fix

services/clash.nix

@@ -8,9 +8,9 @@
             Type = "simple";
             User = "clash";
             Group = "clash";
-            ExecStartPre = "ip rule add fwmark 0x233 lookup 100; ip route add local 0.0.0.0/0 dev lo table 100";
+            ExecStartPre = "ip rule add fwmark 0x233 lookup 100 && ip route add local 0.0.0.0/0 dev lo table 100";
             ExecStart = "${pkgs.clash-meta}/bin/clash-meta -d /etc/clash";
-            ExecStop = "ip route del local; ip rule del fwmark 0x233 lookup 100";
+            ExecStop = "ip route del local && ip rule del fwmark 0x233 lookup 100";
             Restart = "on-failure";
             CapabilityBoundingSet="CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW";
             AmbientCapabilities="CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW";