# ==============================================================================
# OpenWrt / OpenClash 专属静态配置文件 (适用于软路由 / 旁路由网关)
# 功能特色：全屋设备局域网共享、全屋防 DNS / WebRTC 泄露、多机场订阅自动合并、Koolson 全彩图标
# ==============================================================================

port: 7890
socks-port: 7891
mixed-port: 7890

# 软路由局域网共享控制：必须为 true，以允许局域网内所有手机、电视、电脑免客户端自动翻墙
allow-lan: true
bind-address: "*"

# 运行模式：rule (规则分流) / global (全局代理) / direct (全局直连)
mode: rule

# 日志级别：info / warning / error / debug / silent
log-level: info

# RESTful API 控制端口与访问密码
# 💡 软路由需监听 0.0.0.0，以便局域网内的电脑能在浏览器输入 http://路由器IP:9090 打开 Yacd 面板测速或切换节点
# 💡 强烈建议修改下方示例密码为自己的专属密钥（建议使用英文字母与数字组合，除下划线 _ 外切勿使用其他特殊符号）
external-controller: 0.0.0.0:9090
secret: "Clash_ChangeMe_2026" # 👈 此处请修改为你自己的专属密钥（避免使用默认公开值）
dns:
  enable: true
  listen: 0.0.0.0:1053
  ipv6: false
  prefer-h3: false
  respect-rules: true
  use-system-hosts: false
  cache-algorithm: arc
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter:
    - +.lan
    - +.local
    - +.msftconnecttest.com
    - +.msftncsi.com
    - localhost.ptlogin2.qq.com
    - localhost.sec.qq.com
    - +.in-addr.arpa
    - +.ip6.arpa
    - time.*.com
    - time.*.gov
    - pool.ntp.org
    - localhost.work.weixin.qq.com
  default-nameserver:
    - 223.5.5.5
    - 1.2.4.8
  nameserver:
    - https://1.1.1.1/dns-query
    - https://8.8.8.8/dns-query
    - https://8.8.4.4/dns-query
  proxy-server-nameserver:
    - https://223.5.5.5/dns-query
    - https://doh.pub/dns-query
  direct-nameserver:
    - https://223.5.5.5/dns-query
    - https://doh.pub/dns-query
  nameserver-policy:
    geosite:private,cn:
      - https://223.5.5.5/dns-query
      - https://doh.pub/dns-query
sniffer:
  enable: true
  force-dns-mapping: true
  parse-pure-ip: true
  sniff:
    HTTP:
      ports:
        - 80
        - 8080-8880
      override-destination: true
    TLS:
      ports:
        - 443
        - 8443
    QUIC:
      ports:
        - 443
geox-url:
  geoip: "https://fastly.jsdelivr.net/gh/Loyalsoldier/v2ray-rules-dat@release/geoip.dat"
  geosite: "https://fastly.jsdelivr.net/gh/Loyalsoldier/v2ray-rules-dat@release/geosite.dat"
  mmdb: "https://fastly.jsdelivr.net/gh/Loyalsoldier/geoip@release/Country.mmdb"
  asn: "https://fastly.jsdelivr.net/gh/Loyalsoldier/geoip@release/GeoLite2-ASN.mmdb"
# ==============================================================================
# 机场订阅配置区域 (支持填入 1 个或多个订阅链接)
# ==============================================================================
# 💡 使用说明：
# 1. 只有一个订阅：只需在 airport-1 的 url 处粘贴你的订阅链接，将 airport-2 和 airport-3 整段删除。
# 2. 有多个订阅：按格式在下方依次添加，每个订阅起一个唯一的英文字符名（如 airport-1, airport-2）。
# 3. 自动汇聚：所有代理策略组均已开启 include-all，客户端会自动拉取并将所有订阅的节点汇总合并，无需手动挑选！
# 4. 首次使用提示：导入配置后，请在客户端“代理/提供者 (Providers)”列表中点击一次 🔄 刷新以拉取节点。
proxy-providers:
  airport-1:
    type: http
    url: "https://airport-1.com/api/v1/client/subscribe?token=xxxx"  # 👈 【第 1 个机场订阅链接】粘贴在此
    path: ./proxy_providers/airport-1.yaml
    override:
      udp: true
    interval: 86400  # 自动更新间隔时间（单位：秒，86400 即 24 小时）
    filter: "^(?!.*(官网|套餐|流量|异常|剩余)).*$"  # 自动过滤官网公告、剩余流量等非节点提示
    healthCheck:
      enable: true
      url: https://cp.cloudflare.com/generate_204
      interval: 300

  airport-2:
    type: http
    url: "https://airport-2.com/api/v1/client/subscribe?token=yyyy"  # 👈 【第 2 个机场订阅链接】（若无此订阅整段删除即可）
    path: ./proxy_providers/airport-2.yaml
    override:
      udp: true
    interval: 86400
    override:
      udp: true
    filter: "^(?!.*(官网|套餐|流量|异常|剩余)).*$"
    healthCheck:
      enable: true
      url: https://cp.cloudflare.com/generate_204
      interval: 300

  airport-3:
    type: http
    url: "https://airport-3.com/api/v1/client/subscribe?token=zzzz"  # 👈 【第 3 个机场订阅链接】（若无此订阅整段删除即可）
    path: ./proxy_providers/airport-3.yaml
    override:
      udp: true
    interval: 86400
    filter: "^(?!.*(官网|套餐|流量|异常|剩余)).*$"
    healthCheck:
      enable: true
      url: https://cp.cloudflare.com/generate_204
      interval: 300

proxy-groups:
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 节点选择
    type: select
    include-all: true
    filter: ^(?!.*(官网|套餐|流量|异常|剩余)).*$
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Proxy.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 谷歌服务
    type: select
    proxies:
      - 节点选择
      - 全局直连
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Google_Search.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: YouTube
    type: select
    proxies:
      - 节点选择
      - 全局直连
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/YouTube.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: Telegram
    type: select
    proxies:
      - 节点选择
      - 全局直连
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Telegram.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: Spotify
    type: select
    proxies:
      - 节点选择
      - 全局直连
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Spotify.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: AI
    type: select
    include-all: true
    proxies:
      - 节点选择
    icon: https://fastly.jsdelivr.net/gh/chxm1023/Script_X@main/icon/ChatGPT/ChatGPT4.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: TikTok
    type: select
    include-all: true
    proxies:
      - 节点选择
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/TikTok.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: Netflix
    type: select
    proxies:
      - 节点选择
      - 全局直连
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Netflix.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 微软服务
    type: select
    proxies:
      - 节点选择
      - 全局直连
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Orz-3/mini@master/Color/Microsoft.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 苹果服务
    type: select
    proxies:
      - 全局直连
      - 节点选择
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Apple.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: iCloud服务
    type: select
    proxies:
      - 全局直连
      - 节点选择
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/iCloud.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 动画疯
    type: select
    proxies:
      - 节点选择
    include-all: true
    filter: (?i)台|tw|TW
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Bahamut.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 哔哩哔哩港澳台
    type: select
    proxies:
      - 全局直连
      - 节点选择
    include-all: true
    filter: "(?i)^(?!.*(官网|套餐|流量|异常|剩余)).*(港|hk|hong|🇭🇰|台|tw|taiwan|🇹🇼|澳|mo|macau|🇲🇴).*$"
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/bilibili.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 广告过滤
    type: select
    proxies:
      - REJECT
      - DIRECT
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Advertising.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 全局直连
    type: select
    proxies:
      - DIRECT
      - 节点选择
    include-all: true
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Direct.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 全局拦截
    type: select
    proxies:
      - REJECT
      - DIRECT
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Reject.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: 漏网之鱼
    type: select
    proxies:
      - 节点选择
      - 全局直连
    include-all: true
    filter: ^(?!.*(官网|套餐|流量|异常|剩余)).*$
    icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Final.png
  - interval: 300
    timeout: 5000
    url: https://cp.cloudflare.com/generate_204
    lazy: true
    max-failed-times: 3
    hidden: false
    name: WebRTC防护
    type: select
    proxies:
      - REJECT-DROP
      - 节点选择
    icon: https://fastly.jsdelivr.net/gh/Niklaus88/icon@main/Webrtc.png
rule-providers:
  reject:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt
    path: ./ruleset/loyalsoldier/reject.yaml
  icloud:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt
    path: ./ruleset/loyalsoldier/icloud.yaml
  apple:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt
    path: ./ruleset/loyalsoldier/apple.yaml
  google:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt
    path: ./ruleset/loyalsoldier/google.yaml
  proxy:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt
    path: ./ruleset/loyalsoldier/proxy.yaml
  direct:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt
    path: ./ruleset/loyalsoldier/direct.yaml
  private:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt
    path: ./ruleset/loyalsoldier/private.yaml
  gfw:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt
    path: ./ruleset/loyalsoldier/gfw.yaml
  tld-not-cn:
    type: http
    format: yaml
    interval: 86400
    behavior: domain
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt
    path: ./ruleset/loyalsoldier/tld-not-cn.yaml
  telegramcidr:
    type: http
    format: yaml
    interval: 86400
    behavior: ipcidr
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt
    path: ./ruleset/loyalsoldier/telegramcidr.yaml
  cncidr:
    type: http
    format: yaml
    interval: 86400
    behavior: ipcidr
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt
    path: ./ruleset/loyalsoldier/cncidr.yaml
  lancidr:
    type: http
    format: yaml
    interval: 86400
    behavior: ipcidr
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt
    path: ./ruleset/loyalsoldier/lancidr.yaml
  applications:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt
    path: ./ruleset/loyalsoldier/applications.yaml
  bahamut:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/Bahamut.txt
    path: ./ruleset/Niklaus88/bahamut.yaml
  YouTube:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/YouTube.txt
    path: ./ruleset/Niklaus88/YouTube.yaml
  Netflix:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/Netflix.txt
    path: ./ruleset/Niklaus88/Netflix.yaml
  Spotify:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/Spotify.txt
    path: ./ruleset/Niklaus88/Spotify.yaml
  BilibiliHMT:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/BilibiliHMT.txt
    path: ./ruleset/Niklaus88/BilibiliHMT.yaml
  AI:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/AI.txt
    path: ./ruleset/Niklaus88/AI.yaml
  TikTok:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/TikTok.txt
    path: ./ruleset/Niklaus88/TikTok.yaml
  Microsoft:
    type: http
    format: yaml
    interval: 86400
    behavior: classical
    url: https://fastly.jsdelivr.net/gh/Niklaus88/rules@main/rule/Microsoft.txt
    path: ./ruleset/Niklaus88/Microsoft.yaml
rules:
  # 受信会议与实时音视频软件（优先放行或走代理）
  - PROCESS-NAME,Zoom.exe,全局直连
  - PROCESS-NAME,Discord.exe,节点选择
  - DOMAIN-SUFFIX,zoom.us,全局直连
  - DOMAIN-SUFFIX,zoom.com,全局直连
  - DOMAIN-SUFFIX,discord.com,节点选择
  - DOMAIN-SUFFIX,discord.gg,节点选择
  - DST-PORT,3478,WebRTC防护
  - DST-PORT,5349,WebRTC防护
  - DST-PORT,19302,WebRTC防护
  - DST-PORT,19303,WebRTC防护
  - DST-PORT,19304,WebRTC防护
  - DST-PORT,19305,WebRTC防护
  - DST-PORT,19306,WebRTC防护
  - DST-PORT,19307,WebRTC防护
  - DST-PORT,19308,WebRTC防护
  - DST-PORT,19309,WebRTC防护
  - DOMAIN-KEYWORD,stun,WebRTC防护
  - DOMAIN-SUFFIX,googleapis.cn,谷歌服务
  - DOMAIN-SUFFIX,gstatic.com,谷歌服务
  - DOMAIN-SUFFIX,xn--ngstr-lra8j.com,谷歌服务
  - DOMAIN-SUFFIX,github.io,节点选择
  - DOMAIN,v2rayse.com,节点选择
  # 哔哩哔哩全系服务及第三方客户端漫游解析
  - DOMAIN-SUFFIX,bsbsb.top,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,bilibili.com,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,biliapi.net,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,biliapi.com,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,bilivideo.com,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,bilivideo.cn,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,b23.tv,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,hdslb.com,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,biligame.com,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,bilibili.tv,哔哩哔哩港澳台
  - DOMAIN-SUFFIX,acgvideo.com,哔哩哔哩港澳台
  - RULE-SET,applications,全局直连
  - RULE-SET,private,全局直连
  - RULE-SET,reject,广告过滤
  - RULE-SET,apple,苹果服务
  - RULE-SET,icloud,iCloud服务
  - RULE-SET,Microsoft,微软服务
  - RULE-SET,YouTube,YouTube
  - RULE-SET,Netflix,Netflix
  - RULE-SET,bahamut,动画疯
  - RULE-SET,Spotify,Spotify
  - RULE-SET,BilibiliHMT,哔哩哔哩港澳台
  - RULE-SET,AI,AI
  - RULE-SET,TikTok,TikTok
  - RULE-SET,google,谷歌服务
  - RULE-SET,proxy,节点选择
  - RULE-SET,gfw,节点选择
  - RULE-SET,telegramcidr,Telegram,no-resolve
  - RULE-SET,direct,全局直连
  - RULE-SET,lancidr,全局直连,no-resolve
  - RULE-SET,cncidr,全局直连,no-resolve
  # 核心分流：境外非中国域名优先走代理（解决海外未被 GFW 屏蔽的测试站/小众网站误判直连导致真实 IP 泄露）
  - GEOSITE,geolocation-!cn,节点选择
  # 国内白名单直连
  - GEOSITE,CN,全局直连
  - GEOIP,LAN,全局直连,no-resolve
  - GEOIP,CN,全局直连,no-resolve
  - MATCH,漏网之鱼