3x-ui/database
MHSanaei 6f6c7fc17a
fix(migrate): relax legacy freedom finalRules so reverse egress works on existing installs
The d414e186 template change only helps fresh configs; installs already on xray-core >=26.5 keep their stored finalRules of [{allow, geoip:private}], which blocks WAN egress for reverse-proxy traffic (refs #4782, XTLS/Xray-core#6248).

Add a FreedomFinalRulesReverseFix seeder that, on startup, rewrites any freedom outbound whose finalRules is exactly [{allow, ip:[geoip:private]}] to a no-condition [{allow}]. The match is exact, so custom rules (extra keys, other IPs, block actions, multiple rules) are left untouched. Runs once via history_of_seeders and is skipped on fresh installs.
2026-06-02 16:07:26 +02:00
..
model style: gofmt -s (doc-comment list separator, struct field alignment) 2026-06-02 03:58:58 +02:00
db.go fix(migrate): relax legacy freedom finalRules so reverse egress works on existing installs 2026-06-02 16:07:26 +02:00
db_seed_test.go feat(inbounds): support Unix domain socket path in Listen field (#4429) 2026-06-02 00:37:20 +02:00
dialect.go fix(nodes): use GREATEST for last_online merge on PostgreSQL 2026-05-29 02:04:02 +02:00
migrate_data.go fix(migrate): copy composite-key tables without FindInBatches (#4787) 2026-06-02 04:20:42 +02:00
migrate_data_test.go fix(migrate): copy composite-key tables without FindInBatches (#4787) 2026-06-02 04:20:42 +02:00