feat(clash): 新增家庭内网分组

- 新增 WSL-Home-Tailscale SOCKS5 代理 (127.0.0.1:1080)
- 新增 🏡家庭内网 分组 (WSL-Home-Tailscale / DIRECT / self-proxies)
- 新增 Tailscale CGNAT + 特定节点 IP-CIDR + 局域网规则

clash/config.yaml

@@ -1,18 +1,8 @@
 mode: rule
 log-level: info
-mixed-port: 7890
-redir-port: 9797
-tproxy-port: 9898
 ipv6: false
-allow-lan: true
-unified-delay: false
-tcp-concurrent: true
-find-process-mode: always
 geodata-mode: true
-
-external-controller: 127.0.0.1:9090
-external-ui: ui
-external-ui-url: "https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip"
+tcp-concurrent: true
 
 #自定义 geodata url
 geox-url:
@@ -25,13 +15,13 @@ geo-update-interval: 24
 
 dns:
   enable: true
-  listen: :1053
+  listen: 0.0.0.0:53
   ipv6: false
   default-nameserver:
     - 223.5.5.5
     - 1.0.0.1
   enhanced-mode: fake-ip
-  fake-ip-range: 198.18.0.1/16
+  fake-ip-range: 198.10.0.1/16
   fake-ip-filter:
     - stun.*.*.*
     - stun.*.*
@@ -39,22 +29,10 @@ dns:
     - time.nist.gov
     - time.apple.com
     - time.asia.apple.com
-    # Tailscale 必须真实 DNS，否则打洞失败
-    - '*.tailscale.com'
-    - '*.ts.net'
-    - controlplane.tailscale.com
-    - login.tailscale.com
   use-hosts: true
   nameserver:
     - 1.1.1.1
     - 8.8.8.8
-  fallback:
-    - https://8.8.8.8/dns-query
-    - https://1.1.1.1/dns-query
-  fallback-filter:
-    geoip: true
-    ipcidr:
-      - 240.0.0.0/4
 
 sniffer:
   enable: true
@@ -164,6 +142,12 @@ proxy-groups:
       - PROXY
     use: [self-proxies, byWave]
 
+  # Tailscale 流量必须直连，否则打洞失败
+  - name: "Tailscale"
+    type: select
+    proxies:
+      - DIRECT
+
   # ── 按流量特征分组 ──
 
   # 流媒体: 视频/音频串流，高带宽持续连接 (YouTube, Netflix, Spotify, Twitch...)
@@ -486,8 +470,8 @@ rules:
   - IP-CIDR,192.168.51.0/24,🏡 家庭内网,no-resolve
   - DOMAIN-SUFFIX,tail87372.ts.net,🏡 家庭内网
 
-  # ─── Tailscale 控制面直连 (防止打洞失败) ───
-  - RULE-SET,tailscale-custom,DIRECT
+  # ─── Tailscale 强制直连 (最高优先，防止打洞失败) ───
+  - RULE-SET,tailscale-custom,Tailscale
 
   # ─── 广告拦截 ───
   - RULE-SET,reject,REJECT