# Clash / Mihomo 静态配置文件
# 功能特色：包含防 DNS / WebRTC 泄露策略、安全 DoH 分流与 Koolson 全彩图标
# sub-store 文件 使用

port: 7890
socks-port: 7891
mixed-port: 7890

# 局域网共享控制：默认 false 保证本机安全
# 💡 若需将本机代理共享给局域网内的手机、旁路由或其它设备，请将此处改为 true
allow-lan: false

# 运行模式：rule (规则分流) / global (全局代理) / direct (全局直连)
mode: rule

# 日志级别：info / warning / error / debug / silent
log-level: info

# RESTful API 控制端口与访问密码（防御恶意网页跨站探测与未授权提取节点凭据）
# 💡 建议保持监听 127.0.0.1，切勿轻易改为 0.0.0.0；强烈建议修改下方示例密码为自己的专属密钥（建议使用英文字母与数字组合，除下划线 _ 外切勿使用其他特殊符号，以免引发 YAML 解析错误或 Web 面板鉴权失败）
external-controller: 127.0.0.1:9090
secret: "Clash_ChangeMe_2026" # 👈 此处请修改为你自己的专属密钥（避免使用默认公开值）/sub-store 远程使用此链接，只需在 操作-脚本操作 填入引号里的代码即可自动替换“$content = $content.replace("Clash_ChangeMe_2026", "你的密钥");” 
dns:
  enable: true
  listen: 127.0.0.1:1053
  ipv6: false
  prefer-h3: false
  respect-rules: true
  use-system-hosts: false
  cache-algorithm: arc
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter:
    - +.lan
    - +.local
    - +.msftconnecttest.com
    - +.msftncsi.com
    - localhost.ptlogin2.qq.com
    - localhost.sec.qq.com
    - +.in-addr.arpa
    - +.ip6.arpa
    - time.*.com
    - time.*.gov
    - pool.ntp.org
    - localhost.work.weixin.qq.com
  default-nameserver:
    - 223.5.5.5
    - 1.2.4.8
  nameserver:
    - https://1.1.1.1/dns-query
    - https://8.8.8.8/dns-query
    - https://8.8.4.4/dns-query
  proxy-server-nameserver:
    - https://223.5.5.5/dns-query
    - https://doh.pub/dns-query
  direct-nameserver:
    - https://223.5.5.5/dns-query
    - https://doh.pub/dns-query
  nameserver-policy:
    geosite:private,cn:
      - https://223.5.5.5/dns-query
      - https://doh.pub/dns-query
sniffer:
  enable: true
  force-dns-mapping: true
  parse-pure-ip: true
  sniff:
    HTTP:
      ports:
        - 80
        - 8080-8880
      override-destination: true
    TLS:
      ports:
        - 443
        - 8443
    QUIC:
      ports:
        - 443
geox-url:
  geoip: "https://fastly.jsdelivr.net/gh/Loyalsoldier/v2ray-rules-dat@release/geoip.dat"
  geosite: "https://fastly.jsdelivr.net/gh/Loyalsoldier/v2ray-rules-dat@release/geosite.dat"
  mmdb: "https://fastly.jsdelivr.net/gh/Loyalsoldier/geoip@release/Country.mmdb"
  asn: "https://fastly.jsdelivr.net/gh/Loyalsoldier/geoip@release/GeoLite2-ASN.mmdb"
# ==============================================================================
proxy-groups:
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 节点选择
    type: select
    include-all: true
    filter: ^(?!.*(官网|套餐|流量|异常|剩余)).*$
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Proxy.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 谷歌服务
    type: select
    proxies:
      - 节点选择
      - 全局直连
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Google_Search.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: YouTube
    type: select
    proxies:
      - 节点选择
      - 全局直连
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/YouTube.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: Telegram
    type: select
    proxies:
      - 节点选择
      - 全局直连
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Telegram.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: Spotify
    type: select
    proxies:
      - 节点选择
      - 全局直连
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Spotify.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: AI
    type: select
    include-all: true
    proxies:
      - 节点选择
    icon: https://fastly.jsdelivr.net/gh/chxm1023/Script_X@main/icon/ChatGPT/ChatGPT4.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: TikTok
    type: select
    include-all: true
    proxies:
      - 节点选择
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/TikTok.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: Netflix
    type: select
    proxies:
      - 节点选择
      - 全局直连
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Netflix.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 微软服务
    type: select
    proxies:
      - 节点选择
      - 全局直连
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Orz-3/mini@master/Color/Microsoft.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 苹果服务
    type: select
    proxies:
      - 全局直连
      - 节点选择
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Apple.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: iCloud服务
    type: select
    proxies:
      - 全局直连
      - 节点选择
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/iCloud.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 动画疯
    type: select
    proxies:
      - 节点选择
    include-all: true
    filter: (?i)台|tw|TW
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Bahamut.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 哔哩哔哩港澳台
    type: select
    proxies:
      - 全局直连
      - 节点选择
    include-all: true
    filter: "(?i)^(?!.*(官网|套餐|流量|异常|剩余)).*(港|hk|hong|🇭🇰|台|tw|taiwan|🇹🇼|澳|mo|macau|🇲🇴).*$"
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/bilibili.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 广告过滤
    type: select
    proxies:
      - REJECT
      - DIRECT
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Advertising.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 全局直连
    type: select
    proxies:
      - DIRECT
      - 节点选择
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Direct.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 全局拦截
    type: select
    proxies:
      - REJECT
      - DIRECT
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Reject.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 漏网之鱼
    type: select
    proxies:
      - 节点选择
      - 全局直连
    include-all: true
    filter: ^(?!.*(官网|套餐|流量|异常|剩余)).*$
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Final.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: WebRTC防护
    type: select
    proxies:
      - REJECT-DROP
      - 节点选择
    icon: https://fastly.jsdelivr.net/gh/Niklaus88/icon@main/Webrtc.png
rule-providers:
  reject:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt
    path: ./ruleset/loyalsoldier/reject.yaml
  icloud:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt
    path: ./ruleset/loyalsoldier/icloud.yaml
  apple:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt
    path: ./ruleset/loyalsoldier/apple.yaml
  google:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt
    path: ./ruleset/loyalsoldier/google.yaml
  proxy:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt
    path: ./ruleset/loyalsoldier/proxy.yaml
  direct:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt
    path: ./ruleset/loyalsoldier/direct.yaml
  private:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt
    path: ./ruleset/loyalsoldier/private.yaml
  gfw:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt
    path: ./ruleset/loyalsoldier/gfw.yaml
  tld-not-cn:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt
    path: ./ruleset/loyalsoldier/tld-not-cn.yaml
  telegramcidr:
    type: http
    format: yaml
    interval: 86400
    behavior: ipcidr
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt
    path: ./ruleset/loyalsoldier/telegramcidr.yaml
  cncidr:
    type: http
    format: yaml
    interval: 86400
    behavior: ipcidr
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt
    path: ./ruleset/loyalsoldier/cncidr.yaml
  lancidr:
    type: http
    format: yaml
    interval: 86400
    behavior: ipcidr
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt
    path: ./ruleset/loyalsoldier/lancidr.yaml
  applications:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt
    path: ./ruleset/loyalsoldier/applications.yaml
  bahamut:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/Bahamut.txt
    path: ./ruleset/Niklaus88/bahamut.yaml
  YouTube:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/YouTube.txt
    path: ./ruleset/Niklaus88/YouTube.yaml
  Netflix:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/Netflix.txt
    path: ./ruleset/Niklaus88/Netflix.yaml
  Spotify:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/Spotify.txt
    path: ./ruleset/Niklaus88/Spotify.yaml
  BilibiliHMT:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/BilibiliHMT.txt
    path: ./ruleset/Niklaus88/BilibiliHMT.yaml
  AI:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/AI.txt
    path: ./ruleset/Niklaus88/AI.yaml
  TikTok:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/TikTok.txt
    path: ./ruleset/Niklaus88/TikTok.yaml
  Microsoft:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/Microsoft.txt
    path: ./ruleset/Niklaus88/Microsoft.yaml
rules:
  # 受信会议与实时音视频软件（优先放行或走代理）
  - PROCESS-NAME,Zoom.exe,全局直连
  - PROCESS-NAME,Discord.exe,节点选择
  - DOMAIN-SUFFIX,zoom.us,全局直连
  - DOMAIN-SUFFIX,zoom.com,全局直连
  - DOMAIN-SUFFIX,discord.com,节点选择
  - DOMAIN-SUFFIX,discord.gg,节点选择
  - DST-PORT,3478,WebRTC防护
  - DST-PORT,5349,WebRTC防护
  - DST-PORT,19302,WebRTC防护
  - DST-PORT,19303,WebRTC防护
  - DST-PORT,19304,WebRTC防护
  - DST-PORT,19305,WebRTC防护
  - DST-PORT,19306,WebRTC防护
  - DST-PORT,19307,WebRTC防护
  - DST-PORT,19308,WebRTC防护
  - DST-PORT,19309,WebRTC防护
  - DOMAIN-KEYWORD,stun,WebRTC防护
  - DOMAIN-SUFFIX,googleapis.cn,谷歌服务
  - DOMAIN-SUFFIX,gstatic.com,谷歌服务
  - DOMAIN-SUFFIX,xn--ngstr-lra8j.com,谷歌服务
  - DOMAIN-SUFFIX,github.io,节点选择
  - DOMAIN,v2rayse.com,节点选择
  # 哔哩哔哩全系服务及第三方客户端漫游解析
  - DOMAIN-SUFFIX,bsbsb.top,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,bilibili.com,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,biliapi.net,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,biliapi.com,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,bilivideo.com,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,bilivideo.cn,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,b23.tv,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,hdslb.com,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,biligame.com,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,bilibili.tv,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,acgvideo.com,哔哩哔哩港澳台
  - RULE-SET,applications,全局直连
  - RULE-SET,private,全局直连
  - RULE-SET,reject,广告过滤
  - RULE-SET,apple,苹果服务
  - RULE-SET,icloud,iCloud服务
  - RULE-SET,Microsoft,微软服务
  - RULE-SET,YouTube,YouTube
  - RULE-SET,Netflix,Netflix
  - RULE-SET,bahamut,动画疯
  - RULE-SET,Spotify,Spotify
  - RULE-SET,BilibiliHMT,哔哩哔哩港澳台
  - RULE-SET,AI,AI
  - RULE-SET,TikTok,TikTok
  - RULE-SET,google,谷歌服务
  - RULE-SET,proxy,节点选择
  - RULE-SET,gfw,节点选择
  - RULE-SET,telegramcidr,Telegram,no-resolve
  - RULE-SET,direct,全局直连
  - RULE-SET,lancidr,全局直连,no-resolve
  - RULE-SET,cncidr,全局直连,no-resolve
  # 核心分流：境外非中国域名优先走代理（解决海外未被 GFW 屏蔽的测试站/小众网站误判直连导致真实 IP 泄露）
  - GEOSITE,geolocation-!cn,节点选择
  # 国内白名单直连
  - GEOSITE,CN,全局直连
  - GEOIP,LAN,全局直连,no-resolve
  - GEOIP,CN,全局直连,no-resolve
  - MATCH,漏网之鱼

