{
  "_comment": "Aurel VPN panel Xray configuration (pushed to every Xray node), sanitised 2026-10-26: keys, ids, addresses, ports and the destination list are placeholders; the log, sniffing, outbound and routing settings are the live ones. There is no 'access' log path, so Xray writes no per-connection log; 'warning' only records Xray's own errors. Sniffing is 'routeOnly': it is used only to match the BitTorrent block rule and is not stored.",
  "log": { "loglevel": "warning" },
  "inbounds": [
    {
      "protocol": "shadowsocks",
      "port": "<PORT>",
      "settings": { "clients": [] },
      "sniffing": { "enabled": true, "destOverride": ["http", "tls", "quic"], "routeOnly": true }
    },
    {
      "protocol": "vless",
      "port": "<PORT>",
      "settings": { "clients": [], "decryption": "none" },
      "streamSettings": {
        "network": "tcp",
        "security": "reality",
        "realitySettings": { "dest": "<COVER_SITE>:443", "serverNames": ["<COVER_SITE>"], "privateKey": "<REDACTED>", "shortIds": ["<REDACTED>"] }
      },
      "sniffing": { "enabled": true, "destOverride": ["http", "tls", "quic"], "routeOnly": true }
    }
  ],
  "outbounds": [
    { "protocol": "freedom", "tag": "DIRECT" },
    { "protocol": "blackhole", "tag": "BLOCK" }
  ],
  "routing": {
    "rules": [
      { "type": "field", "ip": ["<1 RANGE>"], "outboundTag": "BLOCK" },
      { "type": "field", "ip": ["<38 RANGES>"], "port": "<PORTS>", "outboundTag": "BLOCK" },
      { "type": "field", "protocol": ["bittorrent"], "outboundTag": "BLOCK" }
    ]
  }
}