Commercial VPN platform
  • PLpgSQL 87.7%
  • TypeScript 12.3%
Find a file
2026-09-28 00:32:17 +03:00
db/migrations feat: add db/migrations/000001_foundation.sql 2026-09-28 00:32:17 +03:00
docs chore: add docs/referrals.md 2026-09-28 00:31:56 +03:00
src feat: add src/index.ts 2026-09-28 00:32:15 +03:00
.env.example chore: add .env.example 2026-09-28 00:31:52 +03:00
.gitignore chore: add .gitignore 2026-09-28 00:31:51 +03:00
docker-compose.yml chore: add docker-compose.yml 2026-09-28 00:31:58 +03:00
package.json feat: add package.json 2026-09-28 00:32:12 +03:00
README.md chore: bootstrap VPN platform repository 2026-09-28 00:31:49 +03:00
tsconfig.json feat: add tsconfig.json 2026-09-28 00:32:13 +03:00

VPN Platform

Commercial VPN sales, subscription, referral, billing and provisioning platform.

Architecture

This repository contains proprietary clean-room business logic. Remnawave is treated as an external control plane and is integrated only through its public/API contract. No Remnawave or third-party bot source code is copied into this repository.

Core domains

  • Telegram client bot
  • Customer & device management
  • Plans, orders, payments and subscriptions
  • Referral & promo engine
  • Provisioning adapter
  • Node health/capacity selection
  • Support tickets and notifications
  • Admin/RBAC/audit
  • Analytics and unit economics

Environments

  • development
  • staging
  • production

Production deployment, live payment credentials and irreversible infrastructure changes require a separate release approval.

Delivery stages

  1. VPN-01 Foundation & Repository Bootstrap
  2. VPN-02 Security Hardening
  3. VPN-03 Remnawave Integration
  4. VPN-04 Billing
  5. VPN-05 Telegram Client Bot
  6. VPN-06 Device Management
  7. VPN-07 Smart Provisioning
  8. VPN-08 Admin
  9. VPN-09 Support & Automation
  10. VPN-10 Full QA & Production Freeze

Security baseline

Secrets are never committed. Payment success is accepted only from verified provider callbacks/API reconciliation. Provisioning uses bounded API operations, not arbitrary shell access. Every privileged action is audited.