diff --git a/nixos/doc/manual/from_md/release-notes/rl-2211.section.xml b/nixos/doc/manual/from_md/release-notes/rl-2211.section.xml
index f0cd6e93329..e2143c8a73d 100644
--- a/nixos/doc/manual/from_md/release-notes/rl-2211.section.xml
+++ b/nixos/doc/manual/from_md/release-notes/rl-2211.section.xml
@@ -198,6 +198,15 @@
virtualisation.appvm.
+
+
+ [xray] (https://github.com/XTLS/Xray-core), a fully compatible
+ v2ray-core replacement. Features XTLS, which when enabled on
+ server and client, brings UDP FullCone NAT to proxy setups.
+ Available as
+ services.xray.
+
+
syncstorage-rs,
diff --git a/nixos/doc/manual/release-notes/rl-2211.section.md b/nixos/doc/manual/release-notes/rl-2211.section.md
index 93faf15f9d1..7e3f368fd86 100644
--- a/nixos/doc/manual/release-notes/rl-2211.section.md
+++ b/nixos/doc/manual/release-notes/rl-2211.section.md
@@ -79,6 +79,9 @@ In addition to numerous new and upgraded packages, this release has the followin
## New Services {#sec-release-22.11-new-services}
- [appvm](https://github.com/jollheef/appvm), Nix based app VMs. Available as [virtualisation.appvm](options.html#opt-virtualisation.appvm.enable).
+
+- [xray] (https://github.com/XTLS/Xray-core), a fully compatible v2ray-core replacement. Features XTLS, which when enabled on server and client, brings UDP FullCone NAT to proxy setups. Available as [services.xray](options.html#opt-services.xray.enable).
+
- [syncstorage-rs](https://github.com/mozilla-services/syncstorage-rs), a self-hostable sync server for Firefox. Available as [services.firefox-syncserver](options.html#opt-services.firefox-syncserver.enable).
- [dragonflydb](https://dragonflydb.io/), a modern replacement for Redis and Memcached. Available as [services.dragonflydb](#opt-services.dragonflydb.enable).
diff --git a/nixos/modules/module-list.nix b/nixos/modules/module-list.nix
index 1a87df98976..42bb4a7f612 100644
--- a/nixos/modules/module-list.nix
+++ b/nixos/modules/module-list.nix
@@ -989,6 +989,7 @@
./services/networking/xinetd.nix
./services/networking/xl2tpd.nix
./services/networking/x2goserver.nix
+ ./services/networking/xray.nix
./services/networking/xrdp.nix
./services/networking/yggdrasil.nix
./services/networking/zerobin.nix
diff --git a/nixos/modules/services/networking/xray.nix b/nixos/modules/services/networking/xray.nix
new file mode 100644
index 00000000000..e2fd83c4dfd
--- /dev/null
+++ b/nixos/modules/services/networking/xray.nix
@@ -0,0 +1,96 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+{
+ options = {
+
+ services.xray = {
+ enable = mkOption {
+ type = types.bool;
+ default = false;
+ description = lib.mdDoc ''
+ Whether to run xray server.
+
+ Either `settingsFile` or `settings` must be specified.
+ '';
+ };
+
+ package = mkOption {
+ type = types.package;
+ default = pkgs.xray;
+ defaultText = literalExpression "pkgs.xray";
+ description = lib.mdDoc ''
+ Which xray package to use.
+ '';
+ };
+
+ settingsFile = mkOption {
+ type = types.nullOr types.path;
+ default = null;
+ example = "/etc/xray/config.json";
+ description = lib.mdDoc ''
+ The absolute path to the configuration file.
+
+ Either `settingsFile` or `settings` must be specified.
+
+ See .
+ '';
+ };
+
+ settings = mkOption {
+ type = types.nullOr (types.attrsOf types.unspecified);
+ default = null;
+ example = {
+ inbounds = [{
+ port = 1080;
+ listen = "127.0.0.1";
+ protocol = "http";
+ }];
+ outbounds = [{
+ protocol = "freedom";
+ }];
+ };
+ description = lib.mdDoc ''
+ The configuration object.
+
+ Either `settingsFile` or `settings` must be specified.
+
+ See .
+ '';
+ };
+ };
+
+ };
+
+ config = let
+ cfg = config.services.xray;
+ settingsFile = if cfg.settingsFile != null
+ then cfg.settingsFile
+ else pkgs.writeTextFile {
+ name = "xray.json";
+ text = builtins.toJSON cfg.settings;
+ checkPhase = ''
+ ${cfg.package}/bin/xray -test -config $out
+ '';
+ };
+
+ in mkIf cfg.enable {
+ assertions = [
+ {
+ assertion = (cfg.settingsFile == null) != (cfg.settings == null);
+ message = "Either but not both `settingsFile` and `settings` should be specified for xray.";
+ }
+ ];
+
+ systemd.services.xray = {
+ description = "xray Daemon";
+ after = [ "network.target" ];
+ wantedBy = [ "multi-user.target" ];
+ serviceConfig = {
+ DynamicUser = true;
+ ExecStart = "${cfg.package}/bin/xray -config ${settingsFile}";
+ };
+ };
+ };
+}