From 658bd17e28b05e1829b9779c040d52f86f3b1cc3 Mon Sep 17 00:00:00 2001
From: Local Dev <dev@localhost>
Date: Sun, 27 Sep 2026 19:28:45 +0200
Subject: [PATCH] site/vpn: exits listed with the tiers they actually serve
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The page assigned free to sm-1, but sm-1 was the primary infra box —
public gateway, BNS indexer, site, mailbox. Free carries the most
traffic, so the exits were renumbered to put free on the lightest box
and max-only on the busiest, and the page now matches: sm-1 is the
free-and-up exit, sm-3 is max-only, and each carries the Reality
steering domain it is really fronted by.
---
 vpn/index.html | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/vpn/index.html b/vpn/index.html
index 8addbba..c557534 100644
--- a/vpn/index.html
+++ b/vpn/index.html
@@ -102,7 +102,7 @@
       <div class="price">$0</div>
       <p class="desc">Enough for reading, email, checking a page from another country. Small daily cap.</p>
       <ul>
-        <li><span class="tick">✓</span> <span><b>1 server</b> · rotating between the three</span></li>
+        <li><span class="tick">✓</span> <span><b>1 server</b> · Silent Mode · 1</span></li>
         <li><span class="tick">✓</span> <span><b>500 MB / day</b> soft cap</span></li>
         <li><span class="tick">✓</span> <span>Reality + steering domain <span style="color:var(--dim)">(same protocol as Pro/Max)</span></span></li>
         <li><span class="tick">✓</span> <span>Session-only credentials, rotated on every connect</span></li>
@@ -197,9 +197,9 @@
   <p class="lede">Three independent boxes, three different Reality steering domains, three separate
     IPs. If one is under attack the other two keep working.</p>
   <div class="servers">
-    <div class="server"><div class="id">sm-1</div><h4>Silent Mode · 1</h4><div class="meta">Reality → www.cloudflare.com · Free rotates through · Pro selectable · Max always</div></div>
-    <div class="server"><div class="id">sm-2</div><h4>Silent Mode · 2</h4><div class="meta">Reality → www.apple.com · Pro selectable · Max always</div></div>
-    <div class="server"><div class="id">sm-3</div><h4>Silent Mode · 3</h4><div class="meta">Reality → www.microsoft.com · Max only</div></div>
+    <div class="server"><div class="id">sm-1</div><h4>Silent Mode · 1</h4><div class="meta">Reality → www.microsoft.com · Free, Pro and Max</div></div>
+    <div class="server"><div class="id">sm-2</div><h4>Silent Mode · 2</h4><div class="meta">Reality → www.apple.com · Pro and Max</div></div>
+    <div class="server"><div class="id">sm-3</div><h4>Silent Mode · 3</h4><div class="meta">Reality → www.cloudflare.com · Max only</div></div>
   </div>
   <p class="fine-print">The steering domain is what a passive observer sees the TLS handshake going to
     — not where your traffic actually goes. Reality is designed so a censor cannot tell a real