services.opengfw.rules

Rules passed to OpenGFW. Example rules.

Declarations

nixos/modules/services/networking/opengfw.nix

Type

list of (submodule)

Default

[ ]

Example

[
  {
    action = "block";
    expr = "string(http?.req?.headers?.host) endsWith \"v2ex.com\"";
    name = "block v2ex http";
  }
  {
    action = "block";
    expr = "string(socks?.req?.addr) endsWith \"google.com\" &amp;&amp; socks?.req?.port == 80";
    name = "block google socks";
  }
  {
    action = "modify";
    expr = "dns != nil &amp;&amp; dns.qr &amp;&amp; any(dns.questions, {.name endsWith \"v2ex.com\"})";
    modifier = {
      args = {
        a = "0.0.0.0";
        aaaa = "::";
      };
      name = "dns";
    };
    name = "v2ex dns poisoning";
  }
]