cleanup talos

2026-10-06 15:48:50 +02:00
parent d78e570b44
commit 3769647b77
11 changed files with 140 additions and 348 deletions
@@ -1,6 +0,0 @@
-# Lets non-root processes bind ports >= 22, so sish (hostNetwork, uid 65534,
-# no capabilities) can listen on :22 (Gitea SSH), :80 and :443.
-# The edge runs nothing else that could grab 22-79.
-machine:
-  sysctls:
-    net.ipv4.ip_unprivileged_port_start: "22"