byJoey/warp-masque-actions

What it solves

This project provides an automated way to generate configuration files for Cloudflare WARP using the MASQUE protocol. It eliminates the need for users to set up their own environment or maintain a server, allowing them to quickly deploy a privacy-focused network connection via GitHub Actions or a Cloudflare Worker.

How it works

The tool generates configurations compatible with the mihomo (Alpha branch) core. It offers two primary deployment methods:

1. GitHub Actions: Users fork the repository and run a workflow to generate a yaml configuration (for Clash-based clients) or a masque:// link (for Shadowrocket). It provides 57 different access points to ensure connectivity if some are blocked.
2. Cloudflare Worker: A more permanent solution where a Worker acts as a subscription server. It manages WARP and Opera VPN credentials, automatically refreshing them when they expire, and provides a secure, password-protected management interface.

To bypass regional restrictions, the project supports "nesting" (chaining) proxies: it can route traffic through WARP and then exit via Opera VPN, Proton, or Windscribe to change the exit country.

Who it’s for

Users who want a simple, automated setup for Cloudflare WARP MASQUE configurations without managing infrastructure, specifically those using clients that support the mihomo Alpha core (such as Clash Verge Rev, ClashMetaForAndroid, or ClashMi).

Highlights

• Zero Infrastructure: Runs entirely on GitHub Actions or Cloudflare Workers.
• Multi-Node Access: Generates 57 access points to maximize availability.
• Proxy Chaining: Supports routing through Opera VPN, Proton, and Windscribe for flexible exit locations.
• Automated Lifecycle: The Worker version handles credential rotation and registration automatically.
• Secure Management: Includes a password-protected status page with HMAC-signed tokens for subscription links.