The VLESS Reality proxy ran from a hand-installed binary on the temporary server. Run the upstream image instead, pinned and on the host network, with only CAP_NET_BIND_SERVICE; its config (keys and client id) is in the vault. Assisted-by: Claude:opus-5-5 |
||
|---|---|---|
| .. | ||
| group_vars | ||
| host_vars | ||
| ci.yaml | ||
| hosts.yaml | ||