{
  "log": {
    "level": "warn"
  },
  "dns": {
    "servers": [
      {
        "tag": "remote",
        "address": "https://1.1.1.1/dns-query",
        "detour": "Nebula VPN"
      },
      {
        "tag": "local",
        "address": "8.8.8.8",
        "detour": "direct"
      }
    ],
    "rules": [
      {
        "outbound": "any",
        "server": "local"
      }
    ],
    "final": "remote"
  },
  "inbounds": [
    {
      "type": "tun",
      "tag": "tun-in",
      "interface_name": "tun0",
      "inet4_address": "172.19.0.1/30",
      "auto_route": true,
      "strict_route": true,
      "stack": "mixed",
      "sniff": true
    }
  ],
  "outbounds": [
    {
      "type": "selector",
      "tag": "Nebula VPN",
      "outbounds": [
        "Nebula CZ-1 · Reality",
        "Nebula CZ-1 · Hysteria2",
        "auto"
      ],
      "default": "Nebula CZ-1 · Reality"
    },
    {
      "type": "urltest",
      "tag": "auto",
      "outbounds": [
        "Nebula CZ-1 · Reality",
        "Nebula CZ-1 · Hysteria2"
      ],
      "url": "https://www.gstatic.com/generate_204",
      "interval": "3m"
    },
    {
      "type": "vless",
      "tag": "Nebula CZ-1 · Reality",
      "server": "109.238.95.101",
      "server_port": 443,
      "uuid": "2535f594-0ffc-4694-b4c2-ab4fff5dec77",
      "packet_encoding": "xudp",
      "tls": {
        "enabled": true,
        "server_name": "dl.google.com",
        "utls": {
          "enabled": true,
          "fingerprint": "chrome"
        },
        "reality": {
          "enabled": true,
          "public_key": "vux7d9QtGcmIhLik9iwQqQrVwNduTCKkRimU1iZ_4gY",
          "short_id": "a72ddd7e4d51c04f"
        }
      },
      "transport": {
        "type": "grpc",
        "service_name": "grpc"
      }
    },
    {
      "type": "hysteria2",
      "tag": "Nebula CZ-1 · Hysteria2",
      "server": "109.238.95.101",
      "server_port": 443,
      "password": "bU3oENqjxz8agbIOd1qDeP0",
      "obfs": {
        "type": "salamander",
        "password": "BqQiTqlMxJN0z6Lra0pjzJ3"
      },
      "tls": {
        "enabled": true,
        "server_name": "www.microsoft.com",
        "insecure": true
      }
    },
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "block",
      "tag": "block"
    },
    {
      "type": "dns",
      "tag": "dns-out"
    }
  ],
  "route": {
    "auto_detect_interface": true,
    "final": "Nebula VPN",
    "rules": [
      {
        "protocol": "dns",
        "outbound": "dns-out"
      },
      {
        "ip_is_private": true,
        "outbound": "direct"
      },
      {
        "domain_suffix": [
          ".ru",
          ".xn--p1ai",
          ".рф",
          ".su"
        ],
        "outbound": "direct"
      },
      {
        "rule_set": "geoip-ru",
        "outbound": "direct"
      }
    ],
    "rule_set": [
      {
        "tag": "geoip-ru",
        "type": "remote",
        "format": "binary",
        "url": "https://raw.githubusercontent.com/SagerNet/sing-geoip/rule-set/geoip-ru.srs",
        "download_detour": "Nebula VPN"
      }
    ]
  }
}