mirror of
https://github.com/cfal/shoes.git
synced 2026-11-06 16:14:11 +00:00
cfal
f485914a93
Add opt-in Fake DNS and TLS SNI routing for clients that connect by IP. Restore synthetic destinations across TCP, UDP, and TUN while preserving reply identities; prefer sniffed SNI for hostname rules without rewriting connection targets. Add persistent fake-IP mappings, stable WireGuard server identities through optional names or public keys, upstream-address guards, deadline-aware DNS fallback, configuration documentation, and examples.
16 lines
573 B
YAML
16 lines
573 B
YAML
# Demonstration keys only. Generate new keys before deployment and exchange public keys.
|
|
- address: "0.0.0.0:51820"
|
|
protocol:
|
|
type: wireguard
|
|
wireguard_name: gateway
|
|
private_key: "KSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSk="
|
|
addresses: ["10.77.0.1/32", "fd77::1/128"]
|
|
peers:
|
|
- public_key: "B6r/Pp/BZydVRPTDpqF82Dfy7G54zYpXsePfs8wDWnY="
|
|
allowed_ips: ["10.77.0.2/32", "fd77::2/128"]
|
|
rules:
|
|
- masks: ["127.0.0.0/8", "::1/128", "169.254.0.0/16", "fe80::/10"]
|
|
action: block
|
|
- masks: ["0.0.0.0/0", "::/0"]
|
|
action: allow
|