modules/nixos/services/cloudflare.nix

@@ -50,10 +50,11 @@ in {
     }];
 
     # Tell Caddy to use Cloudflare DNS for ACME challenge validation
-    services.caddy.package = (pkgs.callPackage ../../../overlays/caddy.nix {
-      plugins = [ "github.com/caddy-dns/cloudflare" ];
-      # vendorSha256 = "sha256-K9HPZnr+hMcK5aEd1H4gEg6PXAaNrNWFvaHYm5m62JY=";
-    });
+    services.caddy.package =
+      (pkgs.callPackage ../../../overlays/custom-caddy.nix {
+        plugins = [ "github.com/caddy-dns/cloudflare" ];
+        # vendorSha256 = "sha256-K9HPZnr+hMcK5aEd1H4gEg6PXAaNrNWFvaHYm5m62JY=";
+      });
     caddy.tlsPolicies = [{
       issuers = [{
         module = "acme";

overlays/calibre-web-cloudflare.patch

@@ -1,25 +1,25 @@
 diff --git a/cps/__init__.py b/cps/__init__.py
-index 269e4aca..e2b828a9 100644
+index 1ba1f778..da0bc718 100644
 --- a/cps/__init__.py
 +++ b/cps/__init__.py
-@@ -150,7 +150,6 @@ def create_app():
- 
+@@ -100,7 +100,6 @@ updater_thread = Updater()
+ def create_app():
      lm.login_view = 'web.login'
      lm.anonymous_user = ub.Anonymous
--    lm.session_protection = 'strong' if config.config_session == 1 else "basic"
+-    lm.session_protection = 'strong'
  
-     db.CalibreDB.update_config(config)
-     db.CalibreDB.setup_db(config.config_calibre_dir, cli_param.settings_path)
+     if csrf:
+         csrf.init_app(app)
 diff --git a/cps/admin.py b/cps/admin.py
-index 20c58aac..99d2ad19 100644
+index 09a553b4..5c646e46 100644
 --- a/cps/admin.py
 +++ b/cps/admin.py
-@@ -101,8 +101,6 @@ def admin_required(f):
- 
- @admi.before_app_request
- def before_request():
+@@ -104,8 +104,6 @@ def before_request():
+     # make remember me function work
+     if current_user.is_authenticated:
+         confirm_login()
 -    if not ub.check_user_session(current_user.id, flask_session.get('_id')) and 'opds' not in request.path:
 -        logout_user()
      g.constants = constants
-     g.google_site_verification = os.getenv('GOOGLE_SITE_VERIFICATION','')
+     g.user = current_user
      g.allow_registration = config.config_public_reg

overlays/custom-caddy.nix

@@ -1,13 +1,12 @@
 { lib, buildGo118Module, fetchFromGitHub, plugins ? [ ] }:
 let
-  goImports = lib.flip lib.concatMapStrings plugins (pkg: "   _ \"${pkg}\"\n");
-  goGets = lib.flip lib.concatMapStrings plugins (pkg: "go get ${pkg}\n      ");
+  imports = lib.flip lib.concatMapStrings plugins (pkg: "   _ \"${pkg}\"\n");
   main = ''
     package main
     import (
     	caddycmd "github.com/caddyserver/caddy/v2/cmd"
     	_ "github.com/caddyserver/caddy/v2/modules/standard"
-    ${goImports}
+    ${imports}
     )
     func main() {
     	caddycmd.Main()
@@ -32,7 +31,7 @@ in buildGo118Module rec {
   overrideModAttrs = (_: {
     preBuild = ''
       echo '${main}' > cmd/caddy/main.go
-      ${goGets}
+      go get github.com/caddy-dns/cloudflare
     '';
     postInstall = "cp go.sum go.mod $out/ && ls $out/";
   });