mixed-port: 7890
ipv6: true
allow-lan: true
mode: rule
log-level: warning
disable-keep-alive: false
keep-alive-idle: 30
keep-alive-interval: 30
unified-delay: false
geo-auto-update: true
geo-update-interval: 168
external-controller: '127.0.0.1:9090'
external-ui-url: 'https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip'
external-ui: ui
external-controller-cors:
  allow-origins: ['*']
  allow-private-network: true
profile:
  store-selected: true
  store-fake-ip: true
hosts: {}
dns:
  enable: true
  listen: 0.0.0.0:1053
  ipv6: true
  respect-rules: true
  use-hosts: true
  use-system-hosts: false
  nameserver:
    - '9.9.9.9'
    - '2620:fe::fe'
    - '1.1.1.1'
    - '2606:4700:4700::1111'
    - '8.8.8.8'
    - '2001:4860:4860::8888'
    - '8.8.4.4'
    - '2001:4860:4860::8844'
  proxy-server-nameserver:
    - '9.9.9.9'
    - '2620:fe::fe'
    - '1.1.1.1'
    - '2606:4700:4700::1111'
    - '8.8.8.8'
    - '2001:4860:4860::8888'
    - '8.8.4.4'
    - '2001:4860:4860::8844'
tun:
  enable: true
  stack: mixed
  auto-route: true
  strict-route: true
  auto-detect-interface: true
  dns-hijack:
  - 'tcp://any:53'
  - 'udp://any:53'
  mtu: 1280
sniffer:
  enable: true
  force-dns-mapping: true
  parse-pure-ip: true
  override-destination: false
  sniff:
    HTTP:
      ports: [80, 8080, 8880, 2052, 2082, 2086, 2095]
    TLS:
      ports: [443, 8443, 2053, 2083, 2087, 2096]

proxies:
  - name: "🇮🇷 hamedp71 - IPv4-1"
    type: wireguard
    ip: 172.16.0.2/32
    ipv6: 2001:db8:1::1
    private-key: "sBlOEknlqiLiQ0cgThr8n9sZB6nCJ0oTgYMlTlLgekY="
    server: 8.47.69.238
    port: 934
    public-key: "bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo="
    allowed-ips: ["0.0.0.0/0", "::/0", "10.0.0.0/8", "!185.143.223.0/24", "!94.232.128.0/21"]
    reserved: "AAAA"
    udp: true
    mtu: 1280
    dialer-proxy: ""
    amnezia-wg-option:
      jc: 4
      jmin: 40
      jmax: 250
      s1: 0
      s2: 0
      h1: 1
      h2: 2
      h4: 3
      h3: 4

  - name: "🇩🇪 hamedp71 - IPv4-1"
    type: wireguard
    ip: 172.16.0.2/32
    ipv6: 2001:db8:1::1
    private-key: "cCzElB7zAvcK9LVYUxt+q9qr1kVFTXPppqc8zdxm62k="
    server: 8.34.70.189
    port: 1010
    public-key: "bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo="
    allowed-ips: ["0.0.0.0/0", "::/0", "10.0.0.0/8", "!185.143.223.0/24", "!94.232.128.0/21"]
    reserved: "AAAA"
    udp: true
    mtu: 1280
    dialer-proxy: "🇮🇷 hamedp71 - IPv4-2"

  - name: "🇮🇷 hamedp71 - IPv4-2"
    type: wireguard
    ip: 172.16.0.2/32
    ipv6: 2001:db8:1::1
    private-key: "sBlOEknlqiLiQ0cgThr8n9sZB6nCJ0oTgYMlTlLgekY="
    server: 8.47.69.238
    port: 934
    public-key: "bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo="
    allowed-ips: ["0.0.0.0/0", "::/0", "10.0.0.0/8", "!185.143.223.0/24", "!94.232.128.0/21"]
    reserved: "AAAA"
    udp: true
    mtu: 1280
    dialer-proxy: ""
    amnezia-wg-option:
      jc: 4
      jmin: 40
      jmax: 250
      s1: 0
      s2: 0
      h1: 1
      h2: 2
      h4: 3
      h3: 4

  - name: "🇩🇪 hamedp71 - IPv4-2"
    type: wireguard
    ip: 172.16.0.2/32
    ipv6: 2001:db8:1::1/128
    private-key: "gEvJgRYd6tzU6yYfAs24Re/8+WWvTsqGMKl+EBCUjFE="
    server: 8.39.214.79
    port: 500
    public-key: "bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo="
    allowed-ips: ["0.0.0.0/0", "::/0", "10.0.0.0/8", "!185.143.223.0/24", "!94.232.128.0/21"]
    reserved: "AAAA"
    udp: true
    mtu: 1280
    dialer-proxy: "🇮🇷 hamedp71 - IPv4-2"

  - name: "🇮🇷 hamedp71 - IPv6"
    type: wireguard
    ip: 172.16.0.2/32
    ipv6: 2001:db8:1::1
    private-key: "8BulFfbSIejAzA4bET2F09I+ZJvNrSdhvD9HRHNwZVM="
    server: "[2606:4700:d1::a874:81b8:fff0:89ad]"
    port: 3581
    public-key: "bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo="
    allowed-ips: ["0.0.0.0/0", "::/0", "10.0.0.0/8", "!185.143.223.0/24", "!94.232.128.0/21"]
    reserved: "AAAA"
    udp: true
    mtu: 1280
    dialer-proxy: ""
    amnezia-wg-option:
      jc: 4
      jmin: 40
      jmax: 250
      s1: 0
      s2: 0
      h1: 1
      h2: 2
      h4: 3
      h3: 4

  - name: "🇸🇪 hamedp71 - IPv6"
    type: wireguard
    ip: 172.16.0.2/32
    ipv6: 2001:db8:1::1
    private-key: "0GapdERcPdqP7hXovlbv/HoUafjR3jB4EGGm+LXXdlA="
    server: 8.35.211.13
    port: 945
    public-key: "bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo="
    allowed-ips: ["0.0.0.0/0", "::/0", "10.0.0.0/8", "!185.143.223.0/24", "!94.232.128.0/21"]
    reserved: "AAAA"
    udp: true
    mtu: 1280
    dialer-proxy: "🇮🇷 hamedp71 - IPv6"

proxy-groups:
  - name: "🌐 گلوبال"
    type: select
    proxies:
      - "🚀 انتخاب خودکار (بهترین)"
      - "🇮🇷 hamedp71 - IPv4-1"
      - "🇩🇪 hamedp71 - IPv4-1"
      - "🇮🇷 hamedp71 - IPv4-2"
      - "🇩🇪 hamedp71 - IPv4-2"
      - "🇮🇷 hamedp71 - IPv6"
      - "🇸🇪 hamedp71 - IPv6"

  - name: "🚀 انتخاب خودکار (بهترین)"
    type: url-test
    url: "https://www.gstatic.com/generate_204"
    interval: 600
    tolerance: 50
    proxies:
      - "🇮🇷 hamedp71 - IPv4-1"
      - "🇩🇪 hamedp71 - IPv4-1"
      - "🇮🇷 hamedp71 - IPv4-2"
      - "🇩🇪 hamedp71 - IPv4-2"
      - "🇮🇷 hamedp71 - IPv6"
      - "🇸🇪 hamedp71 - IPv6"

rule-providers:
  ir:
    type: http
    format: text
    behavior: domain
    url: "https://raw.githubusercontent.com/Chocolate4U/Iran-clash-rules/release/ir.txt"
    path: "./ruleset/ir.txt"
    interval: 86400
  ir-cidr:
    type: http
    format: text
    behavior: domain
    url: "https://raw.githubusercontent.com/Chocolate4U/Iran-clash-rules/release/ircidr.txt"
    path: "./ruleset/ir-cidr.txt"
    interval: 86400
  malware:
    type: http
    format: text
    behavior: domain
    url: "https://raw.githubusercontent.com/Chocolate4U/Iran-clash-rules/release/malware.txt"
    path: "./ruleset/malware.txt"
    interval: 86400
  phishing:
    type: http
    format: text
    behavior: domain
    url: "https://raw.githubusercontent.com/Chocolate4U/Iran-clash-rules/release/phishing.txt"
    path: "./ruleset/phishing.txt"
    interval: 86400
  cryptominers:
    type: http
    format: text
    behavior: domain
    url: "https://raw.githubusercontent.com/Chocolate4U/Iran-clash-rules/release/cryptominers.txt"
    path: "./ruleset/cryptominers.txt"
    interval: 86400
  ads:
    type: http
    format: text
    behavior: domain
    url: "https://raw.githubusercontent.com/Chocolate4U/Iran-clash-rules/release/ads.txt"
    path: "./ruleset/ads.txt"
    interval: 86400

rules:
  - RULE-SET,ir,DIRECT
  - RULE-SET,ir-cidr,DIRECT
  - RULE-SET,malware,REJECT
  - RULE-SET,phishing,REJECT
  - RULE-SET,cryptominers,REJECT
  - RULE-SET,ads,REJECT
  - MATCH,🌐 گلوبال

ntp:
  enable: true
  server: "time.apple.com"
  port: 123
  interval: 30