openwrt_helloworld/nikki/files/nikki.conf

config status 'status'

config config 'config'
	option 'init' '1'
	option 'enabled' '0'
	option 'profile' 'subscription:subscription'
	option 'start_delay' '0'
	option 'scheduled_restart' '0'
	option 'cron_expression' '0 3 * * *'
	option 'test_profile' '1'
	option 'fast_reload' '0'
	option 'core_only' '0'

config env 'env'
	option 'disable_loopback_detector' '0'
	option 'disable_quic_go_gso' '0'
	option 'disable_quic_go_ecn' '0'
	option 'skip_system_ipv6_check' '0'

config subscription 'subscription'
	option 'name' 'default'
	option 'url' 'http://example.com/default.yaml'
	option 'user_agent' 'clash'
	option 'prefer' 'remote'

config mixin 'mixin'
	option 'log_level' 'warning'
	option 'mode' 'rule'
	option 'match_process' 'off'
	option 'ipv6' '1'
	option 'ui_url' 'https://github.com/Zephyruso/zashboard/releases/latest/download/dist-cdn-fonts.zip'
	option 'api_listen' '[::]:9090'
	option 'selection_cache' '1'
	option 'allow_lan' '1'
	option 'http_port' '8080'
	option 'socks_port' '1080'
	option 'mixed_port' '7890'
	option 'redir_port' '7891'
	option 'tproxy_port' '7892'
	option 'authentication' '1'
	option 'tun_device' 'nikki'
	option 'tun_stack' 'mixed'
	option 'tun_dns_hijack' '0'
	list 'tun_dns_hijacks' 'tcp://any:53'
	list 'tun_dns_hijacks' 'udp://any:53'
	option 'dns_listen' '[::]:1053'
	option 'dns_ipv6' '1'
	option 'dns_mode' 'fake-ip'
	option 'fake_ip_range' '198.18.0.1/16'
	option 'fake_ip_filter' '0'
	list 'fake_ip_filters' '+.lan'
	list 'fake_ip_filters' '+.local'
	option 'fake_ip_cache' '1'
	option 'hosts' '0'
	option 'dns_nameserver' '0'
	option 'dns_nameserver_policy' '0'
	option 'sniffer_force_domain_name' '0'
	option 'sniffer_ignore_domain_name' '0'
	option 'sniffer_sniff' '0'
	option 'rule' '0'
	option 'rule_provider' '0'
	option 'mixin_file_content' '0'

config authentication
	option 'enabled' '1'
	option 'username' 'nikki'
	option 'password' ''

config hosts
	option 'enabled' '0'
	option 'domain_name' 'localhost'
	list 'ip' '127.0.0.1'
	list 'ip' '::1'

config nameserver
	option 'enabled' '1'
	option 'type' 'default-nameserver'
	list 'nameserver' '223.5.5.5'
	list 'nameserver' '223.6.6.6'

config nameserver
	option 'enabled' '0'
	option 'type' 'proxy-server-nameserver'
	list 'nameserver' 'https://223.5.5.5/dns-query'
	list 'nameserver' 'https://223.6.6.6/dns-query'

config nameserver
	option 'enabled' '0'
	option 'type' 'direct-nameserver'
	list 'nameserver' 'https://223.5.5.5/dns-query'
	list 'nameserver' 'https://223.6.6.6/dns-query'

config nameserver
	option 'enabled' '1'
	option 'type' 'nameserver'
	list 'nameserver' 'https://223.5.5.5/dns-query'
	list 'nameserver' 'https://223.6.6.6/dns-query'

config nameserver_policy
	option 'enabled' '1'
	option 'matcher' 'geosite:private,cn'
	list 'nameserver' 'https://223.5.5.5/dns-query'
	list 'nameserver' 'https://223.6.6.6/dns-query'

config nameserver_policy
	option 'enabled' '1'
	option 'matcher' 'geosite:geolocation-!cn'
	list 'nameserver' 'https://1.1.1.1/dns-query'
	list 'nameserver' 'https://8.8.8.8/dns-query'

config sniff
	option 'enabled' '1'
	option 'protocol' 'HTTP'
	list 'port' '80'
	list 'port' '8080'
	option 'overwrite_destination' '1'

config sniff
	option 'enabled' '1'
	option 'protocol' 'TLS'
	list 'port' '443'
	list 'port' '8443'
	option 'overwrite_destination' '1'

config sniff
	option 'enabled' '1'
	option 'protocol' 'QUIC'
	list 'port' '443'
	list 'port' '8443'
	option 'overwrite_destination' '1'

config proxy 'proxy'
	option 'enabled' '1'
	option 'tcp_mode' 'redirect'
	option 'udp_mode' 'tun'
	option 'ipv4_dns_hijack' '1'
	option 'ipv6_dns_hijack' '1'
	option 'ipv4_proxy' '1'
	option 'ipv6_proxy' '1'
	option 'fake_ip_ping_hijack' '1'
	option 'router_proxy' '1'
	option 'lan_proxy' '1'
	list 'lan_inbound_interface' 'lan'
	list 'reserved_ip' '0.0.0.0/8'
	list 'reserved_ip' '10.0.0.0/8'
	list 'reserved_ip' '127.0.0.0/8'
	list 'reserved_ip' '100.64.0.0/10'
	list 'reserved_ip' '169.254.0.0/16'
	list 'reserved_ip' '172.16.0.0/12'
	list 'reserved_ip' '192.168.0.0/16'
	list 'reserved_ip' '224.0.0.0/4'
	list 'reserved_ip' '240.0.0.0/4'
	list 'reserved_ip6' '::/128'
	list 'reserved_ip6' '::1/128'
	list 'reserved_ip6' '::ffff:0:0/96'
	list 'reserved_ip6' '100::/64'
	list 'reserved_ip6' '64:ff9b::/96'
	list 'reserved_ip6' '2001::/32'
	list 'reserved_ip6' '2001:10::/28'
	list 'reserved_ip6' '2001:20::/28'
	list 'reserved_ip6' '2001:db8::/32'
	list 'reserved_ip6' '2002::/16'
	list 'reserved_ip6' 'fc00::/7'
	list 'reserved_ip6' 'fe80::/10'
	list 'reserved_ip6' 'ff00::/8'
	list 'bypass_dscp' '4'
	option 'bypass_china_mainland_ip' '0'
	option 'proxy_tcp_dport' '0-65535'
	option 'proxy_udp_dport' '0-65535'
	option 'tun_timeout' '30'
	option 'tun_interval' '1'

config router_access_control
	option 'enabled' '1'
	list 'user' 'dnsmasq'
	list 'user' 'ftp'
	list 'user' 'logd'
	list 'user' 'nobody'
	list 'user' 'ntp'
	list 'user' 'ubus'
	list 'group' 'dnsmasq'
	list 'group' 'ftp'
	list 'group' 'logd'
	list 'group' 'nogroup'
	list 'group' 'ntp'
	list 'group' 'ubus'
	list 'cgroup' 'services/adguardhome'
	list 'cgroup' 'services/aria2'
	list 'cgroup' 'services/dnsmasq'
	list 'cgroup' 'services/netbird'
	list 'cgroup' 'services/qbittorrent'
	list 'cgroup' 'services/sysntpd'
	list 'cgroup' 'services/tailscale'
	list 'cgroup' 'services/zerotier'
	option 'proxy' '0'

config router_access_control
	option 'enabled' '1'
	option 'dns' '1'
	option 'proxy' '1'

config lan_access_control
	option 'enabled' '1'
	option 'dns' '1'
	option 'proxy' '1'

config routing 'routing'
	option 'tproxy_fw_mark' '0x80'
	option 'tun_fw_mark' '0x81'
	option 'tproxy_rule_pref' '1024'
	option 'tun_rule_pref' '1025'
	option 'tproxy_route_table' '80'
	option 'tun_route_table' '81'
	option 'cgroup_id' '0x12061206'
	option 'cgroup_name' 'nikki'

config editor 'editor'

config log 'log'