From 3d1421f38de1fda67ced488efe5956fc91e932eb Mon Sep 17 00:00:00 2001
From: oqyude <oqyude@gmail.com>
Date: Fri, 25 Jul 2025 20:31:38 +0300
Subject: [PATCH] 123

---
 flake.lock           | 8 ++++----
 modules/vds/xray.nix | 3 ++-
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/flake.lock b/flake.lock
index d0aed9a..4dc7c4a 100755
--- a/flake.lock
+++ b/flake.lock
@@ -544,11 +544,11 @@
     },
     "zeroq-credentials": {
       "locked": {
-        "lastModified": 1753460123,
-        "narHash": "sha256-/KPCrjriH+lKiW27anVaujmSMZY3pmN8hss8Dc6sQd0=",
+        "lastModified": 1753463850,
+        "narHash": "sha256-/Lrk4xhkEMtoSDmmdiBECMAEfabvW9WeFN4EZqh+mqc=",
         "ref": "refs/heads/master",
-        "rev": "c8b4b4f31e4915272a47537d5e73a181c9bc8f26",
-        "revCount": 20,
+        "rev": "6c61c3034d1f070f8d9ccf3b01b94ddc6ce70e3b",
+        "revCount": 23,
         "type": "git",
         "url": "ssh://git@github.com/oqyude/zeroq-credentials.git"
       },
diff --git a/modules/vds/xray.nix b/modules/vds/xray.nix
index 3d69e81..1e6195e 100755
--- a/modules/vds/xray.nix
+++ b/modules/vds/xray.nix
@@ -13,7 +13,8 @@
 
   networking.firewall = {
     allowedTCPPorts = [ 443 ];
-    allowedUDPPorts = [ 443 ];
+    allowedUDPPorts = [ 443 41641 ];
+    trustedInterfaces = [ "tailscale0" ];
   };
 
   environment.systemPackages = with pkgs; [ xray ];