remnawave · densds · Jun 24, 2026 · Jul 15, 2026 · Jul 15, 2026 · Jul 16, 2026
diff --git a/README.md b/README.md
@@ -1,5 +1,21 @@
 ## Remnawave Subscription Page
 
+### INCY encrypted subscription links
+
+This fork adds support for INCY encrypted deep links (`incy://crypt1/...`), similar to
+the existing `HAPP_CRYPT4_LINK` placeholder for Happ.
+
+**Setup:**
+1. Install the dependency in `frontend`: `npm install @densds/link-encoder`
+2. In your app-config JSON (Subscription Page settings), use the placeholder
+   `{{INCY_CRYPT1_LINK}}` as the `link` value for an INCY button.
+
+Encryption happens entirely client-side, the same way `HAPP_CRYPT3_LINK` /
+`HAPP_CRYPT4_LINK` already work: the subscription URL is built from the already-loaded,
+already-validated subscription info (`constructSubscriptionUrl`), never from
+unvalidated user input, so there's no backend endpoint involved and nothing for it to
+expose.
+
 Learn more about Remnawave [here](https://docs.rw/).
 
 # Contributors

diff --git a/backend/package.json b/backend/package.json
@@ -81,4 +81,4 @@
     "typescript": "~5.9.3",
     "webpack-node-externals": "^3.0.0"
   }
-}
+}
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -3,7 +3,17 @@ services:
     build:
       context: .
       dockerfile: Dockerfile
+    container_name: remnawave-subscription-page
+    hostname: remnawave-subscription-page
+    restart: always
     env_file:
       - .env
     ports:
       - '127.0.0.1:3010:3010'
+    networks:
+      - remnawave-network
+
+networks:
+  remnawave-network:
+    driver: bridge
+    external: true
diff --git a/frontend/index.html b/frontend/index.html
@@ -2,6 +2,27 @@
 <html lang="en" dir="ltr">
     <head>
         <meta charset="UTF-8" />
+
+        <script src="https://telegram.org/js/telegram-web-app.js"></script>
+        <script>
+            (function () {
+                // Telegram Desktop's embedded WebView2 blocks navigation to custom
+                // schemes (happ://, incy://, ...) even on a fully synchronous click.
+                // Bounce out to the system browser as early as possible — before the
+                // user can even see the Happ/Incy buttons — where deep links work
+                // normally. Mobile clients (android/ios) are left untouched: their
+                // WebViews already handle these schemes fine via a plain
+                // window.open() (see navigateToUrl in installation-guide.connector).
+                var tg = window.Telegram && window.Telegram.WebApp
+                if (tg && tg.platform === 'tdesktop') {
+                    tg.openLink(window.location.href)
+                    if (typeof tg.close === 'function') {
+                        tg.close()
+                    }
+                }
+            })()
+        </script>
+
         <meta name="robots" content="noindex, nofollow" />
         <meta name="color-scheme" content="dark only" />
         <meta name="theme-color" content="#161B23" />

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
diff --git a/frontend/package.json b/frontend/package.json
@@ -28,6 +28,7 @@
   },
   "dependencies": {
     "@gfazioli/mantine-spinner": "4.1.8",
+    "@densds/link-encoder": "^2.0.0",
     "@kastov/cryptohapp": "^1.1.2",
     "@mantine/core": "9.4.1",
     "@mantine/hooks": "9.4.1",

diff --git a/frontend/src/widgets/main/installation-guide/installation-guide.connector.tsx b/frontend/src/widgets/main/installation-guide/installation-guide.connector.tsx
@@ -15,8 +15,9 @@ import {
     UnstyledButton
 } from '@mantine/core'
 import { notifications } from '@mantine/notifications'
+import { encryptLink } from '@densds/link-encoder'
 import { useClipboard } from '@mantine/hooks'
-import { useState } from 'react'
+import { useEffect, useMemo, useState } from 'react'
 import clsx from 'clsx'
 
 import { constructSubscriptionUrl } from '@shared/utils/construct-subscription-url'
@@ -32,6 +33,16 @@ import classes from './installation-guide.module.css'
 
 export type TBlockVariant = 'accordion' | 'cards' | 'minimal' | 'timeline'
 
+// window.open (not location.href) is what actually hands off custom schemes
+// (happ://, incy://, ...) to the OS from inside Telegram's Mini App WebView, same
+// as the validated fix in the sibling shopbot project — as long as it's called
+// synchronously, with no async gap burning through the click's user-activation
+// window. It also keeps regular http(s) subscription links in a new tab instead
+// of navigating the page itself away.
+const navigateToUrl = (url: string) => {
+    window.open(url, '_blank')
+}
+
 interface IProps {
     BlockRenderer: React.ComponentType<IBlockRendererProps>
     hasPlatformApps: Record<TSubscriptionPagePlatformKey, boolean>
@@ -81,10 +92,61 @@ export const InstallationGuideConnector = (props: IProps) => {
         subscription.user.shortUuid
     )
 
+    const hasIncyButton = useMemo(
+        () =>
+            Object.values(platforms).some((platformConfig) =>
+                platformConfig?.apps.some((app) =>
+                    app.blocks.some((block) =>
+                        block.buttons.some((button) => button.link === '{{INCY_CRYPT1_LINK}}')
+                    )
+                )
+            ),
+        [platforms]
+    )
+
+    const [incyCryptLink, setIncyCryptLink] = useState<string | undefined>(undefined)
+    const [incyCryptLoading, setIncyCryptLoading] = useState(() => hasIncyButton)
+
+    useEffect(() => {
+        if (!hasIncyButton) return
+
+        let cancelled = false
+
+        // name is capped at 128 chars per @densds/link-encoder's encryptLink contract
+        const name = subscription.user.username.slice(0, 128)
+
+        encryptLink(subscriptionUrl, { name })
+            .then((link) => {
+                if (!cancelled) setIncyCryptLink(link)
+            })
+            .catch(() => {
+                // incyCryptLink stays undefined; handleButtonClick surfaces
+                // the "not ready" notification when the user clicks the button
+            })
+            .finally(() => {
+                if (!cancelled) setIncyCryptLoading(false)
+            })
+
+        return () => {
+            cancelled = true
+        }
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [hasIncyButton, subscriptionUrl, subscription.user.username])
+
     const handleButtonClick = (button: TSubscriptionPageButtonConfig) => {
         let formattedUrl: string | undefined
 
-        if (button.type === 'subscriptionLink' || button.type === 'copyButton') {
+        if (button.link === '{{INCY_CRYPT1_LINK}}') {
+            if (!incyCryptLink) {
+                notifications.show({
+                    title: 'Error',
+                    message: 'INCY link is not ready yet, please try again in a moment',
+                    color: 'red'
+                })
+                return
+            }
+            formattedUrl = incyCryptLink
+        } else if (button.type === 'subscriptionLink' || button.type === 'copyButton') {
             formattedUrl = TemplateEngine.formatWithMetaInfo(button.link, {
                 username: subscription.user.username,
                 subscriptionUrl
@@ -104,13 +166,17 @@ export const InstallationGuideConnector = (props: IProps) => {
                 break
             }
             case 'external': {
-                window.open(button.link, '_blank')
+                if (formattedUrl) {
+                    navigateToUrl(formattedUrl)
+                } else {
+                    window.open(button.link, '_blank')
+                }
                 break
             }
             case 'subscriptionLink': {
                 if (!formattedUrl) return
 
-                window.open(formattedUrl, '_blank')
+                navigateToUrl(formattedUrl)
                 break
             }
             default:
@@ -129,6 +195,7 @@ export const InstallationGuideConnector = (props: IProps) => {
                 {buttons.map((button, index) => (
                     <Button
                         key={index}
+                        disabled={button.link === '{{INCY_CRYPT1_LINK}}' && incyCryptLoading}
                         leftSection={
                             <span
                                 dangerouslySetInnerHTML={{
@@ -137,6 +204,7 @@ export const InstallationGuideConnector = (props: IProps) => {
                                 style={{ display: 'flex', alignItems: 'center' }}
                             />
                         }
+                        loading={button.link === '{{INCY_CRYPT1_LINK}}' && incyCryptLoading}
                         onClick={() => handleButtonClick(button)}
                         radius="md"
                         variant={variant}
-Original file line number
+Diff line change
@@ Expand Up / @@ -81,4 +81,4 @@ @@
         "typescript": "~5.9.3",
         "webpack-node-externals": "^3.0.0"
       }
-    }
+    }