diff --git a/modules/nixos/services/tangled.nix b/modules/nixos/services/tangled.nix index 4b8d61c..37dbbb2 100644 --- a/modules/nixos/services/tangled.nix +++ b/modules/nixos/services/tangled.nix @@ -118,6 +118,7 @@ in systemd.services.knot.serviceConfig = { MemoryMax = "8G"; MemoryHigh = "6G"; + MemorySwapMax = "0"; }; # Fix race condition: chown -R fails if SQLite WAL temp files (-wal, -shm) diff --git a/secrets/emojibot/hackclub.age b/secrets/emojibot/hackclub.age index 1c07ed994f5cdae806e05d4290bff17f98a9cc01..703219bdc24433f2e9147f08fb95ea0d89903d53 100644 GIT binary patch delta 1902 zcmeC?Z{(k#QJJnyBY2s#7nHLZe zTxe7fk>PA&Q5Ig1mhY14WMXWV;=vVc66I3hmQs{!k{uKlnCPDzn4RwJ5m1sD815YA zWmsBa?&;(koR?cs>XqqL>Q|YT6qTdxXX)pW?d%^ESf8B1<>_LPT9WSL6`7M?S)3T^ z=@XEaXBglbkRI&o7vWuL80B46mgH($?q_J|Ze|={?BiQhkR4QH9%UI=V3-_H&Q+C_ zWpJ%`o8S0nknO~e7nP*ZE6d78kos^STqOG5w;*ptLk#A7xWSEhf;g%6v zo|m3wK^LimKkIaQCwQ(9^h_n zno*gQ<)4?Gm+KuE;Nu;Z795;pnV*#s;z8pdDhA?-5>{TJBm>m>pJJ?qv{>nN(_)W0D=>U9bJ+8FC-ov_cH zANeX4owh#PS#kcM<$U`$M<%Q=<2$hGN>-a)eL=jBy&r$1;qp0)w%@q8$-H*<^0h^K z^5&Z*I^5*meWc`x(eybdwG-TaK78iwA|Vp6D`LrnLsI?Oiz7ZxTDFjP(~^C%QvTOO zo;)gf`*XDbW2xw>--kE7k@`Q$CTxDnZI&lB^Z2%~mveY=u{S~*i;ETOG*l)y3g4dd%=g6oKXUm;FWgvJ(wO2kcMb2qU!S!E z|9`z?qAMeN>rd9A&xgHqRv&O_SQ#?u_`GLjQTLt%1jO$zb=)Lbv{L;I`?re{YuJ>I@!xNm82kI41?j!Q#^U!K8hy_5T3ClHnWnw=^@#@M^a+uN zy1nBbNLoKAHkVkP9dp)->sI~0B8G<8$6cjTy_r@M*?#TpJZ|ps)U5GNhVHS4F&bH4 z+-8O>e8awtad}yqSzXTaT+NM3+wRLGPA@og(%WH;bH=gMlQQO={}#V`ec)&Po?llE z+~++b_gA@#Q^@o{VZq6Ho>l@~%Y)|5UY;(#XLGW1XKfF+B-a6J$&!jQ{Z^-E)*t>D z&3}Hup%)JXjf6Rc8GVwIob_J$d(2$_MfBWp#nlHaZgU-n4lc10(rrd*D{ z#CXsC?#%W-OZAuhkKZt{nCI!Sj?N>Nq1o@7Z^}IU*?KxD*O|Hd;j@QY>Hag+c3kqm zZ#*M4HNNfH*O=$$_iaDDV|huxaH8P37FDqVd(Z!yw03Me^75;X$%%)d>h(Ug+I+m* zd*6D@Y?7ix(Y1_?2xGSnvUX*vQEofT2CNt=C&H~^`caOOLS@ys;Ghf2+d3?L+wYD>b1=W1+9=7+lpINqf=k2A(_@8S}bc!D%jr2$r~AaF{Xdd)2j=VM9QV-r`ETe^n0roR^9bv%0kBC zQ+kIJoK*FLR<73B7kWW^5|hH?kB3AOGsVxnws~N|*L}EeSzFaPnRC3Y=2hi8JtwY+ z;eTq}TiiS^+WqL*IOq<2fj${Xnb|9(_KX@wtKSpq0f$=O#ce+ z;QM9!Y%O0%%C^=2ij}^%%#$y8=aSd%l)UnI;|(VE_u-oy&rd3`d6`z7rdIV!NsrCEqe(pcw^8Zpi E0M8m+EdT%j delta 1912 zcmZqV@8+MNQJ+y(m{{Ornx7qL5~%H(WK^145EkWK>KWl&VHWOeke(N$om!@^U*v3B z@URUS4SFrLQ0Cm#Cd)k!GF|nwXjy5uWPnS6>*)m0g}vo)esFm}FuWsvlBp zQRwe$m}!((;Fp$W7VMa6p`VlCV&s$KYT*-Nsc)30on09mnqp=U5mgmt7Ub+-&Shqj z?-^c};U8F9ni}Ys;#ibop6Q!Y9$xN|Z0zXo=$M)vRZ-#UZ0c2NRvze9V4i7~Zfatd zlZI5 z5tx-*6lLk_SLT!M>*G;q?3?YDloO>NXi<^lTpyg`mlEdfpULIo9vBpqnc?A9S>Rh- zsPF4xn(Z4I=I)nn7#`r9ml#%@8e-t%6lrdf?UGbk8Rj3F=TvT9lo3=ORFRjT;+4x~ zUQp@poa333o)MXt5?buysqJSNnc|)pn3xi1ksFy4RBWE>lN215>#AQB91`dn;-6}f zTyKz(m*wOd>E`C^%f+RutE&)}lVw<7=3Qx?S?(0+n{DBr?CB+VAQcdmoR(*y(m3>{O=YL%Mu2M5*!6wrgUh^KDpIE*|L-&bhkox;< z3H$nQ#)y_#n7FVZMcsZZGZKpc*R;1mefP(a# zU!Pw+JRumzr`q-LuluIOrJqW^=l_3sLoLi(Ql7&_`*T~v$CEcMt~)K>thVNC+@#Ns zGyhFLxTlf*oX_>wT*7nTG_1e!{-wwAUX_OV;t?G_Yj#bJx087g!+B@AmY%9#+p<^6 z*Ee3gGo^lOJx|(#r<#`+Y&+0pef-asL}sm!xhLX#FLOSb!t_^LW5eAEiv%^+hR;e7 zT%~Q*`tKwk*UJxc=4|a+6J#1UIllL7_S4O`uJJeY{Mm1+tukM?SVVUHgD(d!Uwy{q zz{RBab@zVvrK=C@)4zPKwNj=wHSIiCcg|jsSreaU&o?lcy#7x?{b7$Uq7U?{6^q{Z zJ>#xg^l9!~@td9>qbD9u>Xm1|fBKMP@eG5|OM9<)esjLrzU}-(p($H_cYN<(u6Hcw z{_Vx*6u39DTo9AV5Lj|##Zx;I#*H_Autt}yc8Uu+HhoHuh0d~Q#qa}GkBz6SV9N_) zSzUT9Pe03EgW>*9Hq)6))EYk2H_8V)6}ufcBNH`Fc6sWXOABW2lx zid|7f&%^tCuW8$#T`pslqw37E|H69HNlIqte`jt`&va(U$h)ynZ0oV$)}^BJrc8Y^ zFY%nhgxBv)*)G;tdS5Rzbaj8wQ_t1IptDlVGHv~rF2mNc*42-i_X#(h|8>pSp#FFH zKF#3#lPR1H8U~pwi=3D_n}pQuXZGdYJNEcV1na3Ot(&wZLj)x+xY`xgZ?w3$_Tb;L zxBJcnc;DwLp6{6Ky;5e;5{Wyf>x>s|+-BR+a7B*$_v|ZH1r>^yRvXG(n5UE~BX1h| z`OGc9rCajPOrB|_!!ze?nrVdb_RouqEArCoztu`eAGdS9ZS|GMxa)t|-rv)gs@fT} z?)EUAWodTd!*q%LTP%KsoY|zk_=|a4kj80^e0I%=DOn3P_g2i{o!kEQU3b2a^uig} zrmke{<(?<7;_;;}5%)R!O<#PK3{QMKV_*8eZ^!ji^`i=VQXdH{S>rgNf=hGn$}E`! zZu<mMjcw^M>dH5jb3On zwr*upT^ZB4&U`=BCye|r?q2aqQd8#M6Lu{9*9SiPv`_!0-q1X{+fIFl*?Na7FszN!3^;PvKGo?3eLO1lkQ%U?M+9-Vv22I&LQ4?5B5r_&;7fZ>rDs-V6Tup381rYwccp^Us9E2biw0pJ|z%)BCAr zlgR8zhhAPcX7sLaq2cjos>39zn? Q&Tw6`{(1bv-{lft07tG;%m4rY