feat(censorcheck): добавить статус блокировок и launcher curl | bash

Прогон с VPS через HMAC-токен матчится к существующим серверам; UI /blocking показывает текущие проверки и историю.

Co-authored-by: Cursor <[email protected]>

deploy/docker-compose.traefik.yml

@@ -66,6 +66,11 @@ services:
       AUTH_JWT_SECRET: ${AUTH_JWT_SECRET:-}
       AUTH_ISSUER: ${AUTH_ISSUER:-https://auth.shnt.top}
       AUTH_PORTAL_URL: ${AUTH_PORTAL_URL:-https://auth.shnt.top}
+      TRUST_PROXY: "1"
+      CENSORCHECK_INGEST_SECRET: ${CENSORCHECK_INGEST_SECRET:-}
+      CENSORCHECK_PUBLIC_URL: ${CENSORCHECK_PUBLIC_URL:-}
+      VPS_DOMAIN: ${VPS_DOMAIN:-vps.shnt.top}
+      VPS_LAUNCHER_DOMAIN: ${VPS_LAUNCHER_DOMAIN:-vt.shnt.top}
       # Import SQLite/JSON via UI (default in app: 100 MiB). Raise if DB is larger.
       BACKUP_BODY_LIMIT_BYTES: ${BACKUP_BODY_LIMIT_BYTES:-104857600}
     volumes:
@@ -75,7 +80,7 @@ services:
     labels:
       - traefik.enable=true
       - traefik.docker.network=vps-tracker
-      - traefik.http.routers.vps-tracker.rule=Host(`${VPS_DOMAIN:-vps.shnt.top}`)
+      - traefik.http.routers.vps-tracker.rule=Host(`${VPS_DOMAIN:-vps.shnt.top}`) || Host(`${VPS_LAUNCHER_DOMAIN:-vt.shnt.top}`)
       - traefik.http.routers.vps-tracker.entrypoints=websecure
       - traefik.http.routers.vps-tracker.tls=true
       - traefik.http.routers.vps-tracker.tls.certresolver=letsencrypt

deploy/env.traefik.example

@@ -5,6 +5,8 @@
 CF_DNS_API_TOKEN=
 [email protected]
 VPS_DOMAIN=vps.example.com
+# Короткий хост для launcher: curl -fsSL https://vt.example.com/cc | bash
+VPS_LAUNCHER_DOMAIN=vt.example.com
 # TRAEFIK_IMAGE_TAG=v3.7
 # TRAEFIK_HTTP_PORT=80
 # TRAEFIK_HTTPS_PORT=443
@@ -23,5 +25,10 @@ AUTH_JWT_SECRET=
 AUTH_ISSUER=https://auth.shnt.top
 AUTH_PORTAL_URL=https://auth.shnt.top
 
+# --- Censorcheck launcher (GET /cc, ingest HMAC) ---
+# CENSORCHECK_INGEST_SECRET=
+# CENSORCHECK_PUBLIC_URL=https://vt.example.com
+# TRUST_PROXY is set to 1 in compose (Traefik X-Forwarded-For).
+
 # --- Backup import (POST /api/backup/*). Fastify default is 1 MiB → 413 Content Too Large.
 # BACKUP_BODY_LIMIT_BYTES=104857600