diff --git a/clash/config.yaml b/clash/config.yaml
index 48fb6fa..e3a15b3 100644
--- a/clash/config.yaml
+++ b/clash/config.yaml
@@ -5,6 +5,19 @@ geodata-mode: true
 tcp-concurrent: true
 find-process-mode: always
 
+tun:
+  enable: true
+  stack: mixed
+  auto-route: true
+  strict-route: false
+  route-exclude-address:
+    # 局域网排除 — 让外部设备能直接访问本机服务
+    - 192.168.0.0/16
+    - 10.0.0.0/8
+    - 172.16.0.0/12
+    # Tailscale 网段 — 已通过 PROCESS-NAME,tailscaled 直连
+    - 100.64.0.0/10
+
 #自定义 geodata url
 geox-url:
   geoip: "https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip.dat"