sonarqube setup

hosts/server/hardware-configuration.nix

@@ -5,6 +5,32 @@ in
 {
   imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
   hardware.cpu.intel.updateMicrocode = lib.mkDefault true;
+  security.pam.loginLimits = [
+    {
+      domain = "*";
+      type = "hard";
+      item = "nofile";
+      value = "131072";
+    }
+    {
+      domain = "*";
+      type = "soft";
+      item = "nofile";
+      value = "131072";
+    }
+    {
+      domain = "*";
+      type = "hard";
+      item = "nproc";
+      value = "8192";
+    }
+    {
+      domain = "*";
+      type = "soft";
+      item = "nproc";
+      value = "8192";
+    }
+  ];
   boot = {
     loader = {
       efi = {
@@ -38,7 +64,11 @@ in
         };
     };
     kernelModules = [ "kvm-intel" ];
-    kernel.sysctl."vm.swappiness" = 80;
+    kernel.sysctl = {
+      "vm.swappiness" = 80;
+      "vm.max_map_count" = 524288;
+      "fs.file-max" = 131072;
+    };
     extraModulePackages = [ ];
     initrd = {
       availableKernelModules = [