# ==============================================================================
# 单节点精简稳定配置 (仅保留 vpn2-VLESS-Reality)
# ==============================================================================

port: 7890
socks-port: 7891
allow-lan: false
mode: rule
log-level: info
ipv6: false
unified-delay: true
tcp-concurrent: true

profile:
  store-selected: true
  store-fake-ip: true

sniffer:
  enable: true
  force-dns-mapping: true
  parse-pure-ip: true
  override-destination: true
  sniff:
    TLS:
      ports: [443, 8443]
    HTTP:
      ports: [80, 8080-8880]

dns:
  enable: true
  ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter:
    - '+.lan'
    - '+.local'
    - '+.msftconnecttest.com'
    - '+.msftncsi.com'
    - 'time.*.com'
    - 'time.*.gov'
    - 'pool.ntp.org'
  nameserver:
    - 223.5.5.5
    - 119.29.29.29
    - https://doh.pub/dns-query

# ==============================================================================
# 代理节点：仅包含 vpn2-VLESS-Reality
# ==============================================================================
proxies:
  - name: "vpn2-VLESS-Reality"
    type: vless
    server: 161.33.152.247
    port: 443
    uuid: 1a72efa1-8d10-47df-b8c1-ccb6aeb4234f
    udp: true
    tls: true
    flow: "xtls-rprx-vision"
    servername: "gateway.icloud.com"
    reality-opts:
      public-key: "QQ1nIwbinFwE52tda3mmfk_xToJ7DXIeBcxFJpeRwXk"
      short-id: "6ba85179e30d4fc2"
    client-fingerprint: "chrome"

# ==============================================================================
# 策略组
# ==============================================================================
proxy-groups:
  - name: "节点选择"
    type: select
    proxies:
      - "vpn2-VLESS-Reality"
      - DIRECT

# ==============================================================================
# 规则路由
# ==============================================================================
rules:
  # 1. 局域网与私网直连
  - IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
  - IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
  - IP-CIDR,127.0.0.0/8,DIRECT,no-resolve

  # 2. 微信 (WeChat) 直连
  - DOMAIN-KEYWORD,wechat,DIRECT
  - DOMAIN-KEYWORD,weixin,DIRECT
  - DOMAIN-SUFFIX,tencent.com,DIRECT

  # 3. Oracle 相关服务直连
  - DOMAIN-SUFFIX,oracle.com,DIRECT
  - DOMAIN-SUFFIX,oraclecloud.com,DIRECT

  # 4. Hostinger 相关服务直连
  - DOMAIN-SUFFIX,hostinger.com,DIRECT
  - DOMAIN-SUFFIX,hostinger.in,DIRECT

  # 5. 国内常见顶级域名与 IP 直连
  - DOMAIN-SUFFIX,cn,DIRECT
  - DOMAIN-SUFFIX,com.cn,DIRECT
  - DOMAIN-SUFFIX,net.cn,DIRECT
  - DOMAIN-SUFFIX,gov.cn,DIRECT
  - GEOIP,CN,DIRECT

  # 6. 其他所有未命中流量全部走新节点
  - MATCH,节点选择