From d8fffba84c39dfa49550b75114e829f4f180f4a8 Mon Sep 17 00:00:00 2001
From: hesoyam <kto@loh.lol>
Date: Thu, 14 May 2026 17:21:29 +0300
Subject: [PATCH] fix and fix

---
 generate-config.sh | 127 +++++++++++++++++++++++++++++++++++++++++++--
 quick-install.sh   |  10 ++++
 2 files changed, 132 insertions(+), 5 deletions(-)

diff --git a/generate-config.sh b/generate-config.sh
index ad39ae4..165f13d 100644
--- a/generate-config.sh
+++ b/generate-config.sh
@@ -1,7 +1,7 @@
 #!/bin/sh
 
-WARP_CONF="/app/warp.conf"
-OUTPUT_CONFIG="/app/config.json"
+WARP_CONF="/etc/sing-box-warp/warp.conf"
+OUTPUT_CONFIG="/opt/sing-box-warp/config.json"
 
 urldecode() {
     echo "$1" | sed 's/%3[dD]/=/g; s/%2[bB]/+/g; s/%2[fF]/\//g; s/%2[cC]/,/g'
@@ -264,6 +264,15 @@ $I2_LINE
       "type": "mixed",
       "tag": "mixed-in",
       "listen_port": 2080
+    },
+    {
+      "type": "tun",
+      "tag": "tun-in",
+      "interface_name": "sing0",
+      "address": "172.19.0.1/30",
+      "mtu": 1500,
+      "auto_route": true,
+      "stack": "system"
     }
   ],
   "outbounds": [
@@ -273,9 +282,117 @@ $I2_LINE
     }
   ],
   "route": {
-    "final": "$TAG",
-    "default_domain_resolver": "default",
-    "auto_detect_interface": true
+    "rule_set": [
+            {
+                "tag": "antifilter_allyouneed",
+                "type": "local",
+                "format": "binary",
+                "path": "/opt/sing-box-warp/rules/antifilter_allyouneed.srs"
+            },
+            {
+                "tag": "antizapret",
+                "type": "local",
+                "format": "binary",
+                "path": "/opt/sing-box-warp/rules/antizapret.srs"
+            },
+            {
+                "tag": "github_ip_you-oops-dev",
+                "type": "local",
+                "format": "binary",
+                "path": "/opt/sing-box-warp/rules/github_ip_you-oops-dev.srs"
+            },
+            {
+                "tag": "github_karingx",
+                "type": "local",
+                "format": "binary",
+                "path": "/opt/sing-box-warp/rules/github_karingx.srs"
+            },
+            {
+                "tag": "cloudfront_ip_MetaCubeX",
+                "type": "local",
+                "format": "binary",
+                "path": "/opt/sing-box-warp/rules/cloudfront_ip_MetaCubeX.srs"
+            },
+            {
+                "tag": "telegram_MetaCubeX",
+                "type": "local",
+                "format": "binary",
+                "path": "/opt/sing-box-warp/rules/telegram_MetaCubeX.srs"
+            }
+        ],
+    "rules": [
+      {
+        "ip_cidr": [
+          "51.38.122.1",
+          "5.28.195.0/24",
+          "185.76.151.0/24",
+          "91.105.0.0/16",
+          "91.108.4.0/22",
+          "91.108.8.0/21",
+          "91.108.12.0/22",
+          "91.108.16.0/21",
+          "91.108.20.0/22",
+          "91.108.56.0/22",
+          "95.161.64.0/20",
+          "149.154.0.0/16",
+          "185.76.151.0/24",
+          "185.76.151.0/24",
+          "5.28.195.0/24",
+          "142.252.0.0/16",
+          "173.239.0.0/16",
+          "173.194.0.0/16",
+          "194.221.61.0/24",
+          "45.142.38.0/24",
+          "209.85.0.0/16",
+          "216.239.0.0/16"
+        ],
+        "outbound": "$TAG"
+      },
+      {
+        "inbound": "mixed-in",
+        "outbound": "$TAG"
+      },
+      {
+        "rule_set": [
+          "antifilter_allyouneed",
+          "antizapret",
+          "github_ip_you-oops-dev",
+          "github_karingx",
+          "cloudfront_ip_MetaCubeX",
+          "telegram_MetaCubeX"
+        ],
+        "outbound": "$TAG"
+      },
+      {
+        "rule_set": [
+          "antifilter_allyouneed",
+          "antizapret",
+          "github_ip_you-oops-dev",
+          "github_karingx",
+          "cloudfront_ip_MetaCubeX",
+          "telegram_MetaCubeX"
+        ],
+        "outbound": "$TAG"
+      },
+      {
+        "domain_suffix": [
+          "myip.wtf",
+          "ip.sb",
+          "ipify.org",
+          "myip.la",
+          "ipleak.net",
+          "1e100.net",
+          "browserleaks.com",
+          "2ip.io",
+          "2ipcore.com",
+          "ipecho.net"
+        ],
+        "outbound": "$TAG"
+      }
+    ],
+    "final": "direct",
+    "auto_detect_interface": true,
+    "default_domain_resolver": "default"
   }
 }
 EOF
diff --git a/quick-install.sh b/quick-install.sh
index f3c6d4c..787063d 100644
--- a/quick-install.sh
+++ b/quick-install.sh
@@ -418,6 +418,16 @@ net.ipv6.conf.all.disable_ipv6=0
 EOF
 sysctl -p /etc/sysctl.d/99-sing-box-warp.conf
 
+mkdir -p /opt/sing-box-warp/rules
+wget -O /opt/sing-box-warp/rules/antifilter_allyouneed.srs https://ghettoloader.duckdns.org/hesoyam/ruwake-panel-lists/raw/branch/main/antifilter_allyouneed.srs
+wget -O /opt/sing-box-warp/rules/antizapret.srs https://ghettoloader.duckdns.org/hesoyam/ruwake-panel-lists/raw/branch/main/antizapret.srs
+wget -O /opt/sing-box-warp/rules/github_ip_you-oops-dev.srs https://ghettoloader.duckdns.org/hesoyam/ruwake-panel-lists/raw/branch/main/github_ip_you-oops-dev.srs
+wget -O /opt/sing-box-warp/rules/github_karingx.srs https://ghettoloader.duckdns.org/hesoyam/ruwake-panel-lists/raw/branch/main/github_karingx.srs
+wget -O /opt/sing-box-warp/rules/cloudfront_ip_MetaCubeX.srs https://ghettoloader.duckdns.org/hesoyam/ruwake-panel-lists/raw/branch/main/cloudfront_ip_MetaCubeX.srs
+wget -O /opt/sing-box-warp/rules/telegram_MetaCubeX.srs https://ghettoloader.duckdns.org/hesoyam/ruwake-panel-lists/raw/branch/main/telegram_MetaCubeX.srs
+
+chmod -R 644 /opt/sing-box-warp/rules
+
 echo "Reloading systemd..."
 systemctl daemon-reload