simple

# ---------------------------------------------------
# 1. 基础连接
# ---------------------------------------------------
mixed-port: 7890
allow-lan: true
log-level: info
external-controller: '0.0.0.0:9090'
# secret: "change-me-to-a-random-password"  # 建议设置一个随机密码

# ---------------------------------------------------
# TUN 模式（Docker 容器环境建议关闭）
# ---------------------------------------------------
tun:
  enable: false
  stack: gvisor                 # 容器环境推荐 gvisor
  auto-route: true
  auto-detect-interface: true
  dns-hijack:
    - "any:53"
    - "tcp://any:53"

# ---------------------------------------------------
# 2. 订阅来源（填入你的订阅 URL）
# ---------------------------------------------------
proxy-providers:
  lite20280602:
    type: http
    url: ""                     # <<<<<< 在这里填你的订阅链接
    interval: 1800
    path: ./sub.yaml
    health-check:
      enable: true
      url: https://www.gstatic.com/generate_204
      interval: 300

# ---------------------------------------------------
# 3. 策略组（use 统一改为 lite20280602）
# ---------------------------------------------------
proxy-groups:
  - name: 节点选择
    type: select
    proxies: [自动选择, TW台湾, JP日本, US美国, SG新加坡, 全部节点, DIRECT]

  - name: 自动选择
    type: url-test
    use: [lite20280602]
    tolerance: 50

  - name: TW台湾
    type: url-test
    use: [lite20280602]
    filter: "(?i)台|tw|taiwan"
    tolerance: 50

  - name: JP日本
    type: url-test
    use: [lite20280602]
    filter: "(?i)日|jp|japan"
    tolerance: 50

  - name: US美国
    type: url-test
    use: [lite20280602]
    filter: "(?i)美|us|unitedstates"
    tolerance: 50

  - name: SG新加坡
    type: url-test
    use: [lite20280602]
    filter: "(?i)新|sg|singapore"
    tolerance: 50

  - name: 全部节点
    type: url-test
    use: [lite20280602]
    tolerance: 50

# ---------------------------------------------------
# 4. 路由规则
# ---------------------------------------------------
rules:
  - GEOIP,lan,DIRECT,no-resolve
  - GEOSITE,private,DIRECT

  - DOMAIN-SUFFIX,atibm.com,DIRECT
  - DOMAIN-SUFFIX,hf-mirror.com,DIRECT
  - DOMAIN-KEYWORD,tuna.tsinghua,DIRECT
  - DOMAIN-KEYWORD,ustc.edu,DIRECT
  - DOMAIN-KEYWORD,mirrors.aliyun,DIRECT
  - DOMAIN-KEYWORD,mirrors.tencent,DIRECT
  - DOMAIN-KEYWORD,mirrors.cloud.tencent,DIRECT
  - DOMAIN-KEYWORD,huaweicloud,DIRECT

  - GEOSITE,category-ai-!cn,节点选择
  - GEOSITE,google,节点选择
  - GEOSITE,youtube,节点选择
  - GEOSITE,telegram,节点选择
  - GEOSITE,twitter,节点选择
  - GEOSITE,netflix,节点选择
  - GEOSITE,geolocation-!cn,节点选择

  - GEOSITE,cn,DIRECT
  - GEOIP,cn,DIRECT

  - MATCH,节点选择

# ---------------------------------------------------
# 5. DNS（国内/国外分流，防污染）
# ---------------------------------------------------
dns:
  enable: true
  ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16

  # 启动时解析 DoH 域名和订阅链接的纯 IP DNS
  default-nameserver:
    - 223.5.5.5
    - 119.29.29.29

  # 解析代理节点域名，必须是纯 IP
  proxy-server-nameserver:
    - 223.5.5.5
    - 119.29.29.29

  # 常规 DNS，国内直连
  nameserver:
    - 223.5.5.5
    - 119.29.29.29

  # 国外域名走 DoH
  fallback:
    - https://1.1.1.1/dns-query
    - https://8.8.8.8/dns-query

  fake-ip-filter:
    - "+.lan"
    - "+.local"
    - "time.*.com"
    - "stun.*.*"