diff --git a/.env b/.env
index 958de2a..cc5c3c2 100644
--- a/.env
+++ b/.env
@@ -2,10 +2,10 @@
 export KERNEL_TYPE="mihomo"
 
 # 可选订阅（首次安装可留空）
-export CLASH_SUBSCRIPTION_URL="https://sakuracat1203.xn--3iq226gfdb94q.com/api/v1/client/subscribe?token=df9fd8af2086471190a42435d354a3ec"
+export CLASH_SUBSCRIPTION_URL=""
 
 # 控制器密钥（默认留空）
-export CLASH_CONTROLLER_SECRET="f4962effeac0815d"
+export CLASH_CONTROLLER_SECRET=""
 
 # 端口
 export MIXED_PORT="7890"
diff --git a/scripts/core/config.sh b/scripts/core/config.sh
index b0d3e3e..372733e 100644
--- a/scripts/core/config.sh
+++ b/scripts/core/config.sh
@@ -394,6 +394,7 @@ config_allow_lan() {
 set_config_allow_lan() {
   local value="$1"
   local file="$CONFIG_DIR/template.yaml"
+  local mixin_file_path
 
   case "$value" in
     true|false) ;;
@@ -404,6 +405,13 @@ set_config_allow_lan() {
   ALLOW_LAN_VALUE="$value" "$(yq_bin)" eval -i '
     .["allow-lan"] = (env(ALLOW_LAN_VALUE) == "true")
   ' "$file"
+
+  ensure_mixin_file
+  mixin_file_path="$(mixin_file)"
+  ALLOW_LAN_VALUE="$value" "$(yq_bin)" eval -i '
+    .override = (.override // {}) |
+    .override["allow-lan"] = (env(ALLOW_LAN_VALUE) == "true")
+  ' "$mixin_file_path"
 }
 
 subscription_url_scheme() {