... and set MemoryDenyWriteExecute = true.
* set up global secrets (sops) * import common network (lan/tailscale) settings in pertinent places * use common coredns module for both nixpi and loki