// ─────────────────────────────────────────────────────────────────────
//  Режим «wg»: весь трафик идёт в VLESS, а VLESS — поверх WireGuard.
//  .ru-домены и geoip-ru уходят в WireGuard напрямую.
//  Бывшие папки conf_XX_eth.
//
//  @@ТОКЕНЫ@@ подставляет лаунчер. Числовые токены записаны в кавычках,
//  чтобы файл оставался валидным JSON; кавычки снимаются при подстановке.
//  Всё остальное правьте руками — это обычный конфиг sing-box.
// ─────────────────────────────────────────────────────────────────────
{
  "log": {
    "level": "warn",
    "timestamp": true
  },
  "dns": {
    "strategy": "ipv4_only",
    "fakeip": {
      "enabled": true,
      "inet4_range": "198.18.0.0/15",
      "inet6_range": "fc00::/18",
      "include_rule": [
        {
          "domain_suffix": [
            "gemini.google.com",
          "domain:gemini.google.com",
          "domain:aistudio.google.com",
          "domain:generativelanguage.googleapis.com",
          "domain:deepmind.google",
          "domain:deepmind.com",
          "domain:antigravity.google",
          "domain:antigravity.com",
          "domain:run.app",
          "domain:cloudaicompanion.googleapis.com",
          "domain:accounts.google.com",
          "domain:antigravity-unleash.goog",
          "domain:antigravity-hub-auto-updater-974169037036.us-central1.run.app",
          "domain:daily-cloudcode-pa.googleapis.com",
          "domain:www.googleapis.com",
          "domain:play.googleapis.com",
          "domain:lh3.googleusercontent.com",
          "domain:googlehosted.l.googleusercontent.com",
          "domain:www.gstatic.com",
          "domain:bard.google.com"
          ],
          "domain_keyword": [
            "gemini"
          ]
        }
      ]
    },
    "servers": [
      {
        "tag": "dns-bootstrap",
        "address": "8.8.8.8",
        "detour": "proxy-wireguard"
      },
      {
        "tag": "dns-ru",
        "address": "77.88.8.8",
        "detour": "proxy-wireguard"
      },
      {
        "tag": "dns-global",
        "address": "8.8.8.8",
        "detour": "proxy-vless"
      }
    ],
    "rules": [
      {
        "domain": [
          "cloudflare-dns.com"
        ],
        "server": "dns-bootstrap"
      },
      {
        "domain_suffix": [
          ".ru",
          ".su",
          ".xn--p1ai"
        ],
        "server": "dns-ru"
      },
      {
        "rule_set": "geoip-ru",
        "server": "dns-ru"
      }
    ],
    "final": "dns-global"
  },
  "inbounds": [
    {
      "type": "tun",
      "tag": "tun-in",
      "interface_name": "sing-box-tun",
      "address": [
        "172.19.0.1/30"
      ],
      "auto_route": true,
      "strict_route": true,
      "stack": "gvisor",
      "mtu": 1280,
      "sniff": true,
      "sniff_timeout": "300ms",
      "sniff_override_destination": true
    }
  ],
  "outbounds": [
    {
      "type": "wireguard",
      "tag": "proxy-wireguard",
      "server": "@@WG_SERVER@@",
      "server_port": "@@WG_PORT@@",
      "local_address": [
        "@@WG_LOCAL_ADDRESS@@"
      ],
      "private_key": "@@WG_PRIVATE_KEY@@",
      "peer_public_key": "@@WG_PEER_PUBLIC_KEY@@",
      "mtu": "@@WG_MTU@@"
    },
    "@@PROXY_OUTBOUND@@",
    {
      "type": "direct",
      "tag": "direct"
    }
  ],
  "route": {
    "default_domain_resolver": "dns-bootstrap",
    "rule_set": [
      {
        "tag": "geoip-ru",
        "type": "local",
        "format": "binary",
        "path": "@@RULESET_PATH@@"
      }
    ],
    "rules": [
      {
        "protocol": "dns",
        "action": "hijack-dns"
      },
      {
        "network": "udp",
        "port": 443,
        "action": "reject"
      },
      {
        "domain_suffix": [
          ".ru",
          ".su",
          ".xn--p1ai"
        ],
        "outbound": "proxy-wireguard"
      },
      {
        "rule_set": [
          "geoip-ru"
        ],
        "outbound": "proxy-wireguard"
      }
    ],
    "auto_detect_interface": true,
    "final": "proxy-vless"
  }
}