From 968190a3ed4675ba239e97cdd562b35b93e780e1 Mon Sep 17 00:00:00 2001
From: irl <iain@learmonth.me>
Date: Mon, 25 May 2026 08:49:04 +0100
Subject: [PATCH] fix: configuration paths

---
 roles/podman_headscale/tasks/main.yml                | 12 ++++++++++++
 .../home/podman/headscale-config/config.yaml         |  2 +-
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/roles/podman_headscale/tasks/main.yml b/roles/podman_headscale/tasks/main.yml
index 8d5e71e..dbae196 100644
--- a/roles/podman_headscale/tasks/main.yml
+++ b/roles/podman_headscale/tasks/main.yml
@@ -1,4 +1,16 @@
 ---
+- name: Podman Nginx | PATCH | Open firewall for http and https services
+  ansible.posix.firewalld:
+    zone: "{{ podman_nginx_firewalld_zone }}"
+    service: "{{ item }}"
+    permanent: true
+    immediate: true
+    state: enabled
+  become: true
+  with_items:
+    - http
+    - https
+
 - name: Podman Headscale | PATCH | Install data plate
   ansible.builtin.template:
     src: etc/motd.d/10-data-plate.txt
diff --git a/roles/podman_headscale/templates/home/podman/headscale-config/config.yaml b/roles/podman_headscale/templates/home/podman/headscale-config/config.yaml
index 73650c8..2406c74 100644
--- a/roles/podman_headscale/templates/home/podman/headscale-config/config.yaml
+++ b/roles/podman_headscale/templates/home/podman/headscale-config/config.yaml
@@ -106,7 +106,7 @@ database:
 
 acme_url: https://acme-v02.api.letsencrypt.org/directory
 acme_email: "{{ podman_headscale_acme_email }}"
-tls_letsencrypt_hostname: "{{ podman_headscape_web_hostname }}"
+tls_letsencrypt_hostname: "{{ podman_headscale_web_hostname }}"
 tls_letsencrypt_cache_dir: /var/lib/headscale/cache
 tls_letsencrypt_challenge_type: HTTP-01
 tls_letsencrypt_listen: ":http"