---

{
  "log": {
    "level": "warn",
    "timestamp": true
  },
  "dns": {
    "strategy": "ipv4_only",
    "reverse_mapping": true,
    "servers": [
      {
        "type": "https",
        "tag": "dns-secure",
        "server": "8.8.8.8",
        "tls": {
          "server_name": "dns.google"
        },
        "detour": "wg"
      },
      {
        "type": "https",
        "tag": "dns-direct",
        "server": "77.88.8.88",
        "tls": {
          "server_name": "safe.dot.dns.yandex.net"
        }
      }
    ],
    "rules": [
      {
        "rule_set": [
          "sites-direct"
        ],
        "server": "dns-direct"
      }
    ],
    "final": "dns-secure"
  },
  "inbounds": [
    {
      "type": "tun",
      "interface_name": "tun-in",
      "address": [
        "172.19.0.1/30",
        "fdfe:dcba:9876::1/126"
      ],
      "auto_route": true,
      "stack": "mixed",
      "mtu": 1400,
      "route_exclude_address": [
        "192.168.0.0/16",
        "224.0.0.0/4",
        "255.255.255.255/32"
      ]
    }
  ],
  "endpoints": [
    {
      "type": "wireguard",
      "tag": "wg",
      "system": false,
      "mtu": 1408,
      "address": [
        "10.10.10.7/32"
      ],
      "private_key": "change_me",
      "listen_port": 10000,
      "peers": [
        {
          "address": "194.87.79.114",
          "port": 51820,
          "public_key": "DqLE8I1PcWVNohExOZWPsVDoJXR381YehJxWbb8rOQI=",
          "allowed_ips": [
            "0.0.0.0/0"
          ],
          "persistent_keepalive_interval": 30
        }
      ]
    }
  ],
  "outbounds": [
    {
      "type": "direct",
      "tag": "direct"
    }
  ],
  "route": {
    "final": "wg",
    "auto_detect_interface": true,
    "default_domain_resolver": {
      "server": "dns-secure"
    },
    "rule_set": [
      {
        "tag": "sites-direct",
        "rules": [
          {
            "domain_suffix": [
              ".ru",
              ".su",
              ".xn--p1ai",
              "yandex.net",
              "yastatic.net",
              "vk.com",
              "vk-portal.net",
              "2gis.com"
            ]
          }
        ]
      }
    ],
    "rules": [
      {
        "action": "sniff",
        "sniffer": [
          "http",
          "tls",
          "dns",
          "quic"
        ],
        "timeout": "300ms"
      },
      {
        "protocol": "dns",
        "action": "hijack-dns"
      },
      {
        "action": "resolve"
      },
      {
        "ip_is_private": true,
        "action": "route",
        "outbound": "direct"
      },
      {
        "rule_set": [
          "sites-direct"
        ],
        "action": "route",
        "outbound": "direct"
      }
    ]
  }
}