# Wormhole SOCKS5 Client Configuration
serviceType: client

# SOCKS5 服务器设置
server:
  address: 127.0.0.1
  port: 1080
  username: admin
  password: secure_password_123

# 代理模式设置
proxy:
  mode: global  # http, global, transparent
  localPort: 8080
  
# 全局代理设置
globalProxy:
  enabled: true
  dnsProxy: true
  dnsPort: 5353
  
  # 智能分流路由规则
  routing:
    # 基础规则
    bypassLocal: true     # 绕过本地地址 (localhost, 127.0.0.1等)
    bypassPrivate: true   # 绕过私有网络 (192.168.x.x, 10.x.x.x等)
    
    # 绕过域名列表 (直连，不经过代理)
    bypassDomains:
      # 本地域名
      - "*.local"
      - "*.localhost"
      - "*.lan"
      - "*.internal"
      - "*.corp"
      
      # 国内常用域名
      - "*.cn"
      - "*.baidu.com"
      - "*.qq.com"
      - "*.weixin.qq.com"
      - "*.taobao.com"
      - "*.tmall.com"
      - "*.alipay.com"
      - "*.jd.com"
      - "*.163.com"
      - "*.sina.com.cn"
      - "*.sohu.com"
      - "*.youku.com"
      - "*.bilibili.com"
      - "*.douyin.com"
      - "*.tiktok.com"
      
      # CDN和云服务
      - "*.cloudflare.com"
      - "*.amazonaws.com"
      - "*.aliyuncs.com"
      - "*.qcloud.com"
      
    # 强制代理域名列表 (必须经过代理)
    forceDomains:
      # Google 服务
      - "*.google.com"
      - "*.googlepai.com"
      - "*.googleapis.com"
      - "*.googleusercontent.com"
      - "*.googlevideo.com"
      - "*.gstatic.com"
      - "*.gmail.com"
      - "*.youtube.com"
      - "*.youtu.be"
      - "*.ytimg.com"
      
      # 社交媒体
      - "*.facebook.com"
      - "*.fbcdn.net"
      - "*.instagram.com"
      - "*.twitter.com"
      - "*.twimg.com"
      - "*.t.co"
      - "*.linkedin.com"
      - "*.pinterest.com"
      - "*.reddit.com"
      - "*.snapchat.com"
      - "*.discord.com"
      - "*.telegram.org"
      - "*.whatsapp.com"
      
      # 技术开发
      - "*.github.com"
      - "*.githubusercontent.com"
      - "*.github.io"
      - "*.stackoverflow.com"
      - "*.stackexchange.com"
      - "*.medium.com"
      - "*.dev.to"
      - "*.npmjs.com"
      - "*.pypi.org"
      - "*.docker.com"
      - "*.hub.docker.com"
      
      # 新闻媒体
      - "*.nytimes.com"
      - "*.washingtonpost.com"
      - "*.wsj.com"
      - "*.reuters.com"
      - "*.bbc.com"
      - "*.cnn.com"
      - "*.bloomberg.com"
      
      # 其他服务
      - "*.dropbox.com"
      - "*.onedrive.com"
      - "*.zoom.us"
      - "*.spotify.com"
      - "*.netflix.com"
      - "*.hulu.com"
      - "*.twitch.tv"
      - "*.steam.community"

# 透明代理设置 (实验性功能)
transparentProxy:
  enabled: false
  port: 8080
  dnsPort: 5353
  
  # 系统级修改 (需要root权限)
  modifyDNS: true     # 修改系统DNS设置
  modifyRoute: true   # 修改路由表
  
  # iptables规则 (Linux only)
  iptables:
    enabled: false
    table: "nat"
    chain: "OUTPUT"

# 性能调优
performance:
  # 连接池设置
  connectionPool:
    maxSize: 100
    maxIdleTime: "300s"
    
  # 超时设置
  timeouts:
    connect: "10s"
    handshake: "5s"
    read: "30s"
    write: "30s"
    
  # 缓存设置
  cache:
    dnsCache: true
    dnsCacheSize: 1000
    dnsCacheTTL: "3600s"

# 安全设置
security:
  # 证书验证
  verifySSL: true
  
  # 允许的协议
  allowedProtocols:
    - "http"
    - "https"
    - "socks5"
    
  # 黑名单
  blacklist:
    domains: []
    ips: []

# 监控和统计
monitoring:
  # 统计信息
  stats:
    enabled: true
    interval: "60s"
    
  # 健康检查
  healthCheck:
    enabled: true
    interval: "30s"
    
  # 日志设置
  logging:
    level: info           # debug, info, warn, error
    file: ""              # 留空表示输出到控制台
    maxSize: "100MB"      # 日志文件最大大小
    maxBackups: 5         # 保留的备份文件数
    maxAge: "30d"         # 日志文件保留天数
    compress: true        # 是否压缩旧日志

# 全局设置
logLevel: info
timeout: 30s

# Web管理界面 (可选)
webUI:
  enabled: false
  port: 8081
  username: "admin"
  password: "wormhole123"
  theme: "dark"