swag wildcard certs

hosts/desktop/configuration.nix

@@ -213,6 +213,7 @@ in
       gparted
       grsync
       kmod
+      kdePackages.ksvg
       lact
       nano
       onlyoffice-bin

hosts/desktop/home.nix

@@ -58,6 +58,7 @@
     # gamescope # using chaotic git version
     # gamescope-wsi # using chaotic git version
     bottles
+    chromium
     deadnix
     discord
     fastfetch

hosts/nas/networking.nix

@@ -47,6 +47,7 @@ in
       networks = {
        "Joey’s Jungle" = {
           psk = password;
+          # extraConfig = "bssid_blacklist=34:60:F9:8F:FE:7B";
         };
       };
     };

modules/apps/swag/default.nix

@@ -34,6 +34,9 @@ in
         "${toString cfg.httpsPort}:443"
         "81:81"
       ];
+      extraOptions = [
+        "--cap-add=NET_ADMIN"
+      ];
       volumes = [ "${cfg.configPath}:/config" ];
       environment = {
         PUID = cfg.puid;
@@ -42,6 +45,7 @@ in
         EMAIL = cfg.email;
         URL = cfg.url;
         VALIDATION = cfg.validation;
+        DNSPLUGIN = cfg.dnsPlugin;
         SUBDOMAINS = cfg.subdomains;
         DOCKER_MODS = "linuxserver/mods:swag-dashboard";
       };

modules/apps/swag/options.nix

@@ -61,12 +61,17 @@ with lib;
 
     validation = mkOption {
       type = types.str;
-      default = "http";
+      default = "dns";
+    };
+
+    dnsPlugin = mkOption {
+      type = types.str;
+      default = "cloudflare";
     };
 
     subdomains = mkOption {
       type = types.str;
-      default = "jellyfin,jellyseerr,cloud,office,chat,hass,mealie";
+      default = "wildcard";
     };
   };
 }