nft_to:
  - to: nginx
    proto: tcp
    port: [80,443]
  - to: nfs
    proto: [tcp,udp]
    port: [2049,111,32765,32767]
  - to: [zone:eth0.10,zone:eth0.11,zone:eth0.12]
    proto: tcp
    port: 22
  - to: [xiawrt,rbpi4]
    proto: tcp
    port: 22

nft_dst:
  - iface: eth1
    proto: tcp
    port: [3783,4321,28900,29900,29901]
  - iface: eth1
    proto: udp
    port: [6500,6515,13139,27900]

nft_from:
  - iface: eth1
    proto: tcp
    port: [3783,4321,28900,29900,29901]
  - iface: eth1
    proto: udp
    port: [6500,6515,13139,27900]

xray_policy:
  - bypass: private
  - bypass: russian_whitelist
  - proxy: all