From 03648b3d9f177227df40129bed22558f6924b91c Mon Sep 17 00:00:00 2001
From: spl3g <notspl3g@duck.com>
Date: Wed, 18 Mar 2026 18:01:41 +0300
Subject: so.. v2 i guess

---
 modules/hosts/ltrr-mask/configuration.nix | 125 ++++++++++++++++++++++++++++++
 modules/hosts/ltrr-mask/disk-config.nix   |  56 +++++++++++++
 2 files changed, 181 insertions(+)
 create mode 100644 modules/hosts/ltrr-mask/configuration.nix
 create mode 100644 modules/hosts/ltrr-mask/disk-config.nix

(limited to 'modules/hosts/ltrr-mask')

diff --git a/modules/hosts/ltrr-mask/configuration.nix b/modules/hosts/ltrr-mask/configuration.nix
new file mode 100644
index 0000000..3656016
--- /dev/null
+++ b/modules/hosts/ltrr-mask/configuration.nix
@@ -0,0 +1,125 @@
+{
+  inputs,
+  self,
+  ...
+}: {
+  flake.nixosConfigurations.ltrr-mask = inputs.nixpkgs-stable.lib.nixosSystem {
+    modules = [
+      self.nixosModules.ltrr-mask
+    ];
+  };
+
+  flake.nixosModules.ltrr-mask = {
+    modulesPath,
+    config,
+    lib,
+    pkgs,
+    ...
+  }: let
+    domain = "kcu.su";
+  in {
+    imports = [
+      (modulesPath + "/installer/scan/not-detected.nix")
+      (modulesPath + "/profiles/qemu-guest.nix")
+
+      inputs.disko.nixosModules.disko
+      self.diskoConfigurations.ltrr-mask
+
+      self.nixosModules.nginxProxy
+    ];
+    nixpkgs.hostPlatform = "x86_64-linux";
+
+    boot.loader.grub = {
+      efiSupport = true;
+      efiInstallAsRemovable = true;
+    };
+
+    networking.firewall.allowedTCPPorts = [
+      # http
+      # 80
+      # 443
+
+      # xray
+      4876
+      57625
+      39701
+      39482
+    ];
+
+    networking.domain = domain;
+    networking.hostName = "ltrr-vpn";
+    networking = {
+      interfaces.ens3 = {
+        ipv4.addresses = [
+          {
+            address = "64.188.126.186";
+            prefixLength = 32;
+          }
+        ];
+      };
+      defaultGateway = {
+        address = "100.64.0.1";
+        interface = "ens3";
+      };
+    };
+
+    networking.useDHCP = lib.mkDefault false;
+
+    networking.nameservers = ["8.8.8.8" "1.1.1.1"];
+
+    services.openssh = {
+      enable = true;
+      settings.PasswordAuthentication = false;
+    };
+
+    environment.systemPackages = map lib.lowPrio [
+      pkgs.curl
+      pkgs.gitMinimal
+    ];
+
+    users.users = {
+      root = {
+        openssh.authorizedKeys.keys = [
+          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDJ8UW1BXDGDmlaiARO3a9boTG8wknUyITMz0Z0OJpHx spleefer6@yandex.ru"
+          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPuQVHIGm2bfvhW16ZI/4hDK2X8W+ADbPLXwzKZIYXZL user@LAPTOP-72FMD6D0"
+        ];
+      };
+    };
+
+    nginxProxy = {
+      enable = false;
+      acme.enable = true;
+
+      inherit domain;
+      subdomains = {
+        "xray" = {
+          proxyPass = "http://127.0.0.1:2053";
+
+          extraConfig = "
+          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+          proxy_set_header X-Forwarded-Proto $scheme;
+          proxy_set_header Host $host;
+          proxy_set_header X-Real-IP $remote_addr;
+          proxy_set_header Range $http_range;
+          proxy_set_header If-Range $http_if_range; 
+          proxy_redirect off;
+        ";
+          recommendedProxySettings = false;
+        };
+      };
+    };
+
+    virtualisation.oci-containers = {
+      backend = "docker";
+      containers.xui = {
+        image = "ghcr.io/mhsanaei/3x-ui:latest";
+        ports = ["4876:2053" "57625:57625" "39701:39701"];
+        volumes = [
+          "/root/x-ui:/etc/x-ui"
+        ];
+      };
+    };
+
+    system.stateVersion = "24.05";
+  };
+}
diff --git a/modules/hosts/ltrr-mask/disk-config.nix b/modules/hosts/ltrr-mask/disk-config.nix
new file mode 100644
index 0000000..e772466
--- /dev/null
+++ b/modules/hosts/ltrr-mask/disk-config.nix
@@ -0,0 +1,56 @@
+{lib, ...}: {
+  flake.diskoConfigurations.ltrr-mask = {
+    disko.devices = {
+      disk.disk1 = {
+        device = lib.mkDefault "/dev/vda";
+        type = "disk";
+        content = {
+          type = "gpt";
+          partitions = {
+            boot = {
+              name = "boot";
+              size = "1M";
+              type = "EF02";
+            };
+            esp = {
+              name = "ESP";
+              size = "500M";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+              };
+            };
+            root = {
+              name = "root";
+              size = "100%";
+              content = {
+                type = "lvm_pv";
+                vg = "pool";
+              };
+            };
+          };
+        };
+      };
+      lvm_vg = {
+        pool = {
+          type = "lvm_vg";
+          lvs = {
+            root = {
+              size = "100%FREE";
+              content = {
+                type = "filesystem";
+                format = "ext4";
+                mountpoint = "/";
+                mountOptions = [
+                  "defaults"
+                ];
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+}
-- 
cgit v1.2.3