From 6b1e87042fb4c9d140b637deda12e69624158904 Mon Sep 17 00:00:00 2001
From: Quinn Unger <quinn.unger@pm.me>
Date: Wed, 2 Sep 2026 15:14:36 +0100
Subject: [PATCH] lala: add flaresolverr and 3proxy

---
 hosts/lala/proxies.nix | 40 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 40 insertions(+)

diff --git a/hosts/lala/proxies.nix b/hosts/lala/proxies.nix
index 2c4e55b..a4aac2a 100644
--- a/hosts/lala/proxies.nix
+++ b/hosts/lala/proxies.nix
@@ -5,7 +5,11 @@
   lib,
   ...
 }:
+let
+  socksPort = 1080;
+in
 {
+  # Forwarded to netbird-proxy service
   networking.firewall = {
     allowedTCPPorts = [
       25565 # minecraft
@@ -13,5 +17,41 @@
     allowedUDPPorts = [
       8211 # palworld
     ];
+    # trustedInterfaces = [ "nb-sidonia" ];
+  };
+
+  # Accessible from netbird network
+  networking.firewall.interfaces.nb-sidonia = {
+    allowedTCPPorts = [
+      socksPort
+      config.services.flaresolverr.port
+    ];
+    allowedUDPPorts = [ socksPort ];
+  };
+
+  services = {
+    flaresolverr = {
+      enable = true;
+      openFirewall = false;
+      port = 8191;
+    };
+    _3proxy = {
+      enable = true;
+      denyPrivate = true;
+      services = [
+        {
+          type = "socks";
+          bindPort = socksPort;
+          auth = [ "iponly" ];
+          acl = [
+            {
+              # only allow netbird clients
+              rule = "allow";
+              sources = [ "100.109.0.0/16" ];
+            }
+          ];
+        }
+      ];
+    };
   };
 }
-- 
2.51.2