xray: start sing-box on demand only

dpi-tunnel is now the default full tunnel. Keep the sing-box TUN for
manual use (systemctl start sing-box) instead of starting it at boot.

Assisted-by: Claude:opus-5-5
This commit is contained in:
Sergei Poljanski 2026-11-08 05:08:45 +04:00
commit 6942303ef4
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
2 changed files with 4 additions and 1 deletions

View file

@ -128,6 +128,9 @@
CapabilityBoundingSet = [ "CAP_NET_ADMIN" "CAP_NET_BIND_SERVICE" ];
};
# Off by default: start on demand with `systemctl start sing-box`
systemd.services.sing-box.wantedBy = lib.mkForce [ ];
# Firefox dev edition
programs.firefox = {
enable = true;