fix: netbird secret and inotify

config/services/netbird.nix

@@ -15,11 +15,13 @@
 
   age.secrets.coturnSecret = {
     generator.script = "alnum";
-    group = "netbird";
+    owner = "turnserver";
   };
 
   age.secrets.dataEnc = {
-    generator.script = "alnum";
+    generator.script = {pkgs, ...}: ''
+      ${lib.getExe pkgs.openssl} rand -base64 32
+    '';
     group = "netbird";
   };
 

hosts/elisabeth/fs.nix

@@ -65,6 +65,8 @@
     };
   };
 
+  boot.kernel.sysctl."fs.inotify.max_user_instances" = 1024;
+
   services.zrepl = {
     enable = true;
     settings = {