Get a lot closer to the server working

hosts/kitty/boot/default.nix

@@ -2,6 +2,7 @@
 {
   boot = {
     kernelPackages = pkgs.linuxPackages_hardened;
+    initrd.systemd.services.root-reset.enable = lib.mkForce false;
     swraid = {
       enable = true;
       mdadmConf = "MAILADDR contact@${config.domains.p2}";

hosts/kitty/default.nix

@@ -1,4 +1,4 @@
-{ ... }:
+{ lib, ... }:
 {
   imports = [
     ./boot
@@ -13,6 +13,8 @@
     hostId = "38ba3f57";
   };
 
+  environment.persistence."/persist".enable = lib.mkForce false;
+
   system = {
     desktop.enable = false;
     server.enable = true;

hosts/kitty/firewall/default.nix

@@ -31,12 +31,12 @@
 
         chain POSTROUTING {
           type nat hook postrouting priority 100; policy accept;
-          oifname "${config.ips.netInt}" masquerade
+          oifname "eno1" masquerade
         }
       '';
     };
   };
 
   # Enable IP forwarding for the server configuration
-  boot.kernel.sysctl."net.ipv4.ip_forward" = lib.mkIf config.system.firewall.server.enable 1;
+  boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
 }