xhttp + reality

config/client.json

@@ -18,7 +18,7 @@
       "tag": "proxy",
       "protocol": "vless",
       "settings": {
-        "address": "nginx",
+        "address": "xray-server",
         "port": 443,
         "id": "bc95a789-4dcb-42ae-8d01-ca1dc41d9a33",
         "encryption": "none",
@@ -30,10 +30,13 @@
           "mode": "auto",
           "path": "/trapdoor"
         },
-        "security": "tls",
+        "security": "reality",
-        "tlsSettings": {
+        "realitySettings": {
           "serverName": "nginx",
-          "allowInsecure": true
+          "publicKey": "Cdc5-NYobJrn-aubIH4rCdV8_JuMvb29gEh39jR7MmI",
+          "shortId": "01",
+          "spiderX": "/fhtdjgu",
+          "fingerprint": "ios"
         }
       }
     },

config/server.json

@@ -5,7 +5,7 @@
   "inbounds": [
     {
       "listen": "0.0.0.0",
-      "port": 8080,
+      "port": 443,
       "protocol": "vless",
       "settings": {
         "clients": [
@@ -23,7 +23,17 @@
           "mode": "auto",
           "path": "/trapdoor"
         },
-        "security": "none"
+        "security": "reality",
+        "realitySettings": {
+          "target": "nginx:443",
+          "serverNames": [
+            "nginx"
+          ],
+          "privateKey": "6ATHL0mR5r1oKUwPxcAifxGH9yLSNP-8bbY6QOL643I",
+          "shortIds": [
+            "01"
+          ]
+        }
       }
     }
   ],

docker-compose.yml

@@ -29,6 +29,8 @@ services:
     volumes:
       - ./config/server.json:/etc/xray/config.json:ro
     command: run -c /etc/xray/config.json
+    ports:
+      - 127.0.0.1:1443:443
 
   xray-client:
     image: ghcr.io/xtls/xray-core:latest