wg.yaml

---
port: 8888
socks-port: 8889
mixed-port: 8899


dns:
  enable: true
  listen: 127.0.0.1:53533
  # ipv6: false # when the false, response to AAAA questions will be empty

  # These nameservers are used to resolve the DNS nameserver hostnames below.
  # Specify IP addresses only
  default-nameserver:
    - 114.114.114.114
    - 8.8.8.8
  enhanced-mode: fake-ip # or fake-ip
  fake-ip-range: 198.18.0.1/16 # Fake IP addresses pool CIDR
  # use-hosts: true # lookup hosts and return IP record
  
  # Hostnames in this list will not be resolved with fake IPs
  # i.e. questions to these domain names will always be answered with their
  # real IP addresses
  # fake-ip-filter:
  #   - '*.lan'
  #   - localhost.ptlogin2.qq.com
  
  # Supports UDP, TCP, DoT, DoH. You can specify the port to connect to.
  # All DNS questions are sent directly to the nameserver, without proxies
  # involved. Clash answers the DNS question with the first result gathered.
  nameserver:
    - 114.114.114.114 # default value
    - 8.8.8.8 # default value
    - tls://dns.google:853 # DNS over TLS
    - https://1.1.1.1/dns-query # DNS over HTTPS

allow-lan: true
mode: rule
log-level: debug
external-controller: 127.0.0.1:6170
experimental:
  ignore-resolve-fail: true

proxies:
  - name: "wg"
    type: wireguard
    server: engage.cloudflareclient.com
    port: 2408
    private-key: 0LQye/+HjLvgnXLs5ETQcHe5AcR7G4Bv78xu6Qja230=
    ip: 172.16.0.2/32
    ipv6: 2606:4700:110:82f3:873f:ed26:e24d:c2cb/128
    public-key: bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
    allowed-ips: ['0.0.0.0/0', '::/0']
    remote-dns-resolve: true
    dns:
      - 1.1.1.1
    udp: true
    connect-via: plain-vmess
  - name: plain-vmess
    type: vmess
    server: 10.0.0.13
    port: 16823
    uuid: b831381d-6324-4d53-ad4f-8cda48b30811
    alterId: 0
    cipher: auto
    udp: true
    skip-cert-verify: true

rules:
  - MATCH, wg
...