Merge remote-tracking branch 'origin/main'

modules/nixos/default.nix

@@ -943,6 +943,13 @@
       root
     ];
 
+    boot.tmp.useTmpfs = true;
+    systemd.services.nix-daemon = {
+      environment.TMPDIR = "/var/tmp";
+    };
+    boot.tmp.cleanOnBoot = true;
+    services.irqbalance.enable = true;
+
     services.kanidm = {
       enableClient = true;
       enablePam = true;

nixos/dragon.nix

@@ -21,7 +21,7 @@
   ];
 
   boot = {
-    # kernelPackages = pkgs.linuxPackages_zen;
+    kernelPackages = pkgs.linuxPackages_latest;
     loader.efi.canTouchEfiVariables = true;
     loader.systemd-boot.enable = true;
     initrd.availableKernelModules = ["xhci_pci" "nvme" "ahci" "usbhid"];

nixos/router.nix

@@ -134,6 +134,7 @@ in {
       };
     in {
       enable = true;
+      checkRuleset = true;
       ruleset = with inf; ''
         table inet filter {
         	# set LANv4 {