config general
	option enabled 'false'

config inbound
	option default_inbound 'dekodemo_tproxy'

config outbound
	option sockopt_mark '123'
	option default_outbound 'direct'

config dns
	option querystrategy 'UseIP'
	option disablecache 'false'
	option disablefallback 'false'
	option disablefallbackifmatch 'false'
	list alt_dns '1.1.1.1'

config routing
	option domainstrategy 'AsIs'
	option domainmatcher 'hybrid'
	list service_port '22'
	list service_port '80'
	list service_port '443'

config users
	option dummy 'dummy'

config misc
	option log_level 'warning'
	option xray_path '/usr/bin/xray'

config inbound_service
	option tag 'dekodemo_tproxy'
	option port '12345'
	option protocol 'dokodemo-door'
	option dokodemo_followredirect 'true'
	list dokodemo_network 'tcp'
	list dokodemo_network 'udp'
	option sniffing_enabled 'true'
	list sniffing_destoverride 'http'
	list sniffing_destoverride 'tls'
	option sniffing_routeonly 'true'
	option sockopt_tproxy 'tproxy'
	option stream_network 'tcp'
	option stream_security 'none'
	option tcp_type 'none'

config inbound_service
	option tag 'http_none'
	option port '1083'
	option protocol 'http'
	option http_timeout '0'
	option http_auth 'password'
	list http_user 'david'
	list http_user 'jack'
	option http_allocatransparent 'false'
	option sniffing_enabled 'true'
	list sniffing_destoverride 'http'
	list sniffing_destoverride 'tls'
	option sniffing_routeonly 'true'
	option sockopt_tproxy 'off'
	option stream_network 'tcp'
	option stream_security 'none'
	option tcp_type 'none'

config inbound_service
	option tag 'socks_redirect'
	option port '12344'
	option protocol 'socks'
	option socks_auth 'password'
	list socks_user 'jack'
	list socks_user 'tommy'
	option socks_udp 'true'
	option socks_ip '127.0.0.1'
	option sniffing_enabled 'true'
	list sniffing_destoverride 'http'
	list sniffing_destoverride 'tls'
	option sniffing_routeonly 'true'
	option sockopt_tproxy 'redirect'
	option stream_network 'tcp'
	option stream_security 'none'
	option tcp_type 'none'
	list fallback 'vless_12322'
	list fallback 'ss_1443'

config inbound_service
	option tag 'vless_reality_vision'
	option port '12322'
	option protocol 'vless'
	list vless_user 'jack'
	list vless_user 'tommy'
	option vless_flow 'xtls-rprx-vision'
	option stream_security 'reality'
	option reality_show 'false'
	option reality_dest 'www.debian.org:443'
	option reality_xver '0'
	option reality_maxtimediff '66000'
	list reality_servername 'www.debian.org'
	option reality_privatekey 'gCIc_mBwCYOSYKPcOhLpzPuLGv1rFVWOYzr1hBRp73Q'
	list reality_shortid '5311e7ff2c804acb'
	list reality_shortid '2a956af24f282f81'
	option stream_network 'tcp'
	option tcp_type 'none'

config outbound_server
	option tag 'shadowsocks'
	option address 'example.com'
	option port '1443'
	option protocol 'shadowsocks'
	option ss_method 'aes-256-gcm'
	option ss_password 'shadowsockspassword'
	option stream_network 'tcp'
	option tcp_type 'none'
	list fallback 'http_8080'

config outbound_server
	option tag 'socks_tls'
	option address 'example.com'
	option port '2443'
	option protocol 'socks'
	option socks_user 'david'
	option socks_pass 'password'
	option stream_network 'tcp'
	option tcp_type 'none'
	option stream_security 'tls'
	option tls_servername 'example.com'
	list tls_alpn 'http/1.1'

config outbound_server
	option tag 'vless_tls_vision'
	option address 'example.com'
	option port '443'
	option protocol 'vless'
	option vless_id '9e80d6c1-a1a3-4ef2-9296-bcd792d91d36'
	option vless_encryption 'none'
	option vless_flow 'xtls-rprx-vision'
	option stream_network 'tcp'
	option tcp_type 'none'
	option stream_security 'tls'
	option tls_servername 'example.com'
	option tls_allowinsecure 'false'
	option tls_fingerprint 'chrome'
	list tls_alpn 'h2'
	list tls_alpn 'http/1.1'

config outbound_server
	option tag 'vless_reality_vision'
	option address 'example.com'
	option port '2443'
	option protocol 'vless'
	option vless_id '9e80d6c1-a1a3-4ef2-9296-bcd792d91d36'
	option vless_encryption 'none'
	option vless_flow 'xtls-rprx-vision'
	option stream_network 'tcp'
	option header 'none'
	option stream_security 'reality'
	option reality_show 'false'
	option reality_servername 'www.debian.org'
	option reality_fingerprint 'chrome'
	option reality_shortid '5311e7ff2c804acb'
	option reality_publickey 'E7fFQJ4YAiEkjP6MFTXbf7yY_fiKrnFOMzEshrsHJm4'
	option reality_spiderx '/'

config outbound_server
	option tag 'vmess_ws_tls'
	option address 'example.com'
	option port '443'
	option protocol 'vmess'
	option vmess_id '9e80d6c1-a1a3-4ef2-9296-bcd792d91d36'
	option vmess_alterid '0'
	option vmess_security 'none'
	option stream_network 'ws'
	option ws_path '/vmessws'
	option ws_host 'example.com'
	option stream_security 'tls'
	option tls_servername 'example.com'
	option tls_allowinsecure 'false'
	option tls_fingerprint 'chrome'
	list tls_alpn 'h2'
	list tls_alpn 'http/1.1'

config dns_server
	option tag 'google_8888'
	option server_address '8.8.8.8'
	option server_port '53'
	list server_domain 'geosite:google'
	list server_domain 'geosite:facebook'
	list server_domain 'geosite:twitter'
	list server_domain 'geosite:instagram'

config dns_server
	option tag 'direct_1111'
	option server_address '1.1.1.1'
	option server_port '53'
	list server_domain 'geosite:microsoft'

config routing_rule
	option tag 'dns_direct_1111'
	list rule_ip '1.1.1.1'
	option rule_outboundtag 'direct'

config routing_rule
	option tag 'dns_fwd_8888'
	list rule_ip '8.8.8.8'
	list rule_ip '2001:4860:4860::8888'
	option rule_outboundtag 'vless_tls_vision'

config routing_rule
	option tag 'dns_hijack'
	list rule_port '53'
	option rule_outboundtag 'dns'

config routing_rule
	option tag 'blocked'
	list rule_domain 'geosite:category-ads'
	option rule_outboundtag 'blackhole'

config routing_rule
	option tag 'forwarded'
	list rule_domain 'geosite:google'
	list rule_domain 'geosite:twitter'
	list rule_domain 'geosite:facebook'
	list rule_domain 'geosite:instagram'
	option rule_outboundtag 'vless_tls_vision'
	option dns_server 'google_8888'

config routing_rule
	option tag 'direct_ip'
	list rule_ip 'geoip:pl'
	option rule_outboundtag 'direct'

config routing_rule
	option tag 'direct_domain'
	list rule_domain 'geosite:microsoft'
	option rule_outboundtag 'direct'
	option dns_server 'direct_1111'

config user
	option name 'david'
	option password '7a0af192-1082-42e6-9b97-1e71c0903306'
	option email 'david@example.com'
	option level '0'

config user
	option name 'jack'
	option password 'a63ee619-a429-47b2-93a6-92d65e53d91c'
	option email 'jack@example.com'
	option level '0'

config user
	option name 'tommy'
	option password '50d05062-5d1e-42a8-9366-471f4a5f8904'
	option email 'tommy@example.com'
	option level '0'

config fallback
	option tag 'http_8080'
	option dest '8080'
	option xver '0'

config fallback
	option tag 'vless_12322'
	option dest '12322'
	option alpn 'h2'
	option xver '1'

config fallback
	option tag 'ss_1443'
	option dest '1443'
