From f32113b0013d8498b30a27df84dd188737f04cde Mon Sep 17 00:00:00 2001 From: Greg Hellings Date: Mon, 31 Oct 2022 15:23:17 -0500 Subject: [PATCH] Add local proxy --- hosts/2maccabees/networking.nix | 23 +++++++++++++++++++++++ secrets/3proxy.age | Bin 0 -> 2407 bytes secrets/secrets.nix | 5 ++++- 3 files changed, 27 insertions(+), 1 deletion(-) create mode 100644 secrets/3proxy.age diff --git a/hosts/2maccabees/networking.nix b/hosts/2maccabees/networking.nix index ea540a8..a4d095a 100644 --- a/hosts/2maccabees/networking.nix +++ b/hosts/2maccabees/networking.nix @@ -49,4 +49,27 @@ greg.proxies."jellyfin.thehellings.lan".target = "http://localhost:8096"; greg.proxies."jellyfin.me.ts".target = "http://localhost:8096"; + + ######### + # Blind service proxy behind the walls of the VPN + ######## + services._3proxy = { + enable = true; + services = [ { + type = "socks"; + auth = [ "strong" ]; + bindPort = 3128; + acl = [ { + rule = "allow"; + users = [ "greg" ]; + } ]; + } ]; + usersFile = "/run/agenix/3proxy"; + denyPrivate = false; + }; + age.secrets."3proxy" = { + file = ../../secrets/3proxy.age; + mode = "777"; + }; + networking.firewall.allowedTCPPorts = [ 3128 ]; } diff --git a/secrets/3proxy.age b/secrets/3proxy.age new file mode 100644 index 0000000000000000000000000000000000000000..be6cc0e2946680baefe8672baaab88a10cfd3970 GIT binary patch literal 2407 zcmYk7IqUQY0mcQfN#Pe*gqH;c4eutI+^jBSCU+)xCX)n3a^Lqo))qE)b~f8sh>ew{ zf+$v7h?R?lR$7X!EB>+a6Fl%7zbDMo_h}bT=dhH0_fbFP(1rl-KY2IL#rtUv-__iv zz8Jty{x;P%sML~fNshLW|swDIT`^g)@4s4p#6cEsg=ZKoT`x+*6E zsIS}Bi*lJlTCMnAr}~w{8y{n@Yy!>}1@*}=b0w}7RUaO38 z05ieeDtFUbPyQrcfqCFhvaFxYg%f1~^t^gIT=O<9AY+MGPophyrM;Up+TH?yM25#1 zLa{BLf;?DLujG1iwhZk;u3Il=dp5{&D<_??LD?8LL4*aix4QFkmp7VSfOcy6lC*L3 z`DpUn5DTtD6MhtVyTp4rda@;7-^Dx&Wn?j)H}oLtEj#uCs~&AxC@x^OZ1m_IyK5L+ zj;G^Mz=Rnm==97Q;gO{={dDc4a|#P>IUnDstD_XSbZE%H(_UQzqd}#J;COYwX@0VS zW88!*BV&DB_8J#E1uXP4DuPjnHmbluajz7W+W12o<;TmT0B!IOm4}fM6&K@N1rv65 z^$=0Qy1)7B6l=E`!b{WzWOs92e)Cn1qDjCtOaMu=On~gXNwghDxLt=UJiahVI=lX5 z9Y|vETzBPZGEyE7GTw&hxj>8%M=O}OD%6<^))y$STd9EWrOJIeN)Li1ei%+p}4|C1Y zgG{d0vw;QOi~qmJMP+Z*4zPAymYi3lP2@<2$D9Iry6TQ6*T}3v)v%8q4R@-MOBtz# zChc+uaV`l*<+8_JXcxFxR!g~JbJVPZBw6p|udVAy+92k&Qu`7Kcq$h=40qJDfHp^V zc>Sdw>DZ29KBF$6%_qW5qboe_G@&@cEe=ca0X7OQU&DdKnS^pEA5!*bar1nFsK#kA zZv<@w^^L$H2hh*{u~#)dpPkhq;Z=Dad2FXA%<4TmZ%f%?(i*ruJe!z?!{~8cSnhRl z6eM+F-=P4Hj#)&r3%*+nZ7tc(yU(Nb1iZnJiZAoLVLFI#XlBm>9>sd(Hd??k{dg`UlMaf7F1jGnAU z8z9%*k}d=H>M3itxq4Dm@Mw2j+Qm6tl^Axc+d)6rY((WSCn&!*rWlq(7J0$Sy^w%% z7rMKzmj~~Icjc`W+(sW}mj%qNiX+46n&v!h8=Mx@g(Qs(fU0hW zPF_2(V~;fg0Y$gtSljer&!?c;Fv-iB4xbLmNz4f9y9sml!_^j$berR@1VHr0L$7(k zPF#X({laR*iz{r<#0iuT^%f{+^VR`zTxm2MCM@av=7E{eth260QRfPH4(4Fs093bsqi6bQmiZbb34%x zicAdY6M`)8=)G+*3X~NAwU~I;l4&a@TJbw-jfWhJA{++j`oL_Is!NFw<2MOp-c3rm z5PIo@594_`=BBVmX;kPqPRlacko*JQ?|sFV${0$U&~ zdDu(v=Gf>Po{!W3#pmg%n6npt(?j6`c3Vb^Y6vLq+fwfffw!)UtaD(5n-pImK1*_S z8MDifJSSDu6{6ypslw1R8aVvg%3@iU}d#wVn`bIaUZZpVJeK69vNL6D6Lw> zBbF*o3Q;-&zu)H2w-C}Qmk17lh3D}L0PibwT$2o59c@EO7Lc(AK3 z%R5@!zT*S5`^ez5GFk-%D;_JtHCxKF;=C9H>1JISJzEsxqQ&c&-@S7%WzSqqSAo(q z&}PF1?jVQS-i_X%#b;E^yF|p>r~A-lGz$iU6x`5wyn`>jKVHrpc>n(WyID312r~pJ z&_{G?qJksJ>Z0kO+>?r<_&Z^Rb{#Ru69azt$$x(F%k3xs`0Cd``{_Fg{nuaq^p(GU z@w507|F?hs)*rw2qt8FjKKSC(zi~hQ;rD;=