feat: 添加 WireGuard 设备管理并完善客户端分流

实现独立加密设备身份、网关 agent、持久生命周期任务和 Surge/FlClash 专属订阅凭证。

完善 Shadowrocket 规则转换与 Clash AI DNS,增加 Surge FFSB 适配、规则快照、运维工具及验收文档。
This commit is contained in:
YANG JIANKUAN
2026-11-02 22:44:23 +08:00
parent f741aeeccd
commit a5d980a5e9
80 changed files with 4777 additions and 51 deletions

View File

@@ -0,0 +1,19 @@
[Unit]
Description=Proxy Station njcq WireGuard agent
After=network-online.target wg-quick@wg-njcq.service
Wants=network-online.target
[Service]
Type=simple
ExecStart=/usr/bin/python3 /opt/proxy-station-wg/agent.py
Restart=on-failure
RestartSec=15
UMask=0077
NoNewPrivileges=true
ProtectHome=true
ProtectSystem=strict
ReadWritePaths=/etc/wireguard /run
CapabilityBoundingSet=CAP_NET_ADMIN CAP_DAC_READ_SEARCH
[Install]
WantedBy=multi-user.target