From 84a17713ea098eee00a8332ac3ff5d72762e3f18 Mon Sep 17 00:00:00 2001
From: coolneng <akasroua@gmail.com>
Date: Mon, 11 Nov 2019 14:30:45 +0100
Subject: [PATCH] Disable IPv6

---
 Timeline.org           | 2 +-
 modules/datasync.nix   | 2 +-
 modules/networking.nix | 3 +++
 modules/webstack.nix   | 4 ++--
 4 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/Timeline.org b/Timeline.org
index 15490c1..69ef5e8 100644
--- a/Timeline.org
+++ b/Timeline.org
@@ -39,7 +39,7 @@
 ** Web stack [1/7] [14%]
 *** IN-PROGRESS Nginx [1/5] [20%]
     - [X] Radicale reverse proxy
-    - [ ] Syncthing discovery reverse proxy
+    - [ ] Syncthing reverse proxy
     - [ ] Wallabag vhost
     - [ ] Gitea vhost
     - [ ] Miniflux vhost
diff --git a/modules/datasync.nix b/modules/datasync.nix
index 309e8cf..2ca1750 100644
--- a/modules/datasync.nix
+++ b/modules/datasync.nix
@@ -53,7 +53,7 @@
     enable = true;
     config = ''
       [server]
-      hosts = 0.0.0.0:5232
+      hosts = 127.0.0.1:5232
       max_connections = 20
       max_content_length = 100000000
       timeout = 30
diff --git a/modules/networking.nix b/modules/networking.nix
index 4854d64..358cbb7 100644
--- a/modules/networking.nix
+++ b/modules/networking.nix
@@ -27,5 +27,8 @@
     autoLoadConntrackHelpers = true;
     connectionTrackingModules = [ "sane" ];
   };
+
+  # Disable IPv6
+  networking.enableIPv6 = false;
 }
 
diff --git a/modules/webstack.nix b/modules/webstack.nix
index ec5d827..5c19d58 100644
--- a/modules/webstack.nix
+++ b/modules/webstack.nix
@@ -48,8 +48,8 @@
       "coolneng.duckdns.org" = {
         enableACME = true;
         forceSSL = true;
-        sslCertificate = "/var/lib/acme/radicale.coolneng.duckdns.org/fullchain.pem";
-        sslCertificateKey = "/var/lib/acme/radicale.coolneng.duckdns.org/key.pem";
+        sslCertificate = "/var/lib/acme/coolneng.duckdns.org/fullchain.pem";
+        sslCertificateKey = "/var/lib/acme/coolneng.duckdns.org/key.pem";
         locations."/radicale/" = {
           proxyPass = "http://localhost:5232/";
           extraConfig = ''