Sergei Poljanski
b4d6852a80
The VLESS Reality proxy ran from a hand-installed binary on the temporary server. Run the upstream image instead, pinned and on the host network, with only CAP_NET_BIND_SERVICE; its config (keys and client id) is in the vault. Assisted-by: Claude:opus-5-5
5 lines
177 B
YAML
5 lines
177 B
YAML
---
|
|
# Xray VLESS Reality proxy on :443 (host network)
|
|
# renovate: datasource=docker depName=ghcr.io/xtls/xray-core
|
|
xray_version: "26.9.9"
|
|
xray_config: "{{ vault_xray_config }}"
|