fix: address btcpay hardening review feedback

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>

modules/bitcoin/bitcoind.nix

@@ -423,21 +423,21 @@ in {
 
           if [[ ! -e "$hmacFile" ]]; then
             echo "Error: Bitcoin RPC HMAC file is missing: $hmacFile" >&2
-            exit 1
+            return 1
           fi
           if [[ ! -r "$hmacFile" ]]; then
             echo "Error: Bitcoin RPC HMAC file is unreadable: $hmacFile" >&2
-            exit 1
+            return 1
           fi
 
           hmacPayload="$(<"$hmacFile")"
           if [[ -z "$hmacPayload" ]]; then
             echo "Error: Bitcoin RPC HMAC file is empty: $hmacFile" >&2
-            exit 1
+            return 1
           fi
           if [[ ! "$hmacPayload" =~ ^[[:xdigit:]]+\$[[:xdigit:]]+$ ]]; then
             echo "Error: Bitcoin RPC HMAC file has invalid format: $hmacFile" >&2
-            exit 1
+            return 1
           fi
 
           printf '%s\n' "$hmacPayload"

modules/bitcoin/btcpayserver.nix

@@ -264,9 +264,8 @@ in {
         );
       in rec {
         wantedBy = [ "multi-user.target" ];
-        requires = [ "postgresql.target" ];
+        requires = [ "postgresql.target" "nbxplorer.service" ];
-        wants = [ "nbxplorer.service" ]
+        wants = optional (cfg.btcpayserver.lightningBackend == "lnd") "lnd.service";
-          ++ optional (cfg.btcpayserver.lightningBackend == "lnd") "lnd.service";
         after = requires ++ wants;
         serviceConfig = nbLib.defaultHardening // {
           ExecStart = ''