port: 7890

socks-port: 7891
redir-port: 7892
tproxy-port: 7893
mixed-port: 7893

skip-auth-prefixes:
- 127.0.0.1/8
- ::1/128
lan-allowed-ips:
- 0.0.0.0/0
- ::/0
find-process-mode: off
allow-lan: true
bind-address: '*'
mode: rule
log-level: silent
ipv6: true
tcp-concurrent: true
unified-delay: true
external-controller: 127.0.0.1:9090

#============================================
geodata-mode: true
geox-url:
geoip: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip-
lite.dat
geosite: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geosite-
lite.dat
mmdb: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/country-
lite.mmdb
geo-auto-update: true
geo-update-interval: 24
geosite-matcher: succinct
geodata-loader: memconservative
#============================================

#============================================
profile:
store-selected: true
store-fake-ip: true
sniffer:
enable: true
force-dns-mapping: true
parse-pure-ip: true
sniff:
TLS:
ports: [443, 8443]
HTTP:
ports: [80, 8080-8880]
override-destination: true
QUIC:
ports: [443]
override-destination: true
force-domain:
- "+.netflix.com"
- "+.nflxvideo.net"
- "+.amazonaws.com"
- "+.media.dssott.com"
 skip-domain:
- "+.apple.com"
- Mijia Cloud
- dlg.io.mi.com
- "+.argotunnel.com"
- "*.*.argotunnel.com"
#============================================

#============================================
dns:
enable: true
listen: 0.0.0.0:53
ipv6: true
cache-algorithm: arc
prefer-h3: true
enhanced-mode: fake-ip
fake-ip-range: 198.18.0.1/16

fake-ip-filter:
- "*.lan"
- "*.localdomain"
- "*.example"
- "*.invalid"
- "*.localhost"
- "*.test"
- "*.local"
- "*.home.arpa"
- time.*.com
- time.*.gov
- time.*.edu.cn
- time.*.apple.com
- time1.*.com
- time2.*.com
- time3.*.com
- time4.*.com
- time5.*.com
- time6.*.com
- time7.*.com
- ntp.*.com
- ntp1.*.com
- ntp2.*.com
- ntp3.*.com
- ntp4.*.com
- ntp5.*.com
- ntp6.*.com
- ntp7.*.com
- "*.*.argotunnel.com"

default-nameserver:
- 1.1.1.2#master
- 103.87.68.193#master
nameserver:
- quic://quic-antivirus.dns.bebasid.com:853#master
- https://security.cloudflare-dns.com/dns-query#master&h3=true
- https://antivirus.bebasid.com/dns-query#master
fallback:
- tls://dns.bebasid.com:853#master
- tls://security.cloudflare-dns.com#master
proxy-server-nameserver:
 - dhcp://usb0
fallback-filter:
geoip: true
geoip-code: ID
ipcidr:
- 240.0.0.0/4
domain:
- '+.google.com'
- '+.facebook.com'
- '+.youtube.com'
- '+.shopee.com'
- '+.shopee.co.id'
- '*.co.id'
- '+.*.co.id'
nameserver-policy:
'geoip:cloudflare':
- https://dns.cloudflare.com/dns-query#master&h3=true
- https://dns.cloudflare.com/dns-query#master
'geoip:google': https://dns.google/dns-query#master&h3=true
'geosite:google,youtube': https://dns.google/dns-query#master&h3=true
"rule-set:oisd_big,ABPindo": rcode://success
'+.shopee.co.id,+.shopeemobile.com': dhcp://usb0
"geoip:ID": quic://quic-antivirus.dns.bebasid.com:853#master
"geoip:SG": https://security.cloudflare-dns.com/dns-query#master&h3=true
"geosite:geolocation-!id": https://security.cloudflare-dns.com/dns-
query#master&h3=true

#============================================
rule-providers:
oisd_big:
type: http
behavior: domain
format: text
path: "./rule_provider/oisd_big.txt"
url: https://big.oisd.nl/domainswild
interval: 86400

ABPindo:
type: http
behavior: domain
format: text
path: "./rule_provider/ABPindo.txt"
url: https://raw.githubusercontent.com/ABPindo/indonesianadblockrules/master/
subscriptions/domain.txt
interval: 86400

#============================================
proxy-providers:
server_id:
type: file
path: "./proxy_provider/server_id.yaml"
health-check:
enable: true
url: https://cp.cloudflare.com/generate_204
interval: 60
server_sg:
type: file
path: "./proxy_provider/server_sg.yaml"
 health-check:
enable: true
url: https://cp.cloudflare.com/generate_204
interval: 60

#============================================
proxy-groups:
- name: master
type: select
disable-udp: false
proxies:
- id_fallback
- id_select
- sg_fallback
- sg_select
#============================================

#============================================
- name: id_fallback
type: fallback
disable-udp: false
use:
- server_id
url: https://cp.cloudflare.com/generate_204
interval: '60'
#============================================

#============================================
- name: sg_fallback
type: fallback
lazy: true
disable-udp: false
use:
- server_sg
url: https://cp.cloudflare.com/generate_204
interval: '60'
#============================================

#============================================
- name: id_select
type: select
disable-udp: false
use:
- server_id
url: https://cp.cloudflare.com/generate_204
interval: '150'
lazy: true
#============================================

#============================================
- name: sg_select
type: select
lazy: true
disable-udp: false
use:
- server_sg
url: https://cp.cloudflare.com/generate_204
interval: '120'
 lazy: true
#============================================

#============================================
- name: ADS
type: select
proxies:
- REJECT
- master
#============================================

#============================================
rules:
# ads & porn
- RULE-SET,oisd_big,ADS
- RULE-SET,ABPindo,ADS
- DOMAIN-SUFFIX,googlesyndication.com,master
#Logical
#- (AND,((DST-PORT,443),(NETWORK,UDP)))),REJECT

#game

# GeoSite & GeoIp

#- GEOSITE,facebook,sg_fallback
#- GEOIP,ID,id_fallback
#- GEOIP,SG,sg_fallback

#main rules
- MATCH,master