From e8ea1d3387f23230ae6342125ec7ddeae740f5eb Mon Sep 17 00:00:00 2001
From: action <actions@github.com>
Date: Sat, 30 May 2026 14:42:30 +0800
Subject: [PATCH] update 2026-05-30 14:42:30

---
 luci-app-passwall/luasrc/passwall/util_xray.lua | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/luci-app-passwall/luasrc/passwall/util_xray.lua b/luci-app-passwall/luasrc/passwall/util_xray.lua
index 91ee732f..c6e654e3 100644
--- a/luci-app-passwall/luasrc/passwall/util_xray.lua
+++ b/luci-app-passwall/luasrc/passwall/util_xray.lua
@@ -413,6 +413,13 @@ function gen_outbound(flag, node, tag, proxy_table)
 
 		if node.protocol == "wireguard" then
 			result.settings.kernelMode = false
+			if node.finalmask and node.finalmask ~= "" then
+				local ok, fm = pcall(jsonc.parse, api.base64Decode(node.finalmask))
+				if ok and type(fm) == "table" then
+					result.streamSettings = result.streamSettings or {}
+					result.streamSettings.finalmask = fm
+				end
+			end
 		end
 
 		local alpn = {}