v1.38.8

build: prepare to build
perf: 支持设置默认的证书申请地址的反向代理
2026-04-13 03:40:55 +08:00 · 2026-02-07 02:27:52 +08:00 · 2026-02-07 02:23:58 +08:00 · 2026-02-07 02:20:27 +08:00 · 2026-02-07 00:03:37 +08:00 · 2026-02-06 23:35:35 +08:00
163 changed files with 4364 additions and 919 deletions
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -16,5 +16,9 @@
    },
    "[less]": {
        "editor.defaultFormatter": "vscode.css-language-features"
-    }
+    },
+    "scm.repositories.visible": 9,
+    "scm.repositories.explorer": false,
+    "scm.repositories.selectionMode": "multiple",
+    "scm.repositories.sortOrder": "discovery time"
 }
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,72 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.8](https://github.com/certd/certd/compare/v1.38.7...v1.38.8) (2026-02-06)
+
+### Performance Improvements
+
+* 双重验证显示secret ([febd6d3](https://github.com/certd/certd/commit/febd6d32cfe6d89ccecf26bf15141df7c456e5c6))
+* 优化申请证书最大超时时长 ([00f67d8](https://github.com/certd/certd/commit/00f67d86d68f4f83cfafe2fbfeb4af0d86f9d20e))
+* 支持设置默认的证书申请地址的反向代理 ([0cfb94b](https://github.com/certd/certd/commit/0cfb94b0ba6a6dc3bb0d0a81a1912068a4e6b6b6))
+* 子域名托管域名支持配置通配符 ([3f7ac93](https://github.com/certd/certd/commit/3f7ac939326b0c7ec013a7534b6c0e58fb3e8cb4))
+
+## [1.38.7](https://github.com/certd/certd/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+### Bug Fixes
+
+* 修复有域名记录时，域名输入框无法关闭的bug ([54c8217](https://github.com/certd/certd/commit/54c8217808453b121abf646b004596f28932509f))
+
+### Performance Improvements
+
+*  eab从更多参数中挪到外面 ([5ea4f46](https://github.com/certd/certd/commit/5ea4f46de7ae403a7a16e9488dc1d9c7523d019a))
+* 第三方登录支持Microsoft ([beb7a4c](https://github.com/certd/certd/commit/beb7a4c99277262bb9681c5594cfcd3e36c52074))
+* 优化zerossl申请证书稳定性 ([4d86fb3](https://github.com/certd/certd/commit/4d86fb319b81dbf6fa6485982105725b1b066593))
+
+## [1.38.6](https://github.com/certd/certd/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+### Bug Fixes
+
+* 修复新网找错域名的bug ([bd511f9](https://github.com/certd/certd/commit/bd511f97cb7fbdcaeff7ac899f0460a5c7b41826))
+
+### Performance Improvements
+
+* 当域名管理中没有域名时，创建流水线时不展开域名选择框 ([9166a57](https://github.com/certd/certd/commit/9166a579301a60750f0b72b6a42b0c8d730695fd))
+* count tip ([e19743f](https://github.com/certd/certd/commit/e19743f70553700f1f91bff76f87370f749dd247))
+* oauth支持github 和google， 修复头像显示问题 ([693a4a6](https://github.com/certd/certd/commit/693a4a663385ced3176286bf4b5f3566da83d90e))
+
+## [1.38.5](https://github.com/certd/certd/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+### Bug Fixes
+
+* 阿里云esa查询证书限制接口无效，改成配置证书数量上限检查方式进行清理 ([2302567](https://github.com/certd/certd/commit/230256793f8ad87ef8a0738c37108bf7b5ab9853))
+* 某些情况下登陆页面没有显示重置密码文档链接的问题 ([40801d0](https://github.com/certd/certd/commit/40801d0a0668c77adb57fae42b4b6615b198a88d))
+* 修复部署到火山引擎vod，获取域名列表为空的bug ([0719f4c](https://github.com/certd/certd/commit/0719f4c99e9198544d03431107b53652e076e881))
+* 修复litessl new-nonce报428的bug ([540ef96](https://github.com/certd/certd/commit/540ef967457a7871637cfdb5012ed1fa3261757b))
+* 修复oidc配置取消后获取登出地址失败后无法列出oauth列表的bug ([eb5de15](https://github.com/certd/certd/commit/eb5de150332fd914c56b812c3ba2c2445f902bb7))
+
+### Performance Improvements
+
+* 将重置密码的日志挪到启动成功之后，方便查看 ([0fa9b34](https://github.com/certd/certd/commit/0fa9b344e08cf355aee7a7566f061cc5d95dc374))
+* 支持绑定两个url地址 ([a2e9a41](https://github.com/certd/certd/commit/a2e9a41a7e712395c0e3ee6fe55b370aa1fc1f12))
+
+## [1.38.4](https://github.com/certd/certd/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+### Bug Fixes
+
+* 修复1:: 形式的ipv6校验失败的bug ([8b96f21](https://github.com/certd/certd/commit/8b96f218d5284033f10c186c0ce18e4c16d8e9b2))
+* 修复阿里云esa超过免费配额之后无法部署证书的bug，改成删除最旧的那张证书 ([32de8d9](https://github.com/certd/certd/commit/32de8d9ccb08d26414adbdde950d7cd405dc344a))
+
+### Performance Improvements
+
+* 当ip证书天数太小时，自动调整更新天数，避免每次运行都重新申请ip证书 ([433e98b](https://github.com/certd/certd/commit/433e98b6450fa7d0491151f159e432bf3dfe4feb))
+* 首页证书数量支持点击跳转 ([52cbff0](https://github.com/certd/certd/commit/52cbff0e15329aecd3edcf81315fb7ceab9ec290))
+* 修复旧版本流水线数据发送通知标题为空的bug ([9bee0e4](https://github.com/certd/certd/commit/9bee0e460bfebe8db76742b80b2d52854392f4de))
+* 验证码支持 Cloudflare Turnstile ，谨慎启用，国内被墙了 ([ca43c77](https://github.com/certd/certd/commit/ca43c775250154def63c4acd96d65dc95d1c0c2b))
+* 优化证书未过期时的任务日志提示 ([ac85488](https://github.com/certd/certd/commit/ac85488245197694560aad7df9425ca215ef7ff7))
+* 支持部署到阿里云GA ([1a0d3ee](https://github.com/certd/certd/commit/1a0d3eeb1b0b5ce08f05af84b6161e00c1fe1815))
+* 支持部署到华为elb ([60c8ace](https://github.com/certd/certd/commit/60c8ace443e848155d3ce12e95b84766a4610d3a))
+* 支持部署到AcePanel ([1661cae](https://github.com/certd/certd/commit/1661caed05e3413dc3e2b14ce62b75aa03ad90e0))
+
 ## [1.38.3](https://github.com/certd/certd/compare/v1.38.2...v1.38.3) (2026-01-28)

 ### Bug Fixes
--- a/docs/guide/changelogs/CHANGELOG.md
+++ b/docs/guide/changelogs/CHANGELOG.md
@@ -3,6 +3,87 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.7](https://github.com/certd/certd/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+### Bug Fixes
+
+* 修复有域名记录时，域名输入框无法关闭的bug ([54c8217](https://github.com/certd/certd/commit/54c8217808453b121abf646b004596f28932509f))
+
+### Performance Improvements
+
+*  eab从更多参数中挪到外面 ([5ea4f46](https://github.com/certd/certd/commit/5ea4f46de7ae403a7a16e9488dc1d9c7523d019a))
+* 第三方登录支持Microsoft ([beb7a4c](https://github.com/certd/certd/commit/beb7a4c99277262bb9681c5594cfcd3e36c52074))
+* 优化zerossl申请证书稳定性 ([4d86fb3](https://github.com/certd/certd/commit/4d86fb319b81dbf6fa6485982105725b1b066593))
+
+## [1.38.6](https://github.com/certd/certd/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+### Bug Fixes
+
+* 修复新网找错域名的bug ([bd511f9](https://github.com/certd/certd/commit/bd511f97cb7fbdcaeff7ac899f0460a5c7b41826))
+
+### Performance Improvements
+
+* 当域名管理中没有域名时，创建流水线时不展开域名选择框 ([9166a57](https://github.com/certd/certd/commit/9166a579301a60750f0b72b6a42b0c8d730695fd))
+* count tip ([e19743f](https://github.com/certd/certd/commit/e19743f70553700f1f91bff76f87370f749dd247))
+* oauth支持github 和google， 修复头像显示问题 ([693a4a6](https://github.com/certd/certd/commit/693a4a663385ced3176286bf4b5f3566da83d90e))
+
+## [1.38.5](https://github.com/certd/certd/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+### Bug Fixes
+
+* 阿里云esa查询证书限制接口无效，改成配置证书数量上限检查方式进行清理 ([2302567](https://github.com/certd/certd/commit/230256793f8ad87ef8a0738c37108bf7b5ab9853))
+* 某些情况下登陆页面没有显示重置密码文档链接的问题 ([40801d0](https://github.com/certd/certd/commit/40801d0a0668c77adb57fae42b4b6615b198a88d))
+* 修复部署到火山引擎vod，获取域名列表为空的bug ([0719f4c](https://github.com/certd/certd/commit/0719f4c99e9198544d03431107b53652e076e881))
+* 修复litessl new-nonce报428的bug ([540ef96](https://github.com/certd/certd/commit/540ef967457a7871637cfdb5012ed1fa3261757b))
+* 修复oidc配置取消后获取登出地址失败后无法列出oauth列表的bug ([eb5de15](https://github.com/certd/certd/commit/eb5de150332fd914c56b812c3ba2c2445f902bb7))
+
+### Performance Improvements
+
+* 将重置密码的日志挪到启动成功之后，方便查看 ([0fa9b34](https://github.com/certd/certd/commit/0fa9b344e08cf355aee7a7566f061cc5d95dc374))
+* 支持绑定两个url地址 ([a2e9a41](https://github.com/certd/certd/commit/a2e9a41a7e712395c0e3ee6fe55b370aa1fc1f12))
+
+## [1.38.4](https://github.com/certd/certd/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+### Bug Fixes
+
+* 修复1:: 形式的ipv6校验失败的bug ([8b96f21](https://github.com/certd/certd/commit/8b96f218d5284033f10c186c0ce18e4c16d8e9b2))
+* 修复阿里云esa超过免费配额之后无法部署证书的bug，改成删除最旧的那张证书 ([32de8d9](https://github.com/certd/certd/commit/32de8d9ccb08d26414adbdde950d7cd405dc344a))
+
+### Performance Improvements
+
+* 当ip证书天数太小时，自动调整更新天数，避免每次运行都重新申请ip证书 ([433e98b](https://github.com/certd/certd/commit/433e98b6450fa7d0491151f159e432bf3dfe4feb))
+* 首页证书数量支持点击跳转 ([52cbff0](https://github.com/certd/certd/commit/52cbff0e15329aecd3edcf81315fb7ceab9ec290))
+* 修复旧版本流水线数据发送通知标题为空的bug ([9bee0e4](https://github.com/certd/certd/commit/9bee0e460bfebe8db76742b80b2d52854392f4de))
+* 验证码支持 Cloudflare Turnstile ，谨慎启用，国内被墙了 ([ca43c77](https://github.com/certd/certd/commit/ca43c775250154def63c4acd96d65dc95d1c0c2b))
+* 优化证书未过期时的任务日志提示 ([ac85488](https://github.com/certd/certd/commit/ac85488245197694560aad7df9425ca215ef7ff7))
+* 支持部署到阿里云GA ([1a0d3ee](https://github.com/certd/certd/commit/1a0d3eeb1b0b5ce08f05af84b6161e00c1fe1815))
+* 支持部署到华为elb ([60c8ace](https://github.com/certd/certd/commit/60c8ace443e848155d3ce12e95b84766a4610d3a))
+* 支持部署到AcePanel ([1661cae](https://github.com/certd/certd/commit/1661caed05e3413dc3e2b14ce62b75aa03ad90e0))
+
+## [1.38.3](https://github.com/certd/certd/compare/v1.38.2...v1.38.3) (2026-01-28)
+
+### Bug Fixes
+
+* 当通知配置被删除时，使用默认通知配置进行发送 ([5398300](https://github.com/certd/certd/commit/53983002b6553a929b72e2c70a26809a9f306e89))
+* 站点检查多个ip连接超时的报错显示不出来的bug ([33b284a](https://github.com/certd/certd/commit/33b284afc0ae6391658d573e32b1ce7765e51cb2))
+
+### Performance Improvements
+
+* 部署插件支持ucloud alb ([640950d](https://github.com/certd/certd/commit/640950d4c847c72cae2986e3c2cae10d52a67fdf))
+* 多个dns 提供商支持导入域名 ([d3c0914](https://github.com/certd/certd/commit/d3c0914ac16db8ac77f9c60285bb20cfab7a3cb0))
+* 首次使用提示新手教程按钮 ([e054c8f](https://github.com/certd/certd/commit/e054c8fc55063fd96548f1c19049070524a63411))
+* 输入证书域名时，支持点击导入域名 ([40be424](https://github.com/certd/certd/commit/40be42406c6fd5de11f594fc6913178d9e7d8943))
+* 所有的dnsprovider 支持导入域名列表 ([9f21b1a](https://github.com/certd/certd/commit/9f21b1a09797d7dab253e4416c538b55fb8f4488))
+* 优化首页统计数据，饼图替换成证书数量统计 ([9fa1c2e](https://github.com/certd/certd/commit/9fa1c2eb3e55ef630333ae24284aa8b54e3414b6))
+* 优化首页图标 ([998de0f](https://github.com/certd/certd/commit/998de0f9a031339b019aa7a09e61e994664a8047))
+* 域名导入任务进度条 ([7058d5c](https://github.com/certd/certd/commit/7058d5cb935cab8c75b98493ed497a22dbe70883))
+* 站点监控，检查状态挪到前面显示 ([48f1bf0](https://github.com/certd/certd/commit/48f1bf091869b87dd17feaca5efd8680ef741582))
+* 证书仓库页面增加到期状态查询条件 ([58c3d70](https://github.com/certd/certd/commit/58c3d7087bb66358d896a741e12005f690b2bd5e))
+* 证书流水线创建域名输入框支持获取域名数据进行选择 ([1d5b1c2](https://github.com/certd/certd/commit/1d5b1c239cf350920eb2eb9fd293af74ef412853))
+* 支持导入51dns域名 ([7eb9694](https://github.com/certd/certd/commit/7eb96942214aed0dfc9c3c5a669374da67052c49))
+* ucloud支持部署到alb ([78004bd](https://github.com/certd/certd/commit/78004bdfb552a3b83298fa09d518ca282a529d90))
+* ucloud支持部署到ulb（alb、clb统一成一个） ([c408687](https://github.com/certd/certd/commit/c408687af7669afe733b5506720ca795555acdce))
+
 ## [1.38.2](https://github.com/certd/certd/compare/v1.38.1...v1.38.2) (2026-01-22)

 ### Bug Fixes
--- a/docs/guide/info.json
+++ b/docs/guide/info.json
@@ -0,0 +1,24 @@
+{
+  "notice": "永久专业版上线，新用户立减50，升级到最新版点击下方“立即赞助”按钮前往获取",
+  "plus": {
+    "name": "专业版",
+    "price": "89.9",
+    "price3": "199",
+    "tooltip": "开源需要您的赞助支持",
+	"priceText":"¥89.9/年",
+	"discountText":"永久专业版50优惠券立即领取"
+  },
+  "comm": {
+    "name": "商业版",
+    "price": "399",
+    "price3": "899",
+    "tooltip": "3年优惠300",
+	"priceText":"¥399/年",
+	"discountText":"¥899/3年（3年优惠300）"
+  },
+  "app":{
+	  "minVersion":"1.36.0",
+	  "minVersionTip":"版本过低，为了您的数据安全，请尽快升级"
+  }
+  
+}
--- a/docs/guide/plugins/access.md
+++ b/docs/guide/plugins/access.md
@@ -14,62 +14,63 @@
 | 10.| **baota授权** |  | 
 | 11.| **天翼云授权** |  | 
 | 12.| **51dns授权** |  | 
-| 13.| **SFTP授权** |  | 
-| 14.| **阿里云OSS授权** | 包含地域和Bucket | 
-| 15.| **APISIX授权** |  | 
-| 16.| **亚马逊云aws授权** |  | 
-| 17.| **亚马逊云科技（国区）授权** |  | 
-| 18.| **CacheFly** | CacheFly | 
-| 19.| **EAB授权** | ZeroSSL证书申请需要EAB授权 | 
-| 20.| **google cloud** | 谷歌云授权 | 
-| 21.| **cloudflare授权** |  | 
-| 22.| **中国移动CND授权** |  | 
-| 23.| **授权插件示例** | 这是一个示例授权插件，用于演示如何实现一个授权插件 | 
-| 24.| **dns.la授权** |  | 
-| 25.| **多吉云** |  | 
-| 26.| **Dokploy授权** |  | 
-| 27.| **farcdn授权** |  | 
-| 28.| **FlexCDN授权** |  | 
-| 29.| **Gcore** | Gcore | 
-| 30.| **Github授权** |  | 
-| 31.| **godaddy授权** |  | 
-| 32.| **金山云授权** |  | 
-| 33.| **FTP授权** |  | 
-| 34.| **七牛OSS授权** |  | 
-| 35.| **腾讯云COS授权** | 腾讯云对象存储授权，包含地域和存储桶 | 
-| 36.| **s3/minio授权** | S3/minio oss授权 | 
-| 37.| **namesilo授权** |  | 
-| 38.| **1panel授权** | 账号和密码 | 
-| 39.| **支付宝** |  | 
-| 40.| **白山云授权** |  | 
-| 41.| **宝塔云WAF授权** | 用于连接和管理宝塔云WAF服务的授权配置 | 
-| 42.| **cdnfly授权** |  | 
-| 43.| **k8s授权** |  | 
-| 44.| **括彩云cdn授权** | 括彩云CDN，每月免费30G，[注册即领](https://kuocaicdn.com/register?code=8mn536rrzfbf8) | 
-| 45.| **LeCDN授权** |  | 
-| 46.| **lucky** |  | 
-| 47.| **猫云授权** |  | 
-| 48.| **plesk授权** |  | 
-| 49.| **长亭雷池授权** |  | 
-| 50.| **群晖登录授权** |  | 
-| 51.| **uniCloud** | unicloud授权 | 
-| 52.| **微信支付** |  | 
-| 53.| **易盾rcdn授权** | 易盾CDN，每月免费30G，[注册即领](https://rhcdn.yiduncdn.com/register?code=8mn536rrzfbf8) | 
-| 54.| **易发云短信** | sms.yfyidc.cn/ | 
-| 55.| **易盾DCDN授权** | https://user.yiduncdn.com | 
-| 56.| **易支付** |  | 
-| 57.| **proxmox** |  | 
-| 58.| **UCloud授权** | 优刻得授权 | 
-| 59.| **又拍云** |  | 
-| 60.| **网宿授权** |  | 
-| 61.| **西部数码授权** |  | 
-| 62.| **我爱云授权** | 我爱云CDN | 
-| 63.| **新网授权（代理方式）** |  | 
-| 64.| **新网授权** |  | 
-| 65.| **新网互联授权** | 仅支持代理账号，ip需要加入白名单 | 
-| 66.| **Zenlayer授权** | Zenlayer授权 | 
-| 67.| **GoEdge授权** |  | 
-| 68.| **雨云授权** | https://app.rainyun.com/ | 
+| 13.| **AcePanel授权** |  | 
+| 14.| **SFTP授权** |  | 
+| 15.| **阿里云OSS授权** | 包含地域和Bucket | 
+| 16.| **APISIX授权** |  | 
+| 17.| **亚马逊云aws授权** |  | 
+| 18.| **亚马逊云科技（国区）授权** |  | 
+| 19.| **CacheFly** | CacheFly | 
+| 20.| **EAB授权** | ZeroSSL证书申请需要EAB授权 | 
+| 21.| **google cloud** | 谷歌云授权 | 
+| 22.| **cloudflare授权** |  | 
+| 23.| **中国移动CND授权** |  | 
+| 24.| **授权插件示例** | 这是一个示例授权插件，用于演示如何实现一个授权插件 | 
+| 25.| **dns.la授权** |  | 
+| 26.| **多吉云** |  | 
+| 27.| **Dokploy授权** |  | 
+| 28.| **farcdn授权** |  | 
+| 29.| **FlexCDN授权** |  | 
+| 30.| **Gcore** | Gcore | 
+| 31.| **Github授权** |  | 
+| 32.| **godaddy授权** |  | 
+| 33.| **金山云授权** |  | 
+| 34.| **FTP授权** |  | 
+| 35.| **七牛OSS授权** |  | 
+| 36.| **腾讯云COS授权** | 腾讯云对象存储授权，包含地域和存储桶 | 
+| 37.| **s3/minio授权** | S3/minio oss授权 | 
+| 38.| **namesilo授权** |  | 
+| 39.| **1panel授权** | 账号和密码 | 
+| 40.| **支付宝** |  | 
+| 41.| **白山云授权** |  | 
+| 42.| **宝塔云WAF授权** | 用于连接和管理宝塔云WAF服务的授权配置 | 
+| 43.| **cdnfly授权** |  | 
+| 44.| **k8s授权** |  | 
+| 45.| **括彩云cdn授权** | 括彩云CDN，每月免费30G，[注册即领](https://kuocaicdn.com/register?code=8mn536rrzfbf8) | 
+| 46.| **LeCDN授权** |  | 
+| 47.| **lucky** |  | 
+| 48.| **猫云授权** |  | 
+| 49.| **plesk授权** |  | 
+| 50.| **长亭雷池授权** |  | 
+| 51.| **群晖登录授权** |  | 
+| 52.| **uniCloud** | unicloud授权 | 
+| 53.| **微信支付** |  | 
+| 54.| **易盾rcdn授权** | 易盾CDN，每月免费30G，[注册即领](https://rhcdn.yiduncdn.com/register?code=8mn536rrzfbf8) | 
+| 55.| **易发云短信** | sms.yfyidc.cn/ | 
+| 56.| **易盾DCDN授权** | https://user.yiduncdn.com | 
+| 57.| **易支付** |  | 
+| 58.| **proxmox** |  | 
+| 59.| **UCloud授权** | 优刻得授权 | 
+| 60.| **又拍云** |  | 
+| 61.| **网宿授权** |  | 
+| 62.| **西部数码授权** |  | 
+| 63.| **我爱云授权** | 我爱云CDN | 
+| 64.| **新网授权（代理方式）** |  | 
+| 65.| **新网授权** |  | 
+| 66.| **新网互联授权** | 仅支持代理账号，ip需要加入白名单 | 
+| 67.| **Zenlayer授权** | Zenlayer授权 | 
+| 68.| **GoEdge授权** |  | 
+| 69.| **雨云授权** | https://app.rainyun.com/ | 

 <style module>
 table th:first-of-type {
--- a/docs/guide/plugins/deploy.md
+++ b/docs/guide/plugins/deploy.md
@@ -1,11 +1,11 @@
 # 任务插件
-共 `118` 款任务插件    
+共 `122` 款任务插件    
 ## 1. 证书申请

 | 序号 | 名称 | 说明 |
 |-----|-----|-----|
 | 1.| **证书申请（JS版）** | 免费通配符域名证书申请，支持多个域名打到同一个证书上 | 
-| 2.| **商用证书托管** | 手动上传自定义证书后，自动部署（每次证书有更新，都需要手动上传一次） | 
+| 2.| **已有证书托管** | 手动上传自定义证书后，自动部署（每次证书有更新，都需要手动上传一次） | 
 | 3.| **获取阿里云订阅证书** | 从阿里云拉取订阅模式的商用证书 | 
 | 4.| **证书申请（Lego）** | 支持海量DNS解析提供商，推荐使用，一样的免费通配符域名证书申请，支持多个域名打到同一个证书上 | 
 ## 2. 主机
@@ -53,26 +53,28 @@

 | 序号 | 名称 | 说明 |
 |-----|-----|-----|
-| 1.| **Dokploy-部署server证书** | 自动更新Dokploy server证书 | 
-| 2.| **飞牛NAS-部署证书** |  | 
-| 3.| **1Panel-部署面板证书** | 更新1Panel的面板证书 | 
-| 4.| **1Panel-更新证书** | 更新1Panel的证书，包括面板证书和站点证书 | 
-| 5.| **宝塔-删除过期证书** | 删除证书夹中过期证书 | 
-| 6.| **宝塔-WAF证书部署** | 部署宝塔云WAF/aaWAF | 
-| 7.| **宝塔-面板证书部署** | 部署宝塔面板本身的ssl证书 | 
-| 8.| **宝塔win-网站证书部署** | 部署到Windows版宝塔管理的站点的ssl证书 | 
-| 9.| **宝塔-网站证书部署** | 部署宝塔管理的站点的ssl证书，目前支持宝塔网站站点、docker站点等。本插件也支持aaPanel。 | 
-| 10.| **K8S-Apply自定义yaml** | apply自定义yaml到k8s | 
-| 11.| **K8S-Ingress 证书部署** | 部署证书到k8s的Ingress | 
-| 12.| **K8S-部署证书到Secret** | 部署证书到k8s的secret | 
-| 13.| **lucky-更新Lucky证书** |  | 
-| 14.| **Plesk-部署Plesk网站证书** |  | 
-| 15.| **Plesk-更新证书** | 不会创建新证书记录，直接更新旧的证书 | 
-| 16.| **雷池-更新证书** | 更新长亭雷池WAF的证书 | 
-| 17.| **群晖-部署证书到群晖面板** | Synology，支持6.x以上版本 | 
-| 18.| **uniCloud-部署到服务空间** | 部署到服务空间 | 
-| 19.| **Proxmox-上传证书到Proxmox** |  | 
-| 20.| **威联通-部署证书到威联通** | 部署证书到qnap | 
+| 1.| **AcePanel-部署到网站** | 上传证书并部署到指定网站 | 
+| 2.| **AcePanel-面板证书** | 部署AcePanel面板证书 | 
+| 3.| **Dokploy-部署server证书** | 自动更新Dokploy server证书 | 
+| 4.| **飞牛NAS-部署证书** |  | 
+| 5.| **1Panel-部署面板证书** | 更新1Panel的面板证书 | 
+| 6.| **1Panel-更新证书** | 更新1Panel的证书，包括面板证书和站点证书 | 
+| 7.| **宝塔-删除过期证书** | 删除证书夹中过期证书 | 
+| 8.| **宝塔-WAF证书部署** | 部署宝塔云WAF/aaWAF | 
+| 9.| **宝塔-面板证书部署** | 部署宝塔面板本身的ssl证书 | 
+| 10.| **宝塔win-网站证书部署** | 部署到Windows版宝塔管理的站点的ssl证书 | 
+| 11.| **宝塔-网站证书部署** | 部署宝塔管理的站点的ssl证书，目前支持宝塔网站站点、docker站点等。本插件也支持aaPanel。 | 
+| 12.| **K8S-Apply自定义yaml** | apply自定义yaml到k8s | 
+| 13.| **K8S-Ingress 证书部署** | 部署证书到k8s的Ingress | 
+| 14.| **K8S-部署证书到Secret** | 部署证书到k8s的secret | 
+| 15.| **lucky-更新Lucky证书** |  | 
+| 16.| **Plesk-部署Plesk网站证书** |  | 
+| 17.| **Plesk-更新证书** | 不会创建新证书记录，直接更新旧的证书 | 
+| 18.| **雷池-更新证书** | 更新长亭雷池WAF的证书 | 
+| 19.| **群晖-部署证书到群晖面板** | Synology，支持6.x以上版本 | 
+| 20.| **uniCloud-部署到服务空间** | 部署到服务空间 | 
+| 21.| **Proxmox-上传证书到Proxmox** |  | 
+| 22.| **威联通-部署证书到威联通** | 部署证书到qnap | 
 ## 5. 阿里云

 | 序号 | 名称 | 说明 |
@@ -86,19 +88,21 @@
 | 7.| **阿里云-部署证书至DCDN** | 依赖证书申请前置任务，自动部署域名证书至阿里云DCDN | 
 | 8.| **阿里云-部署至ESA** | 部署证书到阿里云ESA(边缘安全加速)，自动删除过期证书 | 
 | 9.| **阿里云-部署至阿里云FC(3.0)** | 部署证书到阿里云函数计算（FC3.0） | 
-| 10.| **阿里云-部署至NLB（网络负载均衡）** | NLB,网络负载均衡,更新监听器的默认证书 | 
-| 11.| **阿里云-部署证书至OSS** | 部署域名证书至阿里云OSS自定义域名，不是上传到阿里云oss | 
-| 12.| **阿里云-部署至CLB(传统负载均衡)** | 部署证书到阿里云CLB(传统负载均衡) | 
-| 13.| **阿里云-部署至VOD** | 部署证书到阿里云视频点播（vod） | 
-| 14.| **阿里云-部署至阿里云WAF** | 部署证书到阿里云WAF | 
-| 15.| **阿里云-上传证书到CAS** | 上传证书到阿里云证书管理服务（CAS），如果不想在阿里云上同一份证书上传多次，可以把此任务作为前置任务，其他阿里云任务证书那一项选择此任务的输出 | 
+| 10.| **阿里云-部署至GA** | 部署证书到阿里云GA(全球加速)，支持更新默认证书和扩展证书 | 
+| 11.| **阿里云-部署至NLB（网络负载均衡）** | NLB,网络负载均衡,更新监听器的默认证书 | 
+| 12.| **阿里云-部署证书至OSS** | 部署域名证书至阿里云OSS自定义域名，不是上传到阿里云oss | 
+| 13.| **阿里云-部署至CLB(传统负载均衡)** | 部署证书到阿里云CLB(传统负载均衡) | 
+| 14.| **阿里云-部署至VOD** | 部署证书到阿里云视频点播（vod） | 
+| 15.| **阿里云-部署至阿里云WAF** | 部署证书到阿里云WAF | 
+| 16.| **阿里云-上传证书到CAS** | 上传证书到阿里云证书管理服务（CAS），如果不想在阿里云上同一份证书上传多次，可以把此任务作为前置任务，其他阿里云任务证书那一项选择此任务的输出 | 
 ## 6. 华为云

 | 序号 | 名称 | 说明 |
 |-----|-----|-----|
 | 1.| **华为云-部署证书至CDN** |  | 
-| 2.| **华为云-部署证书至OBS** |  | 
-| 3.| **华为云-上传证书至CCM** | 上传证书到华为云云证书管理（CCM） | 
+| 2.| **华为云-部署证书至ELB负载均衡** |  | 
+| 3.| **华为云-部署证书至OBS** |  | 
+| 4.| **华为云-上传证书至CCM** | 上传证书到华为云云证书管理（CCM） | 
 ## 7. 腾讯云

 | 序号 | 名称 | 说明 |
--- a/docs/guide/qa/use.md
+++ b/docs/guide/qa/use.md
@@ -52,3 +52,11 @@ service:
 3. DNS 有其他平台申请过的_acme-challenge记录，删除即可


+## 7. DNS problem: NXDOMAIN looking up TXT for  _acme-challenge.xxx 
+`
+DNS problem: NXDOMAIN looking up TXT for  _acme-challenge.xxxxx - check that a DNS record exists for this domain
+`
+证书颁发机构向域名ns查询TXT验证记录失败，有以下几种可能
+1、域名的ns服务器修改成别的了，但申请证书时的DNS提供商选择错误（检查确认，配置正确的DNS提供商）
+2、证书颁发机构与ns域名服务器之间访问不通，无法查询到TXT记录（尝试更换证书颁发机构）
+3、ns服务商解析值生效慢（尝试修改证书申请任务里面的等待生效时长600-1000s）
--- a/lerna.json
+++ b/lerna.json
@@ -9,5 +9,5 @@
    }
  },
  "npmClient": "pnpm",
-  "version": "1.38.3"
+  "version": "1.38.8"
 }
--- a/packages/core/acme-client/CHANGELOG.md
+++ b/packages/core/acme-client/CHANGELOG.md
@@ -3,6 +3,33 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.8](https://github.com/publishlab/node-acme-client/compare/v1.38.7...v1.38.8) (2026-02-06)
+
+### Performance Improvements
+
+* 优化申请证书最大超时时长 ([00f67d8](https://github.com/publishlab/node-acme-client/commit/00f67d86d68f4f83cfafe2fbfeb4af0d86f9d20e))
+* 支持设置默认的证书申请地址的反向代理 ([0cfb94b](https://github.com/publishlab/node-acme-client/commit/0cfb94b0ba6a6dc3bb0d0a81a1912068a4e6b6b6))
+
+## [1.38.7](https://github.com/publishlab/node-acme-client/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+### Performance Improvements
+
+* 优化zerossl申请证书稳定性 ([4d86fb3](https://github.com/publishlab/node-acme-client/commit/4d86fb319b81dbf6fa6485982105725b1b066593))
+
+## [1.38.6](https://github.com/publishlab/node-acme-client/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+**Note:** Version bump only for package @certd/acme-client
+
+## [1.38.5](https://github.com/publishlab/node-acme-client/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+### Bug Fixes
+
+* 修复litessl new-nonce报428的bug ([540ef96](https://github.com/publishlab/node-acme-client/commit/540ef967457a7871637cfdb5012ed1fa3261757b))
+
+## [1.38.4](https://github.com/publishlab/node-acme-client/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+**Note:** Version bump only for package @certd/acme-client
+
 ## [1.38.3](https://github.com/publishlab/node-acme-client/compare/v1.38.2...v1.38.3) (2026-01-28)

 **Note:** Version bump only for package @certd/acme-client
--- a/packages/core/acme-client/package.json
+++ b/packages/core/acme-client/package.json
@@ -3,7 +3,7 @@
    "description": "Simple and unopinionated ACME client",
    "private": false,
    "author": "nmorsman",
-    "version": "1.38.3",
+    "version": "1.38.8",
    "type": "module",
    "module": "scr/index.js",
    "main": "src/index.js",
@@ -18,7 +18,7 @@
        "types"
    ],
    "dependencies": {
-        "@certd/basic": "^1.38.3",
+        "@certd/basic": "^1.38.8",
        "@peculiar/x509": "^1.11.0",
        "asn1js": "^3.0.5",
        "axios": "^1.9.0",
@@ -70,5 +70,5 @@
    "bugs": {
        "url": "https://github.com/publishlab/node-acme-client/issues"
    },
-    "gitHead": "f92dc6a1ad103de9cc184da3b84096943906cb59"
+    "gitHead": "29d37075dd600fa4898c5e38611e09db522e32fc"
 }
--- a/packages/core/acme-client/src/client.js
+++ b/packages/core/acme-client/src/client.js
@@ -103,7 +103,9 @@ class AcmeClient {
            max: this.opts.backoffMax,
        };

-        this.http = new HttpClient(this.opts.directoryUrl, this.opts.accountKey, this.opts.externalAccountBinding, this.opts.urlMapping, opts.logger);
+        const cacheNonce = true
+        // const cacheNonce = this.sslProvider === 'litessl';
+        this.http = new HttpClient(this.opts.directoryUrl, this.opts.accountKey, this.opts.externalAccountBinding, this.opts.urlMapping, opts.logger, cacheNonce);
        this.api = new AcmeApi(this.http, this.opts.accountUrl);
        this.logger = opts.logger;
    }
@@ -598,8 +600,11 @@ class AcmeClient {
            throw new Error(`[${d}] Unexpected item status: ${resp.data.status}`);
        };

-        this.log(`[${d}] Waiting for valid status （等待valid状态）: ${item.url}`, this.backoffOpts);
-        return util.retry(verifyFn, this.backoffOpts);
+        this.log(`[${d}] Waiting for valid status （等待valid状态）: ${item.url}`, JSON.stringify(this.backoffOpts));
+        const log = (...args)=>{
+            this.logger.info(...args)
+        }
+        return util.retry(verifyFn, this.backoffOpts,log);
    }

    /**
--- a/packages/core/acme-client/src/http.js
+++ b/packages/core/acme-client/src/http.js
@@ -19,7 +19,7 @@ import { getJwk } from './crypto/index.js';
 */

 class HttpClient {
-    constructor(directoryUrl, accountKey, externalAccountBinding = {}, urlMapping = {},logger) {
+    constructor(directoryUrl, accountKey, externalAccountBinding = {}, urlMapping = {}, logger, cacheNonce= false) {
        this.directoryUrl = directoryUrl;
        this.accountKey = accountKey;
        this.externalAccountBinding = externalAccountBinding;
@@ -31,7 +31,34 @@ class HttpClient {
        this.directoryMaxAge = 86400;
        this.directoryTimestamp = 0;
        this.urlMapping = urlMapping;
-        this.log = logger? logger.info.bind(logger) : log;
+        this.log = logger ? logger.info.bind(logger) : log;
+        this.nonces = [];
+        this.cacheNonce = cacheNonce;
+    }
+
+    pushNonce(nonce) {
+        if (!this.cacheNonce || !nonce) {
+            return;
+        }
+        this.nonces.push({
+            nonce,
+            expires: Date.now() + 30*1000,
+        });
+    }
+    popNonce() {
+        while (true) {
+            if (this.nonces.length === 0) {
+                return null;
+            }
+            const item = this.nonces.shift();
+            if (!item) {
+                return null;
+            }
+            if (item.expires < Date.now()) {
+                continue;
+            }
+            return item.nonce;
+        }
    }

    /**
@@ -70,6 +97,13 @@ class HttpClient {
        const resp = await axios.request(opts);

        this.log(`RESP ${resp.status} ${method} ${url}`);
+
+        const nonce = resp.headers['replay-nonce'];
+        if (nonce) {
+            //如果有nonce
+            this.pushNonce(nonce);
+        }
+
        return resp;
    }

@@ -127,6 +161,13 @@ class HttpClient {
     */

    async getNonce() {
+
+        //尝试从队列中pop一个nonce
+        const nonce = this.popNonce();
+        if (nonce) {
+            return nonce;
+        }
+
        const url = await this.getResourceUrl('newNonce');
        const resp = await this.request(url, 'head');

@@ -134,7 +175,11 @@ class HttpClient {
            throw new Error('Failed to get nonce from ACME provider');
        }

+        if (this.cacheNonce) {
+            return this.popNonce();
+        }
        return resp.headers['replay-nonce'];
+       
    }

    /**
--- a/packages/core/acme-client/src/index.js
+++ b/packages/core/acme-client/src/index.js
@@ -57,6 +57,32 @@ export function getDirectoryUrl(opts) {
  return list.production
 }

+
+export function getAllSslProviderDomains() {
+  const list = Object.values(directory).map((item) => {
+    let url =  item.production.replace('https://', '')
+    url = url.substring(0, url.indexOf('/'))
+    return url
+  })
+  return list
+}
+
+let sslProviderReverseProxies = {}
+
+function initSslProviderReverseProxies() {
+  for (const sslProvider of getAllSslProviderDomains()) {
+    sslProviderReverseProxies[sslProvider] = ""
+  }
+}
+initSslProviderReverseProxies()
+
+export function getSslProviderReverseProxies() {
+  return sslProviderReverseProxies
+}
+export function setSslProviderReverseProxies(reverseProxies) {
+  Object.assign(sslProviderReverseProxies, reverseProxies)
+}
+
 /**
 * Crypto
 */
--- a/packages/core/acme-client/src/util.js
+++ b/packages/core/acme-client/src/util.js
@@ -52,11 +52,17 @@ async function retryPromise(fn, attempts, backoff, logger = log) {
    let aborted = false;

    try {
-        const data = await fn(() => { aborted = true; });
+        const setAbort = () => { aborted = true; }
+        const data = await fn(setAbort);
        return data;
    }
    catch (e) {
-        if (aborted || ((backoff.attempts + 1) >= attempts)) {
+        if (aborted){
+            logger(`用户取消重试`);
+            throw e;
+        }
+        if ( ((backoff.attempts + 1) >= attempts)) {
+            logger(`重试次数超过${attempts}次`);
            throw e;
        }

--- a/packages/core/acme-client/types/index.d.ts
+++ b/packages/core/acme-client/types/index.d.ts
@@ -118,6 +118,9 @@ export const directory: {
 };

 export function getDirectoryUrl(opts:{sslProvider:string, pkType: string}): string;
+export function getAllSslProviderDomains(): string[];
+export function getSslProviderReverseProxies(): Record<string, string>;
+export function setSslProviderReverseProxies(reverseProxies: Record<string, string>): void;

 /**
 * Crypto
--- a/packages/core/basic/CHANGELOG.md
+++ b/packages/core/basic/CHANGELOG.md
@@ -3,6 +3,33 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.8](https://github.com/certd/certd/compare/v1.38.7...v1.38.8) (2026-02-06)
+
+**Note:** Version bump only for package @certd/basic
+
+## [1.38.7](https://github.com/certd/certd/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+**Note:** Version bump only for package @certd/basic
+
+## [1.38.6](https://github.com/certd/certd/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+**Note:** Version bump only for package @certd/basic
+
+## [1.38.5](https://github.com/certd/certd/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+**Note:** Version bump only for package @certd/basic
+
+## [1.38.4](https://github.com/certd/certd/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+### Bug Fixes
+
+* 修复1:: 形式的ipv6校验失败的bug ([8b96f21](https://github.com/certd/certd/commit/8b96f218d5284033f10c186c0ce18e4c16d8e9b2))
+
+### Performance Improvements
+
+* 支持部署到阿里云GA ([1a0d3ee](https://github.com/certd/certd/commit/1a0d3eeb1b0b5ce08f05af84b6161e00c1fe1815))
+* 支持部署到华为elb ([60c8ace](https://github.com/certd/certd/commit/60c8ace443e848155d3ce12e95b84766a4610d3a))
+
 ## [1.38.3](https://github.com/certd/certd/compare/v1.38.2...v1.38.3) (2026-01-28)

 ### Bug Fixes
--- a/packages/core/basic/build.md
+++ b/packages/core/basic/build.md
@@ -1 +1 @@
-00:57
+02:23
--- a/packages/core/basic/package.json
+++ b/packages/core/basic/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@certd/basic",
  "private": false,
-  "version": "1.38.3",
+  "version": "1.38.8",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -47,5 +47,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "f92dc6a1ad103de9cc184da3b84096943906cb59"
+  "gitHead": "29d37075dd600fa4898c5e38611e09db522e32fc"
 }
--- a/packages/core/basic/src/utils/util.domain.ts
+++ b/packages/core/basic/src/utils/util.domain.ts
@@ -58,8 +58,13 @@ function isIpv6(d: string) {
  if (!d) {
    return false;
  }
-  const isIPv6Regex = /^([0-9A-Fa-f]{0,4}:){2,7}([0-9A-Fa-f]{1,4}$|((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\.|$)){4})$/gm;
-  return isIPv6Regex.test(d);
+  try {
+    // 尝试构造URL，用IPv6作为hostname
+    new URL(`http://[${d}]`);
+    return true;
+  } catch {
+    return false;
+  }
 }

 function isIp(d: string) {
--- a/packages/core/basic/src/utils/util.log.ts
+++ b/packages/core/basic/src/utils/util.log.ts
@@ -18,7 +18,7 @@ export function resetLogConfigure() {
  });
 }
 resetLogConfigure();
-export const logger = log4js.getLogger("default");
+export const logger: ILogger = log4js.getLogger("default") as any;

 export function resetLogFilePath(filePath: string) {
  logFilePath = filePath;
@@ -77,6 +77,8 @@ export type ILogger = {
  fatal(message: any, ...args: any[]): void;

  mark(message: any, ...args: any[]): void;
+
+  addSecret(secret: string): void;
 };

 const locale = Intl.DateTimeFormat().resolvedOptions().locale;
@@ -106,10 +108,14 @@ export class PipelineLogger implements ILogger {

  constructor(name: string, write: (text: string) => void) {
    this.customWriter = write;
+    //@ts-ignore
    this.logger = log4js.getLogger(name);
  }

  addSecret(secret: string) {
+    if (!secret) {
+      return;
+    }
    this._secrets.push(secret);
  }

--- a/packages/core/basic/src/utils/util.request.ts
+++ b/packages/core/basic/src/utils/util.request.ts
@@ -177,39 +177,40 @@ export function createAxiosService({ logger }: { logger: ILogger }) {
    },
    (error: any) => {
      const status = error.response?.status;
+      let message = "";
      switch (status) {
        case 400:
-          error.message = "请求错误";
+          message = "请求错误";
          break;
        case 401:
-          error.message = "认证/登录失败";
+          message = "认证/登录失败";
          break;
        case 403:
-          error.message = "拒绝访问";
+          message = "拒绝访问";
          break;
        case 404:
-          error.message = `请求地址出错`;
+          message = `请求地址出错`;
          break;
        case 408:
-          error.message = "请求超时";
+          message = "请求超时";
          break;
        case 500:
-          error.message = "服务器内部错误";
+          message = "服务器内部错误";
          break;
        case 501:
-          error.message = "服务未实现";
+          message = "服务未实现";
          break;
        case 502:
-          error.message = "网关错误";
+          message = "网关错误";
          break;
        case 503:
-          error.message = "服务不可用";
+          message = "服务不可用";
          break;
        case 504:
-          error.message = "网关超时";
+          message = "网关超时";
          break;
        case 505:
-          error.message = "HTTP版本不受支持";
+          message = "HTTP版本不受支持";
          break;
        case 302:
          //重定向
@@ -217,9 +218,12 @@ export function createAxiosService({ logger }: { logger: ILogger }) {
        default:
          break;
      }
+      if (status) {
+        message += ` [${status}] `;
+      }

      const errorCode = error.code;
-      let errorMessage = null;
+      let errorMessage = "";
      if (errorCode === "ECONNABORTED") {
        errorMessage = "请求连接终止";
      } else if (errorCode === "ETIMEDOUT") {
@@ -231,14 +235,17 @@ export function createAxiosService({ logger }: { logger: ILogger }) {
      } else if (errorCode === "ENOTFOUND") {
        errorMessage = "请求地址不存在";
      }
-      if (errorMessage) {
-        if (error.message) {
-          errorMessage += `,${error.message}`;
-        }
-        error.message = errorMessage;
+      if (errorCode) {
+        errorMessage += ` [${errorCode}] `;
      }
-
-      logger.error(`请求出错：${errorMessage} status:${error.response?.status || error.code},statusText:${error.response?.statusText || error.code},url:${error.config?.url},method:${error.config?.method}。`);
+      if (message) {
+        errorMessage += `,${message}`;
+      }
+      if (error.message) {
+        errorMessage += `(${error.message})`;
+      }
+      error.message = errorMessage;
+      logger.error(`请求出错：${errorMessage} status:${status},statusText:${error.response?.statusText || error.code},url:${error.config?.url},method:${error.config?.method}。`);
      logger.error("返回数据:", JSON.stringify(error.response?.data));
      if (error.response?.data) {
        const message = error.response.data.message || error.response.data.msg || error.response.data.error;
--- a/packages/core/basic/src/utils/util.string.ts
+++ b/packages/core/basic/src/utils/util.string.ts
@@ -1,8 +1,17 @@
+import dayjs from "dayjs";
+
 export const stringUtils = {
  maxLength(str?: string, length = 100) {
    if (str) {
-      return str.length > length ? str.slice(0, length) + '...' : str;
+      return str.length > length ? str.slice(0, length) + "..." : str;
    }
-    return '';
+    return "";
+  },
+
+  appendTimeSuffix(str?: string) {
+    if (str) {
+      return `${str}-${dayjs().format("YYYYMMDDHHmmssSSS")}`;
+    }
+    return "";
  },
 };
--- a/packages/core/pipeline/CHANGELOG.md
+++ b/packages/core/pipeline/CHANGELOG.md
@@ -3,6 +3,29 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.8](https://github.com/certd/certd/compare/v1.38.7...v1.38.8) (2026-02-06)
+
+**Note:** Version bump only for package @certd/pipeline
+
+## [1.38.7](https://github.com/certd/certd/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+**Note:** Version bump only for package @certd/pipeline
+
+## [1.38.6](https://github.com/certd/certd/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+**Note:** Version bump only for package @certd/pipeline
+
+## [1.38.5](https://github.com/certd/certd/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+**Note:** Version bump only for package @certd/pipeline
+
+## [1.38.4](https://github.com/certd/certd/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+### Performance Improvements
+
+* 修复旧版本流水线数据发送通知标题为空的bug ([9bee0e4](https://github.com/certd/certd/commit/9bee0e460bfebe8db76742b80b2d52854392f4de))
+* 支持部署到阿里云GA ([1a0d3ee](https://github.com/certd/certd/commit/1a0d3eeb1b0b5ce08f05af84b6161e00c1fe1815))
+
 ## [1.38.3](https://github.com/certd/certd/compare/v1.38.2...v1.38.3) (2026-01-28)

 **Note:** Version bump only for package @certd/pipeline
--- a/packages/core/pipeline/package.json
+++ b/packages/core/pipeline/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@certd/pipeline",
  "private": false,
-  "version": "1.38.3",
+  "version": "1.38.8",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -18,8 +18,8 @@
    "compile": "tsc --skipLibCheck --watch"
  },
  "dependencies": {
-    "@certd/basic": "^1.38.3",
-    "@certd/plus-core": "^1.38.3",
+    "@certd/basic": "^1.38.8",
+    "@certd/plus-core": "^1.38.8",
    "dayjs": "^1.11.7",
    "lodash-es": "^4.17.21",
    "reflect-metadata": "^0.1.13"
@@ -45,5 +45,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "f92dc6a1ad103de9cc184da3b84096943906cb59"
+  "gitHead": "29d37075dd600fa4898c5e38611e09db522e32fc"
 }
--- a/packages/core/pipeline/src/core/executor.ts
+++ b/packages/core/pipeline/src/core/executor.ts
@@ -465,6 +465,8 @@ export class Executor {

    templateData.errors = errors;
    templateData.pipelineResult = pipelineResult;
+    templateData.title = subject;
+    templateData.content = content;

    for (const notification of this.pipeline.notifications) {
      if (!notification.when.includes(when)) {
--- a/packages/core/pipeline/src/plugin/api.ts
+++ b/packages/core/pipeline/src/plugin/api.ts
@@ -249,10 +249,7 @@ export abstract class AbstractTaskPlugin implements ITaskPlugin {
  abstract execute(): Promise<void | string>;

  appendTimeSuffix(name?: string) {
-    if (name == null) {
-      name = "certd";
-    }
-    return name + "_" + dayjs().format("YYYYMMDDHHmmssSSS");
+    return utils.string.appendTimeSuffix(name);
  }

  buildCertName(domain: string, prefix = "") {
@@ -297,6 +294,10 @@ export abstract class AbstractTaskPlugin implements ITaskPlugin {
  getStepIdFromRefInput(ref = ".") {
    return ref.split(".")[1];
  }
+
+  buildDomainGroupOptions(options: any[], domains: string[]) {
+    return utils.options.buildGroupOptions(options, domains);
+  }
 }

 export type OutputVO = {
--- a/packages/libs/lib-huawei/CHANGELOG.md
+++ b/packages/libs/lib-huawei/CHANGELOG.md
@@ -3,6 +3,26 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.8](https://github.com/certd/certd/compare/v1.38.7...v1.38.8) (2026-02-06)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
+## [1.38.7](https://github.com/certd/certd/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
+## [1.38.6](https://github.com/certd/certd/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
+## [1.38.5](https://github.com/certd/certd/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
+## [1.38.4](https://github.com/certd/certd/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
 ## [1.38.3](https://github.com/certd/certd/compare/v1.38.2...v1.38.3) (2026-01-28)

 **Note:** Version bump only for package @certd/lib-huawei
--- a/packages/libs/lib-huawei/package.json
+++ b/packages/libs/lib-huawei/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-huawei",
  "private": false,
-  "version": "1.38.3",
+  "version": "1.38.8",
  "main": "./dist/bundle.js",
  "module": "./dist/bundle.js",
  "types": "./dist/d/index.d.ts",
@@ -24,5 +24,5 @@
    "prettier": "^2.8.8",
    "tslib": "^2.8.1"
  },
-  "gitHead": "f92dc6a1ad103de9cc184da3b84096943906cb59"
+  "gitHead": "29d37075dd600fa4898c5e38611e09db522e32fc"
 }
--- a/packages/libs/lib-iframe/CHANGELOG.md
+++ b/packages/libs/lib-iframe/CHANGELOG.md
@@ -3,6 +3,26 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.8](https://github.com/certd/certd/compare/v1.38.7...v1.38.8) (2026-02-06)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
+## [1.38.7](https://github.com/certd/certd/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
+## [1.38.6](https://github.com/certd/certd/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
+## [1.38.5](https://github.com/certd/certd/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
+## [1.38.4](https://github.com/certd/certd/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
 ## [1.38.3](https://github.com/certd/certd/compare/v1.38.2...v1.38.3) (2026-01-28)

 **Note:** Version bump only for package @certd/lib-iframe
--- a/packages/libs/lib-iframe/package.json
+++ b/packages/libs/lib-iframe/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-iframe",
  "private": false,
-  "version": "1.38.3",
+  "version": "1.38.8",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -31,5 +31,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "f92dc6a1ad103de9cc184da3b84096943906cb59"
+  "gitHead": "29d37075dd600fa4898c5e38611e09db522e32fc"
 }
--- a/packages/libs/lib-jdcloud/CHANGELOG.md
+++ b/packages/libs/lib-jdcloud/CHANGELOG.md
@@ -3,6 +3,26 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.8](https://github.com/certd/certd/compare/v1.38.7...v1.38.8) (2026-02-06)
+
+**Note:** Version bump only for package @certd/jdcloud
+
+## [1.38.7](https://github.com/certd/certd/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+**Note:** Version bump only for package @certd/jdcloud
+
+## [1.38.6](https://github.com/certd/certd/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+**Note:** Version bump only for package @certd/jdcloud
+
+## [1.38.5](https://github.com/certd/certd/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+**Note:** Version bump only for package @certd/jdcloud
+
+## [1.38.4](https://github.com/certd/certd/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+**Note:** Version bump only for package @certd/jdcloud
+
 ## [1.38.3](https://github.com/certd/certd/compare/v1.38.2...v1.38.3) (2026-01-28)

 **Note:** Version bump only for package @certd/jdcloud
--- a/packages/libs/lib-jdcloud/package.json
+++ b/packages/libs/lib-jdcloud/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@certd/jdcloud",
-  "version": "1.38.3",
+  "version": "1.38.8",
  "description": "jdcloud openApi sdk",
  "main": "./dist/bundle.js",
  "module": "./dist/bundle.js",
@@ -56,5 +56,5 @@
      "fetch"
    ]
  },
-  "gitHead": "f92dc6a1ad103de9cc184da3b84096943906cb59"
+  "gitHead": "29d37075dd600fa4898c5e38611e09db522e32fc"
 }
--- a/packages/libs/lib-k8s/CHANGELOG.md
+++ b/packages/libs/lib-k8s/CHANGELOG.md
@@ -3,6 +3,26 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.8](https://github.com/certd/certd/compare/v1.38.7...v1.38.8) (2026-02-06)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
+## [1.38.7](https://github.com/certd/certd/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
+## [1.38.6](https://github.com/certd/certd/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
+## [1.38.5](https://github.com/certd/certd/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
+## [1.38.4](https://github.com/certd/certd/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
 ## [1.38.3](https://github.com/certd/certd/compare/v1.38.2...v1.38.3) (2026-01-28)

 **Note:** Version bump only for package @certd/lib-k8s
--- a/packages/libs/lib-k8s/package.json
+++ b/packages/libs/lib-k8s/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-k8s",
  "private": false,
-  "version": "1.38.3",
+  "version": "1.38.8",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -17,7 +17,7 @@
    "pub": "npm publish"
  },
  "dependencies": {
-    "@certd/basic": "^1.38.3",
+    "@certd/basic": "^1.38.8",
    "@kubernetes/client-node": "0.21.0"
  },
  "devDependencies": {
@@ -32,5 +32,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "f92dc6a1ad103de9cc184da3b84096943906cb59"
+  "gitHead": "29d37075dd600fa4898c5e38611e09db522e32fc"
 }
--- a/packages/libs/lib-server/CHANGELOG.md
+++ b/packages/libs/lib-server/CHANGELOG.md
@@ -3,6 +3,30 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.8](https://github.com/certd/certd/compare/v1.38.7...v1.38.8) (2026-02-06)
+
+### Performance Improvements
+
+* 支持设置默认的证书申请地址的反向代理 ([0cfb94b](https://github.com/certd/certd/commit/0cfb94b0ba6a6dc3bb0d0a81a1912068a4e6b6b6))
+
+## [1.38.7](https://github.com/certd/certd/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+**Note:** Version bump only for package @certd/lib-server
+
+## [1.38.6](https://github.com/certd/certd/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+**Note:** Version bump only for package @certd/lib-server
+
+## [1.38.5](https://github.com/certd/certd/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+### Performance Improvements
+
+* 支持绑定两个url地址 ([a2e9a41](https://github.com/certd/certd/commit/a2e9a41a7e712395c0e3ee6fe55b370aa1fc1f12))
+
+## [1.38.4](https://github.com/certd/certd/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+**Note:** Version bump only for package @certd/lib-server
+
 ## [1.38.3](https://github.com/certd/certd/compare/v1.38.2...v1.38.3) (2026-01-28)

 ### Performance Improvements
--- a/packages/libs/lib-server/package.json
+++ b/packages/libs/lib-server/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@certd/lib-server",
-  "version": "1.38.3",
+  "version": "1.38.8",
  "description": "midway with flyway, sql upgrade way ",
  "private": false,
  "type": "module",
@@ -28,11 +28,11 @@
  ],
  "license": "AGPL",
  "dependencies": {
-    "@certd/acme-client": "^1.38.3",
-    "@certd/basic": "^1.38.3",
-    "@certd/pipeline": "^1.38.3",
-    "@certd/plugin-lib": "^1.38.3",
-    "@certd/plus-core": "^1.38.3",
+    "@certd/acme-client": "^1.38.8",
+    "@certd/basic": "^1.38.8",
+    "@certd/pipeline": "^1.38.8",
+    "@certd/plugin-lib": "^1.38.8",
+    "@certd/plus-core": "^1.38.8",
    "@midwayjs/cache": "3.14.0",
    "@midwayjs/core": "3.20.11",
    "@midwayjs/i18n": "3.20.13",
@@ -64,5 +64,5 @@
    "typeorm": "^0.3.11",
    "typescript": "^5.4.2"
  },
-  "gitHead": "f92dc6a1ad103de9cc184da3b84096943906cb59"
+  "gitHead": "29d37075dd600fa4898c5e38611e09db522e32fc"
 }
--- a/packages/libs/lib-server/src/system/basic/service/plus-service.ts
+++ b/packages/libs/lib-server/src/system/basic/service/plus-service.ts
@@ -20,6 +20,7 @@ export class PlusService {

    const subjectId = installInfo.siteId;
    const bindUrl = installInfo.bindUrl;
+    const bindUrl2 = installInfo.bindUrl2;
    const installTime = installInfo.installTime;
    const saveLicense = async (license: string) => {
      let licenseInfo: SysLicenseInfo = await this.sysSettingsService.getSetting(SysLicenseInfo);
@@ -30,7 +31,7 @@ export class PlusService {
      await this.sysSettingsService.saveSetting(licenseInfo);
    };

-    return new PlusRequestService({ subjectId, bindUrl, installTime, saveLicense });
+    return new PlusRequestService({ subjectId, bindUrl, bindUrl2, installTime, saveLicense });
  }

  async getSubjectId() {
@@ -53,9 +54,9 @@ export class PlusService {
    await plusRequestService.verify({ license: licenseInfo.license });
  }

-  async bindUrl(url: string) {
+  async bindUrl(url: string, url2?:string) {
    const plusRequestService = await this.getPlusRequestService();
-    const res = await plusRequestService.bindUrl(url);
+    const res = await plusRequestService.bindUrl(url,url2);
    this.plusRequestService = null;
    return res;
  }
@@ -150,6 +151,12 @@ export class PlusService {
    }
  }

+  async getTodayOrderCount () {
+    await this.register();
+    const plusRequestService = await this.getPlusRequestService();
+    return await plusRequestService.getOrderCount()
+  }
+
  async requestWithToken(config: HttpRequestConfig) {
    const plusRequestService = await this.getPlusRequestService();
    const token = await this.getAccessToken();
--- a/packages/libs/lib-server/src/system/settings/service/models.ts
+++ b/packages/libs/lib-server/src/system/settings/service/models.ts
@@ -76,6 +76,9 @@ export class SysPrivateSettings extends BaseSettings {

  httpsProxy? = '';
  httpProxy? = '';
+
+  reverseProxies?: Record<string, string> = {};
+
  dnsResultOrder? = '';
  commonCnameEnabled?: boolean = true;

@@ -107,6 +110,7 @@ export class SysInstallInfo extends BaseSettings {
  siteId?: string;
  bindUserId?: number;
  bindUrl?: string;
+  bindUrl2?: string;
  accountServerBaseUrl?: string;
  appKey?: string;
 }
--- a/packages/libs/lib-server/src/system/settings/service/sys-settings-service.ts
+++ b/packages/libs/lib-server/src/system/settings/service/sys-settings-service.ts
@@ -4,10 +4,10 @@ import { Repository } from 'typeorm';
 import { SysSettingsEntity } from '../entity/sys-settings.js';
 import { BaseSettings, SysInstallInfo, SysPrivateSettings, SysPublicSettings, SysSecret, SysSecretBackup } from './models.js';

-import { BaseService } from '../../../basic/index.js';
-import { cache, logger, setGlobalProxy } from '@certd/basic';
+import { getAllSslProviderDomains, setSslProviderReverseProxies } from '@certd/acme-client';
+import { cache, logger, mergeUtils, setGlobalProxy } from '@certd/basic';
 import * as dns from 'node:dns';
-import {mergeUtils} from "@certd/basic";
+import { BaseService } from '../../../basic/index.js';
 import { executorQueue } from '../../basic/service/executor-queue.js';
 const {merge} = mergeUtils;
 /**
@@ -120,7 +120,14 @@ export class SysSettingsService extends BaseService<SysSettingsEntity> {
  }

  async getPrivateSettings(): Promise<SysPrivateSettings> {
-    return await this.getSetting(SysPrivateSettings);
+    const res = await this.getSetting<SysPrivateSettings>(SysPrivateSettings);
+    const sslProviderDomains = getAllSslProviderDomains();
+    for (const domain of sslProviderDomains) {
+      if (!res.reverseProxies[domain]) {
+        res.reverseProxies[domain] = "";
+      }
+    }
+    return res
  }

  async savePrivateSettings(bean: SysPrivateSettings) {
@@ -145,6 +152,8 @@ export class SysSettingsService extends BaseService<SysSettingsEntity> {
    if (bean.pipelineMaxRunningCount){
      executorQueue.setMaxRunningCount(bean.pipelineMaxRunningCount);
    }
+
+    setSslProviderReverseProxies(bean.reverseProxies);
  }

  async updateByKey(key: string, setting: any) {
--- a/packages/libs/midway-flyway-js/CHANGELOG.md
+++ b/packages/libs/midway-flyway-js/CHANGELOG.md
@@ -3,6 +3,26 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.8](https://github.com/certd/certd/compare/v1.38.7...v1.38.8) (2026-02-06)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
+## [1.38.7](https://github.com/certd/certd/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
+## [1.38.6](https://github.com/certd/certd/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
+## [1.38.5](https://github.com/certd/certd/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
+## [1.38.4](https://github.com/certd/certd/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
 ## [1.38.3](https://github.com/certd/certd/compare/v1.38.2...v1.38.3) (2026-01-28)

 **Note:** Version bump only for package @certd/midway-flyway-js
--- a/packages/libs/midway-flyway-js/package.json
+++ b/packages/libs/midway-flyway-js/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@certd/midway-flyway-js",
-  "version": "1.38.3",
+  "version": "1.38.8",
  "description": "midway with flyway, sql upgrade way ",
  "private": false,
  "type": "module",
@@ -46,5 +46,5 @@
    "typeorm": "^0.3.11",
    "typescript": "^5.4.2"
  },
-  "gitHead": "f92dc6a1ad103de9cc184da3b84096943906cb59"
+  "gitHead": "29d37075dd600fa4898c5e38611e09db522e32fc"
 }
--- a/packages/plugins/plugin-cert/CHANGELOG.md
+++ b/packages/plugins/plugin-cert/CHANGELOG.md
@@ -3,6 +3,28 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.8](https://github.com/certd/certd/compare/v1.38.7...v1.38.8) (2026-02-06)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
+## [1.38.7](https://github.com/certd/certd/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+### Performance Improvements
+
+*  eab从更多参数中挪到外面 ([5ea4f46](https://github.com/certd/certd/commit/5ea4f46de7ae403a7a16e9488dc1d9c7523d019a))
+
+## [1.38.6](https://github.com/certd/certd/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
+## [1.38.5](https://github.com/certd/certd/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
+## [1.38.4](https://github.com/certd/certd/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
 ## [1.38.3](https://github.com/certd/certd/compare/v1.38.2...v1.38.3) (2026-01-28)

 **Note:** Version bump only for package @certd/plugin-cert
--- a/packages/plugins/plugin-cert/package.json
+++ b/packages/plugins/plugin-cert/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@certd/plugin-cert",
  "private": false,
-  "version": "1.38.3",
+  "version": "1.38.8",
  "type": "module",
  "main": "./dist/index.js",
  "types": "./dist/index.d.ts",
@@ -17,10 +17,10 @@
    "compile": "tsc --skipLibCheck --watch"
  },
  "dependencies": {
-    "@certd/acme-client": "^1.38.3",
-    "@certd/basic": "^1.38.3",
-    "@certd/pipeline": "^1.38.3",
-    "@certd/plugin-lib": "^1.38.3",
+    "@certd/acme-client": "^1.38.8",
+    "@certd/basic": "^1.38.8",
+    "@certd/pipeline": "^1.38.8",
+    "@certd/plugin-lib": "^1.38.8",
    "psl": "^1.9.0",
    "punycode.js": "^2.3.1"
  },
@@ -38,5 +38,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "f92dc6a1ad103de9cc184da3b84096943906cb59"
+  "gitHead": "29d37075dd600fa4898c5e38611e09db522e32fc"
 }
--- a/packages/plugins/plugin-cert/src/index.ts
+++ b/packages/plugins/plugin-cert/src/index.ts
@@ -1 +1 @@
-export * from "@certd/plugin-lib";
+export * from "@certd/plugin-lib";
--- a/packages/plugins/plugin-lib/CHANGELOG.md
+++ b/packages/plugins/plugin-lib/CHANGELOG.md
@@ -3,6 +3,26 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.8](https://github.com/certd/certd/compare/v1.38.7...v1.38.8) (2026-02-06)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
+## [1.38.7](https://github.com/certd/certd/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
+## [1.38.6](https://github.com/certd/certd/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
+## [1.38.5](https://github.com/certd/certd/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
+## [1.38.4](https://github.com/certd/certd/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
 ## [1.38.3](https://github.com/certd/certd/compare/v1.38.2...v1.38.3) (2026-01-28)

 ### Performance Improvements
--- a/packages/plugins/plugin-lib/package.json
+++ b/packages/plugins/plugin-lib/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@certd/plugin-lib",
  "private": false,
-  "version": "1.38.3",
+  "version": "1.38.8",
  "type": "module",
  "main": "./dist/index.js",
  "types": "./dist/index.d.ts",
@@ -22,10 +22,10 @@
    "@alicloud/pop-core": "^1.7.10",
    "@alicloud/tea-util": "^1.4.11",
    "@aws-sdk/client-s3": "^3.964.0",
-    "@certd/acme-client": "^1.38.3",
-    "@certd/basic": "^1.38.3",
-    "@certd/pipeline": "^1.38.3",
-    "@certd/plus-core": "^1.38.3",
+    "@certd/acme-client": "^1.38.8",
+    "@certd/basic": "^1.38.8",
+    "@certd/pipeline": "^1.38.8",
+    "@certd/plus-core": "^1.38.8",
    "@kubernetes/client-node": "0.21.0",
    "ali-oss": "^6.22.0",
    "basic-ftp": "^5.0.5",
@@ -57,5 +57,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "f92dc6a1ad103de9cc184da3b84096943906cb59"
+  "gitHead": "29d37075dd600fa4898c5e38611e09db522e32fc"
 }
--- a/packages/plugins/plugin-lib/src/cert/dns-provider/api.ts
+++ b/packages/plugins/plugin-lib/src/cert/dns-provider/api.ts
@@ -62,6 +62,7 @@ export interface IDnsProvider<T = any> {

 export interface ISubDomainsGetter {
  getSubDomains(): Promise<string[]>;
+  hasSubDomain(domain: string): Promise<string>;
 }

 export interface IDomainParser {
--- a/packages/plugins/plugin-lib/src/cert/dns-provider/domain-parser.ts
+++ b/packages/plugins/plugin-lib/src/cert/dns-provider/domain-parser.ts
@@ -38,20 +38,28 @@ export class DomainParser implements IDomainParser {
      return value;
    }

-    const subDomains = await this.subDomainsGetter.getSubDomains();
-    if (subDomains && subDomains.length > 0) {
-      const fullDomainDot = "." + fullDomain;
-      for (const subDomain of subDomains) {
-        if (fullDomainDot.endsWith("." + subDomain)) {
-          //找到子域名托管
-          utils.cache.set(cacheKey, subDomain, {
-            ttl: 60 * 1000,
-          });
-          this.logger.info(`获取到子域名托管域名:${fullDomain}->${subDomain}`);
-          return subDomain;
-        }
-      }
+    //检查是否有子域名托管
+    const subDomain = await this.subDomainsGetter.hasSubDomain(fullDomain);
+    if (subDomain) {
+      utils.cache.set(cacheKey, subDomain, {
+        ttl: 60 * 1000,
+      });
+      this.logger.info(`获取到托管域名:${fullDomain}->${subDomain}`);
+      return subDomain;
    }
+    // if (subDomains && subDomains.length > 0) {
+    //   const fullDomainDot = "." + fullDomain;
+    //   for (const subDomain of subDomains) {
+    //     if (fullDomainDot.endsWith("." + subDomain)) {
+    //       //找到子域名托管
+    //       utils.cache.set(cacheKey, subDomain, {
+    //         ttl: 60 * 1000,
+    //       });
+    //       this.logger.info(`获取到子域名托管域名:${fullDomain}->${subDomain}`);
+    //       return subDomain;
+    //     }
+    //   }
+    // }

    const res = this.parseDomainByPsl(fullDomain);
    this.logger.info(`从psl获取主域名:${fullDomain}->${res}`);
--- a/packages/ui/certd-client/CHANGELOG.md
+++ b/packages/ui/certd-client/CHANGELOG.md
@@ -3,6 +3,54 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.8](https://github.com/certd/certd/compare/v1.38.7...v1.38.8) (2026-02-06)
+
+### Performance Improvements
+
+* 双重验证显示secret ([febd6d3](https://github.com/certd/certd/commit/febd6d32cfe6d89ccecf26bf15141df7c456e5c6))
+* 支持设置默认的证书申请地址的反向代理 ([0cfb94b](https://github.com/certd/certd/commit/0cfb94b0ba6a6dc3bb0d0a81a1912068a4e6b6b6))
+* 子域名托管域名支持配置通配符 ([3f7ac93](https://github.com/certd/certd/commit/3f7ac939326b0c7ec013a7534b6c0e58fb3e8cb4))
+
+## [1.38.7](https://github.com/certd/certd/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+### Bug Fixes
+
+* 修复有域名记录时，域名输入框无法关闭的bug ([54c8217](https://github.com/certd/certd/commit/54c8217808453b121abf646b004596f28932509f))
+
+### Performance Improvements
+
+*  eab从更多参数中挪到外面 ([5ea4f46](https://github.com/certd/certd/commit/5ea4f46de7ae403a7a16e9488dc1d9c7523d019a))
+
+## [1.38.6](https://github.com/certd/certd/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+### Performance Improvements
+
+* 当域名管理中没有域名时，创建流水线时不展开域名选择框 ([9166a57](https://github.com/certd/certd/commit/9166a579301a60750f0b72b6a42b0c8d730695fd))
+* count tip ([e19743f](https://github.com/certd/certd/commit/e19743f70553700f1f91bff76f87370f749dd247))
+* oauth支持github 和google， 修复头像显示问题 ([693a4a6](https://github.com/certd/certd/commit/693a4a663385ced3176286bf4b5f3566da83d90e))
+
+## [1.38.5](https://github.com/certd/certd/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+### Bug Fixes
+
+* 某些情况下登陆页面没有显示重置密码文档链接的问题 ([40801d0](https://github.com/certd/certd/commit/40801d0a0668c77adb57fae42b4b6615b198a88d))
+
+### Performance Improvements
+
+* 支持绑定两个url地址 ([a2e9a41](https://github.com/certd/certd/commit/a2e9a41a7e712395c0e3ee6fe55b370aa1fc1f12))
+
+## [1.38.4](https://github.com/certd/certd/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+### Bug Fixes
+
+* 修复1:: 形式的ipv6校验失败的bug ([8b96f21](https://github.com/certd/certd/commit/8b96f218d5284033f10c186c0ce18e4c16d8e9b2))
+
+### Performance Improvements
+
+* 首页证书数量支持点击跳转 ([52cbff0](https://github.com/certd/certd/commit/52cbff0e15329aecd3edcf81315fb7ceab9ec290))
+* 验证码支持 Cloudflare Turnstile ，谨慎启用，国内被墙了 ([ca43c77](https://github.com/certd/certd/commit/ca43c775250154def63c4acd96d65dc95d1c0c2b))
+* 优化证书未过期时的任务日志提示 ([ac85488](https://github.com/certd/certd/commit/ac85488245197694560aad7df9425ca215ef7ff7))
+
 ## [1.38.3](https://github.com/certd/certd/compare/v1.38.2...v1.38.3) (2026-01-28)

 ### Performance Improvements
--- a/packages/ui/certd-client/package.json
+++ b/packages/ui/certd-client/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@certd/ui-client",
-  "version": "1.38.3",
+  "version": "1.38.8",
  "private": true,
  "scripts": {
    "dev": "vite --open",
@@ -106,8 +106,8 @@
    "zod-defaults": "^0.1.3"
  },
  "devDependencies": {
-    "@certd/lib-iframe": "^1.38.3",
-    "@certd/pipeline": "^1.38.3",
+    "@certd/lib-iframe": "^1.38.8",
+    "@certd/pipeline": "^1.38.8",
    "@rollup/plugin-commonjs": "^25.0.7",
    "@rollup/plugin-node-resolve": "^15.2.3",
    "@types/chai": "^4.3.12",
--- a/packages/ui/certd-client/src/App.vue
+++ b/packages/ui/certd-client/src/App.vue
@@ -8,19 +8,23 @@
 </template>

 <script lang="ts" setup>
-import { computed, provide, ref } from "vue";
+import { computed, provide, Ref, ref } from "vue";
 import { preferences, usePreferences } from "/@/vben/preferences";
 import { useAntdDesignTokens } from "/@/vben/hooks";
 import { Modal, theme } from "ant-design-vue";
 import AConfigProvider from "ant-design-vue/es/config-provider";
 import { antdvLocale } from "./locales/antdv";
 import { setI18nLanguage } from "/@/locales";
+import { mitter } from "./utils/util.mitt";
 defineOptions({
  name: "App",
 });

 const [modal, contextHolder] = Modal.useModal();
 provide("modal", modal);
+mitter.on("getModal", (event: any) => {
+  event.ModalRef = modal;
+});

 const locale = preferences.app.locale;
 setI18nLanguage(locale);
--- a/packages/ui/certd-client/src/components/captcha/captchas/cfTurnstile_captcha.vue
+++ b/packages/ui/certd-client/src/components/captcha/captchas/cfTurnstile_captcha.vue
@@ -0,0 +1,97 @@
+<template>
+  <div class="cf-turnstile">
+    <div id="turnstile-container" class="cf-turnstile-container" :data-sitekey="siteKeyRef"></div>
+  </div>
+</template>
+<script setup lang="ts">
+import { nextTick, onMounted, onUnmounted, ref, watch } from "vue";
+
+import { loadScript } from "vue-plugin-load-script";
+const loaded = ref(false);
+async function loadCaptchaScript() {
+  await loadScript("https://challenges.cloudflare.com/turnstile/v0/api.js");
+  loaded.value = true;
+}
+
+defineOptions({
+  name: "CfTurnstileCaptcha",
+});
+const emit = defineEmits(["update:modelValue", "change"]);
+const props = defineProps<{
+  modelValue: any;
+  captchaGet: () => Promise<any>;
+}>();
+const captchaRef = ref(null);
+const siteKeyRef = ref("");
+const widgetIdRef = ref(null);
+
+onMounted(async () => {
+  await loadCaptchaScript();
+  await nextTick();
+  const { siteKey } = await props.captchaGet();
+  siteKeyRef.value = siteKey; //这里确定是string类型
+  //@ts-ignore
+  const widgetId = turnstile.render("#turnstile-container", {
+    sitekey: siteKey,
+    size: "flexible",
+    callback: function (token: string) {
+      console.log("turnstile success:", token);
+      emitChange({
+        token: token,
+      });
+    },
+  });
+  widgetIdRef.value = widgetId;
+});
+
+onUnmounted(() => {
+  //@ts-ignore
+  if (turnstile && widgetIdRef.value) {
+    //@ts-ignore
+    turnstile.remove(widgetIdRef.value);
+  }
+});
+
+function checkExpired() {
+  //@ts-ignore
+  if (turnstile && widgetIdRef.value) {
+    //@ts-ignore
+    return turnstile.isExpired(widgetIdRef.value);
+  }
+}
+
+function emitChange(value: any) {
+  emit("update:modelValue", value);
+  emit("change", value);
+}
+function reset() {
+  // 重置验证码
+  //@ts-ignore
+  if (turnstile && widgetIdRef.value) {
+    //@ts-ignore
+    turnstile.reset(widgetIdRef.value);
+  }
+}
+
+watch(
+  () => {
+    return props.modelValue;
+  },
+  value => {
+    if (value == null) {
+      reset();
+    }
+  }
+);
+
+defineExpose({
+  reset,
+});
+</script>
+<style lang="less">
+.cf-turnstile-container {
+  iframe {
+    width: 100% !important;
+  }
+}
+</style>
--- a/packages/ui/certd-client/src/components/captcha/captchas/image_captcha.vue
+++ b/packages/ui/certd-client/src/components/captcha/captchas/image_captcha.vue
@@ -11,8 +11,7 @@
  </div>
 </template>
 <script setup lang="ts">
-import { defineEmits, defineExpose, defineProps, ref, watch } from "vue";
-import { nanoid } from "nanoid";
+import { ref, watch } from "vue";

 const props = defineProps<{
  modelValue: any;
--- a/packages/ui/certd-client/src/components/captcha/captchas/tencent_captcha.vue
+++ b/packages/ui/certd-client/src/components/captcha/captchas/tencent_captcha.vue
@@ -11,8 +11,8 @@
  </div>
 </template>
 <script setup lang="ts">
-import { onMounted, defineProps, defineEmits, ref, onUnmounted, Ref, watch } from "vue";
 import { notification } from "ant-design-vue";
+import { ref, Ref, watch } from "vue";

 import { loadScript } from "vue-plugin-load-script";
 const loaded = ref(false);
--- a/packages/ui/certd-client/src/components/plugins/common/domain-selector.vue
+++ b/packages/ui/certd-client/src/components/plugins/common/domain-selector.vue
@@ -3,6 +3,7 @@
    <div class="flex flex-row">
      <a-select
        class="domain-select-input"
+        :popup-class-name="popupClassName"
        :dropdown-style="dropdownStyle"
        show-search
        :filter-option="filterOption"
@@ -55,11 +56,12 @@
  </div>
 </template>
 <script setup lang="ts">
-import { computed, defineComponent, ref, Ref, useAttrs } from "vue";
-import { request } from "/@/api/service";
-import { Dicts } from "../lib/dicts";
+import { computed, defineComponent, onMounted, ref, Ref, useAttrs } from "vue";
 import { useRouter } from "vue-router";
-import { useDomainImport, useDomainImportManage } from "/@/views/certd/cert/domain/use";
+import { Dicts } from "../lib/dicts";
+import { request } from "/@/api/service";
+import { openRouteInNewWindow } from "/@/vben/utils";
+import { useDomainImportManage } from "/@/views/certd/cert/domain/use";

 defineOptions({
  name: "DomainSelector",
@@ -89,6 +91,15 @@ const emit = defineEmits<{

 const attrs = useAttrs();

+const hasOptions: Ref = ref(null);
+
+const popupClassName = computed(() => {
+  if (!hasOptions.value) {
+    return "hidden-important";
+  }
+  return "";
+});
+
 const searchKeyRef = ref("");
 const optionsRef = ref([]);
 const message = ref("");
@@ -142,6 +153,14 @@ const getOptions = async () => {
    }

    optionsRef.value = options;
+    if (hasOptions.value == null) {
+      //初始设置一次
+      if (options.length > 0) {
+        hasOptions.value = true;
+      } else {
+        hasOptions.value = false;
+      }
+    }
    pagerRef.value.total = list.length;
    if (props.pager) {
      if (res.total != null) {
@@ -190,7 +209,7 @@ const router = useRouter();
 function openDomainManager(e: any) {
  e.preventDefault();
  // router.push("/certd/cert/domain");
-  window.open(`${window.location.origin}/#/certd/cert/domain`);
+  openRouteInNewWindow("/certd/cert/domain");
 }

 const openDomainImportManageDialog = useDomainImportManage();
@@ -204,6 +223,10 @@ function openDomainImportDialog() {
 const dropdownStyle = ref({
  zIndex: 2000,
 });
+
+onMounted(() => {
+  refreshOptions();
+});
 </script>

 <style lang="less"></style>
--- a/packages/ui/certd-client/src/components/plugins/common/params-show.vue
+++ b/packages/ui/certd-client/src/components/plugins/common/params-show.vue
@@ -1,8 +1,8 @@
 <template>
  <div class="params-show">
-    <a-tag type="primary" color="green" v-for="item of params" :key="item.value" class="item">
+    <a-tag v-for="item of params" :key="item.value" type="primary" color="green" class="item">
      <span class="label">{{ item.label }}=</span>
-      <fs-copyable :modelValue="`\$\{${item.value}\}`" :button="{show:false}" :inline="true"></fs-copyable>
+      <fs-copyable :model-value="`\$\{${item.value}\}`" :button="{ show: false }" :inline="true"></fs-copyable>
    </a-tag>
  </div>
 </template>
--- a/packages/ui/certd-client/src/components/vip-button/api.ts
+++ b/packages/ui/certd-client/src/components/vip-button/api.ts
@@ -15,3 +15,10 @@ export async function getVipTrial(vipType: string) {
    data: { vipType },
  });
 }
+
+export async function getTodayVipOrderCount() {
+  return await request({
+    url: "/sys/plus/getTodayVipOrderCount",
+    method: "post",
+  });
+}
--- a/packages/ui/certd-client/src/components/vip-button/index.vue
+++ b/packages/ui/certd-client/src/components/vip-button/index.vue
@@ -14,16 +14,20 @@
 <script lang="tsx" setup>
 import { message, Modal } from "ant-design-vue";
 import dayjs from "dayjs";
-import { computed, onMounted, reactive, ref } from "vue";
+import { computed, onMounted, ref } from "vue";
 import { useI18n } from "vue-i18n";
 import { useRouter } from "vue-router";
 import * as api from "./api";
-import { useSettingStore } from "/@/store/settings";
+import { useSettingStore } from "/src/store/settings/index";
 import { useUserStore } from "/@/store/user";
 import { env } from "/@/utils/util.env";
 import { mitter } from "/@/utils/util.mitt";
+import VipModalContent from "./vip-modal-content.vue";
 const { t } = useI18n();

+defineOptions({
+  name: "VipButton",
+});
 const settingStore = useSettingStore();
 const props = withDefaults(
  defineProps<{
@@ -39,6 +43,7 @@ type Text = {
 };
 const text = computed<Text>(() => {
  const vipLabel = settingStore.vipLabel;
+  const plusMessage = settingStore.plusInfo?.message;
  const map = {
    isComm: {
      comm: {
@@ -91,7 +96,7 @@ const text = computed<Text>(() => {
      },
      nav: {
        name: t("vip.free.nav.name"),
-        title: t("vip.free.nav.title"),
+        title: plusMessage || t("vip.free.nav.title"),
      },
    },
  };
@@ -113,58 +118,16 @@ const expireTime = computed(() => {

 const expiredDays = computed(() => {
  if (settingStore.plusInfo?.isPlus && !settingStore.isPlus) {
-    //已过期多少天
    const days = dayjs().diff(dayjs(settingStore.plusInfo.expireTime), "day");
    return `${settingStore.vipLabel}已过期${days}天`;
  }
  return "";
 });

-const formState = reactive({
-  code: "",
-  inviteCode: "",
-});
-
 const router = useRouter();
-async function doActive() {
-  if (!formState.code) {
-    message.error(t("vip.enterCode"));
-    throw new Error(t("vip.enterCode"));
-  }
-  const res = await api.doActive(formState);
-  if (res) {
-    await settingStore.init();
-    const vipLabel = settingStore.vipLabel;
-    Modal.success({
-      title: t("vip.successTitle"),
-      content: t("vip.successContent", {
-        vipLabel,
-        expireDate: dayjs(settingStore.plusInfo.expireTime).format("YYYY-MM-DD"),
-      }),
-      onOk() {
-        if (!(settingStore.installInfo.bindUserId > 0)) {
-          Modal.confirm({
-            title: t("vip.bindAccountTitle"),
-            content: t("vip.bindAccountContent"),
-            onOk() {
-              router.push("/sys/account");
-            },
-          });
-        }
-      },
-    });
-  }
-}
-
-const computedSiteId = computed(() => settingStore.installInfo?.siteId);
 const [modal, contextHolder] = Modal.useModal();
 const userStore = useUserStore();

-function goAccount() {
-  Modal.destroyAll();
-  router.push("/sys/account");
-}
-
 async function getVipTrial(vipType = "plus") {
  const res = await api.getVipTrial(vipType);
  message.success(t("vip.congratulations_vip_trial", { duration: res.duration }));
@@ -198,27 +161,30 @@ function openStarModal(vipType: string) {
    return;
  }
  Modal.destroyAll();
-  const goGithub = () => {
-    window.open("https://github.com/certd/certd/");
-  };

-  modal.confirm({
-    title: t("vip.get_7_day_pro_trial"),
-    okText: t("vip.star_now"),
-    onOk() {
-      goGithub();
-      openTrialModal(vipType);
-    },
-    width: 600,
-    content: () => {
-      return (
-        <div class="flex mt-10 mb-10">
-          <div>{t("vip.please_help_star")}</div>
-          <img class="ml-5" src="https://img.shields.io/github/stars/certd/certd?logo=github" />
-        </div>
-      );
-    },
-  });
+  openTrialModal(vipType);
+
+  // const goGithub = () => {
+  //   window.open("https://github.com/certd/certd/");
+  // };
+
+  // modal.confirm({
+  //   title: t("vip.get_7_day_pro_trial"),
+  //   okText: t("vip.star_now"),
+  //   onOk() {
+  //     goGithub();
+  //     openTrialModal(vipType);
+  //   },
+  //   width: 600,
+  //   content: () => {
+  //     return (
+  //       <div class="flex mt-10 mb-10">
+  //         <div>{t("vip.please_help_star")}</div>
+  //         <img class="ml-5" src="https://img.shields.io/github/stars/certd/certd?logo=github" />
+  //       </div>
+  //     );
+  //   },
+  // });
 }

 function openUpgrade() {
@@ -253,6 +219,7 @@ function openUpgrade() {
      throw new Error(t("vip.already_perpetual_plus"));
    }
  }
+
  function goBuyPlusPage() {
    checkPerpetualPlus();
    if (settingStore.isComm) {
@@ -264,6 +231,7 @@ function openUpgrade() {
    }
    window.open(goBuyUrl);
  }
+
  function goBuyCommPage() {
    checkPerpetualPlus();
    if (settingStore.isPlus && !settingStore.isComm) {
@@ -278,75 +246,6 @@ function openUpgrade() {
    }
    window.open(goBuyCommUrl);
  }
-  const vipTypeDefine = {
-    free: {
-      title: t("vip.basic_edition"),
-      desc: t("vip.community_free_version"),
-      type: "free",
-      icon: "lucide:package-open",
-      privilege: [t("vip.unlimited_certificate_application"), t("vip.unlimited_domain_count"), t("vip.unlimited_certificate_pipelines"), t("vip.common_deployment_plugins"), t("vip.email_webhook_notifications")],
-    },
-    plus: {
-      title: t("vip.professional_edition"),
-      desc: t("vip.open_source_support"),
-      type: "plus",
-      privilege: [t("vip.vip_group_priority"), t("vip.unlimited_site_certificate_monitoring"), t("vip.more_notification_methods"), t("vip.plugins_fully_open")],
-      trial: {
-        title: t("vip.click_to_get_7_day_trial"),
-        click: () => {
-          openStarModal("plus");
-        },
-      },
-      icon: "stash:thumb-up",
-      priceText: productInfo.plus.priceText || `¥${productInfo.plus.price}/${t("vip.years")}`,
-      discountText: productInfo.plus.discountText || `¥${productInfo.plus.price3}/3${t("vip.years")}`,
-      tooltip: productInfo.plus.tooltip,
-      get() {
-        return (
-          <a-tooltip title={t("vip.afdian_support_vip")}>
-            <a-button size="small" type="primary" onClick={goBuyPlusPage}>
-              {t("vip.get_after_support")}
-            </a-button>
-          </a-tooltip>
-        );
-      },
-    },
-    comm: {
-      title: t("vip.business_edition"),
-      desc: t("vip.commercial_license"),
-      type: "comm",
-      icon: "vaadin:handshake",
-      privilege: [t("vip.all_pro_privileges"), t("vip.allow_commercial_use_modify_logo_title"), t("vip.data_statistics"), t("vip.plugin_management"), t("vip.unlimited_multi_users"), t("vip.support_user_payment")],
-      priceText: productInfo.comm.priceText || `¥${productInfo.comm.price}/${t("vip.years")}`,
-      discountText: productInfo.comm.discountText || `¥${productInfo.comm.price3}/3${t("vip.years")}`,
-      tooltip: productInfo.comm.tooltip,
-      trial: {
-        title: t("vip.click_to_get_7_day_trial"),
-        click: () => {
-          openStarModal("comm");
-        },
-      },
-      get() {
-        return (
-          <a-button size="small" type="primary" onClick={goBuyCommPage}>
-            {t("vip.buy")}
-          </a-button>
-        );
-      },
-    },
-  };
-
-  const manualActiveFlag = ref();
-  function showManualActivation() {
-    manualActiveFlag.value = true;
-  }
-
-  function goBindAccount() {
-    modalRef?.destroy();
-    router.push({
-      path: "/sys/account",
-    });
-  }
  const modalRef = modal.success({
    title,
    class: "vip-modal",
@@ -354,119 +253,7 @@ function openUpgrade() {
    okText: t("vip.close"),
    width: 1100,
    content: () => {
-      let manualActiveBlock: any = "";
-      if (manualActiveFlag.value) {
-        manualActiveBlock = (
-          <div>
-            <div class="mt-10">
-              <a-input-search class="w-2/6" v-model:value={formState.code} placeholder={placeholder} enter-button={t("vip.activate")} onSearch={doActive}></a-input-search>
-            </div>
-            <div class="mt-10">
-              {t("vip.activation_code_one_use")}
-              <a onClick={goAccount}>{t("vip.bind_account")}</a>，{t("vip.transfer_vip")}
-            </div>
-          </div>
-        );
-      }
-      const vipLabel = settingStore.vipLabel;
-      let plusInfo: any = "";
-      if (isPlus) {
-        plusInfo = (
-          <div class="mt-10 flex flex-col md:flex-row ">
-            <span class="mr-2">
-              {t("vip.current")} {vipLabel} {t("vip.activated_expire_time")} {settingStore.expiresText}
-            </span>
-            <a href="https://app.handfree.work/subject/#/page/detail/1" target="_blank">
-              {t("vip.learn_more")}
-            </a>
-          </div>
-        );
-      }
-
-      const slots = [];
-      for (const key in vipTypeDefine) {
-        // @ts-ignore
-        const item = vipTypeDefine[key];
-        const vipBlockClass = `vip-block  ${key === settingStore.plusInfo.vipType ? "current" : ""}`;
-        slots.push(
-          <div class="w-full md:w-1/3 mb-4 p-5">
-            <div class={vipBlockClass}>
-              <h3 class="block-header ">
-                <span class="flex-o">{item.title}</span>
-                {item.trial && (
-                  <span class="trial">
-                    <a-tooltip title={item.trial.message}>
-                      <a onClick={item.trial.click}>{item.trial.title}</a>
-                    </a-tooltip>
-                  </span>
-                )}
-              </h3>
-              <div style="color:green" class="flex-o">
-                <fs-icon icon={item.icon} class="fs-16 flex-o" />
-                {item.desc}
-              </div>
-              <ul class="flex-1 privilege">
-                {item.privilege.map((p: string) => (
-                  <li class="flex-baseline">
-                    <fs-icon class="color-green" icon="ion:checkmark-sharp" />
-                    {p}
-                  </li>
-                ))}
-              </ul>
-              <div class="footer flex-between flex-vc">
-                <div class="price-show">
-                  {item.priceText && (
-                    <span class="flex">
-                      <span class="-text">{item.priceText}</span>
-                      <a-tooltip class="ml-5" title={item.discountText}>
-                        <fs-icon class="pointer color-red" icon="ic:outline-discount"></fs-icon>
-                      </a-tooltip>
-                    </span>
-                  )}
-                  {!item.priceText && (
-                    <span>
-                      <span class="price-text">{t("vip.freee")}</span>
-                    </span>
-                  )}
-                </div>
-                <div class="get-show">{item.get && <div>{item.get()}</div>}</div>
-              </div>
-            </div>
-          </div>
-        );
-      }
-      return (
-        <div class="mt-10 mb-10 vip-active-modal">
-          {productInfo.notice && (
-            <div class="mb-10">
-              <a-alert type="error" message={productInfo.notice}></a-alert>
-            </div>
-          )}
-          <div class="vip-type-vs">
-            <a-row gutter={20}>{slots}</a-row>
-          </div>
-          <div>
-            <a href="https://certd.docmirror.cn/guide/donate/#相关问题" target="_blank">
-              {t("vip.question")}
-            </a>
-          </div>
-          <div class="mt-10">
-            <div class=" w-100 flex-col md:flex-row ">
-              <span>{t("vip.site_id")}：</span>
-              <fs-copyable v-model={computedSiteId.value} class="mr-2"></fs-copyable>
-              <a onClick={goBindAccount}>{t("vip.not_effective")}</a>
-            </div>
-          </div>
-          {plusInfo}
-          <div class="mt-10 ">
-            <span class="mr-2">{t("vip.have_activation_code")}</span>
-            <span>
-              <a onClick={showManualActivation}>{t("vip.manual_activation")}</a>
-            </span>
-          </div>
-          <div class="mt-10">{manualActiveBlock}</div>
-        </div>
-      );
+      return <VipModalContent placeholder={placeholder} isPlus={isPlus} productInfo={productInfo} goBuyPlusPage={goBuyPlusPage} goBuyCommPage={goBuyCommPage} openStarModal={openStarModal} modalRef={modalRef} />;
    },
  });
 }
@@ -502,69 +289,4 @@ onMounted(() => {
  .text {
  }
 }
-
-.vip-active-modal {
-  .vip-block {
-    display: flex;
-    flex-direction: column;
-    padding: 10px;
-    border: 1px solid #eee;
-    border-radius: 5px;
-    height: 275px;
-    line-height: 24px;
-
-    .privilege {
-      margin-top: 5px;
-    }
-
-    //background-color: rgba(250, 237, 167, 0.79);
-    &.current {
-      border-color: green;
-    }
-
-    .block-header {
-      padding: 0px;
-      display: flex;
-      justify-content: space-between;
-
-      .trial {
-        font-size: 12px;
-        font-wight: 400;
-      }
-    }
-
-    .footer {
-      padding-top: 5px;
-      margin-top: 0px;
-      border-top: 1px solid #eee;
-
-      .price-text {
-        font-size: 18px;
-        color: red;
-      }
-    }
-  }
-
-  ul {
-    list-style-type: unset;
-    margin-left: 0px;
-    padding: 0;
-  }
-
-  .color-green {
-    color: green;
-  }
-
-  .vip-type-vs {
-    .privilege {
-      .fs-icon {
-        color: green;
-      }
-    }
-
-    .fs-icon {
-      margin-right: 5px;
-    }
-  }
-}
 </style>
--- a/packages/ui/certd-client/src/components/vip-button/vip-modal-content.vue
+++ b/packages/ui/certd-client/src/components/vip-button/vip-modal-content.vue
@@ -0,0 +1,434 @@
+<template>
+  <div class="mt-10 vip-active-modal">
+    <div v-if="todayOrderCount.enabled" class="order-count hidden md:flex">
+      <div v-for="(stage, index) in todayOrderCount.stages" :key="index" class="status-item" :class="{ 'status-show': TodayVipOrderCountRef.current === index }">
+        <div class="background">
+          <img :src="stage.bg" alt="" />
+        </div>
+        <div class="flex flex-col order-count-text weight-bold">
+          <div class="count-text ml-4 flex items-center">
+            <fs-icon icon="noto:fire" class="fs-20 mr-2"></fs-icon>
+            <template v-if="stage.vipTotal > 0">
+              <span> 已有 </span>
+              <span class="count-number color-red font-bold text-2xl ml-1 mr-1"> {{ stage.vipTotal }} </span> 位小伙伴赞助，
+              <span>
+                {{ stage.title }}
+              </span>
+            </template>
+            <template v-else>
+              <span> 今日赞助 </span>
+              <span class="count-number color-red font-bold text-2xl ml-1 mr-1"> {{ stage.orderCount }} </span> 人，
+              <span>
+                {{ stage.title }}
+              </span>
+            </template>
+          </div>
+        </div>
+      </div>
+    </div>
+    <div v-if="productInfo.notice" class="mt-10">
+      <a-alert type="error" :message="productInfo.notice"></a-alert>
+    </div>
+    <div class="vip-type-vs mt-10">
+      <a-row :gutter="20">
+        <div v-for="(item, key) in vipTypeDefine" :key="key" class="w-full md:w-1/3 mb-4 p-5">
+          <div :class="`vip-block  ${key === settingStore.plusInfo.vipType ? 'current' : ''}`">
+            <h3 class="block-header">
+              <span class="flex-o">{{ item.title }}</span>
+              <span v-if="item.trial" class="trial">
+                <a-tooltip :title="item.trial.message">
+                  <a @click="item.trial.click">{{ item.trial.title }}</a>
+                </a-tooltip>
+              </span>
+            </h3>
+            <div style="color: green" class="flex-o">
+              <fs-icon :icon="item.icon" class="fs-16 flex-o" />
+              {{ item.desc }}
+            </div>
+            <ul class="flex-1 privilege">
+              <li v-for="p in item.privilege" :key="p" class="flex-baseline">
+                <fs-icon class="color-green" icon="ion:checkmark-sharp" />
+                {{ p }}
+              </li>
+            </ul>
+            <div class="footer flex-between flex-vc">
+              <div class="price-show">
+                <span v-if="item.priceText" class="flex">
+                  <span class="-text">{{ item.priceText }}</span>
+                  <a-tooltip class="ml-5" :title="item.discountText">
+                    <fs-icon class="pointer color-red" icon="ic:outline-discount"></fs-icon>
+                  </a-tooltip>
+                </span>
+                <span v-else>
+                  <span class="price-text">{{ t("vip.freee") }}</span>
+                </span>
+              </div>
+              <div class="get-show">
+                <template v-if="item.type === 'plus'">
+                  <a-tooltip :title="t('vip.afdian_support_vip')">
+                    <a-button size="small" type="primary" @click="goBuyPlusPage">
+                      {{ t("vip.get_after_support") }}
+                    </a-button>
+                  </a-tooltip>
+                </template>
+                <template v-else-if="item.type === 'comm'">
+                  <a-button size="small" type="primary" @click="goBuyCommPage">
+                    {{ t("vip.buy") }}
+                  </a-button>
+                </template>
+              </div>
+            </div>
+          </div>
+        </div>
+      </a-row>
+    </div>
+    <div>
+      <a href="https://certd.docmirror.cn/guide/donate/#相关问题" target="_blank">
+        {{ t("vip.question") }}
+      </a>
+    </div>
+    <div class="mt-10">
+      <div class="w-100 flex-col md:flex-row">
+        <span>{{ t("vip.site_id") }}：</span>
+        <fs-copyable v-model="computedSiteId" class="mr-2"></fs-copyable>
+        <a @click="goBindAccount">{{ t("vip.not_effective") }}</a>
+      </div>
+    </div>
+    <div v-if="isPlus" class="mt-10 flex flex-col md:flex-row">
+      <span class="mr-2"> {{ t("vip.current") }} {{ vipLabel }} {{ t("vip.activated_expire_time") }} {{ settingStore.expiresText }} </span>
+      <a href="https://app.handfree.work/subject/#/page/detail/1" target="_blank">
+        {{ t("vip.learn_more") }}
+      </a>
+    </div>
+    <div class="mt-10">
+      <span class="mr-2">{{ t("vip.have_activation_code") }}</span>
+      <span>
+        <a @click="showManualActivation">{{ t("vip.manual_activation") }}</a>
+      </span>
+    </div>
+    <div v-if="manualActiveFlag" class="mt-10">
+      <div class="mt-10">
+        <a-input-search v-model:value="formState.code" class="w-2/6" :placeholder="placeholder" :enter-button="t('vip.activate')" @search="doActive"></a-input-search>
+      </div>
+      <div class="mt-10">
+        {{ t("vip.activation_code_one_use") }}
+        <a @click="goAccount">{{ t("vip.bind_account") }}</a
+        >，{{ t("vip.transfer_vip") }}
+      </div>
+    </div>
+  </div>
+</template>
+
+<script lang="ts" setup>
+import { message, Modal } from "ant-design-vue";
+import dayjs from "dayjs";
+import { computed, nextTick, onMounted, onUnmounted, reactive, Ref, ref } from "vue";
+import { useI18n } from "vue-i18n";
+import { useRouter } from "vue-router";
+import * as api from "./api";
+import { useSettingStore } from "/@/store/settings";
+
+const { t } = useI18n();
+const router = useRouter();
+const settingStore = useSettingStore();
+
+const props = defineProps<{
+  placeholder: string;
+  isPlus: boolean;
+  productInfo: any;
+  goBuyPlusPage: () => void;
+  goBuyCommPage: () => void;
+  openStarModal: (vipType: string) => void;
+  modalRef: any;
+}>();
+
+const formState = reactive({
+  code: "",
+  inviteCode: "",
+});
+
+async function doActive() {
+  if (!formState.code) {
+    message.error(t("vip.enterCode"));
+    throw new Error(t("vip.enterCode"));
+  }
+  const res = await api.doActive(formState);
+  if (res) {
+    await settingStore.init();
+    const vipLabel = settingStore.vipLabel;
+    Modal.success({
+      title: t("vip.successTitle"),
+      content: t("vip.successContent", {
+        vipLabel,
+        expireDate: dayjs(settingStore.plusInfo.expireTime).format("YYYY-MM-DD"),
+      }),
+      onOk() {
+        if (!(settingStore.installInfo.bindUserId > 0)) {
+          Modal.confirm({
+            title: t("vip.bindAccountTitle"),
+            content: t("vip.bindAccountContent"),
+            onOk() {
+              router.push("/sys/account");
+            },
+          });
+        }
+      },
+    });
+  }
+}
+
+const vipLabel = computed(() => settingStore.vipLabel);
+const computedSiteId = computed(() => settingStore.installInfo?.siteId);
+
+const manualActiveFlag = ref(false);
+
+function showManualActivation() {
+  manualActiveFlag.value = true;
+}
+
+function goAccount() {
+  props.modalRef?.destroy();
+  router.push("/sys/account");
+}
+
+function goBindAccount() {
+  props.modalRef?.destroy();
+  router.push({
+    path: "/sys/account",
+  });
+}
+
+const vipTypeDefine: any = {
+  free: {
+    title: t("vip.basic_edition"),
+    desc: t("vip.community_free_version"),
+    type: "free",
+    icon: "lucide:package-open",
+    privilege: [t("vip.unlimited_certificate_application"), t("vip.unlimited_domain_count"), t("vip.unlimited_certificate_pipelines"), t("vip.common_deployment_plugins"), t("vip.email_webhook_notifications")],
+  },
+  plus: {
+    title: t("vip.professional_edition"),
+    desc: t("vip.open_source_support"),
+    type: "plus",
+    privilege: [t("vip.vip_group_priority"), t("vip.unlimited_site_certificate_monitoring"), t("vip.more_notification_methods"), t("vip.plugins_fully_open")],
+    trial: {
+      title: t("vip.click_to_get_7_day_trial"),
+      click: () => {
+        props.openStarModal("plus");
+      },
+    },
+    icon: "stash:thumb-up",
+    priceText: props.productInfo.plus.priceText || `¥${props.productInfo.plus.price}/${t("vip.years")}`,
+    discountText: props.productInfo.plus.discountText || `¥${props.productInfo.plus.price3}/3${t("vip.years")}`,
+    tooltip: props.productInfo.plus.tooltip,
+  },
+  comm: {
+    title: t("vip.business_edition"),
+    desc: t("vip.commercial_license"),
+    type: "comm",
+    icon: "vaadin:handshake",
+    privilege: [t("vip.all_pro_privileges"), t("vip.allow_commercial_use_modify_logo_title"), t("vip.data_statistics"), t("vip.plugin_management"), t("vip.unlimited_multi_users"), t("vip.support_user_payment")],
+    priceText: props.productInfo.comm.priceText || `¥${props.productInfo.comm.price}/${t("vip.years")}`,
+    discountText: props.productInfo.comm.discountText || `¥${props.productInfo.comm.price3}/3${t("vip.years")}`,
+    tooltip: props.productInfo.comm.tooltip,
+    trial: {
+      title: t("vip.click_to_get_7_day_trial"),
+      click: () => {
+        props.openStarModal("comm");
+      },
+    },
+  },
+};
+
+const TodayVipOrderCountRef: Ref = ref({ enabled: false, current: 0, stages: [] });
+
+async function getTodayVipOrderCount() {
+  const res = await api.getTodayVipOrderCount();
+  if (res) {
+    TodayVipOrderCountRef.value = res;
+    TodayVipOrderCountRef.value.current = 0;
+  }
+}
+
+const todayOrderCount = computed(() => {
+  const countInfo = TodayVipOrderCountRef.value;
+  const enabled = countInfo?.enabled || false;
+  const orderCount = countInfo?.orderCount || 0;
+  for (const stage of countInfo?.stages) {
+    stage.orderCount = stage.countGe || 0;
+  }
+  const lastStage = countInfo?.stages?.[countInfo?.stages?.length - 1] || {};
+  lastStage.orderCount = orderCount;
+
+  const stages: any = [];
+  stages.push({
+    title: countInfo.title,
+    vipTotal: countInfo?.vipTotal || 0,
+    orderCount: orderCount,
+    bg: lastStage.bg,
+  });
+  if (lastStage.orderCount > 0) {
+    stages.push(lastStage);
+  }
+  return {
+    enabled: enabled,
+    stages: stages,
+  };
+});
+
+async function scrollOrderCount() {
+  const stages = todayOrderCount.value.stages;
+  if (stages.length === 0) {
+    return;
+  }
+  let index = 0;
+  const doScroll = () => {
+    TodayVipOrderCountRef.value.current = index;
+    index++;
+    if (index >= stages.length) {
+      index = 0;
+    }
+  };
+  doScroll();
+  scrollOrderCountIntervalRef.value = setInterval(doScroll, 7000);
+}
+
+const scrollOrderCountIntervalRef: Ref = ref(null);
+onMounted(async () => {
+  await getTodayVipOrderCount();
+  await nextTick();
+  await scrollOrderCount();
+});
+
+onUnmounted(() => {
+  clearInterval(scrollOrderCountIntervalRef.value);
+});
+</script>
+
+<style lang="less">
+.vip-active-modal {
+  .order-count {
+    height: 80px;
+    position: relative;
+    border: 1px solid #fee2c5;
+    border-radius: 5px;
+
+    .background {
+      border: 0px;
+      border-radius: 5px;
+      height: 100%;
+      width: 100%;
+      position: absolute;
+      top: 0;
+      left: 0;
+      z-index: 0;
+      display: flex;
+      justify-content: flex-end;
+      overflow: hidden;
+
+      img {
+        height: 100%;
+        object-fit: cover;
+      }
+    }
+
+    .order-count-text {
+      position: absolute;
+      width: 100%;
+      top: 0;
+      left: 0;
+      right: 0;
+      bottom: 0;
+      z-index: 2;
+      padding: 10px;
+      display: flex;
+      flex-direction: column;
+      justify-content: space-evenly;
+      /* 左至右渐变*/
+      background: linear-gradient(to right, rgba(255, 217, 167, 0.5), rgba(255, 255, 255, 0));
+
+      .count-text {
+        font-size: 16px;
+        font-weight: 600;
+        color: #ff6600;
+        display: flex;
+
+        .count-number {
+          margin-bottom: 5px;
+        }
+      }
+    }
+
+    .status-item {
+      opacity: 0;
+      transition: all 0.7s ease-in-out;
+    }
+
+    .status-show {
+      opacity: 1;
+    }
+  }
+
+  .vip-block {
+    display: flex;
+    flex-direction: column;
+    padding: 10px;
+    border: 1px solid #eee;
+    border-radius: 5px;
+    height: 275px;
+    line-height: 24px;
+
+    .privilege {
+      margin-top: 5px;
+    }
+
+    &.current {
+      border-color: green;
+    }
+
+    .block-header {
+      padding: 0px;
+      display: flex;
+      justify-content: space-between;
+
+      .trial {
+        font-size: 12px;
+        font-wight: 400;
+      }
+    }
+
+    .footer {
+      padding-top: 5px;
+      margin-top: 0px;
+      border-top: 1px solid #eee;
+
+      .price-text {
+        font-size: 18px;
+        color: red;
+      }
+    }
+  }
+
+  ul {
+    list-style-type: unset;
+    margin-left: 0px;
+    padding: 0;
+  }
+
+  .color-green {
+    color: green;
+  }
+
+  .vip-type-vs {
+    .privilege {
+      .fs-icon {
+        color: green;
+      }
+    }
+
+    .fs-icon {
+      margin-right: 5px;
+    }
+  }
+}
+</style>
--- a/packages/ui/certd-client/src/layout/layout-basic.vue
+++ b/packages/ui/certd-client/src/layout/layout-basic.vue
@@ -35,7 +35,13 @@ const menus = computed(() => [

 const avatar = computed(() => {
  const avt = userStore.getUserInfo?.avatar;
-  return avt ? `/api/basic/file/download?key=${avt}` : "";
+  if (!avt) {
+    return "";
+  }
+  if (avt.startsWith("http")) {
+    return avt;
+  }
+  return `/api/basic/file/download?key=${avt}`;
 });

 async function handleLogout() {
--- a/packages/ui/certd-client/src/locales/langs/en-US/certd.ts
+++ b/packages/ui/certd-client/src/locales/langs/en-US/certd.ts
@@ -511,6 +511,7 @@ export default {
  selectRecordFirst: "Please select records first",
  subdomainHosted: "Hosted Subdomain",
  subdomainHelpText: "If you don't understand what subdomain hosting is,Do not set it randomly, as it may result in the inability to apply for the certificate. please refer to the documentation ",
+  subdomainHelpSupportStart: "Supports * wildcard, indicating that all subdomains of the domain are hosted (free subdomains)",
  subdomainManagement: "Subdomain Management",
  isDisabled: "Is Disabled",
  enabled: "Enabled",
@@ -784,6 +785,7 @@ export default {
      captchaSetting: "Captcha Setting",
      pipelineSetting: "Pipeline Settings",
      oauthSetting: "OAuth2 Settings",
+      networkSetting: "Network Settings",

      showRunStrategy: "Show RunStrategy",
      showRunStrategyHelper: "Allow modify the run strategy of the task",
@@ -835,6 +837,11 @@ export default {
      notice: "System Notice",
      noticeHelper: "System notice, will be displayed on the login page",
      noticePlaceholder: "System notice",
+
+      reverseProxy: "Reverse Proxy List",
+      reverseProxyHelper: "Reverse proxy for ACME address, used when applying for certificate",
+      reverseProxyPlaceholder: "http://le.px.handfree.work",
+      reverseProxyEmpty: "No reverse proxy list configured",
    },
  },
  modal: {
--- a/packages/ui/certd-client/src/locales/langs/zh-CN/certd.ts
+++ b/packages/ui/certd-client/src/locales/langs/zh-CN/certd.ts
@@ -120,7 +120,7 @@ export default {
  },
  customPipeline: "自定义流水线",
  createCertdPipeline: "创建证书流水线",
-  commercialCertHosting: "商用证书托管",
+  commercialCertHosting: "已有证书托管",
  tooltip: {
    manualUploadOwnCert: "手动上传自有证书，执行自动部署",
    noAutoApplyCommercialCert: "并不能自动申请商业证书",
@@ -521,6 +521,7 @@ export default {
  selectRecordFirst: "请先勾选记录",
  subdomainHosted: "托管的子域名",
  subdomainHelpText: "如果您不理解什么是子域托管，请不要随意设置（可能导致证书无法申请，以前设置过的cname记录也需要重新配置），可以参考文档",
+  subdomainHelpSupportStart: "支持*号通配符,表示该域名下的子域名都是托管的（免费子域名）",
  subdomainManagement: "子域管理",
  isDisabled: "是否禁用",
  enabled: "启用",
@@ -791,6 +792,7 @@ export default {
      captchaSetting: "验证码设置",
      pipelineSetting: "流水线设置",
      oauthSetting: "第三方登录",
+      networkSetting: "网络设置",

      showRunStrategy: "显示运行策略选择",
      showRunStrategyHelper: "任务设置中是否允许选择运行策略",
@@ -850,6 +852,11 @@ export default {
      notice: "系统公告",
      noticeHelper: "系统公告，将在首页显示",
      noticePlaceholder: "系统公告",
+
+      reverseProxy: "反向代理列表",
+      reverseProxyHelper: "证书颁发机构ACME地址的反向代理，在申请证书时自动使用",
+      reverseProxyPlaceholder: "http://le.px.handfree.work",
+      reverseProxyEmpty: "未配置反向代理",
    },
  },
  modal: {
--- a/packages/ui/certd-client/src/plugin/validator/index.ts
+++ b/packages/ui/certd-client/src/plugin/validator/index.ts
@@ -4,8 +4,16 @@ function isIpv6(d: string) {
  if (!d) {
    return false;
  }
-  const isIPv6Regex = /^([0-9A-Fa-f]{0,4}:){2,7}([0-9A-Fa-f]{1,4}$|((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\.|$)){4})$/gm;
-  return isIPv6Regex.test(d);
+  // const isIPv6Regex = /^([0-9A-Fa-f]{0,4}:){2,7}([0-9A-Fa-f]{1,4}$|((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\.|$)){4})$/gm;
+  // return isIPv6Regex.test(d);
+
+  try {
+    // 尝试构造URL，用IPv6作为hostname
+    new URL(`http://[${d}]`);
+    return true;
+  } catch {
+    return false;
+  }
 }
 function isIpv4(d: string) {
  if (!d) {
--- a/packages/ui/certd-client/src/store/settings/api.basic.ts
+++ b/packages/ui/certd-client/src/store/settings/api.basic.ts
@@ -27,6 +27,7 @@ export type PlusInfo = {
  expireTime?: number;
  isPlus: boolean;
  isComm?: boolean;
+  message?: string;
 };
 export type SysPublicSetting = {
  registerEnabled?: boolean;
@@ -92,6 +93,7 @@ export type SuiteSetting = {
 export type SysPrivateSetting = {
  httpProxy?: string;
  httpsProxy?: string;
+  reverseProxies?: any;
  dnsResultOrder?: string;
  commonCnameEnabled?: boolean;
  // 同一个用户同时最大运行流水线数量
@@ -107,6 +109,8 @@ export type SysPrivateSetting = {
 };
 export type SysInstallInfo = {
  siteId: string;
+  bindUrl?: string;
+  bindUrl2?: string;
 };
 export type MenuItem = {
  id: string;
--- a/packages/ui/certd-client/src/store/settings/index.tsx
+++ b/packages/ui/certd-client/src/store/settings/index.tsx
@@ -1,5 +1,5 @@
 import { defineStore } from "pinia";
-import { Modal, notification } from "ant-design-vue";
+import { notification } from "ant-design-vue";
 import * as basicApi from "./api.basic";
 import { AppInfo, HeaderMenus, PlusInfo, SiteEnv, SiteInfo, SuiteSetting, SysInstallInfo, SysPublicSetting } from "./api.basic";
 import { useUserStore } from "../user";
@@ -20,6 +20,7 @@ export interface SettingState {
    installTime?: number;
    bindUserId?: number;
    bindUrl?: string;
+    bindUrl2?: string;
    accountServerBaseUrl?: string;
    appKey?: string;
  };
@@ -153,9 +154,11 @@ export const useSettingStore = defineStore({
      if (this.plusInfo?.expireTime === -1) {
        return "永久";
      }
+      //@ts-ignore
      return dayjs(this.plusInfo?.expireTime).format("YYYY-MM-DD");
    },
    isForever() {
+      //@ts-ignore
      return this.isPlus && this.plusInfo?.expireTime === -1;
    },
    vipLabel(): string {
@@ -251,9 +254,17 @@ export const useSettingStore = defineStore({
      url = url.split("#")[0];
      return url;
    },
-    async doBindUrl() {
-      const url = this.getBaseUrl();
-      await basicApi.bindUrl({ url });
+    async doBindUrl(key: string = "url") {
+      const url = this.installInfo.bindUrl;
+      const url2 = this.installInfo.bindUrl2;
+
+      const thisUrl = this.getBaseUrl();
+      const form = {
+        url,
+        url2,
+        [key]: thisUrl,
+      };
+      await basicApi.bindUrl(form);
      await this.loadSysSettings();
    },
    async checkUrlBound() {
@@ -262,24 +273,64 @@ export const useSettingStore = defineStore({
      if (!userStore.isAdmin) {
        return;
      }
-
+      const event: any = { ModalRef: null };
+      mitter.emit("getModal", event);
+      const Modal = event.ModalRef;
+      let modalRef: any = null;
      const bindUrl = this.installInfo.bindUrl;
+      const bindUrl2 = this.installInfo.bindUrl2;
+
+      const doBindRequest = async (key: string) => {
+        await this.doBindUrl(key);
+        if (modalRef) {
+          modalRef.destroy();
+        }
+      };

      if (!bindUrl) {
        //绑定url
-        await this.doBindUrl();
+        await this.doBindUrl("url");
      } else {
        //检查当前url 是否与绑定的url一致
        const url = window.location.href;
-        if (!url.startsWith(bindUrl)) {
-          Modal.confirm({
-            title: "URL地址有变化",
-            content: "以后都用这个新地址访问本系统吗？",
-            onOk: async () => {
-              await this.doBindUrl();
+        if (!url.startsWith(bindUrl) && !url.startsWith(bindUrl2)) {
+          modalRef = Modal.warning({
+            title: "URL地址未绑定，是否绑定此地址？",
+            width: 500,
+            keyboard: false,
+            content: () => {
+              return (
+                <div class="p-4">
+                  <div class="flex items-center justify-between">
+                    <span>
+                      绑定地址1：
+                      <a-tag color="green">{bindUrl || "未占用"}</a-tag>
+                    </span>
+                    <a-button type="primary" onClick={() => doBindRequest("url")}>
+                      绑定到地址1
+                    </a-button>
+                  </div>
+                  <div class="flex items-center justify-between mt-3">
+                    <span>
+                      绑定地址2：
+                      <a-tag color="green">{bindUrl2 || "未占用"}</a-tag>
+                    </span>
+                    <a-button type="primary" onClick={() => doBindRequest("url2")}>
+                      绑定到地址2
+                    </a-button>
+                  </div>
+                </div>
+              );
            },
-            okText: "是的，继续",
-            cancelText: "不是，回到原来的地址",
+            onOk: async () => {
+              // await this.doBindUrl();
+              window.location.href = bindUrl;
+            },
+            okButtonProps: {
+              danger: true,
+            },
+            okText: "不，回到原来的地址",
+            cancelText: "不，回到原来的地址",
            onCancel: () => {
              window.location.href = bindUrl;
            },
--- a/packages/ui/certd-client/src/style/common.less
+++ b/packages/ui/certd-client/src/style/common.less
@@ -320,10 +320,25 @@ h6 {
  font-size: 16px !important;
 }

+.fs-18 {
+  font-size: 18px !important;
+}
+
+.fs-20 {
+  font-size: 20px !important;
+}
+.fs-24 {
+  font-size: 24px !important;
+}
+.fs-26 {
+  font-size: 26px !important;
+}
 .fs-28 {
  font-size: 28px !important;
 }
-
+.fs-32 {
+  font-size: 32px !important;
+}
 .w-50\% {
  width: 50%;
 }
@@ -357,6 +372,13 @@ h6 {
  border-spacing: 0;
  overflow: auto;

+  &.cd-table-none-border {
+    border: 0 !important;
+    td, th {
+      border: 0 !important;
+    }
+  }
+
  .fs-loading {
    position: absolute;
    left: 0;
@@ -455,4 +477,16 @@ h6 {
    background: #ffecb3;
    color: #f57c00;
  }
+}
+
+.ant-tag{
+  .fs-icon{
+    margin-right: 5px;
+  }
+}
+
+
+.hidden-important {
+  display: none !important;
+  visibility: hidden !important;
 }
--- a/packages/ui/certd-client/src/vben/layouts/basic/menu/use-navigation.ts
+++ b/packages/ui/certd-client/src/vben/layouts/basic/menu/use-navigation.ts
@@ -1,11 +1,12 @@
 import type { RouteRecordNormalized } from "vue-router";

-import { useRouter } from "vue-router";
+import { useRoute, useRouter } from "vue-router";

 import { isHttpUrl, openRouteInNewWindow, openWindow } from "../../../utils";

 function useNavigation() {
  const router = useRouter();
+  const route1 = useRoute();
  const routes = router.getRoutes();

  const routeMetaMap = new Map<string, RouteRecordNormalized>();
@@ -15,6 +16,9 @@ function useNavigation() {
  });

  const navigation = async (path: string) => {
+    if (route1.path === path) {
+      return;
+    }
    const route = routeMetaMap.get(path);
    const { openInNewWindow = false, query = {} as any } = route?.meta ?? {};
    if (isHttpUrl(path)) {
--- a/packages/ui/certd-client/src/vben/shared/utils/window.ts
+++ b/packages/ui/certd-client/src/vben/shared/utils/window.ts
@@ -27,8 +27,12 @@ function openWindow(url: string, options: OpenWindowOptions = {}): void {
 */
 function openRouteInNewWindow(path: string) {
  const { hash, origin } = location;
+  let pathname = location.pathname;
+  if (pathname.endsWith("/")) {
+    pathname = pathname.slice(0, -1);
+  }
  const fullPath = path.startsWith("/") ? path : `/${path}`;
-  const url = `${origin}${hash ? "/#" : ""}${fullPath}`;
+  const url = `${origin}${pathname}${hash ? "/#" : ""}${fullPath}`;
  openWindow(url, { target: "_blank" });
 }

--- a/packages/ui/certd-client/src/views/certd/mine/security/api.ts
+++ b/packages/ui/certd-client/src/views/certd/mine/security/api.ts
@@ -28,7 +28,7 @@ export async function TwoFactorAuthenticatorGet() {
    url: apiPrefix + "/twoFactor/authenticator/qrcode",
    method: "post",
  });
-  return res as string; //base64
+  return res as { qrcode: string; link: string; secret: string }; //base64
 }

 export async function TwoFactorAuthenticatorSave(req: AuthenticatorSaveReq) {
--- a/packages/ui/certd-client/src/views/certd/mine/security/index.vue
+++ b/packages/ui/certd-client/src/views/certd/mine/security/index.vue
@@ -57,6 +57,17 @@
            <div class="ml-20">
              <img class="full-w" :src="authenticatorForm.qrcodeSrc" />
            </div>
+            <div class="ml-20 mt-5">
+              <div>您也可以手动添加：</div>
+              <div class="flex mt-5">
+                <a-tag type="primary" color="green" class="mr-2">Secret：</a-tag>
+                <fs-copyable :model-value="authenticatorForm.secret" />
+              </div>
+              <div class="flex mt-5">
+                <a-tag type="primary" color="green" class="mr-2">Link：</a-tag>
+                <fs-copyable :model-value="authenticatorForm.link" />
+              </div>
+            </div>
          </div>
          <h3 class="font-bold m-10">{{ t("certd.step3") }}</h3>
          <div class="ml-20">
@@ -97,6 +108,8 @@ const formState = reactive<Partial<UserTwoFactorSetting>>({
 const authenticatorForm = reactive({
  qrcodeSrc: "",
  verifyCode: "",
+  link: "",
+  secret: "",
  open: false,
 });

@@ -110,9 +123,14 @@ watch(
  async open => {
    if (open) {
      //base64 转图片
-      authenticatorForm.qrcodeSrc = await api.TwoFactorAuthenticatorGet();
+      const { qrcode, link, secret } = await api.TwoFactorAuthenticatorGet();
+      authenticatorForm.qrcodeSrc = qrcode;
+      authenticatorForm.link = link;
+      authenticatorForm.secret = secret;
    } else {
      authenticatorForm.qrcodeSrc = "";
+      authenticatorForm.link = "";
+      authenticatorForm.secret = "";
      authenticatorForm.verifyCode = "";
    }
  }
--- a/packages/ui/certd-client/src/views/certd/mine/user-profile.vue
+++ b/packages/ui/certd-client/src/views/certd/mine/user-profile.vue
@@ -8,7 +8,7 @@
        <a-descriptions-item :label="t('authentication.username')">{{ userInfo.username }}</a-descriptions-item>
        <a-descriptions-item :label="t('authentication.nickName')">{{ userInfo.nickName }}</a-descriptions-item>
        <a-descriptions-item :label="t('authentication.avatar')">
-          <a-avatar v-if="userInfo.avatar" size="large" :src="'api/basic/file/download?&key=' + userInfo.avatar" style="background-color: #eee"> </a-avatar>
+          <a-avatar v-if="userInfo.avatar" size="large" :src="userAvatar" style="background-color: #eee"> </a-avatar>
          <a-avatar v-else size="large" style="background-color: #00b4f5">
            {{ userInfo.username }}
          </a-avatar>
@@ -108,6 +108,17 @@ async function bind(type: string) {
  window.location.href = loginUrl;
 }

+const userAvatar = computed(() => {
+  if (isEmpty(userInfo.value.avatar)) {
+    return "";
+  }
+  if (userInfo.value.avatar.startsWith("http")) {
+    return userInfo.value.avatar;
+  }
+
+  return "api/basic/file/download?&key=" + userInfo.value.avatar;
+});
+
 onMounted(async () => {
  await getUserInfo();
  await loadOauthBounds();
--- a/packages/ui/certd-client/src/views/certd/monitor/cert/crud.tsx
+++ b/packages/ui/certd-client/src/views/certd/monitor/cert/crud.tsx
@@ -33,7 +33,6 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat
    const res = await api.AddObj(form);
    return res;
  };
-  const { openCrudFormDialog } = useFormWrapper();
  const router = useRouter();

  const settingStore = useSettingStore();
--- a/packages/ui/certd-client/src/views/certd/pipeline/index.vue
+++ b/packages/ui/certd-client/src/views/certd/pipeline/index.vue
@@ -3,7 +3,7 @@
    <template #header>
      <div class="title">
        {{ t("certd.myPipelines") }}
-        <div class="sub">{{ t("certd.pipelinePage.myPipelinesDesc") }}</div>
+        <span class="sub">{{ t("certd.pipelinePage.myPipelinesDesc") }}</span>
      </div>
    </template>
    <!-- <a-alert v-if="settingStore.sysPublic.notice" type="warning" show-icon>
--- a/packages/ui/certd-client/src/views/certd/pipeline/pipeline/index.vue
+++ b/packages/ui/certd-client/src/views/certd/pipeline/pipeline/index.vue
@@ -1065,7 +1065,7 @@ export default defineComponent({
    }

    .layout-right {
-      width: 364px;
+      width: 368px;
      height: 100%;
      max-width: 90vw;
    }
@@ -1292,7 +1292,7 @@ export default defineComponent({
  .layout-right {
    position: relative;
    &.collapsed {
-      margin-right: max(-364px, -90vw);
+      margin-right: max(-368px, -90vw);
    }

    .collapse-toggle {
--- a/packages/ui/certd-client/src/views/certd/pipeline/sub-domain/crud.tsx
+++ b/packages/ui/certd-client/src/views/certd/pipeline/sub-domain/crud.tsx
@@ -80,10 +80,13 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat
              render() {
                return (
                  <div>
-                    {t("certd.subdomainHelpText")}
-                    <a href={"https://help.aliyun.com/zh/dns/subdomain-management"} target={"_blank"}>
-                      {t("certd.subdomainManagement")}
-                    </a>
+                    <div>
+                      1. {t("certd.subdomainHelpText")}
+                      <a href={"https://help.aliyun.com/zh/dns/subdomain-management"} target={"_blank"}>
+                        {t("certd.subdomainManagement")}
+                      </a>
+                    </div>
+                    <div>2. {t("certd.subdomainHelpSupportStart")}</div>
                  </div>
                );
              },
--- a/packages/ui/certd-client/src/views/framework/forgot-password/index.vue
+++ b/packages/ui/certd-client/src/views/framework/forgot-password/index.vue
@@ -76,7 +76,7 @@
        <a-button type="primary" size="large" html-type="submit" class="submit-button"> 找回密码</a-button>

        <div class="mt-2 flex-between">
-          <a v-comm="false" href="https://certd.docmirror.cn/guide/use/forgotpasswd/" target="_blank"> 管理员无绑定通信方式或MFA丢失找回 </a>
+          <a v-comm="false" href="https://certd.docmirror.cn/guide/use/forgotpasswd/" target="_blank"> 管理员忘记密码 </a>

          <router-link :to="{ name: 'login' }"> 返回登录 </router-link>
        </div>
--- a/packages/ui/certd-client/src/views/framework/home/dashboard/charts/expiring-list.vue
+++ b/packages/ui/certd-client/src/views/framework/home/dashboard/charts/expiring-list.vue
@@ -1,6 +1,6 @@
 <template>
  <div v-if="data.length !== 0" class="expiring-pipeline-list">
-    <div v-for="item of data" class="pipeline-row">
+    <div v-for="item of data" :key="item.id" class="pipeline-row">
      <div class="title" :title="item.title">
        <pi-status-show :status="item.status"></pi-status-show> <a @click="goDetail(item)">{{ item.title }}</a>
      </div>
--- a/packages/ui/certd-client/src/views/framework/home/dashboard/index.vue
+++ b/packages/ui/certd-client/src/views/framework/home/dashboard/index.vue
@@ -67,7 +67,7 @@
    <div class="statistic-data m-20">
      <a-row :gutter="20" class="flex-wrap">
        <a-col :md="6" :xs="24">
-          <statistic-card icon="fluent-color:data-line-24" :title="t('certd.dashboard.pipelineCount')" :count="count.pipelineCount" :sub-counts="count.pipelineEnableCount">
+          <statistic-card icon="fluent-color:data-line-24" :title="t('certd.dashboard.pipelineCount')" :count="count.pipelineCount" link="/certd/pipeline" :sub-counts="count.pipelineEnableCount">
            <template v-if="count.pipelineCount === 0" #default>
              <div class="flex-center flex-1 flex-col">
                <div style="font-size: 18px; font-weight: 700">{{ t("certd.dashboard.noPipeline") }}</div>
@@ -85,7 +85,7 @@
          </statistic-card>
        </a-col> -->
        <a-col :md="6" :xs="24">
-          <statistic-card icon="fluent-color:certificate-24" :title="t('certd.dashboard.certCount')" :count="count.certCount" :sub-counts="count.certStatusCount">
+          <statistic-card icon="fluent-color:certificate-24" :title="t('certd.dashboard.certCount')" :count="count.certCount" link="/certd/monitor/cert" :sub-counts="count.certStatusCount">
            <template v-if="count.certCount === 0" #default>
              <div class="flex-center flex-1 flex-col">
                <div style="font-size: 18px; font-weight: 700">{{ t("certd.dashboard.noCert") }}</div>
@@ -216,6 +216,9 @@ const siteInfo: Ref<SiteInfo> = computed(() => {
  return settingStore.siteInfo;
 });
 const settingsStore = useSettingStore();
+const defaultExpireDays = computed(() => {
+  return settingsStore.sysPublic.defaultCertRenewDays || settingsStore.sysPublic.defaultWillExpireDays || 15;
+});
 const userStore = useUserStore();
 const userInfo: ComputedRef<UserInfoRes> = computed(() => {
  return userStore.getUserInfo;
@@ -266,9 +269,16 @@ function transformStatusCount() {
  ];
  const certCount = count.value.certCount;
  count.value.certStatusCount = [
-    { name: t("certd.dashboard.certExpiredCount"), value: certCount.expired, color: "red", checkIcon: "mingcute:warning-fill:#f44336" },
-    { name: t("certd.dashboard.certExpiringCount"), value: certCount.expiring, color: "yellow", checkIcon: "mingcute:alert-fill:#ff9800", title: "到期不足15天" },
-    { name: t("certd.dashboard.certNoExpireCount"), value: certCount.notExpired, color: "green" },
+    { name: t("certd.dashboard.certExpiredCount"), value: certCount.expired, color: "red", checkIcon: "mingcute:warning-fill:#f44336", link: { path: "/certd/monitor/cert", query: { expireStatus: "expired" } } },
+    {
+      name: t("certd.dashboard.certExpiringCount"),
+      value: certCount.expiring,
+      color: "yellow",
+      checkIcon: "mingcute:alert-fill:#ff9800",
+      title: `到期不足${defaultExpireDays.value}天`,
+      link: { path: "/certd/monitor/cert", query: { expireStatus: "expiring" } },
+    },
+    { name: t("certd.dashboard.certNoExpireCount"), value: certCount.notExpired, color: "green", link: { path: "/certd/monitor/cert", query: { expireStatus: "noExpired" } } },
  ];
  count.value.certCount = certCount.total;
 }
@@ -380,6 +390,12 @@ const { tour, tourHandleOpen } = useTour();

 <style lang="less">
 .dashboard-user {
+  .ant-card-head {
+    padding: 0px 18px;
+  }
+  .ant-card-body {
+    padding: 15px 18px;
+  }
  .warning {
    .ant-alert {
      border-left: 0;
--- a/packages/ui/certd-client/src/views/framework/home/dashboard/statistic-card.vue
+++ b/packages/ui/certd-client/src/views/framework/home/dashboard/statistic-card.vue
@@ -12,13 +12,13 @@
        <div class="content">
          <div v-if="!slots.default" class="statistic">
            <div v-if="count !== 0" class="value flex items-center w-full">
-              <div class="total flex-center flex-1 flex-col">
+              <div class="total flex-center flex-1 flex-col pointer" @click="goDetail(link)">
                <span>{{ count }}</span>
                <span class="sub-title">{{ title }}</span>
              </div>
              <a-divider type="vertical h-10"></a-divider>
-              <div class="sub flex-1 flex-col h-[80%] flex-evenly pl-4">
-                <div v-for="item in subCounts" :key="item.name" class="sub-item flex justify-center w-full" :title="item.title">
+              <div class="sub flex-1 flex-col h-[80%] flex-evenly pl-1 2xl:pl-4">
+                <div v-for="item in subCounts" :key="item.name" class="sub-item flex justify-center w-full pointer" :title="item.title" @click="goDetail(item.link)">
                  <div class="flex items-center w-[60%] ellipsis overflow-hidden">
                    <div class="status-indicator" :class="`bg-${item.color}`"></div>
                    {{ item.name }}：
@@ -45,27 +45,37 @@
 </template>
 <script setup lang="ts">
 import { FsIcon } from "@fast-crud/fast-crud";
+import { useRouter } from "vue-router";
 const props = defineProps<{
  icon: string;
  title: string;
  count?: number;
+  link?: any;
  subCounts?: {
    name: string;
    value: number;
    color: string;
    checkIcon?: string;
    title?: string;
+    link?: any;
  }[];
 }>();
 const slots = defineSlots();
+const router = useRouter();
+function goDetail(link: any) {
+  if (!link) {
+    return;
+  }
+  if (typeof link === "string") {
+    router.push({ path: link });
+  } else {
+    router.push(link);
+  }
+}
 </script>
 <style lang="less">
 .statistic-card {
  margin-bottom: 10px;
-
-  .ant-card-body {
-    padding: 15px 24px;
-  }
  .icon-text {
    display: inline-flex;
    justify-content: left;
--- a/packages/ui/certd-client/src/views/framework/login/index.vue
+++ b/packages/ui/certd-client/src/views/framework/login/index.vue
@@ -59,6 +59,9 @@
              <router-link v-if="!!settingStore.sysPublic.selfServicePasswordRetrievalEnabled && !queryBindCode" :to="{ name: 'forgotPassword' }">
                {{ t("authentication.forgotPassword") }}
              </router-link>
+              <a v-else v-comm="false" href="https://certd.docmirror.cn/guide/use/forgotpasswd/" target="_blank">
+                {{ t("authentication.forgotPassword") }}
+              </a>
            </div>

            <router-link v-if="hasRegisterTypeEnabled() && !queryBindCode" class="register" :to="{ name: 'register' }">
--- a/packages/ui/certd-client/src/views/sys/settings/index.vue
+++ b/packages/ui/certd-client/src/views/sys/settings/index.vue
@@ -26,6 +26,9 @@
        <a-tab-pane key="pipeline" :tab="t('certd.sys.setting.pipelineSetting')">
          <SettingPipeline v-if="activeKey === 'pipeline'" />
        </a-tab-pane>
+        <a-tab-pane key="network" :tab="t('certd.sys.setting.networkSetting')">
+          <SettingNetwork v-if="activeKey === 'network'" />
+        </a-tab-pane>
      </a-tabs>
    </div>
  </fs-page>
@@ -39,6 +42,7 @@ import SettingSafe from "/@/views/sys/settings/tabs/safe.vue";
 import SettingCaptcha from "/@/views/sys/settings/tabs/captcha.vue";
 import SettingPipeline from "/@/views/sys/settings/tabs/pipeline.vue";
 import SettingOauth from "/@/views/sys/settings/tabs/oauth.vue";
+import SettingNetwork from "/@/views/sys/settings/tabs/network.vue";
 import { useRoute, useRouter } from "vue-router";
 import { ref } from "vue";
 import { useSettingStore } from "/@/store/settings";
--- a/packages/ui/certd-client/src/views/sys/settings/tabs/base.vue
+++ b/packages/ui/certd-client/src/views/sys/settings/tabs/base.vue
@@ -15,33 +15,6 @@
        <a-switch v-model:checked="formState.public.robots" />
      </a-form-item>

-      <a-form-item :label="t('certd.httpProxy')" :name="['private', 'httpProxy']" :rules="urlRules">
-        <a-input v-model:value="formState.private.httpProxy" :placeholder="t('certd.httpProxyPlaceholder')" />
-        <div class="helper">{{ t("certd.httpProxyHelper") }}</div>
-      </a-form-item>
-
-      <a-form-item :label="t('certd.httpsProxy')" :name="['private', 'httpsProxy']" :rules="urlRules">
-        <div class="flex">
-          <a-input v-model:value="formState.private.httpsProxy" :placeholder="t('certd.httpsProxyPlaceholder')" />
-          <a-button class="ml-5" type="primary" :loading="testProxyLoading" :title="t('certd.saveThenTestTitle')" @click="testProxy">{{ t("certd.testButton") }}</a-button>
-        </div>
-        <div class="helper">{{ t("certd.httpsProxyHelper") }}</div>
-      </a-form-item>
-
-      <a-form-item :label="t('certd.dualStackNetwork')" :name="['private', 'dnsResultOrder']">
-        <a-select v-model:value="formState.private.dnsResultOrder">
-          <a-select-option value="verbatim">{{ t("certd.default") }}</a-select-option>
-          <a-select-option value="ipv4first">{{ t("certd.ipv4Priority") }}</a-select-option>
-          <a-select-option value="ipv6first">{{ t("certd.ipv6Priority") }}</a-select-option>
-        </a-select>
-        <div class="helper">{{ t("certd.dualStackNetworkHelper") }}, <a href="https://certd.docmirror.cn/guide/use/setting/ipv6.html" target="_blank">{{ t("certd.helpDocLink") }}</a></div>
-      </a-form-item>
-
-      <a-form-item :label="t('certd.sys.setting.showRunStrategy')" :name="['public', 'showRunStrategy']">
-        <a-switch v-model:checked="formState.public.showRunStrategy" />
-        <div class="helper">{{ t("certd.sys.setting.showRunStrategyHelper") }}</div>
-      </a-form-item>
-
      <a-form-item :label="t('certd.enableCommonCnameService')" :name="['private', 'commonCnameEnabled']">
        <a-switch v-model:checked="formState.private.commonCnameEnabled" />
        <div class="helper" v-html="t('certd.commonCnameHelper')"></div>
@@ -60,16 +33,14 @@
 </template>

 <script setup lang="tsx">
-import { reactive, ref } from "vue";
-import { SysSettings } from "/@/views/sys/settings/api";
-import * as api from "/@/views/sys/settings/api";
-import { merge } from "lodash-es";
-import { useSettingStore } from "/@/store/settings";
 import { notification } from "ant-design-vue";
-import { util } from "/@/utils";
+import { merge } from "lodash-es";
+import { reactive, ref } from "vue";
+import { useSettingStore } from "/@/store/settings";
+import * as api from "/@/views/sys/settings/api";
+import { SysSettings } from "/@/views/sys/settings/api";
+
 import { useI18n } from "/src/locales";
-import AddonSelector from "../../../certd/addon/addon-selector/index.vue";
-import CaptchaInput from "/@/components/captcha/captcha-input.vue";
 const { t } = useI18n();

 defineOptions({
@@ -84,11 +55,6 @@ const formState = reactive<Partial<SysSettings>>({
  private: {},
 });

-const urlRules = ref({
-  type: "url",
-  message: "请输入正确的URL",
-});
-
 async function loadSysSettings() {
  const data: any = await api.SysSettingsGet();
  merge(formState, data);
@@ -110,43 +76,6 @@ const onFinish = async (form: any) => {
    saveLoading.value = false;
  }
 };
-
-const testProxyLoading = ref(false);
-async function testProxy() {
-  testProxyLoading.value = true;
-  try {
-    const res = await api.TestProxy();
-    let success = true;
-    if (res.google !== true || res.baidu !== true) {
-      success = false;
-    }
-    const content = () => {
-      return (
-        <div>
-          <div>
-            {t("certd.google")}: {res.google === true ? t("certd.success") : util.maxLength(res.google)}
-          </div>
-          <div>
-            {t("certd.baidu")}: {res.baidu === true ? t("certd.success") : util.maxLength(res.baidu)}
-          </div>
-        </div>
-      );
-    };
-    if (!success) {
-      notification.error({
-        message: t("certd.testFailed"),
-        description: content,
-      });
-      return;
-    }
-    notification.success({
-      message: t("certd.testCompleted"),
-      description: content,
-    });
-  } finally {
-    testProxyLoading.value = false;
-  }
-}
 </script>
 <style lang="less">
 .sys-settings-base {
--- a/packages/ui/certd-client/src/views/sys/settings/tabs/captcha.vue
+++ b/packages/ui/certd-client/src/views/sys/settings/tabs/captcha.vue
@@ -9,9 +9,11 @@
        <addon-selector v-model:model-value="formState.public.captchaAddonId" addon-type="captcha" from="sys" @selected-change="onAddonChanged" />
      </a-form-item>
      <a-form-item v-if="formState.public.captchaType === settingsStore.sysPublic.captchaType" :label="t('certd.sys.setting.captchaTest')">
-        <div class="flex">
-          <CaptchaInput v-model:model-value="captchaTestForm.captcha" class="w-50%"></CaptchaInput>
-          <a-button class="ml-2" type="primary" @click="doCaptchaValidate">后端验证</a-button>
+        <div class="flex items-center">
+          <CaptchaInput v-model:model-value="captchaTestForm.captcha" class="w-60%"></CaptchaInput>
+          <a-button class="ml-2 mr-2" type="primary" @click="doCaptchaValidate">后端验证</a-button>
+          <a-tag v-if="captchaTestForm.pass" color="green" class="flex items-center"> <fs-icon icon="material-symbols:check-circle-rounded"></fs-icon> 校验通过</a-tag>
+          <a-tag v-else class="flex items-center"> <fs-icon icon="material-symbols:info-rounded"></fs-icon> 请先点击验证</a-tag>
        </div>
      </a-form-item>

--- a/packages/ui/certd-client/src/views/sys/settings/tabs/network.vue
+++ b/packages/ui/certd-client/src/views/sys/settings/tabs/network.vue
@@ -0,0 +1,127 @@
+<template>
+  <div class="sys-settings-form sys-settings-network">
+    <a-form :model="formState" name="basic" :label-col="{ span: 8 }" :wrapper-col="{ span: 16 }" autocomplete="off" @finish="onFinish">
+      <a-form-item :label="t('certd.httpProxy')" :name="['private', 'httpProxy']" :rules="urlRules">
+        <a-input v-model:value="formState.private.httpProxy" :placeholder="t('certd.httpProxyPlaceholder')" />
+        <div class="helper">{{ t("certd.httpProxyHelper") }}</div>
+      </a-form-item>
+
+      <a-form-item :label="t('certd.httpsProxy')" :name="['private', 'httpsProxy']" :rules="urlRules">
+        <div class="flex">
+          <a-input v-model:value="formState.private.httpsProxy" :placeholder="t('certd.httpsProxyPlaceholder')" />
+          <a-button class="ml-5" type="primary" :loading="testProxyLoading" :title="t('certd.saveThenTestTitle')" @click="testProxy">{{ t("certd.testButton") }}</a-button>
+        </div>
+        <div class="helper">{{ t("certd.httpsProxyHelper") }}</div>
+      </a-form-item>
+
+      <a-form-item :label="t('certd.dualStackNetwork')" :name="['private', 'dnsResultOrder']">
+        <a-select v-model:value="formState.private.dnsResultOrder">
+          <a-select-option value="verbatim">{{ t("certd.default") }}</a-select-option>
+          <a-select-option value="ipv4first">{{ t("certd.ipv4Priority") }}</a-select-option>
+          <a-select-option value="ipv6first">{{ t("certd.ipv6Priority") }}</a-select-option>
+        </a-select>
+        <div class="helper">
+          {{ t("certd.dualStackNetworkHelper") }}, <a href="https://certd.docmirror.cn/guide/use/setting/ipv6.html" target="_blank">{{ t("certd.helpDocLink") }}</a>
+        </div>
+      </a-form-item>
+      <a-form-item :label="t('certd.sys.setting.reverseProxy')" :name="['private', 'reverseProxy']">
+        <div class="mt-5">
+          <div v-for="(value, key) in formState.private.reverseProxies" :key="key" class="flex items-center p-2 border-b border-gray-300">
+            <span class="flex-1">{{ key }}</span>
+            <span class="flex-1 ml-5"><a-input v-model:value="formState.private.reverseProxies[key]" placeholder="proxy.xxxx.com" allow-clear /></span>
+          </div>
+        </div>
+        <div class="helper">{{ t("certd.sys.setting.reverseProxyHelper") }}</div>
+      </a-form-item>
+
+      <a-form-item label=" " :colon="false" :wrapper-col="{ span: 8 }">
+        <a-button :loading="saveLoading" type="primary" html-type="submit">{{ t("certd.saveButton") }}</a-button>
+      </a-form-item>
+    </a-form>
+  </div>
+</template>
+
+<script setup lang="tsx">
+import { proxyRefs, reactive, ref } from "vue";
+import { SysSettings } from "/@/views/sys/settings/api";
+import * as api from "/@/views/sys/settings/api";
+import { merge } from "lodash-es";
+import { useSettingStore } from "/@/store/settings";
+import { message, notification } from "ant-design-vue";
+import { useI18n } from "/src/locales";
+const { t } = useI18n();
+import { util } from "/@/utils";
+defineOptions({
+  name: "SettingNetwork",
+});
+
+const formState = reactive<Partial<SysSettings>>({
+  public: {},
+  private: {},
+});
+
+const urlRules = ref({
+  type: "url",
+  message: "请输入正确的URL",
+});
+
+async function loadSysSettings() {
+  const data: any = await api.SysSettingsGet();
+  merge(formState, data);
+}
+
+const saveLoading = ref(false);
+loadSysSettings();
+const settingsStore = useSettingStore();
+const onFinish = async (form: any) => {
+  try {
+    saveLoading.value = true;
+    form.private.reverseProxies = formState.private.reverseProxies;
+    await api.SysSettingsSave(form);
+    await settingsStore.loadSysSettings();
+    notification.success({
+      message: t("certd.saveSuccess"),
+    });
+  } finally {
+    saveLoading.value = false;
+  }
+};
+
+const testProxyLoading = ref(false);
+async function testProxy() {
+  testProxyLoading.value = true;
+  try {
+    const res = await api.TestProxy();
+    let success = true;
+    if (res.google !== true || res.baidu !== true) {
+      success = false;
+    }
+    const content = () => {
+      return (
+        <div>
+          <div>
+            {t("certd.google")}: {res.google === true ? t("certd.success") : util.maxLength(res.google)}
+          </div>
+          <div>
+            {t("certd.baidu")}: {res.baidu === true ? t("certd.success") : util.maxLength(res.baidu)}
+          </div>
+        </div>
+      );
+    };
+    if (!success) {
+      notification.error({
+        message: t("certd.testFailed"),
+        description: content,
+      });
+      return;
+    }
+    notification.success({
+      message: t("certd.testCompleted"),
+      description: content,
+    });
+  } finally {
+    testProxyLoading.value = false;
+  }
+}
+</script>
+<style lang="less"></style>
--- a/packages/ui/certd-client/src/views/sys/settings/tabs/pipeline.vue
+++ b/packages/ui/certd-client/src/views/sys/settings/tabs/pipeline.vue
@@ -8,6 +8,10 @@
        <a-input-number v-model:value="formState.public.limitUserPipelineCount" />
        <div class="helper">{{ t("certd.limitUserPipelineCountHelper") }}</div>
      </a-form-item>
+      <a-form-item :label="t('certd.sys.setting.showRunStrategy')" :name="['public', 'showRunStrategy']">
+        <a-switch v-model:checked="formState.public.showRunStrategy" />
+        <div class="helper">{{ t("certd.sys.setting.showRunStrategyHelper") }}</div>
+      </a-form-item>
      <a-form-item :label="t('certd.sys.setting.pipelineValidTimeEnabled')" :name="['public', 'pipelineValidTimeEnabled']">
        <div class="flex items-center">
          <a-switch v-model:checked="formState.public.pipelineValidTimeEnabled" :disabled="!settingsStore.isPlus" />
--- a/packages/ui/certd-client/vite.config.ts
+++ b/packages/ui/certd-client/vite.config.ts
@@ -19,14 +19,15 @@ process.env.VITE_APP_VERSION = require("./package.json").version;
 process.env.VITE_APP_BUILD_TIME = require("dayjs")().format("YYYY-M-D HH:mm:ss");
 import * as https from "node:https";

-export default ({ command, mode }) => {
+export default (req: any) => {
+  const { command, mode } = req;
  console.log("args", command, mode);
  const env = loadEnv(mode, process.cwd());
  const devServerFs: any = {};
  const devAlias: any[] = [];
  const base = "./";
  // if (mode.startsWith("dev")) {
-  //   base = "./";
+  //   base = "/certd";
  // }
  return {
    base: base,
@@ -87,7 +88,7 @@ export default ({ command, mode }) => {
      host: "0.0.0.0",
      port: 3008,
      fs: devServerFs,
-      allowedHosts: ["localhost", "127.0.0.1", "yfy.docmirror.cn"],
+      allowedHosts: ["localhost", "127.0.0.1", "yfy.docmirror.cn", "docmirror.top", "*"],
      proxy: {
        // with options
        "/api": {
@@ -96,6 +97,13 @@ export default ({ command, mode }) => {
          //忽略证书
          agent: new https.Agent({ rejectUnauthorized: false }),
        },
+        "/certd/api": {
+          //配套后端 https://github.com/fast-crud/fs-server-js
+          target: "https://127.0.0.1:7002/api",
+          rewrite: path => path.replace(/^\/certd\/api/, ""),
+          //忽略证书
+          agent: new https.Agent({ rejectUnauthorized: false }),
+        },
      },
    },
  };
--- a/packages/ui/certd-server/CHANGELOG.md
+++ b/packages/ui/certd-server/CHANGELOG.md
@@ -3,6 +3,62 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.38.8](https://github.com/certd/certd/compare/v1.38.7...v1.38.8) (2026-02-06)
+
+### Performance Improvements
+
+* 双重验证显示secret ([febd6d3](https://github.com/certd/certd/commit/febd6d32cfe6d89ccecf26bf15141df7c456e5c6))
+* 优化申请证书最大超时时长 ([00f67d8](https://github.com/certd/certd/commit/00f67d86d68f4f83cfafe2fbfeb4af0d86f9d20e))
+* 支持设置默认的证书申请地址的反向代理 ([0cfb94b](https://github.com/certd/certd/commit/0cfb94b0ba6a6dc3bb0d0a81a1912068a4e6b6b6))
+* 子域名托管域名支持配置通配符 ([3f7ac93](https://github.com/certd/certd/commit/3f7ac939326b0c7ec013a7534b6c0e58fb3e8cb4))
+
+## [1.38.7](https://github.com/certd/certd/compare/v1.38.6...v1.38.7) (2026-02-05)
+
+### Performance Improvements
+
+*  eab从更多参数中挪到外面 ([5ea4f46](https://github.com/certd/certd/commit/5ea4f46de7ae403a7a16e9488dc1d9c7523d019a))
+* 第三方登录支持Microsoft ([beb7a4c](https://github.com/certd/certd/commit/beb7a4c99277262bb9681c5594cfcd3e36c52074))
+* 优化zerossl申请证书稳定性 ([4d86fb3](https://github.com/certd/certd/commit/4d86fb319b81dbf6fa6485982105725b1b066593))
+
+## [1.38.6](https://github.com/certd/certd/compare/v1.38.5...v1.38.6) (2026-02-04)
+
+### Bug Fixes
+
+* 修复新网找错域名的bug ([bd511f9](https://github.com/certd/certd/commit/bd511f97cb7fbdcaeff7ac899f0460a5c7b41826))
+
+### Performance Improvements
+
+* oauth支持github 和google， 修复头像显示问题 ([693a4a6](https://github.com/certd/certd/commit/693a4a663385ced3176286bf4b5f3566da83d90e))
+
+## [1.38.5](https://github.com/certd/certd/compare/v1.38.4...v1.38.5) (2026-02-02)
+
+### Bug Fixes
+
+* 阿里云esa查询证书限制接口无效，改成配置证书数量上限检查方式进行清理 ([2302567](https://github.com/certd/certd/commit/230256793f8ad87ef8a0738c37108bf7b5ab9853))
+* 修复部署到火山引擎vod，获取域名列表为空的bug ([0719f4c](https://github.com/certd/certd/commit/0719f4c99e9198544d03431107b53652e076e881))
+* 修复oidc配置取消后获取登出地址失败后无法列出oauth列表的bug ([eb5de15](https://github.com/certd/certd/commit/eb5de150332fd914c56b812c3ba2c2445f902bb7))
+
+### Performance Improvements
+
+* 将重置密码的日志挪到启动成功之后，方便查看 ([0fa9b34](https://github.com/certd/certd/commit/0fa9b344e08cf355aee7a7566f061cc5d95dc374))
+* 支持绑定两个url地址 ([a2e9a41](https://github.com/certd/certd/commit/a2e9a41a7e712395c0e3ee6fe55b370aa1fc1f12))
+
+## [1.38.4](https://github.com/certd/certd/compare/v1.38.3...v1.38.4) (2026-01-31)
+
+### Bug Fixes
+
+* 修复阿里云esa超过免费配额之后无法部署证书的bug，改成删除最旧的那张证书 ([32de8d9](https://github.com/certd/certd/commit/32de8d9ccb08d26414adbdde950d7cd405dc344a))
+
+### Performance Improvements
+
+* 当ip证书天数太小时，自动调整更新天数，避免每次运行都重新申请ip证书 ([433e98b](https://github.com/certd/certd/commit/433e98b6450fa7d0491151f159e432bf3dfe4feb))
+* 修复旧版本流水线数据发送通知标题为空的bug ([9bee0e4](https://github.com/certd/certd/commit/9bee0e460bfebe8db76742b80b2d52854392f4de))
+* 验证码支持 Cloudflare Turnstile ，谨慎启用，国内被墙了 ([ca43c77](https://github.com/certd/certd/commit/ca43c775250154def63c4acd96d65dc95d1c0c2b))
+* 优化证书未过期时的任务日志提示 ([ac85488](https://github.com/certd/certd/commit/ac85488245197694560aad7df9425ca215ef7ff7))
+* 支持部署到阿里云GA ([1a0d3ee](https://github.com/certd/certd/commit/1a0d3eeb1b0b5ce08f05af84b6161e00c1fe1815))
+* 支持部署到华为elb ([60c8ace](https://github.com/certd/certd/commit/60c8ace443e848155d3ce12e95b84766a4610d3a))
+* 支持部署到AcePanel ([1661cae](https://github.com/certd/certd/commit/1661caed05e3413dc3e2b14ce62b75aa03ad90e0))
+
 ## [1.38.3](https://github.com/certd/certd/compare/v1.38.2...v1.38.3) (2026-01-28)

 ### Bug Fixes
--- a/packages/ui/certd-server/metadata/access_acepanel.yaml
+++ b/packages/ui/certd-server/metadata/access_acepanel.yaml
@@ -0,0 +1,41 @@
+name: acepanel
+title: AcePanel授权
+desc: ''
+icon: svg:icon-lucky
+input:
+  endpoint:
+    title: AcePanel管理地址
+    component:
+      placeholder: http://127.0.0.1:25475/entrance
+    helper: 请输入AcePanel管理地址，格式为http://127.0.0.1:25475/entrance, 要带安全入口，最后面不要加/
+    required: true
+  tokenId:
+    title: 访问令牌ID
+    component:
+      name: a-input-number
+      vModel: value
+    helper: AcePanel控制台->设置->用户->访问令牌->创建访问令牌
+    required: true
+  accessToken:
+    title: 访问令牌
+    component:
+      placeholder: AccessToken
+    helper: 创建访问令牌后复制该令牌填到这里
+    required: true
+    encrypt: true
+  skipSslVerify:
+    title: 忽略证书校验
+    value: true
+    component:
+      name: a-switch
+      vModel: checked
+    helper: 如果面板的url是https，且使用的是自签名证书，则需要开启此选项，其他情况可以关闭
+  testRequest:
+    title: 测试
+    component:
+      name: api-test
+      action: TestRequest
+    helper: 点击测试接口是否正常
+pluginType: access
+type: builtIn
+scriptFilePath: /plugins/plugin-acepanel/access.js
--- a/packages/ui/certd-server/metadata/access_xinnet.yaml
+++ b/packages/ui/certd-server/metadata/access_xinnet.yaml
@@ -22,7 +22,9 @@ input:
    component:
      name: api-test
      action: TestRequest
-    helper: 点击测试接口是否正常
+    helper: |-
+      测试前请务必先在新网后台关闭异地登录保护、关闭动态口令验证
+      如果提示需要短信验证码，请等几个小时后再试
 pluginType: access
 type: builtIn
 scriptFilePath: /plugins/plugin-xinnet/access.js
--- a/packages/ui/certd-server/metadata/addon_captcha_cfTurnstile.yaml
+++ b/packages/ui/certd-server/metadata/addon_captcha_cfTurnstile.yaml
@@ -0,0 +1,23 @@
+addonType: captcha
+name: cfTurnstile
+title: Cloudflare Turnstile
+desc: 谨慎使用，国内被墙了
+showTest: false
+input:
+  siteKey:
+    title: 站点密钥
+    component:
+      placeholder: SiteKey
+    helper: >-
+      [Cloudflare
+      Turnstile](https://www.cloudflare.com/zh-cn/application-services/products/turnstile/)
+      -> 添加小组件
+    required: true
+  secretKey:
+    title: 密钥
+    component:
+      placeholder: SecretKey
+    required: true
+pluginType: addon
+type: builtIn
+scriptFilePath: /plugins/plugin-captcha/cf-turnstile/index.js
--- a/packages/ui/certd-server/metadata/addon_oauth_github.yaml
+++ b/packages/ui/certd-server/metadata/addon_oauth_github.yaml
@@ -0,0 +1,19 @@
+addonType: oauth
+name: github
+title: GitHub认证
+desc: GitHub OAuth2登录
+icon: simple-icons:github
+showTest: false
+input:
+  clientId:
+    title: ClientId
+    helper: '[GitHub Developer Settings](https://github.com/settings/developers)创建应用后获取'
+    required: true
+  clientSecretKey:
+    title: ClientSecretKey
+    component:
+      placeholder: ClientSecretKey / appSecretKey
+    required: true
+pluginType: addon
+type: builtIn
+scriptFilePath: /plugins/plugin-oauth/oauth2/plugin-github.js
--- a/packages/ui/certd-server/metadata/addon_oauth_google.yaml
+++ b/packages/ui/certd-server/metadata/addon_oauth_google.yaml
@@ -0,0 +1,21 @@
+addonType: oauth
+name: google
+title: Google认证
+desc: Google OAuth2登录
+icon: simple-icons:google
+showTest: false
+input:
+  clientId:
+    title: ClientId
+    helper: >-
+      [Google Cloud
+      Console](https://console.cloud.google.com/apis/credentials)创建应用后获取
+    required: true
+  clientSecretKey:
+    title: ClientSecretKey
+    component:
+      placeholder: ClientSecretKey / appSecretKey
+    required: true
+pluginType: addon
+type: builtIn
+scriptFilePath: /plugins/plugin-oauth/oauth2/plugin-google.js
--- a/packages/ui/certd-server/metadata/addon_oauth_microsoft.yaml
+++ b/packages/ui/certd-server/metadata/addon_oauth_microsoft.yaml
@@ -0,0 +1,26 @@
+addonType: oauth
+name: microsoft
+title: Microsoft认证
+desc: Microsoft OAuth2登录
+icon: simple-icons:microsoft
+showTest: false
+input:
+  clientId:
+    title: ClientId
+    helper: '[Azure Portal](https://portal.azure.com/)创建应用后获取'
+    required: true
+  clientSecretKey:
+    title: ClientSecretKey
+    component:
+      placeholder: ClientSecretKey / appSecretKey
+    required: true
+  tenantId:
+    title: TenantId
+    helper: 租户ID，留空使用/common端点（需要应用配置为多租户）
+    component:
+      placeholder: common 或 租户ID
+    value: common
+    required: false
+pluginType: addon
+type: builtIn
+scriptFilePath: /plugins/plugin-oauth/oauth2/plugin-microsoft.js
--- a/packages/ui/certd-server/metadata/deploy_AcePanelDeployToWebsite.yaml
+++ b/packages/ui/certd-server/metadata/deploy_AcePanelDeployToWebsite.yaml
@@ -0,0 +1,73 @@
+showRunStrategy: false
+default:
+  strategy:
+    runStrategy: 1
+name: AcePanelDeployToWebsite
+title: AcePanel-部署到网站
+desc: 上传证书并部署到指定网站
+icon: svg:icon-lucky
+group: panel
+needPlus: true
+input:
+  cert:
+    title: 域名证书
+    helper: 请选择前置任务输出的域名证书
+    component:
+      name: output-selector
+      from:
+        - ':cert:'
+    order: 0
+  certDomains:
+    title: 当前证书域名
+    component:
+      name: cert-domains-getter
+    mergeScript: |2-
+
+              return {
+                component:{
+                    inputKey: ctx.compute(({form})=>{
+                      return form.cert
+                    }),
+                }
+              }
+              
+    template: false
+    required: false
+    order: 0
+  accessId:
+    title: ACEPanel授权
+    component:
+      name: access-selector
+      type: acepanel
+    required: true
+    order: 0
+  websiteList:
+    title: 部署网站
+    component:
+      name: remote-select
+      vModel: value
+      mode: tags
+      type: plugin
+      action: onGetWebsiteList
+      search: false
+      pager: false
+      watches:
+        - certDomains
+        - accessId
+    required: true
+    mergeScript: |2-
+
+                return {
+                  component:{
+                    form: ctx.compute(({form})=>{
+                      return form
+                    })
+                  },
+               }
+              
+    helper: 选择需要部署证书的网站
+    order: 0
+output: {}
+pluginType: deploy
+type: builtIn
+scriptFilePath: /plugins/plugin-acepanel/plugins/plugin-deploy-to-website.js
--- a/packages/ui/certd-server/metadata/deploy_AcePanelPanelCert.yaml
+++ b/packages/ui/certd-server/metadata/deploy_AcePanelPanelCert.yaml
@@ -0,0 +1,30 @@
+showRunStrategy: false
+default:
+  strategy:
+    runStrategy: 1
+name: AcePanelPanelCert
+title: AcePanel-面板证书
+desc: 部署AcePanel面板证书
+icon: svg:icon-lucky
+group: panel
+needPlus: true
+input:
+  cert:
+    title: 域名证书
+    helper: 请选择前置任务输出的域名证书
+    component:
+      name: output-selector
+      from:
+        - ':cert:'
+    order: 0
+  accessId:
+    title: ACEPanel授权
+    component:
+      name: access-selector
+      type: acepanel
+    required: true
+    order: 0
+output: {}
+pluginType: deploy
+type: builtIn
+scriptFilePath: /plugins/plugin-acepanel/plugins/plugin-panel-cert.js
--- a/packages/ui/certd-server/metadata/deploy_AliyunDeployCertToESA.yaml
+++ b/packages/ui/certd-server/metadata/deploy_AliyunDeployCertToESA.yaml
@@ -98,6 +98,15 @@ input:
              
    helper: 请选择要部署证书的站点
    order: 0
+  certLimit:
+    title: 免费证书数量限制
+    value: 2
+    component:
+      name: a-input-number
+      vModel: value
+    helper: 将检查证书数量限制，如果超限将删除最旧的那张证书
+    required: true
+    order: 0
 output: {}
 pluginType: deploy
 type: builtIn
--- a/packages/ui/certd-server/metadata/deploy_AliyunDeployCertToGA.yaml
+++ b/packages/ui/certd-server/metadata/deploy_AliyunDeployCertToGA.yaml
@@ -0,0 +1,158 @@
+showRunStrategy: false
+default:
+  strategy:
+    runStrategy: 1
+name: AliyunDeployCertToGA
+title: 阿里云-部署至GA
+icon: svg:icon-aliyun
+group: aliyun
+desc: 部署证书到阿里云GA(全球加速)，支持更新默认证书和扩展证书
+needPlus: false
+input:
+  cert:
+    title: 域名证书
+    helper: 请选择证书申请任务输出的域名证书
+    component:
+      name: output-selector
+      from:
+        - ':cert:'
+        - uploadCertToAliyun
+    required: true
+    order: 0
+  certDomains:
+    title: 当前证书域名
+    component:
+      name: cert-domains-getter
+    mergeScript: |2-
+
+              return {
+                component:{
+                    inputKey: ctx.compute(({form})=>{
+                      return form.cert
+                    }),
+                }
+              }
+              
+    template: false
+    required: false
+    order: 0
+  casEndpoint:
+    title: 证书接入点
+    helper: 不会选就保持默认即可
+    value: cas.aliyuncs.com
+    component:
+      name: a-select
+      options:
+        - value: cas.aliyuncs.com
+          label: 中国大陆
+        - value: cas.ap-southeast-1.aliyuncs.com
+          label: 新加坡
+    required: true
+    order: 0
+  accessId:
+    title: Access授权
+    helper: 阿里云授权AccessKeyId、AccessKeySecret
+    component:
+      name: access-selector
+      type: aliyun
+    required: true
+    order: 0
+  acceleratorId:
+    title: 全球加速实例
+    component:
+      name: remote-select
+      vModel: value
+      type: plugin
+      action: onGetAcceleratorList
+      search: false
+      pager: false
+      watches:
+        - certDomains
+        - accessId
+        - accessId
+    required: true
+    mergeScript: |2-
+
+                return {
+                  component:{
+                    form: ctx.compute(({form})=>{
+                      return form
+                    })
+                  },
+               }
+              
+    helper: 请选择要部署证书的全球加速实例
+    order: 0
+  listenerIds:
+    title: 监听
+    component:
+      name: remote-select
+      vModel: value
+      mode: tags
+      type: plugin
+      action: onGetListenerList
+      search: false
+      pager: false
+      watches:
+        - certDomains
+        - accessId
+        - accessId
+        - acceleratorId
+    required: true
+    mergeScript: |2-
+
+                return {
+                  component:{
+                    form: ctx.compute(({form})=>{
+                      return form
+                    })
+                  },
+               }
+              
+    helper: 请选择要部署证书的监听
+    order: 0
+  certType:
+    title: 证书类型
+    helper: 选择更新默认证书还是扩展证书
+    value: default
+    component:
+      name: a-select
+      options:
+        - value: default
+          label: 默认证书
+        - value: additional
+          label: 扩展证书
+    required: true
+    order: 0
+  additionalDomains:
+    title: 扩展证书域名
+    component:
+      name: remote-select
+      vModel: value
+      mode: tags
+      type: plugin
+      action: onGetAdditionalDomainList
+      search: false
+      pager: false
+      watches:
+        - certDomains
+        - accessId
+        - accessId
+        - acceleratorId
+        - listenerIds
+        - certType
+    required: true
+    mergeScript: |2-
+
+              return {
+                show: ctx.compute(({form})=>{
+                  return form.certType === "additional";
+                })
+              }
+          
+    helper: 将证书里的域名扩展绑定到监听器中
+    order: 0
+output: {}
+pluginType: deploy
+type: builtIn
+scriptFilePath: /plugins/plugin-aliyun/plugin/deploy-to-ga/index.js
--- a/packages/ui/certd-server/metadata/deploy_CertApply.yaml
+++ b/packages/ui/certd-server/metadata/deploy_CertApply.yaml
@@ -3,7 +3,7 @@ default:
  strategy:
    runStrategy: 0
  input:
-    renewDays: 18
+    renewDays: 15
    forceUpdate: false
 name: CertApply
 title: 证书申请（JS版）
@@ -17,7 +17,9 @@ input:
      name: domain-selector
      vModel: value
      mode: tags
-      placeholder: 请输入证书域名，比如：foo.com , *.foo.com , *.sub.foo.com , *.bar.com
+      placeholder: >-
+        请输入证书域名/IP，比如：foo.com , *.foo.com , *.sub.foo.com , *.bar.com ,
+        123.123.123.123
      tokenSeparators:
        - ','
        - ' '
@@ -213,7 +215,7 @@ input:
    component:
      name: access-selector
      type: eab
-    maybeNeed: true
+    maybeNeed: false
    required: false
    helper: >-
      需要提供EAB授权
@@ -244,7 +246,7 @@ input:
    component:
      name: access-selector
      type: google
-    maybeNeed: true
+    maybeNeed: false
    required: false
    helper: >-
      google服务账号授权与EAB授权选填其中一个，[服务账号授权获取方法](https://certd.docmirror.cn/guide/use/google/)
--- a/packages/ui/certd-server/metadata/deploy_CertApplyGetFormAliyun.yaml
+++ b/packages/ui/certd-server/metadata/deploy_CertApplyGetFormAliyun.yaml
@@ -14,7 +14,9 @@ input:
      name: domain-selector
      vModel: value
      mode: tags
-      placeholder: 请输入证书域名，比如：foo.com , *.foo.com , *.sub.foo.com , *.bar.com
+      placeholder: >-
+        请输入证书域名/IP，比如：foo.com , *.foo.com , *.sub.foo.com , *.bar.com ,
+        123.123.123.123
      tokenSeparators:
        - ','
        - ' '
--- a/packages/ui/certd-server/metadata/deploy_CertApplyLego.yaml
+++ b/packages/ui/certd-server/metadata/deploy_CertApplyLego.yaml
@@ -17,7 +17,9 @@ input:
      name: domain-selector
      vModel: value
      mode: tags
-      placeholder: 请输入证书域名，比如：foo.com , *.foo.com , *.sub.foo.com , *.bar.com
+      placeholder: >-
+        请输入证书域名/IP，比如：foo.com , *.foo.com , *.sub.foo.com , *.bar.com ,
+        123.123.123.123
      tokenSeparators:
        - ','
        - ' '
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
xiaojunnuo	4fda6cbcde	v1.38.8	2026-02-07 02:27:52 +08:00
xiaojunnuo	2bbba897ec	build: prepare to build	2026-02-07 02:23:58 +08:00
xiaojunnuo	0cfb94b0ba	perf: 支持设置默认的证书申请地址的反向代理	2026-02-07 02:20:27 +08:00
xiaojunnuo	3f7ac93932	perf: 子域名托管域名支持配置通配符	2026-02-07 00:03:37 +08:00
xiaojunnuo	96c36b4f6a	chore: aliyun cdn log	2026-02-06 23:35:35 +08:00
xiaojunnuo	febd6d32cf	perf: 双重验证显示secret	2026-02-06 23:26:57 +08:00
xiaojunnuo	cbd8699801	chore: 移除 github star	2026-02-06 23:04:39 +08:00
xiaojunnuo	74400aacc6	chore: 敏感数据隐藏输出	2026-02-06 16:49:19 +08:00
xiaojunnuo	9f55c3605a	chore: 1	2026-02-06 16:36:57 +08:00
xiaojunnuo	8d61e8179f	chore: 1	2026-02-06 16:29:53 +08:00
xiaojunnuo	f250889c3e	Merge branch 'v2-dev' of https://github.com/certd/certd into v2-dev	2026-02-06 16:26:32 +08:00
xiaojunnuo	00f67d86d6	perf: 优化申请证书最大超时时长	2026-02-06 16:26:26 +08:00
xiaojunnuo	5b580d2a17	build: release	2026-02-05 17:12:31 +08:00
xiaojunnuo	083dd7d1a3	build: publish	2026-02-05 16:32:10 +08:00
xiaojunnuo	03bd4755ce	build: trigger build image	2026-02-05 16:31:58 +08:00
xiaojunnuo	29d37075dd	v1.38.7	2026-02-05 16:30:37 +08:00
xiaojunnuo	f311bac580	build: prepare to build	2026-02-05 16:26:01 +08:00
xiaojunnuo	beb7a4c992	perf: 第三方登录支持Microsoft	2026-02-05 16:14:05 +08:00
xiaojunnuo	4d86fb319b	perf: 优化zerossl申请证书稳定性	2026-02-05 12:22:55 +08:00
xiaojunnuo	5ea4f46de7	perf: eab从更多参数中挪到外面	2026-02-05 11:39:06 +08:00
xiaojunnuo	1d8d5251ae	chore: domain-selector 优化	2026-02-05 11:29:10 +08:00
xiaojunnuo	54c8217808	fix: 修复有域名记录时，域名输入框无法关闭的bug	2026-02-05 11:27:32 +08:00
xiaojunnuo	ba623903e0	chore: publish-atom.yaml	2026-02-05 02:05:04 +08:00
xiaojunnuo	907af3ae18	chore： publish	2026-02-05 02:03:57 +08:00
xiaojunnuo	24ae8a6b66	chore：2	2026-02-05 02:02:01 +08:00
xiaojunnuo	1646a5cdd2	chore: atom publish	2026-02-05 01:59:08 +08:00
xiaojunnuo	814f17d10b	build: release	2026-02-05 01:33:21 +08:00
xiaojunnuo	40fe105903	build: release	2026-02-05 01:31:16 +08:00
xiaojunnuo	42a347d8b1	build: publish	2026-02-05 01:18:22 +08:00
xiaojunnuo	5450e5dac4	build: trigger build image	2026-02-05 01:18:09 +08:00
xiaojunnuo	1368259a1e	v1.38.6	2026-02-05 01:16:39 +08:00
xiaojunnuo	81a495f267	build: prepare to build	2026-02-05 01:13:43 +08:00
xiaojunnuo	693a4a6633	perf: oauth支持github 和google，修复头像显示问题	2026-02-05 01:10:01 +08:00
xiaojunnuo	82786c580a	chore: tip	2026-02-05 00:42:25 +08:00
xiaojunnuo	e19743f705	perf: count tip	2026-02-05 00:07:15 +08:00
xiaojunnuo	9166a57930	perf: 当域名管理中没有域名时，创建流水线时不展开域名选择框	2026-02-04 23:09:16 +08:00
xiaojunnuo	bd511f97cb	fix: 修复新网找错域名的bug	2026-02-03 18:28:41 +08:00
xiaojunnuo	560bf40e4b	chore: 1	2026-02-03 16:28:11 +08:00
xiaojunnuo	4f4652c1cd	docs: 1	2026-02-03 12:28:30 +08:00
xiaojunnuo	60e13c2a1d	Merge branch 'v2-dev' of https://github.com/certd/certd into v2-dev	2026-02-03 09:50:29 +08:00
xiaojunnuo	1fe0dc4d16	chore: 1	2026-02-03 09:50:23 +08:00
xiaojunnuo	181a1e3c0a	build: release	2026-02-03 00:18:06 +08:00
xiaojunnuo	6bba771856	build: publish	2026-02-03 00:04:32 +08:00
xiaojunnuo	921f1f42fb	build: trigger build image	2026-02-03 00:04:20 +08:00
xiaojunnuo	eeb1f27fa4	v1.38.5	2026-02-03 00:02:52 +08:00
xiaojunnuo	9ce21ad152	build: prepare to build	2026-02-02 23:59:55 +08:00
xiaojunnuo	c036929cfe	chore: order count	2026-02-02 23:40:10 +08:00
xiaojunnuo	21591a3a89	chore: plus失效原因显示	2026-02-02 16:54:23 +08:00
xiaojunnuo	a2e9a41a7e	perf: 支持绑定两个url地址	2026-02-02 16:36:43 +08:00
xiaojunnuo	0902349130	Merge branch 'v2-dev' of https://github.com/certd/certd into v2-dev	2026-02-02 15:31:17 +08:00
xiaojunnuo	f900db8e10	chore: 赞助数量状态样式	2026-02-02 15:31:02 +08:00
xiaojunnuo	0fa9b344e0	perf: 将重置密码的日志挪到启动成功之后，方便查看	2026-02-02 11:46:55 +08:00
xiaojunnuo	f48ef3d17b	Merge branch 'v2-dev' of https://github.com/certd/certd into v2-dev	2026-02-02 11:31:27 +08:00
xiaojunnuo	40801d0a06	fix: 某些情况下登陆页面没有显示重置密码文档链接的问题	2026-02-02 11:31:17 +08:00
xiaojunnuo	c6ccf1cf21	chore: vscode 显示多存储库	2026-02-02 10:21:25 +08:00
xiaojunnuo	d311992983	chore: vip modal content转到单独的组件中	2026-02-02 02:29:26 +08:00
xiaojunnuo	b4babbe2c7	chore: bindUrl2初步	2026-02-02 02:02:58 +08:00
xiaojunnuo	0719f4c99e	fix: 修复部署到火山引擎vod，获取域名列表为空的bug	2026-02-01 23:10:45 +08:00
xiaojunnuo	eb5de15033	fix: 修复oidc配置取消后获取登出地址失败后无法列出oauth列表的bug	2026-02-01 22:43:35 +08:00
xiaojunnuo	b229486d3b	chore: 1	2026-02-01 15:43:19 +08:00
xiaojunnuo	33b8d3e219	chore: aliyun esa ok	2026-02-01 15:40:35 +08:00
xiaojunnuo	230256793f	fix: 阿里云esa查询证书限制接口无效，改成配置证书数量上限检查方式进行清理	2026-02-01 15:37:45 +08:00
xiaojunnuo	540ef96745	fix: 修复litessl new-nonce报428的bug	2026-02-01 15:25:28 +08:00
xiaojunnuo	1baf30a671	build: release	2026-02-01 02:25:55 +08:00
xiaojunnuo	5e93840e48	build: publish	2026-02-01 02:12:29 +08:00
xiaojunnuo	73a5908039	build: trigger build image	2026-02-01 02:12:17 +08:00
xiaojunnuo	8429148273	v1.38.4	2026-02-01 02:10:55 +08:00
xiaojunnuo	17f40e2180	build: prepare to build	2026-02-01 02:08:21 +08:00
xiaojunnuo	0345b12379	chore: 1	2026-02-01 02:04:12 +08:00
xiaojunnuo	163b0de874	chore: acepanel	2026-02-01 02:00:10 +08:00
xiaojunnuo	1661caed05	perf: 支持部署到AcePanel	2026-02-01 01:58:21 +08:00
xiaojunnuo	1089aeab9e	chore: 阿里云上传证书返回值优化为带region的	2026-01-31 19:36:37 +08:00
xiaojunnuo	1a0d3eeb1b	perf: 支持部署到阿里云GA	2026-01-31 19:30:20 +08:00
xiaojunnuo	c27636529d	chore: 1	2026-01-31 03:11:29 +08:00
xiaojunnuo	ac85488245	perf: 优化证书未过期时的任务日志提示	2026-01-31 03:04:58 +08:00
xiaojunnuo	433e98b645	perf: 当ip证书天数太小时，自动调整更新天数，避免每次运行都重新申请ip证书	2026-01-31 02:54:33 +08:00
xiaojunnuo	873654669e	chore: 支持从domain中查询子域名托管	2026-01-31 02:39:28 +08:00
xiaojunnuo	8b96f218d5	fix: 修复1:: 形式的ipv6校验失败的bug	2026-01-31 02:07:06 +08:00
xiaojunnuo	52cbff0e15	perf: 首页证书数量支持点击跳转	2026-01-31 01:09:49 +08:00
xiaojunnuo	32de8d9ccb	fix: 修复阿里云esa超过免费配额之后无法部署证书的bug，改成删除最旧的那张证书	2026-01-30 19:13:30 +08:00
xiaojunnuo	e06da886f7	Merge branch 'v2-dev' of https://github.com/certd/certd into v2-dev	2026-01-30 17:15:39 +08:00
xiaojunnuo	cdd5ad3a8e	chore: 1	2026-01-30 17:10:31 +08:00
xiaojunnuo	9bee0e460b	perf: 修复旧版本流水线数据发送通知标题为空的bug	2026-01-30 17:08:17 +08:00
xiaojunnuo	60c8ace443	perf: 支持部署到华为elb	2026-01-29 23:39:57 +08:00
xiaojunnuo	933aaeaf25	chore: cfTurnstile	2026-01-29 22:10:27 +08:00
xiaojunnuo	ca43c77525	perf: 验证码支持 Cloudflare Turnstile ，谨慎启用，国内被墙了	2026-01-29 17:21:39 +08:00
xiaojunnuo	b204182c13	build: release	2026-01-29 01:17:50 +08:00
xiaojunnuo	dfb4165a12	build: release	2026-01-29 01:16:15 +08:00
xiaojunnuo	26a54cd228	build: publish	2026-01-29 01:03:11 +08:00
xiaojunnuo	e229f14121	build: trigger build image	2026-01-29 01:02:59 +08:00
@@ -1 +1 @@
 :57
 :23