Add Subscription, then pick any profile. Section A controls RU bypass.
C. DNS adblocker (blocky)
Streisand → Settings → DNS. Prefer the IP field (109.172.90.103) with VPN on. DoH is optional and must be the nip.io URL on port 443 (not :8443).
109.172.90.103
D. Routing assets (slim RU-only)
Streisand → Settings → Routing → Assets. Set both URLs, then Update All. Files contain only geoip:ru/private and RU geosite lists (~400KB total).
https://sub.109.172.90.103.nip.io/geoip.dathttps://sub.109.172.90.103.nip.io/geosite.dat