xhttp + reality

config/client.json

@@ -1,63 +1,59 @@
 {
-    "log": {
+  "log": {
-        "loglevel": "warning"
+    "loglevel": "debug"
-    },
+  },
-    "inbounds": [
+  "inbounds": [
-        {
+    {
-            "listen": "0.0.0.0",
+      "listen": "0.0.0.0",
-            "port": 6543,
+      "port": 4343,
-            "protocol": "socks",
+      "protocol": "socks",
-            "settings": {
+      "settings": {
-                "auth": "noauth",
+        "auth": "noauth",
-                "udp": true
+        "udp": true
-            }
+      }
-        }
-    ],
-    "outbounds": [
-        {
-            "tag": "proxy",
-            "protocol": "vless",
-            "settings": {
-                "vnext": [
-                    {
-                        "address": "nginx",
-                        "port": 443,
-                        "users": [
-                            {
-                                "id": "a142293d-1801-4e80-b309-ff3a5f70db8b",
-                                "encryption": "none"
-                            }
-                        ]
-                    }
-                ]
-            },
-            "streamSettings": {
-                "network": "xhttp",
-                "security": "tls",
-                "xhttpSettings": {
-                    "mode": "stream-one",
-                    "path": "/trapdoor"
-                },
-                "tlsSettings": {
-                    "serverName": "localhost",
-                    "allowInsecure": true
-                }
-            }
-        },
-        {
-            "tag": "direct",
-            "protocol": "freedom"
-        }
-    ],
-    "routing": {
-        "domainStrategy": "IPOnDemand",
-        "rules": [
-            {
-                "ip": [
-                    "geoip:private"
-                ],
-                "outboundTag": "direct"
-            }
-        ]
     }
-}
+  ],
+  "outbounds": [
+    {
+      "tag": "proxy",
+      "protocol": "vless",
+      "settings": {
+        "address": "xray-server",
+        "port": 443,
+        "id": "bc95a789-4dcb-42ae-8d01-ca1dc41d9a33",
+        "encryption": "none",
+        "level": 0
+      },
+      "streamSettings": {
+        "network": "xhttp",
+        "xhttpSettings": {
+          "mode": "auto",
+          "path": "/trapdoor"
+        },
+        "security": "reality",
+        "realitySettings": {
+          "serverName": "nginx",
+          "publicKey": "Cdc5-NYobJrn-aubIH4rCdV8_JuMvb29gEh39jR7MmI",
+          "shortId": "01",
+          "spiderX": "/fhtdjgu",
+          "fingerprint": "ios"
+        }
+      }
+    },
+    {
+      "tag": "direct",
+      "protocol": "freedom"
+    }
+  ],
+  "routing": {
+    "domainStrategy": "IPIfNonMatch",
+    "rules": [
+      {
+        "ip": [
+          "geoip:private"
+        ],
+        "outboundTag": "direct"
+      }
+    ]
+  }
+}

config/nginx.conf

@@ -1,7 +1,10 @@
 server {
     listen 443 ssl;
     listen [::]:443 ssl;
-    server_name localhost;
+    server_name nginx;
+    http2 on;
+    
+    
 
     ssl_certificate /etc/nginx/ssl/cert.pem;
     ssl_certificate_key /etc/nginx/ssl/key.pem;

config/server.json

@@ -1,33 +1,46 @@
 {
-    "log": {
+  "log": {
-        "loglevel": "warning"
+    "loglevel": "debug"
-    },
+  },
-    "inbounds": [
+  "inbounds": [
-        {
+    {
-            "listen": "0.0.0.0",
+      "listen": "0.0.0.0",
-            "port": 8080,
+      "port": 443,
-            "protocol": "vless",
+      "protocol": "vless",
-            "settings": {
+      "settings": {
-                "clients": [
+        "clients": [
-                    {
+          {
-                        "id": "a142293d-1801-4e80-b309-ff3a5f70db8b"
+            "id": "bc95a789-4dcb-42ae-8d01-ca1dc41d9a33",
-                    }
+            "level": 0,
-                ],
+            "email": "oggioni.walter@gmail.com"
-                "decryption": "none"
+          }
-            },
+        ],
-            "streamSettings": {
+        "decryption": "none"
-                "network": "xhttp",
+      },
-                "xhttpSettings": {
+      "streamSettings": {
-                    "mode": "stream-one",
+        "network": "xhttp",
-                    "path": "/trapdoor"
+        "xhttpSettings": {
-                }
+          "mode": "auto",
-            }
+          "path": "/trapdoor"
+        },
+        "security": "reality",
+        "realitySettings": {
+          "target": "nginx:443",
+          "serverNames": [
+            "nginx"
+          ],
+          "privateKey": "6ATHL0mR5r1oKUwPxcAifxGH9yLSNP-8bbY6QOL643I",
+          "shortIds": [
+            "01"
+          ]
         }
-    ],
+      }
-    "outbounds": [
+    }
-        {
+  ],
-            "protocol": "freedom",
+  "outbounds": [
-            "tag": "direct"
+    {
-        }
+      "protocol": "freedom",
-    ]
+      "tag": "direct"
-}
+    }
+  ]
+}

docker-compose.yml

@@ -9,7 +9,7 @@ services:
         openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
           -keyout /etc/nginx/ssl/key.pem \
           -out /etc/nginx/ssl/cert.pem \
-          -subj "/CN=localhost" &&
+          -subj "/CN=nginx" &&
         chmod 644 /etc/nginx/ssl/cert.pem /etc/nginx/ssl/key.pem
       '
 
@@ -29,6 +29,8 @@ services:
     volumes:
       - ./config/server.json:/etc/xray/config.json:ro
     command: run -c /etc/xray/config.json
+    ports:
+      - 127.0.0.1:1443:443
 
   xray-client:
     image: ghcr.io/xtls/xray-core:latest
@@ -37,7 +39,7 @@ services:
     volumes:
       - ./config/client.json:/etc/xray/config.json:ro
     ports:
-      - "6543:6543"
+      - 127.0.0.1:4343:4343
     command: run -c /etc/xray/config.json
 
 volumes: