infra/nixos/modules/system/limits.nix

{...}: {
  boot.kernel.sysctl."net.core.rmem_max" = 2500000;
  boot.kernel.sysctl."fs.inotify.max_user_instances" = 1024;

  security.pam.loginLimits = [
    {
      domain = "*";
      type = "soft";
      item = "nofile";
      value = "655360";
    }
  ];
}