···

       
38
       
38
       
 
       


     

       
39
       
39
       
 
       
    boot.kernel.sysctl = mkIf cfg.tweakKernel {

     

       
40
       
40
       
 
       
      "kernel.unprivileged_userns_clone" = true;

     

       
41
       
41
       
+
       
      "net.ipv4.ip_unprivileged_port_start" = "80";

     

       
41
       
42
       
 
       
      "net.ipv4.ping_group_range" = "0 65536";

     

       
42
       
43
       
 
       
    };

     

       
43
       
44
       
 
       
  };