The VLESS Reality proxy ran from a hand-installed binary on the temporary server. Run the upstream image instead, pinned and on the host network, with only CAP_NET_BIND_SERVICE; its config (keys and client id) is in the vault. Assisted-by: Claude:opus-5-5 |
||
|---|---|---|
| .. | ||
| config.json.j2 | ||
| docker-compose.yml.j2 | ||