{
  "_comment": "私有目的地访问控制。复制到 /etc/pangolin-agent/acl.json 并填入自己的 dp_uuid。改完执行 systemctl reload pangolin-agent（不要 restart，restart 会冷启 sing-box 踢掉全部在线用户）。",
  "enabled": true,
  "allow_dp_uuids": [
    "TODO-设备级-dp-uuid",
    "TODO-账户级-dp-uuid-供-sub-订阅链接用"
  ],
  "targets": [
    {
      "_comment": "与公开站共用 ali:443 的私有 vhost，只能靠 SNI 区分",
      "domain": ["brain.51yanmei.com", "git.51yanmei.com"]
    },
    {
      "_comment": "独占端口的服务：DSM 5001 / RDP 3389 / NAS SSH 10022 / Win SSH 10023",
      "ip_cidr": ["182.92.213.171/32"],
      "port": [5001, 3389, 10022, 10023]
    }
  ]
}