1259 commits

Author	SHA1	Message	Date
copilot-swe-agent[bot]	159457d57b	fix: resolve persistent Overview loading issue with async IP resolution, mutex protection, WS status push on connect, and frontend retry ... Agent-Logs-Url: https://github.com/xAlokyx/3x-ui/sessions/dd7a9d3c-fddb-4521-9fcf-26bb342d408c Co-authored-by: xAlokyx <234771438+xAlokyx@users.noreply.github.com>	2026-04-08 16:53:23 +00:00
copilot-swe-agent[bot]	d449b73c10	fix: resolve Overview page stuck on loading spinner ... Agent-Logs-Url: https://github.com/xAlokyx/3x-ui/sessions/6bd8383d-5697-43fe-ba43-fbdc55ca783a Co-authored-by: xAlokyx <234771438+xAlokyx@users.noreply.github.com>	2026-04-06 12:28:34 +00:00
copilot-swe-agent[bot]	70dbdaa831	fix: apply gofmt formatting to inbound.go and speedlimit.go ... Agent-Logs-Url: https://github.com/xAlokyx/3x-ui/sessions/c914d2a1-a03a-42f6-9f72-9620e5d2e619 Co-authored-by: xAlokyx <234771438+xAlokyx@users.noreply.github.com>	2026-04-06 11:33:22 +00:00
ALOKY	20e90d5fcd	Merge pull request #7 from xAlokyx/copilot/add-speed-restriction-to-inbounds ... feat: add per-inbound download/upload speed limit (KB/s)	2026-04-06 14:24:26 +03:00
copilot-swe-agent[bot]	ad830201e9	feat: change Overall Speed display from MB/s to Mb/s ... Agent-Logs-Url: https://github.com/xAlokyx/3x-ui/sessions/63fee593-57c0-49be-8faf-10d58c72c55a Co-authored-by: xAlokyx <234771438+xAlokyx@users.noreply.github.com>	2026-04-06 00:56:50 +00:00
copilot-swe-agent[bot]	6122a803de	fix: address code review issues in SpeedLimitService ... Agent-Logs-Url: https://github.com/xAlokyx/3x-ui/sessions/9e10f937-9919-4186-8ac8-caa00f2593b8 Co-authored-by: xAlokyx <234771438+xAlokyx@users.noreply.github.com>	2026-04-04 05:30:05 +00:00
copilot-swe-agent[bot]	51a4d33a91	feat: add per-inbound download/upload speed limit (KB/s) via Linux tc ... Agent-Logs-Url: https://github.com/xAlokyx/3x-ui/sessions/9e10f937-9919-4186-8ac8-caa00f2593b8 Co-authored-by: xAlokyx <234771438+xAlokyx@users.noreply.github.com>	2026-04-04 05:26:18 +00:00
copilot-swe-agent[bot]	79cdac52f6	Add highestPing balancer strategy and update Xray-core download URLs to xAlokyx/Xray-core ... Agent-Logs-Url: https://github.com/xAlokyx/3x-ui/sessions/eb6d9a49-be1a-406c-a4a5-a8fea6b1a809 Co-authored-by: xAlokyx <234771438+xAlokyx@users.noreply.github.com>	2026-04-04 00:07:46 +00:00
copilot-swe-agent[bot]	50550f0d4b	Restore IP limitation feature to v2.8.5 behavior ... Agent-Logs-Url: https://github.com/xAlokyx/3x-ui/sessions/0e9b200a-ecf1-45c9-8552-a13819e14e78 Co-authored-by: xAlokyx <234771438+xAlokyx@users.noreply.github.com>	2026-04-03 10:59:32 +00:00
MHSanaei	f0f98c7122	Add Go code analyzer workflow	2026-03-17 23:01:15 +01:00
Abdalrahman	554981d9d3	feat(tgbot): send connection links and qrs on client creation (closes #3320)\n\n- Refactored inline keyboards into getCommonClientButtons to respect DRY\n- Extended SubmitAddClient callback handlers to dispatch individual links and QR codes to the bot chat on success. (#3888)	2026-03-17 22:09:49 +01:00
Nikolay	a08f1c6c13	Update translate.ru_RU.toml (#3889) ... Change to plural (geofiles, not geofile)	2026-03-17 21:24:09 +01:00
Alimpo	7f7ae0c547	fix: stop overwriting client_traffics.enable with JSON enable in GetClientTrafficByEmail (#3931) ... When a client hit traffic/expiry limit, disableInvalidClients sets client_traffics.enable=false and removes the user from Xray. GetClientTrafficByEmail was overwriting that with settings.clients[].enable (admin config), so ResetClientTraffic never saw the client as disabled and did not re-add the user. Clients could not connect until manually disabled/re-enabled. Now the DB runtime enable flag is preserved; reset correctly re-adds the user to Xray.	2026-03-17 21:20:24 +01:00
HamidReza Sadeghzadeh	60abeaad66	fix: Ban new IPs with fail2ban instead of disconnected the client. (#3919) ... * fix: Ban new IPs with fail2ban instead of disconnected the client. * fix: Remove unused strconv import * fix: Revert log fail2ban format	2026-03-17 21:18:10 +01:00
Aleksei Sidorenko	a2097ad062	feat: mask password in telegram notification on 2FA failure (#3884)	2026-03-04 18:26:53 +01:00
MHSanaei	34d8885075	Adjust KCP MTU when selecting xDNS mask	2026-03-04 13:39:14 +01:00
MHSanaei	5740996436	update dependencies	2026-03-04 13:05:29 +01:00
Happ-dev	ccd223aeea	Fix DeepLink for Happ, remove encoding URL (#3863) ... Co-authored-by: y.sivushkin <y.sivushkin@corp.101xp.com>	2026-03-04 12:29:46 +01:00
Aleksei Sidorenko	96b8fe472c	Fix: escape HTML characters in tgbot start command (#3883)	2026-03-04 11:35:24 +01:00
Nabi KaramAliZadeh	59b695ba83	fix: remove excluded paths from gzip middleware in router initialization (#3860)	2026-03-01 15:18:16 +01:00
Alireza Ahmadi	2b1d3e7347	[feat] restart xray-core from cli #3825	2026-02-20 00:03:16 +01:00
MHSanaei	5b796672e9	Improve telego client robustness and retries ... Add a createRobustFastHTTPClient helper to configure fasthttp.Client with better timeouts, connection limits, retries and optional SOCKS5 proxy dialing. Validate and sanitize proxy and API server URLs instead of returning early on invalid values, and build telego.Bot options dynamically. Reduce long-polling timeout to detect connection issues faster and adjust update retrieval comments. Implement exponential-backoff retry logic for SendMessage calls to handle transient connection/timeouts and improve delivery reliability; also reduce inter-message delay for better throughput.	2026-02-14 22:49:19 +01:00
MHSanaei	3fa0da38c9	Add timeouts and delays to backup sends ... Add rate-limit friendly delays and context timeouts when sending backups via Telegram. Iterate admin IDs with index to sleep 1s between sends; add 30s context.WithTimeout for each SendDocument call and defer file.Close() for opened files; insert a 500ms pause between sending DB and config files. These changes improve resource cleanup and reduce chance of Telegram rate-limit/timeout failures.	2026-02-14 22:31:41 +01:00
MHSanaei	8eb1225734	translate bug fix #3789	2026-02-14 21:41:20 +01:00
MHSanaei	e5c0fe3edf	bug fix #3785	2026-02-11 22:21:09 +01:00
MHSanaei	84013b0b3f	v2.8.10	2026-02-11 18:21:43 +01:00
MHSanaei	511adffc5b	Remove allowInsecure ... Remove the deprecated `allowInsecure`	2026-02-11 18:21:23 +01:00
bakatrouble	fc6344b840	Fix ipv6 hostname parsing for subscriptions (#3782)	2026-02-11 15:33:53 +01:00
emirjorge	b3555ce1b8	Update translate.es_ES.toml (#3766) ... Fix some trasnslations :)	2026-02-09 23:40:03 +01:00
MHSanaei	c2f409c3c4	fix security issue	2026-02-09 23:36:10 +01:00
surbiks	4779939424	Add url speed test for outbound (#3767) ... * add outbound testing functionality with configurable test URL * use no kernel tun for conflict errors	2026-02-09 21:43:17 +01:00
Sanaei	5bb87fd3d4	fix : Uncontrolled data used in path expression ... Co-Authored-By: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>	2026-02-07 22:54:40 +01:00
Aung Ye Zaw	d8fb09faae	feat: implement 'last IP wins' policy for IP limitation (#3735) ... - Add timestamp tracking for each client IP address - Sort IPs by connection time (newest first) instead of alphabetically - Automatically disconnect old connections when IP limit exceeded - Keep only the most recent N IPs based on LimitIP setting - Force disconnection via Xray API (RemoveUser + AddUser) - Prevents account sharing while allowing legitimate network switching - Log format: [LIMIT_IP] Email = user@example.com || Disconnecting OLD IP = 1.2.3.4 || Timestamp = 1738521234 This ensures users can seamlessly switch between networks (mobile/WiFi) and the system maintains connections from their most recent IPs only. Fixes account sharing prevention for VPN providers selling per-IP licenses. Co-authored-by: Aung Ye Zaw <zaw.a.y@phluid.world>	2026-02-04 00:38:11 +01:00
MHSanaei	f87c68ea68	Add workflow to clean old GitHub Actions caches ... Adds a scheduled GitHub Actions workflow (.github/workflows/cleanup_caches.yml) that runs weekly (and via workflow_dispatch) to delete Actions caches not accessed in the last 3 days. The job uses the gh CLI with the repository token and actions: write permission to list caches, filter by last_accessed_at against a 3-day cutoff, and delete matching cache IDs.	2026-02-03 00:19:44 +01:00
Nebulosa	03f04194f2	Update geofiles according 304 http respond (#3690) ... * feat: enhance geofile update process with conditional GET and modification time handling * style: improve formatting in UpdateGeofile function	2026-02-02 23:20:57 +01:00
Alimpo	248700a8a3	fix: trim whitespace from comma-separated list values in routing rules (#3734)	2026-02-02 23:19:30 +01:00
MHSanaei	e8d2973be7	Finalmask: Add XICMP	2026-02-02 17:50:30 +01:00
MHSanaei	f3d47ebb3f	Refactor TLS peer cert verification settings ... Removed verifyPeerCertByNames and pinnedPeerCertSha256 from inbound TLS settings and UI. Added verifyPeerCertByName and pinnedPeerCertSha256 to outbound TLS settings and updated the outbound form to support these fields. This change streamlines and clarifies certificate verification configuration between inbound and outbound settings.	2026-02-01 14:03:46 +01:00
MHSanaei	06c49b92f8	v2.8.9	2026-02-01 04:05:02 +01:00
MHSanaei	e35213bc73	Update Xray-core to v26.1.31 and related dependencies ... Bump Xray-core version to v26.1.31 in build scripts and server logic. Update Go dependencies including gopsutil, bytedance/sonic, circl, miekg/dns, go-proxyproto, sagernet/sing, and others to their latest versions. Adjust version check in GetXrayVersions to require at least v26.1.31.	2026-02-01 03:30:09 +01:00
MHSanaei	aa6a886977	Add UDP hop interval min/max support for Hysteria ... Replaces single UDP hop interval with separate min and max values in Hysteria stream settings. Updates model, JSON serialization, URL param parsing, and form fields for backward compatibility and enhanced configuration flexibility.	2026-02-01 03:20:29 +01:00
MHSanaei	9d603c5ad2	Add pinnedPeerCertSha256 support to TLS settings ... Introduces the pinnedPeerCertSha256 field to TlsStreamSettings in the JS model and adds a corresponding input in the TLS settings form. This allows users to specify SHA256 fingerprints for peer certificate pinning, enhancing security configuration options.	2026-02-01 03:12:54 +01:00
MHSanaei	a973fa6d68	XHTTP transport: New options for bypassing CDN's detection ... https://github.com/XTLS/Xray-core/pull/5414	2026-02-01 02:58:18 +01:00
MHSanaei	3af6497577	inbound : finalmask	2026-02-01 02:36:57 +01:00
MHSanaei	c59f54bb0e	outbound: finalmask	2026-02-01 01:56:23 +01:00
lillinlin	6b3da4fe5e	Update reality_targets.js (#3724)	2026-01-31 23:50:29 +01:00
Farhad H. P. Shirvan	ea0da32e81	fix: rename verifyPeerCertInNames to verifyPeerCertByName to be compatible with xray-core v26.1.31 (#3723)	2026-01-31 19:50:08 +01:00
Danil S.	fd5f591737	feat: more subscription information fields (#3701) ... * feat: more subscription information fields * fix: incorrect translation * feat: implement field for Happ custom routing rules	2026-01-26 23:06:01 +01:00
mr-shura	328ba3b45e	fix Telegram bot ignores reverse proxy setting #3673 (#3684) ... Refactor URL construction to use pre-configured URIs if available, otherwise fallback to default scheme and host.	2026-01-19 12:33:17 +01:00
Nebulosa	5370b6943a	Add hysteria2 protocol in hint text (#3686)	2026-01-19 12:31:49 +01:00