nft_to:
  - to: nfs
    proto: [tcp, udp]
    port: [2049, 111, 32765, 32767]
  - to: [zone:eth0.10,zone:eth0.11,zone:eth0.12]
    proto: tcp
    port: 22
  - to: [xiawrt,rbpi4]
    proto: tcp
    port: 22

xray_policy:
  - bypass: private
  - bypass: russian_whitelist
  - proxy: all