noah/dotfiles
1
0
Fork 0
mirror of https://github.com/nmasur/dotfiles synced 2024-11-10 05:12:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

transmission reaches internet through vpn

Browse Source
This commit is contained in:
Noah Masur 2022-10-09 18:32:43 +00:00
parent 129e4bba4b
commit d8b5d74dcb
2 changed files with 5 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
modules/services/transmission.nix
View File

@ -37,7 +37,7 @@ in {
requires = [ "network-online.target" ]; requires = [ "network-online.target" ];
after = [ "wireguard-wg0.service" ]; after = [ "wireguard-wg0.service" ];
unitConfig.JoinsNamespaceOf = "netns@wg.service"; unitConfig.JoinsNamespaceOf = "netns@wg.service";
serviceConfig = { PrivateNetwork = true; }; serviceConfig.NetworkNamespacePath = "/var/run/netns/wg";
}; };
# Create reverse proxy for web UI # Create reverse proxy for web UI
@ -51,12 +51,10 @@ in {
# Allow inbound connections to reach namespace # Allow inbound connections to reach namespace
systemd.services.transmission-web-netns = { systemd.services.transmission-web-netns = {
description = "Forward to transmission in netns"; description = "Forward to transmission in wireguard namespace";
requires = [ "transmission.service" ]; requires = [ "transmission.service" ];
after = [ "transmission.service" ]; after = [ "transmission.service" ];
serviceConfig = { serviceConfig = {
User = "transmission";
Group = "transmission";
Restart = "on-failure"; Restart = "on-failure";
TimeoutStopSec = 300; TimeoutStopSec = 300;
}; };

6
modules/services/wireguard.nix
View File

@ -33,15 +33,15 @@ in {
}]; }];
# Namespaces # Move to network namespace for isolating programs
interfaceNamespace = "wg"; interfaceNamespace = "wg";
# socketNamespace = "wg";
}; };
}; };
}; };
# Create namespace for Wireguard # Create namespace for Wireguard
# This allows us to isolate specific programs to Wireguard
systemd.services."netns@" = { systemd.services."netns@" = {
description = "%I network namespace"; description = "%I network namespace";
before = [ "network.target" ]; before = [ "network.target" ];
@ -53,7 +53,7 @@ in {
}; };
}; };
# Private key file for wireguard # Create private key file for wireguard
systemd.services.wireguard-private-key = { systemd.services.wireguard-private-key = {
wantedBy = [ "wireguard-wg0.service" ]; wantedBy = [ "wireguard-wg0.service" ];
requiredBy = [ "wireguard-wg0.service" ]; requiredBy = [ "wireguard-wg0.service" ];