cilly/flakes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

containers/fluorite: socks5 via tailscale
Some checks are pending
CI / Build linux-lava for x86_64-linux (push) Waiting to run
Details

Browse source
This commit is contained in:
Cilly Leang 2026-06-17 00:07:01 +10:00
parent 4b19491ec7
commit 20b5d96686
Signed by: cilly
GPG key ID: 6500251E087653C9
6 changed files with 33 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

16
containers/fluorite/configuration.nix
View file

@ -1,16 +1,30 @@
{ ... }: {
system.stateVersion = "25.11";
systemd.tmpfiles.rules = [
"d /persist/slskd/Downloads 755 slskd slskd"
"d /persist/slskd/downloads 755 slskd slskd"
];
fileSystems."/var/lib/slskd" = {
device = "/persist/slskd";
fsType = "none";
options = [ "bind" ];
};
fileSystems."/var/lib/tailscale" = {
device = "/persist/tailscale";
fsType = "none";
options = [ "bind" ];
};
networking.firewall.allowedTCPPorts = [ 5030 50300 ];
networking.firewall.allowedUDPPorts = [ 5030 50300 ];
services.tailscale = {
enable = true;
authKeyFile = "/binds/tailscale_auth";
openFirewall = true;
interfaceName = "userspace-networking";
extraDaemonFlags = [ "--socks5-server=localhost:1055" ];
extraUpFlags = [ "--exit-node=dandelion" ];
};
services.slskd = {
enable = true;
domain = null;

7
containers/fluorite/flake.nix
View file

@ -20,7 +20,7 @@
./configuration.nix
{
networking.useHostResolvConf = false;
networking.nameservers = [ host ];
networking.nameservers = [ 8.8.8.8 ];
}
];
in {
@ -97,6 +97,11 @@
mountPoint = "/binds/slskd_env";
isReadOnly = true;
};
bindMounts."tailscale_auth" = {
hostPath = config.age.secrets.tailscale_auth.path;
mountPoint = "/binds/tailscale_auth";
isReadOnly = true;
};
# flake = "path:" + ./.;
};
};