machines/sirius: reduce write on disk

machines/sirius/configuration.nix

@@ -26,12 +26,6 @@
 
   system.stateVersion = "25.11";
 
-  services.journald.extraConfig = ''
-    Storage=volatile
-    RuntimeMaxUse=30M
-    RuntimeMaxFileSize=10M
-  '';
-
   services.udisks2.enable = false;
 
   nix.settings.log-lines = 25;
@@ -54,6 +48,25 @@
     "sd_mod"
   ];
 
+  boot = {
+    consoleLogLevel = 0;
+    kernel.sysctl = {
+      "fs.suid_dumpable" = 0;
+      "kernel.core_pattern" = "/dev/null";
+    };
+    tmp = {
+      useTmpfs = true;
+    };
+  };
+
+  services.journald.extraConfig = ''
+    Storage=none
+  '';
+
+  systemd = {
+    coredump.enable = false;
+  };
+
   fileSystems."/mnt/hdd" = {
     device = "zdata/nas";
     fsType = "zfs";