first commit

servers/common/xray.nix

@@ -0,0 +1,62 @@
+{ server-domain, port, dest, privateKey, shortId, spiderX }:
+
+{
+	log.loglevel = "warning";
+	dns = {
+		servers = [ "1.1.1.1" ];
+		queryStrategy = "UseIPv4";
+	};
+	routing = {
+		rules = [
+			{
+				ip = [ "geoip:private" ];
+				outboundTag = "BLOCK";
+				type = "field";
+			}
+		];
+	};
+	inbounds = [
+		{
+			tag = "VLESS TCP REALITY";
+			listen = "0.0.0.0";
+			port = port;
+			protocol = "vless";
+			settings = {
+				clients = [];
+				decryption = "none";
+			};
+			streamSettings = {
+				network = "tcp";
+				tcpSettings = {};
+				security = "reality";
+				realitySettings = {
+					show = false;
+					dest = dest;
+					xver = 0;
+					serverNames = [
+						server-domain
+					];
+					privateKey = privateKey;
+					SpiderX = spiderX;
+					shortIds = [
+						shortId
+					];
+				};
+			};
+			sniffing = {
+        		enabled = true;
+        		destOverride = [ "http" "tls" "quic" ];
+			};
+		}
+	];
+	outbounds = [
+		{
+			protocol = "freedom";
+			tag = "DIRECT";
+		}
+		{
+			protocol = "blackhole";
+			tag = "BLOCK";
+		}
+	];
+}