-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathenv.example
More file actions
94 lines (84 loc) · 2.71 KB
/
Copy pathenv.example
File metadata and controls
94 lines (84 loc) · 2.71 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
########################################
# Core server settings
########################################
# Public IP or domain of your server
WG_HOST=
# WireGuard UDP port
WG_PORT=51820
# Timezone (affects logs and bot scheduling)
TZ=Europe/Moscow
########################################
# wg-easy UI auth
########################################
# Optional: plain password to protect wg-easy UI (http://<server>:51821)
# setup.sh will generate bcrypt hash into WG_EASY_PASSWORD_HASH
WG_EASY_PASSWORD=
# Optional: provide already hashed password (bcrypt). If empty and WG_EASY_PASSWORD set,
# setup.sh will generate it automatically.
WG_EASY_PASSWORD_HASH=
########################################
# WireGuard device name (usually wg0)
WG_DEVICE=wg0
WG_CONTAINER=wg-easy
########################################
# WireGuard defaults for clients
########################################
# DNS servers pushed to clients
WG_DEFAULT_DNS=1.1.1.1,1.0.0.1
# MTU for clients (helps in restrictive networks)
WG_MTU=1280
# Persistent keepalive (seconds) to keep NATs open
WG_PERSISTENT_KEEPALIVE=25
########################################
# Xray VLESS-Reality (optional)
########################################
XRAY_ENABLED=true
XRAY_PORT=443
# Reality settings (auto-generated on setup if empty)
REALITY_PRIVATE_KEY=
REALITY_PUBLIC_KEY=
REALITY_SHORT_ID=
# Domain to mimic (must be a real TLS site)
REALITY_DEST=www.cloudflare.com:443
REALITY_SNI=www.cloudflare.com
# One default user UUID (auto-generated if empty)
XRAY_UUID=
########################################
# AmneziaWG (optional)
########################################
# Enable to use AmneziaWG instead of wg-easy WireGuard
AWG_ENABLED=false
# UDP port for AmneziaWG (often 443 to bypass blocks)
AWG_PORT=443
# Jitter parameters (per Amnezia recommendations)
# Set Jc between 3..5, Jmin=40, Jmax=70; optionally S1/S2 between 2..10
AWG_JC=5
AWG_JMIN=40
AWG_JMAX=70
AWG_S1=2
AWG_S2=8
########################################
# Telegram bot
########################################
TELEGRAM_BOT_TOKEN=
# Optional: lock bot to a single chat id. If empty, first /start will store caller's chat id.
TELEGRAM_ALLOWED_CHAT_ID=
########################################
# Metrics & alerts
########################################
# How often to sample metrics (seconds)
METRICS_INTERVAL_SEC=15
# Default time range for /graph command (hours)
GRAPH_DEFAULT_HOURS=3
# Alert thresholds
ALERT_CPU_PCT=85
ALERT_MEM_PCT=85
# Alert when either IN or OUT Mbps exceeds this value
ALERT_NET_MBPS=200
# Cooldown for repeated alerts (minutes)
ALERT_COOLDOWN_MIN=10
########################################
# Speedtest
########################################
# Optional: pick a specific server id; otherwise auto
SPEEDTEST_SERVER_ID=