odin: Tweak kernel settings for caddy, open port

machines/odin/configuration.nix

@@ -62,6 +62,11 @@
     # kernelParams = [ "intel_iommu=on" "i915.enable_gvt=1" "cpufreq.default_governor=ondemand" ];
 
     extraModulePackages = with config.boot.kernelPackages; [ gasket ];
+
+    kernel.sysctl = {
+      "net.core.rmem_max" = 2500000;
+      "net.core.wmem_max" = 2500000;
+    };
   };
 
   hardware.enableAllFirmware = true;

machines/odin/network.nix

@@ -5,6 +5,10 @@
     networkmanager.enable = false;
     useNetworkd = true;
     nftables.enable = true;
+
+    firewall = {
+      allowedTCPPorts = [ 8443 ];
+    };
   };
 
   systemd = {