tailscale-proxy: add 3proxy SOCKS5 front (:1080)

Adds a LAN-facing SOCKS5 proxy alongside the existing tinyproxy HTTP proxy,
both egressing through the same Tailscale exit node.

- new service socks5 (ghcr.io/3proxy/3proxy): SOCKS5 on 192.168.0.35:1080,
  auth iponly / allow 192.168.0.0/22, chained via `parent socks5 ts-proxy 1055`
  to the Tailscale userspace SOCKS5, so clients exit as 89.167.72.79.
- 3proxy.cfg tracked here as source of truth; access log shipped to Loki via
  the syslog log-driver (tag tailscale-socks5).

Verified: curl --socks5 / --socks5-hostname 192.168.0.35:1080 -> 89.167.72.79,
wikipedia 200. Carries TCP only (no QUIC/UDP), same as the HTTP front - README
updated to note this.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

This commit is contained in:

pipistrello

2026-07-23 17:03:16 +03:00

co-authored by

Claude Opus 4.8

parent 46bb775939

commit 155db049b0

3 changed files with 39 additions and 9 deletions

									
										tailscale-proxy/3proxy.cfg
									
		+8
		
												View File
												
				@@ -0,0 +1,8 @@

				nserver 127.0.0.11

				nscache 65536

				timeouts 1 5 30 60 180 1800 15 60

				log

				auth iponly

				allow * 192.168.0.0/22

				parent 1000 socks5 ts-proxy 1055

				socks -p1080 -i0.0.0.0