tor bridge

flake.nix

@@ -44,6 +44,7 @@
           ./modules/services/openssh.nix
           ./modules/services/firewall.nix
           ./modules/services/tailscale.nix
+          ./modules/services/tor-bridge.nix
           ./modules/services/podman.nix
           ./modules/services/static-sites
           ./modules/users/tobias.nix

modules/services/firewall.nix

@@ -1,5 +1,5 @@
 { ... }:
 {
   networking.firewall.enable = true;
-  networking.firewall.allowedTCPPorts = [ 22 80 443 8443 ];
+  networking.firewall.allowedTCPPorts = [ 22 80 443 4430 8443 ];
 }

modules/services/tor-bridge.nix

@@ -0,0 +1,15 @@
+{ pkgs, ... }: {
+  services.tor = {
+    enable = true;
+    relay = {
+      enable = true;
+      role = "bridge";
+    };
+    settings = {
+      ServerTransportPlugin = "obfs4 exec ${pkgs.obfs4}/bin/obfs4proxy";
+      ServerTransportListenAddr = "obfs4 0.0.0.0:4430";
+      ExtORPort = "auto";
+      BridgeDistribution = "none";
+    };
+  };
+}