1 files changed, 29 insertions, 0 deletions
diff --git a/modules/base.nix b/modules/base.nix
index 7124b54..bc0f3b7 100755
--- a/modules/base.nix
+++ b/modules/base.nix
@@ -14,6 +14,34 @@
       "memhp_default_state=online"
       "net.core.default_qdisc=fq"
       "net.ipv4.tcp_congestion_control=bbr"
+      "mitigations=off"
+      "audit=0"
+      "consoleblank=0"
+      "kmemcheck=0"
+      "no_console_suspend"
+      "kernel.core_pattern=/dev/null"
+      "init_on_alloc=0"
+      "kernel.sysrq=1"
+      "kernel.dmesg_restrict=0"
+      "net.ipv4.ip_forward=1"
+      "vm.swappiness=10"
+      "net.core.netdev_max_backlog=16384"
+      "net.core.somaxconn=8192"
+      "net.core.rmem_default=1048576"
+      "net.core.rmem_max=16777216"
+      "net.core.wmem_default=1048576"
+      "net.core.wmem_max=16777216"
+      "net.core.optmem_max=65536"
+      "net.ipv4.tcp_rmem=4096 1048576 2097152"
+      "net.ipv4.tcp_wmem=4096 65536 16777216"
+      "net.ipv4.udp_rmem_min=4096"
+      "net.ipv4.udp_wmem_min=4096"
+      "net.ipv4.tcp_fastopen=3"
+      "net.ipv4.tcp_mtu_probing=1"
+      "net.ipv4.tcp_keepalive_time=30"
+      "net.ipv4.tcp_keepalive_intvl=15"
+      "net.ipv4.tcp_keepalive_probes=4"
+      "net.ipv4.tcp_timestamps=0"
     ];
   };
 
@@ -24,6 +52,7 @@
       # allowedTCPPorts = [ ... ];
       # allowedUDPPorts = [ ... ];
     };
+    nameservers =  [ "1.1.1.1" "1.0.0.1" "8.8.8.8" "8.4.4.8" ];
   };
 
   i18n.defaultLocale = "en_US.UTF-8";