chore(platform-infra): commit parallel proxy updates

config/platform-infra/host-proxy.yaml

@@ -26,6 +26,23 @@ server:
     host: 127.0.0.1
     port: 18792
 sources:
+  pk01-nc01-vpn-server-hysteria:
+    sourceType: vpn-server-hysteria-existing
+    serverRef: /root/vpn-server
+    benchmarkRef: local-vpn-server
+    implementationRef: /root/vpn-server
+    sourceConfigRef: /root/vpn-server/output/client.yaml
+    expectedServer: 152-53-229-148.nip.io:443
+    client:
+      mode: external-existing-hysteria
+      configPath: /etc/host-proxy/hysteria-client.yaml
+      serviceName: host-proxy-hysteria.service
+      httpListenHost: 127.0.0.1
+      httpListenPort: 10809
+      socks5ListenHost: 127.0.0.1
+      socks5ListenPort: 10808
+    proxyUrl: http://127.0.0.1:10809
+    externalProbeUrl: https://www.gstatic.com/generate_204
   nc01-vpn-server-shadowsocks:
     extends: templates.sources.singBoxHostClient
     benchmarkRef: local-vpn-server
@@ -33,6 +50,24 @@ sources:
     extends: templates.sources.singBoxHostClient
     benchmarkRef: "pikasTech/unidesk#1110"
 targets:
+  PK01:
+    extends: templates.targets.hostProxyClient
+    route: PK01
+    sourceRef: sources.pk01-nc01-vpn-server-hysteria
+    env:
+      httpProxy: http://127.0.0.1:10809
+      httpsProxy: http://127.0.0.1:10809
+      allProxy: http://127.0.0.1:10809
+      noProxyRefs:
+        common: noProxy.common
+        extras: noProxy.nodeExtras.PK01
+    trans:
+      hostProxyEnv:
+        enabled: false
+    apply:
+      reloadSystemd: false
+      restartDocker: false
+      restartK3s: false
   NC01:
     extends: templates.targets.hostProxyClient
     route: NC01
@@ -133,8 +168,11 @@ noProxy:
     - hyueapi.com
     - .hyueapi.com
   nodeExtras:
+    PK01:
+      - 152.53.229.148
+      - 152-53-229-148.nip.io
     NC01:
       - 152.53.229.148
     JD01:
       - 74.48.78.17
-      - 82.156.23.220
+      - 82.156.23.220

config/platform-infra/sub2api-codex-pool.yaml

@@ -94,15 +94,16 @@ manualAccounts:
       kind: proxy
       provider: target-egress-proxy
       description: Bind a protected manual account to the selected target's YAML-declared egress proxy.
-    pk01-local-egress-proxy:
+    pk01-host-proxy:
       enabled: true
       kind: proxy
       provider: fixed-http-proxy
-      description: Bind a protected manual account to PK01 local provider-gateway egress.
+      description: Bind protected/manual PK01 Sub2API accounts to the PK01 host proxy HTTP endpoint.
+      hostProxyRef: config/platform-infra/host-proxy.yaml#targets.PK01
       fixedProxy:
         protocol: http
         host: 127.0.0.1
-        port: 18789
+        port: 10809
     unified-pool-group:
       enabled: true
       kind: group
@@ -113,7 +114,7 @@ manualAccounts:
       reason: Manually configured in Sub2API as protected; keep outside pool auto-management and sentinel control.
       proxyBinding:
         enabled: true
-        source: pk01-local-egress-proxy
+        source: pk01-host-proxy
         proxyName: platform-infra-sub2api-pk01-local-egress-proxy
       groupBinding:
         enabled: true