Copied from arcadia

2025-01-31 15:40:58 +03:00
commit 9428bf741d
5 changed files with 407 additions and 0 deletions
--- a/.scripts/combine_payloads.py
+++ b/.scripts/combine_payloads.py
@@ -0,0 +1,54 @@
+import os
+import requests
+
+# Список URL для загрузки
+file_urls = [
+    "https://example.com/file1.txt",
+    "https://example.com/file2.txt",
+]
+
+# Папка для сохранения файлов
+download_folder = "downloads"
+os.makedirs(download_folder, exist_ok=True)
+
+# Функция для удаления строки 'payload:' и удаления дубликатов
+def process_file(file_path):
+    with open(file_path, "r") as f:
+        lines = f.readlines()
+
+    # Удалить строки с "payload:" и убрать дубликаты
+    unique_lines = []
+    seen_lines = set()
+    for line in lines:
+        if "payload:" in line:
+            continue
+        if line not in seen_lines:
+            unique_lines.append(line)
+            seen_lines.add(line)
+        else:
+            unique_lines.append(f"# {line.strip()}\n")  # Комментировать дубликат
+
+    # Записать обратно в файл
+    with open(file_path, "w") as f:
+        f.writelines(unique_lines)
+
+# Скачивание файлов и обработка
+for url in file_urls:
+    file_name = os.path.basename(url)
+    file_path = os.path.join(download_folder, file_name)
+
+    # Скачивание файла
+    print(f"Downloading {url}...")
+    response = requests.get(url)
+    if response.status_code == 200:
+        with open(file_path, "wb") as f:
+            f.write(response.content)
+        print(f"Saved to {file_path}")
+
+        # Обработка файла
+        print(f"Processing {file_path}...")
+        process_file(file_path)
+    else:
+        print(f"Failed to download {url} (Status Code: {response.status_code})")
+
+print("All files processed.")
--- a/config/dts-pontifex.yaml
+++ b/config/dts-pontifex.yaml
@@ -0,0 +1,309 @@
+# —————————————————————————————————— local proxy —————————————————————————————————
+port: 7890
+socks-port: 7891
+redir-port: 7892
+tproxy-port: 7893
+mixed-port: 7893
+allow-lan: true
+bind-address: "*"
+# authentication of local SOCKS5/HTTP(S) server
+# authentication:
+#  - "user1:pass1"
+#  - "user2:pass2"
+
+# —————————————————————————————— external controller —————————————————————————————
+external-controller: 127.0.0.1:9090
+secret: '314159271828'
+external-ui: "/usr/share/openclash/ui"
+authentication:
+- dts-pontifex-clash:314159271828
+
+# ———————————————————————————————————— general ———————————————————————————————————
+mode: rule
+ipv6: false
+unified-delay: true
+log-level: info
+disable-keep-alive: true
+# interface-name: en0 # Outbound interface name
+
+# ————————————————————————————————————— hosts ————————————————————————————————————
+hosts:
+
+# ———————————————————————————————————— profile ———————————————————————————————————
+profile:
+  store-selected: true
+  store-fake-ip: true
+
+# ———————————————————————————————————— sniffer ———————————————————————————————————
+sniffer:
+  enable: true
+  parse-pure-ip: true
+
+# —————————————————————————————————————— dns —————————————————————————————————————
+dns:
+  enable: true
+  listen: 0.0.0.0:53
+  default-nameserver:
+  - 114.114.114.114
+  - 8.8.8.8
+  enhanced-mode: fake-ip
+  fake-ip-range: 198.18.0.1/16
+  fake-ip-filter-mode: blacklist
+  fake-ip-filter:
+     # ———————————————————— self-hosted domains ———————————————————
+     - '*.lan'
+     - '*.dts'
+     - '*.webway.dts'
+     - '*.netbird.selfhosted'
+     - '*.shamanlanding.org'
+     - '*.retreat.shamanlanding.org'
+     - '*.hq.shamanlanding.org'
+  nameserver:
+  - https://purpose.shamanlanding.org/dns-query/dts-pontifex
+
+  # If IP addresses resolved with servers in `nameservers` are in the specified
+  # subnets below, they are considered invalid and results from `fallback`
+  # servers are used instead.
+  #
+  # IP address resolved with servers in `nameserver` is used when
+  # `fallback-filter.geoip` is true and when GEOIP of the IP address is `CN`.
+  #
+  # If `fallback-filter.geoip` is false, results from `nameserver` nameservers
+  # are always used if not match `fallback-filter.ipcidr`.
+  #
+  # This is a countermeasure against DNS pollution attacks.
+  # fallback-filter:
+  #   geoip: true
+  #   geoip-code: CN
+  #   ipcidr:
+  #     - 240.0.0.0/4
+  #   domain:
+  #     - '+.google.com'
+  #     - '+.facebook.com'
+  #     - '+.youtube.com'
+    # Lookup domains via specific nameservers
+  # nameserver-policy:
+  #   'www.baidu.com': '114.114.114.114'
+  #   '+.internal.crop.com': '10.0.0.1'
+
+# ————————————————————————————————————— macro ————————————————————————————————————
+  health-check-1min-gstatic: &health_check_1min_gstatic
+    enable: true
+    interval: 600
+    url: http://www.gstatic.com/generate_204
+  
+  default-rule-provider-config: &default_rule_provider_config
+    type: http
+    behavior: classical
+    interval: 86400
+
+
+# ————————————————————————————————— proxies list —————————————————————————————————
+proxies:
+  # ————————————————————— direct wan routes ————————————————————
+  - name: "Direct WAN A [Мегафон]"
+    type: direct
+    udp: true
+    ip-version: ipv4
+    interface-name: eth2
+  - name: "Direct WAN B [РосТелеКом]"
+    type: direct
+    udp: true
+    ip-version: ipv4
+    interface-name: eth2
+  - name: "Direct WAN C [Мобильная сеть]"
+    type: direct
+    udp: true
+    ip-version: ipv4
+    interface-name: eth2
+
+  # ——————————————————— private vpn services ———————————————————
+  - name: vless-serbia
+    type: vless
+    server: 38.180.101.70
+    port: 443
+    uuid: e31308a8-f7d3-4007-b077-6fd21e9c7310
+    udp: false
+    tls: true
+    client-fingerprint: chrome
+    servername: kingnews.rs
+    network: tcp
+    flow: xtls-rprx-vision
+    reality-opts:
+      public-key: xBnrKijFwmka88VI1xWYzUS9jT1SyA5UdJQ8vg5BZzw
+      short-id: a9a07155
+  
+  - name: vless-estonia
+    type: vless
+    server: 37.252.4.126
+    port: 443
+    uuid: '028c65fd-9192-4adc-af68-e01fe5881cdd'
+    udp: false
+    tls: true
+    client-fingerprint: chrome
+    servername: yahoo.com
+    network: tcp
+    flow: xtls-rprx-vision
+    reality-opts:
+      public-key: HwuNN-BUkUm1acVf0POkJHyfSj9puyATJDIxcR_OfE4
+      short-id: '58024220'
+
+
+# ———————————————————————————————— proxy providers ———————————————————————————————
+proxy-providers:
+  # ——————————————————— private vpn services ———————————————————
+
+  
+  # ——————————————————— non-personal services ——————————————————
+  full-xfinn-test:
+    type: http
+    url: "https://gitea.shamanlanding.org/DaTekShaman/arcadia/raw/branch/main/CLASH%20RULES/proxy-providers/gofinn-test-account-full"
+    interval: 3600
+    proxy: DIRECT
+    path: "./proxy_provider/gofinn-test-acoount-full.txt"
+    health-check:
+      <<: *health_check_1min_gstatic
+
+# ————————————————————————————————— proxy groups —————————————————————————————————
+proxy-groups:
+  # ————————————————————————— fallback —————————————————————————
+  - name: "Automatic Fallback Route"
+    type: fallback
+    proxies:
+      - DIRECT
+    url: 'https://cp.cloudflare.com/generate_204'
+    interval: 300
+  
+  # ————————————————————— direct wan routes ————————————————————
+  - name: Direct Multi-WAN Load Balancer [AB]
+    type: load-balancer
+    disable-udp: false
+    proxies:
+      - Direct WAN A [Мегафон]
+      - Direct WAN B [РосТелеКом]
+
+  - name: Direct Route for Unprivileged Webway Clients
+    type: select
+    disable-udp: false
+    proxies:
+      - Direct WAN A [Мегафон]
+      - Direct WAN B [РосТелеКом]
+
+  - name: Direct Route for Privileged Webway Clients
+    type: select
+    disable-udp: false
+    proxies:
+      - Direct WAN A [Мегафон]
+      - Direct WAN B [РосТелеКом]
+
+  - name: Direct Route for LAN Clients
+    type: select
+    disable-udp: false
+    proxies:
+      - Direct Multi-WAN Load Balancer [AB]
+      - Direct WAN A [Мегафон]
+      - Direct WAN B [РосТелеКом]
+      - Direct WAN C [Мобильная сеть]
+
+  - name: Direct Route for IOT Clients
+    type: select
+    disable-udp: false
+    proxies:
+      - Direct Multi-WAN Load Balancer [AB]
+      - Direct WAN A [Мегафон]
+      - Direct WAN B [РосТелеКом]
+      - Direct WAN C [Мобильная сеть]
+
+  # ————————————————————————— selectors ————————————————————————
+  
+  - name: YouTube for LAN Clients
+    type: select
+    use:
+      - full-xfinn-test
+    proxies:
+      - vless-estonia
+      - vless-serbia
+    url: https://cp.cloudflare.com/generate_204
+    interval: 300
+
+  - name: IP Address Test
+    type: select
+    use:
+      - full-xfinn-test
+    proxies:
+      - vless-estonia
+      - vless-serbia
+    url: https://cp.cloudflare.com/generate_204
+    interval: 300
+
+# ———————————————————————————————— rule providers ————————————————————————————————
+rule-providers:
+  
+  # ———————————————————— external providers ————————————————————
+  AI Stuff:
+    url: https://testingcf.jsdelivr.net/gh/dler-io/Rules@main/Clash/Provider/AI%20Suite.yaml                                # AI Stuff
+    path: "./rule_provider/ai-stuff.yaml"                                                                                 
+    <<: *default_rule_provider_config
+
+  Notion:
+    url: https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/refs/heads/master/rule/Clash/Notion/Notion.yaml     # Notion
+    path: "./rule_provider/notion.yaml"
+    <<: *default_rule_provider_config
+  
+  Youtube:
+    url: https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/refs/heads/master/rule/Clash/Notion/Notion.yaml     # Youtube
+    path: "./rule_provider/youtube.yaml"
+    <<: *default_rule_provider_config
+  
+  # ———————————————————— internal providers ————————————————————
+  IP Address Test:
+    url: https://gitea.shamanlanding.org/DaTekShaman/arcadia/raw/branch/main/CLASH%20RULES/rule-providers/ip-test.yaml
+    path: "./rule_provider/ip-test.yaml"
+    <<: *default_rule_provider_config
+  General Direct Domain List:
+    url: http://purpose.shamanlanding.org:9999/direct-domain.yaml
+    path: "./ruleset/direct-domain.yaml"
+    <<: *default_rule_provider_config
+  General Direct IP List:
+    url: http://purpose.shamanlanding.org:9999/direct-ip.yaml
+    path: "./ruleset/direct-ip.yaml"
+    <<: *default_rule_provider_config
+  General Proxy Domain List:
+    url: http://purpose.shamanlanding.org:9999/proxy-domain.yaml
+    path: "./ruleset/proxy-domain.yaml"
+    <<: *default_rule_provider_config
+  General Proxy IP List:
+    url: http://purpose.shamanlanding.org:9999/proxy-ip.yaml
+    path: "./ruleset/proxy-ip.yaml"
+    <<: *default_rule_provider_config
+  
+  # ————————————————— antifilter community list ————————————————
+  Antifilter IP List:
+    url: http://purpose.shamanlanding.org:9999/antifilter-ip.yaml
+    path: "./ruleset/antifilter-ip.yaml"
+    <<: *default_rule_provider_config
+  Antifilter Community IP List:
+    url: http://purpose.shamanlanding.org:9999/antifilter-community-ip.yaml
+    path: "./ruleset/antifilter-community-ip.yaml"
+    <<: *default_rule_provider_config
+  Antifilter Community Domain List:
+    url: http://purpose.shamanlanding.org:9999/antifilter-community-domain.yaml
+    path: "./ruleset/antifilter-community-domain.yaml"
+    <<: *default_rule_provider_config
+
+# ————————————————————————————————————— rules ————————————————————————————————————
+rules:
+
+- RULE-SET,Youtube,YouTube for LAN Clients
+- RULE-SET,IP Address Test,IP Address Test
+
+- RULE-SET,General Direct Domain List,Direct Route for LAN Clients
+- RULE-SET,General Direct IP List,Direct Route for LAN Clients
+- RULE-SET,General Proxy Domain List,IP Address Test
+- RULE-SET,General Proxy IP List,IP Address Test
+
+- RULE-SET,Antifilter IP List,IP Address Test
+- RULE-SET,Antifilter Community IP List,IP Address Test
+- RULE-SET,Antifilter Community Domain List,IP Address Test
+
+- MATCH,Direct Route for LAN Clients
--- a/proxy-provider/gofinn-test-account-full
+++ b/proxy-provider/gofinn-test-account-full
--- a/proxy-provider/gofinn-test-account-torrents.yaml
+++ b/proxy-provider/gofinn-test-account-torrents.yaml
@@ -0,0 +1,40 @@
+proxies:  
+- name: NL 1
+  type: vless
+  server: nl1.gofizz.in
+  port: 443
+  uuid: e7584a69-cab3-476d-9014-8aa05cb7fc10
+  network: tcp
+  tls: true
+  udp: false
+  servername: nl1.gofizz.in
+  reality-opts: 
+    public-key: yvYNgYXNwbIBZ0PRhe_kE24DBdvQHT4uEkKJwzjxIiI
+    short-id: 4a1f9d0a
+  client-fingerprint: chrome
+- name: NL 2
+  type: vless
+  server: nl2.gofizz.in
+  port: 443
+  uuid: e7584a69-cab3-476d-9014-8aa05cb7fc10
+  network: tcp
+  tls: true
+  udp: false
+  servername: nl2.gofizz.in
+  reality-opts: 
+    public-key: JvEDoWNjB0tjgc1w5W6XYVKfagBGFPdjLoSAAOaSHmg
+    short-id: 71e79f87
+  client-fingerprint: chrome
+- name: MD
+  type: vless
+  server: md1.gofizz.in
+  port: 443
+  uuid: e7584a69-cab3-476d-9014-8aa05cb7fc10
+  network: tcp
+  tls: true
+  udp: false
+  servername: md1.gofizz.in
+  reality-opts: 
+    public-key: dB_0SVZC1kSyoO7HGojy4RX-xeT36JFMBYntBytwzTU
+    short-id: e09a99b8
+  client-fingerprint: chrome
--- a/rule-provider/ip-test.yaml
+++ b/rule-provider/ip-test.yaml
@@ -0,0 +1,3 @@
+payload:
+  - DOMAIN-SUFFIX,ifconfig.me
+  - DOMAIN-SUFFIX,ipinfo.io