From 84be0f380936ad32295fc73ed88dbf1a834e5941 Mon Sep 17 00:00:00 2001
From: chika0801 <88967758+chika0801@users.noreply.github.com>
Date: Sun, 5 Mar 2023 15:04:47 +0800
Subject: [PATCH] Update config_server.json

---
 VLESS-TCP-XTLS-Vision/config_server.json | 38 +++++++++++++++++++-----
 1 file changed, 31 insertions(+), 7 deletions(-)

diff --git a/VLESS-TCP-XTLS-Vision/config_server.json b/VLESS-TCP-XTLS-Vision/config_server.json
index 6ef0bcb..2e5ef6b 100644
--- a/VLESS-TCP-XTLS-Vision/config_server.json
+++ b/VLESS-TCP-XTLS-Vision/config_server.json
@@ -16,26 +16,40 @@
     },
     "inbounds": [
         {
-            "listen": "0.0.0.0",
-            "port": 16387, // 端口
+            "listen": "0.0.0.0", // "0.0.0.0" 表示同时监听IPv4和IPv6
+            "port": 443, // 服务端监听的端口
             "protocol": "vless",
             "settings": {
                 "clients": [
                     {
-                        "id": "", // 用户ID
+                        "id": "", // 用户ID，执行 xray uuid 生成，或 1-30 字节的字符串
                         "flow": "xtls-rprx-vision"
                     }
                 ],
-                "decryption": "none"
+                "decryption": "none",
+                "fallbacks": [
+                    {
+                        "dest": "8001",
+                        "xver": 1
+                    },
+                    {
+                        "alpn": "h2",
+                        "dest": "8002",
+                        "xver": 1
+                    }
+                ]
             },
             "streamSettings": {
                 "network": "tcp",
                 "security": "tls",
                 "tlsSettings": {
+                    "rejectUnknownSni": true,
+                    "minVersion": "1.2",
                     "certificates": [
                         {
-                            "certificateFile": "/etc/ssl/private/fullchain.cer", // 证书
-                            "keyFile": "/etc/ssl/private/private.key" //私钥
+                            "ocspStapling": 3600,
+                            "certificateFile": "/etc/ssl/private/fullchain.cer", // 证书文件，建议用 fullchain，否则如在 v2rayNG 使用会报错，通常不区分扩展名
+                            "keyFile": "/etc/ssl/private/private.key" // 私钥文件
                         }
                     ]
                 }
@@ -58,5 +72,15 @@
             "protocol": "blackhole",
             "tag": "block"
         }
-    ]
+    ],
+    "policy": {
+        "levels": {
+            "0": {
+                "handshake": 2,
+                "connIdle": 120,
+                "uplinkOnly": 1,
+                "downlinkOnly": 1
+            }
+        }
+    }
 }