config_server.json

{
    "log": {
        "access": "/var/log/xray/access.log",
        "error": "/var/log/xray/error.log",
        "loglevel": "warning",
        "dnsLog": false
    },
    "dns": {
        "servers": [
            "https+local://1.1.1.1/dns-query"
        ]
    },
    "routing": {
        "domainStrategy": "Asls",
        "domainMatcher": "hybrid",
        "rules": [
            {
                "type": "field",
                "domain": [
                    "geosite:category-ads-all",
                    "geosite:cn",
                    "geosite:category-games@cn"
                ],
                "outboundTag": "block"
            },
            {
                "type": "field",
                "ip": [
                    "geoip:cn",
                    "geoip:private"
                ],
                "outboundTag": "block"
            }
        ]
    },
    "inbounds": [
        {
            "listen": "0.0.0.0",
            "port": 443,
            "protocol": "vless",
            "settings": {
                "clients": [
                    {
                        "id": "chika",
                        "flow": "xtls-rprx-direct"
                    }
                ],
                "decryption": "none",
                "fallbacks": [
                    {
                        "alpn": "",
                        "path": "",
                        "dest": "/dev/shm/http.socket",
                        "xver": 2
                    },
                    {
                        "alpn": "h2",
                        "path": "",
                        "dest": "/dev/shm/h2.socket",
                        "xver": 2
                    }
                ]
            },
            "streamSettings": {
                "network": "tcp",
                "security": "xtls",
                "xtlsSettings": {
                    "minVersion": "1.2",
                    "cipherSuites": "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
                    "preferServerCipherSuites": true,
                    "alpn": [
                        "h2",
                        "http/1.1"
                    ],
                    "certificates": [
                        {
                            "keyFile": "/etc/ssl/private/key.pem",
                            "certificateFile": "/etc/ssl/private/fullchain.pem",
                            "ocspStapling": 3600
                        }
                    ],
                    "rejectUnknownSni": true
                }
            }
        }
    ],
    "outbounds": [
        {
            "protocol": "freedom",
            "settings": {
                "domainStrategy": "UseIPv4"
            },
            "tag": "direct"
        },
        {
            "protocol": "blackhole",
            "settings": {
                "response": {
                    "type": "http"
                }
            },
            "tag": "block"
        }
    ]
}