mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(whitby): Add shadowsocks server

Browse source 
This adds a shadowsocks service, running on port 8443, tcp and udp.

The password is read from /etc/secrets/shadowsocks-secret.sec, and needs
to be populated externally.

Change-Id: I6797150db108ba14459502dee43d8e4ed6cfa910
Reviewed-on: https://cl.tvl.fyi/c/depot/+/3125
Tested-by: BuildkiteCI
Reviewed-by: tazjin <mail@tazj.in>
This commit is contained in:
Florian Klink 2021-05-21 13:11:46 +02:00 committed by tazjin
parent cd2e889f41
commit 48b052c1e4
1 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
ops/machines/whitby/default.nix
View file

@ -129,7 +129,8 @@ in {
interface = "enp196s0";
};
firewall.allowedTCPPorts = [ 22 80 443 4238 29418 ];
firewall.allowedTCPPorts = [ 22 80 443 4238 8443 29418 ];
firewall.allowedUDPPorts = [ 8443 ];
interfaces.enp196s0.useDHCP = true;
interfaces.enp196s0.ipv6.addresses = [
@ -339,6 +340,12 @@ in {
];
};
services.shadowsocks = {
enable = true;
port = 8443;
passwordFile = "/etc/secrets/shadowsocks-secret.sec";
};
services.nix-serve = {
enable = true;
port = 6443;