ctucx.git: nixfiles

ctucx' nixfiles

1 
2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 
29 
30 
31 
32 
33 
34 
35 
36 
37 
38 
39 
40 
41 
42 { pkgs, ... }:

{

  services._3proxy = {
    enable = true;
    denyPrivate = false;
    services = [
      #mikrotik ssh forwarding
      {
        type = "tcppm";
        auth = [ "none" ];
        extraArguments = "2201 172.16.0.2 22";
      }
      #briefkasten ssh forwarding
      {
        type = "tcppm";
        auth = [ "none" ];
        extraArguments = "2202 172.17.0.2 22";
      }
      #stasicontainer ssh forwarding
      {
        type = "tcppm";
        auth = [ "none" ];
        extraArguments = "2203 172.18.0.2 22";
      }
      {
        type = "socks";
          auth = [ "strong" ];
          acl = [ {
            rule = "allow";
            users = [ "gotosocial" ];
          }
        ];
      }
    ];
    usersFile = pkgs.writeText "3proxy-users" ''
      gotosocial:CR:$1$p9CQeW/0$DXaBBc9cD0Xv1XZtPBbW00
    '';
  };

}