This commit is contained in:
2026-09-22 18:05:10 +03:00
parent b57ca3eedf
commit 44b85e1ebc
5 changed files with 14 additions and 53 deletions
-1
View File
@@ -11,7 +11,6 @@
./systemd.nix
# ./glances.nix
# ./netbird.nix
# ./xray.nix
];
# VDS hosts the public-facing Xray REALITY inbound on container:443,
# fronted by nginx stream on host:443 → host:15380 → container:443.
+3
View File
@@ -10,6 +10,9 @@
enable = true;
openFirewall = true;
port = 61208;
extraArgs = [
"--bind 100.64.1.0"
];
};
};
}
-44
View File
@@ -1,44 +0,0 @@
{
config,
inputs,
pkgs,
...
}:
{
services.xray = {
enable = false;
settings = inputs.zeroq-credentials.services.xray.config;
};
# networking.firewall = {
# allowedTCPPorts = [
# 8443
# 9443
# 13380
# ];
# allowedUDPPorts = [
# 8443
# 9443
# 13380
# ];
# };
environment.systemPackages = [ pkgs.xray ];
# sops.secrets = {
# xray_uuid = {
# key = "uuid";
# mode = "0444";
# format = "yaml";
# sopsFile = ./secrets/xray.yaml;
# path = "/etc/xray/uuid";
# };
# xray_private-key = {
# path = "/etc/xray/private-key";
# key = "private-key";
# mode = "0444";
# format = "yaml";
# sopsFile = ./secrets/xray.yaml;
# };
# };
}