hinterland/hearth
2
2
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(nixos): xray

Browse Source
This commit is contained in:
yukkop
2025-12-04 21:03:01 +00:00
parent 659ede1043
commit 6008da3af1
2 changed files with 52 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/module/hectic/hardware/hetzner-cloud.nix
+6 -6
View File
@@ -45,10 +45,10 @@ in {
example = "/dev/disk/by-uuid/f184a16b-6eca-41cb-b48a-ff37cdce1d79"; example = "/dev/disk/by-uuid/f184a16b-6eca-41cb-b48a-ff37cdce1d79";
description = '' description = ''
boot device uuid boot device uuid
if it is null then will use "/dev/sda" if it is null then will use "/dev/sda"
/dev/sda - default hetzner cloud device /dev/sda - default hetzner cloud device
!! But can changes on reboot if server have volumes !! But can changes on reboot if server have volumes
!! So use IDs !! So use IDs
''; '';
}; };
networkMatchConfigName = lib.mkOption { networkMatchConfigName = lib.mkOption {
@@ -56,10 +56,10 @@ in {
example = "enp1s0"; example = "enp1s0";
description = '' description = ''
type of network conection, type of network conection,
on older hetzner servers may be `ens3` on older hetzner servers may be `ens3`
on newer probably `enp1s0` on newer probably `enp1s0`
you can use `networkctl list` on server to know it you can use `networkctl list` on server to know it
''; '';
}; };
}; };
nixos/system/xray/xray.nix
+46 -25
View File
@@ -8,40 +8,61 @@
modulesPath, modulesPath,
config, config,
... ...
}: }: let
{ xrayPort = 10086;
in {
imports = [ imports = [
self.nixosModules.hectic self.nixosModules.hectic
]; ];
services.xray = { services.xray = {
enable = true; enable = true;
setting = '' settings = {
{ "inbounds" = [
"inbounds": [ {
{ "port" = xrayPort;
"port": 10086, "protocol" = "vmess";
"protocol": "vmess", "settings" = {
"settings": { "clients" = [
"clients": [ {
{ "id" = "04ad600a-0e94-4ba6-af93-74e03fd3f58d";
"id": "b831381d-6324-4d53-ad4f-8cda48b30811" }
} ];
] };
} }
} ];
], "log" = {
"outbounds": [ "loglevel" = "warning";
{ };
"protocol": "freedom" "outbounds" = [
} {
] "protocol" = "freedom";
} }
''; ];
};
}; };
users.users.root.openssh.authorizedKeys.keys = [
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPPChQvpyOrPjRjp8pS5Yw+oJVmywDzefzZCXh1d44EY''
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGP3HjFoJNGHqHoEw9XLzh766QWknfaN07GGi8lsC2Tv''
];
hectic = { hectic = {
archetype.base.enable = true; archetype.base.enable = true;
hardware.lenovo-legion.enable = true; archetype.dev.enable = true;
hardware.hetzner-cloud = {
enable = true;
networkMatchConfigName = "enp1s0";
ipv4 = "77.42.45.173";
ipv6 = "2a01:4f9:c013:7230";
};
};
networking.firewall = {
enable = true;
allowedTCPPorts = [
xrayPort
];
}; };
} }