pipistrelloandClaude Opus 4.8
155db049b0
Adds a LAN-facing SOCKS5 proxy alongside the existing tinyproxy HTTP proxy, both egressing through the same Tailscale exit node. - new service socks5 (ghcr.io/3proxy/3proxy): SOCKS5 on 192.168.0.35:1080, auth iponly / allow 192.168.0.0/22, chained via `parent socks5 ts-proxy 1055` to the Tailscale userspace SOCKS5, so clients exit as 89.167.72.79. - 3proxy.cfg tracked here as source of truth; access log shipped to Loki via the syslog log-driver (tag tailscale-socks5). Verified: curl --socks5 / --socks5-hostname 192.168.0.35:1080 -> 89.167.72.79, wikipedia 200. Carries TCP only (no QUIC/UDP), same as the HTTP front - README updated to note this. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
9 lines
162 B
INI
9 lines
162 B
INI
nserver 127.0.0.11
|
|
nscache 65536
|
|
timeouts 1 5 30 60 180 1800 15 60
|
|
log
|
|
auth iponly
|
|
allow * 192.168.0.0/22
|
|
parent 1000 socks5 ts-proxy 1055
|
|
socks -p1080 -i0.0.0.0
|