diff options
| author | Mel <mel@rnrd.eu> | 2026-03-31 22:11:10 +0200 |
|---|---|---|
| committer | Mel <mel@rnrd.eu> | 2026-03-31 22:11:10 +0200 |
| commit | 2780fc65523814564153d92ab2d0f19be4ba0e02 (patch) | |
| tree | 472904f62e920551dbaba896a524e01576b5ced1 /machines/taupe/devices.nix | |
| parent | 7d899f695a1d5a448226ed9479c0e4c52454f595 (diff) | |
| download | network-2780fc65523814564153d92ab2d0f19be4ba0e02.tar.zst network-2780fc65523814564153d92ab2d0f19be4ba0e02.zip | |
VLESS/Reality VPN configuration for DPI evasion
Signed-off-by: Mel <mel@rnrd.eu>
Diffstat (limited to 'machines/taupe/devices.nix')
| -rw-r--r-- | machines/taupe/devices.nix | 18 |
1 files changed, 2 insertions, 16 deletions
diff --git a/machines/taupe/devices.nix b/machines/taupe/devices.nix index 5dcfee1..a07f794 100644 --- a/machines/taupe/devices.nix +++ b/machines/taupe/devices.nix @@ -3,7 +3,6 @@ { boot = { loader.systemd-boot.enable = true; - kernelModules = [ "wireguard" ]; }; zramSwap = { @@ -21,8 +20,7 @@ ]; }; - # Static IPv6 network configuration - # + soliciting of IPv4 via DHCP. + # static ipv6 + dhcp ipv4 systemd.network.enable = true; systemd.network.networks."10-wan" = { name = "enp1s0"; @@ -34,18 +32,6 @@ services.resolved = { llmnr = "false"; extraConfig = "MulticastDNS=no"; - dnssec = "false"; - }; - - virtualisation.docker.daemon.settings = { - "experimental" = true; - "ipv6" = true; - "ip6tables" = true; - "fixed-cidr-v6" = "fc00:d0c:b1b1::/48"; - "bip" = "172.17.0.1/24"; - "default-address-pools" = [ - { base = "172.17.0.0/16"; size = 24; } - { base = "fc00:d0c::/32"; size = 48; } - ]; + dnssec = "false"; }; } |