config.nix

{
  # Example configuration to proxy telegram messenger traffic.
  # It will allow an authenticated user with login "jarov" and
  # password "g0t0gulag"(all coincidences with reality are accidental)
  # to connect to hosts which was specified in `targets`.


  log.level = "debug";
  listen = "127.0.0.1:1338";

  proxy = {
    accounts."jarov" = "g0t0gulag";

    whitelist = {
      addresses = [
        # https://core.telegram.org/resources/cidr.txt
        "149.154.167.99/32"
        "149.154.175.10/32"
        "149.154.167.40/32"
        "149.154.167.42/32"
        "149.154.175.117/32"
        "149.154.175.50/32"
        "149.154.167.50/32"
        "149.154.167.51/32"
        "149.154.175.100/32"
        "149.154.167.91/32"
        "149.154.167.90/32"
        "149.154.165.120/32"
        "149.154.166.120/32"
        "149.154.164.250/32"
        "149.154.167.117/32"
        "149.154.167.118/32"
        "149.154.167.192/27"
        "149.154.164.8/29"
        "91.108.8.0/27"
        "91.108.12.0/27"
        "91.108.16.0/27"
        "91.108.56.0/24"
        "91.108.4.0/24"
        "149.154.160.0/22"
        "149.154.164.0/22"
        "149.154.168.0/22"
        "149.154.172.0/22"
        "91.108.56.0/22"
        "91.108.4.0/22"
        "91.108.8.0/22"
        "91.108.16.0/22"
        "91.108.12.0/22"
        "149.154.160.0/20"
        "2001:b28:f23d:f001::e/128"
        "2001:67c:4e8:f002::e/128"
        "2001:b28:f23d:f003::e/128"
        "2001:b28:f23d:f001::a/128"
        "2001:67c:4e8:f002::a/128"
        "2001:b28:f23d:f003::a/128"
        "2001:67c:4e8:f004::a/128"
        "2001:b28:f23f:f005::a/128"
        "2001:67c:4e8:fa60::/64"
        "2001:b28:f23d::/48"
        "2001:b28:f23f::/48"
        "2001:67c:4e8::/48"
      ];

      domains = [
        "^(.*\.)?t\.me$"
        "^(.*\.)?telegram\.org$"
      ];
    };

    #metrics.statsdaddresses = [ "127.0.0.1:8125" ];
  };
}