sept rice v2

nixos/consensus/configuration.nix

@@ -24,13 +24,14 @@
   };
   environment.systemPackages = with pkgs; [
     git
-    nvim-pkg
+    vim
     docker-compose
     tmux
   ];
   services = {
     # zfs.autoScrub.enable = true;
     # zfs.autoSnapshot.enable = true;
+    fstrim.enable = true;
     tailscale.enable = true;
     k3s = {
       enable = true;
@@ -46,6 +47,7 @@
       ignoreIP = [
         "172.16.0.0/12"
         "192.168.0.0/16"
+        "10.0.0.0/8"
         "tailc353f.ts.net"
       ];
 
@@ -93,10 +95,9 @@
     };
     nginx = {
       enable = false;
-      virtualHosts."img.consensus.tailc353f.ts.net" = {
-        # forceSSL = true;
-        # sslCertificate = "/etc/nginx/certs/consensus.tailc353f.ts.net.crt";
-        # sslCertificateKey = "/etc/nginx/certs/consensus.tailc353f.ts.net.key";
+      virtualHosts."img.10110110.xyz" = {
+        forceSSL = true;
+        useACMEHost = "10110110.xyz";
         locations."/" = {
           proxyPass = "http://localhost:${toString config.services.immich.port}";
           proxyWebsockets = true;
@@ -122,7 +123,7 @@
   swapDevices = [
     {
       device = "/swapfile";
-      size = 8 * 1024;
+      size = 16 * 1024;
     }
   ];
   virtualisation.docker.enable = true;