nix: update nixpkgs
[sourcephile-nix.git] / hosts / mermet / pleroma.nix
index 452699864de7be00f97a5f477f76317f72960f3c..6eee382c44569178b90122ee459a8eafb6bcdee5 100644 (file)
@@ -173,6 +173,12 @@ in
         user       ${srv}           ${owner}
       '';
     };
+    sanoid.datasets."rpool/var/lib/${srv}" = {
+      use_template = [ "snap" ];
+      daily = 31;
+      monthly = 3;
+      recursive = true;
+    };
   };
   systemd.services = {
     nginx = {
@@ -195,10 +201,16 @@ in
         +sbwtdcpu none
         +sbwtdio none
       '';
+      unitConfig = {
+        StartLimitBurst = 5;
+        StartLimitIntervalSec = "600s";
+      };
       serviceConfig = {
         LoadCredentialEncrypted = [ "config.exs:${./pleroma/config.exs.cred}" ];
         SupplementaryGroups = [ groups."postgres".name ];
         TimeoutStopSec = "10s";
+        Restart = "on-failure";
+        RestartSec = "10s";
         # For sendmail
         NoNewPrivileges = lib.mkForce false;
       };