port: 7890
socks-port: 7891
mixed-port: 7890
allow-lan: true
mode: rule
log-level: info
ipv6: false
external-controller: 127.0.0.1:9090

dns:
  enable: true
  listen: 0.0.0.0:1053
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  nameserver:
    - 223.5.5.5
    - 119.29.29.29
    - 180.76.76.76
  fallback:
    - 8.8.8.8
    - 1.1.1.1
    - https://dns.google/dns-query

proxies:
  - name: "NL - Reality"
    type: vless
    server: 85.137.248.230
    port: 44332
    uuid: 4dab9370-a3ba-4a49-9d9b-ed9312866f43
    network: tcp
    udp: true
    tls: true
    flow: xtls-rprx-vision
    servername: itunes.apple.com
    client-fingerprint: chrome
    reality-opts:
      public-key: ok_XqyuxVegTOtRXUIScMS6H04d5QjW9V1zxQHVTgwM
      short-id: f4dff414

  - name: "NL - Shadowsocks"
    type: ss
    server: 85.137.248.230
    port: 44333
    cipher: aes-256-gcm
    password: tgbot_ss_pwd_2026
    udp: true

proxy-groups:
  - name: "PROXY"
    type: select
    proxies:
      - "NL - Reality"
      - "NL - Shadowsocks"
      - DIRECT

  - name: "AUTO"
    type: url-test
    url: http://www.gstatic.com/generate_204
    interval: 300
    proxies:
      - "NL - Reality"
      - "NL - Shadowsocks"

  - name: "MATCH"
    type: select
    proxies:
      - "PROXY"
      - "AUTO"
      - DIRECT

rules:
  - DOMAIN-SUFFIX,local,DIRECT
  - IP-CIDR,127.0.0.0/8,DIRECT
  - IP-CIDR,172.16.0.0/12,DIRECT
  - IP-CIDR,192.168.0.0/16,DIRECT
  - IP-CIDR,10.0.0.0/8,DIRECT
  - GEOIP,CN,DIRECT
  - MATCH,PROXY