# ===== 基本设置 =====
mixed-port: 7890
allow-lan: true
mode: rule
log-level: info
ipv6: false

# ===== TUN：接管全局 + 劫持 DNS =====
tun:
  enable: true
  stack: system
  dns-hijack:
    - any:53
    - tcp://any:53
  auto-route: true
  auto-redirect: true
  auto-detect-interface: true

# ===== DNS：全用国内，并按规则走代理 =====
dns:
  enable: true
  listen: 0.0.0.0:7874
  ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  nameserver:
    - https://dns.alidns.com/dns-query
    - https://doh.pub/dns-query
  proxy-server-nameserver:
    - https://dns.alidns.com/dns-query
  respect-rules: true
  use-system-hosts: false

# ===== 回国节点（示例 hysteria2，按你实际改） =====
proxies:
  - name: JJ
    type: hysteria2
    server: 45.62.103.32
    ports: 20000-50000
    password: LER1SPLqYBFp3UUv7JQBe+6b
    sni: bing.com
    skip-cert-verify: true
    alpn:
    - h3

# 代理分组 (根据您的节点和模板逻辑进行了优化)
proxy-groups:
  - name: 🌍 国外流量
    type: select
    proxies:
      - JJ

  - name: 🇨🇳 国内流量
    type: select
    proxies:
      - DIRECT

# 规则部分 (采用 GEOSITE 和 GEOIP)
rules:
  # 直连规则
  - DOMAIN-SUFFIX,local,DIRECT
  - IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
  - IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
  - IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,198.18.0.1/16,DIRECT,no-resolve # Fake-IP 网段直连
  - GEOSITE,private,DIRECT

  
  # 按区域分流
  - GEOSITE,cn,🇨🇳 国内流量
  - GEOIP,cn,🇨🇳 国内流量
  
  # 未匹配的流量走国外
  - MATCH,🌍 国外流量