add(tmp): make /tmp an actual tmpfs

modules/nixos/system/tmp/default.nix

@@ -0,0 +1,25 @@
+{
+  config,
+  lib,
+  namespace,
+  ...
+}:
+with lib;
+with lib.${namespace};
+let
+  cfg = config.${namespace}.system.tmpfs;
+in
+{
+  options.${namespace}.system.tmpfs = with types; {
+    enable = mkBoolOpt false "Whether or not to use tmpfs for /tmp.";
+  };
+
+  config = mkIf cfg.enable {
+    boot.tmp = {
+      cleanOnBoot = true;
+      tmpfsSize = "50%";
+      useTmpfs = true;
+    };
+  };
+
+}

systems/x86_64-linux/blarm/default.nix

@@ -56,16 +56,17 @@ with lib.${namespace};
       cinny = enabled;
       ente-auth = enabled;
       restic = enabled;
-      linkwarden = {
-        enable = true;
-        secretsFile = "/run/secrets/linkwarden";
-      };
+      linkwarden = enabled;
       forgejo = enabled;
     };
 
     #container.invidious = enabled;
 
-    system.sops = enabled;
+    system = {
+      sops = enabled;
+      tmpfs = enabled;
+    };
+
     cli.neovim = enabled;
   };
 

systems/x86_64-linux/bodenheizung/default.nix

@@ -71,6 +71,7 @@ with lib.${namespace};
     };
 
     system = {
+      tmpfs = enabled;
       fonts = {
         enable = true;
         emoji = true;

systems/x86_64-linux/dns/default.nix

@@ -39,8 +39,14 @@ with lib.${namespace};
       eza = enabled;
       nh = enabled;
     };
+
+    system.tmpfs = true;
   };
 
+  environment.systemPackages = with pkgs; [
+    git
+  ];
+
   # Set your time zone
   time.timeZone = "Europe/Berlin";