#!MANAGED-CONFIG https://fq.yifan.men/cc92466e08b2bcee/Surge-managed.conf interval=86400 strict=false

[General]
loglevel = notify
bypass-system = true
dns-server = 223.5.5.5, 119.29.29.29
skip-proxy = 127.0.0.1, 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, 100.64.0.0/10, localhost, *.local
always-real-ip = *.ts.net, 100.64.0.0/10
proxy-test-url = http://www.apple.com/library/test/success.html
internet-test-url = http://www.gstatic.cn/generate_204
test-timeout = 5
udp-policy-not-supported-behaviour = DIRECT
ipv6 = false

[Proxy]
Ad-Block = reject
Ad-GIF = reject-tinygif
Vultr-snell = snell, 45.63.88.28, 29406, psk=HtZCMvpmLsjOqs0vX0zBY2tsvuxbwVL, version=6, tfo=true
CN-Home = tailscale, section-name=home
Oracle-snell = snell, 170.9.55.148, 8389, psk=399dc963cb1ba9d015990c49b74f9f95, version=6, tfo=true

[Proxy Group]
AdBlock = select, Ad-GIF, Ad-Block, Proxy, CN-traffic
Proxy = select, DIRECT, Vultr-snell, Oracle-snell, US-smart
US-smart = url-test, Vultr-snell, Oracle-snell, interval=600, tolerance=100
CN-traffic = select, DIRECT, CN-Home

[Rule]
# 内网 / Tailscale 网段直连
DOMAIN-SUFFIX,local,DIRECT
IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
IP-CIDR,100.64.0.0/10,DIRECT,no-resolve
# 去广告 -> AdBlock（默认 Ad-GIF，可切换 reject / direct）
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/AdvertisingLite/AdvertisingLite.list,AdBlock
DOMAIN-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/AdvertisingLite/AdvertisingLite_Domain.list,AdBlock
# Apple 服务直连
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/Apple/Apple.list,DIRECT
# LinkedIn（含 CDN）走 Proxy（手动选节点）
DOMAIN-SUFFIX,linkedin.com,Proxy
DOMAIN-SUFFIX,licdn.com,Proxy
# 中国域名 / IP -> CN-traffic（默认 DIRECT，可切 CN-Home 经家里出去）
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/ChinaMax/ChinaMax.list,CN-traffic
GEOIP,CN,CN-traffic
# 其余走 Proxy（默认 DIRECT，手动切 Vultr-snell / Oracle-snell / US-smart）
FINAL,Proxy

[Tailscale home]
auth-key = tskey-auth-kxm5qAXtp111CNTRL-6GdKM69ZE9JEX3B95rv49JPWDG3cEd5S
exit-node = rt-ac86u-9ab8
dns-server = 1.1.1.1