works maybe

hosts/server/configuration.nix

@@ -8,11 +8,13 @@
 {
   imports = [
     ./modules/atproto-pds.nix
+    ./modules/wafrn.nix
     ./modules/cloudflare.nix
     ./modules/tangled.nix
     ../../modules/force.nix
     ./modules/gitea.nix
     ./modules/vaultwarden.nix
+    # ./slop/openclaw.nix
   ];
 
   # gcc. shit breaks. wtf
@@ -57,6 +59,7 @@
     hyfetch
     pm2
     steam-run
+    opencode
   ];
 
   users.users.ocbwoy3 = {
@@ -70,7 +73,22 @@
     shell = pkgs.zsh;
   };
 
-  virtualisation.docker.enable = true;
+  virtualisation.docker = {
+    enable = true;
+    daemon.settings = {
+      "log-driver" = "local";
+      "log-opts" = {
+        "max-size" = "10m";
+        "max-file" = "3";
+      };
+      "live-restore" = true;
+    };
+  };
+
+  systemd.services.docker.serviceConfig = {
+    CPUQuota = "200%";
+    MemoryMax = "12G";
+  };
 
   services.mongodb = {
     enable = true;