flake.lock

@@ -8,11 +8,11 @@
         "utils": "utils"
       },
       "locked": {
-        "lastModified": 1678673526,
-        "narHash": "sha256-tMI1inGT9u4KWQml0w30dhWqQPlth1e9K/68sfDkEQA=",
+        "lastModified": 1676257154,
+        "narHash": "sha256-eW3jymNLpdxS5fkp9NWKyNtgL0Gqtgg1vCTofKXDF1g=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "74e0b590c0c8eb99548b8db40c323ff61a2f37c4",
+        "rev": "2cb27c79117a2a75ff3416c3199a2dc57af6a527",
         "type": "github"
       },
       "original": {
@@ -24,11 +24,11 @@
     },
     "nixos-unstable": {
       "locked": {
-        "lastModified": 1678980913,
-        "narHash": "sha256-042cM/+NT4BTM3tjNG3wrxsUVSanb77gNFbTS+hZBk0=",
+        "lastModified": 1677269633,
+        "narHash": "sha256-lp+v+nAddOA6wbW4FU7xk6f5eiiJKaCY2K94YZxrIAI=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "7dffac817f7499bd1afece96261675cfc7bf745d",
+        "rev": "b2c8125be6909f83e9438617214dcda061480c42",
         "type": "github"
       },
       "original": {
@@ -40,11 +40,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1678872516,
-        "narHash": "sha256-/E1YwtMtFAu2KUQKV/1+KFuReYPANM2Rzehk84VxVoc=",
+        "lastModified": 1677179781,
+        "narHash": "sha256-+peLp16ruWLuTFHo0ZUbLlS1/meS/+RsWQQ9bUAzOh8=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "9b8e5abb18324c7fe9f07cb100c3cd4a29cda8b8",
+        "rev": "50c23cd4ff6c8344e0b4d438b027b3afabfe58dd",
         "type": "github"
       },
       "original": {

hosts/architect/default.nix

@@ -34,8 +34,8 @@ in
     ./jellyfin.nix
     ./prosody.nix
     ./deluge.nix
-    #./calibre.nix
-    #./docker.nix
+    ./calibre.nix
+    ./docker.nix
     ./keycloak.nix
     ./lezzo.nix
     ./runas.nix

hosts/architect/nginx.nix

@@ -13,6 +13,7 @@
     recommendedOptimisation = true;
     recommendedProxySettings = true;
     recommendedTlsSettings = true;
+    sslProtocols = "TLSv1.3";
     
     virtualHosts."architect.devs.giugl.io" = {
       default = true;
@@ -45,9 +46,6 @@
         makeLuaPath = lib.concatMapStringsSep ";" luaPath;
       in
       ''
-        # https://stackoverflow.com/questions/38931468/nginx-reverse-proxy-error14077438ssl-ssl-do-handshake-failed
-        proxy_ssl_server_name on;
-
         lua_package_path '${makeLuaPath extraPureLuaPackages};;';
         lua_ssl_trusted_certificate /etc/ssl/certs/ca-certificates.crt;
         lua_ssl_verify_depth 5;