Sergey Antropoff
8a7a4c0889
- ACME TLS challenge on 443 (no port 80 or nginx decoy) - Auto-generate and persist obfs password per server - Update client export, HTML catalog, and vault examples - Document Salamander vs main and ACME auto-renewal in README Co-authored-by: Cursor <cursoragent@cursor.com>
44 lines
1.4 KiB
YAML
44 lines
1.4 KiB
YAML
---
|
|
# Режим развёртывания (ветка salamander)
|
|
hysteria2_mode: salamander
|
|
|
|
# Домен сервера (A-запись → IP VPS). Используется для TLS/SNI и ACME.
|
|
hysteria2_domain: ""
|
|
|
|
# Email для ACME / Let's Encrypt
|
|
hysteria2_acme_email: ""
|
|
|
|
# Список имён пользователей VPN (пароли генерируются автоматически)
|
|
hysteria2_users: []
|
|
|
|
# Опционально: фиксированные пароли { username: password }
|
|
hysteria2_user_passwords: {}
|
|
|
|
# Пароль обфускации Salamander (общий для сервера).
|
|
# Пусто — автогенерация через pwgen или загрузка из output/<server>/server-info.yml
|
|
hysteria2_obfs_password: ""
|
|
|
|
hysteria2_password_length: 40
|
|
hysteria2_obfs_password_length: 32
|
|
hysteria2_listen_port: 443
|
|
hysteria2_upgrade_system: true
|
|
hysteria2_configure_firewall: true
|
|
|
|
hysteria2_config_path: /etc/hysteria/config.yaml
|
|
hysteria2_service_name: hysteria-server
|
|
|
|
hysteria2_output_dir: "{{ playbook_dir }}/output"
|
|
hysteria2_output_name: "{{ inventory_hostname }}"
|
|
|
|
hysteria2_generate_qr_png: true
|
|
hysteria2_qr_png_size: 6
|
|
hysteria2_qr_png_margin: 2
|
|
hysteria2_qr_png_error_correction: M
|
|
|
|
hysteria2_wait_for_acme: true
|
|
hysteria2_open_browser: true
|
|
|
|
# --- uninstall ---
|
|
hysteria2_uninstall_remove_config: true
|
|
hysteria2_uninstall_remove_local_output: false
|