Add Shadowsocks proxy service

hosts/default.nix

@@ -199,4 +199,16 @@ in
     ];
     # specialArgs = { };
   };
+
+  shadowshocks = nixpkgs.lib.nixosSystem {
+    pkgs = pkgs "x86_64-linux";
+    modules = [
+      myModules
+      proxmoxModule
+      ./shadowshocks
+      agenix.nixosModules.default
+    ];
+    # specialArgs = { };
+  };
+
 }

hosts/deployments.nix

@@ -116,6 +116,16 @@ in
     ];
   };
 
+  shadowshocks.deployment = {
+    targetHost = hosts.shadowshocks;
+    tags = [
+      "lxc"
+      "bacco"
+      "shadowshocks"
+    ];
+  };
+
+
   deadbeef.deployment = {
     allowLocalDeployment = true;
     targetHost = null;

hosts/parameters.nix

@@ -12,6 +12,7 @@
     colmena = "colmena.internal";
     dns01 = "192.168.1.2";
     dns02 = "192.168.1.3";
+    shadowshocks = "shadowshocks.internal";
   };
   domains = {
     public = "pasetto.me";

hosts/shadowshocks/default.nix

@@ -0,0 +1,29 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+{
+
+  age.secrets.shadowshocks-password.file = ../../secrets/shadowshocks-password.age;
+
+  my = {
+
+    utils = {
+      commons.enable = true;
+      commons.gc.enable = true;
+      lxc-standard.enable = true;
+    };
+
+    virtualisation.proxmox.enable = true;
+  };
+
+  services.shadowsocks = {
+    enable = true;
+    passwordFile = config.age.secrets.shadowshocks-password.path;
+    port = 8388;
+  };
+
+  system.stateVersion = "24.11";
+}