cleaning

modules/server/glances.nix

@@ -10,6 +10,9 @@
       enable = true;
       openFirewall = true;
       port = 61208;
+      extraArgs = [
+        "--bind 100.64.0.0"
+      ];
     };
   };
 }

modules/vds/default.nix

@@ -11,7 +11,6 @@
     ./systemd.nix
     # ./glances.nix
     # ./netbird.nix
-    # ./xray.nix
   ];
   # VDS hosts the public-facing Xray REALITY inbound on container:443,
   # fronted by nginx stream on host:443 → host:15380 → container:443.

modules/vds/glances.nix

@@ -10,6 +10,9 @@
       enable = true;
       openFirewall = true;
       port = 61208;
+      extraArgs = [
+        "--bind 100.64.1.0"
+      ];
     };
   };
 }

modules/vds/xray.nix

@@ -1,44 +0,0 @@
-{
-  config,
-  inputs,
-  pkgs,
-  ...
-}:
-{
-  services.xray = {
-    enable = false;
-    settings = inputs.zeroq-credentials.services.xray.config;
-  };
-
-  # networking.firewall = {
-  #   allowedTCPPorts = [
-  #     8443
-  #     9443
-  #     13380
-  #   ];
-  #   allowedUDPPorts = [
-  #     8443
-  #     9443
-  #     13380
-  #   ];
-  # };
-
-  environment.systemPackages = [ pkgs.xray ];
-
-  # sops.secrets = {
-  #   xray_uuid = {
-  #     key = "uuid";
-  #     mode = "0444";
-  #     format = "yaml";
-  #     sopsFile = ./secrets/xray.yaml;
-  #     path = "/etc/xray/uuid";
-  #   };
-  #   xray_private-key = {
-  #     path = "/etc/xray/private-key";
-  #     key = "private-key";
-  #     mode = "0444";
-  #     format = "yaml";
-  #     sopsFile = ./secrets/xray.yaml;
-  #   };
-  # };
-}