small changes

desktop/software/development.nix

@@ -53,15 +53,15 @@ in
             ocamllabs.ocaml-platform
             # ms-vscode-remote.remote-ssh
           ];
-        };
-        userSettings = {
-          "editor.rulers" = [ 80 ];
-          "editor.formatOnPaste" = false;
-          "editor.formatOnSave" = false;
-          "editor.formatOnType" = false;
-          # https://github.com/nix-community/nix-vscode-extensions/issues/123
-          "ltex.ltex-ls.path" = "${pkgs.ltex-ls-plus}";
-          "direnv.path.executable" = "${pkgs.direnv}/bin/direnv";
+          userSettings = {
+            "editor.rulers" = [ 80 ];
+            "editor.formatOnPaste" = false;
+            "editor.formatOnSave" = false;
+            "editor.formatOnType" = false;
+            # https://github.com/nix-community/nix-vscode-extensions/issues/123
+            "ltex.ltex-ls.path" = "${pkgs.ltex-ls-plus}";
+            "direnv.path.executable" = "${pkgs.direnv}/bin/direnv";
+          };
         };
       };
     };

host/roam/firefox-sync.nix

@@ -7,6 +7,7 @@
 {
   services.mysql.package = pkgs.mariadb;
 
+  # TODO: containerize
   age.secrets.roam-firefox-sync-secret = {
     file = secrets.roam."firefox-sync-secret.age";
     mode = "440";

host/roam/services.nix

@@ -5,6 +5,12 @@
 {
   services = {
     nginx = {
+      recommendedTlsSettings = true;
+      recommendedProxySettings = true;
+      recommendedGzipSettings = true;
+      recommendedZstdSettings = true;
+      recommendedOptimisation = true;
+
       enable = true;
       virtualHosts.default = {
         serverName = "_";

var/lan-dns.nix

@@ -4,9 +4,7 @@ let
     name = "${name}.lan";
     inherit value;
   }) var.wg.ips;
-  custom-hosts = {
-    "fx-sync.lan" = var.wg.ips.roam;
-  };
+  custom-hosts = { };
 in
 rec {
   hostsFile = lib.concatStringsSep "\n" (lib.mapAttrsToList (n: v: "${v}\t${n}") hosts);