wireguard_outer_chain.yaml

All examples

Change addresses, credentials, certificate paths, and other deployment-specific values before use. This is a complete source file, not a guarantee it can run unchanged on your machine. Read its comments for prerequisites, then run shoes check with the adapted file.

# Demonstration keys and credentials only. Replace them and both remote addresses.
- client_group: outer
  client_proxies:
    - address: "relay.example:443"
      protocol:
        type: tls
        protocol:
          type: vless
          user_id: "b85798ef-e9dc-46a4-9a87-8da4499d36d0"
          udp_enabled: true

- address: "0.0.0.0:1080"
  protocol: {type: socks}
  rules:
    - masks: ["0.0.0.0/0", "::/0"]
      action: allow
      client_chain:
        - address: "vpn.example:51820"
          protocol:
            type: wireguard
            private_key: "KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKio="
            public_key: "F9firNML9eGdhhroCYjRf66PZi9dgLAFP2zHPNqx0mQ="
            addresses: ["10.77.0.2/32", "fd77::2/128"]
            allowed_ips: ["0.0.0.0/0", "::/0"]
            persistent_keepalive: 25
            mtu: 1280
            peer_client_chain: outer

View source at this revision