# Basic Shadowsocks server examples

# Shadowsocks with AES-128-GCM cipher
- address: "0.0.0.0:8388"
  protocol:
    type: shadowsocks
    cipher: aes-128-gcm
    password: "mypassword123"
    udp_enabled: true  # Enable UDP over TCP (default: true)

# Shadowsocks with ChaCha20-Poly1305 cipher
- address: "0.0.0.0:8389"
  protocol:
    type: shadowsocks
    cipher: chacha20-ietf-poly1305
    password: "anotherpassword456"

# Shadowsocks with UDP disabled (TCP only)
- address: "0.0.0.0:8393"
  protocol:
    type: shadowsocks
    cipher: aes-256-gcm
    password: "tcponlypassword"
    udp_enabled: false

# Shadowsocks 2022 with Blake3 (requires base64 encoded key)
- address: "0.0.0.0:8390"
  protocol:
    type: shadowsocks
    cipher: 2022-blake3-aes-256-gcm
    password: "N5tp51JibWA9kIPEUoDHzyyjfgkDYToOERh+u9L47fk="

# Shadowsocks over QUIC transport
- address: "0.0.0.0:8391"
  transport: quic
  quic_settings:
    cert: "cert.pem"
    key: "key.pem"
  protocol:
    type: shadowsocks
    cipher: aes-256-gcm
    password: "securepassword789"

# Shadowsocks with custom routing rules
- address: "0.0.0.0:8392"
  protocol:
    type: shadowsocks
    cipher: chacha20-ietf-poly1305
    password: "routingpassword"
  rules:
    # Allow local network direct connection
    - masks: ["192.168.0.0/16", "10.0.0.0/8"]
      action: allow
      client_chain: direct
    # Route everything else through upstream proxy
    - masks: "0.0.0.0/0"
      action: allow
      client_chain:
        address: "upstream.proxy.com:1080"
        protocol:
          type: socks