all repos — nixfiles @ 3d5de0f50d620b3e9d2b71d9601313886d045997

System and user configuration, managed by nix and home-manager

reverse-proxy: update caddy modules

Alin
commit

3d5de0f50d620b3e9d2b71d9601313886d045997

parent

02599d3c08751801b22ac47b98be2ac037f669ba

2 files changed, 20 insertions(+), 17 deletions(-)

changed files
M system/roles/server.nix → system/roles/server.nix
@@ -40,19 +40,23 @@ services.journald.extraConfig = ''
     MaxRetentionSec=1 month
   '';
 
-  systemd.services.update-home-manager = {
-    startAt = "weekly";
-    path = with pkgs; [
-      openssh
-      nix
-      config.programs.git.package
-    ];
-    serviceConfig = rec {
-      Type = "oneshot";
-      User = "alin";
-      ExecStart = "${lib.getExe pkgs.nh} home switch --file ${config.systemd.services.update-nixfiles.serviceConfig.WorkingDirectory} homeConfigurations.${User}@%H --no-nom";
+  systemd.services.update-home-manager =
+    let
+      nixfiles = lib.removePrefix "-" config.systemd.services.update-nixfiles.serviceConfig.WorkingDirectory;
+    in
+    {
+      startAt = "weekly";
+      path = with pkgs; [
+        openssh
+        nix
+        config.programs.git.package
+      ];
+      serviceConfig = rec {
+        Type = "oneshot";
+        User = "alin";
+        ExecStart = "${lib.getExe pkgs.nh} home switch --file ${nixfiles} homeConfigurations.${User}@%H --no-nom";
+      };
     };
-  };
 
   services.syncthing = {
     dataDir = "/srv/syncthing";
M system/roles/webserver/reverse-proxy.nix → system/roles/webserver/reverse-proxy.nix
@@ -22,13 +22,12 @@ services.caddy = {
     environmentFile = config.age.secrets.caddy.path;
     package = pkgs.caddy.withPlugins {
       plugins = [
-        "github.com/caddyserver/cache-handler@v0.16.0"
-        "github.com/tailscale/caddy-tailscale@v0.0.0-20260106222316-bb080c4414ac"
-        "github.com/caddy-dns/rfc2136@v1.0.0"
-        "pkg.jsn.cam/caddy-defender@v0.10.1"
+        "github.com/caddyserver/cache-handler@v0.17.0"
+        "github.com/tailscale/caddy-tailscale@v0.0.0-20260826180304-de41b249af4f"
+        "pkg.jsn.cam/caddy-defender@v0.10.2"
         "github.com/mholt/caddy-ratelimit@v0.1.1-0.20260521172720-16aecbbcb8ca"
       ];
-      hash = "sha256-qaHc2jmyFJ/MwazQpcdLe/fmEB13X1MtvfVBUR/MymA=";
+      hash = "sha256-buy77frgCBqyH9utP/LtNgQPh/6Lo8p9IZS0biah1cE=";
     };
     globalConfig = ''
       cache