# Generated configs for clash-meta with WireGuard proxies that have amnesia values.
# Time is: October 10, 2025
# Refer to : https://github.com/NiREvil/vless/wiki

mixed-port: 7890
ipv6: true
allow-lan: true
mode: rule
log-level: warning
disable-keep-alive: false
keep-alive-idle: 10
keep-alive-interval: 15
unified-delay: true
geo-auto-update: true
geo-update-interval: 168
external-controller: 127.0.0.1:9090
external-ui-url: https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip
external-ui: ui
external-controller-cors:
  allow-origins:
    - "*"
  allow-private-network: true
profile:
  store-selected: true
  store-fake-ip: true
dns:
  enable: true
  listen: 0.0.0.0:1053
  ipv6: true
  respect-rules: true
  use-system-hosts: false
  nameserver:
    - 1.1.1.1#🔰 PROXIES
  proxy-server-nameserver:
    - 8.8.8.8#DIRECT
  nameserver-policy:
    raw.githubusercontent.com: 8.8.8.8#DIRECT
    time.apple.com: 8.8.8.8#DIRECT
    rule-set:ir: 8.8.8.8#DIRECT
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter:
    - geosite:private
tun:
  enable: true
  stack: system
  auto-route: true
  strict-route: true
  endpoint-independent-nat: false
  auto-detect-interface: true
  dns-hijack:
    - any:53
    - tcp://any:53
  mtu: 9000
sniffer:
  enable: true
  force-dns-mapping: true
  parse-pure-ip: true
  override-destination: false
  sniff:
    HTTP:
      ports:
        - 80
        - 8080
        - 8880
        - 2052
        - 2082
        - 2086
        - 2095
    TLS:
      ports:
        - 443
        - 8443
        - 2053
        - 2083
        - 2087
        - 2096
proxies:
  - name: SW-DIALER-01
    type: wireguard
    ip: 172.16.0.3/32
    ipv6: 2606:4700:110:89e9:f2:ee75:d55b:5e6b/128
    ip-version: dual
    private-key: GN48eIxGheBrFnewoamwUUWvYhUZaLCcmi5jV9vM0F4=
    server: 162.159.195.1
    port: 5956
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: 4xrX
    udp: true
    mtu: 1330
    dialer-proxy: IR-ENTRY-01
  - name: IR-ENTRY-01
    type: wireguard
    ip: 172.16.0.2/32
    ipv6: 2606:4700:110:8918:9e43:7298:2327:ea6b/128
    ip-version: dual
    private-key: kKfAV2l2HWksCNZoX42sBT+HCPIRi0apIqillJ8SN0I=
    server: 162.159.195.2
    port: 4177
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: yV0p
    udp: true
    mtu: 1330
    amnezia-wg-option:
      jc: "33"
      jmin: "50"
      jmax: "70"
  - name: SW-DIALER-02
    type: wireguard
    ip: 172.16.0.3/32
    ipv6: 2606:4700:110:89e9:f2:ee75:d55b:5e6b/128
    ip-version: dual
    private-key: GN48eIxGheBrFnewoamwUUWvYhUZaLCcmi5jV9vM0F4=
    server: 162.159.195.4
    port: 928
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: 4xrX
    udp: true
    mtu: 1330
    dialer-proxy: IR-ENTRY-02
  - name: IR-ENTRY-02
    type: wireguard
    ip: 172.16.0.2/32
    ipv6: 2606:4700:110:8918:9e43:7298:2327:ea6b/128
    ip-version: dual
    private-key: kKfAV2l2HWksCNZoX42sBT+HCPIRi0apIqillJ8SN0I=
    server: wire.nscl.ir
    port: 7281
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: yV0p
    udp: true
    mtu: 1330
    amnezia-wg-option:
      jc: "33"
      jmin: "50"
      jmax: "70"
  - name: SW-DIALER-03
    type: wireguard
    ip: 172.16.0.3/32
    ipv6: 2606:4700:110:89e9:f2:ee75:d55b:5e6b/128
    ip-version: dual
    private-key: GN48eIxGheBrFnewoamwUUWvYhUZaLCcmi5jV9vM0F4=
    server: 162.159.195.5
    port: 1070
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: 4xrX
    udp: true
    mtu: 1330
    dialer-proxy: IR-ENTRY-03
  - name: IR-ENTRY-03
    type: wireguard
    ip: 172.16.0.2/32
    ipv6: 2606:4700:110:8918:9e43:7298:2327:ea6b/128
    ip-version: dual
    private-key: kKfAV2l2HWksCNZoX42sBT+HCPIRi0apIqillJ8SN0I=
    server: 162.159.195.8
    port: 500
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: yV0p
    udp: true
    mtu: 1330
    amnezia-wg-option:
      jc: "33"
      jmin: "50"
      jmax: "70"
  - name: SW-DIALER-04
    type: wireguard
    ip: 172.16.0.3/32
    ipv6: 2606:4700:110:89e9:f2:ee75:d55b:5e6b/128
    ip-version: dual
    private-key: GN48eIxGheBrFnewoamwUUWvYhUZaLCcmi5jV9vM0F4=
    server: 162.159.192.9
    port: 988
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: 4xrX
    udp: true
    mtu: 1330
    dialer-proxy: IR-ENTRY-04
  - name: IR-ENTRY-04
    type: wireguard
    ip: 172.16.0.2/32
    ipv6: 2606:4700:110:8918:9e43:7298:2327:ea6b/128
    ip-version: dual
    private-key: kKfAV2l2HWksCNZoX42sBT+HCPIRi0apIqillJ8SN0I=
    server: 162.159.192.10
    port: 7281
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: yV0p
    udp: true
    mtu: 1330
    amnezia-wg-option:
      jc: "33"
      jmin: "50"
      jmax: "70"
  - name: SW-DIALER-05
    type: wireguard
    ip: 172.16.0.3/32
    ipv6: 2606:4700:110:89e9:f2:ee75:d55b:5e6b/128
    ip-version: dual
    private-key: GN48eIxGheBrFnewoamwUUWvYhUZaLCcmi5jV9vM0F4=
    server: 162.159.192.13
    port: 988
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: 4xrX
    udp: true
    mtu: 1330
    dialer-proxy: IR-ENTRY-05
  - name: IR-ENTRY-05
    type: wireguard
    ip: 172.16.0.2/32
    ipv6: 2606:4700:110:8918:9e43:7298:2327:ea6b/128
    ip-version: dual
    private-key: kKfAV2l2HWksCNZoX42sBT+HCPIRi0apIqillJ8SN0I=
    server: 162.159.192.14
    port: 854
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: yV0p
    udp: true
    mtu: 1330
    amnezia-wg-option:
      jc: "33"
      jmin: "50"
      jmax: "70"
  - name: SW-DIALER-06
    type: wireguard
    ip: 172.16.0.3/32
    ipv6: 2606:4700:110:89e9:f2:ee75:d55b:5e6b/128
    ip-version: dual
    private-key: GN48eIxGheBrFnewoamwUUWvYhUZaLCcmi5jV9vM0F4=
    server: 162.159.192.15
    port: 1387
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: 4xrX
    udp: true
    mtu: 1330
    dialer-proxy: IR-ENTRY-06
  - name: IR-ENTRY-06
    type: wireguard
    ip: 172.16.0.2/32
    ipv6: 2606:4700:110:8918:9e43:7298:2327:ea6b/128
    ip-version: dual
    private-key: kKfAV2l2HWksCNZoX42sBT+HCPIRi0apIqillJ8SN0I=
    server: 162.159.192.16
    port: 1701
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: yV0p
    udp: true
    mtu: 1330
    amnezia-wg-option:
      jc: "33"
      jmin: "50"
      jmax: "70"
  - name: SW-DIALER-07
    type: wireguard
    ip: 172.16.0.3/32
    ipv6: 2606:4700:110:89e9:f2:ee75:d55b:5e6b/128
    ip-version: dual
    private-key: GN48eIxGheBrFnewoamwUUWvYhUZaLCcmi5jV9vM0F4=
    server: 162.159.192.17
    port: 3581
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: 4xrX
    udp: true
    mtu: 1330
    dialer-proxy: IR-ENTRY-07
  - name: IR-ENTRY-07
    type: wireguard
    ip: 172.16.0.2/32
    ipv6: 2606:4700:110:8918:9e43:7298:2327:ea6b/128
    ip-version: dual
    private-key: kKfAV2l2HWksCNZoX42sBT+HCPIRi0apIqillJ8SN0I=
    server: 2606:4700:d0::a29f:c001
    port: 878
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: yV0p
    udp: true
    mtu: 1330
    amnezia-wg-option:
      jc: "33"
      jmin: "50"
      jmax: "7"
  - name: SW-DIALER-08
    type: wireguard
    ip: 172.16.0.3/32
    ipv6: 2606:4700:110:89e9:f2:ee75:d55b:5e6b/128
    ip-version: dual
    private-key: GN48eIxGheBrFnewoamwUUWvYhUZaLCcmi5jV9vM0F4=
    server: 162.159.192.18
    port: 3138
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: 4xrX
    udp: true
    mtu: 1330
    dialer-proxy: IR-ENTRY-08
  - name: IR-ENTRY-08
    type: wireguard
    ip: 172.16.0.2/32
    ipv6: 2606:4700:110:8918:9e43:7298:2327:ea6b/128
    ip-version: dual
    private-key: kKfAV2l2HWksCNZoX42sBT+HCPIRi0apIqillJ8SN0I=
    server: 2606:4700:d0::a29f:c002
    port: 2408
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips:
      - 0.0.0.0/0
      - ::/0
    reserved: yV0p
    udp: true
    mtu: 1330
    amnezia-wg-option:
      jc: "33"
      jmin: "50"
      jmax: "70"
proxy-groups:
  - name: 🔰 PROXIES
    type: select
    proxies:
      - 🇮🇷 AUTO-IR-ENTRY
      - 🇸🇪 AUTO-SW-DIALER
      - DIRECT
      - SW-DIALER-01
      - SW-DIALER-02
      - SW-DIALER-03
      - SW-DIALER-04
      - SW-DIALER-05
      - SW-DIALER-06
      - SW-DIALER-07
      - SW-DIALER-08
      - IR-ENTRY-01
      - IR-ENTRY-02
      - IR-ENTRY-03
      - IR-ENTRY-04
      - IR-ENTRY-05
      - IR-ENTRY-06
      - IR-ENTRY-07
      - IR-ENTRY-08
  - name: 🇮🇷 AUTO-IR-ENTRY
    type: url-test
    url: https://www.gstatic.com/generate_204
    interval: 180
    tolerance: 50
    timeout: 5000
    max-failed-times: 3
    proxies:
      - IR-ENTRY-01
      - IR-ENTRY-02
      - IR-ENTRY-03
      - IR-ENTRY-04
      - IR-ENTRY-05
      - IR-ENTRY-06
      - IR-ENTRY-07
      - IR-ENTRY-08
  - name: 🇸🇪 AUTO-SW-DIALER
    type: url-test
    url: https://www.gstatic.com/generate_204
    interval: 180
    tolerance: 50
    timeout: 5000
    max-failed-times: 3
    proxies:
      - SW-DIALER-01
      - SW-DIALER-02
      - SW-DIALER-03
      - SW-DIALER-04
      - SW-DIALER-05
      - SW-DIALER-06
      - SW-DIALER-07
      - SW-DIALER-08
rule-providers:
  phishing:
    type: http
    format: text
    behavior: domain
    url: https://raw.githubusercontent.com/Chocolate4U/Iran-clash-rules/release/phishing.txt
    path: ./ruleset/phishing.txt
    interval: 86400
  malware:
    type: http
    format: text
    behavior: domain
    url: https://raw.githubusercontent.com/Chocolate4U/Iran-clash-rules/release/malware.txt
    path: ./ruleset/malware.txt
    interval: 86400
  cryptominers:
    type: http
    format: text
    behavior: domain
    url: https://raw.githubusercontent.com/Chocolate4U/Iran-clash-rules/release/cryptominers.txt
    path: ./ruleset/cryptominers.txt
    interval: 86400
  category-ads-all:
    type: http
    format: text
    behavior: domain
    url: https://raw.githubusercontent.com/Chocolate4U/Iran-clash-rules/release/category-ads-all.txt
    path: ./ruleset/category-ads-all.txt
    interval: 86400
  private:
    type: http
    format: yaml
    behavior: domain
    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/private.yaml
    path: ./ruleset/private.yaml
    interval: 86400
  private-cidr:
    type: http
    format: yaml
    behavior: ipcidr
    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/private.yaml
    path: ./ruleset/private-cidr.yaml
    interval: 86400
  ir:
    type: http
    format: text
    behavior: domain
    url: https://raw.githubusercontent.com/Chocolate4U/Iran-clash-rules/release/ir.txt
    path: ./ruleset/ir.txt
    interval: 86400
  ir-cidr:
    type: http
    format: text
    behavior: ipcidr
    url: https://raw.githubusercontent.com/Chocolate4U/Iran-clash-rules/release/ircidr.txt
    path: ./ruleset/ir-cidr.txt
    interval: 86400
rules:
  - RULE-SET,phishing,REJECT
  - RULE-SET,malware,REJECT
  - RULE-SET,cryptominers,REJECT
  - RULE-SET,category-ads-all,REJECT
  - RULE-SET,private,DIRECT
  - RULE-SET,private-cidr,DIRECT,no-resolve
  - RULE-SET,ir,DIRECT
  - RULE-SET,ir-cidr,DIRECT,no-resolve
  - MATCH,🔰 PROXIES
ntp:
  enable: true
  server: time.apple.com
  port: 123
  interval: 30