elars/copnix
1
0 Fork 0
mirror of https://github.com/elwrcl/copnix.git synced 2026-10-31 14:28:02 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix: zapret firewall rules

Browse Source
This commit is contained in:
elwrcl committed 2026-03-31 01:02:20 +03:00
1 parent 5b1c526e6a
commit 9f46eb3bbe
2 files changed
+8 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

nixos/hardware/graphics/intel.nix
+1
View File
@@ -16,6 +16,7 @@
environment.variables = { environment.variables = {
LIBVA_DRIVER_NAME = "i965"; LIBVA_DRIVER_NAME = "i965";
LIBVA_DRM_DEVICE = "/dev/dri/renderD128";
VK_ICD_FILENAMES = "/run/opengl-driver/share/vulkan/icd.d/intel_hasvk_icd.x86_64.json"; VK_ICD_FILENAMES = "/run/opengl-driver/share/vulkan/icd.d/intel_hasvk_icd.x86_64.json";
}; };
} }
nixos/networking/vpn/default.nix
+7 -2
View File
@@ -1,7 +1,6 @@
{ config, pkgs, ... }: { config, pkgs, ... }:
{ {
# you can make this true if you have problems with zapret
services.cloudflare-warp.enable = false; services.cloudflare-warp.enable = false;
services.zapret = { services.zapret = {
@@ -26,8 +25,14 @@
networking.enableIPv6 = false; networking.enableIPv6 = false;
networking.firewall.extraCommands = '' networking.firewall.extraCommands = ''
iptables -I OUTPUT -p tcp -m multiport --dports 80,443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass
iptables -I OUTPUT -p udp --dport 443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass
iptables -I OUTPUT -m mark --mark 0x40000000/0x40000000 -j RETURN
'';
networking.firewall.extraStopCommands = ''
iptables -D OUTPUT -p tcp -m multiport --dports 80,443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass || true iptables -D OUTPUT -p tcp -m multiport --dports 80,443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass || true
iptables -D OUTPUT -p udp --dport 443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass || true iptables -D OUTPUT -p udp --dport 443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass || true
iptables -D OUTPUT -m mark --mark 0x40000000/0x40000000 -j RETURN || true iptables -D OUTPUT -m mark --mark 0x40000000/0x40000000 -j RETURN || true
''; '';
} }