ansible-proxy-chain/templates/surge-client.conf.j2

[General]
skip-proxy = 127.0.0.0/8, 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, 100.64.0.0/10, 162.14.0.0/16, 211.99.96.0/19, 162.159.192.0/24, 162.159.193.0/24, 162.159.195.0/24, fc00::/7, fe80::/10, localhost, *.local, captive.apple.com, passenger.t3go.cn, *.ccb.com, wxh.wo.cn, *.abcchina.com, *.abcchina.com.cn
exclude-simple-hostnames = true
internet-test-url = http://connectivitycheck.platform.hicloud.com/generate_204
proxy-test-url = http://www.apple.com/
proxy-test-udp = www.apple.com@64.6.64.6
test-timeout = 2
dns-server = 223.5.5.5, 114.114.114.114
hijack-dns = 8.8.8.8:53, 8.8.4.4:53
wifi-assist = true
vif-mode = v3
ipv6 = false
ipv6-vif = off
loglevel = notify
show-error-page-for-reject = true
read-etc-hosts = true
udp-policy-not-supported-behaviour = REJECT

[Proxy]
Relay = ss, {{ hostvars[groups['relay'][0]]['relay_domain'] }}, {{ hostvars[groups['relay'][0]]['ss_port'] }}, encrypt-method={{ hostvars[groups['relay'][0]]['ss_cipher'] }}, password={{ hostvars[groups['relay'][0]]['ss_password'] }}
Landing = trojan, {{ trojan_domain }}, {{ trojan_port }}, password={{ trojan_password }}, underlying-proxy=Relay

[Proxy Group]
Proxy = select, Relay
Native = select, Landing

[Rule]
# Block: SougouInput
RULE-SET,https://ruleset.skk.moe/List/non_ip/sogouinput.conf,REJECT-DROP

# Block: AD
DOMAIN-SET,https://ruleset.skk.moe/List/domainset/reject.conf,REJECT
RULE-SET,https://ruleset.skk.moe/List/non_ip/reject.conf,REJECT,extended-matching
RULE-SET,https://ruleset.skk.moe/List/ip/reject.conf,REJECT-DROP

# Block: Append
RULE-SET,https://ruleset.skk.moe/List/non_ip/reject-no-drop.conf,REJECT-NO-DROP,extended-matching
RULE-SET,https://ruleset.skk.moe/List/non_ip/reject-drop.conf,REJECT-DROP,extended-matching

# Service: Streaming
RULE-SET,https://ruleset.skk.moe/List/non_ip/stream.conf,Native,extended-matching
RULE-SET,https://ruleset.skk.moe/List/ip/stream.conf,Native

# Service: Telegram
RULE-SET,https://ruleset.skk.moe/List/non_ip/telegram.conf,Native,extended-matching
RULE-SET,https://ruleset.skk.moe/List/ip/telegram.conf,Native
PROCESS-NAME,Telegram,REJECT-DROP

# Service: Apple & Microsoft Local CDN
RULE-SET,https://ruleset.skk.moe/List/non_ip/apple_cdn.conf,DIRECT
RULE-SET,https://ruleset.skk.moe/List/non_ip/microsoft_cdn.conf,DIRECT

# Service: Download
DOMAIN-SET,https://ruleset.skk.moe/List/domainset/download.conf,DIRECT,extended-matching
RULE-SET,https://ruleset.skk.moe/List/non_ip/download.conf,DIRECT,extended-matching

# Service: Apple CN
RULE-SET,https://ruleset.skk.moe/List/non_ip/apple_cn.conf,DIRECT

# Service: Apple
RULE-SET,https://ruleset.skk.moe/List/non_ip/apple_services.conf,Proxy,extended-matching
RULE-SET,https://ruleset.skk.moe/List/non_ip/microsoft.conf,Proxy,extended-matching
DOMAIN-SET,https://ruleset.skk.moe/List/domainset/icloud_private_relay.conf,Proxy

# Service: AI
RULE-SET,https://ruleset.skk.moe/List/non_ip/ai.conf,Native,extended-matching

# Service: Global
RULE-SET,https://ruleset.skk.moe/List/non_ip/global.conf,Proxy,extended-matching

# Service: Netease Music
RULE-SET,https://ruleset.skk.moe/List/non_ip/neteasemusic.conf,DIRECT,extended-matching

# Location: CN
RULE-SET,https://ruleset.skk.moe/List/non_ip/domestic.conf,DIRECT,extended-matching
RULE-SET,https://ruleset.skk.moe/List/ip/domestic.conf,DIRECT
RULE-SET,https://ruleset.skk.moe/List/ip/china_ip.conf,DIRECT

# LAN
RULE-SET,https://ruleset.skk.moe/List/non_ip/lan.conf,DIRECT
RULE-SET,https://ruleset.skk.moe/List/ip/lan.conf,DIRECT

# Default
RULE-SET,LAN,DIRECT
GEOIP,CN,DIRECT
FINAL,Proxy,dns-failed