# audit-waive: 1 加密 DNS 端点保留 2 个主机名形式（dns.google / dns.alidns.com）。

[General]
loglevel = notify
show-error-page-for-reject = true

dns-server = 223.5.5.5, 119.29.29.29, 1.1.1.1, 8.8.8.8
encrypted-dns-server = https://1.1.1.1/dns-query, https://dns.google/dns-query, https://dns.alidns.com/dns-query
encrypted-dns-follow-outbound-mode = false
hijack-dns = 8.8.8.8:53, 8.8.4.4:53, 1.1.1.1:53, 1.0.0.1:53, 9.9.9.9:53, 208.67.222.222:53
allow-dns-svcb = false
exclude-simple-hostnames = true
read-etc-hosts = true
use-local-host-item-for-proxy = false

ipv6 = false
ipv6-vif = disable

geoip-maxmind-url = https://raw.githubusercontent.com/adysec/IP_database/main/geolite/GeoLite2-Country.mmdb
disable-geoip-db-auto-update = false

test-timeout = 5
internet-test-url = http://connect.rom.miui.com/generate_204
proxy-test-url = http://www.gstatic.com/generate_204
proxy-test-udp = apple.com@1.1.1.1

udp-policy-not-supported-behaviour = reject
udp-priority = true
block-quic = per-policy

allow-wifi-access = false
allow-hotspot-access = false
proxy-restricted-to-lan = true
gateway-restricted-to-lan = true

all-hybrid = false
wifi-assist = false

always-real-ip = *.lan, *.local, *.localdomain, *.home.arpa, *.srv.nintendo.net, *.stun.playstation.net, *.xboxlive.com, stun.*, time.*.com, ntp.*.com, *.pool.ntp.org, *.market.xiaomi.com

[SSID Setting]
SSID:MyHome suspend=true

[Proxy]

[Proxy Group]
Airport = select, policy-path=https://sub.example.com/api/v1/client/subscribe?token=REPLACE_WITH_YOUR_TOKEN, update-interval=86400, hidden=true, icon-url=https://raw.githubusercontent.com/RiverFlowsInUUU/Self-Configuration/main/icons/Airport.png

Proxy = smart, include-other-group="Airport", icon-url=https://raw.githubusercontent.com/RiverFlowsInUUU/Self-Configuration/main/icons/Proxy.png

AI = select, include-other-group="Airport", icon-url=https://raw.githubusercontent.com/RiverFlowsInUUU/Self-Configuration/main/icons/openai.png

AD = select, REJECT, icon-url=https://raw.githubusercontent.com/RiverFlowsInUUU/Self-Configuration/main/icons/AdBlock.png

[Rule]
RULE-SET,https://raw.githubusercontent.com/RiverFlowsInUUU/Jinx/main/surge-direct.list,DIRECT,"update-interval=604800"

RULE-SET,https://raw.githubusercontent.com/RiverFlowsInUUU/Jinx/main/surge-ads.list,REJECT,"update-interval=604800",pre-matching,extended-matching

RULE-SET,https://raw.githubusercontent.com/TG-Twilight/AWAvenue-Ads-Rule/main/Filters/AWAvenue-Ads-Rule-Surge-RULE-SET.list,REJECT,"update-interval=604800",pre-matching,extended-matching

RULE-SET,SYSTEM,DIRECT

RULE-SET,LAN,DIRECT,no-resolve
RULE-SET,https://raw.githubusercontent.com/Loyalsoldier/surge-rules/release/ruleset/private.txt,DIRECT,"update-interval=604800"

RULE-SET,https://raw.githubusercontent.com/Repcz/Tool/X/Surge/Rules/AI.list,AI,"update-interval=604800"
RULE-SET,https://raw.githubusercontent.com/RiverFlowsInUUU/Self-Configuration/main/rules/AI.list,AI,"update-interval=604800"

RULE-SET,https://raw.githubusercontent.com/Loyalsoldier/surge-rules/release/ruleset/direct.txt,DIRECT,"update-interval=604800"

GEOIP,CN,DIRECT,no-resolve

FINAL,Proxy,dns-failed

[Host]
localhost = server:system
*.lan = server:system
*.local = server:system

[URL Rewrite]
^https?://(www\.)?g\.cn https://www.google.com 302
^https?://(www\.)?google\.cn https://www.google.com 302