Add garden and updates.

roles/caddy.nix

@@ -1,10 +1,20 @@
+{ config, pkgs, ... }:
+
 {
   services.caddy = {
     enable = true;
+    package = pkgs.callPackage ../pkgs/caddy.nix { };
     email = "nolan@thewordnerd.info";
   };
   networking.firewall.allowedTCPPorts = [
     80
     443
   ];
+  age.secrets.tsAuthKey = {
+    file = ../secrets/ts_auth_key.age;
+    owner = config.services.caddy.user;
+    group = config.services.caddy.group;
+    mode = "600";
+  };
+  systemd.services.caddy.serviceConfig.EnvironmentFile = config.age.secrets.tsAuthKey.path;
 }

roles/fail2ban.nix

@@ -0,0 +1,6 @@
+{
+  services.fail2ban = {
+    enable = true;
+    ignoreIP = [ "192.168.0.0/16" ];
+  };
+}

roles/syncthing.nix

@@ -0,0 +1,6 @@
+{
+  services.syncthing = {
+    enable = true;
+    openDefaultPorts = true;
+  };
+}