diff options
Diffstat (limited to 'modules/tunnel')
| -rw-r--r-- | modules/tunnel/egress.nix | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/modules/tunnel/egress.nix b/modules/tunnel/egress.nix index 7858751..4334f80 100644 --- a/modules/tunnel/egress.nix +++ b/modules/tunnel/egress.nix @@ -7,7 +7,7 @@ }: let - inherit (lib) findFirst; + inherit (lib) findFirst mkForce; # this is the https port, we use it to try to trick dpi into thinking # we are just serving normal encrypted web traffic, nothing interesting! :) @@ -130,4 +130,8 @@ in enable = true; settingsFile = "/run/xray-configuration/xray.json"; }; + + # nginx can not run on an egress node because xray has to run on port 443. + services.nginx.enable = mkForce false; + systemd.services.nginx.enable = mkForce false; } |