xin/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

modules: add sing-box module

Browse source
This commit is contained in:
xinyangli 2024-01-08 01:03:42 +08:00
parent b0facfa211
commit 29d7585e27
7 changed files with 104 additions and 158 deletions
Download patch file Download diff file Expand all files Collapse all files

16
machines/calcite/network.nix
View file

@ -1,9 +1,7 @@
{ pkgs, ...}:
{ config, pkgs, ...}:
{
imports = [
../sing-box.nix
];
imports = [ ];
# Enable networking
networking = {
@ -21,12 +19,20 @@
services.tailscale.enable = true;
# services.tailscale.useRoutingFeatures = "both";
custom.sing-box = {
enable = true;
configFile = {
urlFile = config.sops.secrets.sing_box_url.path;
hash = "6ca5bc8a16f8c413227690aceeee2c12c02cab09473c216b849af1e854b98588";
};
overrideSettings.experimental.clash_api.external_ui = "${config.nur.repos.linyinfeng.yacd}";
};
# Open ports in the firewall.
networking.firewall.enable = true;
networking.firewall.allowedTCPPorts = [ 3389 ];
networking.firewall.allowedUDPPorts = [ 3389 41641 ];
networking.firewall.trustedInterfaces = [
"tun0"
"tailscale0"
];
# Use nftables to manager firewall