egress:
  allowed:
    - "192.0.2.10:8443"          # FL xray inbound (production)
    - "*.projectshitpost.fun:443" # any subdomain HTTPS
    # TODO: add PL1 IP:port once confirmed (controller to fill in during deploy)
  rate_mbps: 50