forked from
lass.pds.lassul.us/superconfig
This repository has no description
delete some stale files
author
lassulus
date
(Nov 22, 2025, 5:07 PM +0700)
commit
6b5f529d
6b5f529dfaf05bf88a229ce47760ef732cfa27ac
parent
510763db
510763db6d2b48365785f848a730d5a30681da36
-101
-50
2configs/blue.nix
-50
2configs/blue.nix
···
1
-
{ pkgs, ... }:
2
-
3
-
{
4
-
imports = [
5
-
./mail.nix
6
-
./pass.nix
7
-
];
8
-
9
-
environment.systemPackages = with pkgs; [
10
-
dic
11
-
nmap
12
-
git-preview
13
-
l-gen-secrets
14
-
];
15
-
16
-
services.tor.enable = true;
17
-
services.tor.client.enable = true;
18
-
19
-
krebs.iptables.tables.filter.INPUT.rules = [
20
-
{
21
-
predicate = "-i retiolum -p udp --dport 60000:61000";
22
-
target = "ACCEPT";
23
-
}
24
-
{
25
-
predicate = "-i wiregrill -p udp --dport 60000:61000";
26
-
target = "ACCEPT";
27
-
}
28
-
{
29
-
predicate = "-i retiolum -p tcp --dport 9998:9999";
30
-
target = "ACCEPT";
31
-
}
32
-
{
33
-
predicate = "-i wiregrill -p tcp --dport 9998:9999";
34
-
target = "ACCEPT";
35
-
}
36
-
{
37
-
predicate = "-i retiolum -p tcp --dport imap";
38
-
target = "ACCEPT";
39
-
}
40
-
{
41
-
predicate = "-i wiregrill -p tcp --dport imap";
42
-
target = "ACCEPT";
43
-
}
44
-
];
45
-
46
-
services.dovecot2 = {
47
-
enable = true;
48
-
mailLocation = "maildir:~/Maildir";
49
-
};
50
-
}
-51
2configs/services/coms/proxy.nix
-51
2configs/services/coms/proxy.nix
···
1
-
{ config, lib, ... }:
2
-
let
3
-
tcpports = [
4
-
4443 # jitsi
5
-
64738 # murmur
6
-
];
7
-
udpports = [
8
-
10000 # jitsi
9
-
64738 # murmur
10
-
];
11
-
target = "orange.r";
12
-
in
13
-
{
14
-
networking.firewall.allowedTCPPorts = tcpports;
15
-
networking.firewall.allowedUDPPorts = udpports;
16
-
services.nginx.streamConfig = ''
17
-
${lib.concatMapStringsSep "\n" (port: ''
18
-
server {
19
-
listen [::]:${toString port};
20
-
listen ${toString port};
21
-
proxy_pass ${target}:${toString port};
22
-
}
23
-
'') tcpports}
24
-
'';
25
-
26
-
krebs.iptables.tables.nat.PREROUTING.rules = lib.flatten (
27
-
map (port: [
28
-
{
29
-
predicate = "-p udp --dport ${toString port}";
30
-
target = "DNAT --to-destination ${config.krebs.hosts.orange.nets.retiolum.ip4.addr}:${toString port}";
31
-
v6 = false;
32
-
}
33
-
{
34
-
predicate = "-p udp --dport ${toString port}";
35
-
target = "DNAT --to-destination [${config.krebs.hosts.orange.nets.retiolum.ip6.addr}]:${toString port}";
36
-
v4 = false;
37
-
}
38
-
]) udpports
39
-
);
40
-
41
-
services.nginx.virtualHosts."jitsi.lassul.us" = {
42
-
enableACME = true;
43
-
acmeFallbackHost = "${target}";
44
-
addSSL = true;
45
-
locations."/" = {
46
-
recommendedProxySettings = true;
47
-
proxyWebsockets = true;
48
-
proxyPass = "https://${target}";
49
-
};
50
-
};
51
-
}