Increase gitea session length

https://github.com/NixOS/nixpkgs/issues/258793

common/default.nix

@@ -18,7 +18,7 @@
 
   nix.flakes.enable = true;
 
-  system.stateVersion = "21.11";
+  system.stateVersion = "23.11";
 
   networking.useDHCP = false;
 
@@ -26,7 +26,13 @@
   networking.firewall.allowPing = true;
 
   time.timeZone = "America/Denver";
-  i18n.defaultLocale = "en_US.UTF-8";
+  i18n = {
+    defaultLocale = "en_US.UTF-8";
+    extraLocaleSettings = {
+      LANGUAGE = "en_US.UTF-8";
+      LC_ALL = "en_US.UTF-8";
+    };
+  };
 
   services.openssh = {
     enable = true;

common/server/gitea.nix

@@ -13,7 +13,7 @@ in
   config = lib.mkIf cfg.enable {
     services.gitea = {
       appName = cfg.hostname;
-      # lfs.enable = true;
+      lfs.enable = true;
       # dump.enable = true;
       settings = {
         server = {
@@ -31,6 +31,9 @@ in
         };
         session = {
           COOKIE_SECURE = true;
+          PROVIDER = "db";
+          SESSION_LIFE_TIME = 259200; # 3 days
+          GC_INTERVAL_TIME = 259200; # 3 days
         };
         mailer = {
           ENABLED = true;
@@ -44,6 +47,9 @@ in
         actions = {
           ENABLED = true;
         };
+        indexer = {
+          REPO_INDEXER_ENABLED = true;
+        };
       };
       mailerPasswordFile = "/run/agenix/robots-email-pw";
     };
@@ -62,7 +68,7 @@ in
       enableACME = true;
       forceSSL = true;
       locations."/" = {
-        proxyPass = "http://localhost:${toString cfg.httpPort}";
+        proxyPass = "http://localhost:${toString cfg.settings.server.HTTP_PORT}";
       };
     };
   };

common/server/nextcloud.nix

@@ -8,7 +8,7 @@ in
   config = lib.mkIf cfg.enable {
     services.nextcloud = {
       https = true;
-      package = pkgs.nextcloud26;
+      package = pkgs.nextcloud28;
       hostName = "neet.cloud";
       config.dbtype = "sqlite";
       config.adminuser = "jeremy";

machines/ponyo/default.nix

@@ -63,17 +63,32 @@
     };
   };
   pia.wireguard.badPortForwardPorts = [ ];
-  services.nginx.virtualHosts."radio.runyan.org" = {
+  services.nginx.virtualHosts = {
-    enableACME = true;
+    "radio.runyan.org" = {
-    forceSSL = true;
+      enableACME = true;
-    locations = {
+      forceSSL = true;
-      "/stream.mp3" = {
+      locations = {
-        proxyPass = "http://vpn.containers:8001/stream.mp3";
+        "/stream.mp3" = {
-        extraConfig = ''
+          proxyPass = "http://vpn.containers:8001/stream.mp3";
-          add_header Access-Control-Allow-Origin *;
+          extraConfig = ''
-        '';
+            add_header Access-Control-Allow-Origin *;
+          '';
+        };
+        "/".root = config.inputs.radio-web;
+      };
+    };
+    "radio.neet.space" = {
+      enableACME = true;
+      forceSSL = true;
+      locations = {
+        "/stream.mp3" = {
+          proxyPass = "http://vpn.containers:8001/stream.mp3";
+          extraConfig = ''
+            add_header Access-Control-Allow-Origin *;
+          '';
+        };
+        "/".root = config.inputs.radio-web;
       };
-      "/".root = config.inputs.radio-web;
     };
   };
 

machines/storage/s0/default.nix

@@ -116,13 +116,19 @@
         # "speed-limit-up-enabled" = true;
 
         /* seeding limit */
-        "ratio-limit" = 2;
+        "ratio-limit" = 3;
         "ratio-limit-enabled" = true;
 
         "download-queue-enabled" = true;
         "download-queue-size" = 20; # gotta go fast
       };
     };
+    # https://github.com/NixOS/nixpkgs/issues/258793
+    systemd.services.transmission.serviceConfig = {
+      RootDirectoryStartOnly = lib.mkForce (lib.mkForce false);
+      RootDirectory = lib.mkForce (lib.mkForce "");
+    };
+
     users.groups.public_data.gid = 994;
     users.users.public_data = {
       isSystemUser = true;