.

common.nix

@@ -73,7 +73,6 @@
 
   system.autoUpgrade = {
     enable = true;
-    allowReboot = true;
     dates = "04:00";
   };
 

flake.lock

@@ -27,11 +27,11 @@
         "treefmt-nix": "treefmt-nix"
       },
       "locked": {
-        "lastModified": 1771638948,
-        "narHash": "sha256-zjId0MSbbYe9USVHLzDBY5MKCOJYMoU+E4weGy4RNfk=",
+        "lastModified": 1771691585,
+        "narHash": "sha256-mLcz20Gd5cYOCox0vDWYepFYenBD72klcDM1ARxk1dA=",
         "ref": "refs/heads/main",
-        "rev": "abf1e1195a0b7519cc034491a62e18cd1d2ea46d",
-        "revCount": 6138,
+        "rev": "688ef727e5f2b04812f79bd5507e02f17f70b699",
+        "revCount": 6141,
         "type": "git",
         "url": "https://forgejo.ellis.link/continuwuation/continuwuity"
       },

hosts/vps/configuration.nix

@@ -4,6 +4,7 @@
   boot.loader.grub.enable = true;
 
   system.autoUpgrade.flake = "git+https://forgejo.ellie.town/wizzy/home-server#vps";
+  system.autoUpgrade.allowReboot = true;
 
   sops.age.keyFile = "/var/lib/sops-nix/key.txt";
 }

services/forgejo.nix

@@ -1,6 +1,11 @@
 { ... }:
 
 {
+  systemd.services.forgejo = {
+    wants = [ "network-online.target" ];
+    after = [ "network-online.target" ];
+  };
+
   networking.firewall.interfaces.wg0.allowedTCPPorts = [
     3000
     2222

services/wireguard-outer.nix

@@ -130,6 +130,7 @@
     enabled = true;
     filter = "forgejo-ssh";
     logpath = "/var/log/nginx/forgejo-ssh.log";
+    backend = "auto";
     maxretry = 10;
     findtime = 60;
     bantime = "1h";