log:
  level: error
  production: true
  file: "./mosdns.log"

plugins:
# 定期更新中国域名列表到配置目录
# https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/direct-list.txt
  - tag: cn_domainList
    type: "domain_set"
    args:
      files:
        - "./rules/direct-list.txt"
        - "./rules/custom_for_cndns.txt"

# https://raw.githubusercontent.com/privacy-protection-tools/anti-AD/master/anti-ad-domains.txt
  - tag: block_domains
    type: "domain_set"
    args:
      files:
        - "./rules/anti-ad-domains.txt"
        - "./rules/custom_black_list.txt"

  - tag: custom_world_list
    type: "domain_set"
    args:
      files:
        - "./rules/custom_for_worlddns.txt"
        
  - tag: jp_edns_list
    type: "domain_set"
    args:
      files:
        - "./rules/custom_for_jp_edns.txt"
        
  - tag: us_edns_list
    type: "domain_set"
    args:
      files:
        - "./rules/custom_for_us_edns.txt"

  - tag: ddnslist
    type: "domain_set"
    args:
      files:
        - "./rules/ddnslist.txt"

# 定期更新IP列表到配置目录
# https://raw.githubusercontent.com/Loyalsoldier/geoip/release/text/cn.txt
  - tag: cn_ipList
    type: "ip_set"
    args:
      files:
        - "./rules/cn.txt"

# google support ECS 
  - tag: ecs_DNS
    type: "forward"
    args:
      upstreams:
        - tag: google_doh
          addr: "https://dns.google/dns-query"
          #dial_addr: "8.8.8.8"
          bootstrap: "8.8.8.8"
          #socks5: "127.0.0.1:7890"
          enable_pipeline: true
          insecure_skip_verify: false

        - tag: google_dot
          addr: "tls://dns.google"
          #dial_addr: "8.8.8.8"
          bootstrap: "8.8.8.8"
          #socks5: "127.0.0.1:7890"
          enable_pipeline: true
          insecure_skip_verify: false

# 国外DNS
  - tag: world_DNS
    type: "forward"
    args:
      concurrent: 2
      upstreams:
        - tag: cloudflare_doh
          addr: "https://one.one.one.one/dns-query"
          dial_addr: "1.0.0.1"
          bootstrap: "8.8.8.8"
          #socks5: "127.0.0.1:7890"
          enable_pipeline: true
          insecure_skip_verify: false

        - tag: quad9_dot
          addr: "tls://dns10.quad9.net"
          bootstrap: "8.8.8.8"
          #socks5: "127.0.0.1:7890"
          enable_pipeline: true
          insecure_skip_verify: false

        - tag: opendns_doh
          addr: "https://doh.opendns.com/dns-query"
          bootstrap: "8.8.8.8"
          #socks5: "127.0.0.1:7890"
          enable_pipeline: true
          insecure_skip_verify: false

# 国内DNS
  - tag: cn_DNS
    type: "forward"
    args:
      concurrent: 2
      # 为什么不使用阿里腾讯114等知名DNS？因为它们是根据请求者IP来返回解析结果。
      upstreams:
        - tag: OneDNS
          addr: "udp://52.80.52.52"
          enable_pipeline: true
          insecure_skip_verify: false

        - tag: CNNIC_SDNS
          addr: "udp://1.2.4.8"
          enable_pipeline: true

        - tag: OneDNS_dot
          addr: "tls://dot-pure.onedns.net"
          bootstrap: "223.6.6.6"
          enable_pipeline: true
          insecure_skip_verify: false

        - tag: DNSπ
          addr: "tls://101.226.4.6"
          enable_pipeline: true
          insecure_skip_verify: false

# 国内mosdns请使用DoT、DoH等加密方式
#        - tag: dnspod_doh
#          addr: "https://doh.pub/dns-query"
#          bootstrap: "223.6.6.6"
#          enable_pipeline: true
#          insecure_skip_verify: false

#        - tag: ali_dot
#          addr: "tls://223.5.5.5"
#          insecure_skip_verify: false

  - tag: cn_fallback_DNS
    type: "forward"
    args:
      concurrent: 2
      upstreams:
        - tag: dnspod_doh
          addr: "https://doh.pub/dns-query"
          bootstrap: "223.6.6.6"
          enable_pipeline: true
          insecure_skip_verify: false

        - tag: 360_doh
          addr: "https://doh.360.cn/dns-query"
          enable_pipeline: true

        - tag: ali_dot
          addr: "tls://223.5.5.5"
          insecure_skip_verify: false

        - tag: easymosdns_doh
          addr: "https://doh.apad.pro/dns-query"
          bootstrap: "223.6.6.6"
          enable_pipeline: true
          insecure_skip_verify: false

# cache
  - tag: cache
    type: "cache"
    args:
      size: 65535
      dump_file: "./cache.dump"
      lazy_cache_ttl: 86400
      dump_interval: 600

# hosts
  - tag: custom_hosts
    type: "hosts"
    args:
      files:
        - "./rules/hosts"

# 修改 TTL
  - tag: modify_ddns_ttl
    type: "sequence"
    args:
      - exec: ttl 1-5

  - tag: modify_ttl
    type: "sequence"
    args:
      - exec: ttl 5-10

  - tag: modify_black_ttl
    type: "sequence"
    args:
      - exec: ttl 600-3600

  - tag: modify_resp_ttl
    type: "sequence"
    args:
      - matches: qname $ddnslist
        exec: mark 123   # 123为q-ddns ，456为q-bloke
      - matches: qname $block_domains
        exec: mark 456
      - matches: mark 123
        exec: jump modify_ddns_ttl
      - matches: mark 456
        exec: jump modify_black_ttl
      - matches: 
        - "!mark 123"
        - "!mark 456"
        exec: jump modify_ttl

# 国外解析
  - tag: world_resolve
    type: "sequence"
    args:
      - exec: $world_DNS
      - exec: jump modify_resp_ttl
      - exec: query_summary world_DNS
      - matches: "has_resp"
        exec: accept

# 国内解析
  - tag: cn_resolve
    type: "sequence"
    args:
      - exec: ecs 123.112.0.0
      - exec: $cn_DNS
      - exec: jump modify_resp_ttl
      - exec: query_summary cn_DNS

  - tag: cn_fallback_resolve
    type: "sequence"
    args:
      - exec: ecs 123.112.0.0
      - exec: $cn_fallback_DNS
      - exec: jump modify_resp_ttl
      - exec: query_summary cn_fallback_DNS

# ecs_for_jp github
  - tag: ecs_jp_resolve
    type: "sequence"
    args:
      - exec: ecs 1.5.0.0
      - exec: $ecs_DNS
      - exec: jump modify_resp_ttl
      - exec: query_summary ecs_jp_resolve
      - matches: "has_resp"
        exec: accept

# ecs_for_us
  - tag: ecs_us_resolve
    type: "sequence"
    args:
      - exec: ecs 4.80.0.0
      - exec: $ecs_DNS
      - exec: jump modify_resp_ttl
      - exec: query_summary ecs_us_resolve
      - matches: "has_resp"
        exec: accept

# ecs_for_cn
  - tag: ecs_cn_resolve
    type: "sequence"
    args:
      - exec: ecs 123.112.0.0
      - exec: $ecs_DNS
      - exec: jump modify_resp_ttl
      - exec: query_summary ecs_cn_resolve
      - matches: "has_resp"
        exec: accept

  - tag: match_block_domain
    type: "sequence"
    args:
      - exec: black_hole 127.0.0.1 ::1 0.0.0.0
      - exec: query_summary block_domains

  - tag: custom_hosts_resp
    type: "sequence"
    args:
      - exec: jump modify_resp_ttl
      - matches: "has_resp"
        exec: query_summary custom_hosts
      - matches: "has_resp"
        exec: accept

  - tag: hit_cache_resp
    type: "sequence"
    args:
      - exec: jump modify_resp_ttl
      - matches: "has_resp"
        exec: query_summary hit_cache
      - matches: "has_resp"
        exec: accept

# 拒绝
  - tag: query_is_reject
    type: "sequence"
    args:
      - matches: "qname $block_domains"
        exec: jump match_block_domain
      - matches: qtype 65
        exec: reject 5
      - matches: "has_resp"
        exec: accept

  - tag: fallback_world
    type: "fallback"
    args:
      primary: ecs_cn_resolve    # 主可执行插件的 tag
      secondary: world_resolve   # 副可执行插件的 tag
      threshold: 1500             # 无响应回滚阈值。单位毫秒。默认 500 。
      always_standby: false      # 副可执行插件始终待命。 

  - tag: fallback_cn
    type: "fallback"
    args:
      primary: cn_resolve             # 主可执行插件的 tag
      secondary: cn_fallback_resolve  # 副可执行插件的 tag
      threshold: 2000                 # 无响应回滚阈值。单位毫秒。默认 500 。
      always_standby: false           # 副可执行插件始终待命。 

  - tag: fallback_cn_seq
    type: "sequence"
    args:
      - exec: $fallback_cn
      #- matches: "has_wanted_ans"
      - matches: "resp_ip $cn_ipList"
        exec: accept

  - tag: fallback_world_seq
    type: "sequence"
    args:
      - exec: $fallback_world
      - matches: "has_resp"
        exec: accept

# 解析流程
  - tag: resolve_process
    type: "sequence"
    args:
      - exec: prefer_ipv4
      - exec: $custom_hosts
      - matches: "has_resp"
        exec: goto custom_hosts_resp

      - matches: "!qname $ddnslist"
        exec: $cache
      - matches: "has_resp"
        exec: goto hit_cache_resp

      - matches: "qname $jp_edns_list || github.com"
        exec: jump ecs_jp_resolve
      - matches: "qname $us_edns_list"
        exec: jump ecs_us_resolve
      - matches: "qname $custom_world_list || $ddnslist"
        exec: goto fallback_world_seq
      - exec: jump query_is_reject
      - matches: "qname $cn_domainList"
        exec: jump fallback_cn_seq
 
      - exec: goto fallback_world_seq

# DNS服务
  - tag: udp_server
    type: "udp_server"
    args:
      entry: resolve_process
      listen: "127.0.0.1:53"
  - tag: tcp_server
    type: "tcp_server"
    args:
      entry: resolve_process
      listen: "127.0.0.1:53"
        #cert: "" # 配置 cert 和 key 后会启用 TLS (DoT),别忘记修改为853端口。
        #key:  "" 
        #idle_timeout: 10       # 空连接超时。单位秒。默认 10。

#  - tag: quic_server
#    type: "quic_server"
#    args:
#      entry: resolve_process  # 可执行插件的 tag。
#      listen: "0.0.0.0:853" # 监听地址。
#      cert: ""
#      key:  "" 
#      idle_timeout: 30       # 空连接超时。单位秒。默认 30。

  - tag: server_http
    type: "http_server"
    args:
      entries:                 # []extry
        - path: /dns-query     # 本路径执行
          exec: resolve_process # 可执行插件的 tag。
      src_ip_header: "X-Real-IP"  # 从 HTTP 头获取用户 IP。
      listen: 127.0.0.1:4588 # 监听地址。
      cert: "" # 留空 cert 和 key 后会禁用 TLS。 
      key: ""
      idle_timeout: 10 # 空连接超时。单位秒。默认 30。

version: '3.3'
services:
  py-kms:
    image: 'pykmsorg/py-kms:latest'
    container_name: 'py-kms'
    restart: 'unless-stopped'
    # user: '1000:1000'
    ports:
      - '1688:1688'

version: '3.3'
services:
  kms-server:
    restart: 'unless-stopped'
    network_mode: 'host'
    image: 'dnomd343/kms-server:latest'
    container_name: 'kms-server'
    # user: '1000:1000'
    environment:
      - 'KMS_PORT=1688'  # 自定义端口
      - 'HTTP_PORT=1689'  # 自定义端口

name: CI

# 只监听 master 分支的改动
on:
  push:
    branches:
      - master

# 自定义环境变量
env:
  GIT_USER: xxx  # 改成你自己的 GitHub 用户名
  GIT_EMAIL: xxx@gmail.com  # 改成你自己的 GitHub 注册邮箱
  THEME_REPO: fluid-dev/hexo-theme-fluid
  THEME_BRANCH: master

jobs:
  build:
    name: Build on node ${{ matrix.node_version }} and ${{ matrix.os }}
    runs-on: ubuntu-latest
    strategy:
      matrix:
        os: [ubuntu-latest]
        node_version: [18.x]  # 改成你本地的 Node.js 版本，可以用 `node --version` 命令查询

    steps:                                      
      # 安装nodejs
      - name: Use Node.js ${{ matrix.node_version }}
        uses: actions/setup-node@v3
        with:
          node-version: ${{ matrix.node_version }}
      
      # 安装 Hexo-cli，然后使用hexo init构建hexo文件结构
      - name: Install hexo with dependencies
        run: |
          npm install -g hexo-cli
          hexo init
          npm install hexo-deployer-git --save
          npm install hexo-generator-sitemap --save
          npm install hexo-abbrlink --save
          npm install hexo-generator-feed --save
      
      # 获取博客源码，保存在source文件夹下，与hexo的文件结构一致
      - name: Checkout
        uses: actions/checkout@v3
        with:
          ref: master
          path: source
      
      # 获取主题代码，保存在themes/fluid文件夹下，与hexo的文件结构一致
      - name: Checkout theme repo
        uses: actions/checkout@v3
        with:
          repository: ${{ env.THEME_REPO }}
          ref: ${{ env.THEME_BRANCH }}
          path: themes/fluid

      # 安装依赖
      - name: Install hexo with dependencies      
        run: |
          mv source/_config.fluid.yml _config.fluid.yml
          mv source/_config.yml _config.yml
          mv source/package.json package.json
          mv source/blog.gitignore .gitignore
          npm install

      # 配置环境
      # ssh-kenscan github.com >> ~/.ssh/known_hosts   # 从 GitHub 获取公钥并保存到 known_hosts 文件
      - name: Configuration environment
        env:
          HEXO_DEPLOY_PRI: ${{secrets.HEXO_DEPLOY_PRI}}
        run: |
          sudo timedatectl set-timezone "Asia/Shanghai"
          mkdir -p ~/.ssh/
          echo "$HEXO_DEPLOY_PRI" > ~/.ssh/id_rsa
          chmod 600 ~/.ssh/id_rsa
          ssh-keyscan github.com >> ~/.ssh/known_hosts          
          git config --local user.name "github-actions[bot]"
          git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"

      # 生成并部署
      - name: Deploy hexo
        run: |
          ls -a
          pwd
          hexo clean
          hexo g -d
          ls -a

      # 部署后更新博客源码，用于添加 abbrlink，如果不用 abbrlink，需要删除
      - name: Update Blog
        run: |
          cp _config.fluid.yml source/_config.fluid.yml
          cp _config.yml source/_config.yml 
          cp package.json source/package.json
          cp .gitignore source/blog.gitignore
          sh "${GITHUB_WORKSPACE}/source/.github/script/blog-update.sh"

deploy:
  type: 'git'
  repository: git@github.com:用户名/blog-web.git
  branch: main

version: "3"
services:
  paste-bin:
    image: ghcr.io/enchant97/hasty-paste:latest
    container_name: hasty-paste
    restart: unless-stopped
    user: root  # 可选：(root同0:0) 1000:1000 
    ports:
      - 127.0.0.1:4579:8000 
    volumes:
      - /home/<username>/hasty-paste/data:/app/data
    environment:
      #- "ENABLE_PUBLIC_LIST=true"  # 如果使用反向代理设置了安全访问则可以开启
      - "TIME_ZONE=Asia/Shanghai"

version: '3.3'
services:
  pandora:
    container_name: 'pandora'
    image: 'pengzhile/pandora:latest'
    restart: 'unless-stopped'
    user: '1000:1000'
    environment:
      - 'PANDORA_CLOUD=cloud'
      - 'PANDORA_SERVER=0.0.0.0:3001'
    ports:
      - '127.0.0.1:3001:3001'
    volumes:
      - '/home/<username>/pandora/data:/data'

# 自动生成sitemap
sitemap:
  path: sitemap.xml
#baidusitemap:
#  path: baidusitemap.xml
  
# hexo-abbrlink
abbrlink:
  alg: crc16      #support crc16(default) and crc32
  rep: dec        #support dec(default) and hex
  drafts: false   #(true)Process draft,(false)Do not process draft. false(default) 
  # Generate categories from directory-tree
  # depth: the max_depth of directory-tree you want to generate, should > 0
  auto_category:
     enable: true  #true(default)
     depth:        #3(default)
     over_write: false 
  auto_title: false #enable auto title, it can auto fill the title by path
  auto_date: false #enable auto date, it can auto fill the date by time today
  force: false #enable force mode,in this mode, the plugin will ignore the cache, and calc the abbrlink for every post even it already had abbrlink. This only updates abbrlink rather than other front variables.

permalink: posts/:abbrlink/ 
# or
permalink: posts/:abbrlink.html

# permalink_pinyin
permalink_pinyin:
  enable: true
  separator: '-' # default: '-'

# Extensions
plugins:
  hexo-generator-feed
# 添加 RSS 订阅
feed:
  enable: true
  type: atom
  path: atom.xml
  limit: 30
  hub:
  content:
  content_limit: 140
  content_limit_delim: " "
  order_by: -date

# Minifier
all_minifier: true

version: '3.3'
services:
  thelounge:
    container_name: 'thelounge'
    restart: 'unless-stopped'
    image: 'thelounge/thelounge:latest'
    # user: '1000:1000'
    ports:
      - '127.0.0.1:11111:9000'
    volumes:
      - '/home/<username>/thelounge:/var/opt/thelounge'