fix: element things

nixos/system/bfs.poland.xray/bfs.poland.xray.nix

@@ -76,6 +76,18 @@ in {
     defaults.email = "security@bfs.band";
   };
 
+  # NOTE(yukkop): this host gets an IPv6 route via RA, but object storage
+  # fetches to hel1.your-objectstorage.com currently stall over IPv6 while
+  # IPv4 works. Synapse's S3 media backend uses getaddrinfo ordering, so
+  # prefer IPv4 here to keep Element media downloads responsive.
+  environment.etc."gai.conf".text = ''
+    precedence ::ffff:0:0/96  100
+  '';
+
+  systemd.services.matrix-synapse.restartTriggers = [
+    config.environment.etc."gai.conf".source
+  ];
+
   services.nginx = {
     enable = true;
 

nixos/system/neuro/neuro.nix

@@ -263,6 +263,7 @@ in {
   in [
     #python-ai
     git
+    hectic.hiddify-core
     neovim
     wget
     ethtool

package/default.nix

@@ -123,6 +123,7 @@ in {
   py3-swifter                  = pkgs.callPackage ./py3-swifter.nix                   {};
   py3-aiogram-newsletter       = pkgs.callPackage ./py3-aiogram-newsletter.nix        {};
   py3-openai-shap-e            = pkgs.callPackage ./py3-openai-shap-e.nix             {};
+  hiddify-core                 = pkgs.callPackage ./hiddify-core                      {};
   nvim-alias                   = pkgs.callPackage ./nvim-alias.nix                    {};
   bolt-unpack                  = pkgs.callPackage ./bolt-unpack.nix                   {};
   merge-archive                = pkgs.callPackage ./merge-archive                     {};

package/hiddify-core/default.nix

@@ -0,0 +1,59 @@
+{
+  autoPatchelfHook,
+  lib,
+  gnutar,
+  makeWrapper,
+  stdenv,
+  stdenvNoCC,
+  fetchurl,
+}:
+let
+  version = "4.1.0";
+in
+stdenvNoCC.mkDerivation {
+  pname = "hiddify-core";
+  inherit version;
+
+  src = fetchurl {
+    url = "https://github.com/hiddify/hiddify-core/releases/download/v${version}/hiddify-core-linux-amd64.tar.gz";
+    hash = "sha256-efVXJbnBwLPK1GpF7e2zxb6D16YjbMHfqb14+zxofm8=";
+  };
+
+  nativeBuildInputs = [
+    autoPatchelfHook
+    gnutar
+    makeWrapper
+  ];
+
+  buildInputs = [
+    stdenv.cc.cc.lib
+  ];
+
+  unpackPhase = ''
+    runHook preUnpack
+    tar -xzf $src
+    cd hiddify-core-linux-amd64
+    runHook postUnpack
+  '';
+
+  installPhase = ''
+    runHook preInstall
+    mkdir -p $out/bin $out/lib/hiddify-core $out/share/licenses/hiddify-core
+    cp LICENSE.md $out/share/licenses/hiddify-core/LICENSE.md
+    cp hiddify-core $out/lib/hiddify-core/
+    cp libcronet.so $out/lib/hiddify-core/
+    makeWrapper $out/lib/hiddify-core/hiddify-core $out/bin/hiddify-core \
+      --set-default LD_LIBRARY_PATH "$out/lib/hiddify-core"
+    ln -s $out/bin/hiddify-core $out/bin/hiddify-cli
+    ln -s $out/bin/hiddify-core $out/bin/HiddifyCli
+    runHook postInstall
+  '';
+
+  meta = {
+    description = "Hiddify CLI core binary";
+    homepage = "https://github.com/hiddify/hiddify-core";
+    license = lib.licenses.gpl3Only;
+    mainProgram = "hiddify-core";
+    platforms = [ "x86_64-linux" ];
+  };
+}