Commit a5ba6c8

@@ -1,9 +0,0 @@
-{
-  nixos-hardware,
-  myvars,
-  ...
-}: let
-  hostName = "kevin";
-in {
-  modules.currentHost = hostName;
-}

@@ -1,42 +0,0 @@
-{
-  myvars,
-  config,
-  pkgs,
-  nur-hpcesia,
-  ...
-}: let
-  phanpy = nur-hpcesia.packages.${pkgs.system}.phanpy.overrideAttrs (oldAttrs: {
-    PHANPY_WEBSITE = "https://phanpy.trin.one";
-    PHANPY_DEFAULT_INSTANCE = "trin.one";
-    PHANPY_DISALLOW_ROBOTS = true;
-  });
-in {
-  services.caddy = {
-    virtualHosts = let
-      localAddress = {
-        authelia = "http://${
-          # Assuming address start with `tcp://`.
-          builtins.substring 6 (-1) config.services.authelia.instances.main.settings.server.address
-        }";
-      };
-    in {
-      "phanpy.trin.one".extraConfig = ''
-        encode zstd gzip
-        root * ${phanpy}/dist/
-        file_server
-
-        @needsAuth {
-          not path / /favicon.ico /404.html /robots.txt /manifest.webmanifest
-          not path_regexp \.(css|js|png|jpg|svg|ico)$
-        }
-
-        handle @needsAuth {
-            forward_auth ${localAddress.authelia} {
-            uri /api/authz/forward-auth
-            copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
-          }
-        }
-      '';
-    };
-  };
-}

@@ -1,19 +0,0 @@
-{
-  mylib,
-  myvars,
-  disko,
-  ...
-}:
-#############################################################
-#
-#  Pardofelis - NixOS running on a 2C4G VPS
-#  My main server hosted by Yecaoyun.
-#
-#############################################################
-let
-  hostName = "pardofelis";
-in {
-  imports = mylib.scanModules ./.;
-
-  modules.currentHost = hostName;
-}

@@ -1,26 +0,0 @@
-{myvars, ...}: {
-  modules.my-hosts = {
-    kevin.network = {
-      enable = "networkmanager";
-      iface = "wlp0s20f3";
-      useDHCP = true;
-      nameservers = myvars.defaultNameservers;
-    };
-
-    pardofelis = {
-      network = {
-        enable = "networkd";
-        iface = "eth0";
-        useDHCP = false;
-        nameservers = myvars.defaultNameservers;
-        search = ["local"];
-        ipv4 = {secretName = "pardofelis-ipv4";};
-        ipv6 = {secretName = "pardofelis-ipv6";};
-        defaultGateway = {secretName = "pardofelis-gateway";};
-        defaultGateway6 = {secretName = "pardofelis-gateway6";};
-      };
-      hostPublicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO56HKTdzGulisPLhpfUmLQNEgwDqwD9SBLRb5aETffV root@pardofelis";
-      sshPorts = [23930];
-    };
-  };
-}

@@ -1,46 +0,0 @@
-# https://github.com/NixOS/nixpkgs/blob/master/lib/attrsets.nix
-{lib, ...}: {
-  # Generate an attribute set from a list.
-  #
-  #   lib.genAttrs [ "foo" "bar" ] (name: "x_" + name)
-  #     => { foo = "x_foo"; bar = "x_bar"; }
-  listToAttrs = lib.genAttrs;
-
-  # Update only the values of the given attribute set.
-  #
-  #   mapAttrs
-  #   (name: value: ("bar-" + value))
-  #   { x = "a"; y = "b"; }
-  #     => { x = "bar-a"; y = "bar-b"; }
-  inherit (lib.attrsets) mapAttrs;
-
-  # Update both the names and values of the given attribute set.
-  #
-  #   mapAttrs'
-  #   (name: value: nameValuePair ("foo_" + name) ("bar-" + value))
-  #   { x = "a"; y = "b"; }
-  #     => { foo_x = "bar-a"; foo_y = "bar-b"; }
-  inherit (lib.attrsets) mapAttrs';
-
-  # Merge a list of attribute sets into one. smilar to the operator `a // b`, but for a list of attribute sets.
-  # NOTE: the later attribute set overrides the former one!
-  #
-  #   mergeAttrsList
-  #   [ { x = "a"; y = "b"; } { x = "c"; z = "d"; } { g = "e"; } ]
-  #   => { x = "c"; y = "b"; z = "d"; g = "e"; }
-  inherit (lib.attrsets) mergeAttrsList;
-
-  # Generate a string from an attribute set.
-  #
-  #   attrsets.foldlAttrs
-  #   (acc: name: value: acc + "\nexport ${name}=${value}")
-  #   "# A shell script"
-  #   { x = "a"; y = "b"; }
-  #     =>
-  #     ```
-  #     # A shell script
-  #     export x=a
-  #     export y=b
-  #    ````
-  inherit (lib.attrsets) foldlAttrs;
-}

@@ -1,40 +0,0 @@
-# colmena - Remote Deployment via SSH
-{
-  lib,
-  inputs,
-  nixos-modules,
-  home-modules ? [],
-  myvars,
-  system,
-  tags,
-  ssh-user,
-  genSpecialArgs,
-  specialArgs ? (genSpecialArgs system),
-  ...
-}: let
-  inherit (inputs) home-manager;
-in
-  {name, ...}: {
-    deployment = {
-      inherit tags;
-      targetUser = ssh-user;
-      targetHost = name; # hostName or IP address
-    };
-
-    imports =
-      nixos-modules
-      ++ (
-        lib.optionals ((lib.lists.length home-modules) > 0)
-        [
-          home-manager.nixosModules.home-manager
-          {
-            home-manager.useGlobalPkgs = true;
-            home-manager.useUserPackages = true;
-            home-manager.backupFileExtension = "home-manager.backup";
-
-            home-manager.extraSpecialArgs = specialArgs;
-            home-manager.users."${myvars.username}".imports = home-modules;
-          }
-        ]
-      );
-  }

@@ -1,17 +0,0 @@
-{lib, ...}: {
-  colmenaSystem = import ./colmenaSystem.nix;
-  nixosSystem = import ./nixosSystem.nix;
-
-  attrs = import ./attrs.nix {inherit lib;};
-
-  relativeToRoot = lib.path.append ../.;
-  scanModules = path:
-    builtins.map (f: (path + "/${f}")) (
-      builtins.attrNames (
-        lib.attrsets.filterAttrs (
-          path: _type:
-            (_type == "directory") || ((path != "default.nix") && (lib.strings.hasSuffix ".nix" path))
-        ) (builtins.readDir path)
-      )
-    );
-}

@@ -1,35 +0,0 @@
-{
-  inputs,
-  lib,
-  system,
-  genSpecialArgs,
-  nixos-modules,
-  home-modules ? [],
-  specialArgs ? (genSpecialArgs system),
-  myvars,
-  ...
-}: let
-  inherit (inputs) nixpkgs home-manager nur;
-in
-  nixpkgs.lib.nixosSystem {
-    inherit system specialArgs;
-    modules =
-      nixos-modules
-      ++ [
-        nur.modules.nixos.default
-      ]
-      ++ (
-        lib.optionals ((lib.lists.length home-modules) > 0)
-        [
-          home-manager.nixosModules.home-manager
-          {
-            home-manager.useGlobalPkgs = true;
-            home-manager.useUserPackages = true;
-            home-manager.backupFileExtension = "home-manager.backup";
-
-            home-manager.extraSpecialArgs = specialArgs;
-            home-manager.users."${myvars.username}".imports = home-modules;
-          }
-        ]
-      );
-  }

@@ -1,9 +1,4 @@
-{
-  lib,
-  config,
-  inputs,
-  ...
-}: {
+{config, ...}: {
   #############################################################
   #
   #  Kevin - NixOS running on ThinkBook 16P G5 IRX
@@ -44,32 +39,6 @@
               ++ [config.flake.modules.homeManager."hosts/kevin"];
           };
         }
-      ]
-      # TODO: remove below after migrated all config to Dendritic Pattern
-      ++ [
-        {
-          home-manager.extraSpecialArgs =
-            inputs
-            // {
-              mylib = import ../../../lib {inherit lib;};
-              myvars = import ../../../vars {inherit lib;};
-              pkgs-unstable = import inputs.nixpkgs-unstable {
-                inherit (config.flake.meta.host.hosts.kevin) system;
-                config.allowUnfree = true;
-              };
-              pkgs-stable = import inputs.nixpkgs-stable {
-                inherit (config.flake.meta.host.hosts.kevin) system;
-                config.allowUnfree = true;
-              };
-            };
-        }
-      ]
-      ++ (map (lib.path.append config.flake.meta.rootPath) [
-        "secrets/nixos.nix"
-        "os-modules/nixos/desktop.nix"
-        "options/nixos/default.nix"
-        "hosts/general.nix"
-        "hosts/chaser-kevin"
-      ]);
+      ];
   };
 }

@@ -1,8 +1,4 @@
-{
-  config,
-  lib,
-  ...
-}: {
+{config, ...}: {
   flake.meta.host.hosts.pardofelis = {
     system = "x86_64-linux";
     hostPubKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEuT/WkeA7btTeATmWJ2O9f/A6FI0Gl/1KjPGfHbWD5C root@pardofelis";
@@ -39,13 +35,6 @@
           "vaultwarden"
           "victoriametrics"
         ]
-      )
-      ++ (map (lib.path.append config.flake.meta.rootPath) [
-        "secrets/nixos.nix"
-        "os-modules/nixos/server/x86_64.nix"
-        "options/nixos/default.nix"
-        "hosts/general.nix"
-        "hosts/chaser-pardofelis"
-      ]);
+      );
   };
 }

@@ -0,0 +1,20 @@
+{
+  flake.modules.nixos."services/mihomo" = _: {
+    services.mihomo.config = {
+      mixed-port = 7154;
+      allow-lan = true;
+      mode = "rule";
+      log-level = "warning";
+      ipv6 = false;
+      find-process-mode = "strict";
+      external-controller = "127.0.0.1:9090";
+      unified-delay = true;
+      tcp-concurrent = true;
+      global-client-fingerprint = "chrome";
+      profile = {
+        store-selected = true;
+        store-fake-ip = true;
+      };
+    };
+  };
+}

@@ -0,0 +1,42 @@
+{
+  flake.modules.nixos."services/mihomo" = _: {
+    services.mihomo.config.dns = {
+      enable = true;
+      prefer-h3 = true;
+      ipv6 = false;
+      enhanced-mode = "fake-ip";
+      fake-ip-range = "198.18.0.1/16";
+      fake-ip-filter = [
+        "+.+m2m"
+        "+.$injections.adguard.org"
+        "+.$local.adguard.org"
+        "+.+bogon"
+        "+.+lan"
+        "+.+local"
+        "+.+localdomain"
+        "+.home.arpa"
+        "dns.msftncsi.com"
+        "*.srv.nintendo.net"
+        "*.stun.playstation.net"
+        "xbox.*.microsoft.com"
+        "*.xboxlive.com"
+        "*.turn.twilio.com"
+        "*.stun.twilio.com"
+        "stun.syncthing.net"
+        "stun.*"
+        "*.sslip.io"
+        "*.nip.io"
+      ];
+      respect-rules = true;
+      nameserver = [
+        "system"
+        "https://223.5.5.5/dns-query"
+        "https://doh.pub/dns-query"
+      ];
+      proxy-server-nameserver = [
+        "https://223.5.5.5/dns-query"
+        "https://doh.pub/dns-query"
+      ];
+    };
+  };
+}

@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> X25519 7MneCZw/jQF9xFyfGe3eTukHAehyXoVEWaWb4k5MHEU
+JEvnlJY8eD9Xvkih1bqBsAkX6P69lYEV9Q3SvoPfzKo
+-> R2I}F/-grease 0t(n; $POnHf
+iOp5Z6rLbYcQhWWW51oVpiTrv+54L1jTDZj5QYE73/DRua63gfwgbyYbXxL1M3AI
+R7AwZPFuNVtwFwpu0/psSxgsJ92gg6Bw2ZSTzG0BN6Qeeykt+CNW3w
+--- NQyPsM9u1gzpz6Q1hKlbanJXxMrmqfkHD6xmI1G8XaE
+�N	����͈���U���Pi<�茎��
%XBZ���EN�x��O��2!Ǧ�43\��1ֆ�[���e�
+[�RT]�VEb����y/�|P&U�T����ܮ�i��;�$<��5�9`Y�>s���D
+ӟ�
\ No newline at end of file

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> X25519 3V3LffKq+D+7fiI6v+PXOSvypjew3ZTIUzQ67y5s/Xk
+yKn0r8B2It8NDkcpllXZrbu6UA3eRT6ObXnDd9Cd6zo
+-> f-O};uW-grease
+ZEQ9xZE5mXYf+OYyIR/ANlb+5i43hSnDL7kd3zpKtp14Ap3T9HS7wSqrFaY0Q8Kv
+m2ntxFPlPzkf+PhjJ+oU2LvnfOtkkH85UoCHc4otYAyjEZyU/fno5ebIP0RkA8I
+--- ybChFblTJuekC6KK23qmetS7uaKDVlbtaWQ0cQu2Pn8
+�D�2U ν`QF����~����)Ws�`����?ʸ\O>�����r��e���A�sse��`�x0n����}�@a�;��:<[o�y�.��f��C��j��Ͼ���U�s����l?
\ No newline at end of file

@@ -0,0 +1,212 @@
+{
+  flake.modules.nixos."services/mihomo" = _: let
+    FilterHK = "^(?=.*((?i)🇭🇰|香港|\\b(HK|Hong)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+    FilterTW = "^(?=.*((?i)🇹🇼|台湾|\\b(TW|Tai|Taiwan)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+    FilterJP = "^(?=.*((?i)🇯🇵|日本|川日|东京|大阪|泉日|埼玉|\\b(JP|Japan)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+    FilterKR = "^(?=.*((?i)🇰🇷|韩国|韓|首尔|\\b(KR|Korea)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+    FilterSG = "^(?=.*((?i)🇸🇬|新加坡|狮|\\b(SG|Singapore)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+    FilterUS = "^(?=.*((?i)🇺🇸|美国|波特兰|达拉斯|俄勒冈|凤凰城|费利蒙|硅谷|拉斯维加斯|洛杉矶|圣何塞|圣克拉拉|西雅图|芝加哥|\\b(US|United States)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+    FilterUK = "^(?=.*((?i)🇬🇧|英国|伦敦|\\b(UK|United Kingdom)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+    FilterFR = "^(?=.*((?i)🇫🇷|法国|\\b(FR|France)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+    FilterDE = "^(?=.*((?i)🇩🇪|德国|\\b(DE|Germany)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
+    FilterOthers = "^(?!.*(🇭🇰|HK|Hong|香港|🇹🇼|TW|Taiwan|Wan|🇯🇵|JP|Japan|日本|🇸🇬|SG|Singapore|狮城|🇺🇸|US|United States|America|美国|🇩🇪|DE|Germany|德国|🇬🇧|UK|United Kingdom|英国|🇰🇷|KR|Korea|韩国|韓|🇫🇷|FR|France|法国)).*$";
+    FilterAll = "^(?=.*(.))(?!.*((?i)群|邀请|返利|循环|官网|客服|网站|网址|获取|订阅|流量|到期|机场|下次|版本|官址|备用|过期|已用|联系|邮箱|工单|贩卖|通知|倒卖|防止|国内|地址|频道|无法|说明|使用|提示|特别|访问|支持|教程|关注|更新|作者|加入|(\\b(USE|USED|TOTAL|EXPIRE|EMAIL|Panel|Channel|Author)\\b|(\\d{4}-\\d{2}-\\d{2}|\\d+G)))).*$";
+
+    Select = {
+      type = "select";
+      url = "http://connectivitycheck.platform.hicloud.com/generate_204";
+      disable-udp = false;
+      hidden = false;
+      include-all = true;
+    };
+    Auto = {
+      type = "url-test";
+      url = "http://connectivitycheck.platform.hicloud.com/generate_204";
+      interval = 300;
+      tolerance = 50;
+      disable-udp = false;
+      hidden = true;
+      include-all = true;
+    };
+  in {
+    services.mihomo.config.proxy-groups =
+      [
+        # 主选择组
+        {
+          name = "🎯 节点选择";
+          type = "select";
+          proxies = ["自动选择" "手动选择" "DIRECT"];
+          url = "http://connectivitycheck.platform.hicloud.com/generate_204";
+          icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Static.png";
+        }
+        # 手动/自动
+        {
+          name = "手动选择";
+          type = "select";
+          proxies = [
+            "🇭🇰 - 手动选择"
+            "🇯🇵 - 手动选择"
+            "🇰🇷 - 手动选择"
+            "🇸🇬 - 手动选择"
+            "🇺🇸 - 手动选择"
+            "🇬🇧 - 手动选择"
+            "🇫🇷 - 手动选择"
+            "🇩🇪 - 手动选择"
+            "🇹🇼 - 手动选择"
+            "Others - 手动选择"
+          ];
+          url = "http://connectivitycheck.platform.hicloud.com/generate_204";
+          icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Cylink.png";
+        }
+        {
+          name = "自动选择";
+          type = "select";
+          proxies = [
+            "🇭🇰 - 自动选择"
+            "🇯🇵 - 自动选择"
+            "🇰🇷 - 自动选择"
+            "🇸🇬 - 自动选择"
+            "🇺🇸 - 自动选择"
+            "🇬🇧 - 自动选择"
+            "🇫🇷 - 自动选择"
+            "🇩🇪 - 自动选择"
+            "🇹🇼 - 自动选择"
+          ];
+          url = "http://connectivitycheck.platform.hicloud.com/generate_204";
+          icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Urltest.png";
+        }
+        # 应用分组
+        {
+          name = "✈️ 电报信息";
+          type = "select";
+          proxies = [
+            "🎯 节点选择"
+            "🇭🇰 - 自动选择"
+            "🇯🇵 - 自动选择"
+            "🇸🇬 - 自动选择"
+            "🇺🇸 - 自动选择"
+          ];
+          icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Telegram.png";
+        }
+        {
+          name = "🤖 AIGC";
+          type = "select";
+          proxies = [
+            "🇺🇸 - 自动选择"
+            "🎯 节点选择"
+            "🇭🇰 - 自动选择"
+            "🇯🇵 - 自动选择"
+            "🇸🇬 - 自动选择"
+          ];
+          icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/OpenAI.png";
+        }
+        {
+          name = "🍎 苹果服务";
+          type = "select";
+          proxies = ["DIRECT" "🎯 节点选择" "🇭🇰 - 自动选择" "🇺🇸 - 自动选择"];
+          icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Apple.png";
+        }
+        {
+          name = "Ⓜ️ 微软服务";
+          type = "select";
+          proxies = ["DIRECT" "🎯 节点选择" "🇭🇰 - 自动选择" "🇺🇸 - 自动选择"];
+          icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Microsoft.png";
+        }
+      ]
+      ++ (map (x: Auto // x) [
+        # 自动选择 - 按地区
+        {
+          name = "🇭🇰 - 自动选择";
+          filter = FilterHK;
+        }
+        {
+          name = "🇯🇵 - 自动选择";
+          filter = FilterJP;
+        }
+        {
+          name = "🇰🇷 - 自动选择";
+          filter = FilterKR;
+        }
+        {
+          name = "🇸🇬 - 自动选择";
+          filter = FilterSG;
+        }
+        {
+          name = "🇺🇸 - 自动选择";
+          filter = FilterUS;
+        }
+        {
+          name = "🇬🇧 - 自动选择";
+          filter = FilterUK;
+        }
+        {
+          name = "🇫🇷 - 自动选择";
+          filter = FilterFR;
+        }
+        {
+          name = "🇩🇪 - 自动选择";
+          filter = FilterDE;
+        }
+        {
+          name = "🇹🇼 - 自动选择";
+          filter = FilterTW;
+        }
+      ])
+      ++ (map (x: Select // x) [
+        # 手动选择 - 按地区
+        {
+          name = "🇭🇰 - 手动选择";
+          filter = FilterHK;
+        }
+        {
+          name = "🇯🇵 - 手动选择";
+          filter = FilterJP;
+        }
+        {
+          name = "🇰🇷 - 手动选择";
+          filter = FilterKR;
+        }
+        {
+          name = "🇸🇬 - 手动选择";
+          filter = FilterSG;
+        }
+        {
+          name = "🇺🇸 - 手动选择";
+          filter = FilterUS;
+        }
+        {
+          name = "🇬🇧 - 手动选择";
+          filter = FilterUK;
+        }
+        {
+          name = "🇫🇷 - 手动选择";
+          filter = FilterFR;
+        }
+        {
+          name = "🇩🇪 - 手动选择";
+          filter = FilterDE;
+        }
+        {
+          name = "🇹🇼 - 手动选择";
+          filter = FilterTW;
+        }
+        {
+          name = "Others - 手动选择";
+          filter = FilterOthers;
+        }
+      ])
+      ++ [
+        # 全部节点
+        (Select
+          // {
+            name = "AllIn - 手动选择";
+            filter = FilterAll;
+          })
+        (Auto
+          // {
+            name = "AllIn - 自动选择";
+            filter = FilterAll;
+          })
+      ];
+  };
+}

@@ -0,0 +1,33 @@
+{lib, ...}: {
+  flake.modules.nixos."services/mihomo" = {config, ...}: let
+    NodeParam = {
+      type = "http";
+      interval = 86400;
+      health-check = {
+        enable = true;
+        url = "http://cp.cloudflare.com";
+        interval = 300;
+      };
+    };
+  in {
+    services.mihomo.config.proxy-providers = lib.mkIf config.services.mihomo.enable {
+      "Node-YiYuan" =
+        NodeParam
+        // {
+          url = config.vaultix.placeholder.mihomo-providers-yi_yuan;
+          path = "./proxy_provider/providers-yi_yuan.yaml";
+          override.additional-prefix = "[YY]";
+        };
+      "Node-MoJie" =
+        NodeParam
+        // {
+          url = config.vaultix.placeholder.mihomo-providers-mo_jie;
+          path = "./proxy_provider/providers-mo_jie.yaml";
+          override.additional-prefix = "[MJ]";
+        };
+    };
+
+    vaultix.secrets.mihomo-providers-yi_yuan.file = ./provider-yi_yuan.age;
+    vaultix.secrets.mihomo-providers-mo_jie.file = ./provider-mo_jie.age;
+  };
+}

@@ -0,0 +1,229 @@
+{
+  flake.modules.nixos."services/mihomo" = {config, ...}: let
+    RuleSet_classical = {
+      type = "http";
+      behavior = "classical";
+      interval = 43200;
+      format = "text";
+      proxy = "🎯 节点选择";
+    };
+    RuleSet_domain = {
+      type = "http";
+      behavior = "domain";
+      interval = 43200;
+      format = "text";
+      proxy = "🎯 节点选择";
+    };
+    RuleSet_ipcidr = {
+      type = "http";
+      behavior = "ipcidr";
+      interval = 43200;
+      format = "text";
+      proxy = "🎯 节点选择";
+    };
+  in {
+    services.mihomo.config = {
+      rules = [
+        # 自订类规则
+        "AND,((DOMAIN-SUFFIX,glacier.mxrouting.net),(DST-PORT,465/993)),DIRECT" # My Domain Email
+        "AND,((RULE-SET,my_hosts),(NOT,((DST-PORT,80/443)))),DIRECT" # My VPS
+
+        # 非 IP 类规则
+        "RULE-SET,reject_non_ip,REJECT"
+        "RULE-SET,reject_domainset,REJECT"
+        "RULE-SET,reject_non_ip_drop,REJECT-DROP"
+        "RULE-SET,reject_non_ip_no_drop,REJECT"
+        "RULE-SET,cdn_domainset,🎯 节点选择"
+        "RULE-SET,cdn_non_ip,🎯 节点选择"
+        "RULE-SET,stream_non_ip,🇺🇸 - 自动选择"
+        "RULE-SET,telegram_non_ip,✈️ 电报信息"
+        "RULE-SET,apple_cdn,DIRECT"
+        "RULE-SET,download_domainset,🎯 节点选择"
+        "RULE-SET,download_non_ip,🎯 节点选择"
+        "RULE-SET,microsoft_cdn_non_ip,DIRECT"
+        "RULE-SET,apple_cn_non_ip,DIRECT"
+        "RULE-SET,apple_services,🍎 苹果服务"
+        "RULE-SET,microsoft_non_ip,Ⓜ️ 微软服务"
+        "RULE-SET,ai_non_ip,🤖 AIGC"
+        "RULE-SET,global_non_ip,🎯 节点选择"
+        "RULE-SET,domestic_non_ip,DIRECT"
+        "RULE-SET,direct_non_ip,DIRECT"
+        "RULE-SET,lan_non_ip,DIRECT"
+
+        # IP 类规则
+        "RULE-SET,reject_ip,REJECT"
+        "RULE-SET,telegram_ip,✈️ 电报信息"
+        "RULE-SET,stream_ip,🇺🇸 - 自动选择"
+        "RULE-SET,lan_ip,DIRECT"
+        "RULE-SET,domestic_ip,DIRECT"
+        "RULE-SET,china_ip,DIRECT"
+        "MATCH,🎯 节点选择"
+      ];
+      rule-providers = {
+        reject_non_ip_no_drop =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/reject-no-drop.txt";
+            path = "./rule_set/sukkaw_ruleset/reject_non_ip_no_drop.txt";
+          };
+        reject_non_ip_drop =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/reject-drop.txt";
+            path = "./rule_set/sukkaw_ruleset/reject_non_ip_drop.txt";
+          };
+        reject_non_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/reject.txt";
+            path = "./rule_set/sukkaw_ruleset/reject_non_ip.txt";
+          };
+        reject_domainset =
+          RuleSet_domain
+          // {
+            url = "https://ruleset.skk.moe/Clash/domainset/reject.txt";
+            path = "./rule_set/sukkaw_ruleset/reject_domainset.txt";
+          };
+        reject_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/ip/reject.txt";
+            path = "./rule_set/sukkaw_ruleset/reject_ip.txt";
+          };
+        cdn_domainset =
+          RuleSet_domain
+          // {
+            url = "https://ruleset.skk.moe/Clash/domainset/cdn.txt";
+            path = "./rule_set/sukkaw_ruleset/cdn_domainset.txt";
+          };
+        cdn_non_ip =
+          RuleSet_domain
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/cdn.txt";
+            path = "./rule_set/sukkaw_ruleset/cdn_non_ip.txt";
+          };
+        stream_non_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/stream.txt";
+            path = "./rule_set/sukkaw_ruleset/stream_non_ip.txt";
+          };
+        stream_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/ip/stream.txt";
+            path = "./rule_set/sukkaw_ruleset/stream_ip.txt";
+          };
+        ai_non_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/ai.txt";
+            path = "./rule_set/sukkaw_ruleset/ai_non_ip.txt";
+          };
+        telegram_non_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/telegram.txt";
+            path = "./rule_set/sukkaw_ruleset/telegram_non_ip.txt";
+          };
+        telegram_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/ip/telegram.txt";
+            path = "./rule_set/sukkaw_ruleset/telegram_ip.txt";
+          };
+        apple_cdn =
+          RuleSet_domain
+          // {
+            url = "https://ruleset.skk.moe/Clash/domainset/apple_cdn.txt";
+            path = "./rule_set/sukkaw_ruleset/apple_cdn.txt";
+          };
+        apple_services =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/apple_services.txt";
+            path = "./rule_set/sukkaw_ruleset/apple_services.txt";
+          };
+        apple_cn_non_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/apple_cn.txt";
+            path = "./rule_set/sukkaw_ruleset/apple_cn_non_ip.txt";
+          };
+        microsoft_cdn_non_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/microsoft_cdn.txt";
+            path = "./rule_set/sukkaw_ruleset/microsoft_cdn_non_ip.txt";
+          };
+        microsoft_non_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/microsoft.txt";
+            path = "./rule_set/sukkaw_ruleset/microsoft_non_ip.txt";
+          };
+        download_domainset =
+          RuleSet_domain
+          // {
+            url = "https://ruleset.skk.moe/Clash/domainset/download.txt";
+            path = "./rule_set/sukkaw_ruleset/download_domainset.txt";
+          };
+        download_non_ip =
+          RuleSet_domain
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/download.txt";
+            path = "./rule_set/sukkaw_ruleset/download_non_ip.txt";
+          };
+        lan_non_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/lan.txt";
+            path = "./rule_set/sukkaw_ruleset/lan_non_ip.txt";
+          };
+        lan_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/ip/lan.txt";
+            path = "./rule_set/sukkaw_ruleset/lan_ip.txt";
+          };
+        domestic_non_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/domestic.txt";
+            path = "./rule_set/sukkaw_ruleset/domestic_non_ip.txt";
+          };
+        direct_non_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/direct.txt";
+            path = "./rule_set/sukkaw_ruleset/direct_non_ip.txt";
+          };
+        global_non_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/non_ip/global.txt";
+            path = "./rule_set/sukkaw_ruleset/global_non_ip.txt";
+          };
+        domestic_ip =
+          RuleSet_classical
+          // {
+            url = "https://ruleset.skk.moe/Clash/ip/domestic.txt";
+            path = "./rule_set/sukkaw_ruleset/domestic_ip.txt";
+          };
+        china_ip =
+          RuleSet_ipcidr
+          // {
+            url = "https://ruleset.skk.moe/Clash/ip/china_ip.txt";
+            path = "./rule_set/sukkaw_ruleset/china_ip.txt";
+          };
+        my_hosts = {
+          type = "inline";
+          behavior = "classical";
+          payload = [
+            "IP-CIDR,${config.vaultix.placeholder.hosts-pardofelis-ipv4}/32"
+          ];
+        };
+      };
+    };
+  };
+}

@@ -0,0 +1,23 @@
+{
+  flake.modules.nixos."services/mihomo" = _: {
+    services.mihomo.config.sniffer = {
+      enable = true;
+      sniff = {
+        HTTP = {
+          ports = [80 "8080-8880"];
+          override-destination = true;
+        };
+        TLS = {
+          ports = [443 8443];
+        };
+        QUIC = {
+          ports = [443 8443];
+        };
+      };
+      skip-domain = [
+        "Mijia Cloud"
+        "+.push.apple.com"
+      ];
+    };
+  };
+}

@@ -0,0 +1,19 @@
+{
+  flake.modules.nixos."services/mihomo" = _: {
+    services.mihomo.tunMode = true;
+
+    services.mihomo.config.tun = {
+      enable = true;
+      stack = "mixed";
+      device = "ElysianRealm";
+      auto-route = true;
+      auto-detect-interface = true;
+      dns-hijack = [
+        "any:53"
+        "tcp://any:53"
+      ];
+      strict-route = true;
+      mtu = 1500;
+    };
+  };
+}

@@ -1,5 +1,8 @@
 {
-  flake.modules.nixos."services/mihomo" = _: {
-    services.mihomo.enable = true;
+  flake.modules.nixos."services/mihomo" = {pkgs, ...}: {
+    services.mihomo = {
+      enable = true;
+      webui = pkgs.metacubexd;
+    };
   };
 }

@@ -0,0 +1,36 @@
+{lib, ...}: {
+  flake.modules.nixos."services/mihomo" = {
+    config,
+    pkgs,
+    ...
+  }: let
+    inherit (lib) mkOption types;
+    format = pkgs.formats.yaml {};
+    cfg = config.services.mihomo.config;
+  in {
+    options.services.mihomo.config = mkOption {
+      default = {};
+      type = types.submodule {
+        freeformType = format.type;
+        options = {
+          tun = {
+            enable = mkOption {
+              default = config.options.services.mihomo.tunMode;
+              type = types.bool;
+            };
+            device = mkOption {
+              default = "utun0";
+              type = types.str;
+            };
+          };
+        };
+      };
+    };
+
+    config = {
+      networking.firewall.trustedInterfaces = lib.mkIf config.services.mihomo.tunMode [cfg.tun.device];
+      vaultix.templates."mihomo-config.yaml".content = builtins.toJSON cfg;
+      services.mihomo.configFile = config.vaultix.templates."mihomo-config.yaml".path;
+    };
+  };
+}

@@ -1,3 +0,0 @@
-{mylib, ...}: {
-  imports = mylib.scanModules ./.;
-}

@@ -1,44 +0,0 @@
-{
-  lib,
-  pkgs,
-  config,
-  helix-steel,
-  ...
-}: let
-  inherit (lib) mkOption types;
-
-  cfg = config.programs.helix.steelEventSystem;
-in {
-  options.programs.helix.steelEventSystem = {
-    enable = lib.mkEnableOption "Enable Helix Steel event system.";
-    steelPackage = lib.mkPackageOption pkgs "steel" {};
-    initScm = mkOption {
-      type = types.either types.lines types.path;
-      default = "";
-    };
-    helixScm = mkOption {
-      type = types.either types.lines types.path;
-      default = "";
-    };
-  };
-
-  config = lib.mkIf cfg.enable {
-    home.packages = [cfg.steelPackage];
-    programs.helix.package = lib.mkDefault helix-steel.packages.${pkgs.system}.default;
-
-    xdg.configFile."helix/init.scm" = let
-      scm = cfg.initScm;
-    in
-      lib.mkIf (lib.stringLength scm != 0) {
-        source = lib.mkIf (lib.isPath scm) scm;
-        text = lib.mkIf (!(lib.isPath scm)) scm;
-      };
-    xdg.configFile."helix/helix.scm" = let
-      scm = cfg.helixScm;
-    in
-      lib.mkIf (lib.stringLength scm != 0) {
-        source = lib.mkIf (lib.isPath scm) scm;
-        text = lib.mkIf (!(lib.isPath scm)) scm;
-      };
-  };
-}

@@ -1,3 +0,0 @@
-{mylib, ...}: {
-  imports = mylib.scanModules ./.;
-}

@@ -1,87 +0,0 @@
-{lib, ...}:
-with lib; let
-  secretType = types.submodule {
-    options = {
-      secretName = mkOption {
-        type = types.str;
-      };
-    };
-  };
-  optSecretType = types.nullOr (types.either types.str secretType);
-
-  hostModule = types.submodule {
-    options = {
-      network = mkOption {
-        type = networkModule;
-        default = {};
-        description = "Network configurations of the host.";
-      };
-      hostPublicKey = mkOption {
-        type = types.nullOr types.str;
-        default = null;
-      };
-      sshPorts = mkOption {
-        type = types.listOf types.port;
-        default = [22];
-      };
-    };
-  };
-
-  networkModule = types.submodule {
-    options = {
-      enable = mkOption {
-        type = types.nullOr (types.enum ["networkmanager" "networkd"]);
-        default = null;
-        description = "Which network manager to use.";
-      };
-      iface = mkOption {
-        type = types.str;
-      };
-      useDHCP = mkOption {
-        type = types.bool;
-        default = false;
-      };
-      nameservers = mkOption {
-        type = types.listOf types.str;
-        default = [];
-      };
-      search = mkOption {
-        type = types.listOf types.str;
-        default = [];
-      };
-      ipv4 = mkOption {
-        type = optSecretType;
-        default = null;
-      };
-      ipv6 = mkOption {
-        type = optSecretType;
-        default = null;
-      };
-      prefixLength4 = mkOption {
-        type = types.int;
-        default = 24;
-      };
-      prefixLength6 = mkOption {
-        type = types.int;
-        default = 64;
-      };
-      defaultGateway = mkOption {
-        type = optSecretType;
-        default = null;
-      };
-      defaultGateway6 = mkOption {
-        type = optSecretType;
-        default = null;
-      };
-    };
-  };
-in {
-  options.modules.my-hosts = mkOption {
-    type = types.attrsOf hostModule;
-    description = "My nix hosts general configuration";
-    default = {};
-  };
-  options.modules.currentHost = mkOption {
-    type = types.str;
-  };
-}

@@ -1,35 +0,0 @@
-{
-  lib,
-  config,
-  pkgs,
-  ...
-}: let
-  inherit (lib) mkOption types;
-  format = pkgs.formats.yaml {};
-  cfg = config.services.mihomo.config;
-in {
-  options.services.mihomo.config = mkOption {
-    default = {};
-    type = types.submodule {
-      freeformType = format.type;
-      options = {
-        tun = {
-          enable = mkOption {
-            default = config.options.services.mihomo.tunMode;
-            type = types.bool;
-          };
-          device = mkOption {
-            default = "utun0";
-            type = types.str;
-          };
-        };
-      };
-    };
-  };
-
-  config = {
-    networking.firewall.trustedInterfaces = lib.mkIf config.services.mihomo.tunMode [cfg.tun.device];
-    sops.templates."mihomo-config.yaml".content = builtins.toJSON cfg;
-    services.mihomo.configFile = config.sops.templates."mihomo-config.yaml".path;
-  };
-}

@@ -1,3 +0,0 @@
-{mylib, ...}: {
-  imports = mylib.scanModules ./.;
-}

@@ -1,21 +0,0 @@
-{mylib, ...}: {
-  imports = mylib.scanModules ./.;
-
-  # See /options/nixos/mihomo.nix
-  services.mihomo.config = {
-    mixed-port = 7154;
-    allow-lan = true;
-    mode = "rule";
-    log-level = "warning";
-    ipv6 = false;
-    find-process-mode = "strict";
-    external-controller = "127.0.0.1:9090";
-    unified-delay = true;
-    tcp-concurrent = true;
-    global-client-fingerprint = "chrome";
-    profile = {
-      store-selected = true;
-      store-fake-ip = true;
-    };
-  };
-}

@@ -1,40 +0,0 @@
-{...}: {
-  services.mihomo.config.dns = {
-    enable = true;
-    prefer-h3 = true;
-    ipv6 = false;
-    enhanced-mode = "fake-ip";
-    fake-ip-range = "198.18.0.1/16";
-    fake-ip-filter = [
-      "+.+m2m"
-      "+.$injections.adguard.org"
-      "+.$local.adguard.org"
-      "+.+bogon"
-      "+.+lan"
-      "+.+local"
-      "+.+localdomain"
-      "+.home.arpa"
-      "dns.msftncsi.com"
-      "*.srv.nintendo.net"
-      "*.stun.playstation.net"
-      "xbox.*.microsoft.com"
-      "*.xboxlive.com"
-      "*.turn.twilio.com"
-      "*.stun.twilio.com"
-      "stun.syncthing.net"
-      "stun.*"
-      "*.sslip.io"
-      "*.nip.io"
-    ];
-    respect-rules = true;
-    nameserver = [
-      "system"
-      "https://223.5.5.5/dns-query"
-      "https://doh.pub/dns-query"
-    ];
-    proxy-server-nameserver = [
-      "https://223.5.5.5/dns-query"
-      "https://doh.pub/dns-query"
-    ];
-  };
-}

@@ -1,210 +0,0 @@
-{...}: let
-  FilterHK = "^(?=.*((?i)🇭🇰|香港|\\b(HK|Hong)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
-  FilterTW = "^(?=.*((?i)🇹🇼|台湾|\\b(TW|Tai|Taiwan)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
-  FilterJP = "^(?=.*((?i)🇯🇵|日本|川日|东京|大阪|泉日|埼玉|\\b(JP|Japan)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
-  FilterKR = "^(?=.*((?i)🇰🇷|韩国|韓|首尔|\\b(KR|Korea)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
-  FilterSG = "^(?=.*((?i)🇸🇬|新加坡|狮|\\b(SG|Singapore)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
-  FilterUS = "^(?=.*((?i)🇺🇸|美国|波特兰|达拉斯|俄勒冈|凤凰城|费利蒙|硅谷|拉斯维加斯|洛杉矶|圣何塞|圣克拉拉|西雅图|芝加哥|\\b(US|United States)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
-  FilterUK = "^(?=.*((?i)🇬🇧|英国|伦敦|\\b(UK|United Kingdom)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
-  FilterFR = "^(?=.*((?i)🇫🇷|法国|\\b(FR|France)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
-  FilterDE = "^(?=.*((?i)🇩🇪|德国|\\b(DE|Germany)(\\d+)?\\b))(?!.*((?i)回国|校园|网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$";
-  FilterOthers = "^(?!.*(🇭🇰|HK|Hong|香港|🇹🇼|TW|Taiwan|Wan|🇯🇵|JP|Japan|日本|🇸🇬|SG|Singapore|狮城|🇺🇸|US|United States|America|美国|🇩🇪|DE|Germany|德国|🇬🇧|UK|United Kingdom|英国|🇰🇷|KR|Korea|韩国|韓|🇫🇷|FR|France|法国)).*$";
-  FilterAll = "^(?=.*(.))(?!.*((?i)群|邀请|返利|循环|官网|客服|网站|网址|获取|订阅|流量|到期|机场|下次|版本|官址|备用|过期|已用|联系|邮箱|工单|贩卖|通知|倒卖|防止|国内|地址|频道|无法|说明|使用|提示|特别|访问|支持|教程|关注|更新|作者|加入|(\\b(USE|USED|TOTAL|EXPIRE|EMAIL|Panel|Channel|Author)\\b|(\\d{4}-\\d{2}-\\d{2}|\\d+G)))).*$";
-
-  Select = {
-    type = "select";
-    url = "http://connectivitycheck.platform.hicloud.com/generate_204";
-    disable-udp = false;
-    hidden = false;
-    include-all = true;
-  };
-  Auto = {
-    type = "url-test";
-    url = "http://connectivitycheck.platform.hicloud.com/generate_204";
-    interval = 300;
-    tolerance = 50;
-    disable-udp = false;
-    hidden = true;
-    include-all = true;
-  };
-in {
-  services.mihomo.config.proxy-groups =
-    [
-      # 主选择组
-      {
-        name = "🎯 节点选择";
-        type = "select";
-        proxies = ["自动选择" "手动选择" "DIRECT"];
-        url = "http://connectivitycheck.platform.hicloud.com/generate_204";
-        icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Static.png";
-      }
-      # 手动/自动
-      {
-        name = "手动选择";
-        type = "select";
-        proxies = [
-          "🇭🇰 - 手动选择"
-          "🇯🇵 - 手动选择"
-          "🇰🇷 - 手动选择"
-          "🇸🇬 - 手动选择"
-          "🇺🇸 - 手动选择"
-          "🇬🇧 - 手动选择"
-          "🇫🇷 - 手动选择"
-          "🇩🇪 - 手动选择"
-          "🇹🇼 - 手动选择"
-          "Others - 手动选择"
-        ];
-        url = "http://connectivitycheck.platform.hicloud.com/generate_204";
-        icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Cylink.png";
-      }
-      {
-        name = "自动选择";
-        type = "select";
-        proxies = [
-          "🇭🇰 - 自动选择"
-          "🇯🇵 - 自动选择"
-          "🇰🇷 - 自动选择"
-          "🇸🇬 - 自动选择"
-          "🇺🇸 - 自动选择"
-          "🇬🇧 - 自动选择"
-          "🇫🇷 - 自动选择"
-          "🇩🇪 - 自动选择"
-          "🇹🇼 - 自动选择"
-        ];
-        url = "http://connectivitycheck.platform.hicloud.com/generate_204";
-        icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Urltest.png";
-      }
-      # 应用分组
-      {
-        name = "✈️ 电报信息";
-        type = "select";
-        proxies = [
-          "🎯 节点选择"
-          "🇭🇰 - 自动选择"
-          "🇯🇵 - 自动选择"
-          "🇸🇬 - 自动选择"
-          "🇺🇸 - 自动选择"
-        ];
-        icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Telegram.png";
-      }
-      {
-        name = "🤖 AIGC";
-        type = "select";
-        proxies = [
-          "🇺🇸 - 自动选择"
-          "🎯 节点选择"
-          "🇭🇰 - 自动选择"
-          "🇯🇵 - 自动选择"
-          "🇸🇬 - 自动选择"
-        ];
-        icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/OpenAI.png";
-      }
-      {
-        name = "🍎 苹果服务";
-        type = "select";
-        proxies = ["DIRECT" "🎯 节点选择" "🇭🇰 - 自动选择" "🇺🇸 - 自动选择"];
-        icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Apple.png";
-      }
-      {
-        name = "Ⓜ️ 微软服务";
-        type = "select";
-        proxies = ["DIRECT" "🎯 节点选择" "🇭🇰 - 自动选择" "🇺🇸 - 自动选择"];
-        icon = "https://raw.githubusercontent.com/Orz-3/mini/master/Color/Microsoft.png";
-      }
-    ]
-    ++ (map (x: Auto // x) [
-      # 自动选择 - 按地区
-      {
-        name = "🇭🇰 - 自动选择";
-        filter = FilterHK;
-      }
-      {
-        name = "🇯🇵 - 自动选择";
-        filter = FilterJP;
-      }
-      {
-        name = "🇰🇷 - 自动选择";
-        filter = FilterKR;
-      }
-      {
-        name = "🇸🇬 - 自动选择";
-        filter = FilterSG;
-      }
-      {
-        name = "🇺🇸 - 自动选择";
-        filter = FilterUS;
-      }
-      {
-        name = "🇬🇧 - 自动选择";
-        filter = FilterUK;
-      }
-      {
-        name = "🇫🇷 - 自动选择";
-        filter = FilterFR;
-      }
-      {
-        name = "🇩🇪 - 自动选择";
-        filter = FilterDE;
-      }
-      {
-        name = "🇹🇼 - 自动选择";
-        filter = FilterTW;
-      }
-    ])
-    ++ (map (x: Select // x) [
-      # 手动选择 - 按地区
-      {
-        name = "🇭🇰 - 手动选择";
-        filter = FilterHK;
-      }
-      {
-        name = "🇯🇵 - 手动选择";
-        filter = FilterJP;
-      }
-      {
-        name = "🇰🇷 - 手动选择";
-        filter = FilterKR;
-      }
-      {
-        name = "🇸🇬 - 手动选择";
-        filter = FilterSG;
-      }
-      {
-        name = "🇺🇸 - 手动选择";
-        filter = FilterUS;
-      }
-      {
-        name = "🇬🇧 - 手动选择";
-        filter = FilterUK;
-      }
-      {
-        name = "🇫🇷 - 手动选择";
-        filter = FilterFR;
-      }
-      {
-        name = "🇩🇪 - 手动选择";
-        filter = FilterDE;
-      }
-      {
-        name = "🇹🇼 - 手动选择";
-        filter = FilterTW;
-      }
-      {
-        name = "Others - 手动选择";
-        filter = FilterOthers;
-      }
-    ])
-    ++ [
-      # 全部节点
-      (Select
-        // {
-          name = "AllIn - 手动选择";
-          filter = FilterAll;
-        })
-      (Auto
-        // {
-          name = "AllIn - 自动选择";
-          filter = FilterAll;
-        })
-    ];
-}

@@ -1,32 +0,0 @@
-{
-  lib,
-  config,
-  ...
-}: let
-  NodeParam = {
-    type = "http";
-    interval = 86400;
-    health-check = {
-      enable = true;
-      url = "http://cp.cloudflare.com";
-      interval = 300;
-    };
-  };
-in {
-  services.mihomo.config.proxy-providers = lib.mkIf config.services.mihomo.enable {
-    "Node-YiYuan" =
-      NodeParam
-      // {
-        url = config.sops.placeholder."mihomo/providers/yi_yuan";
-        path = "./proxy_provider/providers-yi_yuan.yaml";
-        override.additional-prefix = "[YY]";
-      };
-    "Node-MoJie" =
-      NodeParam
-      // {
-        url = config.sops.placeholder."mihomo/providers/mo_jie";
-        path = "./proxy_provider/providers-mo_jie.yaml";
-        override.additional-prefix = "[MJ]";
-      };
-  };
-}

@@ -1,227 +0,0 @@
-{config, ...}: let
-  RuleSet_classical = {
-    type = "http";
-    behavior = "classical";
-    interval = 43200;
-    format = "text";
-    proxy = "🎯 节点选择";
-  };
-  RuleSet_domain = {
-    type = "http";
-    behavior = "domain";
-    interval = 43200;
-    format = "text";
-    proxy = "🎯 节点选择";
-  };
-  RuleSet_ipcidr = {
-    type = "http";
-    behavior = "ipcidr";
-    interval = 43200;
-    format = "text";
-    proxy = "🎯 节点选择";
-  };
-in {
-  services.mihomo.config = {
-    rules = [
-      # 自订类规则
-      "AND,((DOMAIN-SUFFIX,glacier.mxrouting.net),(DST-PORT,465/993)),DIRECT" # My Domain Email
-      "AND,((RULE-SET,my_hosts),(NOT,((DST-PORT,80/443)))),DIRECT" # My VPS
-
-      # 非 IP 类规则
-      "RULE-SET,reject_non_ip,REJECT"
-      "RULE-SET,reject_domainset,REJECT"
-      "RULE-SET,reject_non_ip_drop,REJECT-DROP"
-      "RULE-SET,reject_non_ip_no_drop,REJECT"
-      "RULE-SET,cdn_domainset,🎯 节点选择"
-      "RULE-SET,cdn_non_ip,🎯 节点选择"
-      "RULE-SET,stream_non_ip,🇺🇸 - 自动选择"
-      "RULE-SET,telegram_non_ip,✈️ 电报信息"
-      "RULE-SET,apple_cdn,DIRECT"
-      "RULE-SET,download_domainset,🎯 节点选择"
-      "RULE-SET,download_non_ip,🎯 节点选择"
-      "RULE-SET,microsoft_cdn_non_ip,DIRECT"
-      "RULE-SET,apple_cn_non_ip,DIRECT"
-      "RULE-SET,apple_services,🍎 苹果服务"
-      "RULE-SET,microsoft_non_ip,Ⓜ️ 微软服务"
-      "RULE-SET,ai_non_ip,🤖 AIGC"
-      "RULE-SET,global_non_ip,🎯 节点选择"
-      "RULE-SET,domestic_non_ip,DIRECT"
-      "RULE-SET,direct_non_ip,DIRECT"
-      "RULE-SET,lan_non_ip,DIRECT"
-
-      # IP 类规则
-      "RULE-SET,reject_ip,REJECT"
-      "RULE-SET,telegram_ip,✈️ 电报信息"
-      "RULE-SET,stream_ip,🇺🇸 - 自动选择"
-      "RULE-SET,lan_ip,DIRECT"
-      "RULE-SET,domestic_ip,DIRECT"
-      "RULE-SET,china_ip,DIRECT"
-      "MATCH,🎯 节点选择"
-    ];
-    rule-providers = {
-      reject_non_ip_no_drop =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/reject-no-drop.txt";
-          path = "./rule_set/sukkaw_ruleset/reject_non_ip_no_drop.txt";
-        };
-      reject_non_ip_drop =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/reject-drop.txt";
-          path = "./rule_set/sukkaw_ruleset/reject_non_ip_drop.txt";
-        };
-      reject_non_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/reject.txt";
-          path = "./rule_set/sukkaw_ruleset/reject_non_ip.txt";
-        };
-      reject_domainset =
-        RuleSet_domain
-        // {
-          url = "https://ruleset.skk.moe/Clash/domainset/reject.txt";
-          path = "./rule_set/sukkaw_ruleset/reject_domainset.txt";
-        };
-      reject_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/ip/reject.txt";
-          path = "./rule_set/sukkaw_ruleset/reject_ip.txt";
-        };
-      cdn_domainset =
-        RuleSet_domain
-        // {
-          url = "https://ruleset.skk.moe/Clash/domainset/cdn.txt";
-          path = "./rule_set/sukkaw_ruleset/cdn_domainset.txt";
-        };
-      cdn_non_ip =
-        RuleSet_domain
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/cdn.txt";
-          path = "./rule_set/sukkaw_ruleset/cdn_non_ip.txt";
-        };
-      stream_non_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/stream.txt";
-          path = "./rule_set/sukkaw_ruleset/stream_non_ip.txt";
-        };
-      stream_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/ip/stream.txt";
-          path = "./rule_set/sukkaw_ruleset/stream_ip.txt";
-        };
-      ai_non_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/ai.txt";
-          path = "./rule_set/sukkaw_ruleset/ai_non_ip.txt";
-        };
-      telegram_non_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/telegram.txt";
-          path = "./rule_set/sukkaw_ruleset/telegram_non_ip.txt";
-        };
-      telegram_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/ip/telegram.txt";
-          path = "./rule_set/sukkaw_ruleset/telegram_ip.txt";
-        };
-      apple_cdn =
-        RuleSet_domain
-        // {
-          url = "https://ruleset.skk.moe/Clash/domainset/apple_cdn.txt";
-          path = "./rule_set/sukkaw_ruleset/apple_cdn.txt";
-        };
-      apple_services =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/apple_services.txt";
-          path = "./rule_set/sukkaw_ruleset/apple_services.txt";
-        };
-      apple_cn_non_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/apple_cn.txt";
-          path = "./rule_set/sukkaw_ruleset/apple_cn_non_ip.txt";
-        };
-      microsoft_cdn_non_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/microsoft_cdn.txt";
-          path = "./rule_set/sukkaw_ruleset/microsoft_cdn_non_ip.txt";
-        };
-      microsoft_non_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/microsoft.txt";
-          path = "./rule_set/sukkaw_ruleset/microsoft_non_ip.txt";
-        };
-      download_domainset =
-        RuleSet_domain
-        // {
-          url = "https://ruleset.skk.moe/Clash/domainset/download.txt";
-          path = "./rule_set/sukkaw_ruleset/download_domainset.txt";
-        };
-      download_non_ip =
-        RuleSet_domain
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/download.txt";
-          path = "./rule_set/sukkaw_ruleset/download_non_ip.txt";
-        };
-      lan_non_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/lan.txt";
-          path = "./rule_set/sukkaw_ruleset/lan_non_ip.txt";
-        };
-      lan_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/ip/lan.txt";
-          path = "./rule_set/sukkaw_ruleset/lan_ip.txt";
-        };
-      domestic_non_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/domestic.txt";
-          path = "./rule_set/sukkaw_ruleset/domestic_non_ip.txt";
-        };
-      direct_non_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/direct.txt";
-          path = "./rule_set/sukkaw_ruleset/direct_non_ip.txt";
-        };
-      global_non_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/non_ip/global.txt";
-          path = "./rule_set/sukkaw_ruleset/global_non_ip.txt";
-        };
-      domestic_ip =
-        RuleSet_classical
-        // {
-          url = "https://ruleset.skk.moe/Clash/ip/domestic.txt";
-          path = "./rule_set/sukkaw_ruleset/domestic_ip.txt";
-        };
-      china_ip =
-        RuleSet_ipcidr
-        // {
-          url = "https://ruleset.skk.moe/Clash/ip/china_ip.txt";
-          path = "./rule_set/sukkaw_ruleset/china_ip.txt";
-        };
-      my_hosts = {
-        type = "inline";
-        behavior = "classical";
-        payload = [
-          "IP-CIDR,${config.sops.placeholder.pardofelis-ipv4}/32"
-        ];
-      };
-    };
-  };
-}

@@ -1,21 +0,0 @@
-{...}: {
-  services.mihomo.config.sniffer = {
-    enable = true;
-    sniff = {
-      HTTP = {
-        ports = [80 "8080-8880"];
-        override-destination = true;
-      };
-      TLS = {
-        ports = [443 8443];
-      };
-      QUIC = {
-        ports = [443 8443];
-      };
-    };
-    skip-domain = [
-      "Mijia Cloud"
-      "+.push.apple.com"
-    ];
-  };
-}

@@ -1,15 +0,0 @@
-{...}: {
-  services.mihomo.config.tun = {
-    enable = true;
-    stack = "mixed";
-    device = "ElysianRealm";
-    auto-route = true;
-    auto-detect-interface = true;
-    dns-hijack = [
-      "any:53"
-      "tcp://any:53"
-    ];
-    strict-route = true;
-    mtu = 1500;
-  };
-}

@@ -1,14 +0,0 @@
-{
-  lib,
-  config,
-  pkgs,
-  ...
-}: {
-  imports = [./config];
-  config = lib.mkIf config.services.mihomo.enable {
-    services.mihomo = {
-      tunMode = true;
-      webui = pkgs.metacubexd;
-    };
-  };
-}

@@ -1,3 +0,0 @@
-{mylib, ...}: {
-  imports = mylib.scanModules ./.;
-}

@@ -1,3 +0,0 @@
-{mylib, ...}: {
-  imports = mylib.scanModules ./.;
-}

@@ -1,8 +0,0 @@
-{myvars, ...}: {
-  services.sunshine = {
-    enable = true;
-    autoStart = false;
-    openFirewall = true;
-    capSysAdmin = true;
-  };
-}

@@ -1,6 +0,0 @@
-{lib, ...}: {
-  imports = [
-    ../base
-    ../../base
-  ];
-}

@@ -1,7 +0,0 @@
-{
-  imports = [
-    ./base
-    ../base
-    ./desktop
-  ];
-}

@@ -1,35 +0,0 @@
-{
-  # NOTE: the args not used in this file CAN NOT be removed!
-  # because haumea pass argument lazily,
-  # and these arguments are used in the functions `mylib.nixosSystem`.
-  inputs,
-  lib,
-  myvars,
-  mylib,
-  system,
-  genSpecialArgs,
-  ...
-} @ args: let
-  # Kevin - Codename "Deliverance", 1st of Flame-Chasers
-  name = "kevin";
-  base-modules = {
-    nixos-modules = map mylib.relativeToRoot [
-      # common
-      "secrets/nixos.nix"
-      "os-modules/nixos/desktop.nix"
-      "options/nixos/default.nix"
-      "hosts/general.nix"
-      # host specific
-      "hosts/chaser-${name}"
-    ];
-    home-modules = map mylib.relativeToRoot [
-      # common
-      "home/linux/gui.nix"
-      "options/home/default.nix"
-    ];
-  };
-in {
-  nixosConfigurations = {
-    "${name}" = mylib.nixosSystem (base-modules // args);
-  };
-}