{ server-domain, port, dest, privateKey, shortId, spiderX, sni }:

{
	log.loglevel = "warning";
	dns = {
		servers = [ "1.1.1.1" ];
		queryStrategy = "UseIPv4";
	};
	routing = {
		rules = [
			{
				ip = [ "geoip:private" ];
				outboundTag = "BLOCK";
				type = "field";
			}
		];
	};
	inbounds = [
		{
			tag = "VMESS WS Header NoTLS";
			listen = "0.0.0.0";
			port = 1080;
			protocol = "vmess";
			settings = {
				clients = [];
				decryption = "none";
			};
			streamSettings = {
				network = "ws";
				wsSettings = {
					path = "/";
					headers = {
						Host = "cloudflare.com";
					};
				};
				security = "none";
			};
			sniffing = {
				enabled = true;
				destOverride = [
					"http"
					"tls"
					"quic"
				];
			};
		}
		# {
		# 	tag = "VLESS TCP REALITY";
		# 	listen = "0.0.0.0";
		# 	port = port;
		# 	protocol = "vless";
		# 	settings = {
		# 		clients = [];
		# 		decryption = "none";
		# 	};
		# 	streamSettings = {
		# 		network = "tcp";
		# 		tcpSettings = {};
		# 		security = "reality";
		# 		realitySettings = {
		# 			show = false;
		# 			dest = dest;
		# 			xver = 0;
		# 			serverNames = sni;
		# 			privateKey = privateKey;
		# 			shortIds = [
		# 				shortId
		# 			];
		# 		};
		# 	};
		# 	sniffing = {
		# 		enabled = true;
		# 		destOverride = [ "http" "tls" "quic" ];
		# 	};
		# }
	];
	outbounds = [
		{
			protocol = "freedom";
			tag = "DIRECT";
		}
		{
			protocol = "blackhole";
			tag = "BLOCK";
		}
	];
}