{ lib, pkgs, config, ... }: { services.sing-box = { enable = true; settings = { log = { level = "info"; }; inbounds = lib.singleton { type = "http"; tag = "inbound"; listen = "127.0.0.1"; listen_port = 1080; sniff = true; sniff_override_destination = true; }; outbounds = [ { type = "vless"; tag = "tyo0"; server = "tyo0.ny4.dev"; server_port = 27253; uuid = "29e54ee5-43f5-4891-b750-ca73c7e3b2b3"; flow = "xtls-rprx-vision"; tls.enabled = true; } { type = "direct"; tag = "direct"; } ]; route = { rules = [ { rule_set = [ "geoip-cn" "geosite-cn" ]; outbound = "direct"; } { rule_set = [ "geosite-private" ]; ip_is_private = true; outbound = "direct"; } ]; rule_set = [ { tag = "geoip-cn"; type = "local"; format = "binary"; path = "${pkgs.sing-geoip}/share/sing-box/rule-set/geoip-cn.srs"; } { tag = "geosite-cn"; type = "local"; format = "binary"; path = "${pkgs.sing-geosite}/share/sing-box/rule-set/geosite-cn.srs"; } { tag = "geosite-private"; type = "local"; format = "binary"; path = "${pkgs.sing-geosite}/share/sing-box/rule-set/geosite-private.srs"; } ]; final = lib.mkDefault "tyo0"; }; }; }; ### System proxy settings networking.proxy = { httpProxy = "http://127.0.0.1:1080/"; httpsProxy = "http://127.0.0.1:1080/"; }; programs.fish.shellAliases = let inherit (config.networking.proxy) httpProxy httpsProxy; in { "setproxy" = "export http_proxy=${httpProxy} https_proxy=${httpsProxy}"; "unsetproxy" = "set -e http_proxy https_proxy"; }; ### sops-nix sops.secrets."sing-box/tyo0" = { restartUnits = [ "sing-box.service" ]; sopsFile = ./secrets.yaml; }; }