From d9089dc6f1d52e6cd1276310e32ddb074548344a Mon Sep 17 00:00:00 2001
From: xqzr <34030394+xqzr@users.noreply.github.com>
Date: Mon, 29 Aug 2022 23:17:11 +0800
Subject: [PATCH] add VLESS-WSS-Nginx

---
 VLESS+WSS+Nginx/client.json | 66 +++++++++++++++++++++++++++++++++++++
 VLESS+WSS+Nginx/nginx.conf  | 27 +++++++++++++++
 VLESS+WSS+Nginx/server.json | 49 +++++++++++++++++++++++++++
 3 files changed, 142 insertions(+)
 create mode 100644 VLESS+WSS+Nginx/client.json
 create mode 100644 VLESS+WSS+Nginx/nginx.conf
 create mode 100644 VLESS+WSS+Nginx/server.json

diff --git a/VLESS+WSS+Nginx/client.json b/VLESS+WSS+Nginx/client.json
new file mode 100644
index 0000000..992f70d
--- /dev/null
+++ b/VLESS+WSS+Nginx/client.json
@@ -0,0 +1,66 @@
+{
+  "log": {},
+  "inbounds": [
+    {
+      "port": "1080",
+      "protocol": "socks",
+      "settings": {
+        "auth": "noauth",
+        "udp": true
+      }
+    },
+    {
+      "port": "1081",
+      "protocol": "http",
+      "settings": {}
+    }
+  ],
+  "outbounds": [
+    {
+      "protocol": "vless",
+      "settings": {
+        "vnext": [
+          {
+            "address": "xx.com",
+            "port": 443,
+            "users": [
+              {
+                "id": "", //填写你的 UUID
+                "encryption": "none"
+              }
+            ]
+          }
+        ]
+      },
+      "streamSettings": {
+        "network": "ws",
+        "security": "tls",
+        "wsSettings": {
+          "path": "?ed=2048" //?ed=2048 前面填写你的 path
+        }
+      }
+    },
+    {
+      "tag": "direct",
+      "protocol": "freedom",
+      "settings": {}
+    },
+    {
+      "tag": "blocked",
+      "protocol": "blackhole",
+      "settings": {}
+    }
+  ],
+  "routing": {
+    "domainStrategy": "IPOnDemand",
+    "rules": [
+      {
+        "type": "field",
+        "ip": [
+          "geoip:private"
+        ],
+        "outboundTag": "direct"
+      }
+    ]
+  }
+}
diff --git a/VLESS+WSS+Nginx/nginx.conf b/VLESS+WSS+Nginx/nginx.conf
new file mode 100644
index 0000000..8ac91f8
--- /dev/null
+++ b/VLESS+WSS+Nginx/nginx.conf
@@ -0,0 +1,27 @@
+server {
+	listen 443 ssl http2;
+	server_name example.com;
+
+	index index.html;
+	root /var/www/html;
+
+	ssl_certificate /path/to/example.cer;
+	ssl_certificate_key /path/to/example.key;
+	ssl_protocols TLSv1.2 TLSv1.3;
+	ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+	
+	# 在 location 后填写 /你的 path
+	location /你的 path {
+		if ($http_upgrade != "websocket") {
+			return 404;
+		}
+        proxy_pass http://unix:/dev/shm/Xray-VLESS-WSS-Nginx.socket;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_read_timeout 52w;
+    }
+}
\ No newline at end of file
diff --git a/VLESS+WSS+Nginx/server.json b/VLESS+WSS+Nginx/server.json
new file mode 100644
index 0000000..7a2f7ec
--- /dev/null
+++ b/VLESS+WSS+Nginx/server.json
@@ -0,0 +1,49 @@
+{
+  "log": {
+    "loglevel": "warning"
+  },
+  "inbounds": [
+    {
+      "listen": "/dev/shm/Xray-VLESS-WSS-Nginx.socket,0666",
+      "protocol": "vless",
+      "settings": {
+        "clients": [
+          {
+            "id": "" // 填写你的 UUID
+          }
+        ],
+        "decryption": "none"
+      },
+      "streamSettings": {
+        "network": "ws",
+        "wsSettings": {
+          "path": "" // 填写你的 path
+        }
+      }
+    }
+  ],
+  "outbounds": [
+    {
+      "tag": "direct",
+      "protocol": "freedom",
+      "settings": {}
+    },
+    {
+      "tag": "blocked",
+      "protocol": "blackhole",
+      "settings": {}
+    }
+  ],
+  "routing": {
+    "domainStrategy": "AsIs",
+    "rules": [
+      {
+        "type": "field",
+        "ip": [
+          "geoip:private"
+        ],
+        "outboundTag": "blocked"
+      }
+    ]
+  }
+}