Trojan TLS TCP Inbound

{
	"type": "trojan",
	"tag": "trojan-tls-in",
	"listen": "::",
	"listen_port": 443,
	"users": [{
		"name": "bitcoinvps.cloud",
		"password": "Xa79c9adrudlqoq10afr"
	}],
	"tls": {
		"enabled": true,
		"server_name": "subdomain.example.com",
		"alpn": [
			"http/1.1"
		],
		"min_version": "1.2",
		"max_version": "1.3",
		"acme": {
			"domain": [
				"subdomain.example.com"
			],
			"data_directory": "/etc/sing-box",
			"default_server_name": "",
			"email": "singbox@example.com",
			"provider": "letsencrypt"
		}
	}
}
Code language: JSON / JSON with Comments (json)

Download “Trojan TLS over TCP” inbound to your Sing-Box server:

curl https://raw.githubusercontent.com/bitcoinvps/singbox-vpn/main/trojan-tls-tcp/server/config.json > /etc/sing-box/config.jsonCode language: Bash (bash)

Trojan TLS over TCP inbound requires a TLS certificate, so we need to create a subdomain.

The subdomain should point to your VPS server’s IP address. You can either use IPv4 or IPv6, depending on the capability of your VPS server.

Replace “subdomain.example.com” with the subdomain you created in the previous step, and replace “singbox@example.com” with the email address you want to use to obtain your certificate.

After testing a successful connection, you can customize other settings as desired. Make sure to match them with your client’s Trojan TLS over TCP outbound config.json.

Finally, you can enable singbox service.