AtaraxiaDev/nixos-config
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

fix: blueshift and redshift hosts evaluation

Browse Source
This commit is contained in:
Dmitriy Kholkin 2025-06-07 22:30:44 +03:00
parent cd456da0e6
commit f88d20fc12
Signed by: AtaraxiaDev
GPG Key ID: FD266B810DF48DF2
3 changed files with 46 additions and 60 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
hosts/blueshift/default.nix
View File

@ -43,21 +43,23 @@
]; ];
ataraxia.defaults.ssh.ports = [ 32323 ]; ataraxia.defaults.ssh.ports = [ 32323 ];
ataraxia.network = { ataraxia.networkd = {
enable = true; enable = true;
enableIPv6 = false; disableIPv6 = true;
domain = "ro.ataraxiadev.com"; domain = "ro.ataraxiadev.com";
ifname = "enp0s3"; ifname = "enp0s3";
mac = "00:16:3e:e3:cd:40"; mac = "00:16:3e:e3:cd:40";
bridge.enable = true; bridge.enable = true;
ipv4 = { ipv4 = [
{
address = "45.134.48.174/24"; address = "45.134.48.174/24";
gateway = "45.134.48.1"; gateway = "45.134.48.1";
dns = [ dns = [
"9.9.9.9" "9.9.9.9"
"149.112.112.112" "149.112.112.112"
]; ];
}; }
];
}; };
services.qemuGuest.enable = lib.mkForce true; services.qemuGuest.enable = lib.mkForce true;
@ -87,11 +89,6 @@
"systemd.setenv=SYSTEMD_SULOGIN_FORCE=1" "systemd.setenv=SYSTEMD_SULOGIN_FORCE=1"
]; ];
kernel.sysctl = { kernel.sysctl = {
"vm.swappiness" = 50;
"vm.vfs_cache_pressure" = 200;
"vm.dirty_background_ratio" = 1;
"vm.dirty_ratio" = 40;
"vm.page-cluster" = 0;
# proxy tuning # proxy tuning
"net.ipv4.tcp_congestion_control" = "bbr"; "net.ipv4.tcp_congestion_control" = "bbr";
"net.ipv4.tcp_slow_start_after_idle" = 0; "net.ipv4.tcp_slow_start_after_idle" = 0;
@ -126,19 +123,15 @@
]; ];
}; };
environment.systemPackages = builtins.attrValues { environment.systemPackages = with pkgs; [
inherit (pkgs.kitty) terminfo;
inherit (pkgs)
bat bat
bottom bottom
comma
git git
kitty.terminfo
micro micro
nix-index
pwgen pwgen
rsync rsync
; ];
};
services.fail2ban = { services.fail2ban = {
enable = true; enable = true;
maxretry = 3; maxretry = 3;

25
hosts/redshift/default.nix
View File

@ -43,21 +43,23 @@
]; ];
ataraxia.defaults.ssh.ports = [ 32323 ]; ataraxia.defaults.ssh.ports = [ 32323 ];
ataraxia.network = { ataraxia.networkd = {
enable = true; enable = true;
enableIPv6 = false; disableIPv6 = true;
domain = "wg.ataraxiadev.com"; domain = "wg.ataraxiadev.com";
ifname = "enp0s18"; ifname = "enp0s18";
mac = "bc:24:11:99:d5:2f"; mac = "bc:24:11:99:d5:2f";
bridge.enable = true; bridge.enable = true;
ipv4 = { ipv4 = [
{
address = "104.164.54.197/24"; address = "104.164.54.197/24";
gateway = "104.164.54.1"; gateway = "104.164.54.1";
dns = [ dns = [
"9.9.9.9" "9.9.9.9"
"149.112.112.112" "149.112.112.112"
]; ];
}; }
];
}; };
services.qemuGuest.enable = lib.mkForce true; services.qemuGuest.enable = lib.mkForce true;
@ -87,11 +89,6 @@
"systemd.setenv=SYSTEMD_SULOGIN_FORCE=1" "systemd.setenv=SYSTEMD_SULOGIN_FORCE=1"
]; ];
kernel.sysctl = { kernel.sysctl = {
"vm.swappiness" = 50;
"vm.vfs_cache_pressure" = 200;
"vm.dirty_background_ratio" = 1;
"vm.dirty_ratio" = 40;
"vm.page-cluster" = 0;
# proxy tuning # proxy tuning
"net.ipv4.tcp_congestion_control" = "bbr"; "net.ipv4.tcp_congestion_control" = "bbr";
"net.ipv4.tcp_slow_start_after_idle" = 0; "net.ipv4.tcp_slow_start_after_idle" = 0;
@ -126,19 +123,15 @@
]; ];
}; };
environment.systemPackages = builtins.attrValues { environment.systemPackages = with pkgs; [
inherit (pkgs.kitty) terminfo;
inherit (pkgs)
bat bat
bottom bottom
comma
git git
micro micro
nix-index
pwgen pwgen
rsync rsync
; kitty.terminfo
}; ];
services.fail2ban = { services.fail2ban = {
enable = true; enable = true;
maxretry = 3; maxretry = 3;

8
modules/nixos/boot/default.nix
View File

@ -36,10 +36,10 @@ in
kernel.sysctl = mkIf config.zramSwap.enable { kernel.sysctl = mkIf config.zramSwap.enable {
"vm.swappiness" = 100; "vm.swappiness" = 100;
# "vm.vfs_cache_pressure" = 500; "vm.vfs_cache_pressure" = 200;
# "vm.dirty_background_ratio" = 1; "vm.dirty_background_ratio" = 1;
# "vm.dirty_ratio" = 50; "vm.dirty_ratio" = 40;
# "vm.page-cluster" = 0; "vm.page-cluster" = 0;
}; };
tmp.cleanOnBoot = !config.boot.tmp.useTmpfs; tmp.cleanOnBoot = !config.boot.tmp.useTmpfs;