mirror of
https://github.com/cfal/shoes.git
synced 2026-11-06 08:14:11 +00:00
48 lines
2.0 KiB
YAML
48 lines
2.0 KiB
YAML
# Basic Reality server with VLESS
|
|
# Provides enhanced privacy through TLS 1.3 mimicry
|
|
#
|
|
# Reality uses X25519 key exchange and HMAC-signed certificates to provide
|
|
# enhanced privacy. Non-Reality traffic is forwarded to the fallback
|
|
# destination, making the server look like a real website to observers.
|
|
#
|
|
# Generate a Reality keypair with: an X25519 keypair generation tool
|
|
|
|
- address: "0.0.0.0:443"
|
|
protocol:
|
|
type: tls
|
|
reality_targets:
|
|
"www.cloudflare.com":
|
|
# X25519 private key (32 bytes, base64url encoded)
|
|
# Keep this secret! Clients need the corresponding public key.
|
|
private_key: "YOUR_PRIVATE_KEY_HERE"
|
|
|
|
# List of valid short IDs (hex strings, 0-16 chars)
|
|
# Clients must use one of these IDs to connect
|
|
# Empty string "" allows all clients (less secure but convenient)
|
|
short_ids:
|
|
- "0123456789abcdef" # Specific client ID
|
|
- "" # Allow all clients
|
|
|
|
# Fallback destination for non-Reality traffic
|
|
# This should be a real website - traffic that doesn't match Reality
|
|
# protocol will be forwarded here, making observers see a real site
|
|
dest: "www.cloudflare.com:443"
|
|
|
|
# Optional: Maximum timestamp difference in milliseconds (default: 60000)
|
|
# Prevents replay attacks by rejecting connections with old timestamps
|
|
max_time_diff: 60000 # 1 minute
|
|
|
|
# Optional: Client version restrictions [major, minor, patch]
|
|
# min_client_version: [1, 8, 0]
|
|
# max_client_version: [2, 0, 0]
|
|
|
|
# Optional: TLS 1.3 cipher suites to support
|
|
# Valid: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256
|
|
# cipher_suites: ["TLS_AES_256_GCM_SHA384", "TLS_CHACHA20_POLY1305_SHA256"]
|
|
|
|
# Inner protocol - the actual proxy protocol used after Reality handshake
|
|
protocol:
|
|
type: vless
|
|
user_id: "b85798ef-e9dc-46a4-9a87-8da4499d36d0"
|
|
udp_enabled: true # Enable XUDP for UDP multiplexing
|