fixes

desktop/network.nix

@@ -38,6 +38,7 @@ in
             address = var.wg.wireguard-network.${host}.ips;
             privateKeyFile = var.wg.keyFile;
             peers = [ (lib.removeAttrs var.wg.wireguard-network."roam" [ "ips" ]) ];
+            mtu = 1248;
           };
         };
       };

desktop/software/default.nix

@@ -51,7 +51,7 @@ in
         enable = true;
         settings = {
           "identity.fxaccounts.enabled" = true;
-          "identity.sync.tokenserver.uri" = "http://fx-sync.lan/1.0/sync/1.5";
+          "identity.sync.tokenserver.uri" = "https://firefox-syncserver.roam.hdohmen.de/1.0/sync/1.5";
           "webgl.disabled" = false;
           "privacy.resistFingerprinting" = false;
           "privacy.clearOnShutdown.history" = false;
@@ -97,7 +97,6 @@ in
         settings = {
           main = {
             "font" = "monospace:size=11";
-            "dpi-aware" = "yes";
           };
         };
       };

host/roam/firefox-sync.nix

@@ -19,14 +19,9 @@
     secrets = config.age.secrets.roam-firefox-sync-secret.path;
     singleNode = {
       enable = true;
-      hostname = "fx-sync.lan";
-      enableTLS = false;
-    };
-  };
-  services.nginx.virtualHostsPriv."fx-sync.lan" = {
-    locations."/" = {
-      proxyPass = "http://127.0.0.1:${toString config.services.firefox-syncserver.settings.port}";
-      recommendedProxySettings = true;
+      hostname = "firefox-syncserver.roam.hdohmen.de";
+      enableNginx = true;
+      enableTLS = true;
     };
   };
 }

mod/nginx.nix

@@ -23,6 +23,13 @@ with lib;
             addr = var.wg.ips.roam;
             port = 80;
           }
+          /*
+            { TODO: Fix certs
+              addr = var.wg.ips.roam;
+              port = 443;
+              ssl = true;
+            }
+          */
         ];
       }
     ) config.services.nginx.virtualHostsPriv;