配置文件：
{
"log": {
"level": "info",
"timestamp": true
},
"dns": {
"servers": [
{
"address": "tls://8.8.8.8"
}
],
"rules": [
{
"geosite": [
"netflix", "disney"
],
"server": "netflix"
}
]
},
"inbounds": [
{
"type": "tuic",
"tag": "tuic-in",
"listen": "::",
"listen_port": 14443,
"sniff": true,
"sniff_override_destination": true,
"users": [
{
"uuid": "1589c069-f6c3-4569-8c57-84733221768b",
"password": "KJi34991##@"
}
],
"congestion_control": "bbr",
"auth_timeout": "3s",
"zero_rtt_handshake": false,
"heartbeat": "10s",
"tls": {
"enabled": true,
"alpn": ["h3"],
"certificate_path": "/certs/fullchain.pem",
"key_path": "/certs/privkey.pem"
}
}, {
"type": "vless",
"listen": "0.0.0.0",
"listen_port": 17743,
"users": [
{
"uuid": "1589c069-f6c3-4569-8c57-55976034768b",
"flow": "xtls-rprx-vision"
}
],
"tls": {
"enabled": true,
"server_name": "
itunes.apple.com",
"reality": {
"enabled": true,
"handshake": {
"server": "
itunes.apple.com",
"server_port": 443
},
"private_key": "WGrI_3px36ndD0FsikxPP6l5St-j9TJce5sHW48K8EU",
"short_id": ["d632a6a1"]
}
}
}
],
"outbounds": [
{
"type": "direct",
"tag": "direct"
}
]
}
里面 fullchain.pem, privkey.pem 是用 certbot 申请的免费证书。