|
|
@@ -0,0 +1,64 @@
|
|
|
+{
|
|
|
+ "log": {
|
|
|
+ "loglevel": "warning"
|
|
|
+ },
|
|
|
+ "routing": {
|
|
|
+ "domainStrategy": "IPIfNonMatch",
|
|
|
+ "rules": [
|
|
|
+ {
|
|
|
+ "type": "field",
|
|
|
+ "ip": [
|
|
|
+ "geoip:cn",
|
|
|
+ "geoip:private"
|
|
|
+ ],
|
|
|
+ "outboundTag": "block"
|
|
|
+ }
|
|
|
+ ]
|
|
|
+ },
|
|
|
+ "inbounds": [
|
|
|
+ {
|
|
|
+ "listen": "0.0.0.0",
|
|
|
+ "port": 16387, // 端口
|
|
|
+ "protocol": "vless",
|
|
|
+ "settings": {
|
|
|
+ "clients": [
|
|
|
+ {
|
|
|
+ "id": "", // 用户ID
|
|
|
+ "flow": "xtls-rprx-vision"
|
|
|
+ }
|
|
|
+ ],
|
|
|
+ "decryption": "none"
|
|
|
+ },
|
|
|
+ "streamSettings": {
|
|
|
+ "network": "tcp",
|
|
|
+ "security": "tls",
|
|
|
+ "tlsSettings": {
|
|
|
+ "rejectUnknownSni": true,
|
|
|
+ "certificates": [
|
|
|
+ {
|
|
|
+ "certificateFile": "/etc/ssl/private/fullchain.cer", // 证书
|
|
|
+ "keyFile": "/etc/ssl/private/private.key" //私钥
|
|
|
+ }
|
|
|
+ ]
|
|
|
+ }
|
|
|
+ },
|
|
|
+ "sniffing": {
|
|
|
+ "enabled": true,
|
|
|
+ "destOverride": [
|
|
|
+ "http",
|
|
|
+ "tls"
|
|
|
+ ]
|
|
|
+ }
|
|
|
+ }
|
|
|
+ ],
|
|
|
+ "outbounds": [
|
|
|
+ {
|
|
|
+ "protocol": "freedom",
|
|
|
+ "tag": "direct"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "protocol": "blackhole",
|
|
|
+ "tag": "block"
|
|
|
+ }
|
|
|
+ ]
|
|
|
+}
|