Alexander

alexoundos pushed to master at alexoundos/articles

454c9654de all common systemd hardening options

2023-06-30 03:27:27 +03:00

alexoundos commented on issue SelfPrivacy/selfprivacy-nixos-config#30

As for RAM limits, `MemoryMax` is the absolute limit. It is recommended to use `MemoryHigh` as the main control mechanism, because it allows to go above the limit, but the processses are heavily…

2023-06-30 01:03:16 +03:00

alexoundos commented on issue SelfPrivacy/selfprivacy-nixos-config#30

Update systemd limits

Also, `systemd-journald` consumes around 500 MiB of RAM, according to netdata (when uptime was 2 weeks). Perhaps, this should be due to: ```nix services.journald.extraConfig = "SystemMaxUse=500M"…

2023-06-29 23:44:04 +03:00

alexoundos commented on pull request SelfPrivacy/selfprivacy-rest-api#21

add nix-collect-garbage endpoint

Is it cyrillic letter `С`?

2023-06-29 15:13:38 +03:00

alexoundos created pull request SelfPrivacy/selfprivacy-nixos-config#35

WIP: fix typos in resource/limits.nix

2023-06-28 18:30:15 +03:00

alexoundos created branch systemd-limits in SelfPrivacy/selfprivacy-nixos-config

2023-06-28 18:27:18 +03:00

alexoundos pushed to systemd-limits at SelfPrivacy/selfprivacy-nixos-config

a21da91f86 fix typos in resource/limits.nix

2023-06-28 18:27:18 +03:00

alexoundos created branch systemd-limits in alexoundos/selfprivacy-nixos-config

2023-06-28 18:25:02 +03:00

alexoundos pushed to systemd-limits at alexoundos/selfprivacy-nixos-config

a21da91f86 fix typos in resource/limits.nix

2023-06-28 18:25:02 +03:00

alexoundos commented on issue SelfPrivacy/selfprivacy-nixos-config#30

Update systemd limits

As for the limit values themselves, the strategy is not clear, especially for the CPU quota. Maybe benchmarks or tests are needed to determine. And it's hard to say whether `BlockIOWeight = 10` is…

2023-06-28 18:12:31 +03:00

alexoundos commented on issue SelfPrivacy/selfprivacy-nixos-config#30

Update systemd limits

If [resources/limits.nix](https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config/src/commit/65b5a1977756549240eae05005d1f6b5feef126d/resources/limits.nix) file is meant, ironically it's…

2023-06-28 17:59:29 +03:00

alexoundos pushed to default.nix at alexoundos/selfprivacy-nixos-config