Minor updates

nixos/hosts/_template/configuration.nix

@@ -15,7 +15,7 @@
   # this value at the release version of the first install of this system.
   # Before changing this value read the documentation for this option
   # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
-  system.stateVersion = "21.11"; # Did you read the comment?
+  system.stateVersion = "22.11"; # Did you read the comment?
 
   # Additional packages
   environment.systemPackages = with pkgs; [ ];

nixos/hosts/bastion/configuration.nix

@@ -34,6 +34,10 @@ in {
   # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
   system.stateVersion = "21.05"; # Did you read the comment?
 
+  virtualisation.podman = {
+    enable = true;
+  };
+
   # Additional packages
   environment.systemPackages = with pkgs; [
     binutils

nixos/hosts/gitea/configuration.nix

@@ -23,6 +23,8 @@
 
   networking.firewall.allowedTCPPorts = [ config.services.gitea.httpPort ];
 
+  services.openssh.startWhenNeeded = false;
+
   services.gitea = {
     enable = true;
     domain = "git.0x76.dev";
@@ -34,7 +36,6 @@
     disableRegistration = true;
     cookieSecure = true;
     
-
     settings = {
       ui = {
         DEFAULT_THEME = "arc-green";

nixos/hosts/k3s/configuration.nix

@@ -5,9 +5,14 @@
   ];
 
   # Use the GRUB 2 boot loader.
-  boot.loader.grub.enable = true;
-  boot.loader.grub.version = 2;
-  boot.loader.grub.device = "/dev/sda";
+  boot.loader.grub = {
+    enable = true;
+    version = 2;
+    device = "/dev/sda";
+  };
+
+  boot.kernel.sysctl."fs.inotify.max_user_instances" = 2147483647; # INT_MAX, dynamically limited based on available memory
+  boot.kernel.sysctl."fs.inotify.max_user_watches" = 1048576;
 
   networking.hostName = "k3s-node1";
 

nixos/hosts/plausible/configuration.nix

@@ -1,46 +0,0 @@
-# Edit this configuration file to define what should be installed on
-# your system.  Help is available in the configuration.nix(5) man page
-# and in the NixOS manual (accessible by running ‘nixos-help’).
-
-{ config, pkgs, ... }:
-let
-  vs = config.vault-secrets.secrets;
-  cfg = config.services.plausible;
-in
-{
-  imports = [ ];
-
-  networking.hostName = "plausible";
-
-  # This value determines the NixOS release from which the default
-  # settings for stateful data, like file locations and database versions
-  # on your system were taken. It‘s perfectly fine and recommended to leave
-  # this value at the release version of the first install of this system.
-  # Before changing this value read the documentation for this option
-  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
-  system.stateVersion = "21.11"; # Did you read the comment?
-
-  # Additional packages
-  environment.systemPackages = with pkgs; [ ];
-
-  networking.firewall.allowedTCPPorts = [ cfg.server.port ];
-  networking.firewall.allowedUDPPorts = [ ];
-
-  vault-secrets.secrets.plausible = { };
-
-  services.plausible = {
-    enable = true;
-    releaseCookiePath = "${pkgs.runCommand "cookie" { } ''
-        ${pkgs.openssl}/bin/openssl rand -base64 64 >"$out"
-      ''}";
-    server = {
-      baseUrl = "https://analytics.0x76.dev";
-      secretKeybaseFile = "${vs.plausible}/secretkeybase";
-    };
-    adminUser = {
-      activate = true;
-      email = "plausible@xirion.net";
-      passwordFile = "${vs.plausible}/password";
-    };
-  };
-}