[功能] 添加域名证书绑定支持，允许为每个域名单独选择证书并优化相关逻辑

openflare_server/web/features/proxy-routes/components/domain-list-input.tsx

@@ -90,12 +90,22 @@ function buildDomainSuggestions(
 
 export function buildDomainRowsFromRoute(
   domains: string[],
+  domainCertIDs: number[],
   certIDs: number[],
 ): DomainListRow[] {
   if (domains.length === 0) {
     return ensureRows([]);
   }
 
+  if (domainCertIDs.length === domains.length) {
+    return domains.map((domain, index) => ({
+      domain,
+      certificateId: domainCertIDs[index]
+        ? String(domainCertIDs[index])
+        : '',
+    }));
+  }
+
   if (certIDs.length === 0) {
     return domains.map((domain) => ({ domain, certificateId: '' }));
   }

openflare_server/web/features/proxy-routes/components/proxy-route-config-page.tsx

@@ -216,12 +216,24 @@ function normalizeSelectedCertificateIDs(rows: DomainListRow[]) {
   return Array.from(
     new Set(
       rows
+        .filter((item) => item.domain.trim() !== '')
         .map((item) => Number(item.certificateId))
         .filter((item) => Number.isFinite(item) && item > 0),
     ),
   );
 }
 
+function buildDomainCertificateIDs(rows: DomainListRow[]) {
+  return rows
+    .filter((item) => item.domain.trim() !== '')
+    .map((item) => {
+      const certificateID = Number(item.certificateId);
+      return Number.isFinite(certificateID) && certificateID > 0
+        ? certificateID
+        : 0;
+    });
+}
+
 function buildDomainRows(route: ProxyRouteItem) {
   const selectedCertIDs =
     route.cert_ids.length > 0
@@ -230,7 +242,11 @@ function buildDomainRows(route: ProxyRouteItem) {
         ? [route.cert_id]
         : [];
 
-  return buildDomainRowsFromRoute(route.domains, selectedCertIDs);
+  return buildDomainRowsFromRoute(
+    route.domains,
+    route.domain_cert_ids,
+    selectedCertIDs,
+  );
 }
 
 function ConfigSectionShell({
@@ -311,6 +327,7 @@ function DomainSettingsSection({
           const domains = values.domain_rows
             .map((item) => item.domain.trim().toLowerCase())
             .filter(Boolean);
+          const domainCertIDs = buildDomainCertificateIDs(values.domain_rows);
           const certIDs = normalizeSelectedCertificateIDs(values.domain_rows);
 
           onSave(
@@ -322,6 +339,7 @@ function DomainSettingsSection({
               enable_https: certIDs.length > 0,
               cert_id: certIDs[0] ?? null,
               cert_ids: certIDs,
+              domain_cert_ids: domainCertIDs,
               redirect_http: certIDs.length > 0 ? values.redirect_http : false,
             }),
             { message: '域名设置已保存。' },

openflare_server/web/features/proxy-routes/components/proxy-route-create-drawer.tsx

@@ -95,12 +95,24 @@ function normalizeSelectedCertificateIDs(rows: DomainListRow[]) {
   return Array.from(
     new Set(
       rows
+        .filter((item) => item.domain.trim() !== '')
         .map((item) => Number(item.certificateId))
         .filter((item) => Number.isFinite(item) && item > 0),
     ),
   );
 }
 
+function buildDomainCertificateIDs(rows: DomainListRow[]) {
+  return rows
+    .filter((item) => item.domain.trim() !== '')
+    .map((item) => {
+      const certificateID = Number(item.certificateId);
+      return Number.isFinite(certificateID) && certificateID > 0
+        ? certificateID
+        : 0;
+    });
+}
+
 export function ProxyRouteCreateDrawer({
   open,
   onOpenChange,
@@ -143,6 +155,7 @@ export function ProxyRouteCreateDrawer({
       const domains = values.domain_rows
         .map((item) => item.domain.trim().toLowerCase())
         .filter(Boolean);
+      const domainCertIDs = buildDomainCertificateIDs(values.domain_rows);
       const selectedCertIDs = normalizeSelectedCertificateIDs(values.domain_rows);
       const { urls } = parseOriginUrls(values.origin_urls_text);
       const primaryOrigin = parseOriginUrl(urls[0]);
@@ -168,6 +181,7 @@ export function ProxyRouteCreateDrawer({
         enable_https: selectedCertIDs.length > 0,
         cert_id: selectedCertIDs[0] ?? null,
         cert_ids: selectedCertIDs,
+        domain_cert_ids: domainCertIDs,
         redirect_http: selectedCertIDs.length > 0 ? values.redirect_http : false,
         limit_conn_per_server: 0,
         limit_conn_per_ip: 0,