From 07932ea299360f18a8db2fc0974a61af19da3c37 Mon Sep 17 00:00:00 2001
From: oruke <orukefeng@gmail.com>
Date: Thu, 30 Apr 2026 10:46:18 +0800
Subject: [PATCH] =?UTF-8?q?fix(clash):=20Google=20=E8=A7=84=E5=88=99?=
 =?UTF-8?q?=E7=A7=BB=E5=88=B0=20reject=20=E4=B9=8B=E5=89=8D=EF=BC=8C?=
 =?UTF-8?q?=E4=BF=AE=E5=A4=8D=20OAuth=20=E7=99=BB=E5=BD=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Google OAuth 所需域名可能被 Loyalsoldier reject 列表误拦截
(旧配置用的 GEOSITE,category-ads-all 较小，没这个问题)
将 DOMAIN-KEYWORD,google 等规则提前到 reject 之前，
确保所有 Google 域名先被捕获走代理
---
 clash/config.yaml | 23 +++++++++++------------
 1 file changed, 11 insertions(+), 12 deletions(-)

diff --git a/clash/config.yaml b/clash/config.yaml
index 691b09f..bb21561 100644
--- a/clash/config.yaml
+++ b/clash/config.yaml
@@ -481,18 +481,7 @@ rules:
   - PROCESS-NAME,tailscaled,DIRECT
   - RULE-SET,tailscale-custom,Tailscale
 
-  # ─── 广告拦截 ───
-  - RULE-SET,reject,REJECT
-
-  # ─── 直连 (局域网、国内) ───
-  - RULE-SET,private,DIRECT
-  - RULE-SET,lancidr,DIRECT
-  - RULE-SET,cncidr,DIRECT
-  - RULE-SET,direct,DIRECT
-  - RULE-SET,direct-custom,DIRECT
-
-  # ─── Google 全家桶 (IP一致性！登录要求所有Google域名走同一节点) ───
-  # 必须在 AI 规则之前，否则 aistudio/gemini 走 AI 组而 accounts 走 Google 组 → 登录失败
+  # ─── Google 全家桶 (必须在 reject 之前！reject 可能误拦 OAuth 需要的域名) ───
   - DOMAIN-KEYWORD,google,Google
   - DOMAIN-SUFFIX,googleapis.com,Google
   - DOMAIN-SUFFIX,gstatic.com,Google
@@ -503,6 +492,16 @@ rules:
   - DOMAIN-SUFFIX,ytimg.com,Google
   - DOMAIN-SUFFIX,youtu.be,Google
 
+  # ─── 广告拦截 ───
+  - RULE-SET,reject,REJECT
+
+  # ─── 直连 (局域网、国内) ───
+  - RULE-SET,private,DIRECT
+  - RULE-SET,lancidr,DIRECT
+  - RULE-SET,cncidr,DIRECT
+  - RULE-SET,direct,DIRECT
+  - RULE-SET,direct-custom,DIRECT
+
   # ─── AI 服务 (非Google的AI：OpenAI/Claude/Copilot等) ───
   - RULE-SET,ai-services,AI
   - RULE-SET,openai,AI