# sops-encrypted; generate with scripts/gen-secrets.sh in the dpi-tunnel repo
server: 203.0.113.10
server_name: www.microsoft.com
uuid: 00000000-0000-0000-0000-000000000000
short_id: 0123456789abcdef
reality_private_key: <server only>
reality_password: <x25519 public key>
vless_decryption: <server only>
vless_encryption: mlkem768x25519plus.native.0rtt.<...>
routes: '["198.51.100.1/32"]'  # forced via tun1 even over specific wg* routes