From 9f93771440a601024b9dcd41367a2d22e4948d90 Mon Sep 17 00:00:00 2001
From: matt1432 <matt@nelim.org>
Date: Thu, 15 Aug 2024 23:50:43 -0400
Subject: [PATCH] fix(caddy): allow nonlocal bind to fix circular dep with
 headscale

---
 devices/cluster/modules/caddy.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/devices/cluster/modules/caddy.nix b/devices/cluster/modules/caddy.nix
index 972fe77f..f31220b9 100644
--- a/devices/cluster/modules/caddy.nix
+++ b/devices/cluster/modules/caddy.nix
@@ -15,6 +15,8 @@ in {
   environment.systemPackages = [caddy];
   users.users.${mainUser}.extraGroups = ["caddy"];
 
+  boot.kernel.sysctl."net.ipv4.ip_nonlocal_bind" = 1;
+
   systemd.services.caddy.serviceConfig = {
     EnvironmentFile = secrets.caddy-cloudflare.path;