Added vless + reality

This commit is contained in:
Pengames
2026-10-10 18:06:09 +11:00
parent c325943ef8
commit 140aa335da
6 changed files with 124 additions and 38 deletions
+80 -10
View File
@@ -4,6 +4,29 @@
{ config, lib, pkgs, ... }:
let
vlessOutbound = {
type = "vless";
tag = "proxy";
server = "immich.frogguingang.com";
server_port = 443;
uuid = "e76c485e-38f2-44fe-bb74-6550b307741d";
flow = "xtls-rprx-vision";
tls = {
enabled = true;
server_name = "immich.frogguingang.com";
utls = {
enabled = true;
fingerprint = "chrome";
};
reality = {
enabled = true;
public_key = "Qm8GdYV5l78f24ThAglg6ldKdPPeeXh8KGFuC3krTjM";
short_id = "68ce8db33efa2894";
};
};
};
in
{
imports =
[ # Include the results of the hardware scan.
@@ -31,12 +54,21 @@
timeout = 10;
};
boot.kernelPackages = pkgs.linuxPackages_latest;
boot.kernel.sysctl = {
"net.ipv4.ip_forward" = 1;
"net.ipv6.conf.all.forwarding" = 1;
};
networking.hostName = "nixpengames"; # Define your hostname.
# Pick only one of the below networking options.
swapDevices = [{
device = "/var/lib/swapfile";
size = 16 * 1024;
}];
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
networking.networkmanager.enable = true; # Easiest to use and most distros use this by default.
networking.networkmanager.wifi.powersave = false;
# networking.nftables.enable = true;
# systemd.services.v2raya.path = with pkgs; [ nftables ];
# Fix Marvell AVASTAR WiFi not resuming after suspend (Surface devices)
systemd.services.restart-mwifiex = {
description = "Reload mwifiex driver after suspend/resume";
@@ -75,8 +107,8 @@
fcitx5-gtk
fcitx5-anthy
fcitx5-hangul
fcitx5-chinese-addons
fcitx5-configtool
qt6Packages.fcitx5-chinese-addons
qt6Packages.fcitx5-configtool
fcitx5-nord
];
};
@@ -170,8 +202,41 @@
#};
#services.v2raya.enable = true;
# Read the text content of an actual external JSON file
services.v2raya.enable = true;
services.v2raya.cliPackege = pkgs.xray
#services.v2raya.enable = true;
# services.v2raya.cliPackage = pkgs.xray.override {
# assets = [ pkgs.v2ray-geoip pkgs.v2ray-domain-list-community ];
services.sing-box = {
enable = true;
package = pkgs.sing-box;
settings = {
log = {
level = "info";
};
inbounds = [{
type = "tun";
tag = "tun-in";
interface_name = "singtun";
address = [
"172.19.0.1/30"
"fd00::1/126"
];
# mtu = 1492;
auto_route = true;
auto_redirect = true;
strict_route = true;
stack = "gvisor";
}];
outbounds = [ vlessOutbound ];
route = {
auto_detect_interface = true;
final = "proxy";
};
};
};
#services.v2raya.enable = true;
# services.v2raya.cliPackage = pkgs.xray.override {
# assets = [ pkgs.v2ray-geoip pkgs.v2ray-domain-list-community ];
# };
# services.xray = {
# enable = true;
# settings = {
@@ -264,6 +329,7 @@
extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
packages = with pkgs; [
firefox
google-chrome
vscode-fhs
steam
spotify
@@ -275,7 +341,7 @@
handbrake
musescore
kdePackages.kdenlive
zoom-us
#zoom-us
spotify-player
shadowsocks-rust
# obsidian
@@ -292,16 +358,20 @@
# List packages installed in system profile. To search, run:
# $ nix search wget
nixpkgs.config.allowUnfree = true;
# environment.etc."v2raya/geoip.dat".source = "${pkgs.v2ray-geoip}/share/v2ray/geoip.dat";
# environment.etc."v2raya/geosite.dat".source = "${pkgs.v2ray-domain-list-community}/share/v2ray/geosite.dat";
environment.systemPackages = with pkgs; [
vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
wget
# v2ray-geoip
# v2ray-domain-list-community
wakeonlan
iwd
lf
fd
traceroute
ripgrep
zoom
# zoom
python313
firefox
tree
@@ -314,7 +384,7 @@
hyfetch
foot
iptsd
libreoffice-qt6-fresh
libreoffice-qt-stable
netflix
audacity
blender
@@ -325,9 +395,9 @@
maliit-keyboard
maliit-framework
pavucontrol
fcitx5-configtool
qt6Packages.fcitx5-configtool
R
rstudio
#rstudio
wl-clipboard
];