shrimp.conf

{
  "listenAddrs": ["[::]:443"],
  "plaintextAddr": "127.0.0.1:3128",
  "lockdownMode": true,
  "ipv6Interface": "wg0",
  "dns64Server": "2606:4700:4700::64",
  "credentialsFile": "/etc/shrimp/passwd",
  "debugMode": true,
  "certFile": "/etc/letsencrypt/live/proxy.example.com/fullchain.pem",
  "keyFile": "/etc/letsencrypt/live/proxy.example.com/privkey.pem",
  "ipv4Translator": "visibleip.com",
  "dnsCacheCapacity": 100,
  "dnsTTL": 300,
  "allowedHosts": [".*"],
  "disallowedHosts": [
    "^localhost$",
    "^127\\.0\\.0\\.1$",
    "^10\\.",
    "^172\\.(1[6-9]|2[0-9]|3[0-1])\\.",
    "^192\\.168\\."
  ]
}