swag wildcard certs

modules/apps/swag/default.nix

@@ -34,6 +34,9 @@ in
         "${toString cfg.httpsPort}:443"
         "81:81"
       ];
+      extraOptions = [
+        "--cap-add=NET_ADMIN"
+      ];
       volumes = [ "${cfg.configPath}:/config" ];
       environment = {
         PUID = cfg.puid;
@@ -42,6 +45,7 @@ in
         EMAIL = cfg.email;
         URL = cfg.url;
         VALIDATION = cfg.validation;
+        DNSPLUGIN = cfg.dnsPlugin;
         SUBDOMAINS = cfg.subdomains;
         DOCKER_MODS = "linuxserver/mods:swag-dashboard";
       };

modules/apps/swag/options.nix

@@ -61,12 +61,17 @@ with lib;
 
     validation = mkOption {
       type = types.str;
-      default = "http";
+      default = "dns";
+    };
+
+    dnsPlugin = mkOption {
+      type = types.str;
+      default = "cloudflare";
     };
 
     subdomains = mkOption {
       type = types.str;
-      default = "jellyfin,jellyseerr,cloud,office,chat,hass,mealie";
+      default = "wildcard";
     };
   };
 }