asxpi/nixOS
asxpi/nixOS
1
0
Fork 0
Code Issues Pull requests Activity

ssh: bypass tun2socks via direct SOCKS5 to fix post-quantum kex issue

Browse source
This commit is contained in:
Sergei Poljanski 2026-04-06 02:35:19 +03:00
commit 6777a7652f
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
modules/xray.nix
View file

@ -57,6 +57,12 @@ in
};
};
# SSH bypasses tun0, goes through SOCKS5 directly (avoids tun2socks kex issues)
programs.ssh.extraConfig = ''
Host *
ProxyCommand ${pkgs.netcat-openbsd}/bin/nc -X 5 -x 127.0.0.1:10808 %h %p
'';
# DNS through tunnel — use public DNS that will go through tun0
networking.nameservers = [ "1.1.1.1" "8.8.8.8" ];