mixed-port: 7890 geodata-mode: true tcp-concurrent: true allow-lan: true bind-address: '*' mode: rule log-level: info ipv6: true external-controller: 0.0.0.0:9090 external-ui: ui global-client-fingerprint: random profile: store-selected: true tun: enable: true device: meta stack: system auto-route: true auto-redir: true sniffer: enable: true force-dns-mapping: true parse-pure-ip: true override-destination: true sniff: TLS: HTTP: dns: enable: true listen: :53 enhanced-mode: redir-host proxy-server-nameserver: - https://dns.alidns.com/dns-query - https://doh.pub/dns-query rule-providers: reject: type: http behavior: domain url: 'https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt' path: ./ruleset/reject.yaml interval: 86400 icloud: type: http behavior: domain url: 'https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt' path: ./ruleset/icloud.yaml interval: 86400 apple: type: http behavior: domain url: 'https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt' path: ./ruleset/apple.yaml interval: 86400 google: type: http behavior: domain url: 'https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt' path: ./ruleset/google.yaml interval: 86400 proxy: type: http behavior: domain url: 'https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt' path: ./ruleset/proxy.yaml interval: 86400 direct: type: http behavior: domain url: 'https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt' path: ./ruleset/direct.yaml interval: 86400 private: type: http behavior: domain url: 'https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt' gfw: type: http behavior: domain url: 'https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt' path: ./ruleset/gfw.yaml interval: 86400 tld-not-cn: type: http behavior: domain url: 'https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt' path: ./ruleset/tld-not-cn.yaml interval: 86400 telegramcidr: type: http behavior: ipcidr url: 'https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt' path: ./ruleset/telegramcidr.yaml interval: 86400 cncidr: type: http behavior: ipcidr url: 'https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt' path: ./ruleset/cncidr.yaml interval: 86400 lancidr: type: http behavior: ipcidr url: 'https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt' path: ./ruleset/lancidr.yaml interval: 86400 applications: type: http behavior: classical url: 'https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt' path: ./ruleset/applications.yaml interval: 86400 rules: - RULE-SET,private,DIRECT - RULE-SET,reject,REJECT - RULE-SET,icloud,DIRECT - RULE-SET,apple,DIRECT - RULE-SET,direct,DIRECT - RULE-SET,lancidr,DIRECT - RULE-SET,cncidr,DIRECT - GEOIP,LAN,DIRECT - GEOIP,CN,DIRECT - MATCH,PROXY