diff --git a/modules/devops.nix b/modules/devops.nix
index 754639b..f1ad682 100644
--- a/modules/devops.nix
+++ b/modules/devops.nix
@@ -22,7 +22,7 @@
     useWizard = true;
     extraConfig = ''
       LFS_START_SERVER = true
-      LFS_CONTENT_PATH = /var/lib/gitea/data/lfs
+      LFS_HTTP_AUTH_EXPIRY = 60m
     '';
   };
 
diff --git a/modules/webstack.nix b/modules/webstack.nix
index e1f5636..a6013c2 100644
--- a/modules/webstack.nix
+++ b/modules/webstack.nix
@@ -17,6 +17,7 @@
     recommendedGzipSettings = true;
     recommendedProxySettings = true;
     recommendedOptimisation = true;
+    clientMaxBodySize = "0";
     sslCiphers = "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK:!AES128";
     sslProtocols = "TLSv1.2 TLSv1.3";
     sslDhparam = "/var/lib/dhparams/nginx.pem";