heather: xray VLESS+Reality proxy on :8443

Add xray-core container (ghcr.io/xtls/xray-core) to arion compose.
VLESS + Reality + xtls-rprx-vision, masquerades as www.microsoft.com.
Config (UUID + Reality privateKey) at /var/lib/xray-secrets/config.json
(outside git, root:docker 0640). Public port 8443, not behind Caddy.
Secrets in pass iscg.dev/xray/. Client: v2RayTun / v2rayN.
This commit is contained in:
mikl 2026-07-13 03:05:48 +03:00
parent fe5c01062e
commit 6e84e26d2d

View file

@ -45,6 +45,7 @@
22067 # strelaysrv (relay) 22067 # strelaysrv (relay)
22070 # strelaysrv (status) 22070 # strelaysrv (status)
3478 # coturn TURN (tcp+udp) 3478 # coturn TURN (tcp+udp)
8443 # xray VLESS+Reality (публичный прокси)
]; ];
firewall.allowedUDPPorts = [ firewall.allowedUDPPorts = [
22000 # syncthing sync (QUIC) 22000 # syncthing sync (QUIC)