From 7e78e300fd43dbb265bc4ebbc965645342051010 Mon Sep 17 00:00:00 2001
From: oqyude <oqyude@gmail.com>
Date: Sun, 30 Nov 2025 13:41:09 +0300
Subject: [PATCH] testi

---
 modules/vds/xray.nix | 76 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 76 insertions(+)

diff --git a/modules/vds/xray.nix b/modules/vds/xray.nix
index 1e1b20c..756f8ff 100644
--- a/modules/vds/xray.nix
+++ b/modules/vds/xray.nix
@@ -46,6 +46,82 @@ let
           ];
         };
       }
+      {
+        port = 9443;
+        protocol = "vless";
+        settings = {
+          clients = [
+            {
+              id = builtins.readFile config.sops.secrets.xray_x-uuid.path;
+              flow = "";
+              level = 0;
+              email = "552@552.com";
+            }
+          ];
+          decryption = "none";
+          fallbacks = [
+            {
+              dest = "cloudflare.com:443";
+            }
+            {
+              dest = "@xhttp";
+            }
+          ];
+        };
+        streamSettings = {
+          fingerprint = "chrome";
+          network = "raw";
+          security = "reality";
+          realitySettings = {
+            show = false;
+            dest = "cloudflare.com:443";
+            xver = 0;
+            serverNames = [
+              "cloudflare.com"
+            ];
+            privateKey = builtins.readFile config.sops.secrets.xray_x-private-key.path;
+            shortIds = [
+              "0a381e1fa219"
+              "be0ce04754dc"
+              "41beec74f4bc"
+            ];
+          };
+        };
+        sniffing = {
+          enabled = true;
+          routeOnly = true;
+          destOverride = [
+            "http"
+            "tls"
+            "quic"
+          ];
+        };
+      }
+      {
+        listen = "@xhttp";
+        protocol = "vless";
+        settings = {
+          clients = [
+            {
+              id = builtins.readFile config.sops.secrets.xray_x-uuid.path;
+              email = "552@552.com";
+            }
+          ];
+        };
+        streamSettings = {
+          network = "xhttp";
+          xhttpSettings.path = "/";
+        };
+        sniffing = {
+          enabled = true;
+          routeOnly = true;
+          destOverride = [
+            "http"
+            "tls"
+            "quic"
+          ];
+        };
+      }
     ];
     outbounds = [
       {