From ee11d72de81f1915e7c0663aa790fb7656935c34 Mon Sep 17 00:00:00 2001
From: Danilo Reyes <danilo.reyes.251@proton.me>
Date: Thu, 5 Feb 2026 04:16:21 -0600
Subject: [PATCH] domain sandbox

---
 hosts/vps/toggles.nix            | 1 +
 modules/servers/nextcloud.nix    | 2 +-
 modules/servers/oauth2-proxy.nix | 4 ++--
 3 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/hosts/vps/toggles.nix b/hosts/vps/toggles.nix
index 1d7049c..225bdc4 100644
--- a/hosts/vps/toggles.nix
+++ b/hosts/vps/toggles.nix
@@ -9,6 +9,7 @@ let
   mkEnabledProxyIp = inputs.self.lib.mkEnabledProxyIp wgServerIp;
 in
 {
+  domain = "servidos.lat";
   enableProxy = true;
   enableContainers = true;
   apps.dictionaries.enable = true;
diff --git a/modules/servers/nextcloud.nix b/modules/servers/nextcloud.nix
index 85fed84..b1fa423 100644
--- a/modules/servers/nextcloud.nix
+++ b/modules/servers/nextcloud.nix
@@ -167,7 +167,7 @@ in
           forceSSL = false; # vps
           enableACME = false; # vps
           http2 = false; # vps
-          # default = true; #vps
+          default = true; # vps
           #vps
           listen = [
             {
diff --git a/modules/servers/oauth2-proxy.nix b/modules/servers/oauth2-proxy.nix
index 802b0fa..cc84ed4 100644
--- a/modules/servers/oauth2-proxy.nix
+++ b/modules/servers/oauth2-proxy.nix
@@ -40,7 +40,7 @@ in
         secure = true;
         expire = "168h";
         refresh = "1h";
-        domain = ".lebubu.org";
+        domain = ".${config.my.domain}";
         secret = config.sops.secrets.oauth2-proxy-cookie.path;
       };
       extraConfig = {
@@ -53,7 +53,7 @@ in
         session-store-type = "cookie";
         skip-provider-button = true;
         code-challenge-method = "S256";
-        whitelist-domain = [ ".lebubu.org" ];
+        whitelist-domain = [ ".${config.my.domain}" ];
       };
     };
   };