.claude/settings.local.json

@@ -1,8 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "WebSearch",
-      "WebFetch(domain:forgejo.org)"
-    ]
-  }
-}

.git-crypt/.gitattributes

@@ -0,0 +1,4 @@
+# Do not edit this file.  To specify the files to encrypt, create your own
+# .gitattributes file in the directory where your files are.
+* !filter !diff
+*.gpg binary

.gitattributes

@@ -0,0 +1 @@
+**/*.key filter=git-crypt diff=git-crypt

system/machines/server/modules/forgejo/default.nix

@@ -62,11 +62,6 @@ in
           SSH_PORT = 22;
           START_SSH_SERVER = false;
           LANDING_PAGE = "explore";
-          LFS_MAX_FILE_SIZE = 0;
-        };
-
-        "repository.upload" = {
-          FILE_MAX_SIZE = 0;
         };
 
         service = {
@@ -97,7 +92,6 @@ in
     services.nginx.virtualHosts."git.${domain}" = mkIf nginx.enable {
       useACMEHost = domain;
       forceSSL = true;
-      extraConfig = "client_max_body_size 0;";
       locations."/" = {
         proxyPass = "http://unix:${socketPath}";
       };