mihomo yaml

# 外部控制设置（给网页壳开门）
external-controller: 127.0.0.1:9090
secret: "." # 你自己设置的通信密码
external-ui: ui  # 指定本地网页壳存放的子文件夹

mixed-port: 5678
mode: rule
allow-lan: true
log-level: info
# external-controller: 127.0.0.1:9097
system_dns: false  # 👈 禁止改写系统 DNS

# 开启透明网关模式 (TUN)
tun:
  enable: true              # <--- 这里是开启自动化的灵魂
  stack: system             # macOS 建议使用系统栈,也可以选mixed等
  auto-route: true          # 自动接管系统所有流量
  auto-detect-interface: true # 自动寻找上网的网卡（Wi-Fi 或 以太网）
  dns-hijack:
    - 'any:53'              # 劫持所有 DNS 请求，确保 Fake-IP 生效

dns:
  enable: true
  listen: 127.0.0.1:1053
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  use-hosts: true
  default-nameserver:
    - 1.1.1.1
    - 8.8.8.8
  nameserver:
    - https://1.1.1.1/dns-query
    - https://dns.google/dns-query
  fallback:
    - https://doh.opendns.com/dns-query
  fallback-filter:
    geoip: true
    ipcidr:
      - 240.0.0.0/4

# ------------------------  Proxy Nodes (2 total)  ---------------------------
proxies:
  # ---------- Node 1 ----------
  - name: "N1"
    type: vless
    server: exampledomain.com #e.g.
    port: 443
    uuid: 3617caa4-7684-493d-ad53-2104b2d735fa  #e.g.
    cipher: auto
    tls: true
    skip-cert-verify: true
    network: ws
    ws-opts:
      path: "/pathname" #e.g.
      headers:
        Host: exampledomain.com #e.g.

    # ---------- Node 2 ----------
  - name: "N2"
    type: vmess
    server: exampledomain.com #e.g.
    port: 443
    uuid: 3617caa4-7684-493d-ad53-2104b2d735fa  #e.g.
    cipher: auto
    tls: true
    skip-cert-verify: true
    network: ws
    ws-opts:
      path: "/pathname" #e.g.
      headers:
        Host: exampledomain.com #e.g.

# ------------------------  Proxy Groups  ------------------------------------
proxy-groups:
  - name: "PROXY"
    type: select
    proxies:
      - "N1"
      - "N2"
      - DIRECT

# ------------------------  Rules  -------------------------------------------
rules:
  - DOMAIN-SUFFIX,google.com,PROXY
  - DOMAIN-SUFFIX,amazon.com,PROXY
  - MATCH,DIRECT