Ryan Yin 4b7375c077 fix(nixos): gate zram kernel sysctl tunings behind modules.zram.enable ...

The zram module was auto-imported on all hosts via base scanPaths, and its
swappiness=180/page-cluster=0 tunings leaked onto hosts that disabled zram
(e.g. idols-ai with a disk swapfile, pushing cold anon pages to disk swap).
Wrap the whole module in modules.zram.enable (default true); idols-ai now
turns off zram and its tunings with a single switch.

2026-08-29 11:16:12 +08:00

..

base

fix(nixos): gate zram kernel sysctl tunings behind modules.zram.enable

2026-08-29 11:16:12 +08:00

desktop

security: hardening pass 1 (AppArmor, firewall default, loopback metrics, k3s perms, SSH X11) (#266)

2026-08-27 00:13:01 +08:00

server

security: hardening pass 1 (AppArmor, firewall default, loopback metrics, k3s perms, SSH X11) (#266)

2026-08-27 00:13:01 +08:00

desktop.nix

feat: idols-ai - add new data disk via disko (#250)

2026-03-18 22:26:08 +08:00