// ─────────────────────────────────────────────────────────────────────
//  Режим «wgonly»: только WireGuard, без VLESS. Выход — внутри РФ.
//  Бывшая папка conf0.
// ─────────────────────────────────────────────────────────────────────
{
  "log": {
    "level": "warn",
    "timestamp": true
  },
  "dns": {
    "strategy": "ipv4_only",
    "servers": [
      {
        "tag": "dns-yandex",
        "address": "https://77.88.8.8",
        "detour": "proxy-wireguard"
      },
      {
        "tag": "dns-google",
        "address": "https://8.8.8.8",
        "detour": "proxy-wireguard"
      },
      {
        "tag": "dns-cloudflare",
        "address": "https://1.1.1.1",
        "detour": "proxy-wireguard",
        "strategy": "ipv4_only"
      },
      {
        "tag": "local",
        "address": "local",
        "detour": "direct"
      },
      {
        "tag": "block",
        "address": "rcode://success"
      }
    ],
    "rules": [
      {
        "domain_suffix": [
          ".ru",
          ".su",
          ".xn--p1ai"
        ],
        "server": "dns-yandex"
      },
      {
        "rule_set": "geoip-ru",
        "server": "dns-yandex"
      }
    ],
    "final": "dns-cloudflare"
  },
  "inbounds": [
    {
      "type": "tun",
      "tag": "tun-in",
      "interface_name": "sing-box-tun",
      "address": [
        "172.19.0.1/30"
      ],
      "auto_route": true,
      "strict_route": true,
      "stack": "gvisor",
      "mtu": 1280,
      "sniff": true,
      "sniff_timeout": "300ms",
      "sniff_override_destination": true
    }
  ],
  "outbounds": [
    {
      "type": "dns",
      "tag": "dns-out"
    },
    {
      "type": "wireguard",
      "tag": "proxy-wireguard",
      "server": "@@WG_SERVER@@",
      "server_port": "@@WG_PORT@@",
      "local_address": [
        "@@WG_LOCAL_ADDRESS@@"
      ],
      "private_key": "@@WG_PRIVATE_KEY@@",
      "peer_public_key": "@@WG_PEER_PUBLIC_KEY@@",
      "mtu": "@@WG_MTU@@",
      "domain_strategy": "ipv4_only"
    },
    {
      "type": "direct",
      "tag": "direct",
      "domain_strategy": "ipv4_only"
    }
  ],
  "route": {
    "rule_set": [
      {
        "tag": "geoip-ru",
        "type": "local",
        "format": "binary",
        "path": "@@RULESET_PATH@@"
      }
    ],
    "rules": [
      {
        "protocol": "dns",
        "action": "hijack-dns"
      },
      {
        "port": 53,
        "outbound": "dns-out"
      },
      {
        "domain_suffix": [
          ".ru",
          ".su",
          ".xn--p1ai"
        ],
        "outbound": "proxy-wireguard"
      },
      {
        "rule_set": [
          "geoip-ru"
        ],
        "outbound": "proxy-wireguard"
      }
    ],
    "auto_detect_interface": true,
    "final": "proxy-wireguard"
  }
}