Kieran's opinionated (and probably slightly dumb) nix config

caddy: open udp 443 so the advertised http/3 actually works master

Caddy sends alt-svc: h3=":443" on every response by default, but the firewall only opened tcp, so clients tried quic, got rejected and fell back. Costs a round trip on first connect for anyone who believed the header.


+2
2 changed files