feat: Z34b restore-by-host + harden web nginx DNS race

Add HMAC restore-by-host for phone-less rebind; resolve gateway at request time and recreate web after stack up. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-07 00:16:08 +08:00
parent f0fcc1fbda
commit e571e98387
12 changed files with 492 additions and 30 deletions
--- a/platform/internal/config/config.go
+++ b/platform/internal/config/config.go
@@ -66,7 +66,7 @@ type AgentConf struct {
 	YuhengTicket YuhengTicketConf `json:",optional"`
 }

-// YuhengTicketConf 宇恒 → 智建 短时凭票（scope=sync_bind）。
+// YuhengTicketConf 宇恒 → 智建 短时凭票（scope=sync_bind | sync_restore）。
 type YuhengTicketConf struct {
 	Enabled  bool   `json:",optional"`
 	Secret   string `json:",optional"` // 与宇恒共享；生产必换