feat: deploy NC01 Sub2API target

2026-07-09 13:16:58 +02:00
parent 21935e7319
commit 8347d5ed1b
17 changed files with 483 additions and 37 deletions
@@ -96,6 +96,9 @@ postgres:
        - id: JD01-public
          cidr: 117.72.122.178/32
          purpose: platform-infra-sub2api-active
+        - id: NC01-public
+          cidr: 152.53.229.148/32
+          purpose: platform-infra-sub2api-active
  tuning:
    maxConnections: 160
    sharedBuffers: 512MB
@@ -166,6 +169,16 @@ postgres:
        user: sub2api
        address: 117.72.122.178/32
        method: scram-sha-256
+      - type: hostssl
+        database: sub2api
+        user: sub2api
+        address: 152.53.229.148/32
+        method: scram-sha-256
+      - type: hostssl
+        database: postgres
+        user: sub2api
+        address: 152.53.229.148/32
+        method: scram-sha-256
      - type: hostssl
        database: langbot
        user: langbot
@@ -8,6 +8,7 @@ metadata:
    - 220
    - 339
    - 340
+    - 1615

 defaults:
  targetId: PK01
@@ -233,6 +234,84 @@ targets:
        - 74.48.78.17
        - hyueapi.com
        - .hyueapi.com
+  - id: NC01
+    route: NC01:k3s
+    namespace: platform-infra
+    role: active
+    enabled: true
+    databaseMode: external-active
+    redisMode: local-ephemeral
+    appReplicas: 1
+    redisReplicas: 1
+    runtime:
+      autoSetup: false
+    image:
+      repository: weishaw/sub2api
+      tag: 0.1.144
+      pullPolicy: IfNotPresent
+    dependencyImages:
+      postgres: docker.m.daocloud.io/library/postgres:18-alpine
+      redis: docker.m.daocloud.io/library/redis:8-alpine
+    publicExposure:
+      enabled: true
+      mode: node-local-https
+      publicBaseUrl: https://api.152-53-229-148.nip.io:18443
+      dns:
+        hostname: api.152-53-229-148.nip.io
+        expectedA: 152.53.229.148
+        resolvers: [1.1.1.1, 8.8.8.8, 223.5.5.5, 114.114.114.114]
+      localHttps:
+        route: NC01
+        upstreamMode: kubernetes-service-cluster-ip
+        workDir: /opt/unidesk/platform-infra/sub2api-nc01-edge
+        composePath: /opt/unidesk/platform-infra/sub2api-nc01-edge/docker-compose.yml
+        projectName: sub2api-nc01-edge
+        serviceName: caddy
+        containerName: sub2api-nc01-https-edge
+        image: caddy:2.10.2-alpine
+        hostBind: 0.0.0.0
+        httpsPort: 18443
+        caddyfilePath: /opt/unidesk/platform-infra/sub2api-nc01-edge/Caddyfile
+        dataDir: /var/lib/unidesk/platform-infra/sub2api-nc01-edge/caddy-data
+        configDir: /var/lib/unidesk/platform-infra/sub2api-nc01-edge/caddy-config
+        tlsMode: internal
+        responseHeaderTimeoutSeconds: 600
+    egressProxy:
+      enabled: true
+      deploymentName: sub2api-egress-proxy
+      serviceName: sub2api-egress-proxy
+      secretName: sub2api-egress-proxy-config
+      secretKey: config.json
+      image: ghcr.io/sagernet/sing-box:latest
+      imagePullPolicy: IfNotPresent
+      listenPort: 10808
+      hostNetwork: false
+      sourceConfigRef: config/platform-infra/egress-proxy-sources.yaml#sources.nc01-vpn-server-shadowsocks
+      applyToSub2Api: true
+      applyToSentinel: false
+      noProxy:
+        - localhost
+        - 127.0.0.1
+        - ::1
+        - .svc
+        - .cluster.local
+        - 10.0.0.0/8
+        - 172.16.0.0/12
+        - 192.168.0.0/16
+        - 82.156.23.220
+        - 152.53.229.148
+        - hyueapi.com
+        - .hyueapi.com
+    accountLocalProxy:
+      enabled: false
+      containerName: account-local-proxy
+      secretName: sub2api-account-local-proxy-config
+      secretKey: config.json
+      image: ghcr.io/sagernet/sing-box:latest
+      imagePullPolicy: IfNotPresent
+      listenHost: 127.0.0.1
+      listenPort: 18789
+      sourceConfigRef: config/platform-infra/egress-proxy-sources.yaml#sources.nc01-vpn-server-shadowsocks
  - id: JD01
    route: JD01:k3s
    namespace: platform-infra