1187 commits

Author	SHA1	Message	Date
lillinlin	575ee854c8	Better Random Reality (#3585) ... * Update reality_targets.js * Update inbound.js	2025-11-02 14:46:50 +01:00
Дмитрий Олегович Саенко	4a75bd0a48	Feature: add setting certs for subscription while generating for panel (#3578)	2025-11-01 13:10:27 +01:00
Rashid Yusubov	b0c223c631	fix: improve russian localization (#3576) ... * fix: improve russian localization * fix: updating the Russian translation according to the suggestions	2025-11-01 13:07:49 +01:00
Denis Gorelov	313b51f96f	feat: Add random Reality Target/SNI selection from 52 popular services (#3577) ... * feat: Add random Reality Target/SNI selection from 52 popular services - Created reality_targets.js with list of 52 popular services - Updated RealityStreamSettings to use random targets by default - Added UI randomize buttons with sync icon in Reality settings form - Implemented randomizeRealityTarget() method in inbound modal - Replaces hardcoded google.com with diverse global services * fix --------- Co-authored-by: mhsanaei <ho3ein.sanaei@gmail.com>	2025-11-01 13:07:05 +01:00
OleksandrParshyn	020cd63e22	Fix: Graceful Telegram bot shutdown to prevent 409 Conflict (#3580) ... * Fix: Graceful Telegram bot shutdown to prevent 409 Conflict Introduces a `botCancel` context and a global `StopBot()` function to ensure the Telegram bot's Long Polling operation is safely terminated (via context cancellation) before the service restarts. This prevents the "Conflict: another update consumer is running" (409) error upon panel restart. Changes: - Added `botCancel context.CancelFunc` to manage context cancellation. - Implemented global `StopBot()` function. - Updated `Tgbot.Stop()` to call `StopBot()`. - Modified `Tgbot.OnReceive()` to use the new cancellable context for `UpdatesViaLongPolling`. * Fix: Prevent race condition and goroutine leak in TgBot Addresses a critical race condition on the global `botCancel` variable, which could occur if `Tgbot.OnReceive()` was called concurrently (e.g., during rapid panel restarts or unexpected behavior). Changes in tgbot.go: - Added `tgBotMutex sync.Mutex` to ensure thread safety. - Protected `botCancel` creation and assignment in `OnReceive()` using the mutex, and added a check to prevent overwriting an active context, which avoids goroutine leaks. - Protected the cancellation and cleanup logic in `StopBot()` with the mutex. * Refactor: Replace time.Sleep with sync.WaitGroup for reliable TgBot shutdown Replaced the unreliable `time.Sleep(1 * time.Second)` in `service.StopBot()` with `sync.WaitGroup`. This ensures the Long Polling goroutine is explicitly waited for and reliably exits before the panel continues, preventing potential resource leaks and incomplete shutdowns during restarts. Changes: - Added `botWG sync.WaitGroup` variable. - Updated `service.StopBot()` to call `botWG.Wait()` instead of `time.Sleep()`. - Modified `Tgbot.OnReceive()` to correctly use `botWG.Add(1)` and `defer botWG.Done()` within the Long Polling goroutine. - Corrected the goroutine structure in `OnReceive()` to properly encapsulate all message handling logic.	2025-11-01 13:01:44 +01:00
mhsanaei	713a7328f6	gofmt	2025-10-21 13:02:55 +02:00
mhsanaei	d8523bbdac	fix(import): prevent sqlite disk I/O error by validating temp DB then swapping	2025-10-14 22:03:17 +02:00
fpointsstar	00baeffe74	Update translate.ru_RU.toml (#3574) ... Fix RU translation for login title: replace “Приветствие!” with “Добро пожаловать!” to match English “Welcome”.	2025-10-07 16:31:32 +02:00
mhsanaei	b578a33518	update dependencies	2025-10-07 13:49:08 +02:00
mhsanaei	8153e0ac05	fragment : MaxSplit	2025-10-07 13:46:30 +02:00
mhsanaei	2eb9d2e2e8	DevTools	2025-10-02 01:47:12 +02:00
Vadim Iskuchekov	a824875c4f	fix: improve error handling in periodic traffic reset job (#3572)	2025-10-01 23:12:09 +02:00
mhsanaei	e7cfee570b	first try native CPU implementation	2025-10-01 20:13:32 +02:00
konstpic	b65ec83c39	fix: fix delete method (#3569) ... Co-authored-by: Пичугин Константин <k.pichugin@comagic.dev>	2025-09-29 18:16:46 +02:00
konstpic	28a17a80ec	feat: add ldap component (#3568) ... * add ldap component * fix: fix russian comments, tls cert verify default true * feat: remove replaces go mod for local dev	2025-09-28 21:04:54 +02:00
Дмитрий Олегович Саенко	172f2ddaa7	fix russian translate in tgbot (#3557)	2025-09-25 15:21:40 +02:00
Tara Rostami	d69af328dc	fix: login animation (#3559) ... * Add IPv4 for wget in install * fix: login animation	2025-09-25 15:16:50 +02:00
mhsanaei	89def9aee6	fix	2025-09-24 21:30:58 +02:00
mhsanaei	b2b0024648	login: autocomplete password	2025-09-24 20:41:32 +02:00
mhsanaei	a0c07241c0	minor changes	2025-09-24 11:47:14 +02:00
mhsanaei	adf3242602	bug fix	2025-09-24 11:44:02 +02:00
mhsanaei	3f62592e4b	API improve security: returns 404 for unauthenticated API requests	2025-09-24 11:29:55 +02:00
Дмитрий Олегович Саенко	02bff4db6c	max port to 65535 (#3536) ... * add EXPOSE port in Dockerfile * fix: max port 65 531 -> 65 535 * fix --------- Co-authored-by: mhsanaei <ho3ein.sanaei@gmail.com>	2025-09-23 19:43:56 +02:00
Happ-dev	8ff4e1ff31	Add Happ client export open link (#3542) ... Co-authored-by: y.sivushkin <y.sivushkin@corp.101xp.com>	2025-09-23 16:46:45 +02:00
mhsanaei	26c6438ec2	fix api : subid, uuid from inbound settings	2025-09-23 11:52:40 +02:00
mhsanaei	1016f3b4f9	fix: outbound address for vless	2025-09-22 00:20:05 +02:00
mhsanaei	d518979e4f	pageSize to 25	2025-09-21 20:47:34 +02:00
mhsanaei	83f8a03b50	TGbot: improved (5x faster)	2025-09-21 19:27:05 +02:00
mhsanaei	b45e63a14a	API: UUID for getClientTraffics	2025-09-21 19:16:54 +02:00
mhsanaei	55f1d72af5	security fix: Uncontrolled data used in path expression	2025-09-21 18:51:54 +02:00
mhsanaei	e64e6327ef	security fix: Uncontrolled data used in path expression	2025-09-21 17:52:18 +02:00
mhsanaei	eacfbc86b5	security fix: Command built from user-controlled sources CWE-78 ... https://cwe.mitre.org/data/definitions/78.html https://owasp.org/www-community/attacks/Command_Injection	2025-09-21 17:39:30 +02:00
mhsanaei	37c17357fc	undo vnext for vmess	2025-09-20 13:10:57 +02:00
Tara Rostami	5e7a3db873	Minor Fixes (#3520)	2025-09-20 09:36:56 +02:00
mhsanaei	6ced549dea	docs: add comments for all functions	2025-09-20 09:35:50 +02:00
mhsanaei	f60682a6b7	new: VACUUM database	2025-09-19 17:14:39 +02:00
mhsanaei	50bd7a8040	better design for dns presets	2025-09-19 15:44:00 +02:00
mhsanaei	7465768ff7	fix: subpath panic	2025-09-19 14:39:21 +02:00
mhsanaei	5b00a52c65	fix: ineffectual assignment to needRestart	2025-09-19 10:47:28 +02:00
mhsanaei	151f1173a1	Fix ineffassign “date”	2025-09-19 10:46:49 +02:00
mhsanaei	e262132b9d	misspell	2025-09-19 10:35:03 +02:00
mhsanaei	7447cec17e	go package correction v2	2025-09-19 10:05:43 +02:00
mhsanaei	0ffd27c0aa	v2.8.2	2025-09-19 00:22:15 +02:00
mhsanaei	054cb1dea0	go package correction	2025-09-18 23:12:14 +02:00
Drahonn	3757ae0b11	cpu history timeframe (#3509)	2025-09-18 20:52:31 +02:00
mhsanaei	b46a0b404b	enhancements	2025-09-18 16:28:09 +02:00
mhsanaei	59ea2645db	new: subJsonEnable ... after this subEnable by default is true and subJsonEnable is false	2025-09-18 13:56:04 +02:00
mhsanaei	8c8d280f14	minor change	2025-09-18 12:20:21 +02:00
Harry NG	c720008187	chore: update sub page URL (#3505) ... * Fix: Shadowrocket link using base64 encoding * chore: update url	2025-09-18 12:11:52 +02:00
mhsanaei	170d24499e	fix PeriodicTrafficResetJob: log only when there are matching inbound	2025-09-18 11:41:11 +02:00