fix: route D601 Sub2API egress through Shadowsocks (#843)

Co-authored-by: Codex <codex@noreply.local>

config/platform-infra/sub2api-master-egress-proxy.compose.yaml

@@ -0,0 +1,16 @@
+x-unidesk-log-rotation: &unidesk-log-rotation
+  driver: json-file
+  options:
+    max-size: "${UNIDESK_DOCKER_LOG_MAX_SIZE:-20m}"
+    max-file: "${UNIDESK_DOCKER_LOG_MAX_FILE:-3}"
+
+services:
+  sub2api-master-egress-proxy:
+    image: ghcr.io/shadowsocks/ssserver-rust:latest
+    container_name: unidesk-sub2api-master-egress-proxy
+    restart: unless-stopped
+    ports:
+      - "0.0.0.0:18792:18792/tcp"
+    volumes:
+      - /root/unidesk/.state/secrets/platform-infra/sub2api-master-egress-proxy.config.json:/etc/shadowsocks-rust/config.json:ro
+    logging: *unidesk-log-rotation

config/platform-infra/sub2api.yaml

@@ -30,7 +30,7 @@ defaults:
 
 image:
   repository: weishaw/sub2api
-  tag: 0.1.136
+  tag: 0.1.138
   pullPolicy: IfNotPresent
 
 dependencyImages:
@@ -80,7 +80,7 @@ targets:
     redisReplicas: 1
     image:
       repository: 127.0.0.1:5000/platform-infra/sub2api
-      tag: 0.1.136
+      tag: 0.1.138
       pullPolicy: IfNotPresent
     dependencyImages:
       postgres: docker.m.daocloud.io/library/postgres:18-alpine
@@ -150,10 +150,13 @@ targets:
       image: 127.0.0.1:5000/platform-infra/sing-box:latest
       imagePullPolicy: IfNotPresent
       listenPort: 10808
-      sourceRef: platform-infra/master-vpn-subscription.env
-      sourceKey: MASTER_VPN_SUBSCRIPTION_URL
-      sourceType: subscription-url
-      preferredOutbound: hysteria2
+      sourceRef: platform-infra/sub2api-master-egress-proxy.env
+      sourceKey: SUB2API_MASTER_SHADOWSOCKS_PASSWORD
+      sourceType: master-shadowsocks
+      masterShadowsocks:
+        serverHost: 74.48.78.17
+        serverPort: 18792
+        method: chacha20-ietf-poly1305
       applyToSub2Api: true
       applyToSentinel: true
       healthProbeUrl: https://www.gstatic.com/generate_204