add: fw-proxy

flake.nix

@@ -32,6 +32,14 @@
       url = "github:nix-community/haumea";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    naersk = {
+      url = "github:nix-community/naersk";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    fenix = {
+      url = "github:nix-community/fenix";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
     colmena = {
       url = "github:zhaofengli/colmena";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -145,6 +153,13 @@
       inputs.flake-utils.follows = "flake-utils";
       inputs.flake-compat.follows = "flake-compat";
     };
+    clash2sing-box = {
+      url = "github:oluceps/clash2sing-box";
+      inputs.flake-utils.follows = "flake-utils";
+      inputs.naersk.follows = "naersk";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.fenix.follows = "fenix";
+    };
     # Themes
     grub2-themes = {
       url = "github:vinceliuice/grub2-themes";

home-manager/modules/desktop/dconf-proxy.nix

@@ -0,0 +1,20 @@
+{
+  lib,
+  osConfig,
+  ...
+}: let
+  proxy = {
+    host = "localhost";
+    port = osConfig.networking.fw-proxy.ports.mixed;
+  };
+in {
+  dconf.settings = lib.mkIf (osConfig.networking.fw-proxy.enable && osConfig.programs.dconf.enable) {
+    "system/proxy" = {
+      mode = "manual";
+      use-same-proxy = true;
+    };
+    "system/proxy/http" = proxy;
+    "system/proxy/https" = proxy;
+    "system/proxy/socks" = proxy;
+  };
+}

nixos/hosts/isk/_steam/dst/default.nix

@@ -1,6 +1,7 @@
 {
   config,
   pkgs,
+  lib,
   ...
 }: let
   gameHome = config.users.users.steam.home;
@@ -73,6 +74,9 @@ in {
       ExecStop = stopScript;
       CPUQuota = "300%"; # at most 1.5 core (2 cores in total)
     };
+    environment =
+      lib.mkIf (config.networking.fw-proxy.enable)
+      config.networking.fw-proxy.environment;
     wantedBy = ["multi-user.target"];
   };
   networking.firewall.allowedUDPPorts = [

nixos/hosts/surface/default.nix

@@ -9,6 +9,7 @@
     ++ nixosModules.desktop.all
     ++ [
       ./hardware-configuration.nix
+      nixosModules.services.fw-proxy
     ];
 
   microsoft-surface = {