mtproto_proxy/config
Sergey Prokhorov 121d8b7413
docs: split-mode setup guide, architecture diagrams, cert script, build
README:
- New 'Split-mode setup' section: motivation, firewall rules, step-by-step
  instructions for both VPN tunnel and TLS distribution options
- Split-mode bullet added to Features list
- Notes on DPI-resistant tunnels (Shadowsocks, VLESS/XRay, Hysteria2) for
  Russian deployment; standard VPN protocols (WireGuard, OpenVPN) may be blocked
- Install instructions updated to use `make init-config` (copies templates,
  auto-detects public IP) instead of manual cp; ROLE= documented throughout
- Split-mode Step 4 uses `make ROLE=back/front` so template-change detection
  works correctly after `git pull`

Makefile:
- ROLE ?= both variable selects config templates (both/front/back)
- Config prereq rules use $(SYS_CONFIG_SRC) / $(VM_ARGS_SRC) based on ROLE
- New `init-config` target: force-copies templates, auto-detects public IP,
  prints edit reminder; replaces manual cp in install workflow

scripts/gen_dist_certs.sh:
- Two-step workflow: `init <dir>` on back server (CA + back cert),
  `add-node <dir> <name>` per front server (cert signed by existing CA)
- Generates per-node ssl_dist.<name>.conf with paths substituted (no
  NODE_NAME placeholder to edit manually)
- ssl_dist.<name>.conf is now used directly (no rename to ssl_dist.conf);
  vm.args examples and README updated to match

config/vm.args.{front,back}.example:
- -ssl_dist_optfile points to role-specific filename (ssl_dist.front.conf /
  ssl_dist.back.conf) so cert files can be copied as-is without renaming

AGENTS.md:
- Role-overview Mermaid flowchart showing front/back/both process split
- Data-plane section replaced with links to doc/ (no duplication)
- Supervision tree, key interactions, split-mode config keys updated

doc/handler-downstream-flow.md, doc/migration-flow.md:
- Mermaid box grouping to visually separate FRONT and BACK node participants
- erpc:call reference corrected (was rpc:call)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-12 00:34:45 +02:00
..
epmd.service Add epmd systemd service on systems that don't have it. Fixes #5 2019-02-16 20:27:41 +01:00
mtproto-proxy.service Add helpers for configuration reload 2019-08-27 00:32:23 +02:00
sys.config.back.example Add split-mode: front/back nodes via Erlang distribution 2026-04-11 23:33:09 +02:00
sys.config.example Use OTP logger instead of lager. 2026-02-17 01:50:54 +01:00
sys.config.front.example Add split-mode: front/back nodes via Erlang distribution 2026-04-11 23:33:09 +02:00
vm.args.back.example docs: split-mode setup guide, architecture diagrams, cert script, build 2026-04-12 00:34:45 +02:00
vm.args.example Use explicit ipv4 in curl makefile; add timeout; disable unused emulator threads 2019-08-18 19:30:11 +02:00
vm.args.front.example docs: split-mode setup guide, architecture diagrams, cert script, build 2026-04-12 00:34:45 +02:00