Add local proxy

This commit is contained in:
Greg Hellings
2022-10-31 15:24:05 -05:00
parent eb80c86068
commit f32113b001
3 changed files with 27 additions and 1 deletions
+23
View File
@@ -49,4 +49,27 @@
greg.proxies."jellyfin.thehellings.lan".target = "http://localhost:8096";
greg.proxies."jellyfin.me.ts".target = "http://localhost:8096";
#########
# Blind service proxy behind the walls of the VPN
########
services._3proxy = {
enable = true;
services = [ {
type = "socks";
auth = [ "strong" ];
bindPort = 3128;
acl = [ {
rule = "allow";
users = [ "greg" ];
} ];
} ];
usersFile = "/run/agenix/3proxy";
denyPrivate = false;
};
age.secrets."3proxy" = {
file = ../../secrets/3proxy.age;
mode = "777";
};
networking.firewall.allowedTCPPorts = [ 3128 ];
}
Binary file not shown.
+4 -1
View File
@@ -1,6 +1,7 @@
let
linode = "ssh-rsa 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";
systems = [ linode ];
macca2 = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDCkliEMztsNY48zrvskma5pHf1nYqnRAVSQ6EZ+YQlNb4T70S1cyyKPnVYZoBekIUOWy1pa313whNuYDrfUTA2gqQFGlRFTT2oaB6jHYgKmR/Wty0+m1IVIK7tAkNG2tnb83bfDGc7TjAS4dAAzdakm5ipsIisCFoXAGwvD9vOpG7PwnZBLei0OSw9X3UAn7Fwt0BMs8gwUdq2KoiL3zfc/3cSi63ilWxuTg5mChA/y0Vw9mrCDfxQWsICVkNTJmFDM4CSmsCkd9/VecNCwKrw9cTHxzZLcTMTvqAMK2qk0JUk9XvxmuCSMfuCyIfvk3gBJvHV7zWEr0Mw8nJU3Tp8OdP33rjiRmhz9EPacFZE4i9BQ5ltS/i7yvyU2yNyMzfzQFBxP4Ip+7jCELiBw/ozxVoKFOWNOF93EWu2aQpmVCY1M30e0RqVx9cORnpF9GKa6khhSI6ueCmwfWbZrIiityFZYv36WJJyY/oJXdJlGyDk2BpL9M00YdN4sosHrInCOTsIdrpDVLkG2gyww3ImRc1JjKL35uAZk9m7pY/Q6OWz4rGQr1IkC29l8UOCF2SHYYnCL6xNkQ1xL5Wj0lIhMal06/FMGZbozb8N+EVvE7Bp/dELV/N5LKuGMUd6VnnF7unSNO3TkAi96wDKmgjHgp49z5S7WXXa6s4rZp2npQ==";
systems = [ linode macca2 ];
user = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAEAQDLQRq55JKqLifX+31kEXyuoB8gfM+5thAlgR7XLPvvdu6g2a5cCWyozQ1I2oGbPRfJtzcJ5ifM7Ii2PuqAj3MdYFLHBEDOhIpBBWme9Ts2YB9HJ4NorBvB4zEfJd0Q7k2MmylyeBOwdwGz3bVqPRDcJbxWFMDHqr33FEs6SXdfyAQ5SvhWGARI84qz8zUUdOp6M4e3aIGO3cx1gA+YzYQ4FbUtL8+m1NFO8VoNFMZBMf5q0iF/SgEu5bmGWUCePia6DvfeBFQ2/y4Y7WmOj980WE+JmFTkIvmGruMYeGI8FuDQ2JIIIcehddy9bQbPF4VlGnTFsHqJYVRUUWc+vH1cPNMn01oB8s27ogf9e1lyhIN+cZOgp/jDt4eXcO4Wr04uwj7CI6m+d8iMQOa5Jv0hmNgqqiwOMVBlKeo0FCxlovzwvn/Lia9WZ74JqM6JwLCD8SZ0oFgiSIHOTHrQhr7iaCmj7X/0ey7VR8FnCrpeAJpG+ELTfWGshF1d9QR2zW7u4EsXTDLiuOmdJ+/KxwMvjMcWdlg2+Qch6SwulTQRxWaED2IWJo+YiAql8eaiVXu/eZJGLoiskGFZnONoLrzIT4pSjakPlrSpn/M/GkP1pDpaMkr24OhJsGpJNEU3F1ZcOMqy2iJzIxlPmU8Xg0I/OrnbJplpaXeRCqnmouJUJhWkaPzawaVyW7dtvprLWcpQtUgTRet18WLyOrLKlq1jwvNRMTPKUJ2IFJMpk2pNEP6bdiUxyMa4vrRIEU2p1zsYSUJpCRLtccZ/i/+yAqwnTA2L5TdAORi9nD2uCdM/Ljz52V3A14QapS6oqcoWx2soWKgnsbVXoG8DxmUTpll77Ze9t7Y5216SMInWuOu0vstP8ZcgFmWsiBgIYIuLA58abWHMxgD251phYidua6R3Gtkf8J/kYqTR1P6eJF1bt5efEg7FD2aL1QQZsYJo3CRNz7yVe1XqMdPbfe2mFXQVF9TDX5x6r9Ir3d0KiEmTlBdByz8nSyPJ8IQxC58NT4LNVQs3p2XH2Zcf6B4JOBSmV4NNBnLseFobsxniWjkWwZigED/D2iu3OXuuhmskCbw0hKy2rBcKffaSNMioVqYIiYNfKlMlSvAacQKqc/1HCpqgX8PwAcSgNSLy4K7/gIrTHmjY+g+CH7onzatWzkLo+0vsZRa/D/qwhhK2CU2FeU07mhnWxWuzqpJuqVaAwDTaEforK7nQUtAOFAZZP6qGhIoqsynYt4THb+QORb3QYfaP0PVgQwXfVU5Q8eUQFZ8A+siPtOASFjDumsIbseB5VzkF+UhvdseJwkX2+4pVFu8eHFDyvArYsHeGK6fBcQGJFQc2jSs6doIP9HD9IO2R ghelling@unknown38BAF87CD102";
in
@@ -13,4 +14,6 @@ in
"nextcloudadmin.age".publicKeys = [ linode user ];
"drone.age".publicKeys = [ linode user ];
"3proxy.age".publicKeys = [ macca2 user ];
}