xhttp + reality

config/client.json

@@ -1,11 +1,11 @@
 {
   "log": {
-        "loglevel": "warning"
+    "loglevel": "debug"
   },
   "inbounds": [
     {
       "listen": "0.0.0.0",
-            "port": 6543,
+      "port": 4343,
       "protocol": "socks",
       "settings": {
         "auth": "noauth",
@@ -18,29 +18,25 @@
       "tag": "proxy",
       "protocol": "vless",
       "settings": {
-                "vnext": [
+        "address": "xray-server",
-                    {
-                        "address": "nginx",
         "port": 443,
-                        "users": [
+        "id": "bc95a789-4dcb-42ae-8d01-ca1dc41d9a33",
-                            {
+        "encryption": "none",
-                                "id": "a142293d-1801-4e80-b309-ff3a5f70db8b",
+        "level": 0
-                                "encryption": "none"
-                            }
-                        ]
-                    }
-                ]
       },
       "streamSettings": {
         "network": "xhttp",
-                "security": "tls",
         "xhttpSettings": {
-                    "mode": "stream-one",
+          "mode": "auto",
           "path": "/trapdoor"
         },
-                "tlsSettings": {
+        "security": "reality",
-                    "serverName": "localhost",
+        "realitySettings": {
-                    "allowInsecure": true
+          "serverName": "nginx",
+          "publicKey": "Cdc5-NYobJrn-aubIH4rCdV8_JuMvb29gEh39jR7MmI",
+          "shortId": "01",
+          "spiderX": "/fhtdjgu",
+          "fingerprint": "ios"
         }
       }
     },
@@ -50,7 +46,7 @@
     }
   ],
   "routing": {
-        "domainStrategy": "IPOnDemand",
+    "domainStrategy": "IPIfNonMatch",
     "rules": [
       {
         "ip": [

config/nginx.conf

@@ -1,7 +1,10 @@
 server {
     listen 443 ssl;
     listen [::]:443 ssl;
-    server_name localhost;
+    server_name nginx;
+    http2 on;
+    
+    
 
     ssl_certificate /etc/nginx/ssl/cert.pem;
     ssl_certificate_key /etc/nginx/ssl/key.pem;

config/server.json

@@ -1,16 +1,18 @@
 {
   "log": {
-        "loglevel": "warning"
+    "loglevel": "debug"
   },
   "inbounds": [
     {
       "listen": "0.0.0.0",
-            "port": 8080,
+      "port": 443,
       "protocol": "vless",
       "settings": {
         "clients": [
           {
-                        "id": "a142293d-1801-4e80-b309-ff3a5f70db8b"
+            "id": "bc95a789-4dcb-42ae-8d01-ca1dc41d9a33",
+            "level": 0,
+            "email": "oggioni.walter@gmail.com"
           }
         ],
         "decryption": "none"
@@ -18,8 +20,19 @@
       "streamSettings": {
         "network": "xhttp",
         "xhttpSettings": {
-                    "mode": "stream-one",
+          "mode": "auto",
           "path": "/trapdoor"
+        },
+        "security": "reality",
+        "realitySettings": {
+          "target": "nginx:443",
+          "serverNames": [
+            "nginx"
+          ],
+          "privateKey": "6ATHL0mR5r1oKUwPxcAifxGH9yLSNP-8bbY6QOL643I",
+          "shortIds": [
+            "01"
+          ]
         }
       }
     }

docker-compose.yml

@@ -9,7 +9,7 @@ services:
         openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
           -keyout /etc/nginx/ssl/key.pem \
           -out /etc/nginx/ssl/cert.pem \
-          -subj "/CN=localhost" &&
+          -subj "/CN=nginx" &&
         chmod 644 /etc/nginx/ssl/cert.pem /etc/nginx/ssl/key.pem
       '
 
@@ -29,6 +29,8 @@ services:
     volumes:
       - ./config/server.json:/etc/xray/config.json:ro
     command: run -c /etc/xray/config.json
+    ports:
+      - 127.0.0.1:1443:443
 
   xray-client:
     image: ghcr.io/xtls/xray-core:latest
@@ -37,7 +39,7 @@ services:
     volumes:
       - ./config/client.json:/etc/xray/config.json:ro
     ports:
-      - "6543:6543"
+      - 127.0.0.1:4343:4343
     command: run -c /etc/xray/config.json
 
 volumes: