services/proxy: add proxy module
This commit is contained in:
parent
1260c1b4af
commit
ece6d46b5b
5 changed files with 47 additions and 28 deletions
40
modules/modules/services/proxy.nix
Normal file
40
modules/modules/services/proxy.nix
Normal file
|
@ -0,0 +1,40 @@
|
|||
{ config, lib, ... }:
|
||||
with lib;
|
||||
with lib.hlissner;
|
||||
let
|
||||
cfg = config.modules.services.proxy;
|
||||
in
|
||||
{
|
||||
options.modules.services.proxy = {
|
||||
enable = mkBoolOpt false;
|
||||
listen-address = mkOpt types.str "localhost:8118";
|
||||
forwards = {
|
||||
ssh = mkBoolOpt true;
|
||||
};
|
||||
};
|
||||
|
||||
config = mkMerge [
|
||||
(mkIf cfg.enable {
|
||||
services = {
|
||||
privoxy = {
|
||||
enable = true;
|
||||
|
||||
settings = {
|
||||
enable-edit-actions = true;
|
||||
forward-socks5 = mkIf cfg.forwards.ssh "/ 127.0.0.1:49494 .";
|
||||
listen-address = cfg.listen-address;
|
||||
};
|
||||
};
|
||||
|
||||
ssh-tunnel = mkIf cfg.forwards.ssh {
|
||||
enable = true;
|
||||
server = "infinidoge@server.doge-inc.net -p 245 -S none -i /home/infinidoge/.ssh/id_ed25519 -v";
|
||||
requiredBy = [ "privoxy.service" ];
|
||||
forwards.dynamic = [ 49494 ];
|
||||
};
|
||||
};
|
||||
|
||||
networking.proxy.default = cfg.listen-address;
|
||||
})
|
||||
];
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue