This commit is contained in:
Steph 2022-10-12 17:42:51 +02:00
parent ce62c6c257
commit 2fb87fa2c6
6 changed files with 329 additions and 0 deletions

View File

@ -9,6 +9,7 @@
[
./kakoune.nix
./pastebin.nix
./vpn/vpn.nix
];
nix = {
@ -153,6 +154,7 @@
libfprint-2-tod1-vfs0090
direnv
nix-direnv
openvpn
gnome.gnome-tweaks
gnomeExtensions.tray-icons-reloaded
@ -160,6 +162,7 @@
gnomeExtensions.noannoyance-2
gnomeExtensions.clipboard-history
gnomeExtensions.alphabetical-app-grid
gnome.networkmanager-openvpn
];
services.udev.packages = with pkgs; [ gnome.gnome-settings-daemon ];

12
vpn/vpn.nix Normal file
View File

@ -0,0 +1,12 @@
{ pkgs, lib, config, specialArgs, options, modulesPath }:
with pkgs;
{
services.openvpn.servers = {
zeta1-de = { config = '' config /home/steph/.local/os/vpn/zeta1-de.ovpn ''; };
zeta2-fin = { config = '' config /home/steph/.local/os/vpn/zeta2-fin.ovpn ''; };
zeta3-bg = { config = '' config /home/steph/.local/os/vpn/zeta3-bg.ovpn ''; };
zeta4-de = { config = '' config /home/steph/.local/os/vpn/zeta4-de.ovpn ''; };
};
}

79
vpn/zeta1-de.ovpn Normal file
View File

@ -0,0 +1,79 @@
client
proto udp
explicit-exit-notify
remote 176.9.51.93 7800
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_Nj10WUyjIdS0y92J name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
ignore-unknown-option block-outside-dns
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3
<ca>
-----BEGIN CERTIFICATE-----
MIIB2DCCAX2gAwIBAgIUdbA5L5UdrNwdD8eTeUKNtXc9takwCgYIKoZIzj0EAwIw
HjEcMBoGA1UEAwwTY25fVVhWb21sanlBNE1rcWRLdTAeFw0yMTAxMjQxNjIzMDFa
Fw0zMTAxMjIxNjIzMDFaMB4xHDAaBgNVBAMME2NuX1VYVm9tbGp5QTRNa3FkS3Uw
WTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARbxeYWbesH4HsBpj145sCTwmMlr8FF
1nvcdSLsHL3F63zS4PQ8SlCd00mJhzvV4+pMz6T79iQ477KLxfQr0Vl0o4GYMIGV
MB0GA1UdDgQWBBTEglZIG9a/aF+YCxh/rAZLu15FLDBZBgNVHSMEUjBQgBTEglZI
G9a/aF+YCxh/rAZLu15FLKEipCAwHjEcMBoGA1UEAwwTY25fVVhWb21sanlBNE1r
cWRLdYIUdbA5L5UdrNwdD8eTeUKNtXc9takwDAYDVR0TBAUwAwEB/zALBgNVHQ8E
BAMCAQYwCgYIKoZIzj0EAwIDSQAwRgIhAOTz92K5N7POYK2wRxH8uS9lElfcKvT1
4EJmeAMylsI8AiEAzokemcDxnCncsrjOADBfj2dJ4eGn1yn7pSCBn9rCPwU=
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgomqmdVQP6n6XB57U
d+14sUXe5LrQ3Kf86OCGOhKAjSqhRANCAARviTJr6p38AgjQQuhd5V2axbCBNL7p
Zr7AAjSjYhPNOMcyR129atRaVvky8NA7PKBlHz0u36xy6sAQAmWfrox/
-----END PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
5032d27881a4f0c13da5ee0f66fb3b9c
3300551d092cc54ea431c741de001383
ac3d71609c2bded80857ac6ef21bc3ff
4622cb67f6d6caeb26b8605b8a876292
c0f34e88ef4b772609e27ff6315ab0bd
dc8de2693449a0c26e3a6573eedaa9bf
81737aa5d92445947fd3d16729290fd2
1167f8400223e957c5ebbf6e95a6c80e
05a6bf55f80a06c800e1de9df3947c97
b76dbd199a321c801c76471c28f7408f
1c50f318c8c316e0530c94e35ef465a0
04cf7357c092d524c09167e93f259d15
75cbe8f4ebb32c8a8a6cf746087dd9bf
2f7b090f8ced28902e1eb0e73b3947c7
c7bc71abf460664b9b5eba2bbeec1ef1
b6808a5cb6a0daff33fc6a742780e966
-----END OpenVPN Static key V1-----
</tls-crypt>

78
vpn/zeta2-fin.ovpn Normal file
View File

@ -0,0 +1,78 @@
client
proto udp
explicit-exit-notify
remote 95.216.20.142 14600
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_B9Vkl2cj8qGXqhKQ name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
ignore-unknown-option block-outside-dns
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3
<ca>
-----BEGIN CERTIFICATE-----
MIIB1zCCAX2gAwIBAgIUCRKR4/8iRv0IuSLrFDajn8OxTuwwCgYIKoZIzj0EAwIw
HjEcMBoGA1UEAwwTY25fa2hJcEoyWm5TR01nMnZKbzAeFw0yMTAxMjQxNjI0MTNa
Fw0zMTAxMjIxNjI0MTNaMB4xHDAaBgNVBAMME2NuX2toSXBKMlpuU0dNZzJ2Sm8w
WTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASuOMvFJ3ZIAsS9rdh/pSGw0oZ8G6Lk
S5nAe7Wdo45f6Rcz/C9E3mFyF/GLPxs3kG41ELc3wBLIMvns6OF+dhKBo4GYMIGV
MB0GA1UdDgQWBBQ7gUapg2zY4WlTkVTxkizfdj0VTTBZBgNVHSMEUjBQgBQ7gUap
g2zY4WlTkVTxkizfdj0VTaEipCAwHjEcMBoGA1UEAwwTY25fa2hJcEoyWm5TR01n
MnZKb4IUCRKR4/8iRv0IuSLrFDajn8OxTuwwDAYDVR0TBAUwAwEB/zALBgNVHQ8E
BAMCAQYwCgYIKoZIzj0EAwIDSAAwRQIgV0nA0D8MV2Wx2OLvdEhJOqtDBx1q0fR2
nR9zxe5dOn0CIQC8FDQW+vImx6q1+P94g43uLc/6/yqwB/wC2Z5FZfZ51w==
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQghLZ1OKiH2t1t/9hY
86BkHuaI5TInsdH7sWCpmy0r8tGhRANCAARR4KyBi4B1jL2S2tuSWwuFlMZwcANU
to2Vu78xY55wbWCs08wbsd1ZmMj1N4LuaBU896dNLZIZsAmKs6Wj6YRa
-----END PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
7b5c9ccc4cfd60590431ce70086cfbb3
fee43f8b843a739857e5fbff6110e0af
2a0d7764fa2db4955392ff3a84a0158f
2413b004954cf86ee3a09b69d210fe81
2907f69ff0eb6d27def51a59e618c2d2
63adb1fa29ab95aa008360128e2f39d7
91065c0155826d9079610ed6c711f648
b97f9edc0ea15a43df48386f042f993b
5f24d955c93ad7380aa37b96a84fb996
52c5e07952fba9bd55b3b0bf9adee878
2146adb20a2d102624984b8cb6be1b7a
41df1ad72cc4cea0da7163e8f86e4e1b
04fee34384485b00d9c5662de1238d5d
d48814b131a6f1ca28056c65e560d8c1
62bee245bf13c4ef27e1ab8b7c4f4269
3304d9db2b0e714a08c27da849da6c3c
-----END OpenVPN Static key V1-----
</tls-crypt>

79
vpn/zeta3-bg.ovpn Normal file
View File

@ -0,0 +1,79 @@
client
proto udp
explicit-exit-notify
remote 82.118.234.154 19100
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_7WKd68z9JGlkvWrx name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
ignore-unknown-option block-outside-dns
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgJNQKU+T/X+g5G2Us
bM39pl1E3mT0IHBT1Ru+hwIGCTKhRANCAAQGn/Et1U7qROASJ7XJKNIRX8K5WRHF
jKVJ8niB98tFf5wzO1wl34507O8k/4IfFb+7hx1zfp/7ILjb3fLcf1l9
-----END PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
0bce7baea63c03a4cebfceb4c4cc43a9
3a1f49fad0a7edaa01b9e199f3d8003f
beb2ebc8b1b8bb2982440c28a7c172e2
09a98725f2296f0c439cf2066c1f799d
af648a095dfb84b9245243890fde21a7
f9307509778f2b4877f4c2faed020e74
fb3fe24a5fb4c7297686fb43e2b26793
1bb96221dfaa34e7f597adfb7fe0f793
2c9ba9869134a558f03a06081120653f
c6de0be668b8eee7e73703d83b98004d
7f272e9d6a20613b364f85194213dbdc
27c5a044331a9c393bc4e19be37e7bb6
9ae38daaa75f70d6216e19a386d49fe1
52cb36b2cb0dcdfad3795276084d0a08
aeb181ff501e9b60db5e816c34b64c23
ed7804fb70b428e3b76e79e6c59aad9c
-----END OpenVPN Static key V1-----
</tls-crypt>

78
vpn/zeta4-de.ovpn Normal file
View File

@ -0,0 +1,78 @@
client
proto udp
explicit-exit-notify
remote 136.243.23.68 3900
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_U2H07UTlZuh5rChE name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
ignore-unknown-option block-outside-dns
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgdtvvIlnmmz9I+Cmu
wJ3caL9Wzgawgk7nUxL/KtAF6m6hRANCAAQJ0FPeKDqQ4Co3+woGSldyXgpL5KG7
3QI/pOpUHQuWhXRUjtrYVq8O4KcZfc0V1boUT096AlASa9soYGVibvtq
-----END PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
d0e0e514742e22313a8e44f81b312c39
fe15e6aa941ade54b9d2b9de9fc866eb
37c974f948de11c062827e8077c8bbdc
d149f56cb4588880a043469c4fe3a84c
5a94aa7b10d0f9ce28dc70c92239eb71
e83b74098332fc2273f1c38ece0ae504
989baebc26edff9018ca615fa71849ff
2ae3313060e09874cb35e0d6967112c8
81e5bb0d65f2889d12894f1f0ea12c5b
0b0f7407ef83392852eeb3ed8573db55
a74e98795ec1cf8aed468cf5b63c0b8a
7abcb1c51539a91551a7f8390b8a62b5
2d2c4aada0cf3a388cde55dc519185fb
bfaa0daee2f8dd5e3dbebae517c0deed
1a5252462774745b07bf06edc69a9c41
87951140c46b38d42ccc89f2fff9f021
-----END OpenVPN Static key V1-----
</tls-crypt>