PCA/PCA_Phobos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 9 Wiki Activity
79 Commits 3 Branches 21 Tags
v1.4.8
Commit Graph

17 Commits

Author SHA1 Message Date
Бобырев Андрей
d030344b00 release: 1.4.8 — сторож роутера не трогает чужие туннели 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 18:12:38 +03:00
Бобырев Андрей
8bfc84f315 phobos-health: переключение сервера больше не убивает туннель 
Пир добавлялся с зашитым 127.0.0.1:13255, а обфускатор на части роутеров
слушает другой порт (51820) — после любого failover туннель был мёртв.
Порт теперь из wg-obfuscator.conf; пир через ndmc по шагам, allow-ips
0.0.0.0/0 и перезапуск интерфейса (ядро иначе не берёт allow-ips).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
(cherry picked from commit f934c5b3b0344264586a65b97b2b80b315c2e0c1)
 2026-11-01 16:41:24 +03:00
Бобырев Андрей
eefe3fc2af phobos-pull: таймаут wget 8 с — мёртвый туннель вешал pull навсегда 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
(cherry picked from commit c2d367ad527c3b14ba9b5ba421e74ae7a0cb7d33)
 2026-11-01 16:41:24 +03:00
Бобырев Андрей
147ef3a42d feat: ask VPN client subnet at install (SERVER_WG_IPV4_NETWORK) 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-11-01 02:46:49 +03:00
Бобырев Андрей
dff6af2c8e release: 1.4.1 — TCP fallback, Russian sites direct in the Android client 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-23 03:27:23 +03:00
Бобырев Андрей
071d3695e6 android-client 1.4.1: Russian sites direct by default 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-23 03:03:02 +03:00
Бобырев Андрей
5354656bb1 fix(cascade): panel serves phobos-cascade.sh 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-23 02:34:30 +03:00
Бобырев Андрей
5a01a6eed2 release: 1.4.0 — distribution via git.bobyrev.com 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-23 02:31:23 +03:00
Бобырев Андрей
7eac63343d release: 1.4.0 — one version for stable/beta/dev 
Light/dark theme and compact mobile layout, per-client speed limit, real
speed tests, panel domain (Let's Encrypt), client address + cascade relay,
RKN scanner guard, WARP, backup/restore, router web terminal, Android VPN
client with split tunnelling and Android admin app. Updating from 1.2.x
keeps keys, server.env and clients; tested 1.2.8 -> 1.4.0 on live VMs.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-23 02:22:46 +03:00
andrey271192
1a0460b927 fix: add install self check 2026-06-12 12:43:09 +03:00
andrey271192
13644f6991 fix: fetch x64 obfuscator fallback 2026-06-11 14:40:55 +03:00
Андрей Бобырев
390501ad34 fix: pull router config through tunnel iface 2026-06-01 01:50:37 +03:00
Андрей Бобырев
e430d1a70c fix: recover secondary API key handling 2026-06-01 00:54:26 +03:00
phobos
d5313d3572 secondary-setup: fetch agent api.py (with /api/router-config); README turnkey 2026-05-30 13:47:14 +03:00
phobos
fff45ca342 turnkey installer: full primary stack one-command + session improvements 
- install.sh: rewritten as self-contained turnkey primary installer (deps,
  wg-obfuscator from Ground-Zerro, wg0, obfuscator services, Phobos repo +
  PCA overlay patches, web panel, nginx, router watchdog).
- app.py: current panel (RU/EN, tunnel-pull config endpoint, fan-out, load-aware
  rebalance, online-anywhere status, '?' help).
- overlay/: patched onboarding scripts (phobos-client.sh 403 fix,
  install-router.sh.template tunnel-pull+cron+client_id, router-configure-wireguard
  public WG, phobos-pull.sh tunnel-first).
- server/: phobos-health.sh (self-heal+apply-server), phobos-pull.sh,
  phobos-router-watchdog.py, api.py (agent + /api/router-config).
 2026-05-30 13:39:49 +03:00
Андрей Бобырев
5badb15d75 feat: safety checks + backup + uninstall for secondary-setup.sh 
Pre-flight checks before installation:
- Detect existing WireGuard, Phobos clients, tokens, server.env
- Check port conflicts (obfuscator ports, 51820, 8444)
- Check running conflicting services
- Pause with warning count if issues found

Safety during install:
- Auto-backup existing configs to /opt/Phobos/backup/TIMESTAMP/
- Preserve existing wg0.conf if found (reuse keys)
- Skip obfuscator binary download if already installed

Clean uninstall script:
- /opt/Phobos/server/phobos-secondary-uninstall.sh
- Stops all services, removes configs and systemd units
- Preserves backup directory
- Removes iptables rules

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-05-29 00:03:19 +03:00
Андрей Бобырев
4f1fca5222 feat: multi-server failover, health monitor, port hopping 
- client/phobos-health.sh: router-side health monitor + auto-heal
  - Cron every 60s, checks WG handshake age
  - Auto-restart obfuscator (3min), WireGuard (5min)
  - Port hopping (10min), server failover (15min)
  - Auto-return to primary when recovered
- client/failover.conf.example: multi-server config template
- server/secondary-setup.sh: one-command secondary server deploy
  - WG + multi-port obfuscator + mini-API on :8444
  - Auto-registers with main server
- Panel: new "Серверы" page
  - Add/remove secondary servers
  - Health check, peer sync, fetch info
  - API key management
  - Secondary server install command

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-05-28 23:28:34 +03:00