···

       
83
       
83
       
 
       


     

       
84
       
84
       
 
       
    systemd.services.k3s = {

     

       
85
       
85
       
 
       
      description = "k3s service";

     

       
86
       
86
       
-
       
      after = mkIf cfg.docker [ "docker.service" ];

     

       
86
       
86
       
+
       
      after = [ "network.service" "firewall.service" ] ++ (optional cfg.docker "docker.service");

     

       
87
       
87
       
+
       
      wants = [ "network.service" "firewall.service" ];

     

       
87
       
88
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
88
       
89
       
 
       
      serviceConfig = {

     

       
89
       
90
       
 
       
        # See: https://github.com/rancher/k3s/blob/dddbd16305284ae4bd14c0aade892412310d7edc/install.sh#L197

     
···

       
92
       
93
       
 
       
        Delegate = "yes";

     

       
93
       
94
       
 
       
        Restart = "always";

     

       
94
       
95
       
 
       
        RestartSec = "5s";

     

       
96
       
96
       
+
       
        LimitNOFILE = 1048576;

     

       
97
       
97
       
+
       
        LimitNPROC = "infinity";

     

       
98
       
98
       
+
       
        LimitCORE = "infinity";

     

       
99
       
99
       
+
       
        TasksMax = "infinity";

     

       
95
       
100
       
 
       
        ExecStart = concatStringsSep " \\\n " (

     

       
96
       
101
       
 
       
          [

     

       
97
       
102
       
 
       
            "${cfg.package}/bin/k3s ${cfg.role}"