wireguard_proxied_server.yaml

使用前请修改地址、凭据、证书路径和其他部署相关的值。这是完整的源文件，但不保证未经修改即可在你的机器上运行。请阅读文件中的注释了解前置条件，然后对修改后的文件运行 shoes check。

# Demonstration keys and credentials only. Replace them and both remote addresses.
- client_group: relay
  client_proxies:
    - address: "relay.example:443"
      protocol:
        type: tls
        protocol:
          type: vless
          user_id: "b85798ef-e9dc-46a4-9a87-8da4499d36d0"
          udp_enabled: true

# No local UDP listener: keepalive establishes the proxy's return mapping.
- protocol:
    type: wireguard
    wireguard_name: proxied-gateway
    private_key: "KSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSk="
    addresses: ["10.77.0.1/32", "fd77::1/128"]
    mtu: 1280
    peer_client_chain: relay
    peers:
      - public_key: "B6r/Pp/BZydVRPTDpqF82Dfy7G54zYpXsePfs8wDWnY="
        endpoint: "peer.example:51820"
        allowed_ips: ["10.77.0.2/32", "fd77::2/128"]
        persistent_keepalive: 25
  rules:
    - masks: ["192.168.10.0/24"]
      action: allow

查看此修订版本的源文件