niveum/configs/tor.nix

{ config, lib, pkgs, ... }:
let
  sshPort = pkgs.lib.niveum.machines.${config.networking.hostName}.sshPort;
in
{
  services.tor.enable = true;
  services.tor.client.enable = true;
  environment.systemPackages = [
    pkgs.tor
    pkgs.torsocks
  ];

  services.tor.relay.onionServices = {
    "ssh" = {
      version = 3;
      map = [{
        port = sshPort;
        target.port = sshPort;
        target.addr = "127.0.0.1";
      }];
    };
  };
}