light-ss/config.yaml.example at main · rebase-network/light-ss · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
# Light Shadowsocks Client Configuration

# Optional: Instance name for identification in logs and API responses
name: "my-proxy"

# Shadowsocks Server Configuration
shadowsocks:
  server: "example.com:8388"          # Shadowsocks server address and port
  password: "your-strong-password"    # Server password
  cipher: "AEAD_CHACHA20_POLY1305"   # Encryption cipher
  # Supported ciphers: AEAD_CHACHA20_POLY1305, AEAD_AES_256_GCM, AEAD_AES_192_GCM, AEAD_AES_128_GCM, AEAD_XCHACHA20_POLY1305
  # Alternative formats: aes-128-gcm, aes-192-gcm, aes-256-gcm, chacha20-poly1305, chacha20-ietf-poly1305, xchacha20-poly1305
  timeout: 300                        # Connection timeout in seconds

  # Optional: Simple-obfs plugin for traffic obfuscation
  # Uncomment the lines below to enable simple-obfs
  # plugin: "simple-obfs"
  # plugin_opts:
  #   obfs: "http"                    # Obfuscation mode: http or tls
  #   obfs-host: "www.bing.com"       # Host header for obfuscation

# Local Proxy Configuration
# Unified Mode: Single port for both HTTP/HTTPS and SOCKS5 (like Clash)
proxies: "127.0.0.1:1080"

# Separate Mode: Dedicated ports for each protocol
# Comment out the line above and uncomment the lines below to use separate mode
# proxies:
#   http: "127.0.0.1:8080"           # HTTP/HTTPS proxy listen address
#   socks5: "127.0.0.1:1080"         # SOCKS5 proxy listen address
#   # Optional: SOCKS5 with authentication (user:pass@host:port)
#   # socks5: "user:pass@127.0.0.1:1080"

# Statistics Configuration
stats:
  enabled: true                       # Enable statistics collection
  interval: 60                        # Report interval in seconds

# Logging Configuration
logging:
  level: "info"                       # Log level: debug, info, warn, error
  format: "text"                      # Log format: json, text

# Management API Configuration (optional)
api:
  enabled: false                      # Enable/disable management API
  listen: "127.0.0.1:8090"           # API server listen address
  # token: "your-secret-token-here"  # Optional bearer token for authentication