wrangler.toml

name = "cf-best-ip"
main = "src/worker.js"
compatibility_date = "2024-12-01"

# Worker 管理页 / API 自定义域名；不要把优选 IP 池域名绑定到 Worker
routes = [
  { pattern = "bestip.leilaomi.cc.cd", custom_domain = true },
]

# KV namespace
[[kv_namespaces]]
binding = "KV"
id = "23c38685383d4d3f8a1391487482e0a9"

# Cron Trigger - 每 6 小时拉一次源 + 同步 DNS（偏移 15 分钟避开 hostmonit 整点更新）
[triggers]
crons = ["15 */6 * * *"]

# 非敏感变量(public,可见即可)
[vars]
CF_ZONE_ID        = "9aaafd1409adada280a4a6138cad50e4"
SERVICE_HOSTNAME  = "bestip.leilaomi.cc.cd" # Worker 管理页 / API 入口，不参与优选 IP DNS 同步
ROOT_DOMAIN       = "leilaomi.cc.cd"        # 显式限制 DNS 同步根域，避免误写到其它 zone
ALLOWED_HOSTS     = "bestip.leilaomi.cc.cd" # 页面/API 入口 host 白名单；/health 仍允许监控访问
AUTO_RECORD_NAME  = "auto.leilaomi.cc.cd"   # 默认推荐优选池
CF_RECORD_NAME    = "cf.leilaomi.cc.cd"     # 通用优选池
CF_DNS_BY_CARRIER = "1"   # "1" = 按运营商分子域同步 (ct./cu./cm.)
CF_DNS_IPV6       = "0"   # "1" = 同步 AAAA 记录；默认关闭，避免客户端兼容性突变
DNS_TOP_N         = "10"
API_IPS_RATE_LIMIT = "60" # /api/ips 每 IP 每分钟限额；设 "0" 关闭
# API_IPS_REQUIRE_TOKEN = "1" # 设 "1" 后 /api/ips 也需要 Bearer token
# ALLOW_PUBLIC_REFRESH = "1" # 不推荐；仅在你明确接受公开刷新风险时启用

# 敏感变量请用 secret 命令注入:
#   wrangler secret put CF_API_TOKEN          # Cloudflare Zone:DNS:Edit
#   wrangler secret put REFRESH_TOKEN         # 手动刷新 /api/refresh 的 Bearer token
#   wrangler secret put ADMIN_TOKEN           # /admin、/api/config、/api/diagnostics 等管理接口 Bearer token
#   wrangler secret put TELEGRAM_BOT_TOKEN    # 可选

[[durable_objects.bindings]]
name = "REFRESH_LOCK"
class_name = "RefreshLock"

[[migrations]]
tag = "v1-refresh-lock"
new_sqlite_classes = ["RefreshLock"]