From abd93dcbb262b9a0da67950c236e3ae35470a0df Mon Sep 17 00:00:00 2001 From: L-Nafaryus Date: Mon, 13 Jan 2025 23:59:30 +0500 Subject: [PATCH] astora: fix carapace completion in nushell astora: enable zapret service --- nixosConfigurations/astora/users.nix | 42 ++++++++++++++-------------- 1 file changed, 21 insertions(+), 21 deletions(-) diff --git a/nixosConfigurations/astora/users.nix b/nixosConfigurations/astora/users.nix index aca3990..1ce91dd 100644 --- a/nixosConfigurations/astora/users.nix +++ b/nixosConfigurations/astora/users.nix @@ -157,7 +157,7 @@ in { # for editing directly to config.nu extraConfig = '' let carapace_completer = {|spans| - carapace $spans.0 nushell $spans | from json + carapace $spans.0 nushell ...$spans | from json } $env.config = { show_banner: false, @@ -464,26 +464,26 @@ in { # Services services.spoofdpi.enable = true; - #services.zapret = { - # enable = true; - # mode = "nfqws"; - # firewallType = "iptables"; - # disableIpv6 = true; - # settings = '' - # MODE_HTTP=1 - # MODE_HTTP_KEEPALIVE=0 - # MODE_HTTPS=1 - # MODE_QUIC=1 - # MODE_FILTER=ipset - # TPWS_OPT="--split-http-req=method --split-pos=1 --oob" - # NFQWS_OPT_DESYNC="--dpi-desync=fake --dpi-desync-ttl=5" - # NFQWS_OPT_DESYNC_HTTP="--dpi-desync=fake --dpi-desync-ttl=5" - # NFQWS_OPT_DESYNC_HTTPS="--dpi-desync=fake --dpi-desync-ttl=5" - # NFQWS_OPT_DESYNC_QUIC="--dpi-desync=fake --dpi-desync-ttl=5" - # INIT_APPLY_FW=1 - # ''; - # filterAddressesSource = "https://antifilter.network/download/ipsmart.lst"; - #}; + services.zapret = { + enable = true; + mode = "nfqws"; + firewallType = "iptables"; + disableIpv6 = true; + settings = '' + MODE_HTTP=1 + MODE_HTTP_KEEPALIVE=0 + MODE_HTTPS=1 + MODE_QUIC=1 + MODE_FILTER=ipset + TPWS_OPT="--split-http-req=method --split-pos=1 --oob" + NFQWS_OPT_DESYNC="--dpi-desync=fake --dpi-desync-ttl=3" + NFQWS_OPT_DESYNC_HTTP="--dpi-desync=fake --dpi-desync-ttl=3" + NFQWS_OPT_DESYNC_HTTPS="--dpi-desync=fake --dpi-desync-ttl=3" + NFQWS_OPT_DESYNC_QUIC="--dpi-desync=fake --dpi-desync-ttl=5" + INIT_APPLY_FW=1 + ''; + filterAddressesSource = "https://antifilter.network/download/ipsmart.lst"; + }; # TODO: remember who use gvfs services.gvfs.enable = true;