module: make services/proxy a profile
This commit is contained in:
parent
9cb9e702aa
commit
3b54e3ba95
3 changed files with 28 additions and 44 deletions
|
@ -4,6 +4,7 @@
|
|||
|
||||
(with profiles; [
|
||||
networking.wireless
|
||||
services.proxy
|
||||
])
|
||||
|
||||
./hardware-configuration.nix
|
||||
|
@ -45,9 +46,6 @@
|
|||
fprint-sensor.enable = true;
|
||||
};
|
||||
};
|
||||
services = {
|
||||
proxy.enable = true;
|
||||
};
|
||||
filesystems = {
|
||||
enable = true;
|
||||
btrfs.enable = true;
|
||||
|
|
|
@ -1,41 +0,0 @@
|
|||
{ config, lib, ... }:
|
||||
with lib;
|
||||
with lib.hlissner;
|
||||
let
|
||||
cfg = config.modules.services.proxy;
|
||||
in
|
||||
{
|
||||
options.modules.services.proxy = {
|
||||
enable = mkBoolOpt false;
|
||||
listen-address = mkOpt types.str "localhost:8118";
|
||||
forwards = {
|
||||
ssh = mkBoolOpt true;
|
||||
};
|
||||
};
|
||||
|
||||
config = mkMerge [
|
||||
(mkIf cfg.enable {
|
||||
services = {
|
||||
privoxy = {
|
||||
enable = true;
|
||||
|
||||
settings = {
|
||||
enable-edit-actions = true;
|
||||
forward-socks5 = mkIf cfg.forwards.ssh "/ 127.0.0.1:49494 .";
|
||||
listen-address = cfg.listen-address;
|
||||
};
|
||||
};
|
||||
|
||||
ssh-tunnel = mkIf cfg.forwards.ssh {
|
||||
enable = true;
|
||||
server = "infinidoge@server.doge-inc.net -p 245 -S none -i /home/infinidoge/.ssh/id_ed25519 -v";
|
||||
# server = "infinidoge@71.90.199.237 -p 245 -S none -i /home/infinidoge/.ssh/id_ed25519 -v";
|
||||
requiredBy = [ "privoxy.service" ];
|
||||
forwards.dynamic = [ 49494 ];
|
||||
};
|
||||
};
|
||||
|
||||
networking.proxy.default = cfg.listen-address;
|
||||
})
|
||||
];
|
||||
}
|
27
profiles/services/proxy.nix
Normal file
27
profiles/services/proxy.nix
Normal file
|
@ -0,0 +1,27 @@
|
|||
{ ... }:
|
||||
let
|
||||
listen-address = "localhost:8118";
|
||||
in
|
||||
{
|
||||
services = {
|
||||
privoxy = {
|
||||
enable = true;
|
||||
|
||||
settings = {
|
||||
inherit listen-address;
|
||||
enable-edit-actions = true;
|
||||
forward-socks5 = "/ 127.0.0.1:49494 .";
|
||||
};
|
||||
};
|
||||
|
||||
ssh-tunnel = {
|
||||
enable = true;
|
||||
server = "infinidoge@server.doge-inc.net -p 245 -S none -i /home/infinidoge/.ssh/id_ed25519 -v";
|
||||
# server = "infinidoge@71.90.199.237 -p 245 -S none -i /home/infinidoge/.ssh/id_ed25519 -v";
|
||||
requiredBy = [ "privoxy.service" ];
|
||||
forwards.dynamic = [ 49494 ];
|
||||
};
|
||||
};
|
||||
|
||||
networking.proxy.default = listen-address;
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue