config status 'status'

config config 'config'
	option 'init' '1'
	option 'enabled' '0'
	option 'profile' 'subscription:subscription'
	option 'start_delay' '0'
	option 'scheduled_restart' '0'
	option 'cron_expression' '0 3 * * *'
	option 'test_profile' '1'
	option 'fast_reload' '0'
	option 'core_only' '0'

config proxy 'proxy'
	option 'enabled' '1'
	option 'tcp_mode' 'redirect'
	option 'udp_mode' 'tun'
	option 'ipv4_dns_hijack' '1'
	option 'ipv6_dns_hijack' '1'
	option 'ipv4_proxy' '1'
	option 'ipv6_proxy' '1'
	option 'fake_ip_ping_hijack' '1'
	option 'router_proxy' '1'
	option 'lan_proxy' '1'
	list 'lan_inbound_interface' 'lan'
	list 'bypass_dscp' '4'
	option 'bypass_china_mainland_ip' '0'
	option 'proxy_tcp_dport' '0-65535'
	option 'proxy_udp_dport' '0-65535'
	option 'tun_timeout' '30'
	option 'tun_inverval' '1'

config subscription 'subscription'
	option 'name' 'default'
	option 'url' 'http://example.com/default.yaml'
	option 'user_agent' 'clash'
	option 'prefer' 'remote'

config mixin 'mixin'
	option 'log_level' 'warning'
	option 'mode' 'rule'
	option 'match_process' 'off'
	option 'ipv6' '1'
	option 'ui_url' 'https://github.com/Zephyruso/zashboard/releases/latest/download/dist-cdn-fonts.zip'
	option 'api_listen' '[::]:9090'
	option 'selection_cache' '1'
	option 'allow_lan' '1'
	option 'http_port' '8080'
	option 'socks_port' '1080'
	option 'mixed_port' '7890'
	option 'redir_port' '7891'
	option 'tproxy_port' '7892'
	option 'authentication' '1'
	option 'tun_device' 'nikki'
	option 'tun_stack' 'mixed'
	option 'tun_dns_hijack' '0'
	list 'tun_dns_hijacks' 'tcp://any:53'
	list 'tun_dns_hijacks' 'udp://any:53'
	option 'dns_listen' '[::]:1053'
	option 'dns_ipv6' '1'
	option 'dns_mode' 'fake-ip'
	option 'fake_ip_range' '198.18.0.1/16'
	option 'fake_ip_filter' '0'
	list 'fake_ip_filters' '+.lan'
	list 'fake_ip_filters' '+.local'
	option 'fake_ip_cache' '1'
	option 'hosts' '0'
	option 'dns_nameserver' '0'
	option 'dns_nameserver_policy' '0'
	option 'sniffer_force_domain_name' '0'
	option 'sniffer_ignore_domain_name' '0'
	option 'sniffer_sniff' '0'
	option 'rule' '0'
	option 'rule_provider' '0'
	option 'mixin_file_content' '0'

config env 'env'
	option 'disable_loopback_detector' '0'
	option 'disable_quic_go_gso' '0'
	option 'disable_quic_go_ecn' '0'
	option 'skip_system_ipv6_check' '0'

config router_access_control
	option 'enabled' '1'
	list 'user' 'dnsmasq'
	list 'user' 'ftp'
	list 'user' 'logd'
	list 'user' 'nobody'
	list 'user' 'ntp'
	list 'user' 'ubus'
	list 'group' 'dnsmasq'
	list 'group' 'ftp'
	list 'group' 'logd'
	list 'group' 'nogroup'
	list 'group' 'ntp'
	list 'group' 'ubus'
	list 'cgroup' 'services/adguardhome'
	list 'cgroup' 'services/aria2'
	list 'cgroup' 'services/dnsmasq'
	list 'cgroup' 'services/netbird'
	list 'cgroup' 'services/qbittorrent'
	list 'cgroup' 'services/sysntpd'
	list 'cgroup' 'services/tailscale'
	list 'cgroup' 'services/zerotier'
	option 'proxy' '0'

config router_access_control
	option 'enabled' '1'
	option 'proxy' '1'

config lan_access_control
	option 'enabled' '1'
	option 'proxy' '1'

config routing 'routing'
	option 'tproxy_fw_mark' '0x80'
	option 'tun_fw_mark' '0x81'
	option 'tproxy_rule_pref' '1024'
	option 'tun_rule_pref' '1025'
	option 'tproxy_route_table' '80'
	option 'tun_route_table' '81'
	option 'cgroup_id' '0x12061206'
	option 'cgroup_name' 'nikki'

config authentication
	option 'enabled' '1'
	option 'username' 'nikki'
	option 'password' ''

config hosts
	option 'enabled' '0'
	option 'domain_name' 'localhost'
	list 'ip' '127.0.0.1'
	list 'ip' '::1'

config nameserver
	option 'enabled' '1'
	option 'type' 'default-nameserver'
	list 'nameserver' '223.5.5.5'
	list 'nameserver' '223.6.6.6'

config nameserver
	option 'enabled' '0'
	option 'type' 'proxy-server-nameserver'
	list 'nameserver' 'https://223.5.5.5/dns-query'
	list 'nameserver' 'https://223.6.6.6/dns-query'

config nameserver
	option 'enabled' '0'
	option 'type' 'direct-nameserver'
	list 'nameserver' 'https://223.5.5.5/dns-query'
	list 'nameserver' 'https://223.6.6.6/dns-query'

config nameserver
	option 'enabled' '1'
	option 'type' 'nameserver'
	list 'nameserver' 'https://223.5.5.5/dns-query'
	list 'nameserver' 'https://223.6.6.6/dns-query'

config nameserver_policy
	option 'enabled' '1'
	option 'matcher' 'geosite:private,cn'
	list 'nameserver' 'https://223.5.5.5/dns-query'
	list 'nameserver' 'https://223.6.6.6/dns-query'

config nameserver_policy
	option 'enabled' '1'
	option 'matcher' 'geosite:geolocation-!cn'
	list 'nameserver' 'https://1.1.1.1/dns-query'
	list 'nameserver' 'https://8.8.8.8/dns-query'

config sniff
	option 'enabled' '1'
	option 'protocol' 'HTTP'
	list 'port' '80'
	list 'port' '8080'
	option 'overwrite_destination' '1'

config sniff
	option 'enabled' '1'
	option 'protocol' 'TLS'
	list 'port' '443'
	list 'port' '8443'
	option 'overwrite_destination' '1'

config sniff
	option 'enabled' '1'
	option 'protocol' 'QUIC'
	list 'port' '443'
	list 'port' '8443'
	option 'overwrite_destination' '1'

config editor 'editor'

config log 'log'
