From f71eb7a3a584789a5d4abf84d00318f525dfe31d Mon Sep 17 00:00:00 2001
From: Matthew Binning <matthew@binning.net>
Date: Wed, 21 Jan 2026 13:38:45 -0800
Subject: [PATCH 1/2] feat: Support separating www from content

---
 nginx.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/nginx.nix b/nginx.nix
index 407d14a..58f2af7 100644
--- a/nginx.nix
+++ b/nginx.nix
@@ -174,4 +174,9 @@ in
     acceptTerms = true;
     defaults.email = "hvanb@pm.me";
   };
+  
+  # Ensure the data directory exists with proper permissions
+  systemd.tmpfiles.rules = [
+    "d /var/lib/www 0750 nginx nginx -"
+  ];
 }

From 5284d6e5966793c838a9ac24b6b4133969880f5e Mon Sep 17 00:00:00 2001
From: Matthew Binning <matthew@binning.net>
Date: Wed, 21 Jan 2026 14:01:32 -0800
Subject: [PATCH 2/2] fix: Use unproxied SSH subdomain

---
 forgejo.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/forgejo.nix b/forgejo.nix
index 586dbfd..84965b4 100644
--- a/forgejo.nix
+++ b/forgejo.nix
@@ -17,6 +17,8 @@
     settings = {
       server = {
         DOMAIN = "forgejo.binning.net";
+        SSH_DOMAIN = "ssh.binning.net";
+        SSH_PORT = 2222;
         ROOT_URL = "https://forgejo.binning.net/";
         HTTP_ADDR = "127.0.0.1";
         HTTP_PORT = 3000;