Añadido Hysteria2

2025-09-02 23:37:15 +02:00
parent 553349a7c9
commit ea37a86dbc
3 changed files with 183 additions and 0 deletions
@@ -0,0 +1,6 @@
+# Recuerda, solo se genera para mantener los certificados vigentes y no usar los autofirmados
+# Hysteria2
+hysteria.ejemplo.org {
+	respond "OK" 200
+}
+
@@ -0,0 +1,95 @@
+{
+  "listen": ":45443",
+  "tls": {
+    "cert": "/etc/hysteria/ca.crt",
+    "key": "/etc/hysteria/ca.key",
+    "insecure": true,
+    "pinSHA256": "REDACTED_SHA256"
+  },
+  "obfs": {
+    "type": "salamander",
+    "salamander": {
+      "password": "REDACTED"
+    }
+  },
+  "auth": {
+    "type": "http",
+    "http": {
+      "url": "http://127.0.0.1:28262/auth"
+    }
+  },
+  "quic": {
+    "initStreamReceiveWindow": 8388608,
+    "maxStreamReceiveWindow": 8388608,
+    "initConnReceiveWindow": 20971520,
+    "maxConnReceiveWindow": 20971520,
+    "maxIdleTimeout": "20s",
+    "maxIncomingStreams": 1024,
+    "disablePathMTUDiscovery": false
+  },
+  "bandwidth": {
+    "up": "200 mbps",
+    "down": "200 mbps"
+  },
+  "ignoreClientBandwidth": false,
+  "disableUDP": false,
+  "speedTest": false,
+  "udpIdleTimeout": "20s",
+  "resolver": {
+    "type": "tls",
+    "tcp": {
+      "addr": "8.8.8.8:53",
+      "timeout": "4s"
+    },
+    "udp": {
+      "addr": "8.8.4.4:53",
+      "timeout": "4s"
+    },
+    "tls": {
+      "addr": "1.1.1.1:853",
+      "timeout": "10s",
+      "sni": "cloudflare-dns.com",
+      "insecure": false
+    },
+    "https": {
+      "addr": "1.1.1.1:443",
+      "timeout": "10s",
+      "sni": "cloudflare-dns.com",
+      "insecure": false
+    }
+  },
+  "outbounds": [
+    {
+      "name": "v4",
+      "type": "direct",
+      "direct": {
+        "mode": 4,
+        "bindDevice": "eth0"
+      }
+    }
+  ],
+  "acl": {
+    "inline": [
+      "reject(geosite:ir)",
+      "reject(geoip:ir)",
+      "reject(geoip:private)",
+      "reject(geoip:phishing)",
+      "reject(geoip:malware)",
+      "reject(geosite:category-ads-all)",
+      "reject(geosite:google@ads)",
+      "reject(geosite:malware)",
+      "reject(geosite:phishing)",
+      "reject(geosite:cryptominers)",
+      "reject(geosite:speedtest)",
+      "reject(10.0.0.0/8)",
+      "reject(192.10.0.0/16)",
+      "reject(fc00::/7)"
+    ],
+    "geoip": "/etc/hysteria/geoip.dat",
+    "geosite": "/etc/hysteria/geosite.dat"
+  },
+  "trafficStats": {
+    "listen": "127.0.0.1:25413",
+    "secret": "REDACTED_UUID"
+  }
+}
@@ -0,0 +1,82 @@
+{
+  "listen": ":45443",
+  "tls": {
+    "cert": "/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/hysteria.ejemplo.org/hysteria.ejemplo.org.crt",
+    "key": "/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/hysteria.ejemplo.org/hysteria.ejemplo.org.key",
+    "insecure": false
+  },
+  "obfs": {
+    "type": "salamander",
+    "salamander": {
+      "password": "REDACTED"
+    }
+  },
+  "auth": {
+    "type": "http",
+    "http": {
+      "url": "http://127.0.0.1:28262/auth"
+    }
+  },
+  "quic": {
+    "initStreamReceiveWindow": 8388608,
+    "maxStreamReceiveWindow": 8388608,
+    "initConnReceiveWindow": 20971520,
+    "maxConnReceiveWindow": 20971520,
+    "maxIdleTimeout": "20s",
+    "maxIncomingStreams": 1024,
+    "disablePathMTUDiscovery": false
+  },
+  "bandwidth": {
+    "up": "200 mbps",
+    "down": "200 mbps"
+  },
+  "ignoreClientBandwidth": false,
+  "disableUDP": false,
+  "speedTest": false,
+  "udpIdleTimeout": "20s",
+  "resolver": {
+    "type": "udp",
+    "udp": {
+      "addr": "192.10.2.53:53",
+      "timeout": "4s"
+    },
+    "tcp": {
+      "addr": "192.10.2.54:53",
+      "timeout": "4s"
+    }
+  },
+  "outbounds": [
+    {
+      "name": "v4",
+      "type": "direct",
+      "direct": {
+        "mode": 4,
+        "bindDevice": "eth0"
+      }
+    }
+  ],
+  "acl": {
+    "inline": [
+      "reject(geosite:ir)",
+      "reject(geoip:ir)",
+      "reject(geoip:private)",
+      "reject(geoip:phishing)",
+      "reject(geoip:malware)",
+      "reject(geosite:category-ads-all)",
+      "reject(geosite:google@ads)",
+      "reject(geosite:malware)",
+      "reject(geosite:phishing)",
+      "reject(geosite:cryptominers)",
+      "reject(geosite:speedtest)",
+      "reject(10.0.0.0/8)",
+      "reject(192.10.0.0/16)",
+      "reject(fc00::/7)"
+    ],
+    "geoip": "/etc/hysteria/geoip.dat",
+    "geosite": "/etc/hysteria/geosite.dat"
+  },
+  "trafficStats": {
+    "listen": "127.0.0.1:25413",
+    "secret": "REDACTED_UUID"
+  }
+}