services.zapret.enable

Whether to enable DPI bypass multi platform service.

Type: boolean

Default: false

Example: true

Declared by:

services.zapret.package

The package to use.

Type: package

Default: bonPkgs.zapret

Declared by:

services.zapret.dataDir

Directory to store zapret files and antifilter lists.

Type: path

Default: "/var/lib/zapret"

Declared by:

services.zapret.disableIPV4

Enable usage of IpV4.

Type: boolean

Default: false

Declared by:

services.zapret.disableIPV6

Enable usage of IpV6.

Type: boolean

Default: true

Declared by:

services.zapret.filterAddresses

List of addresses to filter

Type: null or string

Default: null

Declared by:

services.zapret.filterAddressesSource

Link to external list of addresses to download and use.

Type: null or string

Default: null

Example: "https://antifilter.network/download/ipsmart.lst"

Declared by:

services.zapret.firewallType

Which firewall zapret should use.

Type: one of “iptables”, “nftables”

Default: "nftables"

Declared by:

services.zapret.ignoreAddresses

List of addresses to ignore

Type: null or string

Default:

''
  10.0.0.0/8
  169.254.0.0/16
  172.16.0.0/12
  192.168.0.0/16
''

Declared by:

services.zapret.mode

Which mode zapret should use.

Type: one of “tpws”, “tpws-socks”, “nfqws”, “filter”, “custom”

Default: "tpws"

Declared by:

services.zapret.settings

Rules for zapret to work. Run nix-shell -p zapret --command blockcheck to get values to pass here.

Config example can be found here https://github.com/bol-van/zapret/blob/master/config.default

Type: strings concatenated with “\n”

Default: ""

Example:

''
  TPWS_OPT="--hostspell=HOST --split-http-req=method --split-pos=3 --oob"
  NFQWS_OPT_DESYNC="--dpi-desync-ttl=5"
''

Declared by: