Files
darkproxy/3proxy/first-instanse.cfg
auto-ci bde8a27cde
Configuration validation / lint (push) Has been cancelled
Configuration validation / smoke (push) Has been cancelled
hardening: secrets, localhost binds, and stronger 3proxy auth
2026-03-01 22:06:25 -05:00

47 lines
1.3 KiB
INI

# regular 3proxy configuration
fakeresolve
flush
auth strong
users $/run/secrets/PROXY_USERS
admin -p8161 -a127.0.0.1
# strict required by 3proxy-eagle log lines
log
logformat " type=%N destination=%n to=%O from=%I"
# 3proxy-eagle black list format
{{vk.com,ok.ru,mail.ru,gosuslugi.ru,127.0.0.1}}
# regular 3proxy configuration again
# expose a lightweight status socket for Prometheus scraping
# the exporter will connect here and convert counters to metrics
monitor -p6800
## i2p sites
allow * * *.i2p
#parent 1000 http 127.0.0.1 4444
parent 1000 socks5+ 10.5.0.2 4447
## yggdrasil (127.0.0.1 1085 is second instanse)
allow * * 200::/7
parent 1000 socks5+ 127.0.0.1 1085
## ygg domains resolving by alfis
allow * * *.ygg
parent 1000 socks5+ 127.0.0.1 1085
## meshnames domains resolving by meshnamed
allow * * *.meshname
parent 1000 socks5+ 127.0.0.1 1085
allow * * *.meship
parent 1000 socks5+ 127.0.0.1 1085
## onion sites
allow * * *.onion
parent 1000 socks5+ 10.5.0.7 9050
## clearnet via another proxy or change to tor (9050)
allow *
parent 1000 socks5+ 10.5.0.7 9050
socks -olSO_REUSEADDR,SO_REUSEPORT -ocTCP_TIMESTAMPS,TCP_NODELAY -osTCP_NODELAY -46 -i0.0.0.0 -p1080
proxy -olSO_REUSEADDR,SO_REUSEPORT -ocTCP_TIMESTAMPS,TCP_NODELAY -osTCP_NODELAY -46 -a1 -i0.0.0.0 -p3128