From 47c256a6b4f69b347e5d664530b0aad455a22718 Mon Sep 17 00:00:00 2001
From: Alexander <alexander0derevianko@gmail.com>
Date: Mon, 17 Aug 2026 23:09:12 +0200
Subject: [PATCH] Update tora: userspace WireGuard VPN mode

torad --wireguard-config brings up a WireGuard tunnel entirely in user
space and confines all torrent traffic to it. No sudo, no wg-quick, no
kernel module, no host setup.

Adds passt, wireguard-go and iproute2 to the dev environment; torad
execs all three at runtime.
---
 devenv.nix | 7 +++++++
 tora       | 2 +-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/devenv.nix b/devenv.nix
index fbb9207..df88a7f 100644
--- a/devenv.nix
+++ b/devenv.nix
@@ -39,6 +39,13 @@
     protoc-gen-tonic
     protoc-gen-prost
 
+    # torad VPN mode (--wireguard-config): pasta creates the unprivileged
+    # namespace, wireguard-go is the userspace datapath, `ip` configures the
+    # tunnel. See tora/devenv.nix for why wireguard-tools is not needed.
+    passt
+    wireguard-go
+    iproute2
+
     opencode
   ];
 
diff --git a/tora b/tora
index e321300..b489ff7 160000
--- a/tora
+++ b/tora
@@ -1 +1 @@
-Subproject commit e321300f677d0b493d9d745127b762e5b01efe61
+Subproject commit b489ff71355501b55f871f5a116f28018802563b