Add comments & remove redundant config

IS_TLS_ENABLED = true is implied if HOST's port is 465

hosts/ao/modules/gitea.nix

@@ -16,7 +16,6 @@
         HOST = "mail.gmail.com:465";
         USER = "hlissner@gmail.com";
         MAILER_TYPE = "smtp";
-        IS_TLS_ENABLED = "true";
       };
     };
     mailerPasswordFile = config.age.secrets.gitea-smtp.path;

hosts/kuro/hardware-configuration.nix

@@ -27,6 +27,9 @@
 
   # Displays
   services.xserver = {
+    # This must be done manually to ensure my screen spaces are arranged exactly
+    # as I need them to be *and* the correct monitor is "primary". Using
+    # xrandrHeads does not work.
     monitorSection = ''
       VendorName  "Unknown"
       ModelName   "DELL U2515H"

modules/services/fail2ban.nix

@@ -19,6 +19,8 @@ in {
           bantime = 6h
           findtime = 15m
         '';
+        # Harsher defaults for sshd because it's all key based. Auth failures
+        # are less likely to be legit here.
         sshd = ''
           bantime = 24h
           findtime = 1h

modules/services/gitea.nix

@@ -1,3 +1,13 @@
+# modules/services/gitea.nix
+#
+# Gitea is essentially a self-hosted github. This modules configures it with the
+# expectation that it will be served over an SSL-secured reverse proxy (best
+# paired with my modules.services.nginx module).
+#
+# Resources
+#   Config: https://docs.gitea.io/en-us/config-cheat-sheet/
+#   API:    https://docs.gitea.io/en-us/api-usage/
+
 { options, config, lib, pkgs, ... }:
 
 with lib;

modules/services/nginx.nix

@@ -33,3 +33,15 @@ in {
     };
   };
 }
+
+# Helpful nginx snippets
+#
+# Set expires headers for static files and turn off logging.
+#   location ~* ^.+\.(js|css|swf|xml|txt|ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|r ss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav |bmp|rtf)$ {
+#     access_log off; log_not_found off; expires 30d;
+#   }
+#
+# Deny all attempts to access PHP Files in the uploads directory
+#   location ~* /(?:uploads|files)/.*\.php$ {
+#     deny all;
+#   }