From 19524606067329a666f897bba788c98908690d94 Mon Sep 17 00:00:00 2001
From: Daniel Flanagan <daniel@lyte.dev>
Date: Wed, 21 Aug 2024 20:11:39 -0500
Subject: [PATCH] tmpfs, irqbalance, etc.

---
 modules/nixos/default.nix | 7 +++++++
 nixos/dragon.nix          | 2 +-
 nixos/router.nix          | 1 +
 3 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/modules/nixos/default.nix b/modules/nixos/default.nix
index 8cdb567..280d87c 100644
--- a/modules/nixos/default.nix
+++ b/modules/nixos/default.nix
@@ -939,6 +939,13 @@
       root
     ];
 
+    boot.tmp.useTmpfs = true;
+    systemd.services.nix-daemon = {
+      environment.TMPDIR = "/var/tmp";
+    };
+    boot.tmp.cleanOnBoot = true;
+    services.irqbalance.enable = true;
+
     services.kanidm = {
       enableClient = true;
       enablePam = true;
diff --git a/nixos/dragon.nix b/nixos/dragon.nix
index 1da747b..95baa70 100644
--- a/nixos/dragon.nix
+++ b/nixos/dragon.nix
@@ -21,7 +21,7 @@
   ];
 
   boot = {
-    # kernelPackages = pkgs.linuxPackages_zen;
+    kernelPackages = pkgs.linuxPackages_latest;
     loader.efi.canTouchEfiVariables = true;
     loader.systemd-boot.enable = true;
     initrd.availableKernelModules = ["xhci_pci" "nvme" "ahci" "usbhid"];
diff --git a/nixos/router.nix b/nixos/router.nix
index 9bf164c..2263075 100644
--- a/nixos/router.nix
+++ b/nixos/router.nix
@@ -134,6 +134,7 @@ in {
       };
     in {
       enable = true;
+      checkRuleset = true;
       ruleset = with inf; ''
         table inet filter {
         	# set LANv4 {