bonfire/nixosModules/services/spoofdpi.nix

{ config, lib, bonpkgs, ... }:
with lib; 
let 
    cfg = config.services.spoofdpi;
in {
    options.services.spoofdpi = {
        enable = mkEnableOption "SpoofDPI service";

        package = mkOption {
            type = types.package;
            default = bonpkgs.spoofdpi;
            defaultText = literalExpression "bonpkgs.spoofdpi";
            description = "The package to use.";
        };
        
        address = mkOption rec { 
            type = types.str; 
            default = "127.0.0.1";
            example = default;
            description = "Listen address.";
        };

        port = mkOption rec {
            type = types.port;
            default = 8080;
            example = default;
            description = "Port.";
        };

        openFirewall = mkOption {
            type = types.bool;
            default = false;
            description = "Open `services.spoofdpi.port`.";
        };

        dns = mkOption rec {
            type = types.str;
            default = "8.8.8.8";
            example = default;
            description = "DNS server.";
        };
    };

    config = mkIf cfg.enable {
        systemd.services.spoofdpi = {
            wantedBy = [ "multi-user.target" ];
            after = [ "network.target" ];
            serviceConfig = {
                Restart = "on-failure";
                ExecStart = "${lib.getExe cfg.package} -no-banner -addr ${cfg.address} -port ${toString cfg.port} -dns ${cfg.dns}";
                DynamicUser = "yes";
            };
        };

        networking.firewall = mkIf cfg.openFirewall {
            allowedTCPPorts = [ cfg.port ];
        };
    };
}