mirror of
https://github.com/cfal/shoes.git
synced 2026-11-06 08:14:11 +00:00
cfal
c17693c001
Make WireGuard use the same inline client and server protocol syntax as other proxies, replacing named endpoints before release. Add automatic sharing of equivalent clients, encrypted peer chains, explicit server routing policy, and validation that rejects conflicting settings while keeping unused clients inactive. Update examples, configuration documentation, and lifecycle and interoperability coverage.
19 lines
600 B
YAML
19 lines
600 B
YAML
# Demonstration keys only. Replace both keys and the peer endpoint before deployment.
|
|
- client_group: vpn
|
|
client_proxies:
|
|
- address: "127.0.0.1:51820"
|
|
protocol:
|
|
type: wireguard
|
|
private_key: "KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKio="
|
|
public_key: "F9firNML9eGdhhroCYjRf66PZi9dgLAFP2zHPNqx0mQ="
|
|
addresses: ["10.77.0.2/32", "fd77::2/128"]
|
|
allowed_ips: ["0.0.0.0/0", "::/0"]
|
|
persistent_keepalive: 25
|
|
|
|
- address: "0.0.0.0:1080"
|
|
protocol: {type: socks}
|
|
rules:
|
|
- masks: ["0.0.0.0/0", "::/0"]
|
|
action: allow
|
|
client_chain: vpn
|