From c461f04c13f4b18df56bad45990e9a4450e27be3 Mon Sep 17 00:00:00 2001
From: root <root@icefox.sh>
Date: Sat, 25 Jul 2026 09:16:53 -0300
Subject: [PATCH] 2026-07-25

---
 configuration.nix   | 12 ++++++------
 kernel/default.nix  |  1 +
 microvm/sandbox.nix | 13 ++++++++++---
 networking.nix      |  1 +
 4 files changed, 18 insertions(+), 9 deletions(-)

diff --git a/configuration.nix b/configuration.nix
index 1fd0b01..0ea2240 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -9,18 +9,18 @@
   ...
 }:
 {
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+
   sops.defaultSopsFile = ./secrets/home.yaml;
   sops.age.keyFile = "/.persist/root/.config/sops/age/keys.txt";
   sops.secrets."root/ssh/desktop" = {
     path = "/root/.ssh/desktop";
     mode = "0600";
   };
-  nix.settings.experimental-features = [
-    "nix-command"
-    "flakes"
-  ];
-
-  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
 
   boot.initrd.systemd.enable = true;
   boot.loader.systemd-boot.enable = true;
diff --git a/kernel/default.nix b/kernel/default.nix
index 6edd722..61a0777 100644
--- a/kernel/default.nix
+++ b/kernel/default.nix
@@ -56,6 +56,7 @@ in
         keepEnv = true;
         persist = true;
         setEnv = [
+          "HOME=/root"
           "EDITOR"
           "TERM"
         ];
diff --git a/microvm/sandbox.nix b/microvm/sandbox.nix
index 3efba48..fa830af 100644
--- a/microvm/sandbox.nix
+++ b/microvm/sandbox.nix
@@ -26,6 +26,13 @@ in
           homeManagerModule
         ];
 
+        nix.settings.experimental-features = [
+          "nix-command"
+          "flakes"
+        ];
+        nix.nixPath = [ "nixpkgs=${pkgs.path}" ];
+        nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+
         sops.defaultSopsFile = ./secrets/sandbox.yaml;
         sops.age.keyFile = "/.persist/secrets/age-keys.txt";
         sops.secrets."root-password-hash" = {
@@ -187,17 +194,17 @@ in
             {
               mountPoint = "/var";
               image = "var.img";
-              size = 256;
+              size = 2 * 1024;
             }
             {
               mountPoint = "/nix/.rw-store";
               image = "nix-store-overlay.img";
-              size = 512;
+              size = 2 * 1024;
             }
             {
               mountPoint = "/.persist";
               image = "persist.img";
-              size = 1;
+              size = 2 * 1024;
             }
           ];
           shares = [
diff --git a/networking.nix b/networking.nix
index 410dbae..9e24f21 100644
--- a/networking.nix
+++ b/networking.nix
@@ -19,6 +19,7 @@
   services.tailscale-netns = {
     enable = true;
     instances.work = {
+      extraDaemonFlags = [ "--accept-routes=false" ];
     };
   };