mirror of
https://github.com/kiddin9/op-packages.git
synced 2026-11-13 20:08:05 +08:00
57 lines
2.7 KiB
Plaintext
57 lines
2.7 KiB
Plaintext
config meow 'main'
|
|
# Set to '1' to start meow at boot and via /etc/init.d/meow start.
|
|
option enabled '0'
|
|
# meow YAML configuration (proxies, rules, DNS, listeners, ...).
|
|
option config_file '/etc/meow/config.yaml'
|
|
# Working directory for GeoIP databases, caches, downloaded rulesets.
|
|
option work_dir '/etc/meow'
|
|
# Port of the REST API / built-in web panel. Passed to meow as
|
|
# `--ext-ctl 0.0.0.0:<port>`, overriding `external-controller` in the YAML.
|
|
option panel_port '9090'
|
|
# A random API secret is generated on install. Empty binds to loopback only.
|
|
# When non-empty it is passed as `--secret`, overriding
|
|
# `secret:` in the YAML; LuCI uses it to talk to the API and the panel.
|
|
option secret ''
|
|
|
|
# Transparent proxy for forwarded LAN traffic (gateway / side-router mode).
|
|
# Loads an nftables table `inet meow_gateway` that hands traffic arriving on
|
|
# the LAN interface to meow's tproxy listener and hijacks DNS to meow's
|
|
# resolver. The YAML config must declare a matching non-loopback tproxy
|
|
# listener and DNS listener (the shipped default config does).
|
|
config transparent 'tproxy'
|
|
option enabled '0'
|
|
# 'tproxy': REDIRECT for TCP + kernel TPROXY for UDP. 'redirect': TCP only.
|
|
option mode 'tproxy'
|
|
# Logical OpenWrt interface whose clients are proxied.
|
|
option interface 'lan'
|
|
# Port of the `type: tproxy` listener in the YAML config.
|
|
option tproxy_port '7893'
|
|
# Redirect LAN DNS (port 53, any resolver) to meow's DNS listener.
|
|
option dns_hijack '1'
|
|
# Port of meow's DNS listener (`dns.listen` in the YAML config).
|
|
option dns_port '1053'
|
|
# Also proxy IPv6. Off by default: fake-ip suppresses AAAA.
|
|
option ipv6 '0'
|
|
# Extra destination CIDRs that bypass the proxy (besides reserved ranges).
|
|
# list bypass '203.0.113.0/24'
|
|
# LAN client MACs whose traffic bypasses the proxy entirely (no capture, no
|
|
# DNS hijack). Managed from LuCI (Services -> meow -> Clients).
|
|
# list bypass_mac 'aa:bb:cc:dd:ee:ff'
|
|
|
|
# ARP-based client steering (side-router / gateway mode). For SELECTED clients,
|
|
# periodically announce this device as the LAN gateway so their traffic is
|
|
# transparently proxied without per-client config. This is ARP spoofing: use it
|
|
# only for devices you administer on a network you control. OFF by default; only
|
|
# the MACs listed here are ever touched. Managed from LuCI (Services -> meow ->
|
|
# Clients). Uses meow's built-in unicast ARP sender.
|
|
config arp_hijack 'arp'
|
|
option enabled '0'
|
|
# LAN interface whose clients are steered.
|
|
option interface 'lan'
|
|
# Gateway IP to impersonate. Empty = this interface's real gateway.
|
|
option gateway ''
|
|
# Seconds between ARP announcements (caches expire, so we re-announce).
|
|
option interval '2'
|
|
# Selected client MACs (one per line). Managed from the Clients tab.
|
|
# list client 'aa:bb:cc:dd:ee:ff'
|