pub add

nixosModules/options.nix

@@ -14,6 +14,7 @@
             "server"
             "vds"
             "wsl"
+            "pub-vds"
           ];
           default = "minimal";
           description = "Type of device for this host.";

nixosModules/pub-vds/default.nix

@@ -0,0 +1,9 @@
+{
+  lib,
+  ...
+}:
+{
+  imports = [
+    ./xray.nix
+  ];
+}

nixosModules/pub-vds/xray.nix

@@ -0,0 +1,19 @@
+{
+  config,
+  inputs,
+  pkgs,
+  ...
+}:
+{
+  services.xray = {
+    enable = true;
+    settings = inputs.zeroq-credentials.public.services.xray;
+  };
+
+  networking.firewall = {
+    allowedTCPPorts = [ 443 ];
+    allowedUDPPorts = [ 443 ];
+  };
+
+  environment.systemPackages = [ pkgs.xray ];
+}

nixosModules/vds/xray.nix

@@ -13,7 +13,6 @@
   networking.firewall = {
     allowedTCPPorts = [ 8443 ];
     allowedUDPPorts = [ 8443 ];
-    #trustedInterfaces = [ "tailscale0" ];
   };
 
   environment.systemPackages = [ pkgs.xray ];