better writing of nginx functions

server/servers.nix

@@ -12,6 +12,38 @@ in {
   nixpkgs.config = {
     permittedInsecurePackages = [ "nodejs-14.21.3" "openssl-1.1.1v" ];
   };
+  environment.systemPackages = with pkgs;
+    [
+      # Upgrades postgres
+      (let
+        # XXX specify the postgresql package you'd like to upgrade to.
+        # Do not forget to list the extensions you need.
+        newPostgres = pkgs.postgresql_16.withPackages (pp:
+          [
+            # pp.plv8
+          ]);
+      in pkgs.writeScriptBin "upgrade-pg-cluster" ''
+        set -eux
+        # XXX it's perhaps advisable to stop all services that depend on postgresql
+        systemctl stop postgresql
+
+        export NEWDATA="/var/lib/postgresql/${newPostgres.psqlSchema}"
+
+        export NEWBIN="${newPostgres}/bin"
+
+        export OLDDATA="${config.services.postgresql.dataDir}"
+        export OLDBIN="${config.services.postgresql.package}/bin"
+
+        install -d -m 0700 -o postgres -g postgres "$NEWDATA"
+        cd "$NEWDATA"
+        sudo -u postgres $NEWBIN/initdb -D "$NEWDATA"
+
+        sudo -u postgres $NEWBIN/pg_upgrade \
+          --old-datadir "$OLDDATA" --new-datadir "$NEWDATA" \
+          --old-bindir $OLDBIN --new-bindir $NEWBIN \
+          "$@"
+      '')
+    ];
   users.groups = { piracy.gid = 985; };
   users.users = let base = { isSystemUser = true; };
   in {
@@ -45,7 +77,7 @@ in {
   in {
     sonarr = base // { package = pkgs.sonarr; };
     radarr = base // { package = pkgs.radarr; };
-    # bazarr = base // { };
+    bazarr = base // { };
     jellyfin = base // { };
     prowlarr.enable = true;
     microbin = {
@@ -114,7 +146,7 @@ in {
       configureRedis = true;
       extraAppsEnable = true;
       enableImagemagick = true;
-      maxUploadSize = "25G";
+      maxUploadSize = "16G";
       hostName = "cloud.servidos.lat";
       config = {
         adminpassFile = "${pkgs.writeText "adminpass"
@@ -129,8 +161,6 @@ in {
         extraTrustedDomains = [ "cloud.rotehaare.art" "danilo-reyes.com" ];
       };
       phpOptions = {
-        upload_max_filesize = "25G";
-        post_max_size = "25G";
         catch_workers_output = "yes";
         display_errors = "stderr";
         error_reporting = "E_ALL & ~E_DEPRECATED & ~E_STRICT";
@@ -139,12 +169,12 @@ in {
         "opcache.fast_shutdown" = "1";
         "opcache.interned_strings_buffer" = "16";
         "opcache.jit" = "1255";
-        "opcache.jit_buffer_size" = "128M";
+        "opcache.jit_buffer_size" = "256M";
         "opcache.max_accelerated_files" = "10000";
         "opcache.huge_code_pages" = "1";
         "opcache.enable_file_override" = "1";
         "opcache.memory_consumption" = "128";
-        "opcache.revalidate_freq" = "1";
+        "opcache.revalidate_freq" = "60";
         "opcache.save_comments" = "1";
         "opcache.validate_timestamps" = "0";
         "openssl.cafile" = "/etc/ssl/certs/ca-certificates.crt";