listen: :8443

realm:
  stunServers:
    - stun1.example.com:3478
    - stun2.example.com:3478
  stunTimeout: 6s
  punchTimeout: 12s
  heartbeatInterval: 25s
  insecure: true
  ipMode: v6
  portMapping:
    enabled: true
    timeout: 3s
    lifetime: 2h

obfs:
  type: salamander
  salamander:
    password: cry_me_a_r1ver
  gecko:
    password: g3ck0_in_the_wall
    minPacketSize: 100
    maxPacketSize: 1200

tls:
  cert: some.crt
  key: some.key
  sniGuard: strict
  clientCA: some_ca.crt

ech:
  keyPath: some_ech.pem

acme:
  domains:
    - sub1.example.com
    - sub2.example.com
  email: haha@cringe.net
  ca: zero
  listenHost: 127.0.0.9
  dir: random_dir
  type: dns
  http:
    altPort: 8888
  tls:
    altPort: 44333
  dns:
    name: gomommy
    config:
      key1: value1
      key2: value2
  disableHTTP: true
  disableTLSALPN: true
  altHTTPPort: 8080
  altTLSALPNPort: 4433

quic:
  initStreamReceiveWindow: 77881
  maxStreamReceiveWindow: 77882
  initConnReceiveWindow: 77883
  maxConnReceiveWindow: 77884
  maxIdleTimeout: 999s
  maxIncomingStreams: 256
  disablePathMTUDiscovery: true

congestion:
  type: reno
  bbrProfile: aggressive

bandwidth:
  up: 500 mbps
  down: 100 mbps
  disableLossCompensation: true

ignoreClientBandwidth: true

speedTest: true

disableUDP: true
udpIdleTimeout: 120s

auth:
  type: password
  password: goofy_ahh_password
  userpass:
    yolo: swag
    lol: kek
    foo: bar
  http:
    url: http://127.0.0.1:5000/auth
    insecure: true
  command: /etc/some_command

resolver:
  type: udp
  tcp:
    addr: 123.123.123.123:5353
    timeout: 4s
  udp:
    addr: 4.6.8.0:53
    timeout: 2s
  tls:
    addr: dot.yolo.com:8853
    timeout: 10s
    sni: server1.yolo.net
    insecure: true
  https:
    addr: cringe.ahh.cc
    timeout: 5s
    sni: real.stuff.net
    insecure: true

sniff:
  enable: true
  timeout: 1s
  rewriteDomain: true
  tcpPorts: 80,443,1000-2000
  udpPorts: 443

acl:
  file: chnroute.txt
  inline:
    - lmao(ok)
    - kek(cringe,boba,tea)
  geoip: some.dat
  geosite: some_site.dat
  geoUpdateInterval: 168h

outbounds:
  - name: goodstuff
    type: direct
    direct:
      mode: 64
      bindIPv4: 2.4.6.8
      bindIPv6: 0:0:0:0:0:ffff:0204:0608
      bindDevice: eth233
      fastOpen: true
  - name: badstuff
    type: socks5
    socks5:
      addr: shady.proxy.ru:1080
      username: hackerman
      password: Elliot Alderson
  - name: weirdstuff
    type: http
    http:
      url: https://eyy.lmao:4443/goofy
      insecure: true

trafficStats:
  listen: :9999
  secret: its_me_mario

masquerade:
  type: proxy
  file:
    dir: /www/masq
  proxy:
    url: https://some.site.net
    rewriteHost: true
    xForwarded: true
    insecure: true
  string:
    content: aint nothin here
    headers:
      content-type: text/plain
      custom-haha: lol
    statusCode: 418
  listenHTTP: :80
  listenHTTPS: :443
  forceHTTPS: true
