Server: sgv (sgv.anwing.me)
IP: 66.42.49.7
OS: Debian 12 (bookworm)
Purpose: Reverse proxy + RustDesk relay + X-UI

Services:
  1. Nginx (ports 80, 443, 21118, 21119)
     - han.anwing.me: Reverse proxy to ugphone.com (UgPhone cloud phone control panel)
       * Proxies /assets/, /apiv1/, / -> www.ugphone.com/toc-portal/
       * Auto-redirects to device control page (sid=38abbf0d-...)
       * Injects JS/CSS to hide brand elements + keepalive
       * WebSocket support, cookie domain rewrite
     - igz.mbvpn.cn: RustDesk WSS relay (ports 21118/21119)
     - rustdesk-wss: RustDesk WSS via IP-based SSL + han.anwing.me SSL
     - Default site: /var/www/html/ with autoindex

  2. Docker - RustDesk Server
     - rustdesk-hbbs (hbbs -r 66.42.49.7:21117)
     - rustdesk-hbbr (hbbr relay)
     - Ports: 21115-21117 (direct), 21118-21119 (WSS via Nginx)
     - Data: /opt/rustdesk/data/

  3. X-UI (port 6688) + Xray (ports: 5555, 5556, 1116, 4500, 500, 1701)
     - Proxy/VPN services

SSL Certificates:
  - /etc/letsencrypt/live/han.anwing.me/ - han.anwing.me cert
  - /root/cert/ip/ - IP-based SSL for RustDesk WSS
  - /root/.acme.sh/igz.mbvpn.cn_ecc/ - igz.mbvpn.cn cert

Key Paths:
  - /etc/nginx/ - Nginx configs (sites-available/ with default, han.anwing.me, rustdesk-wss)
  - /var/www/html/ - Default web root
  - /opt/rustdesk/ - Docker compose + data
  - /etc/letsencrypt/ - SSL certs for han.anwing.me
  - /root/ - Scripts (rust.sh, rustdesk.sh, SSL.sh, keepalive.sh, etc.)
  - /root/.acme.sh/ - ACME certificates
  - /root/cert/ip/ - IP SSL certs

Backup Files:
  - sgv-backup.tar.gz (19K) - Contains /etc/nginx/, /var/www/html/, /opt/rustdesk/, /etc/letsencrypt/

Note: X-UI configs excluded. Docker images can be pulled from registry.

Recovery Steps:
  1. Install dependencies: apt install -y nginx docker.io docker-compose
  2. Restore configs: tar -xzf sgv-backup.tar.gz -C /
  3. Start Docker: systemctl start docker
  4. Start RustDesk: cd /opt/rustdesk && docker-compose up -d
  5. Restart Nginx: systemctl restart nginx
  6. Renew SSL if needed: certbot renew or use /root/SSL.sh
  7. Reinstall X-UI if needed: use scripts in /root/

=== 7/31补充 ===
- sgv-root-20260731.tar.gz (58M) - /root 全量补漏 (原备份无root, 含 opencode.sh 7/29 + .opencode 171M + .acme.sh 证书)
- 注: 排除 .trae* IDE缓存