update clash and sing-box example configuration

2023-06-10 17:19:33 +07:00
parent 849ab4e6fd
commit 783c360fc3
5 changed files with 369 additions and 219 deletions
--- a/box/clash/.note
+++ b/box/clash/.note
@@ -0,0 +1,7 @@
+
+########################
+# example configuration and wiki #
+########################
+
+# dreamacro.github.io/clash/
+# http://https://wiki.metacubex.one/
--- a/box/clash/config.yaml
+++ b/box/clash/config.yaml
@@ -4,81 +4,57 @@ mode: rule
 allow-lan: true
 unified-delay: true
 bind-address: '*'
-# info / warning / error / debug / silent
 log-level: silent
 ipv6: false
 geodata-mode: true
 geodata-loader: memconservative
-external-controller: 0.0.0.0:9090 
-# external-controller-tls: 0.0.0.0:9091 # RESTful API HTTPS device
+external-controller: 127.0.0.1:9090 
 # secret: "123456"
-external-ui: ./dashboard
-# tcp-concurrent: false
-# inbound-tfo: false
-# global-client-fingerprint: chrome
-# interface-name: "rmnet_data+"
+external-ui: /data/adb/box/clash/dashboard
+tcp-concurrent: false
+global-client-fingerprint: chrome
+# interface-name: ""
 # routing-mark: 233
 geox-url:
  mmdb: "https://raw.githubusercontent.com/Loyalsoldier/geoip/release/Country.mmdb"
  geoip: "https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/geoip.dat"
  geosite: "https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/geosite.dat"
+
 find-process-mode: strict # always, strict, off

 profile:
  store-selected: true
  store-fake-ip: false

-# experimental:
-  # sniff-tls-sni: false
-  # udp-fallback-match: false
+sniffer:
+  enable: false
+  override-destination: false
+  sniff: # TLS 默认如果不配置 ports 默认嗅探 443
+    TLS:
+      ports: [443, 8443]
+    HTTP: # 需要嗅探的端口, 默认嗅探 80
+      ports: [80, 8080-8880]
+      override-destination: true # 可覆盖 sniffer.override-destination

-# sniffer:
-  # enable: false
-  # ## 对 redir-host 类型识别的流量进行强制嗅探
-  # ## 如：Tun、Redir 和 TProxy 并 DNS 为 redir-host 皆属于
-  # force-dns-mapping: true
-  # parse-pure-ip: true
-  # override-destination: true
-  # sniff:
-    # TLS:
-    # #  ports:[443, 8443]
-    # HTTP:
-      # ports: [80, 8080-8880]
-      # override-destination: true
-  # force-domain:
-    # - +.v2ex.com
-  # # skip-domain:
-    # # - +.google.com
-  # sniffing:
-    # - tls
-    # - http
-  # port-whitelist:
-    # - "80"
-    # - "443"
-
-# tun:
-  # enable: true
-  # # biarkan default utun
-  # device: utun
-  # mtu: 9000
-  # # gvisor / lwip / system
-  # stack: system
-  # dns-hijack:
-    # - any:53
-  # # bagi yg awam, kalau TUN on wajib true, only armv8/64
-  # auto-route: true
-  # auto-detect-interface: true
-  # # end
-  # inet4-address: 172.19.0.1/30
-  # inet6-address: [fdfe:dcba:9876::1/126]
-  # strict_route: false
-  # # include_android_user:
-  # # - 0
-  # # - 10
-  # # include_package:
-  # # - com.android.chrome
-  # # exclude_package:
-  # # - com.android.captiveportallogin
+tun:
+  enable: false
+  device: utun
+  mtu: 9000
+  stack: system # gvisor / lwip / system
+  dns-hijack:
+    - any:53
+    - tcp://any:53
+  auto-route: true
+  auto-detect-interface: true
+  inet4-address: 172.19.0.1/30
+  inet6-address: [fdfe:dcba:9876::1/126]
+  # include_android_user:
+    # - 0
+    # - 10
+  # include_package:
+  # - com.android.chrome
+  # exclude_package:
+    # - com.whatsapp

 dns:
  enable: true
@@ -86,94 +62,87 @@ dns:
  prefer-h3: true
  default-nameserver:
    # cloudflare
-    - '1.1.1.1#BFM'
-    # google
-    - '8.8.8.8'
+    - '1.1.1.1#PROXY'
  listen: 0.0.0.0:1053
  use-hosts: true
-  # redir-host / fake-ip
  enhanced-mode: fake-ip
  fake-ip-range: 28.0.0.1/8
-  fake-ip-filter:
-    - '+.lan'
+  # fake-ip-filter:
+    # - '+.lan'
  nameserver:
-    # cloudflare
-    - '1.1.1.1'
-    - 'tls://1.0.0.1:853#BFM'
    # google
-    - '8.8.8.8#BFM'
-    - 'tls://8.8.4.4:853'
-  # proxy-server-nameserver:
-    # - '1.1.1.1'
+    - '8.8.8.8#PROXY'
+    - 'tls://8.8.4.4:853#PROXY'
+  proxy-server-nameserver:
+    - '1.1.1.1'
  # nameserver-policy: { "geosite:youtube": [1.1.1.1, 8.8.8.8] }
+  # fallback:
+    # - 'https://8.8.8.8/dns-query'
+    # - 'tcp://8.8.4.4'
+    # - 'quic://dns.adguard.com:784'
+  # fallback-filter:
+    # geoip: false
+    # geoip-code: 'ID'
+    # geosite:
+      # # - gfw
+    # ipcidr:
+      # # - 240.0.0.0/4
+    # domain:
+      # - '+.google.com'
+      # - '+.facebook.com'
+      # - '+.youtube.com'
+      # - '+.github.com'

-  fallback:
-    - 'https://8.8.8.8/dns-query'
-    - 'tcp://8.8.4.4'
-    - 'quic://dns.adguard.com:784'
-  fallback-filter:
-    geoip: false
-    geoip-code: '!ID'
-    geosite:
-      # - gfw
-    ipcidr:
-      # - 240.0.0.0/4
-    domain:
-      - '+.google.com'
-      - '+.facebook.com'
-      - '+.youtube.com'
-      - '+.github.com'
-
-hosts:
-  # block update system android
-  'ota.googlezip.net': 127.0.0.1
-  'ota-cache1.googlezip.net': 127.0.0.1
-  'ota-cache2.googlezip.net': 127.0.0.1
+# hosts:
+  # # block update system android
+  # 'ota.googlezip.net': 127.0.0.1
+  # 'ota-cache1.googlezip.net': 127.0.0.1
+  # 'ota-cache2.googlezip.net': 127.0.0.1

 proxies:
 proxy-groups:
-  - { name: 'BFM', type: select, use: ["@BFM"] }
-  - { name: 'block', type: select, proxies: ["REJECT", "BFM"] }
+
+  - name: "PROXY"
+    type: select
+    proxies:
+      - "FALLBACK"
+      - "URL-TEST"
+
+  - name: "FALLBACK"
+    type: fallback
+    use:
+      - "provide"
+
+  - name: "URL-TEST"
+    type: url-test
+    use:
+      - "provide"
+
 proxy-providers:
-  '@BFM':
+  "provide":
    type: file
    path: ./provide/domestic.yml
-    # filter: 'xxx'  # Mendukung ekspresi reguler untuk memfilter berdasarkan nama node
-    # exclude-filter: 'ctb' # Mendukung ekspresi reguler untuk dikecualikan berdasarkan nama node
+    # filter: 'xxx' # Supports regular expressions to filter by node name
+    # exclude-filter: 'ctb' # Supports regular expressions to exclude based on node name
    # exclude-type: 'ss|http' # Tidak mendukung ekspresi reguler, dipisahkan dengan '|', dikecualikan menurut jenis node
    health-check:
      enable: true
      url: http://www.gstatic.com/generate_204
-      interval: 1200
-rules:
-  ## block ads
-  - DOMAIN-SUFFIX,googlesyndication.com,BFM
+      interval: 3600

-  ## block iklan
-  # - AND,((GEOSITE,category-ads-all),(NOT,((DOMAIN-SUFFIX,googlesyndication.com)))),REJECT
-  - GEOSITE,category-ads-all,block
+  # "provide-cloud":
+    # type: http
+    # url: "http://fool.azurewebsites.net/get?limit=1&format=clash&cc=SG&cdn=104.18.3.198&network=ws&arg=tfo,xudp,key:value&mode=cdn&pass=password"
+    # interval: 3600
+    # path: ./provide/cloud.yml
+    # # filter: 'xxx' # Supports regular expressions to filter by node name
+    # # exclude-filter: 'ctb' # Supports regular expressions to exclude based on node name
+    # # exclude-type: 'ss|http' # Tidak mendukung ekspresi reguler, dipisahkan dengan '|', dikecualikan menurut jenis node
+    # health-check:
+      # enable: true
+      # url: http://www.gstatic.com/generate_204
+      # interval: 3600

-  ## rules telegram
-  # - GEOIP,telegram,BFM
-
-  ## direct FCM
-  # - AND,((NETWORK,TCP),(DST-PORT,5228-5230),(OR,((DOMAIN-KEYWORD,google)))),DIRECT
-
-  ## direct ntp
-  # - AND,((NETWORK,UDP),(DST-PORT,123)),DIRECT
-  # - DST-PORT,123/136/137-139,DIRECT,udp
-
-  ## block udp/quic YouTube
-  - AND,((NETWORK,udp),(OR,((DST-PORT,443),(GEOSITE,youtube)))),block
-  # - AND,((NETWORK,udp),(GEOSITE,youtube)),REJECT
-
-  ## rules inner, recommended untuk non kuota reguler
-  # - AND,((PROCESS-NAME,clash),(NOT,((IN-TYPE,inner)))),REJECT
-  - IN-TYPE,inner,BFM
-  ## final
-  - MATCH,BFM
-
-## rules clash premium
 # rule-providers:
  # block:
    # type: http
@@ -181,13 +150,47 @@ rules:
    # url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
    # path: ./ruleset/block.yaml
    # interval: 86400
+
+# clash.premium
 # script:
  # shortcuts:
-    # # quic: network == 'udp' and dst_port == 443
+    # quic: network == 'udp' and dst_port == 443
    # youshit: network == 'udp' and ('youtube' in host or 'googlevideo' in host)
-# rules:
-  # - DOMAIN-SUFFIX,googlesyndication.com,BFM
-  # - RULE-SET,block,block
-  # # - SCRIPT,quic,block
-  # - SCRIPT,youshit,block
-  # - MATCH,BFM
+
+rules:
+  ## block ads
+  # - DOMAIN-SUFFIX,googlesyndication.com,PROXY
+  # - AND,((GEOSITE,category-ads-all),(NOT,((DOMAIN-SUFFIX,googlesyndication.com)))),REJECT
+  # - GEOSITE,category-ads-all,REJECT
+  # - RULE-SET,block,REJECT
+  # - SCRIPT,quic,REJECT
+  # - SCRIPT,youshit,REJECT
+
+  ## direct FCM
+  # - AND,((NETWORK,TCP),(DST-PORT,5228-5230)),DIRECT
+  # - AND,((NETWORK,TCP),(DST-PORT,5228-5230),(OR,((DOMAIN-KEYWORD,google)))),DIRECT
+ 
+  ## block udp/quic YouTube
+  # - AND,((NETWORK,udp),(OR,((DST-PORT,443/80),(GEOSITE,youtube)))),REJECT
+  # - AND,((NETWORK,udp),(GEOSITE,youtube)),REJECT
+
+  # fix dnsleak
+  - IP-CIDR,127.0.0.1/32,REJECT,no-resolve
+  - IP-CIDR,198.18.0.1/16,REJECT,no-resolve
+  - IP-CIDR,28.0.0.1/8,REJECT,no-resolve
+  - IP-CIDR6,::1/128,REJECT,no-resolve
+  
+  ## rules telegram
+  # - GEOIP,telegram,PROXY
+  # - GEOSITE,telegram,PROXY
+
+  ## direct ntp
+  # - AND,((NETWORK,UDP),(DST-PORT,123)),DIRECT
+  # - DST-PORT,123/136/137-139,DIRECT,udp
+
+  ## rules inner, recommended untuk non kuota reguler
+  # - AND,((PROCESS-NAME,clash),(NOT,((IN-TYPE,inner)))),REJECT
+  # - IN-TYPE,inner,PROXY
+
+  ## final
+  - MATCH,PROXY
--- a/box/settings.ini
+++ b/box/settings.ini
@@ -100,7 +100,7 @@ log() {
 }

 # open yacd on start
-display_yacd_on_start="true"
+display_yacd_on_start="false"
 open_yacd () {
  if [ "${bin_name}" = "clash" -o "${bin_name}" = "sing-box" ] && [ "${display_yacd_on_start}" = "true" ]; then
    ip_port=$(if [ "${bin_name}" = "clash" ]; then busybox awk '/external-controller:/ {print $2}' "${clash_config}"; else find /data/adb/box/sing-box/ -type f -name "*.json" -exec busybox awk -F':' '/experimental/,/\}/' {} \; | sed -n 's/.*"external_controller": "\(.*\)",/\1/p'; fi;)
--- a/box/sing-box/.note
+++ b/box/sing-box/.note
@@ -0,0 +1,7 @@
+
+########################
+# example configuration and wiki #
+########################
+
+# https://gist.github.com/CHIZI-0618/fc3495cd15b3ab3d53c77872ebece8ae
+# http://sing-box.sagernet.org/configuration/
--- a/box/sing-box/config.json
+++ b/box/sing-box/config.json
@@ -1,91 +1,224 @@
 {
-    "log": {
-        "disabled": false,
-        "level": "panic",
-        "output": "/data/adb/box/run/sing-box.log",
-        "timestamp": false
-    },
-    "dns": {
-        "servers": [
-            {
-                "tag": "cloudflare",
-                "address": "tls://1.1.1.1"
-            }
-        ],
-        "rules": [],
-        "strategy": "ipv4_only"
-    },
-    "inbounds": [
-        {
-            "type": "tproxy",
-            "tag": "tproxy-in",
-            "listen": "::",
-            "listen_port": 9898,
-            "sniff": true,
-            "sniff_override_destination": true,
-            "sniff_timeout": "300ms",
-            "domain_strategy": "ipv4_only",
-            "udp_timeout": 300
-        }
+  "log": {
+    "disabled": false,
+    "timestamp": false,
+    "level": "error"
+  },
+  "dns": {
+    "servers": [
+      {
+        "tag": "cloudflare",
+        "address": "tls://1.1.1.1"
+      },
+      {
+        "tag": "rcode",
+        "address": "rcode://success"
+      }
+      // {
+        // "tag": "fakedns",
+        // "address": "fakeip"
+      // }
    ],
-    "outbounds": [
-        {
-            "type": "direct",
-            "tag": "direct"
-        },
-        {
-            "type": "block",
-            "tag": "block"
-        },
-        {
-            "type": "dns",
-            "tag": "dns-out"
-        },
-        {
-            "tag": "BFM",
-            "type": "selector",
-            "outbounds": [
-                "akun-a"
-            ]
-        },
-        {
-            "tag": "akun-a",
-            "type": "vmess",
-            "server": "server.com",
-            "server_port": 12345,
-            "uuid": "aaa-aaa-aaa",
-            "security": "auto",
-            "alter_id": 0,
-            "network": [
-                "tcp",
-                "udp"
-            ],
-            "packet_encoding": "xudp",
-            "transport": {
-                "type": "ws",
-                "path": "/path",
-                "headers": {
-                    "Host": "host.com"
-                }
-            }
-        }
-    ],
-    "route": {
-        "final": "BFM",
-        "rules": [
-            {
-                "protocol": "dns",
-                "outbound": "dns-out"
-            }
+    "rules": [
+      {
+        "outbound": "any",
+        "domain_suffix": [
+          "googlesyndication.com"
        ],
-        "find_process": false,
-        "auto_detect_interface": false
+        "server": "cloudflare",
+        "disable_cache": true
+      },
+      {
+        "geosite": "category-ads-all",
+        "server": "rcode"
+      }
+      // {
+        // "query_type": [
+          // "A",
+          // "AAAA"
+        // ],
+        // "server": "fakedns"
+      // }
+    ],
+    "fakeip": {
+      "enabled": false,
+      "inet4_range": "198.18.0.0/15",
+      "inet6_range": "fc00::/18"
    },
-    "experimental": {
-        "clash_api": {
-            "external_controller": "0.0.0.0:9090",
-            "external_ui": "./dashboard/dist",
-            "store_selected": false
-        }
+    "strategy": ""
+  },
+  "inbounds": [
+    {
+      "type": "tproxy",
+      "tag": "tproxy-in",
+      "listen": "::",
+      "listen_port": 9898,
+      "sniff": true
    }
+  ],
+  "outbounds": [
+    {
+      "default": "NODE",
+      "outbounds": [
+        "NODE",
+        "🐉 1.htmlcdn.net",
+        "🐉 sg-contabo3.1server.co",
+        "🐉 sg.xmbb.net",
+        "🐉 runcloud-dmd.apasih.id",
+        "🐅 vpn.sumaterapride.live"
+      ],
+      "tag": "PROXY",
+      "type": "selector"
+    },
+    {
+      "interval": "1m",
+      "outbounds": [
+        "🐉 1.htmlcdn.net",
+        "🐉 sg-contabo3.1server.co",
+        "🐉 sg.xmbb.net",
+        "🐉 runcloud-dmd.apasih.id",
+        "🐅 vpn.sumaterapride.live"
+      ],
+      "tag": "NODE",
+      "type": "urltest",
+      "url": "http://www.gstatic.com/generate_204"
+    },
+    {
+      "tag": "direct",
+      "type": "direct"
+    },
+    {
+      "tag": "block",
+      "type": "block"
+    },
+    {
+      "tag": "dns-out",
+      "type": "dns"
+    },
+    {
+      "alter_id": 0,
+      "security": "auto",
+      "server": "104.18.3.198",
+      "server_port": 80,
+      "tag": "🐉 1.htmlcdn.net",
+      "transport": {
+        "headers": {
+          "Host": "1.htmlcdn.net"
+        },
+        "path": "/files",
+        "type": "ws"
+      },
+      "packet_encoding": "xudp",
+      "type": "vmess",
+      "uuid": "aaaaa-aaaaa"
+    },
+    {
+      "alter_id": 0,
+      "security": "auto",
+      "server": "104.18.3.198",
+      "server_port": 80,
+      "tag": "🐉 sg-contabo3.1server.co",
+      "transport": {
+        "headers": {
+          "Host": "sg-contabo3.1server.co"
+        },
+        "path": "/files",
+        "type": "ws"
+      },
+      "packet_encoding": "xudp",
+      "type": "vmess",
+      "uuid": "aaaaa-aaaaa"
+    },
+    {
+      "alter_id": 0,
+      "security": "auto",
+      "server": "104.18.3.198",
+      "server_port": 80,
+      "tag": "🐉 sg.xmbb.net",
+      "transport": {
+        "headers": {
+          "Host": "sg.xmbb.net"
+        },
+        "path": "/files",
+        "type": "ws"
+      },
+      "packet_encoding": "xudp",
+      "type": "vmess",
+      "uuid": "aaaaa-aaaaa"
+    },
+    {
+      "password": "aaaaa",
+      "server": "104.18.3.198",
+      "server_port": 443,
+      "tag": "🐉 runcloud-dmd.apasih.id",
+      "tls": {
+        "disable_sni": false,
+        "enabled": true,
+        "insecure": true,
+        "server_name": "runcloud-dmd.apasih.id",
+        "utls": {
+          "enabled": true,
+          "fingerprint": "chrome"
+        }
+      },
+      "transport": {
+        "headers": {
+          "Host": "runcloud-dmd.apasih.id"
+        },
+        "path": "/buy-trojan-ws-pm-telegram-at-synricha",
+        "type": "ws"
+      },
+      "multiplex": {
+        "enabled": true,
+        "protocol": "h2mux",
+        "max_streams": 32
+      },
+      "type": "trojan"
+    },
+    {
+      "alter_id": 0,
+      "security": "auto",
+      "server": "104.18.3.198",
+      "server_port": 80,
+      "tag": "🐅 vpn.sumaterapride.live",
+      "transport": {
+        "headers": {
+          "Host": "vpn.sumaterapride.live"
+        },
+        "path": "/vmess",
+        "type": "ws"
+      },
+      "packet_encoding": "xudp",
+      "type": "vmess",
+      "uuid": "aaaaa-aaaaa"
+    }
+  ],
+  "route": {
+    "final": "PROXY",
+    "rules": [
+      {
+        "port": 53,
+        "outbound": "dns-out"
+      },
+      {
+        "domain_suffix": [
+          "googlesyndication.com"
+        ],
+        "outbound": "PROXY"
+      },
+      {
+        "geosite": "category-ads-all",
+        "outbound": "block"
+      }
+    ],
+    "find_process": false,
+    "auto_detect_interface": false
+  },
+  "experimental": {
+    "clash_api": {
+      "external_controller": "127.0.0.1:9090",
+      "external_ui": "./dashboard",
+      "store_selected": false
+    }
+  }
 }