# 面（Linux）：运行配置（托管；clash_modify.sh modify_yaml → kjx_final_assert；-t 预检用桩）。代理端口、面板、DNS 只听本机
## 默认（A1，只听本机）
### modify_yaml 输出
# mode 644
modify_yaml 返回 0
### 运行配置 config.yaml
# mode 600
external-controller: 127.0.0.1:9999
secret: 'snapPanelSecret0042'
log-level: info
geosite-matcher: mph
allow-lan: false
bind-address: 127.0.0.1
mixed-port: 7890
redir-port: 7892
tproxy-port: 7893
authentication: [""]
mode: Rule
ipv6: true
tun: {enable: false}
experimental: {ignore-resolve-fail: true, interface-name: en0}

find-process-mode: "off"

unified-delay: true
dns:
  enable: true
  listen: 127.0.0.1:1053
  use-hosts: true
  ipv6: true
  default-nameserver: [ 223.5.5.5, 2400:3200::1 ]
  direct-nameserver: [ 223.5.5.5, 1.2.4.8 ]
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.0/15
  fake-ip-range6: fc00::/16
  fake-ip-filter:
  nameserver: [ 223.5.5.5, 1.2.4.8 ]
use-system-hosts: true
hosts:
  'time.android.com': 203.107.6.88
  'time.facebook.com': 203.107.6.88
  'services.googleapis.cn': services.googleapis.com
  'localhost': 127.0.0.1
proxy-groups:
  - name: 🔰国外流量
    type: select
    use: [kejibear]
    proxies: [♻️自动选择最低延迟节点, 🚀直接连接]
  - name: ♻️自动选择最低延迟节点
    type: url-test
    use: [kejibear]
    filter: "^(?!.*(到期|剩余)).*$"
  - name: 🚀直接连接
    type: select
    proxies: [DIRECT]
proxy-providers:
  kejibear:
    type: file
    path: ./providers/kejibear.yaml
    health-check: {enable: true, url: "https://www.gstatic.com/generate_204", interval: 600}
rules:
 - DOMAIN-SUFFIX,example.com,🚀直接连接
 - MATCH,🔰国外流量
### -t 预检调用
# mode 600
kjx_core_exec -t -d @ROOT/opt/kejibear -f @ROOT/run/kejibear/ShellCrash/config.yaml
## 对局域网开放 192.168.10.5:7890（强制用户名密码）
### modify_yaml 输出
# mode 644
modify_yaml 返回 0
### 运行配置 config.yaml
# mode 600
external-controller: 127.0.0.1:9999
secret: 'snapPanelSecret0042'
log-level: info
geosite-matcher: mph
allow-lan: false
bind-address: 127.0.0.1
authentication:
- 'u0a1b2c:00112233445566778899'
skip-auth-prefixes:
- 127.0.0.0/8
- '::1/128'
lan-allowed-ips:
- 127.0.0.0/8
- '::1/128'
- 192.168.10.0/24
listeners:
- name: lan-proxy
  type: mixed
  port: 7890
  listen: 192.168.10.5
mixed-port: 7890
redir-port: 7892
tproxy-port: 7893
mode: Rule
ipv6: true
tun: {enable: false}
experimental: {ignore-resolve-fail: true, interface-name: en0}

find-process-mode: "off"

unified-delay: true
dns:
  enable: true
  listen: 127.0.0.1:1053
  use-hosts: true
  ipv6: true
  default-nameserver: [ 223.5.5.5, 2400:3200::1 ]
  direct-nameserver: [ 223.5.5.5, 1.2.4.8 ]
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.0/15
  fake-ip-range6: fc00::/16
  fake-ip-filter:
  nameserver: [ 223.5.5.5, 1.2.4.8 ]
use-system-hosts: true
hosts:
  'time.android.com': 203.107.6.88
  'time.facebook.com': 203.107.6.88
  'services.googleapis.cn': services.googleapis.com
  'localhost': 127.0.0.1
proxy-groups:
  - name: 🔰国外流量
    type: select
    use: [kejibear]
    proxies: [♻️自动选择最低延迟节点, 🚀直接连接]
  - name: ♻️自动选择最低延迟节点
    type: url-test
    use: [kejibear]
    filter: "^(?!.*(到期|剩余)).*$"
  - name: 🚀直接连接
    type: select
    proxies: [DIRECT]
proxy-providers:
  kejibear:
    type: file
    path: ./providers/kejibear.yaml
    health-check: {enable: true, url: "https://www.gstatic.com/generate_204", interval: 600}
rules:
 - DOMAIN-SUFFIX,example.com,🚀直接连接
 - MATCH,🔰国外流量
### -t 预检调用
# mode 600
kjx_core_exec -t -d @ROOT/opt/kejibear -f @ROOT/run/kejibear/ShellCrash/config.yaml
## A2 本机全局（tun；A1 不写 routing-mark，A2 写；tun 网卡名按档案；云厂商内网域名交给系统解析器）
### modify_yaml 输出
# mode 644
modify_yaml 返回 0
### 运行配置 config.yaml
# mode 600
external-controller: 127.0.0.1:9999
secret: 'snapPanelSecret0042'
log-level: info
geosite-matcher: mph
allow-lan: false
bind-address: 127.0.0.1
mixed-port: 7890
redir-port: 7892
tproxy-port: 7893
authentication: [""]
mode: Rule
ipv6: true
tun: {enable: true, stack: system, device: kjxtun, auto-route: false, auto-detect-interface: false}
experimental: {ignore-resolve-fail: true, interface-name: en0}

find-process-mode: "off"
routing-mark: 7894
unified-delay: true
dns:
  enable: true
  listen: 127.0.0.1:1053
  use-hosts: true
  ipv6: true
  default-nameserver: [ 223.5.5.5, 2400:3200::1 ]
  direct-nameserver: [ 223.5.5.5, 1.2.4.8 ]
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.0/15
  fake-ip-range6: fc00::/16
  fake-ip-filter:
    - '+.internal'
    - '+.internal.cloudapp.net'
    - '+.cloud.aliyuncs.com'
    - '+.tencentyun.com'
    - '+.ts.net'
  nameserver: [ 223.5.5.5, 1.2.4.8 ]
  nameserver-policy:
    '+.internal': [10.0.2.3]
    '+.internal.cloudapp.net': [10.0.2.3]
    '+.cloud.aliyuncs.com': [10.0.2.3]
    '+.tencentyun.com': [10.0.2.3]
    '+.ts.net': [10.0.2.3]
use-system-hosts: true
hosts:
  'time.android.com': 203.107.6.88
  'time.facebook.com': 203.107.6.88
  'services.googleapis.cn': services.googleapis.com
  'localhost': 127.0.0.1
proxy-groups:
  - name: 🔰国外流量
    type: select
    use: [kejibear]
    proxies: [♻️自动选择最低延迟节点, 🚀直接连接]
  - name: ♻️自动选择最低延迟节点
    type: url-test
    use: [kejibear]
    filter: "^(?!.*(到期|剩余)).*$"
  - name: 🚀直接连接
    type: select
    proxies: [DIRECT]
proxy-providers:
  kejibear:
    type: file
    path: ./providers/kejibear.yaml
    health-check: {enable: true, url: "https://www.gstatic.com/generate_204", interval: 600}
rules:
 - DOMAIN-SUFFIX,example.com,🚀直接连接
 - MATCH,🔰国外流量
### -t 预检调用
# mode 600
kjx_core_exec -t -d @ROOT/opt/kejibear -f @ROOT/run/kejibear/ShellCrash/config.yaml
