refactor: mihomo config · nix-config@351be58

@@ -0,0 +1,20 @@
+{mylib, ...}: {
+  imports = mylib.scanModules ./.;
+
+  services.mihomo.config = {
+    mixed-port = 7154;
+    allow-lan = true;
+    mode = "rule";
+    log-level = "warning";
+    ipv6 = false;
+    find-process-mode = "strict";
+    external-controller = "127.0.0.1:9090";
+    unified-delay = true;
+    tcp-concurrent = true;
+    global-client-fingerprint = "chrome";
+    profile = {
+      store-selected = true;
+      store-fake-ip = true;
+    };
+  };
+}

@@ -0,0 +1,40 @@
+{...}: {
+  services.mihomo.config.dns = {
+    enable = true;
+    prefer-h3 = true;
+    ipv6 = false;
+    enhanced-mode = "fake-ip";
+    fake-ip-range = "198.18.0.1/16";
+    fake-ip-filter = [
+      "+.+m2m"
+      "+.$injections.adguard.org"
+      "+.$local.adguard.org"
+      "+.+bogon"
+      "+.+lan"
+      "+.+local"
+      "+.+localdomain"
+      "+.home.arpa"
+      "dns.msftncsi.com"
+      "*.srv.nintendo.net"
+      "*.stun.playstation.net"
+      "xbox.*.microsoft.com"
+      "*.xboxlive.com"
+      "*.turn.twilio.com"
+      "*.stun.twilio.com"
+      "stun.syncthing.net"
+      "stun.*"
+      "*.sslip.io"
+      "*.nip.io"
+    ];
+    respect-rules = true;
+    nameserver = [
+      "system"
+      "https://223.5.5.5/dns-query"
+      "https://doh.pub/dns-query"
+    ];
+    proxy-server-nameserver = [
+      "https://223.5.5.5/dns-query"
+      "https://doh.pub/dns-query"
+    ];
+  };
+}

@@ -0,0 +1,210 @@
+{...}: let
+  FilterHK = "^(?=.*((?i)🇭🇰|香港|\\b(HK|Hong)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+  FilterTW = "^(?=.*((?i)🇹🇼|台湾|\\b(TW|Tai|Taiwan)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+  FilterJP = "^(?=.*((?i)🇯🇵|日本|川日|东京|大阪|泉日|埼玉|\\b(JP|Japan)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+  FilterKR = "^(?=.*((?i)🇰🇷|韩国|韓|首尔|\\b(KR|Korea)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+  FilterSG = "^(?=.*((?i)🇸🇬|新加坡|狮|\\b(SG|Singapore)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+  FilterUS = "^(?=.*((?i)🇺🇸|美国|波特兰|达拉斯|俄勒冈|凤凰城|费利蒙|硅谷|拉斯维加斯|洛杉矶|圣何塞|圣克拉拉|西雅图|芝加哥|\\b(US|United States)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+  FilterUK = "^(?=.*((?i)🇬🇧|英国|伦敦|\\b(UK|United Kingdom)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+  FilterFR = "^(?=.*((?i)🇫🇷|法国|\\b(FR|France)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+  FilterDE = "^(?=.*((?i)🇩🇪|德国|\\b(DE|Germany)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+  FilterOthers = "^(?!.*(🇭🇰|HK|Hong|香港|🇹🇼|TW|Taiwan|Wan|🇯🇵|JP|Japan|日本|🇸🇬|SG|Singapore|狮城|🇺🇸|US|United States|America|美国|🇩🇪|DE|Germany|德国|🇬🇧|UK|United Kingdom|英国|🇰🇷|KR|Korea|韩国|韓|🇫🇷|FR|France|法国)).*$";
+  FilterAll = "^(?=.*(.))(?!.*((?i)群|邀请|返利|循环|官网|客服|网站|网址|获取|订阅|流量|到期|机场|下次|版本|官址|备用|过期|已用|联系|邮箱|工单|贩卖|通知|倒卖|防止|国内|地址|频道|无法|说明|使用|提示|特别|访问|支持|教程|关注|更新|作者|加入|(\\b(USE|USED|TOTAL|EXPIRE|EMAIL|Panel|Channel|Author)\\b|(\\d{4}-\\d{2}-\\d{2}|\\d+G)))).*$";
+
+  Select = {
+    type = "select";
+    url = "http://connectivitycheck.platform.hicloud.com/generate_204";
+    disable-udp = false;
+    hidden = false;
+    include-all = true;
+  };
+  Auto = {
+    type = "url-test";
+    url = "http://connectivitycheck.platform.hicloud.com/generate_204";
+    interval = 300;
+    tolerance = 50;
+    disable-udp = false;
+    hidden = true;
+    include-all = true;
+  };
+in {
+  services.mihomo.config.proxy-groups =
+    [
+      # 主选择组
+      {
+        name = "🎯 节点选择";
+        type = "select";
+        proxies = ["自动选择" "手动选择" "DIRECT"];
+        url = "http://connectivitycheck.platform.hicloud.com/generate_204";
+        icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Static.png";
+      }
+      # 手动/自动
+      {
+        name = "手动选择";
+        type = "select";
+        proxies = [
+          "🇭🇰 - 手动选择"
+          "🇯🇵 - 手动选择"
+          "🇰🇷 - 手动选择"
+          "🇸🇬 - 手动选择"
+          "🇺🇸 - 手动选择"
+          "🇬🇧 - 手动选择"
+          "🇫🇷 - 手动选择"
+          "🇩🇪 - 手动选择"
+          "🇹🇼 - 手动选择"
+          "Others - 手动选择"
+        ];
+        url = "http://connectivitycheck.platform.hicloud.com/generate_204";
+        icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Cylink.png";
+      }
+      {
+        name = "自动选择";
+        type = "select";
+        proxies = [
+          "🇭🇰 - 自动选择"
+          "🇯🇵 - 自动选择"
+          "🇰🇷 - 自动选择"
+          "🇸🇬 - 自动选择"
+          "🇺🇸 - 自动选择"
+          "🇬🇧 - 自动选择"
+          "🇫🇷 - 自动选择"
+          "🇩🇪 - 自动选择"
+          "🇹🇼 - 自动选择"
+        ];
+        url = "http://connectivitycheck.platform.hicloud.com/generate_204";
+        icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Urltest.png";
+      }
+      # 应用分组
+      {
+        name = "✈️ 电报信息";
+        type = "select";
+        proxies = [
+          "🎯 节点选择"
+          "🇭🇰 - 自动选择"
+          "🇯🇵 - 自动选择"
+          "🇸🇬 - 自动选择"
+          "🇺🇸 - 自动选择"
+        ];
+        icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Telegram.png";
+      }
+      {
+        name = "🤖 AIGC";
+        type = "select";
+        proxies = [
+          "🇺🇸 - 自动选择"
+          "🎯 节点选择"
+          "🇭🇰 - 自动选择"
+          "🇯🇵 - 自动选择"
+          "🇸🇬 - 自动选择"
+        ];
+        icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/OpenAI.png";
+      }
+      {
+        name = "🍎 苹果服务";
+        type = "select";
+        proxies = ["DIRECT" "🎯 节点选择" "🇭🇰 - 自动选择" "🇺🇸 - 自动选择"];
+        icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Apple.png";
+      }
+      {
+        name = "Ⓜ️ 微软服务";
+        type = "select";
+        proxies = ["DIRECT" "🎯 节点选择" "🇭🇰 - 自动选择" "🇺🇸 - 自动选择"];
+        icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Microsoft.png";
+      }
+    ]
+    ++ (map (x: Auto // x) [
+      # 自动选择 - 按地区
+      {
+        name = "🇭🇰 - 自动选择";
+        filter = FilterHK;
+      }
+      {
+        name = "🇯🇵 - 自动选择";
+        filter = FilterJP;
+      }
+      {
+        name = "🇰🇷 - 自动选择";
+        filter = FilterKR;
+      }
+      {
+        name = "🇸🇬 - 自动选择";
+        filter = FilterSG;
+      }
+      {
+        name = "🇺🇸 - 自动选择";
+        filter = FilterUS;
+      }
+      {
+        name = "🇬🇧 - 自动选择";
+        filter = FilterUK;
+      }
+      {
+        name = "🇫🇷 - 自动选择";
+        filter = FilterFR;
+      }
+      {
+        name = "🇩🇪 - 自动选择";
+        filter = FilterDE;
+      }
+      {
+        name = "🇹🇼 - 自动选择";
+        filter = FilterTW;
+      }
+    ])
+    ++ (map (x: Select // x) [
+      # 手动选择 - 按地区
+      {
+        name = "🇭🇰 - 手动选择";
+        filter = FilterHK;
+      }
+      {
+        name = "🇯🇵 - 手动选择";
+        filter = FilterJP;
+      }
+      {
+        name = "🇰🇷 - 手动选择";
+        filter = FilterKR;
+      }
+      {
+        name = "🇸🇬 - 手动选择";
+        filter = FilterSG;
+      }
+      {
+        name = "🇺🇸 - 手动选择";
+        filter = FilterUS;
+      }
+      {
+        name = "🇬🇧 - 手动选择";
+        filter = FilterUK;
+      }
+      {
+        name = "🇫🇷 - 手动选择";
+        filter = FilterFR;
+      }
+      {
+        name = "🇩🇪 - 手动选择";
+        filter = FilterDE;
+      }
+      {
+        name = "🇹🇼 - 手动选择";
+        filter = FilterTW;
+      }
+      {
+        name = "Others - 手动选择";
+        filter = FilterOthers;
+      }
+    ])
+    ++ [
+      # 全部节点
+      (Select
+        // {
+          name = "AllIn - 手动选择";
+          filter = FilterAll;
+        })
+      (Auto
+        // {
+          name = "AllIn - 自动选择";
+          filter = FilterAll;
+        })
+    ];
+}

@@ -0,0 +1,28 @@
+{config, ...}: let
+  NodeParam = {
+    type = "http";
+    interval = 86400;
+    health-check = {
+      enable = true;
+      url = "http://cp.cloudflare.com";
+      interval = 300;
+    };
+  };
+in {
+  services.mihomo.config.proxy-providers = {
+    "Node-YiYuan" =
+      NodeParam
+      // {
+        url = config.sops.placeholder."mihomo/providers/yi_yuan";
+        path = "./proxy_provider/providers-yi_yuan.yaml";
+        override.additional-prefix = "[YY]";
+      };
+    "Node-MoJie" =
+      NodeParam
+      // {
+        url = config.sops.placeholder."mihomo/providers/mo_jie";
+        path = "./proxy_provider/providers-mo_jie.yaml";
+        override.additional-prefix = "[MJ]";
+      };
+  };
+}

@@ -0,0 +1,227 @@
+{...}: let
+  RuleSet_classical = {
+    type = "http";
+    behavior = "classical";
+    interval = 43200;
+    format = "text";
+    proxy = "🎯 节点选择";
+  };
+  RuleSet_domain = {
+    type = "http";
+    behavior = "domain";
+    interval = 43200;
+    format = "text";
+    proxy = "🎯 节点选择";
+  };
+  RuleSet_ipcidr = {
+    type = "http";
+    behavior = "ipcidr";
+    interval = 43200;
+    format = "text";
+    proxy = "🎯 节点选择";
+  };
+in {
+  services.mihomo.config = {
+    rules = [
+      # 自订类规则
+      "AND,((RULE-SET,my_services),(DST-PORT,80/443)),🎯 节点选择"
+      "RULE-SET,my_services,DIRECT"
+      # 非 IP 类规则
+      "RULE-SET,reject_non_ip,REJECT"
+      "RULE-SET,reject_domainset,REJECT"
+      "RULE-SET,reject_non_ip_drop,REJECT-DROP"
+      "RULE-SET,reject_non_ip_no_drop,REJECT"
+      "RULE-SET,cdn_domainset,🎯 节点选择"
+      "RULE-SET,cdn_non_ip,🎯 节点选择"
+      "RULE-SET,stream_non_ip,🇺🇸 - 自动选择"
+      "RULE-SET,telegram_non_ip,✈️ 电报信息"
+      "RULE-SET,apple_cdn,DIRECT"
+      "RULE-SET,download_domainset,🎯 节点选择"
+      "RULE-SET,download_non_ip,🎯 节点选择"
+      "RULE-SET,microsoft_cdn_non_ip,DIRECT"
+      "RULE-SET,apple_cn_non_ip,DIRECT"
+      "RULE-SET,apple_services,🍎 苹果服务"
+      "RULE-SET,microsoft_non_ip,Ⓜ️ 微软服务"
+      "RULE-SET,ai_non_ip,🤖 AIGC"
+      "RULE-SET,global_non_ip,🎯 节点选择"
+      "RULE-SET,domestic_non_ip,DIRECT"
+      "RULE-SET,direct_non_ip,DIRECT"
+      "RULE-SET,lan_non_ip,DIRECT"
+      # IP 类规则
+      "RULE-SET,reject_ip,REJECT"
+      "RULE-SET,telegram_ip,✈️ 电报信息"
+      "RULE-SET,stream_ip,🇺🇸 - 自动选择"
+      "RULE-SET,lan_ip,DIRECT"
+      "RULE-SET,domestic_ip,DIRECT"
+      "RULE-SET,china_ip,DIRECT"
+      "MATCH,🎯 节点选择"
+    ];
+    rule-providers = {
+      reject_non_ip_no_drop =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/reject-no-drop.txt";
+          path = "./rule_set/sukkaw_ruleset/reject_non_ip_no_drop.txt";
+        };
+      reject_non_ip_drop =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/reject-drop.txt";
+          path = "./rule_set/sukkaw_ruleset/reject_non_ip_drop.txt";
+        };
+      reject_non_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/reject.txt";
+          path = "./rule_set/sukkaw_ruleset/reject_non_ip.txt";
+        };
+      reject_domainset =
+        RuleSet_domain
+        // {
+          url = "https://ruleset.skk.moe/Clash/domainset/reject.txt";
+          path = "./rule_set/sukkaw_ruleset/reject_domainset.txt";
+        };
+      reject_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/ip/reject.txt";
+          path = "./rule_set/sukkaw_ruleset/reject_ip.txt";
+        };
+      cdn_domainset =
+        RuleSet_domain
+        // {
+          url = "https://ruleset.skk.moe/Clash/domainset/cdn.txt";
+          path = "./rule_set/sukkaw_ruleset/cdn_domainset.txt";
+        };
+      cdn_non_ip =
+        RuleSet_domain
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/cdn.txt";
+          path = "./rule_set/sukkaw_ruleset/cdn_non_ip.txt";
+        };
+      stream_non_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/stream.txt";
+          path = "./rule_set/sukkaw_ruleset/stream_non_ip.txt";
+        };
+      stream_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/ip/stream.txt";
+          path = "./rule_set/sukkaw_ruleset/stream_ip.txt";
+        };
+      ai_non_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/ai.txt";
+          path = "./rule_set/sukkaw_ruleset/ai_non_ip.txt";
+        };
+      telegram_non_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/telegram.txt";
+          path = "./rule_set/sukkaw_ruleset/telegram_non_ip.txt";
+        };
+      telegram_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/ip/telegram.txt";
+          path = "./rule_set/sukkaw_ruleset/telegram_ip.txt";
+        };
+      apple_cdn =
+        RuleSet_domain
+        // {
+          url = "https://ruleset.skk.moe/Clash/domainset/apple_cdn.txt";
+          path = "./rule_set/sukkaw_ruleset/apple_cdn.txt";
+        };
+      apple_services =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/apple_services.txt";
+          path = "./rule_set/sukkaw_ruleset/apple_services.txt";
+        };
+      apple_cn_non_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/apple_cn.txt";
+          path = "./rule_set/sukkaw_ruleset/apple_cn_non_ip.txt";
+        };
+      microsoft_cdn_non_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/microsoft_cdn.txt";
+          path = "./rule_set/sukkaw_ruleset/microsoft_cdn_non_ip.txt";
+        };
+      microsoft_non_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/microsoft.txt";
+          path = "./rule_set/sukkaw_ruleset/microsoft_non_ip.txt";
+        };
+      download_domainset =
+        RuleSet_domain
+        // {
+          url = "https://ruleset.skk.moe/Clash/domainset/download.txt";
+          path = "./rule_set/sukkaw_ruleset/download_domainset.txt";
+        };
+      download_non_ip =
+        RuleSet_domain
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/download.txt";
+          path = "./rule_set/sukkaw_ruleset/download_non_ip.txt";
+        };
+      lan_non_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/lan.txt";
+          path = "./rule_set/sukkaw_ruleset/lan_non_ip.txt";
+        };
+      lan_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/ip/lan.txt";
+          path = "./rule_set/sukkaw_ruleset/lan_ip.txt";
+        };
+      domestic_non_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/domestic.txt";
+          path = "./rule_set/sukkaw_ruleset/domestic_non_ip.txt";
+        };
+      direct_non_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/direct.txt";
+          path = "./rule_set/sukkaw_ruleset/direct_non_ip.txt";
+        };
+      global_non_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/non_ip/global.txt";
+          path = "./rule_set/sukkaw_ruleset/global_non_ip.txt";
+        };
+      domestic_ip =
+        RuleSet_classical
+        // {
+          url = "https://ruleset.skk.moe/Clash/ip/domestic.txt";
+          path = "./rule_set/sukkaw_ruleset/domestic_ip.txt";
+        };
+      china_ip =
+        RuleSet_ipcidr
+        // {
+          url = "https://ruleset.skk.moe/Clash/ip/china_ip.txt";
+          path = "./rule_set/sukkaw_ruleset/china_ip.txt";
+        };
+      my_services = {
+        type = "inline";
+        behavior = "classical";
+        payload = [
+          "DOMAIN-SUFFIX,hpcesia.com"
+          "DOMAIN-SUFFIX,trin.one"
+          "DOMAIN-SUFFIX,mxrouting.net"
+        ];
+      };
+    };
+  };
+}

@@ -0,0 +1,21 @@
+{...}: {
+  services.mihomo.config.sniffer = {
+    enable = true;
+    sniff = {
+      HTTP = {
+        ports = [80 "8080-8880"];
+        override-destination = true;
+      };
+      TLS = {
+        ports = [443 8443];
+      };
+      QUIC = {
+        ports = [443 8443];
+      };
+    };
+    skip-domain = [
+      "Mijia Cloud"
+      "+.push.apple.com"
+    ];
+  };
+}

@@ -0,0 +1,15 @@
+{...}: {
+  services.mihomo.config.tun = {
+    enable = true;
+    stack = "mixed";
+    device = "ElysianRealm";
+    auto-route = true;
+    auto-detect-interface = true;
+    dns-hijack = [
+      "any:53"
+      "tcp://any:53"
+    ];
+    strict-route = true;
+    mtu = 1500;
+  };
+}

@@ -1,457 +0,0 @@
-# From https://github.com/yyhhyyyyyy/selfproxy
-
-mixed-port: 7154
-allow-lan: true
-mode: rule
-log-level: warning
-ipv6: false
-find-process-mode: strict
-external-controller: 127.0.0.1:9090
-unified-delay: true
-tcp-concurrent: true
-global-client-fingerprint: chrome
-
-profile:
-  store-selected: true
-  store-fake-ip: true
-
-dns:
-  enable: true
-  prefer-h3: true
-  ipv6: false
-  enhanced-mode: fake-ip
-  fake-ip-range: 198.18.0.1/16
-  fake-ip-filter:
-    - +.+m2m
-    - +.$injections.adguard.org
-    - +.$local.adguard.org
-    - +.+bogon
-    - +.+lan
-    - +.+local
-    - +.+localdomain
-    - +.home.arpa
-    - dns.msftncsi.com
-    - "*.srv.nintendo.net"
-    - "*.stun.playstation.net"
-    - xbox.*.microsoft.com
-    - "*.xboxlive.com"
-    - "*.turn.twilio.com"
-    - "*.stun.twilio.com"
-    - stun.syncthing.net
-    - stun.*
-    - "*.sslip.io"
-    - "*.nip.io"
-
-  respect-rules: true
-  nameserver:
-    - system
-    - https://223.5.5.5/dns-query
-    - https://doh.pub/dns-query
-  proxy-server-nameserver:
-    - https://223.5.5.5/dns-query
-    - https://doh.pub/dns-query
-
-sniffer:
-  enable: true
-  sniff:
-    HTTP:
-      ports: [80, 8080-8880]
-      override-destination: true
-    TLS:
-      ports: [443, 8443]
-    QUIC:
-      ports: [443, 8443]
-  skip-domain:
-    - "Mijia Cloud"
-    - "+.push.apple.com"
-
-tun:
-  enable: true
-  stack: mixed
-  device: ElysianRealm
-  auto-route: true
-  auto-detect-interface: true
-  dns-hijack:
-    - any:53
-    - tcp://any:53
-  strict-route: true
-  mtu: 1500
-
-# # 订阅配置
-# # 这部分在 `default.nix` 中配置
-# NodeParam:
-#   &NodeParam {
-#     type: http,
-#     interval: 86400,
-#     health-check:
-#       { enable: true, url: "http://cp.cloudflare.com", interval: 300 },
-#   }
-# proxy-providers:
-#   Node-1:
-#     url: "<占位符>"
-#     <<: *NodeParam
-#     path: "./proxy_provider/providers-1.yaml"
-#     override:
-#       additional-prefix: "[A] "
-#   Node-2:
-#     url: "<占位符>"
-#     <<: *NodeParam
-#     path: "./proxy_provider/providers-2.yaml"
-#     override:
-#       additional-prefix: "[B] "
-
-# 节点筛选
-# 按地区筛选
-FilterHK: &FilterHK '^(?=.*((?i)🇭🇰|香港|\b(HK|Hong)(\d+)?\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$'
-FilterTW: &FilterTW '^(?=.*((?i)🇹🇼|台湾|\b(TW|Tai|Taiwan)(\d+)?\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$'
-FilterJP: &FilterJP '^(?=.*((?i)🇯🇵|日本|川日|东京|大阪|泉日|埼玉|\b(JP|Japan)(\d+)?\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$'
-FilterKR: &FilterKR '^(?=.*((?i)🇰🇷|韩国|韓|首尔|\b(KR|Korea)(\d+)?\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$'
-FilterSG: &FilterSG '^(?=.*((?i)🇸🇬|新加坡|狮|\b(SG|Singapore)(\d+)?\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$'
-FilterUS: &FilterUS '^(?=.*((?i)🇺🇸|美国|波特兰|达拉斯|俄勒冈|凤凰城|费利蒙|硅谷|拉斯维加斯|洛杉矶|圣何塞|圣克拉拉|西雅图|芝加哥|\b(US|United States)(\d+)?\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$'
-FilterUK: &FilterUK '^(?=.*((?i)🇬🇧|英国|伦敦|\b(UK|United Kingdom)(\d+)?\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$'
-FilterFR: &FilterFR '^(?=.*((?i)🇫🇷|法国|\b(FR|France)(\d+)?\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$'
-FilterDE: &FilterDE '^(?=.*((?i)🇩🇪|德国|\b(DE|Germany)(\d+)?\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$'
-FilterOthers: &FilterOthers "^(?!.*(🇭🇰|HK|Hong|香港|🇹🇼|TW|Taiwan|Wan|🇯🇵|JP|Japan|日本|🇸🇬|SG|Singapore|狮城|🇺🇸|US|United States|America|美国|🇩🇪|DE|Germany|德国|🇬🇧|UK|United Kingdom|英国|🇰🇷|KR|Korea|韩国|韓|🇫🇷|FR|France|法国)).*$"
-FilterAll: &FilterAll '^(?=.*(.))(?!.*((?i)群|邀请|返利|循环|官网|客服|网站|网址|获取|订阅|流量|到期|机场|下次|版本|官址|备用|过期|已用|联系|邮箱|工单|贩卖|通知|倒卖|防止|国内|地址|频道|无法|说明|使用|提示|特别|访问|支持|教程|关注|更新|作者|加入|(\b(USE|USED|TOTAL|EXPIRE|EMAIL|Panel|Channel|Author)\b|(\d{4}-\d{2}-\d{2}|\d+G)))).*$'
-
-Select:
-  &Select {
-    type: select,
-    url: "http://connectivitycheck.platform.hicloud.com/generate_204",
-    disable-udp: false,
-    hidden: false,
-    include-all: true,
-  }
-Auto:
-  &Auto {
-    type: url-test,
-    url: "http://connectivitycheck.platform.hicloud.com/generate_204",
-    interval: 300,
-    tolerance: 50,
-    disable-udp: false,
-    hidden: true,
-    include-all: true,
-  }
-
-# 策略组
-proxy-groups:
-  # 主选择组
-  - {
-      name: 🎯 节点选择,
-      type: select,
-      proxies: [自动选择, 手动选择, DIRECT],
-      url: http://connectivitycheck.platform.hicloud.com/generate_204,
-      icon: https://raw.githubusercontent.com/Orz-3/mini/master/Color/Static.png,
-    }
-
-  # 手动/自动
-  - {
-      name: 手动选择,
-      type: select,
-      proxies:
-        [
-          🇭🇰 - 手动选择,
-          🇯🇵 - 手动选择,
-          🇰🇷 - 手动选择,
-          🇸🇬 - 手动选择,
-          🇺🇸 - 手动选择,
-          🇬🇧 - 手动选择,
-          🇫🇷 - 手动选择,
-          🇩🇪 - 手动选择,
-          🇹🇼 - 手动选择,
-          Others - 手动选择,
-        ],
-      url: http://connectivitycheck.platform.hicloud.com/generate_204,
-      icon: https://raw.githubusercontent.com/Orz-3/mini/master/Color/Cylink.png,
-    }
-  - {
-      name: 自动选择,
-      type: select,
-      proxies:
-        [
-          🇭🇰 - 自动选择,
-          🇯🇵 - 自动选择,
-          🇰🇷 - 自动选择,
-          🇸🇬 - 自动选择,
-          🇺🇸 - 自动选择,
-          🇬🇧 - 自动选择,
-          🇫🇷 - 自动选择,
-          🇩🇪 - 自动选择,
-          🇹🇼 - 自动选择,
-        ],
-      url: http://connectivitycheck.platform.hicloud.com/generate_204,
-      icon: https://raw.githubusercontent.com/Orz-3/mini/master/Color/Urltest.png,
-    }
-
-  # 应用分组
-  - {
-      name: ✈️ 电报信息,
-      type: select,
-      proxies:
-        [
-          🎯 节点选择,
-          🇭🇰 - 自动选择,
-          🇯🇵 - 自动选择,
-          🇸🇬 - 自动选择,
-          🇺🇸 - 自动选择,
-        ],
-      icon: https://raw.githubusercontent.com/Orz-3/mini/master/Color/Telegram.png,
-    }
-  - {
-      name: 🤖 AIGC,
-      type: select,
-      proxies:
-        [
-          🇺🇸 - 自动选择,
-          🎯 节点选择,
-          🇭🇰 - 自动选择,
-          🇯🇵 - 自动选择,
-          🇸🇬 - 自动选择,
-        ],
-      icon: https://raw.githubusercontent.com/Orz-3/mini/master/Color/OpenAI.png,
-    }
-  - {
-      name: 🍎 苹果服务,
-      type: select,
-      proxies: [DIRECT, 🎯 节点选择, 🇭🇰 - 自动选择, 🇺🇸 - 自动选择],
-      icon: https://raw.githubusercontent.com/Orz-3/mini/master/Color/Apple.png,
-    }
-  - {
-      name: Ⓜ️ 微软服务,
-      type: select,
-      proxies: [DIRECT, 🎯 节点选择, 🇭🇰 - 自动选择, 🇺🇸 - 自动选择],
-      icon: https://raw.githubusercontent.com/Orz-3/mini/master/Color/Microsoft.png,
-    }
-
-  # 自动选择 - 按地区
-  - { name: 🇭🇰 - 自动选择, <<: *Auto, filter: *FilterHK }
-  - { name: 🇯🇵 - 自动选择, <<: *Auto, filter: *FilterJP }
-  - { name: 🇰🇷 - 自动选择, <<: *Auto, filter: *FilterKR }
-  - { name: 🇸🇬 - 自动选择, <<: *Auto, filter: *FilterSG }
-  - { name: 🇺🇸 - 自动选择, <<: *Auto, filter: *FilterUS }
-  - { name: 🇬🇧 - 自动选择, <<: *Auto, filter: *FilterUK }
-  - { name: 🇫🇷 - 自动选择, <<: *Auto, filter: *FilterFR }
-  - { name: 🇩🇪 - 自动选择, <<: *Auto, filter: *FilterDE }
-  - { name: 🇹🇼 - 自动选择, <<: *Auto, filter: *FilterTW }
-
-  # 手动选择 - 按地区
-  - { name: 🇭🇰 - 手动选择, <<: *Select, filter: *FilterHK }
-  - { name: 🇯🇵 - 手动选择, <<: *Select, filter: *FilterJP }
-  - { name: 🇰🇷 - 手动选择, <<: *Select, filter: *FilterKR }
-  - { name: 🇸🇬 - 手动选择, <<: *Select, filter: *FilterSG }
-  - { name: 🇺🇸 - 手动选择, <<: *Select, filter: *FilterUS }
-  - { name: 🇬🇧 - 手动选择, <<: *Select, filter: *FilterUK }
-  - { name: 🇫🇷 - 手动选择, <<: *Select, filter: *FilterFR }
-  - { name: 🇩🇪 - 手动选择, <<: *Select, filter: *FilterDE }
-  - { name: 🇹🇼 - 手动选择, <<: *Select, filter: *FilterTW }
-  - { name: Others - 手动选择, <<: *Select, filter: *FilterOthers }
-
-  # 全部节点
-  - { name: AllIn - 手动选择, <<: *Select, filter: *FilterAll }
-  - { name: AllIn - 自动选择, <<: *Auto, filter: *FilterAll }
-
-### 规则配置
-RuleSet_classical:
-  &RuleSet_classical {
-    type: http,
-    behavior: classical,
-    interval: 43200,
-    format: text,
-    proxy: 🎯 节点选择,
-  }
-RuleSet_domain:
-  &RuleSet_domain {
-    type: http,
-    behavior: domain,
-    interval: 43200,
-    format: text,
-    proxy: 🎯 节点选择,
-  }
-RuleSet_ipcidr:
-  &RuleSet_ipcidr {
-    type: http,
-    behavior: ipcidr,
-    interval: 43200,
-    format: text,
-    proxy: 🎯 节点选择,
-  }
-
-# 订阅规则
-rule-providers:
-  reject_non_ip_no_drop:
-    <<: *RuleSet_classical
-    url: "https://ruleset.skk.moe/Clash/non_ip/reject-no-drop.txt"
-    path: "./rule_set/sukkaw_ruleset/reject_non_ip_no_drop.txt"
-
-  reject_non_ip_drop:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/non_ip/reject-drop.txt
-    path: ./rule_set/sukkaw_ruleset/reject_non_ip_drop.txt
-
-  reject_non_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/non_ip/reject.txt
-    path: ./rule_set/sukkaw_ruleset/reject_non_ip.txt
-
-  reject_domainset:
-    <<: *RuleSet_domain
-    url: https://ruleset.skk.moe/Clash/domainset/reject.txt
-    path: ./rule_set/sukkaw_ruleset/reject_domainset.txt
-
-  reject_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/ip/reject.txt
-    path: ./rule_set/sukkaw_ruleset/reject_ip.txt
-
-  cdn_domainset:
-    <<: *RuleSet_domain
-    url: https://ruleset.skk.moe/Clash/domainset/cdn.txt
-    path: ./rule_set/sukkaw_ruleset/cdn_domainset.txt
-
-  cdn_non_ip:
-    <<: *RuleSet_domain
-    url: https://ruleset.skk.moe/Clash/non_ip/cdn.txt
-    path: ./rule_set/sukkaw_ruleset/cdn_non_ip.txt
-
-  # 所有流媒体（包括上述所有流媒体）
-  stream_non_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/non_ip/stream.txt
-    path: ./rule_set/sukkaw_ruleset/stream_non_ip.txt
-
-  stream_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/ip/stream.txt
-    path: ./rule_set/sukkaw_ruleset/stream_ip.txt
-
-  ai_non_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/non_ip/ai.txt
-    path: ./rule_set/sukkaw_ruleset/ai_non_ip.txt
-
-  telegram_non_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/non_ip/telegram.txt
-    path: ./rule_set/sukkaw_ruleset/telegram_non_ip.txt
-
-  telegram_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/ip/telegram.txt
-    path: ./rule_set/sukkaw_ruleset/telegram_ip.txt
-
-  apple_cdn:
-    <<: *RuleSet_domain
-    url: https://ruleset.skk.moe/Clash/domainset/apple_cdn.txt
-    path: ./rule_set/sukkaw_ruleset/apple_cdn.txt
-
-  apple_services:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/non_ip/apple_services.txt
-    path: ./rule_set/sukkaw_ruleset/apple_services.txt
-
-  apple_cn_non_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/non_ip/apple_cn.txt
-    path: ./rule_set/sukkaw_ruleset/apple_cn_non_ip.txt
-
-  microsoft_cdn_non_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/non_ip/microsoft_cdn.txt
-    path: ./rule_set/sukkaw_ruleset/microsoft_cdn_non_ip.txt
-
-  microsoft_non_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/non_ip/microsoft.txt
-    path: ./rule_set/sukkaw_ruleset/microsoft_non_ip.txt
-
-  # 软件更新、操作系统等大文件下载
-  download_domainset:
-    <<: *RuleSet_domain
-    url: https://ruleset.skk.moe/Clash/domainset/download.txt
-    path: ./rule_set/sukkaw_ruleset/download_domainset.txt
-
-  download_non_ip:
-    <<: *RuleSet_domain
-    url: https://ruleset.skk.moe/Clash/non_ip/download.txt
-    path: ./rule_set/sukkaw_ruleset/download_non_ip.txt
-
-  # 内网域名和局域网 IP
-  lan_non_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/non_ip/lan.txt
-    path: ./rule_set/sukkaw_ruleset/lan_non_ip.txt
-
-  lan_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/ip/lan.txt
-    path: ./rule_set/sukkaw_ruleset/lan_ip.txt
-
-  domestic_non_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/non_ip/domestic.txt
-    path: ./rule_set/sukkaw_ruleset/domestic_non_ip.txt
-
-  direct_non_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/non_ip/direct.txt
-    path: ./rule_set/sukkaw_ruleset/direct_non_ip.txt
-
-  global_non_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/non_ip/global.txt
-    path: ./rule_set/sukkaw_ruleset/global_non_ip.txt
-
-  domestic_ip:
-    <<: *RuleSet_classical
-    url: https://ruleset.skk.moe/Clash/ip/domestic.txt
-    path: ./rule_set/sukkaw_ruleset/domestic_ip.txt
-
-  china_ip:
-    <<: *RuleSet_ipcidr
-    url: https://ruleset.skk.moe/Clash/ip/china_ip.txt
-    path: ./rule_set/sukkaw_ruleset/china_ip.txt
-
-  my_services:
-    type: inline
-    behavior: classical
-    payload:
-     - DOMAIN-SUFFIX,hpcesia.com
-     - DOMAIN-SUFFIX,trin.one
-     - DOMAIN-SUFFIX,mxrouting.net
-
-# 分流规则
-rules:
-  ### 自订类规则
-  - AND,((RULE-SET,my_services),(DST-PORT,80/443)),🎯 节点选择
-  - RULE-SET,my_services,DIRECT
-
-  ### 非 IP 类规则
-  - RULE-SET,reject_non_ip,REJECT
-  - RULE-SET,reject_domainset,REJECT
-  - RULE-SET,reject_non_ip_drop,REJECT-DROP
-  - RULE-SET,reject_non_ip_no_drop,REJECT
-  - RULE-SET,cdn_domainset,🎯 节点选择
-  - RULE-SET,cdn_non_ip,🎯 节点选择
-  - RULE-SET,stream_non_ip,🇺🇸 - 自动选择
-  - RULE-SET,telegram_non_ip,✈️ 电报信息
-  - RULE-SET,apple_cdn,DIRECT
-  - RULE-SET,download_domainset,🎯 节点选择
-  - RULE-SET,download_non_ip,🎯 节点选择
-  - RULE-SET,microsoft_cdn_non_ip,DIRECT
-  - RULE-SET,apple_cn_non_ip,DIRECT
-  - RULE-SET,apple_services,🍎 苹果服务
-  - RULE-SET,microsoft_non_ip,Ⓜ️ 微软服务
-  - RULE-SET,ai_non_ip,🤖 AIGC
-  - RULE-SET,global_non_ip,🎯 节点选择
-  - RULE-SET,domestic_non_ip,DIRECT
-  - RULE-SET,direct_non_ip,DIRECT
-  - RULE-SET,lan_non_ip,DIRECT
-
-  ### IP 类规则
-  - RULE-SET,reject_ip,REJECT
-  - RULE-SET,telegram_ip,✈️ 电报信息
-  - RULE-SET,stream_ip,🇺🇸 - 自动选择
-  - RULE-SET,lan_ip,DIRECT
-  - RULE-SET,domestic_ip,DIRECT
-  - RULE-SET,china_ip,DIRECT
-  - MATCH,🎯 节点选择

@@ -3,41 +3,12 @@
   config,
   pkgs,
   ...
-}:
-lib.mkIf config.services.mihomo.enable {
-  services.mihomo = {
-    tunMode = true;
-    webui = pkgs.metacubexd;
-    configFile = config.sops.templates."mihomo-config.yaml".path;
+}: {
+  imports = [./config];
+  config = lib.mkIf config.services.mihomo.enable {
+    services.mihomo = {
+      tunMode = true;
+      webui = pkgs.metacubexd;
+    };
   };
-
-  networking.firewall.trustedInterfaces = [
-    "ElysianRealm"
-  ];
-
-  sops.templates."mihomo-config.yaml".content =
-    ''
-      NodeParam:
-        &NodeParam {
-          type: http,
-          interval: 86400,
-          health-check:
-            { enable: true, url: "http://cp.cloudflare.com", interval: 300 },
-        }
-      proxy-providers:
-        Node-YiYuan:
-          url: "${config.sops.placeholder."mihomo/providers/yi_yuan"}"
-          <<: *NodeParam
-          path: "./proxy_provider/providers-yi_yuan.yaml"
-          override:
-            additional-prefix: "[YY]"
-        Node-MoJie:
-          url: "${config.sops.placeholder."mihomo/providers/mo_jie"}"
-          <<: *NodeParam
-          path: "./proxy_provider/providers-mo_jie.yaml"
-          override:
-            additional-prefix: "[MJ]"
-    ''
-    + "\n"
-    + builtins.readFile ./config.yaml;
 }

@@ -0,0 +1,35 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}: let
+  inherit (lib) mkOption types;
+  format = pkgs.formats.yaml {};
+  cfg = config.services.mihomo.config;
+in {
+  options.services.mihomo.config = mkOption {
+    default = {};
+    type = types.submodule {
+      freeformType = format.type;
+      options = {
+        tun = {
+          enable = mkOption {
+            default = config.options.services.mihomo.tunMode;
+            type = types.bool;
+          };
+          device = mkOption {
+            default = "utun0";
+            type = types.str;
+          };
+        };
+      };
+    };
+  };
+
+  config = {
+    networking.firewall.trustedInterfaces = lib.mkIf config.services.mihomo.tunMode [cfg.tun.device];
+    sops.templates."mihomo-config.yaml".content = builtins.toJSON cfg;
+    services.mihomo.configFile = config.sops.templates."mihomo-config.yaml".path;
+  };
+}

Commit 351be58

Commit `351be58`