greyproxy/greyproxy.yml at main · GreyhavenHQ/greyproxy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
# gost v3 proxy configuration with embedded greyproxy
#
# Runs both HTTP and SOCKS5 proxies with ACL logic provided
# by greyproxy's built-in Go plugins (no external server).
#
# NOTE: This is a template file. The actual gost.yaml is generated
# by entrypoint-gost.sh which adds custom hosts from PROXY_CUSTOM_HOSTS.

log:
  level: info
  format: json
  output: stdout

# greyproxy: embedded management UI + REST API + plugins
# The auther/admission/bypass/resolver names below must match
# the names referenced by services.
greyproxy:
  addr: ":43080"
  pathPrefix: /
  auther: auther-0
  admission: admission-0
  bypass: bypass-0
  resolver: resolver-0
  notifications:
    enabled: true


services:
  # HTTP/HTTPS proxy on port 3128 (backward compatible with Squid)
  - name: http-proxy
    addr: ":43051"
    handler:
      type: http
      auther: auther-0
      metadata:
        sniffing: true
        sniffing.websocket: true
    listener:
      type: tcp
    admission: admission-0
    bypass: bypass-0
    resolver: resolver-0
    hosts: hosts-0

  # SOCKS5 proxy on port 1080 (for protocols like IMAP)
  - name: socks5-proxy
    addr: ":43052"
    handler:
      type: socks5
      auther: auther-0
      metadata:
        sniffing: true
        sniffing.websocket: true
    listener:
      type: tcp
    admission: admission-0
    bypass: bypass-0
    resolver: resolver-0
    hosts: hosts-0

  # DNS proxy on port 53 (UDP + TCP)
  #
  # Upstream resolver: greyproxy auto-detects the system DNS at startup
  # (/etc/resolv.conf on Linux/macOS, registry on Windows) and injects it as
  # the forwarder. Falls back to 1.1.1.1:53 if detection fails.
  #
  # To use a specific upstream instead, add a forwarder block to either or both
  # services below and greyproxy will leave it untouched:
  #
  #   forwarder:
  #     nodes:
  #       - name: dns-upstream
  #         addr: 9.9.9.9:53
  - name: dns-proxy-udp
    addr: :43053
    handler:
      type: dns
    listener:
      type: dns
      metadata:
        mode: udp
    resolver: resolver-0

  - name: dns-proxy-tcp
    addr: :43053
    handler:
      type: dns
    listener:
      type: tcp
    resolver: resolver-0

# Static host mappings
hosts:
  - name: hosts-0
    mappings:
      - ip: 127.0.0.1
        hostname: localhost
      - ip: "::1"
        hostname: localhost