Escape a value for a Prometheus exposition-format label value. Label values must escape backslash, double-quote, and newline; otherwise an un

Standardized subprocess execution wrapper.

Escape a value for safe inclusion inside a River double-quoted string. Without this, a stray quote/newline/brace in an interpolated value could

Single source of truth for the DEBUG flag. Checked here, the lowest-level module, so every other module can share one definition (env var fir

Sleep for `seconds`, returns True if shutdown requested.

Reads key-value pairs from an env file, optionally including os.environ.

Retrieves the system identifier from environment variables or config file. Note: Stays in config.py to prevent circular imports with logger a

Fetches the public IP and optionally country info from multiple providers.

Return a PEM cert's notAfter (UTC), or None if it can't be determined.

Internal method to manage Cloudflare DNS records.

Generates a WireGuard private and public key pair using the wg utility.

Internal method to retrieve domain from Cloudflare API.

Converts a CSV file to a dictionary, skipping headers and malformed lines.

Generates a vmess:// link from a configuration dictionary.

Return formatted config links for active inbounds.

Retrieves the machine ID from the host system.

Perform all initialization logic. Only executes once.

Parses Xray config links (vmess, vless). Standardized to return 'id' as the primary identifier (consistent across protocols).

Registers a new Warp account with Cloudflare and returns the configuration.

Bump cert serial so the config watcher detects a change and SIGHUPs xray to reload cert files.

Initialize instance attributes to hold shared variables.

Recursively substitute variables in strings within a nested data structure.

Writes configuration data to an env file, preserving schema order if provided.