~

hosts/nodens/caddy.nix

@@ -17,13 +17,13 @@
               handle = [
                 {
                   handler = "acme_server";
-                  challenges = "dns-01";
+                  challenges = [ "dns-01" ];
                   resolvers = [
                     "udp://8.8.8.8:53"
                     "udp://1.1.1.1:53"
                   ];
                   policy = {
-                    allow.domains = [ "*" ];
+                    # allow.domains = [ "nyaw.xyz" ];
                     allow_wildcard_names = true;
                   };
                 }

overlays.nix

@@ -30,14 +30,6 @@
 
       inherit (inputs'.browser-previews.packages) google-chrome-beta;
 
-      composefs = prev.composefs.overrideAttrs (old: {
-        src = prev.fetchFromGitHub {
-          owner = "alexlarsson";
-          repo = "composefs";
-          rev = "5f2be1f64f531f520943825ead9d738045234922";
-          hash = "sha256-1hypzL7w7kF1FsO2P8CpqRA2Qd6KTfogGNPBETxV+hY=";
-        };
-      });
       helix = inputs'.helix.packages.default.override {
         includeGrammarIf =
           grammar:

util.nu

@@ -45,6 +45,7 @@ export def d [
   nodes?: list<string>
   mode?: string = "switch"
   --builder (-b): string = "hastur"
+  --sod
 ] {
 
   let get_addr = {|x| do $env.get_addr ($env.map) ($x)}
@@ -63,8 +64,8 @@ export def d [
          from json |
          $in.0.outputs.out)
 
-     # --substitute-on-destination
-     nix copy  --to $'ssh://($per_node_addr)' $out_path
+     let sub = if ($sod) { "--substitute-on-destination" } else {""}
+     nix copy $sub --to $'ssh://($per_node_addr)' $out_path
 
       log info "copy closure complete";
       return [$per, $per_node_addr, $out_path];