release-verify: fix YAML syntax, use external gost config

- Move gost YAML config to separate file to avoid heredoc issues - Copy config from repo instead of inline heredoc
2026-04-28 20:04:23 +03:00
parent 9d38c04d32
commit 213f76a7b4
2 changed files with 47 additions and 47 deletions
@@ -0,0 +1,44 @@
+services:
+  - name: http-8888
+    addr: "0.0.0.0:8888"
+    handler: { type: http, chain: chain-smart }
+    listener: { type: tcp }
+
+  - name: socks-1081
+    addr: "127.0.0.1:1081"
+    handler: { type: socks5, chain: chain-smart }
+    listener: { type: tcp }
+
+chains:
+  - name: chain-smart
+    hops:
+      - name: tim-via-webzavod
+        addr: 127.0.0.1:1180
+        connector: { type: socks5 }
+        dialer: { type: tcp }
+        bypass: tim-whitelist
+
+      - name: default-socks
+        addr: 127.0.0.1:1080
+        connector: { type: socks5 }
+        dialer: { type: tcp }
+        bypass: tim-blacklist
+
+bypasses:
+  - name: tim-whitelist
+    whitelist: true
+    matchers: &tim_matchers
+      - ".webzavod.ru"
+      - ".devwebzavod.ru"
+      - ".aeroflot.ru"
+      - "webzavod.ru"
+      - "devwebzavod.ru"
+      - "aeroflot.ru"
+      - "46.235.186.67"
+      - "195.209.66.54"
+      - "195.209.82.146"
+      - "46.235.189.158"
+
+  - name: tim-blacklist
+    whitelist: false
+    matchers: *tim_matchers
@@ -57,53 +57,9 @@ jobs:
            -D 127.0.0.1:1180 gnezim@192.168.88.58
          echo "SSH SOCKS tunnel established on port 1180"

-          # Create gost config with conditional routing
-          cat > /tmp/gost.yaml <<'EOF'
-services:
-  - name: http-8888
-    addr: "0.0.0.0:8888"
-    handler: { type: http, chain: chain-smart }
-    listener: { type: tcp }
-
-  - name: socks-1081
-    addr: "127.0.0.1:1081"
-    handler: { type: socks5, chain: chain-smart }
-    listener: { type: tcp }
-
-chains:
-  - name: chain-smart
-    hops:
-      - name: tim-via-webzavod
-        addr: 127.0.0.1:1180
-        connector: { type: socks5 }
-        dialer: { type: tcp }
-        bypass: tim-whitelist
-
-      - name: default-socks
-        addr: 127.0.0.1:1080
-        connector: { type: socks5 }
-        dialer: { type: tcp }
-        bypass: tim-blacklist
-
-bypasses:
-  - name: tim-whitelist
-    whitelist: true
-    matchers: &tim_matchers
-      - ".webzavod.ru"
-      - ".devwebzavod.ru"
-      - ".aeroflot.ru"
-      - "webzavod.ru"
-      - "devwebzavod.ru"
-      - "aeroflot.ru"
-      - "46.235.186.67"
-      - "195.209.66.54"
-      - "195.209.82.146"
-      - "46.235.189.158"
-
-  - name: tim-blacklist
-    whitelist: false
-    matchers: *tim_matchers
-EOF
+          # Copy gost config from repo
+          cp .gitea/workflows/gost.yaml /tmp/gost.yaml
+          echo "gost config copied to /tmp/gost.yaml"

          # Start gost with the config
          gost -C /tmp/gost.yaml -L :8888 &