# ===== 基本设置 =====
mixed-port: 7890
allow-lan: true
mode: rule
log-level: info
ipv6: false

# ===== TUN：接管全局 + 劫持 DNS =====
tun:
  enable: true
  stack: system
  dns-hijack:
    - any:53
    - tcp://any:53
  auto-route: true
  auto-redirect: true
  auto-detect-interface: true

# ===== DNS：全用国内，并按规则走代理 =====
dns:
  nameserver-policy:
    '+.ultimatepanel.xyz': 8.8.8.8
  enable: true
  listen: 0.0.0.0:7874
  ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  nameserver:
    - https://dns.google/dns-query
    - https://dns.google/dns-query
  proxy-server-nameserver:
    - https://dns.google/dns-query
  respect-rules: true
  use-system-hosts: false

# ===== 回国节点（示例 hysteria2，按你实际改） =====
proxies:
  - name: 美国9929
    type: hysteria2
    server: 38.97.249.146
    ports: 20000-50000
    password: LER1SPLqYBFp3UUv7JQBe+6b
    sni: bing.com
    skip-cert-verify: true
    alpn:
    - h3

proxy-groups:
  - name: 海外
    type: select
    proxies:
      - auto-美国9929
  - name: auto-美国9929
    type: url-test
    proxies:
      - 美国9929
    url: 'https://connect.rom.miui.com/generate_204'
    interval: 300
    tolerance: 50
  - name: GLOBAL
    type: select
    proxies:
      - 海外

rules:
  - GEOIP,lan,DIRECT,no-resolve
  - IP-CIDR,216.24.176.50/32,DIRECT
  - MATCH,海外