subconverter 订阅转换进阶：自建部署、规则定制与性能优化实战

docker run -d \
  --name subconverter \
  --restart always \
  -p 25500:25500 \
  -v /opt/subconverter:/subconverter \
  tindy2013/subconverter:latest

version: '3'
services:
  subconverter:
    image: tindy2013/subconverter:latest
    container_name: subconverter
    restart: always
    ports:
      - "25500:25500"
    volumes:
      - ./config:/subconverter
    environment:
      - TZ=Asia/Shanghai

docker-compose up -d

docker cp subconverter:/subconverter/pref.toml ./pref.toml

[common]
# 服务监听地址
address = "0.0.0.0"
# 服务端口
port = 25500

[managedconfig]
# 是否开启缓存
enable_cache = true
# 缓存时间（秒）
cache_expire = 3600

[userinfo]
# 流量信息显示
enable_flow = true
enable_expire = true

[emojiflag]
# 节点名添加国旗 emoji
enable = true

server {
    listen 443 ssl http2;
    server_name sub.yourdomain.com;

    ssl_certificate /etc/letsencrypt/live/sub.yourdomain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/sub.yourdomain.com/privkey.pem;

    location / {
        proxy_pass http://127.0.0.1:25500;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

certbot --nginx -d sub.yourdomain.com

[clash_rule_base]
base_path = "config/rule/"

# 自定义 Clash 配置模板
port: 7890
socks-port: 7891
allow-lan: true
mode: rule
log-level: info

dns:
  enable: true
  enhanced-mode: fake-ip
  nameserver:
    - 223.5.5.5
    - 119.29.29.29
  fallback:
    - https://1.1.1.1/dns-query
    - https://8.8.8.8/dns-query

# 代理组定义 - subconverter 会自动填充节点
proxy-groups:
  - name: "🚀 节点选择"
    type: select
    proxies:
      - ♻️ 自动选择
      - 🎯 故障转移
      - 🌍 国外媒体
      - DIRECT

  - name: "♻️ 自动选择"
    type: url-test
    url: "http://www.gstatic.com/generate_204"
    interval: 300
    tolerance: 50

  - name: "🎯 故障转移"
    type: fallback
    url: "http://www.gstatic.com/generate_204"
    interval: 60

  - name: "🌍 国外媒体"
    type: select
    proxies:
      - 🚀 节点选择
      - ♻️ 自动选择

# 分流规则
rules:
  # 流媒体
  - DOMAIN-SUFFIX,netflix.com,🌍 国外媒体
  - DOMAIN-SUFFIX,nflxvideo.net,🌍 国外媒体
  - DOMAIN-SUFFIX,youtube.com,🚀 节点选择
  - DOMAIN-SUFFIX,googlevideo.com,🚀 节点选择
  - DOMAIN-SUFFIX,disney.com,🌍 国外媒体
  - DOMAIN-SUFFIX,hbomax.com,🌍 国外媒体

  # 社交媒体
  - DOMAIN-SUFFIX,twitter.com,🚀 节点选择
  - DOMAIN-SUFFIX,x.com,🚀 节点选择
  - DOMAIN-SUFFIX,telegram.org,🚀 节点选择

  # AI 服务
  - DOMAIN-SUFFIX,openai.com,🚀 节点选择
  - DOMAIN-SUFFIX,anthropic.com,🚀 节点选择
  - DOMAIN-SUFFIX,claude.ai,🚀 节点选择

  # 国内直连
  - DOMAIN-SUFFIX,cn,DIRECT
  - GEOIP,CN,DIRECT

  # 兜底
  - MATCH,🚀 节点选择

[managedconfig]
enable_cache = true
cache_expire = 3600  # 缓存1小时

# docker-compose.yml
version: '3'
services:
  subconverter:
    image: tindy2013/subconverter:latest
    depends_on:
      - redis
    ports:
      - "25500:25500"
    volumes:
      - ./config:/subconverter

  redis:
    image: redis:alpine
    restart: always
    volumes:
      - redis-data:/data

volumes:
  redis-data:

{
  "log": {
    "level": "info"
  },
  "dns": {
    "servers": [
      {"address": "https://dns.alidns.com/dns-query"},
      {"address": "https://1.1.1.1/dns-query", "detour": "proxy"}
    ]
  },
  "inbounds": [
    {
      "type": "tun",
      "interface_name": "singbox-tun",
      "inet4_address": "172.19.0.1/30"
    }
  ],
  "outbounds": [
    {"type": "selector", "tag": "proxy"},
    {"type": "urltest", "tag": "auto"},
    {"type": "direct", "tag": "direct"},
    {"type": "block", "tag": "block"}
  ]
}

[managedconfig]
# 生成 Clash 订阅
clash = "https://sub.yourdomain.com/sub?target=clash&url=SUB_URL&config=TEMPLATE"
# 生成 Sing-Box 订阅
singbox = "https://sub.yourdomain.com/sub?target=singbox&url=SUB_URL&config=TEMPLATE"
# 生成 Surge 订阅
surge = "https://sub.yourdomain.com/sub?target=surge&ver=4&url=SUB_URL&config=TEMPLATE"

# 每 30 分钟刷新一次
*/30 * * * * curl -s "https://sub.yourdomain.com/sub?target=clash&url=你的订阅&config=模板&force_refresh=true" > /dev/null

#!/usr/bin/env python3
import requests
import json
import hashlib

# 配置
SUB_URL = "你的订阅链接"
BOT_TOKEN = "你的Telegram Bot Token"
CHAT_ID = "你的Chat ID"

def get_nodes_hash():
    """获取当前节点列表的哈希值"""
    resp = requests.get(SUB_URL)
    return hashlib.md5(resp.text.encode()).hexdigest()

def send_telegram(message):
    """发送 Telegram 通知"""
    url = f"https://api.telegram.org/bot{BOT_TOKEN}/sendMessage"
    data = {"chat_id": CHAT_ID, "text": message}
    requests.post(url, data=data)

# 读取上次哈希
try:
    with open("/tmp/nodes_hash.txt", "r") as f:
        old_hash = f.read().strip()
except:
    old_hash = ""

# 获取当前哈希
new_hash = get_nodes_hash()

# 对比
if new_hash != old_hash:
    send_telegram("⚠️ 订阅节点有变更！请检查你的节点列表。")
    with open("/tmp/nodes_hash.txt", "w") as f:
        f.write(new_hash)

# 每小时检查一次
0 * * * * python3 /opt/subconverter/check_nodes.py

# 生成密码文件
htpasswd -c /etc/nginx/.htpasswd your_username

# Nginx 配置
location / {
    auth_basic "Restricted";
    auth_basic_user_file /etc/nginx/.htpasswd;
    proxy_pass http://127.0.0.1:25500;
}

# Nginx 限流
limit_req_zone $binary_remote_addr zone=sub:10m rate=10r/m;

location /sub {
    limit_req zone=sub burst=5 nodelay;
    proxy_pass http://127.0.0.1:25500;
}

location / {
    allow 1.2.3.4;      # 你的 IP
    allow 192.168.0.0/16; # 内网
    deny all;
    proxy_pass http://127.0.0.1:25500;
}