# ===========================
# Mihomo / Clash.Meta 主配置
# ===========================

# 代理端口设置
port: 7890
socks-port: 7891
redir-port: 7892
tproxy-port: 7895
mixed-port: 7893

allow-lan: true
bind-address: "*"

mode: rule
log-level: info

# 控制面板
external-controller: 0.0.0.0:9090
secret: rFg5SHCN
# external-ui: "/usr/share/openclash/ui"   # 如果不是在 OpenClash 环境，可注释此行

# ===========================
# DNS 设置
# ===========================
dns:
  enable: true
  listen: 0.0.0.0:7874
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  ipv6: false
  respect-rules: true
  nameserver:
    - 114.114.114.114
    - 223.6.6.6
    - 8.8.8.8
  proxy-server-nameserver:
    - 223.5.5.5
  fallback:
    - https://1.1.1.1/dns-query
    - https://8.8.8.8/dns-query
  fallback-filter:
    geoip: true
    geoip-code: CN
    ipcidr:
      - 240.0.0.0/4

# ===========================
# 节点配置
# ===========================
proxies:
  # ---- Hysteria2 节点 ----
  - name: hy1-50
    type: hysteria2
    server: 45.134.36.42
    port: 50001
    password: LER1SPLqYBFp3UUv7JQBe+6b
    sni: bing.com
    skip-cert-verify: true
    up: 100 Mbps
    down: 200 Mbps
    alpn:
      - h3

  # ---- SOCKS5 节点 ----
  - name: s5
    type: socks5
    server: 23.27.28.64
    port: 40510
    username: v0qh9zrH4l_1
    password: f5ZRSnYZ
    tls: false
    skip-cert-verify: true

# ===========================
# 策略组定义
# ===========================
proxy-groups:
  - name: PROXY
    type: select
    proxies:
      - s5

  - name: GLOBAL
    type: select
    proxies:
      - s5

# ===========================
# 规则定义
# ===========================
rules:
  - MATCH,GLOBAL

# ===========================
# TUN 模式（系统流量代理）
# ===========================
tun:
  enable: true
  stack: gvisor        # Linux 建议使用 gvisor
  device: utun
  auto-route: true
  auto-redirect: true
  strict-route: true
  endpoint-independent-nat: true
  dns-hijack:
    - 198.18.0.1:53

# ===========================
# 保活与性能设置
# ===========================
keep-alive-interval: 15
keep-alive-idle: 600
ipv6: false

# ===========================
# 临时登录验证（可选）
# ===========================
# authentication:
#   - Clash:x0F9FhMy