{ server-domain, port, dest, privateKey, shortId, spiderX, sni }:

{
	log.loglevel = "warning";
	dns = {
		servers = [ "1.1.1.1" ];
		queryStrategy = "UseIPv4";
	};
	routing = {
		rules = [
			{
				ip = [ "geoip:private" ];
				outboundTag = "BLOCK";
				type = "field";
			}
		];
	};
	inbounds = [
		{
			tag = "VLESS TCP REALITY";
			listen = "0.0.0.0";
			port = port;
			protocol = "vless";
			settings = {
				clients = [];
				decryption = "none";
			};
			streamSettings = {
				network = "tcp";
				tcpSettings = {};
				security = "reality";
				realitySettings = {
					show = false;
					dest = dest;
					xver = 0;
					serverNames = [
						sni
					];
					privateKey = privateKey;
					SpiderX = spiderX;
					shortIds = [
						shortId
					];
				};
			};
			sniffing = {
        		enabled = true;
        		destOverride = [ "http" "tls" "quic" ];
			};
		}
	];
	outbounds = [
		{
			protocol = "freedom";
			tag = "DIRECT";
		}
		{
			protocol = "blackhole";
			tag = "BLOCK";
		}
	];
}