aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/etc/sysctl.d
Commit message (Collapse)AuthorAgeFilesLines
* feat(net): nftables laptop firewallLibravatar sommerfeld2026-05-131-0/+13
| | | | | | | | | | | | | Default-deny inbound, allow outbound. Scoped to 'inet filter' with 'destroy table' on reload so podman/netavark tables are preserved. - meta/base.txt: add nftables - systemd-units/system/base.txt: enable nftables.service - etc/nftables.conf: laptop ruleset (loopback, ct state, ICMP/ICMPv6 essentials, DHCPv6 client, default-drop input/forward, accept output) - etc/sysctl.d/99-sysctl.conf: rp_filter=2, no redirects, no source-route, log_martians - README.md: firewall section with reload caveat
* system: add zram swap via zram-generatorLibravatar sommerfeld2026-04-211-0/+4
| | | | | Cap at 8 GiB, zstd compression. Tune VM for RAM-backed swap: high swappiness, no read-ahead clustering.
* Change event_paranoid for better profilingLibravatar Arnold Sommerfeld2024-03-131-1/+1
|
* first commitLibravatar Arnold Sommerfeld2023-10-181-0/+19