sonarqube setup

hosts/server/configuration.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{ pkgs, config, ... }:
 {
   imports = [
     ./hardware-configuration.nix
@@ -14,6 +14,7 @@
         9999 # stash
         8384 # syncthing
         5201 # vps speed test
+        3452 # sonarqube
         config.my.servers.audiobookshelf.port
         config.my.servers.bazarr.port
         config.my.servers.collabora.port
@@ -82,7 +83,9 @@
   users = {
     groups.nixremote.gid = 555;
     users = {
-      # jawz.packages = [ pkgs.stash ];
+      jawz.packages = builtins.attrValues {
+        inherit (pkgs) stash podman-compose;
+      };
       nixremote = {
         isNormalUser = true;
         createHome = true;

hosts/server/hardware-configuration.nix

@@ -5,6 +5,32 @@ in
 {
   imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
   hardware.cpu.intel.updateMicrocode = lib.mkDefault true;
+  security.pam.loginLimits = [
+    {
+      domain = "*";
+      type = "hard";
+      item = "nofile";
+      value = "131072";
+    }
+    {
+      domain = "*";
+      type = "soft";
+      item = "nofile";
+      value = "131072";
+    }
+    {
+      domain = "*";
+      type = "hard";
+      item = "nproc";
+      value = "8192";
+    }
+    {
+      domain = "*";
+      type = "soft";
+      item = "nproc";
+      value = "8192";
+    }
+  ];
   boot = {
     loader = {
       efi = {
@@ -38,7 +64,11 @@ in
         };
     };
     kernelModules = [ "kvm-intel" ];
-    kernel.sysctl."vm.swappiness" = 80;
+    kernel.sysctl = {
+      "vm.swappiness" = 80;
+      "vm.max_map_count" = 524288;
+      "fs.file-max" = 131072;
+    };
     extraModulePackages = [ ];
     initrd = {
       availableKernelModules = [