xengi/infra
Watch
0
1
Fork
You've already forked infra
 0
Code Pull requests Activity Actions

less scrapers
Some checks failed
Test Nix flake / Test nix flake (push) Has been cancelled
Details

Browse source
This commit is contained in:
XenGi 2026-09-27 14:51:21 +02:00
commit 84abaee8ed
Signed by: xengi
SSH key fingerprint: SHA256:dM+fLZGsDvyv6kunjE8bGduL24VsCFB4LEOSdmRHdG0
2 changed files with 13 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

13
README.md
View file

@ -12,11 +12,16 @@
### Update a container ### Update a container
Build and check for changes:
```shell ```shell
ssh <container> nix run .#remote-diff-git
cd /etc/nixos ```
nix run .#apps.nixos-diff # Show what changes would be applied
nixos-rebuild switch # Apply changes Build and apply:
```shell
nix run .#remote-apply-git
``` ```
### Special things ### Special things

5
hosts/git/forgejo.nix
View file

@ -75,7 +75,8 @@ in
nginx = { nginx = {
appendHttpConfig = '' appendHttpConfig = ''
limit_req_zone $binary_remote_addr zone=forgejo_archive:10m rate=2r/s; limit_req_zone $binary_remote_addr zone=forgejo_archive:10m rate=10r/m;
limit_conn_zone $binary_remote_addr zone=forgejo_archive_conn:10m;
''; '';
virtualHosts."${fqdn}" = { virtualHosts."${fqdn}" = {
quic = true; quic = true;
@ -106,6 +107,8 @@ in
}; };
"~ ^/[^/]+/[^/]+/archive/".extraConfig = '' "~ ^/[^/]+/[^/]+/archive/".extraConfig = ''
limit_req zone=forgejo_archive burst=10 nodelay; limit_req zone=forgejo_archive burst=10 nodelay;
limit_conn forgejo_archive_conn 2;
limit_req_status 429;
''; '';
"= /robots.txt".extraConfig = '' "= /robots.txt".extraConfig = ''
default_type text/plain; default_type text/plain;