懒人配置.yaml

# 2024年5月9日 09点07分

# port: 7890 # HTTP(S) 代理服务器端口
# socks-port: 7891 # SOCKS5 代理端口
mixed-port: 10801 # HTTP(S) 和 SOCKS 代理混合端口
redir-port: 7892 # 透明代理端口，用于 Linux 和 MacOS

# Transparent proxy server port for Linux (TProxy TCP and TProxy UDP)
tproxy-port: 7893

allow-lan: true # 允许局域网连接
bind-address: "*"

#  find-process-mode has 3 values:always, strict, off
#  - always, 开启，强制匹配所有进程
#  - strict, 默认，由 mihomo 判断是否开启
#  - off, 不匹配进程，推荐在路由器上使用此模式
find-process-mode: strict

mode: rule

#自定义 geodata url
geox-url:
  geoip: "https://github.com/xishang0128/meta-rules-dat/releases/download/latest/geoip-lite.dat"
  geosite: "https://github.com/xishang0128/meta-rules-dat/releases/download/latest/geosite.dat"
  mmdb: "https://github.com/xishang0128/meta-rules-dat/releases/download/latest/country.mmdb"
  asn: "https://github.com/xishang0128/geoip/releases/download/latest/GeoLite2-ASN.mmdb"

# GEOIP 数据模式
geodata-mode: true 
# GEO 文件加载模式 standard：标准加载器
# memconservative：专为内存受限 (小内存) 设备优化的加载器 (默认值)
geodata-loader: standard
# 自动更新 GEO
geo-auto-update: true
# 更新间隔，单位为小时
geo-update-interval: 24


log-level: error # 日志等级 silent/error/warning/info/debug

ipv6: true # 开启 IPv6 总开关，关闭阻断所有 IPv6 链接和屏蔽 DNS 请求 AAAA 记录


external-controller: 0.0.0.0:9090
#secret: "1234"

tcp-concurrent: true # TCP 并发连接所有 IP, 将使用最快握手的 TCP

# 配置 WEB UI 目录，使用 http://{{external-controller}}/ui 访问
external-ui: metacubexd
external-ui-name: xd
external-ui-url: "https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip"

# interface-name: en0 # 设置出口网卡

# 全局 TLS 指纹，优先低于 proxy 内的 client-fingerprint
# 可选： "chrome","firefox","safari","ios","random","none" options.
# Utls is currently support TLS transport in TCP/grpc/WS/HTTP for VLESS/Vmess and trojan.
global-client-fingerprint: chrome

#  TCP keep alive interval(国内运营商大概NAT超时5分钟，所以改成280)
keep-alive-interval: 30 #默认15

hosts:
  # '*.mihomo.dev': 127.0.0.1
  # '.dev': 127.0.0.1
  # 'alpha.mihomo.dev': '::1'
  # test.com: [1.1.1.1, 2.2.2.2]
  # home.lan: lan # lan 为特别字段，将加入本地所有网卡的地址
  # baidu.com: google.com # 只允许配置一个别名

profile: # 存储 select 选择记录
  store-selected: true
  # 持久化 fake-ip
  store-fake-ip: true

tun:
  enable: true
  stack: system
  dns-hijack:
    - 'any:53'
  auto-route: true
  auto-detect-interface: true
  exclude-package: # 排除被路由的 Android 应用包名
    - com.tencent.mobileqq
    - com.yxer.packageinstalles
    - com.icecoldapps.serversultimate.packb
    - com.icecoldapps.serversultimatepro
    - pl.solidexplorer2
    - cn.nokia.speedtest5g
    - cn.wps.moffice_eng
    - cn.gov.tax.its
    - com.ct.client
    - com.greenpoint.android.mc10086.activity
    - com.sinovatech.unicom.ui
    - com.chinamworld.bocmbci
    - com.tmri.app.main
    - com.jingdong.app.mall
    - com.huawei.appmarket
    - com.cmri.universalapp
    - com.miui.newmidrive
    - com.xiaomi.market
    - com.tencent.mm
    - com.sina.weibo
    - com.ss.android.ugc.aweme
    - cmb.pb
    - com.eg.android.AlipayGphone
    - cn.xiaochuankeji.tieba
    - com.viva.timeplan.p3_2
    - com.taobao.taobao
    - com.baidu.BaiduMap
    - com.baidu.netdisk
    - com.baidu.tieba
    - com.baidu.input
    - com.zhihu.android
    - com.sgcc.wsgw.cn
    - com.netease.cloudmusic
    - com.sankuai.meituan
    - com.chinatelecom.bestpayclient
    - com.tencent.wemeet.app
    - com.cjtec.uncompress
    - com.douban.frodo
    - com.MobileTicket
    - com.unionpay.tsmservice.mi
    - com.taobao.idlefish
    - com.alicloud.databox
    - com.tsng.hidemyapplist
    - com.taobao.trip
    - com.handsgo.jiakao.android
    - com.autonavi.minimap
    - com.android.providers.downloads.ui
    - com.android.providers.downloads
    - com.feemoo
    - com.xiaomi.vipaccount
    - com.xunmeng.pinduoduo
    - com.dragon.read
    - com.tailscale.ipn
    - com.cloudflare.onedotonedotonedotone
    - com.kuangxiangciweimao.novel
    - com.dragon.read
    - com.qidian.QDReader
    - com.sfacg
    - com.microsoft.rdc.androidx
    - ua.com.streamsoft.pingtools
    - net.xnano.android.iperf

sniffer:
  enable: false
  force-dns-mapping: true
  parse-pure-ip: true
  override-destination: false
  sniff:
    HTTP:
      ports: [80, 8080-8880]
      override-destination: true
    TLS:
      ports: [443, 8443]
    QUIC:
      ports: [443]
  force-domain:
    - +.v2ex.com
  skip-domain:
    - Mijia Cloud

dns:
  cache-algorithm: arc
  enable: true
  prefer-h3: true
  listen: 0.0.0.0:1053
  ipv6: true
  ipv6-timeout: 300 # 单位：ms，内部双栈并发时，向上游查询 AAAA 时，等待 AAAA 的时间，默认 100ms
  default-nameserver: ## 用于解析 nameserver，fallback 以及其他DNS服务器配置的，DNS 服务域名
    - 'https://223.5.5.5/dns-query'
    # - 'https://1.12.12.12/dns-query'
  enhanced-mode: fake-ip # or redir-host
  fake-ip-range: 28.0.0.1/8
  use-hosts: true
  # 配置不使用fake-ip的域名
  fake-ip-filter: ['+.lan', '+.local', '+.mshome','+.ipw.cn', 'dns.pub', 'dns.alidns.com', 'resolver1.opendns.com', 'detectportal.firefox.com', 'dmd.metaservices.microsoft.com', '+.stun.*.*', '+.stun.*.*.*', '+.stun.*.*.*.*', '+.stun.*.*.*.*.*', '*.n.n.srv.nintendo.net', '+.stun.playstation.net', 'xbox.*.*.microsoft.com', '*.*.xboxlive.com', '*.msftncsi.com', '*.msftconnecttest.com', 'connect.rom.miui.com', '+.gstatic.com', 'lens.l.google.com', '*.mcdn.bilivideo.cn', 'WORKGROUP', '*']
  # DNS主要域名配置
  # 支持 UDP，TCP，DoT，DoH，DoQ
  # 这部分为主要 DNS 配置，影响所有直连，确保使用对大陆解析精准的 DNS
  nameserver:
    # - 'https://8.8.8.8/dns-query#dns'
    # - 'https://1.1.1.1/dns-query#dns'
    - 'tcp://8.8.8.8#dns'
    - 'tcp://1.1.1.1#dns'
  proxy-server-nameserver:
    - https://223.5.5.5/dns-query
    # - https://1.12.12.12/dns-query
  # 新配置 clash.meta v1.14.2 config changes
  nameserver-policy:
    "geosite:cn,apple":
      - https://223.5.5.5/dns-query   # alidns
      - https://1.12.12.12/dns-query   # dns.pub
    "geosite:private":
      - system
      - 223.5.5.5


proxies:
  - name: dns-hijack
    type: dns

p: &p
  {type: http, interval: 3600, health-check: {enable: true, url: https://cp.cloudflare.com/, interval: 600}}
pr: &pr
  {type: select, proxies: [默认, 🇭🇰香港A, 🇹🇼台湾A, 🇯🇵日本A, 🇸🇬新加坡A, 🇺🇸美国A, 其它地区, DIRECT]}

c: &c
  type: http
  behavior: classical
  interval: 86400 

d: &d
  type: http
  behavior: domain
  format: text
  interval: 86400


ua: &ua
  type: select
  use:
  - 机场1 # 这里和proxy-providers中定义的名字保持一直
  - 机场2
  

proxy-providers:
  机场1: #名字可以自己修改
    <<: *p
    url: 这里写机场1的订阅
    path: ./proxy-providers/jichang_1.yaml
    
  机场2:
    <<: *p
    url: 这里写机场2的订阅
    path: ./proxy-providers/jichang_2.yaml


proxy-groups:
  - {name: 默认, type: select, proxies: [🇭🇰香港A, 🇹🇼台湾A, 🇯🇵日本A, 🇸🇬新加坡A, 🇺🇸美国A, 其它地区]}

  - {name: dns, type: select, proxies: [默认, DIRECT, 🇭🇰香港A, 🇹🇼台湾A, 🇯🇵日本A, 🇸🇬新加坡A,🇺🇸美国A, 其它地区]}

  - {name: ✈️Google, <<: *pr}

  - {name: 🐙Github, <<: *pr}

  - {name: 🔍Bing, <<: *pr}

  - {name: Ⓜ️Microsoft, <<: *pr}

  - {name: 📺哔哩哔哩, <<: *pr}

  - {name: 📲Telegram, <<: *pr}

  - {name: 🧲Tracker, <<: *pr}

  - {name: 🔮OpenAI, <<: *pr}

  - {name: 𝕏_Twitter, <<: *pr}

  - {name: 🌇Pixiv, <<: *pr}

  - {name: 🌌Ehentai, <<: *pr}

  # - {name: 📺哔哩东南亚, <<: *pr}

  - {name: 🐉巴哈姆特, <<: *pr}

  - {name: ▶️YouTube, <<: *pr}

  - {name: 📱Facebook, <<: *pr}

  - {name: 🎥NETFLIX, <<: *pr}

  - {name: 🎵Spotify, <<: *pr}

  - {name: ✈️GoogleFCM, <<: *pr}
  
  - {name: 😮‍💨Steam, <<: *pr}
    
  - {name: 🚫🇯🇵Japan, type: select, proxies: [DIRECT, 默认, 🇭🇰香港A, 🇹🇼台湾A, 🇸🇬新加坡A, 🇺🇸美国A, 其它地区]}

  - {name: 🇨🇳国内, type: select, proxies: [DIRECT, 默认, 🇭🇰香港A, 🇹🇼台湾A, 🇯🇵日本A, 🇸🇬新加坡A, 🇺🇸美国A, 其它地区]}
  
  - {name: 🔒锁区网站, type: select, proxies: [🇭🇰香港A, 🇹🇼台湾A, 🇯🇵日本A, 🇸🇬新加坡A, 🇺🇸美国A, 其它地区]}

  - {name: 🤐FuckMIUI, type: select, proxies: [REJECT, DIRECT]}

  - {name: 🚝SpeedTest, <<: *pr}

  - {name: 其他, <<: *pr}

#分隔，下面是地区分组
  - {name: 🇹🇼台湾A, <<: *ua, filter: "(?i)台|tw|🇹🇼|taiwan"}

  - {name: 🇯🇵日本A, <<: *ua, filter: "(?i)日本|jp|🇯🇵|japan"}

  - {name: 🇺🇸美国A, <<: *ua, filter: "(?i)美|us|🇺🇸|unitedstates|united states"}

  - {name: 🇸🇬新加坡A, <<: *ua, filter: "(?i)^(?!.*(?:us)).*(新|sg|🇸🇬|singapore)"}
  
  - {name: 🇭🇰香港A, <<: *ua, filter: "(?i)港|hk|🇭🇰|hongkong|hong kong"}


  - {name: 其它地区, <<: *ua, lazy: true, filter: "(?i)^(?!.*(?:🇭🇰|🇯🇵|🇺🇸|🇸🇬|🇨🇳|港|hk|hongkong|台|tw|🇹🇼|taiwan|日|jp|japan|新|sg|🇸🇬|singapore|美|us|unitedstates)).*"}

  - {name: 全部节点, <<: *ua, lazy: true}
  

rule-providers:
  mydirect:
    <<: *c
    url: "https://clash-rule-set.vercel.app/mydirect.yaml"
    path: ./rule-providers/rule1.yaml
  mydirectIP:
    type: http
    behavior: ipcidr
    format: text
    interval: 86400 
    url: "https://clash-rule-set.vercel.app/mydirectIP"
    path: ./rule-providers/rule2
  myproxy:
    <<: *c
    url: "https://clash-rule-set.vercel.app/myproxy.yaml"
    path: ./rule-providers/myproxy.yaml
  myreject:
    <<: *d
    url: "https://clash-rule-set.vercel.app/myreject"
    path: ./rule-providers/myreject
  fuckmiui:
    <<: *d
    url: "https://clash-rule-set.vercel.app/fuckmiui"
    path: ./rule-providers/fuckmiui
  regionRestriction:
    <<: *d
    url: "https://clash-rule-set.vercel.app/region_restriction"
    path: ./rule-providers/region_restriction
  regionRestrictionNoJapan:
    <<: *d
    url: "https://clash-rule-set.vercel.app/region_restriction_no_japan"
    path: ./rule-providers/region_restriction_no_japan
  speedtest:
    <<: *d
    url: "https://clash-rule-set.vercel.app/speedtest"
    path: ./rule-providers/speedtest
  process_bilibili:
    <<: *c
    url: "https://clash-rule-set.vercel.app/processname/process_bilibili.yaml"
    path: ./rule-providers/process_bilibili.yaml
  
rules:
  - RULE-SET,mydirect,DIRECT
  - AND,((NETWORK,UDP),(DST-PORT,2000-65535)),🧲Tracker #BT下载UDP
  - AND,((NETWORK,UDP),(DST-PORT,123)),DIRECT
  - AND,((NETWORK,UDP),(DST-PORT,443)),REJECT #reject quic
  - AND,((NETWORK,UDP),(DST-PORT,53)),dns-hijack
  
  - RULE-SET,myreject,REJECT
  - RULE-SET,fuckmiui,🤐FuckMIUI
  - GEOSITE,private,DIRECT
  - RULE-SET,myproxy,默认
  
  # 加料的
  - RULE-SET,process_bilibili,📺哔哩哔哩
  - GEOSITE,bilibili,📺哔哩哔哩
  # - GEOSITE,biliintl,📺哔哩东南亚
  - GEOSITE,tracker,🧲Tracker
  - GEOSITE,ehentai,🌌Ehentai
  - GEOSITE,github,🐙Github
  - GEOSITE,gitlab,🐙Github
  - GEOSITE,bahamut,🐉巴哈姆特
  - GEOSITE,manhuagui,🐉巴哈姆特
  - GEOSITE,youtube,▶️YouTube
  - GEOSITE,googlefcm,✈️GoogleFCM
  # - RULE-SET,process_google,✈️Google
  - GEOSITE,google,✈️Google
  - GEOSITE,dmm,🔒锁区网站
  - RULE-SET,regionRestriction,🔒锁区网站
  - RULE-SET,regionRestrictionNoJapan,🚫🇯🇵Japan
  - GEOSITE,microsoft@cn,Ⓜ️Microsoft
  - GEOSITE,bing,🔍Bing
  - GEOSITE,microsoft,Ⓜ️Microsoft
  - GEOSITE,twitter,𝕏_Twitter
  - GEOSITE,pixiv,🌇Pixiv
  - GEOSITE,openai@ads,REJECT
  - GEOSITE,openai,🔮OpenAI
  - GEOSITE,anthropic,🔮OpenAI
  - GEOSITE,facebook,📱Facebook
  - GEOSITE,facebook-dev,📱Facebook
  - GEOSITE,meta,📱Facebook
  - DOMAIN-SUFFIX,meta.ai,📱Facebook
  - GEOSITE,category-scholar-!cn,默认
  - GEOSITE,apple-cn,🇨🇳国内
  - GEOSITE,steam@cn,🇨🇳国内
  - GEOSITE,steam,😮‍💨Steam
  - GEOSITE,steamunlocked,😮‍💨Steam
  - GEOSITE,category-games@cn,🇨🇳国内
  - GEOSITE,telegram,📲Telegram
  - GEOSITE,netflix,🎥NETFLIX
  - GEOSITE,spotify,🎵Spotify
  - GEOSITE,alibaba,🇨🇳国内
  - GEOSITE,speedtest,🚝SpeedTest
  - RULE-SET,speedtest,🚝SpeedTest
  - GEOSITE,geolocation-!cn,默认
  - GEOSITE,CN,DIRECT

 #GEOIP规则
  # 私网ip
  - GEOIP,private,DIRECT,no-resolve
  # 一些特殊的直连ip
  - RULE-SET,mydirectIP,DIRECT,no-resolve
  - GEOIP,google,✈️Google
  - GEOIP,netflix,🎥NETFLIX
  - GEOIP,telegram,📲Telegram
  - GEOIP,twitter,𝕏_Twitter
  - GEOIP,CN,🇨🇳国内
  
  
  - MATCH,其他