···

       
46
       
46
       
 
       
      enable = lib.mkDefault true;

     

       
47
       
47
       
 
       
      algorithm = lib.mkDefault "zstd";

     

       
48
       
48
       
 
       
      priority = lib.mkDefault 100;

     

       
49
       
49
       
+
       
      memoryPercent = lib.mkDefault 100;

     

       
49
       
50
       
 
       
    };

     

       
50
       
51
       
 
       


     

       
51
       
52
       
 
       
    myNixOS.services.fail2ban.enable = true;

     

···

       
80
       
80
       
 
       
          ++ lib.optional (config.myNixOS.services.tailscale.operator != null)

     

       
81
       
81
       
 
       
          "--operator ${config.myNixOS.services.tailscale.operator}";

     

       
82
       
82
       
 
       


     

       
83
       
83
       
-
       
        extraSetFlags = ["--advertise-exit-node"];

     

       
83
       
83
       
+
       
        extraSetFlags = ["--advertise-exit-node" "--ssh"];

     

       
84
       
84
       
 
       
        extraDaemonFlags = ["--no-logs-no-support"];

     

       
85
       
85
       
 
       


     

       
86
       
86
       
 
       
        openFirewall = true;