421 and tor connection

nixos/hosts/alisceon-core/configuration.nix

@@ -69,6 +69,7 @@ in
       22
       80
       443
+      9001
     ];
   };
 
@@ -185,7 +186,16 @@ in
     recommendedOptimisation = true;
     recommendedProxySettings = true;
     recommendedTlsSettings = true;
-    virtualHosts.${forgejoDomain} = {
+    virtualHosts = {
+      "_" = {
+        default = true;
+        rejectSSL = true;
+        extraConfig = ''
+          return 421;
+        '';
+      };
+      ${forgejoDomain} = {
+        serverName = forgejoDomain;
         forceSSL = true;
         enableACME = true;
         locations."/" = {
@@ -194,6 +204,32 @@ in
         };
       };
     };
+  };
+
+  services.tor = {
+    enable = true;
+    client.enable = false;
+    relay = {
+      enable = true;
+      role = "relay";
+    };
+    settings = {
+      Nickname = "alisceondotcom";
+      ORPort = 9001;
+      DataDirectory = "/var/lib/tor";
+      ExitRelay = false;
+      ExitPolicy = [ "reject *:*" ];
+      RelayBandwidthRate = "2700 KBytes";
+      RelayBandwidthBurst = "2700 KBytes";
+      BandwidthRate = "2700 KBytes";
+      BandwidthBurst = "2700 KBytes";
+      AccountingStart = "month 1 00:00";
+      AccountingMax = "7500 GBytes";
+      DirCache = true;
+      AvoidDiskWrites = 1;
+      Sandbox = true;
+    };
+  };
 
   services.cloud-init = {
     enable = true;