oqyude/nixos
1
0
Fork 0
mirror of https://github.com/oqyude/nixos.git synced 2026-10-07 20:47:14 +03:00
Code Issues Packages Projects Releases Wiki Activity

3x

Browse Source
This commit is contained in:
oqyude
2026-09-24 22:11:23 +03:00
parent 2be5b168ac
commit f0947f3ce0
1 changed files with 24 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/containers/3x-ui.nix
+24 -12
View File
@@ -25,8 +25,12 @@ let
# 14380-15379/tcp+udp — Xray inbounds (matches firewall open range) # 14380-15379/tcp+udp — Xray inbounds (matches firewall open range)
"0.0.0.0:2049:2049/tcp" "0.0.0.0:2049:2049/tcp"
"0.0.0.0:2096:2096/tcp" "0.0.0.0:2096:2096/tcp"
"0.0.0.0:14380-15379:14380-15379/tcp" "0.0.0.0:8443:8443/tcp"
"0.0.0.0:14380-15379:14380-15379/udp" "0.0.0.0:8443:8443/udp"
"0.0.0.0:18443:18443/tcp"
"0.0.0.0:18443:18443/udp"
# "0.0.0.0:14380-15379:14380-15379/tcp"
# "0.0.0.0:14380-15379:14380-15379/udp"
]; ];
# VDS-only: nginx stream forwards host:443 → host:15380 → container:443, # VDS-only: nginx stream forwards host:443 → host:15380 → container:443,
# so Xray inside the container sees its REALITY inbound on its real # so Xray inside the container sees its REALITY inbound on its real
@@ -113,17 +117,25 @@ in
# Enable container name DNS for all Podman networks. # Enable container name DNS for all Podman networks.
networking.firewall = { networking.firewall = {
allowedUDPPortRanges = [ # allowedUDPPortRanges = [
{ # {
from = 14380; # from = 8443;
to = 15380; # to = 15380;
} # }
# ];
# allowedTCPPortRanges = [
# {
# from = 14380;
# to = 15380;
# }
# ];
allowedUDPPorts = [
18443
8443
]; ];
allowedTCPPortRanges = [ allowedTCPPorts = [
{ 18443
from = 14380; 8443
to = 15380;
}
]; ];
interfaces = interfaces =
let let