2025-04-25 16:12:15 +08:00
Haitao Pan
0791158a1d
chore(vxlan): add 'add' action placeholder to vxlan-setup systemd service
...
- Align with setup_sit_vxlan.sh which now supports 'add' and 'reset' modes
- Makes systemd unit compatible with explicit operation mode
2025-04-24 14:23:42 +08:00
Haitao Pan
8f6b3f6c2b
feat(vxlan): add reset mode to setup_sit_vxlan.sh for cleanup
2025-04-24 13:28:35 +08:00
Haitao Pan
6c874ae754
feat(vxlan-overlay-hub): added and modified Ansible roles
...
- Added new role 'vxlan-overlay-hub' to ansible playbooks
- Renamed vpn-overlay.yaml playbook to vpn-overlay-vxlan-site.yaml
- Modified sit/vpn-overlay configuration according to the new setup
2025-04-23 11:48:51 +08:00
Haitao Pan
e9bd6ca9a8
feat(vpn-overlay): add deepflow-demo site config with VLESS WS+TLS
...
- Added new site 'deepflow-demo' under sit environment
- Configured WireGuard IP, bridge IP, local/remote IP
- Set VLESS endpoint (WS+TLS) with UUID and path
2025-04-22 14:09:53 +08:00
shenlan
4eab3289e3
Merge pull request #69 from svc-design/vpn-overlay-xray
...
feat(xray-site): add vpn-xray-client playbook and update site config …
2025-04-22 13:55:39 +08:00
Haitao Pan
66c5ed2e66
feat(xray-site): add vpn-xray-client playbook and update site config and template
2025-04-22 13:54:39 +08:00
shenlan
18db08ed93
Merge pull request #68 from svc-design/vpn-overlay-wireguard
...
refactor(wireguard-hub): restructure role path and update config files
2025-04-18 15:58:22 +08:00
Haitao Pan
ee5ae8759b
refactor(wireguard-hub): restructure role path and update config files
...
- Moved WireGuard Hub role into playbooks directory structure
- Updated vpn-wireguard-hub.yaml to match new role path
- Modified vpn-keys.yaml and vpn-overlay.yaml
2025-04-18 15:56:21 +08:00
Haitao Pan
5aefe67164
feat(xray-tproxy): add playbook vpn-xray-tproxy
2025-04-18 13:17:12 +08:00
shenlan
aa948d62d1
Merge pull request #67 from svc-design/vpn-overlay-xray
...
Vpn overlay xray
2025-04-18 11:25:39 +08:00
Haitao Pan
5595e809ca
refactor(xray-tproxy): split TProxy role from hub
2025-04-18 11:21:30 +08:00
Haitao Pan
d723db20ad
refactor(xray-site)
2025-04-18 11:20:28 +08:00
Haitao Pan
5cca667726
refactor(xray-hub)
2025-04-18 11:19:41 +08:00
shenlan
4210cc663c
Merge pull request #66 from svc-design/vpn-overlay-xray
...
feat(xray-hub): add tproxy and systemd templates; update config rende…
2025-04-14 21:51:41 +08:00
Haitao Pan
c5514f91be
feat(xray-hub): add tproxy and systemd templates; update config rendering
...
- Add systemd templates: xray.service.j2, xray-tproxy.service.j2
- Update config.json.j2 and tproxy-config.json.j2 for per-node xray vars
- Modify main.yml to support template rendering with become
- Extend vpn-overlay.yaml with relay_address, relay_port and remote_domain
2025-04-14 21:50:53 +08:00
Haitao Pan
381e4ea47d
feat(common): add optional Privoxy SOCKS5-to-HTTP setup via include_tasks
2025-04-13 15:58:37 +08:00
shenlan
56c17b46d7
Merge pull request #65 from svc-design/vpn-overlay
...
feat(vpn-overlay): add WireGuard hub role and config updates
2025-04-12 19:41:43 +08:00
shenlan
8425229ecf
Merge branch 'main' into vpn-overlay
2025-04-12 19:41:33 +08:00
Haitao Pan
f8eb593d48
feat(xray): add hub role with dynamic config and playbook integration
...
- Add playbook: vpn-xray-hub.yaml
- Add Ansible role: vpn-overlay xray hub
- Update vpn-overlay.yaml to include per-node xray config (uuid, domain, cert paths)
2025-04-12 19:37:14 +08:00
Haitao Pan
7f21f2802b
feat(vpn-overlay): add WireGuard hub role and config updates
...
- Added new role: wireguard/hub with tasks, defaults, and template
- Added vpn-wireguard-hub.yaml playbook
- Updated vpn-overlay.yaml with hub definitions
2025-04-12 18:57:33 +08:00
shenlan
c4d941a9e3
Merge pull request #64 from svc-design/svc-design-patch-3
...
Update set-registry.sh
2025-04-08 13:40:55 +08:00
shenlan
130785459a
Update set-registry.sh
2025-04-08 11:52:07 +08:00
shenlan
507f10ced7
Merge pull request #63 from svc-design/svc-design-patch-2
...
Update set-registry.sh
2025-04-08 11:50:47 +08:00
shenlan
090f8d4bb5
Update set-registry.sh
2025-04-08 11:41:36 +08:00
shenlan
d85ebb845a
Merge pull request #62 from svc-design/svc-design-patch-1
...
Update set-registry.sh
2025-04-08 11:19:42 +08:00
shenlan
217d94eb4b
Update set-registry.sh
2025-04-08 11:18:01 +08:00
shenlan
ea8629dc84
Merge pull request #61 from svc-design/k3s-cluster
...
refactor(k3s-cluster): use synchronize to run scripts
2025-04-07 23:42:19 +08:00
Haitao Pan
429c2ace22
refactor(k3s-cluster):
...
- move setup scripts to user tmp dir for safer execution
2025-04-07 23:41:11 +08:00
Haitao Pan
8578142170
refactor(k3s-cluster): use synchronize to run scripts
2025-04-07 22:45:05 +08:00
shenlan
4aa7c8a378
Merge pull request #60 from svc-design/k3s-cluster
...
Removed sub tasks: run secure_ssh.sh script
2025-04-07 22:35:50 +08:00
Haitao Pan
548465ec1f
Removed sub tasks: run secure_ssh.sh script
2025-04-07 22:34:55 +08:00
shenlan
1bf1fdf435
Merge pull request #59 from svc-design/k3s-cluster
...
Update roles/vhosts/k3s-cluster
2025-04-07 22:20:38 +08:00
Haitao Pan
5b1401e439
removed workflows: deplay-app-with-argocd.yaml
2025-04-07 22:20:14 +08:00
Haitao Pan
b758624ce4
Update roles/vhosts/k3s-cluster
2025-04-07 22:16:34 +08:00
shenlan
d0fc2cdae8
Merge pull request #58 from svc-design/vpn-overlay
...
Vpn overlay
2025-04-07 22:02:42 +08:00
Haitao Pan
c8988c397a
refactor: replace disable-systemd-resolved with setup-systemd-resolved task
2025-04-07 22:01:43 +08:00
shenlan
384aab30d2
Update app-pipeline-renew-node-ssl-certs.yml
2025-04-07 21:32:51 +08:00
shenlan
325a9ce809
Merge pull request #57 from svc-design/k3s-cluster
...
feat(k3s): add ansible role and playbook for K3s cluster setup
2025-04-07 21:29:39 +08:00
Haitao Pan
43a4758a93
feat(k3s): add ansible role and playbook for K3s cluster setup
2025-04-07 21:26:06 +08:00
shenlan
d21d302639
Merge pull request #56 from svc-design/vpn-overlay
...
feat: split and simplify systemd-resolved DNS configuration task
2025-04-07 21:14:38 +08:00
Haitao Pan
d8ff3a79e2
feat: split and simplify systemd-resolved DNS configuration task
...
- Disabled systemd-resolved and add static DNS setup
2025-04-07 21:13:10 +08:00
shenlan
f4d92b0508
Merge pull request #54 from svc-design/vpn-overlay
...
chore(config): update firewall and VPN overlay settings
2025-04-07 20:11:40 +08:00
