Files
3x-ui/docs/lib/xray/reverse-proxy.ts
T
MHSanaei 9b91f0f42e docs: vendor the documentation site into the monorepo
Fold the standalone 3x-ui-docs project (Next.js 16 + Fumadocs, deployed to
docs.sanaei.dev) into docs/ so the panel and its documentation share a single
source of truth, the way sing-box keeps its docs in-tree. The old repo becomes
redundant and can be retired.

- Import the full site under docs/ (app, components, content, lib, public,
  scripts, config). The self-contained pnpm project sits alongside the existing
  engineering notes with no filename collisions.
- Re-point "Edit on GitHub" links from MHSanaei/3x-ui-docs to this repo's
  docs/content/docs path (docs/lib/shared.ts, docs/app/.../page.tsx).
- Add docs-ci.yml and docs-deploy.yml under .github/workflows/, scoped to
  docs/** and run with working-directory: docs, since GitHub only runs
  workflows from the repo-root .github/. deploy-static.yml's GitHub Pages
  publish (CNAME docs.sanaei.dev) carries over unchanged.

Follow-up (outside this commit): attach the docs.sanaei.dev custom domain to
this repository's Pages (or set the Vercel project's root directory to docs),
confirm the site is live from the monorepo, then delete MHSanaei/3x-ui-docs.
2026-07-07 23:07:14 +02:00

69 lines
2.0 KiB
TypeScript

// Pure builders for reverse-proxy configs (Nginx / Caddy) and cert commands.
export type ProxyServer = 'nginx' | 'caddy';
export type CertTool = 'certbot' | 'acme.sh';
export interface ReverseProxyOptions {
server: ProxyServer;
domain: string;
panelPort: string;
/** Web base path the panel is served under, e.g. `/panel`. */
panelPath: string;
certTool: CertTool;
}
function normalizePath(path: string): string {
const p = path.trim();
if (!p) return '/';
return p.startsWith('/') ? p : `/${p}`;
}
export function buildProxyConfig(o: ReverseProxyOptions): string {
return o.server === 'nginx' ? buildNginx(o) : buildCaddy(o);
}
function buildNginx(o: ReverseProxyOptions): string {
const path = normalizePath(o.panelPath);
const loc = path === '/' ? '/' : `${path.replace(/\/$/, '')}/`;
return `server {
listen 443 ssl http2;
server_name ${o.domain};
ssl_certificate /etc/letsencrypt/live/${o.domain}/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/${o.domain}/privkey.pem;
location ${loc} {
proxy_pass http://127.0.0.1:${o.panelPort};
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 3600s;
proxy_send_timeout 3600s;
}
}`;
}
function buildCaddy(o: ReverseProxyOptions): string {
const path = normalizePath(o.panelPath);
if (path === '/') {
return `${o.domain} {
reverse_proxy 127.0.0.1:${o.panelPort}
}`;
}
const matcher = `${path.replace(/\/$/, '')}/*`;
return `${o.domain} {
reverse_proxy ${matcher} 127.0.0.1:${o.panelPort}
}`;
}
export function buildCertCommand(o: ReverseProxyOptions): string {
if (o.certTool === 'certbot') {
return `certbot certonly --nginx -d ${o.domain}`;
}
return `acme.sh --issue -d ${o.domain} --nginx`;
}