From 0d51f36b2a2e6aa1bd182b5f81c82f274e42c52f Mon Sep 17 00:00:00 2001
From: Patrick <patrick@failmail.dev>
Date: Wed, 24 Apr 2024 15:50:56 +0200
Subject: [PATCH] fix: netbird secret and inotify

---
 config/services/netbird.nix                     |   6 ++++--
 hosts/elisabeth/fs.nix                          |   2 ++
 .../secrets/netbird/generated/dataEnc.age       | Bin 795 -> 704 bytes
 3 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/config/services/netbird.nix b/config/services/netbird.nix
index 57f8b23..3112772 100644
--- a/config/services/netbird.nix
+++ b/config/services/netbird.nix
@@ -15,11 +15,13 @@
 
   age.secrets.coturnSecret = {
     generator.script = "alnum";
-    group = "netbird";
+    owner = "turnserver";
   };
 
   age.secrets.dataEnc = {
-    generator.script = "alnum";
+    generator.script = {pkgs, ...}: ''
+      ${lib.getExe pkgs.openssl} rand -base64 32
+    '';
     group = "netbird";
   };
 
diff --git a/hosts/elisabeth/fs.nix b/hosts/elisabeth/fs.nix
index c1f6d00..f41123d 100644
--- a/hosts/elisabeth/fs.nix
+++ b/hosts/elisabeth/fs.nix
@@ -65,6 +65,8 @@
     };
   };
 
+  boot.kernel.sysctl."fs.inotify.max_user_instances" = 1024;
+
   services.zrepl = {
     enable = true;
     settings = {
diff --git a/hosts/elisabeth/secrets/netbird/generated/dataEnc.age b/hosts/elisabeth/secrets/netbird/generated/dataEnc.age
index d41e96335f6d27fff4101942fa56fbcd6f66dbc0..50285f2c1e6e4eb335b3d346b7caf0450280ae3f 100644
GIT binary patch
literal 704
zcmZwCJ&V&|007`o$)G4Wi4brRLQRt<ZG+&ET#`0T+N5ckrop96-y}_%H(&io>f-2m
zqqsN-;tg(!c<AAvxQHJdIJgR;vmp2b<i-Pk!NW80Km|Z2E0g6shS%fF!`B2-xrtgN
zO%n_X8@>Q^UWIJBl@+;TdP<ctw|vIeS5r=#SVCzT0B{RPAt|G=j^WEDS4$ezaT_u@
z(Sy{$5Sx5Lsa%WFOda4MzlcwSWWKH>Bwa@>qaO}gl*P+hr=%l)s6s7}Mk}EqE}FWN
zIw6>j@?>6!iR$`tK}=G_#T;s~6l>K`lQA35@_GWt%!p~5n(oXJPVUlXuG-^vOE_iO
zqBoZ|C|lI|0Vd!}MkoC&Rg_I@y=biZ+zi9>ff?9V!gHE#&P#ob7-1<yYA*q_tZZ_;
znbsMc917E}mb*bAWeY~|7d%$4mh35uUPs!pkFq4(-8!*pK`~+EZa%c?&Y(m3uF$Tf
zQbq!jBD8V7ZHsP*^wxn_L|YweIr>0h^2pdgI=06O9`8mqR+6?8)$r8FA^!jJa3+v4
zUf>x}0A3=pwud);eA<mRD@q)R;>4~-t<d#253y%Tu$hklJvV1SCmZ(I$U7Kp@XkoC
zndXp`*%iz!zUMbjURlM<z$6C<kVCI0x`U$SV(A8{R4QmW)gnQ`2pD%gCkkmy5=x4h
z&ARcpv$A*FML+UcGs=Q#h}`@B=jYMmy~_^|kIpm4JI9~V1LE6P#<_Lox&CNBc=I%C
xoxOPV#)Z9iw~KSvUc7oxef{g@rz=0+9)9_I|Kqc}2fvLw!Or_jPxcez!#@e>@IwFq

literal 795
zcmY+<JB!nB008itv$zQ2*2Nd0=F#SL2OiC<Nz=4V(lkv4A#Kw%X&(RP)%HI)I0+(7
zqTt}-<RBsrf-VPwvu<vF05`!w9OMRv`vgCJUf?(VbdeuG8D{D2EDx}nK$>?NQ<9<x
zt^r#-E!0d5y)1D`GYwn(Myz^*M{h8=p?!7icCxLh>{As{0@R2J({hufzz9<E$Nrj|
z<9taa?Ugq&ccI#C^HmN4`&<BF-2@~>H>P7_V|N-Ikf<BKF9aIkw=0^hyJ}6kLn`d4
zEyEkF=9t7dBZE@#AVoylNf?6Lm;g?vN=?HZwOEsa(^m6Vg~_9UOOguRYqg?Zux4@)
zs=G!f#S6D6m_m-Mg{x#T?BkLiq*4#h#7+T?Lp?G0E`f4|gn;#8u7lKu-NQaDGsps0
zCaaOsR=ohPD2`P3G*F_!aHd|cs5%*yMx(<StpZL%8}>w0iVI5;d#n^O2c?{_WVYP4
zfK9Pkn`Q(85j>ogtHO0AEt@a_x?G19ZuFLzY&m^}C-unJmN;B;uyeus|0*@#&1a^l
z1q2V6h?Hdv<-JL4*({9rK(H!HkJI>&nPVgxmbiv{`+-kW)Y@AbJ9o#-f_@d1p^6RT
zls4ycoRO8ebZ+_Pq#5MCSNIJb7wMB5$ONEkJCKAeCJiE0hJtL!9B(fyKGH?)pxNwL
zSrFvRoyUAUSh>N#S*S58)+TVr!`>7r1(bL81<pXLACH|bX_L7w^julrA<bs9fd@>T
zn02RSv!!koIcunkRT+cCD&{ge%B2;om0C?b(m=kyJ>h@7+JYz7ZW`CG{J#20f2y4w
zzFa!G^7!n>>rHg*JXb#cJU+VzF5kYZ-+Fqv{p`<&7pL0khtqG(M-Luw##is}!*?%N
N_tW=p-h4iq`~%)-2|WM+