mirror of
https://github.com/youwen5/liminalOS.git
synced 2025-08-04 03:28:30 -07:00
feat: split tunnel THU TUNA mirror through mullvad
This commit is contained in:
parent
13416e0aaf
commit
2d9888dd4e
1 changed files with 16 additions and 0 deletions
|
@ -50,6 +50,22 @@ in
|
|||
config = lib.mkIf cfg.enable {
|
||||
services.openssh.enable = true;
|
||||
|
||||
networking.nftables = {
|
||||
enable = true;
|
||||
ruleset = ''
|
||||
define EXCLUDED_IPS = {
|
||||
101.6.15.130
|
||||
}
|
||||
|
||||
table inet excludeTraffic {
|
||||
chain excludeOutgoing {
|
||||
type route hook output priority 0; policy accept;
|
||||
ip daddr $EXCLUDED_IPS ct mark set 0x00000f41 meta mark set 0x6d6f6c65;
|
||||
}
|
||||
}
|
||||
'';
|
||||
};
|
||||
|
||||
networking.firewall = {
|
||||
enable = true;
|
||||
allowedTCPPorts = universalAllowedPorts;
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue