{ pkgs, ... }:

{

  services._3proxy = {
    enable = true;
    denyPrivate = false;
    services = [
      #mikrotik ssh forwarding
      {
        type = "tcppm";
        auth = [ "none" ];
        extraArguments = "2201 172.16.0.2 22";
      }
      #briefkasten ssh forwarding
      {
        type = "tcppm";
        auth = [ "none" ];
        extraArguments = "2202 172.17.0.2 22";
      }
      #stasicontainer ssh forwarding
      {
        type = "tcppm";
        auth = [ "none" ];
        extraArguments = "2203 172.18.0.2 22";
      }
      {
        type = "socks";
          auth = [ "strong" ];
          acl = [ {
            rule = "allow";
            users = [ "gotosocial" ];
          }
        ];
      }
    ];
    usersFile = pkgs.writeText "3proxy-users" ''
      gotosocial:CR:$1$p9CQeW/0$DXaBBc9cD0Xv1XZtPBbW00
    '';
  };

}