---
port: 7890
socks-port: 7891
allow-lan: true
mode: rule
log-level: info
external-controller: 0.0.0.0:9090
secret: rFg5SHCN
dns:
  enable: true
  listen: 0.0.0.0:7874
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  nameserver:
  - 223.5.5.5
  - 223.6.6.6
  ipv6: false
  respect-rules: true
  proxy-server-nameserver:
  - 223.5.5.5
proxies:
- name: hy1-50
  type: hysteria2
  server: 23.27.28.64
  port: 60001
  password: LER1SPLqYBFp3UUv7JQBe+6b
  sni: bing.com
  skip-cert-verify: true
  up: 100 Mbps
  down: 200 Mbps
  alpn:
  - h3
proxy-groups:
- name: PROXY
  type: select
  proxies:
  - hy1-50
- name: GLOBAL
  type: select
  proxies:
  - hy1-50
rules:
- MATCH,GLOBAL
redir-port: 7892
tproxy-port: 7895
mixed-port: 7893
bind-address: "*"
external-ui: "/usr/share/openclash/ui"
keep-alive-interval: 15
keep-alive-idle: 600
ipv6: false
tun:
  enable: true
  stack: system
  device: utun
  dns-hijack:
  - 127.0.0.1:53
  endpoint-independent-nat: true
  auto-route: false
  auto-detect-interface: false
  auto-redirect: false
  strict-route: true
profile:
  store-selected: true
authentication:
- Clash:x0F9FhMy