update

6 files changed, 59 insertions, 34 deletions

diff --git a/.SRCINFO b/.SRCINFO
index c04a6e18d6e7..35a44a1f6c27 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,18 +1,20 @@
 pkgbase = clash-meta-bin
-	pkgdesc = Clash Meta binary provided by MetaCubeX
-	pkgver = 1.10.0
-	pkgrel = 2
+	pkgdesc = Another Clash Kernel by MetaCubeX
+	pkgver = 1.11.1
+	pkgrel = 1
 	url = https://github.com/MetaCubeX/Clash.Meta
 	install = clash-meta-bin.install
 	arch = x86_64
 	license = unknown
 	depends = glibc
 	provides = clash-meta
-	source = clash-meta-bin-v1-1.10.0.gz::https://github.com/MetaCubeX/Clash.Meta/releases/download/v1.10.0/Clash.Meta-linux-amd64v1-v1.10.0.gz
+	source = clash-meta-bin-amd64v1-v1.11.1.gz::https://github.com/MetaCubeX/Clash.Meta/releases/download/v1.11.1/Clash.Meta-linux-amd64v1-v1.11.1.gz
 	source = clash-meta.service
+	source = clash-meta@.service
 	source = config.yaml
-	sha256sums = 3fcce7982c32bab135334e9a53cb0ec9e53f1766af626b0c2c50023c815969e4
-	sha256sums = 83377618a3b381348f274f48bc40e2ba8b17a4f17dc8e9f5b16d76404c34ae8d
-	sha256sums = 8fe0a2163ef5a1ac6ab0692921816187350d05d5f1cc4613080d7facb36eedc8
+	sha256sums = 0ece1323c05a4480c1ca56fd29a029e87e1f3f35639aaef68b7e5dd297890a9c
+	sha256sums = 9e8a28e22c159d7d70c258b65f47bc734543e54cb0cd3957ce19349aca145af8
+	sha256sums = 29c73ac66d6fe60bea4359ac1857e3452f26c2af792efd8dd16d558462472efb
+	sha256sums = 2c78744f372190f397bee787a9f287032a4d76505f1740a6bfe79035757d1f86
 
 pkgname = clash-meta-bin
diff --git a/.gitignore b/.gitignore
index 475c2e94dfac..9dfb08fbcd18 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,6 +5,6 @@
 !.gitignore
 !PKGBUILD
 !.SRCINFO
-!clash-meta.service
-!clash-meta-bin.install
-!config.yaml
\ No newline at end of file
+!*.service
+!*.install
+!*.yaml
\ No newline at end of file
diff --git a/PKGBUILD b/PKGBUILD
index fb174e142d4d..9ea2437051cc 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,9 +1,9 @@
-## Maintainer: adiprasetya <ignilium.inc@gmail.com>
+# Maintainer: adiprasetya <ignilium.inc@gmail.com>
 
 pkgname=clash-meta-bin
-pkgver=1.10.0
-pkgrel=2
-pkgdesc="Clash Meta binary provided by MetaCubeX"
+pkgver=1.11.1
+pkgrel=1
+pkgdesc="Another Clash Kernel by MetaCubeX"
 arch=("x86_64")
 url="https://github.com/MetaCubeX/Clash.Meta"
 license=("unknown")
@@ -19,16 +19,19 @@ backup=()
 options=()
 install=${pkgname}.install
 changelog=
-source=("${pkgname}-v1-${pkgver}.gz::${url}/releases/download/v${pkgver}/Clash.Meta-linux-amd64v1-v${pkgver}.gz"
+source=("${pkgname}-amd64v1-v${pkgver}.gz::${url}/releases/download/v${pkgver}/Clash.Meta-linux-amd64v1-v${pkgver}.gz"
         "clash-meta.service"
+        "clash-meta@.service"
         "config.yaml")
-sha256sums=('3fcce7982c32bab135334e9a53cb0ec9e53f1766af626b0c2c50023c815969e4'
-            '83377618a3b381348f274f48bc40e2ba8b17a4f17dc8e9f5b16d76404c34ae8d'
-            '8fe0a2163ef5a1ac6ab0692921816187350d05d5f1cc4613080d7facb36eedc8')
+sha256sums=('0ece1323c05a4480c1ca56fd29a029e87e1f3f35639aaef68b7e5dd297890a9c'
+            '9e8a28e22c159d7d70c258b65f47bc734543e54cb0cd3957ce19349aca145af8'
+            '29c73ac66d6fe60bea4359ac1857e3452f26c2af792efd8dd16d558462472efb'
+            '2c78744f372190f397bee787a9f287032a4d76505f1740a6bfe79035757d1f86')
 
 package() {
-    cd ${srcdir}
-    install -Dm755 "${pkgname}-v1-${pkgver}" "${pkgdir}/usr/bin/clash-meta"
-    install -Dm644 config.yaml "${pkgdir}"/etc/clash-meta/config.yaml
+    cd "${srcdir}"
+    install -Dm755 "${pkgname}-amd64v1-v${pkgver}" "${pkgdir}/usr/bin/clash-meta"
+    install -Dm644 "config.yaml" "${pkgdir}/etc/clash-meta/config.yaml"
     install -Dm644 "clash-meta.service" "${pkgdir}/usr/lib/systemd/system/clash-meta.service"
+    install -Dm644 "clash-meta@.service" "${pkgdir}/usr/lib/systemd/system/clash-meta@.service"
 }
diff --git a/clash-meta.service b/clash-meta.service
index dbb5d05c49d9..6720d68ed22e 100644
--- a/clash-meta.service
+++ b/clash-meta.service
@@ -1,11 +1,13 @@
 [Unit]
-Description=A rule based proxy in Go.
-After=network.target
+Description=Clash-Meta Daemon, Another Clash Kernel.
+After=network.target NetworkManager.service systemd-networkd.service iwd.service
 
 [Service]
 Type=exec
+CapabilityBoundingSet=cap_net_admin
+AmbientCapabilities=cap_net_admin
 Restart=on-abort
 ExecStart=/usr/bin/clash-meta -d /etc/clash-meta
 
 [Install]
-WantedBy=default.target
+WantedBy=multi-user.target
diff --git a/clash-meta@.service b/clash-meta@.service
new file mode 100644
index 000000000000..04a35a155ab6
--- /dev/null
+++ b/clash-meta@.service
@@ -0,0 +1,14 @@
+[Unit]
+Description=Clash-Meta Daemon, Another Clash Kernel.
+After=network.target NetworkManager.service systemd-networkd.service iwd.service
+
+[Service]
+Type=exec
+User=%i
+CapabilityBoundingSet=cap_net_admin
+AmbientCapabilities=cap_net_admin
+Restart=on-abort
+ExecStart=/usr/bin/clash-meta
+
+[Install]
+WantedBy=multi-user.target
diff --git a/config.yaml b/config.yaml
index 913cc381fd15..5713c124e20c 100644
--- a/config.yaml
+++ b/config.yaml
@@ -1,7 +1,8 @@
+# ipv6: false # When set to false, resolver won't translate hostnames to IPv6 addresses
+# tcp-concurrent: true # default false
+# geodata-mode: true
 # external-controller: 127.0.0.1:9090
 # external-ui: dashboard
-# ipv6: false # When set to false, resolver won't translate hostnames to IPv6 addresses
-# interface-name: 
 
 dns:
   enable: true
@@ -10,7 +11,7 @@ dns:
 
   # These nameservers are used to resolve the DNS nameserver hostnames below.
   # Specify IP addresses only
-  enhanced-mode: redir-host # or fake-ip
+  enhanced-mode: fake-ip # redir-host # (not recommended)
   # fake-ip-range: 198.18.0.1/16 # Fake IP addresses pool CIDR
   # use-hosts: true # lookup hosts and return IP record
   
@@ -23,12 +24,13 @@ dns:
   
   # Supports UDP, TCP, DoT, DoH. You can specify the port to connect to.
   # All DNS questions are sent directly to the nameserver, without proxies
-  # involved. Clash answers the DNS question with the first result gathered.
+  # involved. Clash answers the DNS question with the first result gathered. 
   nameserver:
-    - 1.1.1.1 # default value
-    - 1.0.0.1 # default value
-    - tls://one.one.one.one # DNS over TLS
+    - tls://1dot1dot1dot1.cloudflare-dns.com # DNS over TLS
     - https://1.1.1.1/dns-query # DNS over HTTPS
+    - 1.1.1.1 # Cloudflare
+    - 1.0.0.1 # Cloudflare
+
   # When `fallback` is present, the DNS server will send concurrent requests
   # to the servers in this section along with servers in `nameservers`.
   # The answers from fallback servers are used when the GEOIP country
@@ -59,8 +61,10 @@ dns:
 # Enable the TUN listener
 tun:
   enable: true
-  stack: gvisor # or system
-  dns-hijack: 
-    - 198.18.0.1:53 # when `fake-ip-range` is 198.18.0.1/16, should hijack 198.18.0.2:53
+  stack: system # or gvisor
+  device: Meta
+  dns-hijack:
+    - any:53
   auto-route: true # auto set global route
+  auto-detect-interface: true # conflict with interface-name