diff --git a/projects/d0abaf3f-da04-4dd4-a228-bacf68f44e8f/Checkpoint 2026-10-01 04-15-48 UTC [66857be8d8].md b/projects/d0abaf3f-da04-4dd4-a228-bacf68f44e8f/Checkpoint 2026-10-01 04-15-48 UTC [66857be8d8].md
new file mode 100644
index 0000000..a70ee8e
--- /dev/null
+++ b/projects/d0abaf3f-da04-4dd4-a228-bacf68f44e8f/Checkpoint 2026-10-01 04-15-48 UTC [66857be8d8].md	
@@ -0,0 +1,24 @@
+---
+title: Checkpoint 2026-10-01 04:15:48 UTC [66857be8d8]
+type: checkpoint
+permalink: main/projects/d0abaf3f-da04-4dd4-a228-bacf68f44e8f/checkpoint-2026-10-01-04-15-48-utc-66857be8d8
+stable_id: 4bdaa04c-6a19-49fb-8879-c119d54d4c98
+scope: project
+memory_type: checkpoint
+project_id: d0abaf3f-da04-4dd4-a228-bacf68f44e8f
+usage_profile_id: 0c9feb46-d06e-43cd-9ef0-c5813c84a998
+status: active
+revision: 1
+request_id: deploy-clash-lan-20261001
+created_at: '2026-10-01T04:15:48.125789+00:00'
+updated_at: '2026-10-01T04:15:48.125789+00:00'
+tags:
+- clash
+- mihomo
+- sub-store
+- metacubexd
+- armbian
+- deployment
+---
+
+已在 Armbian 192.168.32.100 部署局域网代理编排，保持 AI 自动整理关闭。Compose: /opt/1panel/docker/compose/clash/compose.yaml；数据: /data/ssd1/app-data/clash/。容器: clash-sub-store (xream/sub-store，宿主 3005)、clash-mihomo (metacubex/mihomo，7890 mixed HTTP/SOCKS5，9090 API 仅绑定 192.168.32.100)、clash-metacubexd (ghcr.io/metacubex/metacubexd，宿主 3006)。Docker bridge 网络 clash-net；未启用 TUN/TProxy/REDIRECT/host network/NET_ADMIN，不修改默认路由和系统 DNS。验证：三个容器 Up；3005/3006 HTTP 200；Mihomo /version 带认证返回 200 v1.19.32；带认证 HTTP 代理访问 example.com 返回 200；无节点时配置为 DIRECT。局域网地址：Sub-Store http://192.168.32.100:3005，MetaCubeXD http://192.168.32.100:3006，代理 192.168.32.100:7890。局域网代理凭据保存于密码库条目“Armbian Clash 局域网代理凭据”，不要在普通记忆记录密文。Sub-Store 后端路径和 Mihomo 控制密钥保存在服务器配置/密码库。公网二级域名、OpenResty 反代、frp TCP 代理转发尚未配置，后续域名准备后接入。尚未添加用户机场订阅，Mihomo 当前没有真实节点，默认 DIRECT。
\ No newline at end of file