xray_config.json

{
    "log": {
        "loglevel": "info"
    },
    "inbounds": [
        {
            "tag": "VMESS_INBOUND",
            "listen": "0.0.0.0",
            "port": 2053,
            "protocol": "vmess",
            "settings": {
                "clients": []
            },
            "streamSettings": {
                "network": "ws",
                "wsSettings": {
                    "path": "/"
                }
                // ,
                // "security": "tls",
                // "tlsSettings": {
                //     "serverName": "SERVER_NAME",
                //     "certificates": [
                //         {
                //             "ocspStapling": 3600,
                //             "certificateFile": "/var/lib/marzban/certs/fullchain.pem",
                //             "keyFile": "/var/lib/marzban/certs/key.pem"
                //         }
                //     ],
                //     "minVersion": "1.2",
                //     "cipherSuites": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
                // }
            }
        },
        {
            "tag": "VLESS_INBOUND",
            "listen": "0.0.0.0",
            "port": 2083,
            "protocol": "vless",
            "settings": {
                "clients": [],
                "decryption": "none"
            },
            "streamSettings": {
                "network": "ws",
                "wsSettings": {
                    "path": "/"
                }
                // ,
                // "security": "tls",
                // "tlsSettings": {
                //     "serverName": "SERVER_NAME",
                //     "certificates": [
                //         {
                //             "ocspStapling": 3600,
                //             "certificateFile": "/var/lib/marzban/certs/fullchain.pem",
                //             "keyFile": "/var/lib/marzban/certs/key.pem"
                //         }
                //     ],
                //     "minVersion": "1.2",
                //     "cipherSuites": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
                // }
            }
        },
        {
            "tag": "TROJAN_INBOUND",
            "listen": "0.0.0.0",
            "port": 2087,
            "protocol": "trojan",
            "settings": {
                "clients": []
            },
            "streamSettings": {
                "network": "ws",
                "wsSettings": {
                    "path": "/"
                }
                // ,
                // "security": "tls",
                // "tlsSettings": {
                //     "serverName": "SERVER_NAME",
                //     "certificates": [
                //         {
                //             "ocspStapling": 3600,
                //             "certificateFile": "/var/lib/marzban/certs/fullchain.pem",
                //             "keyFile": "/var/lib/marzban/certs/key.pem"
                //         }
                //     ],
                //     "minVersion": "1.2",
                //     "cipherSuites": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
                // }
            }
        },
        {
            "tag": "SHADOWSOCKS_INBOUND",
            "listen": "0.0.0.0",
            "port": 2096,
            "protocol": "shadowsocks",
            "settings": {
                "clients": [],
                "network": "tcp,udp"
            }
        }
    ],
    "outbounds": [
        {
            "protocol": "freedom",
            "settings": {},
            "tag": "DIRECT"
        },
        {
            "protocol": "blackhole",
            "settings": {},
            "tag": "BLOCK"
        }
    ],
    "routing": {
        "rules": [
            {
                "ip": [
                    "geoip:private"
                ],
                "outboundTag": "BLOCK",
                "type": "field"
            },
            {
                "domain": [
                    "localhost"
                ],
                "outboundTag": "BLOCK",
                "type": "field"
            }
        ]
    }
}