flake/nixos/networking/proxy.nix

{ pkgs, config, ... }:

{
  networking = {
    proxy = {
      default = "http://127.0.0.1:7890/";
      noProxy = "127.0.0.1,localhost";
    };
  };

  environment.systemPackages = with pkgs; [ clash-meta ];
  systemd.services."clash-meta" = {
    wantedBy = [ "multi-user.target" ];
    after = [ "network-online.target" ];
    description = "Clash.Meta Daemon";
    serviceConfig = {
      Type = "simple";
      WorkingDirectory = "/etc/clash-meta";
      User = [ config.users.users."clash-meta".name ];
      ExecStart = "${pkgs.clash-meta}/bin/clash-meta -d /etc/clash-meta";
      Restart = "on-failure";
      CapabilityBoundingSet = [
        "CAP_NET_RAW"
        "CAP_NET_ADMIN"
        "CAP_NET_BIND_SERVICE"
      ];
      AmbientCapabilities = [
        "CAP_NET_RAW"
        "CAP_NET_ADMIN"
        "CAP_NET_BIND_SERVICE"
      ];
    };
  };

  environment.etc."clash-meta/metacubexd".source = ../../flakes/home-manager/guanranwang/common/dotfiles/config/clash/metacubexd;
}