feat(nix): enhance systemd-email-notify service configuration

- Added `StartLimitIntervalSec` and `StartLimitBurst` for `ntfy-failure@` unit.
- Refactored `ExecStart` into `script` for improved readability.
- Adjusted `scriptArgs` from `%I` to `%i`.

modules/nixos/services/systemd-email-notify/default.nix

@@ -33,9 +33,10 @@ let
     ERRMAIL
   '';
 
-  onFailureUnits =
+  onFailureUnits = [
-    [ "email@%n.service" ]
+    "email@%n.service"
-    ++ optionals (cfg.ntfy.tokenFile != null) [ "ntfy-failure@%n.service" ];
+  ]
+  ++ optionals (cfg.ntfy.tokenFile != null) [ "ntfy-failure@%n.service" ];
 in
 {
   options = {
@@ -103,21 +104,25 @@ in
       systemd.services."ntfy-failure@" = {
         description = "Send ntfy notification on service failure";
         onFailure = mkForce [ ];
+        unitConfig = {
+          StartLimitIntervalSec = "5m";
+          StartLimitBurst = 1;
+        };
         serviceConfig = {
           Type = "oneshot";
-          ExecStart = pkgs.writeShellScript "ntfy-failure-notify" ''
-            TOKEN=$(cat ${cfg.ntfy.tokenFile})
-            UNIT="$1"
-            ${pkgs.curl}/bin/curl -s \
-              -H "Authorization: Bearer $TOKEN" \
-              -H "Title: Service failed: $UNIT" \
-              -H "Priority: urgent" \
-              -H "Tags: rotating_light" \
-              -d "$(systemctl status --full "$UNIT" 2>&1 | head -40)" \
-              ${cfg.ntfy.url}/${cfg.ntfy.topic}
-          '';
         };
-        scriptArgs = "%I";
+        script = ''
+          TOKEN=$(cat ${cfg.ntfy.tokenFile})
+          UNIT="$1"
+          ${pkgs.curl}/bin/curl -s \
+            -H "Authorization: Bearer $TOKEN" \
+            -H "Title: Service failed: $UNIT" \
+            -H "Priority: urgent" \
+            -H "Tags: rotating_light" \
+            -d "$(systemctl status --full "$UNIT" 2>&1 | head -40)" \
+            ${cfg.ntfy.url}/${cfg.ntfy.topic}
+        '';
+        scriptArgs = "%i";
       };
     })
   ]);

overlays/unstable/default.nix

@@ -4,9 +4,10 @@ final: prev: {
     gemini-cli
     opencode
     tailscale
-    #claude-code
+    claude-code
     qwen-code
     llama-cpp-rocm
+    direnv
     # open-webui
     # vscode
     # nodejs_20
@@ -21,7 +22,7 @@ final: prev: {
   */
 
   # goose-cli = channels.unstable.callPackage ./goose.nix { };
-  claude-code = channels.unstable.callPackage ./claude-code/package.nix { };
+  # claude-code = channels.unstable.callPackage ./claude-code/package.nix { };
   # gemini-cli = channels.unstable.callPackage ./gemini-cli/package.nix { };
   # vscode-extensions = channels.unstable.vscode-extensions // {
   #  rooveterinaryinc = { roo-cline = channels.unstable.callPackage ./roo-code.nix { }; };

systems/aarch64-darwin/rialo/default.nix

@@ -36,13 +36,10 @@ with lib.metacfg;
   environment.systemPackages = with pkgs; [
     attic-client
     claude-code
-    dnsmasq
     gh
     imagemagick
-    libvirt
     nodejs
     qemu
-    virt-manager
     sox
   ];