From d5b30d49c1677762891d43eab265dd35a6daca19 Mon Sep 17 00:00:00 2001
From: Mel <mel@rnrd.eu>
Date: Thu, 23 Apr 2026 21:22:30 +0200
Subject: Use sing-box gVisor stack for routing instead of system, fixing VPN
 TCP

Signed-off-by: Mel <mel@rnrd.eu>
---
 modules/vpn/ingress.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'modules')

diff --git a/modules/vpn/ingress.nix b/modules/vpn/ingress.nix
index b05572e..6c6a78e 100644
--- a/modules/vpn/ingress.nix
+++ b/modules/vpn/ingress.nix
@@ -148,6 +148,7 @@ in
             interface_name = egressName;
             address = [ egressAddress ];
             mtu = egressMTU;
+            stack = "gvisor";
             auto_route = false; # we route manually
             strict_route = false;
             endpoint_independent_nat = true;
@@ -157,7 +158,6 @@ in
         outbounds = map (path: {
           type = "vless";
           flow = "xtls-rprx-vision";
-          packet_encoding = "xudp";
 
           server = egressHost path.egress;
           server_port = 443;
-- 
cgit 1.4.1