Yet another config for Surge.app

README.md

Install

1. Modify index.txt with your output path and proxy info
2. Use Text Builder to build configuration for Surge: $ text-builder -index /path/to/index.txt
3. Import configuration via AirDrop/iTunes/Dropbox/iCloud

general.txt

# used by Surge for Mac
interface = 127.0.0.1
port = 8800
loglevel = warning
bypass = 192.168.0.0/16, 10.0.0.0/8, 172.0.0.0/8, 17.0.0.0/8, localhost, *.local, e.crashlytics.com

index.txt

#output /Users/janlay/Library/Mobile Documents/com~apple~CloudDocs/Surge.conf
[General]
#include https://gist.github.com/janlay/b57476c72a93b7e622a6/raw/general.txt

[Proxy]
# Use your own proxy info here
Proxy = http, 1.2.3.4, 1234

[Rule]
#include https://gist.github.com/janlay/b57476c72a93b7e622a6/raw/rules-app-blockers.txt
#include https://gist.github.com/janlay/b57476c72a93b7e622a6/raw/rules-main.txt
#include https://gist.github.com/janlay/b57476c72a93b7e622a6/raw/rules-apps.txt
#include https://gist.github.com/janlay/b57476c72a93b7e622a6/raw/rules-lan.txt
#include https://gist.github.com/janlay/b57476c72a93b7e622a6/raw/rules-final.txt

rules-app-blockers.txt

# Block privacy tracker within apps
DOMAIN, ads.mopub.com, REJECT
DOMAIN, cpro.baidu.com, REJECT
DOMAIN, monitor.uu.qq.com, REJECT
DOMAIN, pagead2.googlesyndication.com, REJECT
DOMAIN, pingma.qq.com, REJECT
DOMAIN, stat.m.jd.com, REJECT
DOMAIN-KEYWORD, cnzz, REJECT
DOMAIN-KEYWORD, flurry.co, REJECT
DOMAIN-KEYWORD, umeng.co, REJECT
DOMAIN-SUFFIX, 127.net, REJECT
DOMAIN-SUFFIX, applovin.com, REJECT
DOMAIN-SUFFIX, beacon.qq.com, REJECT
DOMAIN-SUFFIX, doubleclick.net, REJECT
DOMAIN-SUFFIX, mmstat.com, REJECT
DOMAIN-SUFFIX, mob.com, REJECT
DOMAIN-SUFFIX, sponsorpay.com, REJECT
DOMAIN-SUFFIX, youmi.net, REJECT

# Prevent stream services from displaying ads
DOMAIN, ad.api.3g.youku.com, REJECT
DOMAIN, agn.aty.sohu.com, REJECT
DOMAIN, ark.letv.com, REJECT
DOMAIN, asimgs.pplive.cn, REJECT
DOMAIN, atm.youku.com, REJECT
DOMAIN, lives.l.qq.com, REJECT

# Disable customized fonts
DOMAIN, fonts.googleapis.com, REJECT
# Prevent sniffer from a public WiFi
DOMAIN, init.icloud-analysis.com, REJECT

rules-apps.txt

# Workaround for some apps
# Instagram
DOMAIN-KEYWORD, instagram, Proxy, force-remote-dns
# SeekingAlpha
DOMAIN-SUFFIX, seekingalpha.com, DIRECT
# Telegram
IP-CIDR, 109.239.140.0/24, Proxy, no-resolve
IP-CIDR, 149.154.160.0/20, Proxy, no-resolve
IP-CIDR, 91.108.4.0/22, Proxy, no-resolve
IP-CIDR, 91.108.56.0/22, Proxy, no-resolve

rules-final.txt

# Detect local network
GEOIP, CN, DIRECT
# Use proxy for all others
FINAL, Proxy

rules-lan.txt

# Reserved networks, debugging rules should place above this line
IP-CIDR, 10.0.0.0/8, DIRECT
IP-CIDR, 100.64.0.0/10, DIRECT
IP-CIDR, 127.0.0.0/8, DIRECT
IP-CIDR, 172.0.0.0/8, DIRECT
IP-CIDR, 192.168.0.0/16, DIRECT

rules-main.txt

DOMAIN-SUFFIX, cn, DIRECT
DOMAIN-KEYWORD, ali, DIRECT
DOMAIN-KEYWORD, taobao, DIRECT
DOMAIN-KEYWORD, 360, DIRECT
DOMAIN-KEYWORD, baidu, DIRECT
DOMAIN-SUFFIX, 126.net, DIRECT
DOMAIN-SUFFIX, 163.com, DIRECT
DOMAIN-SUFFIX, gtimg.com, DIRECT
DOMAIN-SUFFIX, jd.com, DIRECT
DOMAIN-SUFFIX, netease.com, DIRECT
DOMAIN-SUFFIX, qq.com, DIRECT

# Some services are available locally
DOMAIN-SUFFIX, ls.apple.com, DIRECT
DOMAIN-SUFFIX, itunes.apple.com, DIRECT
DOMAIN-SUFFIX, dl.google.com, DIRECT

# Apple services
DOMAIN-SUFFIX, apple.com, Proxy
DOMAIN-SUFFIX, icloud.com, Proxy
DOMAIN-SUFFIX, mzstatic.com, Proxy
DOMAIN-KEYWORD, aka, Proxy

# Streaming services, comment out if you don't need
DOMAIN-KEYWORD, qiyi, DIRECT
DOMAIN-KEYWORD, sohu, DIRECT

# Force some domains which are fucked by GFW while resolving DNS
DOMAIN-KEYWORD, facebook, Proxy, force-remote-dns
DOMAIN-KEYWORD, gmail, Proxy, force-remote-dns
DOMAIN-KEYWORD, google, Proxy, force-remote-dns
DOMAIN-KEYWORD, twitter, Proxy, force-remote-dns
DOMAIN-KEYWORD, youtube, Proxy, force-remote-dns
DOMAIN-SUFFIX, twimg.com, Proxy, force-remote-dns