RRRosmontis
6d204c77fb
- SS 方法 aes-256-gcm → 2022-blake3-aes-256-gcm（SIP022 抗重放探测）， PSK 为 base64(32字节) 格式；模板 config.json 同步更新 - nginx CONNECT Basic Auth 改为每节点独立密码；补充无 apache2-utils 时 用 openssl passwd -6 的替代写法；注明 htpasswd 实时读取无需 reload - 新增 2.5 节 fail2ban sshd 基线（含 systemd backend 与 LXC 注意事项） - 验证清单加 fail2ban 检查项 落实状态：jp/us SS 已升级并验证；四节点 http 独立凭据已生效并验证； fail2ban 已在 jp/us/ru/aq 全部运行（sshd jail）。
50 lines
1008 B
JSON
50 lines
1008 B
JSON
{
|
|
"log": {
|
|
"level": "info",
|
|
"timestamp": true
|
|
},
|
|
"inbounds": [
|
|
{
|
|
"type": "vless",
|
|
"tag": "vless-reality-in",
|
|
"listen": "0.0.0.0",
|
|
"listen_port": "<vless端口>",
|
|
"users": [
|
|
{
|
|
"uuid": "<VLESS_UUID>",
|
|
"flow": "xtls-rprx-vision"
|
|
}
|
|
],
|
|
"tls": {
|
|
"enabled": true,
|
|
"server_name": "<伪装SNI域名>",
|
|
"reality": {
|
|
"enabled": true,
|
|
"handshake": {
|
|
"server": "<伪装SNI域名>",
|
|
"server_port": 443
|
|
},
|
|
"private_key": "<REALITY_PRIVATE_KEY>",
|
|
"short_id": [
|
|
"<REALITY_SHORT_ID>"
|
|
]
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"type": "shadowsocks",
|
|
"tag": "ss-in",
|
|
"listen": "0.0.0.0",
|
|
"listen_port": "<ss端口>",
|
|
"method": "2022-blake3-aes-256-gcm",
|
|
"password": "<SS_PSK_BASE64_32字节>"
|
|
}
|
|
],
|
|
"outbounds": [
|
|
{
|
|
"type": "direct",
|
|
"tag": "direct"
|
|
}
|
|
]
|
|
}
|