desktop preparing

server/mods/mail.nix

@@ -1,5 +1,9 @@
 { config, lib, pkgs, ... }:
 {
+  systemd.tmpfiles.rules = [
+    "d /var/spool/postfix 0775 postfix postfix -"
+    "d /var/spool/postfix/private 0770 postfix postfix -"
+  ];
   services = let
     mailBase = "/var/spool/mail/vmail";
     saslSocket = "/var/spool/postfix/private/auth";

server/mods/sysd.nix

@@ -1,14 +1,6 @@
 { config, lib, pkgs, ... }:
 {
-  services.openssh = {
-    enable = true;
-    settings.PasswordAuthentication = false;
-  };
   systemd = {
-    tmpfiles.rules = [
-      "d /var/spool/postfix 0755 postfix postfix -"
-      "d /var/spool/postfix/private 0755 postfix postfix -"
-    ];
     timers = {
       tgbot-send = {
         wantedBy = [ "timers.target" ];
@@ -53,7 +45,7 @@
           else
             limit=$(cat /run/network.limit)
             failures=$((1+$(cat /run/network.failures)))
-            echo "<5>failures = $failures"
+            [ $failures -gt 1 ] && echo "<5>failures = $failures"
           fi
           if [ $failures -ge $limit ]; then
             echo "<4>restarting NetworkManager"

server/mods/web.nix

@@ -30,12 +30,9 @@
     forgejo = {
       enable = true;
       database.type = "postgres";
-      settings = {
-        service.DISABLE_REGISTRATION = true; 
-        server = {
-          HTTP_PORT = 8039;
-          ROOT_URL = "https://bogaledev.ru/git/";
-        };
+      settings.server = {
+        HTTP_PORT = 8039;
+        ROOT_URL = "https://bogaledev.ru/git/";
       };
     };
     phpfpm.pools.php = {
@@ -44,7 +41,7 @@
       phpEnv = { PATH = "/run/current-system/sw/bin"; };
       settings = {
         "pm" = "ondemand";
-        "pm.max_children" = 8;
+        "pm.max_children" = 4;
         "listen.owner" = "nginx";
         "listen.group" = "nginx";
       };
@@ -88,6 +85,7 @@
         add_header X-Content-Type-Options "nosniff" always;
       '';
       locations = {
+        "/git/".proxyPass = "http://127.0.0.1:8039/";
         "/" = {
           extraConfig = phpPool;
           index = "index.php index.html";
@@ -101,7 +99,6 @@
           allow 10.1.0.0/16;
           deny all;
         '';
-        "/git/".proxyPass = "http://127.0.0.1:8039/";
         "/vw/" = {
           proxyWebsockets = true;
           extraConfig = localNetworks;