albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Update docker

Browse source
This commit is contained in:
albert 2024-08-05 12:20:46 +09:00
parent 7674a912c4
commit 9e29d53040
Signed by: albert
GPG key ID: 3895DD267CA11BA9
2 changed files with 7 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
nixos/common/services/docker.nix
View file

@ -1,7 +1,11 @@
{ inputs, pkgs, system, ... }: { { inputs, pkgs, system, ... }: {
boot.kernel.sysctl = { boot.kernel.sysctl = {
"fs.inotify.max_user_watches" = 10485760; "fs.inotify.max_user_watches" = 52428800;
"fs.inotify.max_user_instances" = 1024; "fs.inotify.max_user_instances" = 4096;
# Testing...
"net.core.netdev_max_backlog" = 4000;
"net.ipv4.tcp_max_syn_backlog" = 4096;
}; };
virtualisation.docker = { virtualisation.docker = {

2
nixos/hosts/framework-server/fail2ban/traefik.nix
View file

@ -9,7 +9,7 @@
settings = { settings = {
enabled = true; enabled = true;
filter = "traefik-general-forceful-browsing"; filter = "traefik-general-forceful-browsing";
action = ''action-ban-docker-forceful-browsing''; action = "action-ban-docker-forceful-browsing";
logpath = "/var/log/traefik/access.log"; logpath = "/var/log/traefik/access.log";
backend = "auto"; backend = "auto";
findtime = 600; findtime = 600;