chore: update flake

Author: xvzc

docs/user-guide/examples.md

@@ -34,19 +34,19 @@ Route traffic differently based on the domain or IP address.
     # Block ads
     [[policy.overrides]]
         name = "block ads"
-        match = { domain = "ads.example.com" }
+        match = { domain = ["ads.example.com"] }
         block = true
 
     # Bypass DPI for specific blocked site
     [[policy.overrides]]
         name = "unblock site"
-        match = { domain = "blocked-site.com" }
+        match = { domain = ["blocked-site.com"] }
         https = { fake-count = 7, disorder = true }
 
     # Use local network directly (no processing)
     [[policy.overrides]]
         name = "local bypass"
-        match = { cidr = "192.168.0.0/16", port = "all" }
+        match = { addr = [{ cidr = "192.168.0.0/16", port = "all" }] }
         https = { skip = true }
 ```
 

docs/user-guide/policy.md

@@ -72,13 +72,19 @@ The `[policy]` section contains an array of `overrides` tables. Each override ru
 
 ### Match Criteria (`match`)
 
-You must specify either a `domain` or a `cidr` (with `port`).
+You can specify a `domain` list or an `addr` list (containing `cidr` and `port`).
 
 | Field    | Type   | Description                                                                 |
 | :------- | :----- | :-------------------------------------------------------------------------- |
-| `domain` | String | Domain pattern. Supports wildcards (`*`, `**`).                             |
-| `cidr`   | String | IP range in CIDR notation (e.g., `192.168.0.0/24`). Requires `port` to be set. |
-| `port`   | String | Port or port range (e.g., `80`, `80-443`, `all`). Required if `cidr` is used. |
+| `domain` | Array  | List of domain patterns. Supports wildcards (`*`, `**`).                    |
+| `addr`   | Array  | List of address rules. Each rule requires `cidr` and `port`.                |
+
+#### Address Rule (`addr`)
+
+| Field  | Type   | Description                                                                 |
+| :----- | :----- | :-------------------------------------------------------------------------- |
+| `cidr` | String | IP range in CIDR notation (e.g., `192.168.0.0/24`).                         |
+| `port` | String | Port or port range (e.g., `80`, `80-443`, `all`).                          |
 
 ### DNS Override (`dns`)
 
@@ -113,20 +119,20 @@ Customize how HTTPS connections are established. The available fields mirror the
     [[policy.overrides]]
         name = "allow youtube"
         priority = 50
-        match = { domain = "*.youtube.com" }
+        match = { domain = ["*.youtube.com"] }
         https = { disorder = true, fake-count = 7 }
 
     # Example B: Bypass DPI for local network traffic (Standard Connection)
     [[policy.overrides]]
         name = "skip local"
         priority = 51
-        match = { cidr = "192.168.0.0/24", port = "all" }
+        match = { addr = [{ cidr = "192.168.0.0/24", port = "all" }] }
         https = { skip = true }
 
     # Example C: Block a specific domain
     [[policy.overrides]]
         name = "block ads"
         priority = 100
-        match = { domain = "ads.example.com" }
+        match = { domain = ["ads.example.com"] }
         block = true
 ```

flake.nix

@@ -6,30 +6,38 @@
     flake-utils.url = "github:numtide/flake-utils";
   };
 
-  outputs = { self, nixpkgs, flake-utils }: flake-utils.lib.eachDefaultSystem (
-    system: let
-      pkgs = nixpkgs.legacyPackages.${system};
-    in {
-      packages.default = pkgs.buildGoModule {
-        pname = "spoofdpi";
-        version = "dev";
-        src = self;
-        vendorHash = "sha256-WqIAE5j3pqyGg5fdA75h9r40QB/lLQO7lgJyI3P7Jgk=";
-        subPackages = [ "cmd/spoofdpi" ];
-        buildInputs = pkgs.lib.optionals pkgs.stdenv.isDarwin [ pkgs.libpcap ];
-        env.CGO_ENABLED = if pkgs.stdenv.isLinux then "0" else "1";
-        ldflags = [
-          "-s"
-          "-w"
-          "-X main.build=flake"
-          "-X main.commit=${self.shortRev or "dirty"}"
-        ];
-        meta = {
-          description = "Simple and fast anti-censorship tool written in Go";
-          homepage = "https://github.com/xvzc/SpoofDPI";
-          license = pkgs.lib.licenses.asl20;
+  outputs =
+    {
+      self,
+      nixpkgs,
+      flake-utils,
+    }:
+    flake-utils.lib.eachDefaultSystem (
+      system:
+      let
+        pkgs = nixpkgs.legacyPackages.${system};
+      in
+      {
+        packages.default = pkgs.buildGoModule {
+          pname = "spoofdpi";
+          version = "dev";
+          src = self;
+          vendorHash = "sha256-FcepbOIB3CvHmTPiGWXukPg41uueQQYdZeVKmzjRuwA=";
+          subPackages = [ "cmd/spoofdpi" ];
+          buildInputs = pkgs.lib.optionals pkgs.stdenv.isDarwin [ pkgs.libpcap ];
+          env.CGO_ENABLED = if pkgs.stdenv.isLinux then "0" else "1";
+          ldflags = [
+            "-s"
+            "-w"
+            "-X main.build=flake"
+            "-X main.commit=${self.shortRev or "dirty"}"
+          ];
+          meta = {
+            description = "Simple and fast anti-censorship tool written in Go";
+            homepage = "https://github.com/xvzc/SpoofDPI";
+            license = pkgs.lib.licenses.asl20;
+          };
         };
-      };
-    }
-  );
+      }
+    );
 }