add(tmp): make /tmp an actual tmpfs

systems/x86_64-linux/blarm/default.nix

@@ -56,16 +56,17 @@ with lib.${namespace};
       cinny = enabled;
       ente-auth = enabled;
       restic = enabled;
-      linkwarden = {
-        enable = true;
-        secretsFile = "/run/secrets/linkwarden";
-      };
+      linkwarden = enabled;
       forgejo = enabled;
     };
 
     #container.invidious = enabled;
 
-    system.sops = enabled;
+    system = {
+      sops = enabled;
+      tmpfs = enabled;
+    };
+
     cli.neovim = enabled;
   };
 

systems/x86_64-linux/bodenheizung/default.nix

@@ -71,6 +71,7 @@ with lib.${namespace};
     };
 
     system = {
+      tmpfs = enabled;
       fonts = {
         enable = true;
         emoji = true;

systems/x86_64-linux/dns/default.nix

@@ -39,8 +39,14 @@ with lib.${namespace};
       eza = enabled;
       nh = enabled;
     };
+
+    system.tmpfs = true;
   };
 
+  environment.systemPackages = with pkgs; [
+    git
+  ];
+
   # Set your time zone
   time.timeZone = "Europe/Berlin";