MHSanaei 6f6c7fc17a fix(migrate): relax legacy freedom finalRules so reverse egress works on existing installs ...

The d414e186 template change only helps fresh configs; installs already on xray-core >=26.5 keep their stored finalRules of [{allow, geoip:private}], which blocks WAN egress for reverse-proxy traffic (refs #4782, XTLS/Xray-core#6248).

Add a FreedomFinalRulesReverseFix seeder that, on startup, rewrites any freedom outbound whose finalRules is exactly [{allow, ip:[geoip:private]}] to a no-condition [{allow}]. The match is exact, so custom rules (extra keys, other IPs, block actions, multiple rules) are left untouched. Runs once via history_of_seeders and is skipped on fresh installs.

2026-06-02 16:07:26 +02:00

..

model

style: gofmt -s (doc-comment list separator, struct field alignment)

2026-06-02 03:58:58 +02:00

db_seed_test.go

feat(inbounds): support Unix domain socket path in Listen field (#4429)

2026-06-02 00:37:20 +02:00

db.go

fix(migrate): relax legacy freedom finalRules so reverse egress works on existing installs

2026-06-02 16:07:26 +02:00

dialect.go

fix(nodes): use GREATEST for last_online merge on PostgreSQL

2026-05-29 02:04:02 +02:00

migrate_data_test.go

fix(migrate): copy composite-key tables without FindInBatches (#4787)

2026-06-02 04:20:42 +02:00

migrate_data.go

fix(migrate): copy composite-key tables without FindInBatches (#4787)

2026-06-02 04:20:42 +02:00