From 9332cd9f37bc37dae3e985e415715c2c0a070727 Mon Sep 17 00:00:00 2001
From: Danilo Reyes <CaptainJawZ@protonmail.com>
Date: Sun, 23 Mar 2025 16:18:12 -0600
Subject: [PATCH] nextcloud fixes

---
 modules/modules.nix            | 10 ++++++++++
 modules/scripts/update-dns.nix |  1 -
 modules/servers/nextcloud.nix  |  7 ++++++-
 3 files changed, 16 insertions(+), 2 deletions(-)

diff --git a/modules/modules.nix b/modules/modules.nix
index 2cf9b8a..720fc4b 100644
--- a/modules/modules.nix
+++ b/modules/modules.nix
@@ -35,6 +35,16 @@ in
       default = "127.0.0.1";
       description = "The localhost address.";
     };
+    localhost6 = lib.mkOption {
+      type = lib.types.str;
+      default = "::1";
+      description = "The localhost ipv6 address.";
+    };
+    routerip = lib.mkOption {
+      type = lib.types.str;
+      default = "192.168.1.254";
+      description = "The ip address of my router.";
+    };
     domain = lib.mkOption {
       type = lib.types.str;
       default = "servidos.lat";
diff --git a/modules/scripts/update-dns.nix b/modules/scripts/update-dns.nix
index 5eb3b60..77d483b 100644
--- a/modules/scripts/update-dns.nix
+++ b/modules/scripts/update-dns.nix
@@ -23,7 +23,6 @@
       proxied = false;
       domains = [
         config.my.domain
-        "wedsgk5ac2qcaf9yb.click"
       ];
       apiTokenFile = config.sops.secrets.cloudflare-api.path;
     };
diff --git a/modules/servers/nextcloud.nix b/modules/servers/nextcloud.nix
index 10754bc..b21fe93 100644
--- a/modules/servers/nextcloud.nix
+++ b/modules/servers/nextcloud.nix
@@ -153,6 +153,11 @@ in
         settings = {
           log_type = "file";
           loglevel = 1;
+          trusted_proxies = [
+            config.my.localhost
+            config.my.localhost6
+            config.my.routerip
+          ];
           trusted_domains = [
             config.my.ips.${config.networking.hostName}
             "localhost"
@@ -160,7 +165,7 @@ in
             "cloud.servidos.lat"
           ];
           overwriteprotocol = "https";
-          overwrite.cli.url = "${cfg.url}";
+          "overwrite.cli.url" = "${cfg.url}";
           forwarded_for_headers = [ "HTTP_X_FORWARDED_FOR" ];
           default_phone_region = "MX";
           allow_local_remote_servers = true;