minor cleanups

flake.nix

@@ -65,6 +65,7 @@
     microvm,
     impermanence,
     lanzaboote,
+    noctalia,
     ...
   } @ inputs:
   let

hosts/home.nix

@@ -97,7 +97,6 @@
       })
 
       sdkmanager
-      android-tools
     ];
 
     file.".config/wall".source = ../modules/themes/wall.jpg;

hosts/lifebook/default.nix

@@ -2,7 +2,7 @@
 #  Lifebook laptop — system configuration
 #
 
-{ lib, pkgs, ... }:
+{ lib, pkgs, user, ... }:
 
 {
   imports = [

modules/services/nas/nginx.nix

@@ -32,8 +32,13 @@
         useACMEHost = "home.opel-online.de";
         forceSSL = true;
         locations."/" = {
-          proxyPass = "https://cache.ci.kabtop.de";
           extraConfig = ''
+            proxy_pass              https://cache.ci.kabtop.de;
+            proxy_ssl_server_name   on;
+            proxy_http_version      1.1;
+            proxy_set_header        Connection "";
+            proxy_set_header        Host cache.ci.kabtop.de;
+
             proxy_cache             nix_cache;
             proxy_cache_valid       200 14d;
             proxy_cache_valid       404 1m;
@@ -70,6 +75,8 @@
     };
   };
 
+  systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/mnt/Pluto/nix-cache" ];
+
   networking.firewall = {
     enable = true;
     allowedUDPPorts = [  ];