# Advanced client example. Values are placeholders, not credentials.

[client]
server = "vpn.example.invalid"
id = "replace-me"
secret_file = "/etc/wgcloak/client.secret"

[local]
listen = "127.0.0.1:51821"

[transport]
mode = "auto"

# Auto probing follows this order; authentication rejection stops fallback.
[transport.auto]
order = ["direct_udp", "quic", "http3", "tls_tcp"]
probe_timeout_ms = 1500
retries = 2

[transport.direct_udp]
port = 51830
keepalive_secs = 15

[transport.quic]
port = 443
keepalive_secs = 15

[transport.http3]
port = 4443
path = "/tunnel"

[transport.tls_tcp]
port = 443

[network]
# Default application payload; configurable up to the 16384-byte safety ceiling.
max_datagram_size = 1200

[logging]
level = "info"