// ─────────────────────────────────────────────────────────────────────
//  Режим «direct»: WireGuard не используется вообще. VLESS идёт напрямую
//  через конкретный сетевой адаптер (@@ADAPTER@@), .ru-трафик — тоже.
//  Бывшие папки conf_XX_WiFi.
//
//  Имя адаптера берётся из local.json и настраивается в GUI: у Windows
//  по умолчанию это «Wi-Fi» с дефисом, но адаптер часто переименован.
// ─────────────────────────────────────────────────────────────────────
{
  "log": {
    "level": "warn",
    "timestamp": true
  },
  "dns": {
    "strategy": "ipv4_only",
    "fakeip": {
      "enabled": true,
      "inet4_range": "198.18.0.0/15",
      "inet6_range": "fc00::/18",
      "include_rule": [
        {
          "domain_suffix": [
            "gemini.google.com",
            "aistudio.google.com",
            "alkalimining-pa.googleapis.com",
            "proactivebackend-pa.googleapis.com",
            "generativelanguage.googleapis.com",
            "ai.google.com",
            "alkali.google.com",
            "oauth2.googleapis.com",
            "oauthaccountmanager.googleapis.com",
            "robinfrontend-pa.googleapis.com",
            "notifications-pa.googleapis.com",
            "app-analytics-services.com"
          ],
          "domain_keyword": [
            "gemini"
          ]
        }
      ]
    },
    "servers": [
      {
        "tag": "dns-bootstrap",
        "address": "8.8.8.8",
        "detour": "bound"
      },
      {
        "tag": "dns-ru",
        "address": "77.88.8.8",
        "detour": "bound"
      },
      {
        "tag": "dns-global",
        "address": "https://cloudflare-dns.com/dns-query",
        "detour": "proxy-vless"
      },
      {
        "tag": "local",
        "address": "local",
        "detour": "direct"
      }
    ],
    "rules": [
      {
        "domain": [
          "cloudflare-dns.com"
        ],
        "server": "dns-bootstrap"
      },
      {
        "domain_suffix": [
          ".ru",
          ".su",
          ".xn--p1ai"
        ],
        "server": "dns-ru"
      },
      {
        "rule_set": "geoip-ru",
        "server": "dns-ru"
      }
    ],
    "final": "dns-global"
  },
  "inbounds": [
    {
      "type": "tun",
      "tag": "tun-in",
      "interface_name": "sing-box-tun",
      "address": [
        "172.19.0.1/30"
      ],
      "auto_route": true,
      "strict_route": true,
      "route_exclude_address": [
        "10.0.0.0/8"
      ],
      "stack": "gvisor",
      // mtu здесь намеренно не задан — в этом режиме он мешал
      // "mtu": 1280,
      "sniff": true,
      "sniff_timeout": "300ms",
      "sniff_override_destination": true
    }
  ],
  "outbounds": [
    {
      "type": "direct",
      "tag": "bound",
      "bind_interface": "@@ADAPTER@@",
      "domain_strategy": "ipv4_only"
    },
    "@@PROXY_OUTBOUND@@",
    {
      "type": "direct",
      "tag": "direct",
      "domain_strategy": "ipv4_only"
    }
  ],
  "route": {
    "default_domain_resolver": "dns-bootstrap",
    "rule_set": [
      {
        "tag": "geoip-ru",
        "type": "local",
        "format": "binary",
        "path": "@@RULESET_PATH@@"
      }
    ],
    "rules": [
      {
        "protocol": "dns",
        "action": "hijack-dns"
      },
      {
        "network": "udp",
        "port": 443,
        "action": "reject"
      },
      {
        "domain_suffix": [
          ".ru",
          ".su",
          ".xn--p1ai"
        ],
        "outbound": "bound"
      },
      {
        "rule_set": [
          "geoip-ru"
        ],
        "outbound": "bound"
      },
      {
        "ip_cidr": [
          "10.0.0.0/8"
        ],
        "outbound": "direct"
      }
    ],
    "auto_detect_interface": true,
    "final": "proxy-vless"
  }
}