SocksPort 0.0.0.0:9050
Log notice stdout
DataDirectory /var/lib/tor
ClientOnly 1

# Pluggable transports — Snowflake (looks like WebRTC) + obfs4 (looks like random TCP)
ClientTransportPlugin snowflake exec /usr/bin/snowflake-client
ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy

UseBridges 1

# Snowflake bridge — IP/port/fingerprint are sentinels (routes via WebRTC brokers).
# Update bridge line from https://bridges.torproject.org if needed.
Bridge snowflake 192.0.2.3:80 2B280B23E1107BB62ABFC40DDCC8824814F80A72 \
  fingerprint=2B280B23E1107BB62ABFC40DDCC8824814F80A72 \
  url=https://1098762253.rsc.cdn77.org/ \
  fronts=www.cdn77.com,www.phpmyadmin.net \
  ice=stun:stun.l.google.com:19302,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478 \
  utls-imitate=hellorandomizedalpn
