asxpi/iac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ansible: run Xray on asxpio-services

Browse source 
The VLESS Reality proxy ran from a hand-installed binary on the
temporary server. Run the upstream image instead, pinned and on the
host network, with only CAP_NET_BIND_SERVICE; its config (keys and
client id) is in the vault.

Assisted-by: Claude:opus-5-5
This commit is contained in:
Sergei Poljanski 2026-11-12 20:56:42 +04:00
commit b4d6852a80
4 changed files with 33 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
ansible/inventory/group_vars/services_servers/xray.yaml Normal file
View file

@ -0,0 +1,5 @@
---
# Xray VLESS Reality proxy on :443 (host network)
# renovate: datasource=docker depName=ghcr.io/xtls/xray-core
xray_version: "26.9.9"
xray_config: "{{ vault_xray_config }}"