sops: introduce sops-nix (age), ssh keys from encrypted tarball, .example secrets

2026-07-14 12:24:21 +04:00 · 2026-07-14 12:24:21 +04:00 · a7ec82579c
commit a7ec82579c
parent 8be13b680f
9 changed files with 149 additions and 7 deletions
--- a/secrets/xray-config.json.example
+++ b/secrets/xray-config.json.example
@ -0,0 +1,46 @@
+{
+  "inbounds": [
+    {
+      "port": 10808,
+      "protocol": "socks",
+      "settings": {
+        "udp": true
+      }
+    },
+    {
+      "port": 10809,
+      "protocol": "http"
+    }
+  ],
+  "outbounds": [
+    {
+      "protocol": "vless",
+      "settings": {
+        "vnext": [
+          {
+            "address": "203.0.113.1",
+            "port": 443,
+            "users": [
+              {
+                "id": "00000000-0000-0000-0000-000000000000",
+                "encryption": "mlkem768x25519plus.native.0rtt.<base64-client-key>",
+                "flow": "xtls-rprx-vision"
+              }
+            ]
+          }
+        ]
+      },
+      "streamSettings": {
+        "network": "tcp",
+        "security": "reality",
+        "realitySettings": {
+          "fingerprint": "chrome",
+          "serverName": "www.example.com",
+          "publicKey": "<reality-public-key>",
+          "shortId": "<short-id>",
+          "spiderX": "/"
+        }
+      }
+    }
+  ]
+}