Services

Overview of all services running on the Hawknest infrastructure.

Traefik

Reverse proxy and load balancer. Handles HTTPS termination with automatically provisioned Let's Encrypt certificates. Routes traffic to backend services based on Docker labels.

• Image: traefik:latest
• Ports: 443 (HTTPS)
• Config: Static YAML + Docker provider

AmneziaWG

VPN service using the AmneziaWG protocol. Provides encrypted tunneling with traffic obfuscation to bypass DPI-based censorship.

• Image: amneziavpn/amneziawg-go
• Network: Host mode
• Port: 5061/udp

Web Transport Relay

Experimental web transport proxy that tunnels Telegram traffic through HTTPS WebSocket connections. Appears as a normal website to network observers.

• Domain: wiki.hawknest.ru
• Backend: MTProxy on loopback
• Carrier: HTTPS (serialized POST + long poll)

Maintenance

Updating a service

ssh root@server
cd /root/projects/<service>
docker compose pull
docker compose up -d

Disk cleanup

docker system prune -af
df -h /