mixed-port: 7890
allow-lan: false
log-level: info
secret:
external-controller: 127.0.0.1:9090
# ipv6: false
ipv6: true

#global-client-fingerprint: chrome

mode: rule
dns:
  enable: true
  use-hosts: true
  # ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  listen: 127.0.0.1:6868

  prefer-h3: true #Enable DoH support for HTTP/3,

  fake-ip-filter:
     - "thebestofme.top"
     - "beyondexgay.com"
  default-nameserver:
    - 1.1.1.1
    - 8.8.8.8
    - 1.0.0.1
  nameserver:
#    - https://thebestofme.top/bUfSvXcRMsFuoOpO6TzS/dns/dns-query

    - https://8.8.8.8/dns-query#h3=true
    - https://1.1.1.1/dns-query#PROXY
    - https://8.8.8.8/dns-query#PROXY
    - https://1.0.0.1/dns-query#PROXY
    #- https://8.8.8.8/dns-query#PROXY&h3=true


    - 8.8.8.8
    - 1.1.1.1
profile:
  # Storing select records
  store-selected: true

proxy-groups:
  - name: PROXY
    proxies:
      - automatic
      - sequential
      - "gettr.com reality XTLS direct vless \xA7 443 2"
      - "thebestofme.top tls_h2 grpc direct trojan \xA7 443 3"
      - "thebestofme.top tls grpc direct vless \xA7 443 3"
      - "thebestofme.top tls grpc direct trojan \xA7 443 3"
      - "thebestofme.top TUIC \xA7 33685 3"
      - "thebestofme.top Hysteria2 \xA7 43995 3"
      - "best.paykar.thebestofme.top tls_h2 grpc CDN vless \xA7 443 4"
      - "best.paykar.thebestofme.top tls_h2 grpc CDN trojan \xA7 443 4"
      - "best.paykar.thebestofme.top tls grpc CDN vless \xA7 443 4"
      - "best.paykar.thebestofme.top tls grpc CDN trojan \xA7 443 4"


    # use:
    #   %for phttp in hconfigs[ConfigEnum.http_ports].split(',')
    #   - all_proxies_
    #   %endfor
    #   %for ptls in hconfigs[ConfigEnum.tls_ports].split(',')
    #   - all_proxies_
    #   %endfor
    type: select








  - name: automatic
    type: fallback
    url: "http://cp.cloudflare.com"
    interval: 300
    proxies:
        # - "load-balance"
        - auto
        - sequential
        - REJECT
    lazy: true




  - name: sequential
    type: fallback
    url: "http://cp.cloudflare.com"
    interval: 300
    proxies:
      - "gettr.com reality XTLS direct vless \xA7 443 2"
      - "thebestofme.top tls_h2 grpc direct trojan \xA7 443 3"
      - "thebestofme.top tls grpc direct vless \xA7 443 3"
      - "thebestofme.top tls grpc direct trojan \xA7 443 3"
      - "thebestofme.top TUIC \xA7 33685 3"
      - "thebestofme.top Hysteria2 \xA7 43995 3"
      - "best.paykar.thebestofme.top tls_h2 grpc CDN vless \xA7 443 4"
      - "best.paykar.thebestofme.top tls_h2 grpc CDN trojan \xA7 443 4"
      - "best.paykar.thebestofme.top tls grpc CDN vless \xA7 443 4"
      - "best.paykar.thebestofme.top tls grpc CDN trojan \xA7 443 4"

    # use:
    #   %for phttp in hconfigs[ConfigEnum.http_ports].split(',')
    #   - all_proxies_
    #   %endfor
    #   %for ptls in hconfigs[ConfigEnum.tls_ports].split(',')
    #   - all_proxies_
    #   %endfor

  - name: auto
    proxies:
      - "gettr.com reality XTLS direct vless \xA7 443 2"
      - "thebestofme.top tls_h2 grpc direct trojan \xA7 443 3"
      - "thebestofme.top tls grpc direct vless \xA7 443 3"
      - "thebestofme.top tls grpc direct trojan \xA7 443 3"
      - "thebestofme.top TUIC \xA7 33685 3"
      - "thebestofme.top Hysteria2 \xA7 43995 3"
      - "best.paykar.thebestofme.top tls_h2 grpc CDN vless \xA7 443 4"
      - "best.paykar.thebestofme.top tls_h2 grpc CDN trojan \xA7 443 4"
      - "best.paykar.thebestofme.top tls grpc CDN vless \xA7 443 4"
      - "best.paykar.thebestofme.top tls grpc CDN trojan \xA7 443 4"

    # use:
    #   %for phttp in hconfigs[ConfigEnum.http_ports].split(',')
    #   - all_proxies_
    #   %endfor
    #   %for ptls in hconfigs[ConfigEnum.tls_ports].split(',')
    #   - all_proxies_
    #   %endfor

    type: url-test
    url: http://cp.cloudflare.com
    interval: 300
    tolerance: 150
    lazy: true



proxies:
- name: "gettr.com reality XTLS direct vless \xA7 443 2"
  type: vless
  server: thebestofme.top
  port: 443
  udp: true
  alpn:
  - http/1.1
  skip-cert-verify: false
  client-fingerprint: chrome
  uuid: f3fc2e9e-310c-4330-9e7a-3a585a7226e1
  servername: gettr.com
  tls: true
  packet-encoding: xudp
  flow: xtls-rprx-vision
  network: tcp
  reality-opts:
    public-key: 4If6mJwjlqZsUthiXjZ5A3TLaxJM420dGFMFzWDCEVo
    short-id: 8430f4
- name: "thebestofme.top tls_h2 grpc direct trojan \xA7 443 3"
  type: trojan
  server: thebestofme.top
  port: 443
  udp: true
  alpn:
  - h2
  skip-cert-verify: false
  client-fingerprint: chrome
  password: f3fc2e9e-310c-4330-9e7a-3a585a7226e1
  sni: thebestofme.top
  network: grpc
  grpc-opts:
    grpc-service-name: K8ctskvDThKNk7Wnm7jwg3kj
- name: "thebestofme.top tls grpc direct vless \xA7 443 3"
  type: vless
  server: thebestofme.top
  port: 443
  udp: true
  alpn:
  - h2
  skip-cert-verify: false
  client-fingerprint: chrome
  uuid: f3fc2e9e-310c-4330-9e7a-3a585a7226e1
  servername: thebestofme.top
  tls: true
  packet-encoding: xudp
  network: grpc
  grpc-opts:
    grpc-service-name: TsPudPv5gCe7Wnm7jwg3kj
- name: "thebestofme.top tls grpc direct trojan \xA7 443 3"
  type: trojan
  server: thebestofme.top
  port: 443
  udp: true
  alpn:
  - h2
  skip-cert-verify: false
  client-fingerprint: chrome
  password: f3fc2e9e-310c-4330-9e7a-3a585a7226e1
  sni: thebestofme.top
  network: grpc
  grpc-opts:
    grpc-service-name: K8ctskvDThKNk7Wnm7jwg3kj
- name: "thebestofme.top TUIC \xA7 33685 3"
  type: tuic
  server: thebestofme.top
  port: 33685
  udp: true
  udp-relay-mode: native
  reduce-rtt: true
  skip-cert-verify: false
  sni: thebestofme.top
  password: f3fc2e9e-310c-4330-9e7a-3a585a7226e1
  uuid: f3fc2e9e-310c-4330-9e7a-3a585a7226e1
- name: "thebestofme.top Hysteria2 \xA7 43995 3"
  type: hysteria2
  server: thebestofme.top
  port: 43995
  udp: true
  alpn:
  - h3
  skip-cert-verify: false
  client-fingerprint: chrome
  password: f3fc2e9e-310c-4330-9e7a-3a585a7226e1
  obfs: salamander
  obfs-password: bUfSvXcRMsFuoOpO6TzS
- name: "best.paykar.thebestofme.top tls_h2 grpc CDN vless \xA7 443 4"
  type: vless
  server: best.paykar.thebestofme.top
  port: 443
  udp: true
  alpn:
  - h2
  skip-cert-verify: false
  client-fingerprint: chrome
  uuid: f3fc2e9e-310c-4330-9e7a-3a585a7226e1
  servername: best.paykar.thebestofme.top
  tls: true
  packet-encoding: xudp
  network: grpc
  grpc-opts:
    grpc-service-name: TsPudPv5gCe7Wnm7jwg3kj
- name: "best.paykar.thebestofme.top tls_h2 grpc CDN trojan \xA7 443 4"
  type: trojan
  server: best.paykar.thebestofme.top
  port: 443
  udp: true
  alpn:
  - h2
  skip-cert-verify: false
  client-fingerprint: chrome
  password: f3fc2e9e-310c-4330-9e7a-3a585a7226e1
  sni: best.paykar.thebestofme.top
  network: grpc
  grpc-opts:
    grpc-service-name: K8ctskvDThKNk7Wnm7jwg3kj
- name: "best.paykar.thebestofme.top tls grpc CDN vless \xA7 443 4"
  type: vless
  server: best.paykar.thebestofme.top
  port: 443
  udp: true
  alpn:
  - h2
  skip-cert-verify: false
  client-fingerprint: chrome
  uuid: f3fc2e9e-310c-4330-9e7a-3a585a7226e1
  servername: best.paykar.thebestofme.top
  tls: true
  packet-encoding: xudp
  network: grpc
  grpc-opts:
    grpc-service-name: TsPudPv5gCe7Wnm7jwg3kj
- name: "best.paykar.thebestofme.top tls grpc CDN trojan \xA7 443 4"
  type: trojan
  server: best.paykar.thebestofme.top
  port: 443
  udp: true
  alpn:
  - h2
  skip-cert-verify: false
  client-fingerprint: chrome
  password: f3fc2e9e-310c-4330-9e7a-3a585a7226e1
  sni: best.paykar.thebestofme.top
  network: grpc
  grpc-opts:
    grpc-service-name: K8ctskvDThKNk7Wnm7jwg3kj


# proxy-providers:
#   %for t in (['http','tls'] if hconfigs[ConfigEnum.http_proxy_enable] else ['tls'])
#   %for port in hconfigs[ConfigEnum.http_ports if t=='http' else ConfigEnum.tls_ports].split(',')
#   %set phttp=port if t=='http' else None
#   %set ptls=port if t=='tls' else None
#   all_proxies_:
#     type: http
#     url: "https://thebestofme.top/bUfSvXcRMsFuoOpO6TzS/f3fc2e9e-310c-4330-9e7a-3a585a7226e1/clash/meta/proxies.yml?mode=None&ptls=&phttp=&600192"
#     # path: thebestofme.top/f3fc2e9e-310c-4330-9e7a-3a585a7226e1-meta---proxies600192.yaml
#     path: thebestofme.top/--600192.yaml
#     health-check:
#       enable: true
#       interval: 600
#       url: http://www.gstatic.com/generate_204
#   %endfor
#   %endfor
rule-providers:

  blocked:
    type: http
    behavior: classical
    url: "https://thebestofme.top/bUfSvXcRMsFuoOpO6TzS/clash/rules/blocked-sites.yml"
    path: ./ruleset/blocked.yaml
    interval: 432000

  tmpblocked:
    type: http
    behavior: classical
    url: "https://thebestofme.top/bUfSvXcRMsFuoOpO6TzS/clash/rules/tmp-blocked-sites.yml"
    path: ./ruleset/tmpblocked.yaml
    interval: 432000

  open:
    type: http
    behavior: classical
    url: "https://thebestofme.top/bUfSvXcRMsFuoOpO6TzS/clash/rules/open-sites.yml"
    path: ./ruleset/open.yaml
    interval: 432000

  # ads:
  #   type: http
  #   behavior: classical
  #   url: "https://thebestofme.top/bUfSvXcRMsFuoOpO6TzS/clash/rules/ads-sites.yml"
  #   path: ./ruleset/ads.yaml
  #   interval: 432000

rules:
  - DOMAIN,beyondexgay.com,DIRECT
  # - DOMAIN,thebestofme.top,DIRECT
  # - DOMAIN,,DIRECT
  # - IP-CIDR,/32,DIRECT
  - IP-CIDR,10.10.34.0/24,PROXY
  - RULE-SET,tmpblocked,PROXY
  - RULE-SET,blocked,PROXY
  # - IP-CIDR,10.10.34.0/24,REJECT
  # - RULE-SET,tmpblocked,REJECT
  # - RULE-SET,blocked,REJECT
  - GEOIP,IR,DIRECT
  - DOMAIN-SUFFIX,.ir,DIRECT
  - RULE-SET,open,DIRECT
  # - RULE-SET,ads,REJECT
  - MATCH,PROXY


tun:
  enable: true
  stack: system # or gvisor
  dns-hijack:
    - any:53
  auto-redir: true
  auto-route: true
  auto-detect-interface: true