From 4f802a7175d44cc7aac3fac6416743df3ccbfff7 Mon Sep 17 00:00:00 2001
From: root <root@global-hub.svc.plus>
Date: Mon, 27 Oct 2025 02:51:24 +0800
Subject: [PATCH] update config/xray.config.template.json

---
 account/config/xray.config.template.json | 97 +++++++++++-------------
 1 file changed, 44 insertions(+), 53 deletions(-)

diff --git a/account/config/xray.config.template.json b/account/config/xray.config.template.json
index a0b302d..b3cd888 100644
--- a/account/config/xray.config.template.json
+++ b/account/config/xray.config.template.json
@@ -1,35 +1,54 @@
 {
     "log": {
-        "loglevel": "debug"
+        "loglevel": "warning"
     },
     "routing": {
         "domainStrategy": "IPIfNonMatch",
         "rules": [
-            {
-                "type": "field",
-                "domain": [
-                    "geosite:cn",
-                    "geosite:private"
-                ],
-                "outboundTag": "direct"
-            },
             {
                 "type": "field",
                 "ip": [
-                    "geoip:cn",
-                    "geoip:private"
+                    "geoip:cn"
                 ],
-                "outboundTag": "direct"
+                "outboundTag": "block"
             }
         ]
     },
     "inbounds": [
         {
-            "listen": "127.0.0.1",
-            "port": 1080,
-            "protocol": "socks",
+            "listen": "0.0.0.0",
+            "port": 1443,
+            "protocol": "vless",
             "settings": {
-                "udp": true
+                "clients": [
+		           ],
+                "decryption": "none",
+                "fallbacks": [
+                    {
+                        "dest": "8001",
+                        "xver": 1
+                    },
+                    {
+                        "alpn": "h2",
+                        "dest": "8002",
+                        "xver": 1
+                    }
+                ]
+            },
+            "streamSettings": {
+                "network": "tcp",
+                "security": "tls",
+                "tlsSettings": {
+                    "rejectUnknownSni": true,
+                    "minVersion": "1.2",
+                    "certificates": [
+                        {
+                            "ocspStapling": 3600,
+                            "certificateFile": "/etc/ssl/onwalk.net.pem",
+                            "keyFile": "/etc/ssl/onwalk.net.key"
+                        }
+                    ]
+                }
             },
             "sniffing": {
                 "enabled": true,
@@ -38,45 +57,9 @@
                     "tls"
                 ]
             }
-      },
-      {
-        "listen": "127.0.0.1",
-        "port": 1081,
-        "protocol": "http",
-        "settings": {},
-        "sniffing": {
-            "enabled": true,
-            "destOverride": [
-                "http",
-                "tls"
-            ]
         }
-      }
     ],
     "outbounds": [
-        {
-            "protocol": "vless",
-            "settings": {
-                "vnext": [
-                    {
-                        "address": "tky-connector.onwalk.net",
-                        "port": 1443,
-                        "users": [
-                        ]
-                    }
-                ]
-            },
-            "streamSettings": {
-                "network": "tcp",
-                "security": "tls",
-                "tlsSettings": {
-                    "serverName": "tky-connector.onwalk.net",
-                    "allowInsecure": false,
-                    "fingerprint": "chrome"
-                }
-            },
-            "tag": "proxy"
-        },
         {
             "protocol": "freedom",
             "tag": "direct"
@@ -85,5 +68,13 @@
             "protocol": "blackhole",
             "tag": "block"
         }
-    ]
+    ],
+    "policy": {
+        "levels": {
+            "0": {
+                "handshake": 2,
+                "connIdle": 120
+            }
+        }
+    }
 }